]>
Commit | Line | Data |
---|---|---|
1 | version 2.64 | |
2 | Handle DHCP FQDN options with all flag bits zero and | |
3 | --dhcp-client-update set. Thanks to Bernd Krumbroeck for | |
4 | spotting the problem. | |
5 | ||
6 | Finesse the check for /etc/hosts names which conflict with | |
7 | DHCP names. Previously a name/address pair in /etc/hosts | |
8 | which didn't match the name/address of a DHCP lease would | |
9 | generate a warning. Now that only happesn if there is not | |
10 | also a match. This allows multiple addresses for a name in | |
11 | /etc/hosts with one of them assigned via DHCP. | |
12 | ||
13 | Fix broken vendor-option processing for BOOTP. Thanks to | |
14 | Hans-Joachim Baader for the bug report. | |
15 | ||
16 | Don't report spurious netlink errors, regression in | |
17 | 2.63. Thanks to Vladislav Grishenko for the patch. | |
18 | ||
19 | Flag DHCP or DHCPv6 in starup logging. Thanks to | |
20 | Vladislav Grishenko for the patch. | |
21 | ||
22 | Add SetServersEX method in DBus interface. Thanks to Dan | |
23 | Williams for the patch. | |
24 | ||
25 | Fix build with later Lua libraries. Thansk to Cristian | |
26 | Rodriguez for the patch. | |
27 | ||
28 | Add --max-cache-ttl option. Thanks to Dennis Kaarsemaker | |
29 | for the patch. | |
30 | ||
31 | ||
32 | version 2.63 | |
33 | Do duplicate dhcp-host address check in --test mode. | |
34 | ||
35 | Check that tftp-root directories are accessible before | |
36 | start-up. Thanks to Daniel Veillard for the initial patch. | |
37 | ||
38 | Allow more than one --tfp-root flag. The per-interface | |
39 | stuff is pointless without that. | |
40 | ||
41 | Add --bind-dynamic. A hybrid mode between the default and | |
42 | --bind-interfaces which copes with dynamically created | |
43 | interfaces. | |
44 | ||
45 | A couple of fixes to the build system for Android. Thanks | |
46 | to Metin Kaya for the patches. | |
47 | ||
48 | Remove the interface:<interface> argument in --dhcp-range, and | |
49 | the interface argument to --enable-tftp. These were a | |
50 | still-born attempt to allow automatic isolated | |
51 | configuration by libvirt, but have never (to my knowledge) | |
52 | been used, had very strange semantics, and have been | |
53 | superceded by other mechanisms. | |
54 | ||
55 | Fixed bug logging filenames when duplicate dhcp-host | |
56 | addresses are found. Thanks to John Hanks for the patch. | |
57 | ||
58 | Fix regression in 2.61 which broke caching of CNAME | |
59 | chains. Thanks to Atul Gupta for the bug report. | |
60 | ||
61 | Allow the target of a --cname flag to be another --cname. | |
62 | ||
63 | Teach DHCPv6 about the RFC 4242 information-refresh-time | |
64 | option, and add parsing if the minutes, hours and days | |
65 | format for options. Thanks to Francois-Xavier Le Bail for | |
66 | the suggestion. | |
67 | ||
68 | Allow "w" (for week) as multiplier in lease times, as well | |
69 | as seconds, minutes, hours and days. Álvaro Gámez Machado | |
70 | spotted the ommission. | |
71 | ||
72 | Update French translation. Thanks to Gildas Le Nadan. | |
73 | ||
74 | Allow a DBus service name to be given with --enable-dbus | |
75 | which overrides the default, | |
76 | uk.org.thekelleys.dnsmasq. Thanks to Mathieu | |
77 | Trudel-Lapierre for the patch. | |
78 | ||
79 | Set the "prefix on-link" bit in Router | |
80 | Advertisements. Thanks to Gui Iribarren for the patch. | |
81 | ||
82 | ||
83 | version 2.62 | |
84 | Update German translation. Thanks to Conrad Kostecki. | |
85 | ||
86 | Cope with router-solict packets wich don't have a valid | |
87 | source address. Thanks to Vladislav Grishenko for the patch. | |
88 | ||
89 | Fixed bug which caused missing periodic router | |
90 | advertisements with some configurations. Thanks to | |
91 | Vladislav Grishenko for the patch. | |
92 | ||
93 | Fixed bug which broke DHCPv6/RA with prefix lengths | |
94 | which are not divisible by 8. Thanks to Andre Coetzee | |
95 | for spotting this. | |
96 | ||
97 | Fix non-response to router-solicitations when | |
98 | router-advertisement configured, but DHCPv6 not | |
99 | configured. Thanks to Marien Zwart for the patch. | |
100 | ||
101 | Add --dns-rr, to allow arbitrary DNS resource records. | |
102 | ||
103 | Fixed bug which broke RA scheduling when an interface had | |
104 | two addresses in the same network. Thanks to Jim Bos for | |
105 | his help nailing this. | |
106 | ||
107 | version 2.61 | |
108 | Re-write interface discovery code on *BSD to use | |
109 | getifaddrs. This is more portable, more straightforward, | |
110 | and allows us to find the prefix length for IPv6 | |
111 | addresses. | |
112 | ||
113 | Add ra-names, ra-stateless and slaac keywords for DHCPv6. | |
114 | Dnsmasq can now synthesise AAAA records for dual-stack | |
115 | hosts which get IPv6 addresses via SLAAC. It is also now | |
116 | possible to use SLAAC and stateless DHCPv6, and to | |
117 | tell clients to use SLAAC addresses as well as DHCP ones. | |
118 | Thanks to Dave Taht for help with this. | |
119 | ||
120 | Add --dhcp-duid to allow DUID-EN uids to be used. | |
121 | ||
122 | Explicity send DHCPv6 replies to the correct port, instead | |
123 | of relying on clients to send requests with the correct | |
124 | source address, since at least one client in the wild gets | |
125 | this wrong. Thanks to Conrad Kostecki for help tracking | |
126 | this down. | |
127 | ||
128 | Send a preference value of 255 in DHCPv6 replies when | |
129 | --dhcp-authoritative is in effect. This tells clients not | |
130 | to wait around for other DHCP servers. | |
131 | ||
132 | Better logging of DHCPv6 options. | |
133 | ||
134 | Add --host-record. Thanks to Rob Zwissler for the | |
135 | suggestion. | |
136 | ||
137 | Invoke the DHCP script with action "tftp" when a TFTP file | |
138 | transfer completes. The size of the file, address to which | |
139 | it was sent and complete pathname are supplied. Note that | |
140 | version 2.60 introduced some script incompatibilties | |
141 | associated with DHCPv6, and this is a further change. To | |
142 | be safe, scripts should ignore unknown actions, and if | |
143 | not IPv6-aware, should exit if the environment | |
144 | variable DNSMASQ_IAID is set. The use-case for this is | |
145 | to track netboot/install. Suggestion from Shantanu | |
146 | Gadgil. | |
147 | ||
148 | Update contrib/port-forward/dnsmasq-portforward to reflect | |
149 | the above. | |
150 | ||
151 | Set the environment variable DNSMASQ_LOG_DHCP when running | |
152 | the script id --log-dhcp is in effect, so that script can | |
153 | taylor their logging verbosity. Suggestion from Malte | |
154 | Forkel. | |
155 | ||
156 | Arrange that addresses specified with --listen-address | |
157 | work even if there is no interface carrying the | |
158 | address. This is chiefly useful for IPv4 loopback | |
159 | addresses, where any address in 127.0.0.0/8 is a valid | |
160 | loopback address, but normally only 127.0.0.1 appears on | |
161 | the lo interface. Thanks to Mathieu Trudel-Lapierre for | |
162 | the idea and initial patch. | |
163 | ||
164 | Fix crash, introduced in 2.60, when a DHCPINFORM is | |
165 | received from a network which has no valid dhcp-range. | |
166 | Thanks to Stephane Glondu for the bug report. | |
167 | ||
168 | Add a new DHCP lease time keyword, "deprecated" for | |
169 | --dhcp-range. This is only valid for IPv6, and sets the | |
