<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[Linux Forum &mdash; Dnsmasq]]></title>
	<link rel="self" href="https://linuxforum.ru/extern.php?action=feed&amp;tid=22464&amp;type=atom" />
	<updated>2014-08-27T19:06:23Z</updated>
	<generator>PunBB</generator>
	<id>https://linuxforum.ru/viewtopic.php?id=22464</id>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=420684#p420684" />
			<content type="html"><![CDATA[<p>Здраствуйте<br />Извиняюсь что пишу без запятых - беда с раскладкой</p><p>Помогите пожалуйста с конфигом<br />Пытаюсь научится настраивать линукс но пока у нас плохоклеится</p><p>Когда стояла биндя ругался что адрес занят биндю снёс<br />Потомругался что не может прослушивать 22 254 - заремблил<br />Сейчас запускается безошибок но сам адрес не получает и клиенту недаёт( <br />Незадолго доэтого удалось запустить но клиент получил 22 24 откуда он его взял не знаю(( Сам сервер тогда получил 22 1</p><div class="fancy_spoiler_switcher"><div class="fancy_spoiler_switcher_header" data-lang-open="открыть спойлер" data-lang-close="скрыть спойлер"><strong>+</strong>&nbsp;открыть спойлер</div><div class="fancy_spoiler"><p># Configuration file for dnsmasq.<br />#<br /># Format is one option per line, legal options are the same<br /># as the long options legal on the command line. See<br /># &quot;/usr/sbin/dnsmasq --help&quot; or &quot;man 8 dnsmasq&quot; for details.</p><p># Listen on this specific port instead of the standard DNS port<br /># (53). Setting this to zero completely disables DNS function,<br /># leaving only DHCP and/or TFTP.<br />#port=5353</p><p># The following two options make you a better netizen, since they<br /># tell dnsmasq to filter out queries which the public DNS cannot<br /># answer, and which load the servers (especially the root servers)<br /># unnecessarily. If you have a dial-on-demand link they also stop<br /># these requests from bringing up the link unnecessarily.</p><p># Never forward plain names (without a dot or domain part)<br />#domain-needed<br /># Never forward addresses in the non-routed address spaces.<br />#bogus-priv</p><br /><p># Uncomment this to filter useless windows-originated DNS requests<br /># which can trigger dial-on-demand links needlessly.<br /># Note that (amongst other things) this blocks all SRV requests,<br /># so don&#039;t use it if you use eg Kerberos, SIP, XMMP or Google-talk.<br /># This option only affects forwarding, SRV records originating for<br /># dnsmasq (via srv-host= lines) are not suppressed by it.<br />#filterwin2k</p><p># Change this line if you want dns to get its upstream servers from<br /># somewhere other that /etc/resolv.conf<br />#resolv-file=</p><p># By&nbsp; default,&nbsp; dnsmasq&nbsp; will&nbsp; send queries to any of the upstream<br /># servers it knows about and tries to favour servers to are&nbsp; known<br /># to&nbsp; be&nbsp; up.&nbsp; Uncommenting this forces dnsmasq to try each query<br /># with&nbsp; each&nbsp; server&nbsp; strictly&nbsp; in&nbsp; the&nbsp; order&nbsp; they&nbsp; &nbsp;appear&nbsp; &nbsp;in<br /># /etc/resolv.conf<br />#strict-order</p><p># If you don&#039;t want dnsmasq to read /etc/resolv.conf or any other<br /># file, getting its servers from this file instead (see below), then<br /># uncomment this.<br />#no-resolv</p><p># If you don&#039;t want dnsmasq to poll /etc/resolv.conf or other resolv<br /># files for changes and re-read them then uncomment this.<br />#no-poll</p><p># Add other name servers here, with domain specs if they are for<br /># non-public domains.<br />server=/lg/192.168.22.254</p><p># Example of routing PTR queries to nameservers: this will send all<br /># address-&gt;name queries for 192.168.3/24 to nameserver 10.1.2.3<br />server=/22.168.192.in-addr.arpa/192.168.22.254</p><p># Add local-only domains here, queries in these domains are answered<br /># from /etc/hosts or DHCP only.<br />#local=/localnet/</p><p># Add domains which you want to force to an IP address here.<br /># The example below send any host in double-click.net to a local<br /># web-server.<br />#address=/double-click.net/127.0.0.1</p><p># --address (and --server) work with IPv6 addresses too.<br />#address=/www.thekelleys.org.uk/fe80::20d:60ff:fe36:f83</p><p># Add the IPs of all queries to yahoo.com, google.com, and their<br /># subdomains to the vpn and search ipsets:<br />#ipset=/yahoo.com/google.com/vpn,search</p><p># You can control how dnsmasq talks to a server: this forces<br /># queries to 10.1.2.3 to be routed via eth1<br /># server=10.1.2.3@eth1</p><p># and this sets the source (ie local) address used to talk to<br /># 10.1.2.3 to 192.168.1.1 port 55 (there must be a interface with that<br /># IP on the machine, obviously).