2 Update German translation. Thanks to Conrad Kostecki.
4 Cope with router-solict packets wich don't have a valid
5 source address. Thanks to Vladislav Grishenko for the patch.
7 Fixed bug which caused missing periodic router
8 advertisements with some configurations. Thanks to
9 Vladislav Grishenko for the patch.
11 Fixed bug which broke DHCPv6/RA with prefix lengths
12 which are not divisible by 8. Thanks to Andre Coetzee
15 Fix non-response to router-solicitations when
16 router-advertisement configured, but DHCPv6 not
17 configured. Thanks to Marien Zwart for the patch.
21 Re-write interface discovery code on *BSD to use
22 getifaddrs. This is more portable, more straightforward,
23 and allows us to find the prefix length for IPv6
26 Add ra-names, ra-stateless and slaac keywords for DHCPv6.
27 Dnsmasq can now synthesise AAAA records for dual-stack
28 hosts which get IPv6 addresses via SLAAC. It is also now
29 possible to use SLAAC and stateless DHCPv6, and to
30 tell clients to use SLAAC addresses as well as DHCP ones.
31 Thanks to Dave Taht for help with this.
33 Add --dhcp-duid to allow DUID-EN uids to be used.
35 Explicity send DHCPv6 replies to the correct port, instead
36 of relying on clients to send requests with the correct
37 source address, since at least one client in the wild gets
38 this wrong. Thanks to Conrad Kostecki for help tracking
41 Send a preference value of 255 in DHCPv6 replies when
42 --dhcp-authoritative is in effect. This tells clients not
43 to wait around for other DHCP servers.
45 Better logging of DHCPv6 options.
47 Add --host-record. Thanks to Rob Zwissler for the
50 Invoke the DHCP script with action "tftp" when a TFTP file
51 transfer completes. The size of the file, address to which
52 it was sent and complete pathname are supplied. Note that
53 version 2.60 introduced some script incompatibilties
54 associated with DHCPv6, and this is a further change. To
55 be safe, scripts should ignore unknown actions, and if
56 not IPv6-aware, should exit if the environment
57 variable DNSMASQ_IAID is set. The use-case for this is
58 to track netboot/install. Suggestion from Shantanu
61 Update contrib/port-forward/dnsmasq-portforward to reflect
64 Set the environment variable DNSMASQ_LOG_DHCP when running
65 the script id --log-dhcp is in effect, so that script can
66 taylor their logging verbosity. Suggestion from Malte
69 Arrange that addresses specified with --listen-address
70 work even if there is no interface carrying the
71 address. This is chiefly useful for IPv4 loopback
72 addresses, where any address in 127.0.0.0/8 is a valid
73 loopback address, but normally only 127.0.0.1 appears on
74 the lo interface. Thanks to Mathieu Trudel-Lapierre for
75 the idea and initial patch.
77 Fix crash, introduced in 2.60, when a DHCPINFORM is
78 received from a network which has no valid dhcp-range.
79 Thanks to Stephane Glondu for the bug report.
81 Add a new DHCP lease time keyword, "deprecated" for
82 --dhcp-range. This is only valid for IPv6, and sets the
83 preffered lease time for both DHCP and RA to zero. The
84 effect is that clients can continue to use the address
85 for existing connections, but new connections will use
86 other addresses, if they exist. This makes hitless
87 renumbering at least possible.
89 Fix bug in address6_available() which caused DHCPv6 lease
90 aquisition to fail if more than one dhcp-range in use.
92 Provide RDNSS and DNSSL data in router advertisements,
93 using the settings provided for DHCP options
94 option6:domain-search and option6:dns-server.
96 Tweak logo/favicon.ico to add some transparency. Thanks to
97 SamLT for work on this.
99 Don't cache data from non-recursive nameservers, since it
100 may erroneously look like a valid CNAME to a non-exitant
101 name. Thanks to Ben Winslow for finding this.
103 Call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP
104 on exactly one interface and --bind-interfaces is set. This
105 makes the OpenStack use-case of one dnsmasq per virtual
106 interface work. This is only available on Linux; it's not
107 supported on other platforms. Thanks to Vishvananda Ishaya
108 and the OpenStack team for the suggestion.
110 Updated French translation. Thanks to Gildas Le Nadan.
112 Give correct from-cache answers to explict CNAME queries.
113 Thanks to Rob Zwissler for spotting this.
115 Add --tftp-lowercase option. Thanks to Oliver Rath for the
118 Ensure that the DBus DhcpLeaseUpdated events are generated
119 when a lease goes through INIT_REBOOT state, even if the
120 dhcp-script is not in use. Thanks to Antoaneta-Ecaterina
123 Fix failure of TFTP over IPv4 on OpenBSD platform. Thanks
124 to Brad Smith for spotting this.
128 Fix compilation problem in Mac OS X Lion. Thanks to Olaf
129 Flebbe for the patch.
131 Fix DHCP when using --listen-address with an IP address
132 which is not the primary address of an interface.
134 Add --dhcp-client-update option.
136 Add Lua integration. Dnsmasq can now execute a DHCP
137 lease-change script written in Lua. This needs to be
138 enabled at compile time by setting HAVE_LUASCRIPT in
139 src/config.h or running "make COPTS=-DHAVE_LUASCRIPT"
140 Thanks to Jan-Piet Mens for the idea and proof-of-concept
143 Tidied src/config.h to distinguish between
144 platform-dependent compile-time options which are selected
145 automatically, and builder-selectable compile time
146 options. Document the latter better, and describe how to
147 set them from the make command line.
149 Tidied up IPPROTO_IP/SOL_IP (and IPv6 equivalent)
150 confusion. IPPROTO_IP works everywhere now.
152 Set TOS on DHCP sockets, this improves things on busy
153 wireless networks. Thanks to Dave Taht for the patch.
155 Determine VERSION automatically based on git magic:
156 release tags or hash values.
158 Improve start-up speed when reading large hosts files
159 containing many distinct addresses.
161 Fix problem if dnsmasq is started without the stdin,
162 stdout and stderr file descriptors open. This can manifest
163 itself as 100% CPU use. Thanks to Chris Moore for finding
166 Fix shell-scripting bug in bld/pkg-wrapper. Thanks to
167 Mark Mitchell for the patch.
169 Allow the TFP server or boot server in --pxe-service, to
170 be a domain name instead of an IP address. This allows for
171 round-robin to multiple servers, in the same way as
172 --dhcp-boot. A good suggestion from Cristiano Cumer.
174 Support BUILDDIR variable in the Makefile. Allows builds
175 for multiple archs from the same source tree with eg.
176 make BUILDDIR=linux (relative to dnsmasq tree)
177 make BUILDDIR=/tmp/openbsd (absolute path)
178 If BUILDDIR is not set, compilation happens in the src
179 directory, as before. Suggestion from Mark Mitchell.
181 Support DHCPv6. Support is there for the sort of things
182 the existing v4 server does, including tags, options,
183 static addresses and relay support. Missing is prefix
184 delegation, which is probably not required in the dnsmasq
185 niche, and an easy way to accept prefix delegations from
186 an upstream DHCPv6 server, which is. Future plans include
187 support for DHCPv6 router option and MAC address option
188 (to make selecting clients by MAC address work like IPv4).
189 These will be added as the standards mature.
190 This code has been tested, but this is the first release,
191 so don't bet the farm on it just yet. Many thanks to all
192 testers who have got it this far.
194 Support IPv6 router advertisements. This is a
195 simple-minded implementation, aimed at providing the
196 vestigial RA needed to go alongside IPv6. Is picks up
197 configuration from the DHCPv6 conf, and should just need
198 enabling with --enable-ra.
200 Fix long-standing wrinkle with --localise-queries that
201 could result in wrong answers when DNS packets arrive
202 via an interface other than the expected one. Thanks to
203 Lorenzo Milesi and John Hanks for spotting this one.
205 Update French translation. Thanks to Gildas Le Nadan.
207 Update Polish translation. Thanks to Jan Psota.
211 Fix regression in 2.58 which caused failure to start up
212 with some combinations of dnsmasq config and IPv6 kernel
213 network config. Thanks to Brielle Bruns for the bug
216 Improve dnsmasq's behaviour when network interfaces are
217 still doing duplicate address detection (DAD). Previously,
218 dnsmasq would wait up to 20 seconds at start-up for the
219 DAD state to terminate. This is broken for bridge
220 interfaces on recent Linux kernels, which don't start DAD
221 until the bridge comes up, and so can take arbitrary
222 time. The new behaviour lets dnsmasq poll for an arbitrary
223 time whilst providing service on other interfaces. Thanks
224 to Stephen Hemminger for pointing out the problem.
228 Provide a definition of the SA_SIZE macro where it's
229 missing. Fixes build failure on openBSD.
231 Don't include a zero terminator at the end of messages
232 sent to /dev/log when /dev/log is a datagram socket.
233 Thanks to Didier Rabound for spotting the problem.
235 Add --dhcp-sequential-ip flag, to force allocation of IP
236 addresses in ascending order. Note that the default
237 pseudo-random mode is in general better but some
238 server-deployment applications need this.
240 Fix problem where a server-id of 0.0.0.0 is sent to a
241 client when a dhcp-relay is in use if a client renews a
242 lease after dnsmasq restart and before any clients on the
243 subnet get a new lease. Thanks to Mike Ruiz for assistance
244 in chasing this one down.
246 Don't return NXDOMAIN to an AAAA query if we have CNAME
247 which points to an A record only: NODATA is the correct
248 reply in this case. Thanks to Tom Fernandes for spotting
251 Relax the need to supply a netmask in --dhcp-range for
252 networks which use a DHCP relay. Whilst this is still
253 desireable, in the absence of a netmask dnsmasq will use
254 a default based on the class (A, B, or C) of the address.
255 This should at least remove a cause of mysterious failure
256 for people using RFC1918 addresses and relays.
258 Add support for Linux conntrack connection marking. If
259 enabled with --conntrack, the connection mark for incoming
260 DNS queries will be copied to the outgoing connections
261 used to answer those queries. This allows clever firewall
262 and accounting stuff. Only available if dnsmasq is
263 compiled with HAVE_CONNTRACK and adds a dependency on
264 libnetfilter-conntrack. Thanks to Ed Wildgoose for the
265 initial idea, testing and sponsorship of this function.
267 Provide a sane error message when someone attempts to
268 match a tag in --dhcp-host.
270 Tweak the behaviour of --domain-needed, to avoid problems
271 with recursive nameservers downstream of dnsmasq. The new
272 behaviour only stops A and AAAA queries, and returns
273 NODATA rather than NXDOMAIN replies.
275 Efficiency fix for very large DHCP configurations, thanks
276 to James Gartrell and Mike Ruiz for help with this.
278 Allow the TFTP-server address in --dhcp-boot to be a
279 domain-name which is looked up in /etc/hosts. This can
280 give multiple IP addresses which are used round-robin,
281 thus doing TFTP server load-balancing. Thanks to Sushil
282 Agrawal for the patch.
284 When two tagged dhcp-options for a particular option
285 number are both valid, use the one which is valid without
286 a tag from the dhcp-range. Allows overriding of the value
287 of a DHCP option for a particular host as well as
288 per-network values. So
289 --dhcp-range=set:interface1,......
290 --dhcp-host=set:myhost,.....
