Documentation du Dr FRAPPE

Ce wiki regroupe les résultats de mes expériences en informatique accumulés au cours de mes recherches sur le net.

Dans la mesure du possible, j'ai cité mes sources ; il en manque certainement… :-)

Différences

Ci-dessous, les différences entre deux révisions de la page.

Lien vers cette vue comparative

Les deux révisions précédentesRévision précédente
Prochaine révision		Révision précédente
Prochaine révisionLes deux révisions suivantes
logiciel:internet:dnsmasq:dnsmasq.conf [2020/11/05 10:11] – [Options] adminlogiciel:internet:dnsmasq:dnsmasq.conf [2020/11/06 10:35] – [Options] admin
Ligne 164: Ligne 164:
     : Send extra options which are tagged as "red" to any machine with Ethernet address starting 11:22:33:     : Send extra options which are tagged as "red" to any machine with Ethernet address starting 11:22:33:
     ? dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5]     ? dhcp-host=id:00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2, fred, [1234::5]
-    :Give a fixed IPv6 address and name to client with  +    : Give a fixed IPv6 address and name to client with DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 
-# DUID 00:01:00:01:16:d2:83:fc:92:d4:19:e2:d8:b2 +    : Note the MAC addresses CANNOT be used to identify DHCPv6 clients. 
-# Note the MAC addresses CANNOT be used to identify DHCPv6 clients. +    : Note also that the [] around the IPv6 address are obligatory. 
-# Note also that the [] around the IPv6 address are obligatory. +  ? dhcp-ignore=tag:!known 
- +  : Ignore any clients which are not specified in dhcp-host lines or /etc/ethers. Equivalent to ISC "deny unknown-clients". 
-# Ignore any clients which are not specified in dhcp-host lines +  : This relies on the special "known" tag which is set when a host is matched. 
-# or /etc/ethers. Equivalent to ISC "deny unknown-clients". +  ? dhcp-vendorclass=set:red,Linux 
-# This relies on the special "known" tag which is set when +  : Send extra options which are tagged as "red" to any machine whose DHCP vendorclass string includes the substring "Linux" 
-# a host is matched. +  ? dhcp-userclass=set:red,accounts 
-#dhcp-ignore=tag:!known +  : Send extra options which are tagged as "red" to any machine one of whose DHCP userclass strings includes the substring "accounts" 
- +  ? dhcp-mac=set:red,00:60:8C:*:*:* 
-# Send extra options which are tagged as "red" to any machine whose +  : Send extra options which are tagged as "red" to any machine whose MAC address matches the pattern. 
-# DHCP vendorclass string includes the substring "Linux" +  ? read-ethers 
-#dhcp-vendorclass=set:red,Linux +  : If this line is uncommented, dnsmasq will read /etc/ethers and act on the ethernet-address/IP pairs found there just as if they had been given as --dhcp-host options. Useful if you keep MAC-address/host mappings there for other purposes. 
- +  ? dhcp-option 
-# Send extra options which are tagged as "red" to any machine one +  : Send options to hosts which ask for a DHCP lease. 
-# of whose DHCP userclass strings includes the substring "accounts" +  : See RFC 2132 for details of available options. 
-#dhcp-userclass=set:red,accounts +  : Common options can be given to dnsmasq by name: 
- +  :   run "dnsmasq --help dhcp" to get a list. 
-# Send extra options which are tagged as "red" to any machine whose +  : Note that all the common settings, such as netmask and broadcast address, DNS server and default route, are given sane defaults by dnsmasq. You very likely will not need any dhcp-options. If you use Windows clients and Samba, there are some options which are recommended, they are detailed at the end of this section. 
-# MAC address matches the pattern. +    ? dhcp-option=3,1.2.3.4 
-#dhcp-mac=set:red,00:60:8C:*:*:* +    : Override the default route supplied by dnsmasq, which assumes the router is the same machine as the one running dnsmasq. 
