Re: [Dnsmasq-discuss] No DNS server assigned to dhcp clients if port != 53 in dnsmasq.conf

2018-06-30 Thread richardvo...@gmail.com
Because the DHCP "name-server" attribute (option 6) carries only an IP address and not a port, this isn't going to work. The DHCP clients simply aren't written to configure DNS on any port other than 53. Now, if your intent is for DHCP clients to use a different DNS server on the same host, one t

Re: [Dnsmasq-discuss] Re-compile DNSMasq with Visual C

2017-11-26 Thread richardvo...@gmail.com
> > > > Start with it. > > Learn that you are compiling sources for UNIX system on a Microsoft > Windows system. > > Find a UNIX ( Linux / BSD ) system, have clean compile in no time. > > Make the code changes that you want to make on the UNIX system. > The last point is optional, there's no reaso

Re: [Dnsmasq-discuss] [RFC] dns: add option to ban domains

2017-08-09 Thread richardvo...@gmail.com
> > > How is the 'ban-hosts' file updated? Does it need a SIGHUP to dnsmasq > (please not another thing hanging off SIGHUP) Does it need a complete > restart? > > If 'ban-hosts' can be dynamically updated then I can see some value in it, > until then it looks like it's a syntax nicety. Perhaps t

Re: [Dnsmasq-discuss] Dnsmaq giving default gateway address as dns server on DHCP offer

2017-08-06 Thread richardvo...@gmail.com
asq(killing PID and starting commandline) it > works. Do you have any clue? > > Any help is much appreciated. > > Thanks, > Anoop > > On 8/6/17, richardvo...@gmail.com wrote: > > One clear difference is that the query that succeeded is for a different > > name than

Re: [Dnsmasq-discuss] Dnsmaq giving default gateway address as dns server on DHCP offer

2017-08-06 Thread richardvo...@gmail.com
The default configuration of dnsmasq is to act as a caching proxy server (this behavior of dnsmasq has existed before dhcp support). There are a few reasons the proxying could fail, chief among them being firewall rules. If that isn't the problem, increasing the logging detail may give further cl

Re: [Dnsmasq-discuss] Dnsmaq giving default gateway address as dns server on DHCP offer

2017-08-05 Thread richardvo...@gmail.com
dnsmasq is capable of being the first DNS for clients and determining which requests should go to the AD controller and which to external DNS. Or, the configuration you describe is also possible. Where Ravi appears to have gone wrong is in thinking that /etc/resolv.conf addresses would be sent t

Re: [Dnsmasq-discuss] can't get multiple domains to work

2017-02-20 Thread richardvo...@gmail.com
Have you tried using more than one domain= line? On Mon, Feb 20, 2017 at 6:57 PM, Spike wrote: > Dear all, > > first time poster here so first things first, thanks to all of you that > have worked on dnsmasq, all of us here have greatly benefited for years > from this great piece of software. >

Re: [Dnsmasq-discuss] [OT] A question about MX records

2017-02-19 Thread richardvo...@gmail.com
If by "alias", you mean a second A record for 84.92.49.234, then the common practice is to use a hostname of mail.domain.tld If by "alias", you mean a CNAME, you should know that listing a CNAME in an MX record violates the RFC. It often works, but some servers check for this and reject all mail

Re: [Dnsmasq-discuss] MAC address resolution of virtual machines

2016-08-29 Thread richardvo...@gmail.com
Not relevant to the issue you still face, but I just wanted to point out that triggering commands (such as iptables rule creation) based on leases being issued can be done using either the dhcp-script or DBus messaging, without having to hack the dnsmasq code itself. Actually, looking at the man p

Re: [Dnsmasq-discuss] DHCP packet received on which has no address

2016-08-28 Thread richardvo...@gmail.com
On Thu, Aug 25, 2016 at 11:57 AM, Albert ARIBAUD wrote: > Le Thu, 25 Aug 2016 18:45:09 +0200 > Albert ARIBAUD a écrit: > > > > eth0.3 which does not have an IP and netmask, and therefore rightly > > complain about that. > > (developing slightly) > > I do understand that most probably -- even tho

Re: [Dnsmasq-discuss] Many immortals slow down dnsmasq. Bug or expected ?

2015-10-05 Thread richardvo...@gmail.com
There are some awesome data structures for simultaneously matching against huge numbers of patterns (as opposed to literal fixed strings). dnsmasq would get a lot more complicated if it tried to implement them, and complication in an internet-facing daemon is a "BAD thing" because it increases the

Re: [Dnsmasq-discuss] Selective logging for "log-queries"

2015-06-22 Thread richardvo...@gmail.com
> Le Sun, 21 Jun 2015 20:23:27 -0500, "richardvo...@gmail.com" > a écrit : > > > Configure dnsmasq to log via syslog, and filter there. > > > > The relevant configuration option is: > > > > *-8, --log-facility=* Set the facility to which dnsmasq wil

Re: [Dnsmasq-discuss] Selective logging for "log-queries"

2015-06-21 Thread richardvo...@gmail.com
Configure dnsmasq to log via syslog, and filter there. The relevant configuration option is: *-8, --log-facility=* Set the facility to which dnsmasq will send syslog entries, this defaults to DAEMON, and to LOCAL0 when debug mode is in operation. If the facility given contains at least one '/' ch

