'use strict';'require view';'require dom';'require poll';'require rpc';'require uci';'require form';'require network';'require validation';'require tools.widgets as widgets';var callHostHints,callDUIDHints,callDHCPLeases,CBILeaseStatus,CBILease6Status;callHostHints=rpc.declare({object:'luci-rpc',method:'getHostHints',expect:{'':{}}});callDUIDHints=rpc.declare({object:'luci-rpc',method:'getDUIDHints',expect:{'':{}}});callDHCPLeases=rpc.declare({object:'luci-rpc',method:'getDHCPLeases',expect:{'':{}}});CBILeaseStatus=form.DummyValue.extend({renderWidget:function(section_id,option_id,cfgvalue){return E([E('h4',_('Active DHCP Leases')),E('table',{'id':'lease_status_table','class':'table'},[E('tr',{'class':'tr table-titles'},[E('th',{'class':'th'},_('Hostname')),E('th',{'class':'th'},_('IPv4 address')),E('th',{'class':'th'},_('MAC address')),E('th',{'class':'th'},_('Lease time remaining'))]),E('tr',{'class':'tr placeholder'},[E('td',{'class':'td'},E('em',_('Collecting data...')))])])]);}});CBILease6Status=form.DummyValue.extend({renderWidget:function(section_id,option_id,cfgvalue){return E([E('h4',_('Active DHCPv6 Leases')),E('table',{'id':'lease6_status_table','class':'table'},[E('tr',{'class':'tr table-titles'},[E('th',{'class':'th'},_('Host')),E('th',{'class':'th'},_('IPv6 address')),E('th',{'class':'th'},_('DUID')),E('th',{'class':'th'},_('Lease time remaining'))]),E('tr',{'class':'tr placeholder'},[E('td',{'class':'td'},E('em',_('Collecting data...')))])])]);}});function calculateNetwork(addr,mask){addr=validation.parseIPv4(String(addr));if(!isNaN(mask))
mask=validation.parseIPv4(network.prefixToMask(+mask));else
mask=validation.parseIPv4(String(mask));if(addr==null||mask==null)
return null;return[[addr[0]&(mask[0]>>>0&255),addr[1]&(mask[1]>>>0&255),addr[2]&(mask[2]>>>0&255),addr[3]&(mask[3]>>>0&255)].join('.'),mask.join('.')];}
function generateDnsmasqInstanceEntry(data){const nameValueMap=new Map(Object.entries(data));let formatString=nameValueMap.get('.index')+' ('+_('Name')+(nameValueMap.get('.anonymous')?': dnsmasq['+nameValueMap.get('.index')+']':': '+nameValueMap.get('.name'));if(data.domain){formatString+=', '+_('Domain')+': '+data.domain;}
if(data.local){formatString+=', '+_('Local')+': '+data.local;}
formatString+=')';return[nameValueMap.get('.name'),formatString];}
function getDHCPPools(){return uci.load('dhcp').then(function(){let sections=uci.sections('dhcp','dhcp'),tasks=[],pools=[];for(var i=0;i<sections.length;i++){if(sections[i].ignore=='1'||!sections[i].interface)
continue;tasks.push(network.getNetwork(sections[i].interface).then(L.bind(function(section_id,net){var cidr=net?(net.getIPAddrs()[0]||'').split('/'):null;if(cidr&&cidr.length==2){var net_mask=calculateNetwork(cidr[0],cidr[1]);pools.push({section_id:section_id,network:net_mask[0],netmask:net_mask[1]});}},null,sections[i]['.name'])));}
return Promise.all(tasks).then(function(){return pools;});});}
function validateHostname(sid,s){if(s==null||s=='')
return true;if(s.length>256)
return _('Expecting: %s').format(_('valid hostname'));var labels=s.replace(/^\*?\.?|\.$/g,'').split(/\./);for(var i=0;i<labels.length;i++)
if(!labels[i].match(/^[a-z0-9_](?:[a-z0-9-]{0,61}[a-z0-9])?$/i))
return _('Expecting: %s').format(_('valid hostname'));return true;}
function validateAddressList(sid,s){if(s==null||s=='')
return true;var m=s.match(/^\/(.+)\/$/),names=m?m[1].split(/\//):[s];for(var i=0;i<names.length;i++){var res=validateHostname(sid,names[i]);if(res!==true)
return res;}
return true;}
function validateServerSpec(sid,s){if(s==null||s=='')
return true;var m=s.match(/^(\/.*\/)?(.*)$/);if(!m)
return _('Expecting: %s').format(_('valid hostname'));if(m[1]!='//'&&m[1]!='/#/'){var res=validateAddressList(sid,m[1]);if(res!==true)
return res;}
if(m[2]==''||m[2]=='#')
return true;m=m[2].match(/^([0-9a-f:.]+)(?:%[^#@]+)?(?:#(\d+))?(?:@([0-9a-f:.]+)(?:@[^#]+)?(?:#(\d+))?)?$/);if(!m)
return _('Expecting: %s').format(_('valid IP address'));if(validation.parseIPv4(m[1])){if(m[3]!=null&&!validation.parseIPv4(m[3]))
return _('Expecting: %s').format(_('valid IPv4 address'));}
else if(validation.parseIPv6(m[1])){if(m[3]!=null&&!validation.parseIPv6(m[3]))
return _('Expecting: %s').format(_('valid IPv6 address'));}
else{return _('Expecting: %s').format(_('valid IP address'));}
if((m[2]!=null&&+m[2]>65535)||(m[4]!=null&&+m[4]>65535))
return _('Expecting: %s').format(_('valid port value'));return true;}
function expandAndFormatMAC(macs){let result=[];macs.forEach(mac=>{if(isValidMAC(mac)){const expandedMac=mac.split(':').map(part=>{return(part.length===1&&part!=='*')?'0'+part:part;}).join(':').toUpperCase();result.push(expandedMac);}});return result.length?result:null;}
function isValidMAC(sid,s){if(!s)
return true;let macaddrs=L.toArray(s);for(var i=0;i<macaddrs.length;i++)
if(!macaddrs[i].match(/^(([0-9a-f]{1,2}|\*)[:-]){5}([0-9a-f]{1,2}|\*)$/i))
return _('Expecting a valid MAC address, optionally including wildcards')+_('; invalid MAC: ')+macaddrs[i];return true;}
function validateMACAddr(pools,sid,s){if(s==null||s=='')
