pfSense

<?php

/*

	services_unbound.php

*/

 *	Copyright (c)  2004-2015  Electric Sheep Fencing, LLC. All rights reserved.

 *	Copyright (c)  2014 Warren Baker (warren@pfsense.org)

 *

 *	Redistribution and use in source and binary forms, with or without modification,

 *	are permitted provided that the following conditions are met:

 *

 *	1. Redistributions of source code must retain the above copyright notice,

 *		this list of conditions and the following disclaimer.

 *

 *	2. Redistributions in binary form must reproduce the above copyright

 *		notice, this list of conditions and the following disclaimer in

 *		the documentation and/or other materials provided with the

 *		distribution.

 *

 *	3. All advertising materials mentioning features or use of this software

 *		must display the following acknowledgment:

 *		"This product includes software developed by the pfSense Project

 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).

 *

 *	4. The names "pfSense" and "pfSense Project" must not be used to

 *		 endorse or promote products derived from this software without

 *		 prior written permission. For written permission, please contact

 *		 coreteam@pfsense.org.

 *

 *	5. Products derived from this software may not be called "pfSense"

 *		nor may "pfSense" appear in their names without prior written

 *		permission of the Electric Sheep Fencing, LLC.

 *

 *	6. Redistributions of any form whatsoever must retain the following

 *		acknowledgment:

 *

 *	"This product includes software developed by the pfSense Project

 *	for use in the pfSense software distribution (http://www.pfsense.org/).

 *

 *	THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 *	OF THE POSSIBILITY OF SUCH DAMAGE.

 *

 *	====================================================================

 *

 */

##|+PRIV

##|*MATCH=services_unbound.php*

require_once("guiconfig.inc");

require_once("unbound.inc");

	$a_unboundcfg['hosts'] = array();

	$a_unboundcfg['domainoverrides'] = array();

$pconfig['custom_options'] = base64_decode($a_unboundcfg['custom_options']);

	$pconfig['system_domain_local_zone_type'] = "transparent";

} else {

	$pconfig['system_domain_local_zone_type'] = $a_unboundcfg['system_domain_local_zone_type'];

}

		$retval = services_unbound_configure();

		$savemsg = get_std_save_message($retval);

		if ($retval == 0) {

			clear_subsystem_dirty('unbound');

		system_resolvconf_generate();

		system_dhcpleases_configure();

		unset($input_errors);

			if ($pconfig['port'] == $config['dnsmasq']['port']) {

		if (isset($pconfig['forwarding'])) {

			$founddns = false;

			if (isset($config['system']['dnsallowoverride'])) {

				if (is_array($dns_servers)) {

					foreach ($dns_servers as $dns_server) {

						if (!ip_in_subnet($dns_server, "127.0.0.0/8")) {

						}

					}

				}

			}

			if (is_array($config['system']['dnsserver'])) {

				foreach ($config['system']['dnsserver'] as $dnsserver) {

					if (is_ipaddr($dnsserver)) {

						$founddns = true;

					}

				}

			}

			if ($founddns == false) {

				$input_errors[] = gettext("At least one DNS server must be specified under System>General Setup to enable Forwarding mode.");

			}

		}

			$input_errors[] = gettext("You must specify a valid port number.");

			$display_active_interface = $pconfig['active_interface'];

			$pconfig['active_interface'] = implode(",", $pconfig['active_interface']);

		$pconfig['custom_options'] = base64_encode(str_replace("\r\n", "\n", $pconfig['custom_options']));

		if (is_array($pconfig['outgoing_interface']) && !empty($pconfig['outgoing_interface'])) {

			$display_outgoing_interface = $pconfig['outgoing_interface'];

			$pconfig['outgoing_interface'] = implode(",", $pconfig['outgoing_interface']);

		if (test_unbound_config($pconfig, $test_output)) {

			$input_errors[] = gettext("The generated config file cannot be parsed by unbound. Please correct the following errors:");

			$input_errors = array_merge($input_errors, $test_output);

		}

			$a_unboundcfg['forwarding'] = isset($pconfig['forwarding']);

			$a_unboundcfg['regdhcp'] = isset($pconfig['regdhcp']);

			$a_unboundcfg['regdhcpstatic'] = isset($pconfig['regdhcpstatic']);

			$a_unboundcfg['active_interface'] = $pconfig['active_interface'];

			$a_unboundcfg['outgoing_interface'] = $pconfig['outgoing_interface'];

		}

		$pconfig['active_interface'] = $display_active_interface;

		$pconfig['outgoing_interface'] = $display_outgoing_interface;

		$pconfig['custom_options'] = $display_custom_options;

		if ($a_hosts[$_GET['id']]) {

			unset($a_hosts[$_GET['id']]);

			write_config();

			mark_subsystem_dirty('unbound');

			header("Location: services_unbound.php");

			exit;

		}

	} elseif ($_GET['type'] == 'doverride') {

		if ($a_domainOverrides[$_GET['id']]) {

			unset($a_domainOverrides[$_GET['id']]);

			write_config();

			mark_subsystem_dirty('unbound');

			header("Location: services_unbound.php");

			exit;