Re: [Dnsmasq-discuss] Kind request regarding Dnsmasq's Dns response auto caching feature not working

2015-05-30 Thread richardvo...@gmail.com
Because of your configuration, none of those packets are going to dnsmasq at all. The problem is this line. listen-address=127.0.0.1 On Sat, May 30, 2015 at 5:21 PM, Joyabrata Ghosh wrote: > Dear Dnsmasq Experts, > > Myself new to Dnsmasq and facing issues in personally evaluating Auto > Cachi

Re: [Dnsmasq-discuss] DBus API

2015-05-22 Thread richardvo...@gmail.com
> > I can see why rereading *all* configuration would require root > privileges, but certainly a simple refresh of the DNS information > doesn't since that would just update internal structures and not require > opening any additional ports, since they would already be open. > > Dan > > dnsmasq alr

Re: [Dnsmasq-discuss] DBus API

2015-05-21 Thread richardvo...@gmail.com
> > For the short term, NM does have an /etc/NetworkManager/dnsmasq.d > directory where you can toss dnsmasq config files, which NM will pass to > dnsmasq when it spawns it. Unfortunately, because D-Bus gets used on > Ubuntu and dnsmasq isn't respawned on changes, that won't work for you. > Ideall

Re: [Dnsmasq-discuss] Any way to set the lease-time for hosts derived from /etc/ethers?

2015-05-08 Thread richardvo...@gmail.com
On Fri, May 8, 2015 at 2:35 PM, Simon Kelley wrote: > On 04/05/15 12:42, Rick Thomas wrote: > > > > Is there any way to set the lease time for a client derived from the > > /etc/ethers file? > > > > I can set a lease time for a lease derived from a “dhcp-range” or > > “dhcp-host” config statement

Re: [Dnsmasq-discuss] Thanks and question

2015-02-10 Thread richardvo...@gmail.com
You're imagining the "reserved range". The --dhcp-host configuration option of dnsmasq will reserve an address. --dhcp-range=static will not. Simon just explained that adding a pool automatically starts serving static addresses in the remainder of the subnet, so your "dynamic from .1 to .99 and r

Re: [Dnsmasq-discuss] Secondary dnsmasq server?

2014-10-02 Thread richardvo...@gmail.com
If dnsmasq had every imaginable feature, like syncing the DHCP lease list for failover, then it would no longer be "easy and small". You can, however, do something almost as good: * Don't use dhcp-authoritative * Give each of the two servers non-overlapping pools of addresses Just a quick questio

Re: [Dnsmasq-discuss] Shellshock.

2014-09-30 Thread richardvo...@gmail.com
> Although, to be honest, although the DHCP vector is trivial to exploit > [1], if the attacker can give you a bogus DHCP reply you've lost already. > > At this point, the attacker already has a full man-in-the-middle of all > network traffic, and can easily launch invisible attacks on clients (e.g

Re: [Dnsmasq-discuss] Shellshock.

2014-09-30 Thread richardvo...@gmail.com
The problem is that there seems to be no standard for what characters have special meaning in environment variables (other than the usual "none do" which bash is violating here). Without that, or at least a guarantee that certain character AREN'T special, it's not possible to sanitize. On Tue, Se

Re: [Dnsmasq-discuss] Shellshock.

2014-09-26 Thread richardvo...@gmail.com
I know this could be found in the code, and my own systems have busybox not bash, but I thought I'd ask for general interest: Is this a matter only of the shebang line in the script, or does dnsmasq use `system()` to run it, meaning that control passes through the user's login shell before transfe

Re: [Dnsmasq-discuss] ARP ignores DHCP ACKs !

2013-12-24 Thread richardvo...@gmail.com
I agree that *not* responding is the correct and required behavior. Any response would indicate an address collision. On Tue, Dec 24, 2013 at 8:55 AM, Matthias Andree wrote: > Am 24.12.2013 13:35, schrieb Nikita N.: > > Hi :) Im having a strange issue here with DHCP/ARP I cant solve.. > > DHCP

Re: [Dnsmasq-discuss] DNSMasq and DNS reflection attacks

2013-10-24 Thread richardvo...@gmail.com
1 PM, Brian Rak wrote: > On 10/24/2013 4:40 PM, richardvo...@gmail.com wrote: > > Sorry, I should mention only drop packets in state "NEW", you don't want > to drop replies to your own queries. > > > On Thu, Oct 24, 2013 at 3:39 PM, richardvo...@gmail.com <

Re: [Dnsmasq-discuss] DNSMasq and DNS reflection attacks

2013-10-24 Thread richardvo...@gmail.com
Sorry, I should mention only drop packets in state "NEW", you don't want to drop replies to your own queries. On Thu, Oct 24, 2013 at 3:39 PM, richardvo...@gmail.com < richardvo...@gmail.com> wrote: > Your case should be easy to stop with a firewall rule. Just block al

Re: [Dnsmasq-discuss] DNSMasq and DNS reflection attacks

2013-10-24 Thread richardvo...@gmail.com
Your case should be easy to stop with a firewall rule. Just block all packets matching the dns listen port (53 usually) in the INPUT chain, where the source address is outside your block. Optionally (this prevents reflection attacks against your own network which you said is not required), config

Re: [Dnsmasq-discuss] requested explanation of undocumented feature

2013-10-14 Thread richardvo...@gmail.com
BTW this message was wrong. Use tag:interfacenamehere to match against the name of a network interface. So tag:eth0 or tag:wlan0 I don't know where the "dhcp-range=interface:ethN,192.168.1.100, 192.168.1.200" came from. On Mon, Oct 14, 2013 at 5:19 PM, richardvo...@gmail.