170 | preffered lease time for both DHCP and RA to zero. The | |
171 | effect is that clients can continue to use the address | |
172 | for existing connections, but new connections will use | |
173 | other addresses, if they exist. This makes hitless | |
174 | renumbering at least possible. | |
175 | ||
176 | Fix bug in address6_available() which caused DHCPv6 lease | |
177 | aquisition to fail if more than one dhcp-range in use. | |
178 | ||
179 | Provide RDNSS and DNSSL data in router advertisements, | |
180 | using the settings provided for DHCP options | |
181 | option6:domain-search and option6:dns-server. | |
182 | ||
183 | Tweak logo/favicon.ico to add some transparency. Thanks to | |
184 | SamLT for work on this. | |
185 | ||
186 | Don't cache data from non-recursive nameservers, since it | |
187 | may erroneously look like a valid CNAME to a non-exitant | |
188 | name. Thanks to Ben Winslow for finding this. | |
189 | ||
190 | Call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP | |
191 | on exactly one interface and --bind-interfaces is set. This | |
192 | makes the OpenStack use-case of one dnsmasq per virtual | |
193 | interface work. This is only available on Linux; it's not | |
194 | supported on other platforms. Thanks to Vishvananda Ishaya | |
195 | and the OpenStack team for the suggestion. | |
196 | ||
197 | Updated French translation. Thanks to Gildas Le Nadan. | |
198 | ||
199 | Give correct from-cache answers to explict CNAME queries. | |
200 | Thanks to Rob Zwissler for spotting this. | |
201 | ||
202 | Add --tftp-lowercase option. Thanks to Oliver Rath for the | |
203 | patch. | |
204 | ||
205 | Ensure that the DBus DhcpLeaseUpdated events are generated | |
206 | when a lease goes through INIT_REBOOT state, even if the | |
207 | dhcp-script is not in use. Thanks to Antoaneta-Ecaterina | |
208 | Ene for the patch. | |
209 | ||
210 | Fix failure of TFTP over IPv4 on OpenBSD platform. Thanks | |
211 | to Brad Smith for spotting this. | |
212 | ||
213 | ||
214 | version 2.60 | |
215 | Fix compilation problem in Mac OS X Lion. Thanks to Olaf | |
216 | Flebbe for the patch. | |
217 | ||
218 | Fix DHCP when using --listen-address with an IP address | |
219 | which is not the primary address of an interface. | |
220 | ||
221 | Add --dhcp-client-update option. | |
222 | ||
223 | Add Lua integration. Dnsmasq can now execute a DHCP | |
224 | lease-change script written in Lua. This needs to be | |
225 | enabled at compile time by setting HAVE_LUASCRIPT in | |
226 | src/config.h or running "make COPTS=-DHAVE_LUASCRIPT" | |
227 | Thanks to Jan-Piet Mens for the idea and proof-of-concept | |
228 | implementation. | |
229 | ||
230 | Tidied src/config.h to distinguish between | |
231 | platform-dependent compile-time options which are selected | |
232 | automatically, and builder-selectable compile time | |
233 | options. Document the latter better, and describe how to | |
234 | set them from the make command line. | |
235 | ||
236 | Tidied up IPPROTO_IP/SOL_IP (and IPv6 equivalent) | |
237 | confusion. IPPROTO_IP works everywhere now. | |
238 | ||
239 | Set TOS on DHCP sockets, this improves things on busy | |
240 | wireless networks. Thanks to Dave Taht for the patch. | |
241 | ||
242 | Determine VERSION automatically based on git magic: | |
243 | release tags or hash values. | |
244 | ||
245 | Improve start-up speed when reading large hosts files | |
246 | containing many distinct addresses. | |
247 | ||
248 | Fix problem if dnsmasq is started without the stdin, | |
249 | stdout and stderr file descriptors open. This can manifest | |
250 | itself as 100% CPU use. Thanks to Chris Moore for finding | |
251 | this. | |
252 | ||
253 | Fix shell-scripting bug in bld/pkg-wrapper. Thanks to | |
254 | Mark Mitchell for the patch. | |
255 | ||
256 | Allow the TFP server or boot server in --pxe-service, to | |
257 | be a domain name instead of an IP address. This allows for | |
258 | round-robin to multiple servers, in the same way as | |
259 | --dhcp-boot. A good suggestion from Cristiano Cumer. | |
260 | ||
261 | Support BUILDDIR variable in the Makefile. Allows builds | |
262 | for multiple archs from the same source tree with eg. | |
263 | make BUILDDIR=linux (relative to dnsmasq tree) | |
264 | make BUILDDIR=/tmp/openbsd (absolute path) | |
265 | If BUILDDIR is not set, compilation happens in the src | |
266 | directory, as before. Suggestion from Mark Mitchell. | |
267 | ||
268 | Support DHCPv6. Support is there for the sort of things | |
269 | the existing v4 server does, including tags, options, | |
270 | static addresses and relay support. Missing is prefix | |
271 | delegation, which is probably not required in the dnsmasq | |
272 | niche, and an easy way to accept prefix delegations from | |
273 | an upstream DHCPv6 server, which is. Future plans include | |
274 | support for DHCPv6 router option and MAC address option | |
275 | (to make selecting clients by MAC address work like IPv4). | |
276 | These will be added as the standards mature. | |
277 | This code has been tested, but this is the first release, | |
278 | so don't bet the farm on it just yet. Many thanks to all | |
279 | testers who have got it this far. | |
280 | ||
281 | Support IPv6 router advertisements. This is a | |
282 | simple-minded implementation, aimed at providing the | |
283 | vestigial RA needed to go alongside IPv6. Is picks up | |
284 | configuration from the DHCPv6 conf, and should just need | |
285 | enabling with --enable-ra. | |
286 | ||
287 | Fix long-standing wrinkle with --localise-queries that | |
288 | could result in wrong answers when DNS packets arrive | |
289 | via an interface other than the expected one. Thanks to | |
290 | Lorenzo Milesi and John Hanks for spotting this one. | |
291 | ||
292 | Update French translation. Thanks to Gildas Le Nadan. | |
293 | ||
294 | Update Polish translation. Thanks to Jan Psota. | |
295 | ||
296 | ||
297 | version 2.59 | |
298 | Fix regression in 2.58 which caused failure to start up | |
299 | with some combinations of dnsmasq config and IPv6 kernel | |
300 | network config. Thanks to Brielle Bruns for the bug | |
301 | report. | |
302 | ||
303 | Improve dnsmasq's behaviour when network interfaces are | |
304 | still doing duplicate address detection (DAD). Previously, | |
305 | dnsmasq would wait up to 20 seconds at start-up for the | |
306 | DAD state to terminate. This is broken for bridge | |
307 | interfaces on recent Linux kernels, which don't start DAD | |
308 | until the bridge comes up, and so can take arbitrary | |
309 | time. The new behaviour lets dnsmasq poll for an arbitrary | |
310 | time whilst providing service on other interfaces. Thanks | |
311 | to Stephen Hemminger for pointing out the problem. | |
312 | ||
313 | ||
314 | version 2.58 | |
315 | Provide a definition of the SA_SIZE macro where it's | |
316 | missing. Fixes build failure on openBSD. | |
317 | ||
318 | Don't include a zero terminator at the end of messages | |
319 | sent to /dev/log when /dev/log is a datagram socket. | |
320 | Thanks to Didier Rabound for spotting the problem. | |
321 | ||
322 | Add --dhcp-sequential-ip flag, to force allocation of IP | |
323 | addresses in ascending order. Note that the default | |
324 | pseudo-random mode is in general better but some | |
325 | server-deployment applications need this. | |
326 | ||
