-release 0.4 - initial public release
-
-release 0.5 - added caching, removed compiler warning on linux PPC
-
-release 0.6 - TCP handling: close socket and return to connect state if we
- can't read the first byte. This corrects a problem seen very
- occasionally where dnsmasq would loop using all available CPU.
-
- Added a patch from Cris Bailiff <c.bailiff@e-secure.com.au>
- to set SO_REUSEADDR on the tcp socket which stops problems when
- dnsmasq is restarted and old connections still exist.
-
- Stopped claiming in doc.html that smail is the default Debian
- mailer, since it isn't any longer. (Pointed out by
- David Karlin <dkarlin@coloradomtn.edu>)
-
-release 0.7 Create a pidfile at /var/run/dnsmasq.pid
-
- Extensive armouring against "poison packets" courtesy of
- Thomas Moestl <tmoestl@gmx.net>
-
- Set sockaddr.sa_family on outgoing address, patch from
- David Symonds <xoxus@usa.net>
-
- Patch to clear cache on SIGHUP
- from Jason L. Wagner <nialscorva@yahoo.com>
-
- Fix bad bug resulting from not initialising value-result
- address-length parameter to recvfrom() and accept() - it
- worked by luck before!
-
-release 0.95 Major rewrite: remove calls to gethostbyname() and talk
- directly to the upstream server(s) instead.
- This has many advantages.
- (1) Dnsmasq no longer blocks during long lookups.
- (2) All query types are handled now, (eg MX) not just internet
- address queries. Addresses are cached, all other
- queries are forwarded directly.
- (3) Time-to-live data from upstream server is read and
- used by dnsmasq to purge entries from the cache.
- (4) /etc/hosts is still read and its contents served (unless
- the -h option is given).
- (5) Dnsmasq can get its upstream servers from
- a file other than /etc/resolv.conf (-r option) this allows
- dnsmasq to serve names to the machine it is running
- on (put nameserver 127.0.0.1 in /etc/resolv.conf and
- give dnsmasq the option -r /etc/resolv.dnsmasq)
- (6) Dnsmasq will re-read it's servers if the
- modification time of resolv.conf changes. Along with
- 4 above this allows nameservers to be set
- automatically by ppp or dhcp.
-
- A really clever NAT-like technique allows the daemon to have lots
- of queries in progress, but still remain very lightweight.
- Dnsmasq has a small footprint and normally doesn't allocate
- any more memory after start-up. The NAT-like forwarding was
- inspired by a suggestion from Eli Chen <eli@routefree.com>
-
-release 0.96 Fixed embarrasing thinko in cache linked-list code.
-
-release 0.98 Some enhancements and bug-fixes.
- Thanks to "Denis Carre" <denis.carre@laposte.net> and Martin
- Otte <otte@essc.psu.edu>
-
- (1) Dnsmasq now always sets the IP source address
- of its replies correctly. Older versions would not always
- do this on multi-homed and IP aliased hosts, which violates
- the RFC.
- (2) Dnsmasq no longer crashes if a server loop is created
- (ie dnsmasq is told to use itself as an upstream server.)
- Now it just logs the problem and doesn't use the bad
- server address.
- (3) Dnsmasq should now forward (but not cache) inverse queries
- and server status queries; this feature has not been tested.
- (4) Don't write the pid file when in non-daemon mode.
- (5) Create the pid file mode 644, rather then 666 (!).
- (6) Generate queries to upstream nameservers with unpredictable
- ids, to thwart DNS spoofers.
- (7) Dnsmasq no longer forwards queries when the
- "recursion desired" bit is not set in the header.
- (8) Fixed getopt code to work on compliers with unsigned char.
-
-release 0.991 Added -b flag: when set causes dnsmasq to always answer
- reverse queries on the RFC 1918 private IP space itself and
- never forward them to an upstream server. If the name is not in
- /etc/hosts, dnsmasq replies with the dotted-quad address.
-
- Fixed a bug which stopped dnsmasq working on a box with
- two or more interfaces with the same IP address.
-
- Fixed cacheing of CNAMEs. Previously, a CNAME which pointed
- to a name with many A records would not have all the addresses
- returned when being answered from the cache.
-
- Thanks to "Steve Hardy" <s.a.hardy@connectux.com> for his input
- on these fixes.
-
- Fixed race which could cause dnsmasq to miss the second of
- two closely-spaced updates of resolv.conf (Thanks to Eli Chen
- for pointing this out.)
-
- Fixed a bug which could cause dnsmasq to fail to cache some
- dns names.
-
-release 0.992 Small change to memory allocation so that names in /etc/hosts
- don't use cache slots. Also make "-c 0" flag meaningfully
- disable caching completely.
-
-release 0.993 Return only the first (canonical) name from an entry in
- /etc/hosts as reply to reverse query.
-
- Handle wildcard queries for names/addresses in /etc/hosts
- this is mainly to allow reverse lookups by dig to succeed.
- (Bug reported by Simon J. Rowe" <srowe@mose.org.uk>)
-
- Subtle change to the logic which selects which of multiple
- upstream servers we send queries to. This fixes a problem
- where dnsmasq continuously sends queries to a server which
- is returning error codes and ignores one which is working.
-
-release 0.994 Fixed bug which broke lookup of names in /etc/hosts
- which have upper-case letters in them. Thanks for Joao Clemente
- for spotting that one.
-
- Output cache statistics on receipt of SIGUSR1. These go
- to syslog except in debug (-d) mode, when a complete cache
- dump goes to stdout. Suggestion from Joao Clemente, code
- based in John Volpe's.
-
- Accept GNU long options on the command line. Code from
- John Volpe for this.
-
- Split source code into multiple files and produced
- a proper makefile.
-
- Included code from John Volpe to parse dhcp.leases file
- written by ISC dhcpd. The hostnames in the leases file are
- added to the cache and updated as dhcpd updates the
- leases file. The code has been heavily re-worked by me,
- so any bugs are probably mine.
-
-release 0.995 Small tidy-ups to signal handling and cache code.
-
-release 0.996 Added negative caching: If dnsmasq gets a "no such domain" reply
- from an upstream nameserver, it will cache that information
- for a time specified by the SOA RR in the reply. See RFC 2308
- for details. This is useful with resolver libraries
- which append assorted suffices to non-FQDN in an attempt to
- resolve them, causing useless cache misses.
-
- Added -i flag, which restricts dnsmasq to offering name service
- only on specified interfaces.
-
-release 0.997 Deleted INSTALL script and added "install" target to makefile.
-
- Stopped distributing binaries in the tarball to avoid
- libc version clashes.
-
- Fixed interface detection code to
- remove spurious startup errors in rare circumstances.
-
- Dnsmasq now changes its uid, irrevocably, to nobody after
- startup for security reasons. Thanks to Peter Bailey for
- this patch.
-
- Cope with infinite DHCP leases. Patch thanks to
- Yaacov Akiba Slama.
-
- Added rpm control files to .tar.gz distribution. Thanks to
- Peter Baldwin at ClarkConnect for those.
-
- Improved startup script for rpms. Thanks to Yaacov Akiba Slama.
-
-release 1.0 Stable release: dnsmasq is now considered feature-complete
- and stable.
-
-release 1.1 Added --user argument to allow user to change to
- a different userid.
-
- Added --mx-target argument to allow mail to be delivered
- away from the gateway machine running dnsmasq.
-
- Fixed highly obscure bug with wildcard queries for
- DHCP lease derived names.
-
- Moved manpage from section 1 to section 8.
-
- Added --no-poll option.
- Added Suse-rpm support.
- Thanks to Joerg Mayer for the last two.
-
-release 1.2 Added IPv6 DNS record support. AAAA records are cached
- and read from /etc/hosts. Reverse-lookups in the
- ip6.int and ip6.arpa domains are suppored. Dnsmasq can
- talk to upstream servers via IPv6 if it finds IP6 addresses
- in /etc/resolv.conf and it offers DNS service automatically
- if IPv6 support is present in the kernel.
-
- Extended negative caching to NODATA replies.
-
- Re-vamped CNAME processing to cope with RFC 2317's use of
- CNAMES to PTR RRs in CIDR.
-
- Added config.h and a couple of symbols to aid
- compilation on non-linux systems.
-
-release 1.3 Some versions of the Linux kernel return EINVAL rather
- then ENPROTONOSUPPORT when IPv6 is not available,
- causing dnsmasq to bomb out. This release fixes that.
- Thanks to Steve Davis for pointing this one out.
-
- Trivial change to startup logic so that dnsmasq logs
- its stuff and reads config files straight away on
- starting, rather than after the first query - principle
- of least surprise applies here.
+version 2.63
+ Do duplicate dhcp-host address check in --test mode.
-release 1.4 Fix a bug with DHPC lease parsing which broke in
- non-UTC timezones. Thanks to Mark Wormgoor for
- spotting and diagnosing this. Fixed versions in
- the .spec files this time. Fixed bug in Suse startup
- script. Thanks to Didi Niklaus for pointing this out.
-release 1.5 Added --filterwin2k option which stops dnsmasq from forwarding
- "spam" queries from win2k boxes. This is useful to stop spurious
- connections over dial-on-demand links. Thanks to Steve Hardy
- for this code.
+version 2.62
+ Update German translation. Thanks to Conrad Kostecki.
- Clear "truncated" bit in replies we return from upstream. This
- stops resolvers from switching to TCP, which is pointless since
- dnsmasq doesn't support TCP. This should solve problems
- in resolving hotmail.com domains.
+ Cope with router-solict packets wich don't have a valid
+ source address. Thanks to Vladislav Grishenko for the patch.
- Don't include getopt.h when Gnu-long-options are disabled -
- hopefully this will allow compilation on FreeBSD.
+ Fixed bug which caused missing periodic router
+ advertisements with some configurations. Thanks to
+ Vladislav Grishenko for the patch.
- Added the --listen-address and --pid-file flags.
+ Fixed bug which broke DHCPv6/RA with prefix lengths
+ which are not divisible by 8. Thanks to Andre Coetzee
+ for spotting this.
- Fixed a bug which caused old entries in the DHCP leases file
- to be used in preference to current ones under certain
- circumstances.
+ Fix non-response to router-solicitations when
+ router-advertisement configured, but DHCPv6 not
+ configured. Thanks to Marien Zwart for the patch.
-release 1.6 If a machine gets named via DHCP and the DHCP name doesn't have
- a domain part and domain suffix is set using the -s flag, then
- that machine has two names with the same address, with and
- without the domain suffix. When doing a _reverse_ lookup to
- get the name, the "without suffix" name used to be returned,
- now the "with suffix" one gets returned instead. This change
- suggested by Arnold Schulz.
+ Add --dns-rr, to allow arbitrary DNS resource records.
- Fixed assorted typos in the documentation. Thanks
- to David Kimdon.
+ Fixed bug which broke RA scheduling when an interface had
+ two addresses in the same network. Thanks to Jim Bos for
+ his help nailing this.
- Subtle rearrangement to the downloadable tarball, and stopped
- distributing .debs, since dnsmasq is now an official Debian
- package.
-release 1.7 Fix a problem with cache not clearing properly
- on receipt of SIGHUP. Bug spotted by Sat Deshpande.
+version 2.61
+ Re-write interface discovery code on *BSD to use
+ getifaddrs. This is more portable, more straightforward,
+ and allows us to find the prefix length for IPv6
+ addresses.
- In group-id changing code:
- 1) Drop supplimentary groups.
- 2) Change gid before dropping root (patch from Soewono Effendi.)
- 3) Change group to "dip" if it exists, to allow access
- to /etc/ppp/resolv.conf (suggestion from Jorg Sommer.)
- Update docs to reflect above changes.
+ Add ra-names, ra-stateless and slaac keywords for DHCPv6.
+ Dnsmasq can now synthesise AAAA records for dual-stack
+ hosts which get IPv6 addresses via SLAAC. It is also now
+ possible to use SLAAC and stateless DHCPv6, and to
+ tell clients to use SLAAC addresses as well as DHCP ones.
+ Thanks to Dave Taht for help with this.
- Other documentation changes from David Miller.
- Added suggested script fragment for dhcpcd.exe.
+ Add --dhcp-duid to allow DUID-EN uids to be used.
-release 1.8 Fix unsafe use of tolower() macro - allows linking against
- ulibc. (Patches from Soewono Effendi and Bjorn Andersson.)
+ Explicity send DHCPv6 replies to the correct port, instead
+ of relying on clients to send requests with the correct
+ source address, since at least one client in the wild gets
+ this wrong. Thanks to Conrad Kostecki for help tracking
+ this down.
- Fix typo in usage string.
+ Send a preference value of 255 in DHCPv6 replies when
+ --dhcp-authoritative is in effect. This tells clients not
+ to wait around for other DHCP servers.
- Added advice about RedHat PPP configuration to
- documentation. (Thanks to C. Lee Taylor.)
+ Better logging of DHCPv6 options.
- Patches to fix problems on BSD systems from Marc Huber
- and Can Erkin Acar. These add the options
- HAVE_ARC4RANDOM and HAVE_SOCKADDR_SA_LEN to config.h.
- Elaborated config.h - should really use autoconf.
+ Add --host-record. Thanks to Rob Zwissler for the
+ suggestion.
- Fix time-to-live calculation when chasing CNAMEs.
+ Invoke the DHCP script with action "tftp" when a TFTP file
+ transfer completes. The size of the file, address to which
+ it was sent and complete pathname are supplied. Note that
+ version 2.60 introduced some script incompatibilties
+ associated with DHCPv6, and this is a further change. To
+ be safe, scripts should ignore unknown actions, and if
+ not IPv6-aware, should exit if the environment
+ variable DNSMASQ_IAID is set. The use-case for this is
+ to track netboot/install. Suggestion from Shantanu
+ Gadgil.
- Fix use-after-free and missing initialisation bugs in
- the cache code. (Thanks to Marc Huber.)
+ Update contrib/port-forward/dnsmasq-portforward to reflect
+ the above.
- Builds on Solaris 9. (Thanks to Marc Huber.)
-
-release 1.9 Fixes to rpm .spec files.
-
- Don't put expired DHCP entries into the cache only to
- throw them away again.
