1 release 0.4 - initial public release
3 release 0.5 - added caching, removed compiler warning on linux PPC
5 release 0.6 - TCP handling: close socket and return to connect state if we
6 can't read the first byte. This corrects a problem seen very
7 occasionally where dnsmasq would loop using all available CPU.
9 Added a patch from Cris Bailiff <c.bailiff@e-secure.com.au>
10 to set SO_REUSEADDR on the tcp socket which stops problems when
11 dnsmasq is restarted and old connections still exist.
13 Stopped claiming in doc.html that smail is the default Debian
14 mailer, since it isn't any longer. (Pointed out by
15 David Karlin <dkarlin@coloradomtn.edu>)
17 release 0.7 Create a pidfile at /var/run/dnsmasq.pid
19 Extensive armouring against "poison packets" courtesy of
20 Thomas Moestl <tmoestl@gmx.net>
22 Set sockaddr.sa_family on outgoing address, patch from
23 David Symonds <xoxus@usa.net>
25 Patch to clear cache on SIGHUP
26 from Jason L. Wagner <nialscorva@yahoo.com>
28 Fix bad bug resulting from not initialising value-result
29 address-length parameter to recvfrom() and accept() - it
30 worked by luck before!
32 release 0.95 Major rewrite: remove calls to gethostbyname() and talk
33 directly to the upstream server(s) instead.
34 This has many advantages.
35 (1) Dnsmasq no longer blocks during long lookups.
36 (2) All query types are handled now, (eg MX) not just internet
37 address queries. Addresses are cached, all other
38 queries are forwarded directly.
39 (3) Time-to-live data from upstream server is read and
40 used by dnsmasq to purge entries from the cache.
41 (4) /etc/hosts is still read and its contents served (unless
42 the -h option is given).
43 (5) Dnsmasq can get its upstream servers from
44 a file other than /etc/resolv.conf (-r option) this allows
45 dnsmasq to serve names to the machine it is running
46 on (put nameserver 127.0.0.1 in /etc/resolv.conf and
47 give dnsmasq the option -r /etc/resolv.dnsmasq)
48 (6) Dnsmasq will re-read its servers if the
49 modification time of resolv.conf changes. Along with
50 4 above this allows nameservers to be set
51 automatically by ppp or dhcp.
53 A really clever NAT-like technique allows the daemon to have lots
54 of queries in progress, but still remain very lightweight.
55 Dnsmasq has a small footprint and normally doesn't allocate
56 any more memory after start-up. The NAT-like forwarding was
57 inspired by a suggestion from Eli Chen <eli@routefree.com>
59 release 0.96 Fixed embarrasing thinko in cache linked-list code.
61 release 0.98 Some enhancements and bug-fixes.
62 Thanks to "Denis Carre" <denis.carre@laposte.net> and Martin
63 Otte <otte@essc.psu.edu>
65 (1) Dnsmasq now always sets the IP source address
66 of its replies correctly. Older versions would not always
67 do this on multi-homed and IP aliased hosts, which violates
69 (2) Dnsmasq no longer crashes if a server loop is created
70 (ie dnsmasq is told to use itself as an upstream server.)
71 Now it just logs the problem and doesn't use the bad
73 (3) Dnsmasq should now forward (but not cache) inverse queries
74 and server status queries; this feature has not been tested.
75 (4) Don't write the pid file when in non-daemon mode.
76 (5) Create the pid file mode 644, rather then 666 (!).
77 (6) Generate queries to upstream nameservers with unpredictable
78 ids, to thwart DNS spoofers.
79 (7) Dnsmasq no longer forwards queries when the
80 "recursion desired" bit is not set in the header.
81 (8) Fixed getopt code to work on compliers with unsigned char.
83 release 0.991 Added -b flag: when set causes dnsmasq to always answer
84 reverse queries on the RFC 1918 private IP space itself and
85 never forward them to an upstream server. If the name is not in
86 /etc/hosts, dnsmasq replies with the dotted-quad address.
88 Fixed a bug which stopped dnsmasq working on a box with
89 two or more interfaces with the same IP address.
91 Fixed cacheing of CNAMEs. Previously, a CNAME which pointed
92 to a name with many A records would not have all the addresses
93 returned when being answered from the cache.
95 Thanks to "Steve Hardy" <s.a.hardy@connectux.com> for his input
98 Fixed race which could cause dnsmasq to miss the second of
99 two closely-spaced updates of resolv.conf (Thanks to Eli Chen
100 for pointing this out.)
102 Fixed a bug which could cause dnsmasq to fail to cache some
105 release 0.992 Small change to memory allocation so that names in /etc/hosts
106 don't use cache slots. Also make "-c 0" flag meaningfully
107 disable caching completely.
109 release 0.993 Return only the first (canonical) name from an entry in
110 /etc/hosts as reply to reverse query.
112 Handle wildcard queries for names/addresses in /etc/hosts
113 this is mainly to allow reverse lookups by dig to succeed.
114 (Bug reported by Simon J. Rowe" <srowe@mose.org.uk>)
116 Subtle change to the logic which selects which of multiple
117 upstream servers we send queries to. This fixes a problem
118 where dnsmasq continuously sends queries to a server which
119 is returning error codes and ignores one which is working.
121 release 0.994 Fixed bug which broke lookup of names in /etc/hosts
122 which have upper-case letters in them. Thanks for Joao Clemente
123 for spotting that one.
125 Output cache statistics on receipt of SIGUSR1. These go
126 to syslog except in debug (-d) mode, when a complete cache
127 dump goes to stdout. Suggestion from Joao Clemente, code
128 based in John Volpe's.
130 Accept GNU long options on the command line. Code from
133 Split source code into multiple files and produced
136 Included code from John Volpe to parse dhcp.leases file
137 written by ISC dhcpd. The hostnames in the leases file are
138 added to the cache and updated as dhcpd updates the
139 leases file. The code has been heavily re-worked by me,
140 so any bugs are probably mine.
142 release 0.995 Small tidy-ups to signal handling and cache code.
144 release 0.996 Added negative caching: If dnsmasq gets a "no such domain" reply
145 from an upstream nameserver, it will cache that information
146 for a time specified by the SOA RR in the reply. See RFC 2308
147 for details. This is useful with resolver libraries
148 which append assorted suffices to non-FQDN in an attempt to
149 resolve them, causing useless cache misses.
151 Added -i flag, which restricts dnsmasq to offering name service
152 only on specified interfaces.
154 release 0.997 Deleted INSTALL script and added "install" target to makefile.
156 Stopped distributing binaries in the tarball to avoid
157 libc version clashes.
159 Fixed interface detection code to
160 remove spurious startup errors in rare circumstances.
162 Dnsmasq now changes its uid, irrevocably, to nobody after
163 startup for security reasons. Thanks to Peter Bailey for
166 Cope with infinite DHCP leases. Patch thanks to
169 Added rpm control files to .tar.gz distribution. Thanks to
170 Peter Baldwin at ClarkConnect for those.
172 Improved startup script for rpms. Thanks to Yaacov Akiba Slama.
174 release 1.0 Stable release: dnsmasq is now considered feature-complete
177 release 1.1 Added --user argument to allow user to change to
180 Added --mx-target argument to allow mail to be delivered
181 away from the gateway machine running dnsmasq.
183 Fixed highly obscure bug with wildcard queries for
184 DHCP lease derived names.
186 Moved manpage from section 1 to section 8.
188 Added --no-poll option.
189 Added Suse-rpm support.
190 Thanks to Joerg Mayer for the last two.
192 release 1.2 Added IPv6 DNS record support. AAAA records are cached
193 and read from /etc/hosts. Reverse-lookups in the
194 ip6.int and ip6.arpa domains are suppored. Dnsmasq can
195 talk to upstream servers via IPv6 if it finds IP6 addresses
196 in /etc/resolv.conf and it offers DNS service automatically
197 if IPv6 support is present in the kernel.
199 Extended negative caching to NODATA replies.
201 Re-vamped CNAME processing to cope with RFC 2317's use of
202 CNAMES to PTR RRs in CIDR.
204 Added config.h and a couple of symbols to aid
205 compilation on non-linux systems.
207 release 1.3 Some versions of the Linux kernel return EINVAL rather
208 then ENPROTONOSUPPORT when IPv6 is not available,
209 causing dnsmasq to bomb out. This release fixes that.
210 Thanks to Steve Davis for pointing this one out.
212 Trivial change to startup logic so that dnsmasq logs
213 its stuff and reads config files straight away on
214 starting, rather than after the first query - principle
215 of least surprise applies here.
217 release 1.4 Fix a bug with DHPC lease parsing which broke in
218 non-UTC timezones. Thanks to Mark Wormgoor for
219 spotting and diagnosing this. Fixed versions in
220 the .spec files this time. Fixed bug in Suse startup
221 script. Thanks to Didi Niklaus for pointing this out.
223 release 1.5 Added --filterwin2k option which stops dnsmasq from forwarding
224 "spam" queries from win2k boxes. This is useful to stop spurious
225 connections over dial-on-demand links. Thanks to Steve Hardy
228 Clear "truncated" bit in replies we return from upstream. This
229 stops resolvers from switching to TCP, which is pointless since
230 dnsmasq doesn't support TCP. This should solve problems
231 in resolving hotmail.com domains.
233 Don't include getopt.h when Gnu-long-options are disabled -
234 hopefully this will allow compilation on FreeBSD.
236 Added the --listen-address and --pid-file flags.
238 Fixed a bug which caused old entries in the DHCP leases file
239 to be used in preference to current ones under certain
242 release 1.6 If a machine gets named via DHCP and the DHCP name doesn't have
243 a domain part and domain suffix is set using the -s flag, then
244 that machine has two names with the same address, with and
245 without the domain suffix. When doing a _reverse_ lookup to
246 get the name, the "without suffix" name used to be returned,
247 now the "with suffix" one gets returned instead. This change
248 suggested by Arnold Schulz.
250 Fixed assorted typos in the documentation. Thanks
253 Subtle rearrangement to the downloadable tarball, and stopped
254 distributing .debs, since dnsmasq is now an official Debian
257 release 1.7 Fix a problem with cache not clearing properly
258 on receipt of SIGHUP. Bug spotted by Sat Deshpande.
260 In group-id changing code:
261 1) Drop supplimentary groups.
262 2) Change gid before dropping root (patch from Soewono Effendi.)
263 3) Change group to "dip" if it exists, to allow access
264 to /etc/ppp/resolv.conf (suggestion from Jorg Sommer.)
265 Update docs to reflect above changes.
267 Other documentation changes from David Miller.
268 Added suggested script fragment for dhcpcd.exe.
270 release 1.8 Fix unsafe use of tolower() macro - allows linking against
271 ulibc. (Patches from Soewono Effendi and Bjorn Andersson.)
273 Fix typo in usage string.
275 Added advice about RedHat PPP configuration to
276 documentation. (Thanks to C. Lee Taylor.)
278 Patches to fix problems on BSD systems from Marc Huber
279 and Can Erkin Acar. These add the options
280 HAVE_ARC4RANDOM and HAVE_SOCKADDR_SA_LEN to config.h.
281 Elaborated config.h - should really use autoconf.
283 Fix time-to-live calculation when chasing CNAMEs.
285 Fix use-after-free and missing initialisation bugs in
286 the cache code. (Thanks to Marc Huber.)
288 Builds on Solaris 9. (Thanks to Marc Huber.)
290 release 1.9 Fixes to rpm .spec files.
292 Don't put expired DHCP entries into the cache only to
293 throw them away again.