327 | Fix problem where a server-id of 0.0.0.0 is sent to a | |
328 | client when a dhcp-relay is in use if a client renews a | |
329 | lease after dnsmasq restart and before any clients on the | |
330 | subnet get a new lease. Thanks to Mike Ruiz for assistance | |
331 | in chasing this one down. | |
332 | ||
333 | Don't return NXDOMAIN to an AAAA query if we have CNAME | |
334 | which points to an A record only: NODATA is the correct | |
335 | reply in this case. Thanks to Tom Fernandes for spotting | |
336 | the problem. | |
337 | ||
338 | Relax the need to supply a netmask in --dhcp-range for | |
339 | networks which use a DHCP relay. Whilst this is still | |
340 | desireable, in the absence of a netmask dnsmasq will use | |
341 | a default based on the class (A, B, or C) of the address. | |
342 | This should at least remove a cause of mysterious failure | |
343 | for people using RFC1918 addresses and relays. | |
344 | ||
345 | Add support for Linux conntrack connection marking. If | |
346 | enabled with --conntrack, the connection mark for incoming | |
347 | DNS queries will be copied to the outgoing connections | |
348 | used to answer those queries. This allows clever firewall | |
349 | and accounting stuff. Only available if dnsmasq is | |
350 | compiled with HAVE_CONNTRACK and adds a dependency on | |
351 | libnetfilter-conntrack. Thanks to Ed Wildgoose for the | |
352 | initial idea, testing and sponsorship of this function. | |
353 | ||
354 | Provide a sane error message when someone attempts to | |
355 | match a tag in --dhcp-host. | |
356 | ||
357 | Tweak the behaviour of --domain-needed, to avoid problems | |
358 | with recursive nameservers downstream of dnsmasq. The new | |
359 | behaviour only stops A and AAAA queries, and returns | |
360 | NODATA rather than NXDOMAIN replies. | |
361 | ||
362 | Efficiency fix for very large DHCP configurations, thanks | |
363 | to James Gartrell and Mike Ruiz for help with this. | |
364 | ||
365 | Allow the TFTP-server address in --dhcp-boot to be a | |
366 | domain-name which is looked up in /etc/hosts. This can | |
367 | give multiple IP addresses which are used round-robin, | |
368 | thus doing TFTP server load-balancing. Thanks to Sushil | |
369 | Agrawal for the patch. | |
370 | ||
371 | When two tagged dhcp-options for a particular option | |
372 | number are both valid, use the one which is valid without | |
373 | a tag from the dhcp-range. Allows overriding of the value | |
374 | of a DHCP option for a particular host as well as | |
375 | per-network values. So | |
376 | --dhcp-range=set:interface1,...... | |
377 | --dhcp-host=set:myhost,..... | |
378 | --dhcp-option=tag:interface1,option:nis-domain,"domain1" | |
379 | --dhcp-option=tag:myhost,option:nis-domain,"domain2" | |
380 | will set the NIS-domain to domain1 for hosts in the range, but | |
381 | override that to domain2 for a particular host. | |
382 | ||
383 | Fix bug which resulted in truncated files and timeouts for | |
384 | some TFTP transfers. The bug only occurs with netascii | |
385 | transfers and needs an unfortunate relationship between | |
386 | file size, blocksize and the number of newlines in the | |
387 | last block before it manifests itself. Many thanks to | |
388 | Alkis Georgopoulos for spotting the problem and providing | |
389 | a comprehensive test-case. | |
390 | ||
391 | Fix regression in TFTP server on *BSD platforms introduced | |
392 | in version 2.56, due to confusion with sockaddr | |
393 | length. Many thanks to Loïc Pefferkorn for finding this. | |
394 | ||
395 | Support scope-ids in IPv6 addresses of nameservers from | |
396 | /etc/resolv.conf and in --server options. Eg | |
397 | nameserver fe80::202:a412:4512:7bbf%eth0 or | |
398 | server=fe80::202:a412:4512:7bbf%eth0. Thanks to | |
399 | Michael Stapelberg for the suggestion. | |
400 | ||
401 | Update Polish translation, thanks to Jan Psota. | |
402 | ||
403 | Update French translation. Thanks to Gildas Le Nadan. | |
404 | ||
405 | ||
406 | version 2.57 | |
407 | Add patches to allow build under Android. | |
408 | ||
409 | Provide our own header for the DNS protocol, rather than | |
410 | relying on arpa/nameser.h. This has proved more or less | |
411 | defective over the years and the final straw is that it's | |
412 | effectively empty on Android. | |
413 | ||
414 | Fix regression in 2.56 which caused hex constants in | |
415 | configuration to be rejected if they contain the '*' | |
416 | wildcard. | |
417 | ||
418 | Correct wrong casts of arguments to ctype.h functions, | |
419 | isdigit(), isxdigit() etc. Thanks to Matthias Andree for | |
420 | spotting this. | |
421 | ||
422 | Allow build with IDN support independently from i18n. | |
423 | IDN support continues to be included automatically | |
424 | when i18n is included. | |
425 | 'make COPTS=-DHAVE_IDN' is the magic incantation. | |
426 | ||
427 | Modify check on extraneous command line junk (added in | |
428 | 2.56) so that it doesn't complain about extra _empty_ | |
429 | arguments. Otherwise this breaks libvirt. | |
430 | ||
431 | ||
432 | version 2.56 | |
433 | Add a patch to allow dnsmasq to get interface names right in a | |
434 | Solaris zone. Thanks to Dj Padzensky for this. | |
435 | ||
436 | Improve data-type parsing heuristics so that | |
437 | --dhcp-option=option:domain-search,. | |
438 | treats the value as a string and not an IP address. | |
439 | Thanks to Clemens Fischer for spotting that. | |
440 | ||
441 | Add IPv6 support to the TFTP server. Many thanks to Jan | |
442 | 'RedBully' Seiffert for the patches. | |
443 | ||
444 | Log DNS queries at level LOG_INFO, rather then | |
445 | LOG_DEBUG. This makes things consistent with DHCP | |
446 | logging. Thanks to Adam Pribyl for spotting the problem. | |
447 | ||
448 | Ensure that dnsmasq terminates cleanly when using | |
449 | --syslog-async even if it cannot make a connection to the | |
450 | syslogd. | |
451 | ||
452 | Add --add-mac option. This is to support currently | |
453 | experimental DNS filtering facilities. Thanks to Benjamin | |
454 | Petrin for the orignal patch. | |
455 | ||
456 | Fix bug which meant that tags were ignored in dhcp-range | |
457 | configuration specifying PXE-proxy service. Thanks to | |
458 | Cristiano Cumer for spotting this. | |
459 | ||
460 | Raise an error if there is extra junk, not part of an | |
461 | option, on the command line. | |
462 | ||
463 | Flag a couple of log messages in cache.c as coming from | |
464 | the DHCP subsystem. Thanks to Olaf Westrik for the patch. | |
465 | ||
466 | Omit timestamps from logs when a) logging to stderr and | |
467 | b) --keep-in-forground is set. The logging facility on the | |
468 | other end of stderr can be assumned to supply them. Thanks | |
469 | to John Hallam for the patch. | |
470 | ||
471 | Don't complain about strings longer than 255 characters in | |
472 | --txt-record, just split the long strings into 255 | |
473 | character chunks instead. | |
474 | ||
475 | Fix crash on double-free. This bug can only happen when | |
476 | dhcp-script is in use and then only in rare circumstances | |
477 | triggered by high DHCP transaction rate and a slow | |
478 | script. Thanks to Ferenc Wagner for finding the problem. | |
479 | ||
480 | Only log that a file has been sent by TFTP after the | |
481 | transfer has completed succesfully. | |
482 | ||
483 | A good suggestion from Ferenc Wagner: extend | |