Re: [Dnsmasq-discuss] requested explanation of undocumented feature

2013-10-14 Thread richardvo...@gmail.com
a tag whose name is the name of the interface on which the request arrived is also set. On Mon, Oct 14, 2013 at 5:41 PM, richardvo...@gmail.com < richardvo...@gmail.com> wrote: > You forgot to cc the list. > > Network interfaces are not tags that can be manipulated with tag:/set:/n

Re: [Dnsmasq-discuss] requested explanation of undocumented feature

2013-10-14 Thread richardvo...@gmail.com
;interface:eth ' - searched for it, no joy in man pages, no example, not > much by Google either. > > And so, this is a formal request to add to the documentation, please. > > Thanks, > Jim A. > > > On Mon, Oct 14, 2013 at 6:19 PM, richardvo...@gmail.com < &g

Re: [Dnsmasq-discuss] requested explanation of undocumented feature

2013-10-14 Thread richardvo...@gmail.com
Do you know what a "network interface" is? set: and match: allow you to match tag names defined in your configuration, plus a small set predefined by dnsmasq interface: allows you to match against the name external software (typically udev) gave to the network interface On Mon, Oct 14, 2013 at

Re: [Dnsmasq-discuss] Enable HAVE_IPSET by default

2013-04-11 Thread richardvo...@gmail.com
All of this suggests that to minimize the number of combinations but not bloat the binary, there ought to be a `MINIMAL` or `TEENY_TINY` macro that unsets HAVE_IPSET and a bunch of other similar non-critical features. On Thu, Mar 21, 2013 at 6:23 AM, Kevin Darbyshire-Bryant wrote: > On 21/03/2013

Re: [Dnsmasq-discuss] How to set only one subdomain pointed to one address.

2013-02-04 Thread richardvo...@gmail.com
Have you tried making an entry in /etc/hosts (or whatever your dnsmasq hostsfile setting is) ? On Sun, Feb 3, 2013 at 5:22 PM, Jorge Sivil wrote: > Hi, I've used the 'address' configuration to resolve > redmine.server.intranet but when I ping to *.redmine.server.intranet > it resolves OK and I

Re: [Dnsmasq-discuss] (no subject)

2013-01-17 Thread richardvo...@gmail.com
d sleep after the HUP to try to give it time to start > back up. > > Ideas? > > Eric > > > On Thu, Jan 17, 2013 at 11:19 AM, richardvo...@gmail.com < > richardvo...@gmail.com> wrote: > >> From your symptoms, I believe you aren't sending SIGHUP correctly,

Re: [Dnsmasq-discuss] (no subject)

2013-01-17 Thread richardvo...@gmail.com
>From your symptoms, I believe you aren't sending SIGHUP correctly, and dnsmasq picks up the change after a minute due to its /etc/hosts polling. dnsmasq uses multiple processes when seteuid behavior is enabled, so you might be signalling the wrong one. On Thu, Jan 17, 2013 at 11:51 AM, Eric Van

Re: [Dnsmasq-discuss] DMZ IP allocations

2012-12-20 Thread richardvo...@gmail.com
Try removing the static dhcp-range entirely. Reserved addresses don't have to be in a pool, just on a network where DHCP is enabled. Which the other line already does. In cases where you do need the static dhcp-range (there is no pool on that interface), it's customary to specify just a single a

Re: [Dnsmasq-discuss] DNS server order is not being honored

2012-12-11 Thread richardvo...@gmail.com
But note that a better solution is to set specific nameservers for the local domain only. Read the dnsmasq man page, you'll learn how to do this and lots more. On Tue, Dec 11, 2012 at 1:17 PM, richardvo...@gmail.com < richardvo...@gmail.com> wrote: > Unless you're using the

Re: [Dnsmasq-discuss] DNS server order is not being honored

2012-12-11 Thread richardvo...@gmail.com
Unless you're using the strict-order option and still seeing the order change, this is not a bug. *-o, --strict-order*By default, dnsmasq will send queries to any of the upstream servers it knows about and tries to favour servers that are known to be up. Setting this flag forces dnsmasq to try eac

Re: [Dnsmasq-discuss] DNS - preventing escalation to external

2012-12-05 Thread richardvo...@gmail.com
. Maybe something I > can/should do in my hosted DNS entries? > > ** ** > > I would like to understand how a specific name (like myhostess or > myhostess.Z.com) can resolve to a generic name like Z.com. I thought DNS > strictly avoids that; not true? > > ** ** > >

