<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Thanks for the reply. To clarify, would the no-resolv option prevent the server running dnsmasq from referencing its own /etc/resolv.conf, or would that also effect the behavior of clients?<br></div><div>I don' think it's possible the rogue DHCP server provided any of our other servers wtih a DHCP lease-- none of our servers with dnsmasq have the isc-dhcp-client package installed, and the Windows server was set up on a separate VLAN from any of our servers. Would there be another way that the unauthorized DHCP/DNS server could have answered queries for our domain?<br></div><div>Thanks again,<br></div><div><br></div><div><span name="x"></span>Ben Cundiff<br>Associate Sysadmin<br>X-ES Inc.<br>bcundiff@xes-inc.com<span name="x"></span><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Simon Kelley" <simon@thekelleys.org.uk><br><b>To: </b>dnsmasq-discuss@thekelleys.org.uk<br><b>Sent: </b>Wednesday, July 30, 2014 4:30:15 PM<br><b>Subject: </b>Re: [Dnsmasq-discuss] Locking Down DNS Queries to Correct Servers<br><div><br></div><div><br></div>Your config doesn't include<br><div><br></div>no-resolv<br><div><br></div>so dnsmasq will be reading /etc/resolv.conf looking for servers there,<br>as well as the ones you've defined. If a DHCP client on the machine got<br>a DHCP lease from the rogue server, it could have put the DNS server<br>address from that DHCP lease in /etc/resolv.conf That would get queries<br>NOT in *.example.com sent to the rogue server.<br><div><br></div><br>Cheers,<br><div><br></div>Simon.<br><div><br></div><br><div><br></div>_______________________________________________<br>Dnsmasq-discuss mailing list<br>Dnsmasq-discuss@lists.thekelleys.org.uk<br>http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss<br></div><div><br></div></div></body></html>