{ "prefix", &cfg_type_astring, 0 },
{ "origin", &cfg_type_astring, 0 },
{ "allow-synth", &cfg_type_bracketed_aml, 0 },
- { "ttl", &cfg_type_uint32, 0 },
- { "mode", &cfg_type_ustring, 0 }
+ { "ttl", &cfg_type_uint32, 0 }
};
static cfg_clausedef_t *synthrecord_cfgparamsclausesets[] = {
return result;
}
-static isc_result_t
-synthrecord_parseconfigmode(synthrecord_t *inst,
- const cfg_obj_t *synthrecordcfg) {
- isc_result_t result;
- const cfg_obj_t *obj = NULL;
- const char *modestr = NULL;
-
- result = cfg_map_get(synthrecordcfg, "mode", &obj);
- if (result != ISC_R_SUCCESS) {
- isc_log_write(NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_HOOKS,
- ISC_LOG_ERROR,
- "synthrecord: missing mode (forward or reverse)");
- return result;
- }
-
- modestr = obj->value.string.base;
- if (strcasecmp("forward", modestr) == 0) {
- inst->mode = FORWARD;
- } else if (strcasecmp("reverse", modestr) == 0) {
+static void
+synthrecord_setconfigmode(synthrecord_t *inst, const dns_name_t *zname) {
+ if (dns_name_issubdomain(zname, dns_ip6arpa) ||
+ dns_name_issubdomain(zname, dns_inaddrarpa))
+ {
inst->mode = REVERSE;
} else {
- isc_log_write(NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_HOOKS,
- ISC_LOG_ERROR,
- "synthrecord: mode %s is not allowed (forward or "
- "reverse only)",
- modestr);
- result = ISC_R_NOTFOUND;
+ inst->mode = FORWARD;
}
-
- return result;
}
static isc_result_t
static isc_result_t
synthrecord_parseconfig(synthrecord_t *inst, const char *parameters,
const cfg_obj_t *cfg, const char *cfgfile,
- unsigned long cfgline, cfg_aclconfctx_t *aclctx) {
+ unsigned long cfgline, cfg_aclconfctx_t *aclctx,
+ const dns_name_t *zname) {
isc_result_t result;
isc_mem_t *mctx = inst->mctx;
cfg_parser_t *parser = NULL;
CHECK(cfg_parse_buffer(parser, &b, cfgfile, cfgline,
&synthrecord_cfgparams, 0, &synthrecordcfg));
- CHECK(synthrecord_parseconfigmode(inst, synthrecordcfg));
+ synthrecord_setconfigmode(inst, zname);
CHECK(synthrecord_initorigin(inst, synthrecordcfg));
CHECK(synthrecord_initprefix(inst, synthrecordcfg));
CHECK(synthrecord_parseallowsynth(inst, cfg, aclctx, synthrecordcfg));
REQUIRE(hooktable);
REQUIRE(instp && *instp == NULL);
- if (ctx->source != NS_HOOKSOURCE_ZONE) {
- isc_log_write(NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_HOOKS,
- ISC_LOG_INFO,
- "registering 'synthrecord' failed as it was not "
- "configured as a zone plugin");
- return ISC_R_FAILURE;
- }
-
isc_log_write(NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_HOOKS, ISC_LOG_INFO,
"registering 'synthrecord' module from %s:%lu", cfgfile,
cfgline);
isc_mem_attach(mctx, &inst->mctx);
result = ISC_R_SUCCESS;
result = synthrecord_parseconfig(inst, parameters, cfg, cfgfile,
- cfgline, actx);
+ cfgline, actx, ctx->origin);
hook = (ns_hook_t){ .action = synthrecord_entry, .action_data = inst };
ns_hook_add(hooktable, mctx, NS_QUERY_NXDOMAIN_BEGIN, &hook);
isc_result_t
plugin_check(const char *parameters, const void *cfg, const char *cfgfile,
unsigned long cfgline, isc_mem_t *mctx, void *actx,
- const ns_pluginregister_ctx_t *ctx ISC_ATTR_UNUSED) {
+ const ns_pluginregister_ctx_t *ctx) {
isc_result_t result;
- synthrecord_t *inst;
+ synthrecord_t *inst = NULL;
+ const dns_name_t *zname = (ctx == NULL) ? NULL : ctx->origin;
+
+ if (ctx->source != NS_HOOKSOURCE_ZONE || ctx->origin == NULL) {
+ isc_log_write(NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_HOOKS,
+ ISC_LOG_INFO,
+ "'synthrecord' must be configured "
+ "as a zone plugin");
+ return ISC_R_FAILURE;
+ }
inst = isc_mem_get(mctx, sizeof(*inst));
*inst = (synthrecord_t){};
isc_mem_attach(mctx, &inst->mctx);
result = synthrecord_parseconfig(inst, parameters, cfg, cfgfile,
- cfgline, actx);
+ cfgline, actx, zname);
plugin_destroy((void **)&inst);
return result;
enabling :iscman:`named` to synthesize forward and reverse responses for
non-existent names in a zone.
-This plugin can only configured inside a ``zone`` clause.
+This plugin can only configured inside a ``zone`` clause. The name
+of the zone affects the mode in which the plugin operates: if
+the zone name ends with "ip6.arpa" or "in-addr.arpa", then the plugin
+operates in "reverse" mode, and for any other zone name, it operates
+in "forward" mode.
-In ``reverse`` mode, the module intercepts queries of type PTR. If no
+In "reverse" mode, the module intercepts queries of type PTR. If no
authoritative answer can be found in the zone database, and if the IP
address encoded in the query name matches one of the prefixes or addresses
specified in ``allow-synth``, then the module dynamically generates a
address encoded in the query reverse name, and the configured ``origin``.
In ``forward`` mode, the module intercepts queries of type A or AAAA.
-If no authoritative answer can be found in the zone, the query
+If no authoritative answer can be found in the zone, and the query
begins and ends with the configured ``prefix`` and ``origin``, and an
IP address can be parsed from the part in between, then that IP address
-is returned to the client.
+will be returned to the client.
-Note: these synthesized responses are not signed, so the use of this
-module is incompatible with DNSSEC.
+Note: Synthesized responses are not signed, so the use of this module
+is incompatible with DNSSEC.
Example
~~~~~~~
type primary;
file "1.168.192.in-addr.arpa.db";
plugin query "synthrecord" {
- mode reverse;
prefix "dynamic-";
origin "example.";
};
type primary;
file "e.f.a.c.ip6.arpa.db";
plugin query "synthrecord" {
- mode reverse;
prefix "dynamic-";
origin "example.";
};
type primary;
file "example.db";
plugin query "synthrecord" {
- mode forward;
prefix "dynamic-";
origin "example.";
allow-synth { 192.168.1/24; cafe::/16; };
The following parameters are mandatory:
-``mode``
- If ``reverse``, the module will synthesize responses when answering PTR
- queries. If ``forward``, it will synthesize responses when answering
- A/AAAA queries.
-
``prefix``
Specifies the prefix of the synthesized name. It must be a single-label
name.
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone example {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 10.53.0.0/16;
+ 192.168.1.0/24;
+ 192.180.0.0/18;
+ cafe:cafe::/32;
+ };
+ ttl 60;
};
- ttl 60;
- mode forward;
};
* information regarding copyright ownership.
*/
-plugin query "../../../plugins/.libs/synthrecordwrong.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 192.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "../../../plugins/.libs/synthrecordwrong.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 192.168.1.0/24;
+ 192.180.0.0/18;
+ };
+ origin example.;
+ ttl 60;
};
- origin example.;
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynam.ic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 192.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynam.ic-";
+ allow-synth {
+ 192.168.1.0/24;
+ 192.180.0.0/18;
+ };
+ origin example.;
+ ttl 60;
};
- origin example.;
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 192.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 192.168.1.0/24;
+ 192.180.0.0/18;
+ };
+ origin example.;
+ ttl -60;
};
- origin example.;
- ttl -60;
- mode reverse;
};
+++ /dev/null
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * SPDX-License-Identifier: MPL-2.0
- *
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * See the COPYRIGHT file distributed with this work for additional
- * information regarding copyright ownership.
- */
-
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- origin example.;
- ttl 60;
-};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 10.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix dynamic-;
+ allow-synth {
+ 10.53.0.0/16;
+ };
+ ttl 60;
};
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 10.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ allow-synth {
+ 10.53.0.0/16;
+ };
+ origin "example.";
+ ttl 60;
};
- origin "example.";
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 10.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix dynamic-;
+ origin _e/x'ample.;
+ ttl 60;
};
- origin _e/x'ample.;
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 192.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix dynamic-;
+ origin "example";
+ ttl 60;
};
- origin "example";
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone example {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix dynamic-;
+ origin { 10.0.0.1/24; };
+ ttl 60;
};
- origin { 10.0.0.1/24; };
- ttl 60;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix { 10.43.4.5/2; };
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone example {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix { 10.43.4.5/2; };
+ origin "example.";
+ ttl 60;
};
- origin "example.";
- ttl 60;
- mode reverse;
};
secret "DAopyf1mhCbFVZw7pgmNPBoLUq8wEUT7UuPoLENP2HY=";
};
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 192.168.1.5;
- key test-tsig.;
+zone example {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 192.168.1.5;
+ key test-tsig.;
+ };
+ origin example.;
+ ttl 50;
};
- origin example.;
- ttl 50;
- mode reverse;
};
+++ /dev/null
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * SPDX-License-Identifier: MPL-2.0
- *
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * See the COPYRIGHT file distributed with this work for additional
- * information regarding copyright ownership.
- */
-
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- origin example.;
- ttl 60;
- mode foobar;
-};
+++ /dev/null
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * SPDX-License-Identifier: MPL-2.0
- *
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * See the COPYRIGHT file distributed with this work for additional
- * information regarding copyright ownership.
- */
-
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- origin example.;
- ttl 60;
- mode 123;
-};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone 10.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 192.168.1.0/24;
+ 192.180.0.0/18;
+ };
+ origin example.;
+ ttl "foobar";
};
- origin example.;
- ttl "foobar";
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- origin "example.";
- ttl 60;
- mode reverse;
+zone 10.in-addr.arpa {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix dynamic-;
+ origin "example.";
+ ttl 60;
+ };
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
+zone example {
+ type primary;
+ file "file";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 10.53.0.0/16;
+ };
+ origin example.;
};
- origin example.;
- mode reverse;
};
* information regarding copyright ownership.
*/
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- origin example.;
- ttl 60;
- mode reverse;
+zone 10.in-addr.arpa {
+ type primary;
+ file "10.in-addr.arpa.db";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 10.53.0.0/16;
+ };
+ origin example.;
+ ttl 60;
+ };
+};
+
+zone e.f.a.c.ip6.arpa {
+ type primary;
+ file "e.f.a.c.in-addr.arpa.db";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ cafe:cafe::/32;
+ };
+ origin example.;
+ ttl 60;
+ };
+};
+
+zone example {
+ type primary;
+ file "example.db";
+ plugin query "@TOP_BUILDDIR@/synthrecord.so" {
+ prefix "dynamic-";
+ allow-synth {
+ 10.53.0.0/16;
+ cafe:cafe::/32;
+ };
+ origin example.;
+ ttl 60;
+ };
};
+++ /dev/null
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * SPDX-License-Identifier: MPL-2.0
- *
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * See the COPYRIGHT file distributed with this work for additional
- * information regarding copyright ownership.
- */
-
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix dynamic-;
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- origin "example.";
- ttl 60;
- mode reverse;
-};
+++ /dev/null
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * SPDX-License-Identifier: MPL-2.0
- *
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * See the COPYRIGHT file distributed with this work for additional
- * information regarding copyright ownership.
- */
-
-plugin query "@TOP_BUILDDIR@/synthrecord.so" {
- prefix "dynamic-";
- allow-synth {
- 10.53.0.0/16;
- 192.168.1.0/24;
- 192.180.0.0/18;
- cafe:cafe::/32;
- };
- ttl 60;
- mode forward;
- origin example.;
-};
};
origin example.;
ttl 3600;
- mode reverse;
};
{% endif %}
};
origin example.;
ttl 3600;
- mode forward;
};
};
};
origin example.;
ttl 3600;
- mode reverse;
};
};
};
origin example.;
ttl 3600;
- mode reverse;
};
};
};
origin example.;
ttl 3600;
- mode reverse;
};
};
plugin query "@TOP_BUILDDIR@/synthrecord" {
prefix "dynamicdefaults-";
origin example.;
- mode reverse;
};
};
};
origin example.;
ttl 3600;
- mode reverse;
};
};
};
origin example.;
ttl 3600;
- mode reverse;
};
};
try:
ns1.rndc("reconfig")
except isctest.rndc.RNDCException:
- watcher.wait_for_line(
- "registering 'synthrecord' failed as it was not configured as a zone plugin"
- )
+ watcher.wait_for_line("'synthrecord' must be configured as a zone plugin")
projects / thirdparty / bind9.git / commitdiff