		}

	}

	$iflist = array('options' => array(), 'selected' => array());

	foreach ($interface_addresses as $laddr => $ldescr) {

		$iflist['options'][$laddr] = htmlspecialchars($ldescr);

	unset($interface_addresses);

	return($iflist);

}

$tab_array[] = array(gettext("Advanced Settings"), false, "services_unbound_advanced.php");

display_top_tabs($tab_array, true);

$form = new Form();

$section = new Form_Section('General DNS Resolver Options');

$section->addInput(new Form_Checkbox(

	'enable',

	'Enable',

	'Enable DNS resolver',

	$pconfig['enable']

));

$section->addInput(new Form_Input(

	'port',

	'Listen Port',

	['placeholder' => '53']

$section->addInput(new Form_Select(

	'active_interface',

	'Network Interfaces',

	$activeiflist['options'],

	'outgoing_interface',

	'Outgoing Network Interfaces',

	$outiflist['options'],

	'system_domain_local_zone_type',

	'System Domain Local Zone Type',

	$pconfig['system_domain_local_zone_type'],

	'dnssec',

	'DNSSEC',

	'Enable DNSSEC Support',

	$pconfig['dnssec']

));

$section->addInput(new Form_Checkbox(

	'forwarding',

	'DNS Query Forwarding',

	'Enable Forwarding Mode',

	$pconfig['forwarding']

));

$section->addInput(new Form_Checkbox(

	'regdhcp',

	'DHCP Registration',

	'Register DHCP leases in the DNS Resolver',

	$pconfig['regdhcp']

))->setHelp(sprintf('If this option is set, then machines that specify their hostname when requesting a DHCP lease will be registered'.

					' in the DNS Resolver, so that their name can be resolved.'.

					' You should also set the domain in %sSystem: General setup%s to the proper value.','<a href="system.php">','</a>'));

$section->addInput(new Form_Checkbox(

	'regdhcpstatic',

	'Static DHCP',

	'Register DHCP static mappings in the DNS Resolver',

	$pconfig['regdhcpstatic']

))->setHelp(sprintf('If this option is set, then DHCP static mappings will be registered in the DNS Resolver, so that their name can be '.

					'resolved. You should also set the domain in %s'.

					'System: General setup%s to the proper value.','<a href="system.php">','</a>'));

$btnadvdns = new Form_Button(

	'btnadvdns',

$btnadvdns->removeClass('btn-primary')->addClass('btn-default btn-sm');

$section->addInput(new Form_StaticText(

	$btnadvdns . ' ' . 'Show custom options'

	'Custom options',

	$pconfig['custom_options']

))->setHelp('Enter any additional configuration parameters to add to the DNS Resolver configuration here, separated by a newline');

$form->add($section);

print($form);

?>

	function hideGeneral() {

		hideInput('port', hide);

		hideSelect('system_domain_local_zone_type', hide);

		hideCheckbox('dnssec', hide);

		hideCheckbox('forwarding', hide);

		hideCheckbox('regdhcp', hide);

		hideCheckbox('regdhcpstatic', hide);

		hideInput('btnadvdns', hide);

		hideInput('custom_options', false);

	});

	// On initial load

	}

});

//]]>

</script>

<div class="panel panel-default">

					<th><?=gettext("Domain")?></th>

					<th><?=gettext("IP")?></th>

					<th><?=gettext("Description")?></th>

					<th></th>

			<tbody>

<?php

$i = 0;

foreach ($a_hosts as $hostent):

?>

					<td>

					<td>

					<td>

						<?=htmlspecialchars($hostent['descr'])?>

					</td>

					<td>

						<a class="fa fa-trash"	title="<?=gettext('Delete host override')?>" href="services_unbound.php?type=host&amp;act=del&amp;id=<?=$i?>"></a>

<?php

	if ($hostent['aliases']['item'] && is_array($hostent['aliases']['item'])):

		foreach ($hostent['aliases']['item'] as $alias):

?>

					<td>

					<td>

					<td>

					</td>

					<td>

		endforeach;

	endif;

	$i++;

endforeach;

?>

			</tbody>

		</table>

	</div>

</div>

	</a>

<div class="panel panel-default">

					<th><?=gettext("IP")?></th>

					<th><?=gettext("Description")?></th>

					<th></th>

			<tbody>

<?php

$i = 0;

foreach ($a_domainOverrides as $doment):

?>

					<td>

						<?=$doment['ip']?>&nbsp;

					</td>

					<td>

						<?=htmlspecialchars($doment['descr'])?>&nbsp;

					</td>

					<td>

						<a class="fa fa-trash"	title="<?=gettext('Delete domain override')?>" href="services_unbound.php?act=del&amp;type=doverride&amp;id=<?=$i?>"></a>

	$i++;

endforeach;

?>

			</tbody>

		</table>

	</div>

</div>

	</a>

		" address as a DNS server to DHCP clients so they will use".