Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dnsmasq]

dnsmasq is a lightweight DHCP, DNS and TFTP server application for *nix platforms intended for use on small and home networks.

0
votes
0answers
27 views

How to push a local DNS resolving entry to client when an OpenVPN connection established?

I am using OpenVPN-2.4.6 clients and an OpenVPN-2.4.5 server that resides an OpenWRT(18.06.01) router. The OVPN client connects to the server by a public DNS name of the server(i.e pubName.my.router),...
0
votes
0answers
20 views

DNSmasq on 2 interfaces

SysInfo: ubuntu 18.04 external access point (with its own internal linux system) => interface ap1, IP: 192.168.13.1 external access point (USB stick) => interface ap0, IP: 192.168.12.1 hostapd ...
2
votes
1answer
31 views

Why making dnsmasq authoritative breaks CNAME resolution?

I have a CNAME set up in dnsmasq as cname=ch1-lampe-bureau.swtk.info,switch-3 It is resolved correctly (switch-3 is a device which gets its IP via DHCP from dnsmasq): root@rpi1 ~# host switch-3 ...
-1
votes
0answers
30 views

Allow outbound traffic for some of the domains and IPs and block all other traffic

In a Linux host, i am trying to whitelist some domains and IP ranges for outbound traffic and blacklist all other traffic. My use case is that user access linux host without admin right should be able ...
-1
votes
1answer
37 views

Windows machine with 2 NICs

I have 2 networks connected to my work PC, we'll call them NET1 and NET2. NET1 has internet access and NET2 doesn't. NET1 is a work network which I have no control over. My work computer is ...
1
vote
0answers
46 views

Send a negative response to any AAAA DNS lookups

Neither my local networking equipment neither my ISP support IPv6. While some applications support restriction of DNS lookups to IPv4 addresses some others don't so these applications end up waiting ...
-1
votes
1answer
45 views

dnsmasq: how to get conntrack numbers in query logs?

I´m currently working on a project (for school) to set up a program which analyses DNS-queries to be used in Docker-Swarm and Kubernetes. For testing purposes I received some (supposedly dnsmasq) logs....
0
votes
2answers
69 views

DHCP dnsmasq for infinite lease

I am using dnsmasq to serve IPs for about 200 vservers. Leasetime is infinite: dhcp-range=10.0.1.2,10.0.1.254,infinite I don't know why, but 1 vserver changed IP. Let's say MAC address changed. I ...
0
votes
0answers
8 views

Apache2 Retransmit Issue

I'm trying to set up a local network that serves a website using apache. I am using airbase-ng and dnsmasq to set up the network. This is my dnsmasq.conf file: interface=at0 dhcp-range=10.0.0.10,...
1
vote
0answers
121 views

Dnsmasq unable to resolve local host

I'm unable to get my local DNS server to work and totally stumped. Here's what I have done so far to make it work... Dnsmasq configured on Ubuntu 18.04 ( Static IP: 192.168.1.100) /etc/resolv.conf ...
1
vote
0answers
32 views

dnsmasq: return default IP address if address cannot be resolved

dnsmasq allows to return an IP address for all DNS request: address=/#/192.168.1.1 This will overwrite all requests. But is there a way to return this address only if a query could not be ...
0
votes
1answer
35 views

CentOS 7.5.1804 dnsmasq starts at boot when systemd service dnsmasq is disabled

I am configuring SAMBA AD DC using SAMBA_INTERNAL DNS on CentOS 7.5.1804. For this to work nothing should listen on port *:53/tcp while samba is starting. Something in system starts dnsmasq at boot ...
0
votes
2answers
119 views

How to serve two web applications from one domain and different paths?

I have a web app which can be accessed from http://example.com I'm developing locally another web app which I want to access it from the same domain but different path. Let's say I want all traffic ...
-1
votes
1answer
102 views

Whitelist all sub domains with rebind-domain-ok

Is it possible to whitelist a wildcard domain in dnsmasq with rebind-domain-ok? I tried the following, but it did not work rebind-domain-ok=/.example.com/
3
votes
1answer
202 views

Edgerouter DNSmasq send updates to BIND

TL;DR: How do I configure the Ubiquiti EdgeRouter, running DNSmasq or DHCPd, and NSupdate, to send its DHCP leases to a central BIND server? I have a system comprised of a few Ubiquiti EdgeRouter X's ...
0
votes
1answer
48 views

Routing requests from internal network to local Apache – a dnsmasq Job?

