version 1.1.1.3, 2016/11/02 09:57:01
|
version 1.1.1.4, 2021/03/17 00:56:46
|
Line 90
|
Line 90
|
# server=10.1.2.3@eth1 |
# server=10.1.2.3@eth1 |
|
|
# and this sets the source (ie local) address used to talk to |
# and this sets the source (ie local) address used to talk to |
# 10.1.2.3 to 192.168.1.1 port 55 (there must be a interface with that | # 10.1.2.3 to 192.168.1.1 port 55 (there must be an interface with that |
# IP on the machine, obviously). |
# IP on the machine, obviously). |
# server=10.1.2.3@192.168.1.1#55 |
# server=10.1.2.3@192.168.1.1#55 |
|
|
Line 123
|
Line 123
|
# running another nameserver on the same machine. |
# running another nameserver on the same machine. |
#bind-interfaces |
#bind-interfaces |
|
|
# Accept DNS queries only from hosts whose address is on a local |
|
# subnet, ie a subnet for which an interface exists on the server. |
|
# This option only has effect if there are no --interface |
|
# --except-interface, --listen-address or --auth-server options. |
|
local-service |
|
|
|
# If you don't want dnsmasq to read /etc/hosts, uncomment the |
# If you don't want dnsmasq to read /etc/hosts, uncomment the |
# following line. |
# following line. |
#no-hosts |
#no-hosts |
Line 195 local-service
|
Line 189 local-service
|
# add names to the DNS for the IPv6 address of SLAAC-configured dual-stack |
# add names to the DNS for the IPv6 address of SLAAC-configured dual-stack |
# hosts. Use the DHCPv4 lease to derive the name, network segment and |
# hosts. Use the DHCPv4 lease to derive the name, network segment and |
# MAC address and assume that the host will also have an |
# MAC address and assume that the host will also have an |
# IPv6 address calculated using the SLAAC alogrithm. | # IPv6 address calculated using the SLAAC algorithm. |
#dhcp-range=1234::, ra-names |
#dhcp-range=1234::, ra-names |
|
|
# Do Router Advertisements, BUT NOT DHCP for this subnet. |
# Do Router Advertisements, BUT NOT DHCP for this subnet. |
Line 216 local-service
|
Line 210 local-service
|
#dhcp-range=1234::, ra-stateless, ra-names |
#dhcp-range=1234::, ra-stateless, ra-names |
|
|
# Do router advertisements for all subnets where we're doing DHCPv6 |
# Do router advertisements for all subnets where we're doing DHCPv6 |
# Unless overriden by ra-stateless, ra-names, et al, the router | # Unless overridden by ra-stateless, ra-names, et al, the router |
# advertisements will have the M and O bits set, so that the clients |
# advertisements will have the M and O bits set, so that the clients |
# get addresses and configuration from DHCPv6, and the A bit reset, so the |
# get addresses and configuration from DHCPv6, and the A bit reset, so the |
# clients don't use SLAAC addresses. |
# clients don't use SLAAC addresses. |
Line 257 local-service
|
Line 251 local-service
|
# the IP address 192.168.0.60 |
# the IP address 192.168.0.60 |
#dhcp-host=id:01:02:02:04,192.168.0.60 |
#dhcp-host=id:01:02:02:04,192.168.0.60 |
|
|
# Always give the Infiniband interface with hardware address | # Always give the InfiniBand interface with hardware address |
# 80:00:00:48:fe:80:00:00:00:00:00:00:f4:52:14:03:00:28:05:81 the |
# 80:00:00:48:fe:80:00:00:00:00:00:00:f4:52:14:03:00:28:05:81 the |
# ip address 192.168.0.61. The client id is derived from the prefix |
# ip address 192.168.0.61. The client id is derived from the prefix |
# ff:00:00:00:00:00:02:00:00:02:c9:00 and the last 8 pairs of |
# ff:00:00:00:00:00:02:00:00:02:c9:00 and the last 8 pairs of |
Line 294 local-service
|
Line 288 local-service
|
# Give a fixed IPv6 address and name to client with |
# Give a fixed IPv6 address and name to client with |
# DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 |
# DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 |
# Note the MAC addresses CANNOT be used to identify DHCPv6 clients. |
# Note the MAC addresses CANNOT be used to identify DHCPv6 clients. |
# Note also the they [] around the IPv6 address are obilgatory. | # Note also that the [] around the IPv6 address are obligatory. |
#dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5] |
#dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5] |
|
|
# Ignore any clients which are not specified in dhcp-host lines |
# Ignore any clients which are not specified in dhcp-host lines |
Line 360 local-service
|
Line 354 local-service
|
|
|
# Set option 58 client renewal time (T1). Defaults to half of the |
# Set option 58 client renewal time (T1). Defaults to half of the |
# lease time if not specified. (RFC2132) |
# lease time if not specified. (RFC2132) |
#dhcp-option=option:T1:1m | #dhcp-option=option:T1,1m |
|
|