<br /># server=10.1.2.3@192.168.1.1#55</p><p># If you want dnsmasq to change uid and gid to something other<br /># than the default, edit the following lines.<br />#user=<br />#group=</p><p># If you want dnsmasq to listen for DHCP and DNS requests only on<br /># specified interfaces (and the loopback) give the name of the<br /># interface (eg eth0) here.<br /># Repeat the line for more than one interface.<br />interface=eth1</p><p># Or you can specify which interface _not_ to listen on<br />except-interface=eth0<br /># Or which to listen on by address (remember to include 127.0.0.1 if<br /># you use this.)<br />#listen-address=127.0.0.1,192.168.22.254</p><p>#If you want dnsmasq to provide only DNS service on an interface,<br /># configure it as shown above, and then use the following line to<br /># disable DHCP and TFTP on it.<br />no-dhcp-interface=eth0</p><p># On systems which support it, dnsmasq binds the wildcard address,<br /># even when it is listening on only some interfaces. It then discards<br /># requests that it shouldn&#039;t reply to. This has the advantage of<br /># working even when interfaces come and go and change address. If you<br /># want dnsmasq to really bind only the interfaces it is listening on,<br /># uncomment this option. About the only time you may need this is when<br /># running another nameserver on the same machine.<br />bind-interfaces</p><p># If you don&#039;t want dnsmasq to read /etc/hosts, uncomment the<br /># following line.<br />#no-hosts<br /># or if you want it to read another file, as well as /etc/hosts, use<br /># this.<br />#addn-hosts=/etc/banner_add_hosts</p><p># Set this (and domain: see below) if you want to have a domain<br /># automatically added to simple names in a hosts-file.<br />#expand-hosts</p><p># Set the domain for dnsmasq. this is optional, but if it is set, it<br /># does the following things.<br /># 1) Allows DHCP hosts to have fully qualified domain names, as long<br />#&nbsp; &nbsp; &nbsp;as the domain part matches this setting.<br /># 2) Sets the &quot;domain&quot; DHCP option thereby potentially setting the<br />#&nbsp; &nbsp; domain of all systems configured by DHCP<br /># 3) Provides the domain part for &quot;expand-hosts&quot;<br />#domain=thekelleys.org.uk</p><p># Set a different domain for a particular subnet<br />#domain=wireless.thekelleys.org.uk,192.168.2.0/24</p><p># Same idea, but range rather then subnet<br />#domain=reserved.thekelleys.org.uk,192.68.3.100,192.168.3.200</p><p># Uncomment this to enable the integrated DHCP server, you need<br /># to supply the range of addresses available for lease and optionally<br /># a lease time. If you have more than one network, you will need to<br /># repeat this for each network on which you want to supply DHCP<br /># service.<br />#dhcp-range=192.168.22.100,192.168.22.110,24h</p><p># This is an example of a DHCP range where the netmask is given. This<br /># is needed for networks we reach the dnsmasq DHCP server via a relay<br /># agent. If you don&#039;t know what a DHCP relay agent is, you probably<br /># don&#039;t need to worry about this.<br />dhcp-range=192.168.22.50,192.168.22.55,255.255.255.0,24h</p><p># This is an example of a DHCP range which sets a tag, so that<br /># some DHCP options may be set only for this network.<br />#dhcp-range=set:red,192.168.0.50,192.168.0.150</p><p># Use this DHCP range only when the tag &quot;green&quot; is set.<br />#dhcp-range=tag:green,192.168.0.50,192.168.0.150,12h</p><p># Specify a subnet which can&#039;t be used for dynamic address allocation,<br /># is available for hosts with matching --dhcp-host lines. Note that<br /># dhcp-host declarations will be ignored unless there is a dhcp-range<br /># of some type for the subnet in question.<br /># In this case the netmask is implied (it comes from the network<br /># configuration on the machine running dnsmasq) it is possible to give<br /># an explicit netmask instead.<br />#dhcp-range=192.168.0.0,static</p><p># Enable DHCPv6. Note that the prefix-length does not need to be specified<br /># and defaults to 64 if missing/<br />#dhcp-range=1234::2, 1234::500, 64, 12h</p><p># Do Router Advertisements, BUT NOT DHCP for this subnet.<br />#dhcp-range=1234::, ra-only </p><p># Do Router Advertisements, BUT NOT DHCP for this subnet, also try and<br /># add names to the DNS for the IPv6 address of SLAAC-configured dual-stack <br /># hosts. Use the DHCPv4 lease to derive the name, network segment and <br /># MAC address and assume that the host will also have an<br /># IPv6 address calculated using the SLAAC alogrithm.<br />#dhcp-range=1234::, ra-names</p><p># Do Router Advertisements, BUT NOT DHCP for this subnet.<br /># Set the lifetime to 46 hours. (Note: minimum lifetime is 2 hours.)