%PDF- %PDF-
| Direktori : /backups/router/usr/local/opnsense/mvc/app/controllers/OPNsense/Unbound/forms/ |
| Current File : //backups/router/usr/local/opnsense/mvc/app/controllers/OPNsense/Unbound/forms/dialogDot.xml |
<form>
<field>
<id>dot.enabled</id>
<label>Enabled</label>
<type>checkbox</type>
<help>Enable or disable this server.</help>
</field>
<field>
<id>dot.domain</id>
<label>Domain</label>
<type>text</type>
<help>
If a domain is entered here, queries for this specific domain will be forwarded to the specified server.
Leave blank to forward all queries to the specified server (default).
</help>
</field>
<field>
<id>dot.server</id>
<label>Server IP</label>
<type>text</type>
<help>IP address of DNS server to forward all requests.</help>
</field>
<field>
<id>dot.port</id>
<label>Server Port</label>
<type>text</type>
<help>Port of DNS server, for usual DNS use 53, if you use DoT set it to 853.</help>
</field>
<field>
<id>dot.forward_tcp_upstream</id>
<label>Forward TCP upstream</label>
<type>checkbox</type>
<advanced>true</advanced>
<help>
Upstream queries use TCP only for transport regardless of global flag tcp-upstream.
Please note this setting applies to the domain, so when multiple forwarders are defined for the same domain,
all are assumed to use tcp only.
</help>
</field>
<field>
<id>dot.verify</id>
<label>Verify CN</label>
<type>text</type>
<help>
The Common Name of the DNS server (e.g. dns.example.com). This field is required to verify its TLS certificate.
DNS-over-TLS is susceptible to man-in-the-middle attacks unless certificates can be verified.
Leave empty to accept self-signed yet also potentially fraudulent certificates.
</help>
</field>
<field>
<id>dot.description</id>
<label>Description</label>
<type>text</type>
<help>You may enter a description here for your reference (not parsed).</help>
</field>
</form>