-
- Put dnsmasq on a severe memory diet: this reduces both
- the amount of heap space used and the stack size
- required. The difference is not really visible with
- bloated libcs like glibc, but should dramatically reduce
- memory requirements when linked against ulibc for use on
- embeded routers, and that's the point really. Thanks to
- Matthew Natalier for prompting this.
-
- Changed debug mode (-d) so that all logging appears on
- stderr as well as going to syslogd.
-
- Added HAVE_IPV6 config symbol to allow compilation
- against a libc which doesn't have IPv6 support.
-
- Added a facility to log all queries, enabled with -q flag.
-
- Fixed packet size checking bug in address extraction code.
-
- Halved default cache size - 300 was way OTT in typical use.
-
- Added self-MX function, enabled by -e flag. Thanks to
- Lyonel Vincent for the patch.
-
- Added HAVE_FORK config symbol and stuff to support
- uClinux. Thanks to Matthew Natalier for uClinux stuff.
-
-release 1.10 Log warnings if resolv.conf or dhcp.leases are not
- accessable for any reason, as suggested by Hinrich Eilts.
-
- Fixed wrong address printing in error message about
- no interface with address.
-
- Updated docs and split installation instuctions into setup.html.
-
- Fix bug in CNAME chasing code: One CNAME pointing
- to many A records would lose A records after the
- first. This bug was introduced in version 1.9.
-
- Log startup failures at level Critical as well as
- printing them to standard error.
- Exit with return code 1 when given bad options.
+ Set the environment variable DNSMASQ_LOG_DHCP when running
+ the script id --log-dhcp is in effect, so that script can
+ taylor their logging verbosity. Suggestion from Malte
+ Forkel.
+
+ Arrange that addresses specified with --listen-address
+ work even if there is no interface carrying the
+ address. This is chiefly useful for IPv4 loopback
+ addresses, where any address in 127.0.0.0/8 is a valid
+ loopback address, but normally only 127.0.0.1 appears on
+ the lo interface. Thanks to Mathieu Trudel-Lapierre for
+ the idea and initial patch.
+
+ Fix crash, introduced in 2.60, when a DHCPINFORM is
+ received from a network which has no valid dhcp-range.
+ Thanks to Stephane Glondu for the bug report.
+
+ Add a new DHCP lease time keyword, "deprecated" for
+ --dhcp-range. This is only valid for IPv6, and sets the
+ preffered lease time for both DHCP and RA to zero. The
+ effect is that clients can continue to use the address
+ for existing connections, but new connections will use
+ other addresses, if they exist. This makes hitless
+ renumbering at least possible.
+
+ Fix bug in address6_available() which caused DHCPv6 lease
+ aquisition to fail if more than one dhcp-range in use.
+
+ Provide RDNSS and DNSSL data in router advertisements,
+ using the settings provided for DHCP options
+ option6:domain-search and option6:dns-server.
+
+ Tweak logo/favicon.ico to add some transparency. Thanks to
+ SamLT for work on this.
+
+ Don't cache data from non-recursive nameservers, since it
+ may erroneously look like a valid CNAME to a non-exitant
+ name. Thanks to Ben Winslow for finding this.
- Cleaned up code for no-cache operation.
+ Call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP
+ on exactly one interface and --bind-interfaces is set. This
+ makes the OpenStack use-case of one dnsmasq per virtual
+ interface work. This is only available on Linux; it's not
+ supported on other platforms. Thanks to Vishvananda Ishaya
+ and the OpenStack team for the suggestion.
- Added -o option which forces dnsmasq to use to
- upstream servers in the order they appear in /etc/resolv.conf.
+ Updated French translation. Thanks to Gildas Le Nadan.
- Added upstream server use logging.
+ Give correct from-cache answers to explict CNAME queries.
+ Thanks to Rob Zwissler for spotting this.
+
+ Add --tftp-lowercase option. Thanks to Oliver Rath for the
+ patch.
- Log full cache dump on receipt of SIGUSR1 when query
- logging is enabled (-q switch).
+ Ensure that the DBus DhcpLeaseUpdated events are generated
+ when a lease goes through INIT_REBOOT state, even if the
+ dhcp-script is not in use. Thanks to Antoaneta-Ecaterina
+ Ene for the patch.
- Added -S option to directly specify upstream servers and
- added ability to direct queries for specific domains to
- specfic servers. Suggested by Jens Vonderheide.
+ Fix failure of TFTP over IPv4 on OpenBSD platform. Thanks
+ to Brad Smith for spotting this.
+
- Upgraded random ID generation - patch from Rob Funk.
+version 2.60
+ Fix compilation problem in Mac OS X Lion. Thanks to Olaf
+ Flebbe for the patch.
- Fixed reading of domains in arguments with capital
- letters or trailing periods.
-
- Fixed potential SEGV when given bad options.
-
- Read options from /etc/dnsmasq.conf if it exists.
- Do sensible things with missing parameters, eg
- "--resolv-file=" turns off reading /etc/resolv.conf.
-
-release 1.11 Actually implement the -R flag promised in the 1.10 man page.
-
- Improve and rationalise the return codes in answers to
- queries. In the case that there are no available
- upstream servers to forward a query to, return REFUSED.
- This makes sendmail work better on modem connected
- systems when the modem link is down (Thanks to Roger Plant).
- Cache and return the NXDOMAIN status of failed queries:
- this makes the `host` command work when traversing search
- paths (Thanks to Peter Bailey). Set the "authoritative"
- bit in replies containing names from /etc/hosts or DHCP.
-
- Tolerate MS-DOS style line ending codes in /etc/hosts
- and /etc/resolv.conf, for people who copy from winsock
- installations.
-
- Allow specification of more than one resolv.conf file. This is
- intended for laptops which connect via DHCP or
- PPP. Whichever resolv.conf was updated last is used.
-
- Allow -S flags which specify a domain but no server
- address. This gives local domains which are never forwarded.
-
- Add -E flag to automatically add the domain suffix to
- names in /etc/hosts -suggestion from Phil Harman.
-
- Always return a zero time-to-live for names derived from
- DHCP which stops anthing else caching these
- names. Previously the TTL was derived from the lease
- time but that is incorrect since a lease can be given
- up early: dnsmasq would know this but anything with the
- name cached with long TTL would not be updated.
-
- Extended HAVE_IPV6 config flag to allow compliation on
- old systems which don't have modern library routines
- like inet_ntop(). Thanks to Phil Harman for the patch.
-
-release 1.12 Allow more than one domain in server config lines and
- make "local" a synonym for "server". This makes things
- like "local=/localnet/thekelleys.org.uk/" legal. Allow
- port to specified as part of server address.
-
- Allow whole domains to have an IP address specified
- in /etc/dnsmasq.conf. (/etc/hosts doesn't work domains).
- address=/doubleclick.net/127.0.0.1 should catch all
- those nasty banner ads. Inspired by a patch
- from Daniel Gryniewicz
-
- Log the source of each query when logging switched on.
-
- Fix bug in script fragment for dhcpcd - thanks to Barry Stewart.
-
- Fix bug which meant that strict-order and self-mx were
- always enabled.
-
- Builds with Linux libc5 now - for the Freesco project.
-
- Fixed Makefile installation script (patch from Silvan
- Minghetti) and added CC and CFLAGS variables.
-
- Improve resource allocation to reduce vulnerability to
- DOS attacks - the old version could have all queries
- blocked by a continuous high-speed stream of
- queries. Now some queries will succeed, and the excess
- will be rejected with a server fail error. This change also
- protects against server-loops; setting up a resolving
- loop between two instances of dnsmasq is no longer
- catastrophic. The servers will continue to run, looped
- queries fail and a warning is logged. Thanks to C. Lee
- Taylor for help with this.
-
-release 1.13 Added support for building rpms suitable for modern Suse
- systems. (patch from Andi <cambeis@netplace.de>)
-
- Added options --group, --localmx, --local-ttl,
- --no-negcache, --addn-host.
-
- Moved all the various rpm-building bits into /rpm.
-
- Fix builds with glibc 2.1 (thanks to Cristian
- Ionescu-Idbohrn)
-
- Preserve case in domain names, as per RFC1035.
-
- Fixed ANY queries to domains with --address specification.
-
- Fixed FreeBSD build. (thanks to Steven Honson)
-
- Added -Q option which allows a specified port to be used
- to talk to upstream servers. Useful for people who want
- very paranoid firewalls which open individual UDP port.
- (thanks to David Coe for the patch)
-
-release 1.14 Fixed man page description of -b option which confused
- /etc/hosts with /etc/resolv.conf. (thanks to Christopher
- Weimann)
-
- Fixed config.h to allow building under MACOS X and glibc
- 2.0.x. (thanks to Matthew Gregan and Serge Caron)
-
- Added --except-interface option. (Suggested by Serge Caron)
-
- Added SIGUSR2 facility to re-scan for new
- interfaces. (Suggested by Serge Caron)
-
- Fixed SEGV in option-reading code for invalid options.
- (Thanks to Klaas Teschauer)
-
- Fixed man page to clarify effect of SIGUSR1 on
- /etc/resolv.conf.
- (Thanks to Klaas Teschauer)
-
- Check that recieved queries have only rfc1035-legal characters
- in them. This check is mainly to avoid bad strings being
- sent to syslog.
-
- Fixed &&/& confusion in option.c and added DESTDIR
- variable for "make install" (Thanks to Osvaldo
- Marques for the patch.)
-
- Fixed /etc/hosts parsing code to cope with MS-DOS
- line-ends in the file. This was supposed to be done in
- version 1.11, but something got missed. (Thanks to Doug
- Copestake for helping to find this.)
-
- Squash repeated name/address pairs read from hosts
- files.
-
- Tidied up resource handling in util.c (Thanks to
- Cristian Ionescu-Idbohrn).
-
- Added hashed searching of domain names. People are starting
- to use dnsmasq with larger loads now, and bigger caches,
- and large lists of ad-block addresses. This means doing
- linear searches can start to use lots of CPU so I added hashed
- searching and seriously optimised the cache code for
- algorithmic efficiency. Also upped the limit on cache
- size to 10000.
-
- Fixed logging of the source of names from the additional
- hosts file and from the "bogus private address" option.
-
- Fixed spurious re-reading of empty lease files. (Thanks
- to Lewis Baughman for spotting this.)
-
- Fixed building under uclibc (patch from Cristian Ionescu-Idbohrn)
-
- Do some socket tweaking to allow dnsmasq to co-exist
- with BIND. Thanks to Stefan 'Sec' Zehl for the patch.
-
-release 1.15 Added --bogus-nxdomain option.
-
- Restrict checking of resolv.conf and DHCP leases files
- to once per second. This is intended to improve
- performance under heavy loads. Also make a system call
- to get the current time once per query, rather than four
- times.
-
- Increased number of outstanding queries to 150 in
- config.h
-
-release 1.16 Allow "/" characters in domain names - this fixes
- caching of RFC 2317 CNAME-PTR records.
-
- Fixed brain-fart in -B option when GETOPT_LONG not
- enabled - thanks to Steven Young and Jason Miller
- for pointing this out.
-
- Generalised bogus-nxdomain code: allow more than one
- address to check, and deal with replies with multiple
- answer records. (Based on contribution from Humberto
- Massa.)
-
- Updated the documentation to include information about
- bogus-nxdomain and the Verisign tragedy.
-
- Added libraries needed on Solaris to Makefile.
-
- Added facility to set source address in queries to
- upstream nameservers. This is useful with multihomed
- hosts, especially when using VPNs. Thanks to Tom Fanning
- for suggesting this feature.
-
- Tweaked logging: log to facility LOCAL0 when in
- debug/no-daemon mode and changed level of query logging
- from INFO to DEBUG. Make log options controllable in
- config.h
-
-release 1.17 Fixed crash with DHCP hostnames > 40 characters.
-
- Fixed name-comparision routines to not depend on Locale,
- in theory this versions since 1.15 could lock up or give
- wrong results when run with locale != 'C'.
-
- Fix potential lockup in cache code. (thanks to Henning
- Glawe for help chasing this down.)
-
- Made lease-file reader bullet-proof.
-
- Added -D option, suggested by Peter Fichtner.
-
-release 1.18 Added round-robin DNS for names which have more than one
- address. In this case all the addresses will be
- returned, as before, but the order will change on each
- query.
-
- Remove stray tolower() and isalnum() calls missed in
- last release to complete LOCALE independence.
-
- Allow port numbers in source-address specifications.
-
- For hostnames without a domain part which don't get
- forwarded because -D is in effect, return NXDOMAIN not
- an empty reply.
-
- Add code to return the software version in repsonse to the
- correct magic query in the same way as BIND. Use
- "dig version.bind chaos txt" to make the query.
-
- Added negative caching for PTR (address to name) records.
-
- Ensure that names of the form typically used in PTR queries
- (ie w.x.yz.in-addr.arpa and IPv6 equivalents) get
- correct answers when queried as other types. It's
- unlikely that anyone would do this, but the change makes
- things pedantically correct.
-
- Taught dnsmasq to understand "bitstring" names, as these
- are used for PTR lookups of IPv6 addresses by some
- resolvers and lookup tools. Dnsmasq now understands both
- the ip6.int domain and the ip6.arpa domain and both
- nibble and bitstring formats so it should work with any
- client code. Standards for this stuff have flip-flopped
- over the last few years, leaving many different clients
- in their wake. See RFC2673 for details of bitstrings.
-
- Allow '_' characters in domain names: Legal characters
- are now [a-z][A-Z].-_ Check names read from hosts files
- and leases files and reject illegal ones with a message
- in syslog.
+ Fix DHCP when using --listen-address with an IP address
+ which is not the primary address of an interface.
- Make empty domain names in server and address options
- have the special meaning "unqualified
- names". (unqualified names are names without any dots in
- them). It's now possible to do server=//1.2.3.4 and have
- unqualified names sent to a special nameserver.
-
-release 2.0rc1
- Moved source code into src/ directory.
+ Add --dhcp-client-update option.
- Fixes to cure compilation breakage when HAVE_IPV6 not
- set, thanks to Claas Hilbrecht.
-
- BIG CHANGE: added an integrated DHCP server and removed
- the code to read ISC dhcp.leases. This wins in terms
- of ease of setup and configuration flexibility and
- total machine resources consumed.