291 --dhcp-option=tag:interface1,option:nis-domain,"domain1"
292 --dhcp-option=tag:myhost,option:nis-domain,"domain2"
293 will set the NIS-domain to domain1 for hosts in the range, but
294 override that to domain2 for a particular host.
296 Fix bug which resulted in truncated files and timeouts for
297 some TFTP transfers. The bug only occurs with netascii
298 transfers and needs an unfortunate relationship between
299 file size, blocksize and the number of newlines in the
300 last block before it manifests itself. Many thanks to
301 Alkis Georgopoulos for spotting the problem and providing
302 a comprehensive test-case.
304 Fix regression in TFTP server on *BSD platforms introduced
305 in version 2.56, due to confusion with sockaddr
306 length. Many thanks to Loïc Pefferkorn for finding this.
308 Support scope-ids in IPv6 addresses of nameservers from
309 /etc/resolv.conf and in --server options. Eg
310 nameserver fe80::202:a412:4512:7bbf%eth0 or
311 server=fe80::202:a412:4512:7bbf%eth0. Thanks to
312 Michael Stapelberg for the suggestion.
314 Update Polish translation, thanks to Jan Psota.
316 Update French translation. Thanks to Gildas Le Nadan.
320 Add patches to allow build under Android.
322 Provide our own header for the DNS protocol, rather than
323 relying on arpa/nameser.h. This has proved more or less
324 defective over the years and the final straw is that it's
325 effectively empty on Android.
327 Fix regression in 2.56 which caused hex constants in
328 configuration to be rejected if they contain the '*'
331 Correct wrong casts of arguments to ctype.h functions,
332 isdigit(), isxdigit() etc. Thanks to Matthias Andree for
335 Allow build with IDN support independently from i18n.
336 IDN support continues to be included automatically
337 when i18n is included.
338 'make COPTS=-DHAVE_IDN' is the magic incantation.
340 Modify check on extraneous command line junk (added in
341 2.56) so that it doesn't complain about extra _empty_
342 arguments. Otherwise this breaks libvirt.
346 Add a patch to allow dnsmasq to get interface names right in a
347 Solaris zone. Thanks to Dj Padzensky for this.
349 Improve data-type parsing heuristics so that
350 --dhcp-option=option:domain-search,.
351 treats the value as a string and not an IP address.
352 Thanks to Clemens Fischer for spotting that.
354 Add IPv6 support to the TFTP server. Many thanks to Jan
355 'RedBully' Seiffert for the patches.
357 Log DNS queries at level LOG_INFO, rather then
358 LOG_DEBUG. This makes things consistent with DHCP
359 logging. Thanks to Adam Pribyl for spotting the problem.
361 Ensure that dnsmasq terminates cleanly when using
362 --syslog-async even if it cannot make a connection to the
365 Add --add-mac option. This is to support currently
366 experimental DNS filtering facilities. Thanks to Benjamin
367 Petrin for the orignal patch.
369 Fix bug which meant that tags were ignored in dhcp-range
370 configuration specifying PXE-proxy service. Thanks to
371 Cristiano Cumer for spotting this.
373 Raise an error if there is extra junk, not part of an
374 option, on the command line.
376 Flag a couple of log messages in cache.c as coming from
377 the DHCP subsystem. Thanks to Olaf Westrik for the patch.
379 Omit timestamps from logs when a) logging to stderr and
380 b) --keep-in-forground is set. The logging facility on the
381 other end of stderr can be assumned to supply them. Thanks
382 to John Hallam for the patch.
384 Don't complain about strings longer than 255 characters in
385 --txt-record, just split the long strings into 255
386 character chunks instead.
388 Fix crash on double-free. This bug can only happen when
389 dhcp-script is in use and then only in rare circumstances
390 triggered by high DHCP transaction rate and a slow
391 script. Thanks to Ferenc Wagner for finding the problem.
393 Only log that a file has been sent by TFTP after the
394 transfer has completed succesfully.
396 A good suggestion from Ferenc Wagner: extend
397 the --domain option to allow this sort of thing:
398 --domain=thekelleys.org.uk,192.168.0.0/24,local
399 which automatically creates
400 --local=/thekelleys.org.uk/
401 --local=/0.168.192.in-addr.arpa/
403 Tighten up syntax checking of hex contants in the config
404 file. Thanks to Fred Damen for spotting this.
406 Add dnsmasq logo/icon, contributed by Justin Swift. Many
409 Never cache DNS replies which have the 'cd' bit set, or
410 which result from queries forwarded with the 'cd' bit
411 set. The 'cd' bit instructs a DNSSEC validating server
412 upstream to ignore signature failures and return replies
413 anyway. Without this change it's possible to pollute the
414 dnsmasq cache with bad data by making a query with the
415 'cd' bit set and subsequent queries would return this data
416 without its being marked as suspect. Thanks to Anders
417 Kaseorg for pointing out this problem.
419 Add --proxy-dnssec flag, for compliance with RFC
420 4035. Dnsmasq will now clear the 'ad' bit in answers returned
421 from upstream validating nameservers unless this option is
424 Allow a filename of "-" for --conf-file to read
425 stdin. Suggestion from Timothy Redaelli.
427 Rotate the order of SRV records in replies, to provide
428 round-robin load balancing when all the priorities are
429 equal. Thanks to Peter McKinney for the suggestion.
432 contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist
433 so that it doesn't log all queries to a file by
434 default. Thanks again to Peter McKinney.
436 By default, setting an IPv4 address for a domain but not
437 an IPv6 address causes dnsmasq to return
438 an NODATA reply for IPv6 (or vice-versa). So
439 --address=/google.com/1.2.3.4 stops IPv6 queries for
440 *google.com from being forwarded. Make it possible to
441 override this behaviour by defining the sematics if the
442 same domain appears in both --server and --address.
