From deeff86ce0e07382dba5fe5703ad09895a9615c8 Mon Sep 17 00:00:00 2001 From: chariri Date: Sun, 16 Aug 2026 05:51:03 +0900 Subject: dns: T8045: expose PowerDNS dont-query list as recursion-exclude-address The `+=` append syntax is used for appending. To remove from the defaults, users can use negation. --- data/templates/dns-forwarding/recursor.conf.j2 | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'data') diff --git a/data/templates/dns-forwarding/recursor.conf.j2 b/data/templates/dns-forwarding/recursor.conf.j2 index b089d8b4d..414552c95 100644 --- a/data/templates/dns-forwarding/recursor.conf.j2 +++ b/data/templates/dns-forwarding/recursor.conf.j2 @@ -49,6 +49,11 @@ dnssec={{ dnssec }} dns64-prefix={{ dns64_prefix }} {% endif %} +{% if recursion_exclude_address is vyos_defined %} +# dont-query +dont-query+={{ recursion_exclude_address | join(',') }} +{% endif %} + {% if exclude_throttle_address is vyos_defined %} # dont-throttle-netmasks dont-throttle-netmasks={{ exclude_throttle_address | join(',') }} @@ -79,4 +84,3 @@ ecs-ipv4-bits={{ options.ecs_ipv4_bits }} {% if options.edns_subnet_allow_list is vyos_defined %} edns-subnet-allow-list={{ options.edns_subnet_allow_list | join(',') }} {% endif %} - -- cgit v1.2.3