484 | the --domain option to allow this sort of thing: | |
485 | --domain=thekelleys.org.uk,192.168.0.0/24,local | |
486 | which automatically creates | |
487 | --local=/thekelleys.org.uk/ | |
488 | --local=/0.168.192.in-addr.arpa/ | |
489 | ||
490 | Tighten up syntax checking of hex contants in the config | |
491 | file. Thanks to Fred Damen for spotting this. | |
492 | ||
493 | Add dnsmasq logo/icon, contributed by Justin Swift. Many | |
494 | thanks for that. | |
495 | ||
496 | Never cache DNS replies which have the 'cd' bit set, or | |
497 | which result from queries forwarded with the 'cd' bit | |
498 | set. The 'cd' bit instructs a DNSSEC validating server | |
499 | upstream to ignore signature failures and return replies | |
500 | anyway. Without this change it's possible to pollute the | |
501 | dnsmasq cache with bad data by making a query with the | |
502 | 'cd' bit set and subsequent queries would return this data | |
503 | without its being marked as suspect. Thanks to Anders | |
504 | Kaseorg for pointing out this problem. | |
505 | ||
506 | Add --proxy-dnssec flag, for compliance with RFC | |
507 | 4035. Dnsmasq will now clear the 'ad' bit in answers returned | |
508 | from upstream validating nameservers unless this option is | |
509 | set. | |
510 | ||
511 | Allow a filename of "-" for --conf-file to read | |
512 | stdin. Suggestion from Timothy Redaelli. | |
513 | ||
514 | Rotate the order of SRV records in replies, to provide | |
515 | round-robin load balancing when all the priorities are | |
516 | equal. Thanks to Peter McKinney for the suggestion. | |
517 | ||
518 | Edit | |
519 | contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist | |
520 | so that it doesn't log all queries to a file by | |
521 | default. Thanks again to Peter McKinney. | |
522 | ||
523 | By default, setting an IPv4 address for a domain but not | |
524 | an IPv6 address causes dnsmasq to return | |
525 | an NODATA reply for IPv6 (or vice-versa). So | |
526 | --address=/google.com/1.2.3.4 stops IPv6 queries for | |
527 | *google.com from being forwarded. Make it possible to | |
528 | override this behaviour by defining the sematics if the | |
529 | same domain appears in both --server and --address. | |
530 | In that case, the --address has priority for the address | |
531 | family in which is appears, but the --server has priority | |
532 | of the address family which doesn't appear in --adddress | |
533 | So: | |
534 | --address=/google.com/1.2.3.4 | |
535 | --server=/google.com/# | |
536 | will return 1.2.3.4 for IPv4 queries for *.google.com but | |
537 | forward IPv6 queries to the normal upstream nameserver. | |
538 | Similarly when setting an IPv6 address | |
539 | only this will allow forwarding of IPv4 queries. Thanks to | |
540 | William for pointing out the need for this. | |
541 | ||
542 | Allow more than one --dhcp-optsfile and --dhcp-hostsfile | |
543 | and make them understand directories as arguments in the | |
544 | same way as --addn-hosts. Suggestion from John Hanks. | |
545 | ||
546 | Ignore rebinding requests for leases we don't know | |
547 | about. Rebind is broadcast, so we might get to overhear a | |
548 | request meant for another DHCP server. NAKing this is | |
549 | wrong. Thanks to Brad D'Hondt for assistance with this. | |
550 | ||
551 | Fix cosmetic bug which produced strange output when | |
552 | dumping cache statistics with some configurations. Thanks | |
553 | to Fedor Kozhevnikov for spotting this. | |
554 | ||
555 | ||
556 | version 2.55 | |
557 | Fix crash when /etc/ethers is in use. Thanks to | |
558 | Gianluigi Tiesi for finding this. | |
559 | ||
560 | Fix crash in netlink_multicast(). Thanks to Arno Wald for | |
561 | finding this one. | |
562 | ||
563 | Allow the empty domain "." in dhcp domain-search (119) | |
564 | options. | |
565 | ||
566 | ||
567 | version 2.54 | |
568 | There is no version 2.54 to avoid confusion with 2.53, | |
569 | which incorrectly identifies itself as 2.54. | |
570 | ||
571 | ||
572 | version 2.53 | |
573 | Fix failure to compile on Debian/kFreeBSD. Thanks to | |
574 | Axel Beckert and Petr Salinger. | |
575 | ||
576 | Fix code to avoid scary strict-aliasing warnings | |
577 | generated by gcc 4.4. | |
578 | ||
579 | Added FAQ entry warning about DHCP failures with Vista | |
580 | when firewalls block 255.255.255.255. | |
581 | ||
582 | Fixed bug which caused bad things to happen if a | |
583 | resolv.conf file which exists is subsequently removed. | |
584 | Thanks to Nikolai Saoukh for the patch. | |
585 | ||
586 | Rationalised the DHCP tag system. Every configuration item | |
587 | which can set a tag does so by adding "set:<tag>" and | |
588 | every configuration item which is conditional on a tag is | |
589 | made so by "tag:<tag>". The NOT operator changes to '!', | |
590 | which is a bit more intuitive too. Dhcp-host directives | |
591 | can set more than one tag now. The old '#' NOT, | |
592 | "net:" prefix and no-prefixes are still honoured, so | |
593 | no existing config file needs to be changed, but | |
594 | the documentation and new-style config files should be | |
595 | much less confusing. | |
596 | ||
597 | Added --tag-if to allow boolean operations on tags. | |
598 | This allows complicated logic to be clearer and more | |
599 | general. A great suggestion from Richard Voigt. | |
600 | ||
601 | Add broadcast/unicast information to DHCP logging. | |
602 | ||
603 | Allow --dhcp-broadcast to be unconditional. | |
604 | ||
605 | Fixed incorrect behaviour with NOT <tag> conditionals in | |
606 | dhcp-options. Thanks to Max Turkewitz for assistance | |
607 | finding this. | |
608 | ||
609 | If we send vendor-class encapsulated options based on the | |
610 | vendor-class supplied by the client, and no explicit | |
611 | vendor-class option is given, echo back the vendor-class | |
612 | from the client. | |
613 | ||
614 | Fix bug which stopped dnsmasq from matching both a | |
615 | circuitid and a remoteid. Thanks to Ignacio Bravo for | |
616 | finding this. | |
617 | ||
618 | Add --dhcp-proxy, which makes it possible to configure | |
619 | dnsmasq to use a DHCP relay agent as a full proxy, with | |
620 | all DHCP messages passing through the proxy. This is | |
621 | useful if the relay adds extra information to the packets | |
622 | it forwards, but cannot be configured with the RFC 5107 | |
623 | server-override option. | |
624 | ||
625 | Added interface:<iface name> part to dhcp-range. The | |
626 | semantics of this are very odd at first sight, but it | |
627 | allows a single line of the form | |
628 | dhcp-range=interface:virt0,192.168.0.4,192.168.0.200 | |
629 | to be added to dnsmasq configuration which then supplies | |
630 | DHCP and DNS services to that interface, without affecting | |
631 | what services are supplied to other interfaces and | |
632 | irrespective of the existance or lack of | |
633 | interface=<interface> | |
634 | lines elsewhere in the dnsmasq configuration. The idea is | |
635 | that such a line can be added automatically by libvirt | |
636 | or equivalent systems, without disturbing any manual | |
637 | configuration. | |
638 | ||
639 | Similarly to the above, allow --enable-tftp=<interface> | |
640 | ||
641 | Allow a TFTP root to be set separately for requests via | |
642 | different interfaces, --tftp-root=<path>,<interface> | |
643 | ||
644 | Correctly handle and log clashes between CNAMES and | |