443 In that case, the --address has priority for the address
444 family in which is appears, but the --server has priority
445 of the address family which doesn't appear in --adddress
447 --address=/google.com/1.2.3.4
448 --server=/google.com/#
449 will return 1.2.3.4 for IPv4 queries for *.google.com but
450 forward IPv6 queries to the normal upstream nameserver.
451 Similarly when setting an IPv6 address
452 only this will allow forwarding of IPv4 queries. Thanks to
453 William for pointing out the need for this.
455 Allow more than one --dhcp-optsfile and --dhcp-hostsfile
456 and make them understand directories as arguments in the
457 same way as --addn-hosts. Suggestion from John Hanks.
459 Ignore rebinding requests for leases we don't know
460 about. Rebind is broadcast, so we might get to overhear a
461 request meant for another DHCP server. NAKing this is
462 wrong. Thanks to Brad D'Hondt for assistance with this.
464 Fix cosmetic bug which produced strange output when
465 dumping cache statistics with some configurations. Thanks
466 to Fedor Kozhevnikov for spotting this.
470 Fix crash when /etc/ethers is in use. Thanks to
471 Gianluigi Tiesi for finding this.
473 Fix crash in netlink_multicast(). Thanks to Arno Wald for
476 Allow the empty domain "." in dhcp domain-search (119)
481 There is no version 2.54 to avoid confusion with 2.53,
482 which incorrectly identifies itself as 2.54.
486 Fix failure to compile on Debian/kFreeBSD. Thanks to
487 Axel Beckert and Petr Salinger.
489 Fix code to avoid scary strict-aliasing warnings
490 generated by gcc 4.4.
492 Added FAQ entry warning about DHCP failures with Vista
493 when firewalls block 255.255.255.255.
495 Fixed bug which caused bad things to happen if a
496 resolv.conf file which exists is subsequently removed.
497 Thanks to Nikolai Saoukh for the patch.
499 Rationalised the DHCP tag system. Every configuration item
500 which can set a tag does so by adding "set:<tag>" and
501 every configuration item which is conditional on a tag is
502 made so by "tag:<tag>". The NOT operator changes to '!',
503 which is a bit more intuitive too. Dhcp-host directives
504 can set more than one tag now. The old '#' NOT,
505 "net:" prefix and no-prefixes are still honoured, so
506 no existing config file needs to be changed, but
507 the documentation and new-style config files should be
510 Added --tag-if to allow boolean operations on tags.
511 This allows complicated logic to be clearer and more
512 general. A great suggestion from Richard Voigt.
514 Add broadcast/unicast information to DHCP logging.
516 Allow --dhcp-broadcast to be unconditional.
518 Fixed incorrect behaviour with NOT <tag> conditionals in
519 dhcp-options. Thanks to Max Turkewitz for assistance
522 If we send vendor-class encapsulated options based on the
523 vendor-class supplied by the client, and no explicit
524 vendor-class option is given, echo back the vendor-class
527 Fix bug which stopped dnsmasq from matching both a
528 circuitid and a remoteid. Thanks to Ignacio Bravo for
531 Add --dhcp-proxy, which makes it possible to configure
532 dnsmasq to use a DHCP relay agent as a full proxy, with
533 all DHCP messages passing through the proxy. This is
534 useful if the relay adds extra information to the packets
535 it forwards, but cannot be configured with the RFC 5107
536 server-override option.
538 Added interface:<iface name> part to dhcp-range. The
539 semantics of this are very odd at first sight, but it
540 allows a single line of the form
541 dhcp-range=interface:virt0,192.168.0.4,192.168.0.200
542 to be added to dnsmasq configuration which then supplies
543 DHCP and DNS services to that interface, without affecting
544 what services are supplied to other interfaces and
545 irrespective of the existance or lack of
546 interface=<interface>
547 lines elsewhere in the dnsmasq configuration. The idea is
548 that such a line can be added automatically by libvirt
549 or equivalent systems, without disturbing any manual
552 Similarly to the above, allow --enable-tftp=<interface>
554 Allow a TFTP root to be set separately for requests via
555 different interfaces, --tftp-root=<path>,<interface>
557 Correctly handle and log clashes between CNAMES and
558 DNS names being given to DHCP leases. This fixes a bug
559 which caused nonsense IP addresses to be logged. Thanks to
560 Sergei Zhirikov for finding and analysing the problem.
562 Tweak flush_log so as to avoid leaving the log
563 file in non-blocking mode. O_NONBLOCK is a property of the
564 file, not the process/descriptor.
566 Fix contrib/Solaris10/create_package
567 (/usr/man -> /usr/share/man) Thanks to Vita Batrla.
569 Fix a problem where, if a client got a lease, then went
570 to another subnet and got another lease, then moved back,
571 it couldn't resume the old lease, but would instead get
572 a new address. Thanks to Leonardo Rodrigues for spotting
573 this and testing the fix.
575 Fix weird bug which sometimes omitted certain characters
576 from the start of quoted strings in dhcp-options. Thanks
577 to Dayton Turner for spotting the problem.
579 Add facility to redirect some domains to the standard
580 upstream servers: this allows something like
581 --server=/google.com/1.2.3.4 --server=/www.google.com/#
582 which will send queries for *.google.com to 1.2.3.4,
583 except *www.google.com which will be forwarded as usual.
584 Thanks to AJ Weber for prompting this addition.
586 Improve the hash-algorithm used to generate IP addresses
587 from MAC addresses during initial DHCP address
588 allocation. This improves performance when large numbers
589 of hosts with similar MAC addresses all try and get an IP
590 address at the same time. Thanks to Paul Smith for his
593 Tweak DHCP code so that --bridge-interface can be used to
594 select which IP alias of an interface should be used for
595 DHCP purposes on Linux. If eth0 has an alias eth0:dhcp
596 then adding --bridge-interface=eth0:dhcp,eth0 will use
597 the address of eth0:dhcp to determine the correct subnet
598 for DHCP address allocation. Thanks to Pawel Golaszewski
599 for prompting this and Eric Cooper for further testing.
601 Add --dhcp-generate-names. Suggestion by Ferenc Wagner.
603 Tweak DNS server selection algorithm when there is more
604 than one server available for a domain, eg.
605 --server=/mydomain/1.1.1.1
606 --server=/mydomain/2.2.2.2
607 Thanks to Alberto Cuesta-Canada for spotting a weakness
610 Add --max-ttl. Thanks to Fredrik Ringertz for the patch.
612 Allow --log-facility=- to force all logging to
613 stderr. Suggestion from Clemens Fischer.
615 Fix regression which caused configuration like
616 --address=/.domain.com/1.2.3.4 to be rejected. The dot to the
617 left of the domain has been implied and not required for a
618 long time, but it should be accepted for backward
619 compatibility. Thanks to Andrew Burcin for spotting this.
621 Add --rebind-domain-ok and --rebind-localhost-ok.
622 Suggestion from Clemens Fischer.
624 Log replies to queries of type TXT, when --log-queries
627 Fix compiler warnings when compiled with -DNO_DHCP. Thanks
628 to Shantanu Gadgil for the patch.
630 Updated French translation. Thanks to Gildas Le Nadan.
632 Updated Polish translation. Thanks to Jan Psota.
634 Updated German translation. Thanks to Matthias Andree.
636 Added contrib/static-arp, thanks to Darren Hoo.
638 Fix corruption of the domain when a name from /etc/hosts
639 overrides one supplied by a DHCP client. Thanks to Fedor
640 Kozhevnikov for spotting the problem.
642 Updated Spanish translation. Thanks to Chris Chatham.
646 Work around a Linux kernel bug which insists that the
647 length of the option passed to setsockopt must be at least
648 sizeof(int) bytes, even if we're calling SO_BINDTODEVICE
649 and the device name is "lo". Note that this is fixed
650 in kernel 2.6.31, but the workaround is harmless and
651 allows earlier kernels to be used. Also fix dnsmasq
652 bug which reported the wrong address when this failed.
653 Thanks to Fedor for finding this.
655 The API for IPv6 PKTINFO changed around Linux kernel
656 2.6.14. Workaround the case where dnsmasq is compiled
657 against newer headers, but then run on an old kernel:
658 necessary for some *WRT distros.
660 Re-read the set of network interfaces when re-loading
661 /etc/resolv.conf if --bind-interfaces is not set. This
662 handles the case that loopback interfaces do not exist
663 when dnsmasq is first started.
665 Tweak the PXE code to support port 4011. This should
666 reduce broadcasts and make things more reliable when other
667 servers are around. It also improves inter-operability
668 with certain clients.
670 Make a pxe-service configuration with no filename or boot
671 service type legal: this does a local boot. eg.
672 pxe-service=x86PC, "Local boot"
674 Be more conservative in detecting "A for A"
675 queries. Dnsmasq checks if the name in a type=A query looks
676 like a dotted-quad IP address and answers the query itself
677 if so, rather than forwarding it. Previously dnsmasq
678 relied in the library function inet_addr() to convert
679 addresses, and that will accept some things which are
680 confusing in this context, like 1.2.3 or even just
681 1234. Now we only do A for A processing for four decimal
682 numbers delimited by dots.
684 A couple of tweaks to fix compilation on Solaris. Thanks
685 to Joel Macklow for help with this.
687 Another Solaris compilation tweak, needed for Solaris
688 2009.06. Thanks to Lee Essen for that.
690 Added extract packaging stuff from Lee Essen to
693 Increased the default limit on number of leases to 1000
694 (from 150). This is mainly a defence against DoS attacks,
695 and for the average "one for two class C networks"
696 installation, IP address exhaustion does that just as
697 well. Making the limit greater than the number of IP
698 addresses available in such an installation removes a
699 surprise which otherwise can catch people out.
701 Removed extraneous trailing space in the value of the
702 DNSMASQ_TIME_REMAINING DNSMASQ_LEASE_LENGTH and
703 DNSMASQ_LEASE_EXPIRES environment variables. Thanks to
704 Gildas Le Nadan for spotting this.
706 Provide the network-id tags for a DHCP transaction to
707 the lease-change script in the environment variable
708 DNSMASQ_TAGS. A good suggestion from Gildas Le Nadan.
710 Add support for RFC3925 "Vendor-Identifying Vendor
711 Options". The syntax looks like this:
712 --dhcp-option=vi-encap:<enterprise number>, .........
714 Add support to --dhcp-match to allow matching against
715 RFC3925 "Vendor-Identifying Vendor Classes". The syntax
717 --dhcp-match=tag,vi-encap<enterprise number>, <value>
719 Add some application specific code to assist in
720 implementing the Broadband forum TR069 CPE-WAN
721 specification. The details are in contrib/CPE-WAN/README
723 Increase the default DNS packet size limit to 4096, as
724 recommended by RFC5625 section 4.4.3. This can be
725 reconfigured using --edns-packet-max if needed. Thanks to
726 Francis Dupont for pointing this out.
728 Rewrite query-ids even for TSIG signed packets, since
729 this is allowed by RFC5625 section 4.5.