# Set option 59 rebinding time (T2). Defaults to 7/8 of the |
# Set option 59 rebinding time (T2). Defaults to 7/8 of the |
# lease time if not specified. (RFC2132) |
# lease time if not specified. (RFC2132) |
#dhcp-option=option:T2:2m | #dhcp-option=option:T2,2m |
|
|
# Set the NTP time server address to be the same machine as |
# Set the NTP time server address to be the same machine as |
# is running dnsmasq |
# is running dnsmasq |
Line 442 local-service
|
Line 436 local-service
|
#dhcp-option-force=211,30i |
#dhcp-option-force=211,30i |
|
|
# Set the boot filename for netboot/PXE. You will only need |
# Set the boot filename for netboot/PXE. You will only need |
# this is you want to boot machines over the network and you will need | # this if you want to boot machines over the network and you will need |
# a TFTP server; either dnsmasq's built in TFTP server or an | # a TFTP server; either dnsmasq's built-in TFTP server or an |
# external one. (See below for how to enable the TFTP server.) |
# external one. (See below for how to enable the TFTP server.) |
#dhcp-boot=pxelinux.0 |
#dhcp-boot=pxelinux.0 |
|
|
# The same as above, but use custom tftp-server instead machine running dnsmasq |
# The same as above, but use custom tftp-server instead machine running dnsmasq |
#dhcp-boot=pxelinux,server.name,192.168.1.100 |
#dhcp-boot=pxelinux,server.name,192.168.1.100 |
|
|
# Boot for Etherboot gPXE. The idea is to send two different | # Boot for iPXE. The idea is to send two different |
# filenames, the first loads gPXE, and the second tells gPXE what to | # filenames, the first loads iPXE, and the second tells iPXE what to |
# load. The dhcp-match sets the gpxe tag for requests from gPXE. | # load. The dhcp-match sets the ipxe tag for requests from iPXE. |
#dhcp-match=set:gpxe,175 # gPXE sends a 175 option. | #dhcp-boot=undionly.kpxe |
#dhcp-boot=tag:!gpxe,undionly.kpxe | #dhcp-match=set:ipxe,175 # iPXE sends a 175 option. |
#dhcp-boot=mybootimage | #dhcp-boot=tag:ipxe,http://boot.ipxe.org/demo/boot.php |
|
|
# Encapsulated options for Etherboot gPXE. All the options are | # Encapsulated options for iPXE. All the options are |
# encapsulated within option 175 |
# encapsulated within option 175 |
#dhcp-option=encap:175, 1, 5b # priority code |
#dhcp-option=encap:175, 1, 5b # priority code |
#dhcp-option=encap:175, 176, 1b # no-proxydhcp |
#dhcp-option=encap:175, 176, 1b # no-proxydhcp |
Line 531 local-service
|
Line 525 local-service
|
# (using /etc/hosts) then that name can be specified as the |
# (using /etc/hosts) then that name can be specified as the |
# tftp_servername (the third option to dhcp-boot) and in that |
# tftp_servername (the third option to dhcp-boot) and in that |
# case dnsmasq resolves this name and returns the resultant IP |
# case dnsmasq resolves this name and returns the resultant IP |
# addresses in round robin fasion. This facility can be used to | # addresses in round robin fashion. This facility can be used to |
# load balance the tftp load among a set of servers. |
# load balance the tftp load among a set of servers. |
#dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name |
#dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name |
|
|
Line 553 local-service
|
Line 547 local-service
|
# http://www.isc.org/files/auth.html |
# http://www.isc.org/files/auth.html |
#dhcp-authoritative |
#dhcp-authoritative |
|
|
|
# Set the DHCP server to enable DHCPv4 Rapid Commit Option per RFC 4039. |
|
# In this mode it will respond to a DHCPDISCOVER message including a Rapid Commit |
|
# option with a DHCPACK including a Rapid Commit option and fully committed address |
|
# and configuration information. This must only be enabled if either the server is |
|
# the only server for the subnet, or multiple servers are present and they each |
|
# commit a binding for all clients. |
|
#dhcp-rapid-commit |
|
|
# Run an executable when a DHCP lease is created or destroyed. |
# Run an executable when a DHCP lease is created or destroyed. |
# The arguments sent to the script are "add" or "del", |
# The arguments sent to the script are "add" or "del", |
# then the MAC address, the IP address and finally the hostname |
# then the MAC address, the IP address and finally the hostname |
Line 670 local-service
|
Line 672 local-service
|
|
|
# Include all files in a directory which end in .conf |
# Include all files in a directory which end in .conf |
#conf-dir=/etc/dnsmasq.d/,*.conf |
#conf-dir=/etc/dnsmasq.d/,*.conf |
|
|
|
# If a DHCP client claims that its name is "wpad", ignore that. |
|
# This fixes a security hole. see CERT Vulnerability VU#598349 |
|
#dhcp-name-match=set:wpad-ignore,wpad |
|
#dhcp-ignore-names=tag:wpad-ignore |