645 | DNS names being given to DHCP leases. This fixes a bug | |
646 | which caused nonsense IP addresses to be logged. Thanks to | |
647 | Sergei Zhirikov for finding and analysing the problem. | |
648 | ||
649 | Tweak flush_log so as to avoid leaving the log | |
650 | file in non-blocking mode. O_NONBLOCK is a property of the | |
651 | file, not the process/descriptor. | |
652 | ||
653 | Fix contrib/Solaris10/create_package | |
654 | (/usr/man -> /usr/share/man) Thanks to Vita Batrla. | |
655 | ||
656 | Fix a problem where, if a client got a lease, then went | |
657 | to another subnet and got another lease, then moved back, | |
658 | it couldn't resume the old lease, but would instead get | |
659 | a new address. Thanks to Leonardo Rodrigues for spotting | |
660 | this and testing the fix. | |
661 | ||
662 | Fix weird bug which sometimes omitted certain characters | |
663 | from the start of quoted strings in dhcp-options. Thanks | |
664 | to Dayton Turner for spotting the problem. | |
665 | ||
666 | Add facility to redirect some domains to the standard | |
667 | upstream servers: this allows something like | |
668 | --server=/google.com/1.2.3.4 --server=/www.google.com/# | |
669 | which will send queries for *.google.com to 1.2.3.4, | |
670 | except *www.google.com which will be forwarded as usual. | |
671 | Thanks to AJ Weber for prompting this addition. | |
672 | ||
673 | Improve the hash-algorithm used to generate IP addresses | |
674 | from MAC addresses during initial DHCP address | |
675 | allocation. This improves performance when large numbers | |
676 | of hosts with similar MAC addresses all try and get an IP | |
677 | address at the same time. Thanks to Paul Smith for his | |
678 | work on this. | |
679 | ||
680 | Tweak DHCP code so that --bridge-interface can be used to | |
681 | select which IP alias of an interface should be used for | |
682 | DHCP purposes on Linux. If eth0 has an alias eth0:dhcp | |
683 | then adding --bridge-interface=eth0:dhcp,eth0 will use | |
684 | the address of eth0:dhcp to determine the correct subnet | |
685 | for DHCP address allocation. Thanks to Pawel Golaszewski | |
686 | for prompting this and Eric Cooper for further testing. | |
687 | ||
688 | Add --dhcp-generate-names. Suggestion by Ferenc Wagner. | |
689 | ||
690 | Tweak DNS server selection algorithm when there is more | |
691 | than one server available for a domain, eg. | |
692 | --server=/mydomain/1.1.1.1 | |
693 | --server=/mydomain/2.2.2.2 | |
694 | Thanks to Alberto Cuesta-Canada for spotting a weakness | |
695 | here. | |
696 | ||
697 | Add --max-ttl. Thanks to Fredrik Ringertz for the patch. | |
698 | ||
699 | Allow --log-facility=- to force all logging to | |
700 | stderr. Suggestion from Clemens Fischer. | |
701 | ||
702 | Fix regression which caused configuration like | |
703 | --address=/.domain.com/1.2.3.4 to be rejected. The dot to the | |
704 | left of the domain has been implied and not required for a | |
705 | long time, but it should be accepted for backward | |
706 | compatibility. Thanks to Andrew Burcin for spotting this. | |
707 | ||
708 | Add --rebind-domain-ok and --rebind-localhost-ok. | |
709 | Suggestion from Clemens Fischer. | |
710 | ||
711 | Log replies to queries of type TXT, when --log-queries | |
712 | is set. | |
713 | ||
714 | Fix compiler warnings when compiled with -DNO_DHCP. Thanks | |
715 | to Shantanu Gadgil for the patch. | |
716 | ||
717 | Updated French translation. Thanks to Gildas Le Nadan. | |
718 | ||
719 | Updated Polish translation. Thanks to Jan Psota. | |
720 | ||
721 | Updated German translation. Thanks to Matthias Andree. | |
722 | ||
723 | Added contrib/static-arp, thanks to Darren Hoo. | |
724 | ||
725 | Fix corruption of the domain when a name from /etc/hosts | |
726 | overrides one supplied by a DHCP client. Thanks to Fedor | |
727 | Kozhevnikov for spotting the problem. | |
728 | ||
729 | Updated Spanish translation. Thanks to Chris Chatham. | |
730 | ||
731 | ||
732 | version 2.52 | |
733 | Work around a Linux kernel bug which insists that the | |
734 | length of the option passed to setsockopt must be at least | |
735 | sizeof(int) bytes, even if we're calling SO_BINDTODEVICE | |
736 | and the device name is "lo". Note that this is fixed | |
737 | in kernel 2.6.31, but the workaround is harmless and | |
738 | allows earlier kernels to be used. Also fix dnsmasq | |
739 | bug which reported the wrong address when this failed. | |
740 | Thanks to Fedor for finding this. | |
741 | ||
742 | The API for IPv6 PKTINFO changed around Linux kernel | |
743 | 2.6.14. Workaround the case where dnsmasq is compiled | |
744 | against newer headers, but then run on an old kernel: | |
745 | necessary for some *WRT distros. | |
746 | ||
747 | Re-read the set of network interfaces when re-loading | |
748 | /etc/resolv.conf if --bind-interfaces is not set. This | |
749 | handles the case that loopback interfaces do not exist | |
750 | when dnsmasq is first started. | |
751 | ||
752 | Tweak the PXE code to support port 4011. This should | |
753 | reduce broadcasts and make things more reliable when other | |
754 | servers are around. It also improves inter-operability | |
755 | with certain clients. | |
756 | ||
757 | Make a pxe-service configuration with no filename or boot | |
758 | service type legal: this does a local boot. eg. | |
759 | pxe-service=x86PC, "Local boot" | |
760 | ||
761 | Be more conservative in detecting "A for A" | |
762 | queries. Dnsmasq checks if the name in a type=A query looks | |
763 | like a dotted-quad IP address and answers the query itself | |
764 | if so, rather than forwarding it. Previously dnsmasq | |
765 | relied in the library function inet_addr() to convert | |
766 | addresses, and that will accept some things which are | |
767 | confusing in this context, like 1.2.3 or even just | |
768 | 1234. Now we only do A for A processing for four decimal | |
769 | numbers delimited by dots. | |
770 | ||
771 | A couple of tweaks to fix compilation on Solaris. Thanks | |
772 | to Joel Macklow for help with this. | |
773 | ||
774 | Another Solaris compilation tweak, needed for Solaris | |
775 | 2009.06. Thanks to Lee Essen for that. | |
776 | ||
777 | Added extract packaging stuff from Lee Essen to | |
778 | contrib/Solaris10. | |
779 | ||
780 | Increased the default limit on number of leases to 1000 | |
781 | (from 150). This is mainly a defence against DoS attacks, | |
782 | and for the average "one for two class C networks" | |
783 | installation, IP address exhaustion does that just as | |
784 | well. Making the limit greater than the number of IP | |
785 | addresses available in such an installation removes a | |
786 | surprise which otherwise can catch people out. | |
787 | ||
788 | Removed extraneous trailing space in the value of the | |
789 | DNSMASQ_TIME_REMAINING DNSMASQ_LEASE_LENGTH and | |
790 | DNSMASQ_LEASE_EXPIRES environment variables. Thanks to | |
791 | Gildas Le Nadan for spotting this. | |
792 | ||
793 | Provide the network-id tags for a DHCP transaction to | |
794 | the lease-change script in the environment variable | |
795 | DNSMASQ_TAGS. A good suggestion from Gildas Le Nadan. | |
796 | ||
797 | Add support for RFC3925 "Vendor-Identifying Vendor | |
798 | Options". The syntax looks like this: | |
799 | --dhcp-option=vi-encap:<enterprise number>, ......... | |
800 | ||
