mirror of
https://github.com/webmin/webmin.git
synced 2026-09-22 21:40:39 +01:00
ee420bef24
RFC 9989 (DMARCbis) removes the pct tag, but the DMARC form validated the percentage as mandatory and always assigned it, so every record written through Webmin contained pct=. Treat the field like the sp field directly below it: when it is empty, delete the tag. Values 0-100 are still accepted and validated for anyone who deliberately uses pct during a rollout. join_dmarc() already skips tags with an empty value, so no change was needed there. Fixes #2843 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
742 lines
23 KiB
Perl
Executable File
742 lines
23 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# save_record.cgi
|
|
# Adds or updates a record of some type
|
|
use strict;
|
|
use warnings;
|
|
no warnings 'redefine';
|
|
no warnings 'uninitialized';
|
|
our (%access, %text, %in, %config);
|
|
|
|
require './bind8-lib.pl'; ## no critic
|
|
our $ipv6revzone;
|
|
&ReadParse();
|
|
&error_setup($text{'edit_err'});
|
|
my $zone = &get_zone_name_or_error($in{'zone'}, $in{'view'});
|
|
my $dom = $zone->{'name'};
|
|
my @zl = &list_zone_names();
|
|
my $reverse = ($in{'origin'} =~ /\.in-addr\.arpa/i ||
|
|
$in{'origin'} =~ /\.$ipv6revzone/i);
|
|
&can_edit_zone($zone) || &error($text{'recs_ecannot'});
|
|
&can_edit_type($in{'type'}) ||
|
|
&error($text{'recs_ecannottype'});
|
|
$access{'ro'} && &error($text{'master_ero'});
|
|
&lock_file(&make_chroot(&absolute_path($zone->{'file'})));
|
|
|
|
# Read the existing records
|
|
&before_editing($zone);
|
|
my @recs;
|
|
if ($config{'largezones'} && !defined($in{'num'})) {
|
|
# Adding to a large zone, so only read the SOA
|
|
@recs = &read_zone_file($in{'file'}, $in{'origin'}, undef, 1);
|
|
}
|
|
else {
|
|
# Read all records
|
|
@recs = &read_zone_file($in{'file'}, $in{'origin'});
|
|
}
|
|
|
|
# get the old record if needed
|
|
my $r;
|
|
if (defined($in{'num'})) {
|
|
$r = &find_record_by_id(\@recs, $in{'id'}, $in{'num'});
|
|
$r || &error($text{'edit_egone'});
|
|
}
|
|
|
|
# check for deletion
|
|
my ($fulloldvalue0, $fulloldname);
|
|
if ($in{'delete'}) {
|
|
# Check if confirmation is needed
|
|
if (!$in{'confirm'} && $config{'confirm_rec'}) {
|
|
&ui_print_header(undef, $text{'edit_dtitle'}, "");
|
|
|
|
print &ui_confirmation_form("save_record.cgi",
|
|
&text('edit_rusure', "<tt>$r->{'name'}</tt>",
|
|
"<tt>$in{'origin'}</tt>"),
|
|
[ map { [ $_, $in{$_} ] } (keys %in) ],
|
|
[ [ 'confirm', $text{'edit_dok'} ] ],
|
|
);
|
|
|
|
&ui_print_footer("edit_recs.cgi?zone=$in{'zone'}&view=$in{'view'}&type=$in{'redirtype'}&sort=$in{'sort'}", $text{'recs_return'});
|
|
}
|
|
else {
|
|
# Delete the record
|
|
&lock_file(&make_chroot($r->{'file'}));
|
|
&delete_record($r->{'file'}, $r);
|
|
&bump_soa_record($in{'file'}, \@recs);
|
|
&sign_dnssec_zone_if_key($zone, \@recs);
|
|
|
|
# Update reverse
|
|
$fulloldvalue0 = &convert_to_absolute(
|
|
$in{'oldvalue0'}, $in{'origin'});
|
|
$fulloldname = &convert_to_absolute(
|
|
$in{'oldname'}, $in{'origin'});
|
|
my ($orevconf, $orevfile, $orevrec) = &find_reverse(
|
|
$in{'oldvalue0'}, $in{'view'});
|
|
if ($in{'rev'} && $orevrec && &can_edit_reverse($orevconf) &&
