[Dnsmasq-discuss] [PATCH v4] openwrt: Integration of connmark based DNS filtering

2021-06-16 Thread Etan Kissling
This integrates the proposed Dnsmasq patch from email: - [PATCH v5] dnsmasq: connection track mark based DNS query filtering into OpenWrt 21.02. Signed-off-by: Etan Kissling (updated to latest patch) Signed-off-by: Etan Kissling --- Etan Kissling : v2: Update to v6 of underlying dnsmasq patch. v

Re: [Dnsmasq-discuss] [PATCH v8] Connection track mark based DNS query filtering.

2021-06-16 Thread john doe
I'm being pedantic here and that might not be what Simon desires. On 6/16/2021 8:34 AM, Etan Kissling wrote: This extends query filtering support beyond what is currently possible with the `--ipset` configuration option, by adding support for: 1) Specifying allowlists on a per-client basis, base

[Dnsmasq-discuss] Use special address 0.0.0.0 for DNS

2021-06-16 Thread Alkis Georgopoulos
Hi, from the dnsmasq man page: > The special address 0.0.0.0 is taken to mean > "the address of the machine running dnsmasq" This is for DHCP. Can I do the same for DNS queries, in some way? So that I could map "webserver" to the dnsmasq IP, and DNS clients would be able to bookmark and use http

Re: [Dnsmasq-discuss] Use special address 0.0.0.0 for DNS

2021-06-16 Thread Alkis Georgopoulos
If I'm reading this correctly, it needs an extra step, to discover and list all the interfaces, both after the initial installation and after cloning and after motherboard/NIC replacements, e.g. interface-name=webserver,enp2s0 interface-name=webserver,enp4s0 interface-name=webserver,enp5s0 It

Re: [Dnsmasq-discuss] Is field 'arraypos' missing in struct serv_addr4?

2021-06-16 Thread Simon Kelley
On 16/06/2021 02:40, Xingcong Li wrote: > I reviewed this commit: > > commit 1c9f136b57456278ad7aae62b8bae01f01383e1c > Author: Simon Kelley > > Date:   Tue Jun 15 22:07:59 2021 +0100 > Man page update, lease times can be given in days or weeks. > > And  found the

Re: [Dnsmasq-discuss] Use special address 0.0.0.0 for DNS

2021-06-16 Thread Simon Kelley
On 16/06/2021 09:10, Alkis Georgopoulos wrote: > Hi, from the dnsmasq man page: > >> The special address 0.0.0.0 is taken to mean >> "the address of the machine running dnsmasq" > > This is for DHCP. > Can I do the same for DNS queries, in some way? > So that I could map "webserver" to the dnsmas

Re: [Dnsmasq-discuss] [PATCH v8] Connection track mark based DNS query filtering.

2021-06-16 Thread Etan Kissling
> On 16 Jun 2021, at 10:45, john doe wrote: > > Where's the v1? Full history: v1: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014595.html v2: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014601.html v3: https://lists.thekelleys.org.uk/pipermail/dnsma

Re: [Dnsmasq-discuss] [PATCH v8] Connection track mark based DNS query filtering.

2021-06-16 Thread john doe
On 6/16/2021 11:47 AM, Etan Kissling wrote: On 16 Jun 2021, at 10:45, john doe wrote: Where's the v1? Full history: v1: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014595.html v2: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q1/014601.html v3: https

Re: [Dnsmasq-discuss] Patch with option to filter A records

2021-06-16 Thread Trey Sis
On 6/14/2021 1:43, Trey Sis wrote: On 6/13/2021 22:01, Geert Stappers via Dnsmasq-discuss wrote: On Wed, Jun 09, 2021 at 02:13:34PM +0200, Trey Sis wrote: Dropping the patch file as attachment.  From 57c7fcb0b3caccae7376f71ab1a9ae74f0e7f6d9 Mon Sep 17 00:00:00 2001 From: treysis Date: Sat, 5 J

[Dnsmasq-discuss] [PATCH v9] Connection track mark based DNS query filtering.

2021-06-16 Thread Etan Kissling
This extends query filtering support beyond what is currently possible with the `--ipset` configuration option, by adding support for: 1) Specifying allowlists on a per-client basis, based on their associated Linux connection track mark. 2) Dynamic configuration of allowlists via Ubus. 3) Report

[Dnsmasq-discuss] [PATCH v5] openwrt: Integration of connmark based DNS filtering

2021-06-16 Thread Etan Kissling
This integrates the proposed Dnsmasq patch from email: - [PATCH v5] dnsmasq: connection track mark based DNS query filtering into OpenWrt 21.02. Signed-off-by: Etan Kissling (updated to latest patch) Signed-off-by: Etan Kissling --- Etan Kissling : v2: Update to v6 of underlying dnsmasq patch. v