upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-05-28 04:34:15 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add RPZ local option (3276)

Browse source
This commit is contained in:
Peter Carlson 2025-06-29 08:16:50 -07:00
parent 00556eaf28
commit 04016fa47c
3 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
dns/bind/src/opnsense/mvc/app/controllers/OPNsense/Bind/forms/dnsbl.xml
View file

@ -19,6 +19,12 @@
<allownew>true</allownew>
<help>List of domains to whitelist. It will add a entry for the domains itself and all sub domains.</help>
</field>
<field>
<id>dnsbl.rpzlocal</id>
<label>Enable Local RPZ Zone</label>
<type>checkbox</type>
<help>This will enable a local RPZ Zone.</help>
</field>
<field>
<id>dnsbl.forcesafegoogle</id>
<label>Enable Google SafeSearch</label>

4
dns/bind/src/opnsense/mvc/app/models/OPNsense/Bind/Dnsbl.xml
View file

@ -40,6 +40,10 @@
<whitelists type="CSVListField">
<Required>N</Required>
</whitelists>
<rpzlocal type="BooleanField">
<Default>0</Default>
<Required>Y</Required>
</rpzlocal>
<forcesafegoogle type="BooleanField">
<Default>0</Default>
<Required>Y</Required>

2
dns/bind/src/opnsense/service/templates/OPNsense/Bind/named.conf
View file

@ -43,7 +43,7 @@ options {
{% endif -%}
{% if helpers.exists('OPNsense.bind.dnsbl.enabled') and OPNsense.bind.dnsbl.enabled == '1' %}
response-policy { {% if helpers.exists('OPNsense.bind.dnsbl.type') and OPNsense.bind.dnsbl.type != '' %}zone "whitelist.localdomain"; zone "blacklist.localdomain";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafegoogle') and OPNsense.bind.dnsbl.forcesafegoogle == '1' %}zone "rpzgoogle";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafeduckduckgo') and OPNsense.bind.dnsbl.forcesafeduckduckgo == '1' %}zone "rpzduckduckgo";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafeyoutube') and OPNsense.bind.dnsbl.forcesafeyoutube == '1' %}zone "rpzyoutube";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcestrictbing') and OPNsense.bind.dnsbl.forcestrictbing == '1' %}zone "rpzbing";{% endif %} };
response-policy { {% if helpers.exists('OPNsense.bind.dnsbl.type') and OPNsense.bind.dnsbl.type != '' %}zone "whitelist.localdomain"; zone "blacklist.localdomain";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafegoogle') and OPNsense.bind.dnsbl.forcesafegoogle == '1' %}zone "rpzgoogle";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafeduckduckgo') and OPNsense.bind.dnsbl.forcesafeduckduckgo == '1' %}zone "rpzduckduckgo";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcesafeyoutube') and OPNsense.bind.dnsbl.forcesafeyoutube == '1' %}zone "rpzyoutube";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.forcestrictbing') and OPNsense.bind.dnsbl.forcestrictbing == '1' %}zone "rpzbing";{% endif %}{% if helpers.exists('OPNsense.bind.dnsbl.rpzlocal') and OPNsense.bind.dnsbl.rpzlocal == '1' %}zone "rpzlocal";{% endif %} };
{% endif %}
{% if helpers.exists('OPNsense.bind.general.recursion') and OPNsense.bind.general.recursion != '' %}