From 8a91133d9e9a7da4f63eb3863c281345e9e6da60 Mon Sep 17 00:00:00 2001 From: Tomas Krizek <tomas.krizek@nic.cz> Date: Thu, 25 Jan 2018 18:16:34 +0100 Subject: [PATCH] config.lua: exit if kresd isn't listening on any interface --- daemon/lua/config.lua | 4 ++++ etc/config.cluster | 1 - etc/config.isp | 1 - 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/daemon/lua/config.lua b/daemon/lua/config.lua index 7abf18184..be414a7cd 100644 --- a/daemon/lua/config.lua +++ b/daemon/lua/config.lua @@ -9,6 +9,10 @@ if not next(net.list()) and not env.KRESD_NO_LISTEN then if not ok and verbose() then print('bind to ::1@53 '..err) end + -- Exit when kresd isn't listening on any interfaces + if not next(net.list()) then + panic('not listening on any interface, exiting...') + end end -- Open cache if not set/disabled if not cache.current_size then diff --git a/etc/config.cluster b/etc/config.cluster index bc1cf60a5..584837922 100644 --- a/etc/config.cluster +++ b/etc/config.cluster @@ -42,4 +42,3 @@ policy.add(policy.rpz(policy.DENY, 'blacklist.rpz')) -- Optional: use Redis/Memcached as a cache backend which may be distributed between nodes -- cache.storage = 'redis://127.0.0.1:6398' - diff --git a/etc/config.isp b/etc/config.isp index f050bd883..c5ba83004 100644 --- a/etc/config.isp +++ b/etc/config.isp @@ -35,4 +35,3 @@ view:addr('10.0.0.0/24', policy.suffix(policy.DROP, {todname('site.nl')})) view:addr('192.168.2.0/24', policy.all(policy.TC)) -- Apply RPZ for all clients, default rule is DENY policy.add(policy.rpz(policy.DENY, 'blacklist.rpz')) - -- GitLab