Re: [Dnsmasq-discuss] prevent dnsmasq from releasing IPs

2016-01-27 Thread Hartmut Krafft
On Tue, 26 Jan 2016 21:31:29 + Simon Kelley wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > > On 26/01/16 14:56, Stefan Priebe - Profihost AG wrote: > > > >> Am 26.01.2016 um 14:46 schrieb Simon Kelley > >> : > >> > > > > > On 26/01/16 13:42, Stefan Priebe - Profi

Re: [Dnsmasq-discuss] Fast add/remove of route for dnsmasq DHCP clients

2016-01-16 Thread Hartmut Krafft
On Sat, 16 Jan 2016 21:07:15 + Olszowi Bernd wrote: > >> Hi, > >> > >> I use dnsmasq as DHCP server for a WLAN hotspot and also got a dial > >> up network (3G/LTE) for internet connection. The internet > >> connection is not always available. Therefore I add the DHCP route > >> option when t

Re: [Dnsmasq-discuss] Fast add/remove of route for dnsmasq DHCP clients

2016-01-16 Thread Hartmut Krafft
On Sat, 16 Jan 2016 20:07:57 + Olszowi Bernd wrote: > Hi, > > I use dnsmasq as DHCP server for a WLAN hotspot and also got a dial > up network (3G/LTE) for internet connection. The internet connection > is not always available. Therefore I add the DHCP route option when > there is an interne

Re: [Dnsmasq-discuss] Problem with VM and dnsmasq

2015-10-07 Thread Hartmut Krafft
Hi, to get closer, you should run tcpdump on all 3 machines involved, to see where the packets get lost. Best, Hartmut ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-d

Re: [Dnsmasq-discuss] Multiple subnets question

2015-07-08 Thread Hartmut Krafft
On July 8, 2015 18:40:19 Chris Green wrote: On Wed, Jul 08, 2015 at 04:00:50PM +0200, Toke Høiland-Jørgensen wrote: > Chris Green writes: > > > But that would require that there's a Linux box permanently on the LAN > > side of the W311R+ wouldn't it? > > Yeah, it would. Or on that box itself

Re: [Dnsmasq-discuss] Multiple subnets question

2015-07-08 Thread Hartmut Krafft
On July 8, 2015 14:20:47 Chris Green wrote: On Wed, Jul 08, 2015 at 01:26:30PM +0200, Hartmut Krafft wrote: > Hi Chris, > > Yes, I hoped/thought this should work but it would appear not. Maybe it's a quirk/failing of this particular wireless router (I'm only using it

Re: [Dnsmasq-discuss] Multiple subnets question

2015-07-08 Thread Hartmut Krafft
Hi Chris, On July 8, 2015 12:40:19 Chris Green wrote: I have a small[ish] home network with dnsmasq running on a Raspberry Pi doing the standard stuff on the main subnet. I'm wondering if I can get dnsmasq to handle DHCP and local DNS for two other subnets as well. I'll try and describe the

Re: [Dnsmasq-discuss] Selective logging for "log-queries"

2015-06-22 Thread Hartmut Krafft
Hi all, maybe the OP should clarify what he wants to do. Just to unclutter a log for debugging, the standard tools are fine (grep&c.). Or does he parse the logs for another goal? Then, a terser format might make sense - or a completely different approach. Best, Hartmut Hi Richard, The questio

Re: [Dnsmasq-discuss] Integration with iptables?

2015-06-12 Thread Hartmut Krafft
man dnsmasq /ipset :-) Hartmut A way to maintain ipsets via dnsmasq would for example do what I need. Sincerely, Joachim ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq

[Dnsmasq-discuss] Integration with iptables?

2015-06-12 Thread Hartmut Krafft
Hi Joachim, there's already a way to connect iptables and dnsmasq: look at the ipset feature, it is limited in what it can filter, but otherwise might help you there. Best, Hartmut Hi. A use case for my router would be: Block every outgoing traffic except for that going to the domain whatsap

Re: [Dnsmasq-discuss] dns server

2015-05-11 Thread Hartmut Krafft
t; > private, off-list, but feel free to redirect it to the mailing list if > you feel so. > Well, I'd rather keep it on the list because it will get archived, and, maybe, someone with similar questions won't have to ask ;-). And others can correct me should I write BS ;-) > On

Re: [Dnsmasq-discuss] dns server

2015-04-28 Thread Hartmut Krafft
Hi, you should sort out your setup and assign the functions to your machines so that they don't get in each other's way. So, you've got the router and the server, and the clients in the LAN. Let the router's DNS be unknown to the other machines in the LAN. Let the server be the LAN's DNS and forw

Re: [Dnsmasq-discuss] Triggering a shell script when domain name resolved

2015-03-21 Thread Hartmut Krafft
On Sat, 21 Mar 2015 00:28:22 +0800 (CST) F32 wrote: > Hi everyone, > I'm a Chinese user with Internet access polluted by the GFW > (the Great Firewall of China). To visit, e.g., the sites of Google, I > have to setup a proxy and then redirect related packets to the proxy > server at 127.0

Re: [Dnsmasq-discuss] Compile with HAVE_IPSET on kernel 3.0.x problem

2014-02-16 Thread Hartmut Krafft
   *   0.0.0.0/0    0.0.0.0/0    match-set gfwlist dst to:192.168.1.1:8099 I think the last line can proof iptables with ipset is working. 2014-02-16 15:53 GMT+08:00 Hartmut Krafft <hart...@mail.ru>: So it seems you don't have the iptables modules loaded. Check if you have insta

Re: [Dnsmasq-discuss] Compile with HAVE_IPSET on kernel 3.0.x problem

2014-02-15 Thread Hartmut Krafft
  30912  3 rt2860v2_ap   620896  0 ohci_hcd   15776  0 ehci_hcd   34000  0 2014-02-16 5:56 GMT+08:00 Hartmut Krafft <hart...@mail.ru>: I don't have such raw sockets here and the ipset works regardless. Did you check that the modules are ins

Re: [Dnsmasq-discuss] Compile with HAVE_IPSET on kernel 3.0.x problem

2014-02-15 Thread Hartmut Krafft
sizeof(snl)) != -1)) >     return; >   >   die (_("failed to create IPset control socket: %s"), NULL, EC_MISC); > > It is about RAW check or something? I am a total novice of C language... > > It's first time i use mail list, it's right to reply all? > &g

Re: [Dnsmasq-discuss] Compile with HAVE_IPSET on kernel 3.0.x problem

2014-02-15 Thread Hartmut Krafft
Hi! Do you have ipset installed correctly? You need a kernel module and an admin program called ipset. You first need to create your ipsets using this program (man ipset). Only then you can use them in dnsmasq. You can check if the IP set was created correctly by issuing ipset -l gfwlist (or ano

Re: [Dnsmasq-discuss] Ipset question

2014-01-18 Thread Hartmut Krafft
On Fri, 17 Jan 2014 13:26:49 + Simon Kelley wrote: > On 14/01/14 16:01, Hartmut Krafft wrote: > > Dear all, I'm wondering about a limitation in the ipset option and > > if there would be a way to get around it. > > > > I'm using an ip set to get all

[Dnsmasq-discuss] Ipset question

2014-01-14 Thread Hartmut Krafft
Dear all, I'm wondering about a limitation in the ipset option and if there would be a way to get around it. I'm using an ip set to get all IP adresses associated with a certain domain 'www.domain.tld' to be able to redirect all traffic to certain ports on these addresses through an ssh tunnel. T