openwrt/package/network/services/dnsmasq/files/dhcp.conf

config dnsmasq
	option domainneeded	1
	option boguspriv	1
	option filterwin2k	0  # enable for dial on demand
	option localise_queries	1
	option rebind_protection 1  # disable if upstream must serve RFC1918 addresses
	option rebind_localhost 1  # enable for RBL checking and similar services
	#list rebind_domain example.lan  # whitelist RFC1918 responses for domains
	option local	'/lan/'
	option domain	'lan'
	option expandhosts	1
	option nonegcache	0
	option cachesize	1000
	option authoritative	1
	option readethers	1
	option leasefile	'/tmp/dhcp.leases'
	option resolvfile	'/tmp/resolv.conf.d/resolv.conf.auto'
	#list server		'/mycompany.local/1.2.3.4'
	option nonwildcard	1 # bind to & keep track of interfaces
	#list interface		br-lan
	#list notinterface	lo
	#list bogusnxdomain     '64.94.110.11'
	option localservice	1  # disable to allow DNS requests from non-local subnets
	option ednspacket_max	1232
	option filter_aaaa	0
	option filter_a		0
	#list addnmount		/some/path # read-only mount path to expose it to dnsmasq

config dhcp lan
	option interface	lan
	option start 	100
	option limit	150
	option leasetime	12h

