Changeset 13696 in hybrid for branches/releng-11/nanobsd

Timestamp:

Jan 14, 2017, 12:31:50 AM (8 years ago)

Author:

rick

Message:

Implement named replacement for FreeBSD 11.

Unbound via ports, configured to listen to only specific interfaces.
For security purposes do not listen to outside world.

Depending on it's location, making sure the forwarders are internal
or external.

Note: Dropping support for autoritive nameserver, this feature is not
required anymore since our network is running stable now.

Location:

branches/releng-11/nanobsd/files

Files:

• tools/wl-config (modified) (2 diffs)
• usr/local/etc/unbound (added)
• usr/local/etc/unbound/unbound.conf (added)

branches/releng-11/nanobsd/files/tools/wl-config

@@ -37 +37 @@
 # Determine it's statup and running location and some other hints
 # Skip named.conf as it not planned in current release
-FILES="authorized_keys dhcpd.conf dnsmasq.conf motd rc.conf.local resolv.conf pf.hybrid.conf.local wleiden.yaml"
+FILES="authorized_keys dhcpd.conf dnsmasq.conf motd rc.conf.local resolv.conf pf.hybrid.conf.local unbound.wleiden.conf wleiden.yaml"
 file_details() {
   POST_CMD=""
@@ -81 +81 @@
      RUNNING_LOC="/etc/${FILE}"
      POST_CMD="service pf reload"
+   'unbound.wleiden.conf')
+     STARTUP_LOC="/cfg/local/${FILE}"
+     RUNNING_LOC="/usr/local/etc/${FILE}"
+     POST_CMD="service unbound reload"
    ;;
    'wleiden.yaml')