<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div style="" class=""><span style="" class="">Had the same problem: dnsmsq also listened on WAN-interface, which I did not want. <br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><span style="" class="">SO:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><span style="" class=""><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"
class=""><span style="" class=""># Or which to listen on by address (remember to include 127.0.0.1 if<br style=""># you use this.)<br style="" class="">listen-address=127.0.0.1<br style="" class="">listen-address=192.168.182.1 #eth0<br style="" class="">listen-address=192.168.20.1 #eth1<br style="" class="">listen-address=192.168.60.1 #eth2<br style="" class="">listen-address=192.168.70.1 #tun0<br style="" class=""><br style="" class=""><br style="" class=""># On systems which support it, dnsmasq binds the wildcard address,<br style="" class=""># even when it is listening on only some interfaces. It then discards<br style="" class=""># requests that it shouldn't reply to. This has the advantage of<br style="" class=""># working even when interfaces come and go and change address. If you<br style="" class=""># want dnsmasq to really bind only the interfaces it is listening on,<br style="" class=""># uncomment this option. About the only time you may need
this is when<br style="" class=""># running another nameserver on the same machine.<br style="" class="">bind-interfaces #<------------------------------------------------------------------------------------------------<br style="" class=""></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><br><span style="" class=""></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><span style="" class="">MfG :-)<br style="" class=""></span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size:
12pt;"> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div style="" class="" dir="ltr"> <font style="" class="" face="Arial" size="2"> Oliver Rath <rath@mglug.de> schrieb am 23:30 Dienstag, 24.Juni 2014:<br style="" class=""> </font> </div> <br style="" class=""><br style="" class=""> <div style="" class="">Hi list,<br style="" class=""><br style="" class="">i try to restrict the dns of dnsmasq to one interface (3 existing<br style="" class="">interfaces, I hided ppp0), but it seems, that it doesnt work.<br style="" class=""><br style="" class="">My config:<br style="" class=""><br style="" class="">server=//141.1.1.1<br style="" class="">local=/heimserver/<br style="" class="">address=/owncloud/192.168.0.254<br style="" class="">dhcp-range=set:gw2,192.168.2.50,192.168.2.150,255.255.255.0,12h<br style="" class="">dhcp-range=::,constructor:sixxs,ra-names<br style=""
class="">dhcp-range=::,constructor:p3p1,ra-names<br style="" class="">dhcp-option=tag:gw2,128,192.168.2.254<br style="" class="">dhcp-option=252,"<a href="" style="" class="" target="_blank">http://heimserver/wpad.dat</a>"<br style="" class="">dhcp-option-force=208,f1:00:74:7e<br style="" class="">dhcp-option-force=210,/opt/dmi/tftproot/<br style="" class="">dhcp-boot=undionly.kkpxe<br style="" class="">enable-tftp<br style="" class="">tftp-root=/opt/dmi/tftproot<br style="" class="">log-queries<br style="" class="">log-dhcp<br style="" class=""><br style="" class="">my ifconfig.<br style="" class=""><br style="" class=""># ifconfig | grep mtu -A1<br style="" class="">lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536<br style="" class=""> inet 127.0.0.1 netmask 255.0.0.0<br style="" class="">--<br style="" class="">p1p1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br style="" class="">
inet 192.168.0.254 netmask 255.255.255.0 broadcast 192.168.0.255<br style="" class="">--<br style="" class="">p2p1: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500<br style="" class=""> inet 192.168.11.254 netmask 255.255.255.0 broadcast 192.168.11.255<br style="" class="">--<br style="" class="">p3p1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br style="" class=""> inet 192.168.2.254 netmask 255.255.255.0 broadcast 192.168.2.255<br style="" class=""><br style="" class=""><br style="" class=""><br style="" class="">So here only p3p1 is addressed here. But if i look for open ports, on<br style="" class="">all interfaces 53 is open:<br style="" class=""><br style="" class=""># nmap 192.168.11.254<br style="" class=""><br style="" class="">Starting Nmap 6.25 ( <a href="" style="" class=""
target="_blank">http://nmap.org </a>) at 2014-06-24 23:16 CEST<br style="" class="">Nmap scan report for 192.168.11.254<br style="" class="">Host is up (0.00014s latency).<br style="" class="">Not shown: 997 closed ports<br style="" class="">PORT STATE SERVICE<br style="" class="">53/tcp open domain<br style="" class="">749/tcp open kerberos-adm<br style="" class="">2000/tcp open cisco-sccp<br style="" class=""><br style="" class="">Nmap done: 1 IP address (1 host up) scanned in 0.76 seconds<br style="" class="">heimserver dnsmasq.d # nmap 192.168.2.254<br style="" class=""><br style="" class="">Starting Nmap 6.25 ( <a href="" style="" class="" target="_blank">http://nmap.org </a>) at 2014-06-24 23:16 CEST<br style="" class="">Nmap scan report for 192.168.2.254<br style="" class="">Host is up (0.00040s latency).<br style="" class="">Not shown: 997 closed ports<br style="" class="">PORT STATE
SERVICE<br style="" class="">53/tcp open domain<br style="" class="">749/tcp open kerberos-adm<br style="" class="">2000/tcp open cisco-sccp<br style="" class=""><br style="" class="">Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds<br style="" class="">heimserver dnsmasq.d # nmap 192.168.0.254<br style="" class=""> <br style="" class="">Starting Nmap 6.25 ( <a href="" style="" class="" target="_blank">http://nmap.org </a>) at 2014-06-24 23:16 CEST<br style="" class="">Nmap scan report for heimserver.koenigsteinstr.muc (192.168.0.254)<br style="" class="">Host is up (0.00011s latency).<br style="" class="">Not shown: 997 closed ports<br style="" class="">PORT STATE SERVICE<br style="" class="">53/tcp open domain<br style="" class="">749/tcp open kerberos-adm<br style="" class="">2000/tcp open cisco-sccp<br style="" class=""><br style="" class="">for being sure,
dnsmasq is the only dns-server here, i did this:<br style="" class=""><br style="" class=""># netstat -vanpe | grep :53<br style="" class="">netstat: no support for `AF INET (sctp)' on this system.<br style="" class="">netstat: no support for `AF INET (sctp)' on this system.<br style="" class="">tcp 0 0 0.0.0.0:53 0.0.0.0:* <br style="" class="">LISTEN 0 1701253 12137/dnsmasq <br style="" class="">tcp 0 0 192.168.0.254:5038 192.168.0.1:53788 <br style="" class="">VERBUNDEN 101 1666180 27070/asterisk <br style="" class="">tcp6 0 0 :::53
:::* <br style="" class="">LISTEN 0 1701256 12137/dnsmasq <br style="" class="">udp 0 0 0.0.0.0:53 <br style="" class="">0.0.0.0:* 0 1701252 <br style="" class="">12137/dnsmasq <br style="" class="">udp6 0 0 :::53 <br style="" class="">:::* 0 1701255 <br style=""
class="">12137/dnsmasq <br style="" class="">netstat: no support for `AF IPX' on this system.<br style="" class="">netstat: no support for `AF AX25' on this system.<br style="" class="">netstat: no support for `AF X25' on this system.<br style="" class="">netstat: no support for `AF NETROM' on this system.<br style="" class=""><br style="" class="">So whats wrong here? Has dnsmasq problems with interfaces named p1p1,<br style="" class="">p2p1 etc. ?<br style="" class=""><br style="" class="">Tfh!<br style="" class="">Oliver<br style="" class=""><br style="" class=""><br style="" class=""><br style="" class="">_______________________________________________<br style="" class="">Dnsmasq-discuss mailing list<br style="" class=""><a href="" style="" class="" ymailto="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk">Dnsmasq-discuss@lists.thekelleys.org.uk</a><br style="" class=""><a href="" style="" class=""
target="_blank">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a><br style="" class=""><br style="" class=""><br style="" class=""></div> </div> </div> </div> </div></body></html>