opnsense / plugins

OPNsense plugin collection
https://opnsense.org/
BSD 2-Clause "Simplified" License
842 stars 635 forks source link

Opnsense - Bind Plugin - Configuration settings - Unable to disable query logs. #4310

Open dinupravin opened 1 week ago

dinupravin commented 1 week ago

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.

1) Unable to disable querylogs or any logging through GUI. Further, if this file '/usr/local/etc/namedb/named.conf' was modified directly, it gets overwritten when saved in GUI.

2) Similar case for 'Recursion' settings.

3) Thirdly, no option of adding default responses such as 'any', 'none', etc in ACL is a deal-breaker.

Describe the solution you'd like As said above, the 'named.conf' file is overwritten whenever the Save button is pressed in GUI. If the 'named.conf' file is kept separate to that of the GUI settings file, will give the flexibility of adding the necessary settings to fine-tune the settings as per the individual requirements. This is my humble submission.

Describe alternatives you've considered Nothing i can think of as of now. Sorry.

mimugmail commented 1 week ago

Why do you want to disable logging? Usually the people complain about the lack of logging. If you need to change content of named.conf you can always install just the pkg of bind9 and dont use the plugin which will work fine, too.

dinupravin commented 6 days ago

Why do you want to disable logging? Usually the people complain about the lack of logging. If you need to change content of named.conf you can always install just the pkg of bind9 and dont use the plugin which will work fine, too.

Greetings of the day!

It will be nice to toggle between logging 'On' or 'Off' as a finegrained control, especially through GUI. I have Opnsense installed in SSD and everything in my network goes through BIND, in which if querylogs are not disabled shall shorten the life of SSD.

Nice suggestion to install just the bind9 package as a workaround. I shall try it in the meantime.