295 Put dnsmasq on a severe memory diet: this reduces both
296 the amount of heap space used and the stack size
297 required. The difference is not really visible with
298 bloated libcs like glibc, but should dramatically reduce
299 memory requirements when linked against ulibc for use on
300 embeded routers, and that's the point really. Thanks to
301 Matthew Natalier for prompting this.
303 Changed debug mode (-d) so that all logging appears on
304 stderr as well as going to syslogd.
306 Added HAVE_IPV6 config symbol to allow compilation
307 against a libc which doesn't have IPv6 support.
309 Added a facility to log all queries, enabled with -q flag.
311 Fixed packet size checking bug in address extraction code.
313 Halved default cache size - 300 was way OTT in typical use.
315 Added self-MX function, enabled by -e flag. Thanks to
316 Lyonel Vincent for the patch.
318 Added HAVE_FORK config symbol and stuff to support
319 uClinux. Thanks to Matthew Natalier for uClinux stuff.
321 release 1.10 Log warnings if resolv.conf or dhcp.leases are not
322 accessable for any reason, as suggested by Hinrich Eilts.
324 Fixed wrong address printing in error message about
325 no interface with address.
327 Updated docs and split installation instuctions into setup.html.
329 Fix bug in CNAME chasing code: One CNAME pointing
330 to many A records would lose A records after the
331 first. This bug was introduced in version 1.9.
333 Log startup failures at level Critical as well as
334 printing them to standard error.
335 Exit with return code 1 when given bad options.
337 Cleaned up code for no-cache operation.
339 Added -o option which forces dnsmasq to use to
340 upstream servers in the order they appear in /etc/resolv.conf.
342 Added upstream server use logging.
344 Log full cache dump on receipt of SIGUSR1 when query
345 logging is enabled (-q switch).
347 Added -S option to directly specify upstream servers and
348 added ability to direct queries for specific domains to
349 specfic servers. Suggested by Jens Vonderheide.
351 Upgraded random ID generation - patch from Rob Funk.
353 Fixed reading of domains in arguments with capital
354 letters or trailing periods.
356 Fixed potential SEGV when given bad options.
358 Read options from /etc/dnsmasq.conf if it exists.
359 Do sensible things with missing parameters, eg
360 "--resolv-file=" turns off reading /etc/resolv.conf.
362 release 1.11 Actually implement the -R flag promised in the 1.10 man page.
364 Improve and rationalise the return codes in answers to
365 queries. In the case that there are no available
366 upstream servers to forward a query to, return REFUSED.
367 This makes sendmail work better on modem connected
368 systems when the modem link is down (Thanks to Roger Plant).
369 Cache and return the NXDOMAIN status of failed queries:
370 this makes the `host` command work when traversing search
371 paths (Thanks to Peter Bailey). Set the "authoritative"
372 bit in replies containing names from /etc/hosts or DHCP.
374 Tolerate MS-DOS style line ending codes in /etc/hosts
375 and /etc/resolv.conf, for people who copy from winsock
378 Allow specification of more than one resolv.conf file. This is
379 intended for laptops which connect via DHCP or
380 PPP. Whichever resolv.conf was updated last is used.
382 Allow -S flags which specify a domain but no server
383 address. This gives local domains which are never forwarded.
385 Add -E flag to automatically add the domain suffix to
386 names in /etc/hosts -suggestion from Phil Harman.
388 Always return a zero time-to-live for names derived from
389 DHCP which stops anthing else caching these
390 names. Previously the TTL was derived from the lease
391 time but that is incorrect since a lease can be given
392 up early: dnsmasq would know this but anything with the
393 name cached with long TTL would not be updated.
395 Extended HAVE_IPV6 config flag to allow compliation on
396 old systems which don't have modern library routines
397 like inet_ntop(). Thanks to Phil Harman for the patch.
399 release 1.12 Allow more than one domain in server config lines and
400 make "local" a synonym for "server". This makes things
401 like "local=/localnet/thekelleys.org.uk/" legal. Allow
402 port to specified as part of server address.
404 Allow whole domains to have an IP address specified
405 in /etc/dnsmasq.conf. (/etc/hosts doesn't work domains).
406 address=/doubleclick.net/127.0.0.1 should catch all
407 those nasty banner ads. Inspired by a patch
408 from Daniel Gryniewicz
410 Log the source of each query when logging switched on.
412 Fix bug in script fragment for dhcpcd - thanks to Barry Stewart.
414 Fix bug which meant that strict-order and self-mx were
417 Builds with Linux libc5 now - for the Freesco project.
419 Fixed Makefile installation script (patch from Silvan
420 Minghetti) and added CC and CFLAGS variables.
422 Improve resource allocation to reduce vulnerability to
423 DOS attacks - the old version could have all queries
424 blocked by a continuous high-speed stream of
425 queries. Now some queries will succeed, and the excess
426 will be rejected with a server fail error. This change also
427 protects against server-loops; setting up a resolving
428 loop between two instances of dnsmasq is no longer
429 catastrophic. The servers will continue to run, looped
430 queries fail and a warning is logged. Thanks to C. Lee
431 Taylor for help with this.
433 release 1.13 Added support for building rpms suitable for modern Suse
434 systems. (patch from Andi <cambeis@netplace.de>)
436 Added options --group, --localmx, --local-ttl,
437 --no-negcache, --addn-host.
439 Moved all the various rpm-building bits into /rpm.
441 Fix builds with glibc 2.1 (thanks to Cristian
444 Preserve case in domain names, as per RFC1035.
446 Fixed ANY queries to domains with --address specification.
448 Fixed FreeBSD build. (thanks to Steven Honson)
450 Added -Q option which allows a specified port to be used
451 to talk to upstream servers. Useful for people who want
452 very paranoid firewalls which open individual UDP port.
453 (thanks to David Coe for the patch)
455 release 1.14 Fixed man page description of -b option which confused
456 /etc/hosts with /etc/resolv.conf. (thanks to Christopher
459 Fixed config.h to allow building under MACOS X and glibc
460 2.0.x. (thanks to Matthew Gregan and Serge Caron)
462 Added --except-interface option. (Suggested by Serge Caron)
464 Added SIGUSR2 facility to re-scan for new
465 interfaces. (Suggested by Serge Caron)
467 Fixed SEGV in option-reading code for invalid options.
468 (Thanks to Klaas Teschauer)
470 Fixed man page to clarify effect of SIGUSR1 on
472 (Thanks to Klaas Teschauer)
474 Check that recieved queries have only rfc1035-legal characters
475 in them. This check is mainly to avoid bad strings being
478 Fixed &&/& confusion in option.c and added DESTDIR
479 variable for "make install" (Thanks to Osvaldo
480 Marques for the patch.)
482 Fixed /etc/hosts parsing code to cope with MS-DOS
483 line-ends in the file. This was supposed to be done in
484 version 1.11, but something got missed. (Thanks to Doug
485 Copestake for helping to find this.)
487 Squash repeated name/address pairs read from hosts
490 Tidied up resource handling in util.c (Thanks to
491 Cristian Ionescu-Idbohrn).
493 Added hashed searching of domain names. People are starting
494 to use dnsmasq with larger loads now, and bigger caches,
495 and large lists of ad-block addresses. This means doing
496 linear searches can start to use lots of CPU so I added hashed
497 searching and seriously optimised the cache code for
498 algorithmic efficiency. Also upped the limit on cache
501 Fixed logging of the source of names from the additional
502 hosts file and from the "bogus private address" option.
504 Fixed spurious re-reading of empty lease files. (Thanks
505 to Lewis Baughman for spotting this.)
507 Fixed building under uclibc (patch from Cristian Ionescu-Idbohrn)
509 Do some socket tweaking to allow dnsmasq to co-exist
510 with BIND. Thanks to Stefan 'Sec' Zehl for the patch.
512 release 1.15 Added --bogus-nxdomain option.
514 Restrict checking of resolv.conf and DHCP leases files
515 to once per second. This is intended to improve
516 performance under heavy loads. Also make a system call
517 to get the current time once per query, rather than four
520 Increased number of outstanding queries to 150 in
523 release 1.16 Allow "/" characters in domain names - this fixes
524 caching of RFC 2317 CNAME-PTR records.
526 Fixed brain-fart in -B option when GETOPT_LONG not
527 enabled - thanks to Steven Young and Jason Miller
528 for pointing this out.
530 Generalised bogus-nxdomain code: allow more than one
531 address to check, and deal with replies with multiple
532 answer records. (Based on contribution from Humberto
535 Updated the documentation to include information about
536 bogus-nxdomain and the Verisign tragedy.
538 Added libraries needed on Solaris to Makefile.
540 Added facility to set source address in queries to
541 upstream nameservers. This is useful with multihomed
542 hosts, especially when using VPNs. Thanks to Tom Fanning
543 for suggesting this feature.
545 Tweaked logging: log to facility LOCAL0 when in
546 debug/no-daemon mode and changed level of query logging
547 from INFO to DEBUG. Make log options controllable in
550 release 1.17 Fixed crash with DHCP hostnames > 40 characters.
552 Fixed name-comparision routines to not depend on Locale,
553 in theory this versions since 1.15 could lock up or give
554 wrong results when run with locale != 'C'.
556 Fix potential lockup in cache code. (thanks to Henning
557 Glawe for help chasing this down.)
559 Made lease-file reader bullet-proof.
561 Added -D option, suggested by Peter Fichtner.
563 release 1.18 Added round-robin DNS for names which have more than one
564 address. In this case all the addresses will be
565 returned, as before, but the order will change on each
568 Remove stray tolower() and isalnum() calls missed in
569 last release to complete LOCALE independence.
571 Allow port numbers in source-address specifications.
573 For hostnames without a domain part which don't get
574 forwarded because -D is in effect, return NXDOMAIN not
577 Add code to return the software version in repsonse to the
578 correct magic query in the same way as BIND. Use
579 "dig version.bind chaos txt" to make the query.
581 Added negative caching for PTR (address to name) records.
583 Ensure that names of the form typically used in PTR queries
584 (ie w.x.yz.in-addr.arpa and IPv6 equivalents) get
585 correct answers when queried as other types. It's
586 unlikely that anyone would do this, but the change makes
587 things pedantically correct.
589 Taught dnsmasq to understand "bitstring" names, as these
590 are used for PTR lookups of IPv6 addresses by some
591 resolvers and lookup tools. Dnsmasq now understands both
592 the ip6.int domain and the ip6.arpa domain and both
593 nibble and bitstring formats so it should work with any
594 client code. Standards for this stuff have flip-flopped
595 over the last few years, leaving many different clients
596 in their wake. See RFC2673 for details of bitstrings.
598 Allow '_' characters in domain names: Legal characters
599 are now [a-z][A-Z].-_ Check names read from hosts files
600 and leases files and reject illegal ones with a message
603 Make empty domain names in server and address options
604 have the special meaning "unqualified
605 names". (unqualified names are names without any dots in
606 them). It's now possible to do server=//1.2.3.4 and have
607 unqualified names sent to a special nameserver.
610 Moved source code into src/ directory.
612 Fixes to cure compilation breakage when HAVE_IPV6 not
613 set, thanks to Claas Hilbrecht.
615 BIG CHANGE: added an integrated DHCP server and removed
616 the code to read ISC dhcp.leases. This wins in terms
617 of ease of setup and configuration flexibility and
618 total machine resources consumed.
620 Re-jiged the signal handling code to remove a race
621 condition and to be more portable.
624 Thanks to David Ashworth for feedback which informed many
627 Allow hosts to be specified by client ID in dhcp-hosts
628 options. These are now one of
629 dhcp-host=<hardware addr>,....
630 dhcp-host=id:<hex client id>,.....
631 dhcp-host=id:<ascii client id>,.....
633 Allow dhcp-host options to specify any IP address on the
634 DHCP-served network, not just the range available for
637 Allow dhcp-host options for the same host with different
638 IP adresses where the correct one will be selected for
639 the network the host appears on.
