zoneconf.in: Allow control over query access.

[zoneconf] / zoneconf.in

diff --git a/zoneconf.in b/zoneconf.in
index 4a6713f..13c269d 100755 (executable)
--- a/zoneconf.in
+++ b/zoneconf.in
@@ -992,6 +992,7 @@ define-configuration-space zone ZONECFG {
   define-simple dir-mode 2775
   define-simple zone-file "%v/%z.zone"
   define-simple soa-format increment
+  define-simple allow-query nil
   define-list views *
   define-list sign-views {}
   define-list signzone-command \
@@ -1152,8 +1153,12 @@ proc compute-zone-properties {view config} {
        foreach host $hosts {
          set bang [string first "!" $host]
          if {$bang >= 0} {
-           set before [string range $host 0 [expr {$bang - 1}]]
            set after [string range $host [expr {$bang + 1}] end]
+           if {$bang} {
+             set before [string range $host 0 [expr {$bang - 1}]]
+           } else {
+             set before $after
+           }
            if {[local-address-p $before]} {
              set host $after
            } else {
@@ -1296,6 +1301,9 @@ proc write-zone-stanza {view chan config} {
       }
     }
   }
+  if {![string equal $zone(allow-query) nil]} {
+    puts $chan "\tallow-query {$zone(allow-query)};"
+  }
   puts $chan "};";
 }