[Dnsmasq-discuss] interface-name=name, interface should also create AAAA record, if available

2013-07-16 Thread Uwe Schindler
Hi, The config option: interface-name=name,interface should in my opinion also create an record for the given interface, if a global ipv6 address is assigned, so the name returns both A and records. Would this be hard to do? Thanks for the great software, Uwe - Uwe Schindler

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-16 Thread Uwe Schindler
previous radvd installation uses: MinRtrAdvInterval 3; MaxRtrAdvInterval 10; I just wanted to have a similar setup on dnsmasq, which was only possible by patching the header file and recompiling dnsmasq. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u

Re: [Dnsmasq-discuss] replace radvd with dnsmasq

2013-07-22 Thread Uwe Schindler
to the network adaptor, otherwise dnsmasq prints out a warning that it cannot find a valid prefix/range.. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: dnsmasq-discuss-boun...@lists.thekelleys.org.uk

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-24 Thread Uwe Schindler
Hi, RA's are not the same as DHCP, there's no such thing as a lease time. What there is, is preferred and valid lifetimes. What should happen is that when old address is about to go away, the address for that prefix on the network adaptor should have its preferred lifetime set to zero,

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-25 Thread Uwe Schindler
On 24/07/13 19:16, Uwe Schindler wrote: Hi, RA's are not the same as DHCP, there's no such thing as a lease time. What there is, is preferred and valid lifetimes. What should happen is that when old address is about to go away, the address for that prefix on the network adaptor

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-25 Thread Uwe Schindler
testing box). Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: dnsmasq-discuss-boun...@lists.thekelleys.org.uk [mailto:dnsmasq- discuss-boun...@lists.thekelleys.org.uk] On Behalf Of Uwe Schindler Sent

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-25 Thread Uwe Schindler
Hi, On 24/07/13 19:16, Uwe Schindler wrote: Hi, RA's are not the same as DHCP, there's no such thing as a lease time. What there is, is preferred and valid lifetimes. What should happen is that when old address is about to go away, the address for that prefix on the network adaptor

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-25 Thread Uwe Schindler
Hi, On 25/07/13 11:59, Uwe Schindler wrote: Hi again, In addition, I found a relic from the time when the RA_INTERVAL value was hardcoded into radv.c. There is still one: Line 294: put_opt6_long(1800); /* lifetime - twice RA retransmit */ Should be: put_opt6_long(RA_INTERVAL * 2

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-25 Thread Uwe Schindler
would provide support for this). Radvd does it - see DeprecatePrefix options in radvd. Uwe On 24/07/13 19:16, Uwe Schindler wrote: Hi, RA's are not the same as DHCP, there's no such thing as a lease time. What there is, is preferred and valid lifetimes. What should happen

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-26 Thread Uwe Schindler
will appear later. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: Simon Kelley [mailto:si...@thekelleys.org.uk] Sent: Friday, July 26, 2013 3:03 PM To: Uwe Schindler Cc: dnsmasq-discuss

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-26 Thread Uwe Schindler
deprecated, so all is fine now. One thing I found in my investigations: The lifetime given in the dhcp-range for IPv6 oly affects the RAs, but not the time for refreshing the DHCP information request. I had to set it explicitely as dhcp-option6. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-26 Thread Uwe Schindler
. - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: dnsmasq-discuss-boun...@lists.thekelleys.org.uk [mailto:dnsmasq- discuss-boun...@lists.thekelleys.org.uk] On Behalf Of Uwe Schindler Sent: Friday, July 26, 2013

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-27 Thread Uwe Schindler
. If it is explicitely given, of course use the information from option6:information-refresh-time setting. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: Simon Kelley [mailto:si...@thekelleys.org.uk] Sent

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-27 Thread Uwe Schindler
Hi, Regarding the Android-Bug: I found out that I still have to enable the fast mode (which is only done in the first minute after a config change). The reason is: Although the prefix has a lifetime of 86400 on my dhcp-range, in contrast, the router itself gets a lifetime of 1800

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-27 Thread Uwe Schindler
Hi, I found the reason for this bug: One small thing with your new code - maybe a bug, because the comment says something else: Although the configured (in my config) valid_lifetime of the prefix is now lower (30 mins on my machine), after deprecation it raises the valid_lifetime again up

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-29 Thread Uwe Schindler
Hi Simon, I did a git pull yesterday evening and problem was already fixed. Many thanks! Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: Simon Kelley [mailto:si...@thekelleys.org.uk] Sent: Monday

Re: [Dnsmasq-discuss] Make RA_INTERVAL configureable? Deprecate old prefixes?

2013-07-29 Thread Uwe Schindler
Hi Simon, I want to try and avoid making every parameter changable, like Radv does. Who can tell what the parameters should be. A flag which says stay in fast retransmit mode to fix buggy android seems much more sensible. That is perfectly fine! So a boolean option to work around the

Re: [Dnsmasq-discuss] Non-standard port and resolv.conf file

2013-08-28 Thread Uwe Schindler
Hi, I don’t think this should be fixed at all, because it violates the „official“ format of resolv.conf, see man page. A resolv.conf file modifies like this could not be read by libc’s resolver functions. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http

Re: [Dnsmasq-discuss] Questions about Adding IPv6 External DNS Servers to dnsmasq

2013-10-03 Thread Uwe Schindler
, they have to fix this, too - but it is out of your control. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de -Original Message- From: dnsmasq-discuss-boun...@lists.thekelleys.org.uk [mailto:dnsmasq- discuss-boun

Re: [Dnsmasq-discuss] can't take away IPv4 address

2015-08-26 Thread Uwe Schindler
Hi Harald, Dnsmasq does the check which the standards require, which is to send an ICMP ping (echo request) to the address it's about to allocate. The fact that the client doesn't respond would seem to indicate that the clients are NOT using IP addresses after the lease has expired.

Re: [Dnsmasq-discuss] prohibit ipv6 for some clients

2015-09-10 Thread Uwe Schindler
g, connect with that IPv4-only SSID. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Dnsmasq-discuss [mailto:dnsmasq-discuss- > boun...@lists.thekelleys.org.uk] On Behalf Of ? > Sen

[Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
is is another one where dnssec fails, so clearly a bug. There is a test page about exactly that case, which fails for me when resolving through dnsmasq: http://0skar.cz/dns/en/ Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de

Re: [Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
Please note: I fixed the example domain to have a real A record. Try any other fake name instead: e.g., "dummy.pangaea.de", also referring to wildcard domain. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Ori

Re: [Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
an inform us which commit fixed this issue. Thanks for the quick reply! Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Kevin Darbyshire-Bryant [mailto:ke...@darbyshire-bryant.me.uk] > Se

Re: [Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
Hi, Was there a change in dnsmasq related to this? Would be good to get some feedback. I'll try this version now. Currently I am running 2.75 (Debian testing pkg 2.75-1) Do you have dnssec enabled? Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u

Re: [Dnsmasq-discuss] CPU spin in master

2016-01-04 Thread Uwe Schindler
Hi, I'll try. Unfortunately I have to provoke the spinning somehow. I just installed the test version, was happy, and a few minutes back it was no longer responding. TOP showed 99% CPU. By the way, box is a VIA C7 standard x86 box (32 bits), not MIPS like Kevin's. Uwe - Uwe Schindler H

Re: [Dnsmasq-discuss] CPU spin in master

2016-01-04 Thread Uwe Schindler
Hi, ALARM: I compiled "2.76test3" and now it is spinning with 100% CPU on my box, box responds slow or not at all on DNS query. Was the fix included in "test3"? I updated from 2.75 to 2.76test3 because of the previously mentioned wildcard dnssec issue. Uwe - Uwe S

Re: [Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
t, > I can validate everything that Google DNS validates. > > Cheers, > > Simon. > > > > On 04/01/16 14:48, Uwe Schindler wrote: > > Hi, > > > > I found out that resolving of DNSSEC signed wildcard domains does > > not work correctly with d