|
|
$fulloldname eq $orevrec->{'values'}->[0] &&
|
|
($in{'type'} eq "A" ||
|
|
$in{'type'} eq "AAAA" &&
|
|
&expandall_ip6($in{'oldvalue0'}) eq &expandall_ip6(&ip6int_to_net($orevrec->{'name'})))) {
|
|
&before_editing($orevconf);
|
|
&lock_file(&make_chroot($orevrec->{'file'}));
|
|
&delete_record($orevrec->{'file'} , $orevrec);
|
|
&lock_file(&make_chroot($orevfile));
|
|
my @orrecs = &read_zone_file($orevfile, $orevconf->{'name'});
|
|
&bump_soa_record($orevfile, \@orrecs);
|
|
&sign_dnssec_zone_if_key($orevconf, \@orrecs);
|
|
&after_editing($orevconf);
|
|
}
|
|
|
|
# Update forward
|
|
my $ipv6;
|
|
($ipv6 = ($fulloldvalue0 =~ /\.$ipv6revzone/i));
|
|
my ($ofwdconf, $ofwdfile, $ofwdrec) = &find_forward($fulloldvalue0, $ipv6);
|
|
if ($in{'fwd'} && $ofwdrec && &can_edit_zone($ofwdconf) &&
|
|
(!$ipv6 && &arpa_to_ip($in{'oldname'}) eq $ofwdrec->{'values'}->[0] ||
|
|
$ipv6 && &expandall_ip6(&ip6int_to_net($in{'oldname'})) eq &expandall_ip6($ofwdrec->{'values'}->[0])) &&
|
|
$fulloldvalue0 eq $ofwdrec->{'name'}) {
|
|
&before_editing($ofwdconf);
|
|
&lock_file(&make_chroot($ofwdrec->{'file'}));
|
|
&delete_record($ofwdrec->{'file'}, $ofwdrec);
|
|
&lock_file(&make_chroot($ofwdfile));
|
|
my @ofrecs = &read_zone_file($ofwdfile, $ofwdconf->{'name'});
|
|
&bump_soa_record($ofwdfile, \@ofrecs);
|
|
&sign_dnssec_zone_if_key($ofwdconf, \@ofrecs);
|
|
&after_editing($ofwdconf);
|
|
}
|
|
|
|
&redirect("edit_recs.cgi?zone=$in{'zone'}&view=$in{'view'}&type=$in{'redirtype'}&sort=$in{'sort'}");
|
|
&unlock_all_files();
|
|
&webmin_log('delete', 'record', $in{'origin'}, $r);
|
|
}
|
|
exit;
|
|
}
|
|
|
|
# Create values string based on inputs
|
|
my $ttl;
|
|
if (!$in{'ttl_def'}) {
|
|
$in{'ttl'} =~ /^\d+$/ ||
|
|
&error(&text('edit_ettl', $in{'ttl'}));
|
|
$ttl = $in{'ttl'}.$in{'ttlunit'};
|
|
}
|
|
my $vals = $in{'value0'};
|
|
for(my $i=1; defined($in{"value$i"}); $i++) {
|
|
$vals .= " ".$in{"value$i"};
|
|
}
|
|
$vals =~ s/^\s+//;
|
|
$vals =~ s/\s+$//;
|
|
|
|
my ($name, $fullname);
|
|
if ($in{'type'} eq "PTR" && $reverse) {
|
|
# a reverse address
|
|
my $ipv4;
|
|
($ipv4 = $in{'origin'} =~ /in-addr\.arpa/i) ||
|
|
$in{'origin'} =~ /\.$ipv6revzone/i ||
|
|
&error(&text('edit_eip', $in{'name'}));
|
|
if ($ipv4) {
|
|
if ($in{'name'} =~ /^\d+$/) {
|
|
$in{'name'} = &arpa_to_ip($in{'origin'}).".".$in{'name'};
|
|
}
|
|
&check_ipaddress($in{'name'}) ||
|
|
($in{'name'} =~ /^(.*)\.(\d+)$/ && &check_ipaddress("$1")) ||
|
|
($in{'name'} =~ /^(.*)\.(\d+)$/ && $1 eq &arpa_to_ip($in{'origin'})) ||
|
|
&error(&text('edit_eip', $in{'name'}));
|
|
$name = &ip_to_arpa($in{'name'});
|
|
}
|
|
else {
|
|
&check_ip6address($in{'name'}) ||
|
|
&error(&text('edit_eip6', $in{'name'}));
|
|
$name = &net_to_ip6int($in{'name'});
|
|
}
|
|
&valname($in{'value0'}) ||
|
|
&error(&text('edit_ehost', $vals));
|
|
if ($in{'value0'} !~ /\.$/) { $vals .= "."; }
|
|
}
|
|
else {
|
|
# some other kind of record
|
|
$in{'name'} eq "" || $in{'name'} eq "@" || &valnamewild($in{'name'}, $in{'type'}) ||
|
|
&error(&text('edit_ename', $in{'name'}));
|
|
if ($in{'type'} eq "A") {
|
|
&check_ipaddress($vals) ||
|
|
&error(&text('edit_eip', $vals));