+ Add Lua integration. Dnsmasq can now execute a DHCP
+ lease-change script written in Lua. This needs to be
+ enabled at compile time by setting HAVE_LUASCRIPT in
+ src/config.h or running "make COPTS=-DHAVE_LUASCRIPT"
+ Thanks to Jan-Piet Mens for the idea and proof-of-concept
+ implementation.
+
+ Tidied src/config.h to distinguish between
+ platform-dependent compile-time options which are selected
+ automatically, and builder-selectable compile time
+ options. Document the latter better, and describe how to
+ set them from the make command line.
+
+ Tidied up IPPROTO_IP/SOL_IP (and IPv6 equivalent)
+ confusion. IPPROTO_IP works everywhere now.
+
+ Set TOS on DHCP sockets, this improves things on busy
+ wireless networks. Thanks to Dave Taht for the patch.
- Re-jiged the signal handling code to remove a race
- condition and to be more portable.
+ Determine VERSION automatically based on git magic:
+ release tags or hash values.
-release 2.0
- Thanks to David Ashworth for feedback which informed many
- of the fixes below.
-
- Allow hosts to be specified by client ID in dhcp-hosts
- options. These are now one of
- dhcp-host=<hardware addr>,....
- dhcp-host=id:<hex client id>,.....
- dhcp-host=id:<ascii client id>,.....
-
- Allow dhcp-host options to specify any IP address on the
- DHCP-served network, not just the range available for
- dynamic allocation.
-
- Allow dhcp-host options for the same host with different
- IP adresses where the correct one will be selected for
- the network the host appears on.
-
- Fix parsing of --dhcp-option to allow more than one
- IP address and to allow text-type options.
-
- Inhibit use of --dhcp-option to send hostname DHCP options.
-
- Update the DNS with DHCP information after re-reading
- /etc/hosts so that any DHCP derived names which have been
- shadowed by now-deleted hosts entries become visible.
+ Improve start-up speed when reading large hosts files
+ containing many distinct addresses.
- Fix typos in dnsmasq.conf.example
-
- Fixes to Makefile(s) to help pkgsrc packaging - patch
- from "pancake".
-
- Add dhcp-boot option to support network boot.
-
- Check for duplicate IP addresses in dhcp-hosts lines
- and refuse to run if found. If allowed to remain these
- can provoke an infinite loop in the DHCP protocol.
-
- Attempted to rationalise the .spec files for rpm
- building. There are now files for Redhat, Suse and
- Mandrake. I hope they work OK.
-
- Fixed hard-to-reproduce crash involving use of local
- domains and IPv6 queries. Thanks to Roy Marples for
- helping to track that one down.
-
-release 2.1
- Thanks to Matt Swift and Dag Wieers for many suggestions
- which went into this release.
-
- Tweak include files to allow compilation on FreeBSD 5
-
- Fix unaligned access warnings on BSD/Alpha.
+ Fix problem if dnsmasq is started without the stdin,
+ stdout and stderr file descriptors open. This can manifest
+ itself as 100% CPU use. Thanks to Chris Moore for finding
+ this.
- Allow empty DHCP options, like so: dhpc-option=44
-
- Allow single-byte DHCP options like so: dhcp-option=20,1
-
- Allow comments on the same line as options in
- /etc/dnsmasq.conf
-
- Don't complain when the same name and address is
- allocated to a host using DHCP and /etc/hosts.
-
- Added to the example configuration the dnsmasq equivalent
- of the ISC dhcpd settings given in
- http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt
-
- Fixed long-existing strangeness in Linux IPv6 interface
- discovery code. The flags field in /proc/net/if_inet6 is
- _not_ the interface flags.
-
- Fail gracefully when getting an ENODEV error when trying
- to bind an IPv6 socket, rather than bailing out. Thanks
- to Jan Ischebeck for feedback on that.
-
- Allow the name->address mapping for static DHCP leases to
- be set by /etc/hosts. It's now possible to have
- dhcp-host=<mac addr>,wibble
- or even
- dhcp-host=wibble
- and in /etc/hosts have
- wibble 1.2.3.4
- and for the correct thing to happen. Note that some sort
- of dhcp-host line is still needed, it's not possible for
- random host to claim an address in /etc/hosts without
- some explicit configuration.
-
- Make 0.0.0.0 in a dhcp-option to mean "the machine
- running dnsmasq".
-
- Fix lease time spec when specified in dhcp-range and not
- in dhcp-host, previously this was always one hour.
-
- Fix problem with setting domains as "local only". -
- thanks to Chris Schank.
-
- Added support for max message size DHCP option.
-
-release 2.2
- Fix total lack for DHCP functionality on
- Linux systems with IPv6 enabled. - thanks to
- Jonathon Hudson for spotting that.
-
- Move default config file under FreeBSD - patch from
- Steven Honson
-
-release 2.3
- Fix "install" makefile target. (reported by Rob Stevens)
-
- Ensure that "local=/domain/" flag is obeyed for all
- queries on a domain, not just A and AAAA. (Reported by
- Peter Fichtner.)
-
- Handle DHCPDECLINE messages and provide an error message
- in DHCPNAK messages.
-
- Add "domain" setting example to
- dnsmasq.conf.example. Thanks to K P Kirchdorfer for
- spotting that it was missing.
-
- Subtle change to the DHCPREQUEST handling code to work
- around a bug in the DHCP client in HP Jetdirect printers.
- Thanks to Marko Stolle for finding this problem.
-
- Return DHCP T1 and T2 times, with "fuzz" to desychronise lease
- renewals, as specified in the RFC.
-
- Ensure that the END option is always present in DHCP
- packets , even if the packet is too small to fit all
- the requested options.
-
- Handle larger-than-default DHCP packets if required, up
- to the ethernet MTU.
-
- Fix a couple of places where the return code from
- malloc() was not checked.
-
- Cope with a machine taking a DHCP lease and then moving
- network so that the lease address is no longer valid.
-
- The DHCP server will now work via a BOOTP relay - remote
- networks are configured with the dhcp-range option the
- same as directly connected ones, but they need an
- additional netmask parameter. Eg
- --dhcp-range=192.168.4.10,192.168.4.50,255.255,255.0
- will enable DHCP service via a BOOTP relay on the
- 192.168.4.0 network.
-
- Add a limit on the number of available DHCP leases,
- otherwise the daemon could be DOSed by a malicious
- host. The default is 150, but it can be changed by the
- dhcp-lease-max option.
-
- Fixed compilation on OpenBSD (thanks to Frederic Brodbeck
- for help with that.)
-
- Reworked the DHCP network handling code for two good
- effects: (1) The limit of one network only for DHCP on
- FreeBSD is now gone, (2) The DHCP server copes with
- dynamically created interfaces. The one-interface
- limitation remains for OpenBSD, which is missing
- extensions to the socket API which have been in Linux
- since version 2.2 and FreeBSD since version 4.8.
-
- Reworked the DNS network code to also cope with
- dynamically created interfaces. dnsmasq will now listen
- to the wildcard address and port 53 by default, so if no
- --interface or --address options are given it will handle
- dynamically created interfaces. The old behaviour can be
- restored with --bind-interfaces for people running BIND
- on one interface and dnsmasq on another. Note that
- --interface and --address options still work, but the
- filtering is done by dnsmasq, rather then the kernel.
- This works on Linux, and FreeBSD>=5.0. On systems which
- don't support the required API extensions, the old
- behaviour is used, just as if --bind-interfaces had been set.
-
- Allow IPv6 support to be disabled at compile time. To do
- that, add -DNO_IPV6 to the CFLAGS. Thanks to Oleg
- I. Vdovikin for the suggestion to do that.
-
- Add ability to set DHCP options per network. This is done
- by giving a network an identifier like this:
- dhcp-range=red-net,192.168.0.10,192.168.0.50
- and then labeling options intended for that network only
- like this:
- dhcp-option=red-net,6,1.1.1.1
- Thanks to Oleg Vdovikin for arguing that one through.
-
- Made errors in the configuration file non-fatal: dnsmasq
- will now complain bitterly, but continue.
-
- Added --read-ethers option, to allow dnsmasq to pull
- static DHCP information from that file.
- Thanks to Andi Cambeis for that suggestion.
-
- Added HAVE_BROKEN_RTC compilation option to support
- embedded systems without a stable RTC. Oleg Vdovikin
- helped work out how to make that work.
-
-release 2.4
- Fixed inability to start when the lease file doesn't
- already exist. Thanks to Dag Wieers for reporting that.
-
- Fixed problem were dhcp-host configuration options did
- not play well with entries in /etc/ethers for the same
- host. Thanks again to Dag Wieers.
-
- Tweaked DHCP code to favour moving to a newly-configured
- static IP address rather than an old lease when doing
- DHCP allocation.
-
- Added --alias configuration option. This provides IPv4
- rewrite facilities like Cisco "DNS doctoring". Suggested
- by Chad Skeeters.
-
- Fixed bug in /etc/ethers parsing code triggered by tab
- characters. Qudos to Dag Wieers for hepling to nail that
- one.
-
- Added "bind-interfaces" option correctly.
-
-release 2.5
- Made "where are we allocating addresses?" code in DHCP
- server cope with requests via a relay which is on a
- directly connected network for which there is not a
- configured netmask. This strange state of affairs occurs
- with win4lin. Thanks to Alex Melt and Jim Horner for bug
- reports and testing with this.
-
- Fixed trivial-but-irritating missing #include which broke
- compilation on *BSD.
-
- Force --bind-interfaces if IP-aliased interface
- specifications are used, since the sockets API provides
- no other sane way to determine which alias of an
- interface a packet was sent to. Thanks to Javier Kohen
- for the bug report.
-
-release 2.6
- Support Token Ring DHCP. Thanks to Dag Wieers for help
- testing. Note that Token ring support only works on Linux
- currently.
-
- Fix compilation on MacOS X. Thanks to Bernhard Ehlers for
- the patch.
-
- Added new "ignore" keyword for
- dhcp-host. "dhcp-host=11:22:33:44:55:66,ignore" will
- cause the DHCP server to ignore any host with the given
- MAC address, leaving it to other servers on the
- network. This also works with client-id and hostnames.
- Suggestion by Alex Melt.
-
- Fixed parsing of hex client IDs. Problem spotted by Peter
- Fichtner.
-
- Allow conf-file options in configuration file, to
- provide an include function.
-
- Re-read /etc/ethers on receipt of SIGHUP.
-
- Added back the ability to read ISC dhcpd lease files, by
- popular demand. Note that this is deprecated and for
- backwards compatibility only. You can get back the 4K of
- memory that the code occupies by undefining
- "HAVE_ISC_READER" in src/config.h
-
- Added ability to disable "pool" DHCP address allocation
- whilst leaving static leases working. The syntax is
- "dhcp-range=192.168.0.0,static"
- Thanks to Grzegorz Nosek for the suggestion.
-
- Generalized dnsmasq-rh.spec file to work on Mandrake too,
- and removed dnsmasq-mdk.spec. Thanks to Doug Keller.
-
- Allow DHCP options which are tied to specific static
- leases in the same way as to specific networks.
-
- Generalised the dhcp-option parser a bit to allow hex
- strings as parameters. This is now legal:
- dhcp-option=128,e4:45:74:68:00:00
- Inspired by a patch from Joel Nordell.
-
- Changed the semantics of argument-less dhcp-options for
- the default-setting ones, ie 1, 3, 6 and 28. Now, doing
- eg, dhcp-option=3 stops dnsmasq from sending a default
- router option at all. Thanks to Scott Emmons for pointing
- out that this is useful.
-
- Fixed dnsmasq.conf parsing bug which interpreted port
- numbers in server= lines as a comment. To start a
- comment, a '#' character must now be a the start of a
- line or preceded by whitespace. Thanks to Christian
- Haggstrom for the bug report.
-
-release 2.7
- Allow the dhcp-host specification of id:* which makes
- dnsmasq ignore any client-id. This is useful to ensure
- that a dual-boot machine sees the same lease when one OS
- gives a client-id and the other doesn't. It's also useful
- when PXE boot DHCP does not use client IDs but the OS it boots
- does. Thanks to Grzegorz Nosek for suggesting this enhancement.
-
- No longer assume that ciaddr is zero in received DHCPDISCOVER
- messages, just for security against broken clients.
-
- Set default of siaddr field to the address of the machine running
- dnsmasq when not explicitly set using dhcp-boot
- option. This is the ISC dhcpd behaviour.
-
- Send T1 and T2 options in DHCPOFFER packets. This is required
- by the DHCP client in some JetDirect printers. Thanks
- to Paul Mattal for work on this.
-
- Fixed bug with DHCP on OpenBSD reported by Dominique Jacquel.
- The code which added loopback interfaces to the list
- was confusing the DHCP code, which expected one interface only.
- Solved by adding loopback interfaces to address list instead.
-
- Add dhcp-vendorclass option to allow options to be sent only
- to certain classes of clients.
-
- Tweaked option search code so that if a netid-qualified
- option is used, any unqualified option is ignored.
-
- Changed the method of picking new dynamic IP
- addresses. This used to use the next consecutive
- address as long it was free, now it uses a hash
- from the client hardware address. This reduces the amount
- of address movement for clients which let their lease
- expire and allows consecutive DHCPOFFERS to the same host
- to (almost always) be for the same address, without
- storing state before a lease is granted.
+ Fix shell-scripting bug in bld/pkg-wrapper. Thanks to
+ Mark Mitchell for the patch.
+
+ Allow the TFP server or boot server in --pxe-service, to
+ be a domain name instead of an IP address. This allows for
+ round-robin to multiple servers, in the same way as
+ --dhcp-boot. A good suggestion from Cristiano Cumer.
+
+ Support BUILDDIR variable in the Makefile. Allows builds
+ for multiple archs from the same source tree with eg.
+ make BUILDDIR=linux (relative to dnsmasq tree)
+ make BUILDDIR=/tmp/openbsd (absolute path)
+ If BUILDDIR is not set, compilation happens in the src
+ directory, as before. Suggestion from Mark Mitchell.
+
+ Support DHCPv6. Support is there for the sort of things
+ the existing v4 server does, including tags, options,
+ static addresses and relay support. Missing is prefix
+ delegation, which is probably not required in the dnsmasq
+ niche, and an easy way to accept prefix delegations from
+ an upstream DHCPv6 server, which is. Future plans include
+ support for DHCPv6 router option and MAC address option
+ (to make selecting clients by MAC address work like IPv4).
