[Dnsmasq-discuss] bind-dynamic versus bind-interface

Gene Czarcinski gene at czarc.net
Fri Nov 23 12:50:17 GMT 2012


Libvirt is in the process of changing for using bind-interface to using 
bind-dynamic to fix a security related issue where dnsmasq was 
responding to port 53 queries which did not occur on an address on the 
virtual network interface that instance of dnsmasq was supporting.

OK, now a question.  Are there conditions where using bind-interface was 
preferred instead of bind-dynamic?  I assume that, "continues to work" 
like it has in the past, is not a valid reason.

Gene



More information about the Dnsmasq-discuss mailing list