config dhcp wan
	option interface	wan
	option ignore	1
convert the rest of /etc/dnsmasq.conf to uci SVN-Revision: 9440 2007-10-24 21:08:54 +00:00			`config dnsmasq`
			`option domainneeded 1`
			`option boguspriv 1`
dnsmasq: add and enable DNS rebind protections SVN-Revision: 22222 2010-07-16 00:06:59 +00:00			`option filterwin2k 0 # enable for dial on demand`
convert the rest of /etc/dnsmasq.conf to uci SVN-Revision: 9440 2007-10-24 21:08:54 +00:00			`option localise_queries 1`
dnsmasq: add and enable DNS rebind protections SVN-Revision: 22222 2010-07-16 00:06:59 +00:00			`option rebind_protection 1 # disable if upstream must serve RFC1918 addresses`
dnsmasq: allow 127.0.0.1/8 upstream DNS responses by default, resolves issues with Netflix and other services SVN-Revision: 23270 2010-10-06 13:10:15 +00:00			`option rebind_localhost 1 # enable for RBL checking and similar services`
dnsmasq: add and enable DNS rebind protections SVN-Revision: 22222 2010-07-16 00:06:59 +00:00			`#list rebind_domain example.lan # whitelist RFC1918 responses for domains`
convert the rest of /etc/dnsmasq.conf to uci SVN-Revision: 9440 2007-10-24 21:08:54 +00:00			`option local '/lan/'`
			`option domain 'lan'`
			`option expandhosts 1`
			`option nonegcache 0`
dnsmasq: set an increased cachesize default value Dnsmasq DNS cache size is only 150 by default. Set the uci default value to 1000, so that cache gets used more and unnecessary DNS queries to upstream can be avoided. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> 2022-11-27 20:27:06 +00:00			`option cachesize 1000`
convert the rest of /etc/dnsmasq.conf to uci SVN-Revision: 9440 2007-10-24 21:08:54 +00:00			`option authoritative 1`
			`option readethers 1`
			`option leasefile '/tmp/dhcp.leases'`
dnsmasq: switch to /tmp/resolv.conf.d/resolv.conf.auto Mount-bind directory instead of resolv.conf.auto file in jail to avoid problems when the file is deleted/replaced. Signed-off-by: Daniel Golle <daniel@makrotopia.org> 2020-01-03 11:39:06 +00:00			`option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'`
- added "server" option list to delegate specific subdomains to given upstream servers SVN-Revision: 14232 2009-01-27 22:58:11 +00:00			`#list server '/mycompany.local/1.2.3.4'`
dnsmasq: make bind-dynamic 'non-wildcard' interfaces default 'non-wildcard' interfaces enables dnsmasq's '--bind-dynamic' mode. This binds to interfaces rather than wildcard addresses and keeps track of interface comings/goings via a unique Linux api. Quoting dnsmasq's author "bind-dynamic (bind individual addresses, keep up with changes in interface config) ... On linux, there's actually no sane reason not to use --bind-dynamic, and it's only not the default for historical reasons." Let's change history, well on LEDE at least, and change the default! Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> 2017-02-24 10:08:30 +00:00			`option nonwildcard 1 # bind to & keep track of interfaces`
changed "option" to "list" for binding interfaces SVN-Revision: 15613 2009-05-05 09:33:56 +00:00			`#list interface br-lan`
dnsmasq startup script update: add notinterface parameter This tiny patch makes the dnsmasq init.d script listen to a parameter called "notinterface", which tells dnsmasq to not listen on a defined set of interfaces. By default dnsmasq always listens on the loopback interface, even if you tell it to specifically listen on a certain other interface. Sometimes this is not desirable behaviour, so you might want to turn it off. This is useful when, for example, you want to have your own DNS server listening on the loopback interface. Signed-off-by: Johnny Halfmoon <jhalfmoon at milksnot.com> SVN-Revision: 17599 2009-09-16 18:15:31 +00:00			`#list notinterface lo`
package/dnsmasq: add support for bogus-nxdomain (thanks to Mickey Knox), bump release number SVN-Revision: 22592 2010-08-11 10:37:33 +00:00			`#list bogusnxdomain '64.94.110.11'`
dnsmasq: fix config file typo s/loclal/local/ Signed-off-by: Jonathan McCrohan <jmccrohan@gmail.com> SVN-Revision: 45923 2015-06-08 04:48:08 +00:00			`option localservice 1 # disable to allow DNS requests from non-local subnets`
dnsmasq: explictly set ednspacket_max value This is related to DNS Flag Day 2020. It sets default ends buffer size value to 1232. Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz> 2020-11-09 14:58:39 +00:00			`option ednspacket_max 1232`
dnsmasq: add support for filter-AAAA/A This add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6 addresses from DNS answers. these options is supported since version 2.87. Co-authored-by: NueXini <nuexini@alumni.tongji.edu.cn> Signed-off-by: Chen Minqiang <ptpt52@gmail.com> 2022-11-07 08:20:15 +00:00			`option filter_aaaa 0`
			`option filter_a 0`
dnsmasq: add option to expose additional paths to jail Add new UCI list 'addn_mount' allowing the expose additional filesystem paths to the jailed dnsmasq process. This is useful e.g. in case of manually configured includes to the configuration file or symlinks pointing outside of the exposed paths as used by e.g. the safe-search package in the packages feed. Signed-off-by: Daniel Golle <daniel@makrotopia.org> 2022-11-27 12:33:31 +00:00			`#list addnmount /some/path # read-only mount path to expose it to dnsmasq`
convert the rest of /etc/dnsmasq.conf to uci SVN-Revision: 9440 2007-10-24 21:08:54 +00:00
add section names to dnsmasq config SVN-Revision: 12342 2008-08-19 22:05:41 +00:00			`config dhcp lan`
upgrade dnsmasq to latest version, rewrite dnsmasq init script for uci, rename /bin/ipcalc to /bin/ipcalc.sh (fixes #1452) SVN-Revision: 6595 2007-03-17 13:31:13 +00:00			`option interface lan`
			`option start 100`
Use a more explicit variable name for the number of dhcp leases (#2240) SVN-Revision: 8437 2007-08-19 20:50:52 +00:00			`option limit 150`
upgrade dnsmasq to latest version, rewrite dnsmasq init script for uci, rename /bin/ipcalc to /bin/ipcalc.sh (fixes #1452) SVN-Revision: 6595 2007-03-17 13:31:13 +00:00			`option leasetime 12h`

add section names to dnsmasq config SVN-Revision: 12342 2008-08-19 22:05:41 +00:00			`config dhcp wan`
upgrade dnsmasq to latest version, rewrite dnsmasq init script for uci, rename /bin/ipcalc to /bin/ipcalc.sh (fixes #1452) SVN-Revision: 6595 2007-03-17 13:31:13 +00:00			`option interface wan`
			`option ignore 1`