|
|
if (!$access{'multiple'}) {
|
|
# Is this address already in use? Search all domains
|
|
# to find out..
|
|
foreach my $z (@zl) {
|
|
next if ($z->{'type'} ne "master" &&
|
|
$z->{'type'} ne "primary");
|
|
next if ($z->{'name'} =~ /in-addr\.arpa/i);
|
|
my $file = $z->{'file'};
|
|
my @frecs = &read_zone_file($file, $z->{'name'});
|
|
foreach my $fr (@frecs) {
|
|
if ($fr->{'type'} eq "A" &&
|
|
$fr->{'values'}->[0] eq $vals &&
|
|
$fr->{'name'} ne $r->{'name'}) {
|
|
&error(&text('edit_edupip',
|
|
$vals));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "AAAA") {
|
|
&check_ip6address($vals) ||
|
|
&error(&text('edit_eip6', $vals));
|
|
if (!$access{'multiple'}) {
|
|
# Is this address already in use? Search all domains
|
|
# to find out..
|
|
foreach my $z (@zl) {
|
|
next if ($z->{'type'} ne "master" &&
|
|
$z->{'type'} ne "primary");
|
|
next if ($z->{'name'} =~ /\.$ipv6revzone/i);
|
|
my $file = $z->{'file'};
|
|
my @frecs = &read_zone_file($file, $z->{'name'});
|
|
foreach my $fr (@frecs) {
|
|
if ($fr->{'type'} eq "AAAA" &&
|
|
&expandall_ip6($fr->{'values'}->[0]) eq &expandall_ip6($vals) &&
|
|
$fr->{'name'} ne $r->{'name'}) {
|
|
&error(&text('edit_edupip',
|
|
$vals));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "NS") {
|
|
&valname($vals) ||
|
|
&error(&text('edit_ens', $vals));
|
|
if ($vals =~ /\.\Q$in{'origin'}\E$/) {
|
|
# Make absolute
|
|
$vals .= ".";
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "CNAME") {
|
|
&valname($vals) || $vals eq '@' ||
|
|
&error(&text('edit_ecname', $vals));
|
|
if ($vals =~ /\.\Q$in{'origin'}\E$/) {
|
|
$vals .= ".";
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "ALIAS") {
|
|
&valname($vals) ||
|
|
&error(&text('edit_ecname', $vals));
|
|
if ($vals =~ /\.\Q$in{'origin'}\E$/) {
|
|
$vals .= ".";
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "MX") {
|
|
&valname($in{'value1'}) ||
|
|
&error(&text('edit_emx', $in{'value1'}));
|
|
$in{'value0'} =~ /^\d+$/ ||
|
|
&error(&text('edit_epri', $in{'value0'}));
|
|
if ($vals =~ /\.\Q$in{'origin'}\E$/) {
|
|
$vals .= ".";
|
|
}
|
|
}
|
|
elsif ($in{'type'} eq "HINFO") {
|
|
$in{'value0'} =~ /\S/ ||
|
|
&error($text{'edit_ehard'});
|
|
$in{'value1'} =~ /\S/ ||
|
|
&error($text{'edit_eos'});
|
|
$in{'value0'} = "\"$in{'value0'}\"" if ($in{'value0'} =~ /\s/);
|
|
$in{'value1'} = "\"$in{'value1'}\"" if ($in{'value1'} =~ /\s/);
|
|
$vals = $in{'value0'}." ".$in{'value1'};
|
|
}
|
|
elsif ($in{'type'} eq "TXT") {
|
|
my $fullvals = $in{'value0'};
|
|
$fullvals =~ s/\r//g;
|
|
$fullvals =~ s/\n/ /g;
|
|
$fullvals =~ s/((?:^|[^\\])(?:\\\\)*)[\"]/$1\\\"/g;
|
|
my @splitvals = ( );
|
|
while($fullvals) {
|
|
push(@splitvals, substr($fullvals, 0, 255));
|
|
$fullvals = substr($fullvals, 255);
|
|
}
|
|
$vals = join(" ", map { "\"$_\"" } @splitvals);
|
|
}
|
|
elsif ($in{'type'} eq "WKS") {
|
|
&check_ipaddress($in{'value0'}) ||
|
|
&error(&text('edit_eip', $in{'value0'}));
|
|
if (!$in{'value2'}) {
|
|
&error($text{'edit_eserv'});
|
|
}
|
|
my @ws = split(/[\r\n]+|\s+/, $in{'value2'});