return true;var leases=uci.sections('dhcp','host'),this_macs=L.toArray(s).map(function(m){return m.toUpperCase()});for(var i=0;i<pools.length;i++){var this_net_mask=calculateNetwork(this.section.formvalue(sid,'ip'),pools[i].netmask);if(!this_net_mask)
continue;for(var j=0;j<leases.length;j++){if(leases[j]['.name']==sid||!leases[j].ip)
continue;var lease_net_mask=calculateNetwork(leases[j].ip,pools[i].netmask);if(!lease_net_mask||this_net_mask[0]!=lease_net_mask[0])
continue;var lease_macs=L.toArray(leases[j].mac).map(function(m){return m.toUpperCase()});for(var k=0;k<lease_macs.length;k++)
for(var l=0;l<this_macs.length;l++)
if(lease_macs[k]==this_macs[l])
return _('The MAC address %h is already used by another static lease in the same DHCP pool').format(this_macs[l]);}}
return isValidMAC(sid,s);}
return view.extend({load:function(){return Promise.all([callHostHints(),callDUIDHints(),getDHCPPools(),network.getNetworks(),uci.load('firewall')]);},render:function(hosts_duids_pools){var has_dhcpv6=L.hasSystemFeature('dnsmasq','dhcpv6')||L.hasSystemFeature('odhcpd'),hosts=hosts_duids_pools[0],duids=hosts_duids_pools[1],pools=hosts_duids_pools[2],networks=hosts_duids_pools[3],m,s,o,ss,so,dnss;let noi18nstrings={etc_hosts:'<code>/etc/hosts</code>',etc_ethers:'<code>/etc/ethers</code>',localhost_v6:'<code>::1</code>',loopback_slash_8_v4:'<code>127.0.0.0/8</code>',not_found:'<code>Not found</code>',nxdomain:'<code>NXDOMAIN</code>',rfc_1918_link:'<a href="https://www.rfc-editor.org/rfc/rfc1918">RFC1918</a>',rfc_4193_link:'<a href="https://www.rfc-editor.org/rfc/rfc4193">RFC4193</a>',rfc_4291_link:'<a href="https://www.rfc-editor.org/rfc/rfc4291">RFC4291</a>',rfc_6303_link:'<a href="https://www.rfc-editor.org/rfc/rfc6303">RFC6303</a>',reverse_arpa:'<code>*.IN-ADDR.ARPA,*.IP6.ARPA</code>',servers_file_entry01:'<code>server=1.2.3.4</code>',servers_file_entry02:'<code>server=/domain/1.2.3.4</code>',};const recordtypes=['ANY','A','AAAA','ALIAS','CAA','CERT','CNAME','DS','HINFO','HIP','HTTPS','KEY','LOC','MX','NAPTR','NS','OPENPGPKEY','PTR','RP','SIG','SOA','SRV','SSHFP','SVCB','TLSA','TXT','URI',]
function customi18n(template,values){if(!values)
values=noi18nstrings;return template.replace(/\{(\w+)\}/g,(match,key)=>values[key]||match);};m=new form.Map('dhcp',_('DHCP and DNS'),_('Dnsmasq is a lightweight <abbr title="Dynamic Host Configuration Protocol">DHCP</abbr> server and <abbr title="Domain Name System">DNS</abbr> forwarder.'));s=m.section(form.TypedSection,'dnsmasq');s.anonymous=false;s.addremove=true;s.addbtntitle=_('Add server instance','Dnsmasq instance');s.renderContents=function(){var renderTask=form.TypedSection.prototype.renderContents.apply(this,arguments),sections=this.cfgsections();return Promise.resolve(renderTask).then(function(nodes){if(sections.length<2){nodes.querySelector('#cbi-dhcp-dnsmasq > h3').remove();nodes.querySelector('#cbi-dhcp-dnsmasq > .cbi-section-remove').remove();}
else{nodes.querySelectorAll('#cbi-dhcp-dnsmasq > .cbi-section-remove').forEach(function(div,i){var section=uci.get('dhcp',sections[i]),hline=div.nextElementSibling,btn=div.firstElementChild;if(!section||section['.anonymous']){hline.innerText=i?_('Unnamed instance #%d','Dnsmasq instance').format(i+1):_('Default instance','Dnsmasq instance');btn.innerText=i?_('Remove instance #%d','Dnsmasq instance').format(i+1):_('Remove default instance','Dnsmasq instance');}
else{hline.innerText=_('Instance "%q"','Dnsmasq instance').format(section['.name']);btn.innerText=_('Remove instance "%q"','Dnsmasq instance').format(section['.name']);}});}
nodes.querySelector('#cbi-dhcp-dnsmasq > .cbi-section-create input').placeholder=_('New instance name…','Dnsmasq instance');return nodes;});};s.tab('general',_('General'));s.tab('cache',_('Cache'));s.tab('devices',_('Devices &amp; Ports'));s.tab('dnsrecords',_('DNS Records'));s.tab('dnssecopt',_('DNSSEC'));s.tab('filteropts',_('Filter'));s.tab('forward',_('Forwards'));s.tab('limits',_('Limits'));s.tab('logging',_('Log'));s.tab('files',_('Resolv &amp; Hosts Files'));s.tab('leases',_('Static Leases'));s.tab('ipsets',_('IP Sets'));s.tab('relay',_('Relay'));s.tab('pxe_tftp',_('PXE/TFTP'));s.tab('custom_domain',_('Custom Redirect Domain'));o=s.taboption('custom_domain',form.SectionValue,'domain',form.GridSection,'domain',null,_('Define a custom domain name and the corresponding PTR record'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;so=ss.option(form.Value,'name',_('Domain Name'));so.datatype='hostname';so.rmempty=false;so=ss.option(form.Value,'ip',_('<abbr title=\"Internet Protocol Version 4\">IPv4</abbr>-Address'));so.datatype='or(ip4addr,"ignore")';so.rmempty=false;so=ss.option(form.Value,'comments',_('Comments'));so.rmempty=true;o=s.taboption('cache',form.MultiValue,'cache_rr',_('Cache arbitrary RR'),_('By default, dnsmasq caches A, AAAA, CNAME and SRV DNS record types.')+'<br/>'+
_('This option adds additional record types to the cache.'));o.optional=true;o.create=true;o.multiple=true;o.display_size=5;recordtypes.forEach(r=>{o.value(r);});s.taboption('filteropts',form.Flag,'domainneeded',_('Domain required'),_('Never forward DNS queries which lack dots or domain parts.')+'<br />'+
