<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
I'm with Simon - dnsmasq isn't the right place to do this. dnsmasq
doesn't/shouldn't know what use the IP address it returns will be put
to. If you return 'success' and a bogus IP when it should fail, DNS
clients other than browsers may not behave correctly.<br>
<br>
A better place to do this would be in a transparent http proxy. If it
receives an NXDomain when doing a DNS lookup, it could send the browser
a temporary redirect to a local page explaining what's going on. And
that behavior wouldn't affect non-HTTP traffic. Squid is popular, maybe
someone has already done something similar.<br>
<br>
Another alternative would be to use OpenDNS as your upstream DNS
provider. They offer features similar to what you're looking to
implement, I think. But then you have the same problem described above.
And if you're not in the US (guessing from your email) then the
roundtrip to their servers (San Francisco) may be a little long.<br>
<br>
hope that helps,<br>
<br>
Paul<br>
<br>
Jorge Bastos wrote:
<blockquote cite="mid:005001c919c5$85b20d20$91162760$@jorge@decimal.pt"
type="cite">
<pre wrap="">I see.
I'm going to forget this :P
Thanks Simon
</pre>
<blockquote type="cite">
<pre wrap="">-----Original Message-----
From: Simon Kelley [<a class="moz-txt-link-freetext" href="mailto:simon@thekelleys.org.uk">mailto:simon@thekelleys.org.uk</a>]
Sent: quinta-feira, 18 de Setembro de 2008 13:41
To: Jorge Bastos
Subject: Re: [Dnsmasq-discuss] Feature Request?
Jorge Bastos wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Well what i had in mind is when a non-existent dns name is requested.
>From what you said, forgive me if I interpreted it wrong, dnsmasq is
</pre>
</blockquote>
<blockquote type="cite">
<pre wrap="">already able to detect that and reply with a customized value?
Am I correct? If so can you post an example for the config?
</pre>
</blockquote>
<pre wrap="">No, that's not correct. My posting wasn't clear. You can't configure an
address to be returned when an upstream server returns NXDOMAIN. I've
resisted attempts to do this before, as there are downsides to doing
it.
It's exactly what Verisign did a few years back, and caused a storm.
See
<a class="moz-txt-link-freetext" href="http://www.imperialviolet.org/dnsfix.html">http://www.imperialviolet.org/dnsfix.html</a> for a discussion.
Indeed, dnsmasq has an option (bogus-nxdomain) to reverse the effect.
Simon</pre>
</blockquote>
<pre wrap=""><!----></pre>
</blockquote>
</body>
</html>