- +    ? dhcp-option=option:router,1.2.3.4 
-# If this line is uncommented, dnsmasq will read /etc/ethers and act +    : Do the same thing, but using the option name 
-# on the ethernet-address/IP pairs found there just as if they had +    ? dhcp-option=3 
-# been given as --dhcp-host options. Useful if you keep +    : Override the default route supplied by dnsmasq and send no default route at all. Note that this only works for the options sent by default (1, 3, 6, 12, 28) the same line will send a zero-length option for all other option numbers. 
-# MAC-address/host mappings there for other purposes. +    ? dhcp-option=option:ntp-server,192.168.0.4,10.10.0.5 
-#read-ethers +    : Set the NTP time server addresses to 192.168.0.4 and 10.10.0.5 
- +    ? dhcp-option=option6:dns-server,[1234::77],[1234::88] 
-# Send options to hosts which ask for a DHCP lease. +    : Send DHCPv6 option. Note [] around IPv6 addresses. 
-# See RFC 2132 for details of available options. +    ? dhcp-option=option6:dns-server,[::],[1234::88] 
-# Common options can be given to dnsmasq by name: +    : Send DHCPv6 option for namservers as the machine running  dnsmasq and another. 
-# run "dnsmasq --help dhcp" to get a list. +    ? dhcp-option=option6:information-refresh-time,6h 
-# Note that all the common settings, such as netmask and +    : Ask client to poll for option changes every six hours. (RFC4242) 
-# broadcast address, DNS server and default route, are given +    ? dhcp-option=option:T1,1m 
-# sane defaults by dnsmasq. You very likely will not need +    : Set option 58 client renewal time (T1). Defaults to half of the lease time if not specified. (RFC2132) 
-# any dhcp-options. If you use Windows clients and Samba, there +    ? dhcp-option=option:T2,2m 
-# are some options which are recommended, they are detailed at the +    : Set option 59 rebinding time (T2). Defaults to 7/8 of the lease time if not specified. (RFC2132) 
-# end of this section. +    ? dhcp-option=42,0.0.0.0 
- +    : Set the NTP time server address to be the same machine as is running dnsmasq 
-# Override the default route supplied by dnsmasq, which assumes the +    ? dhcp-option=40,welly 
-# router is the same machine as the one running dnsmasq. +    : Set the NIS domain name to "welly" 
-#dhcp-option=3,1.2.3.4 +    ? dhcp-option=23,50 
- +    : Set the default time-to-live to 50 
-# Do the same thing, but using the option name +    ? dhcp-option=27,1 
-#dhcp-option=option:router,1.2.3.4 +    : Set the "all subnets are local" flag 
- +    ? dhcp-option=128,e4:45:74:68:00:00 
-# Override the default route supplied by dnsmasq and send no default +    ? dhcp-option=129,NIC=eepro100 
-# route at all. Note that this only works for the options sent by +    : Send the etherboot magic flag and then etherboot options (a string). 
-# default (1, 3, 6, 12, 28) the same line will send a zero-length option +    ? dhcp-option = tag:red, option:ntp-server, 192.168.1.1 
-# for all other option numbers. +    : Specify an option which will only be sent to the "red" network (see dhcp-range for the declaration of the "red" network) 
-#dhcp-option=3 +    : Note that the tag: part must precede the option: part. 
- +    ? The following DHCP options 
-# Set the NTP time server addresses to 192.168.0.4 and 10.10.0.5 +    : set up dnsmasq in the same way as is specified for the ISC dhcpcd in http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt adapted for a typical dnsmasq installation where the host running dnsmasq is also the host running samba. you may want to uncomment some or all of them if you use Windows clients and Samba. 
-#dhcp-option=option:ntp-server,192.168.0.4,10.10.0.5 +      ? dhcp-option=19,0 
- +      : option ip-forwarding off 
-# Send DHCPv6 option. Note [] around IPv6 addresses. +      ? dhcp-option=44,0.0.0.0 
-#dhcp-option=option6:dns-server,[1234::77],[1234::88] +      : set netbios-over-TCP/IP nameserver(s) aka WINS server(s) 
- +      ? dhcp-option=45,0.0.0.0 
-# Send DHCPv6 option for namservers as the machine running  +      : netbios datagram distribution server 
-# dnsmasq and another. +      ? dhcp-option=46,8 
-#dhcp-option=option6:dns-server,[::],[1234::88] +      : netbios node type 
- +    ? dhcp-option=252,"\n" 
-# Ask client to poll for option changes every six hours. (RFC4242) +    : Send an empty WPAD option. This may be REQUIRED to get windows 7 to behave. 
