16a905b322
'non-wildcard' interfaces enables dnsmasq's '--bind-dynamic' mode. This binds to interfaces rather than wildcard addresses *and* keeps track of interface comings/goings via a unique Linux api. Quoting dnsmasq's author "bind-dynamic (bind individual addresses, keep up with changes in interface config) ... On linux, there's actually no sane reason not to use --bind-dynamic, and it's only not the default for historical reasons." Let's change history, well on LEDE at least, and change the default! Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
32 lines
1,000 B
Text
32 lines
1,000 B
Text
config dnsmasq
|
|
option domainneeded 1
|
|
option boguspriv 1
|
|
option filterwin2k 0 # enable for dial on demand
|
|
option localise_queries 1
|
|
option rebind_protection 1 # disable if upstream must serve RFC1918 addresses
|
|
option rebind_localhost 1 # enable for RBL checking and similar services
|
|
#list rebind_domain example.lan # whitelist RFC1918 responses for domains
|
|
option local '/lan/'
|
|
option domain 'lan'
|
|
option expandhosts 1
|
|
option nonegcache 0
|
|
option authoritative 1
|
|
option readethers 1
|
|
option leasefile '/tmp/dhcp.leases'
|
|
option resolvfile '/tmp/resolv.conf.auto'
|
|
#list server '/mycompany.local/1.2.3.4'
|
|
option nonwildcard 1 # bind to & keep track of interfaces
|
|
#list interface br-lan
|
|
#list notinterface lo
|
|
#list bogusnxdomain '64.94.110.11'
|
|
option localservice 1 # disable to allow DNS requests from non-local subnets
|
|
|
|
config dhcp lan
|
|
option interface lan
|
|
option start 100
|
|
option limit 150
|
|
option leasetime 12h
|
|
|
|
config dhcp wan
|
|
option interface wan
|
|
option ignore 1
|