diff options
| author | Florian Obser <florian@cvs.openbsd.org> | 2019-05-10 14:10:39 +0000 |
|---|---|---|
| committer | Florian Obser <florian@cvs.openbsd.org> | 2019-05-10 14:10:39 +0000 |
| commit | 3c461c0857c11535382c040fd2bc5173f09404c6 (patch) | |
| tree | c8cfc9fbaba5ce5fc048d793724632a408332608 /sbin/unwind/parse.y | |
| parent | a6c9816c11f9eead3fb68b906c86e7bc3c6bef9a (diff) | |
Implement DNS block lists. If unwind is queried for a domain
in the block list it answers with rcode REFUSED.
Diffstat (limited to 'sbin/unwind/parse.y')
| -rw-r--r-- | sbin/unwind/parse.y | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/sbin/unwind/parse.y b/sbin/unwind/parse.y index c7baa5d725e..6518975e47a 100644 --- a/sbin/unwind/parse.y +++ b/sbin/unwind/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.4 2019/04/03 03:48:45 florian Exp $ */ +/* $OpenBSD: parse.y,v 1.5 2019/05/10 14:10:38 florian Exp $ */ /* * Copyright (c) 2018 Florian Obser <florian@openbsd.org> @@ -102,6 +102,7 @@ typedef struct { %token STRICT YES NO INCLUDE ERROR %token FORWARDER DOT PORT CAPTIVE PORTAL URL EXPECTED RESPONSE %token STATUS AUTO AUTHENTICATION NAME PREFERENCE RECURSOR DHCP +%token BLOCK LIST %token <v.string> STRING %token <v.number> NUMBER @@ -118,6 +119,7 @@ grammar : /* empty */ | grammar uw_pref '\n' | grammar uw_forwarder '\n' | grammar captive_portal '\n' + | grammar block_list '\n' | grammar error '\n' { file->errors++; } ; @@ -180,6 +182,21 @@ optnl : '\n' optnl /* zero or more newlines */ | /*empty*/ ; +block_list : BLOCK LIST STRING { + if (conf->blocklist_file != NULL) { + yyerror("block list already " + "configured"); + free($3); + YYERROR; + } else { + conf->blocklist_file = strdup($3); + if (conf->blocklist_file == NULL) + err(1, "strdup"); + free($3); + } + } + ; + captive_portal : CAPTIVE PORTAL captive_portal_block ; captive_portal_block : '{' optnl captive_portal_opts_l '}' @@ -518,12 +535,14 @@ lookup(char *s) {"DoT", DOT}, {"authentication", AUTHENTICATION}, {"auto", AUTO}, + {"block", BLOCK}, {"captive", CAPTIVE}, {"dhcp", DHCP}, {"dot", DOT}, {"expected", EXPECTED}, {"forwarder", FORWARDER}, {"include", INCLUDE}, + {"list", LIST}, {"name", NAME}, {"no", NO}, {"port", PORT}, |