opnsense / plugins

OPNsense plugin collection
https://opnsense.org/
BSD 2-Clause "Simplified" License
810 stars 593 forks source link

os-bind: dns64 with ability to set ip ranges to exclude #4031

Open BPplays opened 3 weeks ago

BPplays commented 3 weeks ago

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe. i want to use bind to do dns64 with an option to exclude ip ranges

Describe the solution you'd like i would like the option in /ui/bind/general/index to turn on dns64 and to have the option to disable it for specific ip ranges. this abridged named.conf appears to disable dns64 for specified acls in the version that comes with debian 12:

 acl rfc1918 {
    10.0.0.0/8;
    172.16.0.0/12;
    192.168.0.0/16;
};

options {
    directory "/var/cache/bind";
    forwarders {
        2620:fe::fe;
    };
    forward first;
    dnssec-validation auto;
    listen-on-v6 { any; };
    allow-query { any; };

    dns64 64:ff9b::/96 {
        exclude { rfc1918; };
        clients { any; };
        mapped { !rfc1918; any; };
    };
};