801 | Add support to --dhcp-match to allow matching against | |
802 | RFC3925 "Vendor-Identifying Vendor Classes". The syntax | |
803 | looks like this: | |
804 | --dhcp-match=tag,vi-encap<enterprise number>, <value> | |
805 | ||
806 | Add some application specific code to assist in | |
807 | implementing the Broadband forum TR069 CPE-WAN | |
808 | specification. The details are in contrib/CPE-WAN/README | |
809 | ||
810 | Increase the default DNS packet size limit to 4096, as | |
811 | recommended by RFC5625 section 4.4.3. This can be | |
812 | reconfigured using --edns-packet-max if needed. Thanks to | |
813 | Francis Dupont for pointing this out. | |
814 | ||
815 | Rewrite query-ids even for TSIG signed packets, since | |
816 | this is allowed by RFC5625 section 4.5. | |
817 | ||
818 | Use getopt_long by default on OS X. It has been supported | |
819 | since version 10.3.0. Thanks to Arek Dreyer for spotting | |
820 | this. | |
821 | ||
822 | Added up-to-date startup configuration for MacOSX/launchd | |
823 | in contrib/MacOSX-launchd. Thanks to Arek Dreyer for | |
824 | providing this. | |
825 | ||
826 | Fix link error when including Dbus but excluding DHCP. | |
827 | Thanks to Oschtan for the bug report. | |
828 | ||
829 | Updated French translation. Thanks to Gildas Le Nadan. | |
830 | ||
831 | Updated Polish translation. Thanks to Jan Psota. | |
832 | ||
833 | Updated Spanish translation. Thanks to Chris Chatham. | |
834 | ||
835 | Fixed confusion about domains, when looking up DHCP hosts | |
836 | in /etc/hosts. This could cause spurious "Ignoring | |
837 | domain..." messages. Thanks to Fedor Kozhevnikov for | |
838 | finding and analysing the problem. | |
839 | ||
840 | ||
841 | version 2.51 | |
842 | Add support for internationalised DNS. Non-ASCII characters | |
843 | in domain names found in /etc/hosts, /etc/ethers and | |
844 | /etc/dnsmasq.conf will be correctly handled by translation to | |
845 | punycode, as specified in RFC3490. This function is only | |
846 | available if dnsmasq is compiled with internationalisation | |
847 | support, and adds a dependency on GNU libidn. Without i18n | |
848 | support, dnsmasq continues to be compilable with just | |
849 | standard tools. Thanks to Yves Dorfsman for the | |
850 | suggestion. | |
851 | ||
852 | Add two more environment variables for lease-change scripts: | |
853 | First, DNSMASQ_SUPPLIED_HOSTNAME; this is set to the hostname | |
854 | supplied by a client, even if the actual hostname used is | |
855 | over-ridden by dhcp-host or dhcp-ignore-names directives. | |
856 | Also DNSMASQ_RELAY_ADDRESS which gives the address of | |
857 | a DHCP relay, if used. | |
858 | Suggestions from Michael Rack. | |
859 | ||
860 | Fix regression which broke echo of relay-agent | |
861 | options. Thanks to Michael Rack for spotting this. | |
862 | ||
863 | Don't treat option 67 as being interchangeable with | |
864 | dhcp-boot parameters if it's specified as | |
865 | dhcp-option-force. | |
866 | ||
867 | Make the code to call scripts on lease-change compile-time | |
868 | optional. It can be switched off by editing src/config.h | |
869 | or building with "make COPTS=-DNO_SCRIPT". | |
870 | ||
871 | Make the TFTP server cope with filenames from Windows/DOS | |
872 | which use '\' as pathname separator. Thanks to Ralf for | |
873 | the patch. | |
874 | ||
875 | Updated Polish translation. Thanks to Jan Psota. | |
876 | ||
877 | Warn if an IP address is duplicated in /etc/ethers. Thanks | |
878 | to Felix Schwarz for pointing this out. | |
879 | ||
880 | Teach --conf-dir to take an option list of file suffices | |
881 | which will be ignored when scanning the directory. Useful | |
882 | for backup files etc. Thanks to Helmut Hullen for the | |
883 | suggestion. | |
884 | ||
885 | Add new DHCP option named tftpserver-address, which | |
886 | corresponds to the third argument of dhcp-boot. This | |
887 | allows the complete functionality of dhcp-boot to be | |
888 | replicated with dhcp-option. Useful when using | |
889 | dhcp-optsfile. | |
890 | ||
891 | Test which upstream nameserver to use every 10 seconds | |
892 | or 50 queries and not just when a query times out and | |
893 | is retried. This should improve performance when there | |
894 | is a slow nameserver in the list. Thanks to Joe for the | |
895 | suggestion. | |
896 | ||
897 | Don't do any PXE processing, even for clients with the | |
898 | correct vendorclass, unless at least one pxe-prompt or | |
899 | pxe-service option is given. This stops dnsmasq | |
900 | interfering with proxy PXE subsystems when it is just | |
901 | the DHCP server. Thanks to Spencer Clark for spotting this. | |
902 | ||
903 | Limit the blocksize used for TFTP transfers to a value | |
904 | which avoids packet fragmentation, based on the MTU of the | |
905 | local interface. Many netboot ROMs can't cope with | |
906 | fragmented packets. | |
907 | ||
908 | Honour dhcp-ignore configuration for PXE and proxy-PXE | |
909 | requests. Thanks to Niels Basjes for the bug report. | |
910 | ||
911 | Updated French translation. Thanks to Gildas Le Nadan. | |
912 | ||
913 | ||
914 | version 2.50 | |
915 | Fix security problem which allowed any host permitted to | |
916 | do TFTP to possibly compromise dnsmasq by remote buffer | |
917 | overflow when TFTP enabled. Thanks to Core Security | |
918 | Technologies and Iván Arce, Pablo Hernán Jorge, Alejandro | |
919 | Pablo Rodriguez, Martín Coco, Alberto Soliño Testa and | |
920 | Pablo Annetta. This problem has Bugtraq id: 36121 | |
921 | and CVE: 2009-2957 | |
922 | ||
923 | Fix a problem which allowed a malicious TFTP client to | |
924 | crash dnsmasq. Thanks to Steve Grubb at Red Hat for | |
925 | spotting this. This problem has Bugtraq id: 36120 and | |
926 | CVE: 2009-2958 | |
927 | ||
928 | ||
929 | version 2.49 | |
930 | Fix regression in 2.48 which disables the lease-change | |
931 | script. Thanks to Jose Luis Duran for spotting this. | |
932 | ||
933 | Log TFTP "file not found" errors. These were not logged, | |
934 | since a normal PXELinux boot generates many of them, but | |
935 | the lack of the messages seems to be more confusing than | |
936 | routinely seeing them when there is no real error. | |
937 | ||
938 | Update Spanish translation. Thanks to Chris Chatham. | |
939 | ||
940 | ||
941 | version 2.48 | |
942 | Archived the extensive, backwards, changelog to | |
943 | CHANGELOG.archive. The current changelog now runs from | |
944 | version 2.43 and runs conventionally. | |
945 | ||
946 | Fixed bug which broke binding of servers to physical | |
947 | interfaces when interface names were longer than four | |
948 | characters. Thanks to MURASE Katsunori for the patch. | |
949 | ||
950 | Fixed netlink code to check that messages come from the | |
951 | correct source, and not another userspace process. Thanks | |
952 | to Steve Grubb for the patch. | |
953 | ||
954 | Maintainability drive: removed bug and missing feature | |
955 | workarounds for some old platforms. Solaris 9, OpenBSD | |
956 | older than 4.1, Glibc older than 2.2, Linux 2.2.x and | |
957 | DBus older than 1.1.x are no longer supported. | |
958 | ||
959 | Don't read included configuration files more than once: | |
960 | allows complex configuration structures without problems. | |
961 | ||
962 | Mark log messages from the various subsystems in dnsmasq: | |
963 | messages from the DHCP subsystem now have the ident string | |