|
|
$vals = "$in{'value0'} $in{'value1'} (";
|
|
foreach my $ws (@ws) {
|
|
$ws =~ /^[a-z]([\w\-]*\w)?$/i ||
|
|
&error(&text('edit_ebadserv', $ws));
|
|
$vals .= "\n\t\t\t\t\t$ws";
|
|
}
|
|
$vals .= " )";
|
|
}
|
|
elsif ($in{'type'} eq "RP") {
|
|
if (!$in{'value0'}) {
|
|
$in{'value0'} = ".";
|
|
}
|
|
elsif (!&valemail($in{'value0'})) {
|
|
&error(&text('edit_eemail', $in{'value0'}));
|
|
}
|
|
&valname($in{'value1'}) ||
|
|
&error(&text('edit_etxt', $in{'value1'}));
|
|
$in{'value0'} = &email_to_dotted($in{'value0'});
|
|
$vals = "$in{'value0'} $in{'value1'}";
|
|
}
|
|
elsif ($in{'type'} eq "LOC") {
|
|
$in{'value0'} =~ /\S/ || &error($text{'edit_eloc'});
|
|
}
|
|
elsif ($in{'type'} eq 'SRV') {
|
|
$in{'serv'} =~ /^[A-Za-z0-9\-\_]+$/ ||
|
|
&error(&text('edit_eserv2', $in{'serv'}));
|
|
$in{'name'} = join(".", "_".$in{'serv'}, "_".$in{'proto'},
|
|
$in{'name'} ? ( $in{'name'} ) : ( ));
|
|
$in{'value0'} =~ /^\d+$/ ||
|
|
&error(text('edit_epri', $in{'value0'}));
|
|
$in{'value1'} =~ /^\d+$/ ||
|
|
&error(text('edit_eweight', $in{'value1'}));
|
|
$in{'value2'} =~ /^\d+$/ ||
|
|
&error(text('edit_eport', $in{'value2'}));
|
|
&valname($in{'value3'}) ||
|
|
&error(&text('edit_etarget', $in{'value3'}));
|
|
}
|
|
elsif ($in{'type'} eq 'TLSA') {
|
|
$in{'serv'} =~ /^[A-Za-z0-9\-\_]+$/ ||
|
|
&error(&text('edit_eserv2', $in{'serv'}));
|
|
$in{'name'} = join(".", "_".$in{'serv'}, "_".$in{'proto'},
|
|
$in{'name'} ? ( $in{'name'} ) : ( ));
|
|
$in{'value0'} =~ /^\d+$/ ||
|
|
&error(text('edit_eusage', $in{'value0'}));
|
|
$in{'value1'} =~ /^\d+$/ ||
|
|
&error(text('edit_eselector', $in{'value1'}));
|
|
$in{'value2'} =~ /^\d+$/ ||
|
|
&error(text('edit_ematch', $in{'value2'}));
|
|
$in{'value3'} =~ /^[a-f0-9]+$/ &&
|
|
length($in{'value3'}) % 2 == 0 ||
|
|
&error(&text('edit_etlsa', $in{'value3'}));
|
|
}
|
|
elsif ($in{'type'} eq 'SSHFP') {
|
|
$in{'value0'} =~ /^\d+$/ ||
|
|
&error(text('edit_ealg', $in{'value0'}));
|
|
$in{'value1'} =~ /^\d+$/ ||
|
|
&error(text('edit_efp', $in{'value1'}));
|
|
$in{'value2'} =~ /^[a-f0-9]+$/ ||
|
|
&error(&text('edit_esshfp', $in{'value2'}));
|
|
}
|
|
elsif ($in{'type'} eq 'KEY') {
|
|
$in{'value0'} =~ /^(\d+|0x[0-9a-f]+={0,2})$/i ||
|
|
&error(text('edit_eflags', $in{'value0'}));
|
|
$in{'value1'} =~ /^\d+$/ ||
|
|
&error(text('edit_eproto', $in{'value1'}));
|
|
$in{'value2'} =~ /^\d+$/ ||
|
|
&error(text('edit_ealg2', $in{'value2'}));
|
|
$in{'value3'} =~ s/[ \r\n]//g;
|
|
$in{'value3'} =~ /^[a-zA-Z0-9\/\+]+$/ ||
|
|
&error(text('edit_ekey'));
|
|
$vals = join(" ", $in{'value0'}, $in{'value1'},
|
|
$in{'value2'}, $in{'value3'});
|
|
}
|
|
elsif ($in{'type'} eq 'PTR') {
|
|
$vals = $in{'value0'};
|
|
&valname($vals) ||
|
|
&error(&text('edit_eptr', $vals));
|
|
}
|
|
elsif ($in{'type'} eq 'SPF') {
|
|
# For SPF records, build the SPF string from the inputs
|
|
my $spf = $r ? &parse_spf(@{$r->{'values'}}) : { };
|
|
$spf->{'a'} = $in{'spfa'};
|
|
$spf->{'mx'} = $in{'spfmx'};
|
|
$spf->{'ptr'} = $in{'spfptr'};
|
|
$spf->{'a:'} = [ split(/\s+/, $in{'spfas'}) ];
