349 lines
9.1 KiB
Bash
349 lines
9.1 KiB
Bash
#!/bin/sh
|
|
##############################################################################
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License version 2 as
|
|
# published by the Free Software Foundation.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# Copyright (C) 2016 Eric Luehrsen
|
|
#
|
|
##############################################################################
|
|
#
|
|
# This crosses over to the dnsmasq UCI file "dhcp" and parses it for fields
|
|
# that will allow Unbound to request local host DNS of dnsmasq. We need to look
|
|
# at the interfaces in "dhcp" and get their subnets. The Unbound conf syntax
|
|
# makes this a little difficult. First in "server:" we need to create private
|
|
# zones for the domain and PTR records. Then we need to create numerous
|
|
# "forward:" clauses to forward those zones to dnsmasq.
|
|
#
|
|
##############################################################################
|
|
|
|
# while useful (sh)ellcheck is pedantic and noisy
|
|
# shellcheck disable=1091,2002,2004,2034,2039,2086,2094,2140,2154,2155
|
|
|
|
DM_D_WAN_FQDN=0
|
|
|
|
DM_LIST_KNOWN_ZONES="invalid"
|
|
DM_LIST_TRN_ZONES=""
|
|
DM_LIST_LOCAL_DATA=""
|
|
DM_LIST_LOCAL_PTR=""
|
|
DM_LIST_FWD_PORTS=""
|
|
DM_LIST_FWD_ZONES=""
|
|
|
|
##############################################################################
|
|
|
|
create_local_zone() {
|
|
local target="$1"
|
|
local partial domain found
|
|
|
|
case $DM_LIST_TRN_ZONES in
|
|
*"${target}"*)
|
|
found=1
|
|
;;
|
|
|
|
*)
|
|
case $target in
|
|
[A-Za-z0-9]*.[A-Za-z0-9]*)
|
|
found=0
|
|
;;
|
|
|
|
*) # no dots
|
|
found=1
|
|
;;
|
|
esac
|
|
esac
|
|
|
|
|
|
if [ $found -eq 0 ] ; then
|
|
# New Zone! Bundle local-zones: by first two name tiers "abcd.tld."
|
|
partial=$( echo "$target" | awk -F. '{ j=NF ; i=j-1; print $i"."$j }' )
|
|
DM_LIST_TRN_ZONES="$DM_LIST_TRN_ZONES $partial"
|
|
DM_LIST_KNOWN_ZONES="$DM_LIST_KNOWN_ZONES $partial"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
create_host_record_from_domain() {
|
|
local cfg="$1"
|
|
local ip name debug_ip
|
|
|
|
# basefiles dhcp "domain" clause which means host A, AAAA, and PRT record
|
|
config_get ip "$cfg" ip
|
|
config_get name "$cfg" name
|
|
|
|
|
|
if [ -n "$name" ] && [ -n "$ip" ] ; then
|
|
create_local_zone "$name"
|
|
|
|
|
|
case $ip in
|
|
fe[89ab][0-9a-f]:*|169.254.*)
|
|
debug_ip="$ip@$name"
|
|
;;
|
|
|
|
[1-9a-f]*:*[0-9a-f])
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $name.@@300@@IN@@AAAA@@$ip"
|
|
DM_LIST_LOCAL_PTR="$DM_LIST_LOCAL_PTR $ip@@300@@$name"
|
|
;;
|
|
|
|
[1-9]*.*[0-9])
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $name.@@300@@IN@@A@@$ip"
|
|
DM_LIST_LOCAL_PTR="$DM_LIST_LOCAL_PTR $ip@@300@@$name"
|
|
;;
|
|
esac
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
create_host_record_from_host() {
|
|
local cfg="$1"
|
|
local dns ip name
|
|
|
|
# basefiles dhcp "host" clause which means host A and PTR records
|
|
config_get dns "$cfg" dns 0
|
|
config_get ip "$cfg" ip
|
|
config_get name "$cfg" name
|
|
|
|
|
|
if [ -n "$name" ] && [ -n "$ip" ] && [ $dns -eq 1 ] ; then
|
|
case $name in
|
|
*.*)
|
|
# domain present, do nothing
|
|
;;
|
|
*)
|
|
name="$name.$UB_TXT_DOMAIN"
|
|
;;
|
|
esac
|
|
|
|
|
|
create_local_zone "$name"
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $name.@@300@@IN@@A@@$ip"
|
|
DM_LIST_LOCAL_PTR="$DM_LIST_LOCAL_PTR $ip@@300@@$name"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
create_mx_record() {
|
|
local cfg="$1"
|
|
local domain relay pref record
|
|
|
|
# Insert a static MX record
|
|
config_get domain "$cfg" domain
|
|
config_get relay "$cfg" relay
|
|
config_get pref "$cfg" pref 10
|
|
|
|
|
|
if [ -n "$domain" ] && [ -n "$relay" ] ; then
|
|
create_local_zone "$domain"
|
|
record="$domain.@@300@@IN@@MX@@$pref@@$relay."