641 Fix parsing of --dhcp-option to allow more than one
642 IP address and to allow text-type options.
644 Inhibit use of --dhcp-option to send hostname DHCP options.
646 Update the DNS with DHCP information after re-reading
647 /etc/hosts so that any DHCP derived names which have been
648 shadowed by now-deleted hosts entries become visible.
650 Fix typos in dnsmasq.conf.example
652 Fixes to Makefile(s) to help pkgsrc packaging - patch
655 Add dhcp-boot option to support network boot.
657 Check for duplicate IP addresses in dhcp-hosts lines
658 and refuse to run if found. If allowed to remain these
659 can provoke an infinite loop in the DHCP protocol.
661 Attempted to rationalise the .spec files for rpm
662 building. There are now files for Redhat, Suse and
663 Mandrake. I hope they work OK.
665 Fixed hard-to-reproduce crash involving use of local
666 domains and IPv6 queries. Thanks to Roy Marples for
667 helping to track that one down.
670 Thanks to Matt Swift and Dag Wieers for many suggestions
671 which went into this release.
673 Tweak include files to allow compilation on FreeBSD 5
675 Fix unaligned access warnings on BSD/Alpha.
677 Allow empty DHCP options, like so: dhpc-option=44
679 Allow single-byte DHCP options like so: dhcp-option=20,1
681 Allow comments on the same line as options in
684 Don't complain when the same name and address is
685 allocated to a host using DHCP and /etc/hosts.
687 Added to the example configuration the dnsmasq equivalent
688 of the ISC dhcpd settings given in
689 http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt
691 Fixed long-existing strangeness in Linux IPv6 interface
692 discovery code. The flags field in /proc/net/if_inet6 is
693 _not_ the interface flags.
695 Fail gracefully when getting an ENODEV error when trying
696 to bind an IPv6 socket, rather than bailing out. Thanks
697 to Jan Ischebeck for feedback on that.
699 Allow the name->address mapping for static DHCP leases to
700 be set by /etc/hosts. It's now possible to have
701 dhcp-host=<mac addr>,wibble
704 and in /etc/hosts have
706 and for the correct thing to happen. Note that some sort
707 of dhcp-host line is still needed, it's not possible for
708 random host to claim an address in /etc/hosts without
709 some explicit configuration.
711 Make 0.0.0.0 in a dhcp-option to mean "the machine
714 Fix lease time spec when specified in dhcp-range and not
715 in dhcp-host, previously this was always one hour.
717 Fix problem with setting domains as "local only". -
718 thanks to Chris Schank.
720 Added support for max message size DHCP option.
723 Fix total lack for DHCP functionality on
724 Linux systems with IPv6 enabled. - thanks to
725 Jonathon Hudson for spotting that.
727 Move default config file under FreeBSD - patch from
731 Fix "install" makefile target. (reported by Rob Stevens)
733 Ensure that "local=/domain/" flag is obeyed for all
734 queries on a domain, not just A and AAAA. (Reported by
737 Handle DHCPDECLINE messages and provide an error message
740 Add "domain" setting example to
741 dnsmasq.conf.example. Thanks to K P Kirchdorfer for
742 spotting that it was missing.
744 Subtle change to the DHCPREQUEST handling code to work
745 around a bug in the DHCP client in HP Jetdirect printers.
746 Thanks to Marko Stolle for finding this problem.
748 Return DHCP T1 and T2 times, with "fuzz" to desychronise lease
749 renewals, as specified in the RFC.
751 Ensure that the END option is always present in DHCP
752 packets , even if the packet is too small to fit all
753 the requested options.
755 Handle larger-than-default DHCP packets if required, up
758 Fix a couple of places where the return code from
759 malloc() was not checked.
761 Cope with a machine taking a DHCP lease and then moving
762 network so that the lease address is no longer valid.
764 The DHCP server will now work via a BOOTP relay - remote
765 networks are configured with the dhcp-range option the
766 same as directly connected ones, but they need an
767 additional netmask parameter. Eg
768 --dhcp-range=192.168.4.10,192.168.4.50,255.255,255.0
769 will enable DHCP service via a BOOTP relay on the
772 Add a limit on the number of available DHCP leases,
773 otherwise the daemon could be DOSed by a malicious
774 host. The default is 150, but it can be changed by the
775 dhcp-lease-max option.
777 Fixed compilation on OpenBSD (thanks to Frederic Brodbeck
780 Reworked the DHCP network handling code for two good
781 effects: (1) The limit of one network only for DHCP on
782 FreeBSD is now gone, (2) The DHCP server copes with
783 dynamically created interfaces. The one-interface
784 limitation remains for OpenBSD, which is missing
785 extensions to the socket API which have been in Linux
786 since version 2.2 and FreeBSD since version 4.8.
788 Reworked the DNS network code to also cope with
789 dynamically created interfaces. dnsmasq will now listen
790 to the wildcard address and port 53 by default, so if no
791 --interface or --address options are given it will handle
792 dynamically created interfaces. The old behaviour can be
793 restored with --bind-interfaces for people running BIND
794 on one interface and dnsmasq on another. Note that
795 --interface and --address options still work, but the
796 filtering is done by dnsmasq, rather then the kernel.
797 This works on Linux, and FreeBSD>=5.0. On systems which
798 don't support the required API extensions, the old
799 behaviour is used, just as if --bind-interfaces had been set.
801 Allow IPv6 support to be disabled at compile time. To do
802 that, add -DNO_IPV6 to the CFLAGS. Thanks to Oleg
803 I. Vdovikin for the suggestion to do that.
805 Add ability to set DHCP options per network. This is done
806 by giving a network an identifier like this:
807 dhcp-range=red-net,192.168.0.10,192.168.0.50
808 and then labeling options intended for that network only
810 dhcp-option=red-net,6,1.1.1.1
811 Thanks to Oleg Vdovikin for arguing that one through.
813 Made errors in the configuration file non-fatal: dnsmasq
814 will now complain bitterly, but continue.
816 Added --read-ethers option, to allow dnsmasq to pull
817 static DHCP information from that file.
818 Thanks to Andi Cambeis for that suggestion.
820 Added HAVE_BROKEN_RTC compilation option to support
821 embedded systems without a stable RTC. Oleg Vdovikin
822 helped work out how to make that work.
825 Fixed inability to start when the lease file doesn't
826 already exist. Thanks to Dag Wieers for reporting that.
828 Fixed problem were dhcp-host configuration options did
829 not play well with entries in /etc/ethers for the same
830 host. Thanks again to Dag Wieers.
832 Tweaked DHCP code to favour moving to a newly-configured
833 static IP address rather than an old lease when doing
836 Added --alias configuration option. This provides IPv4
837 rewrite facilities like Cisco "DNS doctoring". Suggested
840 Fixed bug in /etc/ethers parsing code triggered by tab
841 characters. Qudos to Dag Wieers for hepling to nail that
844 Added "bind-interfaces" option correctly.
847 Made "where are we allocating addresses?" code in DHCP
848 server cope with requests via a relay which is on a
849 directly connected network for which there is not a
850 configured netmask. This strange state of affairs occurs
851 with win4lin. Thanks to Alex Melt and Jim Horner for bug
852 reports and testing with this.
854 Fixed trivial-but-irritating missing #include which broke
857 Force --bind-interfaces if IP-aliased interface
858 specifications are used, since the sockets API provides
859 no other sane way to determine which alias of an
860 interface a packet was sent to. Thanks to Javier Kohen
864 Support Token Ring DHCP. Thanks to Dag Wieers for help
865 testing. Note that Token ring support only works on Linux
868 Fix compilation on MacOS X. Thanks to Bernhard Ehlers for
871 Added new "ignore" keyword for
872 dhcp-host. "dhcp-host=11:22:33:44:55:66,ignore" will
873 cause the DHCP server to ignore any host with the given
874 MAC address, leaving it to other servers on the
875 network. This also works with client-id and hostnames.
876 Suggestion by Alex Melt.
878 Fixed parsing of hex client IDs. Problem spotted by Peter
881 Allow conf-file options in configuration file, to
882 provide an include function.
884 Re-read /etc/ethers on receipt of SIGHUP.
886 Added back the ability to read ISC dhcpd lease files, by
887 popular demand. Note that this is deprecated and for
888 backwards compatibility only. You can get back the 4K of
889 memory that the code occupies by undefining
890 "HAVE_ISC_READER" in src/config.h
892 Added ability to disable "pool" DHCP address allocation
893 whilst leaving static leases working. The syntax is
894 "dhcp-range=192.168.0.0,static"
895 Thanks to Grzegorz Nosek for the suggestion.
897 Generalized dnsmasq-rh.spec file to work on Mandrake too,
898 and removed dnsmasq-mdk.spec. Thanks to Doug Keller.
900 Allow DHCP options which are tied to specific static
901 leases in the same way as to specific networks.
903 Generalised the dhcp-option parser a bit to allow hex
904 strings as parameters. This is now legal:
905 dhcp-option=128,e4:45:74:68:00:00
906 Inspired by a patch from Joel Nordell.
908 Changed the semantics of argument-less dhcp-options for
909 the default-setting ones, ie 1, 3, 6 and 28. Now, doing
910 eg, dhcp-option=3 stops dnsmasq from sending a default
911 router option at all. Thanks to Scott Emmons for pointing
912 out that this is useful.
914 Fixed dnsmasq.conf parsing bug which interpreted port
915 numbers in server= lines as a comment. To start a
916 comment, a '#' character must now be a the start of a
917 line or preceded by whitespace. Thanks to Christian
918 Haggstrom for the bug report.
921 Allow the dhcp-host specification of id:* which makes
922 dnsmasq ignore any client-id. This is useful to ensure
923 that a dual-boot machine sees the same lease when one OS
924 gives a client-id and the other doesn't. It's also useful
925 when PXE boot DHCP does not use client IDs but the OS it boots
926 does. Thanks to Grzegorz Nosek for suggesting this enhancement.
928 No longer assume that ciaddr is zero in received DHCPDISCOVER
929 messages, just for security against broken clients.
931 Set default of siaddr field to the address of the machine running
932 dnsmasq when not explicitly set using dhcp-boot
933 option. This is the ISC dhcpd behaviour.
935 Send T1 and T2 options in DHCPOFFER packets. This is required
936 by the DHCP client in some JetDirect printers. Thanks
937 to Paul Mattal for work on this.
939 Fixed bug with DHCP on OpenBSD reported by Dominique Jacquel.
940 The code which added loopback interfaces to the list
941 was confusing the DHCP code, which expected one interface only.
942 Solved by adding loopback interfaces to address list instead.
944 Add dhcp-vendorclass option to allow options to be sent only
945 to certain classes of clients.
947 Tweaked option search code so that if a netid-qualified
948 option is used, any unqualified option is ignored.
950 Changed the method of picking new dynamic IP
951 addresses. This used to use the next consecutive
952 address as long it was free, now it uses a hash
953 from the client hardware address. This reduces the amount
954 of address movement for clients which let their lease
955 expire and allows consecutive DHCPOFFERS to the same host
956 to (almost always) be for the same address, without
957 storing state before a lease is granted.
959 Tweaked option handling code to return all possible
960 options rather than none when DHCP "requested options"
961 field is missing. This fixes interoperability with
962 ancient IBM LANMAN DHCP clients. Thanks to Jim Louvau for
966 Pad DHCP packets to a minimum size of 300 bytes. This
967 fixes interoperability problems with the Linux in-kernel
968 DHCP/BOOTP client. Thanks to Richard Musil for
969 diagnosing this and supplying a patch.