731 Use getopt_long by default on OS X. It has been supported
732 since version 10.3.0. Thanks to Arek Dreyer for spotting
735 Added up-to-date startup configuration for MacOSX/launchd
736 in contrib/MacOSX-launchd. Thanks to Arek Dreyer for
739 Fix link error when including Dbus but excluding DHCP.
740 Thanks to Oschtan for the bug report.
742 Updated French translation. Thanks to Gildas Le Nadan.
744 Updated Polish translation. Thanks to Jan Psota.
746 Updated Spanish translation. Thanks to Chris Chatham.
748 Fixed confusion about domains, when looking up DHCP hosts
749 in /etc/hosts. This could cause spurious "Ignoring
750 domain..." messages. Thanks to Fedor Kozhevnikov for
751 finding and analysing the problem.
755 Add support for internationalised DNS. Non-ASCII characters
756 in domain names found in /etc/hosts, /etc/ethers and
757 /etc/dnsmasq.conf will be correctly handled by translation to
758 punycode, as specified in RFC3490. This function is only
759 available if dnsmasq is compiled with internationalisation
760 support, and adds a dependency on GNU libidn. Without i18n
761 support, dnsmasq continues to be compilable with just
762 standard tools. Thanks to Yves Dorfsman for the
765 Add two more environment variables for lease-change scripts:
766 First, DNSMASQ_SUPPLIED_HOSTNAME; this is set to the hostname
767 supplied by a client, even if the actual hostname used is
768 over-ridden by dhcp-host or dhcp-ignore-names directives.
769 Also DNSMASQ_RELAY_ADDRESS which gives the address of
770 a DHCP relay, if used.
771 Suggestions from Michael Rack.
773 Fix regression which broke echo of relay-agent
774 options. Thanks to Michael Rack for spotting this.
776 Don't treat option 67 as being interchangeable with
777 dhcp-boot parameters if it's specified as
780 Make the code to call scripts on lease-change compile-time
781 optional. It can be switched off by editing src/config.h
782 or building with "make COPTS=-DNO_SCRIPT".
784 Make the TFTP server cope with filenames from Windows/DOS
785 which use '\' as pathname separator. Thanks to Ralf for
788 Updated Polish translation. Thanks to Jan Psota.
790 Warn if an IP address is duplicated in /etc/ethers. Thanks
791 to Felix Schwarz for pointing this out.
793 Teach --conf-dir to take an option list of file suffices
794 which will be ignored when scanning the directory. Useful
795 for backup files etc. Thanks to Helmut Hullen for the
798 Add new DHCP option named tftpserver-address, which
799 corresponds to the third argument of dhcp-boot. This
800 allows the complete functionality of dhcp-boot to be
801 replicated with dhcp-option. Useful when using
804 Test which upstream nameserver to use every 10 seconds
805 or 50 queries and not just when a query times out and
806 is retried. This should improve performance when there
807 is a slow nameserver in the list. Thanks to Joe for the
810 Don't do any PXE processing, even for clients with the
811 correct vendorclass, unless at least one pxe-prompt or
812 pxe-service option is given. This stops dnsmasq
813 interfering with proxy PXE subsystems when it is just
814 the DHCP server. Thanks to Spencer Clark for spotting this.
816 Limit the blocksize used for TFTP transfers to a value
817 which avoids packet fragmentation, based on the MTU of the
818 local interface. Many netboot ROMs can't cope with
821 Honour dhcp-ignore configuration for PXE and proxy-PXE
822 requests. Thanks to Niels Basjes for the bug report.
824 Updated French translation. Thanks to Gildas Le Nadan.
828 Fix security problem which allowed any host permitted to
829 do TFTP to possibly compromise dnsmasq by remote buffer
830 overflow when TFTP enabled. Thanks to Core Security
831 Technologies and Iván Arce, Pablo Hernán Jorge, Alejandro
832 Pablo Rodriguez, MartÃn Coco, Alberto Soliño Testa and
833 Pablo Annetta. This problem has Bugtraq id: 36121
836 Fix a problem which allowed a malicious TFTP client to
837 crash dnsmasq. Thanks to Steve Grubb at Red Hat for
838 spotting this. This problem has Bugtraq id: 36120 and
843 Fix regression in 2.48 which disables the lease-change
844 script. Thanks to Jose Luis Duran for spotting this.
846 Log TFTP "file not found" errors. These were not logged,
847 since a normal PXELinux boot generates many of them, but
848 the lack of the messages seems to be more confusing than
849 routinely seeing them when there is no real error.
851 Update Spanish translation. Thanks to Chris Chatham.
855 Archived the extensive, backwards, changelog to
856 CHANGELOG.archive. The current changelog now runs from
857 version 2.43 and runs conventionally.
859 Fixed bug which broke binding of servers to physical
860 interfaces when interface names were longer than four
861 characters. Thanks to MURASE Katsunori for the patch.
863 Fixed netlink code to check that messages come from the
864 correct source, and not another userspace process. Thanks
865 to Steve Grubb for the patch.
867 Maintainability drive: removed bug and missing feature
868 workarounds for some old platforms. Solaris 9, OpenBSD
869 older than 4.1, Glibc older than 2.2, Linux 2.2.x and
870 DBus older than 1.1.x are no longer supported.
872 Don't read included configuration files more than once:
873 allows complex configuration structures without problems.
875 Mark log messages from the various subsystems in dnsmasq:
876 messages from the DHCP subsystem now have the ident string
877 "dnsmasq-dhcp" and messages from TFTP have ident
878 "dnsmasq-tftp". Thanks to Olaf Westrik for the patch.
880 Fix possible infinite DHCP protocol loop when an IP
881 address nailed to a hostname (not a MAC address) and a
882 host sometimes provides the name, sometimes not.
884 Allow --addn-hosts to take a directory: all the files
885 in the directory are read. Thanks to Phil Cornelius for
888 Support --bridge-interface on all platforms, not just BSD.
890 Added support for advanced PXE functions. It's now
891 possible to define a prompt and menu options which will
892 be displayed when a client PXE boots. It's also possible to
893 hand-off booting to other boot servers. Proxy-DHCP, where
894 dnsmasq just supplies the PXE information and another DHCP
895 server does address allocation, is also allowed. See the
896 --pxe-prompt and --pxe-service keywords. Thanks to
897 Alkis Georgopoulos for the suggestion and Guilherme Moro
898 and Michael Brown for assistance.
900 Improvements to DHCP logging. Thanks to Tom Metro for
903 Add ability to build dnsmasq without DHCP support. To do
904 this, edit src/config.h or build with
905 "make COPTS=-DNO_DHCP". Thanks to Mahavir Jain for the patch.
907 Added --test command-line switch - syntax check
908 configuration files only.
910 Updated French translation. Thanks to Gildas Le Nadan.
914 Updated French translation. Thanks to Gildas Le Nadan.
916 Fixed interface enumeration code to work on NetBSD
917 5.0. Thanks to Roy Marples for the patch.
919 Updated config.h to use the same location for the lease
920 file on NetBSD as the other *BSD variants. Also allow
921 LEASEFILE and CONFFILE symbols to be overriden in CFLAGS.
923 Handle duplicate address detection on IPv6 more
924 intelligently. In IPv6, an interface can have an address
925 which is not usable, because it is still undergoing DAD
926 (such addresses are marked "tentative"). Attempting to
927 bind to an address in this state returns an error,
928 EADDRNOTAVAIL. Previously, on getting such an error,
929 dnsmasq would silently abandon the address, and never
930 listen on it. Now, it retries once per second for 20
931 seconds before generating a fatal error. 20 seconds should
932 be long enough for any DAD process to complete, but can be
933 adjusted in src/config.h if necessary. Thanks to Martin
934 Krafft for the bug report.
936 Add DBus introspection. Patch from Jeremy Laine.
938 Update Dbus configuration file. Patch from Colin Walters.
940 http://bugs.freedesktop.org/show_bug.cgi?id=18961
942 Support arbitrarily encapsulated DHCP options, suggestion
943 and initial patch from Samium Gromoff. This is useful for
944 (eg) gPXE, which expect all its private options to be
945 encapsulated inside a single option 175. So, eg,
947 dhcp-option = encap:175, 190, "iscsi-client0"
948 dhcp-option = encap:175, 191, "iscsi-client0-secret"
950 will provide iSCSI parameters to gPXE.
952 Enhance --dhcp-match to allow testing of the contents of a
953 client-sent option, as well as its presence. This
954 application in mind for this is RFC 4578
955 client-architecture specifiers, but it's generally useful.
956 Joey Korkames suggested the enhancement.
958 Move from using the IP_XMIT_IF ioctl to IP_BOUND_IF on
959 OpenSolaris. Thanks to Bastian Machek for the heads-up.
961 No longer complain about blank lines in
962 /etc/ethers. Thanks to Jon Nelson for the patch.
964 Fix binding of servers to physical devices, eg
965 --server=/domain/1.2.3.4@eth0 which was broken from 2.43
966 onwards unless --query-port=0 set. Thanks to Peter Naulls
969 Reply to DHCPINFORM requests even when the supplied ciaddr
970 doesn't fall in any dhcp-range. In this case it's not
971 possible to supply a complete configuration, but
972 individually-configured options (eg PAC) may be useful.
974 Allow the source address of an alias to be a range:
975 --alias=192.168.0.0,10.0.0.0,255.255.255.0 maps the whole
976 subnet 192.168.0.0->192.168.0.255 to 10.0.0.0->10.0.0.255,
978 --alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0
979 maps only the 192.168.0.10->192.168.0.40 region. Thanks to
980 Ib Uhrskov for the suggestion.
982 Don't dynamically allocate DHCP addresses which may break
983 Windows. Addresses which end in .255 or .0 are broken in
984 Windows even when using supernetting.
985 --dhcp-range=192.168.0.1,192.168.1.254,255,255,254.0 means
986 192.168.0.255 is a valid IP address, but not for Windows.
987 See Microsoft KB281579. We therefore no longer allocate
988 these addresses to avoid hard-to-diagnose problems.
990 Update Polish translation. Thanks to Jan Psota.
992 Delete the PID-file when dnsmasq shuts down. Note that by
993 this time, dnsmasq is normally not running as root, so
994 this will fail if the PID-file is stored in a root-owned
995 directory; such failure is silently ignored. To take
996 advantage of this feature, the PID-file must be stored in a
997 directory owned and write-able by the user running
1002 Allow --bootp-dynamic to take a netid tag, so that it may
1003 be selectively enabled. Thanks to Olaf Westrik for the
1006 Remove ISC-leasefile reading code. This has been
1007 deprecated for a long time, and last time I removed it, it
1008 ended up going back by request of one user. This time,
1009 it's gone for good; otherwise it would need to be
1010 re-worked to support multiple domains (see below).
1012 Support DHCP clients in multiple DNS domains. This is a
1013 long-standing request. Clients are assigned to a domain
1014 based in their IP address.
1016 Add --dhcp-fqdn flag, which changes behaviour if DNS names
1017 assigned to DHCP clients. When this is set, there must be
1018 a domain associated with each client, and only
1019 fully-qualified domain names are added to the DNS. The
1020 advantage is that the only the FQDN needs to be unique,
1021 so that two or more DHCP clients can share a hostname, as
1022 long as they are in different domains.
1024 Set environment variable DNSMASQ_DOMAIN when invoking
1025 lease-change script. This may be useful information to
1026 have now that it's variable.
1028 Tighten up data-checking code for DNS packet
1029 handling. Thanks to Steve Dodd who found certain illegal
1030 packets which could crash dnsmasq. No memory overwrite was
1031 possible, so this is not a security issue beyond the DoS
1034 Update example config dhcp option 47, the previous
1035 suggestion generated an illegal, zero-length,
1036 option. Thanks to Matthias Andree for finding this.
1038 Rewrite hosts-file reading code to remove the limit of
1039 1024 characters per line. John C Meuser found this.
1041 Create a net-id tag with the name of the interface on
1042 which the DHCP request was received.
1044 Fixed minor memory leak in DBus code, thanks to Jeremy
1045 Laine for the patch.
1047 Emit DBus signals as the DHCP lease database
1048 changes. Thanks to Jeremy Laine for the patch.
1050 Allow for more that one MAC address in a dhcp-host
1051 line. This configuration tells dnsmasq that it's OK to
1052 abandon a DHCP lease of the fixed address to one MAC
1053 address, if another MAC address in the dhcp-host statement
1054 asks for an address. This is useful to give a fixed
1055 address to a host which has two network interfaces
1056 (say, a laptop with wired and wireless interfaces.)
1057 It's very important to ensure that only one interface
1058 at a time is up, since dnsmasq abandons the first lease
1059 and re-uses the address before the leased time has
1060 elapsed. John Gray suggested this.
1062 Tweak the response to a DHCP request packet with a wrong
1063 server-id when --dhcp-authoritative is set; dnsmasq now
1064 returns a DHCPNAK, rather than silently ignoring the
1065 packet. Thanks to Chris Marget for spotting this
1068 Add --cname option. This provides a limited alias
1069 function, usable for DHCP names. Thanks to AJ Weber for
1070 suggestions on this.
1072 Updated contrib/webmin with latest version from Neil
1075 Updated Polish translation. Thanks to Jan Psota.
1077 Correct the text names for DHCP options 64 and 65 to be
1078 "nis+-domain" and "nis+-servers".
1080 Updated Spanish translation. Thanks to Chris Chatham.
1082 Force re-reading of /etc/resolv.conf when an "interface
1087 Fix total DNS failure in release 2.44 unless --min-port
1088 specified. Thanks to Steven Barth and Grant Coady for
1089 bugreport. Also reject out-of-range port spec, which could
1090 break things too: suggestion from Gilles Espinasse.
1094 Fix crash when unknown client attempts to renew a DHCP
1095 lease, problem introduced in version 2.43. Thanks to
1096 Carlos Carvalho for help chasing this down.
1098 Fix potential crash when a host which doesn't have a lease
1099 does DHCPINFORM. Again introduced in 2.43. This bug has
1100 never been reported in the wild.
1102 Fix crash in netlink code introduced in 2.43. Thanks to
1103 Jean Wolter for finding this.
1105 Change implementation of min_port to work even if min-port
1108 Patch to enable compilation of latest Mac OS X. Thanks to
1111 Update Spanish translation. Thanks to Christopher Chatham.
1115 Updated Polish translation. Thanks to Jan Psota.
1117 Flag errors when configuration options are repeated
1120 Further tweaks for GNU/kFreeBSD
1122 Add --no-wrap to msgmerge call - provides nicer .po file
1125 Honour lease-time spec in dhcp-host lines even for
1126 BOOTP. The user is assumed to known what they are doing in
1127 this case. (Hosts without the time spec still get infinite
1128 leases for BOOTP, over-riding the default in the
1129 dhcp-range.) Thanks to Peter Katzmann for uncovering this.
1131 Fix problem matching relay-agent ids. Thanks to Michael
1132 Rack for the bug report.
1134 Add --naptr-record option. Suggestion from Johan
1137 Implement RFC 5107 server-id-override DHCP relay agent
1140 Apply patches from Stefan Kruger for compilation on
1141 Solaris 10 under Sun studio.
1143 Yet more tweaking of Linux capability code, to suppress
1144 pointless wingeing from kernel 2.6.25 and above.
1146 Improve error checking during startup. Previously, some
1147 errors which occurred during startup would be worked
1148 around, with dnsmasq still starting up. Some were logged,
1149 some silent. Now, they all cause a fatal error and dnsmasq
1150 terminates with a non-zero exit code. The errors are those
1151 associated with changing uid and gid, setting process
1152 capabilities and writing the pidfile. Thanks to Uwe
1153 Gansert and the Suse security team for pointing out
1154 this improvement, and Bill Reimers for good implementation
1157 Provide NO_LARGEFILE compile option to switch off largefile
1158 support when compiling against versions of uclibc which
1159 don't support it. Thanks to Stephane Billiart for the patch.
1161 Implement random source ports for interactions with
1162 upstream nameservers. New spoofing attacks have been found
1163 against nameservers which do not do this, though it is not
1164 clear if dnsmasq is vulnerable, since to doesn't implement
1165 recursion. By default dnsmasq will now use a different
1166 source port (and socket) for each query it sends
1167 upstream. This behaviour can suppressed using the
1168 --query-port option, and the old default behaviour
1169 restored using --query-port=0. Explicit source-port
1170 specifications in --server configs are still honoured.
1172 Replace the random number generator, for better
1173 security. On most BSD systems, dnsmasq uses the
1174 arc4random() RNG, which is secure, but on other platforms,
1175 it relied on the C-library RNG, which may be
1176 guessable and therefore allow spoofing. This release
1177 replaces the libc RNG with the SURF RNG, from Daniel
1178 J. Berstein's DJBDNS package.
1180 Don't attempt to change user or group or set capabilities
1181 if dnsmasq is run as a non-root user. Without this, the
1182 change from soft to hard errors when these fail causes
1183 problems for non-root daemons listening on high
1184 ports. Thanks to Patrick McLean for spotting this.
1186 Updated French translation. Thanks to Gildas Le Nadan.
1190 The changelog for version 2.42 and earlier is
1191 available in CHANGELOG.archive.
projects / people / ms / dnsmasq.git / blob