openwrtv4/package/network/services
Kevin Darbyshire-Bryant 3a06dd60eb dnsmasq: do not forward rfc6761 excluded domains
RFC 6761 defines a number of top level domains should not be forwarded
to the Internet's domain servers since they are not responsible for
those domains.

This change adds a list of domains that will be blocked when 'boguspriv'
is used and augments that which is already blocked by dnsmasq's notion
of 'local service' using '--bogus-priv' i.e. RFC 1918 private addresses
and IPv6 prefixes as defined in RFC 6303.

To make this configurable rather than hard coded in dnsmasq's init
script, a new file /usr/share/dnsmasq/rfc6761.conf is conditionally
included.

The default file matches the RFC 6761 recommendation along with a few
other top level domains that should not be forwarded to the Internet.

Compile & run tested Archer C7 v2

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-03-09 10:42:27 +01:00
..
authsae treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22 16:42:21 +01:00
dnsmasq dnsmasq: do not forward rfc6761 excluded domains 2017-03-09 10:42:27 +01:00
dropbear dropbear: bump PKG_RELEASE 2017-02-17 12:18:58 +01:00
ead network/services/ead: drop Build/Prepare rule in favor of default one 2016-10-15 11:36:52 +02:00
hostapd hostapd: fix feature indication 2017-02-20 12:06:18 +01:00
igmpproxy treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
ipset-dns treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22 16:42:21 +01:00
lldpd lldpd: take over maintainership 2017-01-10 13:02:00 +01:00
odhcpd odhcpd: add loglevel uci option in odhcpd defaults 2017-03-06 17:38:33 +01:00
omcproxy omcproxy: Update to latest HEAD 2017-03-01 17:19:51 -08:00
openvpn openvpn: move list of params and bools to a separate file 2017-03-07 21:31:59 +08:00
openvpn-easy-rsa treewide: clean up and unify PKG_VERSION for git based downloads 2016-12-22 16:42:21 +01:00
ppp ppp: propagate master peerdns setting to dynamic slave interface 2017-03-07 11:26:39 +01:00
relayd relayd: fix making incomplete instance json data 2017-02-25 20:16:59 +08:00
samba36 ccache, samba36: fix samba.org addresses to use https 2017-02-02 00:14:03 +01:00
uhttpd uhttpd: use sha256 when generating certificates with openssl (FS#512) 2017-02-17 14:42:13 +01:00
umdns mdns: update and rename package to the umdns 2017-02-15 11:52:57 +01:00