964 | "dnsmasq-dhcp" and messages from TFTP have ident | |
965 | "dnsmasq-tftp". Thanks to Olaf Westrik for the patch. | |
966 | ||
967 | Fix possible infinite DHCP protocol loop when an IP | |
968 | address nailed to a hostname (not a MAC address) and a | |
969 | host sometimes provides the name, sometimes not. | |
970 | ||
971 | Allow --addn-hosts to take a directory: all the files | |
972 | in the directory are read. Thanks to Phil Cornelius for | |
973 | the suggestion. | |
974 | ||
975 | Support --bridge-interface on all platforms, not just BSD. | |
976 | ||
977 | Added support for advanced PXE functions. It's now | |
978 | possible to define a prompt and menu options which will | |
979 | be displayed when a client PXE boots. It's also possible to | |
980 | hand-off booting to other boot servers. Proxy-DHCP, where | |
981 | dnsmasq just supplies the PXE information and another DHCP | |
982 | server does address allocation, is also allowed. See the | |
983 | --pxe-prompt and --pxe-service keywords. Thanks to | |
984 | Alkis Georgopoulos for the suggestion and Guilherme Moro | |
985 | and Michael Brown for assistance. | |
986 | ||
987 | Improvements to DHCP logging. Thanks to Tom Metro for | |
988 | useful suggestions. | |
989 | ||
990 | Add ability to build dnsmasq without DHCP support. To do | |
991 | this, edit src/config.h or build with | |
992 | "make COPTS=-DNO_DHCP". Thanks to Mahavir Jain for the patch. | |
993 | ||
994 | Added --test command-line switch - syntax check | |
995 | configuration files only. | |
996 | ||
997 | Updated French translation. Thanks to Gildas Le Nadan. | |
998 | ||
999 | ||
1000 | version 2.47 | |
1001 | Updated French translation. Thanks to Gildas Le Nadan. | |
1002 | ||
1003 | Fixed interface enumeration code to work on NetBSD | |
1004 | 5.0. Thanks to Roy Marples for the patch. | |
1005 | ||
1006 | Updated config.h to use the same location for the lease | |
1007 | file on NetBSD as the other *BSD variants. Also allow | |
1008 | LEASEFILE and CONFFILE symbols to be overriden in CFLAGS. | |
1009 | ||
1010 | Handle duplicate address detection on IPv6 more | |
1011 | intelligently. In IPv6, an interface can have an address | |
1012 | which is not usable, because it is still undergoing DAD | |
1013 | (such addresses are marked "tentative"). Attempting to | |
1014 | bind to an address in this state returns an error, | |
1015 | EADDRNOTAVAIL. Previously, on getting such an error, | |
1016 | dnsmasq would silently abandon the address, and never | |
1017 | listen on it. Now, it retries once per second for 20 | |
1018 | seconds before generating a fatal error. 20 seconds should | |
1019 | be long enough for any DAD process to complete, but can be | |
1020 | adjusted in src/config.h if necessary. Thanks to Martin | |
1021 | Krafft for the bug report. | |
1022 | ||
1023 | Add DBus introspection. Patch from Jeremy Laine. | |
1024 | ||
1025 | Update Dbus configuration file. Patch from Colin Walters. | |
1026 | Fix for this bug: | |
1027 | http://bugs.freedesktop.org/show_bug.cgi?id=18961 | |
1028 | ||
1029 | Support arbitrarily encapsulated DHCP options, suggestion | |
1030 | and initial patch from Samium Gromoff. This is useful for | |
1031 | (eg) gPXE, which expect all its private options to be | |
1032 | encapsulated inside a single option 175. So, eg, | |
1033 | ||
1034 | dhcp-option = encap:175, 190, "iscsi-client0" | |
1035 | dhcp-option = encap:175, 191, "iscsi-client0-secret" | |
1036 | ||
1037 | will provide iSCSI parameters to gPXE. | |
1038 | ||
1039 | Enhance --dhcp-match to allow testing of the contents of a | |
1040 | client-sent option, as well as its presence. This | |
1041 | application in mind for this is RFC 4578 | |
1042 | client-architecture specifiers, but it's generally useful. | |
1043 | Joey Korkames suggested the enhancement. | |
1044 | ||
1045 | Move from using the IP_XMIT_IF ioctl to IP_BOUND_IF on | |
1046 | OpenSolaris. Thanks to Bastian Machek for the heads-up. | |
1047 | ||
1048 | No longer complain about blank lines in | |
1049 | /etc/ethers. Thanks to Jon Nelson for the patch. | |
1050 | ||
1051 | Fix binding of servers to physical devices, eg | |
1052 | --server=/domain/1.2.3.4@eth0 which was broken from 2.43 | |
1053 | onwards unless --query-port=0 set. Thanks to Peter Naulls | |
1054 | for the bug report. | |
1055 | ||
1056 | Reply to DHCPINFORM requests even when the supplied ciaddr | |
1057 | doesn't fall in any dhcp-range. In this case it's not | |
1058 | possible to supply a complete configuration, but | |
1059 | individually-configured options (eg PAC) may be useful. | |
1060 | ||
1061 | Allow the source address of an alias to be a range: | |
1062 | --alias=192.168.0.0,10.0.0.0,255.255.255.0 maps the whole | |
1063 | subnet 192.168.0.0->192.168.0.255 to 10.0.0.0->10.0.0.255, | |
1064 | as before. | |
1065 | --alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0 | |
1066 | maps only the 192.168.0.10->192.168.0.40 region. Thanks to | |
1067 | Ib Uhrskov for the suggestion. | |
1068 | ||
1069 | Don't dynamically allocate DHCP addresses which may break | |
1070 | Windows. Addresses which end in .255 or .0 are broken in | |
1071 | Windows even when using supernetting. | |
1072 | --dhcp-range=192.168.0.1,192.168.1.254,255,255,254.0 means | |
1073 | 192.168.0.255 is a valid IP address, but not for Windows. | |
1074 | See Microsoft KB281579. We therefore no longer allocate | |
1075 | these addresses to avoid hard-to-diagnose problems. | |
1076 | ||
1077 | Update Polish translation. Thanks to Jan Psota. | |
1078 | ||
1079 | Delete the PID-file when dnsmasq shuts down. Note that by | |
1080 | this time, dnsmasq is normally not running as root, so | |
1081 | this will fail if the PID-file is stored in a root-owned | |
1082 | directory; such failure is silently ignored. To take | |
1083 | advantage of this feature, the PID-file must be stored in a | |
1084 | directory owned and write-able by the user running | |
1085 | dnsmasq. | |
1086 | ||
1087 | ||
1088 | version 2.46 | |
1089 | Allow --bootp-dynamic to take a netid tag, so that it may | |
1090 | be selectively enabled. Thanks to Olaf Westrik for the | |
1091 | suggestion. | |
1092 | ||
1093 | Remove ISC-leasefile reading code. This has been | |
1094 | deprecated for a long time, and last time I removed it, it | |
1095 | ended up going back by request of one user. This time, | |
1096 | it's gone for good; otherwise it would need to be | |
1097 | re-worked to support multiple domains (see below). | |
1098 | ||
1099 | Support DHCP clients in multiple DNS domains. This is a | |
1100 | long-standing request. Clients are assigned to a domain | |
1101 | based in their IP address. | |
1102 | ||
1103 | Add --dhcp-fqdn flag, which changes behaviour if DNS names | |
1104 | assigned to DHCP clients. When this is set, there must be | |
1105 | a domain associated with each client, and only | |
1106 | fully-qualified domain names are added to the DNS. The | |
1107 | advantage is that the only the FQDN needs to be unique, | |
1108 | so that two or more DHCP clients can share a hostname, as | |
1109 | long as they are in different domains. | |
1110 | ||
1111 | Set environment variable DNSMASQ_DOMAIN when invoking | |
1112 | lease-change script. This may be useful information to | |
1113 | have now that it's variable. | |
1114 | ||
1115 | Tighten up data-checking code for DNS packet | |
