From e44e07784fce7c5794b2cb385557403c93b88386 Mon Sep 17 00:00:00 2001 From: Michael Kaufmann Date: Sun, 19 Jan 2020 10:08:06 +0100 Subject: [PATCH] validate nameserver ip-addresses for binds allow-transfer block; fixes #791 Signed-off-by: Michael Kaufmann --- lib/Froxlor/Cron/Dns/Bind.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/Froxlor/Cron/Dns/Bind.php b/lib/Froxlor/Cron/Dns/Bind.php index a556eef5..2c2ae9f9 100644 --- a/lib/Froxlor/Cron/Dns/Bind.php +++ b/lib/Froxlor/Cron/Dns/Bind.php @@ -112,7 +112,10 @@ class Bind extends DnsBase if (count($this->ns) > 0) { foreach ($this->ns as $ns) { foreach ($ns["ips"] as $ip) { - $bindconf_file .= ' ' . $ip . ";\n"; + $ip = \Froxlor\Validate\Validate::validate_ip2($ip, true, 'invalidip', true, true, true); + if ($ip) { + $bindconf_file .= ' ' . $ip . ";\n"; + } } } }