s.tab('general', _('General'));
s.tab('devices', _('Devices & Ports'));
- s.tab('dnssecopt', _('DNSSEC'));
s.tab('filteropts', _('Filter'));
s.tab('forward', _('Forwards'));
s.tab('limits', _('Limits'));
_('This prevents unreachable IPs in subnets not accessible to you.') + '<br />' +
_('Note: IPv4 only.'));
- if (L.hasSystemFeature('dnsmasq', 'dnssec')) {
- o = s.taboption('dnssecopt', form.Flag, 'dnssec',
- _('DNSSEC'),
- _('Validate DNS replies and cache DNSSEC data, requires upstream to support DNSSEC.'));
- o.optional = true;
-
- o = s.taboption('dnssecopt', form.Flag, 'dnsseccheckunsigned',
- _('DNSSEC check unsigned'),
- _('Verify unsigned domain responses really come from unsigned domains.'));
- o.default = o.enabled;
- o.optional = true;
- }
-
s.taboption('filteropts', form.Flag, 'nonegcache',
_('No negative cache'),
_('Do not cache negative replies, e.g. for non-existent domains.'));
};
// End dnsrecords
+ // Begin dnssec
+ if (L.hasSystemFeature('dnsmasq', 'dnssec')) {
+ o = s.taboption('dnssecopt', form.Flag, 'dnssec',
+ _('DNSSEC'),
+ _('Validate DNS replies and cache DNSSEC data, requires upstream to support DNSSEC.'));
+ o.optional = true;
+
+ o = s.taboption('dnssecopt', form.Flag, 'dnsseccheckunsigned',
+ _('DNSSEC check unsigned'),
+ _('Verify unsigned domain responses really come from unsigned domains.'));
+ o.default = o.enabled;
+ o.optional = true;
+ }
+ // End dnssec
+
s.taboption('filteropts', form.Flag, 'domainneeded',
_('Domain required'),
_('Never forward DNS queries which lack dots or domain parts.') + '<br />' +
_('This prevents unreachable IPs in subnets not accessible to you.') + '<br />' +
_('Note: IPv4 only.'));
- if (L.hasSystemFeature('dnsmasq', 'dnssec')) {
- o = s.taboption('dnssecopt', form.Flag, 'dnssec',
- _('DNSSEC'),
- _('Validate DNS replies and cache DNSSEC data, requires upstream to support DNSSEC.'));
- o.optional = true;
-
- o = s.taboption('dnssecopt', form.Flag, 'dnsseccheckunsigned',
- _('DNSSEC check unsigned'),
- _('Verify unsigned domain responses really come from unsigned domains.'));
- o.default = o.enabled;
- o.optional = true;
- }
-
s.taboption('filteropts', form.Flag, 'nonegcache',
_('No negative cache'),
_('Do not cache negative replies, e.g. for non-existent domains.'));