customi18n(_('Names not in {etc_hosts} are answered {not_found}.')));s.taboption('general',form.Flag,'authoritative',_('Authoritative'),_('This is the only DHCP server in the local network.'));s.taboption('general',form.Flag,'dns_redirect',_('DNS redirect'),_('Force redirect all local DNS queries to DNSMasq, a.k.a. DNS Hijacking.'));o=s.taboption('general',form.Value,'local',_('Resolve these locally'),_('Never forward these matching domains or subdomains; resolve from DHCP or hosts files only.'));o.placeholder='/internal.example.com/private.example.com/example.org';s.taboption('general',form.Value,'domain',_('Local domain'),_('Local domain suffix appended to DHCP names and hosts file entries.'));s.taboption('general',form.Flag,'expandhosts',_('Expand hosts'),_('Add local domain suffix to names served from hosts files.'));o=s.taboption('logging',form.Flag,'logqueries',_('Log queries'),_('Write received DNS queries to syslog.')+' '+_('Dump cache on SIGUSR1, include requesting IP.'));o.optional=true;o=s.taboption('logging',form.Flag,'logdhcp',_('Extra DHCP logging'),_('Log all options sent to DHCP clients and the tags used to determine them.'));o.optional=true;o=s.taboption('logging',form.Value,'logfacility',_('Log facility'),_('Set log class/facility for syslog entries.'));o.optional=true;o.value('KERN');o.value('USER');o.value('MAIL');o.value('DAEMON');o.value('AUTH');o.value('LPR');o.value('NEWS');o.value('UUCP');o.value('CRON');o.value('LOCAL0');o.value('LOCAL1');o.value('LOCAL2');o.value('LOCAL3');o.value('LOCAL4');o.value('LOCAL5');o.value('LOCAL6');o.value('LOCAL7');o.value('-',_('stderr'));o=s.taboption('forward',form.DynamicList,'server',_('DNS Forwards'),_('Forward specific domain queries to specific upstream servers.'));o.optional=true;o.placeholder='/*.example.org/10.1.2.3';o.validate=validateServerSpec;o=s.taboption('general',form.DynamicList,'address',_('Addresses'),_('Resolve specified FQDNs to an IP.')+'<br />'+
customi18n(_('Syntax: {code_syntax}.'),{code_syntax:'<code>/fqdn[/fqdn…]/[ipaddr]</code>'})+'<br />'+
customi18n(_('{example_nx} returns {nxdomain}.','hint: <code>/example.com/</code> returns <code>NXDOMAIN</code>.'),{example_nx:'<code>/example.com/</code>',nxdomain:'<code>NXDOMAIN</code>'})+'<br />'+
customi18n(_('{any_domain} matches any domain (and returns {nxdomain}).','hint: <code>/#/</code> matches any domain (and returns NXDOMAIN).'),{any_domain:'<code>/#/</code>',nxdomain:'<code>NXDOMAIN</code>'})+'<br />'+
customi18n(_('{example_null} returns {null_addr} addresses ({null_ipv4}, {null_ipv6}) for {example_com} and its subdomains.','hint: <code>/example.com/#</code> returns NULL addresses (<code>0.0.0.0</code>, <code>::</code>) for example.com and its subdomains.'),{example_null:'<code>/example.com/#</code>',null_addr:'<code>NULL</code>',null_ipv4:'<code>0.0.0.0</code>',null_ipv6:'<code>::</code>',example_com:'<code>example.com</code>',}));o.optional=true;o.placeholder='/router.local/router.lan/192.168.0.1';o=s.taboption('general',form.DynamicList,'ipset',_('IP sets'),_('List of IP sets to populate with the IPs of DNS lookup results of the FQDNs also specified here.'));o.optional=true;o.placeholder='/example.org/ipset,ipset6';o=s.taboption('filteropts',form.Flag,'rebind_protection',_('Rebind protection'),customi18n(_('Discard upstream responses containing {rfc_1918_link} addresses.'))+'<br />'+
customi18n(_('Discard also upstream responses containing {rfc_4193_link}, Link-Local and private IPv4-Mapped {rfc_4291_link} IPv6 Addresses.')));o.rmempty=false;o=s.taboption('filteropts',form.Flag,'rebind_localhost',_('Allow localhost'),customi18n(_('Exempt {loopback_slash_8_v4} and {localhost_v6} from rebinding checks, e.g. for <abbr title="Real-time Block List">RBL</abbr> services.')));o.depends('rebind_protection','1');o=s.taboption('filteropts',form.DynamicList,'rebind_domain',_('Domain whitelist'),customi18n(_('List of domains to allow {rfc_1918_link} responses for.')));o.depends('rebind_protection','1');o.optional=true;o.placeholder='ihost.netflix.com';o.validate=validateAddressList;o=s.taboption('filteropts',form.Flag,'localservice',_('Local service only'),_('Accept DNS queries only from hosts whose address is on a local subnet.'));o.optional=false;o.rmempty=false;o=s.taboption('devices',form.Flag,'nonwildcard',_('Non-wildcard'),_('Bind only to configured interface addresses, instead of the wildcard address.'));o.default=o.enabled;o.optional=false;o.rmempty=true;o=s.taboption('devices',widgets.NetworkSelect,'interface',_('Listen interfaces'),_('Listen only on the specified interfaces, and loopback if not excluded explicitly.'));o.multiple=true;o.nocreate=true;o=s.taboption('devices',widgets.NetworkSelect,'notinterface',_('Exclude interfaces'),_('Do not listen on the specified interfaces.'));o.loopback=true;o.multiple=true;o.nocreate=true;o=s.taboption('relay',form.SectionValue,'__relays__',form.TableSection,'relay',null,_('Relay DHCP requests elsewhere. OK: v4↔v4, v6↔v6. Not OK: v4↔v6, v6↔v4.')
