Skip to content

D
Dnsmasq
Commit 28866e95 authored by Simon Kelley's avatar Simon Kelley
Browse files
Options

import of dnsmasq-2.56.tar.gz

parent c52e1897
Expand all Show whitespace changes
Inline Side-by-side
Showing with 5093 additions and 4238 deletions
CHANGELOG
View file @ 28866e95
version 2.56
Add a patch to allow dnsmasq to get interface names right in a
Solaris zone. Thanks to Dj Padzensky for this.
Improve data-type parsing heuristics so that
--dhcp-option=option:domain-search,.
treats the value as a string and not an IP address.
Thanks to Clemens Fischer for spotting that.
Add IPv6 support to the TFTP server. Many thanks to Jan
'RedBully' Seiffert for the patches.
Log DNS queries at level LOG_INFO, rather then
LOG_DEBUG. This makes things consistent with DHCP
logging. Thanks to Adam Pribyl for spotting the problem.
Ensure that dnsmasq terminates cleanly when using
--syslog-async even if it cannot make a connection to the
syslogd.
Add --add-mac option. This is to support currently
experimental DNS filtering facilities. Thanks to Benjamin
Petrin for the orignal patch.
Fix bug which meant that tags were ignored in dhcp-range
configuration specifying PXE-proxy service. Thanks to
Cristiano Cumer for spotting this.
Raise an error if there is extra junk, not part of an
option, on the command line.
Flag a couple of log messages in cache.c as coming from
the DHCP subsystem. Thanks to Olaf Westrik for the patch.
Omit timestamps from logs when a) logging to stderr and
b) --keep-in-forground is set. The logging facility on the
other end of stderr can be assumned to supply them. Thanks
to John Hallam for the patch.
Don't complain about strings longer than 255 characters in
--txt-record, just split the long strings into 255
character chunks instead.
Fix crash on double-free. This bug can only happen when
dhcp-script is in use and then only in rare circumstances
triggered by high DHCP transaction rate and a slow
script. Thanks to Ferenc Wagner for finding the problem.
Only log that a file has been sent by TFTP after the
transfer has completed succesfully.
A good suggestion from Ferenc Wagner: extend
the --domain option to allow this sort of thing:
--domain=thekelleys.org.uk,192.168.0.0/24,local
which automatically creates
--local=/thekelleys.org.uk/
--local=/0.168.192.in-addr.arpa/
Tighten up syntax checking of hex contants in the config
file. Thanks to Fred Damen for spotting this.
Add dnsmasq logo/icon, contributed by Justin Swift. Many
thanks for that.
Never cache DNS replies which have the 'cd' bit set, or
which result from queries forwarded with the 'cd' bit
set. The 'cd' bit instructs a DNSSEC validating server
upstream to ignore signature failures and return replies
anyway. Without this change it's possible to pollute the
dnsmasq cache with bad data by making a query with the
'cd' bit set and subsequent queries would return this data
without its being marked as suspect. Thanks to Anders
Kaseorg for pointing out this problem.
Add --proxy-dnssec flag, for compliance with RFC
4035. Dnsmasq will now clear the 'ad' bit in answers returned
from upstream validating nameservers unless this option is
set.
Allow a filename of "-" for --conf-file to read
stdin. Suggestion from Timothy Redaelli.
Rotate the order of SRV records in replies, to provide
round-robin load balancing when all the priorities are
equal. Thanks to Peter McKinney for the suggestion.
Edit
contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist
so that it doesn't log all queries to a file by
default. Thanks again to Peter McKinney.
By default, setting an IPv4 address for a domain but not
an IPv6 address causes dnsmasq to return
an NODATA reply for IPv6 (or vice-versa). So
--address=/google.com/1.2.3.4 stops IPv6 queries for
*google.com from being forwarded. Make it possible to
override this behaviour by defining the sematics if the
same domain appears in both --server and --address.
In that case, the --address has priority for the address
family in which is appears, but the --server has priority
of the address family which doesn't appear in --adddress
So:
--address=/google.com/1.2.3.4
--server=/google.com/#
will return 1.2.3.4 for IPv4 queries for *.google.com but
forward IPv6 queries to the normal upstream nameserver.
Similarly when setting an IPv6 address
only this will allow forwarding of IPv4 queries. Thanks to
William for pointing out the need for this.
Allow more than one --dhcp-optsfile and --dhcp-hostsfile
and make them understand directories as arguments in the
same way as --addn-hosts. Suggestion from John Hanks.
Ignore rebinding requests for leases we don't know
about. Rebind is broadcast, so we might get to overhear a
request meant for another DHCP server. NAKing this is
wrong. Thanks to Brad D'Hondt for assistance with this.
Fix cosmetic bug which produced strange output when
dumping cache statistics with some configurations. Thanks
to Fedor Kozhevnikov for spotting this.
version 2.55 version 2.55
Fix crash when /etc/ethers is in use. Thanks to Fix crash when /etc/ethers is in use. Thanks to
Gianluigi Tiesi for finding this. Gianluigi Tiesi for finding this.
......
FAQ
View file @ 28866e95
...@@ -354,7 +354,7 @@ A: Yes, from version-2.21. The support is only available running under ...@@ -354,7 +354,7 @@ A: Yes, from version-2.21. The support is only available running under
If a physical interface has more than one IP address or aliases If a physical interface has more than one IP address or aliases
with extra IP addresses, then any dhcp-ranges corresponding to with extra IP addresses, then any dhcp-ranges corresponding to
these addresses can be used for address allocation. So if an these addresses can be used for address allocation. So if an
interface has addresses 192.168.1.0/24 and 192.68.2.0/24 and there interface has addresses 192.168.1.0/24 and 192.168.2.0/24 and there
are DHCP ranges 192.168.1.100-192.168.1.200 and are DHCP ranges 192.168.1.100-192.168.1.200 and
192.168.2.100-192.168.2.200 then both ranges would be used for host 192.168.2.100-192.168.2.200 then both ranges would be used for host
connected to the physical interface. A more typical use might be to connected to the physical interface. A more typical use might be to
...@@ -413,10 +413,11 @@ A: Change your kernel configuration: either deselect CONFIG_SECURITY ...@@ -413,10 +413,11 @@ A: Change your kernel configuration: either deselect CONFIG_SECURITY
_or_ select CONFIG_SECURITY_CAPABILITIES. Alternatively, you can _or_ select CONFIG_SECURITY_CAPABILITIES. Alternatively, you can
remove the need to set capabilities by running dnsmasq as root. remove the need to set capabilities by running dnsmasq as root.
Q: Where can I get .rpms Suitable for Suse?
A: Dnsmasq is in Suse itself, and the latest releases are also Q: Where can I get .rpms Suitable for openSUSE/SLES?
available at ftp://ftp.suse.com/pub/people/ug/
A: Dnsmasq is in openSUSE itself, and the latest releases are also
available at http://download.opensuse.org/repositories/network/
Q: Can I run dnsmasq in a Linux vserver? Q: Can I run dnsmasq in a Linux vserver?
......
contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist
View file @ 28866e95
...@@ -8,8 +8,6 @@ ...@@ -8,8 +8,6 @@
<array> <array>
<string>/usr/local/sbin/dnsmasq</string> <string>/usr/local/sbin/dnsmasq</string>
<string>--keep-in-foreground</string> <string>--keep-in-foreground</string>
<string>--log-queries</string>
<string>--log-facility=/var/log/dnsmasq.log</string>
</array> </array>
<key>RunAtLoad</key> <key>RunAtLoad</key>
<true/> <true/>
......
dnsmasq.conf.example
View file @ 28866e95
...@@ -7,8 +7,8 @@ ...@@ -7,8 +7,8 @@
# The following two options make you a better netizen, since they # The following two options make you a better netizen, since they
# tell dnsmasq to filter out queries which the public DNS cannot # tell dnsmasq to filter out queries which the public DNS cannot
# answer, and which load the servers (especially the root servers) # answer, and which load the servers (especially the root servers)
# uneccessarily. If you have a dial-on-demand link they also stop # necessarily. If you have a dial-on-demand link they also stop
# these requests from bringing up the link uneccessarily. # these requests from bringing up the link necessarily.
# Never forward plain names (without a dot or domain part) # Never forward plain names (without a dot or domain part)
#domain-needed #domain-needed
...@@ -57,9 +57,9 @@ ...@@ -57,9 +57,9 @@
#local=/localnet/ #local=/localnet/
# Add domains which you want to force to an IP address here. # Add domains which you want to force to an IP address here.
# The example below send any host in doubleclick.net to a local # The example below send any host in double-click.net to a local
# webserver. # web-server.
#address=/doubleclick.net/127.0.0.1 #address=/double-click.net/127.0.0.1
# --address (and --server) work with IPv6 addresses too. # --address (and --server) work with IPv6 addresses too.
#address=/www.thekelleys.org.uk/fe80::20d:60ff:fe36:f83 #address=/www.thekelleys.org.uk/fe80::20d:60ff:fe36:f83
...@@ -90,7 +90,7 @@ ...@@ -90,7 +90,7 @@
#listen-address= #listen-address=
# If you want dnsmasq to provide only DNS service on an interface, # If you want dnsmasq to provide only DNS service on an interface,
# configure it as shown above, and then use the following line to # configure it as shown above, and then use the following line to
# disable DHCP on it. # disable DHCP and TFTP on it.
#no-dhcp-interface= #no-dhcp-interface=
# On systems which support it, dnsmasq binds the wildcard address, # On systems which support it, dnsmasq binds the wildcard address,
...@@ -154,16 +154,16 @@ ...@@ -154,16 +154,16 @@
# of some type for the subnet in question. # of some type for the subnet in question.
# In this case the netmask is implied (it comes from the network # In this case the netmask is implied (it comes from the network
# configuration on the machine running dnsmasq) it is possible to give # configuration on the machine running dnsmasq) it is possible to give
# an explict netmask instead. # an explicit netmask instead.
#dhcp-range=192.168.0.0,static #dhcp-range=192.168.0.0,static
# Supply parameters for specified hosts using DHCP. There are lots # Supply parameters for specified hosts using DHCP. There are lots
# of valid alternatives, so we will give examples of each. Note that # of valid alternatives, so we will give examples of each. Note that
# IP addresses DO NOT have to be in the range given above, they just # IP addresses DO NOT have to be in the range given above, they just
# need to be on the same network. The order of the parameters in these # need to be on the same network. The order of the parameters in these
# do not matter, it's permissble to give name,adddress and MAC in any order # do not matter, it's permissible to give name,address and MAC in any order
# Always allocate the host with ethernet address 11:22:33:44:55:66 # Always allocate the host with Ethernet address 11:22:33:44:55:66
# The IP address 192.168.0.60 # The IP address 192.168.0.60
#dhcp-host=11:22:33:44:55:66,192.168.0.60 #dhcp-host=11:22:33:44:55:66,192.168.0.60
...@@ -171,13 +171,13 @@ ...@@ -171,13 +171,13 @@
# 11:22:33:44:55:66 to be "fred" # 11:22:33:44:55:66 to be "fred"
#dhcp-host=11:22:33:44:55:66,fred #dhcp-host=11:22:33:44:55:66,fred
# Always give the host with ethernet address 11:22:33:44:55:66 # Always give the host with Ethernet address 11:22:33:44:55:66
# the name fred and IP address 192.168.0.60 and lease time 45 minutes # the name fred and IP address 192.168.0.60 and lease time 45 minutes
#dhcp-host=11:22:33:44:55:66,fred,192.168.0.60,45m #dhcp-host=11:22:33:44:55:66,fred,192.168.0.60,45m
# Give a host with ethernet address 11:22:33:44:55:66 or # Give a host with Ethernet address 11:22:33:44:55:66 or
# 12:34:56:78:90:12 the IP address 192.168.0.60. Dnsmasq will assume # 12:34:56:78:90:12 the IP address 192.168.0.60. Dnsmasq will assume
# that these two ethernet interfaces will never be in use at the same # that these two Ethernet interfaces will never be in use at the same
# time, and give the IP address to the second, even if it is already # time, and give the IP address to the second, even if it is already
# in use by the first. Useful for laptops with wired and wireless # in use by the first. Useful for laptops with wired and wireless
# addresses. # addresses.
...@@ -200,26 +200,26 @@ ...@@ -200,26 +200,26 @@
# it asks for a DHCP lease. # it asks for a DHCP lease.
#dhcp-host=judge #dhcp-host=judge
# Never offer DHCP service to a machine whose ethernet # Never offer DHCP service to a machine whose Ethernet
# address is 11:22:33:44:55:66 # address is 11:22:33:44:55:66
#dhcp-host=11:22:33:44:55:66,ignore #dhcp-host=11:22:33:44:55:66,ignore
# Ignore any client-id presented by the machine with ethernet # Ignore any client-id presented by the machine with Ethernet
# address 11:22:33:44:55:66. This is useful to prevent a machine # address 11:22:33:44:55:66. This is useful to prevent a machine
# being treated differently when running under different OS's or # being treated differently when running under different OS's or
# between PXE boot and OS boot. # between PXE boot and OS boot.
#dhcp-host=11:22:33:44:55:66,id:* #dhcp-host=11:22:33:44:55:66,id:*
# Send extra options which are tagged as "red" to # Send extra options which are tagged as "red" to
# the machine with ethernet address 11:22:33:44:55:66 # the machine with Ethernet address 11:22:33:44:55:66
#dhcp-host=11:22:33:44:55:66,set:red #dhcp-host=11:22:33:44:55:66,set:red
# Send extra options which are tagged as "red" to # Send extra options which are tagged as "red" to
# any machine with ethernet address starting 11:22:33: # any machine with Ethernet address starting 11:22:33:
#dhcp-host=11:22:33:*:*:*,set:red #dhcp-host=11:22:33:*:*:*,set:red
# Ignore any clients which are specified in dhcp-host lines # Ignore any clients which are specified in dhcp-host lines
# or /etc/ethers. Equivalent to ISC "deny unkown-clients". # or /etc/ethers. Equivalent to ISC "deny unknown-clients".
# This relies on the special "known" tag which is set when # This relies on the special "known" tag which is set when
# a host is matched. # a host is matched.
#dhcp-ignore=tag:!known #dhcp-ignore=tag:!known
...@@ -401,7 +401,7 @@ ...@@ -401,7 +401,7 @@
# Enable dnsmasq's built-in TFTP server # Enable dnsmasq's built-in TFTP server
#enable-tftp #enable-tftp
# Set the root directory for files availble via FTP. # Set the root directory for files available via FTP.
#tftp-root=/var/ftpd #tftp-root=/var/ftpd
# Make the TFTP server more secure: with this set, only files owned by # Make the TFTP server more secure: with this set, only files owned by
...@@ -433,10 +433,10 @@ ...@@ -433,10 +433,10 @@
# and take over the lease for any client which broadcasts on the network, # and take over the lease for any client which broadcasts on the network,
# whether it has a record of the lease or not. This avoids long timeouts # whether it has a record of the lease or not. This avoids long timeouts
# when a machine wakes up on a new network. DO NOT enable this if there's # when a machine wakes up on a new network. DO NOT enable this if there's
# the slighest chance that you might end up accidentally configuring a DHCP # the slightest chance that you might end up accidentally configuring a DHCP
# server for your campus/company accidentally. The ISC server uses # server for your campus/company accidentally. The ISC server uses
# the same option, and this URL provides more information: # the same option, and this URL provides more information:
# http://www.isc.org/index.pl?/sw/dhcp/authoritative.php # http://www.isc.org/files/auth.html
#dhcp-authoritative #dhcp-authoritative
# Run an executable when a DHCP lease is created or destroyed. # Run an executable when a DHCP lease is created or destroyed.
