From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Thu, 30 Jan 2020 12:07:01 +0000 (+0100)
Subject: ids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers
X-Git-Tag: v2.25-core141~9
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=99cadb743af795134733ce2e229e53c3c0e7359b;p=ipfire-2.x.git

ids-functions.pl: Fall back to $EXTERNAL_NET for DNS servers

When no DNS servers are configured (aka recursor mode), the
DNS servers that unbound will try to contact can be anywhere.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl
index 186c39ac78..af8a927e0b 100644
--- a/config/cfgroot/ids-functions.pl
+++ b/config/cfgroot/ids-functions.pl
@@ -718,10 +718,7 @@ sub generate_dns_servers_file() {
 	if (@nameservers) {
 		$line = join(",", @nameservers);
 	} else {
-		# The responsible DNS servers on red are directly used, and because we are not able
-		# to specify each single DNS server address here, we currently have to thread each
-		# address which is not part of the HOME_NET as possible DNS server.
-		$line = "!\$HOME_NET";
+		$line = "\$EXTERNAL_NET";
 	}
 
 	# Open file to store the used DNS server addresses.