<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Simon,<br>
<br>
It seems that dnsmasq always listen on wildcard network interfaces
for dhcp services even with the option "--interface" or
"--listen-address" specified. And you gave the following explanation
for that:<br>
<br>
<span class="Apple-style-span" style="color: rgb(51, 51, 51);
font-family: 'Ubuntu Mono',monospace; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 18px; orphans: 2; text-align: left;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; background-color: rgb(255, 255,
255); display: inline ! important; float: none;">Because a DHCP
server has to cope with "strange" packets from unconfigured and
half-configured clients, it's not possible always to bind the DHCP
listening socket to an IP address.</span><br>
<br>
It's copied from:<br>
<a
href="https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/307328/comments/1">https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/307328/comments/1</a><br>
<br>
Could you please elaborate more about the "strange" packets ?
Actually, the listening interface is configurable in the command
line of dhcpd daemon (<a href="http://www.isc.org/software/dhcp">http://www.isc.org/software/dhcp</a>)
I think it could help avoid security risk and/or data privacy
breach. Especially, when dnsmasq is used by libvirt, it doesn't make
sense that dnsmasq listens on anly physical network interface. So
do you think we could make the options "--listen-address" and
"--interface" applied to dhcp service too like dns service in
dnsmasq?<br>
<br>
<br>
Thanks!<br>
Mark.<br>
<br>
</body>
</html>