|
|
foreach my $a (@{$spf->{'a:'}}) {
|
|
&to_ipaddress($a) || &error(&text('edit_espfa', $a));
|
|
&check_ipaddress($a) && &error(&text('edit_espfa2',$a));
|
|
}
|
|
$spf->{'mx:'} = [ split(/\s+/, $in{'spfmxs'}) ];
|
|
foreach my $mx (@{$spf->{'mx:'}}) {
|
|
&valname($mx) || &error(&text('edit_espfmx', $mx));
|
|
}
|
|
@{$spf->{'mx:'}} <= 10 ||
|
|
&error(&text('edit_espfmxmax', 10));
|
|
$spf->{'ip4:'} = [ split(/\s+/, $in{'spfip4s'}) ];
|
|
foreach my $ip (@{$spf->{'ip4:'}}) {
|
|
&check_ipaddress($ip) ||
|
|
($ip =~ /^(\S+)\/\d+$/ && &check_ipaddress($1)) ||
|
|
&error(&text('edit_espfip', $ip));
|
|
}
|
|
$spf->{'ip6:'} = [ split(/\s+/, $in{'spfip6s'}) ];
|
|
foreach my $ip (@{$spf->{'ip6:'}}) {
|
|
&check_ip6address($ip) ||
|
|
($ip =~ /^(\S+)\/\d+$/ &&
|
|
&check_ip6address($1)) ||
|
|
&error(&text('edit_espfip6', $ip));
|
|
}
|
|
$spf->{'include:'} = [ split(/\s+/, $in{'spfincludes'}) ];
|
|
foreach my $i (@{$spf->{'include:'}}) {
|
|
&valname($i) || &error(&text('edit_espfinclude', $i));
|
|
}
|
|
$spf->{'all'} = $in{'spfall'};
|
|
foreach my $m ('redirect', 'exp') {
|
|
if ($in{'spf'.$m.'_def'}) {
|
|
delete($spf->{$m});
|
|
}
|
|
else {
|
|
&valname($in{'spf'.$m}) ||
|
|
&error(&text('edit_espf'.$m,
|
|
$in{'spf'.$m}));
|
|
$spf->{$m} = $in{'spf'.$m};
|
|
if ($m eq 'redirect') {
|
|
delete($spf->{'all'});
|
|
}
|
|
}
|
|
}
|
|
$vals = "\"".&join_spf($spf)."\"";
|
|
}
|
|
elsif ($in{'type'} eq 'DMARC') {
|
|
# Build DMARC record from inputs
|
|
my $dmarc = $r ? &parse_dmarc(@{$r->{'values'}}) : { };
|
|
$dmarc->{'p'} = $in{'dmarcp'};
|
|
|
|
if ($in{'dmarcpct'} ne '') {
|
|
$in{'dmarcpct'} =~ /^\d+$/ && $in{'dmarcpct'} >= 0 &&
|
|
$in{'dmarcpct'} <= 100 || &error($text{'edit_edmarcpct'});
|
|
$dmarc->{'pct'} = $in{'dmarcpct'};
|
|
}
|
|
else {
|
|
delete($dmarc->{'pct'});
|
|
}
|
|
|
|
if ($in{'dmarcsp'}) {
|
|
$dmarc->{'sp'} = $in{'dmarcsp'};
|
|
}
|
|
else {
|
|
delete($dmarc->{'sp'});
|
|
}
|
|
|
|
$dmarc->{'aspf'} = $in{'dmarcaspf'} ? 's' : 'r';
|
|
$dmarc->{'adkim'} = $in{'dmarcadkim'} ? 's' : 'r';
|
|
|
|
if ($in{'dmarcrua_def'}) {
|
|
delete($dmarc->{'rua'});
|
|
}
|
|
else {
|
|
$in{'dmarcrua'} =~ /^\S+$/ ||
|
|
&error($text{'edit_edmarcrua'});
|
|
$in{'dmarcrua'} = 'mailto:'.$in{'dmarcrua'}
|
|
if ($in{'dmarcrua'} !~ /^[a-z]+:/i);
|
|
$dmarc->{'rua'} = $in{'dmarcrua'};
|
|
}
|
|
|
|
if ($in{'dmarcruf_def'}) {
|
|
delete($dmarc->{'ruf'});
|
|
}
|
|
else {
|
|
$in{'dmarcruf'} =~ /^\S+$/ ||
|
|
&error($text{'edit_edmarcruf'});
|
|
$in{'dmarcruf'} = 'mailto:'.$in{'dmarcruf'}
|
|
if ($in{'dmarcruf'} !~ /^[a-z]+:/i);
|
|
$dmarc->{'ruf'} = $in{'dmarcruf'};
|
|
}
|
|
|
|
if ($in{'dmarcfo'} eq '') {
|
|
delete($dmarc->{'fo'});
|
|
}
|
|
else {
|
|
$dmarc->{'fo'} = $in{'dmarcfo'};
|
|
}
|
|
|
|
if ($in{'dmarcrf'} eq '') {
|
|
delete($dmarc->{'rf'});
|
|
}
|
|
else {
|
|
$dmarc->{'rf'} = $in{'dmarcrf'};
|
|
}
|
|
|
|
if ($in{'dmarcri'} eq '') {
|
|
delete($dmarc->{'ri'});
|
|
}
|
|
else {
|
|
$dmarc->{'ri'} = $in{'dmarcri'};
|
|
}
|
|
|
|
$vals = "\"".&join_dmarc($dmarc)."\"";
|
|
}
|
|
elsif ($in{'type'} eq 'NSEC3PARAM') {
|
|
# Save DNSSEC parameters
|
|
$in{'value2'} =~ /^\d+$/ ||
|
|
&error($text{'edit_ensec3value2'});
|
|
$in{'value3_def'} || $in{'value3'} =~ /^[a-zA-Z0-9\+\/]+$/ ||
|
|
&error($text{'edit_ensec3value3'});
|
|
$vals = join(" ", "(", $in{'value0'}, $in{'value1'},
|
|
$in{'value2'},
|
|
($in{'value3_def'} ? '-' : $in{'value3'}), ")");
|
|
}
|
|
elsif ($in{'type'} eq 'CAA') {
|
|
$in{'value2'} =~ /^\S+$/ ||
|
|
&error($text{'edit_ecaavalue2'});
|
|
$vals = join(" ", $in{'value0'}, $in{'value1'},
|
|
"\"$in{'value2'}\"");
|
|
}
|
|
elsif ($in{'type'} eq 'NAPTR') {
|
|
my $flags = join("", split(/\0/, $in{'value2'}));
|
|
$in{'value0'} =~ /^\d+$/ ||
|
|
&error($text{'edit_enaptrvalue0'});
|
|
$in{'value1'} =~ /^\d+$/ ||
|
|
&error($text{'edit_enaptrvalue1'});
|
|
$in{'value3'} =~ /^\S+$/ ||
|
|
&error($text{'edit_enaptrvalue3'});
|
|
if (!$in{'value4_def'} && !$in{'value5_def'}) {
|
|
&error($text{'edit_enaptrvalue4'});
|
|
}
|
|
$vals = join(" ", $in{'value0'}, $in{'value1'},
|
|
"\"$flags\"",
|
|
"\"$in{'value3'}\"",
|
|
$in{'value4_def'} ? "\"\"" : "\"$in{'value4'}\"",
|
|
$in{'value5_def'} ? "." : $in{'value5'});
|
|
}
|
|
else {
|
|
# For other record types, just save the lines
|
|
$in{'values'} //= "";
|
|
$in{'values'} =~ s/\r//g;
|
|
my @vlines = split(/\n/, $in{'values'});
|
|
$vals = join(" ",map { $_ =~ /\s|;/ ? "\"$_\"" : $_ } @vlines);
|
|
}
|
|
$fullname = &convert_to_absolute($in{'name'}, $in{'origin'});
|
|
if ($config{'short_names'}) {
|
|
$name = $in{'name'};
|
|
}
|
|
else {
|
|
$name = $fullname;
|
|
}
|
|
}
|
|
|
|
# check for CNAME collision
|
|
if (!defined($in{'num'}) || $name ne $r->{'name'}) {
|
|
foreach my $cr (@recs) {
|
|
if ($cr->{'name'} eq $name) {
|
|
if ($in{'type'} eq 'CNAME') {
|
|
&error($text{'edit_ecname1'});
|
|
}
|
|
elsif ($cr->{'type'} eq 'CNAME') {
|
|
&error($text{'edit_ecname2'});
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($in{'new'}) {
|
|
# adding a new record
|
|
my ($revconf, $revfile, $revrec) = &find_reverse($in{'value0'},
|
|
$in{'view'});
|
|
if ($in{'rev'} && $config{'rev_must'} && !$revconf) {
|
|
# Reverse zone must exist, but doesn't
|
|
&error($text{'edit_erevmust'});
|
|
}
|
|
&create_record($in{'file'}, $name, $ttl, "IN", $in{'type'}, $vals,
|
|
$in{'comment'});
|
|
$r = { 'name' => $name, 'ttl' => $ttl, 'class' => 'IN',
|
|
'type' => $in{'type'}, 'values' => [ split(/\s+/, $vals) ],
|
|
'comment' => $in{'comment'} };
|
|
if ($in{'rev'} && $revconf && &can_edit_reverse($revconf) &&
|
|
$in{'value0'} !~ /\*/) {
|
|
my $rname = &make_reverse_name($in{'value0'}, $in{'type'},
|
|
$revconf);
|
|
if ($revrec && $in{'rev'} == 2) {
|
|
# Update the existing reverse for the domain
|
|
&lock_file(&make_chroot($revrec->{'file'}));
|
|
&modify_record($revrec->{'file'}, $revrec,
|
|
$rname, $revrec->{'ttl'}, "IN", "PTR",
|
|
$fullname);
|
|
my @rrecs = &read_zone_file($revfile, $revconf->{'name'});
|
|
&bump_soa_record($revfile, \@rrecs);
|
|
&sign_dnssec_zone_if_key($revconf, \@rrecs);