<br />#dhcp-range=1234::, ra-only, 48h</p><p># Do DHCP and Router Advertisements for this subnet. Set the A bit in the RA<br /># so that clients can use SLAAC addresses as well as DHCP ones.<br />#dhcp-range=1234::2, 1234::500, slaac</p><p># Do Router Advertisements and stateless DHCP for this subnet. Clients will<br /># not get addresses from DHCP, but they will get other configuration information.<br /># They will use SLAAC for addresses.<br />#dhcp-range=1234::, ra-stateless</p><p># Do stateless DHCP, SLAAC, and generate DNS names for SLAAC addresses<br /># from DHCPv4 leases.<br />#dhcp-range=1234::, ra-stateless, ra-names</p><p># Do router advertisements for all subnets where we&#039;re doing DHCPv6<br /># Unless overriden by ra-stateless, ra-names, et al, the router <br /># advertisements will have the M and O bits set, so that the clients<br /># get addresses and configuration from DHCPv6, and the A bit reset, so the <br /># clients don&#039;t use SLAAC addresses.<br />#enable-ra</p><p># Supply parameters for specified hosts using DHCP. There are lots<br /># of valid alternatives, so we will give examples of each. Note that<br /># IP addresses DO NOT have to be in the range given above, they just<br /># need to be on the same network. The order of the parameters in these<br /># do not matter, it&#039;s permissible to give name, address and MAC in any<br /># order.</p><p># Always allocate the host with Ethernet address 11:22:33:44:55:66<br /># The IP address 192.168.0.60<br />#dhcp-host=11:22:33:44:55:66,192.168.0.60</p><p># Always set the name of the host with hardware address<br /># 11:22:33:44:55:66 to be &quot;fred&quot;<br />#dhcp-host=11:22:33:44:55:66,fred</p><p># Always give the host with Ethernet address 11:22:33:44:55:66<br /># the name fred and IP address 192.168.0.60 and lease time 45 minutes<br />#dhcp-host=11:22:33:44:55:66,fred,192.168.0.60,45m</p><p># Give a host with Ethernet address 11:22:33:44:55:66 or<br /># 12:34:56:78:90:12 the IP address 192.168.0.60. Dnsmasq will assume<br /># that these two Ethernet interfaces will never be in use at the same<br /># time, and give the IP address to the second, even if it is already<br /># in use by the first. Useful for laptops with wired and wireless<br /># addresses.<br />#dhcp-host=11:22:33:44:55:66,12:34:56:78:90:12,192.168.0.60</p><p># Give the machine which says its name is &quot;bert&quot; IP address<br /># 192.168.0.70 and an infinite lease<br />#dhcp-host=bert,192.168.0.70,infinite</p><p># Always give the host with client identifier 01:02:02:04<br /># the IP address 192.168.0.60<br />#dhcp-host=id:01:02:02:04,192.168.0.60</p><p># Always give the host with client identifier &quot;marjorie&quot;<br /># the IP address 192.168.0.60<br />#dhcp-host=id:marjorie,192.168.0.60</p><p># Enable the address given for &quot;judge&quot; in /etc/hosts<br /># to be given to a machine presenting the name &quot;judge&quot; when<br /># it asks for a DHCP lease.<br />#dhcp-host=judge</p><p># Never offer DHCP service to a machine whose Ethernet<br /># address is 11:22:33:44:55:66<br />#dhcp-host=11:22:33:44:55:66,ignore</p><p># Ignore any client-id presented by the machine with Ethernet<br /># address 11:22:33:44:55:66. This is useful to prevent a machine<br /># being treated differently when running under different OS&#039;s or<br /># between PXE boot and OS boot.<br />#dhcp-host=11:22:33:44:55:66,id:*</p><p># Send extra options which are tagged as &quot;red&quot; to<br /># the machine with Ethernet address 11:22:33:44:55:66<br />#dhcp-host=11:22:33:44:55:66,set:red</p><p># Send extra options which are tagged as &quot;red&quot; to<br /># any machine with Ethernet address starting 11:22:33:<br />#dhcp-host=11:22:33:*:*:*,set:red</p><p># Give a fixed IPv6 address and name to client with <br /># DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2<br /># Note the MAC addresses CANNOT be used to identify DHCPv6 clients.<br /># Note also the they [] around the IPv6 address are obilgatory.<br />#dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5] </p><p># Ignore any clients which are not specified in dhcp-host lines<br /># or /etc/ethers. Equivalent to ISC &quot;deny unknown-clients&quot;.<br /># This relies on the special &quot;known&quot; tag which is set when<br /># a host is matched.<br />#dhcp-ignore=tag:!known</p><p># Send extra options which are tagged as &quot;red&quot; to any machine whose<br /># DHCP vendorclass string includes the substring &quot;Linux&quot;<br />#dhcp-vendorclass=set:red,Linux</p><p># Send extra options which are tagged as &quot;red&quot; to any machine one<br /># of whose DHCP userclass strings includes the substring &quot;accounts&quot;<br />#dhcp-userclass=set:red,accounts</p><p># Send extra options which are tagged as &quot;red&quot; to any machine whose<br /># MAC address matches the pattern.