971 Fixed option-parsing bug and potential memory leak. Patch
974 Improved vendor class configuration and added user class
975 configuration. Specifically: (1) options are matched on
976 the netids from dhcp-range, dhcp-host, vendor class and
977 user class(es). Multiple net-ids are allowed and options
978 are searched on them all. (2) matches agains vendor class
979 and user class are now on a substring, if the given
980 string is a substring of the vendor/user class, then a
981 match occurs. Thanks again to Richard Musil for prompting
984 Make "#" match any domain on --address and --server
985 flags. --address=/#/1.2.3.4 will return 1.2.3.4 for _any_
986 domain not otherwise matched. Of course
987 --server=/#/1.2.3.4 is exactly equivalent to
988 --server=1.2.3.4. Special request from Josh Howlett.
990 Fixed a nasty bug which would cause dnsmasq to lose track
991 of leases for hosts which had a --dhcp-host flag without
992 a name specification. The mechanism for this was that
993 the hostname could get erroneously set as a zero-length
994 string and then written to the leases file as a
995 mal-formed line. Restarting dnsmasq would then lose the lease.
996 Alex Hermann's work helped chase down this problem.
998 Add checks against DHCP clients which return zero-length
999 hostnames. This avoids the potential lease-loss problems
1000 reffered to above. Also, if a client sends a hostname when
1001 it creates a lease but subsequently sends no or a
1002 zero-length hostname whilst renewing, continue to use the
1003 existing hostname, don't wipe it out.
1005 Tweaked option parsing to flag some parameter errors.
1008 Fixed interface filter code for two effects: 1) Fixed bug
1009 where queries sent via loopback interface
1010 but to the address of another interface were ignored
1011 unless the loopback interface was explicitly configured.
1012 2) on OpenBSD failure to configure one interface now
1013 causes a fatal error on startup rather than an huge
1014 stream of log messages. Thanks to Erik Jan Tromp for
1017 Changed server selection strategy to improve performance
1018 when there are many available servers and some are
1019 broken. The new algorithm is to pick as before for the
1020 first try, but if a query is retried, to send to all
1021 available servers in parallel. The first one to reply
1022 then becomes prefered for the next query. This should
1023 improve reliability without generating significant extra
1026 Fixed breakage of special servers/addresses for
1027 unqualified domains introduced in version 2.8
1029 Allow fallback to "bind-interfaces" at runtime: Some
1030 verions of *BSD seem to have enough stuff in the header
1031 files to build but no kernel support. Also now log if
1032 "bind-interfaces" is forced on.
1034 Log replies from upstream servers which refuse to do
1035 recursion - dnsmasq is not a recursive nameserver and
1036 relies on upstream servers to do the recursion, this
1037 flags a configuration error.
1039 Disable client-id matching for hosts whose MAC address is
1040 read from /etc/ethers. Patch from Oleg I. Vdovikin.
1042 Extended --mx-host flag to allow arbitrary targets for MX
1043 records, suggested by Moritz Bunkus.
1045 Fixed build under NetBSD 2.0 - thanks to Felix Deichmann
1048 Deal correctly with repeated addresses in /etc/hosts. The
1049 first name found is now returned for reverse lookups,
1050 rather than all of them.
1052 Add back fatal errors when nonexistant
1053 interfaces or interface addresses are given but only in
1054 "bind-interfaces" mode. Principle of least surprise applies.
1056 Allow # as the argument to --domain, meaning "read the
1057 domain from the first search directive in
1058 /etc.resolv.conf". Feature suggested by Evan Jones.
1061 Allow --query-port to be set to a low port by creating and
1062 binding the socket before dropping root. (Suggestion from
1065 Support TCP queries. It turned out to be possible to do
1066 this with a couple of hundred lines of code, once I knew
1067 how. The executable size went up by a few K on i386.
1068 There are a few limitations: data obtained via TCP is not
1069 cached, and dynamically-created interfaces may break under
1070 certain circumstances. Source-address or query-port
1071 specifications are ignored for TCP.
1073 NAK attempts to renew a DHCP lease where the DHCP range
1074 has changed and the lease is no longer in the allowed
1075 range. Jamie Lokier pointed out this bug.
1077 NAK attempts to renew a pool DHCP lease when a statically
1078 allocated address has become available, forcing a host to
1079 move to its allocated address. Lots of people have
1080 suggested this change and been rebuffed (they know who
1081 they are) the straws that broke the camel's back were Tim
1082 Cutts and Jamie Lokier.
1084 Remove any nameserver records from answers which are
1085 modified by --alias flags. If the answer is modified, it
1086 cannot any longer be authoritative.
1088 Change behaviour of "bogus-priv" option to return NXDOMAIN
1089 rather than a PTR record with the dotted-quad address as
1090 name. The new behaviour doesn't provoke tcpwrappers like
1091 the old behavior did.
1093 Added a patch for the Suse rpm. That changes the default
1094 group to one suitable for Suse and disables inclusion of
1095 the ISC lease-file reader code. Thanks to Andy Cambeis for
1096 his ongoing work on Suse packaging.
1098 Support forwarding of EDNS.0 The maximum UDP packet size
1099 defaults to 1280, but may be changed with the
1100 --edns-packet-max option. Detect queries with the do bit
1101 set and always forward them, since DNSSEC records are
1102 not cached. This behaviour is required to make
1103 DNSSECbis work properly though dnsmasq. Thanks to Simon
1104 Josefsson for help with this.
1106 Move default config file location under OpenBSD from
1107 /usr/local/etc/dnsmasq.conf to /etc/dnsmasq.conf. Bug
1108 report from Jonathan Weiss.
1110 Use a lease with matching MAC address for a host which
1111 doesn't present a client-id, even if there was a client ID
1112 at some point in the past. This reduces surprises when
1113 changing DHCP clients, adding id:* to a host, and from the
1114 semantics change of /etc/ethers in 2.9. Thanks to Bernard
1115 Sammer for finding that.
1117 Added a "contrib" directory and in it the dnslist utility,
1120 Fixed "fail to start up" problems under Linux with IPv6
1121 enabled. It's not clear that these were an issue in
1122 released versions, but they manifested themselves when TCP
1123 support was added. Thanks to Michael Hamilton for
1124 assistance with this.
1127 Fixed DHCP problem which could result in two leases in the
1128 database with the same address. This looked much more
1129 alarming then it was, since it could only happen when a
1130 machine changes MAC address but kept the same name. The
1131 old lease would persist until it timed out but things
1132 would still work OK.
1134 Check that IP addresses in all dhcp-host directives are
1135 unique and die horribly if they are not, since otherwise
1136 endless protocol loops can occur.
1138 Use IPV6_RECVPKTINFO as socket option rather than
1139 IPV6_PKTINFO where available. This keeps late-model FreeBSD
1142 Set source interface when replying to IPv6 UDP
1143 queries. This is needed to cope with link-local addresses.
1146 Added extra checks to ensure that DHCP created DNS entries
1147 cannot generate multiple DNS address->name entries. Thanks to
1148 Stefan Monnier for finding the exact set of configuration
1149 options which could create this.
1151 Don't set the the filterwin2k option in the example config
1152 file and add warnings that is breaks Kerberos. Thanks to
1153 Simon Josefsson and Timothy Folks for pointing that out.
1155 Log types of incoming queries as well as source and domain.
1157 Log NODATA replies generated as a result of the
1161 Fixed crash with un-named DHCP hosts introduced in 2.12.
1162 Thanks to Nicolo Wojewoda and Gregory Gathy for bug reports.
1165 Fix DHCP network detection for hosts which talk via a
1166 relay. This makes lease renewal for such hosts work
1169 Support RFC3011 subnet selectors in the DHCP server.
1171 Fix DHCP code to generate RFC-compliant responses
1172 to hosts in the INIT-REBOOT state.
1174 In the DHCP server, set the receive buffer size on
1175 the transmit-only packet socket to zero, to avoid
1176 waste of kernel buffers.
1178 Fix DHCP address allocation code to use the whole of
1179 the DHCP range, including the start and end addresses.
1181 Attempt an ICMP "ping" on new addresses before allocating
1182 them to leases, to avoid allocating addresses which are in use.
1184 Handle rfc951 BOOTP as well as DHCP for hosts which have
1185 MAC address to IP address mapping defined.
1187 Fix compilation under MacOS X. Thanks to Chris Tomlinson.
1189 Fix compilation under NetBSD. Thanks to Felix Deichmann.
1191 Added "keep-in-foreground" option. Thanks to Sean
1192 MacLennan for the patch.
1195 Fixed NXDOMAIN/NODATA confusion for locally known
1196 names. We now return a NODATA reponse for names which are
1197 locally known. Now a query for (eg AAAA or MX) for a name
1198 with an IPv4 address in /etc/hosts which fails upstream
1199 will generate a NODATA response. Note that the query
1200 is still tried upstream, but a NXDOMAIN reply gets
1201 converted to NODATA. Thanks to Eric de Thouars, Eric
1202 Spakman and Mike Mestnik for bug reports/testing.
1204 Allow multiple dhcp-ranges within the same network. The
1205 original intention was that there would be a dhcp-range
1206 option for each network served, but there's no real reason
1207 not to allow discontinuous ranges within a network so this
1208 release adds support for that.
1210 Check for dhcp-ranges which are inconsistent with their
1211 netmask, and generate errors or warnings.
1213 Improve error messages when there are problems with
1217 Fixed typo in OpenBSD-only code which stopped compilation
1218 under that OS. Chris Weinhaupl gets credit for reporting
1221 Added dhcp-authoritative option which restores non-RFC
1222 compliant but desirable behaviour of pre-2.14 versions and
1223 avoids long timeouts while DHCP clients try to renew leases
1224 which are unknown to dnsmasq. Thanks to John Mastwijk for
1227 Added support to the DHCP option code to allow RFC-3397
1228 domain search DHCP option (119) to be sent.
1230 Set NONBLOCK on all listening sockets to workaround non-POSIX
1231 compliance in Linux 2.4 and 2.6. This fixes rare hangs which
1232 occured when corrupted packets were received. Thanks to
1233 Joris van Rantwijk for chasing that down.
1235 Updated config.h for NetBSD. Thanks to Martin Lambers.
1237 Do a better job of distinguishing between retransmissions
1238 and new queries when forwarding. This fixes a bug
1239 triggered by the polipo web cache which sends A and AAAA
1240 queries both with the same transaction-ID. Thanks to
1241 Joachim Berdal Haga and Juliusz Chroboczek for help with this.
1243 Rewrote cache code to store CNAMES, rather then chasing
1244 them before storage. This eliminates bad situations when
1245 clients get inconsistent views depending on if data comes
1248 Allow for more than one --addn-hosts flag.
1250 Clarify logged message when a DHCP lease clashes with an
1251 /etc/hosts entry. Thanks to Mat Swift for the suggestion.
1253 Added dynamic-dnsmasq from Peter Willis to the contrib
1257 Correctly deduce the size of numeric dhcp-options, rather
1258 than making wild guesses. Also cope with negative values.
1260 Fixed use of C library reserved symbol "index" which broke
1261 under certain combinations of library and compiler.
1263 Make bind-interfaces work for IPv6 interfaces too.
1265 Warn if an interface is given for listening which doesn't
1266 currently exist when not in bind-interfaces mode. (This is
1267 already a fatal error when bind-interfaces is set.)
1269 Allow the --interface and --except-interface options to
1270 take a comma-separated list of interfaces.
1272 Tweak --dhcp-userclass matching code to work with the
1273 ISC dhclient which violates RFC3004 unless its
1274 configuration is very warped. Thanks to Cedric Duval for
1277 Allow more than one network-id tag in a dhcp-option. All
1278 the tags must match to enable the option.