Re: [Dnsmasq-discuss] DNS - preventing escalation to external

2012-12-04 Thread richardvo...@gmail.com
Sounds like a search suffix is getting involved: After failing to find myhostess. your resolver looks for myhostess.X.com. which finds the alias. /etc/resolv.conf should contain the directives which control search suffix. On Tue, Dec 4, 2012 at 4:44 PM, Lovelady, Dennis E. wrote: > I run a dom

Re: [Dnsmasq-discuss] dnsmasq configuration

2012-12-04 Thread richardvo...@gmail.com
generated route for the local subnet. > ** > > > > *From:* dnsmasq-discuss-boun...@lists.thekelleys.org.uk [mailto: > dnsmasq-discuss-boun...@lists.thekelleys.org.uk] *On Behalf Of * > richardvo...@gmail.com > *Sent:* Tuesday, December 04, 2012 3:20 PM > *To:* Ritesh Nanda &g

Re: [Dnsmasq-discuss] dnsmasq configuration

2012-12-04 Thread richardvo...@gmail.com
On Thu, Nov 29, 2012 at 8:31 AM, Ritesh Nanda wrote: > hello, > > I am working on openstack , which uses dnsmasq as a dhcp server. > Here is a challenge what i am facing , using dnsmasq configuration file i > am adding a default route to the vms that are created in this > enviornment, now challeng

Re: [Dnsmasq-discuss] adding interface to leases file

2012-11-13 Thread richardvo...@gmail.com
I was under the impression that: (1) This information is already available to the lease script (2) The leasefile database format is locked down for backwards compatibility. But maybe Simon can find a way to make it work. On Tue, Nov 13, 2012 at 4:17 PM, David Bird wrote: > Greetings, > > Firs

Re: [Dnsmasq-discuss] dnsmasq for road warriors

2012-11-12 Thread richardvo...@gmail.com
own resolver > > >no-resolv > > On Sat, Nov 10, 2012 at 05:46:10PM -0600, >richardvo...@gmail.com wrote: > > no-resolv is doing more harm than good. > > > > dnsmasq is smart enough to ignore 127.0.0.1 in /etc/resolv.conf > > And it will automatically pic

Re: [Dnsmasq-discuss] DNS mapping for a specific IP

2012-11-10 Thread richardvo...@gmail.com
You could use iptables to redirect DNS queries from that photo frame to an alternate dnsmasq instance, via port masquerade. On Sat, Nov 10, 2012 at 9:58 AM, Karina Goyal wrote: > > I need to do following DNS mapping in my router for all requests coming > from a specific computer/IP- > > 192.168

Re: [Dnsmasq-discuss] SUCCESS

2012-10-17 Thread richardvo...@gmail.com
> Now, I assume that all dhcmasq instantiations will each get copies of all > dhcp6 packets. > Unicast UDP doesn't guarantee that, usually a unicast packet is only delivered to one socket. ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys

Re: [Dnsmasq-discuss] Windows Server 2008 R2 issue

2012-10-15 Thread richardvo...@gmail.com
> The problem isn't the destination address, but the source, since we're >> trying to catch anyone spoofing the DHCP server, but I may be able to >> write an iptables rule to catch this case and change the source IP to be >> correct. >> > > Understood, in my experience firewalls which don't uncondi

Re: [Dnsmasq-discuss] dnsmasq caching lease file?

2012-10-15 Thread richardvo...@gmail.com
> > You're confusing configuration with DHCP leases. If you map an IP address > to MAC address in the nova-br100.conf file, then the VM will take out a > DHCP for a fixed time. Until that lease expires, the IP address will not be > given to another VM, even if you change the nova-br100.conf file. L

Re: [Dnsmasq-discuss] Repeated assignment, ignored dhcp-host, and failed DNS lookup

2012-10-08 Thread richardvo...@gmail.com
> How would I know if a rogue DHCP server has appeared on the net? I'm > assuming you're on the right track since the answer to the remaining > question is: > You can do a packet capture on the computer getting the wrong addresses (use wireshark for example) while running ipconfig /renew Look a

Re: [Dnsmasq-discuss] Pulling DHCP leases from an external script?

2012-10-05 Thread richardvo...@gmail.com
Non-authoritative summary: Data goes from the dnsmasq server, to an dnsmasq helper process with limited privileges, to the script. No data comes back from the script, except during the startup phase. This is a security feature. On Wed, Oct 3, 2012 at 2:14 PM, Brian Rak wrote: > I'm trying to

Re: [Dnsmasq-discuss] Mitel specific dhcp-options

2012-10-01 Thread richardvo...@gmail.com
On Mon, Oct 1, 2012 at 10:39 AM, Chris MacLean wrote: > Hi, > > Having some big problems with this and can't seem to make any headway. > > I'm specifying: > > dhcp-option=132,40 > > which I 'converted' from my old dhcpd configuration: > > option mitel-vlan-id code 132 = unsigned integer 32; > opt

Re: [Dnsmasq-discuss] Problem with OpenWRT + dnsmasq

2012-09-20 Thread richardvo...@gmail.com
name lookup. > > Wonder if I should stop using dnsmasq and go for dhcpcd, instead? > > Cheers > Juhani > > > -- > Juhani Talvela > Research Director, Faculty of Technology and Transport > Kymenlaakso University of Applied Sciences www.kyamk.fi > Tel: +358-

Re: [Dnsmasq-discuss] Problem with OpenWRT + dnsmasq

2012-09-16 Thread richardvo...@gmail.com
On Sun, Sep 16, 2012 at 1:01 PM, Juhani Talvela wrote: > Hi, > > I have a Netgear 3800 router running OpenWRT (earlier 10.03.1 and now > 12.09-beta version). I upgraded because there was and is a seriour problem. > When dnsmasq is running I have a constant load on my router processor of > about

Re: [Dnsmasq-discuss] [PATCH] Add support for autotools

2012-09-12 Thread richardvo...@gmail.com
> Autotools question: is it possible to provide the equivalent of the > BUILDDIR variable which provides an alternative location for .o files > and binaries, so they're not mixed with the source files. that makes > building different architectures in the same NFS-mounted source tree > easy, and is

Re: [Dnsmasq-discuss] [PATCH] Add support for autotools

2012-09-09 Thread richardvo...@gmail.com
Completely aside from arguments over the merits of autotools, this patch is not production-ready. It makes unrelated changes. Removal of the copyright notice is certainly not necessary for use of autotools. It breaks the documentation, which will no longer accurately describe the steps needed fo

Re: [Dnsmasq-discuss] dhcp logging and dhcp-range static configuration

2012-09-04 Thread richardvo...@gmail.com
On Tue, Sep 4, 2012 at 4:45 AM, Helmut Hullen wrote: > Hallo, Simon, > > Du meintest am 03.09.12: > >>> Is there a way to prevent logging the DHCPDISCOVER request for >>> unconfigured hardware address in dhcp-range static mode ? > >> Try > >> dhcp-ignore=!known > >> or possibly the old syntax > >>

Re: [Dnsmasq-discuss] server-side dynamic resolving

2012-08-14 Thread richardvo...@gmail.com
> standpoint. Anyway, this is particularly where I hit the issue and > realized that dnsmasq is *just* attempting lookups via hosts files and > dhpc leases and not additionally (or only) attempting nsswitch which > would obviously generally include the system's dns servers among other > things. I

Re: [Dnsmasq-discuss] increasing boot timeout

2012-08-07 Thread richardvo...@gmail.com
t; > // Naderan *Mahmood; > > > ____ > From: "richardvo...@gmail.com" > To: Mahmood Naderan > Cc: ""dnsmasq-discuss@lists.thekelleys.org.uk"" > > Sent: Monday, August 6, 2012 6:58 AM > Subject: Re: [Dnsmasq-dis

Re: [Dnsmasq-discuss] increasing boot timeout

2012-08-07 Thread richardvo...@gmail.com
ld say: > > 1. > > 2. The TFTP server has not started yet, so client should retry > 3. > > // Naderan *Mahmood; > > > - Original Message - > From: "richardvo...@gmail.com" > To: Mahmood Naderan > Cc: ""dnsmasq-discuss@lis

Re: [Dnsmasq-discuss] increasing boot timeout

2012-08-06 Thread richardvo...@gmail.com
Both (1) and (2) are client configuration... if the client had gotten any configuration options from dnsmasq at that point, there'd be no need to retry. On Sun, Aug 5, 2012 at 1:24 PM, Mahmood Naderan wrote: > Dear all, > We have setup a diskless cluster in which there is a server running dnsmaq

Re: [Dnsmasq-discuss] increasing boot timeout

2012-08-06 Thread richardvo...@gmail.com
> dhcp-host=00:e0:81:g6:42:4c,ws04,192.168.1.4 > dhcp-host=00:e0:81:g6:24:77,ws05,192.168.1.5 > > > So what is next? > > // Naderan *Mahmood; > > > - Original Message - > From: "richardvo...@gmail.com" > To: Mahmood Naderan > Cc: "dnsmasq-di

Re: [Dnsmasq-discuss] Round Robin ping

2012-07-26 Thread richardvo...@gmail.com
Need more information about the `ping` implementation you are using. Does it re-lookup the name for each echo request? Usually it will look up the name once and use that single address for all outgoing ICMP packets. On Wed, Jul 25, 2012 at 3:21 PM, James Brown wrote: > Hello, > > > > I’ve had a

Re: [Dnsmasq-discuss] is there anybody who can tell me how to read the source code?

2012-07-21 Thread richardvo...@gmail.com
Of course, tools like doxygen can help by automatically graphing the function call tree. On Fri, Jul 20, 2012 at 7:20 AM, SamLT wrote: > On Fri, Jul 20, 2012 at 09:26:03AM +0800, don wrote: >> i need to implement the dhcp function in one platform, but it's hard to read >> the source code of dnsm

Re: [Dnsmasq-discuss] static ip configuration

2012-07-18 Thread richardvo...@gmail.com
hostname -> IP mapping is DNS, not related to DHCP. dnsmasq adds DHCP information into the DNS zone. DHCP has to map the information provided by the client (that is a MAC address, quite reliable, and a client ID, quite unreliable) to an IP address to be offered. I guess you're wanting the client

Re: [Dnsmasq-discuss] Removing a feature does anyone rely on this?

2012-07-09 Thread richardvo...@gmail.com
On Mon, Jul 9, 2012 at 10:18 AM, Helmut Hullen wrote: > Hallo, richardvo...@gmail.com, > > Du meintest am 09.07.12: > >>> We wanted >>> >>> dhcp-range=192.168.0.10,static,infinite >>> # (192.168.0.0/24)

Re: [Dnsmasq-discuss] Removing a feature does anyone rely on this?

2012-07-09 Thread richardvo...@gmail.com
On Mon, Jul 2, 2012 at 11:16 AM, Helmut Hullen wrote: > Hallo, Simon, > > Du meintest am 02.07.12: > dhcp-range may have an interface name supplied as "interface:>> name>> ". > >>> I'd like to use this feature in many schools: >>> >>> eth0 and eth1 for the school clients in the LAN, eth2

Re: [Dnsmasq-discuss] dynamic file generation for dnsmasq-tftp?

2012-06-19 Thread richardvo...@gmail.com
Is any information about the remote end required for generating the dynamic part (e.g. the mac address of the node being booted)? On Tue, Jun 19, 2012 at 2:31 PM, Oliver Rath wrote: > Hi list, > > Im brooding over the problem, that dnsmasq should send via tftp a file > which would be generated at

Re: [Dnsmasq-discuss] issue with dhcp-option tags for dnsmasq

2012-06-18 Thread richardvo...@gmail.com
On Mon, Jun 18, 2012 at 2:51 PM, Drew Horn wrote: > Based on the dnsmasq man page, it appears that tags aren't working for > dhcp-options in dnsmasq-2.45.  Here's my understanding of how it should be > used: 2.45 is VERY old. The new syntax was introduced in 2.53 ___

Re: [Dnsmasq-discuss] A (possibly bad) idea: failover in dnsmasq

2012-05-28 Thread richardvo...@gmail.com
Configuration on a primary looks like --failover-listen= Configuration on a secondary looks like --failover-master=, >>> >>> >>> I think more consideration should go into the configuration command >>> names, since putting a "fallover-master" option on a secondary

Re: [Dnsmasq-discuss] Looking up local names doesn't work

2012-05-27 Thread richardvo...@gmail.com
On Sun, May 27, 2012 at 10:15 PM, ian wrote: > Hello > > I'm currently working a DNS server in a local area network. DHCP service > is given by another server which is not under my control. Names on the > internet are working fine, but looking up local names doesn't seem to work. > Does the DHC

Re: [Dnsmasq-discuss] A (possibly bad) idea: failover in dnsmasq

2012-05-26 Thread richardvo...@gmail.com
> Configuration on a primary looks like > > --failover-listen= > > Configuration on a secondary looks like > > --failover-master=, I think more consideration should go into the configuration command names, since putting a "fallover-master" option on a secondary is counter-intuitive. After all,

Re: [Dnsmasq-discuss] dnsmasq and sshfp records

2012-05-24 Thread richardvo...@gmail.com
dnsmasq doesn't use zone files. You can try with txt-record= (see the man page for details) On Thu, May 24, 2012 at 5:44 AM, Gerd Koenig wrote: > Hi List, > > I'm currently looking for a solution to provide ssh-keys via DNS. Seems like > sshfp records will solve this issue ... so far so good. >

Re: [Dnsmasq-discuss] DHCP message

2012-05-21 Thread richardvo...@gmail.com
On Mon, May 21, 2012 at 5:59 AM, Simon Kelley wrote: > On 21/05/12 11:34, Ian Rose wrote: >> Is it possible to send a message to the client device when an IP address >> is allocated via DHCP? This would only be a static info message for my >> purposes, and it wouldn't matter much if some clients d

Re: [Dnsmasq-discuss] standard gateway as Forwarding DNS-ip?

2012-05-18 Thread richardvo...@gmail.com
On Fri, May 18, 2012 at 7:09 AM, Oliver Rath wrote: > Hi list, > > my dnsmasq doesnt forward DNS-queries correctly. The goal is, that > dnsmasq takes the standard-gateway of dhcp as forwarding address for > dns-requests. But this didnt work here. In such a case, you configure your DHCP client t

Re: [Dnsmasq-discuss] help needed in dnsmasq problem

2012-05-17 Thread richardvo...@gmail.com
s like the > dnsmasq calls the DNS Server address "bad" and never tries them again, > because i  had a DNS server problem ...resolved it ...yet the dnsmasq > never could do DNS resolution after the DNS server problem was > resolved. > > On Thu, May 17, 2012 at

Re: [Dnsmasq-discuss] help needed in dnsmasq problem

2012-05-17 Thread richardvo...@gmail.com
what you think is not correct in conf file. > > Thanks. > > On Thu, May 17, 2012 at 12:29 PM, richardvo...@gmail.com > wrote: >> I think your configuration is wrong, but as a test, does the >> "strict-order" option fix your problem? >> >> On Thu, May

Re: [Dnsmasq-discuss] help needed in dnsmasq problem

2012-05-17 Thread richardvo...@gmail.com
I think your configuration is wrong, but as a test, does the "strict-order" option fix your problem? On Thu, May 17, 2012 at 9:38 AM, Atul Gupta wrote: > Hi, > One server in my dnsmasq.conf file is never tried for sending the query. > >   Below is my config file:- >   # Management DNS servers [2]