<br />#dhcp-mac=set:red,00:60:8C:*:*:*</p><p># If this line is uncommented, dnsmasq will read /etc/ethers and act<br /># on the ethernet-address/IP pairs found there just as if they had<br /># been given as --dhcp-host options. Useful if you keep<br /># MAC-address/host mappings there for other purposes.<br />#read-ethers</p><p># Send options to hosts which ask for a DHCP lease.<br /># See RFC 2132 for details of available options.<br /># Common options can be given to dnsmasq by name:<br /># run &quot;dnsmasq --help dhcp&quot; to get a list.<br /># Note that all the common settings, such as netmask and<br /># broadcast address, DNS server and default route, are given<br /># sane defaults by dnsmasq. You very likely will not need<br /># any dhcp-options. If you use Windows clients and Samba, there<br /># are some options which are recommended, they are detailed at the<br /># end of this section.</p><p># Override the default route supplied by dnsmasq, which assumes the<br /># router is the same machine as the one running dnsmasq.<br />#dhcp-option=3,192.168.22.1</p><p>#Do the same thing, but using the option name<br />dhcp-option=option:router,192.168.22.254</p><p># Override the default route supplied by dnsmasq and send no default<br /># route at all. Note that this only works for the options sent by<br /># default (1, 3, 6, 12, 28) the same line will send a zero-length option<br /># for all other option numbers.<br />#dhcp-option=3</p><p># Set the NTP time server addresses to 192.168.0.4 and 10.10.0.5<br />#dhcp-option=option:ntp-server,192.168.0.4,10.10.0.5</p><p># Send DHCPv6 option. Note [] around IPv6 addresses.<br />#dhcp-option=option6:dns-server,[1234::77],[1234::88]</p><p># Send DHCPv6 option for namservers as the machine running <br /># dnsmasq and another.<br />#dhcp-option=option6:dns-server,[::],[1234::88]</p><p># Ask client to poll for option changes every six hours. (RFC4242)<br />#dhcp-option=option6:information-refresh-time,6h</p><p># Set the NTP time server address to be the same machine as<br /># is running dnsmasq<br />#dhcp-option=42,0.0.0.0</p><p># Set the NIS domain name to &quot;welly&quot;<br />#dhcp-option=40,welly</p><p># Set the default time-to-live to 50<br />#dhcp-option=23,50</p><p># Set the &quot;all subnets are local&quot; flag<br />#dhcp-option=27,1</p><p># Send the etherboot magic flag and then etherboot options (a string).<br />#dhcp-option=128,e4:45:74:68:00:00<br />#dhcp-option=129,NIC=eepro100</p><p># Specify an option which will only be sent to the &quot;red&quot; network<br /># (see dhcp-range for the declaration of the &quot;red&quot; network)<br /># Note that the tag: part must precede the option: part.<br />#dhcp-option = tag:red, option:ntp-server, 192.168.1.1</p><p># The following DHCP options set up dnsmasq in the same way as is specified<br /># for the ISC dhcpcd in<br /># <a href="http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt">http://www.samba.org/samba/ftp/docs/tex … ration.txt</a><br /># adapted for a typical dnsmasq installation where the host running<br /># dnsmasq is also the host running samba.<br /># you may want to uncomment some or all of them if you use<br /># Windows clients and Samba.<br />#dhcp-option=19,0&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# option ip-forwarding off<br />#dhcp-option=44,0.0.0.0&nbsp; &nbsp; &nbsp;# set netbios-over-TCP/IP nameserver(s) aka WINS server(s)<br />#dhcp-option=45,0.0.0.0&nbsp; &nbsp; &nbsp;# netbios datagram distribution server<br />#dhcp-option=46,8&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# netbios node type</p><p># Send an empty WPAD option. This may be REQUIRED to get windows 7 to behave.<br />#dhcp-option=252,&quot;\n&quot;</p><p># Send RFC-3397 DNS domain search DHCP option. WARNING: Your DHCP client<br /># probably doesn&#039;t support this......<br />#dhcp-option=option:domain-search,eng.apple.com,marketing.apple.com</p><p># Send RFC-3442 classless static routes (note the netmask encoding)<br />#dhcp-option=121,192.168.1.0/24,1.2.3.4,10.0.0.0/8,5.6.7.8</p><p># Send vendor-class specific options encapsulated in DHCP option 43.<br /># The meaning of the options is defined by the vendor-class so<br /># options are sent only when the client supplied vendor class<br /># matches the class given here. (A substring match is OK, so &quot;MSFT&quot;<br /># matches &quot;MSFT&quot; and &quot;MSFT 5.0&quot;). This example sets the<br /># mtftp address to 0.0.0.0 for PXEClients.