+ These will be added as the standards mature.
+ This code has been tested, but this is the first release,
+ so don't bet the farm on it just yet. Many thanks to all
+ testers who have got it this far.
+
+ Support IPv6 router advertisements. This is a
+ simple-minded implementation, aimed at providing the
+ vestigial RA needed to go alongside IPv6. Is picks up
+ configuration from the DHCPv6 conf, and should just need
+ enabling with --enable-ra.
+
+ Fix long-standing wrinkle with --localise-queries that
+ could result in wrong answers when DNS packets arrive
+ via an interface other than the expected one. Thanks to
+ Lorenzo Milesi and John Hanks for spotting this one.
- Tweaked option handling code to return all possible
- options rather than none when DHCP "requested options"
- field is missing. This fixes interoperability with
- ancient IBM LANMAN DHCP clients. Thanks to Jim Louvau for
- help with this.
-
-release 2.8
- Pad DHCP packets to a minimum size of 300 bytes. This
- fixes interoperability problems with the Linux in-kernel
- DHCP/BOOTP client. Thanks to Richard Musil for
- diagnosing this and supplying a patch.
-
- Fixed option-parsing bug and potential memory leak. Patch
- from Richard Musil.
-
- Improved vendor class configuration and added user class
- configuration. Specifically: (1) options are matched on
- the netids from dhcp-range, dhcp-host, vendor class and
- user class(es). Multiple net-ids are allowed and options
- are searched on them all. (2) matches agains vendor class
- and user class are now on a substring, if the given
- string is a substring of the vendor/user class, then a
- match occurs. Thanks again to Richard Musil for prompting
- this.
-
- Make "#" match any domain on --address and --server
- flags. --address=/#/1.2.3.4 will return 1.2.3.4 for _any_
- domain not otherwise matched. Of course
- --server=/#/1.2.3.4 is exactly equivalent to
- --server=1.2.3.4. Special request from Josh Howlett.
-
- Fixed a nasty bug which would cause dnsmasq to lose track
- of leases for hosts which had a --dhcp-host flag without
- a name specification. The mechanism for this was that
- the hostname could get erroneously set as a zero-length
- string and then written to the leases file as a
- mal-formed line. Restarting dnsmasq would then lose the lease.
- Alex Hermann's work helped chase down this problem.
-
- Add checks against DHCP clients which return zero-length
- hostnames. This avoids the potential lease-loss problems
- reffered to above. Also, if a client sends a hostname when
- it creates a lease but subsequently sends no or a
- zero-length hostname whilst renewing, continue to use the
- existing hostname, don't wipe it out.
-
- Tweaked option parsing to flag some parameter errors.
-
-release 2.9
- Fixed interface filter code for two effects: 1) Fixed bug
- where queries sent via loopback interface
- but to the address of another interface were ignored
- unless the loopback interface was explicitly configured.
- 2) on OpenBSD failure to configure one interface now
- causes a fatal error on startup rather than an huge
- stream of log messages. Thanks to Erik Jan Tromp for
- finding that bug.
-
- Changed server selection strategy to improve performance
- when there are many available servers and some are
- broken. The new algorithm is to pick as before for the
- first try, but if a query is retried, to send to all
- available servers in parallel. The first one to reply
- then becomes prefered for the next query. This should
- improve reliability without generating significant extra
- upstream load.
-
- Fixed breakage of special servers/addresses for
- unqualified domains introduced in version 2.8
-
- Allow fallback to "bind-interfaces" at runtime: Some
- verions of *BSD seem to have enough stuff in the header
- files to build but no kernel support. Also now log if
- "bind-interfaces" is forced on.
-
- Log replies from upstream servers which refuse to do
- recursion - dnsmasq is not a recursive nameserver and
- relies on upstream servers to do the recursion, this
- flags a configuration error.
-
- Disable client-id matching for hosts whose MAC address is
- read from /etc/ethers. Patch from Oleg I. Vdovikin.
-
- Extended --mx-host flag to allow arbitrary targets for MX
- records, suggested by Moritz Bunkus.
-
- Fixed build under NetBSD 2.0 - thanks to Felix Deichmann
- for the patch.
-
- Deal correctly with repeated addresses in /etc/hosts. The
- first name found is now returned for reverse lookups,
- rather than all of them.
-
- Add back fatal errors when nonexistant
- interfaces or interface addresses are given but only in
- "bind-interfaces" mode. Principle of least surprise applies.
-
- Allow # as the argument to --domain, meaning "read the
- domain from the first search directive in
- /etc.resolv.conf". Feature suggested by Evan Jones.
-
-release 2.10
- Allow --query-port to be set to a low port by creating and
- binding the socket before dropping root. (Suggestion from
- Jamie Lokier)
-
- Support TCP queries. It turned out to be possible to do
- this with a couple of hundred lines of code, once I knew
- how. The executable size went up by a few K on i386.
- There are a few limitations: data obtained via TCP is not
- cached, and dynamically-created interfaces may break under
- certain circumstances. Source-address or query-port
- specifications are ignored for TCP.
-
- NAK attempts to renew a DHCP lease where the DHCP range
- has changed and the lease is no longer in the allowed
- range. Jamie Lokier pointed out this bug.
-
- NAK attempts to renew a pool DHCP lease when a statically
- allocated address has become available, forcing a host to
- move to it's allocated address. Lots of people have
- suggested this change and been rebuffed (they know who
- they are) the straws that broke the camel's back were Tim
- Cutts and Jamie Lokier.
-
- Remove any nameserver records from answers which are
- modified by --alias flags. If the answer is modified, it
- cannot any longer be authoritative.
-
- Change behaviour of "bogus-priv" option to return NXDOMAIN
- rather than a PTR record with the dotted-quad address as
- name. The new behaviour doesn't provoke tcpwrappers like
- the old behavior did.
-
- Added a patch for the Suse rpm. That changes the default
- group to one suitable for Suse and disables inclusion of
- the ISC lease-file reader code. Thanks to Andy Cambeis for
- his ongoing work on Suse packaging.
-
- Support forwarding of EDNS.0 The maximum UDP packet size
- defaults to 1280, but may be changed with the
- --edns-packet-max option. Detect queries with the do bit
- set and always forward them, since DNSSEC records are
- not cached. This behaviour is required to make
- DNSSECbis work properly though dnsmasq. Thanks to Simon
- Josefsson for help with this.
-
- Move default config file location under OpenBSD from
- /usr/local/etc/dnsmasq.conf to /etc/dnsmasq.conf. Bug
- report from Jonathan Weiss.
-
- Use a lease with matching MAC address for a host which
- doesn't present a client-id, even if there was a client ID
- at some point in the past. This reduces surprises when
- changing DHCP clients, adding id:* to a host, and from the
- semantics change of /etc/ethers in 2.9. Thanks to Bernard
- Sammer for finding that.
-
- Added a "contrib" directory and in it the dnslist utility,
- from Thomas Tuttle.
-
- Fixed "fail to start up" problems under Linux with IPv6
- enabled. It's not clear that these were an issue in
- released versions, but they manifested themselves when TCP
- support was added. Thanks to Michael Hamilton for
- assistance with this.
-
-version 2.11
- Fixed DHCP problem which could result in two leases in the
- database with the same address. This looked much more
- alarming then it was, since it could only happen when a
- machine changes MAC address but kept the same name. The
- old lease would persist until it timed out but things
- would still work OK.
-
- Check that IP addresses in all dhcp-host directives are
- unique and die horribly if they are not, since otherwise
- endless protocol loops can occur.
+ Update French translation. Thanks to Gildas Le Nadan.
+
+ Update Polish translation. Thanks to Jan Psota.
+
+
+version 2.59
+ Fix regression in 2.58 which caused failure to start up
+ with some combinations of dnsmasq config and IPv6 kernel
+ network config. Thanks to Brielle Bruns for the bug
+ report.
+
+ Improve dnsmasq's behaviour when network interfaces are
+ still doing duplicate address detection (DAD). Previously,
+ dnsmasq would wait up to 20 seconds at start-up for the
+ DAD state to terminate. This is broken for bridge
+ interfaces on recent Linux kernels, which don't start DAD
+ until the bridge comes up, and so can take arbitrary
+ time. The new behaviour lets dnsmasq poll for an arbitrary
+ time whilst providing service on other interfaces. Thanks
+ to Stephen Hemminger for pointing out the problem.
+
+
+version 2.58
+ Provide a definition of the SA_SIZE macro where it's
+ missing. Fixes build failure on openBSD.
+
+ Don't include a zero terminator at the end of messages
+ sent to /dev/log when /dev/log is a datagram socket.
+ Thanks to Didier Rabound for spotting the problem.
+
+ Add --dhcp-sequential-ip flag, to force allocation of IP
+ addresses in ascending order. Note that the default
+ pseudo-random mode is in general better but some
+ server-deployment applications need this.
+
+ Fix problem where a server-id of 0.0.0.0 is sent to a
+ client when a dhcp-relay is in use if a client renews a
+ lease after dnsmasq restart and before any clients on the
+ subnet get a new lease. Thanks to Mike Ruiz for assistance
+ in chasing this one down.
+
+ Don't return NXDOMAIN to an AAAA query if we have CNAME
+ which points to an A record only: NODATA is the correct
+ reply in this case. Thanks to Tom Fernandes for spotting
+ the problem.
+
+ Relax the need to supply a netmask in --dhcp-range for
+ networks which use a DHCP relay. Whilst this is still
+ desireable, in the absence of a netmask dnsmasq will use
+ a default based on the class (A, B, or C) of the address.
+ This should at least remove a cause of mysterious failure
+ for people using RFC1918 addresses and relays.
+
+ Add support for Linux conntrack connection marking. If
+ enabled with --conntrack, the connection mark for incoming
+ DNS queries will be copied to the outgoing connections
+ used to answer those queries. This allows clever firewall
+ and accounting stuff. Only available if dnsmasq is
+ compiled with HAVE_CONNTRACK and adds a dependency on
+ libnetfilter-conntrack. Thanks to Ed Wildgoose for the
+ initial idea, testing and sponsorship of this function.
+
+ Provide a sane error message when someone attempts to
+ match a tag in --dhcp-host.
+
+ Tweak the behaviour of --domain-needed, to avoid problems
+ with recursive nameservers downstream of dnsmasq. The new
+ behaviour only stops A and AAAA queries, and returns
+ NODATA rather than NXDOMAIN replies.
+
+ Efficiency fix for very large DHCP configurations, thanks
+ to James Gartrell and Mike Ruiz for help with this.
+
+ Allow the TFTP-server address in --dhcp-boot to be a
+ domain-name which is looked up in /etc/hosts. This can
+ give multiple IP addresses which are used round-robin,
+ thus doing TFTP server load-balancing. Thanks to Sushil
+ Agrawal for the patch.
+
+ When two tagged dhcp-options for a particular option
+ number are both valid, use the one which is valid without
+ a tag from the dhcp-range. Allows overriding of the value
+ of a DHCP option for a particular host as well as
+ per-network values. So
+ --dhcp-range=set:interface1,......
+ --dhcp-host=set:myhost,.....
+ --dhcp-option=tag:interface1,option:nis-domain,"domain1"
+ --dhcp-option=tag:myhost,option:nis-domain,"domain2"
+ will set the NIS-domain to domain1 for hosts in the range, but
+ override that to domain2 for a particular host.
+
+ Fix bug which resulted in truncated files and timeouts for
+ some TFTP transfers. The bug only occurs with netascii
+ transfers and needs an unfortunate relationship between
+ file size, blocksize and the number of newlines in the
+ last block before it manifests itself. Many thanks to
+ Alkis Georgopoulos for spotting the problem and providing
+ a comprehensive test-case.
+
+ Fix regression in TFTP server on *BSD platforms introduced
+ in version 2.56, due to confusion with sockaddr
+ length. Many thanks to Loïc Pefferkorn for finding this.
+
+ Support scope-ids in IPv6 addresses of nameservers from
+ /etc/resolv.conf and in --server options. Eg
+ nameserver fe80::202:a412:4512:7bbf%eth0 or
+ server=fe80::202:a412:4512:7bbf%eth0. Thanks to
+ Michael Stapelberg for the suggestion.
+
+ Update Polish translation, thanks to Jan Psota.
+
+ Update French translation. Thanks to Gildas Le Nadan.
+
+
+version 2.57
+ Add patches to allow build under Android.
+
+ Provide our own header for the DNS protocol, rather than
+ relying on arpa/nameser.h. This has proved more or less
+ defective over the years and the final straw is that it's
+ effectively empty on Android.
+
+ Fix regression in 2.56 which caused hex constants in
+ configuration to be rejected if they contain the '*'
+ wildcard.
+
+ Correct wrong casts of arguments to ctype.h functions,
+ isdigit(), isxdigit() etc. Thanks to Matthias Andree for
+ spotting this.
+
+ Allow build with IDN support independently from i18n.
+ IDN support continues to be included automatically
+ when i18n is included.
+ 'make COPTS=-DHAVE_IDN' is the magic incantation.
+
+ Modify check on extraneous command line junk (added in
+ 2.56) so that it doesn't complain about extra _empty_
+ arguments. Otherwise this breaks libvirt.
+
+
+version 2.56
+ Add a patch to allow dnsmasq to get interface names right in a
+ Solaris zone. Thanks to Dj Padzensky for this.
+
+ Improve data-type parsing heuristics so that
+ --dhcp-option=option:domain-search,.
+ treats the value as a string and not an IP address.
+ Thanks to Clemens Fischer for spotting that.
+
+ Add IPv6 support to the TFTP server. Many thanks to Jan
+ 'RedBully' Seiffert for the patches.
- Use IPV6_RECVPKTINFO as socket option rather than
- IPV6_PKTINFO where available. This keeps late-model FreeBSD
- happy.
-
- Set source interface when replying to IPv6 UDP
- queries. This is needed to cope with link-local addresses.
-
-version 2.12
- Added extra checks to ensure that DHCP created DNS entries
- cannot generate multiple DNS address->name entries. Thanks to
- Stefan Monnier for finding the exact set of configuration
- options which could create this.
-
- Don't set the the filterwin2k option in the example config
- file and add warnings that is breaks Kerberos. Thanks to
- Simon Josefsson and Timothy Folks for pointing that out.
+ Log DNS queries at level LOG_INFO, rather then
+ LOG_DEBUG. This makes things consistent with DHCP
+ logging. Thanks to Adam Pribyl for spotting the problem.
+
+ Ensure that dnsmasq terminates cleanly when using
+ --syslog-async even if it cannot make a connection to the
+ syslogd.
+
+ Add --add-mac option. This is to support currently
+ experimental DNS filtering facilities. Thanks to Benjamin
+ Petrin for the orignal patch.
+
+ Fix bug which meant that tags were ignored in dhcp-range
+ configuration specifying PXE-proxy service. Thanks to
+ Cristiano Cumer for spotting this.
+
+ Raise an error if there is extra junk, not part of an
+ option, on the command line.
+
+ Flag a couple of log messages in cache.c as coming from
+ the DHCP subsystem. Thanks to Olaf Westrik for the patch.
+
+ Omit timestamps from logs when a) logging to stderr and
+ b) --keep-in-forground is set. The logging facility on the
+ other end of stderr can be assumned to supply them. Thanks
+ to John Hallam for the patch.
+
+ Don't complain about strings longer than 255 characters in
+ --txt-record, just split the long strings into 255
+ character chunks instead.
+
+ Fix crash on double-free. This bug can only happen when
+ dhcp-script is in use and then only in rare circumstances
+ triggered by high DHCP transaction rate and a slow
+ script. Thanks to Ferenc Wagner for finding the problem.
+
+ Only log that a file has been sent by TFTP after the
+ transfer has completed succesfully.
+
+ A good suggestion from Ferenc Wagner: extend
+ the --domain option to allow this sort of thing:
+ --domain=thekelleys.org.uk,192.168.0.0/24,local
+ which automatically creates
+ --local=/thekelleys.org.uk/
+ --local=/0.168.192.in-addr.arpa/
+
+ Tighten up syntax checking of hex contants in the config
+ file. Thanks to Fred Damen for spotting this.
+
+ Add dnsmasq logo/icon, contributed by Justin Swift. Many
+ thanks for that.
+
+ Never cache DNS replies which have the 'cd' bit set, or
+ which result from queries forwarded with the 'cd' bit
+ set. The 'cd' bit instructs a DNSSEC validating server
+ upstream to ignore signature failures and return replies
+ anyway. Without this change it's possible to pollute the
+ dnsmasq cache with bad data by making a query with the
+ 'cd' bit set and subsequent queries would return this data
+ without its being marked as suspect. Thanks to Anders
+ Kaseorg for pointing out this problem.
+
+ Add --proxy-dnssec flag, for compliance with RFC
+ 4035. Dnsmasq will now clear the 'ad' bit in answers returned
+ from upstream validating nameservers unless this option is
+ set.
+
+ Allow a filename of "-" for --conf-file to read
+ stdin. Suggestion from Timothy Redaelli.
+
+ Rotate the order of SRV records in replies, to provide
+ round-robin load balancing when all the priorities are
+ equal. Thanks to Peter McKinney for the suggestion.
+
+ Edit
+ contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist
+ so that it doesn't log all queries to a file by
+ default. Thanks again to Peter McKinney.
+
+ By default, setting an IPv4 address for a domain but not
+ an IPv6 address causes dnsmasq to return
+ an NODATA reply for IPv6 (or vice-versa). So
+ --address=/google.com/1.2.3.4 stops IPv6 queries for
+ *google.com from being forwarded. Make it possible to
+ override this behaviour by defining the sematics if the
+ same domain appears in both --server and --address.
+ In that case, the --address has priority for the address
+ family in which is appears, but the --server has priority
+ of the address family which doesn't appear in --adddress
+ So:
+ --address=/google.com/1.2.3.4
+ --server=/google.com/#
+ will return 1.2.3.4 for IPv4 queries for *.google.com but
+ forward IPv6 queries to the normal upstream nameserver.
+ Similarly when setting an IPv6 address
+ only this will allow forwarding of IPv4 queries. Thanks to
+ William for pointing out the need for this.
+
+ Allow more than one --dhcp-optsfile and --dhcp-hostsfile
+ and make them understand directories as arguments in the
+ same way as --addn-hosts. Suggestion from John Hanks.
+
+ Ignore rebinding requests for leases we don't know
+ about. Rebind is broadcast, so we might get to overhear a
+ request meant for another DHCP server. NAKing this is
+ wrong. Thanks to Brad D'Hondt for assistance with this.
+
+ Fix cosmetic bug which produced strange output when
+ dumping cache statistics with some configurations. Thanks
+ to Fedor Kozhevnikov for spotting this.
+
+
+version 2.55
+ Fix crash when /etc/ethers is in use. Thanks to
+ Gianluigi Tiesi for finding this.
+
+ Fix crash in netlink_multicast(). Thanks to Arno Wald for
+ finding this one.
+
+ Allow the empty domain "." in dhcp domain-search (119)
+ options.
+
+
+version 2.54
+ There is no version 2.54 to avoid confusion with 2.53,
+ which incorrectly identifies itself as 2.54.
+
+
+version 2.53
+ Fix failure to compile on Debian/kFreeBSD. Thanks to
+ Axel Beckert and Petr Salinger.
+
+ Fix code to avoid scary strict-aliasing warnings
+ generated by gcc 4.4.
- Log types of incoming queries as well as source and domain.
-
- Log NODATA replies generated as a result of the
- filterwin2k option.
+ Added FAQ entry warning about DHCP failures with Vista
+ when firewalls block 255.255.255.255.
+
+ Fixed bug which caused bad things to happen if a
+ resolv.conf file which exists is subsequently removed.
+ Thanks to Nikolai Saoukh for the patch.
+
+ Rationalised the DHCP tag system. Every configuration item
+ which can set a tag does so by adding "set:<tag>" and
+ every configuration item which is conditional on a tag is
+ made so by "tag:<tag>". The NOT operator changes to '!',
+ which is a bit more intuitive too. Dhcp-host directives
+ can set more than one tag now. The old '#' NOT,
+ "net:" prefix and no-prefixes are still honoured, so
+ no existing config file needs to be changed, but
+ the documentation and new-style config files should be
+ much less confusing.
+
+ Added --tag-if to allow boolean operations on tags.
+ This allows complicated logic to be clearer and more
+ general. A great suggestion from Richard Voigt.
+
+ Add broadcast/unicast information to DHCP logging.
+
+ Allow --dhcp-broadcast to be unconditional.
+
+ Fixed incorrect behaviour with NOT <tag> conditionals in
+ dhcp-options. Thanks to Max Turkewitz for assistance
+ finding this.
+
+ If we send vendor-class encapsulated options based on the
+ vendor-class supplied by the client, and no explicit
+ vendor-class option is given, echo back the vendor-class
+ from the client.
+
+ Fix bug which stopped dnsmasq from matching both a
+ circuitid and a remoteid. Thanks to Ignacio Bravo for
+ finding this.
+
+ Add --dhcp-proxy, which makes it possible to configure
+ dnsmasq to use a DHCP relay agent as a full proxy, with
+ all DHCP messages passing through the proxy. This is
+ useful if the relay adds extra information to the packets
+ it forwards, but cannot be configured with the RFC 5107
+ server-override option.
+
+ Added interface:<iface name> part to dhcp-range. The
+ semantics of this are very odd at first sight, but it
+ allows a single line of the form
+ dhcp-range=interface:virt0,192.168.0.4,192.168.0.200
+ to be added to dnsmasq configuration which then supplies
+ DHCP and DNS services to that interface, without affecting
+ what services are supplied to other interfaces and
+ irrespective of the existance or lack of
+ interface=<interface>
+ lines elsewhere in the dnsmasq configuration. The idea is
+ that such a line can be added automatically by libvirt
+ or equivalent systems, without disturbing any manual
+ configuration.
-version 2.13
- Fixed crash with un-named DHCP hosts introduced in 2.12.
- Thanks to Nicolo Wojewoda and Gregory Gathy for bug reports.
+ Similarly to the above, allow --enable-tftp=<interface>
-version 2.14
- Fix DHCP network detection for hosts which talk via a
- relay. This makes lease renewal for such hosts work
- correctly.
+ Allow a TFTP root to be set separately for requests via
+ different interfaces, --tftp-root=<path>,<interface>
- Support RFC3011 subnet selectors in the DHCP server.
+ Correctly handle and log clashes between CNAMES and
+ DNS names being given to DHCP leases. This fixes a bug
+ which caused nonsense IP addresses to be logged. Thanks to
+ Sergei Zhirikov for finding and analysing the problem.
- Fix DHCP code to generate RFC-compliant responses
- to hosts in the INIT-REBOOT state.
+ Tweak flush_log so as to avoid leaving the log
+ file in non-blocking mode. O_NONBLOCK is a property of the
+ file, not the process/descriptor.
- In the DHCP server, set the receive buffer size on
- the transmit-only packet socket to zero, to avoid
- waste of kernel buffers.
+ Fix contrib/Solaris10/create_package
+ (/usr/man -> /usr/share/man) Thanks to Vita Batrla.
- Fix DHCP address allocation code to use the whole of
- the DHCP range, including the start and end addresses.
+ Fix a problem where, if a client got a lease, then went
+ to another subnet and got another lease, then moved back,
+ it couldn't resume the old lease, but would instead get
+ a new address. Thanks to Leonardo Rodrigues for spotting
+ this and testing the fix.
- Attempt an ICMP "ping" on new addresses before allocating
- them to leases, to avoid allocating addresses which are in use.
+ Fix weird bug which sometimes omitted certain characters
+ from the start of quoted strings in dhcp-options. Thanks
+ to Dayton Turner for spotting the problem.
+
+ Add facility to redirect some domains to the standard
+ upstream servers: this allows something like
+ --server=/google.com/1.2.3.4 --server=/www.google.com/#
+ which will send queries for *.google.com to 1.2.3.4,
+ except *www.google.com which will be forwarded as usual.
+ Thanks to AJ Weber for prompting this addition.
+
+ Improve the hash-algorithm used to generate IP addresses
+ from MAC addresses during initial DHCP address
+ allocation. This improves performance when large numbers
+ of hosts with similar MAC addresses all try and get an IP
+ address at the same time. Thanks to Paul Smith for his
+ work on this.
- Handle rfc951 BOOTP as well as DHCP for hosts which have
- MAC address to IP address mapping defined.
+ Tweak DHCP code so that --bridge-interface can be used to
+ select which IP alias of an interface should be used for
+ DHCP purposes on Linux. If eth0 has an alias eth0:dhcp
+ then adding --bridge-interface=eth0:dhcp,eth0 will use
+ the address of eth0:dhcp to determine the correct subnet
+ for DHCP address allocation. Thanks to Pawel Golaszewski
+ for prompting this and Eric Cooper for further testing.
- Fix compilation under MacOS X. Thanks to Chris Tomlinson.
+ Add --dhcp-generate-names. Suggestion by Ferenc Wagner.
- Fix compilation under NetBSD. Thanks to Felix Deichmann.
+ Tweak DNS server selection algorithm when there is more
+ than one server available for a domain, eg.
+ --server=/mydomain/1.1.1.1
+ --server=/mydomain/2.2.2.2
+ Thanks to Alberto Cuesta-Canada for spotting a weakness
+ here.
- Added "keep-in-foreground" option. Thanks to Sean
- MacLennan for the patch.
+ Add --max-ttl. Thanks to Fredrik Ringertz for the patch.
-version 2.15
- Fixed NXDOMAIN/NODATA confusion for locally known
- names. We now return a NODATA reponse for names which are
- locally known. Now a query for (eg AAAA or MX) for a name
- with an IPv4 address in /etc/hosts which fails upstream
- will generate a NODATA response. Note that the query
- is still tried upstream, but a NXDOMAIN reply gets
- converted to NODATA. Thanks to Eric de Thouars, Eric
- Spakman and Mike Mestnik for bug reports/testing.
+ Allow --log-facility=- to force all logging to
+ stderr. Suggestion from Clemens Fischer.
- Allow multiple dhcp-ranges within the same network. The
- original intention was that there would be a dhcp-range
- option for each network served, but there's no real reason
- not to allow discontinuous ranges within a network so this
- release adds support for that.
+ Fix regression which caused configuration like
+ --address=/.domain.com/1.2.3.4 to be rejected. The dot to the
+ left of the domain has been implied and not required for a
+ long time, but it should be accepted for backward
+ compatibility. Thanks to Andrew Burcin for spotting this.
+
+ Add --rebind-domain-ok and --rebind-localhost-ok.
+ Suggestion from Clemens Fischer.
- Check for dhcp-ranges which are inconsistent with their
- netmask, and generate errors or warnings.
-
- Improve error messages when there are problems with
- configuration.
+ Log replies to queries of type TXT, when --log-queries
+ is set.
-version 2.16
- Fixed typo in OpenBSD-only code which stopped compilation
- under that OS. Chris Weinhaupl gets credit for reporting
- this.
+ Fix compiler warnings when compiled with -DNO_DHCP. Thanks
+ to Shantanu Gadgil for the patch.
- Added dhcp-authoritative option which restores non-RFC
- compliant but desirable behaviour of pre-2.14 versions and
- avoids long timeouts while DHCP clients try to renew leases
- which are unknown to dnsmasq. Thanks to John Mastwijk for
- help with this.
+ Updated French translation. Thanks to Gildas Le Nadan.
- Added support to the DHCP option code to allow RFC-3397
- domain search DHCP option (119) to be sent.
+ Updated Polish translation. Thanks to Jan Psota.
- Set NONBLOCK on all listening sockets to workaround non-POSIX
- compliance in Linux 2.4 and 2.6. This fixes rare hangs which
- occured when corrupted packets were received. Thanks to
- Joris van Rantwijk for chasing that down.
+ Updated German translation. Thanks to Matthias Andree.
+
+ Added contrib/static-arp, thanks to Darren Hoo.
- Updated config.h for NetBSD. Thanks to Martin Lambers.
+ Fix corruption of the domain when a name from /etc/hosts
+ overrides one supplied by a DHCP client. Thanks to Fedor
+ Kozhevnikov for spotting the problem.
+
+ Updated Spanish translation. Thanks to Chris Chatham.
+
+
+version 2.52
+ Work around a Linux kernel bug which insists that the
+ length of the option passed to setsockopt must be at least
+ sizeof(int) bytes, even if we're calling SO_BINDTODEVICE
+ and the device name is "lo". Note that this is fixed
+ in kernel 2.6.31, but the workaround is harmless and
+ allows earlier kernels to be used. Also fix dnsmasq
+ bug which reported the wrong address when this failed.
+ Thanks to Fedor for finding this.
+
+ The API for IPv6 PKTINFO changed around Linux kernel
+ 2.6.14. Workaround the case where dnsmasq is compiled
+ against newer headers, but then run on an old kernel:
+ necessary for some *WRT distros.
+
+ Re-read the set of network interfaces when re-loading
+ /etc/resolv.conf if --bind-interfaces is not set. This
+ handles the case that loopback interfaces do not exist
+ when dnsmasq is first started.
+
+ Tweak the PXE code to support port 4011. This should
+ reduce broadcasts and make things more reliable when other
+ servers are around. It also improves inter-operability
+ with certain clients.
+
+ Make a pxe-service configuration with no filename or boot
+ service type legal: this does a local boot. eg.
+ pxe-service=x86PC, "Local boot"
+
+ Be more conservative in detecting "A for A"
+ queries. Dnsmasq checks if the name in a type=A query looks
+ like a dotted-quad IP address and answers the query itself
+ if so, rather than forwarding it. Previously dnsmasq
+ relied in the library function inet_addr() to convert
+ addresses, and that will accept some things which are
+ confusing in this context, like 1.2.3 or even just
+ 1234. Now we only do A for A processing for four decimal
+ numbers delimited by dots.
+
+ A couple of tweaks to fix compilation on Solaris. Thanks
+ to Joel Macklow for help with this.
+
+ Another Solaris compilation tweak, needed for Solaris
+ 2009.06. Thanks to Lee Essen for that.
+
+ Added extract packaging stuff from Lee Essen to
+ contrib/Solaris10.
+
+ Increased the default limit on number of leases to 1000
+ (from 150). This is mainly a defence against DoS attacks,
+ and for the average "one for two class C networks"
+ installation, IP address exhaustion does that just as
+ well. Making the limit greater than the number of IP
+ addresses available in such an installation removes a
+ surprise which otherwise can catch people out.
+
+ Removed extraneous trailing space in the value of the
+ DNSMASQ_TIME_REMAINING DNSMASQ_LEASE_LENGTH and
+ DNSMASQ_LEASE_EXPIRES environment variables. Thanks to
+ Gildas Le Nadan for spotting this.
+
+ Provide the network-id tags for a DHCP transaction to
+ the lease-change script in the environment variable
+ DNSMASQ_TAGS. A good suggestion from Gildas Le Nadan.
+
+ Add support for RFC3925 "Vendor-Identifying Vendor
+ Options". The syntax looks like this:
+ --dhcp-option=vi-encap:<enterprise number>, .........
+
+ Add support to --dhcp-match to allow matching against
+ RFC3925 "Vendor-Identifying Vendor Classes". The syntax
+ looks like this:
+ --dhcp-match=tag,vi-encap<enterprise number>, <value>
+
+ Add some application specific code to assist in
+ implementing the Broadband forum TR069 CPE-WAN
+ specification. The details are in contrib/CPE-WAN/README
- Do a better job of distinguishing between retransmissions
- and new queries when forwarding. This fixes a bug
- triggered by the polipo web cache which sends A and AAAA
- queries both with the same transaction-ID. Thanks to
- Joachim Berdal Haga and Juliusz Chroboczek for help with this.
-
- Rewrote cache code to store CNAMES, rather then chasing
- them before storage. This eliminates bad situations when
- clients get inconsistent views depending on if data comes
- from the cache.
-
- Allow for more than one --addn-hosts flag.
-
- Clarify logged message when a DHCP lease clashes with an
- /etc/hosts entry. Thanks to Mat Swift for the suggestion.
-
- Added dynamic-dnsmasq from Peter Willis to the contrib
- section.
-
-version 2.17
- Correctly deduce the size of numeric dhcp-options, rather
- than making wild guesses. Also cope with negative values.
-
- Fixed use of C library reserved symbol "index" which broke
- under certain combinations of library and compiler.
-
- Make bind-interfaces work for IPv6 interfaces too.
-
- Warn if an interface is given for listening which doesn't
- currently exist when not in bind-interfaces mode. (This is
- already a fatal error when bind-interfaces is set.)
-
- Allow the --interface and --except-interface options to
- take a comma-separated list of interfaces.
-
- Tweak --dhcp-userclass matching code to work with the
- ISC dhclient which violates RFC3004 unless its
- configuration is very warped. Thanks to Cedric Duval for
- the bug report.
-
- Allow more than one network-id tag in a dhcp-option. All
- the tags must match to enable the option.
-
- Added dhcp-ignore option to disable classes of hosts based
- on network-id tags. Also allow BOOTP options to be
- controlled by network tags.
-
- Fill in sname, file and siaddr fields in replies to
- DHCPINFORM messages.
-
- Don't send NAK replies to DHCPREQUEST packets for disabled
- clients. Credit to Cedric Duval for spotting this.
-
- Fix rare crash associated with long DNS names and CNAME
- records. Thanks to Holger Hoffstatte and especially Steve
- Grecni for help chasing that one down.
-
-version 2.18
- Reworked the Linux interface discovery code (again) to
- cope with interfaces which have only IPv6 addresses and
- interfaces with more than one IPv6 address. Thanks to
- Martin Pels for help with that.
-
- Fix problems which occured when more than one dhcp-range
- was specified in the same subnet: sometimes parameters
- (lease time, network-id tag) from the wrong one would be
- used. Thanks to Rory Campbell-Lange for the bug report.
-
- Reset cache statistics when clearing the cache.
-
- Enable long command line options on FreeBSD when the
- C library supports them.
-
-version 2.19
- Tweaked the Linux-only interface discovery code to cope
- with interface-indexes larger than 8 bits in
- /proc/net/if_inet6. This only affects Linux, obviously.
- Thanks to Richard Atterer for the bug report.
-
- Check for under-length option fields in DHCP packets, a
- zero length client-id, in particluar, could seriously
- confuse dnsmasq 'till now. Thanks to Will Murname for help
- with that.
-
- If a DHCP-allocated address has an associated name in
- /etc/hosts, and the client does not provide a hostname
- parameter and there is no hostname in a matching dhcp-host
- option, send the /etc/hosts name as the hostname in
- the DHCP lease. Thanks to Will Murname for the suggestion.
-
-version 2.20
- Allow more than one instance of dnsmasq to run on a
- machine, each providing DHCP service on a different
- interface, provided that --bind-interfaces is set. This
- configuration used to work, but regressed in version 2.14
-
- Fix compilation on Mac OS X. Thanks to Kevin Bullock.
-
- Protect against overlong names and overlong
- labels in configuration and from DHCP.
-
- Fix interesting corner case in CNAME handling. This occurs
- when a CNAME has a target which "shadowed" by a name in
- /etc/hosts or from DHCP. Resolving the CNAME would sneak
- the upstream value of the CNAME's target into the cache,
- alongside the local value. Now that doesn't happen, though
- resolving the CNAME still gives the unshadowed value. This
- is arguably wrong but rather difficult to fix. The main
- thing is to avoid getting strange results for the target
- due to the cache pollution when resolving the
- CNAME. Thanks to Pierre Habouzit for exploring the corner
- and submitting a very clear bug report.
-
- Fix subtle bug in the DNS packet parsing code. It's almost
- impossible to describe this succinctly, but the one known
- manifestation is the inability to cache the A record for
- www.apple.com. Thanks to Bob Alexander for spotting that.
-
- Support SRV records. Thanks to Robert Kean for the patches
- for this.
-
- Fixed sign confusion in the vendor-id matching code which
- could cause crashes sometimes. (Credit to Mark Wiater for
- help finding this.)
-
- Added the ability to match the netid tag in a
- dhcp-range. Combined with the ability to have multiple
- ranges in a single subnet, this provides a means to
- segregate hosts on different address ranges based on
- vendorclass or userclass. Thanks to Mark Wiater for
- prompting this enhancement.
-
- Added preference values for MX records.
-
- Added the --localise-queries option.
-
-version 2.21
- Improve handling of SERVFAIL and REFUSED errors. Receiving
- these now initiates search for a new good server, and a
- server which returns them is not a candidate as a good
- server. Thanks to Istvan Varadi for pointing out the
- problem.
-
- Tweak the time code in BROKEN_RTC mode.
-
- Sanity check lease times in dhcp-range and dhcp-host
- configurations and force them to be at least two minutes
- (120s) leases shorter than a minute confuse some clients,
- notably Apple MacOS X. Rory Campbell-Lange found this
- problem.
-
- Only warn once about an upstream server which is refusing to do
- recursive queries.
-
- Fix DHCP address allocation problem when netid tags are in
- use. Thanks to Will Murnane for the bug report and
- subsequent testing.
-
- Add an additional data section to the reply for MX and SRV
- queries. Add support for DNS TXT records. Thanks to Robert
- Kean and John Hampton for prompts and testing of these.
-
- Apply address rewriting to records in the additional data section
- of DNS packets. This makes things like MX records work
- with the alias function. Thanks to Chad Skeeters for
- pointing out the need for this.
-
- Added support for quoted strings in config file.
-
- Detect and defeat cache-poisoning attacks which attempt to
- send (malicious) answers to questions we didn't
- send. These are ignored now even if the attacker manages
- to guess a random query-id.
-
- Provide DHCP support for interfaces with multiple IP
- addresses or aliases. This in only enabled under Linux.
- See the FAQ entry for details.
-
- Revisit the MAC-address and client-id matching code to
- provide saner behaviour with PXE boots, where some
- requests have a client-id and some don't.
-
- Fixed off-by-one buffer overflow in lease file reading
- code. Thanks to Rob Holland for the bug report.
-
- Added wildcard matching for MAC addresses in dhcp-host
- options. A sensible suggestion by Nathaniel McCallum.
-
-version 2.22
- Fixed build problems on (many) systems with older libc
- headers where <linux/types.h> is required before
- <linux/netlink.h>. Enabled HAVE_RTNETLINK under uclibc now
- that this fix is in place.
-
- Added support for encapsulated vendor-class-specific DHCP
- options. Thanks to Eric Shattow for help with this.
-
- Fix regression in 2.21 which broke commas in filenames and
- corrupted argv. Thanks to Eric Scott for the bugreport.
-
- Fixed stupid thinko which caused dnsmasq to wedge during
- startup with certain MX-record options. Another 2.21 regression.
-
- Fixed broken-ness when reading /etc/ethers. 2.21 broke
- this too.
-
- Fixed wedge with certain DHCP options. Yet another 2.21
- regression. Rob Holland and Roy Marples chased this one
- down.
-
-version 2.23
- Added a check to ensure that there cannot be more than one
- dhcp-host option for any one IP address, even if the
- addresses are assigned indirectly via a hostname and
- /etc/hosts.
+ Increase the default DNS packet size limit to 4096, as
+ recommended by RFC5625 section 4.4.3. This can be
+ reconfigured using --edns-packet-max if needed. Thanks to
+ Francis Dupont for pointing this out.
- Include a "server identifier" in DHCPNAK replies, as
- required by RFC2131.
-
- Added method support for DBus
- (http://www.freedesktop.org/Software/dbus)
- This is a superior way to re-configure dnsmasq on-the-fly
- with different upstream nameservers, as the host moves
- between networks. DBus support must be enabled in
- src/config.h and should be considered experimental at this
- point. See DBus-interface for the specification of the
- DBus method calls supported.
+ Rewrite query-ids even for TSIG signed packets, since
+ this is allowed by RFC5625 section 4.5.
+
+ Use getopt_long by default on OS X. It has been supported
+ since version 10.3.0. Thanks to Arek Dreyer for spotting
+ this.
- Added information to the FAQ about setting the DNS domain
- in windows XP and Mac OS X, thanks to Rick Hull.
+ Added up-to-date startup configuration for MacOSX/launchd
+ in contrib/MacOSX-launchd. Thanks to Arek Dreyer for
+ providing this.
- Added sanity check to resolv.conf polling code to cope
- with backwards-moving clocks. Thanks to Leonardo Canducci
- for help with this.
-
- Handle so-called "A-for-A" queries, which are queries for
- the address associated with a name which is already a
- dotted-quad address. These should be handled by the
- resolver code, but sometimes aren't and there's no point
- in forwarding them.
+ Fix link error when including Dbus but excluding DHCP.
+ Thanks to Oschtan for the bug report.
- Added "no-dhcp-interface" option to disable DHCP service
- on an interface, whilst still providing DNS.
+ Updated French translation. Thanks to Gildas Le Nadan.
+
+ Updated Polish translation. Thanks to Jan Psota.
- Fix format-string problem - config file names get passed
- to fprintf as a format string, so % characters could cause
- crashes. Thanks to Rob Holland for sleuthing that one.
+ Updated Spanish translation. Thanks to Chris Chatham.
- Fixed multiple compiler warnings from gcc 4. Thanks to
- Tim Cutts for the report.
+ Fixed confusion about domains, when looking up DHCP hosts
+ in /etc/hosts. This could cause spurious "Ignoring
+ domain..." messages. Thanks to Fedor Kozhevnikov for
+ finding and analysing the problem.
- Send the hostname option on DHCP offer messages as well as
- DHCP ack messages. This is required by the Rio Digital
- Audio Receiver. Thanks to Ron Frederick for the patch.
+
+version 2.51
+ Add support for internationalised DNS. Non-ASCII characters
+ in domain names found in /etc/hosts, /etc/ethers and
+ /etc/dnsmasq.conf will be correctly handled by translation to
+ punycode, as specified in RFC3490. This function is only
+ available if dnsmasq is compiled with internationalisation
+ support, and adds a dependency on GNU libidn. Without i18n
+ support, dnsmasq continues to be compilable with just
+ standard tools. Thanks to Yves Dorfsman for the
+ suggestion.
