Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Hamish Moffatt
On 26/3/21 2:52 am, M. Buecher wrote: Android to my knowledge does not support DHCPv6, therefore it only retrieves DNS servers via RDNSS of RAs. RAs are generic and not per client, therefore assigning different DNS servers via RDNSS/RA is not possible. Even if dnsmasq could disable RDNSS

Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread M. Buecher
On 2021-03-25 15:14, Erik Edwards via Dnsmasq-discuss wrote: The line "enable-ra" is directing dnsmasq to act as a "router advertising daemon". The advertisement sent will include the RDNSS default address(es). This is how IPv6 works. If the __client__ can ignore the RDNSS in the RA packet

Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Erik Edwards via Dnsmasq-discuss
The line "enable-ra" is directing dnsmasq to act as a "router advertising daemon". The advertisement sent will include the RDNSS default address(es). This is how IPv6 works. If the /_client_/ can ignore the RDNSS in the RA packet then the DHCPv6 might have a chance of doing what you want. In

Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Hamish Moffatt
Hi Petr, I left out that bit of the config as it seemed to be matching OK - the IPv4 DHCP option is set as expected. dhcp-host=28:24:FF:FF:25:0D,set:adblock,tv dhcp-host=04:33:C2:E4:3D:F6,set:adblock,wombat dhcp-option=tag:adblock,6,192.168.42.18

[Dnsmasq-discuss] Recently announced nettle vulnerability

2021-03-25 Thread Petr Menšík
Hi, It is not related directly, but nettle is used by dnsmasq. An upgrade might be required, checkout the update. Check announcement [1] or Red Hat bug [2]. Anyone using dnssec should check for upgrades. 1. https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009457.html 2.

Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Petr Menšík
Hi Hamish, I don't see any set:adblock on any host. How are selected hosts, which should receive adblock server? --log-dhcp might help to log also tags obtained for each requests. It should help you checking selected hosts got assigned adblock tag to whatever rule you have used. And then just

Re: [Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Hamish Moffatt
On 25/3/21 7:50 pm, Hamish Moffatt wrote: How is Android always learning of the dnsmasq server itself as the DNS server, and can I fix it? Forgot to add, my dnsmasq is provided by OpenWRT (latest release 19.07.7): Dnsmasq version 2.80  Copyright (c) 2000-2018 Simon Kelley Compile time

[Dnsmasq-discuss] override DNS server for particular hosts on IPv6

2021-03-25 Thread Hamish Moffatt
I'm attempting to override the DNS server for a few hosts on both IPv4 and IPv6. I've tagged the hosts and applied dhcp-option to that tag and it's working correctly for IPv4, but I'm not having much luck with IPv6. I'll admit right now that I don't fully understand the use of DHCPv6 and how