From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Thu, 9 Jan 2020 15:36:39 +0000 (+0100)
Subject: dns.cgi: Restart suricata if neccessary.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8fbb12f168f770835cd3637996ca6fac974f1c0e;p=people%2Fstevee%2Fipfire-2.x.git

dns.cgi: Restart suricata if neccessary.

When the DNS configuration of the system is changed,
we need to re-generate the file which contains the DNS Server
details for suricata and to restart the service.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---

diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi
index 450d5c4840..cb6f16f67a 100755
--- a/html/cgi-bin/dns.cgi
+++ b/html/cgi-bin/dns.cgi
@@ -28,6 +28,7 @@ use IO::Socket;
 
 require '/var/ipfire/general-functions.pl';
 require "${General::swroot}/geoip-functions.pl";
+require "${General::swroot}/ids-functions.pl";
 require "${General::swroot}/lang.pl";
 require "${General::swroot}/header.pl";
 
@@ -801,6 +802,16 @@ END
 sub _handle_unbound_and_more () {
 	# Restart unbound
 	system('/usr/local/bin/unboundctrl restart >/dev/null');
+
+	# Check if the IDS is running.
+	if(&IDS::ids_is_running()) {
+		# Re-generate the file which contains the DNS Server
+		# details.
+		&IDS::generate_dns_servers_file();
+
+		# Call suricatactrl to perform a reload.
+		&IDS::call_suricatactrl("restart");
+	}
 }
 
 # Check if the system is online (RED is connected).