|
|
}
|
|
elsif (!$revrec) {
|
|
# Add a reverse record if we are the master for the
|
|
# reverse domain, and if there is not already a
|
|
# reverse record for the address.
|
|
&lock_file(&make_chroot($revfile));
|
|
&create_record($revfile, $rname,
|
|
$ttl, "IN", "PTR", $fullname);
|
|
my @rrecs = &read_zone_file($revfile, $revconf->{'name'});
|
|
&bump_soa_record($revfile, \@rrecs);
|
|
&sign_dnssec_zone_if_key($revconf, \@rrecs);
|
|
}
|
|
}
|
|
|
|
my ($fwdconf, $fwdfile, $fwdrec) = &find_forward($vals, $vals =~ /\.$ipv6revzone/i);
|
|
if ($in{'fwd'} && $fwdconf && !$fwdrec &&
|
|
&can_edit_zone($fwdconf)) {
|
|
# Add a forward record if we are the master for the forward
|
|
# domain, and if there is not already an A record
|
|
# for the address
|
|
my ($rtype);
|
|
if (&check_ipaddress($in{'name'})) {
|
|
$rtype = "A";
|
|
}
|
|
elsif ($config{'support_aaaa'} &&
|
|
&check_ip6address($in{'name'})) {
|
|
$rtype = "AAAA";
|
|
}
|
|
if ($rtype) {
|
|
&lock_file(&make_chroot($fwdfile));
|
|
&create_record($fwdfile, $vals,
|
|
$ttl, "IN", $rtype, $in{'name'});
|
|
my @frecs = &read_zone_file($fwdfile, $fwdconf->{'name'});
|
|
&bump_soa_record($fwdfile, \@frecs);
|
|
&sign_dnssec_zone_if_key($fwdconf, \@frecs);
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
# update an existing record
|
|
$fulloldvalue0 = &convert_to_absolute($in{'oldvalue0'}, $in{'origin'});
|
|
$fulloldname = &convert_to_absolute($in{'oldname'}, $in{'origin'});
|
|
my ($orevconf, $orevfile, $orevrec) = &find_reverse($in{'oldvalue0'},
|
|
$in{'view'});
|
|
my ($revconf, $revfile, $revrec) = &find_reverse($in{'value0'},
|
|
$in{'view'});
|
|
if ($in{'rev'} && $config{'rev_must'} && !$revconf) {
|
|
# Reverse zone must exist, but doesn't
|
|
&error($text{'edit_erevmust'});
|
|
}
|
|
&lock_file(&make_chroot($r->{'file'}));
|
|
&modify_record($r->{'file'}, $r, $name, $ttl,
|
|
"IN", $in{'type'}, $vals, $in{'comment'});
|
|
|
|
# Build names for the new and old reverse records
|
|
my ($rname, $orname);
|
|
if ($revconf) {
|
|
$rname = &make_reverse_name($in{'value0'}, $in{'type'},
|
|
$revconf);
|
|
}
|
|
if ($orevconf) {
|
|
$orname = &make_reverse_name($in{'oldvalue0'}, $in{'type'},
|
|
$orevconf);
|
|
}
|
|
|
|
if ($in{'rev'} && $orevrec && &can_edit_reverse($orevconf) &&
|
|
$fulloldname eq $orevrec->{'values'}->[0] &&
|
|
($in{'type'} eq "A" ||
|
|
$in{'type'} eq "AAAA" &&
|
|
&expandall_ip6($in{'oldvalue0'}) eq &expandall_ip6(&ip6int_to_net($orevrec->{'name'})))) {
|
|
# Updating the reverse record. Either the name, address
|
|
# or both may have changed. Furthermore, the reverse record
|
|
# may now be in a different file!
|
|
&before_editing($orevconf);
|
|
&before_editing($revconf);
|
|
&lock_file(&make_chroot($orevfile));
|
|
&lock_file(&make_chroot($revfile));
|
|
my @orrecs = &read_zone_file($orevfile, $orevconf->{'name'});
|
|
my @rrecs = &read_zone_file($revfile, $revconf->{'name'});
|
|
if ($revconf eq $orevconf && &can_edit_reverse($revconf)) {
|
|
# old and new in the same file
|
|
&modify_record($orevrec->{'file'} , $orevrec,
|
|
$rname,
|
|
$orevrec->{'ttl'}, "IN", "PTR", $fullname,
|
|
$in{'comment'});
|
|
&bump_soa_record($orevfile, \@orrecs);
|
|
&sign_dnssec_zone_if_key($orevconf, \@orrecs);
|
|
}
|
|
elsif ($revconf && &can_edit_reverse($revconf)) {
|
|
# old and new in different files
|
|
&delete_record($orevrec->{'file'} , $orevrec);
|
|
&create_record($revfile, $rname,
|
|
$orevrec->{'ttl'}, "IN", "PTR", $fullname,
|
|
$in{'comment'});
|
|
&bump_soa_record($orevfile, \@orrecs);