1116 | handling. Thanks to Steve Dodd who found certain illegal | |
1117 | packets which could crash dnsmasq. No memory overwrite was | |
1118 | possible, so this is not a security issue beyond the DoS | |
1119 | potential. | |
1120 | ||
1121 | Update example config dhcp option 47, the previous | |
1122 | suggestion generated an illegal, zero-length, | |
1123 | option. Thanks to Matthias Andree for finding this. | |
1124 | ||
1125 | Rewrite hosts-file reading code to remove the limit of | |
1126 | 1024 characters per line. John C Meuser found this. | |
1127 | ||
1128 | Create a net-id tag with the name of the interface on | |
1129 | which the DHCP request was received. | |
1130 | ||
1131 | Fixed minor memory leak in DBus code, thanks to Jeremy | |
1132 | Laine for the patch. | |
1133 | ||
1134 | Emit DBus signals as the DHCP lease database | |
1135 | changes. Thanks to Jeremy Laine for the patch. | |
1136 | ||
1137 | Allow for more that one MAC address in a dhcp-host | |
1138 | line. This configuration tells dnsmasq that it's OK to | |
1139 | abandon a DHCP lease of the fixed address to one MAC | |
1140 | address, if another MAC address in the dhcp-host statement | |
1141 | asks for an address. This is useful to give a fixed | |
1142 | address to a host which has two network interfaces | |
1143 | (say, a laptop with wired and wireless interfaces.) | |
1144 | It's very important to ensure that only one interface | |
1145 | at a time is up, since dnsmasq abandons the first lease | |
1146 | and re-uses the address before the leased time has | |
1147 | elapsed. John Gray suggested this. | |
1148 | ||
1149 | Tweak the response to a DHCP request packet with a wrong | |
1150 | server-id when --dhcp-authoritative is set; dnsmasq now | |
1151 | returns a DHCPNAK, rather than silently ignoring the | |
1152 | packet. Thanks to Chris Marget for spotting this | |
1153 | improvement. | |
1154 | ||
1155 | Add --cname option. This provides a limited alias | |
1156 | function, usable for DHCP names. Thanks to AJ Weber for | |
1157 | suggestions on this. | |
1158 | ||
1159 | Updated contrib/webmin with latest version from Neil | |
1160 | Fisher. | |
1161 | ||
1162 | Updated Polish translation. Thanks to Jan Psota. | |
1163 | ||
1164 | Correct the text names for DHCP options 64 and 65 to be | |
1165 | "nis+-domain" and "nis+-servers". | |
1166 | ||
1167 | Updated Spanish translation. Thanks to Chris Chatham. | |
1168 | ||
1169 | Force re-reading of /etc/resolv.conf when an "interface | |
1170 | up" event occurs. | |
1171 | ||
1172 | ||
1173 | version 2.45 | |
1174 | Fix total DNS failure in release 2.44 unless --min-port | |
1175 | specified. Thanks to Steven Barth and Grant Coady for | |
1176 | bugreport. Also reject out-of-range port spec, which could | |
1177 | break things too: suggestion from Gilles Espinasse. | |
1178 | ||
1179 | ||
1180 | version 2.44 | |
1181 | Fix crash when unknown client attempts to renew a DHCP | |
1182 | lease, problem introduced in version 2.43. Thanks to | |
1183 | Carlos Carvalho for help chasing this down. | |
1184 | ||
1185 | Fix potential crash when a host which doesn't have a lease | |
1186 | does DHCPINFORM. Again introduced in 2.43. This bug has | |
1187 | never been reported in the wild. | |
1188 | ||
1189 | Fix crash in netlink code introduced in 2.43. Thanks to | |
1190 | Jean Wolter for finding this. | |
1191 | ||
1192 | Change implementation of min_port to work even if min-port | |
1193 | is large. | |
1194 | ||
1195 | Patch to enable compilation of latest Mac OS X. Thanks to | |
1196 | David Gilman. | |
1197 | ||
1198 | Update Spanish translation. Thanks to Christopher Chatham. | |
1199 | ||
1200 | ||
1201 | version 2.43 | |
1202 | Updated Polish translation. Thanks to Jan Psota. | |
1203 | ||
1204 | Flag errors when configuration options are repeated | |
1205 | illegally. | |
1206 | ||
1207 | Further tweaks for GNU/kFreeBSD | |
1208 | ||
1209 | Add --no-wrap to msgmerge call - provides nicer .po file | |
1210 | format. | |
1211 | ||
1212 | Honour lease-time spec in dhcp-host lines even for | |
1213 | BOOTP. The user is assumed to known what they are doing in | |
1214 | this case. (Hosts without the time spec still get infinite | |
1215 | leases for BOOTP, over-riding the default in the | |
1216 | dhcp-range.) Thanks to Peter Katzmann for uncovering this. | |
1217 | ||
1218 | Fix problem matching relay-agent ids. Thanks to Michael | |
1219 | Rack for the bug report. | |
1220 | ||
1221 | Add --naptr-record option. Suggestion from Johan | |
1222 | Bergquist. | |
1223 | ||
1224 | Implement RFC 5107 server-id-override DHCP relay agent | |
1225 | option. | |
1226 | ||
1227 | Apply patches from Stefan Kruger for compilation on | |
1228 | Solaris 10 under Sun studio. | |
1229 | ||
1230 | Yet more tweaking of Linux capability code, to suppress | |
1231 | pointless wingeing from kernel 2.6.25 and above. | |
1232 | ||
1233 | Improve error checking during startup. Previously, some | |
1234 | errors which occurred during startup would be worked | |
1235 | around, with dnsmasq still starting up. Some were logged, | |
1236 | some silent. Now, they all cause a fatal error and dnsmasq | |
1237 | terminates with a non-zero exit code. The errors are those | |
1238 | associated with changing uid and gid, setting process | |
1239 | capabilities and writing the pidfile. Thanks to Uwe | |
1240 | Gansert and the Suse security team for pointing out | |
1241 | this improvement, and Bill Reimers for good implementation | |
1242 | suggestions. | |
1243 | ||
1244 | Provide NO_LARGEFILE compile option to switch off largefile | |
1245 | support when compiling against versions of uclibc which | |
1246 | don't support it. Thanks to Stephane Billiart for the patch. | |
1247 | ||
1248 | Implement random source ports for interactions with | |
1249 | upstream nameservers. New spoofing attacks have been found | |
1250 | against nameservers which do not do this, though it is not | |
1251 | clear if dnsmasq is vulnerable, since to doesn't implement | |
1252 | recursion. By default dnsmasq will now use a different | |
1253 | source port (and socket) for each query it sends | |
1254 | upstream. This behaviour can suppressed using the | |
1255 | --query-port option, and the old default behaviour | |
1256 | restored using --query-port=0. Explicit source-port | |
1257 | specifications in --server configs are still honoured. | |
1258 | ||
1259 | Replace the random number generator, for better | |
1260 | security. On most BSD systems, dnsmasq uses the | |
1261 | arc4random() RNG, which is secure, but on other platforms, | |
1262 | it relied on the C-library RNG, which may be | |
1263 | guessable and therefore allow spoofing. This release | |
1264 | replaces the libc RNG with the SURF RNG, from Daniel | |
1265 | J. Berstein's DJBDNS package. | |
1266 | ||
1267 | Don't attempt to change user or group or set capabilities | |
1268 | if dnsmasq is run as a non-root user. Without this, the | |
1269 | change from soft to hard errors when these fail causes | |
1270 | problems for non-root daemons listening on high | |
1271 | ports. Thanks to Patrick McLean for spotting this. | |
1272 | ||
1273 | Updated French translation. Thanks to Gildas Le Nadan. | |
1274 | ||
1275 | ||
1276 | version 2.42 | |
1277 | The changelog for version 2.42 and earlier is | |
1278 | available in CHANGELOG.archive. |