mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Link local interfaces don't have subnet.. don't create access-control statement

Browse Source 
Selecting link local interface for unbound causes invalid access-control
statement in unbound config since link local address doesn't have
subnet.
This commit is contained in:
Jean Cyr 2014-12-03 22:23:34 -05:00
parent e78509cc09
commit f302a333af
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
etc/inc/unbound.inc
View File

@ -622,11 +622,13 @@ function unbound_acls_config() {
}
$ifip = get_interface_ipv6($ubif);
if (is_ipaddrv6($ifip)) {
$subnet_bits = get_interface_subnetv6($ubif);
$subnet_ip = gen_subnetv6($ifip, $subnet_bits);
// only add LAN-type interfaces
if (!interface_has_gateway($ubif))
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
if (!is_linklocal($ifip)) {
$subnet_bits = get_interface_subnetv6($ubif);
$subnet_ip = gen_subnetv6($ifip, $subnet_bits);
// only add LAN-type interfaces
if (!interface_has_gateway($ubif))
$aclcfg .= "access-control: {$subnet_ip}/{$subnet_bits} allow\n";
}
// add for IPv6 static routes to local networks
// for safety, we include only routes reachable on an interface with no
// gateway specified - read: not an Internet connection.