Re: [Dnsmasq-discuss] Problems with DHCP packets with broadcast flag enabled

2012-05-07 Thread richardvo...@gmail.com
Check if sending the DHCPOFFER fails (if for example, it is a renewal packet and therefore unicast rather than multicast, and it can't find a MAC address for that client because ARP is blocked). I think checking the return value from `sendto` should trap this scenario. If the DHCPOFFER packet doe

Re: [Dnsmasq-discuss] multiple ips

2012-04-26 Thread richardvo...@gmail.com
; wrote: >> > do you have experience with dhcp client about? if true, which? >> > >> > >> > On Thu, Apr 26, 2012 at 10:12 PM, richardvo...@gmail.com >> > wrote: >> >> >> >> Then you need to configure your client to make two

Re: [Dnsmasq-discuss] multiple ips

2012-04-26 Thread richardvo...@gmail.com
Thu, Apr 26, 2012 at 10:12 PM, richardvo...@gmail.com > wrote: >> >> Then you need to configure your client to make two requests (using two >> locally-administered MAC addresses, probably).  The DHCPOFFER message >> only carries one IP address.  That limitation isn't

Re: [Dnsmasq-discuss] multiple ips

2012-04-26 Thread richardvo...@gmail.com
d two ip addresses on same interface, only wlan0 for example. > > > On Thu, Apr 26, 2012 at 9:46 PM, richardvo...@gmail.com > wrote: >> >> What is your interface configuration (`ip show address`)?  What >> interface is your laptop connected to? >> >> This allo

Re: [Dnsmasq-discuss] dnsmasq DHCP filter by circuit AND remote IDs

2012-04-26 Thread richardvo...@gmail.com
Use tag-if for boolean logic dhcp-circuitid=set:circuitmatch, dhcp-remoteid=set:agentmatch, tag-if=set:bothmatch,tag:circuitmatch,tag:agentmatch On Thu, Apr 26, 2012 at 2:39 PM, David Dombrowsky wrote: > The man page for dnsmasq says > > > > “If an exact match is achieved between the circuit or

Re: [Dnsmasq-discuss] multiple ips

2012-04-26 Thread richardvo...@gmail.com
28,00:26:b9:03:bc:3b,10.0.1.1,jarod > dhcp-host=00:22:5f:d1:7c:28,00:26:b9:03:bc:3b,172.16.1.1,jarod > > but dhcp server assign only first ip to my laptop. how can i solve? > > On Thu, Apr 26, 2012 at 4:04 PM, richardvo...@gmail.com > wrote: >> >> Just use multiple dhcp-

Re: [Dnsmasq-discuss] multiple ips

2012-04-26 Thread richardvo...@gmail.com
Just use multiple dhcp-host lines. Also, the order is dhcp-host=[][,id:|*][,set:][,][,][,][,ignore] That is, the hostname comes after the IP address. And the netmask isn't specified explicitly, it's determined from the local interface configuration, or the DHCP proxy server. On Thu, Apr 26, 20

Re: [Dnsmasq-discuss] Slow response to DHCPDISCOVER

2012-04-24 Thread richardvo...@gmail.com
Daryl may still be correct. Linux's bridge module also implements the learning phase (for detection of loops) before it begins forwarding packets. On Tue, Apr 24, 2012 at 10:38 PM, Adrian May wrote: > Hi Daryl, > > There is no switch. I'm trying to build a router and I'm plugging clients > dire

Re: [Dnsmasq-discuss] DNS in DNsmasq

2012-04-23 Thread richardvo...@gmail.com
No. You must configure dnsmasq with an upstream nameserver which will perform the recursive query. dnsmasq is a server for your local zone (with DHCP integration, similar to dynamic dns) and a cache. It is not a recursive nameserver. On Mon, Apr 23, 2012 at 9:23 AM, dnsmasq dnsmasq wrote: > He

Re: [Dnsmasq-discuss] Update: Lowercase patch for 2.61rc2

2012-04-20 Thread richardvo...@gmail.com
On Fri, Apr 20, 2012 at 2:20 AM, Oliver Rath wrote: [snip] Now you can say: Ok, why you dont use a partition with the > ignore_case-Option holding all this drivers? This is right unless you > are working on embedded environment with low space. There it is much > smarter using the lowercase-opti

Re: [Dnsmasq-discuss] load balancing with interfaces

2012-04-11 Thread richardvo...@gmail.com
On Wed, Apr 11, 2012 at 4:31 AM, Helmut Hullen wrote: > Hallo, > > in a school I want to run all schoolish clients (about 150) over eth0, > with quasi static IP addresses ("dhcp-host=...") and all private clients > (private netbooks, smartphones etc.) over eth1 (completely DHCP, lease > time 2 da

Re: [Dnsmasq-discuss] TFTP FIXME message

2012-04-01 Thread richardvo...@gmail.com
That looks like a comment to developers. Seems a mistake if it's actually printed at runtime. On Sun, Apr 1, 2012 at 8:12 AM, Helmut Hullen wrote: > Hallo, > > my (self made) dnsmasq 2.60 always tells > > TFTP FIXME: this and the next few must be full strings to be > translatable - do not assem