<br />#dhcp-option=vendor:PXEClient,1,0.0.0.0</p><p># Send microsoft-specific option to tell windows to release the DHCP lease<br /># when it shuts down. Note the &quot;i&quot; flag, to tell dnsmasq to send the<br /># value as a four-byte integer - that&#039;s what microsoft wants. See<br /># <a href="http://technet2.microsoft.com/WindowsServer/en/library/a70f1bb7-d2d4-49f0-96d6-4b7414ecfaae1033.mspx?mfr=true">http://technet2.microsoft.com/WindowsSe … x?mfr=true</a><br />#dhcp-option=vendor:MSFT,2,1i</p><p># Send the Encapsulated-vendor-class ID needed by some configurations of<br /># Etherboot to allow is to recognise the DHCP server.<br />#dhcp-option=vendor:Etherboot,60,&quot;Etherboot&quot;</p><p># Send options to PXELinux. Note that we need to send the options even<br /># though they don&#039;t appear in the parameter request list, so we need<br /># to use dhcp-option-force here.<br /># See <a href="http://syslinux.zytor.com/pxe.php#special">http://syslinux.zytor.com/pxe.php#special</a> for details.<br /># Magic number - needed before anything else is recognised<br />#dhcp-option-force=208,f1:00:74:7e<br /># Configuration file name<br />#dhcp-option-force=209,configs/common<br /># Path prefix<br />#dhcp-option-force=210,/tftpboot/pxelinux/files/<br /># Reboot time. (Note &#039;i&#039; to send 32-bit value)<br />#dhcp-option-force=211,30i</p><p># Set the boot filename for netboot/PXE. You will only need<br /># this is you want to boot machines over the network and you will need<br /># a TFTP server; either dnsmasq&#039;s built in TFTP server or an<br /># external one. (See below for how to enable the TFTP server.)<br />#dhcp-boot=pxelinux.0</p><p># The same as above, but use custom tftp-server instead machine running dnsmasq<br />#dhcp-boot=pxelinux,server.name,192.168.1.100</p><p># Boot for Etherboot gPXE. The idea is to send two different<br /># filenames, the first loads gPXE, and the second tells gPXE what to<br /># load. The dhcp-match sets the gpxe tag for requests from gPXE.<br />#dhcp-match=set:gpxe,175 # gPXE sends a 175 option.<br />#dhcp-boot=tag:!gpxe,undionly.kpxe<br />#dhcp-boot=mybootimage</p><p># Encapsulated options for Etherboot gPXE. All the options are<br /># encapsulated within option 175<br />#dhcp-option=encap:175, 1, 5b&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;# priority code<br />#dhcp-option=encap:175, 176, 1b&nbsp; &nbsp; &nbsp; &nbsp;# no-proxydhcp<br />#dhcp-option=encap:175, 177, string&nbsp; &nbsp;# bus-id<br />#dhcp-option=encap:175, 189, 1b&nbsp; &nbsp; &nbsp; &nbsp;# BIOS drive code<br />#dhcp-option=encap:175, 190, user&nbsp; &nbsp; &nbsp;# iSCSI username<br />#dhcp-option=encap:175, 191, pass&nbsp; &nbsp; &nbsp;# iSCSI password</p><p># Test for the architecture of a netboot client. PXE clients are<br /># supposed to send their architecture as option 93. (See RFC 4578)<br />#dhcp-match=peecees, option:client-arch, 0 #x86-32<br />#dhcp-match=itanics, option:client-arch, 2 #IA64<br />#dhcp-match=hammers, option:client-arch, 6 #x86-64<br />#dhcp-match=mactels, option:client-arch, 7 #EFI x86-64</p><p># Do real PXE, rather than just booting a single file, this is an<br /># alternative to dhcp-boot.<br />#pxe-prompt=&quot;What system shall I netboot?&quot;<br /># or with timeout before first available action is taken:<br />#pxe-prompt=&quot;Press F8 for menu.&quot;, 60</p><p># Available boot services. for PXE.<br />#pxe-service=x86PC, &quot;Boot from local disk&quot;</p><p># Loads &lt;tftp-root&gt;/pxelinux.0 from dnsmasq TFTP server.<br />#pxe-service=x86PC, &quot;Install Linux&quot;, pxelinux</p><p># Loads &lt;tftp-root&gt;/pxelinux.0 from TFTP server at 1.2.3.4.<br /># Beware this fails on old PXE ROMS.<br />#pxe-service=x86PC, &quot;Install Linux&quot;, pxelinux, 1.2.3.4</p><p># Use bootserver on network, found my multicast or broadcast.<br />#pxe-service=x86PC, &quot;Install windows from RIS server&quot;, 1</p><p># Use bootserver at a known IP address.<br />#pxe-service=x86PC, &quot;Install windows from RIS server&quot;, 1, 1.2.3.4</p><p># If you have multicast-FTP available,<br /># information for that can be passed in a similar way using options 1<br /># to 5. See page 19 of<br /># <a href="http://download.intel.com/design/archives/wfm/downloads/pxespec.pdf">http://download.intel.com/design/archiv … xespec.pdf</a></p><br /><p># Enable dnsmasq&#039;s built-in TFTP server<br />#enable-tftp</p><p># Set the root directory for files available via FTP.<br />#tftp-root=/var/ftpd</p><p># Make the TFTP server more secure: with this set, only files owned by<br /># the user dnsmasq is running as will be send over the net.<br />#tftp-secure</p><p># This option stops dnsmasq from negotiating a larger blocksize for TFTP<br /># transfers. It will slow things down, but may rescue some broken TFTP<br /># clients.<br />#tftp-no-blocksize</p><p># Set the boot file name only when the &quot;red&quot; tag is set.