1280 Added dhcp-ignore option to disable classes of hosts based
1281 on network-id tags. Also allow BOOTP options to be
1282 controlled by network tags.
1284 Fill in sname, file and siaddr fields in replies to
1285 DHCPINFORM messages.
1287 Don't send NAK replies to DHCPREQUEST packets for disabled
1288 clients. Credit to Cedric Duval for spotting this.
1290 Fix rare crash associated with long DNS names and CNAME
1291 records. Thanks to Holger Hoffstatte and especially Steve
1292 Grecni for help chasing that one down.
1295 Reworked the Linux interface discovery code (again) to
1296 cope with interfaces which have only IPv6 addresses and
1297 interfaces with more than one IPv6 address. Thanks to
1298 Martin Pels for help with that.
1300 Fix problems which occured when more than one dhcp-range
1301 was specified in the same subnet: sometimes parameters
1302 (lease time, network-id tag) from the wrong one would be
1303 used. Thanks to Rory Campbell-Lange for the bug report.
1305 Reset cache statistics when clearing the cache.
1307 Enable long command line options on FreeBSD when the
1308 C library supports them.
1311 Tweaked the Linux-only interface discovery code to cope
1312 with interface-indexes larger than 8 bits in
1313 /proc/net/if_inet6. This only affects Linux, obviously.
1314 Thanks to Richard Atterer for the bug report.
1316 Check for under-length option fields in DHCP packets, a
1317 zero length client-id, in particluar, could seriously
1318 confuse dnsmasq 'till now. Thanks to Will Murname for help
1321 If a DHCP-allocated address has an associated name in
1322 /etc/hosts, and the client does not provide a hostname
1323 parameter and there is no hostname in a matching dhcp-host
1324 option, send the /etc/hosts name as the hostname in
1325 the DHCP lease. Thanks to Will Murname for the suggestion.
1328 Allow more than one instance of dnsmasq to run on a
1329 machine, each providing DHCP service on a different
1330 interface, provided that --bind-interfaces is set. This
1331 configuration used to work, but regressed in version 2.14
1333 Fix compilation on Mac OS X. Thanks to Kevin Bullock.
1335 Protect against overlong names and overlong
1336 labels in configuration and from DHCP.
1338 Fix interesting corner case in CNAME handling. This occurs
1339 when a CNAME has a target which "shadowed" by a name in
1340 /etc/hosts or from DHCP. Resolving the CNAME would sneak
1341 the upstream value of the CNAME's target into the cache,
1342 alongside the local value. Now that doesn't happen, though
1343 resolving the CNAME still gives the unshadowed value. This
1344 is arguably wrong but rather difficult to fix. The main
1345 thing is to avoid getting strange results for the target
1346 due to the cache pollution when resolving the
1347 CNAME. Thanks to Pierre Habouzit for exploring the corner
1348 and submitting a very clear bug report.
1350 Fix subtle bug in the DNS packet parsing code. It's almost
1351 impossible to describe this succinctly, but the one known
1352 manifestation is the inability to cache the A record for
1353 www.apple.com. Thanks to Bob Alexander for spotting that.
1355 Support SRV records. Thanks to Robert Kean for the patches
1358 Fixed sign confusion in the vendor-id matching code which
1359 could cause crashes sometimes. (Credit to Mark Wiater for
1362 Added the ability to match the netid tag in a
1363 dhcp-range. Combined with the ability to have multiple
1364 ranges in a single subnet, this provides a means to
1365 segregate hosts on different address ranges based on
1366 vendorclass or userclass. Thanks to Mark Wiater for
1367 prompting this enhancement.
1369 Added preference values for MX records.
1371 Added the --localise-queries option.
1374 Improve handling of SERVFAIL and REFUSED errors. Receiving
1375 these now initiates search for a new good server, and a
1376 server which returns them is not a candidate as a good
1377 server. Thanks to Istvan Varadi for pointing out the
1380 Tweak the time code in BROKEN_RTC mode.
1382 Sanity check lease times in dhcp-range and dhcp-host
1383 configurations and force them to be at least two minutes
1384 (120s) leases shorter than a minute confuse some clients,
1385 notably Apple MacOS X. Rory Campbell-Lange found this
1388 Only warn once about an upstream server which is refusing to do
1391 Fix DHCP address allocation problem when netid tags are in
1392 use. Thanks to Will Murnane for the bug report and
1395 Add an additional data section to the reply for MX and SRV
1396 queries. Add support for DNS TXT records. Thanks to Robert
1397 Kean and John Hampton for prompts and testing of these.
1399 Apply address rewriting to records in the additional data section
1400 of DNS packets. This makes things like MX records work
1401 with the alias function. Thanks to Chad Skeeters for
1402 pointing out the need for this.
1404 Added support for quoted strings in config file.
1406 Detect and defeat cache-poisoning attacks which attempt to
1407 send (malicious) answers to questions we didn't
1408 send. These are ignored now even if the attacker manages
1409 to guess a random query-id.
1411 Provide DHCP support for interfaces with multiple IP
1412 addresses or aliases. This in only enabled under Linux.
1413 See the FAQ entry for details.
1415 Revisit the MAC-address and client-id matching code to
1416 provide saner behaviour with PXE boots, where some
1417 requests have a client-id and some don't.
1419 Fixed off-by-one buffer overflow in lease file reading
1420 code. Thanks to Rob Holland for the bug report.
1422 Added wildcard matching for MAC addresses in dhcp-host
1423 options. A sensible suggestion by Nathaniel McCallum.
1426 Fixed build problems on (many) systems with older libc
1427 headers where <linux/types.h> is required before
1428 <linux/netlink.h>. Enabled HAVE_RTNETLINK under uclibc now
1429 that this fix is in place.
1431 Added support for encapsulated vendor-class-specific DHCP
1432 options. Thanks to Eric Shattow for help with this.
1434 Fix regression in 2.21 which broke commas in filenames and
1435 corrupted argv. Thanks to Eric Scott for the bugreport.
1437 Fixed stupid thinko which caused dnsmasq to wedge during
1438 startup with certain MX-record options. Another 2.21 regression.
1440 Fixed broken-ness when reading /etc/ethers. 2.21 broke
1443 Fixed wedge with certain DHCP options. Yet another 2.21
1444 regression. Rob Holland and Roy Marples chased this one
1448 Added a check to ensure that there cannot be more than one
1449 dhcp-host option for any one IP address, even if the
1450 addresses are assigned indirectly via a hostname and
1453 Include a "server identifier" in DHCPNAK replies, as
1454 required by RFC2131.
1456 Added method support for DBus
1457 (http://www.freedesktop.org/Software/dbus)
1458 This is a superior way to re-configure dnsmasq on-the-fly
1459 with different upstream nameservers, as the host moves
1460 between networks. DBus support must be enabled in
1461 src/config.h and should be considered experimental at this
1462 point. See DBus-interface for the specification of the
1463 DBus method calls supported.
1465 Added information to the FAQ about setting the DNS domain
1466 in windows XP and Mac OS X, thanks to Rick Hull.
1468 Added sanity check to resolv.conf polling code to cope
1469 with backwards-moving clocks. Thanks to Leonardo Canducci
1472 Handle so-called "A-for-A" queries, which are queries for
1473 the address associated with a name which is already a
1474 dotted-quad address. These should be handled by the
1475 resolver code, but sometimes aren't and there's no point
1478 Added "no-dhcp-interface" option to disable DHCP service
1479 on an interface, whilst still providing DNS.
1481 Fix format-string problem - config file names get passed
1482 to fprintf as a format string, so % characters could cause
1483 crashes. Thanks to Rob Holland for sleuthing that one.
1485 Fixed multiple compiler warnings from gcc 4. Thanks to
1486 Tim Cutts for the report.
1488 Send the hostname option on DHCP offer messages as well as
1489 DHCP ack messages. This is required by the Rio Digital
1490 Audio Receiver. Thanks to Ron Frederick for the patch.
1492 Add 'd' (for day) as a possible time multiplier in lease
1493 time specifications. Thanks to Michael Deegan.
1495 Make quoting suppress recognition of IP addresses, so
1496 dhcp-option=66,1.2.3.4 now means something different to
1497 dhcp-option=66,"1.2.3.4", which sets the option to a
1498 string value. Thanks to Brian Macauley for the bug report.
1500 Fixed the option parsing code to avoid segfaults from some
1501 invalid configurations. Thanks to Wookey for spotting that one.
1503 Provide information about which compile-time options were
1504 selected, both in the log at startup and as part of the output
1505 from dnsmasq --version. Thanks to Dirk Schenkewitz for
1508 Fix pathalogical behaviour when a broken client keeps sending
1509 DHCPDISCOVER messages repeatedly and fast. Because dealing with
1510 each of these takes a few seconds, (because of the ping) then a
1511 queue of DHCP packets could build up. Now, the results of a ping
1512 test are assumed to be valid for 30 seconds, so repeated waits are
1513 not required. Thanks to Luca Landi for finding this.
1515 Allow DHCPINFORM requests without hardware address
1516 information. These are generated by some browsers, looking
1517 for proxy information. Thanks to Stanley Jaddoe for the
1520 Add support of the "client FQDN" DHCP option. If present,
1521 this is used to allow the client to tell dnsmasq its name,
1522 in preference to (mis)using the hostname option. See
1523 http://tools.ietf.org/wg/dhc/draft-ietf-dhc-fqdn-option/\
1524 draft-ietf-dhc-fqdn-option-10.txt
1525 for details of the draft spec.
1527 Added startup scripts for MacOS X Tiger/Panther to the
1528 contrib collection. Thanks to Tim Cutts.
1530 Tweak DHCP network selection so that clients which turn up
1531 on our network in REBINDING state and with a lease for a
1532 foreign network will get a NAK response. Thanks to Dan
1533 Shechter for work on this and an initial patch and thanks
1534 to Gyorgy Farkas for further testing.
1536 Fix DNS query forwarding for empty queries and forward
1537 queries even when the recursion-desired bit is clear. This
1538 allows "dig +trace" to work. Problem report from Uwe
1541 Added "const" declarations where appropriate, thanks to
1542 Andreas Mohr for the patch.
1544 Added --bootp-dynamic option and associated
1545 functionality. Thanks to Josef Wolf for the suggestion.
1548 Updated contrib/openvpn/dnsmasq.patch from Joseph Tate.
1550 Tweaked DHCP NAK code, a DHCP NAK is now unicast as a
1551 fallback in cases where a broadcast is futile: namely in
1552 response to a unicast REQUEST from a non-local network
1553 which was not sent via a relay.
1555 Slightly changed the semantics of domain matching in
1556 --server and --address configs. --server=/domain.com/ still
1557 matches domain.com and sub.domain.com but does not
1558 now match newdomain.com The semantics of
1559 --server=/.domain.com/ are unchanged.
1560 Thanks to Chris Blaise for the patch.
1562 Added backwards-compatible internationalisation support.
1563 The existing make targets, (all, dnsmasq, install) work as
1564 before. New ones (all-i18n, and install-i18n) add gettext.
1565 The translations live in po/ There are not too many
1566 strings, so if anybody can provide translations (and for
1567 the manpage....) please send them in.
1569 Tweak behaviour on receipt of REFUSED or SERVFAIL rcodes,
1570 now the query gets retried on all servers before returning
1571 the error to the source of the query. Thanks to Javier
1572 Kohen for the report.
1574 Added Polish translation - thanks to Tomasz Sochanski.
1576 Changed default manpage install location from /usr/man
1579 Added Spanish translation - thanks to Christopher Chatham.
1581 Log a warning when a DHCP packet is truncated due to lack
1582 of space. (Thanks to Michael Welle for the prompt to do
1585 Added French translation - thanks to Lionel Tricon.
1587 Added Indonesian translation - thanks to Salman AS.
1589 Tweaked the netlink code to cope with interface broadcast
1590 address not set, or set to 0.0.0.0.