Hey folks from serverfault, new to this network site. I have a question regarding the configuration of a new server. Ubuntu 16.04 and Apache 2.4 will be running on the server. We would like to allow ...
0
votes
1answer
100 views

KVM: guest with FQDN DNS resolution / no bridge

I have a (Hetzner) server with a public IP of eg. 123.123.123.123, and an additional IP of eg. 456.456.456.456. I want to serve some private webspace apps on 123.123.123.123, including a hidden ...
0
votes
1answer
263 views

dnsmasq not forwarding request to nameserver

I'm trying to run two instances of dnsmasq on a raspberry pi, I've gotten quite far. I'm currently trying to get the first dnsmasq server to forward any request it doesn't know the answer to to the ...
0
votes
1answer
68 views

blok udp 53 traffic to Internet only from lan

i want to block all dns queries from lan to Internet so only server allowed to make dns requests so i need rule to dns requests from eth0 to Internet allowed, lan to eth1 allowed, but lan to Internet ...
0
votes
1answer
657 views

Failed to start dnsmasq - A lightweight DHCP and caching DNS server

Unable to start dnsmasq on my raspberry pi 3b+ with stretch installed. Following is the error. root@raspberrypi:/home/pi# systemctl status dnsmasq.service ● dnsmasq.service - dnsmasq - A ...
3
votes
1answer
126 views

dnsmasq: one domain, half private, half public?

Our internal office network has the same top-level domain as our company online presence, e.g. ourdomain.com. For the outside world, any public hosts (eg. blog.ourdomain.com, download.ourdomain.com, ...
5
votes
1answer
151 views

Large AXFR through dnsmasq causes dig to hang with partial results

I'm attempting to set up dnsmasq as a local cache for consul. While this seems to work fine for normal digs, dnsmasq seems to only allow partial zone transfers. My resolv.conf: search x.domain.com y....
0
votes
0answers
26 views

How to make dnsmasq to indicate which upstream server's answer has been forwarded?

I'd like dnsmasq to indicate somehow (to the client performing the dns request) which upstream nameserver each dns response did come from. I have more nameservers configured for dnsmasq in resolv-...
0
votes
0answers
234 views

How to let dnsmasq transfer a reverse zone?

Following the documentation for auth-zone, I tried to declare my dnsmasq server as authoritative for the 10.0.0.0/8 zone (I serve several IP sub-ranges in 10.x). Unfortunately, whatever I try I end ...
0
votes
1answer
195 views

How to resolve dns in multiple name servers?

resolv.conf domain example.com nameserver 192.168.122.54 nameserver 192.168.124.44 Take this as the sample resolv.conf. The scenario is that the DNS tries to resolve in the first name ...
0
votes
0answers
34 views

Why wouldn't dnsmasq respond to a client?

I discovered recently an issue on a otherwise working server. It was updated in the past months so there may have been changed between the time when "everything was fine" and today. This server hosts ...
0
votes
0answers
9 views

Trigger agreement page automatically when connecting to Captive Portal [duplicate]

I have a WiFi hotspot setup using Hostapd and Dnsmasq. Everything works great, but I'm trying to trigger the sort of Terms and Conditions page you might see at a hotel or coffee shop after you connect ...
0
votes
1answer
49 views

Pull DNS entries from Dnsmasq to other DNS server

Background My department has a development network that is based on the idea of bringing up lots of local LANs for testing equipment in various configurations. The bridging development network ...
1
vote
0answers
149 views

AWS AmazonProvidedDNS appears to not respecting TTL - can we do anything?

We have several servers on AWS EC2 that are not obeying TTL values from DNS. Route tables are set up to us "AmazonProvidedDNS" It appears the the "AmazonProvidedDNS" limits TTL to 60 seconds. Q: Is ...
0
votes
0answers
63 views

dnsmasq: stuck in DHCPOFFER after 29 clients

System: Ubuntu 16.0.4.4 LTS Fresh installed dnsmasq serving clients on wifi interface via hostapd. Everything works fine until the number of clients reach 29 - 30. (checked via leases file) After ...
0
votes
1answer
173 views

How to cache DNS TXT lookups with dnsmasq

We use dnsmasq on our Debian servers to cache DNS queries. This works find for A and CNAME queries. However, I notice that dnsmasq does not cache TXT queries. You can see this here: 2018-07-23T08:18:...
0
votes
1answer
686 views

How to understand dnsmasq logs?

I have dnsmasq installed on server and it is heavily used.I have following dnsmasq log in the /var/log/syslog when given the signal "SIGUSR1" Jul 16 13:45:50 server1 dnsmasq[427008]: time 1531748750 ...
0
votes
1answer
202 views

Auto-trigger captive portal agreement page display

I have a WiFi hotspot setup using Hostapd and Dnsmasq. Everything works great, but I'm trying to trigger the sort of Terms and Conditions page you might see at a hotel or coffee shop after you connect ...
0
votes
1answer
509 views

How does DNSMasq integrate with my router?