......
doc.html
View file @ 28866e95
<HTML> <HTML>
<HEAD> <HEAD>
<TITLE> Dnsmasq - a DNS forwarder for NAT firewalls.</TITLE> <TITLE> Dnsmasq - a DNS forwarder for NAT firewalls.</TITLE>
<link rel="icon"
href="http://www.thekelleys.org.uk/dnsmasq/images/favicon.ico">
</HEAD> </HEAD>
<BODY BGCOLOR="WHITE"> <BODY BGCOLOR="WHITE">
<H1 ALIGN=center>Dnsmasq</H1> <table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td align="left" valign="middle"><img border="0" src="http://www.thekelleys.org.uk/dnsmasq/images/icon.png" /></td>
<td align="middle" valign="middle"><h1>Dnsmasq</h1></td>
<td align="right" valign="middle"><img border="0" src="http://www.thekelleys.org.uk/dnsmasq/images/icon.png" /></td></tr>
</table>
Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP
server. It is designed to provide DNS and, optionally, DHCP, to a server. It is designed to provide DNS and, optionally, DHCP, to a
small network. It can serve the names of local machines which are small network. It can serve the names of local machines which are
......
logo/README 0 → 100644
View file @ 28866e95
Dnsmasq logo, contributed by Justin Clift.
The source format is Inkscape SVG vector format, which is scalable and
easy to export to other formats. For convenience I've included a 56x31
png export and a 16x16 ico suitable for use as a web favicon.
Simon Kelley, 22/10/2010
logo/icon.svg 0 → 100644
View file @ 28866e95
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<svg
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:cc="http://creativecommons.org/ns#"
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:svg="http://www.w3.org/2000/svg"
xmlns="http://www.w3.org/2000/svg"
xmlns:xlink="http://www.w3.org/1999/xlink"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
version="1.1"
x="0px"
y="0px"
width="56"
height="31"
viewBox="0 0 56 31"
enable-background="new 0 0 72.833 46.667"
xml:space="preserve"
id="svg2"
inkscape:version="0.47 r22583"
sodipodi:docname="dnsmasq_icon.svg"
inkscape:export-filename="/x/centos_home/jc/workspace/git_repos/libvirt-media/libvirt-media/png/dnsmasq_icon.png"
inkscape:export-xdpi="90"
inkscape:export-ydpi="90"><metadata
id="metadata27"><rdf:RDF><cc:Work
rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" /><dc:title></dc:title></cc:Work></rdf:RDF></metadata><defs
id="defs25"><inkscape:perspective
sodipodi:type="inkscape:persp3d"
inkscape:vp_x="0 : 23.3335 : 1"
inkscape:vp_y="0 : 1000 : 0"
inkscape:vp_z="72.833 : 23.3335 : 1"
inkscape:persp3d-origin="36.4165 : 15.555667 : 1"
id="perspective4857" />
<filter
id="filter3802"
inkscape:label="filter1"
color-interpolation-filters="sRGB" /><linearGradient
inkscape:collect="always"
xlink:href="#SVGID_3_"
id="linearGradient4929"
gradientUnits="userSpaceOnUse"
x1="30.564501"
y1="-8.8144999"
x2="32.937"
y2="32.715599" />
<linearGradient
inkscape:collect="always"
xlink:href="#SVGID_3_"
id="linearGradient5798"
gradientUnits="userSpaceOnUse"
x1="30.564501"
y1="-8.8144999"
x2="32.937"
y2="32.715599" /><linearGradient
inkscape:collect="always"
xlink:href="#SVGID_3_"
id="linearGradient5812"
gradientUnits="userSpaceOnUse"
x1="30.564501"
y1="-8.8144999"
x2="32.937"
y2="32.715599" /><filter
id="filter6262"
inkscape:label="Drop shadow"
width="1.5"
height="1.5"
x="-0.25"
y="-0.25"
color-interpolation-filters="sRGB"><feGaussianBlur
id="feGaussianBlur6264"
in="SourceAlpha"
stdDeviation="2.500000"
result="blur" /><feColorMatrix
id="feColorMatrix6266"
result="bluralpha"
type="matrix"
values="1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 0.500000 0 " /><feOffset
id="feOffset6268"
in="bluralpha"
dx="2.700000"
dy="2.600000"
result="offsetBlur" /><feMerge
id="feMerge6270"><feMergeNode
id="feMergeNode6272"
in="offsetBlur" /><feMergeNode
id="feMergeNode6274"
in="SourceGraphic" /></feMerge></filter></defs><sodipodi:namedview
pagecolor="#ffffff"
bordercolor="#666666"
borderopacity="1"
objecttolerance="10"
gridtolerance="10"
guidetolerance="10"
inkscape:pageopacity="0"
inkscape:pageshadow="2"
inkscape:window-width="1568"
inkscape:window-height="1076"
id="namedview23"
showgrid="false"
inkscape:zoom="8"
inkscape:cx="31.966768"
inkscape:cy="21.211869"
inkscape:window-x="567"
inkscape:window-y="328"
inkscape:window-maximized="0"
inkscape:current-layer="layer1"
inkscape:showpageshadow="false"
showborder="true" />
<g
inkscape:groupmode="layer"
id="layer1"
inkscape:label="dnsmasq"
style="display:inline"
transform="translate(5.2838057,-15.545371)"><g
id="g3790"
transform="matrix(0.8183832,0,0,0.8183832,65.304897,9.8747678)"
style="filter:url(#filter6262)"
inkscape:export-xdpi="90"
inkscape:export-ydpi="90"><g
transform="translate(-91.018462,1.0687099)"
id="g9">
<path
style="fill:#6700ad"
inkscape:connector-curvature="0"
id="path11"
d="M 54.997,12.151 C 50.083,9.132 43.29,7.266 35.791,7.266 c -7.5,0 -14.29,1.866 -19.204,4.885 -4.915,3.016 -7.956,7.184 -7.956,11.789 0,4.604 3.041,8.772 7.956,11.788 4.914,3.02 11.704,-4.271 19.204,-4.271 7.499,0 14.292,7.291 19.206,4.271 4.914,-3.016 7.955,-7.185 7.955,-11.788 0,-4.606 -3.041,-8.773 -7.955,-11.789 z M 24.996,24.318 c -2.698,0 -4.885,-0.922 -4.885,-2.061 0,-1.14 2.187,-2.063 4.885,-2.063 2.697,0 4.885,0.924 4.885,2.063 0,1.139 -2.188,2.061 -4.885,2.061 z m 21.501,0.191 c -2.686,0 -4.861,-0.856 -4.861,-1.912 0,-1.054 2.176,-1.911 4.861,-1.911 2.685,0 4.863,0.857 4.863,1.911 0,1.056 -2.178,1.912 -4.863,1.912 z" />
<path
style="fill:none;stroke:#ffb616;stroke-width:1.85353255"
inkscape:connector-curvature="0"
id="path13"
d="M 54.997,12.151 C 50.083,9.132 43.29,7.266 35.791,7.266 c -7.5,0 -14.29,1.866 -19.204,4.885 -4.915,3.016 -7.956,7.184 -7.956,11.789 0,4.604 3.041,8.772 7.956,11.788 4.914,3.02 11.704,-4.271 19.204,-4.271 7.499,0 14.292,7.291 19.206,4.271 4.914,-3.016 7.955,-7.185 7.955,-11.788 0,-4.606 -3.041,-8.773 -7.955,-11.789 z M 24.996,24.318 c -2.698,0 -4.885,-0.922 -4.885,-2.061 0,-1.14 2.187,-2.063 4.885,-2.063 2.697,0 4.885,0.924 4.885,2.063 0,1.139 -2.188,2.061 -4.885,2.061 z m 21.501,0.191 c -2.686,0 -4.861,-0.856 -4.861,-1.912 0,-1.054 2.176,-1.911 4.861,-1.911 2.685,0 4.863,0.857 4.863,1.911 0,1.056 -2.178,1.912 -4.863,1.912 z" />
</g><g
transform="translate(-91.018462,1.0687099)"
id="Layer_2">
<linearGradient
y2="32.715599"
x2="32.937"
y1="-8.8144999"
x1="30.564501"
gradientUnits="userSpaceOnUse"
id="SVGID_3_">
<stop
id="stop17"
style="stop-color:#FFFFFF;stop-opacity:0.73"
offset="0" />
<stop
id="stop19"
style="stop-color:#FFFFFF;stop-opacity:0"
offset="1" />
</linearGradient>
<path
inkscape:connector-curvature="0"
style="fill:url(#linearGradient5812)"
id="path21"
d="m 54.1,15.361 c -0.924,1.078 -2.782,1.265 -3.857,1.06 C 38,14.083 22.75,12.75 16.027,23.031 14.858,24.819 11.992,25.39 10.293,23.887 8.631,22.417 13.105,15.804 17.646,13.033 22.194,10.252 28.474,8.53 35.41,8.53 c 6.936,0 13.215,1.722 17.756,4.502 0.731,0.442 1.627,1.52 0.934,2.329 z" />
</g></g></g></svg>
\ No newline at end of file
man/dnsmasq.8
View file @ 28866e95
...@@ -23,7 +23,7 @@ options. It includes a secure, read-only, ...@@ -23,7 +23,7 @@ options. It includes a secure, read-only,
TFTP server to allow net/PXE boot of DHCP hosts and also supports BOOTP. TFTP server to allow net/PXE boot of DHCP hosts and also supports BOOTP.
.PP .PP
Dnsmasq Dnsmasq
supports IPv6 for DNS, but not DHCP. supports IPv6 for DNS and TFTP, but not DHCP.
.SH OPTIONS .SH OPTIONS
Note that in general missing parameters are allowed and switch off Note that in general missing parameters are allowed and switch off
functions, for instance "--pid-file" disables writing a PID file. On functions, for instance "--pid-file" disables writing a PID file. On
...@@ -415,7 +415,9 @@ all that match are returned. ...@@ -415,7 +415,9 @@ all that match are returned.
.TP .TP
.B \-Y, --txt-record=<name>[[,<text>],<text>] .B \-Y, --txt-record=<name>[[,<text>],<text>]
Return a TXT DNS record. The value of TXT record is a set of strings, Return a TXT DNS record. The value of TXT record is a set of strings,
so any number may be included, split by commas. so any number may be included, delimited by commas; use quotes to put
commas into a string. Note that the maximum length of a single string
is 255 characters, longer strings are split into 255 character chunks.
.TP .TP
.B --ptr-record=<name>[,<target>] .B --ptr-record=<name>[,<target>]
Return a PTR DNS record. Return a PTR DNS record.
...@@ -442,6 +444,15 @@ the name. More than one name may be associated with an interface ...@@ -442,6 +444,15 @@ the name. More than one name may be associated with an interface
address by repeating the flag; in that case the first instance is used address by repeating the flag; in that case the first instance is used
for the reverse address-to-name mapping. for the reverse address-to-name mapping.
.TP .TP
.B --add-mac
Add the MAC address of the requestor to DNS queries which are
forwarded upstream. This may be used to DNS filtering by the upstream
server. The MAC address can only be added if the requestor is on the same
subnet as the dnsmasq server. Note that the mechanism used to achieve this (an EDNS0 option)
is not yet standardised, so this should be considered
experimental. Also note that exposing MAC addresses in this way may
have security and privacy implications.
.TP
.B \-c, --cache-size=<cachesize> .B \-c, --cache-size=<cachesize>
Set the size of dnsmasq's cache. The default is 150 names. Setting the cache size to zero disables caching. Set the size of dnsmasq's cache. The default is 150 names. Setting the cache size to zero disables caching.
.TP .TP
...@@ -456,6 +467,20 @@ Set the maximum number of concurrent DNS queries. The default value is ...@@ -456,6 +467,20 @@ Set the maximum number of concurrent DNS queries. The default value is
where this needs to be increased is when using web-server log file where this needs to be increased is when using web-server log file
resolvers, which can generate large numbers of concurrent queries. resolvers, which can generate large numbers of concurrent queries.