+
+ Add two more environment variables for lease-change scripts:
+ First, DNSMASQ_SUPPLIED_HOSTNAME; this is set to the hostname
+ supplied by a client, even if the actual hostname used is
+ over-ridden by dhcp-host or dhcp-ignore-names directives.
+ Also DNSMASQ_RELAY_ADDRESS which gives the address of
+ a DHCP relay, if used.
+ Suggestions from Michael Rack.
+
+ Fix regression which broke echo of relay-agent
+ options. Thanks to Michael Rack for spotting this.
+
+ Don't treat option 67 as being interchangeable with
+ dhcp-boot parameters if it's specified as
+ dhcp-option-force.
+
+ Make the code to call scripts on lease-change compile-time
+ optional. It can be switched off by editing src/config.h
+ or building with "make COPTS=-DNO_SCRIPT".
- Add 'd' (for day) as a possible time multiplier in lease
- time specifications. Thanks to Michael Deegan.
+ Make the TFTP server cope with filenames from Windows/DOS
+ which use '\' as pathname separator. Thanks to Ralf for
+ the patch.
- Make quoting suppress recognition of IP addresses, so
- dhcp-option=66,1.2.3.4 now means something different to
- dhcp-option=66,"1.2.3.4", which sets the option to a
- string value. Thanks to Brian Macauley for the bug report.
-
- Fixed the option parsing code to avoid segfaults from some
- invalid configurations. Thanks to Wookey for spotting that one.
-
- Provide information about which compile-time options were
- selected, both in the log at startup and as part of the output
- from dnsmasq --version. Thanks to Dirk Schenkewitz for
- the suggestion.
-
- Fix pathalogical behaviour when a broken client keeps sending
- DHCPDISCOVER messages repeatedly and fast. Because dealing with
- each of these takes a few seconds, (because of the ping) then a
- queue of DHCP packets could build up. Now, the results of a ping
- test are assumed to be valid for 30 seconds, so repeated waits are
- not required. Thanks to Luca Landi for finding this.
-
- Allow DHCPINFORM requests without hardware address
- information. These are generated by some browsers, looking
- for proxy information. Thanks to Stanley Jaddoe for the
- bug report on that.
-
- Add support of the "client FQDN" DHCP option. If present,
- this is used to allow the client to tell dnsmasq its name,
- in preference to (mis)using the hostname option. See
- http://tools.ietf.org/wg/dhc/draft-ietf-dhc-fqdn-option/\
- draft-ietf-dhc-fqdn-option-10.txt
- for details of the draft spec.
-
- Added startup scripts for MacOS X Tiger/Panther to the
- contrib collection. Thanks to Tim Cutts.
-
- Tweak DHCP network selection so that clients which turn up
- on our network in REBINDING state and with a lease for a
- foreign network will get a NAK response. Thanks to Dan
- Shechter for work on this and an initial patch and thanks
- to Gyorgy Farkas for further testing.
-
- Fix DNS query forwarding for empty queries and forward
- queries even when the recursion-desired bit is clear. This
- allows "dig +trace" to work. Problem report from Uwe
- Gansert.
-
- Added "const" declarations where appropriate, thanks to
- Andreas Mohr for the patch.
-
- Added --bootp-dynamic option and associated
- functionality. Thanks to Josef Wolf for the suggestion.
+ Updated Polish translation. Thanks to Jan Psota.
-version 2.24
- Updated contrib/openvpn/dnsmasq.patch from Joseph Tate.
-
- Tweaked DHCP NAK code, a DHCP NAK is now unicast as a
- fallback in cases where a broadcast is futile: namely in
- response to a unicast REQUEST from a non-local network
- which was not sent via a relay.
-
- Slightly changed the semantics of domain matching in
- --server and --address configs. --server=/domain.com/ still
- matches domain.com and sub.domain.com but does not
- now match newdomain.com The semantics of
- --server=/.domain.com/ are unchanged.
- Thanks to Chris Blaise for the patch.
-
- Added backwards-compatible internationalisation support.
- The existing make targets, (all, dnsmasq, install) work as
- before. New ones (all-i18n, and install-i18n) add gettext.
- The translations live in po/ There are not too many
- strings, so if anybody can provide translations (and for
- the manpage....) please send them in.
-
- Tweak behaviour on receipt of REFUSED or SERVFAIL rcodes,
- now the query gets retried on all servers before returning
- the error to the source of the query. Thanks to Javier
- Kohen for the report.
+ Warn if an IP address is duplicated in /etc/ethers. Thanks
+ to Felix Schwarz for pointing this out.
+
+ Teach --conf-dir to take an option list of file suffices
+ which will be ignored when scanning the directory. Useful
+ for backup files etc. Thanks to Helmut Hullen for the
+ suggestion.
+
+ Add new DHCP option named tftpserver-address, which
+ corresponds to the third argument of dhcp-boot. This
+ allows the complete functionality of dhcp-boot to be
+ replicated with dhcp-option. Useful when using
+ dhcp-optsfile.
+
+ Test which upstream nameserver to use every 10 seconds
+ or 50 queries and not just when a query times out and
+ is retried. This should improve performance when there
+ is a slow nameserver in the list. Thanks to Joe for the
+ suggestion.
+
+ Don't do any PXE processing, even for clients with the
+ correct vendorclass, unless at least one pxe-prompt or
+ pxe-service option is given. This stops dnsmasq
+ interfering with proxy PXE subsystems when it is just
+ the DHCP server. Thanks to Spencer Clark for spotting this.
+
+ Limit the blocksize used for TFTP transfers to a value
+ which avoids packet fragmentation, based on the MTU of the
+ local interface. Many netboot ROMs can't cope with
+ fragmented packets.
+
+ Honour dhcp-ignore configuration for PXE and proxy-PXE
+ requests. Thanks to Niels Basjes for the bug report.
+
+ Updated French translation. Thanks to Gildas Le Nadan.
+
+
+version 2.50
+ Fix security problem which allowed any host permitted to
+ do TFTP to possibly compromise dnsmasq by remote buffer
+ overflow when TFTP enabled. Thanks to Core Security
+ Technologies and Iván Arce, Pablo Hernán Jorge, Alejandro
+ Pablo Rodriguez, MartÃn Coco, Alberto Soliño Testa and
+ Pablo Annetta. This problem has Bugtraq id: 36121
+ and CVE: 2009-2957
+
+ Fix a problem which allowed a malicious TFTP client to
+ crash dnsmasq. Thanks to Steve Grubb at Red Hat for
+ spotting this. This problem has Bugtraq id: 36120 and
+ CVE: 2009-2958
+
+
+version 2.49
+ Fix regression in 2.48 which disables the lease-change
+ script. Thanks to Jose Luis Duran for spotting this.
+
+ Log TFTP "file not found" errors. These were not logged,
+ since a normal PXELinux boot generates many of them, but
+ the lack of the messages seems to be more confusing than
+ routinely seeing them when there is no real error.
+
+ Update Spanish translation. Thanks to Chris Chatham.
- Added Polish translation - thanks to Tomasz Sochanski.
- Changed default manpage install location from /usr/man
- to /usr/share/man
+version 2.48
+ Archived the extensive, backwards, changelog to
+ CHANGELOG.archive. The current changelog now runs from
+ version 2.43 and runs conventionally.
- Added Spanish translation - thanks to Christopher Chatham.
+ Fixed bug which broke binding of servers to physical
+ interfaces when interface names were longer than four
+ characters. Thanks to MURASE Katsunori for the patch.
- Log a warning when a DHCP packet is truncated due to lack
- of space. (Thanks to Michael Welle for the prompt to do
- this.)
-
- Added French translation - thanks to Lionel Tricon.
+ Fixed netlink code to check that messages come from the
+ correct source, and not another userspace process. Thanks
+ to Steve Grubb for the patch.
- Added Indonesian translation - thanks to Salman AS.
+ Maintainability drive: removed bug and missing feature
+ workarounds for some old platforms. Solaris 9, OpenBSD
+ older than 4.1, Glibc older than 2.2, Linux 2.2.x and
+ DBus older than 1.1.x are no longer supported.
- Tweaked the netlink code to cope with interface broadcast
- address not set, or set to 0.0.0.0.
+ Don't read included configuration files more than once:
+ allows complex configuration structures without problems.
- Fixed problem assigning fixed addresses to hosts when more
- than one dhcp-range is available. Thanks to Sorin Panca
- for help chasing this down.
+ Mark log messages from the various subsystems in dnsmasq:
+ messages from the DHCP subsystem now have the ident string
+ "dnsmasq-dhcp" and messages from TFTP have ident
+ "dnsmasq-tftp". Thanks to Olaf Westrik for the patch.
- Added more explict error mesages to the hosts file and
- ethers file reading code. Markus Kaiserswerth suffered to
- make this happen.
+ Fix possible infinite DHCP protocol loop when an IP
+ address nailed to a hostname (not a MAC address) and a
+ host sometimes provides the name, sometimes not.
- Ensure that a hostname supplied by a DHCP client can never
- override one configured on the server. Previously, any
- host claiming a name would be given it, even if that
- over-rode a dhcp-host declaration, leading to potentially
- confusing situations.
+ Allow --addn-hosts to take a directory: all the files
+ in the directory are read. Thanks to Phil Cornelius for
+ the suggestion.
- Added Slackware package-build stuff into contrib/ The i18n
- effort broke the current scripts, and working ones were
- needed for testing, so they ended up here rather than make
- Pat re-invent the wheel.
+ Support --bridge-interface on all platforms, not just BSD.
+
+ Added support for advanced PXE functions. It's now
+ possible to define a prompt and menu options which will
+ be displayed when a client PXE boots. It's also possible to
+ hand-off booting to other boot servers. Proxy-DHCP, where
+ dnsmasq just supplies the PXE information and another DHCP
+ server does address allocation, is also allowed. See the
+ --pxe-prompt and --pxe-service keywords. Thanks to
+ Alkis Georgopoulos for the suggestion and Guilherme Moro
+ and Michael Brown for assistance.
+
+ Improvements to DHCP logging. Thanks to Tom Metro for
+ useful suggestions.
+
+ Add ability to build dnsmasq without DHCP support. To do
+ this, edit src/config.h or build with
+ "make COPTS=-DNO_DHCP". Thanks to Mahavir Jain for the patch.
- Added Romanian translation, thanks to Sorin Panca for
- that.
+ Added --test command-line switch - syntax check
+ configuration files only.
+
+ Updated French translation. Thanks to Gildas Le Nadan.
-version 2.25
- Fixed RedHat spec file for FC4 - thanks to Werner Hoelzl
- and Andrew Bird.
- Fixed Suse spec file - thanks to Steven Springl.
+version 2.47
+ Updated French translation. Thanks to Gildas Le Nadan.
- Fixed DHCP bug when two distict subnets are on the same
- physical interface. Thanks to Pawel Zawora for finding
- this and suggesting the fix.
+ Fixed interface enumeration code to work on NetBSD
+ 5.0. Thanks to Roy Marples for the patch.
- Added logging to make it explicit when dnsmasq falls back
- from using RT-netlink sockets to the old ioctl API for
- getting information about interfaces. Doing this
- completely silently made remote debugging hard.
+ Updated config.h to use the same location for the lease
+ file on NetBSD as the other *BSD variants. Also allow
+ LEASEFILE and CONFFILE symbols to be overriden in CFLAGS.
- Merged uclibc build fixes from the OpenWRT package into
- src/config.h
+ Handle duplicate address detection on IPv6 more
+ intelligently. In IPv6, an interface can have an address
+ which is not usable, because it is still undergoing DAD
+ (such addresses are marked "tentative"). Attempting to
+ bind to an address in this state returns an error,
+ EADDRNOTAVAIL. Previously, on getting such an error,
+ dnsmasq would silently abandon the address, and never
+ listen on it. Now, it retries once per second for 20
+ seconds before generating a fatal error. 20 seconds should
+ be long enough for any DAD process to complete, but can be
+ adjusted in src/config.h if necessary. Thanks to Martin
+ Krafft for the bug report.
- Added Norwegian translation - thanks to Jan Erik Askildt.
+ Add DBus introspection. Patch from Jeremy Laine.
-version 2.26
- Fixed SuSe rpm patch problem - thanks to Steven Springl.
+ Update Dbus configuration file. Patch from Colin Walters.
+ Fix for this bug:
+ http://bugs.freedesktop.org/show_bug.cgi?id=18961
- Fixed crash when attempting to send a DHCP NAK to a host
- which believes it has a lease on an unknown
- network. Thanks to Lutz Pressler for the bug report and
- patch.
+ Support arbitrarily encapsulated DHCP options, suggestion
+ and initial patch from Samium Gromoff. This is useful for
+ (eg) gPXE, which expect all its private options to be
+ encapsulated inside a single option 175. So, eg,
-version 2.27
- Tweaked DHCP behaviour when a client attempts to renew a lease
- which dnsmasq doesn't know about. Previously that would always
- result in a DHCPNAK. Now, in dhcp-authoritative mode, the
- lease will be created, if it's legal. This makes dnsmasq work
- better if the lease database is lost, for example on an OpenWRT
- system which reboots. Thanks to Stephen Rose for work on
- this.
+ dhcp-option = encap:175, 190, "iscsi-client0"
+ dhcp-option = encap:175, 191, "iscsi-client0-secret"
+
+ will provide iSCSI parameters to gPXE.
- Added the ability to support RFC-3442 style destination
- descriptors in dhcp-options. This makes classless static
- routes easy to do, eg dhcp-option=121,192.168.1.0/24,1.2.3.4
+ Enhance --dhcp-match to allow testing of the contents of a
+ client-sent option, as well as its presence. This
+ application in mind for this is RFC 4578
+ client-architecture specifiers, but it's generally useful.
+ Joey Korkames suggested the enhancement.
- Added error-checking to the code which writes the lease
- file. If this fails for any reason, an error is logged,
- and a retry occurs after one minute. This should improve
- things eg when a filesystem is full. Thanks to Jens Holze
- for the bug report.
+ Move from using the IP_XMIT_IF ioctl to IP_BOUND_IF on
+ OpenSolaris. Thanks to Bastian Machek for the heads-up.
- Fixed breakage of the "/#/ matches any domain" facility
- which happened in 2.24. Thanks to Peter Surda for the bug
- report.
-
- Use "size_t" and "ssize_t" types where appropriate in the
- code.
-
- Fix buggy CNAME handling in mixed IPv4 and IPv6
- queries. Thanks to Andreas Pelme for help finding that.
-
- Added some code to attempt to re-transmit DNS queries when
- a network interface comes up. This helps on DoD links,
- where frequently the packet which triggers dialling is
- a DNS query, which then gets lost. By re-sending, we can
- avoid the lookup failing. This function is only active
- when netlink support is compiled in, and therefore only
- under Linux. Thanks to Jean Wolter for help with this.
-
- Tweaked the DHCP tag-matching code to work correctly with
- NOT-tag conditions. Thanks to Lutz Pressler for finding
- the bug.
-
- Generalised netid-tag matching in dhcp-range statements to
- allow more than one tag.
-
- Added --dhcp-mac to do MAC address matching in the same
- way as vendorclass and userclass matching. A good
- suggestion from Lutz Pressler.
-
- Add workaround for buggy early Microsoft DHCP clients
- which need zero-termination in string options.
- Thanks to Fabiano Pires for help with this.
-
- Generalised the DHCP code to cope with any hardware
- address type, at least on Linux. *BSD is still limited to
- ethernet only.
-
-version 2.28
- Eliminated all raw network access when running on
- Linux. All DHCP network activity now goes through the IP
- stack. Packet sockets are no longer required. Apart from
- being a neat hack, this should also allow DHCP over IPsec
- to work better. On *BSD and OS X, the old method of raw net
- access through BPF is retained.
-
- Simplified build options. Networking is now slimmed down
- to a choice of "linux" or "other". Netlink is always used
- under Linux. Since netlink has been available since 2.2
- and non-optional in an IPv4-configured kernel since 2.4,
- and the dnsmasq netlink code is now well tested, this
- should work out fine.
-
- Removed decayed build support for libc5 and Solaris.
-
- Removed pselect code: use a pipe for race-free signal
- handling instead, as this works everywhere.
-
- No longer enable the ISC leasefile reading code in the
- distributed sources. I doubt there are many people left
- using this 1.x compatibility code. Those that are will
- have to explicitly enable it in src/config.h.
-
- Don't send the "DHCP maximum message size" option, even if
- requested. RFC2131 says this is a "MUST NOT".
-
- Support larger-than-minimum DHCP message. Dnsmasq is now
- happy to get larger than 576-byte DHCP messages, and will
- return large messages, if permitted by the "maximum
- message size" option of the message to which it is
- replying. There's now an arbitrary sanity limit of 16384
- bytes.
-
- Added --no-ping option. This fixes an RFC2131 "SHOULD".
-
- Building on the 2.27 MAC-address changes, allow clients to
- provide no MAC address at all, relying on the client-id as
- a unique identifier. This should make things like DHCP for
- USB come easier.
-
- Fixed regression in netlink code under 2.2.x kernels which
- occurred in 2.27. Erik Jan Tromp is the vintage kernel fan
- who found this. P.S. It looks like this "netlink bind:
- permission denied" problem occured in kernels at least as
- late a 2.4.18. Good information from Alain Richoux.
-
- Added a warning when it's impossible to give a host its
- configured address because the address is leased
- elsewhere. A sensible suggestion from Mircea Bardac.
-
- Added minimal support for RFC 3046 DHCP relay agent-id
- options. The DHCP server now echoes these back to the
- relay, as required by the RFC. Also, RFC 3527 link selection
- sub-options are honoured.
-
- Set the process "dumpable" flag when running in debug
- mode: this makes getting core dumps from root processes
- much easier.
-
- Fixed one-byte buffer overflow which seems to only cause
- problems when dnsmasq is linked with uclibc. Thanks to
- Eric House and Eric Spakman for help in chasing this down.
-
- Tolerate configuration screwups which lead to the DHCP
- server attemping to allocate its own address to a
- client; eg setting the whole subnet range as a DHCP
- range. Addresses in use by the server are now excluded
- from use by clients.
-
- Did some thinking about HAVE_BROKEN_RTC mode, and made it
- much simpler and better. The key is to just keep lease
- lengths in the lease file. Since these normally never
- change, even as the lease is renewed, the lease file never
- needs to change except when machines arrive on the network
- or leave. This eliminates the code for timed writes, and
- reduces the amount of wear on a flash filesystem to the
- absolute minimum. Also re-did the basic time function in
- this mode to use the portable times(), rather than parsing
- /proc/uptime.
-
- Believe the source port number when replying to unicast
- DHCP requests and DHCP requests via a relay, instead of always
- using the standard ports. This will allow relays on
- non-standard ports and DHCPINFORM from unprivileged ports
- to work. The source port sent by unconfigured clients is still
- ignored, since this may be unreliable. This means that a DHCP
- client must use the standard port to do full configuration.
-
-version 2.29
- Fixed compilation on OpenBSD (thanks to Tom Hensel for the
- report).
-
- Fixed false "no interface" errors when --bind-interfaces is
- set along with --interface=lo or --listen-address. Thanks
- to Paul Wise for the report.
+ No longer complain about blank lines in
+ /etc/ethers. Thanks to Jon Nelson for the patch.
- Updated patch for SuSE rpm. Thanks to Steven Springl.
+ Fix binding of servers to physical devices, eg
+ --server=/domain/1.2.3.4@eth0 which was broken from 2.43
+ onwards unless --query-port=0 set. Thanks to Peter Naulls
+ for the bug report.
- It turns out that there are some Linux kernel
- configurations which make using the capability system
- impossible. If this situation occurs then continue, running
- as root, and log a warning. Thanks to Scott Wehrenberg
- for help tracking this down.
+ Reply to DHCPINFORM requests even when the supplied ciaddr
+ doesn't fall in any dhcp-range. In this case it's not
+ possible to supply a complete configuration, but
+ individually-configured options (eg PAC) may be useful.
+
+ Allow the source address of an alias to be a range:
+ --alias=192.168.0.0,10.0.0.0,255.255.255.0 maps the whole
+ subnet 192.168.0.0->192.168.0.255 to 10.0.0.0->10.0.0.255,
+ as before.
+ --alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0
+ maps only the 192.168.0.10->192.168.0.40 region. Thanks to
+ Ib Uhrskov for the suggestion.
+
+ Don't dynamically allocate DHCP addresses which may break
+ Windows. Addresses which end in .255 or .0 are broken in
+ Windows even when using supernetting.
+ --dhcp-range=192.168.0.1,192.168.1.254,255,255,254.0 means
+ 192.168.0.255 is a valid IP address, but not for Windows.
+ See Microsoft KB281579. We therefore no longer allocate
+ these addresses to avoid hard-to-diagnose problems.
+
+ Update Polish translation. Thanks to Jan Psota.
+
+ Delete the PID-file when dnsmasq shuts down. Note that by
+ this time, dnsmasq is normally not running as root, so
+ this will fail if the PID-file is stored in a root-owned
+ directory; such failure is silently ignored. To take
+ advantage of this feature, the PID-file must be stored in a
+ directory owned and write-able by the user running
+ dnsmasq.
+
+
+version 2.46
+ Allow --bootp-dynamic to take a netid tag, so that it may
+ be selectively enabled. Thanks to Olaf Westrik for the
+ suggestion.
+
+ Remove ISC-leasefile reading code. This has been
+ deprecated for a long time, and last time I removed it, it
+ ended up going back by request of one user. This time,
+ it's gone for good; otherwise it would need to be
+ re-worked to support multiple domains (see below).
+
+ Support DHCP clients in multiple DNS domains. This is a
+ long-standing request. Clients are assigned to a domain
+ based in their IP address.
+
+ Add --dhcp-fqdn flag, which changes behaviour if DNS names
+ assigned to DHCP clients. When this is set, there must be
+ a domain associated with each client, and only
+ fully-qualified domain names are added to the DNS. The
+ advantage is that the only the FQDN needs to be unique,
+ so that two or more DHCP clients can share a hostname, as
+ long as they are in different domains.
+
+ Set environment variable DNSMASQ_DOMAIN when invoking
+ lease-change script. This may be useful information to
+ have now that it's variable.
+
+ Tighten up data-checking code for DNS packet
+ handling. Thanks to Steve Dodd who found certain illegal
+ packets which could crash dnsmasq. No memory overwrite was
+ possible, so this is not a security issue beyond the DoS
+ potential.
+
+ Update example config dhcp option 47, the previous
+ suggestion generated an illegal, zero-length,
+ option. Thanks to Matthias Andree for finding this.
+
+ Rewrite hosts-file reading code to remove the limit of
+ 1024 characters per line. John C Meuser found this.
+
+ Create a net-id tag with the name of the interface on
+ which the DHCP request was received.
+
+ Fixed minor memory leak in DBus code, thanks to Jeremy
+ Laine for the patch.
+
+ Emit DBus signals as the DHCP lease database
+ changes. Thanks to Jeremy Laine for the patch.
+
+ Allow for more that one MAC address in a dhcp-host
+ line. This configuration tells dnsmasq that it's OK to
+ abandon a DHCP lease of the fixed address to one MAC
+ address, if another MAC address in the dhcp-host statement
+ asks for an address. This is useful to give a fixed
+ address to a host which has two network interfaces
+ (say, a laptop with wired and wireless interfaces.)
+ It's very important to ensure that only one interface
+ at a time is up, since dnsmasq abandons the first lease
+ and re-uses the address before the leased time has
+ elapsed. John Gray suggested this.
+
+ Tweak the response to a DHCP request packet with a wrong
+ server-id when --dhcp-authoritative is set; dnsmasq now
+ returns a DHCPNAK, rather than silently ignoring the
+ packet. Thanks to Chris Marget for spotting this
+ improvement.
+
+ Add --cname option. This provides a limited alias
+ function, usable for DHCP names. Thanks to AJ Weber for
+ suggestions on this.
+
+ Updated contrib/webmin with latest version from Neil
+ Fisher.
+
+ Updated Polish translation. Thanks to Jan Psota.
+
+ Correct the text names for DHCP options 64 and 65 to be
+ "nis+-domain" and "nis+-servers".
+ Updated Spanish translation. Thanks to Chris Chatham.
+ Force re-reading of /etc/resolv.conf when an "interface
+ up" event occurs.
+version 2.45
+ Fix total DNS failure in release 2.44 unless --min-port
+ specified. Thanks to Steven Barth and Grant Coady for
+ bugreport. Also reject out-of-range port spec, which could
+ break things too: suggestion from Gilles Espinasse.
+
+version 2.44
+ Fix crash when unknown client attempts to renew a DHCP
+ lease, problem introduced in version 2.43. Thanks to
+ Carlos Carvalho for help chasing this down.
+
+ Fix potential crash when a host which doesn't have a lease
+ does DHCPINFORM. Again introduced in 2.43. This bug has
+ never been reported in the wild.
+
+ Fix crash in netlink code introduced in 2.43. Thanks to
+ Jean Wolter for finding this.
+
+ Change implementation of min_port to work even if min-port
+ is large.
+
+ Patch to enable compilation of latest Mac OS X. Thanks to
+ David Gilman.
+
+ Update Spanish translation. Thanks to Christopher Chatham.
+
+
+version 2.43
+ Updated Polish translation. Thanks to Jan Psota.
+
+ Flag errors when configuration options are repeated
+ illegally.
+
+ Further tweaks for GNU/kFreeBSD
+
+ Add --no-wrap to msgmerge call - provides nicer .po file
+ format.
+
+ Honour lease-time spec in dhcp-host lines even for
+ BOOTP. The user is assumed to known what they are doing in
+ this case. (Hosts without the time spec still get infinite
+ leases for BOOTP, over-riding the default in the
+ dhcp-range.) Thanks to Peter Katzmann for uncovering this.
+
+ Fix problem matching relay-agent ids. Thanks to Michael
+ Rack for the bug report.
+
+ Add --naptr-record option. Suggestion from Johan
+ Bergquist.
+
+ Implement RFC 5107 server-id-override DHCP relay agent
+ option.
+
+ Apply patches from Stefan Kruger for compilation on
+ Solaris 10 under Sun studio.
+
+ Yet more tweaking of Linux capability code, to suppress
+ pointless wingeing from kernel 2.6.25 and above.
+
+ Improve error checking during startup. Previously, some
+ errors which occurred during startup would be worked
+ around, with dnsmasq still starting up. Some were logged,
+ some silent. Now, they all cause a fatal error and dnsmasq
+ terminates with a non-zero exit code. The errors are those
+ associated with changing uid and gid, setting process
+ capabilities and writing the pidfile. Thanks to Uwe
+ Gansert and the Suse security team for pointing out
+ this improvement, and Bill Reimers for good implementation
+ suggestions.
+
+ Provide NO_LARGEFILE compile option to switch off largefile
+ support when compiling against versions of uclibc which
+ don't support it. Thanks to Stephane Billiart for the patch.
+
+ Implement random source ports for interactions with
+ upstream nameservers. New spoofing attacks have been found
+ against nameservers which do not do this, though it is not
+ clear if dnsmasq is vulnerable, since to doesn't implement
+ recursion. By default dnsmasq will now use a different
+ source port (and socket) for each query it sends
+ upstream. This behaviour can suppressed using the
+ --query-port option, and the old default behaviour
+ restored using --query-port=0. Explicit source-port
+ specifications in --server configs are still honoured.
+
+ Replace the random number generator, for better
+ security. On most BSD systems, dnsmasq uses the
+ arc4random() RNG, which is secure, but on other platforms,
+ it relied on the C-library RNG, which may be
+ guessable and therefore allow spoofing. This release
+ replaces the libc RNG with the SURF RNG, from Daniel
+ J. Berstein's DJBDNS package.
+
+ Don't attempt to change user or group or set capabilities
+ if dnsmasq is run as a non-root user. Without this, the
+ change from soft to hard errors when these fail causes
+ problems for non-root daemons listening on high
+ ports. Thanks to Patrick McLean for spotting this.
+
+ Updated French translation. Thanks to Gildas Le Nadan.
+
+
+version 2.42
+ The changelog for version 2.42 and earlier is
+ available in CHANGELOG.archive.
projects / people / ms / dnsmasq.git / blobdiff