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $record"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
create_srv_record() {
|
|
local cfg="$1"
|
|
local srv target port class weight record
|
|
|
|
# Insert a static SRV record such as SIP server
|
|
config_get srv "$cfg" srv
|
|
config_get target "$cfg" target
|
|
config_get port "$cfg" port
|
|
config_get class "$cfg" class 10
|
|
config_get weight "$cfg" weight 10
|
|
|
|
|
|
if [ -n "$srv" ] && [ -n "$target" ] && [ -n "$port" ] ; then
|
|
create_local_zone "$srv"
|
|
record="$srv.@@300@@IN@@SRV@@$class@@$weight@@$port@@$target."
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $record"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
create_cname_record() {
|
|
local cfg="$1"
|
|
local cname target record
|
|
|
|
# Insert static CNAME record
|
|
config_get cname "$cfg" cname
|
|
config_get target "$cfg" target
|
|
|
|
|
|
if [ -n "$cname" ] && [ -n "$target" ] ; then
|
|
create_local_zone "$cname"
|
|
record="$cname.@@300@@IN@@CNAME@@$target."
|
|
DM_LIST_LOCAL_DATA="$DM_LIST_LOCAL_DATA $record"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
dnsmasq_local_zone() {
|
|
local cfg="$1"
|
|
local fwd_port fwd_domain wan_fqdn
|
|
|
|
# dnsmasq domain and interface assignment settings will control config
|
|
config_get fwd_domain "$cfg" domain
|
|
config_get fwd_port "$cfg" port
|
|
config_get wan_fqdn "$cfg" add_wan_fqdn
|
|
|
|
|
|
if [ -n "$wan_fqdn" ] ; then
|
|
DM_D_WAN_FQDN=$wan_fqdn
|
|
fi
|
|
|
|
|
|
if [ -n "$fwd_domain" ] && [ -n "$fwd_port" ] \
|
|
&& [ ! ${fwd_port:-53} -eq 53 ] ; then
|
|
# dnsmasq localhost listening ports (possible multiple instances)
|
|
DM_LIST_FWD_PORTS="$DM_LIST_FWD_PORTS $fwd_port"
|
|
DM_LIST_FWD_ZONES="$DM_LIST_FWD_ZONES $fwd_domain"
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
dnsmasq_local_arpa() {
|
|
local ifarpa ifsubnet
|
|
|
|
|
|
if [ -n "$UB_LIST_NETW_LAN" ] ; then
|
|
for ifsubnet in $UB_LIST_NETW_LAN ; do
|
|
ifarpa=$( domain_ptr_any "${ifsubnet#*@}" )
|
|
DM_LIST_FWD_ZONES="$DM_LIST_FWD_ZONES $ifarpa"
|
|
done
|
|
fi
|
|
|
|
|
|
if [ -n "$UB_LIST_NETW_WAN" ] && [ $DM_D_WAN_FQDN -gt 0 ] ; then
|
|
for ifsubnet in $UB_LIST_NETW_WAN ; do
|
|
ifarpa=$( domain_ptr_any "${ifsubnet#*@}" )
|
|
DM_LIST_FWD_ZONES="$DM_LIST_FWD_ZONES $ifarpa"
|
|
done
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
dnsmasq_inactive() {
|
|
local record
|
|
|
|
|
|
if [ $UB_D_EXTRA_DNS -gt 0 ] ; then
|
|
# Parasite from the uci.dhcp.domain clauses
|
|
DM_LIST_KNOWN_ZONES="$DM_LIST_KNOWN_ZONES $UB_TXT_DOMAIN"
|
|
config_load dhcp
|
|
config_foreach create_host_record_from_domain domain
|
|
config_foreach create_host_record_from_host host
|
|
|
|
|
|
if [ $UB_D_EXTRA_DNS -gt 1 ] ; then
|
|
config_foreach create_srv_record srvhost
|
|
config_foreach create_mx_record mxhost
|
|
fi
|
|
|
|
|
|
if [ $UB_D_EXTRA_DNS -gt 2 ] ; then
|
|
config_foreach create_cname_record cname
|
|
fi
|
|
|
|
|
|
{
|
|
echo "# $UB_SRVMASQ_CONF generated by UCI"
|
|
if [ -n "$DM_LIST_TRN_ZONES" ] ; then
|
|
for record in $DM_LIST_TRN_ZONES ; do
|
|
echo " local-zone: $record transparent"
|
|
done
|
|
echo
|
|
fi
|
|
if [ -n "$DM_LIST_LOCAL_DATA" ] ; then
|
|
for record in $DM_LIST_LOCAL_DATA ; do
|
|
echo " local-data: \"${record//@@/ }\""
|
|
done
|
|
echo
|
|
fi
|
|
if [ -n "$DM_LIST_LOCAL_PTR" ] ; then
|
|
for record in $DM_LIST_LOCAL_PTR ; do
|
|
echo " local-data-ptr: \"${record//@@/ }\""
|
|
done
|
|
echo
|
|
fi
|
|
} > $UB_SRVMASQ_CONF
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
dnsmasq_active() {
|
|
# Look at dnsmasq settings
|
|
config_load dhcp
|
|
# Zone for DHCP / SLAAC-PING DOMAIN
|
|
config_foreach dnsmasq_local_zone dnsmasq
|
|
# Zone for DHCP / SLAAC-PING ARPA
|
|
dnsmasq_local_arpa
|
|
|
|
|
|
if [ -n "$DM_LIST_FWD_PORTS" ] && [ -n "$DM_LIST_FWD_ZONES" ] ; then
|
|
if [ $UB_B_DNS_ASSIST -lt 1 ] ; then
|
|
{
|
|
# Forward to dnsmasq on same host for DHCP lease hosts
|
|
echo "# $UB_SRVMASQ_CONF generated by UCI"
|
|
echo " do-not-query-localhost: no"
|
|
echo
|
|
} > $UB_SRVMASQ_CONF
|
|
|
|
else
|
|
echo > $UB_SRVMASQ_CONF
|
|
fi
|
|
|
|
echo "# $UB_EXTMASQ_CONF generated by UCI" > $UB_EXTMASQ_CONF
|
|
|
|
|
|
for fwd_domain in $DM_LIST_FWD_ZONES ; do
|
|
{
|
|
# This creates a domain with local privledges
|
|
echo " domain-insecure: $fwd_domain"
|
|
echo " private-domain: $fwd_domain"
|
|
echo " local-zone: $fwd_domain transparent"
|
|
echo
|
|
} >> $UB_SRVMASQ_CONF
|
|
|
|
{
|
|
# This is derived from dnsmasq local domain and dhcp service subnets
|
|
echo "forward-zone:"
|
|
echo " name: $fwd_domain"
|
|
echo " forward-first: no"
|
|
for port in $DM_LIST_FWD_PORTS ; do
|
|
echo " forward-addr: 127.0.0.1@$port"
|
|
done
|
|
echo
|
|
} >> $UB_EXTMASQ_CONF
|
|
done
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|
|
dnsmasq_link() {
|
|
if [ "$UB_D_DHCP_LINK" = "dnsmasq" ] ; then
|
|
dnsmasq_active
|
|
|
|
else
|
|
dnsmasq_inactive
|
|
fi
|
|
}
|
|
|
|
##############################################################################
|
|
|