J.D. Bronson wrote:
On 1/20/10 6:46 PM, Bruce Walker wrote:
I create a custom dnsmasq.conf file and upload it to
/usr/local/etc/dnsmasq.conf (via the 'Diagnostics: Execute command' menu)

In that file I add entries for the domains that I'd like to return
NXDOMAIN for, like this:

local=/_dns-sd._udp.my-domain.com/
local=/doubleclick.net/


Works great!

This is exactly what I was looking for.
I do have a list of all of my internal machines but didnt think of this.
So the syntax is as you have listed above?

local=/blah.domain.com/

?

thanks,

That's correct; you need the forward slashes like that. The full syntax is described in here ...

http://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

... under the -S option. It's a rather inscrutable description but the relevant bit is:

"Also permitted is a -S flag which gives a domain but no IP address; this tells dnsmasq that a domain is local and it may answer queries from /etc/hosts or DHCP but should never forward queries on that domain to any upstream servers."

Note that it matches all sub-domains of your spec'ed domain as well. *Probably* what you want anyway.

Cheers!

-bmw

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to