Re: [Dnsmasq-discuss] Any way to set the lease-time for hosts derived from /etc/ethers?

2015-05-08 Thread richardvo...@gmail.com
On Fri, May 8, 2015 at 2:35 PM, Simon Kelley wrote: > On 04/05/15 12:42, Rick Thomas wrote: > > > > Is there any way to set the lease time for a client derived from the > > /etc/ethers file? > > > > I can set a lease time for a lease derived from a “dhcp-range” or > > “dhcp-host” config statement

Re: [Dnsmasq-discuss] problem with not executed /etc/dhcp-script.d/10dhcpscript

2015-05-08 Thread Bastian Bittorf
* Simon Kelley [08.05.2015 22:36]: > Are you sure the low-memory thing is relevant? Do you see the same > problem on a newly booted machine? i'am not sure, if the lowmem-situation is relevant. on a newly booted machine there are no problems. > The logs you include are odd. Doing DHCP on the loop

Re: [Dnsmasq-discuss] DNS rebinding prevention misses IPv4-mapped IPv6 addrs containing RFC1918 addrs

2015-05-08 Thread Simon Kelley
Thanks for the heads-up. I just checked in code to the git repo to fix this. http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=b059c96dc69dfe3055c5b32b078a05c53b11ebb3 Cheers, Simon. On 30/04/15 02:59, Jordan Milne wrote: > dnsmasq correctly filters A records containing RFC1918 addres

Re: [Dnsmasq-discuss] Multiple networks, one dnsmasq

2015-05-08 Thread Jim Alles
Yan I believe you will need to setup firewall rules. An easy way to do that in my opinion is Untangle's Next Generation FireWall (NGFW). It includes dnsmasq with a GUI for configuration. It can handle the VLAN's http://wiki.untangle.com/index.php/Installation 4 interfaces but 3 NICs with one for

Re: [Dnsmasq-discuss] Any way to set the lease-time for hosts derived from /etc/ethers?

2015-05-08 Thread Simon Kelley
On 04/05/15 12:42, Rick Thomas wrote: > > Is there any way to set the lease time for a client derived from the > /etc/ethers file? > > I can set a lease time for a lease derived from a “dhcp-range” or > “dhcp-host” config statement, but I can’t find any way to set it for > the “implied” dhcp-host

Re: [Dnsmasq-discuss] dns sometimes not considering override

2015-05-08 Thread Simon Kelley
What is the content of your /etc/resolv.conf file? Cheers, Simon. On 04/05/15 16:10, Lorenzo Milesi wrote: > hi. > I'm experiencing a strange issue with dnsmasq 2.68 bundled in Ubuntu 12.04: > sometimes my custom DNS records are skipped, and the upstream reply is > returned. > For example I

Re: [Dnsmasq-discuss] Multiple networks, one dnsmasq

2015-05-08 Thread Yan Seiner
On 05/08/2015 11:59 AM, Simon Kelley wrote: domain = dmz.lan, 192.168.3.0/24 domain = auth.lan, 192.168.4.0/24 Perfect, thank you. The rest of it I got done with iptables. ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk htt

Re: [Dnsmasq-discuss] problem with not executed /etc/dhcp-script.d/10dhcpscript

2015-05-08 Thread Simon Kelley
Are you sure the low-memory thing is relevant? Do you see the same problem on a newly booted machine? The logs you include are odd. Doing DHCP on the loopback interface is unusual, and may be a cause. Cheers, Simon. On 30/04/15 11:16, Bastian Bittorf wrote: > (only CC'ing to openwrt-dev) >

Re: [Dnsmasq-discuss] Multiple networks, one dnsmasq

2015-05-08 Thread Simon Kelley
On 03/05/15 01:45, Yan Seiner wrote: > I have a router with 4 subnets, each on its own interface. (Yes, I'm > using vlans for 3 of them.) > > 192.168.3.0 eth2<- dmz.lan > 192.168.4.0 eth1.4<- auth.lan > 192.168.5.0 eth1.5<- guest.lan > 192.168.6.0 eth1.6<- tena

Re: [Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

2015-05-08 Thread Loganaden Velvindron
On Fri, May 8, 2015 at 3:40 PM, Simon Kelley wrote: > On 07/05/15 16:51, Nicholas Weaver wrote: >> One important consideration: The Internet has decreed a long time >> ago that fragments don't work for IPv4, and REALLY don't work for >> IPv6: the amount of systems that drop fragments for V6 is of

Re: [Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

2015-05-08 Thread Simon Kelley
On 08/05/15 16:52, Loganaden Velvindron wrote: > On Fri, May 8, 2015 at 3:40 PM, Simon Kelley wrote: >> On 07/05/15 16:51, Nicholas Weaver wrote: >>> One important consideration: The Internet has decreed a long time >>> ago that fragments don't work for IPv4, and REALLY don't work for >>> IPv6: t

Re: [Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

2015-05-08 Thread Simon Kelley
Forwarding something from a parallel conversation to the list. Simon. Forwarded Message Subject: Re: testing edns0 on bind Date: Thu, 7 May 2015 09:58:56 -0700 From: Evan Hunt To: Simon Kelley CC: Dave Taht , Toke Høiland-Jørgensen > This is my hypothesis, which fits what

Re: [Dnsmasq-discuss] seeing www.ietf.org fail dnssec with dnsmasq rc7

2015-05-08 Thread Simon Kelley
On 07/05/15 16:51, Nicholas Weaver wrote: > One important consideration: The Internet has decreed a long time > ago that fragments don't work for IPv4, and REALLY don't work for > IPv6: the amount of systems that drop fragments for V6 is off the > chart. > > For DNS, this means you get silent