1592 Fixed problem assigning fixed addresses to hosts when more
1593 than one dhcp-range is available. Thanks to Sorin Panca
1594 for help chasing this down.
1596 Added more explict error mesages to the hosts file and
1597 ethers file reading code. Markus Kaiserswerth suffered to
1600 Ensure that a hostname supplied by a DHCP client can never
1601 override one configured on the server. Previously, any
1602 host claiming a name would be given it, even if that
1603 over-rode a dhcp-host declaration, leading to potentially
1604 confusing situations.
1606 Added Slackware package-build stuff into contrib/ The i18n
1607 effort broke the current scripts, and working ones were
1608 needed for testing, so they ended up here rather than make
1609 Pat re-invent the wheel.
1611 Added Romanian translation, thanks to Sorin Panca for
1615 Fixed RedHat spec file for FC4 - thanks to Werner Hoelzl
1618 Fixed Suse spec file - thanks to Steven Springl.
1620 Fixed DHCP bug when two distict subnets are on the same
1621 physical interface. Thanks to Pawel Zawora for finding
1622 this and suggesting the fix.
1624 Added logging to make it explicit when dnsmasq falls back
1625 from using RT-netlink sockets to the old ioctl API for
1626 getting information about interfaces. Doing this
1627 completely silently made remote debugging hard.
1629 Merged uclibc build fixes from the OpenWRT package into
1632 Added Norwegian translation - thanks to Jan Erik Askildt.
1635 Fixed SuSe rpm patch problem - thanks to Steven Springl.
1637 Fixed crash when attempting to send a DHCP NAK to a host
1638 which believes it has a lease on an unknown
1639 network. Thanks to Lutz Pressler for the bug report and
1643 Tweaked DHCP behaviour when a client attempts to renew a lease
1644 which dnsmasq doesn't know about. Previously that would always
1645 result in a DHCPNAK. Now, in dhcp-authoritative mode, the
1646 lease will be created, if it's legal. This makes dnsmasq work
1647 better if the lease database is lost, for example on an OpenWRT
1648 system which reboots. Thanks to Stephen Rose for work on
1651 Added the ability to support RFC-3442 style destination
1652 descriptors in dhcp-options. This makes classless static
1653 routes easy to do, eg dhcp-option=121,192.168.1.0/24,1.2.3.4
1655 Added error-checking to the code which writes the lease
1656 file. If this fails for any reason, an error is logged,
1657 and a retry occurs after one minute. This should improve
1658 things eg when a filesystem is full. Thanks to Jens Holze
1661 Fixed breakage of the "/#/ matches any domain" facility
1662 which happened in 2.24. Thanks to Peter Surda for the bug
1665 Use "size_t" and "ssize_t" types where appropriate in the
1668 Fix buggy CNAME handling in mixed IPv4 and IPv6
1669 queries. Thanks to Andreas Pelme for help finding that.
1671 Added some code to attempt to re-transmit DNS queries when
1672 a network interface comes up. This helps on DoD links,
1673 where frequently the packet which triggers dialling is
1674 a DNS query, which then gets lost. By re-sending, we can
1675 avoid the lookup failing. This function is only active
1676 when netlink support is compiled in, and therefore only
1677 under Linux. Thanks to Jean Wolter for help with this.
1679 Tweaked the DHCP tag-matching code to work correctly with
1680 NOT-tag conditions. Thanks to Lutz Pressler for finding
1683 Generalised netid-tag matching in dhcp-range statements to
1684 allow more than one tag.
1686 Added --dhcp-mac to do MAC address matching in the same
1687 way as vendorclass and userclass matching. A good
1688 suggestion from Lutz Pressler.
1690 Add workaround for buggy early Microsoft DHCP clients
1691 which need zero-termination in string options.
1692 Thanks to Fabiano Pires for help with this.
1694 Generalised the DHCP code to cope with any hardware
1695 address type, at least on Linux. *BSD is still limited to
1699 Eliminated all raw network access when running on
1700 Linux. All DHCP network activity now goes through the IP
1701 stack. Packet sockets are no longer required. Apart from
1702 being a neat hack, this should also allow DHCP over IPsec
1703 to work better. On *BSD and OS X, the old method of raw net
1704 access through BPF is retained.
1706 Simplified build options. Networking is now slimmed down
1707 to a choice of "linux" or "other". Netlink is always used
1708 under Linux. Since netlink has been available since 2.2
1709 and non-optional in an IPv4-configured kernel since 2.4,
1710 and the dnsmasq netlink code is now well tested, this
1711 should work out fine.
1713 Removed decayed build support for libc5 and Solaris.
1715 Removed pselect code: use a pipe for race-free signal
1716 handling instead, as this works everywhere.
1718 No longer enable the ISC leasefile reading code in the
1719 distributed sources. I doubt there are many people left
1720 using this 1.x compatibility code. Those that are will
1721 have to explicitly enable it in src/config.h.
1723 Don't send the "DHCP maximum message size" option, even if
1724 requested. RFC2131 says this is a "MUST NOT".
1726 Support larger-than-minimum DHCP message. Dnsmasq is now
1727 happy to get larger than 576-byte DHCP messages, and will
1728 return large messages, if permitted by the "maximum
1729 message size" option of the message to which it is
1730 replying. There's now an arbitrary sanity limit of 16384
1733 Added --no-ping option. This fixes an RFC2131 "SHOULD".
1735 Building on the 2.27 MAC-address changes, allow clients to
1736 provide no MAC address at all, relying on the client-id as
1737 a unique identifier. This should make things like DHCP for
1740 Fixed regression in netlink code under 2.2.x kernels which
1741 occurred in 2.27. Erik Jan Tromp is the vintage kernel fan
1742 who found this. P.S. It looks like this "netlink bind:
1743 permission denied" problem occured in kernels at least as
1744 late a 2.4.18. Good information from Alain Richoux.
1746 Added a warning when it's impossible to give a host its
1747 configured address because the address is leased
1748 elsewhere. A sensible suggestion from Mircea Bardac.
1750 Added minimal support for RFC 3046 DHCP relay agent-id
1751 options. The DHCP server now echoes these back to the
1752 relay, as required by the RFC. Also, RFC 3527 link selection
1753 sub-options are honoured.
1755 Set the process "dumpable" flag when running in debug
1756 mode: this makes getting core dumps from root processes
1759 Fixed one-byte buffer overflow which seems to only cause
1760 problems when dnsmasq is linked with uclibc. Thanks to
1761 Eric House and Eric Spakman for help in chasing this down.
1763 Tolerate configuration screwups which lead to the DHCP
1764 server attemping to allocate its own address to a
1765 client; eg setting the whole subnet range as a DHCP
1766 range. Addresses in use by the server are now excluded
1767 from use by clients.
1769 Did some thinking about HAVE_BROKEN_RTC mode, and made it
1770 much simpler and better. The key is to just keep lease
1771 lengths in the lease file. Since these normally never
1772 change, even as the lease is renewed, the lease file never
1773 needs to change except when machines arrive on the network
1774 or leave. This eliminates the code for timed writes, and
1775 reduces the amount of wear on a flash filesystem to the
1776 absolute minimum. Also re-did the basic time function in
1777 this mode to use the portable times(), rather than parsing
1780 Believe the source port number when replying to unicast
1781 DHCP requests and DHCP requests via a relay, instead of always
1782 using the standard ports. This will allow relays on
1783 non-standard ports and DHCPINFORM from unprivileged ports
1784 to work. The source port sent by unconfigured clients is still
1785 ignored, since this may be unreliable. This means that a DHCP
1786 client must use the standard port to do full configuration.
1789 Fixed compilation on OpenBSD (thanks to Tom Hensel for the
1792 Fixed false "no interface" errors when --bind-interfaces is
1793 set along with --interface=lo or --listen-address. Thanks
1794 to Paul Wise for the report.
1796 Updated patch for SuSE rpm. Thanks to Steven Springl.
1798 It turns out that there are some Linux kernel
1799 configurations which make using the capability system
1800 impossible. If this situation occurs then continue, running
1801 as root, and log a warning. Thanks to Scott Wehrenberg
1802 for help tracking this down.
1805 Fixed crash when a DHCP client requested a broadcast
1806 reply. This problem was introduced in version 2.28.
1807 Thanks to Sandra Dekkers for the bug report.
1810 Added --dhcp-script option. There have been calls for this
1811 for a long time from many good people. Fabio Muzzi gets
1812 the prize for finally convincing me.
1814 Added example dbus config file and moved dbus stuff into
1817 Removed horribly outdated Redhat RPM build files. These
1818 are obsolete now that dnsmasq in in Fedora extras. Thanks
1819 to Patrick "Jima" Laughton, the Fedora package
1822 Added workaround for Linux kernel bug. This manifests
1823 itself as failure of DHCP on kernels with "support for
1824 classical IP over ATM" configured. That includes most
1825 Debian kernel packages. Many thanks to A. Costa and
1826 Benjamin Kudria for their huge efforts in chasing this
1829 Force-kill child processes when dnsmasq is sent a sigterm,
1830 otherwise an unclosed TCP connection could keep dnsmasq
1831 hanging round for a few minutes.
1833 Tweaked config.h logic for uclibc build. It will now pick
1834 up MMU and IPV6 status correctly on every system I tested.
1837 Attempt a better job of replacing previous configuration
1838 when re-reading /etc/hosts and /etc/ethers. SIGHUP is
1839 still not identical to a restart under all circumstances,
1840 but it is for the common case of name->MAC address in
1841 /etc/ethers and name->IP address in /etc/hosts.
1843 Fall back to broadcast for DHCP to an unconfigured client
1844 when the MAC address size is greater than 14 bytes.
1846 Fix problem in 2.28-onwards releases which breaks DNS on
1847 Mac OS X. Thanks to Doug Fields for the bug report and
1850 Added fix to allow compilation on c89-only compilers.
1851 Thanks to John Mastwijk for the patch.
1853 Tweak resolv file polling code to work better if there is
1854 a race between updating the mtime and file contents. This
1855 is not normally a problem, but it can be on systems which
1856 replace nameservers whilst active. The code now continues
1857 to read resolv.conf until it gets at least one usable
1858 server. Thanks to Holger Mauermann for help with this.
1860 If a client DECLINEs an address which is allocated to it
1861 via dhcp-host or /etc/hosts, lock that address out of use
1862 for ten minutes, instead of forever, and log when it's not
1863 being used because of the lock-out. This should provide
1864 less surprising behaviour when a configured address can't be
1865 used. Thanks to Peter Surda and Heinz Deinhart for input
1868 Fixed *BSD DHCP breakage with only some
1869 arches/compilers, depending on structure padding rules.
1870 Thanks to Jeb Campbell and Tom Hensel for help with this.
1872 Added --conf-dir option. Suggestion from Aaron Tygart.
1874 Applied patch from Brent Cook which allows netids in
1875 dhcp-option configuration lines to be prefixed by
1876 "net:". This is not required by the syntax, but it is
1877 consistent with other configuration items.
1879 Added --log-facility option. Suggestion from Fabio Muzzi.
1881 Major update to Spanish translation. Many thanks to Chris
1884 Fixed gcc-4.1 strict-alias compilation warning.
1887 Remove bash-specific shellcode from the Makefile.
1889 Fix breakage with some DHCP relay implementations which
1890 was introduced in 2.28. Believing the source port in
1891 DHCP requests and sending the reply there is sometimes a
1892 bad thing to do, so I've reverted to always sending to
1893 the relay on port 68. Thanks to Daniel Hamlin and Alex
1894 (alde) for bug reports on this.