Re: [Dnsmasq-discuss] DNSMasq script lookup

2012-03-30 Thread richardvo...@gmail.com
On Fri, Mar 30, 2012 at 9:26 AM, Simon Kelley wrote: > On 29/03/12 20:12, richardvo...@gmail.com wrote: > >> >> On thing which might be interesting, is to define a new type of >> upstream server (maybe called a look-aside server) which dnsmasq will >> send a query t

Re: [Dnsmasq-discuss] DNSMasq script lookup

2012-03-29 Thread richardvo...@gmail.com
> > > On thing which might be interesting, is to define a new type of upstream > server (maybe called a look-aside server) which dnsmasq will send a query > to first, and which if it can't answer the query can return a custom > return-code "Not known", which causes dnsmasq to then push the query in

Re: [Dnsmasq-discuss] server config options not working

2012-03-22 Thread richardvo...@gmail.com
DNS is the wrong place to implement this behavior. Interception of TCP connections is done with packet rewriting rules in iptables, and you'll need to set up your exceptions there also. On Thu, Mar 22, 2012 at 6:01 AM, Ian Rose wrote: > I have set up a Ubuntu 10.04 LTS desktop machine with 2 in

Re: [Dnsmasq-discuss] Feature Request: tftp-script

2012-03-19 Thread richardvo...@gmail.com
Existing scripts could definitely break, imagine one that just logs certain environment variables plus the parameter. The new action values won't have the right environment variable set. How about both? Give the --tftp-script the same action parameter, and keep actions unique, that way both opti

Re: [Dnsmasq-discuss] Feature Request(s)

2012-03-15 Thread richardvo...@gmail.com
Since the PTR name contains the IP, by definition different IPs means different PTR records. On Thu, Mar 15, 2012 at 2:34 PM, /dev/rob0 wrote: > On Thu, Mar 15, 2012 at 10:24:44AM -0700, Rob Zwissler wrote: > > Yah, seems to me it would make more sense to key off the IP address > > (or have that

Re: [Dnsmasq-discuss] Detect conflicting DHCP servers

2012-03-09 Thread richardvo...@gmail.com
Contacting DHCP servers is a task for a DHCP client, not a DHCP server. There are a number of scripts available which will send a request and listen to all responses (not just the first), generating an alert if any unexpected nodes responded. Google "rogue DHCP detect". On Fri, Mar 9, 2012 at 3:

Re: [Dnsmasq-discuss] dnsmasq itself as WINS server

2012-02-06 Thread richardvo...@gmail.com
Do you even need WINS if DNS lookup is working properly? I think it's become completely redundant. On Mon, Feb 6, 2012 at 11:09 AM, wrote: > esehello everybody > > I use dnsmasq as a feature of TomatoUSB 1.28 VPN. > > Now I have three samba servers behind the TomatoUSB-Router. > Till now one of

Re: [Dnsmasq-discuss] Dnsmasq with Gigantic hosts file

2012-01-10 Thread richardvo...@gmail.com
On Tue, Jan 10, 2012 at 6:55 PM, Preston Crow wrote: > I'm running dnsmasq with a large hosts file, and it's taking about a minute > to start up, which doesn't seem right.  Specifically, for the first minute > while it is initializing, it does not respond to DNS requests.  If I attach > to it with

Re: [Dnsmasq-discuss] Redundant setup with Dnsmasq

2011-12-23 Thread richardvo...@gmail.com
2011/12/22 Markus Schöpflin : > Am 22.12.2011 19:58, schrieb > richardvo...@gmail.com: > > [...] > >> See the dhcp-script and leasefile-ro options. > > Duh, I completely missed that option when reading the man page. This > looks like it would enable two servers

Re: [Dnsmasq-discuss] Redundant setup with Dnsmasq

2011-12-22 Thread richardvo...@gmail.com
On Thu, Dec 22, 2011 at 8:13 AM, Michael Rack wrote: > Very easy. > > You need at least one virtual ip-address for your DNS- and DHCP-Server. > > So lets say you have a Class-C Network 10.0.0.0/24 > >     * Primary DNS / DHCP    10.0.0.251 >     * Secondary DNS / DHCP  10.0.0.252 > > Now, you add

Re: [Dnsmasq-discuss] Some clients get wrong IP

2011-12-20 Thread richardvo...@gmail.com
Check your log, see if the camera is reporting a wrong MAC, different client-id, different vendor class, or something like that. Or possibly the camera's bootloader is remembering its old address (gotten before you configured your hosts file) and requesting a renewal. Again, the log would show a

Re: [Dnsmasq-discuss] DNSMASQ Logging and

2011-11-13 Thread richardvo...@gmail.com
On Sat, Nov 12, 2011 at 3:49 PM, wrote: > I am a user of DNSMASQ that has it installed on a Puppy Linux distro.The > Puppy distro starts normally, acquiring a DHCP address automatically from an > upstream router. > > DNSMASQ is installed via the Puppy distro's package manager. There are no > brok

  1   2   3   4   5   >