Re: [Dnsmasq-discuss] dnsmasq won't run on Debian 10.1 buster for O.P.

2019-10-14 Thread Geert Stappers
On Mon, Oct 14, 2019 at 07:33:10AM +0200, john doe wrote: > On 10/13/2019 10:17 PM, Guillaume B. wrote: > > I need dnsmasq for its min-cache-ttl option and other options like > > clear-on-reload, stop-dns-rebind and dns-loop-detect, that can't be > > configured with solely dnsmasq-base. > > > > I t

Re: [Dnsmasq-discuss] 1 IP for all requests

2019-10-14 Thread Geert Stappers
On Fri, Oct 04, 2019 at 08:37:03AM +0200, john doe wrote: > On 10/4/2019 1:25 AM, Geert Stappers wrote: > > On Thu, Oct 03, 2019 at 06:01:17PM -0500, Carl Karsten wrote: > >> On Thu, Oct 3, 2019 at 4:54 PM Geert Stappers wrote: > >>> On Thu, Oct 03, 2019 at 03:52:35PM -0500, Carl Karsten wrote: > >

Re: [Dnsmasq-discuss] dnsmasq won't run on Debian 10.1 buster

2019-10-14 Thread john doe
On 10/14/2019 7:33 AM, john doe wrote: > Please post through the list. > > On 10/13/2019 10:17 PM, Guillaume B. wrote: >> Hi John, >> >> Sorry for the late reply I got caught up with multiple reinstals of Debian >> images. >> >> I need dnsmasq for its min-cache-ttl option and other options like >>

Re: [Dnsmasq-discuss] dnsmasq won't run on Debian 10.1 buster

2019-10-14 Thread john doe
Last call, I won't bother answering you if you don't post through the list. On 10/14/2019 10:04 AM, Guillaume B. wrote: > Hi John, > > Yes I have looked at syslog when the connection is not working, that's how > I knew I received a DHCPNAK instead of a DHCPACK. Also it seems like IPV6 > addresses

Re: [Dnsmasq-discuss] dnsmasq won't run on Debian 10.1 buster

2019-10-14 Thread Guillaume B.
Hi John, Nevermind, I got it to work. Simply installed dnsmasq did a reboot, had to take dns=dnsmasq out of NetworkManager.conf, uncommented the line prepend domain-name-servers 127.0.0.1 in /etc/dhcp/dhclient.conf, and it worked. The only thing that doesn't work is DNSSEC validation, maybe my ups

[Dnsmasq-discuss] rebind-domain-ok bug? Not whitelisiing 4 word domain.

2019-10-14 Thread Michael
Hi Simon, I'm using ASUS Merlin 384.13, which is compiled with dnsmasq 2.80-44-g608aa9f, on my router.   I have rebind protection on and want to whitelist "universal-web-internal.production.gannettdigital.com" as for some reason after upgrading to iOS 13 on my iOS devices that domain is getting

Re: [Dnsmasq-discuss] rebind-domain-ok bug? Not whitelisiing 4 word domain.

2019-10-14 Thread Michael
Someone tried it and they used the following and said it worked.  When I tried it, it also worked.  I have no idea why that did, but using  /gannettdigital.com/ by itself did not.  rebind-domain-ok=/mcafee.com/amazonmusiclocal.com/gannettdigital.com/ On Monday, October 14, 2019, 6:05 PM, M

Re: [Dnsmasq-discuss] rebind-domain-ok bug? Not whitelisiing 4 word domain.

2019-10-14 Thread Michael
So it is only kind of working.  I’m still seeing the following in the logs now then: Oct 14 20:06:18 dnsmasq[15781]: possible DNS-rebind attack detected: universal-web-internal.production.gannettdigital.com This is with the following set: rebind-domain-ok=/mcafee.com/amazonmusiclocal.com/gannett