Context I've successfully installed DNSMasq on a Debian machine and everything seems to be working. Here's what I did: install DNSMasq with sudo apt-get install dnsmasq update file /etc/dnsmasq.d/...
0
votes
0answers
142 views

dnsmasq only respond to the queries which are sent from the subnet where it's running

Here is my config: # grep -v '^ *#' /etc/dnsmasq.conf | grep -v '^ *$' domain-needed bogus-priv no-resolv server=8.8.8.8 server=8.8.4.4 local=/loc/ address=/example.com/127.0.0.127 listen-address=10....
0
votes
0answers
659 views

dnsmasq: Job for dnsmasq.service failed

I cannot get dnsmasq working after the installation. The installation produces Job for dnsmasq.service failed. See 'systemctl status dnsmasq.service' and 'journalctl -xn' for details. error message. ...
0
votes
1answer
147 views

Filtering and redirecting websites using dnsmasq

I've got a LAN connected to fibre router/modem for internet access, four client machines and low powered SBC running Ubuntu Server and Nginx. I'm wanting to use the SBC to filter out requests for ...
0
votes
0answers
77 views

dnsmasq allow a specific domain to resolve IP

DNSMasq is being used to resolved all domains to resolve to local domains, which is working perfectly fine with below line of code address=/#/192.168.10.10 So type - o.com/abcd.com/googl.com and it ...
-2
votes
1answer
114 views

DNS requests made for an HTTPS website don't go through dnsmasq

I'm trying to set up dnsmasq to block some websites, but it only works when accessing that site via http and not when accessing it via https. Is it somehow not possible to block https requests via ...
0
votes
1answer
465 views

DHCP IP assignment in dnsmasq

I have the following configuration in my dnsmasq.conf: dhcp-range=172.16.0.100,172.16.0.254,255.255.255.0,12h From range 172.16.0.1-99 we assign static IP address to important servers and from 172....
0
votes
0answers
325 views

How to make local DNSMasq take precedence over upstream DNS servers

How to make local DNSMasq take precedence over upstream DNS servers I'm running a cluster of Consul agents on Ubuntu Server 16.04. I want programs running on the nodes to make use of Consul DNS ...
0
votes
0answers
33 views

Split nameservers in dnsmasq configuration

I'm configuring my device in order to use it as dhcp server for any client connected to its WiFi or Eth interface. I'm using dnsmasq for this task. I want to use different nameserver for the two ...
0
votes
0answers
155 views

Queries from Docker container to DNSMasq running on host don't work for a long time… and then they do :)

On my host (Ubuntu Server 16.04) I'm running a DNSMasq server bound to all network interfaces on port 53. It forwards queries matching consul top-level domain to a DNS server running on 127.0.0.1:8600 ...
0
votes
1answer
36 views

Wildcard subdomain routing from WAN to LAN

My current setup: I don't have a static IP from my ISP, so I run my own ddns on a Google Cloud instance The ddns I'm running is a docker image from https://github.com/dprandzioch/docker-ddns, and I ...
-2
votes
1answer
238 views

Clear DHCP lease on disconnect [closed]

I have a rather specific situation where i'm at a bit of a loss on how to do things properly so i figured it was time to ask for help. Situation is: i have a Raspberry Pi with a 3G modem as well as ...
1
vote
2answers
298 views

How to add a CAA record to dnsmasq?

I'm trying to add CAA records to my DNS server that uses dnsmasq, but haven't bee successfull. The CAA helper site tells me to use "--dns-rr=sitename" -option, but I have no idea where to put them. I ...
1
vote
0answers
295 views

Dnsmasq not giving out second DNS

Dnsmasq version 2.79 on MacOS 10.12.6 using Homebrew. This is my dnsmasq config: # Never forward plain names (without a dot or domain part) domain-needed # Never forward addresses in the non-routed ...
0
votes
0answers
30 views

How to override the provided address?

I use dnsmasq to both serve DHCP and DNS. Machines present their hostnames and get an IP address. Subsequently, during a name translation the same information is reused. I have one host (seafile) ...
1
vote
0answers
28 views

How to set the -h, --no-hosts for KVMs dnsmasq instance

I have KVM based VMs running on my laptop and the VMs getting names resolved via KVM's dnsmasq DNS server. However the KVM's dnsmasq DNS server resolves also names in the hosts /etc/hosts file which ...
0
votes
0answers
439 views

Force redirect to url with captive portal or dnsmasq

We are trying to host a static webpage (just one index.php) on a local wifi network without internet access. Essentially every user (mobile devices) should land on some landing page where he can ...