# Legend or not ;-)

**URL:** <https://community.ipfire.org/t/legend-or-not/15316>\
**Category:** DNS\
**Created:** [5 December 2025 08:58 UTC](https://community.ipfire.org/t/legend-or-not/15316 "2025-12-05T08:58:40Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![cracksilver78](https://community.ipfire.org/user_avatar/community.ipfire.org/cracksilver78/32/12772_2.png) [@cracksilver78](https://community.ipfire.org/u/cracksilver78)\
**Post date:** [5 December 2025 08:58 UTC](https://community.ipfire.org/t/legend-or-not/15316/1 "2025-12-05T08:58:40Z")

</div>

Hi there

Might be a bug or even my stupid thinking about things. But I recognized something strange behavior at my firewalls. There is showing a legend as soon I acivate DNS from provider. If I untick this, there is no legend.

Both firewalls react the same.

with tick

 ![image](https://community.ipfire.org/uploads/default/original/2X/7/7e4c18d92ecc7b124eb15e728a733aef33c86d0b.png)

without tick

 ![image](https://community.ipfire.org/uploads/default/original/2X/5/525b787e7fbfe73418adbe91192a14c55f56d14b.png)

thx for watching

---

<div class="post-metadata">

**Author:** ![tphz](https://community.ipfire.org/user_avatar/community.ipfire.org/tphz/32/16551_2.png) [@tphz](https://community.ipfire.org/u/tphz)\
**Post date:** [5 December 2025 09:22 UTC](https://community.ipfire.org/t/legend-or-not/15316/2 "2025-12-05T09:22:23Z")

</div>

I can confirm this behaviour for the version:

Core-Update 199 Development Build: master/75ecc483

 ![obraz](https://community.ipfire.org/uploads/default/original/2X/2/27f52595e445d7810abca9380bf7ccb1e60d3331.png)

 ![obraz](https://community.ipfire.org/uploads/default/original/2X/9/9b08322ad0250ec9764aa59e0719274b407ed1df.png)

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [5 December 2025 10:14 UTC](https://community.ipfire.org/t/legend-or-not/15316/3 "2025-12-05T10:14:10Z")

</div>

Nice find. That is case for bugzilla.

---

<div class="post-metadata">

**Author:** ![cracksilver78](https://community.ipfire.org/user_avatar/community.ipfire.org/cracksilver78/32/12772_2.png) [@cracksilver78](https://community.ipfire.org/u/cracksilver78)\
**Post date:** [5 December 2025 10:28 UTC](https://community.ipfire.org/t/legend-or-not/15316/4 "2025-12-05T10:28:26Z")

</div>

wow. I found a bug. And it’s not even easter 😉

---

<div class="post-metadata">

**Author:** ![ag](https://community.ipfire.org/user_avatar/community.ipfire.org/ag/32/12124_2.png) [@ag](https://community.ipfire.org/u/ag)\
**Post date:** [5 December 2025 14:13 UTC](https://community.ipfire.org/t/legend-or-not/15316/5 "2025-12-05T14:13:27Z")

</div>

Thanks for reporting this.

It’s been logged as [**Bug 13917**](https://bugzilla.ipfire.org/show_bug.cgi?id=13917)

Cheers,  
A G

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [5 December 2025 14:34 UTC](https://community.ipfire.org/t/legend-or-not/15316/6 "2025-12-05T14:34:22Z")

</div>

The effect was created back in CU140 around 6 years ago.

You only see the legend if the isp dns server(s) are enabled **and** the number of dns servers listed ( including isp ones) is \> 2.

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [5 December 2025 14:44 UTC](https://community.ipfire.org/t/legend-or-not/15316/7 "2025-12-05T14:44:25Z")

</div>

That is right.  
The relevant condition should read ( in pseudocode )

```auto
if servercount > (use_isp_dns_servers)?2:0 
  print legend

```

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [5 December 2025 17:31 UTC](https://community.ipfire.org/t/legend-or-not/15316/8 "2025-12-05T17:31:03Z")

</div>

No idea what pseudocode is but the simplest thing i would think is to change the ‘on’ to ‘off’ as you can’t edit the isp dns servers as they define them so i suspect there was an error when the code was changed in CU140.

The only problem would be with the dns sources \> 2 if you have an isp that has only one dns server. That is the case for my vm ipfire behind my production ipfire as that provides only one dns server.

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [5 December 2025 19:13 UTC](https://community.ipfire.org/t/legend-or-not/15316/9 "2025-12-05T19:13:20Z")

</div>

Okay.  
The solution is just to change line 714, file /srv/web/cgi-bin/dns.cgi  
from  
`if (($settings{'USE_ISP_NAMESERVERS'} eq "on") && ($server_amount > 2)) {`  
to  
`if ($server_amount > ($settings{'USE_ISP_NAMESERVERS'} eq "on")?2:0) {`

This shows the legend with DNS servers defined only.

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [6 December 2025 16:38 UTC](https://community.ipfire.org/t/legend-or-not/15316/10 "2025-12-06T16:38:09Z")

</div>

That’s excellent work. Thanks for picking this up. 👍