Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dnsmasq wins the first BlueHats Prize

nlnet.nl

Post reply on HN
Print view View original

1–10 of 32 posts

Re: Dnsmasq wins the first BlueHats Prize

#2

Post by hkwerf »

dnsmasq is such a nice tool. I use it daily, for work with embedded devices.

Its simple configuration also allows me to quickly provide "default" network configurations, simply by copy-pasting the command and parameters to invoke it, to my customers so they can verify devices without integration into their network.

Re: Dnsmasq wins the first BlueHats Prize

#5

Post by nolist_policy »

hkwerf wrote: post #2

dnsmasq is such a nice tool. I use it daily, for work with embedded devices. Its simple configuration also allows me to quickly provide "default" network configurations, simply by copy-pasting the command and parameters to invoke it, to my customers so they can verify devices without integration into their network.

+1

dnsmasq is awesome, for me the best thing is the integration with nftables so I can reliably police and filter traffic by dns domain names.

Re: Dnsmasq wins the first BlueHats Prize

#6

Post by ploxiln »

Dnsmasq is one of those humble low-resources low-dependencies low-churn low-level tools that ends up in a bunch of places - so many home/SMB routers, "internet sharing" features of linux-based OSes (like android but also linux desktops using NetworkManager) and personal projects or test-setups for working on networking equipment ... and it's easy to kinda forget about it. Kudos, and I'm sure it deserves far more donations.

Re: Dnsmasq wins the first BlueHats Prize

#7

Post by sophacles »

Oh good - this is a well deserved award for dnsmasq. It's one of the top entries on my personal short-list of "software that's actually good". I use it all the time in products, test environments and one-offs, and in my 20+ years of using it, it's never been the problem.

I may have misconfigured it, or tried to get it to do things far beyond what makes sense, or forgotten to add a command line flag as the root cause of my issue - but the software itself has always just done exactly what the documentation says it will. It just works.

Congrats to Simon and all the contributors over the years, and thanks for simplifying part of my existence.

Re: Dnsmasq wins the first BlueHats Prize

#10

Post by WirelessGigabit »

Dnsmasq is amazing. I spend quite the amount of time learning its config when hacking DD-WRTs.

One thing that always bothered me is how hard it is to set Dnsmasq to do SLAAC but no RDNS.

You see, if you set

    enable-ra
[0], it defaults to using link-local address of the machine as the rDNS server.

You can set another one by setting

    dhcp-option=option6:dns-server,[2001:4860:4860::8844]
If you don't enable DHCPv6 that entry is used as the rdns entry.

BUT...

That means that if you read through this there is no easy way to prevent a DNS address from being distributed, and it is quite common to want to do that. One of the reasons is that I want my clients to use IPv4 so I can track them, but still allow them to use SLAAC (and thus privacy protections) to talk to the outside world. But if they use SLAAC to talk to my DNS, I get WAY too many addresses in there.

The trick is to set:

    dhcp-option=option6:dns-server
an empty value... Not sure if you can add the comma or not.

I could only find 1 reference online: https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/20...

I firmly believe that this design choice has made it as such that no commercially available, customer router has support for SLAAC without rDNS.

[0] https://dnsmasq.org/docs/dnsmasq-man.html#:~:text=By%20defau....

Post reply on HN