<br />#dhcp-boot=tag:red,pxelinux.red-net</p><p># An example of dhcp-boot with an external TFTP server: the name and IP<br /># address of the server are given after the filename.<br /># Can fail with old PXE ROMS. Overridden by --pxe-service.<br />#dhcp-boot=/var/ftpd/pxelinux.0,boothost,192.168.0.3</p><p># If there are multiple external tftp servers having a same name<br /># (using /etc/hosts) then that name can be specified as the<br /># tftp_servername (the third option to dhcp-boot) and in that<br /># case dnsmasq resolves this name and returns the resultant IP<br /># addresses in round robin fasion. This facility can be used to<br /># load balance the tftp load among a set of servers.<br />#dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name</p><p># Set the limit on DHCP leases, the default is 150<br />#dhcp-lease-max=150</p><p># The DHCP server needs somewhere on disk to keep its lease database.<br /># This defaults to a sane location, but if you want to change it, use<br /># the line below.<br />#dhcp-leasefile=/var/lib/misc/dnsmasq.leases</p><p># Set the DHCP server to authoritative mode. In this mode it will barge in<br /># and take over the lease for any client which broadcasts on the network,<br /># whether it has a record of the lease or not. This avoids long timeouts<br /># when a machine wakes up on a new network. DO NOT enable this if there&#039;s<br /># the slightest chance that you might end up accidentally configuring a DHCP<br /># server for your campus/company accidentally. The ISC server uses<br /># the same option, and this URL provides more information:<br /># <a href="http://www.isc.org/files/auth.html">http://www.isc.org/files/auth.html</a><br />#dhcp-authoritative</p><p># Run an executable when a DHCP lease is created or destroyed.<br /># The arguments sent to the script are &quot;add&quot; or &quot;del&quot;,<br /># then the MAC address, the IP address and finally the hostname<br /># if there is one.<br />#dhcp-script=/bin/echo</p><p># Set the cachesize here.<br />#cache-size=150</p><p># If you want to disable negative caching, uncomment this.<br />#no-negcache</p><p># Normally responses which come from /etc/hosts and the DHCP lease<br /># file have Time-To-Live set as zero, which conventionally means<br /># do not cache further. If you are happy to trade lower load on the<br /># server for potentially stale date, you can set a time-to-live (in<br /># seconds) here.<br />#local-ttl=</p><p># If you want dnsmasq to detect attempts by Verisign to send queries<br /># to unregistered .com and .net hosts to its sitefinder service and<br /># have dnsmasq instead return the correct NXDOMAIN response, uncomment this line. You can add similar lines to do the same for other<br /># registries which have implemented wildcard A records.<br />#bogus-nxdomain=64.94.110.11</p><p># If you want to fix up DNS results from upstream servers, use the<br /># alias option. This only works for IPv4.<br /># This alias makes a result of 1.2.3.4 appear as 5.6.7.8<br />#alias=1.2.3.4,5.6.7.8<br /># and this maps 1.2.3.x to 5.6.7.x<br />#alias=1.2.3.0,5.6.7.0,255.255.255.0<br /># and this maps 192.168.0.10-&gt;192.168.0.40 to 10.0.0.10-&gt;10.0.0.40<br />#alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0</p><p># Change these lines if you want dnsmasq to serve MX records.</p><p># Return an MX record named &quot;maildomain.com&quot; with target<br /># servermachine.com and preference 50<br />#mx-host=maildomain.com,servermachine.com,50</p><p># Set the default target for MX records created using the localmx option.<br />#mx-target=servermachine.com</p><p># Return an MX record pointing to the mx-target for all local<br /># machines.<br />#localmx</p><p># Return an MX record pointing to itself for all local machines.<br />#selfmx</p><p># Change the following lines if you want dnsmasq to serve SRV<br /># records.&nbsp; These are useful if you want to serve ldap requests for<br /># Active Directory and other windows-originated DNS requests.<br /># See RFC 2782.<br /># You may add multiple srv-host lines.<br /># The fields are &lt;name&gt;,&lt;target&gt;,&lt;port&gt;,&lt;priority&gt;,&lt;weight&gt;<br /># If the domain part if missing from the name (so that is just has the<br /># service and protocol sections) then the domain given by the domain=<br /># config option is used. (Note that expand-hosts does not need to be<br /># set for this to work.)