Bug 12237 - Add a new CGI file to manage DNS servers
Summary: Add a new CGI file to manage DNS servers
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: - Unknown - - Unknown -
Assignee: Stefan Schantl
QA Contact:
URL:
Keywords:
Depends on: 12234 12235 12236
Blocks: DNSNG 12238 12241
  Show dependency treegraph
 
Reported: 2019-11-12 13:20 UTC by Michael Tremer
Modified: 2020-03-07 09:26 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Tremer 2019-11-12 13:20:22 UTC
This new CGI file needs to accommodate for the following things:

* Stores all DNS servers in a CSV file in /var/ipfire/dns/servers
* DNS servers must at least ask for the following options: IP address, enabled/disabled status, remark
* DNS servers can have the following other fields: common name (required for DNS over TLS)

DNS servers should be sorted by IP address. In the file, there needs to be a mark to add the ISP servers so those won't be editable by the user.

The script needs to have a section with checkboxes to enable/disable features:

* Use the ISP's DNS servers
* Choose to force TLS or TCP (probably best to implement as dropdown)
* Safe Search (disabled by default, see #12188)
* QNAME minimisation (standard mode by default, see #11950)

Open questions at this time:

* Do we need a port field for DoT or is it okay to assume that every server is on 853?