Re: [Dnsmasq-discuss] Router Advertisement: Prefix-Specific Options?

2018-06-02 Thread Simon Kelley
I just committed http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=c488b68e75ee5304007eef37203c4fc10193d191 which suppresses construction of a dhcp-range if there's an explict dhcp-range already. Testing would be very useful. Cheers, Simon. On 19/04/18 03:38, Luis Marsano wrote: >

Re: [Dnsmasq-discuss] Upstream DNS server update

2018-06-02 Thread Simon Kelley
It will detect servers coming and going. There's no need to restart. Cheers, Simon. On 14/05/18 10:22, Prasad K wrote: > Hi, > >    Can dnsmasq automatically starting using an upstream DNS server which > was unavailable for a short duration and came back online ?  > > For example :

Re: [Dnsmasq-discuss] DHCP option 121, handling of interface address

2018-06-02 Thread Simon Kelley
0.0.0.0 as router address in an option-121 is defined in the RFC to mean something different, so substituting it in dnsmasq would be bad. quote RFC 3442 Local Subnet Routes In some cases more than one IP subnet may be configured on a link. In such cases, a host whose IP address is in one

Re: [Dnsmasq-discuss] DHCP failure when changing SSID on same network

2018-06-02 Thread Simon Kelley
On 14/05/18 18:50, Chris Green wrote: > I have a large house and run two Draytek Vigor routers to provide full > coverage. The 'main' router is a Draytek 2860n which has the VDSL > connection to the internet. The second router is a Draytek Vigoer > 2820n which has no WAN connections and just has

Re: [Dnsmasq-discuss] upstream server selection algorithm - bug?

2018-06-02 Thread Simon Kelley
Note that trying all servers frequently has no performance hit, apart from the marginal extra bandwidth and upstream load. The original requestor still gets an answer as soon as the fastest server responds. (The parameters controlling this are in src/config.h) Cheers, Simon On 15/05/18

Re: [Dnsmasq-discuss] Wildcard CNAMEs - unexpected behaviour.

2018-06-02 Thread Simon Kelley
On 29/05/18 23:11, Stephen Howell wrote: > Hi, > > I'm an occasional sysadmin and I was looking to setup a round-robin > wildcard CNAME for a test project at home. I checked the dnsmasq docs > and saw: > > *--cname* as long as the record name is in the authoritative domain. If > the target of

Re: [Dnsmasq-discuss] [PATCH] DHCPv6: Add support for more than one hardware address per IPv6 address

2018-06-02 Thread Pali Rohár
On Tuesday 23 May 2017 09:39:11 Pali Rohár wrote: > On Monday 22 May 2017 23:11:02 Simon Kelley wrote: > > On 12/05/17 16:32, Pali Rohár wrote: > > > On Friday 12 May 2017 17:15:20 Simon Kelley wrote: > > >> There are so many layers of quotes here that I've completely lost > > >> track of what we

Re: [Dnsmasq-discuss] dnssec queries with --bogus-priv

2018-06-02 Thread Simon Kelley
Hi Kevin, Can you include the context of these lines? When I query x.y.168.192.in-addr-arpa without --bogus-priv I get SERVFAIL, because Google public DNS returns an unsigned reply to dnssec-query[DS] 168.192.in-addr.arpa but with --bogus-priv I get a local answer which never gets validated,

Re: [Dnsmasq-discuss] [PATCH] DHCPv6: Add support for more than one hardware address per IPv6 address

2018-06-02 Thread Pali Rohár
On Saturday 02 June 2018 15:48:58 Pali Rohár wrote: > On Tuesday 23 May 2017 09:39:11 Pali Rohár wrote: > > On Monday 22 May 2017 23:11:02 Simon Kelley wrote: > > > On 12/05/17 16:32, Pali Rohár wrote: > > > > On Friday 12 May 2017 17:15:20 Simon Kelley wrote: > > > >> There are so many layers of

Re: [Dnsmasq-discuss] Two questions about authoritative mode

2018-06-02 Thread Simon Kelley
On 31/05/18 11:50, Raphaël Halimi wrote: > Hi, > > I have two questions about authoritative mode. > > I have a home LAN, with a classic Bind / ISC DHCP / HPA TFTP setup > (started long before dnsmasq ever existed). > > Recently I decided to rent a server to externalize some public services >

Re: [Dnsmasq-discuss] Two questions about authoritative mode

2018-06-02 Thread Raphaël Halimi
Le 02/06/2018 à 19:39, Simon Kelley a écrit : > This is just some security logic, since omiting auth-peer is allowed, > and accepts AXFR requests from anywhere, AXFR is inhibited unless > auth-sec-servers is specified. Otherwise, a dnsmasq instance without any > secondary-server configuration