</p><p># A SRV record sending LDAP for the example.com domain to<br /># ldapserver.example.com port 389<br />#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389</p><p># A SRV record sending LDAP for the example.com domain to<br /># ldapserver.example.com port 389 (using domain=)<br />#domain=example.com<br />#srv-host=_ldap._tcp,ldapserver.example.com,389</p><p># Two SRV records for LDAP, each with different priorities<br />#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,1<br />#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,2</p><p># A SRV record indicating that there is no LDAP server for the domain<br /># example.com<br />#srv-host=_ldap._tcp.example.com</p><p># The following line shows how to make dnsmasq serve an arbitrary PTR<br /># record. This is useful for DNS-SD. (Note that the<br /># domain-name expansion done for SRV records _does_not<br /># occur for PTR records.)<br />#ptr-record=_http._tcp.dns-sd-services,&quot;New Employee Page._http._tcp.dns-sd-services&quot;</p><p># Change the following lines to enable dnsmasq to serve TXT records.<br /># These are used for things like SPF and zeroconf. (Note that the<br /># domain-name expansion done for SRV records _does_not<br /># occur for TXT records.)</p><p>#Example SPF.<br />#txt-record=example.com,&quot;v=spf1 a -all&quot;</p><p>#Example zeroconf<br />#txt-record=_http._tcp.example.com,name=value,paper=A4</p><p># Provide an alias for a &quot;local&quot; DNS name. Note that this _only_ works<br /># for targets which are names from DHCP or /etc/hosts. Give host<br /># &quot;bert&quot; another name, bertrand<br />#cname=bertand,bert</p><p># For debugging purposes, log each DNS query as it passes through<br /># dnsmasq.<br />#log-queries</p><p># Log lots of extra information about DHCP transactions.<br />log-dhcp</p><p># Include another lot of configuration options.<br />#conf-file=/etc/dnsmasq.more.conf<br />#conf-dir=/etc/dnsmasq.d</p><p>#Исключение ДНС<br />#except-interface eth0</p></div></div><p>Блин ввел&nbsp; &nbsp;killall dnsmasq теперь<br />dnsmasq:Unknown interface eth1</p><br /><p>ОГРОМНОЕ СПАСИБО</p>]]></content>
			<author>
				<name><![CDATA[alex0]]></name>
				<uri>https://linuxforum.ru/profile.php?id=35222</uri>
			</author>
			<updated>2014-08-27T19:06:23Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=420684#p420684</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=296543#p296543" />
			<content type="html"><![CDATA[<p>Отказался от Минта, Рунту установил Ubuntu UAPack и установил WiFi Hosapd AP <br /><a href="http://forum.ubuntu.ru/index.php?topic=163961.0">http://forum.ubuntu.ru/index.php?topic=163961.0</a><br />пока работает, не выход, конечно, буду разбираться позже.</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-31T12:13:31Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=296543#p296543</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=296420#p296420" />
			<content type="html"><![CDATA[<div class="quotebox"><cite>olegwhite пишет:</cite><blockquote><p> а может построить нечто подобное на каком другом dhcp / dns ?</p></blockquote></div><p>Выше в теме было - unbound в качестеве кэширующего dns, и isc-dhcp-server.</p>]]></content>
			<author>
				<name><![CDATA[zenon]]></name>
				<uri>https://linuxforum.ru/profile.php?id=6867</uri>
			</author>
			<updated>2012-08-30T14:57:59Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=296420#p296420</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=296408#p296408" />
			<content type="html"><![CDATA[<p>Радость была не долгой, как потом выяснилось пропадает доступ в интернет (сеть при этом не отпадает, по локалке пингуется все).<br />у меня теперь возникла мысль, а может построить нечто подобное на каком другом dhcp / dns ?</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-30T14:01:26Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=296408#p296408</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295904#p295904" />
			<content type="html"><![CDATA[<div class="quotebox"><cite>olegwhite пишет:</cite><blockquote><p>Да Вы просто гений!</p></blockquote></div><p>Угу. Только маленький ещё... <span class="postimg"><img src="http://linuxforum.ru/extensions/bbcode_smiles/img/ag.gif" alt="http://linuxforum.ru/extensions/bbcode_smiles/img/ag.gif" /></span></p>]]></content>
			<author>
				<name><![CDATA[-=Serj=-]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16175</uri>
			</author>
			<updated>2012-08-28T06:55:28Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295904#p295904</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295900#p295900" />
			<content type="html"><![CDATA[<p>Да Вы просто гений!<br />Извините, что не смог ответить вчера, у нас была страшная буря и отключился сначала нет, а потом и электричество.<br />Все работает, установил снесенные мною пакеты, все равно все работает. Все гениальное просто!</p><p>Спасибо за помощь.</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-28T06:28:05Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295900#p295900</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295854#p295854" />
