firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support multiple networks for access to local resolver.

Browse Source
This commit is contained in:
Christoph 2019-09-03 03:49:24 +02:00
parent 1b35830610
commit 328219c4b6
3 changed files with 31 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
conf/main_ipv4.conf.sample
View File

@ -225,19 +225,22 @@ dns_server_ips=""
forward_dns_server_ips="" forward_dns_server_ips=""
# local Resolver # - local DNS Resolver
# # -
local_resolver_service=false local_resolver_service=false
# Resolover Port used by local service # - Resolover Port used by local service
# # -
resolver_port="$standard_dns_port" resolver_port="$standard_dns_port"
# Network allowed for DNS requests # - Network allowed for DNS requests
# # -
# Note: if not set no port will be open! # - Note: if not set no port will be open!
# # -
resolver_allowed_net="" # - Example:
# - resolver_allowed_networks="192.68.11.64/27 194.150.169.139"
# -
resolver_allowed_networks=""
# - SSH Server # - SSH Server

22
conf/main_ipv6.conf.sample
View File

@ -241,22 +241,22 @@ dns_server_ips=""
forward_dns_server_ips="" forward_dns_server_ips=""
# local DNS Resolver # - local DNS Resolver
# # -
local_resolver_service=false local_resolver_service=false
# Resolover Port used by local service # Resolover Port used by local service
# # -
resolver_port="$standard_dns_port" resolver_port="$standard_dns_port"
# Network allowed for DNS requests # - Network allowed for DNS requests
# # -
# Note: if not set no port will be open! # - Note: if not set no port will be open!
# # -
# Example: # - Example:
# resolver_allowed_net="2001:678:a40:3000::/64" # - resolver_allowed_net="2001:678:a40:3000::/64 2001:678:a40:4000::/64"
# # -
resolver_allowed_net="" resolver_allowed_networks=""
# - SSH Server # - SSH Server

8
conf/post_decalrations.conf
View File

@ -144,6 +144,14 @@ for _ip in $forward_dns_server_ips ; do
forward_dns_server_ip_arr+=("$_ip") forward_dns_server_ip_arr+=("$_ip")
done done
# ---
# - Netwoks allowed access to local DNS Resolver
# ---
declare -a resolver_allowed_network_arr
for _net in $resolver_allowed_networks ; do
resolver_allowed_network_arr+=("$_net")
done
# --- # ---
# - IP Addresses VPN Server # - IP Addresses VPN Server
# --- # ---