1896 Moved the SuSe packaging files to contrib. I will no
1897 longer attempt to maintain this in the source tarball. It
1898 will be done externally, in the same way as packaging for
1899 other distros. Suse packages are available from
1900 ftp://ftp.suse.com/pub/people/ug/
1902 Merged patch from Gentoo to honour $LDFLAGS environment.
1904 Fix bug in resolv.conf processing when more than one file
1907 Add --dns-forward-max option.
1909 Warn if --resolv-file flags are ignored because of
1910 --no-resolv. Thanks to Martin F Krafft for spotting this
1913 Add --leasefile-ro option which allows the use of an
1914 external lease database. Many thanks to Steve Horbachuk
1915 for assistance developing this feature.
1917 Provide extra information to lease-change script via its
1918 environment. If the host has a client-id, then
1919 DNSMASQ_CLIENT_ID will be set. Either the lease length (in
1920 DNSMASQ_LEASE_LENGTH) or lease expiry time (in
1921 DNSMASQ_LEASE_EXPIRES) will be set, depending on the
1922 HAVE_BROKEN_RTC compile-time option. This extra
1923 information should make it possible to maintain the lease
1924 database in external storage such as LDAP or a relational
1925 database. Note that while leasefile-ro is set, the script
1926 will be called with "old" events more often, since
1927 changes to the client-id and lease length
1928 (HAVE_BROKEN_RTC) or lease expiry time (otherwise)
1931 Add contrib/wrt/* which is an example implementation of an
1932 external persistent lease database for *WRT distros with
1935 Add contrib/wrt/dhcp_release.c which is a small utility
1936 which removes DHCP leases using DHCPRELEASE operation in
1940 Tweak network-determination code for another corner case:
1941 in this case a host forced to move between dhcp-ranges on
1942 the same physical interface. Thanks to Matthias Andree.
1944 Improve handling of high DNS loads by throttling acceptance of
1945 new queries when resources are tight. This should be a
1946 better response than the "forwarding table full..."
1947 message which was logged before.
1949 Fixed intermittent infinite loop when re-reading
1950 /etc/ethers after SIGHUP. Thanks to Eldon Ziegler for the
1953 Provide extra information to the lease-change script: when
1954 a lease loses its hostname (because a new lease comes
1955 along and claims the same new), the "old" action is called
1956 with the current state of the lease, ie no name. The
1957 change is to provide the former name which the lease had
1958 in the environment variable DNSMASQ_OLD_HOSTNAME. This
1959 helps scripts which do stuff based on hostname, rather
1960 than IP address. Also provide vendor-class and user-class
1961 information to the lease-change script when a new lease is
1962 created in the DNSMASQ_VENDOR_CLASS and
1963 DNSMASQ_USER_CLASS<n> environment variables. Suggestion
1964 from Francois-Xavier Le Bail.
1966 Run the lease change script as root, even when dnsmasq is
1967 configured to change UID to an unprivileged user. Since
1968 most uses of the lease change script need root, this
1969 allows its use whilst keeping the security advantages of
1970 running the daemon without privs. The script is invoked
1971 via a small helper process which keeps root UID, and
1972 validates all data received from the main process. To get
1973 root, an attacker would have to break dnsmasq and then
1974 break the helper through the restricted comms channel
1977 Add contrib/port-forward/* which is a script to set up
1978 port-forwards using the DHCP lease-change script. It's
1979 possible to add a host to a config file by name, and when
1980 that host gets a DHCP lease, the script will use iptables
1981 to set up port-forwards to configured ports at the address
1982 which the host is allocated. The script also handles
1983 setting up the port-forward iptables entries after reboot,
1984 using the persistent lease database, and removing them
1985 when a host leaves and its DHCP lease expires.
1987 Fix unaligned access problem which caused wrong log
1988 messages with some clients on some architectures. Thanks
1989 to Francois-Xavier Le Bail for the bugreport.
1991 Fixed problem with DHCPRELEASE and multi-address
1992 interfaces. Enhanced contrib/wrt/dhcp_release to cope
1993 under these circumstances too. Thanks to Eldon Ziegler for
1996 Updated French translation: thanks to Gildas Le Nadan.
1998 Upgraded the name hash function in the DNS cache. Thanks
1999 to Oleg Khovayko for good work on this.
2001 Added --clear-on-reload flag. Suggestion from Johannes
2004 Treat a nameserver address of 0.0.0.0 as "nothing". Erwin
2005 Cabrera spotted that specifying a nameserver as 0.0.0.0
2006 breaks things badly; this is because the network stack
2007 treats is as "this host" and an endless loop ensues.
2009 Added Webmin module in contrib/webmin. Thanks to Neil
2013 Generate an "old" script event when a client does a DHCPREQUEST
2014 in INIT-REBOOT or SELECTING state and the lease already
2015 exists. Supply vendor and user class information to these
2018 Added support for Dragonfly BSD to src/config.h
2020 Removed "Upgrading to 2.0" document, which is ancient
2023 Tweak DHCP networking code for BSD, esp OpenBSD. Added a
2024 workaround for a bug in OpenBSD 4.0: there should finally
2025 be support for multiple interfaces under OpenBSD now.
2026 Note that no version of dnsmasq before 2.35 will work for
2027 DHCP under OpenBSD 4.0 because of a kernel bug.
2028 Thanks to Claudio Jeker, Jeb Campbell and Cristobal
2029 Palmer for help with this.
2031 Optimised the cache code for the case of large
2032 /etc/hosts. This is mainly to remove the O(n-squared)
2033 algorithm which made reading large (50000 lines) files
2034 slow, but it also takes into account the size of
2035 /etc/hosts when building hash tables, so overall
2036 performance should be better. Thanks to "koko" for
2037 pointing out the problem.
2040 Added --dhcp-ignore-names flag which tells dnsmasq not to
2041 use names provided by DHCP clients. Suggestion from
2042 Thomas M Steenholdt.
2044 Send netmask and broadcast address DHCP options always,
2045 even if the client doesn't request them. This makes a few
2046 odd clients work better.
2048 Added simple TFTP function, optimised for net-boot. It is
2049 now possible to net boot hosts using only dnsmasq. The
2050 TFTP server is read-only, binary-mode only, and designed to be
2051 secure; it adds about 4K to the dnsmasq binary.
2053 Support DHCP option 120, SIP servers, (RFC 3361). Both
2054 encodings are supported, so both --dhcp-option=120,192.168.2.3
2055 and --dhcp-option=120,sip.example.net will work. Brian
2056 Candler pointed out the need for this.
2058 Allow spaces in domain names, to support DNS-SD.
2060 Add --ptr-record flag, again for DNS-SD. Thanks to Stephan
2061 Sokolow for the suggestion.
2063 Tolerate leading space on lines in the config file. Thanks
2064 to Luigi Rizzo for pointing this out.
2066 Fixed netlink.c to cope with headers from the Linux 2.6.19
2067 kernel. Thanks to Philip Wall for the bug report.
2069 Added --dhcp-bridge option, but only to the FreeBSD
2070 build. This fixes an oddity with a a particular bridged
2071 network configuration on FreeBSD. Thanks to Luigi Rizzo
2074 Added FAQ entry about running dnsmasq in a Linux
2075 vserver. Thanks to Gildas le Nadan for the information.
2077 Fixed problem with option parsing which interpreted "/" as
2078 an address and not a string. Thanks to Luigi Rizzo
2081 Ignore the --domain-needed flag when forwarding NS
2082 and SOA queries, since NS queries of TLDs are always legit.
2083 Marcus Better pointed out this problem.
2085 Take care to forward signed DNS requests bit-perfect, so
2086 as not to affect the validity of the signature. This
2087 should allow DDNS updates to be forwarded.
2090 Add better support for RFC-2855 DHCP-over-firewire and RFC
2091 -4390 DHCP-over-InfiniBand. A good suggestion from Karl Svec.
2093 Some efficiency tweaks to the cache code for very large
2094 /etc/hosts files. Should improve reverse (address->name)
2095 lookups and garbage collection. Thanks to Jan 'RedBully'
2096 Seiffert for input on this.
2098 Fix regression in 2.36 which made bogus-nxdomain
2099 and DNS caching unreliable. Thanks to Dennis DeDonatis
2100 and Jan Seiffert for bug reports.
2102 Make DHCP encapsulated vendor-class options sane. Be
2103 warned that some conceivable existing configurations
2104 using these may break, but they work in a much
2105 simpler and more logical way now. Prepending
2106 "vendor:<client-id>" to an option encapsulates it
2107 in option 43, and the option is sent only if the
2108 client-supplied vendor-class substring-matches with
2109 the given client-id. Thanks to Dennis DeDonatis for
2112 Apply patch from Jan Seiffert to tidy up tftp.c
2114 Add support for overloading the filename and servername
2115 fields in DHCP packet. This gives extra option-space when
2116 these fields are not being used or with a modern client
2117 which supports moving them into options.
2119 Added a LIMITS section to the man-page, with guidance on
2120 maximum numbers of clients, file sizes and tuning.
2123 Fix compilation on *BSD. Thanks to Tom Hensel.
2125 Don't send length zero DHCP option 43 and cope with
2126 encapsulated options whose total length exceeds 255 octets
2127 by splitting them into multiple option 43 pieces.
2129 Avoid queries being retried forever when --strict-order is
2130 set and an upstream server returns a SERVFAIL
2131 error. Thanks to Johannes Stezenbach for spotting this.
2133 Fix BOOTP support, broken in version 2.37.
2135 Add example dhcp-options for Etherboot.
2137 Add \e (for ASCII ESCape) to the set of valid escapes
2138 in config-file strings.
2140 Added --dhcp-option-force flag and examples in the
2141 configuration file which use this to control PXELinux.
2143 Added --tftp-no-blocksize option.
2145 Set netid tag "bootp" when BOOTP (rather than DHCP) is in
2146 use. This makes it easy to customise which options are
2147 sent to BOOTP clients. (BOOTP allows only 64 octets for
2148 options, so it can be necessary to trim things.)
2150 Fix rare hang in cache code, a 2.37 regression. This
2151 probably needs an infinite DHCP lease and some bad luck to
2152 trigger. Thanks to Detlef Reichelt for bug reports and testing.
2155 Apply patch from Mike Baker/OpenWRT to ensure that names
2156 like "localhost." in /etc/hosts with trailing period
2157 are treated as fully-qualified.
2159 Tolerate and ignore spaces around commas in the
2160 configuration file in all circumstances. Note that this
2161 may change the meaning of a few existing config files, for
2163 txt-record=mydomain.com, string
2164 would have a leading space in the string before, and now
2165 will not. To get the old behaviour back, use quotes:
2166 txt-record=mydomain.com," string"
2168 /a is no longer a valid escape in quoted strings.
2170 Added symbolic DHCP option names. Instead of
2171 dhcp-option = 3, 1.2.3.4
2172 it is now possible to do
2173 dhcp-option = option:router, 1.2.3.4
2174 To see the list of known DHCP options, use the
2175 command "dnsmasq --help dhcp"
2176 Thanks to Luigi Rizzo for a patch and good work on this.
2178 Overhauled the log code so that logging can be asynchronous;
2179 dnsmasq then no longer blocks waiting for the syslog() library
2180 call. This is important on systems where syslog
2181 is being used to log over the network (and therefore doing
2182 DNS lookups) and syslog is using dnsmasq as its DNS
2183 server. Having dnsmasq block awaiting syslog under
2184 such circumstances can lead to syslog and dnsmasq
2185 deadlocking. The new behaviour is enabled with a new
2186 --log-async flag, which can also be used to tune the
2187 queue length. Paul Chambers found and diagnosed
2188 this trap for the unwary. He also did much testing of
2189 the solution along with Carlos Carvalho.