			<content type="html"><![CDATA[<p><div class="termtitle" style="font-family: sans-serif; position:relative; height:auto; width:auto; background:#3A4061; color:#FFFFFF; padding: 1px;"><b> Консоль:</b></div>
<div class="termcont" style="font-family: Terminus; position:relative; height:auto; width:auto; overflow-x:scroll; white-space: nowrap ; overflow-y:auto;background:#000000; color:#4EF44E; line-height:1.2; padding: 3px; font-size: 1rem; max-height: 60vh"> $ sudo killall dnsmasq<br />$ sudo /etc/init.d/dnsmasq start</div></p>]]></content>
			<author>
				<name><![CDATA[-=Serj=-]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16175</uri>
			</author>
			<updated>2012-08-27T20:23:58Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295854#p295854</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295853#p295853" />
			<content type="html"><![CDATA[<p>ps aux | grep &#039;[d]nsmasq&#039;<br />nobody&nbsp; &nbsp; 2284&nbsp; 0.0&nbsp; 0.0&nbsp; &nbsp;6612&nbsp; 1200 ?&nbsp; &nbsp; &nbsp; &nbsp; S&nbsp; &nbsp; 23:04&nbsp; &nbsp;0:00 /usr/sbin/dnsmasq --no-resolv --keep-in-foreground --no-hosts --bind-interfaces --pid-file=/var/run/sendsigs.omit.d/network-manager.dnsmasq.pid --listen-address=127.0.0.1 --conf-file=/var/run/nm-dns-dnsmasq.conf --cache-size=0 --proxy-dnssec</p><p>может вы тут разберетесь..., где-то network-manager его пользует или как...</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T20:16:50Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295853#p295853</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295852#p295852" />
			<content type="html"><![CDATA[<p>меня еще вот что смущает, если сервис dnsmasq запущен и использует&nbsp; 127.0.0.1:53 то почему он, подлец, рестартовать не хочет?</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T20:08:48Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295852#p295852</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295851#p295851" />
			<content type="html"><![CDATA[<p>в свойствах прочитал, что он конфликтует с dnsmasq</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T20:02:53Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295851#p295851</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295850#p295850" />
			<content type="html"><![CDATA[<p>bind9-host, это что-то новое взмен bind9</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T20:01:55Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295850#p295850</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295849#p295849" />
			<content type="html"><![CDATA[<div class="quotebox"><cite>olegwhite пишет:</cite><blockquote><p>bind я таки снес</p></blockquote></div><p>Так его у вас и не было... Что именно вы снесли ?</p>]]></content>
			<author>
				<name><![CDATA[-=Serj=-]]></name>
				<uri>https://linuxforum.ru/profile.php?id=16175</uri>
			</author>
			<updated>2012-08-27T19:57:55Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295849#p295849</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295848#p295848" />
			<content type="html"><![CDATA[<p>bind я таки снес, ничего не изменилось, а вот</p><p>sudo netstat -tpln | grep 127.0.0.1<br />tcp&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; 0 127.0.0.1:53&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0.0.0.0:*&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;LISTEN&nbsp; &nbsp; &nbsp; 1694/dnsmasq&nbsp; &nbsp; <br />tcp&nbsp; &nbsp; &nbsp; &nbsp; 0&nbsp; &nbsp; &nbsp; 0 127.0.0.1:631&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;0.0.0.0:*&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;LISTEN&nbsp; &nbsp; &nbsp; 1281/cupsd</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T19:55:49Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295848#p295848</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295847#p295847" />
			<content type="html"><![CDATA[<p>А что говорит <br />netstat -lnp | grep bind9</p>]]></content>
			<author>
				<name><![CDATA[kisil]]></name>
				<uri>https://linuxforum.ru/profile.php?id=767</uri>
			</author>
			<updated>2012-08-27T19:53:53Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295847#p295847</id>
		</entry>
		<entry>
			<title type="html"><![CDATA[Re: Dnsmasq]]></title>
			<link rel="alternate" href="https://linuxforum.ru/viewtopic.php?pid=295846#p295846" />
			<content type="html"><![CDATA[<p>ps ax | grep bind9<br /> 3356 pts/0&nbsp; &nbsp; S+&nbsp; &nbsp; &nbsp;0:00 grep --colour=auto bind9</p>]]></content>
			<author>
				<name><![CDATA[olegwhite]]></name>
				<uri>https://linuxforum.ru/profile.php?id=25302</uri>
			</author>
			<updated>2012-08-27T19:46:10Z</updated>
			<id>https://linuxforum.ru/viewtopic.php?pid=295846#p295846</id>
		</entry>
</feed>
