|
version 1.1.1.3, 2016/11/02 09:57:01
|
version 1.1.1.4, 2021/03/17 00:56:46
|
|
Line 90
|
Line 90
|
| # server=10.1.2.3@eth1 |
# server=10.1.2.3@eth1 |
| |
|
| # and this sets the source (ie local) address used to talk to |
# and this sets the source (ie local) address used to talk to |
| # 10.1.2.3 to 192.168.1.1 port 55 (there must be a interface with that | # 10.1.2.3 to 192.168.1.1 port 55 (there must be an interface with that |
| # IP on the machine, obviously). |
# IP on the machine, obviously). |
| # server=10.1.2.3@192.168.1.1#55 |
# server=10.1.2.3@192.168.1.1#55 |
| |
|
|
Line 123
|
Line 123
|
| # running another nameserver on the same machine. |
# running another nameserver on the same machine. |
| #bind-interfaces |
#bind-interfaces |
| |
|
| # Accept DNS queries only from hosts whose address is on a local |
|
| # subnet, ie a subnet for which an interface exists on the server. |
|
| # This option only has effect if there are no --interface |
|
| # --except-interface, --listen-address or --auth-server options. |
|
| local-service |
|
| |
|
| # If you don't want dnsmasq to read /etc/hosts, uncomment the |
# If you don't want dnsmasq to read /etc/hosts, uncomment the |
| # following line. |
# following line. |
| #no-hosts |
#no-hosts |
|
Line 195 local-service
|
Line 189 local-service
|
| # add names to the DNS for the IPv6 address of SLAAC-configured dual-stack |
# add names to the DNS for the IPv6 address of SLAAC-configured dual-stack |
| # hosts. Use the DHCPv4 lease to derive the name, network segment and |
# hosts. Use the DHCPv4 lease to derive the name, network segment and |
| # MAC address and assume that the host will also have an |
# MAC address and assume that the host will also have an |
| # IPv6 address calculated using the SLAAC alogrithm. | # IPv6 address calculated using the SLAAC algorithm. |
| #dhcp-range=1234::, ra-names |
#dhcp-range=1234::, ra-names |
| |
|
| # Do Router Advertisements, BUT NOT DHCP for this subnet. |
# Do Router Advertisements, BUT NOT DHCP for this subnet. |
|
Line 216 local-service
|
Line 210 local-service
|
| #dhcp-range=1234::, ra-stateless, ra-names |
#dhcp-range=1234::, ra-stateless, ra-names |
| |
|
| # Do router advertisements for all subnets where we're doing DHCPv6 |
# Do router advertisements for all subnets where we're doing DHCPv6 |
| # Unless overriden by ra-stateless, ra-names, et al, the router | # Unless overridden by ra-stateless, ra-names, et al, the router |
| # advertisements will have the M and O bits set, so that the clients |
# advertisements will have the M and O bits set, so that the clients |
| # get addresses and configuration from DHCPv6, and the A bit reset, so the |
# get addresses and configuration from DHCPv6, and the A bit reset, so the |
| # clients don't use SLAAC addresses. |
# clients don't use SLAAC addresses. |
|
Line 257 local-service
|
Line 251 local-service
|
| # the IP address 192.168.0.60 |
# the IP address 192.168.0.60 |
| #dhcp-host=id:01:02:02:04,192.168.0.60 |
#dhcp-host=id:01:02:02:04,192.168.0.60 |
| |
|
| # Always give the Infiniband interface with hardware address | # Always give the InfiniBand interface with hardware address |
| # 80:00:00:48:fe:80:00:00:00:00:00:00:f4:52:14:03:00:28:05:81 the |
# 80:00:00:48:fe:80:00:00:00:00:00:00:f4:52:14:03:00:28:05:81 the |
| # ip address 192.168.0.61. The client id is derived from the prefix |
# ip address 192.168.0.61. The client id is derived from the prefix |
| # ff:00:00:00:00:00:02:00:00:02:c9:00 and the last 8 pairs of |
# ff:00:00:00:00:00:02:00:00:02:c9:00 and the last 8 pairs of |
|
Line 294 local-service
|
Line 288 local-service
|
| # Give a fixed IPv6 address and name to client with |
# Give a fixed IPv6 address and name to client with |
| # DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 |
# DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 |
| # Note the MAC addresses CANNOT be used to identify DHCPv6 clients. |
# Note the MAC addresses CANNOT be used to identify DHCPv6 clients. |
| # Note also the they [] around the IPv6 address are obilgatory. | # Note also that the [] around the IPv6 address are obligatory. |
| #dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5] |
#dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5] |
| |
|
| # Ignore any clients which are not specified in dhcp-host lines |
# Ignore any clients which are not specified in dhcp-host lines |
|
Line 360 local-service
|
Line 354 local-service
|
| |
|
| # Set option 58 client renewal time (T1). Defaults to half of the |
# Set option 58 client renewal time (T1). Defaults to half of the |
| # lease time if not specified. (RFC2132) |
# lease time if not specified. (RFC2132) |
| #dhcp-option=option:T1:1m | #dhcp-option=option:T1,1m |
| |
|
| # Set option 59 rebinding time (T2). Defaults to 7/8 of the |
# Set option 59 rebinding time (T2). Defaults to 7/8 of the |
| # lease time if not specified. (RFC2132) |
# lease time if not specified. (RFC2132) |
| #dhcp-option=option:T2:2m | #dhcp-option=option:T2,2m |
| |
|
| # Set the NTP time server address to be the same machine as |
# Set the NTP time server address to be the same machine as |
| # is running dnsmasq |
# is running dnsmasq |
|
Line 442 local-service
|
Line 436 local-service
|
| #dhcp-option-force=211,30i |
#dhcp-option-force=211,30i |
| |
|
| # Set the boot filename for netboot/PXE. You will only need |
# Set the boot filename for netboot/PXE. You will only need |
| # this is you want to boot machines over the network and you will need | # this if you want to boot machines over the network and you will need |
| # a TFTP server; either dnsmasq's built in TFTP server or an | # a TFTP server; either dnsmasq's built-in TFTP server or an |
| # external one. (See below for how to enable the TFTP server.) |
# external one. (See below for how to enable the TFTP server.) |
| #dhcp-boot=pxelinux.0 |
#dhcp-boot=pxelinux.0 |
| |
|
| # The same as above, but use custom tftp-server instead machine running dnsmasq |
# The same as above, but use custom tftp-server instead machine running dnsmasq |
| #dhcp-boot=pxelinux,server.name,192.168.1.100 |
#dhcp-boot=pxelinux,server.name,192.168.1.100 |
| |
|
| # Boot for Etherboot gPXE. The idea is to send two different | # Boot for iPXE. The idea is to send two different |
| # filenames, the first loads gPXE, and the second tells gPXE what to | # filenames, the first loads iPXE, and the second tells iPXE what to |
| # load. The dhcp-match sets the gpxe tag for requests from gPXE. | # load. The dhcp-match sets the ipxe tag for requests from iPXE. |
| #dhcp-match=set:gpxe,175 # gPXE sends a 175 option. | #dhcp-boot=undionly.kpxe |
| #dhcp-boot=tag:!gpxe,undionly.kpxe | #dhcp-match=set:ipxe,175 # iPXE sends a 175 option. |
| #dhcp-boot=mybootimage | #dhcp-boot=tag:ipxe,http://boot.ipxe.org/demo/boot.php |
| |
|
| # Encapsulated options for Etherboot gPXE. All the options are | # Encapsulated options for iPXE. All the options are |
| # encapsulated within option 175 |
# encapsulated within option 175 |
| #dhcp-option=encap:175, 1, 5b # priority code |
#dhcp-option=encap:175, 1, 5b # priority code |
| #dhcp-option=encap:175, 176, 1b # no-proxydhcp |
#dhcp-option=encap:175, 176, 1b # no-proxydhcp |
|
Line 531 local-service
|
Line 525 local-service
|
| # (using /etc/hosts) then that name can be specified as the |
# (using /etc/hosts) then that name can be specified as the |
| # tftp_servername (the third option to dhcp-boot) and in that |
# tftp_servername (the third option to dhcp-boot) and in that |
| # case dnsmasq resolves this name and returns the resultant IP |
# case dnsmasq resolves this name and returns the resultant IP |
| # addresses in round robin fasion. This facility can be used to | # addresses in round robin fashion. This facility can be used to |
| # load balance the tftp load among a set of servers. |
# load balance the tftp load among a set of servers. |
| #dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name |
#dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name |
| |
|
|
Line 553 local-service
|
Line 547 local-service
|
| # http://www.isc.org/files/auth.html |
# http://www.isc.org/files/auth.html |
| #dhcp-authoritative |
#dhcp-authoritative |
| |
|
| |
# Set the DHCP server to enable DHCPv4 Rapid Commit Option per RFC 4039. |
| |
# In this mode it will respond to a DHCPDISCOVER message including a Rapid Commit |
| |
# option with a DHCPACK including a Rapid Commit option and fully committed address |
| |
# and configuration information. This must only be enabled if either the server is |
| |
# the only server for the subnet, or multiple servers are present and they each |
| |
# commit a binding for all clients. |
| |
#dhcp-rapid-commit |
| |
|
| # Run an executable when a DHCP lease is created or destroyed. |
# Run an executable when a DHCP lease is created or destroyed. |
| # The arguments sent to the script are "add" or "del", |
# The arguments sent to the script are "add" or "del", |
| # then the MAC address, the IP address and finally the hostname |
# then the MAC address, the IP address and finally the hostname |
|
Line 670 local-service
|
Line 672 local-service
|
| |
|
| # Include all files in a directory which end in .conf |
# Include all files in a directory which end in .conf |
| #conf-dir=/etc/dnsmasq.d/,*.conf |
#conf-dir=/etc/dnsmasq.d/,*.conf |
| |
|
| |
# If a DHCP client claims that its name is "wpad", ignore that. |
| |
# This fixes a security hole. see CERT Vulnerability VU#598349 |
| |
#dhcp-name-match=set:wpad-ignore,wpad |
| |
#dhcp-ignore-names=tag:wpad-ignore |