[Dnsmasq-discuss] Suggestion/Feature Request: Disable only DNS on an interface

[Albert ARIBAUD]

Hi Ryan,

Le Tue, 12 Apr 2016 22:41:45 +0200
Ryan Zev Solomon <ryzenold at gmail.com> a écrit:

> Good day,
> 
> I think it would be useful to disable serving DNS queries on an 
> interface on which TFTP, and DHCP are still provided. My use case:
> - TFTP and DHCP are provided by Dnsmasq.
> - Unbound is used as the DNS recursive resolver/cache.
> - Dnsmasq is used as a stub resolver for the addresses handed out via
> DHCP.
> 
> Currently this can be partially achieved by moving Dnsmasq to a 
> different port, and blocking that port.

What do you mean exactly by "stub resolver"? Apparently you want
unbound to manage the local zone, so dnsmasq won't have any name
serving to do at all.

If so, then completely disabling DNS is possible with '-p 0' as per the
man page.

Of course this will implicitly turn off dnsmasq's capability to fill in
its local DNS records with names from DHCP leases, but I supect you do
not use this feature since you want the local zone managed by unbound,
not dnsmasq.

Amicalement,
-- 
Albert.