diff options
| author | chariri <w@chariri.moe> | 2026-08-16 05:51:03 +0900 |
|---|---|---|
| committer | chariri <w@chariri.moe> | 2026-08-26 03:11:48 +0900 |
| commit | deeff86ce0e07382dba5fe5703ad09895a9615c8 (patch) | |
| tree | 41438c734d9f39170985e53c9024dd0cc6d26eab /data | |
| parent | 745a4afd9bab8a99fdfdb38febe7bf39ac8e5a25 (diff) | |
| download | vyos-1x-deeff86ce0e07382dba5fe5703ad09895a9615c8.tar.gz vyos-1x-deeff86ce0e07382dba5fe5703ad09895a9615c8.zip | |
dns: T8045: expose PowerDNS dont-query list as recursion-exclude-address
The `+=` append syntax is used for appending.
To remove from the defaults, users can use negation.
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/dns-forwarding/recursor.conf.j2 | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/data/templates/dns-forwarding/recursor.conf.j2 b/data/templates/dns-forwarding/recursor.conf.j2 index b089d8b4d..414552c95 100644 --- a/data/templates/dns-forwarding/recursor.conf.j2 +++ b/data/templates/dns-forwarding/recursor.conf.j2 @@ -49,6 +49,11 @@ dnssec={{ dnssec }} dns64-prefix={{ dns64_prefix }} {% endif %} +{% if recursion_exclude_address is vyos_defined %} +# dont-query +dont-query+={{ recursion_exclude_address | join(',') }} +{% endif %} + {% if exclude_throttle_address is vyos_defined %} # dont-throttle-netmasks dont-throttle-netmasks={{ exclude_throttle_address | join(',') }} @@ -79,4 +84,3 @@ ecs-ipv4-bits={{ options.ecs_ipv4_bits }} {% if options.edns_subnet_allow_list is vyos_defined %} edns-subnet-allow-list={{ options.edns_subnet_allow_list | join(',') }} {% endif %} - |