-#dhcp-option=option6:information-refresh-time,6h +    ? dhcp-option=option:domain-search,eng.apple.com,marketing.apple.com 
- +    : Send RFC-3397 DNS domain search DHCP option. WARNING: Your DHCP client probably doesn't support this...... 
-# Set option 58 client renewal time (T1). Defaults to half of the +    ? dhcp-option=121,192.168.1.0/24,1.2.3.4,10.0.0.0/8,5.6.7.8 
-# lease time if not specified. (RFC2132) +    : Send RFC-3442 classless static routes (note the netmask encoding) 
-#dhcp-option=option:T1,1m +    ? dhcp-option=vendor:PXEClient,1,0.0.0.0 
- +    : Send vendor-class specific options encapsulated in DHCP option 43. 
-# Set option 59 rebinding time (T2). Defaults to 7/8 of the +    : The meaning of the options is defined by the vendor-class so options are sent only when the client supplied vendor class matches the class given here. (A substring match is OK, so "MSFT" matches "MSFT" and "MSFT 5.0"). This example sets the mtftp address to 0.0.0.0 for PXEClients. 
-# lease time if not specified. (RFC2132) +    ? dhcp-option=vendor:MSFT,2,1i 
-#dhcp-option=option:T2,2m +    : Send microsoft-specific option to tell windows to release the DHCP lease when it shuts down. Note the "i" flag, to tell dnsmasq to send the value as a four-byte integer - that's what microsoft wants. See http://technet2.microsoft.com/WindowsServer/en/library/a70f1bb7-d2d4-49f0-96d6-4b7414ecfaae1033.mspx?mfr=true 
- +    ? dhcp-option=vendor:Etherboot,60,"Etherboot" 
-# Set the NTP time server address to be the same machine as +    : Send the Encapsulated-vendor-class ID needed by some configurations of Etherboot to allow is to recognise the DHCP server. 
-# is running dnsmasq +    ? dhcp-option-force 
-#dhcp-option=42,0.0.0.0 +    : 
- +      ? dhcp-option-force=208,f1:00:74:7e 
-# Set the NIS domain name to "welly" +      : Send options to PXELinux. Note that we need to send the options even though they don't appear in the parameter request list, so we need to use dhcp-option-force here. See http://syslinux.zytor.com/pxe.php#special for details. Magic number - needed before anything else is recognised 
-#dhcp-option=40,welly +      ? dhcp-option-force=209,configs/common 
- +      : Configuration file name 
-# Set the default time-to-live to 50 +      ? dhcp-option-force=210,/tftpboot/pxelinux/files/ 
-#dhcp-option=23,50 +      : Path prefix 
- +      ? dhcp-option-force=211,30i 
-# Set the "all subnets are local" flag +      : Reboot time. (Note 'i' to send 32-bit value) 
-#dhcp-option=27,1 +    ? dhcp-boot 
- +    : 
-# Send the etherboot magic flag and then etherboot options (a string). +      ? dhcp-boot=pxelinux.0 
-#dhcp-option=128,e4:45:74:68:00:00 +      : Set the boot filename for netboot/PXE. You will only need this if you want to boot machines over the network and you will need a TFTP server; either dnsmasq's built-in TFTP server or an external one. (See below for how to enable the TFTP server.) 
-#dhcp-option=129,NIC=eepro100 +      ? dhcp-boot=pxelinux,server.name,192.168.1.100 
- +      : The same as above, but use custom tftp-server instead machine running dnsmasq 
-# Specify an option which will only be sent to the "red" network +      ? Boot for iPXE 
-# (see dhcp-range for the declaration of the "red" network) +      : The idea is to send two different filenames, the first loads iPXE, and the second tells iPXE what to load. The dhcp-match sets the ipxe tag for requests from iPXE. 
-# Note that the tag: part must precede the option: part. +        ? dhcp-boot=undionly.kpxe 
-#dhcp-option = tag:red, option:ntp-server, 192.168.1.1 +        : 
- +        ? dhcp-match=set:ipxe,175 # iPXE sends a 175 option. 
-# The following DHCP options set up dnsmasq in the same way as is specified +        : 
-# for the ISC dhcpcd in +        ? dhcp-boot=tag:ipxe,http://boot.ipxe.org/demo/boot.php 
-# http://www.samba.org/samba/ftp/docs/textdocs/DHCP-Server-Configuration.txt +        : 
-# adapted for a typical dnsmasq installation where the host running +    ? Encapsulated options for iPXE. 
-# dnsmasq is also the host running samba. +    : All the options are encapsulated within option 175 
-# you may want to uncomment some or all of them if you use +      ? dhcp-option=encap:175, 1, 5b 
-# Windows clients and Samba. +      : priority code 
-#dhcp-option=19,0           # option ip-forwarding off +      ? dhcp-option=encap:175, 176, 1b 
-#dhcp-option=44,0.0.0.0     # set netbios-over-TCP/IP nameserver(s) aka WINS server(s) +      : no-proxydhcp 
-#dhcp-option=45,0.0.0.0     # netbios datagram distribution server +      ? dhcp-option=encap:175, 177, string 
-#dhcp-option=46,8           # netbios node type +      : bus-id 
- +      ? dhcp-option=encap:175, 189, 1b 
-# Send an empty WPAD option. This may be REQUIRED to get windows 7 to behave. +      : BIOS drive code 
-#dhcp-option=252,"\n" +      ? dhcp-option=encap:175, 190, user 
- +      : iSCSI username 
-# Send RFC-3397 DNS domain search DHCP option. WARNING: Your DHCP client +      ? dhcp-option=encap:175, 191, pass 
-# probably doesn't support this...... +      : iSCSI password 
-#dhcp-option=option:domain-search,eng.apple.com,marketing.apple.com +  ? dhcp-match 
- +  : Test for the architecture of a netboot client. 
-# Send RFC-3442 classless static routes (note the netmask encoding) +  : PXE clients are supposed to send their architecture as option 93. (See RFC 4578) 
-#dhcp-option=121,192.168.1.0/24,1.2.3.4,10.0.0.0/8,5.6.7.8 +    ? dhcp-match=peecees, option:client-arch, 0 #x86-32 
- +    ? dhcp-match=itanics, option:client-arch, 2 #IA64 
-# Send vendor-class specific options encapsulated in DHCP option 43. +    ? dhcp-match=hammers, option:client-arch, 6 #x86-64 
-# The meaning of the options is defined by the vendor-class so +    ? dhcp-match=mactels, option:client-arch, 7 #EFI x86-64 
-# options are sent only when the client supplied vendor class +  ? pxe-prompt 
-# matches the class given here. (A substring match is OK, so "MSFT" +  :  
-# matches "MSFT" and "MSFT 5.0"). This example sets the +    ? pxe-prompt="What system shall I netboot?" 
-# mtftp address to 0.0.0.0 for PXEClients. +    : Do real PXE, rather than just booting a single file, this is an alternative to dhcp-boot. 
-#dhcp-option=vendor:PXEClient,1,0.0.0.0 +    ? pxe-prompt="Press F8 for menu.", 60 
- +    : or with timeout before first available action is taken: 
-# Send microsoft-specific option to tell windows to release the DHCP lease +  ? pxe-service 
-# when it shuts down. Note the "i" flag, to tell dnsmasq to send the +  : 
-# value as a four-byte integer - that's what microsoft wants. See +    ? pxe-service=x86PC, "Boot from local disk" 
-# http://technet2.microsoft.com/WindowsServer/en/library/a70f1bb7-d2d4-49f0-96d6-4b7414ecfaae1033.mspx?mfr=true +    : Available boot services. for PXE. 
-#dhcp-option=vendor:MSFT,2,1i +    ? pxe-service=x86PC, "Install Linux", pxelinux 
- +    : Loads <tftp-root>/pxelinux.0 from dnsmasq TFTP server. 
-# Send the Encapsulated-vendor-class ID needed by some configurations of +    ? pxe-service=x86PC, "Install Linux", pxelinux, 1.2.3.4 
-# Etherboot to allow is to recognise the DHCP server. +    : Loads <tftp-root>/pxelinux.0 from TFTP server at 1.2.3.4. 
-#dhcp-option=vendor:Etherboot,60,"Etherboot" +    : Beware this fails on old PXE ROMS. 
- +    ? pxe-service=x86PC, "Install windows from RIS server", 1 
-# Send options to PXELinux. Note that we need to send the options even +    : Use bootserver on network, found my multicast or broadcast. 
-# though they don't appear in the parameter request list, so we need +    ? pxe-service=x86PC, "Install windows from RIS server", 1, 1.2.3.4 
-# to use dhcp-option-force here. +    : Use bootserver at a known IP address. 
-# See http://syslinux.zytor.com/pxe.php#special for details. +  ? multicast-FTP 
-# Magic number - needed before anything else is recognised +  : If you have multicast-FTP available, information for that can be passed in a similar way using options 1 to 5. See page 19 of http://download.intel.com/design/archives/wfm/downloads/pxespec.pdf 
-#dhcp-option-force=208,f1:00:74:7e +    ? enable-tftp 
-# Configuration file name +    : Enable dnsmasq's built-in TFTP server 
-#dhcp-option-force=209,configs/common +    ? tftp-root=/var/ftpd 
-# Path prefix +    : Set the root directory for files available via FTP. 
-#dhcp-option-force=210,/tftpboot/pxelinux/files/ +    ? tftp-no-fail 
-# Reboot time. (Note 'i' to send 32-bit value) +    : Do not abort if the tftp-root is unavailable 
-#dhcp-option-force=211,30i +    ? tftp-secure 
- +    : Make the TFTP server more secure: with this set, only files owned by the user dnsmasq is running as will be send over the net. 
-# Set the boot filename for netboot/PXE. You will only need +    ? tftp-no-blocksize 
-# this if you want to boot machines over the network and you will need +    : This option stops dnsmasq from negotiating a larger blocksize for TFTP transfers. It will slow things down, but may rescue some broken TFTP clients. 
-# a TFTP server; either dnsmasq's built-in TFTP server or an +  ? dhcp-boot 
-# external one. (See below for how to enable the TFTP server.) +  : 
-#dhcp-boot=pxelinux.0 +    ? dhcp-boot=tag:red,pxelinux.red-net 
- +    : Set the boot file name only when the "red" tag is set. 
-# The same as above, but use custom tftp-server instead machine running dnsmasq +    ? dhcp-boot=/var/ftpd/pxelinux.0,boothost,192.168.0.3 
-#dhcp-boot=pxelinux,server.name,192.168.1.100 +    : An example of dhcp-boot with an external TFTP server: the name and IP address of the server are given after the filename. 
- +    : Can fail with old PXE ROMS. Overridden by --pxe-service. 
-# Boot for iPXE. The idea is to send two different +    ? dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name 
-# filenames, the first loads iPXE, and the second tells iPXE what to +    : If there are multiple external tftp servers having a same name (using /etc/hosts) then that name can be specified as the tftp_servername (the third option to dhcp-boot) and in that case dnsmasq resolves this name and returns the resultant IP addresses in round robin fashion. This facility can be used to load balance the tftp load among a set of servers. 
-# load. The dhcp-match sets the ipxe tag for requests from iPXE. +  ? dhcp-lease 
-#dhcp-boot=undionly.kpxe +  :  
-#dhcp-match=set:ipxe,175 # iPXE sends a 175 option. +    ? dhcp-lease-max=150 
-#dhcp-boot=tag:ipxe,http://boot.ipxe.org/demo/boot.php +    : Set the limit on DHCP leases, the default is 150 
- +    ? dhcp-leasefile=/var/lib/misc/dnsmasq.leases 
-# Encapsulated options for iPXE. All the options are +    : The DHCP server needs somewhere on disk to keep its lease database. 
-# encapsulated within option 175 +    : This defaults to a sane location, but if you want to change it, use the line below. 
-#dhcp-option=encap:175, 1, 5b         # priority code +  ? dhcp-authoritative 
-#dhcp-option=encap:175, 176, 1b       # no-proxydhcp +  : Set the DHCP server to authoritative mode. In this mode it will barge in and take over the lease for any client which broadcasts on the network, whether it has a record of the lease or not. This avoids long timeouts when a machine wakes up on a new network. DO NOT enable this if there's the slightest chance that you might end up accidentally configuring a DHCP server for your campus/company accidentally. The ISC server uses the same option, and this URL provides more information: http://www.isc.org/files/auth.html 
-#dhcp-option=encap:175, 177, string   # bus-id +  ? dhcp-rapid-commit 
-#dhcp-option=encap:175, 189, 1b       # BIOS drive code +  : Set the DHCP server to enable DHCPv4 Rapid Commit Option per RFC 4039. 
-#dhcp-option=encap:175, 190, user     # iSCSI username +  : In this mode it will respond to a DHCPDISCOVER message including a Rapid Commit option with a DHCPACK including a Rapid Commit option and fully committed address and configuration information. This must only be enabled if either the server is the only server for the subnet, or multiple servers are present and they each commit a binding for all clients. 
-#dhcp-option=encap:175, 191, pass     # iSCSI password +  ? dhcp-script=/bin/echo 
- +  : Run an executable when a DHCP lease is created or destroyed. 
-# Test for the architecture of a netboot client. PXE clients are +  : The arguments sent to the script are "add" or "del", then the MAC address, the IP address and finally the hostname if there is one. 
-# supposed to send their architecture as option 93. (See RFC 4578) +  ? cache-size=150 
-#dhcp-match=peecees, option:client-arch, 0 #x86-32 +  : Set the cachesize here. 
-#dhcp-match=itanics, option:client-arch, 2 #IA64 +  ? no-negcache 
-#dhcp-match=hammers, option:client-arch, 6 #x86-64 +  : If you want to disable negative caching, uncomment this. 
-#dhcp-match=mactels, option:client-arch, 7 #EFI x86-64 +  ? local-ttl= 
- +   Normally responses which come from /etc/hosts and the DHCP lease file have Time-To-Live set as zero, which conventionally means do not cache further. If you are happy to trade lower load on the server for potentially stale date, you can set a time-to-live (in seconds) here. 
-# Do real PXE, rather than just booting a single file, this is an +   ? bogus-nxdomain=64.94.110.11 
-# alternative to dhcp-boot. +   : If you want dnsmasq to detect attempts by Verisign to send queries to unregistered .com and .net hosts to its sitefinder service and have dnsmasq instead return the correct NXDOMAIN response, uncomment this line. You can add similar lines to do the same for other registries which have implemented wildcard A records. 
-#pxe-prompt="What system shall I netboot?" +   ? alias 
-# or with timeout before first available action is taken: +   : If you want to fix up DNS results from upstream servers, use the alias option. This only works for IPv4. 
-#pxe-prompt="Press F8 for menu.", 60 +     ? alias=1.2.3.4,5.6.7.8 
- +     : This alias makes a result of 1.2.3.4 appear as 5.6.7.8 
-# Available boot services. for PXE. +     ? alias=1.2.3.0,5.6.7.0,255.255.255.0 
-#pxe-service=x86PC, "Boot from local disk" +     : and this maps 1.2.3.x to 5.6.7.x 
- +     ? alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0 
-# Loads <tftp-root>/pxelinux.0 from dnsmasq TFTP server. +     : and this maps 192.168.0.10->192.168.0.40 to 10.0.0.10->10.0.0.40 
-#pxe-service=x86PC, "Install Linux", pxelinux +   ? MX records 
- +   : Change these lines if you want dnsmasq to serve MX records. 
-# Loads <tftp-root>/pxelinux.0 from TFTP server at 1.2.3.4. +     ? mx-host=maildomain.com,servermachine.com,50 
-# Beware this fails on old PXE ROMS. +     : Return an MX record named "maildomain.com" with target servermachine.com and preference 50 
-#pxe-service=x86PC, "Install Linux", pxelinux, 1.2.3.4 +     ? mx-target=servermachine.com 
- +     : Set the default target for MX records created using the localmx option. 
-# Use bootserver on network, found my multicast or broadcast. +     ? localmx 
-#pxe-service=x86PC, "Install windows from RIS server", 1 +     : Return an MX record pointing to the mx-target for all local machines. 
- +     ? selfmx 
-# Use bootserver at a known IP address. +     : Return an MX record pointing to itself for all local machines. 
-#pxe-service=x86PC, "Install windows from RIS server", 1, 1.2.3.4 +   ? srv-host 
- +   : Change the following lines if you want dnsmasq to serve SRV records. These are useful if you want to serve ldap requests for Active Directory and other windows-originated DNS requests. 
-# If you have multicast-FTP available, +   : See RFC 2782. 
-# information for that can be passed in a similar way using options 1 +   : You may add multiple srv-host lines. 
-# to 5. See page 19 of +   : The fields are <name>,<target>,<port>,<priority>,<weight> 
-# http://download.intel.com/design/archives/wfm/downloads/pxespec.pdf +   : If the domain part if missing from the name (so that is just has the service and protocol sections) then the domain given by the domain= config option is used. (Note that expand-hosts does not need to be set for this to work.) 
- +     ? srv-host=_ldap._tcp.example.com,ldapserver.example.com,389 
- +     : A SRV record sending LDAP for the example.com domain to ldapserver.example.com port 389 
-# Enable dnsmasq's built-in TFTP server +     ? domain=example.com\\ srv-host=_ldap._tcp,ldapserver.example.com,389 
-#enable-tftp +     : A SRV record sending LDAP for the example.com domain to ldapserver.example.com port 389 (using domain=) 
- +     ? srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,1\\ srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,2 
-# Set the root directory for files available via FTP. +     : Two SRV records for LDAP, each with different priorities 
-#tftp-root=/var/ftpd +     ? srv-host=_ldap._tcp.example.com 
- +     : A SRV record indicating that there is no LDAP server for the domain example.com
-# Do not abort if the tftp-root is unavailable +
-#tftp-no-fail +
- +
-# Make the TFTP server more secure: with this set, only files owned by +
-# the user dnsmasq is running as will be send over the net. +
-#tftp-secure +
- +
-# This option stops dnsmasq from negotiating a larger blocksize for TFTP +
-# transfers. It will slow things down, but may rescue some broken TFTP +
-# clients. +
-#tftp-no-blocksize +
- +
-# Set the boot file name only when the "red" tag is set. +
-#dhcp-boot=tag:red,pxelinux.red-net +
- +
-# An example of dhcp-boot with an external TFTP server: the name and IP +
-# address of the server are given after the filename. +
-# Can fail with old PXE ROMS. Overridden by --pxe-service. +
-#dhcp-boot=/var/ftpd/pxelinux.0,boothost,192.168.0.3 +
- +
-# If there are multiple external tftp servers having a same name +
-# (using /etc/hosts) then that name can be specified as the +
-# tftp_servername (the third option to dhcp-boot) and in that +
-# case dnsmasq resolves this name and returns the resultant IP +
-# addresses in round robin fashion. This facility can be used to +
-# load balance the tftp load among a set of servers. +
-#dhcp-boot=/var/ftpd/pxelinux.0,boothost,tftp_server_name +
- +
-# Set the limit on DHCP leases, the default is 150 +
-#dhcp-lease-max=150 +
- +
-# The DHCP server needs somewhere on disk to keep its lease database. +
-# This defaults to a sane location, but if you want to change it, use +
-# the line below. +
-#dhcp-leasefile=/var/lib/misc/dnsmasq.leases +
- +
-# Set the DHCP server to authoritative mode. In this mode it will barge in +
-# and take over the lease for any client which broadcasts on the network, +
-# whether it has a record of the lease or not. This avoids long timeouts +
-# when a machine wakes up on a new network. DO NOT enable this if there's +
-# the slightest chance that you might end up accidentally configuring a DHCP +
-# server for your campus/company accidentally. The ISC server uses +
-# the same option, and this URL provides more information: +
-# http://www.isc.org/files/auth.html +
-#dhcp-authoritative +
- +
-# Set the DHCP server to enable DHCPv4 Rapid Commit Option per RFC 4039. +
-# In this mode it will respond to a DHCPDISCOVER message including a Rapid Commit +
-# option with a DHCPACK including a Rapid Commit option and fully committed address +
-# and configuration information. This must only be enabled if either the server is  +
-# the only server for the subnet, or multiple servers are present and they each +
-# commit a binding for all clients. +
-#dhcp-rapid-commit +
- +
-# Run an executable when a DHCP lease is created or destroyed. +
-# The arguments sent to the script are "add" or "del", +
-# then the MAC address, the IP address and finally the hostname +
-# if there is one. +
-#dhcp-script=/bin/echo +
- +
-# Set the cachesize here. +
-#cache-size=150 +
- +
-# If you want to disable negative caching, uncomment this. +
-#no-negcache +
- +
-# Normally responses which come from /etc/hosts and the DHCP lease +
-# file have Time-To-Live set as zero, which conventionally means +
-# do not cache further. If you are happy to trade lower load on the +
-# server for potentially stale date, you can set a time-to-live (in +
-# seconds) here. +
-#local-ttl= +
- +
-# If you want dnsmasq to detect attempts by Verisign to send queries +
-# to unregistered .com and .net hosts to its sitefinder service and +
-# have dnsmasq instead return the correct NXDOMAIN response, uncomment +
-# this line. You can add similar lines to do the same for other +
-# registries which have implemented wildcard A records. +
-#bogus-nxdomain=64.94.110.11 +
- +
-# If you want to fix up DNS results from upstream servers, use the +
-# alias option. This only works for IPv4. +
-# This alias makes a result of 1.2.3.4 appear as 5.6.7.8 +
-#alias=1.2.3.4,5.6.7.8 +
-# and this maps 1.2.3.x to 5.6.7.x +
-#alias=1.2.3.0,5.6.7.0,255.255.255.0 +
-# and this maps 192.168.0.10->192.168.0.40 to 10.0.0.10->10.0.0.40 +
-#alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0 +
- +
-# Change these lines if you want dnsmasq to serve MX records. +
- +
-# Return an MX record named "maildomain.com" with target +
-# servermachine.com and preference 50 +
-#mx-host=maildomain.com,servermachine.com,50 +
- +
-# Set the default target for MX records created using the localmx option. +
-#mx-target=servermachine.com +
- +
-# Return an MX record pointing to the mx-target for all local +
-# machines. +
-#localmx +
- +
-# Return an MX record pointing to itself for all local machines. +
-#selfmx +
- +
-# Change the following lines if you want dnsmasq to serve SRV +
-# records.  These are useful if you want to serve ldap requests for +
-# Active Directory and other windows-originated DNS requests. +
-# See RFC 2782. +
-# You may add multiple srv-host lines. +
-# The fields are <name>,<target>,<port>,<priority>,<weight> +
-# If the domain part if missing from the name (so that is just has the +
-# service and protocol sections) then the domain given by the domain= +
-# config option is used. (Note that expand-hosts does not need to be +
-# set for this to work.) +
- +
-# A SRV record sending LDAP for the example.com domain to +
-# ldapserver.example.com port 389 +
-#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389 +
- +
-# A SRV record sending LDAP for the example.com domain to +
-# ldapserver.example.com port 389 (using domain=) +
-#domain=example.com +
-#srv-host=_ldap._tcp,ldapserver.example.com,389 +
- +
-# Two SRV records for LDAP, each with different priorities +
-#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,1 +
-#srv-host=_ldap._tcp.example.com,ldapserver.example.com,389,2 +
- +
-# A SRV record indicating that there is no LDAP server for the domain +
-# example.com +
-#srv-host=_ldap._tcp.example.com+
  
 # The following line shows how to make dnsmasq serve an arbitrary PTR # The following line shows how to make dnsmasq serve an arbitrary PTR

Piste :