Re: [Dnsmasq-discuss] Move 'dnssec time check enable' from SIGHUP to SIGUSR2

2018-01-15 Thread Kevin Darbyshire-Bryant


> On 15 Jan 2018, at 23:27, Simon Kelley  wrote:
> 
> 
>> 
>> Beyond “gaaahh why didn’t I think of SIGINT”….. excellent.  Understand 
>> the reasoning, agree, running chez Kevin and backport for LEDE master 
>> submitted.
>> 
> 
> and there's still SIGQUIT available!
> 
> Out of interest, how does the LEDE plumbing deal with a restart of
> dnsmasq _after_ ntp  has established lock?

There’s an ntp hotplug script that creates a ‘time is valid’ flag file 
(/var/state/dnsmasqsec - being in /var means actually in tmp hence ram).  If 
the file doesn’t exist already on stratum change then a) it gets created and b) 
SIGINTs dnsmasq.   dnsmasq startup changes too… if the file doesn’t exist then 
it gets started with ‘—no-dnssec-timestamp’ expecting to be SIGINT’d by the 
hotplug script.  If dnsmasq gets (re)-started and ntpd hotplug has created our 
‘time valid’ file, then dnsmasq is started *without* —no-dnssec-timestamp’.  
There’s a whole raft of logic related to whether or not we’re using dnssec and 
quite what ntp client is being used.

The SIGINT support was committed to LEDE/openwrt master (rather than CC, 1701 
or whatever) around 60 minutes ago.


Cheers,

Kevin D-B

012C ACB2 28C6 C53E 9775  9123 B3A2 389B 9DE2 334A



signature.asc
Description: Message signed with OpenPGP
___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] Move 'dnssec time check enable' from SIGHUP to SIGUSR2

2018-01-15 Thread Simon Kelley

> 
> Beyond “gaaahh why didn’t I think of SIGINT”….. excellent.  Understand 
> the reasoning, agree, running chez Kevin and backport for LEDE master 
> submitted.
> 

and there's still SIGQUIT available!

Out of interest, how does the LEDE plumbing deal with a restart of
dnsmasq _after_ ntp  has established lock?

I've dogfooded the latest code into the boat's router which is running
Chaos Calmer, and added a hotplug script which works great at startup
when ntp comes alive after dnsmasq, but if I restart dnsmasq, there's
nothing to tell dnsmasq that the time is already valid.

Cheers,

Simon.




signature.asc
Description: OpenPGP digital signature
___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss


[Dnsmasq-discuss] IPv6 Router Advertisements not working

2018-01-15 Thread Matthew Keeler
I setup a new vm running version 2.78 of dnsmasq.

I have this in my config:

enable-ra
dhcp-range=fd01::,ra-stateless,ra-names,64,24h

According to running dnsmasq in the foreground with -d

dnsmasq-dhcp: DHCPv6 stateless on fd01::
dnsmasq-dhcp: DHCPv4-derived IPv6 names on fd01::
dnsmasq-dhcp: router advertisement on fd01::
dnsmasq-dhcp: IPv6 router advertisement enabled

However I never see logs about sending router advertisements or receiving
router solicitations. I also confirmed they aren’t going out with
Wireshark. Are there any reasons why this wouldn’t work or does anyone know
what else I should look into to figure it out.

-- 
Matthew Keeler
___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss


Re: [Dnsmasq-discuss] Move 'dnssec time check enable' from SIGHUP to SIGUSR2

2018-01-15 Thread Kevin Darbyshire-Bryant


> On 14 Jan 2018, at 22:12, Simon Kelley  wrote:
> 
> Right, I thought about this again, and concluded that whilst sharing the
> "now use the time" function with something other than "reload loads of
> stuff" is an improvement, it doesn't really get us that much farther to
> share with something else, since conflicts could still arise.

> Given that this is a meant to be a definitive solution, I judge it's
> worth taking the one-time backward compatibility hit, and have left out
> the ability to select which signal to use.
> 
> http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=3c973ad92d317df736d5a8fde67baba6b102d91e
> 
> 
> Comments?

Beyond “gaaahh why didn’t I think of SIGINT”….. excellent.  Understand the 
reasoning, agree, running chez Kevin and backport for LEDE master submitted.

Thank you muchly.

Cheers,

Kevin D-B

012C ACB2 28C6 C53E 9775  9123 B3A2 389B 9DE2 334A



signature.asc
Description: Message signed with OpenPGP
___
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss