Return to CHANGELOG.archive CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / dnsmasq

dnsmasq

    1: release 0.4 - initial public release
    2: 
    3: release 0.5 - added caching, removed compiler warning on linux PPC
    4: 
    5: release 0.6 - TCP handling: close socket and return to connect state if we 
    6:               can't read the first byte. This corrects a problem seen very 
    7:               occasionally where dnsmasq would loop using all available CPU.
    8: 
    9: 	      Added a patch from Cris Bailiff <c.bailiff@e-secure.com.au>
   10: 	      to set SO_REUSEADDR on the tcp socket which stops problems when
   11:               dnsmasq is restarted and old connections still exist.
   12: 
   13: 	      Stopped claiming in doc.html that smail is the default Debian
   14: 	      mailer, since it isn't any longer. (Pointed out by
   15: 	      David Karlin <dkarlin@coloradomtn.edu>)
   16: 
   17: release 0.7   Create a pidfile at /var/run/dnsmasq.pid
   18: 
   19: 	      Extensive armouring against "poison packets" courtesy of
   20:               Thomas Moestl <tmoestl@gmx.net>
   21: 
   22: 	      Set sockaddr.sa_family on outgoing address, patch from
   23: 	      David Symonds <xoxus@usa.net>
   24: 
   25:               Patch to clear cache on SIGHUP 
   26: 	      from Jason L. Wagner <nialscorva@yahoo.com> 
   27: 
   28: 	      Fix bad bug resulting from not initialising value-result	
   29: 	      address-length parameter to recvfrom() and accept() - it
   30: 	      worked by luck before!
   31: 
   32: release 0.95  Major rewrite: remove calls to gethostbyname() and talk
   33:               directly to the upstream server(s) instead.
   34:               This has many advantages.
   35:               (1) Dnsmasq no longer blocks during long lookups.
   36:               (2) All query types are handled now, (eg MX) not just internet
   37:                   address queries. Addresses are cached, all other
   38:                   queries are forwarded directly.
   39:               (3) Time-to-live data from upstream server is read and
   40:                   used by dnsmasq to purge entries from the cache.
   41:               (4) /etc/hosts is still read and its contents served (unless 
   42: 	          the -h option is given).
   43:               (5) Dnsmasq can get its upstream servers from
   44:                   a file other than /etc/resolv.conf (-r option) this allows
   45:                   dnsmasq to serve names to the machine it is running
   46:                   on (put nameserver 127.0.0.1 in /etc/resolv.conf and
   47:                   give dnsmasq the option -r /etc/resolv.dnsmasq)
   48:               (6) Dnsmasq will re-read its servers if the
   49:                   modification time of resolv.conf changes. Along with
   50:                   4 above this allows nameservers to be set
   51: 		  automatically by ppp or dhcp.	 
   52: 
   53:               A really clever NAT-like technique allows the daemon to have lots
   54:               of queries in progress, but still remain very lightweight.
   55: 	      Dnsmasq has a small footprint and normally doesn't allocate
   56:               any more memory after start-up. The NAT-like forwarding was
   57:               inspired by a suggestion from Eli Chen <eli@routefree.com>
   58: 
   59: release 0.96  Fixed embarrasing thinko in cache linked-list code.
   60:                              
   61: release 0.98  Some enhancements and bug-fixes. 
   62:               Thanks to "Denis Carre" <denis.carre@laposte.net> and Martin 
   63:               Otte <otte@essc.psu.edu>	
   64:               
   65: 	      (1) Dnsmasq now always sets the IP source address
   66:                   of its replies correctly. Older versions would not always
   67:                   do this on multi-homed and IP aliased hosts, which violates 
   68:                   the RFC.
   69:               (2) Dnsmasq no longer crashes if a server loop is created
   70: 	          (ie dnsmasq is told to use itself as an upstream server.)
   71:                   Now it just logs the problem and doesn't use the bad 
   72:                   server address.
   73:               (3) Dnsmasq should now forward (but not cache) inverse queries 
   74:                   and server status queries; this feature has not been tested.
   75:               (4) Don't write the pid file when in non-daemon mode.
   76: 	      (5) Create the pid file mode 644, rather then 666 (!).
   77:               (6) Generate queries to upstream nameservers with unpredictable
   78:                   ids, to thwart DNS spoofers.
   79:               (7) Dnsmasq no longer forwards queries when the 
   80: 	          "recursion desired" bit is not set in the header.
   81: 	      (8) Fixed getopt code to work on compliers with unsigned char.
   82:               
   83: release 0.991 Added -b flag: when set causes dnsmasq to always answer
   84: 	      reverse queries on the RFC 1918 private IP space itself and
   85:               never forward them to an upstream server. If the name is not in
   86: 	      /etc/hosts, dnsmasq replies with the dotted-quad address.
   87:               
   88:               Fixed a bug which stopped dnsmasq working on a box with
   89:               two or more interfaces with the same IP address. 
   90: 
   91:               Fixed cacheing of CNAMEs. Previously, a CNAME which pointed
   92:               to  a name with many A records would not have all the addresses
   93:               returned when being answered from the cache.
   94: 
   95: 	      Thanks to "Steve Hardy" <s.a.hardy@connectux.com> for his input 
   96:               on these fixes.
   97: 
   98:               Fixed race which could cause dnsmasq to miss the second of
   99:               two closely-spaced updates of resolv.conf (Thanks to Eli Chen
  100:               for pointing this out.)
  101: 
  102: 	      Fixed a bug which could cause dnsmasq to fail to cache some
  103:               dns names.
  104: 
  105: release 0.992 Small change to memory allocation so that names in /etc/hosts
  106:               don't use cache slots. Also make "-c 0" flag meaningfully 
  107:               disable caching completely.                            
  108: 
  109: release 0.993 Return only the first (canonical) name from an entry in
  110: 	      /etc/hosts as reply to reverse query.
  111:               
  112:               Handle wildcard queries for names/addresses in /etc/hosts
  113: 	      this is mainly to allow reverse lookups by dig to succeed.
  114: 	      (Bug reported by Simon J. Rowe" <srowe@mose.org.uk>)  
  115:               
  116:               Subtle change to the logic which selects which of multiple
  117: 	      upstream servers we send queries to. This fixes a problem 
  118:               where dnsmasq continuously sends queries to a server which
  119: 	      is returning error codes and ignores one which is working.
  120:               
  121: release 0.994 Fixed bug which broke lookup of names in /etc/hosts
  122:               which have upper-case letters in them. Thanks for Joao Clemente
  123:               for spotting that one. 
  124: 
  125: 	      Output cache statistics on receipt of SIGUSR1. These go
  126:               to syslog except in debug (-d) mode, when a complete cache
  127: 	      dump goes to stdout. Suggestion from Joao Clemente, code
  128:               based in John Volpe's.
  129:               
  130: 	      Accept GNU long options on the command line. Code from 
  131: 	      John Volpe for this. 
  132: 
  133:               Split source code into multiple files and produced 
  134: 	      a proper makefile. 
  135:               
  136:               Included code from John Volpe to parse dhcp.leases file
  137:               written by ISC dhcpd. The hostnames in the leases file are
  138:               added to the cache and updated as dhcpd updates the 
  139:               leases file. The code has been heavily re-worked by me,
  140:               so any bugs are probably mine.
  141: 
  142: release 0.995 Small tidy-ups to signal handling and cache code.
  143: 
  144: release 0.996 Added negative caching: If dnsmasq gets a "no such domain" reply
  145:               from an upstream nameserver, it will cache that information
  146:               for a time specified by the SOA RR in the reply. See RFC 2308
  147:               for details. This is useful with  resolver libraries
  148:               which append assorted suffices to non-FQDN in an attempt to 
  149:               resolve them, causing useless cache misses.
  150: 
  151:               Added -i flag, which restricts dnsmasq to offering name service
  152:               only on specified interfaces.
  153: 
  154: release 0.997 Deleted INSTALL script and added "install" target to makefile.
  155: 
  156:               Stopped distributing binaries in the tarball to avoid 
  157:               libc version clashes.
  158: 
  159:               Fixed  interface detection code to
  160:               remove spurious startup errors in rare circumstances.
  161: 
  162:               Dnsmasq now changes its uid, irrevocably, to nobody after
  163:               startup for security reasons. Thanks to Peter Bailey for
  164:               this patch.
  165: 
  166: 	      Cope with infinite DHCP leases. Patch thanks to 
  167: 	      Yaacov Akiba Slama.
  168: 
  169: 	      Added rpm control files to .tar.gz distribution. Thanks to
  170:               Peter Baldwin at ClarkConnect for those.
  171: 
  172:               Improved startup script for rpms. Thanks to Yaacov Akiba Slama.
  173: 
  174: release 1.0   Stable release: dnsmasq is now considered feature-complete
  175:               and stable.
  176:               
  177: release 1.1   Added --user argument to allow user to change to
  178:               a different userid.
  179: 
  180:               Added --mx-target argument to allow mail to be delivered
  181:               away from the gateway machine running dnsmasq.
  182: 
  183:               Fixed highly  obscure bug with wildcard queries for
  184:               DHCP lease derived names.
  185: 
  186:               Moved manpage from section 1 to section 8.
  187: 
  188:               Added --no-poll option.
  189:               Added Suse-rpm support.
  190:               Thanks to Joerg Mayer for the last two.
  191: 
  192: release 1.2   Added IPv6 DNS record support. AAAA records are cached
  193:               and read from /etc/hosts. Reverse-lookups in the
  194: 	      ip6.int and ip6.arpa domains are suppored. Dnsmasq can
  195:               talk to upstream servers via IPv6 if it finds IP6 addresses
  196:               in /etc/resolv.conf and it offers DNS service automatically
  197:               if IPv6 support is present in the kernel.
  198: 
  199:               Extended negative caching to NODATA replies.
  200: 
  201:               Re-vamped CNAME processing to cope with RFC 2317's use of
  202:               CNAMES to PTR RRs in CIDR.
  203: 
  204:               Added config.h and a couple of symbols to aid
  205:               compilation on non-linux systems.
  206: 
  207: release 1.3   Some versions of the Linux kernel return EINVAL rather
  208:               then ENPROTONOSUPPORT when IPv6 is not available, 
  209:               causing dnsmasq to bomb out. This release fixes that.
  210:               Thanks to Steve Davis for pointing this one out.
  211: 
  212:               Trivial change to startup logic so that dnsmasq logs
  213:               its stuff and reads config files straight away on
  214:               starting, rather than after the first query - principle 
  215:               of least surprise applies here.     
  216: 
  217: release 1.4   Fix a bug with DHPC lease parsing which broke in
  218:               non-UTC timezones. Thanks to Mark Wormgoor for
  219:               spotting and diagnosing this. Fixed versions in
  220:               the .spec files this time. Fixed bug in Suse startup
  221:               script. Thanks to Didi Niklaus for pointing this out.
  222: 
  223: release 1.5   Added --filterwin2k option which stops dnsmasq from forwarding
  224: 	      "spam" queries from win2k boxes. This is useful to stop spurious
  225:               connections over dial-on-demand links. Thanks to Steve Hardy 
  226:               for this code.
  227: 
  228:               Clear "truncated" bit in replies we return from upstream. This
  229:               stops resolvers from switching to TCP, which is pointless since
  230:               dnsmasq doesn't support TCP. This should solve problems
  231:               in resolving hotmail.com domains.
  232: 
  233:               Don't include getopt.h when Gnu-long-options are disabled -
  234:               hopefully this will allow compilation on FreeBSD.
  235: 
  236: 	      Added the --listen-address and --pid-file flags.
  237: 
  238:               Fixed a bug which caused old entries in the DHCP leases file
  239:               to be used in preference to current ones under certain
  240:               circumstances.
  241: 
  242: release 1.6   If a machine gets named via DHCP and the DHCP name doesn't have
  243:               a domain part and domain suffix is set using the -s flag, then
  244:               that machine has two names with the same address, with and 
  245:               without the domain suffix. When doing a _reverse_ lookup to
  246:               get the name, the "without suffix" name used to be returned,
  247:               now the "with suffix" one gets returned instead. This change
  248: 	      suggested by Arnold Schulz.
  249: 
  250:               Fixed assorted typos in the documentation. Thanks 
  251:               to David Kimdon.
  252: 
  253:               Subtle rearrangement to the downloadable tarball, and stopped
  254:               distributing .debs, since dnsmasq is now an official Debian
  255:               package.
  256: 
  257: release 1.7   Fix a problem with cache not clearing properly
  258:               on receipt of SIGHUP. Bug spotted by Sat Deshpande.
  259: 
  260:               In group-id changing code:
  261: 	      1) Drop supplimentary groups.
  262:               2) Change gid before dropping root (patch from Soewono Effendi.)
  263:               3) Change group to "dip" if it exists, to allow access
  264:                  to /etc/ppp/resolv.conf (suggestion from Jorg Sommer.)
  265:               Update docs to reflect above changes.
  266: 
  267:               Other documentation changes from David Miller.
  268:               Added suggested script fragment for dhcpcd.exe.
  269: 
  270: release 1.8   Fix unsafe use of tolower() macro - allows linking against 
  271:               ulibc. (Patches from Soewono Effendi and Bjorn Andersson.)
  272: 
  273:               Fix typo in usage string.
  274: 
  275: 	      Added advice about RedHat PPP configuration to
  276:               documentation. (Thanks to C. Lee Taylor.)
  277: 
  278: 	      Patches to fix problems on BSD systems from Marc Huber
  279:               and Can Erkin Acar. These add the options
  280:               HAVE_ARC4RANDOM and HAVE_SOCKADDR_SA_LEN to config.h.
  281: 	      Elaborated config.h - should really use autoconf.
  282: 
  283: 	      Fix time-to-live calculation when chasing CNAMEs.
  284: 
  285: 	      Fix use-after-free and missing initialisation bugs in
  286:               the cache code. (Thanks to Marc Huber.)
  287: 
  288:               Builds on Solaris 9. (Thanks to Marc Huber.)           
  289: 
  290: release 1.9   Fixes to rpm .spec files.
  291: 
  292:               Don't put expired DHCP entries into the cache only to 
  293: 	      throw them away again.
  294: 
  295:               Put dnsmasq on a severe memory diet: this reduces both
  296:               the amount of heap space used and the stack size
  297:               required. The difference is not really visible with
  298:               bloated libcs like glibc, but should dramatically reduce
  299:               memory requirements when linked against ulibc for use on
  300:               embeded routers, and that's the point really. Thanks to
  301:               Matthew Natalier for prompting this.   
  302: 
  303: 	      Changed debug mode (-d) so that all logging appears on
  304:               stderr as well as going to syslogd. 
  305: 
  306: 	      Added HAVE_IPV6 config symbol to allow compilation
  307:               against a libc which doesn't have IPv6 support.
  308: 
  309: 	      Added a facility to log all queries, enabled with -q flag.
  310: 
  311: 	      Fixed packet size checking bug in address extraction code.
  312: 
  313: 	      Halved default cache size - 300 was way OTT in typical use.
  314: 
  315: 	      Added self-MX function, enabled by -e flag. Thanks to
  316:               Lyonel Vincent for the patch.
  317: 
  318: 	      Added HAVE_FORK config symbol and stuff to support
  319:               uClinux. Thanks to Matthew Natalier for uClinux stuff. 
  320: 
  321: release 1.10  Log warnings if resolv.conf or dhcp.leases are not
  322:               accessable for any reason, as suggested by Hinrich Eilts.
  323: 
  324: 	      Fixed wrong address printing in error message about
  325: 	      no interface with address.
  326: 
  327: 	      Updated docs and split installation instuctions into setup.html.
  328: 
  329: 	      Fix bug in CNAME chasing code: One CNAME pointing
  330: 	      to many A records would lose A records after the 
  331: 	      first. This bug was introduced in version 1.9.
  332: 
  333: 	      Log startup failures at level Critical as well as 
  334: 	      printing them to standard error.
  335: 	      Exit with return code 1 when given bad options.
  336: 
  337: 	      Cleaned up code for no-cache operation.
  338: 
  339:               Added -o option which forces dnsmasq to use to
  340:               upstream servers in the order they appear in /etc/resolv.conf.
  341: 
  342:               Added upstream server use logging.
  343: 
  344:               Log full cache dump on receipt of SIGUSR1 when query 
  345:               logging is enabled (-q switch).
  346: 
  347: 	      Added -S option to directly specify upstream servers and
  348:               added ability to direct queries for specific domains to
  349:               specfic servers. Suggested by Jens Vonderheide.
  350: 
  351: 	      Upgraded random ID generation - patch from Rob Funk.	      
  352: 
  353: 	      Fixed reading of domains in arguments with capital
  354:               letters or trailing periods.
  355: 
  356: 	      Fixed potential SEGV when given bad options.
  357: 
  358: 	      Read options from /etc/dnsmasq.conf if it exists.
  359:               Do sensible things with missing parameters, eg 
  360:               "--resolv-file=" turns off reading /etc/resolv.conf.
  361: 
  362: release 1.11  Actually implement the -R flag promised in the 1.10 man page.
  363: 
  364:               Improve and rationalise the return codes in answers to
  365:               queries. In the case that there are no available
  366:               upstream servers to forward a query to, return REFUSED.
  367:               This makes sendmail work better on modem connected
  368:               systems when the modem link is down (Thanks to Roger Plant).
  369: 	      Cache and return the NXDOMAIN status of failed queries:
  370:               this makes the `host` command work when traversing search
  371:               paths (Thanks to Peter Bailey). Set the "authoritative"
  372:               bit in replies containing names from /etc/hosts or DHCP.
  373: 
  374:               Tolerate MS-DOS style line ending codes in /etc/hosts
  375: 	      and /etc/resolv.conf, for people who copy from winsock
  376:               installations.
  377: 
  378: 	      Allow specification of more than one resolv.conf file. This is 
  379:               intended for laptops which connect via DHCP or
  380:               PPP. Whichever resolv.conf was updated last is used.
  381: 
  382:               Allow -S flags which specify a domain but no server
  383:               address. This gives local domains which are never forwarded.
  384: 
  385: 	      Add -E flag to automatically add the domain suffix to
  386:               names in /etc/hosts -suggestion from Phil Harman.
  387: 
  388: 	      Always return a zero time-to-live for names derived from 
  389: 	      DHCP which stops anthing else caching these
  390:               names. Previously the TTL was derived from the lease
  391:               time but that is incorrect since a lease can be given
  392:               up early: dnsmasq would know this but anything with the
  393:               name cached with long TTL would not be updated.
  394: 
  395: 	      Extended HAVE_IPV6 config flag to allow compliation on
  396: 	      old systems which don't have modern library routines
  397: 	      like inet_ntop(). Thanks to Phil Harman for the patch.
  398: 
  399: release 1.12  Allow more than one domain in server config lines and
  400: 	      make "local" a synonym for "server". This makes things
  401: 	      like "local=/localnet/thekelleys.org.uk/" legal. Allow
  402:               port to specified as part of server address.
  403: 
  404: 	      Allow whole domains to have an IP address specified
  405:               in /etc/dnsmasq.conf. (/etc/hosts doesn't work domains).
  406:               address=/doubleclick.net/127.0.0.1 should catch all
  407:               those nasty banner ads. Inspired by a patch 
  408: 	      from Daniel Gryniewicz
  409: 
  410: 	      Log the source of each query when logging switched on. 
  411: 
  412: 	      Fix bug in script fragment for dhcpcd - thanks to Barry Stewart.
  413: 	      
  414: 	      Fix bug which meant that strict-order and self-mx were
  415: 	      always enabled.
  416: 
  417: 	      Builds with Linux libc5 now - for the Freesco project.
  418: 
  419: 	      Fixed Makefile installation script (patch from Silvan
  420: 	      Minghetti) and added CC and CFLAGS variables.
  421: 
  422: 	      Improve resource allocation to reduce vulnerability to
  423: 	      DOS attacks - the old version could have all queries
  424: 	      blocked by a continuous high-speed stream of
  425: 	      queries. Now some queries will succeed, and the excess
  426: 	      will be rejected with a server fail error. This change also
  427: 	      protects against server-loops; setting up a resolving
  428:               loop between two instances of dnsmasq is no longer
  429: 	      catastrophic. The servers will continue to run, looped
  430: 	      queries fail and a warning is logged. Thanks to C. Lee
  431: 	      Taylor for help with this.
  432: 	      
  433: release 1.13  Added support for building rpms suitable for modern Suse 
  434: 	      systems. (patch from Andi <cambeis@netplace.de>)
  435: 	      
  436: 	      Added options --group, --localmx, --local-ttl,
  437: 	      --no-negcache, --addn-host.
  438: 	      
  439: 	      Moved all the various rpm-building bits into /rpm.
  440: 	      
  441: 	      Fix builds with glibc 2.1 (thanks to Cristian
  442: 	      Ionescu-Idbohrn)
  443: 	      
  444: 	      Preserve case in domain names, as per RFC1035.
  445: 	      
  446: 	      Fixed ANY queries to domains with --address specification.
  447: 	      
  448: 	      Fixed FreeBSD build. (thanks to Steven Honson)
  449: 	      
  450: 	      Added -Q option which allows a specified port to be used
  451: 	      to talk to upstream servers. Useful for people who want
  452: 	      very paranoid firewalls which open individual UDP port.
  453: 	      (thanks to David Coe for the patch)
  454: 	      	      
  455: release 1.14  Fixed man page description of -b option which confused 
  456: 	      /etc/hosts with /etc/resolv.conf. (thanks to Christopher
  457: 	      Weimann)
  458: 	      
  459: 	      Fixed config.h to allow building under MACOS X and glibc
  460: 	      2.0.x. (thanks to Matthew Gregan and Serge Caron)
  461: 	      
  462: 	      Added --except-interface option. (Suggested by Serge Caron)
  463: 
  464: 	      Added SIGUSR2 facility to re-scan for new
  465: 	      interfaces. (Suggested by Serge Caron)
  466: 
  467: 	      Fixed SEGV in option-reading code for invalid options.
  468: 	      (Thanks to Klaas Teschauer)
  469: 
  470:               Fixed man page to clarify effect of SIGUSR1 on
  471: 	      /etc/resolv.conf.
  472: 	      (Thanks to Klaas Teschauer)
  473: 	      
  474: 	      Check that recieved queries have only rfc1035-legal characters
  475: 	      in them. This check is mainly to avoid bad strings being
  476: 	      sent to syslog.
  477: 
  478: 	      Fixed &&/& confusion in option.c and added DESTDIR
  479: 	      variable for "make install" (Thanks to Osvaldo 
  480:               Marques for the patch.)
  481: 
  482: 	      Fixed /etc/hosts parsing code to cope with MS-DOS
  483: 	      line-ends in the file. This was supposed to be done in
  484: 	      version 1.11, but something got missed. (Thanks to Doug
  485: 	      Copestake for helping to find this.)
  486: 
  487: 	      Squash repeated name/address pairs read from hosts
  488: 	      files.
  489: 
  490: 	      Tidied up resource handling in util.c (Thanks to
  491: 	      Cristian Ionescu-Idbohrn).
  492: 
  493: 	      Added hashed searching of domain names. People are starting
  494: 	      to use dnsmasq with larger loads now, and bigger caches,
  495: 	      and large lists of ad-block addresses. This means doing
  496: 	      linear searches can start to use lots of CPU so I added hashed
  497: 	      searching and seriously optimised the cache code for 
  498: 	      algorithmic efficiency. Also upped the limit on cache 
  499: 	      size to 10000.
  500: 
  501: 	      Fixed logging of the source of names from the additional
  502: 	      hosts file and from the "bogus private address" option.
  503: 
  504: 	      Fixed spurious re-reading of empty lease files. (Thanks
  505: 	      to Lewis Baughman for spotting this.)
  506: 
  507: 	      Fixed building under uclibc (patch from Cristian Ionescu-Idbohrn)
  508: 	      
  509: 	      Do some socket tweaking to allow dnsmasq to co-exist
  510: 	      with BIND. Thanks to Stefan 'Sec' Zehl for the patch.
  511: 
  512: release 1.15  Added --bogus-nxdomain option.
  513: 
  514:               Restrict checking of resolv.conf and DHCP leases files
  515:               to once per second. This is intended to improve
  516:               performance under heavy loads. Also make a system call
  517: 	      to get the current time once per query, rather than four
  518:               times.
  519: 
  520: 	      Increased number of outstanding queries to 150 in
  521: 	      config.h
  522: 
  523: release 1.16  Allow "/" characters in domain names - this fixes
  524:               caching of RFC 2317 CNAME-PTR records.
  525: 
  526: 	      Fixed brain-fart in -B option when GETOPT_LONG not
  527: 	      enabled - thanks to Steven Young and Jason Miller 
  528: 	      for pointing this out.
  529: 
  530: 	      Generalised bogus-nxdomain code: allow more than one
  531: 	      address to check, and deal with replies with multiple
  532: 	      answer records. (Based on contribution from Humberto
  533: 	      Massa.)
  534: 
  535: 	      Updated the documentation to include information about
  536: 	      bogus-nxdomain and the Verisign tragedy.
  537: 
  538: 	      Added libraries needed on Solaris to Makefile.
  539: 
  540: 	      Added facility to set source address in queries to
  541: 	      upstream nameservers. This is useful with multihomed
  542: 	      hosts, especially when using VPNs. Thanks to Tom Fanning
  543: 	      for suggesting this feature.
  544: 
  545: 	      Tweaked logging: log to facility LOCAL0 when in
  546: 	      debug/no-daemon mode and changed level of query logging
  547: 	      from INFO to DEBUG. Make log options controllable in
  548: 	      config.h
  549: 
  550: release 1.17  Fixed crash with DHCP hostnames > 40 characters.
  551: 
  552:               Fixed name-comparision routines to not depend on Locale,
  553:               in theory this versions since 1.15 could lock up or give
  554:               wrong results when run with locale != 'C'.
  555: 
  556: 	      Fix potential lockup in cache code. (thanks to Henning
  557: 	      Glawe for help chasing this down.)
  558: 
  559: 	      Made lease-file reader bullet-proof.
  560: 
  561: 	      Added -D option, suggested by Peter Fichtner.
  562: 
  563: release 1.18  Added round-robin DNS for names which have more than one
  564:               address. In this case all the addresses will be
  565:               returned, as before, but the order will change on each
  566:               query.
  567: 
  568: 	      Remove stray tolower() and isalnum() calls missed in 
  569: 	      last release to complete LOCALE independence.
  570: 
  571: 	      Allow port numbers in source-address specifications.
  572: 
  573: 	      For hostnames without a domain part which don't get
  574: 	      forwarded because -D is in effect, return NXDOMAIN not
  575: 	      an empty reply.
  576: 
  577: 	      Add code to return the software version in repsonse to the
  578: 	      correct magic query in the same way as BIND. Use  
  579: 	      "dig version.bind chaos txt" to make the query.
  580: 
  581: 	      Added negative caching for PTR (address to name) records.
  582: 
  583: 	       Ensure that names of the form typically used in PTR queries
  584:               (ie w.x.yz.in-addr.arpa and IPv6 equivalents) get
  585:               correct answers when queried as other types. It's
  586:               unlikely that anyone would do this, but the change makes
  587:               things pedantically correct.
  588: 
  589: 	      Taught dnsmasq to understand "bitstring" names, as these
  590: 	      are used for PTR lookups of IPv6 addresses by some 
  591: 	      resolvers and lookup tools. Dnsmasq now understands both
  592: 	      the ip6.int domain and the ip6.arpa domain and both
  593: 	      nibble and bitstring formats so it should work with any
  594: 	      client code. Standards for this stuff have flip-flopped
  595: 	      over the last few years, leaving many different clients
  596: 	      in their wake. See RFC2673 for details of bitstrings.
  597: 	      
  598: 	      Allow '_' characters in domain names: Legal characters
  599: 	      are now [a-z][A-Z].-_ Check names read from hosts files
  600: 	      and leases files and reject illegal ones with a message
  601: 	      in syslog. 
  602: 
  603: 	      Make empty domain names in server and address options 
  604: 	      have the special meaning "unqualified
  605: 	      names". (unqualified names are names without any dots in
  606: 	      them). It's now possible to do server=//1.2.3.4 and have 
  607: 	      unqualified names sent to a special nameserver.
  608: 
  609: release 2.0rc1  
  610:               Moved source code into src/ directory.
  611: 
  612: 	      Fixes to cure compilation breakage when HAVE_IPV6 not
  613: 	      set, thanks to Claas Hilbrecht.
  614: 
  615: 	      BIG CHANGE: added an integrated DHCP server and removed
  616: 	      the code to read ISC dhcp.leases. This wins in terms 
  617: 	      of ease of setup and configuration flexibility and 
  618: 	      total machine resources consumed. 
  619: 
  620: 	      Re-jiged the signal handling code to remove a race
  621: 	      condition and to be more portable.
  622: 
  623: release 2.0
  624: 	     Thanks to David Ashworth for feedback which informed many 
  625: 	     of the fixes below.
  626: 
  627:              Allow hosts to be specified by client ID in dhcp-hosts
  628:              options. These are now one of 
  629:              dhcp-host=<hardware addr>,.... 
  630:              dhcp-host=id:<hex client id>,..... 
  631:              dhcp-host=id:<ascii client id>,.....
  632: 	     
  633: 	     Allow dhcp-host options to specify any IP address on the
  634:              DHCP-served network, not just the range available for
  635:              dynamic allocation.
  636: 
  637: 	     Allow dhcp-host options for the same host with different
  638: 	     IP adresses where the correct one will be selected for
  639: 	     the network the host appears on.
  640: 
  641: 	     Fix parsing of --dhcp-option to allow more than one
  642: 	     IP address and to allow text-type options.	     
  643: 
  644: 	     Inhibit use of --dhcp-option to send hostname DHCP options.
  645: 	     
  646: 	     Update the DNS with DHCP information after re-reading
  647: 	     /etc/hosts so that any DHCP derived names which have been
  648: 	     shadowed by now-deleted hosts entries become visible.
  649: 
  650: 	     Fix typos in dnsmasq.conf.example
  651: 
  652: 	     Fixes to Makefile(s) to help pkgsrc packaging - patch 
  653: 	     from "pancake".
  654: 
  655: 	     Add dhcp-boot option to support network boot.
  656: 
  657: 	     Check for duplicate IP addresses in dhcp-hosts lines
  658: 	     and refuse to run if found. If allowed to remain these 
  659: 	     can provoke an infinite loop in the DHCP protocol.
  660: 
  661: 	     Attempted to rationalise the .spec files for rpm
  662: 	     building. There are now files for Redhat, Suse and
  663: 	     Mandrake. I hope they work OK.
  664: 
  665: 	     Fixed hard-to-reproduce crash involving use of local
  666: 	     domains and IPv6 queries. Thanks to Roy Marples for
  667: 	     helping to track that one down.
  668: 
  669: release 2.1  
  670:              Thanks to Matt Swift and Dag Wieers for many suggestions 
  671: 	     which went into this release.
  672: 	    
  673: 	     Tweak include files to allow compilation on FreeBSD 5
  674:              
  675:              Fix unaligned access warnings on BSD/Alpha.
  676: 
  677: 	     Allow empty DHCP options, like so: dhpc-option=44
  678:  
  679:              Allow single-byte DHCP options like so: dhcp-option=20,1
  680: 
  681: 	     Allow comments on the same line as options in
  682: 	     /etc/dnsmasq.conf
  683: 
  684: 	     Don't complain when the same name and address is
  685: 	     allocated to a host using DHCP and /etc/hosts.
  686: 	     
  687: 	     Added to the example configuration the dnsmasq equivalent
  688: 	     of the ISC dhcpd settings given in 
  689:              http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt
  690: 
  691: 	     Fixed long-existing strangeness in Linux IPv6 interface
  692: 	     discovery code. The flags field in /proc/net/if_inet6 is
  693: 	     _not_ the interface flags. 
  694: 
  695: 	     Fail gracefully when getting an ENODEV error when trying
  696: 	     to bind an IPv6 socket, rather than bailing out. Thanks
  697: 	     to Jan Ischebeck for feedback on that.
  698: 
  699: 	     Allow the name->address mapping for static DHCP leases to
  700: 	     be set by /etc/hosts. It's now possible to have
  701:      	        dhcp-host=<mac addr>,wibble
  702: 	     or even
  703:                 dhcp-host=wibble
  704: 	     and in /etc/hosts have
  705: 	        wibble 1.2.3.4
  706: 	     and for the correct thing to happen. Note that some sort
  707: 	     of dhcp-host line is still needed, it's not possible for
  708: 	     random host to claim an address in /etc/hosts without
  709: 	     some explicit configuration.
  710: 
  711: 	     Make 0.0.0.0 in a dhcp-option to mean "the machine
  712: 	     running dnsmasq".
  713:     		    
  714:              Fix lease time spec when specified in dhcp-range and not
  715: 	     in dhcp-host, previously this was always one hour.
  716: 
  717:              Fix problem with setting domains as "local only". -
  718:              thanks to Chris Schank.
  719: 
  720: 	     Added support for max message size DHCP option.
  721: 
  722: release 2.2
  723:              Fix total lack for DHCP functionality on
  724: 	     Linux systems with IPv6 enabled. - thanks to
  725: 	     Jonathon Hudson for spotting that.
  726: 
  727: 	     Move default config file under FreeBSD - patch from
  728: 	     Steven Honson 
  729: 
  730: release 2.3
  731:              Fix "install" makefile target. (reported by Rob Stevens)
  732: 
  733: 	     Ensure that "local=/domain/" flag is obeyed for all
  734: 	     queries on a domain, not just A and AAAA. (Reported by
  735: 	     Peter Fichtner.)
  736: 
  737: 	     Handle DHCPDECLINE messages and provide an error message
  738: 	     in DHCPNAK messages.
  739: 	     
  740: 	     Add "domain" setting example to
  741: 	     dnsmasq.conf.example. Thanks to K P Kirchdorfer for
  742: 	     spotting that it was missing.
  743: 
  744: 	     Subtle change to the DHCPREQUEST handling code to work
  745: 	     around a bug in the DHCP client in HP Jetdirect printers.
  746: 	     Thanks to Marko Stolle for finding this problem.
  747: 
  748: 	     Return DHCP T1 and T2 times, with "fuzz" to desychronise lease
  749: 	     renewals, as specified in the RFC.
  750: 	     
  751: 	     Ensure that the END option is always present in DHCP
  752: 	     packets , even if the packet is too small to fit all 
  753: 	     the requested options.
  754: 
  755: 	     Handle larger-than-default DHCP packets if required, up
  756: 	     to the ethernet MTU.
  757: 
  758: 	     Fix a couple of places where the return code from
  759: 	     malloc() was not checked.
  760: 
  761: 	     Cope with a machine taking a DHCP lease and then moving
  762: 	     network so that the lease address is no longer valid.
  763: 
  764: 	     The DHCP server will now work via a BOOTP relay - remote
  765: 	     networks are configured with the dhcp-range option the
  766: 	     same as directly connected ones, but they need an
  767: 	     additional netmask parameter. Eg
  768: 	     --dhcp-range=192.168.4.10,192.168.4.50,255.255,255.0
  769:              will enable DHCP service via a BOOTP relay on the
  770: 	     192.168.4.0 network. 
  771: 
  772: 	     Add a limit on the number of available DHCP leases,
  773: 	     otherwise the daemon could be DOSed by a malicious
  774: 	     host. The default is 150, but it can be changed by the 
  775: 	     dhcp-lease-max option.
  776: 
  777: 	     Fixed compilation on OpenBSD (thanks to Frederic Brodbeck
  778: 	     for help with that.)
  779: 	     
  780: 	     Reworked the DHCP network handling code for two good
  781: 	     effects: (1) The limit of one network only for DHCP on
  782: 	     FreeBSD is now gone, (2) The DHCP server copes with
  783: 	     dynamically created interfaces. The one-interface
  784: 	     limitation remains for OpenBSD, which is missing
  785: 	     extensions to the socket API which have been in Linux
  786: 	     since version 2.2 and FreeBSD since version 4.8.
  787: 
  788: 	     Reworked the DNS network code to also cope with
  789: 	     dynamically created interfaces. dnsmasq will now listen
  790: 	     to the wildcard address and port 53 by default, so if no
  791: 	     --interface or --address options are given it will handle
  792: 	     dynamically created interfaces. The old behaviour can be
  793: 	     restored with --bind-interfaces for people running BIND
  794: 	     on one interface and dnsmasq on another. Note that
  795: 	     --interface and --address options still work, but the
  796: 	     filtering is done by dnsmasq, rather then the kernel.
  797: 	     This works on Linux, and FreeBSD>=5.0. On systems which
  798: 	     don't support the required API extensions, the old 
  799: 	     behaviour is used, just as if --bind-interfaces had been set.
  800: 
  801: 	     Allow IPv6 support to be disabled at compile time. To do
  802: 	     that, add -DNO_IPV6 to the CFLAGS. Thanks to Oleg
  803: 	     I. Vdovikin for the suggestion to do that.
  804: 
  805: 	     Add ability to set DHCP options per network. This is done
  806: 	     by giving a network an identifier like this:
  807: 	     dhcp-range=red-net,192.168.0.10,192.168.0.50
  808: 	     and then labeling options intended for that network only
  809: 	     like this:
  810: 	     dhcp-option=red-net,6,1.1.1.1
  811: 	     Thanks to Oleg Vdovikin for arguing that one through.
  812: 
  813: 	     Made errors in the configuration file non-fatal: dnsmasq
  814: 	     will now complain bitterly, but continue.
  815: 
  816: 	     Added --read-ethers option, to allow dnsmasq to pull
  817: 	     static DHCP information from that file. 
  818: 	     Thanks to Andi Cambeis for that suggestion.
  819: 
  820: 	     Added HAVE_BROKEN_RTC compilation option to support
  821: 	     embedded systems without a stable RTC. Oleg Vdovikin
  822: 	     helped work out how to make that work.
  823: 
  824: release 2.4
  825: 	     Fixed inability to start when the lease file doesn't
  826: 	     already exist. Thanks to Dag Wieers for reporting that.
  827: 
  828: 	     Fixed problem were dhcp-host configuration options did
  829: 	     not play well with entries in /etc/ethers for the same
  830: 	     host. Thanks again to Dag Wieers.
  831: 
  832: 	     Tweaked DHCP code to favour moving to a newly-configured
  833: 	     static IP address rather than an old lease when doing
  834: 	     DHCP allocation.
  835: 
  836: 	     Added --alias configuration option. This provides IPv4
  837: 	     rewrite facilities like Cisco "DNS doctoring". Suggested
  838: 	     by Chad Skeeters.
  839: 
  840: 	     Fixed bug in /etc/ethers parsing code triggered by tab
  841: 	     characters. Qudos to Dag Wieers for hepling to nail that
  842: 	     one.
  843:  	     
  844: 	     Added "bind-interfaces" option correctly.	     
  845: 
  846: release 2.5
  847: 	     Made "where are we allocating addresses?" code in DHCP
  848: 	     server cope with requests via a relay which is on a
  849: 	     directly connected network for which there is not a
  850: 	     configured netmask. This strange state of affairs occurs
  851: 	     with win4lin. Thanks to Alex Melt and Jim Horner for bug
  852: 	     reports and testing with this. 
  853: 
  854: 	     Fixed trivial-but-irritating missing #include which broke
  855: 	     compilation on *BSD.
  856: 
  857: 	     Force --bind-interfaces if IP-aliased interface
  858: 	     specifications are used, since the sockets API provides
  859: 	     no other sane way to determine which alias of an
  860: 	     interface a packet was sent to. Thanks to Javier Kohen
  861: 	     for the bug report.
  862: 
  863: release 2.6 
  864: 	     Support Token Ring DHCP. Thanks to Dag Wieers for help
  865: 	     testing. Note that Token ring support only works on Linux 
  866: 	     currently.
  867: 
  868: 	     Fix compilation on MacOS X. Thanks to Bernhard Ehlers for
  869: 	     the patch.
  870: 
  871: 	     Added new "ignore" keyword for
  872: 	     dhcp-host. "dhcp-host=11:22:33:44:55:66,ignore" will
  873: 	     cause the DHCP server to ignore any host with the given
  874: 	     MAC address, leaving it to other servers on the
  875: 	     network. This also works with client-id and hostnames.
  876: 	     Suggestion by Alex Melt.
  877: 
  878: 	     Fixed parsing of hex client IDs. Problem spotted by Peter
  879: 	     Fichtner.
  880: 
  881: 	     Allow conf-file options in configuration file, to
  882: 	     provide an include function.
  883: 	     
  884: 	     Re-read /etc/ethers on receipt of SIGHUP.
  885: 
  886: 	     Added back the ability to read ISC dhcpd lease files, by
  887: 	     popular demand. Note that this is deprecated and for
  888: 	     backwards compatibility only. You can get back the 4K of
  889: 	     memory that the code occupies by undefining
  890: 	     "HAVE_ISC_READER" in src/config.h
  891: 
  892: 	     Added ability to disable "pool" DHCP address allocation
  893: 	     whilst leaving static leases working. The syntax is
  894: 	     "dhcp-range=192.168.0.0,static"
  895: 	     Thanks to Grzegorz Nosek for the suggestion.
  896: 
  897: 	     Generalized dnsmasq-rh.spec file to work on Mandrake too,
  898: 	     and removed dnsmasq-mdk.spec. Thanks to Doug Keller.
  899: 
  900: 	     Allow DHCP options which are tied to specific static
  901: 	     leases in the same way as to specific networks.
  902: 
  903: 	     Generalised the dhcp-option parser a bit to allow hex
  904: 	     strings as parameters. This is now legal:
  905: 	     dhcp-option=128,e4:45:74:68:00:00
  906: 	     Inspired by a patch from Joel Nordell.
  907: 
  908: 	     Changed the semantics of argument-less dhcp-options for
  909: 	     the default-setting ones, ie 1, 3, 6 and 28. Now, doing
  910: 	     eg, dhcp-option=3 stops dnsmasq from sending a default
  911: 	     router option at all. Thanks to Scott Emmons for pointing
  912: 	     out that this is useful.
  913: 
  914: 	     Fixed dnsmasq.conf parsing bug which interpreted port
  915: 	     numbers in server= lines as a comment. To start a
  916: 	     comment, a '#' character must now be a the start of a
  917: 	     line or preceded by whitespace. Thanks to Christian
  918: 	     Haggstrom for the bug report.
  919: 
  920: release 2.7  
  921:              Allow the dhcp-host specification of id:* which makes 
  922: 	     dnsmasq ignore any client-id. This is useful to ensure 
  923: 	     that a dual-boot machine sees the same lease when one OS 
  924: 	     gives a client-id and the other doesn't. It's also useful
  925: 	     when PXE boot DHCP does not use client IDs but the OS it boots 
  926:              does. Thanks to Grzegorz Nosek for suggesting this enhancement.
  927: 
  928: 	     No longer assume that ciaddr is zero in received DHCPDISCOVER 
  929: 	     messages, just for security against broken clients.
  930: 
  931: 	     Set default of siaddr field to the address of the machine running 
  932:              dnsmasq when not explicitly set using dhcp-boot
  933:              option. This is the ISC dhcpd behaviour.  
  934: 
  935:              Send T1 and T2 options in DHCPOFFER packets. This is required
  936: 	     by the DHCP client in some JetDirect printers. Thanks 
  937:              to Paul Mattal for work on this.
  938: 
  939: 	     Fixed bug with DHCP on OpenBSD reported by Dominique Jacquel.
  940: 	     The code which added loopback interfaces to the list
  941: 	     was confusing the DHCP code, which expected one interface only.
  942: 	     Solved by adding loopback interfaces to address list instead.
  943: 
  944: 	     Add dhcp-vendorclass option to allow options to be sent only
  945: 	     to certain classes of clients.
  946: 
  947: 	     Tweaked option search code so that if a netid-qualified
  948: 	     option is used, any unqualified option is ignored.
  949: 	     
  950: 	     Changed the method of picking new dynamic IP
  951: 	     addresses. This used to use the next consecutive
  952: 	     address as long it was free, now it uses a hash
  953: 	     from the client hardware address. This reduces the amount
  954: 	     of address movement for clients which let their lease
  955: 	     expire and allows consecutive DHCPOFFERS to the same host
  956: 	     to (almost always) be for the same address, without
  957: 	     storing state before a lease is granted.
  958:  
  959: 	     Tweaked option handling code to return all possible
  960: 	     options rather than none when DHCP "requested options"
  961: 	     field is missing. This fixes interoperability with
  962: 	     ancient IBM LANMAN DHCP clients. Thanks to Jim Louvau for
  963: 	     help with this.
  964: 
  965: release 2.8
  966: 	     Pad DHCP packets to a minimum size of 300 bytes. This
  967: 	     fixes interoperability problems with the Linux in-kernel
  968: 	     DHCP/BOOTP client. Thanks to Richard Musil for
  969: 	     diagnosing this and supplying a patch.
  970: 
  971: 	     Fixed option-parsing bug and potential memory leak. Patch
  972: 	     from Richard Musil.
  973: 
  974: 	     Improved vendor class configuration and added user class
  975: 	     configuration. Specifically: (1) options are matched on
  976: 	     the netids from dhcp-range, dhcp-host, vendor class and
  977: 	     user class(es). Multiple net-ids are allowed and options
  978: 	     are searched on them all. (2) matches agains vendor class
  979: 	     and user class are now on a substring, if the given
  980: 	     string is a substring of the vendor/user class, then a
  981: 	     match occurs. Thanks again to Richard Musil for prompting
  982: 	     this.
  983: 
  984: 	     Make "#" match any domain on --address and --server
  985: 	     flags. --address=/#/1.2.3.4 will return 1.2.3.4 for _any_
  986: 	     domain not otherwise matched. Of course
  987: 	     --server=/#/1.2.3.4 is exactly equivalent to
  988: 	     --server=1.2.3.4. Special request from Josh Howlett.
  989: 	
  990: 	     Fixed a nasty bug which would cause dnsmasq to lose track
  991: 	     of leases for hosts which had a --dhcp-host flag without
  992: 	     a name specification. The mechanism for this was that
  993: 	     the hostname could get erroneously set as a zero-length
  994: 	     string and then written to the leases file as a
  995: 	     mal-formed line. Restarting dnsmasq would then lose the lease.
  996: 	     Alex Hermann's work helped chase down this problem.
  997: 
  998: 	     Add checks against DHCP clients which return zero-length
  999: 	     hostnames. This avoids the potential lease-loss problems
 1000: 	     reffered to above. Also, if a client sends a hostname when
 1001: 	     it creates a lease but subsequently sends no or a
 1002: 	     zero-length hostname whilst renewing, continue to use the
 1003: 	     existing hostname, don't wipe it out. 
 1004: 	     
 1005: 	     Tweaked option parsing to flag some parameter errors.
 1006: 
 1007: release 2.9
 1008: 	     Fixed interface filter code for two effects: 1) Fixed bug
 1009: 	     where queries sent via loopback interface
 1010: 	     but to the address of another interface were ignored
 1011: 	     unless the loopback interface was explicitly configured.
 1012: 	     2) on OpenBSD failure to configure one interface now
 1013: 	     causes a fatal error on startup rather than an huge
 1014: 	     stream of log messages. Thanks to Erik Jan Tromp for 
 1015: 	     finding that bug.
 1016: 
 1017: 	     Changed server selection strategy to improve performance
 1018: 	     when there are many available servers and some are
 1019: 	     broken. The new algorithm is to pick as before for the
 1020: 	     first try, but if a query is retried, to send to all
 1021: 	     available servers in parallel. The first one to reply
 1022: 	     then becomes prefered for the next query. This should 
 1023: 	     improve reliability without generating significant extra
 1024: 	     upstream load.
 1025: 
 1026: 	     Fixed breakage of special servers/addresses for
 1027: 	     unqualified domains introduced in version 2.8 
 1028: 	      
 1029: 	     Allow fallback to "bind-interfaces" at runtime: Some
 1030: 	     verions of *BSD seem to have enough stuff in the header
 1031: 	     files to build but no kernel support. Also now log if
 1032: 	     "bind-interfaces" is forced on.
 1033: 
 1034: 	     Log replies from upstream servers which refuse to do
 1035: 	     recursion - dnsmasq is not a recursive nameserver and
 1036: 	     relies on upstream servers to do the recursion, this
 1037: 	     flags a configuration error.
 1038: 
 1039: 	     Disable client-id matching for hosts whose MAC address is
 1040: 	     read from /etc/ethers. Patch from Oleg I. Vdovikin.
 1041: 
 1042: 	     Extended --mx-host flag to allow arbitrary targets for MX
 1043: 	     records, suggested by Moritz Bunkus.
 1044: 
 1045: 	     Fixed build under NetBSD 2.0 - thanks to Felix Deichmann
 1046: 	     for the patch.
 1047: 	     
 1048: 	     Deal correctly with repeated addresses in /etc/hosts. The
 1049: 	     first name found is now returned for reverse lookups,
 1050: 	     rather than all of them.
 1051: 
 1052: 	     Add back fatal errors when nonexistant 
 1053: 	     interfaces or interface addresses are given but only in
 1054: 	     "bind-interfaces" mode. Principle of least surprise applies.
 1055: 	     
 1056: 	     Allow # as the argument to --domain, meaning "read the
 1057: 	     domain from the first search directive in
 1058: 	     /etc.resolv.conf". Feature suggested by Evan Jones.
 1059: 
 1060: release 2.10
 1061: 	    Allow --query-port to be set to a low port by creating and
 1062: 	    binding the socket before dropping root. (Suggestion from
 1063: 	    Jamie Lokier) 
 1064: 
 1065: 	    Support TCP queries. It turned out to be possible to do
 1066: 	    this with a couple of hundred lines of code, once I knew
 1067: 	    how. The executable size went up by a few K on i386.
 1068: 	    There are a few limitations: data obtained via TCP is not
 1069: 	    cached, and dynamically-created interfaces may break under
 1070: 	    certain circumstances. Source-address or query-port
 1071: 	    specifications are ignored for TCP.
 1072: 
 1073: 	    NAK attempts to renew a DHCP lease where the DHCP range
 1074: 	    has changed and the lease is no longer in the allowed
 1075: 	    range. Jamie Lokier pointed out this bug.
 1076: 
 1077: 	    NAK attempts to renew a pool DHCP lease when a statically
 1078: 	    allocated address has become available, forcing a host to
 1079: 	    move to its allocated address. Lots of people have
 1080: 	    suggested this change and been rebuffed (they know who
 1081: 	    they are) the straws that broke the camel's back were Tim
 1082: 	    Cutts and Jamie Lokier.
 1083: 
 1084: 	    Remove any nameserver records from answers which are
 1085: 	    modified by --alias flags. If the answer is modified, it
 1086: 	    cannot any longer be authoritative.
 1087: 
 1088: 	    Change behaviour of "bogus-priv" option to return NXDOMAIN
 1089: 	    rather than a PTR record with the dotted-quad address as
 1090: 	    name. The new behaviour doesn't provoke tcpwrappers like
 1091: 	    the old behavior did.
 1092: 
 1093: 	    Added a patch for the Suse rpm. That changes the default
 1094: 	    group to one suitable for Suse and disables inclusion of
 1095: 	    the ISC lease-file reader code. Thanks to Andy Cambeis for
 1096: 	    his ongoing work on Suse packaging.
 1097: 
 1098: 	    Support forwarding of EDNS.0 The maximum UDP packet size 
 1099: 	    defaults to 1280, but may be changed with the
 1100: 	    --edns-packet-max option. Detect queries with the do bit
 1101: 	    set and always forward them, since DNSSEC records are 
 1102: 	    not cached. This behaviour is required to make
 1103: 	    DNSSECbis work properly though dnsmasq. Thanks to Simon
 1104: 	    Josefsson for help with this.
 1105: 
 1106: 	    Move default config file location under OpenBSD from
 1107: 	    /usr/local/etc/dnsmasq.conf to /etc/dnsmasq.conf. Bug
 1108: 	    report from Jonathan Weiss.
 1109: 
 1110: 	    Use a lease with matching MAC address for a host which
 1111: 	    doesn't present a client-id, even if there was a client ID 
 1112: 	    at some point in the past. This reduces surprises when
 1113: 	    changing DHCP clients, adding id:* to a host, and from the
 1114: 	    semantics change of /etc/ethers in 2.9. Thanks to Bernard
 1115: 	    Sammer for finding that.
 1116: 
 1117: 	    Added a "contrib" directory and in it the dnslist utility,
 1118: 	    from Thomas Tuttle.
 1119: 
 1120: 	    Fixed "fail to start up" problems under Linux with IPv6
 1121: 	    enabled. It's not clear that these were an issue in
 1122: 	    released versions, but they manifested themselves when TCP
 1123: 	    support was added. Thanks to Michael Hamilton for
 1124: 	    assistance with this.
 1125: 
 1126: version 2.11
 1127: 	    Fixed DHCP problem which could result in two leases in the
 1128:             database with the same address. This looked much more
 1129:             alarming then it was, since it could only happen when a
 1130:             machine changes MAC address but kept the same name. The
 1131:             old lease would persist until it timed out but things
 1132:             would still work OK. 
 1133: 
 1134: 	    Check that IP addresses in all dhcp-host directives are
 1135: 	    unique and die horribly if they are not, since otherwise
 1136: 	    endless protocol loops can occur. 
 1137: 	    
 1138: 	    Use IPV6_RECVPKTINFO as socket option rather than
 1139: 	    IPV6_PKTINFO where available. This keeps late-model FreeBSD
 1140: 	    happy.
 1141: 
 1142: 	    Set source interface when replying to IPv6 UDP
 1143: 	    queries. This is needed to cope with link-local addresses.
 1144: 
 1145: version 2.12
 1146:             Added extra checks to ensure that DHCP created DNS entries 
 1147: 	    cannot generate multiple DNS address->name entries. Thanks to 
 1148: 	    Stefan Monnier for finding the exact set of configuration
 1149:             options which could create this.
 1150: 
 1151: 	    Don't set the the filterwin2k option in the example config
 1152: 	    file and add warnings that is breaks Kerberos. Thanks to
 1153: 	    Simon Josefsson and Timothy Folks for pointing that out.
 1154: 	    
 1155: 	    Log types of incoming queries as well as source and domain.
 1156: 
 1157: 	    Log NODATA replies generated as a result of the
 1158: 	    filterwin2k option.
 1159: 
 1160: version 2.13
 1161: 	    Fixed crash with un-named DHCP hosts introduced in 2.12.
 1162: 	    Thanks to Nicolo Wojewoda and Gregory Gathy for bug reports.
 1163: 
 1164: version 2.14
 1165: 	    Fix DHCP network detection for hosts which talk via a
 1166: 	    relay. This makes lease renewal for such hosts work
 1167: 	    correctly.
 1168: 
 1169: 	    Support RFC3011 subnet selectors in the DHCP server.
 1170: 
 1171: 	    Fix DHCP code to generate RFC-compliant responses
 1172:             to hosts in the INIT-REBOOT state.
 1173: 
 1174: 	    In the DHCP server, set the receive buffer size on 
 1175: 	    the transmit-only packet socket to zero, to avoid 
 1176: 	    waste of kernel buffers.
 1177: 
 1178: 	    Fix DHCP address allocation code to use the whole of
 1179: 	    the DHCP range, including the start and end addresses.
 1180: 	    
 1181: 	    Attempt an ICMP "ping" on new addresses before allocating 
 1182: 	    them to leases, to avoid allocating addresses which are in use.
 1183: 
 1184: 	    Handle rfc951 BOOTP as well as DHCP for hosts which have
 1185: 	    MAC address to IP address mapping defined.
 1186: 
 1187: 	    Fix compilation under MacOS X. Thanks to Chris Tomlinson.
 1188: 
 1189: 	    Fix compilation under NetBSD. Thanks to Felix Deichmann.
 1190: 
 1191: 	    Added "keep-in-foreground" option. Thanks to Sean
 1192: 	    MacLennan for the patch.
 1193: 
 1194: version 2.15
 1195:             Fixed NXDOMAIN/NODATA confusion for locally known
 1196:             names. We now return a NODATA reponse for names which are
 1197:             locally known. Now a query for (eg AAAA or MX) for a name
 1198: 	    with an IPv4 address in /etc/hosts which fails upstream
 1199:             will generate a NODATA response. Note that the query 
 1200: 	    is still tried upstream, but a NXDOMAIN reply gets
 1201:             converted to NODATA. Thanks to Eric de Thouars, Eric
 1202:             Spakman and Mike Mestnik for bug reports/testing.
 1203: 
 1204: 	    Allow multiple dhcp-ranges within the same network. The
 1205: 	    original intention was that there would be a dhcp-range
 1206: 	    option for each network served, but there's no real reason
 1207: 	    not to allow discontinuous ranges within a network so this
 1208: 	    release adds support for that.
 1209: 
 1210: 	    Check for dhcp-ranges which are inconsistent with their 
 1211: 	    netmask, and generate errors or warnings.
 1212: 	    
 1213: 	    Improve error messages when there are problems with
 1214: 	    configuration.
 1215: 
 1216: version 2.16
 1217: 	    Fixed typo in OpenBSD-only code which stopped compilation
 1218:             under that OS. Chris Weinhaupl gets credit for reporting 
 1219:             this.
 1220: 
 1221: 	    Added dhcp-authoritative option which restores non-RFC 
 1222: 	    compliant but desirable behaviour of pre-2.14 versions and
 1223:             avoids long timeouts while DHCP clients try to renew leases
 1224:             which are unknown to dnsmasq. Thanks to John Mastwijk for 
 1225: 	    help with this.	 
 1226: 
 1227: 	    Added support to the DHCP option code to allow RFC-3397 
 1228: 	    domain search DHCP option (119) to be sent.
 1229: 
 1230:             Set NONBLOCK on all listening sockets to workaround non-POSIX
 1231:             compliance in Linux 2.4 and 2.6. This fixes rare hangs which
 1232:             occured when corrupted packets were received. Thanks to
 1233: 	    Joris van Rantwijk for chasing that down.
 1234:  
 1235: 	    Updated config.h for NetBSD. Thanks to Martin Lambers.
 1236: 
 1237:             Do a better job of distinguishing between retransmissions
 1238: 	    and new queries when forwarding. This fixes a bug
 1239: 	    triggered by the polipo web cache which sends A and AAAA
 1240: 	    queries both with the same transaction-ID. Thanks to 
 1241: 	    Joachim Berdal Haga and Juliusz Chroboczek for help with this.
 1242: 
 1243: 	    Rewrote cache code to store CNAMES, rather then chasing
 1244: 	    them before storage. This eliminates bad situations when
 1245: 	    clients get inconsistent views depending on if data comes
 1246: 	    from the cache.
 1247: 
 1248: 	    Allow for more than one --addn-hosts flag.
 1249: 
 1250: 	    Clarify logged message when a DHCP lease clashes with an
 1251: 	    /etc/hosts entry. Thanks to Mat Swift for the suggestion.
 1252: 
 1253: 	    Added dynamic-dnsmasq from Peter Willis to the contrib
 1254: 	    section.
 1255: 
 1256: version 2.17
 1257: 	    Correctly deduce the size of numeric dhcp-options, rather
 1258: 	    than making wild guesses. Also cope with negative values.
 1259: 
 1260: 	    Fixed use of C library reserved symbol "index" which broke
 1261: 	    under certain combinations of library and compiler.
 1262: 
 1263: 	    Make bind-interfaces work for IPv6 interfaces too.
 1264: 
 1265: 	    Warn if an interface is given for listening which doesn't
 1266: 	    currently exist when not in bind-interfaces mode. (This is
 1267: 	    already a fatal error when bind-interfaces is set.)
 1268: 
 1269: 	    Allow the --interface and --except-interface options to
 1270: 	    take a comma-separated list of interfaces.
 1271: 
 1272: 	    Tweak --dhcp-userclass matching code to work with the
 1273: 	    ISC dhclient which violates RFC3004 unless its
 1274: 	    configuration is very warped. Thanks to Cedric Duval for
 1275: 	    the bug report. 
 1276: 
 1277: 	    Allow more than one network-id tag in a dhcp-option. All
 1278: 	    the tags must match to enable the option.
 1279: 
 1280: 	    Added dhcp-ignore option to disable classes of hosts based
 1281: 	    on network-id tags. Also allow BOOTP options to be
 1282: 	    controlled by network tags.
 1283: 
 1284: 	    Fill in sname, file and siaddr fields in replies to
 1285: 	    DHCPINFORM messages.
 1286: 
 1287: 	    Don't send NAK replies to DHCPREQUEST packets for disabled
 1288: 	    clients. Credit to Cedric Duval for spotting this.
 1289: 
 1290: 	    Fix rare crash associated with long DNS names and CNAME
 1291: 	    records. Thanks to Holger Hoffstatte and especially Steve
 1292: 	    Grecni for help chasing that one down.
 1293: 
 1294: version 2.18
 1295:             Reworked the Linux interface discovery code (again) to
 1296: 	    cope with interfaces which have only IPv6 addresses and 
 1297: 	    interfaces with more than one IPv6 address. Thanks to
 1298:             Martin Pels for help with that.
 1299: 
 1300: 	    Fix problems which occured when more than one dhcp-range
 1301: 	    was specified in the same subnet: sometimes parameters
 1302: 	    (lease time, network-id tag) from the wrong one would be
 1303: 	    used. Thanks to Rory Campbell-Lange for the bug report.
 1304: 
 1305: 	    Reset cache statistics when clearing the cache.
 1306: 
 1307: 	    Enable long command line options on FreeBSD when the
 1308: 	    C library supports them.
 1309: 
 1310: version 2.19 
 1311:             Tweaked the Linux-only interface discovery code to cope 
 1312: 	    with interface-indexes larger than 8 bits in
 1313:             /proc/net/if_inet6. This only affects Linux, obviously.  
 1314: 	    Thanks to Richard Atterer for the bug report.
 1315: 
 1316: 	    Check for under-length option fields in DHCP packets, a
 1317: 	    zero length client-id, in particluar, could seriously
 1318: 	    confuse dnsmasq 'till now. Thanks to Will Murname for help
 1319: 	    with that.
 1320: 
 1321: 	    If a DHCP-allocated address has an associated name in
 1322: 	    /etc/hosts, and the client does not provide a hostname
 1323: 	    parameter and there is no hostname in a matching dhcp-host
 1324: 	    option, send the /etc/hosts name as the hostname in 
 1325: 	    the DHCP lease. Thanks to Will Murname for the suggestion.
 1326: 
 1327: version 2.20
 1328: 	    Allow more than one instance of dnsmasq to run on a
 1329: 	    machine, each providing DHCP service on a different
 1330: 	    interface, provided that --bind-interfaces is set. This
 1331: 	    configuration used to work, but regressed in version 2.14
 1332: 
 1333: 	    Fix compilation on Mac OS X. Thanks to Kevin Bullock.
 1334: 	
 1335: 	    Protect against overlong names and overlong
 1336: 	    labels in configuration and from DHCP.
 1337: 
 1338: 	    Fix interesting corner case in CNAME handling. This occurs
 1339: 	    when a CNAME has a target which "shadowed" by a name in
 1340: 	    /etc/hosts or from DHCP. Resolving the CNAME would sneak
 1341: 	    the upstream value of the CNAME's target into the cache,
 1342: 	    alongside the local value. Now that doesn't happen, though
 1343: 	    resolving the CNAME still gives the unshadowed value. This
 1344: 	    is arguably wrong but rather difficult to fix. The main
 1345: 	    thing is to avoid getting strange results for the target
 1346: 	    due to the cache pollution when resolving the
 1347: 	    CNAME. Thanks to Pierre Habouzit for exploring the corner
 1348: 	    and submitting a very clear bug report.
 1349: 
 1350: 	    Fix subtle bug in the DNS packet parsing code. It's almost
 1351: 	    impossible to describe this succinctly, but the one known
 1352: 	    manifestation is the inability to cache the A record for
 1353: 	    www.apple.com. Thanks to Bob Alexander for spotting that.
 1354: 
 1355: 	    Support SRV records. Thanks to Robert Kean for the patches
 1356: 	    for this.
 1357: 
 1358: 	    Fixed sign confusion in the vendor-id matching code which
 1359: 	    could cause crashes sometimes. (Credit to Mark Wiater for
 1360: 	    help finding this.)
 1361: 
 1362: 	    Added the ability to match the netid tag in a
 1363: 	    dhcp-range. Combined with the ability to have multiple
 1364: 	    ranges in a single subnet, this provides a means to
 1365: 	    segregate hosts on different address ranges based on
 1366: 	    vendorclass or userclass. Thanks to Mark Wiater for
 1367: 	    prompting this enhancement.    
 1368: 
 1369: 	    Added preference values for MX records.
 1370: 
 1371: 	    Added the --localise-queries option.
 1372: 
 1373: version 2.21
 1374:             Improve handling of SERVFAIL and REFUSED errors. Receiving
 1375: 	    these now initiates search for a new good server, and a 
 1376: 	    server which returns them is not a candidate as a good
 1377:             server. Thanks to Istvan Varadi for pointing out the
 1378:             problem.
 1379: 
 1380: 	    Tweak the time code in BROKEN_RTC mode.
 1381: 
 1382: 	    Sanity check lease times in dhcp-range and dhcp-host
 1383: 	    configurations and force them to be at least two minutes
 1384: 	    (120s) leases shorter than a minute confuse some clients,
 1385: 	    notably Apple MacOS X. Rory Campbell-Lange found this
 1386: 	    problem.
 1387: 
 1388: 	    Only warn once about an upstream server which is refusing to do
 1389: 	    recursive queries.
 1390: 
 1391: 	    Fix DHCP address allocation problem when netid tags are in
 1392: 	    use. Thanks to Will Murnane for the bug report and
 1393: 	    subsequent testing.
 1394: 
 1395: 	    Add an additional data section to the reply for MX and SRV
 1396: 	    queries. Add support for DNS TXT records. Thanks to Robert 
 1397: 	    Kean and John Hampton for prompts and testing of these.
 1398: 
 1399: 	    Apply address rewriting to records in the additional data section
 1400: 	    of DNS packets. This makes things like MX records work
 1401: 	    with the alias function. Thanks to Chad Skeeters for
 1402: 	    pointing out the need for this.
 1403: 
 1404: 	    Added support for quoted strings in config file.
 1405: 
 1406: 	    Detect and defeat cache-poisoning attacks which attempt to
 1407: 	    send (malicious) answers to questions we didn't
 1408: 	    send. These are ignored now even if the attacker manages
 1409: 	    to guess a random query-id.
 1410: 
 1411: 	    Provide DHCP support for interfaces with multiple IP
 1412: 	    addresses or aliases. This in only enabled under Linux.
 1413: 	    See the FAQ entry for details.
 1414: 
 1415: 	    Revisit the MAC-address and client-id matching code to
 1416: 	    provide saner behaviour with PXE boots, where some
 1417: 	    requests have a client-id and some don't.
 1418: 
 1419: 	    Fixed off-by-one buffer overflow in lease file reading
 1420: 	    code. Thanks to Rob Holland for the bug report.
 1421: 
 1422: 	    Added wildcard matching for MAC addresses in dhcp-host
 1423: 	    options. A sensible suggestion by Nathaniel McCallum.
 1424: 
 1425: version 2.22
 1426:             Fixed build problems on (many) systems with older libc
 1427:             headers where <linux/types.h> is required before
 1428:             <linux/netlink.h>. Enabled HAVE_RTNETLINK under uclibc now
 1429:             that this fix is in place.
 1430: 
 1431: 	    Added support for encapsulated vendor-class-specific DHCP
 1432: 	    options. Thanks to Eric Shattow for help with this.
 1433: 
 1434: 	    Fix regression in 2.21 which broke commas in filenames and
 1435: 	    corrupted argv. Thanks to Eric Scott for the bugreport.
 1436: 
 1437: 	    Fixed stupid thinko which caused dnsmasq to wedge during
 1438: 	    startup with certain MX-record options. Another 2.21 regression.
 1439: 
 1440: 	    Fixed broken-ness when reading /etc/ethers. 2.21 broke
 1441: 	    this too.
 1442: 
 1443: 	    Fixed wedge with certain DHCP options. Yet another 2.21
 1444: 	    regression. Rob Holland and Roy Marples chased this one
 1445: 	    down.
 1446: 
 1447: version 2.23
 1448: 	    Added a check to ensure that there cannot be more than one
 1449: 	    dhcp-host option for any one IP address, even if the
 1450: 	    addresses are assigned indirectly via a hostname and
 1451: 	    /etc/hosts.
 1452: 
 1453: 	    Include a "server identifier" in DHCPNAK replies, as
 1454: 	    required by RFC2131.
 1455: 
 1456: 	    Added method  support for DBus
 1457: 	    (http://www.freedesktop.org/Software/dbus)
 1458: 	    This is a superior way to re-configure dnsmasq on-the-fly
 1459: 	    with different upstream nameservers, as the host moves
 1460: 	    between networks. DBus support must be enabled in
 1461: 	    src/config.h and should be considered experimental at this
 1462: 	    point. See DBus-interface for the specification of the
 1463: 	    DBus method calls supported.
 1464: 
 1465: 	    Added information to the FAQ about setting the DNS domain
 1466: 	    in windows XP and Mac OS X, thanks to Rick Hull.
 1467: 
 1468: 	    Added sanity check to resolv.conf polling code to cope
 1469: 	    with backwards-moving clocks. Thanks to Leonardo Canducci
 1470: 	    for	help with this.
 1471: 
 1472: 	    Handle so-called "A-for-A" queries, which are queries for
 1473: 	    the address associated with a name which is already a
 1474: 	    dotted-quad address. These should be handled by the
 1475: 	    resolver code, but sometimes aren't and there's no point
 1476: 	    in forwarding them.
 1477: 
 1478: 	    Added "no-dhcp-interface" option to disable DHCP service
 1479:             on an interface, whilst still providing DNS.
 1480: 
 1481: 	    Fix format-string problem - config file names get passed
 1482: 	    to fprintf as a format string, so % characters could cause
 1483: 	    crashes. Thanks to Rob Holland for sleuthing that one.
 1484: 
 1485: 	    Fixed multiple compiler warnings from gcc 4. Thanks to 
 1486: 	    Tim Cutts for the report.
 1487: 
 1488: 	    Send the hostname option on DHCP offer messages as well as
 1489: 	    DHCP ack messages. This is required by the Rio Digital 
 1490: 	    Audio Receiver. Thanks to Ron Frederick for the patch.
 1491:  
 1492:             Add 'd' (for day) as a possible time multiplier in lease 
 1493: 	    time specifications. Thanks to Michael Deegan.
 1494: 
 1495: 	    Make quoting suppress recognition of IP addresses, so
 1496: 	    dhcp-option=66,1.2.3.4 now means something different to
 1497:             dhcp-option=66,"1.2.3.4", which sets the option to a
 1498: 	    string value. Thanks to Brian Macauley for the bug report.
 1499: 
 1500: 	    Fixed the option parsing code to avoid segfaults from some
 1501: 	    invalid configurations. Thanks to Wookey for spotting that one.
 1502:  
 1503:             Provide information about which compile-time options were 
 1504: 	    selected, both in the log at startup and as part of the output 
 1505:             from dnsmasq --version. Thanks to Dirk Schenkewitz for 
 1506:             the suggestion. 
 1507: 
 1508: 	    Fix pathalogical behaviour when a broken client keeps sending
 1509:             DHCPDISCOVER messages repeatedly and fast. Because dealing with
 1510:             each of these takes a few seconds, (because of the ping) then a 
 1511: 	    queue of DHCP packets could build up. Now, the results of a ping 
 1512:             test are assumed to be valid for 30 seconds, so repeated waits are
 1513:             not required. Thanks to Luca Landi for finding this.
 1514: 
 1515: 	    Allow DHCPINFORM requests without hardware address
 1516: 	    information. These are generated by some browsers, looking
 1517: 	    for proxy information. Thanks to Stanley Jaddoe for the
 1518: 	    bug report on that.
 1519: 
 1520: 	    Add support of the "client FQDN" DHCP option. If present,
 1521: 	    this is used to allow the client to tell dnsmasq its name,
 1522: 	    in preference to (mis)using the hostname option. See 
 1523:               http://tools.ietf.org/wg/dhc/draft-ietf-dhc-fqdn-option/\
 1524:                 draft-ietf-dhc-fqdn-option-10.txt
 1525:             for details of the draft spec.
 1526: 
 1527: 	    Added startup scripts for MacOS X Tiger/Panther to the 
 1528:             contrib collection. Thanks to Tim Cutts.
 1529: 
 1530: 	    Tweak DHCP network selection so that clients which turn up
 1531: 	    on our network in REBINDING state and with a lease for a
 1532: 	    foreign network will get a NAK response. Thanks to Dan
 1533: 	    Shechter for work on this and an initial patch and thanks
 1534: 	    to Gyorgy Farkas for further testing.
 1535: 
 1536: 	    Fix DNS query forwarding for empty queries and forward
 1537: 	    queries even when the recursion-desired bit is clear. This
 1538: 	    allows "dig +trace" to work. Problem report from Uwe
 1539: 	    Gansert.
 1540: 
 1541: 	    Added "const" declarations where appropriate, thanks to
 1542: 	    Andreas Mohr for the patch.
 1543: 
 1544: 	    Added --bootp-dynamic option and associated
 1545: 	    functionality. Thanks to Josef Wolf for the suggestion.
 1546:  
 1547: version 2.24
 1548:             Updated contrib/openvpn/dnsmasq.patch from Joseph Tate.
 1549: 
 1550: 	    Tweaked DHCP NAK code, a DHCP NAK is now unicast as a
 1551: 	    fallback in cases where a broadcast is futile: namely in
 1552: 	    response to a unicast REQUEST from a non-local network
 1553: 	    which was not sent via a relay.
 1554: 
 1555: 	    Slightly changed the semantics of domain matching in
 1556: 	    --server and --address configs. --server=/domain.com/ still
 1557: 	    matches domain.com and sub.domain.com but does not 
 1558: 	    now match newdomain.com The semantics of 
 1559:             --server=/.domain.com/ are unchanged. 
 1560: 	    Thanks to Chris Blaise for the patch.
 1561: 
 1562: 	    Added backwards-compatible internationalisation support.
 1563: 	    The existing make targets, (all, dnsmasq, install) work as
 1564: 	    before. New ones (all-i18n, and install-i18n) add gettext.
 1565: 	    The translations live in po/ There are not too many
 1566: 	    strings, so if anybody can provide translations (and for
 1567: 	    the manpage....) please send them in.
 1568: 
 1569: 	    Tweak behaviour on receipt of REFUSED or SERVFAIL rcodes,
 1570: 	    now the query gets retried on all servers before returning
 1571: 	    the error to the source of the query. Thanks to Javier
 1572: 	    Kohen for the report.
 1573:  
 1574: 	    Added Polish translation - thanks to Tomasz Sochanski.
 1575: 
 1576: 	    Changed default manpage install location from /usr/man 
 1577: 	    to /usr/share/man 
 1578: 
 1579: 	    Added Spanish translation - thanks to Christopher Chatham.
 1580: 
 1581: 	    Log a warning when a DHCP packet is truncated due to lack
 1582: 	    of space. (Thanks to Michael Welle for the prompt to do
 1583: 	    this.)
 1584: 	    
 1585: 	    Added French translation - thanks to Lionel Tricon.
 1586: 
 1587: 	    Added Indonesian translation - thanks to Salman AS.
 1588: 
 1589: 	    Tweaked the netlink code to cope with interface broadcast
 1590: 	    address not set, or set to 0.0.0.0.
 1591: 
 1592: 	    Fixed problem assigning fixed addresses to hosts when more
 1593: 	    than one dhcp-range is available. Thanks to Sorin Panca
 1594: 	    for help chasing this down.
 1595: 
 1596: 	    Added more explict error mesages to the hosts file and
 1597: 	    ethers file reading code. Markus Kaiserswerth suffered to
 1598: 	    make this happen.
 1599: 
 1600: 	    Ensure that a hostname supplied by a DHCP client can never
 1601: 	    override one configured on the server. Previously, any
 1602: 	    host claiming a name would be given it, even if that
 1603: 	    over-rode a dhcp-host declaration, leading to potentially 
 1604:             confusing situations.
 1605: 
 1606: 	    Added Slackware package-build stuff into contrib/ The i18n
 1607: 	    effort broke the current scripts, and working ones were
 1608: 	    needed for testing, so they ended up here rather than make
 1609: 	    Pat re-invent the wheel.
 1610: 	    
 1611: 	    Added Romanian translation, thanks to Sorin Panca for
 1612: 	    that.
 1613: 
 1614: version 2.25
 1615:             Fixed RedHat spec file for FC4 - thanks to Werner Hoelzl
 1616:             and Andrew Bird.
 1617: 
 1618:             Fixed Suse spec file - thanks to Steven Springl.
 1619: 
 1620: 	    Fixed DHCP bug when two distict subnets are on the same
 1621: 	    physical interface. Thanks to Pawel Zawora for finding
 1622: 	    this and suggesting the fix.
 1623: 
 1624: 	    Added logging to make it explicit when dnsmasq falls back
 1625: 	    from using RT-netlink sockets to the old ioctl API for
 1626: 	    getting information about interfaces. Doing this
 1627: 	    completely silently made remote debugging hard.
 1628: 
 1629: 	    Merged uclibc build fixes from the OpenWRT package into
 1630: 	    src/config.h 
 1631: 
 1632: 	    Added Norwegian translation - thanks to Jan Erik Askildt.
 1633: 
 1634: version 2.26
 1635: 	    Fixed SuSe rpm patch problem - thanks to Steven Springl.
 1636: 
 1637: 	    Fixed crash when attempting to send a DHCP NAK to a host
 1638: 	    which believes it has a lease on an unknown
 1639: 	    network. Thanks to Lutz Pressler for the bug report and
 1640: 	    patch.
 1641: 
 1642: version 2.27
 1643: 	    Tweaked DHCP behaviour when a client attempts to renew a lease
 1644:             which dnsmasq doesn't know about. Previously that would always
 1645:             result in a DHCPNAK. Now, in dhcp-authoritative mode, the
 1646:             lease will be created, if it's legal. This makes dnsmasq work
 1647:             better if the lease database is lost, for example on an OpenWRT
 1648: 	    system which reboots. Thanks to Stephen Rose for work on
 1649: 	    this.
 1650: 
 1651: 	    Added the ability to support RFC-3442 style destination
 1652: 	    descriptors in dhcp-options. This makes classless static
 1653: 	    routes easy to do, eg dhcp-option=121,192.168.1.0/24,1.2.3.4
 1654: 
 1655: 	    Added error-checking to the code which writes the lease
 1656: 	    file. If this fails for any reason, an error is logged,
 1657: 	    and a retry occurs after one minute. This should improve
 1658: 	    things eg when a filesystem is full. Thanks to Jens Holze
 1659: 	    for the bug report.
 1660: 
 1661: 	    Fixed breakage of the "/#/ matches any domain" facility
 1662: 	    which happened in 2.24. Thanks to Peter Surda for the bug
 1663: 	    report.
 1664: 
 1665: 	    Use "size_t" and "ssize_t" types where appropriate in the
 1666: 	    code.
 1667: 
 1668: 	    Fix buggy CNAME handling in mixed IPv4 and IPv6
 1669: 	    queries. Thanks to Andreas Pelme for help finding that.
 1670: 
 1671: 	    Added some code to attempt to re-transmit DNS queries when 
 1672: 	    a network interface comes up.  This helps on DoD links, 
 1673: 	    where frequently the packet which triggers dialling is
 1674:             a DNS query, which then gets lost. By re-sending, we can 
 1675: 	    avoid the lookup failing. This function is only active
 1676: 	    when netlink support is compiled in, and therefore only
 1677: 	    under Linux. Thanks to Jean Wolter for help with this.
 1678: 
 1679: 	    Tweaked the DHCP tag-matching code to work correctly with
 1680: 	    NOT-tag conditions. Thanks to Lutz Pressler for finding
 1681: 	    the bug.
 1682: 
 1683: 	    Generalised netid-tag matching in dhcp-range statements to
 1684: 	    allow more than one tag.
 1685: 
 1686: 	    Added --dhcp-mac to do MAC address matching in the same
 1687: 	    way as vendorclass and userclass matching. A good
 1688: 	    suggestion from Lutz Pressler.
 1689: 
 1690: 	    Add workaround for buggy early Microsoft DHCP clients
 1691: 	    which need zero-termination in string options.
 1692: 	    Thanks to Fabiano Pires for help with this.
 1693: 
 1694: 	    Generalised the DHCP code to cope with any hardware
 1695: 	    address type, at least on Linux. *BSD is still limited to
 1696: 	    ethernet only.
 1697: 
 1698: version 2.28
 1699:             Eliminated all raw network access when running on
 1700:             Linux. All DHCP network activity now goes through the IP
 1701:             stack. Packet sockets are no longer required. Apart from
 1702:             being a neat hack, this should also allow DHCP over IPsec
 1703:             to work better. On *BSD and OS X, the old method of raw net
 1704:             access through BPF is retained.
 1705: 
 1706: 	    Simplified build options. Networking is now slimmed down
 1707: 	    to a choice of "linux" or "other". Netlink is always used
 1708: 	    under Linux. Since netlink has been available since 2.2
 1709: 	    and non-optional in an IPv4-configured  kernel since 2.4,
 1710: 	    and the dnsmasq netlink code is now well tested, this 
 1711: 	    should work out fine. 
 1712: 
 1713: 	    Removed decayed build support for libc5 and Solaris.
 1714: 	    
 1715: 	    Removed pselect code: use a pipe for race-free signal
 1716: 	    handling instead, as this works everywhere.
 1717: 
 1718: 	    No longer enable the ISC leasefile reading code in the
 1719: 	    distributed sources. I doubt there are many people left
 1720: 	    using this 1.x compatibility code. Those that are will
 1721: 	    have to explicitly enable it in src/config.h.
 1722: 
 1723: 	    Don't send the "DHCP maximum message size" option, even if 
 1724: 	    requested. RFC2131 says this is a "MUST NOT".
 1725: 
 1726: 	    Support larger-than-minimum DHCP message. Dnsmasq is now
 1727: 	    happy to get larger than 576-byte DHCP messages, and will
 1728: 	    return large messages, if permitted by the "maximum
 1729: 	    message size" option of the message to which it is
 1730: 	    replying. There's now an arbitrary sanity limit of 16384
 1731: 	    bytes.
 1732: 
 1733: 	    Added --no-ping option. This fixes an RFC2131 "SHOULD".
 1734: 
 1735: 	    Building on the 2.27 MAC-address changes, allow clients to 
 1736: 	    provide no MAC address at all, relying on the client-id as
 1737: 	    a unique identifier. This should make things like DHCP for
 1738: 	    USB come easier.
 1739: 
 1740: 	    Fixed regression in netlink code under 2.2.x kernels which 
 1741: 	    occurred in 2.27. Erik Jan Tromp is the vintage kernel fan 
 1742: 	    who found this. P.S. It looks like this "netlink bind:
 1743: 	    permission denied" problem occured in kernels at least as
 1744: 	    late a 2.4.18. Good information from Alain Richoux.
 1745: 
 1746: 	    Added a warning when it's impossible to give a host its
 1747: 	    configured address because the address is leased
 1748: 	    elsewhere.  A sensible suggestion from Mircea Bardac.
 1749: 
 1750: 	    Added minimal support for RFC 3046 DHCP relay agent-id
 1751: 	    options. The DHCP server now echoes these back to the
 1752: 	    relay, as required by the RFC. Also, RFC 3527 link selection 
 1753: 	    sub-options are honoured.
 1754: 
 1755: 	    Set the process "dumpable" flag when running in debug
 1756: 	    mode: this makes getting core dumps from root processes
 1757: 	    much easier.
 1758: 	    
 1759: 	    Fixed one-byte buffer overflow which seems to only cause
 1760: 	    problems when dnsmasq is linked with uclibc. Thanks to
 1761: 	    Eric House and Eric Spakman for help in chasing this down.
 1762: 
 1763: 	    Tolerate configuration screwups which lead to the DHCP
 1764: 	    server attemping to allocate its own address to a
 1765: 	    client; eg setting the whole subnet range as a DHCP
 1766: 	    range. Addresses in use by the server are now excluded
 1767: 	    from use by clients.
 1768: 
 1769: 	    Did some thinking about HAVE_BROKEN_RTC mode, and made it
 1770: 	    much simpler and better. The key is to just keep lease
 1771: 	    lengths in the lease file. Since these normally never
 1772: 	    change, even as the lease is renewed, the lease file never
 1773: 	    needs to change except when machines arrive on the network
 1774: 	    or leave. This eliminates the code for timed writes, and
 1775: 	    reduces the amount of wear on a flash filesystem to the
 1776: 	    absolute minimum. Also re-did the basic time function in
 1777: 	    this mode to use the portable times(), rather than parsing
 1778: 	    /proc/uptime.
 1779: 
 1780: 	    Believe the source port number when replying to unicast 
 1781: 	    DHCP requests and DHCP requests via a relay, instead of always 
 1782:             using the standard ports.  This will allow relays on 
 1783:             non-standard ports and DHCPINFORM from unprivileged ports
 1784:             to work. The source port sent by unconfigured clients is still 
 1785:             ignored, since this may be unreliable. This means that a DHCP 
 1786:             client must use the standard port to do full configuration.
 1787:  
 1788: version 2.29
 1789: 	    Fixed compilation on OpenBSD (thanks to Tom Hensel for the
 1790: 	    report). 
 1791: 
 1792: 	    Fixed false "no interface" errors when --bind-interfaces is
 1793: 	    set along with --interface=lo or --listen-address. Thanks
 1794: 	    to Paul Wise for the report.
 1795: 
 1796: 	    Updated patch for SuSE rpm. Thanks to Steven Springl.
 1797: 
 1798: 	    It turns out that there are some Linux kernel
 1799: 	    configurations which make using the capability system
 1800: 	    impossible. If this situation occurs then continue, running
 1801: 	    as root, and log a warning. Thanks to Scott Wehrenberg
 1802: 	    for help tracking this down.
 1803: 
 1804: version 2.30
 1805:             Fixed crash when a DHCP client requested a broadcast
 1806:             reply. This problem was introduced in version 2.28.
 1807: 	    Thanks to Sandra Dekkers for the bug report.
 1808: 
 1809: version 2.31
 1810: 	    Added --dhcp-script option. There have been calls for this
 1811: 	    for a long time from many good people. Fabio Muzzi gets
 1812: 	    the prize for finally convincing me.
 1813: 
 1814: 	    Added example dbus config file and moved dbus stuff into
 1815: 	    its own directory.
 1816: 
 1817: 	    Removed horribly outdated Redhat RPM build files. These
 1818: 	    are obsolete now that dnsmasq in in Fedora extras. Thanks
 1819: 	    to Patrick "Jima" Laughton, the Fedora package
 1820: 	    maintainer.
 1821: 
 1822: 	    Added workaround for Linux kernel bug. This manifests
 1823: 	    itself as failure of DHCP on kernels with "support for
 1824: 	    classical IP over ATM" configured. That includes most
 1825: 	    Debian kernel packages. Many thanks to A. Costa and
 1826: 	    Benjamin Kudria for their huge efforts in chasing this
 1827: 	    down.
 1828: 
 1829: 	    Force-kill child processes when dnsmasq is sent a sigterm,
 1830: 	    otherwise an unclosed TCP connection could keep dnsmasq
 1831: 	    hanging round for a few minutes.
 1832: 
 1833: 	    Tweaked config.h logic for uclibc build. It will now pick
 1834: 	    up MMU and IPV6 status correctly on every system I tested.
 1835: 
 1836: version 2.32 
 1837: 	    Attempt a better job of replacing previous configuration
 1838: 	    when re-reading /etc/hosts and /etc/ethers. SIGHUP is
 1839: 	    still not identical to a restart under all circumstances,
 1840: 	    but it is for the common case of name->MAC address in
 1841: 	    /etc/ethers and name->IP address in /etc/hosts.
 1842: 
 1843: 	    Fall back to broadcast for DHCP to an unconfigured client
 1844: 	    when the MAC address size is greater than 14 bytes.
 1845: 
 1846: 	    Fix problem in 2.28-onwards releases which breaks DNS on
 1847: 	    Mac OS X. Thanks to Doug Fields for the bug report and
 1848: 	    testing.
 1849: 
 1850: 	    Added fix to allow compilation on c89-only compilers.
 1851: 	    Thanks to John Mastwijk for the patch.
 1852: 	   
 1853: 	    Tweak resolv file polling code to work better if there is
 1854: 	    a race between updating the mtime and file contents. This
 1855: 	    is not normally a problem, but it can be on systems which
 1856: 	    replace nameservers whilst active. The code now continues
 1857: 	    to read resolv.conf until it gets at least one usable
 1858: 	    server. Thanks to Holger Mauermann for help with this.
 1859: 
 1860: 	    If a client DECLINEs an address which is allocated to it
 1861: 	    via dhcp-host or /etc/hosts, lock that address out of use
 1862: 	    for ten minutes, instead of forever, and log when it's not
 1863: 	    being used because of the lock-out. This should provide
 1864: 	    less surprising behaviour when a configured address can't be
 1865: 	    used. Thanks to Peter Surda and Heinz Deinhart for input
 1866: 	    on this.
 1867: 
 1868: 	    Fixed *BSD DHCP breakage with only some
 1869: 	    arches/compilers, depending on structure padding rules.
 1870: 	    Thanks to Jeb Campbell and Tom Hensel for help with this.
 1871: 
 1872: 	    Added --conf-dir option. Suggestion from Aaron Tygart.
 1873: 
 1874: 	    Applied patch from Brent Cook which allows netids in
 1875: 	    dhcp-option configuration lines to be prefixed by
 1876: 	    "net:". This is not required by the syntax, but it is
 1877: 	    consistent with other configuration items.
 1878: 
 1879: 	    Added --log-facility option. Suggestion from Fabio Muzzi.
 1880: 
 1881: 	    Major update to Spanish translation. Many thanks to Chris
 1882: 	    Chatham. 
 1883: 
 1884: 	    Fixed gcc-4.1 strict-alias compilation warning.
 1885: 
 1886: version 2.33
 1887:             Remove bash-specific shellcode from the Makefile.
 1888: 
 1889: 	    Fix breakage with some DHCP relay implementations which
 1890: 	    was introduced in 2.28. Believing the source port in
 1891: 	    DHCP requests and sending the reply there is sometimes a
 1892: 	    bad thing to do, so I've reverted to always sending to
 1893: 	    the relay on port 68. Thanks to Daniel Hamlin and Alex
 1894: 	    (alde) for bug reports on this.
 1895: 
 1896: 	    Moved the SuSe packaging files to contrib. I will no
 1897: 	    longer attempt to maintain this in the source tarball. It
 1898: 	    will be done externally, in the same way as packaging for
 1899: 	    other distros. Suse packages are available from 
 1900: 	    ftp://ftp.suse.com/pub/people/ug/
 1901: 	    
 1902: 	    Merged patch from Gentoo to honour $LDFLAGS environment.
 1903: 
 1904: 	    Fix bug in resolv.conf processing when more than one file
 1905: 	    is being checked.
 1906: 
 1907: 	    Add --dns-forward-max option.
 1908: 
 1909: 	    Warn if --resolv-file flags are ignored because of
 1910: 	    --no-resolv. Thanks to Martin F Krafft for spotting this
 1911: 	    one.
 1912: 
 1913:             Add --leasefile-ro option which allows the use of an 
 1914:             external lease database. Many thanks to Steve Horbachuk 
 1915: 	    for assistance developing this feature.
 1916: 
 1917: 	    Provide extra information to lease-change script via its
 1918: 	    environment. If the host has a client-id, then
 1919: 	    DNSMASQ_CLIENT_ID will be set. Either the lease length (in
 1920: 	    DNSMASQ_LEASE_LENGTH) or lease expiry time (in
 1921: 	    DNSMASQ_LEASE_EXPIRES) will be set, depending on the
 1922: 	    HAVE_BROKEN_RTC compile-time option. This extra
 1923: 	    information should make it possible to maintain the lease
 1924: 	    database in external storage such as LDAP or a relational
 1925: 	    database. Note that while leasefile-ro is set, the script
 1926:             will be called with "old"  events more often, since 
 1927: 	    changes to the client-id and lease length
 1928: 	    (HAVE_BROKEN_RTC) or lease expiry time (otherwise) 
 1929: 	    are now flagged. 
 1930: 
 1931: 	    Add contrib/wrt/* which is an example implementation of an
 1932: 	    external persistent lease database for *WRT distros with 
 1933: 	    the nvram command.
 1934: 
 1935: 	    Add contrib/wrt/dhcp_release.c which is a small utility 
 1936: 	    which removes DHCP leases using DHCPRELEASE operation in
 1937: 	    the DHCP protocol.
 1938: 
 1939: version 2.34
 1940: 	    Tweak network-determination code for another corner case:
 1941: 	    in this case a host forced to move between dhcp-ranges on
 1942: 	    the same physical interface. Thanks to Matthias Andree.
 1943: 	    
 1944: 	    Improve handling of high DNS loads by throttling acceptance of
 1945: 	    new queries when resources are tight. This should be a
 1946: 	    better response than the "forwarding table full..."
 1947: 	    message which was logged before.
 1948: 
 1949: 	    Fixed intermittent infinite loop when re-reading
 1950: 	    /etc/ethers after SIGHUP. Thanks to Eldon Ziegler for the
 1951: 	    bug report.
 1952: 
 1953: 	    Provide extra information to the lease-change script: when
 1954: 	    a lease loses its hostname (because a new lease comes
 1955: 	    along and claims the same new), the "old" action is called 
 1956: 	    with the current state of the lease, ie no name. The
 1957: 	    change is to provide the former name which the lease had
 1958: 	    in the environment variable DNSMASQ_OLD_HOSTNAME. This
 1959: 	    helps scripts which do stuff based on hostname, rather
 1960: 	    than IP address. Also provide vendor-class and user-class
 1961: 	    information to the lease-change script when a new lease is
 1962: 	    created in the DNSMASQ_VENDOR_CLASS and
 1963: 	    DNSMASQ_USER_CLASS<n> environment variables. Suggestion 
 1964:             from Francois-Xavier Le Bail.
 1965: 
 1966: 	    Run the lease change script as root, even when dnsmasq is
 1967: 	    configured to change UID to an unprivileged user. Since
 1968: 	    most uses of the lease change script need root, this
 1969: 	    allows its use whilst keeping the security advantages of
 1970: 	    running the daemon without privs. The script is invoked
 1971: 	    via a small helper process which keeps root UID, and
 1972: 	    validates all data received from the main process. To get
 1973: 	    root, an attacker would have to break dnsmasq and then
 1974: 	    break the helper through the restricted comms channel 
 1975: 	    linking the two.
 1976: 	    
 1977: 	    Add contrib/port-forward/* which is a script to set up 
 1978: 	    port-forwards using the DHCP lease-change script. It's
 1979: 	    possible to add a host to a config file by name, and when
 1980: 	    that host gets a DHCP lease, the script will use iptables
 1981: 	    to set up port-forwards to configured ports at the address
 1982: 	    which the host is allocated. The script also handles
 1983: 	    setting up the port-forward iptables entries after reboot,
 1984: 	    using the persistent lease database, and removing them
 1985: 	    when a host leaves and its DHCP lease expires.
 1986: 
 1987: 	    Fix unaligned access problem which caused wrong log
 1988: 	    messages with some clients on some architectures. Thanks
 1989: 	    to Francois-Xavier Le Bail for the bugreport.
 1990: 
 1991: 	    Fixed problem with DHCPRELEASE and multi-address
 1992: 	    interfaces. Enhanced contrib/wrt/dhcp_release to cope
 1993: 	    under these circumstances too. Thanks to Eldon Ziegler for
 1994: 	    input on this.
 1995: 
 1996: 	    Updated French translation: thanks to Gildas Le Nadan.
 1997: 
 1998: 	    Upgraded the name hash function in the DNS cache. Thanks
 1999: 	    to Oleg Khovayko for good work on this.
 2000: 
 2001: 	    Added --clear-on-reload flag.  Suggestion from Johannes
 2002: 	    Stezenbach.
 2003: 
 2004: 	    Treat a nameserver address of 0.0.0.0 as "nothing". Erwin 
 2005:             Cabrera spotted that specifying a nameserver as 0.0.0.0 
 2006: 	    breaks things badly; this is because the network stack
 2007: 	    treats is as "this host" and an endless loop ensues.
 2008: 		   
 2009:             Added Webmin module in contrib/webmin. Thanks to Neil
 2010:             Fisher for that.
 2011: 
 2012: version 2.35
 2013: 	    Generate an "old" script event when a client does a DHCPREQUEST
 2014: 	    in INIT-REBOOT or SELECTING state and the lease already
 2015: 	    exists. Supply vendor and user class information to these
 2016: 	    script calls.
 2017: 
 2018: 	    Added support for Dragonfly BSD to src/config.h
 2019: 
 2020: 	    Removed "Upgrading to 2.0" document, which is ancient
 2021: 	    history now.
 2022: 
 2023: 	    Tweak DHCP networking code for BSD, esp OpenBSD. Added a 
 2024: 	    workaround for a bug in OpenBSD 4.0: there should finally
 2025:             be support for multiple interfaces under OpenBSD now.
 2026: 	    Note that no version of dnsmasq before 2.35 will work for 
 2027: 	    DHCP under OpenBSD 4.0 because of a kernel bug.
 2028: 	    Thanks to Claudio Jeker, Jeb Campbell and Cristobal 
 2029: 	    Palmer for help with this.
 2030: 
 2031: 	    Optimised the cache code for the case of large
 2032: 	    /etc/hosts. This is mainly to remove the O(n-squared)
 2033: 	    algorithm which made reading large (50000 lines) files 
 2034: 	    slow, but it also takes into account the size of 
 2035: 	    /etc/hosts when building hash tables, so overall 
 2036: 	    performance should be better. Thanks to "koko" for 
 2037: 	    pointing out the problem.
 2038: 
 2039: version 2.36
 2040: 	    Added --dhcp-ignore-names flag which tells dnsmasq not to
 2041: 	    use names provided by DHCP clients. Suggestion from 
 2042: 	    Thomas M Steenholdt.
 2043: 
 2044: 	    Send netmask and broadcast address DHCP options always,
 2045: 	    even if the client doesn't request them. This makes a few
 2046: 	    odd clients work better.
 2047: 
 2048: 	    Added simple TFTP function, optimised for net-boot. It is
 2049: 	    now possible to net boot hosts using only dnsmasq. The
 2050: 	    TFTP server is read-only, binary-mode only, and designed to be
 2051: 	    secure; it adds about 4K to the dnsmasq binary. 
 2052:  
 2053: 	    Support DHCP option 120, SIP servers, (RFC 3361). Both
 2054:             encodings are supported, so both --dhcp-option=120,192.168.2.3
 2055:             and	--dhcp-option=120,sip.example.net will work. Brian
 2056:             Candler pointed out the need for this.
 2057: 
 2058: 	    Allow spaces in domain names, to support DNS-SD.
 2059: 
 2060: 	    Add --ptr-record flag, again for DNS-SD. Thanks to Stephan 
 2061: 	    Sokolow for the suggestion.
 2062: 	    
 2063: 	    Tolerate leading space on lines in the config file. Thanks
 2064: 	    to Luigi Rizzo for pointing this out.
 2065: 
 2066: 	    Fixed netlink.c to cope with headers from the Linux 2.6.19
 2067: 	    kernel. Thanks to Philip Wall for the bug report.
 2068: 
 2069: 	    Added --dhcp-bridge option, but only to the FreeBSD
 2070: 	    build. This fixes an oddity with a a particular bridged
 2071: 	    network configuration on FreeBSD. Thanks to Luigi Rizzo
 2072: 	    for the patch.
 2073: 
 2074: 	    Added FAQ entry about running dnsmasq in a Linux
 2075: 	    vserver. Thanks to Gildas le Nadan for the information.  
 2076: 
 2077: 	    Fixed problem with option parsing which interpreted "/" as
 2078: 	    an address and not a string. Thanks to Luigi Rizzo
 2079: 	    for the patch.
 2080: 
 2081: 	    Ignore the --domain-needed flag when forwarding NS
 2082: 	    and SOA queries, since NS queries of TLDs are always legit.
 2083: 	    Marcus Better pointed out this problem.
 2084: 
 2085: 	    Take care to forward signed DNS requests bit-perfect, so
 2086: 	    as not to affect the validity of the signature. This
 2087: 	    should allow DDNS updates to be forwarded.
 2088: 
 2089: version 2.37
 2090:             Add better support for RFC-2855 DHCP-over-firewire and RFC
 2091:            -4390 DHCP-over-InfiniBand. A good suggestion from Karl Svec.
 2092: 
 2093: 	    Some efficiency tweaks to the cache code for very large
 2094: 	    /etc/hosts files. Should improve reverse (address->name)
 2095: 	    lookups and garbage collection. Thanks to Jan 'RedBully'
 2096: 	    Seiffert for input on this.
 2097: 
 2098: 	    Fix regression in 2.36 which made bogus-nxdomain
 2099: 	    and DNS caching unreliable. Thanks to Dennis DeDonatis
 2100: 	    and Jan Seiffert for bug reports.
 2101: 
 2102: 	    Make DHCP encapsulated vendor-class	options sane. Be
 2103: 	    warned that some conceivable existing configurations 
 2104: 	    using these may break, but they work in a much 
 2105: 	    simpler and more logical way now. Prepending
 2106: 	    "vendor:<client-id>" to an option encapsulates it 
 2107: 	    in option 43, and the option is sent only if the 
 2108: 	    client-supplied vendor-class substring-matches with 
 2109: 	    the given client-id. Thanks to Dennis DeDonatis for 
 2110: 	    help with this.
 2111: 
 2112: 	    Apply patch from Jan Seiffert to tidy up tftp.c
 2113: 
 2114: 	    Add support for overloading the filename and servername 
 2115: 	    fields in DHCP packet. This gives extra option-space when
 2116: 	    these fields are not being used or with a modern client
 2117: 	    which supports moving them into options.
 2118: 
 2119: 	    Added a LIMITS section to the man-page, with guidance on
 2120: 	    maximum numbers of clients, file sizes and tuning.
 2121: 
 2122: release 2.38
 2123: 	    Fix compilation on *BSD. Thanks to Tom Hensel.
 2124: 
 2125: 	    Don't send length zero DHCP option 43 and cope with 
 2126: 	    encapsulated options whose total length exceeds 255 octets
 2127: 	    by splitting them into multiple option 43 pieces.
 2128: 
 2129: 	    Avoid queries being retried forever when --strict-order is
 2130: 	    set and an upstream server returns a SERVFAIL
 2131: 	    error. Thanks to Johannes Stezenbach for spotting this.
 2132: 
 2133: 	    Fix BOOTP support, broken in version 2.37.
 2134: 
 2135: 	    Add example dhcp-options for Etherboot.
 2136: 
 2137: 	    Add \e (for ASCII ESCape) to the set of valid escapes
 2138: 	    in config-file strings.
 2139: 
 2140: 	    Added --dhcp-option-force flag and examples in the
 2141: 	    configuration file which use this to control PXELinux.
 2142: 
 2143: 	    Added --tftp-no-blocksize option.
 2144: 
 2145: 	    Set netid tag "bootp" when BOOTP (rather than DHCP) is in
 2146: 	    use. This makes it easy to customise which options are
 2147: 	    sent to BOOTP clients. (BOOTP allows only 64 octets for
 2148: 	    options, so it can be necessary to trim things.)
 2149: 
 2150: 	    Fix rare hang in cache code, a 2.37 regression. This
 2151: 	    probably needs an infinite DHCP lease and some bad luck to
 2152: 	    trigger. Thanks to Detlef Reichelt for bug reports and testing.
 2153: 
 2154: release 2.39
 2155: 	    Apply patch from Mike Baker/OpenWRT to ensure that names
 2156: 	    like "localhost." in /etc/hosts with trailing period 
 2157: 	    are treated as fully-qualified.
 2158: 
 2159: 	    Tolerate and ignore spaces around commas in the
 2160: 	    configuration file in all circumstances. Note that this
 2161: 	    may change the meaning of a few existing config files, for
 2162: 	    instance
 2163: 	    txt-record=mydomain.com, string
 2164: 	    would have a leading space in the string before, and now
 2165: 	    will not. To get the old behaviour back, use quotes:
 2166: 	    txt-record=mydomain.com," string"
 2167: 
 2168: 	    /a is no longer a valid escape in quoted strings.
 2169: 
 2170: 	    Added symbolic DHCP option names. Instead of
 2171: 	    dhcp-option = 3, 1.2.3.4 
 2172: 	    it is now possible to do
 2173: 	    dhcp-option = option:router, 1.2.3.4
 2174: 	    To see the list of known DHCP options, use the 
 2175:             command "dnsmasq --help dhcp"
 2176: 	    Thanks to Luigi Rizzo for a patch and good work on this.
 2177: 
 2178: 	    Overhauled the log code so that logging can be asynchronous; 
 2179: 	    dnsmasq then no longer blocks waiting for the syslog() library
 2180: 	    call. This is important on systems where syslog
 2181: 	    is being used to log over the network (and therefore doing
 2182: 	    DNS lookups) and syslog is using dnsmasq as its DNS
 2183: 	    server. Having dnsmasq block awaiting syslog under 
 2184: 	    such circumstances can lead to syslog and dnsmasq 
 2185: 	    deadlocking. The new behaviour is enabled with a new
 2186: 	     --log-async flag, which can also be used to tune the
 2187: 	    queue length. Paul Chambers found and diagnosed 
 2188: 	    this trap for the unwary. He also did much testing of 
 2189: 	    the solution along with Carlos Carvalho.
 2190: 
 2191: 	    --log-facility can now take a file-name instead of a 
 2192: 	    facility name. When this is done, dnsmasq logs to the 
 2193: 	    file and not via syslog. (Failures early in startup, 
 2194: 	    whilst reading configuration, will still go to syslog, 
 2195: 	    and syslog is used as a log-of-last-resort if the file
 2196: 	    cannot be written.)