+'<br />'+_('Note: you may also need a DHCP Proxy (currently unavailable) when specifying a non-standard Relay To port(<code>addr#port</code>).')
+'<br />'+_('You may add multiple unique Relay To on the same Listen addr.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'local_addr',_('Relay from'));so.rmempty=false;so.datatype='ipaddr';for(var family=4;family<=6;family+=2){for(var i=0;i<networks.length;i++){if(networks[i].getName()!='loopback'){var addrs=(family==6)?networks[i].getIP6Addrs():networks[i].getIPAddrs();for(var j=0;j<addrs.length;j++){var addr=addrs[j].split('/')[0];so.value(addr,E([],[addr,' (',widgets.NetworkSelect.prototype.renderIfaceBadge(networks[i]),')']));}}}}
so=ss.option(form.Value,'server_addr',_('Relay to address'));so.rmempty=false;so.optional=false;so.placeholder='192.168.10.1#535';so.validate=function(section,value){var m=this.section.formvalue(section,'local_addr'),n=this.section.formvalue(section,'server_addr'),p;if(!m||!n){return _('Both "Relay from" and "Relay to address" must be specified.');}
else{p=n.split('#');if(p.length>1&&!/^[0-9]+$/.test(p[1]))
return _('Expected port number.');else
n=p[0];if((validation.parseIPv6(m)&&validation.parseIPv6(n))||validation.parseIPv4(m)&&validation.parseIPv4(n))
return true;else
return _('Address families of "Relay from" and "Relay to address" must match.')}
return true;};so=ss.option(widgets.NetworkSelect,'interface',_('Only accept replies via'));so.optional=true;so.rmempty=false;so.placeholder='lan';s.taboption('files',form.Flag,'readethers',customi18n(_('Use {etc_ethers}')),customi18n(_('Read {etc_ethers} to configure the DHCP server.')));s.taboption('files',form.Value,'leasefile',_('Lease file'),_('File to store DHCP lease information.'));o=s.taboption('files',form.Flag,'noresolv',_('Ignore resolv file'));o.optional=true;o=s.taboption('files',form.Value,'resolvfile',_('Resolv file'),_('File with upstream resolvers.'));o.depends('noresolv','0');o.placeholder='/tmp/resolv.conf.d/resolv.conf.auto';o.optional=true;o=s.taboption('files',form.Flag,'strictorder',_('Strict order'),_('Query upstream resolvers in the order they appear in the resolv file.'));o.optional=true;o=s.taboption('files',form.Flag,'ignore_hosts_dir',_('Ignore hosts files directory'),_('On: use instance specific hosts file only')+'<br/>'+
_('Off: use all files in the directory including the instance specific hosts file'));o.optional=true;o=s.taboption('files',form.Flag,'nohosts',customi18n(_('Ignore {etc_hosts} file')));o.optional=true;o=s.taboption('files',form.DynamicList,'addnhosts',_('Additional hosts files'));o.optional=true;o.placeholder='/etc/dnsmasq.hosts';o=s.taboption('logging',form.Flag,'quietdhcp',_('Suppress logging'),_('Suppress logging of the routine operation for the DHCP protocol.'));o.optional=true;o.depends('logdhcp','0');o=s.taboption('general',form.Flag,'sequential_ip',_('Allocate IPs sequentially'),_('Allocate IP addresses sequentially, starting from the lowest available address.'));o.optional=true;o=s.taboption('filteropts',form.Flag,'boguspriv',_('Filter private'),customi18n(_('Reject reverse lookups to {rfc_6303_link} IP ranges ({reverse_arpa}) not in {etc_hosts}.')));o.default=o.enabled;s.taboption('filteropts',form.Flag,'filterwin2k',_('Filter SRV/SOA service discovery'),_('Filters SRV/SOA service discovery, to avoid triggering dial-on-demand links.')+'<br />'+
_('May prevent VoIP or other services from working.'));o=s.taboption('filteropts',form.Flag,'filter_aaaa',_('Filter IPv6 AAAA records'),_('Remove IPv6 addresses from the results and only return IPv4 addresses.')+'<br />'+
_('Can be useful if ISP has IPv6 nameservers but does not provide IPv6 routing.'));o.optional=true;o=s.taboption('filteropts',form.Flag,'filter_a',_('Filter IPv4 A records'),_('Remove IPv4 addresses from the results and only return IPv6 addresses.'));o.optional=true;o=s.taboption('filteropts',form.MultiValue,'filter_rr',_('Filter arbitrary RR'),_('Removes records of the specified type(s) from answers.'));o.optional=true;o.create=true;o.multiple=true;o.display_size=5;recordtypes.forEach(r=>{o.value(r);});s.taboption('filteropts',form.Flag,'localise_queries',_('Localise queries'),customi18n(_('Limit response records (from {etc_hosts}) to those that fall within the subnet of the querying interface.'))+'<br />'+
_('This prevents unreachable IPs in subnets not accessible to you.')+'<br />'+
