CalvinBackup/ctrld
1
0 Fork 0
mirror of https://github.com/Control-D-Inc/ctrld.git synced 2026-10-12 01:58:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

internal/router: disable DNSSEC on ddwrt/merlin

Browse Source
This commit is contained in:
Cuong Manh Le authored and Cuong Manh Le committed 2023-05-16 00:16:17 +07:00
1 parent 57fa68970a
commit d9dfc584e7
2 files changed
+12 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

internal/router/dnsmasq.go
+3 -1
View File
@@ -29,8 +29,10 @@ if [ -n "$pid" ] && [ -f "/proc/${pid}/cmdline" ]; then
pc_append "no-resolv" "$config_file" # do not read /etc/resolv.conf pc_append "no-resolv" "$config_file" # do not read /etc/resolv.conf
pc_append "server=127.0.0.1#5354" "$config_file" # use ctrld as upstream pc_append "server=127.0.0.1#5354" "$config_file" # use ctrld as upstream
{{- if .SendClientInfo}} {{- if .SendClientInfo}}
pc_append "add-mac" "$config_file" # add client mac pc_append "add-mac" "$config_file" # add client mac
{{- end}} {{- end}}
pc_delete "dnssec" "$config_file" # disable DNSSEC
pc_delete "trust-anchor=" "$config_file" # disable DNSSEC
# For John fork # For John fork
pc_delete "resolv-file" "$config_file" # no WAN DNS settings pc_delete "resolv-file" "$config_file" # no WAN DNS settings
internal/router/nvram.go
+9
View File
@@ -18,6 +18,14 @@ func nvram(args ...string) (string, error) {
return strings.TrimSpace(stdout.String()), nil return strings.TrimSpace(stdout.String()), nil
} }
/*
NOTE:
- For Openwrt, DNSSEC is not included in default dnsmasq (require dnsmasq-full).
- For Merlin, DNSSEC is configured during postconf script (see merlinDNSMasqPostConfTmpl).
- For Ubios UDM Pro/Dream Machine, DNSSEC is not included in their dnsmasq package:
+https://community.ui.com/questions/Implement-DNSSEC-into-UniFi/951c72b0-4d88-4c86-9174-45417bd2f9ca
+https://community.ui.com/questions/Enable-DNSSEC-for-Unifi-Dream-Machine-FW-updates/e68e367c-d09b-4459-9444-18908f7c1ea1
*/
func nvramKV() map[string]string { func nvramKV() map[string]string {
switch Name() { switch Name() {
case DDWrt: case DDWrt:
@@ -25,6 +33,7 @@ func nvramKV() map[string]string {
"dns_dnsmasq": "1", // Make dnsmasq running but disable DNS ability, ctrld will replace it. "dns_dnsmasq": "1", // Make dnsmasq running but disable DNS ability, ctrld will replace it.
"dnsmasq_options": "", // Configuration of dnsmasq set by ctrld, filled by setupDDWrt. "dnsmasq_options": "", // Configuration of dnsmasq set by ctrld, filled by setupDDWrt.
"dns_crypt": "0", // Disable DNSCrypt. "dns_crypt": "0", // Disable DNSCrypt.
"dnssec": "0", // Disable DNSSEC.
} }
case Merlin: case Merlin:
return map[string]string{ return map[string]string{