.TP .TP
.B --proxy-dnssec
A resolver on a client machine can do DNSSEC validation in two ways: it
can perform the cryptograhic operations on the reply it receives, or
it can rely on the upstream recursive nameserver to do the validation
and set a bit in the reply if it succeeds. Dnsmasq is not a DNSSEC
validator, so it cannot perform the validation role of the recursive nameserver,
but it can pass through the validation results from its own upstream
nameservers. This option enables this behaviour. You should only do
this if you trust all the configured upstream nameservers
.I and the network between you and them.
If you use the first DNSSEC mode, validating resolvers in clients,
this option is not required. Dnsmasq always returns all the data
needed for a client to do validation itself.
.TP
.B \-F, --dhcp-range=[interface:<interface>,][tag:<tag>[,tag:<tag>],][set:<tag],]<start-addr>,<end-addr>[,<netmask>[,<broadcast>]][,<lease time>] .B \-F, --dhcp-range=[interface:<interface>,][tag:<tag>[,tag:<tag>],][set:<tag],]<start-addr>,<end-addr>[,<netmask>[,<broadcast>]][,<lease time>]
Enable the DHCP server. Addresses will be given out from the range Enable the DHCP server. Addresses will be given out from the range
<start-addr> to <end-addr> and from statically defined addresses given <start-addr> to <end-addr> and from statically defined addresses given
...@@ -588,15 +613,17 @@ time and there is no way for dnsmasq to enforce this. It is, for instance, ...@@ -588,15 +613,17 @@ time and there is no way for dnsmasq to enforce this. It is, for instance,
useful to allocate a stable IP address to a laptop which useful to allocate a stable IP address to a laptop which
has both wired and wireless interfaces. has both wired and wireless interfaces.
.TP .TP
.B --dhcp-hostsfile=<file> .B --dhcp-hostsfile=<path>
Read DHCP host information from the specified file. The file contains Read DHCP host information from the specified file. If a directory
is given, then read all the files contained in that directory. The file contains
information about one host per line. The format of a line is the same information about one host per line. The format of a line is the same
as text to the right of '=' in --dhcp-host. The advantage of storing DHCP host information as text to the right of '=' in --dhcp-host. The advantage of storing DHCP host information
in this file is that it can be changed without re-starting dnsmasq: in this file is that it can be changed without re-starting dnsmasq:
the file will be re-read when dnsmasq receives SIGHUP. the file will be re-read when dnsmasq receives SIGHUP.
.TP .TP
.B --dhcp-optsfile=<file> .B --dhcp-optsfile=<path>
Read DHCP option information from the specified file. The advantage of Read DHCP option information from the specified file. If a directory
is given, then read all the files contained in that directory. The advantage of
using this option is the same as for --dhcp-hostsfile: the using this option is the same as for --dhcp-hostsfile: the
dhcp-optsfile will be re-read when dnsmasq receives SIGHUP. Note that dhcp-optsfile will be re-read when dnsmasq receives SIGHUP. Note that
it is possible to encode the information in a it is possible to encode the information in a
...@@ -946,7 +973,8 @@ all of the following variables added. ...@@ -946,7 +973,8 @@ all of the following variables added.
DNSMASQ_CLIENT_ID if the host provided a client-id. DNSMASQ_CLIENT_ID if the host provided a client-id.
DNSMASQ_DOMAIN if the fully-qualified domain name of the host is DNSMASQ_DOMAIN if the fully-qualified domain name of the host is
known, this is set to the domain part. known, this is set to the domain part. (Note that the hostname passed
to the script as an argument is never fully-qualified.)
If the client provides vendor-class, hostname or user-class, If the client provides vendor-class, hostname or user-class,
these are provided in DNSMASQ_VENDOR_CLASS these are provided in DNSMASQ_VENDOR_CLASS
...@@ -1020,7 +1048,7 @@ as if they had arrived at <interface>. This option is necessary when ...@@ -1020,7 +1048,7 @@ as if they had arrived at <interface>. This option is necessary when
using "old style" bridging on BSD platforms, since using "old style" bridging on BSD platforms, since
packets arrive at tap interfaces which don't have an IP address. packets arrive at tap interfaces which don't have an IP address.
.TP .TP
.B \-s, --domain=<domain>[,<address range>] .B \-s, --domain=<domain>[,<address range>[,local]]
Specifies DNS domains for the DHCP server. Domains may be be given Specifies DNS domains for the DHCP server. Domains may be be given
unconditionally (without the IP range) or for limited IP ranges. This has two effects; unconditionally (without the IP range) or for limited IP ranges. This has two effects;
firstly it causes the DHCP server to return the domain to any hosts firstly it causes the DHCP server to return the domain to any hosts
...@@ -1039,11 +1067,22 @@ and have a machine whose DHCP hostname is "laptop". The IP address for that mach ...@@ -1039,11 +1067,22 @@ and have a machine whose DHCP hostname is "laptop". The IP address for that mach
.B dnsmasq .B dnsmasq
both as "laptop" and "laptop.thekelleys.org.uk". If the domain is both as "laptop" and "laptop.thekelleys.org.uk". If the domain is
given as "#" then the domain is read from the first "search" directive given as "#" then the domain is read from the first "search" directive
in /etc/resolv.conf (or equivalent). The address range can be of the form in /etc/resolv.conf (or equivalent).
The address range can be of the form
<ip address>,<ip address> or <ip address>/<netmask> or just a single <ip address>,<ip address> or <ip address>/<netmask> or just a single
<ip address>. See <ip address>. See
.B --dhcp-fqdn .B --dhcp-fqdn
which can change the behaviour of dnsmasq with domains. which can change the behaviour of dnsmasq with domains.
If the address range is given as ip-address/network-size, then a
additional flag "local" may be supplied which has the effect of adding
--local declarations for forward and reverse DNS queries. Eg.
.B --domain=thekelleys.org.uk,192.168.0.0/24,local
is identical to
.B --domain=thekelleys.org.uk,192.168.0.0/24
--local=/thekelleys.org.uk/ --local=/0.168.192.in-addr.arpa/
The network size must be 8, 16 or 24 for this to be legal.
.TP .TP
.B --dhcp-fqdn .B --dhcp-fqdn
In the default mode, dnsmasq inserts the unqualified names of In the default mode, dnsmasq inserts the unqualified names of
...@@ -1123,7 +1162,8 @@ of concurrent TFTP connections is limited by the size of the port range. ...@@ -1123,7 +1162,8 @@ of concurrent TFTP connections is limited by the size of the port range.
.TP .TP
.B \-C, --conf-file=<file> .B \-C, --conf-file=<file>
Specify a different configuration file. The conf-file option is also allowed in Specify a different configuration file. The conf-file option is also allowed in
configuration files, to include multiple configuration files. configuration files, to include multiple configuration files. A
filename of "-" causes dnsmasq to read configuration from stdin.
.TP .TP
.B \-7, --conf-dir=<directory>[,<file-extension>......] .B \-7, --conf-dir=<directory>[,<file-extension>......]
Read all the files in the given directory as configuration Read all the files in the given directory as configuration
...@@ -1445,6 +1485,9 @@ assume that it is the system default. ...@@ -1445,6 +1485,9 @@ assume that it is the system default.
.IR /usr/local/etc/dnsmasq.conf .IR /usr/local/etc/dnsmasq.conf
.IR /etc/resolv.conf .IR /etc/resolv.conf
.IR /var/run/dnsmasq/resolv.conf
.IR /etc/ppp/resolv.conf
.IR /etc/dhcpc/resolv.conf
.IR /etc/hosts .IR /etc/hosts
......
man/fr/dnsmasq.8
View file @ 28866e95
...@@ -22,7 +22,7 @@ peut être configuré pour envoyer n'importe quel option DHCP. ...@@ -22,7 +22,7 @@ peut être configuré pour envoyer n'importe quel option DHCP.
Il inclut un serveur TFTP sécurisé en lecture seule permettant le démarrage via Il inclut un serveur TFTP sécurisé en lecture seule permettant le démarrage via
le réseau/PXE de clients DHCP et supporte également le protocole BOOTP. le réseau/PXE de clients DHCP et supporte également le protocole BOOTP.
.PP .PP
Dnsmasq supporte IPv6 pour le DNS mais pas pour le DHCP. Dnsmasq supporte IPv6 pour le DNS et TFTP mais pas pour le DHCP.
.SH OPTIONS .SH OPTIONS
Notes : Il est possible d'utiliser des options sans leur donner de paramètre. Notes : Il est possible d'utiliser des options sans leur donner de paramètre.
Dans ce cas, la fonction correspondante sera désactivée. Par exemple Dans ce cas, la fonction correspondante sera désactivée. Par exemple
...@@ -491,7 +491,10 @@ retournés dans la réponse. ...@@ -491,7 +491,10 @@ retournés dans la réponse.
.B \-Y, --txt-record=<nom>[[,<texte>],<texte>] .B \-Y, --txt-record=<nom>[[,<texte>],<texte>]
Définit un enregistrement DNS de type TXT. La valeur de l'enregistrement TXT est Définit un enregistrement DNS de type TXT. La valeur de l'enregistrement TXT est
un ensemble de chaînes de caractères, donc un nombre variable de chaînes de un ensemble de chaînes de caractères, donc un nombre variable de chaînes de
caractères peuvent être spécifiées, séparées par des virgules. caractères peuvent être spécifiées, séparées par des virgules. Utilisez des
guillemets pour mettre une virgule dans une chaîne de caractères. Notez que la
longueur maximale pour une chaîne est de 255 caractères, les chaînes plus
longues étant découpées en morceaux de 255 caractères de longs.
.TP .TP
.B --ptr-record=<nom>[,<cible>] .B --ptr-record=<nom>[,<cible>]
Définit un enregistrement DNS de type PTR. Définit un enregistrement DNS de type PTR.
...@@ -519,6 +522,16 @@ Plus d'un nom peut être associé à une interface donnée en répétant cette o ...@@ -519,6 +522,16 @@ Plus d'un nom peut être associé à une interface donnée en répétant cette o
plusieurs fois; dans ce cas, l'enregistrement inverse pointe vers le nom fourni plusieurs fois; dans ce cas, l'enregistrement inverse pointe vers le nom fourni
dans la première instance de cette option. dans la première instance de cette option.
.TP .TP
.B --add-mac
Ajoute l'adresse MAC du requêteur aux requêtes DNS transmises aux serveurs
amonts. Cela peut être utilisé dans un but de filtrage DNS par les serveurs
amonts. L'adresse MAC peut uniquement être ajoutée si le requêteur est sur le
même sous-réseau que le serveur dnsmasq. Veuillez noter que le mécanisme
utilisé pour effectuer cela (une option EDNS0) n'est pas encore standardisée,
aussi cette fonctionalité doit être considérée comme expérimentale. Notez
également qu'exposer les adresses MAC de la sorte peut avoir des implications
en termes de sécurité et de vie privée.
.TP
.B \-c, --cache-size=<taille> .B \-c, --cache-size=<taille>
Définit la taille du cache de Dnsmasq. La valeur par défaut est de 150 noms. Définit la taille du cache de Dnsmasq. La valeur par défaut est de 150 noms.
Définir une valeur de zéro désactive le cache. Définir une valeur de zéro désactive le cache.
...@@ -537,6 +550,21 @@ lorsqu'un serveur web a la résolution de nom activée pour l'enregistrement de ...@@ -537,6 +550,21 @@ lorsqu'un serveur web a la résolution de nom activée pour l'enregistrement de
son journal des requêtes, ce qui peut générer un nombre important de requêtes son journal des requêtes, ce qui peut générer un nombre important de requêtes
simultanées. simultanées.
.TP .TP
.B --proxy-dnssec
Un resolveur sur une machine cliente peut effectuer la validation DNSSEC de
deux façons : il peut effectuer lui-même les opérations de chiffrements sur
la réponse reçue, ou il peut laisser le serveur récursif amont faire la
validation et positionner un drapeau dans la réponse au cas où celle-ci est
correcte. Dnsmasq n'est pas un validateur DNSSEC, aussi il ne peut effectuer
la validation comme un serveur de nom récursif, cependant il peut retransmettre
les résultats de validation de ses serveurs amonts. Cette option permet
l'activation de cette fonctionalité. Vous ne devriez utiliser cela que si vous
faites confiance aux serveurs amonts
.I ainsi que le réseau entre vous et eux.
Si vous utilisez le premier mode DNSSEC, la validation par le resolveur des
clients, cette option n'est pas requise. Dnsmasq retourne toujours toutes les
données nécessaires par un client pour effectuer la validation lui-même.
.TP
.B \-F, --dhcp-range=[interface:<interface>,][tag:<label>[,tag:<label>],][set:<label],]<adresse de début>,<adresse de fin>[,<masque de réseau>[,<broadcast>]][,<durée de bail>] .B \-F, --dhcp-range=[interface:<interface>,][tag:<label>[,tag:<label>],][set:<label],]<adresse de début>,<adresse de fin>[,<masque de réseau>[,<broadcast>]][,<durée de bail>]
Active le serveur DHCP. Les adresses seront données dans la plage comprise entre Active le serveur DHCP. Les adresses seront données dans la plage comprise entre
<adresse de début> et <adresse de fin> et à partir des adresses définies <adresse de début> et <adresse de fin> et à partir des adresses définies
...@@ -674,20 +702,24 @@ donné et dnsmasq n'a aucun moyen de s'assurer de cela. Cela est utile, ...@@ -674,20 +702,24 @@ donné et dnsmasq n'a aucun moyen de s'assurer de cela. Cela est utile,
par exemple, pour allouer une adresse IP stable à un laptop qui par exemple, pour allouer une adresse IP stable à un laptop qui
aurait à la fois une connexion filaire et sans-fil. aurait à la fois une connexion filaire et sans-fil.
.TP .TP
.B --dhcp-hostsfile=<fichier> .B --dhcp-hostsfile=<chemin>
Lis les informations d'hôtes DHCP dans le fichier spécifié. Le fichier contient Lis les informations d'hôtes DHCP dans le fichier spécifié. Si l'argument est
des informations à raison d'un hôte par ligne. Le format d'une ligne est la même un chemin vers un répertoire, lis tous les fichiers de ce répertoire. Le
que le texte fourni à la droite sur caractère "=" dans l'option fichier contient des informations à raison d'un hôte par ligne. Le format
d'une ligne est la même que le texte fourni à la droite sur caractère "=" dans
l'option
.B --dhcp-host. .B --dhcp-host.
L'avantage de stocker les informations sur les hôtes DHCP dans ce fichier est L'avantage de stocker les informations sur les hôtes DHCP dans ce fichier est
que celles-ci peuvent être modifiées sans recharger Dnsmasq; le fichier sera que celles-ci peuvent être modifiées sans recharger Dnsmasq; le fichier sera
relu lorsque Dnsmasq reçoit un signal SIGHUP. relu lorsque Dnsmasq reçoit un signal SIGHUP.
.TP .TP
.B --dhcp-optsfile=<fichier> .B --dhcp-optsfile=<chemin>
Lis les informations relatives aux options DHCP dans le fichier spécifié. Lis les informations relatives aux options DHCP dans le fichier spécifié. Si
L'intérêt d'utiliser cette option est le même que pour --dhcp-hostsfile : le l'argument est un chemin vers un répertoire, lis tous les fichiers de ce
fichier spécifié sera rechargé à la réception par dnsmasq d'un signal SIGHUP. répertoire. L'intérêt d'utiliser cette option est le même que pour
Notez qu'il est possible d'encoder l'information via --dhcp-hostsfile : le fichier spécifié sera rechargé à la réception par
dnsmasq d'un signal SIGHUP. Notez qu'il est possible d'encoder l'information
via
.B --dhcp-boot .B --dhcp-boot
en utilisant les noms optionnels bootfile-name, server-ip-address et en utilisant les noms optionnels bootfile-name, server-ip-address et
tftp-server. Ceci permet d'inclure ces options dans un fichier "dhcp-optsfile".DNSMASQ_SUPPLIED_HOSTNAME tftp-server. Ceci permet d'inclure ces options dans un fichier "dhcp-optsfile".DNSMASQ_SUPPLIED_HOSTNAME
...@@ -1074,7 +1106,8 @@ auquel se rajoute quelques unes ou toutes les variables décrites ci-dessous : ...@@ -1074,7 +1106,8 @@ auquel se rajoute quelques unes ou toutes les variables décrites ci-dessous :
DNSMASQ_CLIENT_ID, si l'hôte a fourni un identifiant de client. DNSMASQ_CLIENT_ID, si l'hôte a fourni un identifiant de client.
DNSMASQ_DOMAIN si le nom de domaine pleinement qualifié de l'hôte est connu, la DNSMASQ_DOMAIN si le nom de domaine pleinement qualifié de l'hôte est connu, la
part relative au domaine y est stockée. part relative au domaine y est stockée. (Notez que le nom d'hôte transmis comme
argument au script n'est jamais pleinement qualifié).
Si le client fournit une information de classe de vendeur, un nom d'hôte, ou Si le client fournit une information de classe de vendeur, un nom d'hôte, ou
des classes d'utilisateur, celles-ci sont fournies dans les des classes d'utilisateur, celles-ci sont fournies dans les
...@@ -1151,7 +1184,7 @@ nécessaire lors de l'utilisation de pont ethernet "ancien mode" sur plate-forme ...@@ -1151,7 +1184,7 @@ nécessaire lors de l'utilisation de pont ethernet "ancien mode" sur plate-forme
BSD, puisque dans ce cas les paquets arrivent sur des interfaces "tap" n'ont BSD, puisque dans ce cas les paquets arrivent sur des interfaces "tap" n'ont
pas d'adresse IP. pas d'adresse IP.
.TP .TP
.B \-s, --domain=<domaine>[,<gamme d'adresses>] .B \-s, --domain=<domaine>[,<gamme d'adresses>[,local]]
Spécifie le domaine du serveur DHCP. Le domaine peut être donné de manière Spécifie le domaine du serveur DHCP. Le domaine peut être donné de manière
inconditionnelle (sans spécifier de gamme d'adresses IP) ou pour des gammes inconditionnelle (sans spécifier de gamme d'adresses IP) ou pour des gammes
d'adresses IP limitées. Cela a deux effets; tout d'abord, le d'adresses IP limitées. Cela a deux effets; tout d'abord, le
...@@ -1173,11 +1206,23 @@ et avoir une machine dont le nom DHCP serait "laptop". L'adresse IP de cette ...@@ -1173,11 +1206,23 @@ et avoir une machine dont le nom DHCP serait "laptop". L'adresse IP de cette
machine sera disponible à la fois pour "laptop" et "laptop.thekelleys.org.uk". machine sera disponible à la fois pour "laptop" et "laptop.thekelleys.org.uk".
Si la valeur fournie pour <domaine> est "#", alors le nom de domaine est Si la valeur fournie pour <domaine> est "#", alors le nom de domaine est
positionné à la première valeur de la directive "search" du fichier positionné à la première valeur de la directive "search" du fichier
/etc/resolv.conf (ou équivalent). La gamme d'adresses peut être de la forme /etc/resolv.conf (ou équivalent).
La gamme d'adresses peut être de la forme
<adresse ip>,<adresse ip> ou <adresse ip>/<masque de réseau> voire une simple <adresse ip>,<adresse ip> ou <adresse ip>/<masque de réseau> voire une simple
<adresse ip>. Voir <adresse ip>. Voir
.B --dhcp-fqdn .B --dhcp-fqdn
qui peut changer le comportement de dnsmasq relatif aux domaines. qui peut changer le comportement de dnsmasq relatif aux domaines.
Si la gamme d'adresse est fournie sous la forme
<adresse ip>/<taille de réseau>, alors le drapeau "local" peut-être rajouté
qui a pour effect d'ajouter --local-declarations aux requêtes DNS directes et
inverses. C-à-d
.B --domain=thekelleys.org.uk,192.168.0.0/24,local
est indentique à
.B --domain=thekelleys.org.uk,192.168.0.0/24
--local=/thekelleys.org.uk/ --local=/0.168.192.in-addr.arpa/
La taille de réseau doit-être de 8, 16 ou 24 pour être valide.
.TP .TP
.B --dhcp-fqdn .B --dhcp-fqdn
Dans le mode par défaut, dnsmasq insère les noms non-qualifiés des clients Dans le mode par défaut, dnsmasq insère les noms non-qualifiés des clients
...@@ -1284,7 +1329,9 @@ est limitée par la taille de la plage de ports ainsi définie. ...@@ -1284,7 +1329,9 @@ est limitée par la taille de la plage de ports ainsi définie.
.B \-C, --conf-file=<fichier> .B \-C, --conf-file=<fichier>
Spécifie un fichier de configuration différent. L'option "conf-file" est Spécifie un fichier de configuration différent. L'option "conf-file" est
également autorisée dans des fichiers de configuration, ce qui permet également autorisée dans des fichiers de configuration, ce qui permet
l'inclusion de multiples fichiers de configuration. l'inclusion de multiples fichiers de configuration. L'utilisation de "-" comme
nom de fichier permet la lecture par dnsmasq de sa configuration sur l'entrée standard
stdin.
.TP .TP
.B \-7, --conf-dir=<répertoire>[,<extension de fichier>...] .B \-7, --conf-dir=<répertoire>[,<extension de fichier>...]
Lis tous les fichiers du répertoire spécifié et les traite comme des fichiers de Lis tous les fichiers du répertoire spécifié et les traite comme des fichiers de
...@@ -1621,6 +1668,9 @@ et assume de ce fait qu'il s'agit de la valeur par défaut du système. ...@@ -1621,6 +1668,9 @@ et assume de ce fait qu'il s'agit de la valeur par défaut du système.
.IR /etc/dnsmasq.conf .IR /etc/dnsmasq.conf
.IR /usr/local/etc/dnsmasq.conf .IR /usr/local/etc/dnsmasq.conf
.IR /var/run/dnsmasq/resolv.conf
.IR /etc/ppp/resolv.conf
.IR /etc/dhcpc/resolv.conf
.IR /etc/resolv.conf .IR /etc/resolv.conf
......
po/de.po
View file @ 28866e95
This diff is collapsed.
po/es.po
View file @ 28866e95
This diff is collapsed.
po/fi.po
View file @ 28866e95
This diff is collapsed.
po/fr.po
View file @ 28866e95
This diff is collapsed.
po/id.po
View file @ 28866e95
This diff is collapsed.
po/it.po
View file @ 28866e95
This diff is collapsed.
po/no.po
View file @ 28866e95
This diff is collapsed.
po/pl.po
View file @ 28866e95
This diff is collapsed.
po/pt_BR.po
View file @ 28866e95
This diff is collapsed.
po/ro.po
View file @ 28866e95
This diff is collapsed.
src/bpf.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -28,7 +28,64 @@ static struct iovec ifreq = { ...@@ -28,7 +28,64 @@ static struct iovec ifreq = {
.iov_len = 0 .iov_len = 0
}; };
int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()) #if defined(HAVE_BSD_NETWORK) && !defined(__APPLE__)
#include <sys/sysctl.h>
#include <net/route.h>
#include <net/if_dl.h>
#include <netinet/if_ether.h>
int arp_enumerate(void *parm, int (*callback)())
{
int mib[6];
size_t needed;
char *next;
struct rt_msghdr *rtm;
struct sockaddr_inarp *sin2;
struct sockaddr_dl *sdl;
int rc;
mib[0] = CTL_NET;
mib[1] = PF_ROUTE;
mib[2] = 0;
mib[3] = AF_INET;
mib[4] = NET_RT_FLAGS;
#ifdef RTF_LLINFO
mib[5] = RTF_LLINFO;
#else
mib[5] = 0;
#endif
if (sysctl(mib, 6, NULL, &needed, NULL, 0) == -1 || needed == 0)
return 0;
while (1)
{
if (!expand_buf(&ifconf, needed))
return 0;
if ((rc = sysctl(mib, 6, ifconf.iov_base, &needed, NULL, 0)) == 0 ||
errno != ENOMEM)
break;
needed += needed / 8;
}
if (rc == -1)
return 0;
for (next = ifconf.iov_base ; next < (char *)ifconf.iov_base + needed; next += rtm->rtm_msglen)
{
rtm = (struct rt_msghdr *)next;
sin2 = (struct sockaddr_inarp *)(rtm + 1);
sdl = (struct sockaddr_dl *)((char *)sin2 + SA_SIZE(sin2));
if (!(*callback)(AF_INET, &sin2->sin_addr, LLADDR(sdl), sdl->sdl_alen, parm))
return 0;
}
return 1;
}
#endif
int iface_enumerate(int family, void *parm, int (*callback)())
{ {
char *ptr; char *ptr;
struct ifreq *ifr; struct ifreq *ifr;
...@@ -37,6 +94,13 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()) ...@@ -37,6 +94,13 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)())
int lastlen = 0; int lastlen = 0;
size_t len = 0; size_t len = 0;
if (family == AF_UNSPEC)
#if defined(HAVE_BSD_NETWORK) && !defined(__APPLE__)
return arp_enumerate(parm, callback);
#else
return 0; /* need code for Solaris and MacOS*/
#endif
if ((fd = socket(PF_INET, SOCK_DGRAM, 0)) == -1) if ((fd = socket(PF_INET, SOCK_DGRAM, 0)) == -1)
return 0; return 0;
...@@ -83,7 +147,9 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()) ...@@ -83,7 +147,9 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)())
ifr = (struct ifreq *)ifreq.iov_base; ifr = (struct ifreq *)ifreq.iov_base;
memcpy(ifr, ptr, len); memcpy(ifr, ptr, len);
if (ifr->ifr_addr.sa_family == AF_INET && ipv4_callback) if (ifr->ifr_addr.sa_family == family)
{
if (family == AF_INET)
{ {
struct in_addr addr, netmask, broadcast; struct in_addr addr, netmask, broadcast;
broadcast.s_addr = 0; broadcast.s_addr = 0;
...@@ -93,23 +159,23 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()) ...@@ -93,23 +159,23 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)())
netmask = ((struct sockaddr_in *) &ifr->ifr_addr)->sin_addr; netmask = ((struct sockaddr_in *) &ifr->ifr_addr)->sin_addr;
if (ioctl(fd, SIOCGIFBRDADDR, ifr) != -1) if (ioctl(fd, SIOCGIFBRDADDR, ifr) != -1)
broadcast = ((struct sockaddr_in *) &ifr->ifr_addr)->sin_addr; broadcast = ((struct sockaddr_in *) &ifr->ifr_addr)->sin_addr;
if (!((*ipv4_callback)(addr, if (!((*callback)(addr,
(int)if_nametoindex(ifr->ifr_name), (int)if_nametoindex(ifr->ifr_name),
netmask, broadcast, netmask, broadcast,
parm))) parm)))
goto err; goto err;
} }
#ifdef HAVE_IPV6 #ifdef HAVE_IPV6
else if (ifr->ifr_addr.sa_family == AF_INET6 && ipv6_callback) else if (family == AF_INET6)
{ {
struct in6_addr *addr = &((struct sockaddr_in6 *)&ifr->ifr_addr)->sin6_addr; struct in6_addr *addr = &((struct sockaddr_in6 *)&ifr->ifr_addr)->sin6_addr;
/* voodoo to clear interface field in address */ /* voodoo to clear interface field in address */
if (!(daemon->options & OPT_NOWILD) && IN6_IS_ADDR_LINKLOCAL(addr)) if (!option_bool(OPT_NOWILD) && IN6_IS_ADDR_LINKLOCAL(addr))
{ {
addr->s6_addr[2] = 0; addr->s6_addr[2] = 0;
addr->s6_addr[3] = 0; addr->s6_addr[3] = 0;
} }
if (!((*ipv6_callback)(addr, if (!((*callback)(addr,
(int)((struct sockaddr_in6 *)&ifr->ifr_addr)->sin6_scope_id, (int)((struct sockaddr_in6 *)&ifr->ifr_addr)->sin6_scope_id,
(int)if_nametoindex(ifr->ifr_name), (int)if_nametoindex(ifr->ifr_name),
parm))) parm)))
...@@ -117,6 +183,7 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()) ...@@ -117,6 +183,7 @@ int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)())
} }
#endif #endif
} }
}
ret = 1; ret = 1;
......