_('Note: IPv4 only.'));if(L.hasSystemFeature('dnsmasq','dnssec')){o=s.taboption('dnssecopt',form.Flag,'dnssec',_('DNSSEC'),_('Validate DNS replies and cache DNSSEC data, requires upstream to support DNSSEC.'));o.optional=true;o=s.taboption('dnssecopt',form.Flag,'dnsseccheckunsigned',_('DNSSEC check unsigned'),_('Verify unsigned domain responses really come from unsigned domains.'));o.default=o.enabled;o.optional=true;}
s.taboption('filteropts',form.Flag,'nonegcache',_('No negative cache'),_('Do not cache negative replies, e.g. for non-existent domains.'));o=s.taboption('forward',form.Value,'serversfile',_('Additional servers file'),customi18n(_('File listing upstream resolvers, optionally domain-specific, e.g. {servers_file_entry01}, {servers_file_entry02}.')));o.placeholder='/etc/dnsmasq.servers';o=s.taboption('forward',form.Value,'addmac',_('Add requestor MAC'),_('Add the MAC address of the requestor to DNS queries which are forwarded upstream.')+' '+'<br />'+
_('%s uses the default MAC address format encoding').format('<code>enabled</code>')+' '+'<br />'+
_('%s uses an alternative encoding of the MAC as base64').format('<code>base64</code>')+' '+'<br />'+
_('%s uses a human-readable encoding of hex-and-colons').format('<code>text</code>'));o.optional=true;o.value('',_('off'));o.value('1',_('enabled (default)'));o.value('base64');o.value('text');s.taboption('forward',form.Flag,'stripmac',_('Remove MAC address before forwarding query'),_('Remove any MAC address information already in downstream queries before forwarding upstream.'));o=s.taboption('forward',form.Value,'addsubnet',_('Add subnet address to forwards'),_('Add a subnet address to the DNS queries which are forwarded upstream, leaving this value empty disables the feature.')+' '+
_('If an address is specified in the flag, it will be used, otherwise, the address of the requestor will be used.')+' '+
_('The amount of the address forwarded depends on the prefix length parameter: 32 (128 for IPv6) forwards the whole address, zero forwards none of it but still marks the request so that no upstream nameserver will add client address information either.')+' '+'<br />'+
_('The default (%s) is zero for both IPv4 and IPv6.').format('<code>0,0</code>')+' '+'<br />'+
_('%s adds the /24 and /96 subnets of the requestor for IPv4 and IPv6 requestors, respectively.').format('<code>24,96</code>')+' '+'<br />'+
_('%s adds 1.2.3.0/24 for IPv4 requestors and ::/0 for IPv6 requestors.').format('<code>1.2.3.4/24</code>')+' '+'<br />'+
_('%s adds 1.2.3.0/24 for both IPv4 and IPv6 requestors.').format('<code>1.2.3.4/24,1.2.3.4/24</code>'));o.optional=true;s.taboption('forward',form.Flag,'stripsubnet',_('Remove subnet address before forwarding query'),_('Remove any subnet address already present in a downstream query before forwarding it upstream.'));o=s.taboption('general',form.Flag,'allservers',_('All servers'),_('Query all available upstream resolvers.')+' '+_('First answer wins.'));o.optional=true;o=s.taboption('filteropts',form.DynamicList,'bogusnxdomain',customi18n(_('IPs to override with {nxdomain}')),customi18n(_('Transform replies which contain the specified addresses or subnets into {nxdomain} responses.')));o.optional=true;o.placeholder='64.94.110.11';o=s.taboption('devices',form.Value,'port',_('DNS server port'),_('Listening port for inbound DNS queries.'));o.optional=true;o.datatype='port';o.placeholder=53;o=s.taboption('devices',form.Value,'queryport',_('DNS query port'),_('Fixed source port for outbound DNS queries.'));o.optional=true;o.datatype='port';o.placeholder=_('any');o=s.taboption('devices',form.Value,'minport',_('Minimum source port #'),_('Min valid value %s.').format('<code>1024</code>')+' '+_('Useful for systems behind firewalls.'));o.optional=true;o.datatype='port';o.placeholder=1024;o.depends('queryport','');o=s.taboption('devices',form.Value,'maxport',_('Maximum source port #'),_('Max valid value %s.').format('<code>65535</code>')+' '+_('Useful for systems behind firewalls.'));o.optional=true;o.datatype='port';o.placeholder=50000;o.depends('queryport','');o=s.taboption('limits',form.Value,'dhcpleasemax',_('Max. DHCP leases'),_('Maximum allowed number of active DHCP leases.'));o.optional=true;o.datatype='uinteger';o.placeholder=150;o=s.taboption('limits',form.Value,'ednspacket_max',_('Max. EDNS0 packet size'),_('Maximum allowed size of EDNS0 UDP packets.'));o.optional=true;o.datatype='uinteger';o.placeholder=1280;o=s.taboption('limits',form.Value,'dnsforwardmax',_('Max. concurrent queries'),_('Maximum allowed number of concurrent DNS queries.'));o.optional=true;o.datatype='uinteger';o.placeholder=150;o=s.taboption('limits',form.Value,'cachesize',_('Size of DNS query cache'),_('Number of cached DNS entries, 10000 is maximum, 0 is no caching.'));o.optional=true;o.datatype='range(0,10000)';o.placeholder=1000;o=s.taboption('limits',form.Value,'min_cache_ttl',_('Min cache TTL'),_('Extend short TTL values to the seconds value given when caching them. Use with caution.')+
_(' (Max 1h == 3600)'));o.optional=true;o.placeholder=60;o=s.taboption('limits',form.Value,'max_cache_ttl',_('Max cache TTL'),_('Set a maximum seconds TTL value for entries in the cache.'));o.optional=true;o.placeholder=3600;o=s.taboption('pxe_tftp',form.Flag,'enable_tftp',_('Enable TFTP server'),_('Enable the built-in single-instance TFTP server.'));o.optional=true;o=s.taboption('pxe_tftp',form.Value,'tftp_root',_('TFTP server root'),_('Root directory for files served via TFTP. <em>Enable TFTP server</em> and <em>TFTP server root</em> turn on the TFTP server and serve files from <em>TFTP server root</em>.'));o.depends('enable_tftp','1');o.optional=true;o.placeholder='/';o=s.taboption('pxe_tftp',form.Value,'dhcp_boot',_('Network boot image'),_('Filename of the boot image advertised to clients.'));o.depends('enable_tftp','1');o.optional=true;o.placeholder='pxelinux.0';o=s.taboption('pxe_tftp',form.SectionValue,'__pxe__',form.GridSection,'boot',null,_('Special <abbr title="Preboot eXecution Environment">PXE</abbr> boot options for Dnsmasq.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.modaltitle=_('Edit PXE/TFTP/BOOTP Host');ss.nodescriptions=true;so=ss.option(form.Value,'filename',_('Filename'),_('Host requests this filename from the boot server.'));so.optional=false;so.placeholder='pxelinux.0';so=ss.option(form.Value,'servername',_('Server name'),_('The hostname of the boot server'));so.optional=false;so.placeholder='myNAS';so=ss.option(form.Value,'serveraddress',_('Server address'),_('The IP address of the boot server'));so.optional=false;so.placeholder='192.168.1.2';so=ss.option(form.DynamicList,'dhcp_option',_('DHCP Options'),_('Additional options to send to the below match tags.')+'<br />'+
_('%s means "the address of the system running dnsmasq".').format('<code>0.0.0.0</code>'));so.optional=true;so.placeholder='option:root-path,192.168.1.2:/data/netboot/root';so=ss.option(form.Value,'networkid',_('Match this Tag'),_('Only DHCP Clients with this tag are sent this boot option.'));so.optional=true;so.noaliases=true;so=ss.option(form.Flag,'force',_('Force'),_('Always send the chosen DHCP options. Sometimes needed, with e.g. PXELinux.'));so.optional=true;so=ss.option(form.Value,'instance',_('Instance'),_('Dnsmasq instance to which this boot section is bound. If unspecified, the section is valid for all dnsmasq instances.'));so.optional=true;Object.values(L.uci.sections('dhcp','dnsmasq')).forEach(function(val,index){var[name,display_str]=generateDnsmasqInstanceEntry(val);so.value(name,display_str);});o=s.taboption('dnsrecords',form.SectionValue,'__dnsrecords__',form.TypedSection,'__dnsrecords__');dnss=o.subsection;dnss.anonymous=true;dnss.cfgsections=function(){return['__dnsrecords__']};dnss.tab('hosts',_('Hostnames'));dnss.tab('srvhosts',_('SRV'));dnss.tab('mxhosts',_('MX'));dnss.tab('cnamehosts',_('CNAME'));dnss.tab('dnsrr',_('DNS-RR'));o=dnss.taboption('srvhosts',form.SectionValue,'__srvhosts__',form.TableSection,'srvhost',null,_('Bind service records to a domain name: specify the location of services. See <a href="%s">RFC2782</a>.').format('https://datatracker.ietf.org/doc/html/rfc2782')
+'<br />'+_('_service: _sip, _ldap, _imap, _stun, _xmpp-client, … . (Note: while _http is possible, no browsers support SRV records.)')
+'<br />'+_('_proto: _tcp, _udp, _sctp, _quic, … .')
+'<br />'+_('You may add multiple records for the same Target.')
+'<br />'+_('Larger weights (of the same prio) are given a proportionately higher probability of being selected.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;so=ss.option(form.Value,'srv',_('SRV'),_('Syntax:')+' '+'<code>_service._proto.example.com.</code>');so.rmempty=false;so.datatype='hostname';so.placeholder='_sip._tcp.example.com.';so=ss.option(form.Value,'target',_('Target'),_('CNAME or fqdn'));so.rmempty=false;so.datatype='hostname';so.placeholder='sip.example.com.';so=ss.option(form.Value,'port',_('Port'));so.rmempty=false;so.datatype='port';so.placeholder='5060';so=ss.option(form.Value,'class',_('Priority'),_('Ordinal: lower comes first.'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='10';so=ss.option(form.Value,'weight',_('Weight'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='50';o=dnss.taboption('mxhosts',form.SectionValue,'__mxhosts__',form.TableSection,'mxhost',null,_('Bind service records to a domain name: specify the location of services.')
+'<br />'+_('You may add multiple records for the same domain.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'domain',_('Domain'));so.rmempty=false;so.datatype='hostname';so.placeholder='example.com.';so=ss.option(form.Value,'relay',_('Relay'));so.rmempty=false;so.datatype='hostname';so.placeholder='relay.example.com.';so=ss.option(form.Value,'pref',_('Priority'),_('Ordinal: lower comes first.'));so.rmempty=true;so.datatype='range(0,65535)';so.placeholder='0';o=dnss.taboption('cnamehosts',form.SectionValue,'__cname__',form.TableSection,'cname',null,_('Set an alias for a hostname.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;so=ss.option(form.Value,'cname',_('Domain'));so.rmempty=false;so.validate=validateHostname;so.placeholder='www.example.com.';so=ss.option(form.Value,'target',_('Target'));so.rmempty=false;so.datatype='hostname';so.placeholder='example.com.';o=dnss.taboption('hosts',form.SectionValue,'__hosts__',form.GridSection,'domain',null,_('Hostnames are used to bind a domain name to an IP address. This setting is redundant for hostnames already configured with static leases, but it can be useful to rebind an FQDN.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;so=ss.option(form.Value,'name',_('Hostname'));so.rmempty=false;so.datatype='hostname';so=ss.option(form.Value,'ip',_('IP address'));so.rmempty=false;so.datatype='ipaddr';var ipaddrs={};Object.keys(hosts).forEach(function(mac){var addrs=L.toArray(hosts[mac].ipaddrs||hosts[mac].ipv4);for(var i=0;i<addrs.length;i++)
ipaddrs[addrs[i]]=hosts[mac].name||mac;});L.sortedKeys(ipaddrs,null,'addr').forEach(function(ipv4){so.value(ipv4,'%s (%s)'.format(ipv4,ipaddrs[ipv4]));});o=dnss.taboption('dnsrr',form.SectionValue,'__dnsrr__',form.TableSection,'dnsrr',null,_('Set an arbitrary resource record (RR) type.')+'<br/>'+
_('Hexdata is automatically en/decoded on save and load'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;function hexdecodeload(section_id){let arr=uci.get('dhcp',section_id,this.option)||[];arr=arr.replace(/[\s:]/g,'');let decodedString='';for(let i=0;i<arr.length;i+=2){decodedString+=String.fromCharCode(parseInt(arr.substr(i,2),16));}
return decodedString;}
function hexencodesave(section,value){if(!value||value.length===0){uci.unset('dhcp',section,'hexdata');return;}
const encodedArr=value.split('').map(c=>c.charCodeAt(0).toString(16).padStart(2,'0')).join('');uci.set('dhcp',section,this.option,encodedArr);}
so=ss.option(form.Value,'dnsrr',_('Resource Record Name'));so.rmempty=false;so.datatype='hostname';so.placeholder='svcb.example.com.';so=ss.option(form.Value,'rrnumber',_('Resource Record Number'));so.rmempty=false;so.datatype='uinteger';so.placeholder='64';so=ss.option(form.Value,'hexdata',_('Raw Data'));so.rmempty=true;so.datatype='string';so.placeholder='free-form string';so.load=hexdecodeload;so.write=hexencodesave;so=ss.option(form.DummyValue,'_hexdata',_('Hex Data'));so.width='10%';so.rawhtml=true;so.load=function(section_id){let hexdata=uci.get('dhcp',section_id,'hexdata')||[];hexdata=hexdata.replace(/[:]/g,'');if(hexdata){return hexdata.replace(/(.{20})/g,'$1<br/>');}else{return'';}}
o=s.taboption('ipsets',form.SectionValue,'__ipsets__',form.GridSection,'ipset',null,_('List of IP sets to populate with the IPs of DNS lookup results of the FQDNs also specified here.')+'<br />'+
_('The netfilter components below are only regarded when running fw4.'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.rowcolors=true;ss.nodescriptions=true;ss.modaltitle=_('Edit IP set');so=ss.option(form.DynamicList,'name',_('Name of the set'));uci.sections('firewall','ipset',function(s){if(typeof(s.name)=='string')
so.value(s.name,s.comment?'%s (%s)'.format(s.name,s.comment):s.name);});so.rmempty=false;so.editable=false;so.datatype='string';so=ss.option(form.DynamicList,'domain',_('FQDN'));so.rmempty=false;so.editable=false;so.datatype='hostname';so=ss.option(form.Value,'table',_('Netfilter table name'),_('Defaults to fw4.'));so.editable=false;so.placeholder='fw4';so.rmempty=true;so=ss.option(form.ListValue,'table_family',_('Table IP family'),_('Defaults to IPv4+6.')+' '+_('Can be hinted by adding 4 or 6 to the name.')+'<br />'+
_('Adding an IPv6 to an IPv4 set and vice-versa silently fails.'));so.editable=false;so.rmempty=true;so.value('inet',_('IPv4+6'));so.value('ip',_('IPv4'));so.value('ip6',_('IPv6'));o=s.taboption('leases',form.SectionValue,'__leases__',form.GridSection,'host',null,_('Static leases are used to assign fixed IP addresses and symbolic hostnames to DHCP clients. They are also required for non-dynamic interface configurations where only hosts with a corresponding lease are served.')+'<br /><br />'+
_('Use the <em>Add</em> Button to add a new lease entry. The <em>MAC address</em> identifies the host, the <em>IPv4 address</em> specifies the fixed address to use, and the <em>Hostname</em> is assigned as a symbolic name to the requesting host. The optional <em>Lease time</em> can be used to set non-standard host-specific lease time, e.g. 12h, 3d or infinite.')+'<br /><br />'+
_('The tag construct filters which host directives are used; more than one tag can be provided, in this case the request must match all of them. Tagged directives are used in preference to untagged ones. Note that one of mac, duid or hostname still needs to be specified (can be a wildcard).'));ss=o.subsection;ss.addremove=true;ss.anonymous=true;ss.sortable=true;ss.nodescriptions=true;ss.max_cols=8;ss.modaltitle=_('Edit static lease');so=ss.option(form.Value,'name',_('Hostname'),_('Optional hostname to assign'));so.validate=validateHostname;so.rmempty=true;so.write=function(section,value){uci.set('dhcp',section,'name',value);uci.set('dhcp',section,'dns','1');};so.remove=function(section){uci.unset('dhcp',section,'name');uci.unset('dhcp',section,'dns');};so=ss.option(form.DynamicList,'mac',_('MAC address(es)'),_('The hardware address(es) of this entry/host.')+'<br /><br />'+
_('In DHCPv4, it is possible to include more than one mac address. This allows an IP address to be associated with multiple macaddrs, and dnsmasq abandons a DHCP lease to one of the macaddrs when another asks for a lease. It only works reliably if only one of the macaddrs is active at any time.'));so.rmempty=true;so.cfgvalue=function(section){var macs=uci.get('dhcp',section,'mac');if(!Array.isArray(macs)){return expandAndFormatMAC(L.toArray(macs));}else{return expandAndFormatMAC(macs);}};so.validate=validateMACAddr.bind(so,pools);Object.keys(hosts).forEach(function(mac){var hint=hosts[mac].name||L.toArray(hosts[mac].ipaddrs||hosts[mac].ipv4)[0];so.value(mac,hint?'%s (%s)'.format(mac,hint):mac);});so=ss.option(form.Value,'ip',_('IPv4 address'),_('The IP address to be used for this host, or <em>ignore</em> to ignore any DHCP request from this host.'));so.value('ignore',_('Ignore'));so.datatype='or(ip4addr,"ignore")';so.validate=function(section,value){var m=this.section.formvalue(section,'mac'),n=this.section.formvalue(section,'name');if((m&&!m.length>0)&&!n)
return _('One of hostname or MAC address must be specified!');if(!value||value=='ignore')
return true;var leases=uci.sections('dhcp','host');for(var i=0;i<leases.length;i++)
if(leases[i]['.name']!=section&&leases[i].ip==value)
return _('The IP address %h is already used by another static lease').format(value);for(var i=0;i<pools.length;i++){var net_mask=calculateNetwork(value,pools[i].netmask);if(net_mask&&net_mask[0]==pools[i].network)
return true;}
return _('The IP address is outside of any DHCP pool address range');};L.sortedKeys(ipaddrs,null,'addr').forEach(function(ipv4){so.value(ipv4,ipaddrs[ipv4]?'%s (%s)'.format(ipv4,ipaddrs[ipv4]):ipv4);});so=ss.option(form.Value,'leasetime',_('Lease time'),_('Host-specific lease time, e.g. <code>5m</code>, <code>3h</code>, <code>7d</code>.'));so.rmempty=true;so.value('5m',_('5m (5 minutes)'));so.value('3h',_('3h (3 hours)'));so.value('12h',_('12h (12 hours - default)'));so.value('7d',_('7d (7 days)'));so.value('infinite',_('infinite (lease does not expire)'));so=ss.option(form.Value,'duid',_('DUID'),_('The DHCPv6-DUID (DHCP unique identifier) of this host.'));so.datatype='and(rangelength(20,36),hexstring)';Object.keys(duids).forEach(function(duid){so.value(duid,'%s (%s)'.format(duid,duids[duid].hostname||duids[duid].macaddr||duids[duid].ip6addr||'?'));});so=ss.option(form.Value,'hostid',_('IPv6-Suffix (hex)'),_('The IPv6 interface identifier (address suffix) as hexadecimal number (max. 16 chars).'));so.datatype='and(rangelength(0,16),hexstring)';so=ss.option(form.DynamicList,'tag',_('Tag'),_('Assign new, freeform tags to this entry.'));so=ss.option(form.DynamicList,'match_tag',_('Match Tag'),_('When a host matches an entry then the special tag %s is set. Use %s to match all known hosts.').format('<code>known</code>','<code>known</code>')+'<br /><br />'+
_('Ignore requests from unknown machines using %s.').format('<code>!known</code>')+'<br /><br />'+
_('If a host matches an entry which cannot be used because it specifies an address on a different subnet, the tag %s is set.').format('<code>known-othernet</code>'));so.value('known',_('known'));so.value('!known',_('!known (not known)'));so.value('known-othernet',_('known-othernet (on different subnet)'));so.optional=true;so=ss.option(form.Value,'instance',_('Instance'),_('Dnsmasq instance to which this DHCP host section is bound. If unspecified, the section is valid for all dnsmasq instances.'));so.optional=true;Object.values(L.uci.sections('dhcp','dnsmasq')).forEach(function(val,index){var[name,display_str]=generateDnsmasqInstanceEntry(val);so.value(name,display_str);});so=ss.option(form.Flag,'broadcast',_('Broadcast'),_('Force broadcast DHCP response.'));so=ss.option(form.Flag,'dns',_('Forward/reverse DNS'),_('Add static forward and reverse DNS entries for this host.'));o=s.taboption('leases',CBILeaseStatus,'__status__');if(has_dhcpv6)
o=s.taboption('leases',CBILease6Status,'__status6__');return m.render().then(function(mapEl){poll.add(function(){return callDHCPLeases().then(function(leaseinfo){var leases=Array.isArray(leaseinfo.dhcp_leases)?leaseinfo.dhcp_leases:[],leases6=Array.isArray(leaseinfo.dhcp6_leases)?leaseinfo.dhcp6_leases:[];cbi_update_table(mapEl.querySelector('#lease_status_table'),leases.map(function(lease){var exp;if(lease.expires===false)
exp=E('em',_('unlimited'));else if(lease.expires<=0)
exp=E('em',_('expired'));else
exp='%t'.format(lease.expires);var hint=lease.macaddr?hosts[lease.macaddr]:null,name=hint?hint.name:null,host=null;if(name&&lease.hostname&&lease.hostname!=name)
host='%s (%s)'.format(lease.hostname,name);else if(lease.hostname)
host=lease.hostname;return[host||'-',lease.ipaddr,lease.macaddr,exp];}),E('em',_('There are no active leases')));if(has_dhcpv6){cbi_update_table(mapEl.querySelector('#lease6_status_table'),leases6.map(function(lease){var exp;if(lease.expires===false)
exp=E('em',_('unlimited'));else if(lease.expires<=0)
exp=E('em',_('expired'));else
exp='%t'.format(lease.expires);var hint=lease.macaddr?hosts[lease.macaddr]:null,name=hint?(hint.name||L.toArray(hint.ipaddrs||hint.ipv4)[0]||L.toArray(hint.ip6addrs||hint.ipv6)[0]):null,host=null;if(name&&lease.hostname&&lease.hostname!=name&&lease.ip6addr!=name)
host='%s (%s)'.format(lease.hostname,name);else if(lease.hostname)
host=lease.hostname;else if(name)
host=name;return[host||'-',lease.ip6addrs?lease.ip6addrs.join('<br />'):lease.ip6addr,lease.duid,exp];}),E('em',_('There are no active leases')));}});});return mapEl;});}});