Re: [Dnsmasq-discuss] Wildcard Domain resolving does not work with DNSSEC

2016-01-04 Thread Uwe Schindler
), but it talked about CNAME's which were not used here. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Dnsmasq-discuss [mailto:dnsmasq-discuss- > boun...@lists.thekelleys.org.uk] On Behalf Of Sim

Re: [Dnsmasq-discuss] CPU spin in master

2016-01-04 Thread Uwe Schindler
Hi, Grabbed, compiled, and installed it. I'll report back. It is now in use on my router, so I'll see if anything like this happens again. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From:

Re: [Dnsmasq-discuss] DNSSEC on lookups of *.paypal.com no longer work

2016-05-14 Thread Uwe Schindler
Hi Simon, > > Well, that's the smoking gun. Dnsmasq is doing the right thing, and your > > upstream server at 212.202.215.1 is broken. I realise that doesn't solve > > the problem, but at least you know where to work now :) > > > > > > (the reason dnsmasq is returning SERVFAIL is that there's a >

Re: [Dnsmasq-discuss] DNSSEC on lookups of *.paypal.com no longer work

2016-05-04 Thread Uwe Schindler
Hi Simon, > Well, that's the smoking gun. Dnsmasq is doing the right thing, and your > upstream server at 212.202.215.1 is broken. I realise that doesn't solve > the problem, but at least you know where to work now :) > > > (the reason dnsmasq is returning SERVFAIL is that there's a >

Re: [Dnsmasq-discuss] Windows ipv6 hostname

2016-12-22 Thread Uwe Schindler
request only). Uwe - Uwe Schindler Achterdiek 19, D-28357 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Dnsmasq-discuss [mailto:dnsmasq-discuss- > boun...@lists.thekelleys.org.uk] On Behalf Of Pali Rohár > Sent: Thursday, December 22, 2

Re: [Dnsmasq-discuss] Windows ipv6 hostname

2016-12-22 Thread Uwe Schindler
Hi, > > Windows hosts generally have 2 problems, so assigning a DNS name with > > IPv6 address using "ra-names" only works under the following > > circumstances: > > > > - The Windows firewall must allow ICMP Echo (PING) requests to go > > through (IPv6). And here comes the problem: By default

Re: [Dnsmasq-discuss] IPv6 host registration in DNS

2017-09-18 Thread Uwe Schindler
tion helps, Uwe - Uwe Schindler Achterdiek 19, D-28357 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Dnsmasq-discuss [mailto:dnsmasq-discuss- > boun...@lists.thekelleys.org.uk] On Behalf Of Robert N > Sent: Saturday, September 16, 2017

Re: [Dnsmasq-discuss] DHCPV6

2018-05-07 Thread Uwe Schindler
; ra-param=*,high,60,0 >>> >>> I changed the ra-param in an attempt to bypass the routers' RA. >>> >>> Option6 is working as expected. >>> >>> Any ideas, or am I just looking at a pipe dream (wanting host names >in >>> the pi-hole query log, ins

Re: [Dnsmasq-discuss] CERT Vulnerability VU#598349

2018-09-09 Thread Uwe Schindler
Hey, > > The question is, should the above configuration be "baked in" to the code? > > As I understand, this vulnerability arises from the Web Proxy Automatic > Discovery (WPAD) protocol, not from dnsmasq itself. And, dnsmasq > configuration provides - or will provide - a configuration

Re: [Dnsmasq-discuss] clients of DHCPv6 with constructed IPv6 address range are not notified on address range change

2018-09-10 Thread Uwe Schindler
ime. E.g., if router advertisements last a maximum time of 30 minutes, also set the lease time to 30 minutes for IPv6. This requires clients to renew more often, but the change gots faster. If you force the router to disconnect during nights at a fixed time, the effect won't be so large. Uwe - Uwe Sch

Re: [Dnsmasq-discuss] Ready for dnssec key signing key rollover on Oct 11?