src/cache.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -75,7 +75,7 @@ void cache_init(void) ...@@ -75,7 +75,7 @@ void cache_init(void)
struct crec *crecp; struct crec *crecp;
int i; int i;
if (daemon->options & OPT_LOG) if (option_bool(OPT_LOG))
addrbuff = safe_malloc(ADDRSTRLEN); addrbuff = safe_malloc(ADDRSTRLEN);
bignames_left = daemon->cachesize/10; bignames_left = daemon->cachesize/10;
...@@ -226,7 +226,7 @@ char *cache_get_name(struct crec *crecp) ...@@ -226,7 +226,7 @@ char *cache_get_name(struct crec *crecp)
{ {
if (crecp->flags & F_BIGNAME) if (crecp->flags & F_BIGNAME)
return crecp->name.bname->name; return crecp->name.bname->name;
else if (crecp->flags & (F_DHCP | F_CONFIG)) else if (crecp->flags & F_NAMEP)
return crecp->name.namep; return crecp->name.namep;
return crecp->name.sname; return crecp->name.sname;
...@@ -366,9 +366,6 @@ struct crec *cache_insert(char *name, struct all_addr *addr, ...@@ -366,9 +366,6 @@ struct crec *cache_insert(char *name, struct all_addr *addr,
log_query(flags | F_UPSTREAM, name, addr, NULL); log_query(flags | F_UPSTREAM, name, addr, NULL);
/* CONFIG bit means something else when stored in cache entries */
flags &= ~F_CONFIG;
/* if previous insertion failed give up now. */ /* if previous insertion failed give up now. */
if (insert_error) if (insert_error)
return NULL; return NULL;
...@@ -503,7 +500,7 @@ struct crec *cache_find_by_name(struct crec *crecp, char *name, time_t now, unsi ...@@ -503,7 +500,7 @@ struct crec *cache_find_by_name(struct crec *crecp, char *name, time_t now, unsi
/* first search, look for relevant entries and push to top of list /* first search, look for relevant entries and push to top of list
also free anything which has expired */ also free anything which has expired */
struct crec *next, **up, **insert = NULL, **chainp = &ans; struct crec *next, **up, **insert = NULL, **chainp = &ans;
int ins_flags = 0; unsigned short ins_flags = 0;
for (up = hash_bucket(name), crecp = *up; crecp; crecp = next) for (up = hash_bucket(name), crecp = *up; crecp; crecp = next)
{ {
...@@ -695,7 +692,7 @@ static void add_hosts_entry(struct crec *cache, struct all_addr *addr, int addrl ...@@ -695,7 +692,7 @@ static void add_hosts_entry(struct crec *cache, struct all_addr *addr, int addrl
if (hostname_isequal(cache->name.sname, a->target) && if (hostname_isequal(cache->name.sname, a->target) &&
(lookup = whine_malloc(sizeof(struct crec)))) (lookup = whine_malloc(sizeof(struct crec))))
{ {
lookup->flags = F_FORWARD | F_IMMORTAL | F_CONFIG | F_HOSTS | F_CNAME; lookup->flags = F_FORWARD | F_IMMORTAL | F_NAMEP | F_HOSTS | F_CNAME;
lookup->name.namep = a->alias; lookup->name.namep = a->alias;
lookup->addr.cname.cache = cache; lookup->addr.cname.cache = cache;
lookup->addr.cname.uid = index; lookup->addr.cname.uid = index;
...@@ -832,7 +829,7 @@ static int read_hostsfile(char *filename, int index, int cache_size) ...@@ -832,7 +829,7 @@ static int read_hostsfile(char *filename, int index, int cache_size)
if ((canon = canonicalise(token, &nomem))) if ((canon = canonicalise(token, &nomem)))
{ {
/* If set, add a version of the name with a default domain appended */ /* If set, add a version of the name with a default domain appended */
if ((daemon->options & OPT_EXPAND) && domain_suffix && !fqdn && if (option_bool(OPT_EXPAND) && domain_suffix && !fqdn &&
(cache = whine_malloc(sizeof(struct crec) + (cache = whine_malloc(sizeof(struct crec) +
strlen(canon)+2+strlen(domain_suffix)-SMALLDNAME))) strlen(canon)+2+strlen(domain_suffix)-SMALLDNAME)))
{ {
...@@ -896,107 +893,17 @@ void cache_reload(void) ...@@ -896,107 +893,17 @@ void cache_reload(void)
up = &cache->hash_next; up = &cache->hash_next;
} }
if ((daemon->options & OPT_NO_HOSTS) && !daemon->addn_hosts) if (option_bool(OPT_NO_HOSTS) && !daemon->addn_hosts)
{ {
if (daemon->cachesize > 0) if (daemon->cachesize > 0)
my_syslog(LOG_INFO, _("cleared cache")); my_syslog(LOG_INFO, _("cleared cache"));
return; return;
} }
if (!(daemon->options & OPT_NO_HOSTS)) if (!option_bool(OPT_NO_HOSTS))
total_size = read_hostsfile(HOSTSFILE, 0, total_size); total_size = read_hostsfile(HOSTSFILE, 0, total_size);
for (i = 0, ah = daemon->addn_hosts; ah; ah = ah->next) daemon->addn_hosts = expand_filelist(daemon->addn_hosts);
{
if (i <= ah->index)
i = ah->index + 1;
if (ah->flags & AH_DIR)
ah->flags |= AH_INACTIVE;
else
ah->flags &= ~AH_INACTIVE;
}
for (ah = daemon->addn_hosts; ah; ah = ah->next)
if (!(ah->flags & AH_INACTIVE))
{
struct stat buf;
if (stat(ah->fname, &buf) != -1 && S_ISDIR(buf.st_mode))
{
DIR *dir_stream;
struct dirent *ent;
/* don't read this as a file */
ah->flags |= AH_INACTIVE;
if (!(dir_stream = opendir(ah->fname)))
my_syslog(LOG_ERR, _("cannot access directory %s: %s"),
ah->fname, strerror(errno));
else
{
while ((ent = readdir(dir_stream)))
{
size_t lendir = strlen(ah->fname);
size_t lenfile = strlen(ent->d_name);
struct hostsfile *ah1;
char *path;
/* ignore emacs backups and dotfiles */
if (lenfile == 0 ||
ent->d_name[lenfile - 1] == '~' ||
(ent->d_name[0] == '#' && ent->d_name[lenfile - 1] == '#') ||
ent->d_name[0] == '.')
continue;
/* see if we have an existing record.
dir is ah->fname
file is ent->d_name
path to match is ah1->fname */
for (ah1 = daemon->addn_hosts; ah1; ah1 = ah1->next)
{
if (lendir < strlen(ah1->fname) &&
strstr(ah1->fname, ah->fname) == ah1->fname &&
ah1->fname[lendir] == '/' &&
strcmp(ah1->fname + lendir + 1, ent->d_name) == 0)
{
ah1->flags &= ~AH_INACTIVE;
break;
}
}
/* make new record */
if (!ah1)
{
if (!(ah1 = whine_malloc(sizeof(struct hostsfile))))
continue;
if (!(path = whine_malloc(lendir + lenfile + 2)))
{
free(ah1);
continue;
}
strcpy(path, ah->fname);
strcat(path, "/");
strcat(path, ent->d_name);
ah1->fname = path;
ah1->index = i++;
ah1->flags = AH_DIR;
ah1->next = daemon->addn_hosts;
daemon->addn_hosts = ah1;
}
/* inactivate record if not regular file */
if ((ah1->flags & AH_DIR) && stat(ah1->fname, &buf) != -1 && !S_ISREG(buf.st_mode))
ah1->flags |= AH_INACTIVE;
}
closedir(dir_stream);
}
}
}
for (ah = daemon->addn_hosts; ah; ah = ah->next) for (ah = daemon->addn_hosts; ah; ah = ah->next)
if (!(ah->flags & AH_INACTIVE)) if (!(ah->flags & AH_INACTIVE))
total_size = read_hostsfile(ah->fname, ah->index, total_size); total_size = read_hostsfile(ah->fname, ah->index, total_size);
...@@ -1036,7 +943,7 @@ void cache_add_dhcp_entry(char *host_name, ...@@ -1036,7 +943,7 @@ void cache_add_dhcp_entry(char *host_name,
struct in_addr *host_address, time_t ttd) struct in_addr *host_address, time_t ttd)
{ {
struct crec *crec = NULL, *aliasc; struct crec *crec = NULL, *aliasc;
unsigned short flags = F_DHCP | F_FORWARD | F_IPV4 | F_REVERSE; unsigned short flags = F_NAMEP | F_DHCP | F_FORWARD | F_IPV4 | F_REVERSE;
int in_hosts = 0; int in_hosts = 0;
struct cname *a; struct cname *a;
...@@ -1049,13 +956,13 @@ void cache_add_dhcp_entry(char *host_name, ...@@ -1049,13 +956,13 @@ void cache_add_dhcp_entry(char *host_name,
in_hosts = 1; in_hosts = 1;
if (crec->flags & F_CNAME) if (crec->flags & F_CNAME)
my_syslog(LOG_WARNING, my_syslog(MS_DHCP | LOG_WARNING,
_("%s is a CNAME, not giving it to the DHCP lease of %s"), _("%s is a CNAME, not giving it to the DHCP lease of %s"),
host_name, inet_ntoa(*host_address)); host_name, inet_ntoa(*host_address));
else if (crec->addr.addr.addr.addr4.s_addr != host_address->s_addr) else if (crec->addr.addr.addr.addr4.s_addr != host_address->s_addr)
{ {
strcpy(daemon->namebuff, inet_ntoa(crec->addr.addr.addr.addr4)); strcpy(daemon->namebuff, inet_ntoa(crec->addr.addr.addr.addr4));
my_syslog(LOG_WARNING, my_syslog(MS_DHCP | LOG_WARNING,
_("not giving name %s to the DHCP lease of %s because " _("not giving name %s to the DHCP lease of %s because "
"the name exists in %s with address %s"), "the name exists in %s with address %s"),
host_name, inet_ntoa(*host_address), host_name, inet_ntoa(*host_address),
...@@ -1109,7 +1016,7 @@ void cache_add_dhcp_entry(char *host_name, ...@@ -1109,7 +1016,7 @@ void cache_add_dhcp_entry(char *host_name,
if (aliasc) if (aliasc)
{ {
aliasc->flags = F_FORWARD | F_CONFIG | F_DHCP | F_CNAME; aliasc->flags = F_FORWARD | F_NAMEP | F_DHCP | F_CNAME;
if (ttd == 0) if (ttd == 0)
aliasc->flags |= F_IMMORTAL; aliasc->flags |= F_IMMORTAL;
else else
...@@ -1143,12 +1050,15 @@ void dump_cache(time_t now) ...@@ -1143,12 +1050,15 @@ void dump_cache(time_t now)
serv->flags &= ~SERV_COUNTED; serv->flags &= ~SERV_COUNTED;
for (serv = daemon->servers; serv; serv = serv->next) for (serv = daemon->servers; serv; serv = serv->next)
if (!(serv->flags & (SERV_NO_ADDR | SERV_LITERAL_ADDRESS | SERV_COUNTED))) if (!(serv->flags &
(SERV_NO_ADDR | SERV_LITERAL_ADDRESS | SERV_COUNTED | SERV_USE_RESOLV | SERV_NO_REBIND)))
{ {
int port; int port;
unsigned int queries = 0, failed_queries = 0; unsigned int queries = 0, failed_queries = 0;
for (serv1 = serv; serv1; serv1 = serv1->next) for (serv1 = serv; serv1; serv1 = serv1->next)
if (!(serv1->flags & (SERV_NO_ADDR | SERV_LITERAL_ADDRESS | SERV_COUNTED)) && sockaddr_isequal(&serv->addr, &serv1->addr)) if (!(serv1->flags &
(SERV_NO_ADDR | SERV_LITERAL_ADDRESS | SERV_COUNTED | SERV_USE_RESOLV | SERV_NO_REBIND)) &&
sockaddr_isequal(&serv->addr, &serv1->addr))
{ {
serv1->flags |= SERV_COUNTED; serv1->flags |= SERV_COUNTED;
queries += serv1->queries; queries += serv1->queries;
...@@ -1158,11 +1068,11 @@ void dump_cache(time_t now) ...@@ -1158,11 +1068,11 @@ void dump_cache(time_t now)
my_syslog(LOG_INFO, _("server %s#%d: queries sent %u, retried or failed %u"), addrbuff, port, queries, failed_queries); my_syslog(LOG_INFO, _("server %s#%d: queries sent %u, retried or failed %u"), addrbuff, port, queries, failed_queries);
} }
if ((daemon->options & (OPT_DEBUG | OPT_LOG))) if (option_bool(OPT_DEBUG) || option_bool(OPT_LOG))
{ {
struct crec *cache ; struct crec *cache ;
int i; int i;
my_syslog(LOG_DEBUG, "Host Address Flags Expires"); my_syslog(LOG_INFO, "Host Address Flags Expires");
for (i=0; i<hash_size; i++) for (i=0; i<hash_size; i++)
for (cache = hash_table[i]; cache; cache = cache->hash_next) for (cache = hash_table[i]; cache; cache = cache->hash_next)
...@@ -1208,7 +1118,7 @@ void dump_cache(time_t now) ...@@ -1208,7 +1118,7 @@ void dump_cache(time_t now)
/* ctime includes trailing \n - eat it */ /* ctime includes trailing \n - eat it */
*(p-1) = 0; *(p-1) = 0;
#endif #endif
my_syslog(LOG_DEBUG, daemon->namebuff); my_syslog(LOG_INFO, daemon->namebuff);
} }
} }
} }
...@@ -1237,12 +1147,12 @@ void querystr(char *str, unsigned short type) ...@@ -1237,12 +1147,12 @@ void querystr(char *str, unsigned short type)
sprintf(str,"query[%s]", typestr[i].name); sprintf(str,"query[%s]", typestr[i].name);
} }
void log_query(unsigned short flags, char *name, struct all_addr *addr, char *arg) void log_query(unsigned int flags, char *name, struct all_addr *addr, char *arg)
{ {
char *source, *dest = addrbuff; char *source, *dest = addrbuff;
char *verb = "is"; char *verb = "is";
if (!(daemon->options & OPT_LOG)) if (!option_bool(OPT_LOG))
return; return;
if (addr) if (addr)
...@@ -1283,13 +1193,9 @@ void log_query(unsigned short flags, char *name, struct all_addr *addr, char *ar ...@@ -1283,13 +1193,9 @@ void log_query(unsigned short flags, char *name, struct all_addr *addr, char *ar
} }
} }
else if (flags & F_CNAME) else if (flags & F_CNAME)
{
/* nasty abuse of NXDOMAIN and CNAME flags */
if (flags & F_NXDOMAIN)
dest = arg;
else
dest = "<CNAME>"; dest = "<CNAME>";
} else if (flags & F_RRNAME)
dest = arg;
if (flags & F_CONFIG) if (flags & F_CONFIG)
source = "config"; source = "config";
...@@ -1315,6 +1221,6 @@ void log_query(unsigned short flags, char *name, struct all_addr *addr, char *ar ...@@ -1315,6 +1221,6 @@ void log_query(unsigned short flags, char *name, struct all_addr *addr, char *ar
if (strlen(name) == 0) if (strlen(name) == 0)
name = "."; name = ".";
my_syslog(LOG_DEBUG, "%s %s %s %s", source, name, verb, dest); my_syslog(LOG_INFO, "%s %s %s %s", source, name, verb, dest);
} }
src/config.h
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -14,7 +14,7 @@ ...@@ -14,7 +14,7 @@
along with this program. If not, see <http://www.gnu.org/licenses/>. along with this program. If not, see <http://www.gnu.org/licenses/>.
*/ */
#define VERSION "2.55" #define VERSION "2.56"
#define FTABSIZ 150 /* max number of outstanding requests (default) */ #define FTABSIZ 150 /* max number of outstanding requests (default) */
#define MAX_PROCS 20 /* max no children for TCP requests */ #define MAX_PROCS 20 /* max no children for TCP requests */
...@@ -22,7 +22,7 @@ ...@@ -22,7 +22,7 @@
#define EDNS_PKTSZ 4096 /* default max EDNS.0 UDP packet from RFC5625 */ #define EDNS_PKTSZ 4096 /* default max EDNS.0 UDP packet from RFC5625 */
#define TIMEOUT 10 /* drop UDP queries after TIMEOUT seconds */ #define TIMEOUT 10 /* drop UDP queries after TIMEOUT seconds */
#define FORWARD_TEST 50 /* try all servers every 50 queries */ #define FORWARD_TEST 50 /* try all servers every 50 queries */
#define FORWARD_TIME 20 /* or 10 seconds */ #define FORWARD_TIME 20 /* or 20 seconds */
#define RANDOM_SOCKS 64 /* max simultaneous random ports */ #define RANDOM_SOCKS 64 /* max simultaneous random ports */
#define LEASE_RETRY 60 /* on error, retry writing leasefile after LEASE_RETRY seconds */ #define LEASE_RETRY 60 /* on error, retry writing leasefile after LEASE_RETRY seconds */
#define CACHESIZ 150 /* default cache size */ #define CACHESIZ 150 /* default cache size */
...@@ -72,6 +72,7 @@ ...@@ -72,6 +72,7 @@
#define LOG_MAX 5 /* log-queue length */ #define LOG_MAX 5 /* log-queue length */
#define RANDFILE "/dev/urandom" #define RANDFILE "/dev/urandom"
#define DAD_WAIT 20 /* retry binding IPv6 sockets for this long */ #define DAD_WAIT 20 /* retry binding IPv6 sockets for this long */
#define EDNS0_OPTION_MAC 5 /* dyndns.org temporary assignment */
/* DBUS interface specifics */ /* DBUS interface specifics */
#define DNSMASQ_SERVICE "uk.org.thekelleys.dnsmasq" #define DNSMASQ_SERVICE "uk.org.thekelleys.dnsmasq"
......
src/dbus.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
......
src/dhcp.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -54,7 +54,7 @@ static int make_fd(int port) ...@@ -54,7 +54,7 @@ static int make_fd(int port)
/* When bind-interfaces is set, there might be more than one dnmsasq /* When bind-interfaces is set, there might be more than one dnmsasq
instance binding port 67. That's OK if they serve different networks. instance binding port 67. That's OK if they serve different networks.
Need to set REUSEADDR to make this posible, or REUSEPORT on *BSD. */ Need to set REUSEADDR to make this posible, or REUSEPORT on *BSD. */
if (daemon->options & OPT_NOWILD) if (option_bool(OPT_NOWILD))
{ {
#ifdef SO_REUSEPORT #ifdef SO_REUSEPORT
int rc = setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &oneopt, sizeof(oneopt)); int rc = setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &oneopt, sizeof(oneopt));
...@@ -96,7 +96,7 @@ void dhcp_init(void) ...@@ -96,7 +96,7 @@ void dhcp_init(void)
we drop root. Also, set buffer size small, to avoid wasting we drop root. Also, set buffer size small, to avoid wasting
kernel buffers */ kernel buffers */
if (daemon->options & OPT_NO_PING) if (option_bool(OPT_NO_PING))
daemon->dhcp_icmp_fd = -1; daemon->dhcp_icmp_fd = -1;
else if ((daemon->dhcp_icmp_fd = make_icmp_sock()) == -1 || else if ((daemon->dhcp_icmp_fd = make_icmp_sock()) == -1 ||
setsockopt(daemon->dhcp_icmp_fd, SOL_SOCKET, SO_RCVBUF, &oneopt, sizeof(oneopt)) == -1 ) setsockopt(daemon->dhcp_icmp_fd, SOL_SOCKET, SO_RCVBUF, &oneopt, sizeof(oneopt)) == -1 )
...@@ -295,7 +295,7 @@ void dhcp_packet(time_t now, int pxe_fd) ...@@ -295,7 +295,7 @@ void dhcp_packet(time_t now, int pxe_fd)
} }
} }
if (!iface_enumerate(&parm, complete_context, NULL)) if (!iface_enumerate(AF_INET, &parm, complete_context))
return; return;
lease_prune(NULL, now); /* lose any expired leases */ lease_prune(NULL, now); /* lose any expired leases */
iov.iov_len = dhcp_reply(parm.current, ifr.ifr_name, iface_index, (size_t)sz, iov.iov_len = dhcp_reply(parm.current, ifr.ifr_name, iface_index, (size_t)sz,
...@@ -660,7 +660,7 @@ int address_allocate(struct dhcp_context *context, ...@@ -660,7 +660,7 @@ int address_allocate(struct dhcp_context *context,
*addrp = addr; *addrp = addr;
if (daemon->options & OPT_NO_PING) if (option_bool(OPT_NO_PING))
return 1; return 1;
/* check if we failed to ping addr sometime in the last /* check if we failed to ping addr sometime in the last
......
src/dnsmasq.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -133,10 +133,10 @@ int main (int argc, char **argv) ...@@ -133,10 +133,10 @@ int main (int argc, char **argv)
#elif !(defined(IP_RECVDSTADDR) && \ #elif !(defined(IP_RECVDSTADDR) && \
defined(IP_RECVIF) && \ defined(IP_RECVIF) && \
defined(IP_SENDSRCADDR)) defined(IP_SENDSRCADDR))
if (!(daemon->options & OPT_NOWILD)) if (!option_bool(OPT_NOWILD))
{ {
bind_fallback = 1; bind_fallback = 1;
daemon->options |= OPT_NOWILD; set_option_bool(OPT_NOWILD);
} }
#endif #endif
...@@ -168,7 +168,7 @@ int main (int argc, char **argv) ...@@ -168,7 +168,7 @@ int main (int argc, char **argv)
if (!enumerate_interfaces()) if (!enumerate_interfaces())
die(_("failed to find list of interfaces: %s"), NULL, EC_MISC); die(_("failed to find list of interfaces: %s"), NULL, EC_MISC);
if (daemon->options & OPT_NOWILD) if (option_bool(OPT_NOWILD))
{ {
daemon->listeners = create_bound_listeners(); daemon->listeners = create_bound_listeners();
...@@ -183,14 +183,13 @@ int main (int argc, char **argv) ...@@ -183,14 +183,13 @@ int main (int argc, char **argv)
die(_("no interface with address %s"), daemon->namebuff, EC_BADNET); die(_("no interface with address %s"), daemon->namebuff, EC_BADNET);
} }
} }
else if ((daemon->port != 0 || daemon->tftp_interfaces || daemon->tftp_unlimited) && else
!(daemon->listeners = create_wildcard_listeners())) daemon->listeners = create_wildcard_listeners();
die(_("failed to create listening socket: %s"), NULL, EC_BADNET);
if (daemon->port != 0) if (daemon->port != 0)
cache_init(); cache_init();
if (daemon->options & OPT_DBUS) if (option_bool(OPT_DBUS))
#ifdef HAVE_DBUS #ifdef HAVE_DBUS
{ {
char *err; char *err;
...@@ -275,7 +274,7 @@ int main (int argc, char **argv) ...@@ -275,7 +274,7 @@ int main (int argc, char **argv)
err_pipe[1] = -1; err_pipe[1] = -1;
if (!(daemon->options & OPT_DEBUG)) if (!option_bool(OPT_DEBUG))
{ {
/* The following code "daemonizes" the process. /* The following code "daemonizes" the process.
See Stevens section 12.4 */ See Stevens section 12.4 */
...@@ -284,7 +283,7 @@ int main (int argc, char **argv) ...@@ -284,7 +283,7 @@ int main (int argc, char **argv)
die(_("cannot chdir to filesystem root: %s"), NULL, EC_MISC); die(_("cannot chdir to filesystem root: %s"), NULL, EC_MISC);
#ifndef NO_FORK #ifndef NO_FORK
if (!(daemon->options & OPT_NO_FORK)) if (!option_bool(OPT_NO_FORK))
{ {
pid_t pid; pid_t pid;
...@@ -345,7 +344,7 @@ int main (int argc, char **argv) ...@@ -345,7 +344,7 @@ int main (int argc, char **argv)
log_err = log_start(ent_pw, err_pipe[1]); log_err = log_start(ent_pw, err_pipe[1]);
if (!(daemon->options & OPT_DEBUG)) if (!option_bool(OPT_DEBUG))
{ {
/* open stdout etc to /dev/null */ /* open stdout etc to /dev/null */
int nullfd = open("/dev/null", O_RDWR); int nullfd = open("/dev/null", O_RDWR);
...@@ -362,7 +361,7 @@ int main (int argc, char **argv) ...@@ -362,7 +361,7 @@ int main (int argc, char **argv)
daemon->helperfd = create_helper(pipewrite, err_pipe[1], script_uid, script_gid, max_fd); daemon->helperfd = create_helper(pipewrite, err_pipe[1], script_uid, script_gid, max_fd);
#endif #endif
if (!(daemon->options & OPT_DEBUG) && getuid() == 0) if (!option_bool(OPT_DEBUG) && getuid() == 0)
{ {
int bad_capabilities = 0; int bad_capabilities = 0;
gid_t dummy; gid_t dummy;
...@@ -440,7 +439,7 @@ int main (int argc, char **argv) ...@@ -440,7 +439,7 @@ int main (int argc, char **argv)
} }
#ifdef HAVE_LINUX_NETWORK #ifdef HAVE_LINUX_NETWORK
if (daemon->options & OPT_DEBUG) if (option_bool(OPT_DEBUG))
prctl(PR_SET_DUMPABLE, 1); prctl(PR_SET_DUMPABLE, 1);
#endif #endif
...@@ -454,7 +453,7 @@ int main (int argc, char **argv) ...@@ -454,7 +453,7 @@ int main (int argc, char **argv)
my_syslog(LOG_INFO, _("compile time options: %s"), compile_opts); my_syslog(LOG_INFO, _("compile time options: %s"), compile_opts);
#ifdef HAVE_DBUS #ifdef HAVE_DBUS
if (daemon->options & OPT_DBUS) if (option_bool(OPT_DBUS))
{ {
if (daemon->dbus) if (daemon->dbus)
my_syslog(LOG_INFO, _("DBus support enabled: connected to system bus")); my_syslog(LOG_INFO, _("DBus support enabled: connected to system bus"));
...@@ -470,12 +469,12 @@ int main (int argc, char **argv) ...@@ -470,12 +469,12 @@ int main (int argc, char **argv)
if (bind_fallback) if (bind_fallback)
my_syslog(LOG_WARNING, _("setting --bind-interfaces option because of OS limitations")); my_syslog(LOG_WARNING, _("setting --bind-interfaces option because of OS limitations"));
if (!(daemon->options & OPT_NOWILD)) if (!option_bool(OPT_NOWILD))
for (if_tmp = daemon->if_names; if_tmp; if_tmp = if_tmp->next) for (if_tmp = daemon->if_names; if_tmp; if_tmp = if_tmp->next)
if (if_tmp->name && !if_tmp->used) if (if_tmp->name && !if_tmp->used)
my_syslog(LOG_WARNING, _("warning: interface %s does not currently exist"), if_tmp->name); my_syslog(LOG_WARNING, _("warning: interface %s does not currently exist"), if_tmp->name);
if (daemon->port != 0 && (daemon->options & OPT_NO_RESOLV)) if (daemon->port != 0 && option_bool(OPT_NO_RESOLV))
{ {
if (daemon->resolv_files && !daemon->resolv_files->is_default) if (daemon->resolv_files && !daemon->resolv_files->is_default)
my_syslog(LOG_WARNING, _("warning: ignoring resolv-file flag because no-resolv is set")); my_syslog(LOG_WARNING, _("warning: ignoring resolv-file flag because no-resolv is set"));
...@@ -518,7 +517,7 @@ int main (int argc, char **argv) ...@@ -518,7 +517,7 @@ int main (int argc, char **argv)
my_syslog(MS_TFTP | LOG_INFO, "TFTP %s%s %s", my_syslog(MS_TFTP | LOG_INFO, "TFTP %s%s %s",
daemon->tftp_prefix ? _("root is ") : _("enabled"), daemon->tftp_prefix ? _("root is ") : _("enabled"),
daemon->tftp_prefix ? daemon->tftp_prefix: "", daemon->tftp_prefix ? daemon->tftp_prefix: "",
daemon->options & OPT_TFTP_SECURE ? _("secure mode") : ""); option_bool(OPT_TFTP_SECURE) ? _("secure mode") : "");
/* This is a guess, it assumes that for small limits, /* This is a guess, it assumes that for small limits,
disjoint files might be served, but for large limits, disjoint files might be served, but for large limits,
...@@ -580,7 +579,7 @@ int main (int argc, char **argv) ...@@ -580,7 +579,7 @@ int main (int argc, char **argv)
/* Whilst polling for the dbus, or doing a tftp transfer, wake every quarter second */ /* Whilst polling for the dbus, or doing a tftp transfer, wake every quarter second */
if (daemon->tftp_trans || if (daemon->tftp_trans ||
((daemon->options & OPT_DBUS) && !daemon->dbus)) (option_bool(OPT_DBUS) && !daemon->dbus))
{ {
t.tv_sec = 0; t.tv_sec = 0;
t.tv_usec = 250000; t.tv_usec = 250000;
...@@ -664,7 +663,7 @@ int main (int argc, char **argv) ...@@ -664,7 +663,7 @@ int main (int argc, char **argv)
#ifdef HAVE_DBUS #ifdef HAVE_DBUS
/* if we didn't create a DBus connection, retry now. */ /* if we didn't create a DBus connection, retry now. */
if ((daemon->options & OPT_DBUS) && !daemon->dbus) if (option_bool(OPT_DBUS) && !daemon->dbus)
{ {
char *err; char *err;
if ((err = dbus_init())) if ((err = dbus_init()))
...@@ -801,7 +800,7 @@ static void async_event(int pipe, time_t now) ...@@ -801,7 +800,7 @@ static void async_event(int pipe, time_t now)
{ {
case EVENT_RELOAD: case EVENT_RELOAD:
clear_cache_and_reload(now); clear_cache_and_reload(now);
if (daemon->port != 0 && daemon->resolv_files && (daemon->options & OPT_NO_POLL)) if (daemon->port != 0 && daemon->resolv_files && option_bool(OPT_NO_POLL))
{ {
reload_servers(daemon->resolv_files->name); reload_servers(daemon->resolv_files->name);
check_servers(); check_servers();
...@@ -908,7 +907,7 @@ void poll_resolv(int force, int do_reload, time_t now) ...@@ -908,7 +907,7 @@ void poll_resolv(int force, int do_reload, time_t now)
Go through and find the one which changed _last_. Go through and find the one which changed _last_.
Warn of any which can't be read. */ Warn of any which can't be read. */
if (daemon->port == 0 || (daemon->options & OPT_NO_POLL)) if (daemon->port == 0 || option_bool(OPT_NO_POLL))
return; return;
for (latest = NULL, res = daemon->resolv_files; res; res = res->next) for (latest = NULL, res = daemon->resolv_files; res; res = res->next)
...@@ -954,7 +953,7 @@ void poll_resolv(int force, int do_reload, time_t now) ...@@ -954,7 +953,7 @@ void poll_resolv(int force, int do_reload, time_t now)
my_syslog(LOG_INFO, _("reading %s"), latest->name); my_syslog(LOG_INFO, _("reading %s"), latest->name);
warned = 0; warned = 0;
check_servers(); check_servers();
if ((daemon->options & OPT_RELOAD) && do_reload) if (option_bool(OPT_RELOAD) && do_reload)
clear_cache_and_reload(now); clear_cache_and_reload(now);
} }
else else
...@@ -977,7 +976,7 @@ void clear_cache_and_reload(time_t now) ...@@ -977,7 +976,7 @@ void clear_cache_and_reload(time_t now)
#ifdef HAVE_DHCP #ifdef HAVE_DHCP
if (daemon->dhcp) if (daemon->dhcp)
{ {
if (daemon->options & OPT_ETHERS) if (option_bool(OPT_ETHERS))
dhcp_read_ethers(); dhcp_read_ethers();
reread_dhcp(); reread_dhcp();
dhcp_update_configs(daemon->dhcp_conf); dhcp_update_configs(daemon->dhcp_conf);
...@@ -1094,7 +1093,7 @@ static void check_dns_listeners(fd_set *set, time_t now) ...@@ -1094,7 +1093,7 @@ static void check_dns_listeners(fd_set *set, time_t now)
if (confd == -1) if (confd == -1)
continue; continue;
if (daemon->options & OPT_NOWILD) if (option_bool(OPT_NOWILD))
iface = listener->iface; iface = listener->iface;
else else
{ {
...@@ -1120,7 +1119,7 @@ static void check_dns_listeners(fd_set *set, time_t now) ...@@ -1120,7 +1119,7 @@ static void check_dns_listeners(fd_set *set, time_t now)
close(confd); close(confd);
} }
#ifndef NO_FORK #ifndef NO_FORK
else if (!(daemon->options & OPT_DEBUG) && (p = fork()) != 0) else if (!option_bool(OPT_DEBUG) && (p = fork()) != 0)
{ {
if (p != -1) if (p != -1)
{ {
...@@ -1147,7 +1146,7 @@ static void check_dns_listeners(fd_set *set, time_t now) ...@@ -1147,7 +1146,7 @@ static void check_dns_listeners(fd_set *set, time_t now)
#ifndef NO_FORK #ifndef NO_FORK
/* Arrange for SIGALARM after CHILD_LIFETIME seconds to /* Arrange for SIGALARM after CHILD_LIFETIME seconds to
terminate the process. */ terminate the process. */
if (!(daemon->options & OPT_DEBUG)) if (!option_bool(OPT_DEBUG))
alarm(CHILD_LIFETIME); alarm(CHILD_LIFETIME);
#endif #endif
...@@ -1179,7 +1178,7 @@ static void check_dns_listeners(fd_set *set, time_t now) ...@@ -1179,7 +1178,7 @@ static void check_dns_listeners(fd_set *set, time_t now)
close(s->tcpfd); close(s->tcpfd);
} }
#ifndef NO_FORK #ifndef NO_FORK
if (!(daemon->options & OPT_DEBUG)) if (!option_bool(OPT_DEBUG))
{ {
flush_log(); flush_log();
_exit(0); _exit(0);
......
src/dnsmasq.h
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -14,7 +14,7 @@ ...@@ -14,7 +14,7 @@
along with this program. If not, see <http://www.gnu.org/licenses/>. along with this program. If not, see <http://www.gnu.org/licenses/>.
*/ */
#define COPYRIGHT "Copyright (c) 2000-2010 Simon Kelley" #define COPYRIGHT "Copyright (c) 2000-2011 Simon Kelley"
#ifndef NO_LARGEFILE #ifndef NO_LARGEFILE
/* Ensure we can use files >2GB (log files may grow this big) */ /* Ensure we can use files >2GB (log files may grow this big) */
...@@ -163,38 +163,44 @@ struct event_desc { ...@@ -163,38 +163,44 @@ struct event_desc {
*/ */
#define DNSMASQ_PACKETSZ PACKETSZ+MAXDNAME+RRFIXEDSZ #define DNSMASQ_PACKETSZ PACKETSZ+MAXDNAME+RRFIXEDSZ
#define OPT_BOGUSPRIV (1u<<0) /* Trust the compiler dead-code elimator.... */
#define OPT_FILTER (1u<<1) #define option_bool(x) (((x) < 32) ? daemon->options & (1u << (x)) : daemon->options2 & (1u << ((x) - 32)))
#define OPT_LOG (1u<<2)
#define OPT_SELFMX (1u<<3) #define OPT_BOGUSPRIV 0
#define OPT_NO_HOSTS (1u<<4) #define OPT_FILTER 1
#define OPT_NO_POLL (1u<<5) #define OPT_LOG 2
#define OPT_DEBUG (1u<<6) #define OPT_SELFMX 3
#define OPT_ORDER (1u<<7) #define OPT_NO_HOSTS 4
#define OPT_NO_RESOLV (1u<<8) #define OPT_NO_POLL 5
#define OPT_EXPAND (1u<<9) #define OPT_DEBUG 6
#define OPT_LOCALMX (1u<<10) #define OPT_ORDER 7
#define OPT_NO_NEG (1u<<11) #define OPT_NO_RESOLV 8
#define OPT_NODOTS_LOCAL (1u<<12) #define OPT_EXPAND 9
#define OPT_NOWILD (1u<<13) #define OPT_LOCALMX 10
#define OPT_ETHERS (1u<<14) #define OPT_NO_NEG 11
#define OPT_RESOLV_DOMAIN (1u<<15) #define OPT_NODOTS_LOCAL 12
#define OPT_NO_FORK (1u<<16) #define OPT_NOWILD 13
#define OPT_AUTHORITATIVE (1u<<17) #define OPT_ETHERS 14
#define OPT_LOCALISE (1u<<18) #define OPT_RESOLV_DOMAIN 15
#define OPT_DBUS (1u<<19) #define OPT_NO_FORK 16
#define OPT_DHCP_FQDN (1u<<20) #define OPT_AUTHORITATIVE 17
#define OPT_NO_PING (1u<<21) #define OPT_LOCALISE 18
#define OPT_LEASE_RO (1u<<22) #define OPT_DBUS 19
#define OPT_ALL_SERVERS (1u<<23) #define OPT_DHCP_FQDN 20
#define OPT_RELOAD (1u<<24) #define OPT_NO_PING 21
#define OPT_LOCAL_REBIND (1u<<25) #define OPT_LEASE_RO 22
#define OPT_TFTP_SECURE (1u<<26) #define OPT_ALL_SERVERS 23
#define OPT_TFTP_NOBLOCK (1u<<27) #define OPT_RELOAD 24
#define OPT_LOG_OPTS (1u<<28) #define OPT_LOCAL_REBIND 25
#define OPT_TFTP_APREF (1u<<29) #define OPT_TFTP_SECURE 26
#define OPT_NO_OVERRIDE (1u<<30) #define OPT_TFTP_NOBLOCK 27
#define OPT_NO_REBIND (1u<<31) #define OPT_LOG_OPTS 28
#define OPT_TFTP_APREF 29
#define OPT_NO_OVERRIDE 30
#define OPT_NO_REBIND 31
#define OPT_ADD_MAC 32
#define OPT_DNSSEC 33
#define OPT_LAST 34
/* extra flags for my_syslog, we use a couple of facilities since they are known /* extra flags for my_syslog, we use a couple of facilities since they are known
not to occupy the same bits as priorities, no matter how syslog.h is set up. */ not to occupy the same bits as priorities, no matter how syslog.h is set up. */
...@@ -235,7 +241,8 @@ struct naptr { ...@@ -235,7 +241,8 @@ struct naptr {
}; };
struct txt_record { struct txt_record {
char *name, *txt; char *name;
unsigned char *txt;
unsigned short class, len; unsigned short class, len;
struct txt_record *next; struct txt_record *next;
}; };
...@@ -280,22 +287,28 @@ struct crec { ...@@ -280,22 +287,28 @@ struct crec {
} name; } name;
}; };
#define F_IMMORTAL 1 #define F_IMMORTAL (1u<<0)
#define F_CONFIG 2 #define F_NAMEP (1u<<1)
#define F_REVERSE 4 #define F_REVERSE (1u<<2)
#define F_FORWARD 8 #define F_FORWARD (1u<<3)
#define F_DHCP 16 #define F_DHCP (1u<<4)
#define F_NEG 32 #define F_NEG (1u<<5)
#define F_HOSTS 64 #define F_HOSTS (1u<<6)
#define F_IPV4 128 #define F_IPV4 (1u<<7)
#define F_IPV6 256 #define F_IPV6 (1u<<8)
#define F_BIGNAME 512 #define F_BIGNAME (1u<<9)
#define F_UPSTREAM 1024 #define F_NXDOMAIN (1u<<10)
#define F_SERVER 2048 #define F_CNAME (1u<<11)
#define F_NXDOMAIN 4096 #define F_NOERR (1u<<12)
#define F_QUERY 8192 #define F_CONFIG (1u<<13)
#define F_CNAME 16384 /* below here are only valid as args to log_query: cache
#define F_NOERR 32768 entries are limited to 16 bits */
#define F_UPSTREAM (1u<<16)
#define F_RRNAME (1u<<17)
#define F_SERVER (1u<<18)
#define F_QUERY (1u<<19)
#define F_NSRR (1u<<20)
/* struct sockaddr is not large enough to hold any address, /* struct sockaddr is not large enough to hold any address,
and specifically not big enough to hold an IPv6 address. and specifically not big enough to hold an IPv6 address.
...@@ -374,7 +387,7 @@ struct resolvc { ...@@ -374,7 +387,7 @@ struct resolvc {
char *name; char *name;
}; };
/* adn-hosts parms from command-line */ /* adn-hosts parms from command-line (also dhcp-hostsfile and dhcp-optsfile */
#define AH_DIR 1 #define AH_DIR 1
#define AH_INACTIVE 2 #define AH_INACTIVE 2
struct hostsfile { struct hostsfile {
...@@ -384,6 +397,9 @@ struct hostsfile { ...@@ -384,6 +397,9 @@ struct hostsfile {
int index; /* matches to cache entries for logging */ int index; /* matches to cache entries for logging */
}; };
#define FREC_NOREBIND 1
#define FREC_CHECKING_DISABLED 2
struct frec { struct frec {
union mysockaddr source; union mysockaddr source;
struct all_addr dest; struct all_addr dest;
...@@ -394,7 +410,7 @@ struct frec { ...@@ -394,7 +410,7 @@ struct frec {
#endif #endif
unsigned int iface; unsigned int iface;
unsigned short orig_id, new_id; unsigned short orig_id, new_id;
int fd, forwardall, norebind; int fd, forwardall, flags;
unsigned int crc; unsigned int crc;
time_t time; time_t time;
struct frec *next; struct frec *next;
...@@ -601,7 +617,7 @@ struct tftp_transfer { ...@@ -601,7 +617,7 @@ struct tftp_transfer {
int backoff; int backoff;
unsigned int block, blocksize, expansion; unsigned int block, blocksize, expansion;
off_t offset; off_t offset;
struct sockaddr_in peer; union mysockaddr peer;
char opt_blocksize, opt_transize, netascii, carrylf; char opt_blocksize, opt_transize, netascii, carrylf;
struct tftp_file *file; struct tftp_file *file;
struct tftp_transfer *next; struct tftp_transfer *next;
...@@ -629,7 +645,7 @@ extern struct daemon { ...@@ -629,7 +645,7 @@ extern struct daemon {
config file arguments. All set (including defaults) config file arguments. All set (including defaults)
in option.c */ in option.c */
unsigned int options; unsigned int options, options2;
struct resolvc default_resolv, *resolv_files; struct resolvc default_resolv, *resolv_files;
time_t last_resolv; time_t last_resolv;
struct mx_srv_record *mxnames; struct mx_srv_record *mxnames;
...@@ -669,7 +685,7 @@ extern struct daemon { ...@@ -669,7 +685,7 @@ extern struct daemon {
int enable_pxe; int enable_pxe;
struct dhcp_netid_list *dhcp_ignore, *dhcp_ignore_names, *dhcp_gen_names; struct dhcp_netid_list *dhcp_ignore, *dhcp_ignore_names, *dhcp_gen_names;
struct dhcp_netid_list *force_broadcast, *bootp_dynamic; struct dhcp_netid_list *force_broadcast, *bootp_dynamic;
char *dhcp_hosts_file, *dhcp_opts_file; struct hostsfile *dhcp_hosts_file, *dhcp_opts_file;
int dhcp_max, tftp_max; int dhcp_max, tftp_max;
int dhcp_server_port, dhcp_client_port; int dhcp_server_port, dhcp_client_port;
int start_tftp_port, end_tftp_port; int start_tftp_port, end_tftp_port;
...@@ -727,7 +743,7 @@ extern struct daemon { ...@@ -727,7 +743,7 @@ extern struct daemon {
/* cache.c */ /* cache.c */
void cache_init(void); void cache_init(void);
void log_query(unsigned short flags, char *name, struct all_addr *addr, char *arg); void log_query(unsigned int flags, char *name, struct all_addr *addr, char *arg);
char *record_source(int index); char *record_source(int index);
void querystr(char *str, unsigned short type); void querystr(char *str, unsigned short type);
struct crec *cache_find_by_addr(struct crec *crecp, struct crec *cache_find_by_addr(struct crec *crecp,
...@@ -747,13 +763,13 @@ char *cache_get_name(struct crec *crecp); ...@@ -747,13 +763,13 @@ char *cache_get_name(struct crec *crecp);
char *get_domain(struct in_addr addr); char *get_domain(struct in_addr addr);
/* rfc1035.c */ /* rfc1035.c */
unsigned short extract_request(HEADER *header, size_t qlen, unsigned int extract_request(HEADER *header, size_t qlen,
char *name, unsigned short *typep); char *name, unsigned short *typep);
size_t setup_reply(HEADER *header, size_t qlen, size_t setup_reply(HEADER *header, size_t qlen,
struct all_addr *addrp, unsigned short flags, struct all_addr *addrp, unsigned int flags,
unsigned long local_ttl); unsigned long local_ttl);
int extract_addresses(HEADER *header, size_t qlen, char *namebuff, int extract_addresses(HEADER *header, size_t qlen, char *namebuff,
time_t now, int is_sign, int checkrebind); time_t now, int is_sign, int checkrebind, int checking_disabled);
size_t answer_request(HEADER *header, char *limit, size_t qlen, size_t answer_request(HEADER *header, char *limit, size_t qlen,
struct in_addr local_addr, struct in_addr local_netmask, time_t now); struct in_addr local_addr, struct in_addr local_netmask, time_t now);
int check_for_bogus_wildcard(HEADER *header, size_t qlen, char *name, int check_for_bogus_wildcard(HEADER *header, size_t qlen, char *name,
...@@ -764,6 +780,7 @@ int check_for_local_domain(char *name, time_t now); ...@@ -764,6 +780,7 @@ int check_for_local_domain(char *name, time_t now);
unsigned int questions_crc(HEADER *header, size_t plen, char *buff); unsigned int questions_crc(HEADER *header, size_t plen, char *buff);
size_t resize_packet(HEADER *header, size_t plen, size_t resize_packet(HEADER *header, size_t plen,
unsigned char *pheader, size_t hlen); unsigned char *pheader, size_t hlen);
size_t add_mac(HEADER *header, size_t plen, char *limit, union mysockaddr *l3);
/* util.c */ /* util.c */
void rand_init(void); void rand_init(void);
...@@ -804,6 +821,8 @@ void flush_log(void); ...@@ -804,6 +821,8 @@ void flush_log(void);
void read_opts (int argc, char **argv, char *compile_opts); void read_opts (int argc, char **argv, char *compile_opts);
char *option_string(unsigned char opt, int *is_ip, int *is_name); char *option_string(unsigned char opt, int *is_ip, int *is_name);
void reread_dhcp(void); void reread_dhcp(void);
void set_option_bool(unsigned int opt);
struct hostsfile *expand_filelist(struct hostsfile *list);
/* forward.c */ /* forward.c */
void reply_query(int fd, int family, time_t now); void reply_query(int fd, int family, time_t now);
...@@ -908,7 +927,7 @@ void send_via_bpf(struct dhcp_packet *mess, size_t len, ...@@ -908,7 +927,7 @@ void send_via_bpf(struct dhcp_packet *mess, size_t len,
#endif #endif
/* bpf.c or netlink.c */ /* bpf.c or netlink.c */
int iface_enumerate(void *parm, int (*ipv4_callback)(), int (*ipv6_callback)()); int iface_enumerate(int family, void *parm, int (callback)());
/* dbus.c */ /* dbus.c */
#ifdef HAVE_DBUS #ifdef HAVE_DBUS
......
src/forward.c
View file @ 28866e95
This diff is collapsed.
src/helper.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -79,14 +79,14 @@ int create_helper(int event_fd, int err_fd, uid_t uid, gid_t gid, long max_fd) ...@@ -79,14 +79,14 @@ int create_helper(int event_fd, int err_fd, uid_t uid, gid_t gid, long max_fd)
sigaction(SIGTERM, &sigact, NULL); sigaction(SIGTERM, &sigact, NULL);
sigaction(SIGALRM, &sigact, NULL); sigaction(SIGALRM, &sigact, NULL);
if (!(daemon->options & OPT_DEBUG) && uid != 0) if (!option_bool(OPT_DEBUG) && uid != 0)
{ {
gid_t dummy; gid_t dummy;
if (setgroups(0, &dummy) == -1 || if (setgroups(0, &dummy) == -1 ||
setgid(gid) == -1 || setgid(gid) == -1 ||
setuid(uid) == -1) setuid(uid) == -1)
{ {
if (daemon->options & OPT_NO_FORK) if (option_bool(OPT_NO_FORK))
/* send error to daemon process if no-fork */ /* send error to daemon process if no-fork */
send_event(event_fd, EVENT_HUSER_ERR, errno); send_event(event_fd, EVENT_HUSER_ERR, errno);
else else
......
src/lease.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -37,7 +37,7 @@ void lease_init(time_t now) ...@@ -37,7 +37,7 @@ void lease_init(time_t now)
leases_left = daemon->dhcp_max; leases_left = daemon->dhcp_max;
if (daemon->options & OPT_LEASE_RO) if (option_bool(OPT_LEASE_RO))
{ {
/* run "<lease_change_script> init" once to get the /* run "<lease_change_script> init" once to get the
initial state of the database. If leasefile-ro is initial state of the database. If leasefile-ro is
...@@ -254,7 +254,7 @@ void lease_update_dns(void) ...@@ -254,7 +254,7 @@ void lease_update_dns(void)
if (lease->fqdn) if (lease->fqdn)
cache_add_dhcp_entry(lease->fqdn, &lease->addr, lease->expires); cache_add_dhcp_entry(lease->fqdn, &lease->addr, lease->expires);
if (!(daemon->options & OPT_DHCP_FQDN) && lease->hostname) if (!option_bool(OPT_DHCP_FQDN) && lease->hostname)
cache_add_dhcp_entry(lease->hostname, &lease->addr, lease->expires); cache_add_dhcp_entry(lease->hostname, &lease->addr, lease->expires);
} }
...@@ -470,7 +470,7 @@ void lease_set_hostname(struct dhcp_lease *lease, char *name, int auth) ...@@ -470,7 +470,7 @@ void lease_set_hostname(struct dhcp_lease *lease, char *name, int auth)
/* Depending on mode, we check either unqualified name or FQDN. */ /* Depending on mode, we check either unqualified name or FQDN. */
for (lease_tmp = leases; lease_tmp; lease_tmp = lease_tmp->next) for (lease_tmp = leases; lease_tmp; lease_tmp = lease_tmp->next)
{ {
if (daemon->options & OPT_DHCP_FQDN) if (option_bool(OPT_DHCP_FQDN))
{ {
if (!new_fqdn || !lease_tmp->fqdn || !hostname_isequal(lease_tmp->fqdn, new_fqdn) ) if (!new_fqdn || !lease_tmp->fqdn || !hostname_isequal(lease_tmp->fqdn, new_fqdn) )
continue; continue;
...@@ -534,7 +534,7 @@ int do_script_run(time_t now) ...@@ -534,7 +534,7 @@ int do_script_run(time_t now)
#ifdef HAVE_DBUS #ifdef HAVE_DBUS
/* If we're going to be sending DBus signals, but the connection is not yet up, /* If we're going to be sending DBus signals, but the connection is not yet up,
delay everything until it is. */ delay everything until it is. */
if ((daemon->options & OPT_DBUS) && !daemon->dbus) if (option_bool(OPT_DBUS) && !daemon->dbus)
return 0; return 0;
#endif #endif
...@@ -586,7 +586,7 @@ int do_script_run(time_t now) ...@@ -586,7 +586,7 @@ int do_script_run(time_t now)
for (lease = leases; lease; lease = lease->next) for (lease = leases; lease; lease = lease->next)
if (lease->new || lease->changed || if (lease->new || lease->changed ||
(lease->aux_changed && (daemon->options & OPT_LEASE_RO))) (lease->aux_changed && option_bool(OPT_LEASE_RO)))
{ {
#ifdef HAVE_SCRIPT #ifdef HAVE_SCRIPT
queue_script(lease->new ? ACTION_ADD : ACTION_OLD, lease, queue_script(lease->new ? ACTION_ADD : ACTION_OLD, lease,
......
src/log.c
View file @ 28866e95
This diff is collapsed.
src/netlink.c
View file @ 28866e95
This diff is collapsed.
src/network.c
View file @ 28866e95
This diff is collapsed.
src/option.c
View file @ 28866e95
This diff is collapsed.
src/rfc1035.c
View file @ 28866e95
This diff is collapsed.
src/rfc2131.c
View file @ 28866e95
This diff is collapsed.
src/tftp.c
View file @ 28866e95
This diff is collapsed.
src/util.c
View file @ 28866e95
/* dnsmasq is Copyright (c) 2000-2010 Simon Kelley /* dnsmasq is Copyright (c) 2000-2011 Simon Kelley
This program is free software; you can redistribute it and/or modify This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by
...@@ -365,7 +365,8 @@ void prettyprint_time(char *buf, unsigned int t) ...@@ -365,7 +365,8 @@ void prettyprint_time(char *buf, unsigned int t)
} }
/* in may equal out, when maxlen may be -1 (No max len). */ /* in may equal out, when maxlen may be -1 (No max len).
Return -1 for extraneous no-hex chars found. */
int parse_hex(char *in, unsigned char *out, int maxlen, int parse_hex(char *in, unsigned char *out, int maxlen,
unsigned int *wildcard_mask, int *mac_type) unsigned int *wildcard_mask, int *mac_type)
{ {
...@@ -377,7 +378,10 @@ int parse_hex(char *in, unsigned char *out, int maxlen, ...@@ -377,7 +378,10 @@ int parse_hex(char *in, unsigned char *out, int maxlen,
while (maxlen == -1 || i < maxlen) while (maxlen == -1 || i < maxlen)
{ {
for (r = in; *r != 0 && *r != ':' && *r != '-'; r++); for (r = in; *r != 0 && *r != ':' && *r != '-'; r++)
if (!isxdigit((int)*r))
return -1;
if (*r == 0) if (*r == 0)
maxlen = i; maxlen = i;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment