Re: [Dnsmasq-discuss] Example for connmark based filtering

2024-08-18 Thread Geert Stappers
On Sat, Aug 17, 2024 at 11:55:07AM +0200, Uwe Schindler wrote: > Hi, > > I know there is the feature to reject DNS queries from hosts based on > marking the connection with iptables. I tried to set this up for some > specific radio device which has a buggy weather.com webservice api > that crashes

Re: [Dnsmasq-discuss] Example for connmark based filtering

2024-08-18 Thread Uwe Schindler
Hi Geert, thanks, all fine. I was in a bit of hurry yesterday, so my original post may not have all relevant information. I know there is the feature to reject DNS queries from hosts based on marking the connection with iptables. I tried to set this up for some specific radio device which has

Re: [Dnsmasq-discuss] all-servers option not working for dnssec-query queries

2024-08-18 Thread Geert Stappers
On Wed, Aug 14, 2024 at 11:42:15AM +0200, Niels Hendriks wrote: > Hello, > > We are using dnsmasq with the all-servers option enabled in order > to prevent issues with DNS resolution when a single resolver is not > working properly. > We have noticed that sometimes when a single resolver is unreac

Re: [Dnsmasq-discuss] IPv6 resolve local only

2024-08-18 Thread Geert Stappers
On Mon, Aug 05, 2024 at 11:25:21PM +0200, Klaus Vink Slott via Dnsmasq-discuss wrote: > Hi. I am new to dnsmasq and do not really care about IPv6 as our ISP does > not support it. I am trying to replace the build in dhcp/dns in pfSense with > a dnsmasq on a separate machine. Currently there is 3 L

Re: [Dnsmasq-discuss] CNAME not resolving for external domain

2024-08-18 Thread Buck Horn via Dnsmasq-discuss
On 17.08.24 22:24, Alex Malinovich via Dnsmasq-discuss wrote: I also own the public "foo.net" domain. (...) BUT, if I try the same thing with the foo.net domain, I get the CNAME record back, but it never resolves to an A record so the lookup fails: address=/root.foo.net/192.168.0.234 cname=bar.f

[Dnsmasq-discuss] Forwarding UDP requests to TCP, some other concerns

2024-08-18 Thread Corey Minyard
I've been running with a setup with bind and the ISC DHCP server. It works, but there's one feature it cannot do that dnsmasq can, and I've been looking to simplify my configuration from all that complexity, anyway. I have dnsmasq mostly working, but I'm having one big problem. It seems that req