2018-10-08 Thread Uwe Schindler
in the debian package to have the correct path in the default file (instead of %%PREFIX%%). This looks like a bug in the debian package installer. Uwe - Uwe Schindler Achterdiek 19, D-28357 Bremen http://www.thetaphi.de <http://www.thetaphi.de/> eMail: u...@thetaphi.de From: D

Re: [Dnsmasq-discuss] Why does dnsmasq append .home to a plain hostname?

2019-10-22 Thread Uwe Schindler
. If you want “.ncp” your preferred domain, set “domain = ncp” and only keep the first entry. Uwe - Uwe Schindler Achterdiek 19, D-28357 Bremen https://www.thetaphi.de eMail: u...@thetaphi.de From: Dnsmasq-discuss On Behalf Of Sean Warner Sent: Tuesday, October 22, 2019 2:25 AM

Re: [Dnsmasq-discuss] How to prevent LAN DNS for remote guests

2019-12-22 Thread Uwe Schindler
-interfaces) option. Uwe - Uwe Schindler Achterdiek 19, D-28357 Bremen <https://www.thetaphi.de> https://www.thetaphi.de eMail: u...@thetaphi.de From: Dnsmasq-discuss On Behalf Of Koos Pol Sent: Saturday, December 21, 2019 9:11 AM To: dnsmasq-discuss@lists.thekelleys.org.uk S

Re: [Dnsmasq-discuss] Prefix delegation with DNSmasq

2020-04-12 Thread Uwe Schindler
Hi, > thanks for the elaborate reply! No problem! > There's a slightly more special case for us: We have one central firewall > (which > gets the full /56 net on the upstream interface routed to it) and most > gateways > are separate nodes > (i.e. most VLANs are not connected to the central

Re: [Dnsmasq-discuss] Prefix delegation with DNSmasq

2020-04-12 Thread Uwe Schindler
Hi > I have a setup in mind and wonder whether dnsmasq is the correct tool (since I > have not found the necessary functionality in the documentation yet). > > We have a /56 IPv6 network, and plan to use pure DHCPv6 (no stateless > autoconfiguration) in several /64 networks. That's perfect.

Re: [Dnsmasq-discuss] Prefix delegation with DNSmasq

2020-04-12 Thread Uwe Schindler
Hi, although this is no longer fully related to dnsmasq, just a few sentences on top: > >> There's a slightly more special case for us: We have one central firewall > (which > >> gets the full /56 net on the upstream interface routed to it) and most > gateways > >> are separate nodes > >> (i.e.

Re: [Dnsmasq-discuss] Implement --no-dns-interface?

2023-04-21 Thread Uwe Schindler
ilman/listinfo/dnsmasq-discuss -- Uwe Schindler Achterdiek 19, D-28357 Bremen https://www.thetaphi.de eMail:u...@thetaphi.de ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss

Re: [Dnsmasq-discuss] dnsmasq 2.90 reply truncated

2024-03-12 Thread Uwe Schindler
cuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-disc

Re: [Dnsmasq-discuss] Where does dnsmasq get upstream DNS servers by default?

2022-05-29 Thread Uwe Schindler via Dnsmasq-discuss
search zbmc.eu Which is a bit odd since I don't have resolvconf. The system works OK, DNS works, but I'd like to know how. -- Uwe Schindler Achterdiek 19, D-28357 Bremen https://www.thetaphi.de eMail: u...@thetaphi.de ___ Dnsmasq-discus

Re: [Dnsmasq-discuss] Where does dnsmasq get upstream DNS servers by default?

2022-05-29 Thread Uwe Schindler via Dnsmasq-discuss
nameserver 127.0.0.1 search zbmc.eu Which is a bit odd since I don't have resolvconf. The system works OK, DNS works, but I'd like to know how. -- Uwe Schindler Achterdiek 19, D-28357 Bremen https://www.thetaphi.de eMail: u...@thetaphi.de ___ Dnsmasq-