|
|
&bump_soa_record($revfile, \@rrecs);
|
|
&sign_dnssec_zone_if_key($orevconf, \@orrecs);
|
|
&sign_dnssec_zone_if_key($revconf, \@rrecs);
|
|
}
|
|
else {
|
|
# we don't handle the new reverse domain.. lose the
|
|
# reverse record
|
|
&delete_record($orevrec->{'file'}, $orevrec);
|
|
&bump_soa_record($orevfile, \@orrecs);
|
|
&sign_dnssec_zone_if_key($orevconf, \@orrecs);
|
|
}
|
|
&after_editing($revconf);
|
|
&after_editing($orevconf);
|
|
}
|
|
elsif ($in{'rev'} && !$orevrec && $revconf && !$revrec &&
|
|
&can_edit_reverse($revconf)) {
|
|
# we don't handle the old reverse domain but handle the new
|
|
# one.. create a new reverse record
|
|
&before_editing($revconf);
|
|
&lock_file(&make_chroot($revfile));
|
|
my @rrecs = &read_zone_file($revfile, $revconf->{'name'});
|
|
&create_record($revfile, $rname,
|
|
$ttl, "IN", "PTR", $fullname, $in{'comment'});
|
|
&bump_soa_record($revfile, \@rrecs);
|
|
&sign_dnssec_zone_if_key($revconf, \@rrecs);
|
|
&after_editing($revconf);
|
|
}
|
|
|
|
my $ipv6;
|
|
($ipv6 = ($in{'value0'} =~ /\.$ipv6revzone/i));
|
|
my ($ofwdconf, $ofwdfile, $ofwdrec) = &find_forward($fulloldvalue0, $ipv6);
|
|
my ($fwdconf, $fwdfile, $fwdrec) = &find_forward($in{'value0'}, $ipv6);
|
|
if ($in{'fwd'} && $ofwdrec && &can_edit_zone($ofwdconf) &&
|
|
&expandall_ip6(&ip6int_to_net(&arpa_to_ip($in{'oldname'}))) eq
|
|
&expandall_ip6($ofwdrec->{'values'}->[0]) &&
|
|
$fulloldvalue0 eq $ofwdrec->{'name'}) {
|
|
# Updating the forward record
|
|
&before_editing($ofwdconf);
|
|
&before_editing($fwdconf);
|
|
&lock_file(&make_chroot($ofwdfile));
|
|
&lock_file(&make_chroot($fwdfile));
|
|
my @ofrecs = &read_zone_file($ofwdfile, $ofwdconf->{'name'});
|
|
my @frecs = &read_zone_file($fwdfile, $fwdconf->{'name'});
|
|
if ($fwdconf eq $ofwdconf &&
|
|
&can_edit_zone($fwdconf)) {
|
|
# old and new are in the same file
|
|
&modify_record($ofwdrec->{'file'} , $ofwdrec, $vals,
|
|
$ofwdrec->{'ttl'}, "IN",
|
|
$ipv6 ? "AAAA" : "A",
|
|
$in{'name'}, $in{'comment'});
|
|
&bump_soa_record($ofwdfile, \@ofrecs);
|
|
&sign_dnssec_zone_if_key($ofwdconf, \@ofrecs);
|
|
}
|
|
elsif ($fwdconf && &can_edit_zone($fwdconf)) {
|
|
# old and new in different files
|
|
&delete_record($ofwdrec->{'file'} , $ofwdrec);
|
|
if (!$ipv6 || $config{'support_aaaa'}) {
|
|
&create_record($fwdfile, $vals, $ofwdrec->{'ttl'},
|
|
"IN", $ipv6 ? "AAAA" : "A",
|
|
$in{'name'}, $in{'comment'});
|
|
&bump_soa_record($fwdfile, \@frecs);
|
|
&sign_dnssec_zone_if_key($fwdconf, \@frecs);
|
|
}
|
|
&bump_soa_record($ofwdfile, \@ofrecs);
|
|
&sign_dnssec_zone_if_key($ofwdconf, \@ofrecs);
|
|
}
|
|
else {
|
|
# lose the forward because it has been moved to
|
|
# a zone not handled by this server
|
|
&delete_record($ofwdrec->{'file'} , $ofwdrec);
|
|
&bump_soa_record($ofwdfile, \@ofrecs);
|
|
&sign_dnssec_zone_if_key($ofwdconf, \@ofrecs);
|
|
}
|
|
&after_editing($fwdconf);
|
|
&after_editing($ofwdconf);
|
|
}
|
|
}
|
|
&bump_soa_record($in{'file'}, \@recs);
|
|
&sign_dnssec_zone_if_key($zone, \@recs);
|
|
&after_editing($zone);
|
|
&unlock_all_files();
|
|
$r->{'newvalues'} = $vals;
|
|
&webmin_log($in{'new'} ? 'create' : 'modify', 'record', $in{'origin'}, $r);
|
|
&redirect("edit_recs.cgi?zone=$in{'zone'}&view=$in{'view'}&".
|
|
"type=$in{'redirtype'}&sort=$in{'sort'}");
|
|
|
|
# valname(name, [type])
|
|
sub valname
|
|
{
|
|
return valdnsname($_[0], 0, $in{'origin'}, $_[1]);
|
|
}
|
|
|
|
# valnamewild(name, [type])
|
|
sub valnamewild
|
|
{
|
|
return valdnsname($_[0], 1, $in{'origin'}, $_[1]);
|
|
}
|