Re: [Dnsmasq-discuss] domain blacklist API..

2018-07-31 Thread wkitty42
On 07/30/2018 10:43 PM, al so wrote: Is there an API to blacklist certain DNS domains which should get resolved? do you mean blacklist them with NXDOMAIN even though they do exist? from dnsmasq.conf # block these domains with NXDOMAIN server=/example.com/ server=/facebook.com/

Re: [Dnsmasq-discuss] dnsmasq end of cache dump

2018-07-31 Thread Simon Kelley
There's no end-of-dump marker; I guess your application was never envisaged. A patch to add one would be simple. As a woraround: a cache dump always _starts_ with the line time so if you dumped the cache twice, the start of the second dump would serve as a unique marker for the end of the

Re: [Dnsmasq-discuss] domain blacklist API..

2018-07-31 Thread al so
It's about WPAD related attacks. Many routers do use dnsmasq library to offer DNS/DHCP service. How to blacklist WPAD? On Tue, Jul 31, 2018 at 8:23 AM, wrote: > On 07/30/2018 10:43 PM, al so wrote: > >> Is there an API to blacklist certain DNS domains which should get >> resolved? >> > > > do

Re: [Dnsmasq-discuss] domain blacklist API..

2018-07-31 Thread B. Cook
If you have specific questions I use wpad in my organization. This is how it works.. https://findproxyforurl.com/wpad-introduction/ And blocking the relevant entries or sending them nxdomain would accomplish what you ask. So would having authoritative dns.. and not having wildcard entries..