2191 --log-facility can now take a file-name instead of a
2192 facility name. When this is done, dnsmasq logs to the
2193 file and not via syslog. (Failures early in startup,
2194 whilst reading configuration, will still go to syslog,
2195 and syslog is used as a log-of-last-resort if the file
2198 Added --log-dhcp flag. Suggestion from Carlos Carvalho.
2200 Made BINDIR, MANDIR and LOCALEDIR independently
2201 over-rideable in the makefile. Suggestion from Thomas
2204 Added 127.0.0.0/8 and 169.254.0.0/16 to the address
2205 ranges affected by --bogus-priv. Thanks to Paul
2206 Chambers for the patch.
2208 Fixed failure of TFTP server with --listen-address. Thanks
2209 to William Dinkel for the bug report.
2211 Added --dhcp-circuitid and --dhcp-remoteid for RFC3046
2212 relay agent data matching.
2214 Added --dhcp-subscrid for RFC3993 subscriber-id relay
2215 agent data matching.
2217 Correctly garbage-collect connections when upstream
2218 servers go away as a result of DBus transactions.
2220 Allow absolute paths for TFTP transfers even when
2221 --tftp-root is set, as long as the path matches the root,
2222 so /var/ftp/myfile is OK with tftp-root=/var/ftp.
2223 Thanks for Thomas Mizzi for the patch.
2225 Updated Spanish translation - thanks to Chris Chatham.
2227 Updated French translation - thanks to Gildas Le Nadan.
2229 Added to example conf file example of routing PTR queries
2230 for a subnet to a different nameserver. Suggestion from
2233 Added --interface-name option. This provides a facility
2234 to add a domain name with a dynamic IP address taken from
2235 the address of a local network interface. Useful for
2236 networks with dynamic IPs.
2239 Make SIGUSR2 close-and-reopen the logfile when logging
2240 direct to a file. Thanks to Carlos Carvalho for
2241 suggesting this. When a logfile is created, change
2242 its ownership to the user dnsmasq will run as, don't
2243 leave it owned by root.
2245 Set a special tag, "known" for hosts which are matched by
2246 a dhcp-host or /etc/ethers line. This is especially
2247 useful to be able to do --dhcp-ignore=#known, like ISCs
2248 "deny unknown-clients".
2250 Explicitly set a umask before creating the leases file,
2251 rather than relying on whatever we inherited. The
2252 permissions are set to 644.
2254 Fix handling of fully-qualified names in --dhcp-host
2255 directives and in /etc/ethers. These are now rejected
2256 if the domain doesn't match that given by --domain,
2257 and used correctly otherwise. Before, putting
2258 a FQDN here could cause the whole FQDN to be used as
2259 hostname. Thanks to Michael Heimpold for the bug report.
2261 Massive but trivial edit to make the "daemon" variable
2262 global, instead of copying the same value around as the
2263 first argument to half the functions in the program.
2265 Updated Spanish manpage and message catalog. Thanks
2268 Added patch for support of DNS LOC records in
2269 contrib/dns-loc. Thanks to Lorenz Schori.
2271 Fixed error in manpage: dhcp-ignore-name ->
2272 dhcp-ignore-names. Thanks to Daniel Mentz for spotting
2275 Use client-id as hash-seed for DHCP address allocation
2276 with Firewire and Infiniband, as these don't supply an MAC
2279 Tweaked TFTP file-open code to make it behave sensibly
2280 when the filesystem changes under its feet.
2282 Added DNSMASQ_TIME_REMAINING environment variable to the
2285 Always send replies to DHCPINFORM requests to the source
2286 of the request and not to the address in ciaddr. This
2287 allows third-party queries.
2289 Return "lease time remaining" in the reply to a DHCPINFORM
2290 request if there exists a lease for the host sending the
2293 Added --dhcp-hostsfile option. This gives a superset of
2294 the functionality provided by /etc/ethers. Thanks to
2295 Greg Kurtzer for the suggestion.
2297 Accept keyword "server" as a synonym for "nameserver" in
2298 resolv.conf. Thanks to Andrew Bartlett for the report.
2300 Add --tftp-unique-root option. Suggestion from Dermot
2303 Tweak TFTP retry timer to avoid problems with difficult
2304 clients. Thanks to Dermot Bradley for assistance with
2307 Continue to use unqualified hostnames provided by DHCP
2308 clients, even if the domain part is illegal. (The domain
2309 is ignored, and an error logged.) Previously in this
2310 situation, the whole name whould have been
2311 rejected. Thanks to Jima for the patch.
2313 Handle EINTR returns from wait() correctly and reap
2314 our children's children if necessary. This fixes
2315 a problem with zombie-creation under *BSD when using
2318 Escape spaces in hostnames when they are stored in the
2319 leases file and passed to the lease-change
2320 script. Suggestion from Ben Voigt.
2322 Re-run the lease chamge script with an "old" event for
2323 each lease when dnsmasq receives a SIGHUP.
2325 Added more useful exit codes, including passing on a
2326 non-zero exit code from the lease-script "init" call when
2327 --leasefile-ro is set.
2329 Log memory allocation failure whilst the daemon is
2330 running. Allocation failures during startup are fatal,
2331 but lack of memory whilst running is worked around.
2332 This used to be silent, but now is logged.
2334 Fixed misaligned memory access which caused problems on
2335 Blackfin CPUs. Thanks to Alex Landau for the patch.
2337 Don't include (useless) script-calling code when NO_FORK
2338 is set. Since this tends to be used on very small uclinux
2339 systems, it's worth-while to save some code-size.
2341 Don't set REUSEADDR on TFTP listening socket. There's no
2342 need to do so, and it creates confusing behaviour when
2343 inetd is also listening on the same port. Thanks to Erik
2344 Brown for spotting the problem.
2347 Remove deprecated calls when compiled against libdbus 1.1.
2349 Fix "strict-alias" warning in bpf.c
2351 Reduce dependency on Gnu-make in build system: dnsmasq now
2352 builds with system make under OpenBSD.
2354 Port to Solaris. Dnsmasq 1.x used to run under Solaris,
2355 and this release does so again, for Solaris 9 or better.
2357 Allow the DNS function to be completely disabled, by
2358 setting the port to zero "--port=0". The allows dnsmasq to
2359 be used as a simple DHCP server, simple TFTP server, or
2360 both, but without the DNS server getting in the way.
2362 Fix a bug where NXDOMAIN could be returned for a query
2363 even if the name's value was known for a different query
2364 type. This bug could be prodded with
2365 --local=/domain/ --address=/name.domain/1.2.3.4
2366 An IPv6 query for name.domain would return NXDOMAIN, and
2367 not the correct NOERROR. Thanks to Lars Nooden for
2368 spotting the bug and Jima for diagnosis of the problem.
2370 Added per-server stats to the information logged when
2371 dnsmasq gets SIGUSR1.
2373 Added counts of queries forwarded and queries answered
2374 locally (from the cache, /etc/hosts or config).
2376 Fixed possible crash bug in DBus IPv6 code. Thanks to Matt
2379 Tighten checks for clashes between hosts-file and
2380 DHCP-derived names. Multiple addresses associated with a
2381 name in hosts-file no longer confuses the check.
2383 Add --dhcp-no-override option to fix problems with some
2384 combinations of stage zero and stage one
2385 bootloaders. Thanks to Steve Alexander for the bug report.
2387 Add --tftp-port-range option. Thanks to Daniel Mierswa for
2390 Add --stop-dns-rebind option. Thanks to Collin Mulliner
2393 Added GPL version 3 as a license option.
2395 Added --all-servers option. Thanks to Peter Naulls for the
2398 Extend source address mechanism so that the interface used
2399 to contact an upstream DNS server can be nailed
2400 down. Something like "--server=1.2.3.4@eth1" will force
2401 the use of eth1 for traffic to DNS-server 1.2.3.4. This
2402 facility is only available on Linux and Solaris. Thanks to
2403 Peter Naulls for prompting this.
2405 Add --dhcp-optsfile option. Thanks to Carlos Carvalho for
2408 Fixed failure to set source address for server connections
2409 when using TCP. Thanks to Simon Capper for finding this
2412 Refuse to give a DHCP client the address it asks for if
2413 the address range in question is not available to that
2414 particular host. Thanks to Cedric Duval for the bug
2417 Changed behavior of DHCP server to always return total length of
2418 a new lease in DHCPOFFER, even if an existing lease
2419 exists. (It used to return the time remaining on the lease
2420 whne one existed.) This fixes problems with the Sony Ericsson
2421 K610i phone. Thanks to Hakon Stordahl for finding and
2424 Add DNSMASQ_INTERFACE to the environment of the
2425 lease-change script. Thanks to Nikos Mavrogiannopoulos for
2428 Fixed broken --alias functionality. Thanks to Michael
2429 Meelis for the bug report.
2431 Added French translation of the man page. Thank to Gildas
2434 Add --dhcp-match flag, to check for arbitrary options in
2435 DHCP messages from clients. This enables use of dnsmasq
2436 with gPXE. Thanks to Rance Hall for the suggestion.
2438 Added --dhcp-broadcast, to force broadcast replies to DHCP
2439 clients which need them but are too dumb or too old to
2440 ask. Thanks to Bodo Bellut for the suggestion.
2442 Disable path-MTU discovery on DHCP and TFTP sockets. This
2443 is never needed, and the presence of DF flags in the IP
2444 header confuses some broken PXE ROMS. Thanks again to Bodo
2445 Bellut for spotting this.
2447 Fix problems with addresses which have multiple PTR
2448 records - all but one of these could get lost.
2450 Fix bug with --address and ANY query type seeing REFUSED
2451 return code in replies. Thanks to Mike Wright for spotting
2454 Update Spanish translation. Thanks to Chris Chatham.
2456 Add --neg-ttl option.
2458 Add warnings about the bad effects of --filterwin2k on
2459 SIP, XMPP and Google-talk to the example config file.
2461 Fix va_list abuse in log.c. This fixes crashes on powerpc
2462 when debug mode is set. Thanks to Cedric Duval for the
2466 Define _GNU_SOURCE to avoid problems with later glibc
2467 headers. Thanks to Jima for spotting the problem.
2469 Add --dhcp-alternate-port option. Thanks to Jan Psota for
2472 Fix typo in code which is only used on BSD, when Dbus and
2473 IPv6 support is enabled. Thanks to Roy Marples.
2475 Updated Polish translations - thank to Jan Psota.
2477 Fix OS detection logic to cope with GNU/FreeBSD.
2479 Fix unitialised variable in DBus code - thanks to Roy
2482 Fix network enumeration code to work on later NetBSD -
2483 thanks to Roy Marples.
2485 Provide --dhcp-bridge on all BSD variants.
2487 Define _LARGEFILE_SOURCE which removes an arbitrary 2GB
2488 limit on logfiles. Thanks to Paul Chambers for spotting
2491 Fix RFC3046 agent-id echo code, broken for many
2492 releases. Thanks to Jeremy Laine for spotting the problem
2493 and providing a patch.
2495 Added Solaris 10 service manifest from David Connelly in
2498 Add --dhcp-scriptuser option.
2500 Support new capability interface on suitable Linux
2501 kernels, removes "legacy support in use" messages. Thanks
2502 to Jorge Bastos for pointing this out.
2504 Fix subtle bug in cache code which could cause dnsmasq to
2505 lock spinning CPU in rare circumstances. Thanks to Alex
2506 Chekholko for bug reports and help debugging.
2508 Support netascii transfer mode for TFTP.
projects / framework / connectivity / dnsmasq.git / blob