 2197: 
 2198: 	    Added --log-dhcp flag. Suggestion from Carlos Carvalho.
 2199: 
 2200: 	    Made BINDIR, MANDIR and LOCALEDIR independently
 2201: 	    over-rideable in the makefile. Suggestion from Thomas
 2202: 	    Klausner.
 2203: 
 2204: 	    Added 127.0.0.0/8 and 169.254.0.0/16 to the address
 2205: 	    ranges affected by --bogus-priv. Thanks to  Paul 
 2206: 	    Chambers for the patch.
 2207: 
 2208: 	    Fixed failure of TFTP server with --listen-address. Thanks
 2209: 	    to William Dinkel for the bug report.
 2210: 
 2211: 	    Added --dhcp-circuitid and --dhcp-remoteid for RFC3046
 2212: 	    relay agent data matching.
 2213:  
 2214: 	    Added --dhcp-subscrid for RFC3993 subscriber-id relay
 2215: 	    agent data matching.
 2216: 
 2217: 	    Correctly garbage-collect connections when upstream
 2218: 	    servers go away as a result of DBus transactions.
 2219: 
 2220: 	    Allow absolute paths for TFTP transfers even when
 2221: 	    --tftp-root is set, as long as the path matches the root,
 2222: 	    so /var/ftp/myfile is OK with tftp-root=/var/ftp.
 2223: 	    Thanks for Thomas Mizzi for the patch.
 2224: 
 2225: 	    Updated Spanish translation - thanks to Chris Chatham.
 2226: 
 2227: 	    Updated French translation - thanks to Gildas Le Nadan.
 2228: 
 2229: 	    Added to example conf file example of routing PTR queries
 2230: 	    for a subnet to a different nameserver. Suggestion from
 2231: 	    Jon Nicholson.
 2232: 
 2233: 	    Added --interface-name option. This provides a facility 
 2234: 	    to add a domain name with a dynamic IP address taken from
 2235: 	    the address of a local network interface. Useful for
 2236: 	    networks with dynamic IPs.
 2237: 
 2238: version 2.40
 2239:             Make SIGUSR2 close-and-reopen the logfile when logging 
 2240: 	    direct to a file. Thanks to Carlos Carvalho for 
 2241: 	    suggesting this. When a logfile is created, change
 2242: 	    its ownership to the user dnsmasq will run as, don't
 2243: 	    leave it owned by root.
 2244: 
 2245: 	    Set a special tag, "known" for hosts which are matched by
 2246: 	    a dhcp-host or /etc/ethers line. This is especially
 2247: 	    useful to be able to do --dhcp-ignore=#known, like ISCs
 2248: 	    "deny unknown-clients".
 2249: 
 2250: 	    Explicitly set a umask before creating the leases file,
 2251: 	    rather than relying on whatever we inherited. The
 2252: 	    permissions	are set to 644.
 2253: 
 2254: 	    Fix handling of fully-qualified names in --dhcp-host
 2255: 	    directives and in /etc/ethers. These are now rejected 
 2256: 	    if the domain doesn't match that given by --domain,	  
 2257: 	    and used correctly otherwise. Before, putting
 2258: 	    a FQDN here could cause the whole FQDN to be used as
 2259: 	    hostname. Thanks to Michael Heimpold for the bug report.
 2260: 
 2261: 	    Massive but trivial edit to make the "daemon" variable 
 2262: 	    global, instead of copying the same value around as the
 2263: 	    first argument to half the functions in the program.
 2264: 	    
 2265: 	    Updated Spanish manpage and message catalog. Thanks 
 2266: 	    to Chris Chatham.
 2267: 	    
 2268: 	    Added patch for support of DNS LOC records in
 2269: 	    contrib/dns-loc. Thanks to Lorenz Schori.
 2270: 
 2271: 	    Fixed error in manpage: dhcp-ignore-name ->
 2272: 	    dhcp-ignore-names. Thanks to Daniel Mentz for spotting
 2273: 	    this.
 2274: 
 2275: 	    Use client-id as hash-seed for DHCP address allocation
 2276: 	    with Firewire and Infiniband, as these don't supply an MAC
 2277: 	    address. 
 2278: 
 2279: 	    Tweaked TFTP file-open code to make it behave sensibly
 2280: 	    when the filesystem changes under its feet.
 2281: 
 2282: 	    Added DNSMASQ_TIME_REMAINING environment variable to the 
 2283: 	    lease-script.
 2284: 
 2285: 	    Always send replies to DHCPINFORM requests to the source
 2286: 	    of the request and not to the address in ciaddr. This
 2287: 	    allows third-party queries.
 2288: 	    
 2289: 	    Return "lease time remaining" in the reply to a DHCPINFORM
 2290: 	    request if there exists a lease for the host sending the
 2291: 	    request.
 2292: 
 2293: 	    Added --dhcp-hostsfile option. This gives a superset of
 2294: 	    the functionality provided by /etc/ethers. Thanks to 
 2295: 	    Greg Kurtzer for the suggestion.
 2296: 
 2297: 	    Accept keyword "server" as a synonym for "nameserver" in 
 2298: 	    resolv.conf. Thanks to Andrew Bartlett for the report.
 2299: 
 2300: 	    Add --tftp-unique-root option. Suggestion from Dermot
 2301: 	    Bradley.
 2302: 
 2303: 	    Tweak TFTP retry timer to avoid problems with difficult
 2304: 	    clients. Thanks to Dermot Bradley for assistance with
 2305: 	    this. 
 2306: 	    
 2307: 	    Continue to use unqualified hostnames provided by DHCP
 2308: 	    clients, even if the domain part is illegal. (The domain
 2309: 	    is	ignored, and an error logged.) Previously in this
 2310: 	    situation, the whole name whould have been
 2311: 	    rejected. Thanks to Jima for the patch.
 2312: 	    
 2313: 	    Handle EINTR returns from wait() correctly and reap
 2314: 	    our children's children if necessary. This fixes 
 2315: 	    a problem with zombie-creation under *BSD when using
 2316: 	    --dhcp-script.
 2317: 
 2318: 	    Escape spaces in hostnames when they are stored in the
 2319: 	    leases file and passed to the lease-change
 2320: 	    script. Suggestion from Ben Voigt.
 2321: 
 2322: 	    Re-run the lease chamge script with an "old" event for
 2323: 	    each lease when dnsmasq receives a SIGHUP.
 2324: 
 2325: 	    Added more useful exit codes, including passing on a
 2326: 	    non-zero exit code from the lease-script "init" call when
 2327: 	    --leasefile-ro is set.
 2328: 
 2329: 	    Log memory allocation failure whilst the daemon is
 2330: 	    running. Allocation failures during startup are fatal, 
 2331: 	    but lack of memory whilst running is worked around.
 2332: 	    This used to be silent, but now is logged.
 2333: 
 2334: 	    Fixed misaligned memory access which caused problems on
 2335: 	    Blackfin CPUs. Thanks to Alex Landau for the patch.
 2336: 
 2337: 	    Don't include (useless) script-calling code when NO_FORK
 2338: 	    is set. Since this tends to be used on very small uclinux 
 2339: 	    systems, it's worth-while to save some code-size.
 2340: 
 2341: 	    Don't set REUSEADDR on TFTP listening socket. There's no
 2342: 	    need to do so, and it creates confusing behaviour when
 2343: 	    inetd is also listening on the same port. Thanks to Erik
 2344: 	    Brown for spotting the problem.
 2345: 
 2346: version 2.41
 2347:             Remove deprecated calls when compiled against libdbus 1.1.
 2348: 	    
 2349: 	    Fix "strict-alias" warning in bpf.c
 2350: 
 2351: 	    Reduce dependency on Gnu-make in build system: dnsmasq now
 2352: 	    builds with system make under OpenBSD.
 2353: 
 2354: 	    Port to Solaris. Dnsmasq 1.x used to run under Solaris,
 2355: 	    and this release does so again, for Solaris 9 or better.
 2356: 
 2357: 	    Allow the DNS function to be completely disabled, by
 2358: 	    setting the port to zero "--port=0". The allows dnsmasq to
 2359: 	    be used as a simple DHCP server, simple TFTP server, or
 2360: 	    both, but without the DNS server getting in the way.
 2361: 
 2362: 	    Fix a bug where NXDOMAIN could be returned for a query
 2363: 	    even if the name's value was known for a different query
 2364: 	    type. This bug could be prodded with 
 2365:             --local=/domain/ --address=/name.domain/1.2.3.4 
 2366: 	    An IPv6 query for name.domain would return NXDOMAIN, and
 2367: 	    not the correct NOERROR. Thanks to Lars Nooden for
 2368: 	    spotting the bug and Jima for diagnosis of the problem.
 2369: 
 2370: 	    Added per-server stats to the information logged when
 2371: 	    dnsmasq gets SIGUSR1.
 2372: 
 2373: 	    Added counts of queries forwarded and queries answered
 2374: 	    locally (from the cache, /etc/hosts or config).
 2375: 
 2376: 	    Fixed possible crash bug in DBus IPv6 code. Thanks to Matt
 2377: 	    Domsch and Jima.
 2378: 
 2379: 	    Tighten checks for clashes between hosts-file and
 2380: 	    DHCP-derived names. Multiple addresses associated with a
 2381: 	    name in hosts-file no longer confuses the check.
 2382: 
 2383: 	    Add --dhcp-no-override option to fix problems with some
 2384: 	    combinations of stage zero and stage one
 2385: 	    bootloaders. Thanks to Steve Alexander for the bug report.
 2386:   
 2387: 	    Add --tftp-port-range option. Thanks to Daniel Mierswa for
 2388: 	    the suggestion.
 2389:  
 2390: 	    Add --stop-dns-rebind option. Thanks to Collin Mulliner
 2391: 	    for the patch.
 2392: 
 2393: 	    Added GPL version 3 as a license option.
 2394:  
 2395: 	    Added --all-servers option. Thanks to Peter Naulls for the
 2396: 	    patch.
 2397: 
 2398: 	    Extend source address mechanism so that the interface used
 2399: 	    to contact an upstream DNS server can be nailed
 2400: 	    down. Something like "--server=1.2.3.4@eth1" will force
 2401: 	    the use of eth1 for traffic to DNS-server 1.2.3.4. This
 2402: 	    facility is only available on Linux and Solaris. Thanks to
 2403: 	    Peter Naulls for prompting this.	     
 2404: 	
 2405: 	    Add --dhcp-optsfile option. Thanks to Carlos Carvalho for
 2406:             the suggestion.
 2407: 
 2408: 	    Fixed failure to set source address for server connections
 2409: 	    when using TCP. Thanks to Simon Capper for finding this
 2410: 	    bug.
 2411: 
 2412: 	    Refuse to give a DHCP client the address it asks for if
 2413: 	    the address range in question is not available to that
 2414: 	    particular host. Thanks to Cedric Duval for the bug
 2415: 	    report. 
 2416: 
 2417: 	    Changed behavior of DHCP server to always return total length of
 2418: 	    a new lease in DHCPOFFER, even if an existing lease
 2419: 	    exists. (It used to return the time remaining on the lease
 2420: 	    whne one existed.) This fixes problems with the Sony Ericsson
 2421: 	    K610i phone. Thanks to Hakon Stordahl for finding and
 2422: 	    fixing this.
 2423: 
 2424: 	    Add DNSMASQ_INTERFACE to the environment of the
 2425: 	    lease-change script. Thanks to Nikos Mavrogiannopoulos for
 2426: 	    the patch.
 2427: 
 2428: 	    Fixed broken --alias functionality. Thanks to Michael
 2429: 	    Meelis for the bug report.
 2430: 
 2431: 	    Added French translation of the man page. Thank to Gildas
 2432: 	    Le Nadan for that.
 2433: 
 2434: 	    Add --dhcp-match flag, to check for arbitrary options in
 2435: 	    DHCP messages from clients. This enables use of dnsmasq
 2436: 	    with gPXE. Thanks to Rance Hall for the suggestion.
 2437: 
 2438: 	    Added --dhcp-broadcast, to force broadcast replies to DHCP
 2439: 	    clients which need them but are too dumb or too old to
 2440: 	    ask. Thanks to Bodo Bellut for the suggestion.
 2441: 
 2442: 	    Disable path-MTU discovery on DHCP and TFTP sockets. This
 2443: 	    is never needed, and the presence of DF flags in the IP
 2444: 	    header confuses some broken PXE ROMS. Thanks again to Bodo
 2445: 	    Bellut for spotting this.
 2446: 
 2447: 	    Fix problems with addresses which have multiple PTR
 2448: 	    records - all but one of these could get lost. 
 2449: 
 2450: 	    Fix bug with --address and ANY query type seeing REFUSED
 2451: 	    return code in replies. Thanks to Mike Wright for spotting
 2452: 	    the problem.
 2453: 
 2454: 	    Update Spanish translation. Thanks to Chris Chatham.
 2455: 
 2456: 	    Add --neg-ttl option.
 2457: 	    
 2458: 	    Add warnings about the bad effects of --filterwin2k on
 2459: 	    SIP, XMPP and Google-talk to the example config file.
 2460: 	    
 2461: 	    Fix va_list abuse in log.c. This fixes crashes on powerpc
 2462: 	    when debug mode is set. Thanks to Cedric Duval for the
 2463: 	    patch. 
 2464: 
 2465: version 2.42
 2466:             Define _GNU_SOURCE to avoid problems with later glibc
 2467:             headers. Thanks to Jima for spotting the problem.
 2468: 
 2469: 	    Add --dhcp-alternate-port option. Thanks to Jan Psota for
 2470: 	    the suggestion.
 2471: 
 2472: 	    Fix typo in code which is only used on BSD, when Dbus and
 2473: 	    IPv6 support is enabled. Thanks to Roy Marples.
 2474: 	    
 2475: 	    Updated Polish translations - thank to Jan Psota.
 2476: 
 2477: 	    Fix OS detection logic to cope with GNU/FreeBSD.
 2478: 
 2479: 	    Fix unitialised variable in DBus code - thanks to Roy
 2480: 	    Marples.
 2481: 
 2482: 	    Fix network enumeration code to work on later NetBSD -
 2483: 	    thanks to Roy Marples.
 2484: 	    
 2485: 	    Provide --dhcp-bridge on all BSD variants.
 2486: 
 2487: 	    Define _LARGEFILE_SOURCE which removes an arbitrary 2GB
 2488:             limit on logfiles. Thanks to Paul Chambers for spotting 
 2489:             the problem.
 2490: 
 2491: 	    Fix RFC3046 agent-id echo code, broken for many
 2492: 	    releases. Thanks to Jeremy Laine for spotting the problem
 2493: 	    and providing a patch.
 2494: 
 2495: 	    Added Solaris 10 service manifest from David Connelly in
 2496: 	    contrib/Solaris10
 2497:  	    	     
 2498: 	    Add --dhcp-scriptuser option.	    
 2499: 
 2500: 	    Support new capability interface on suitable Linux 
 2501: 	    kernels, removes "legacy support in use" messages. Thanks 
 2502:             to Jorge Bastos for pointing this out. 
 2503: 
 2504: 	    Fix subtle bug in cache code which could cause dnsmasq to
 2505: 	    lock spinning CPU in rare circumstances. Thanks to Alex
 2506: 	    Chekholko for bug reports and help debugging. 
 2507: 
 2508: 	    Support netascii transfer mode for TFTP.
 2509: