blob: 62b1107d6d96ea3cc01bab5c31021f939ce0a2fc [file] [log] [blame]
Giacomo Tazzari797a7af2013-04-22 13:16:37 +01001version 2.67
2 Fix crash if upstream server returns SERVFAIL when
3 --conntrack in use. Thanks to Giacomo Tazzari for finding
4 this and supplying the patch.
Simon Kelleyaa63a212013-04-22 15:01:52 +01005
6 Repair regression in 2.64. That release stopped sending
7 lease-time information in the reply to DHCPINFORM
8 requests, on the correct grounds that it was a standards
9 violation. However, this broke the dnsmasq-specific
10 dhcp_lease_time utility. Now, DHCPINFORM returns
11 lease-time only if it's specifically requested
12 (maintaining standards) and the dhcp_lease_time utility
13 has been taught to ask for it (restoring functionality).
Simon Kelley86e92f92013-04-23 11:31:39 +010014
15 Fix --dhcp-match, --dhcp-vendorclass and --dhcp-userclass
16 to work with BOOTP and well as DHCP. Thanks to Peter
17 Korsgaard for spotting the problem.
Simon Kelley2bb73af2013-04-24 17:38:19 +010018
19 Add --synth-domain. Thanks to Vishvananda Ishaya for
20 suggesting this.
Simon Kelleyd5052fb2013-04-25 12:44:20 +010021
22 Fix failure to compile ipset.c if old kernel headers are
23 in use. Thanks to Eugene Rudoy for pointing this out.
Simon Kelley3f2873d2013-05-14 11:28:47 +010024
25 Handle IPv4 interface-address labels in Linux. These are
26 often used to emulate the old IP-alias addresses. Before,
27 using --interface=eth0 would service all the addresses of
28 eth0, including ones configured as aliases, which appear
29 in ifconfig as eth0:0. Now, only addresses with the label
30 eth0 are active. This is not backwards compatible: if you
31 want to continue to bind the aliases too, you need to add
32 eg. --interface=eth0:0 to the config.
Giacomo Tazzari797a7af2013-04-22 13:16:37 +010033
Simon Kelleycfcad422013-05-17 11:32:03 +010034 Fix "failed to set SO_BINDTODEVICE on DHCP socket: Socket
35 operation on non-socket" error on startup with
36 configurations which have exactly one --interface option
37 and do RA but _not_ DHCPv6. Thanks to Trever Adams for the
38 bug report.
Giacomo Tazzari797a7af2013-04-22 13:16:37 +010039
Simon Kelley115ac3e2013-05-20 11:28:32 +010040 Generalise --interface-name to cope with IPv6 addresses
41 and multiple addresses per interface per address family.
42
Simon Kelley3e8ed782013-05-29 14:31:33 +010043 Fix option parsing for --dhcp-host, which was generating a
44 spurious error when all seven possible items were
45 included. Thanks to Zhiqiang Wang for the bug report.
Simon Kelleybaa80ae2013-05-29 16:32:07 +010046
47 Remove restriction on prefix-length in --auth-zone. Thanks
48 to Toke Hoiland-Jorgensen for suggesting this.
49
Marcelo Salhab Brogliato0da5e892013-05-31 11:49:06 +010050 Log when the maximum number of concurrent DNS queries is
51 reached. Thanks to Marcelo Salhab Brogliato for the patch.
52
Simon Kelleye2ba0df2013-05-31 17:04:25 +010053 If wildcards are used in --interface, don't assume that
54 there will only ever be one available interface for DHCP
55 just because there is one at start-up. More may appear, so
56 we can't use SO_BINDTODEVICE. Thanks to Natrio for the bug
57 report.
58
Simon Kelleyb4b93082013-06-19 10:31:23 +010059 Increase timeout/number of retries in TFTP to accomodate
60 AudioCodes Voice Gateways doing streaming writes to flash.
61 Thanks to Damian Kaczkowski for spotting the problem.
62
Kyle Mesteryd859ca22013-07-24 13:11:58 +010063 Allow hostnames to start with a number, as allowed in
64 RFC-1123. Thanks to Kyle Mestery for the patch.
65
Roy Marples3f3adae2013-07-25 16:22:46 +010066 Fixes to DHCP FQDN option handling: don't terminate FQDN
67 if domain not known and allow a FQDN option with blank
68 name to request that a FQDN option is returned in the
69 reply. Thanks to Roy Marples for the patch.
70
Simon Kelleyd9fb0be2013-07-25 21:47:17 +010071 Make --clear-on-reload apply to setting upstream servers
72 via DBus too.
73
Simon Kelleyef1a94a2013-07-26 13:59:03 +010074 When the address which triggered the construction of an
75 advertised IPv6 prefix disappears, continue to advertise
76 the prefix for up to 2 hours, with the preferred lifetime
77 set to zero. This satisfies RFC 6204 4.3 L-13 and makes
78 things work better if a prefix disappears without being
79 deprecated first. Thanks to Uwe Schindler for persuasively
80 arguing for this.
81
Simon Kelleyb4b93082013-06-19 10:31:23 +010082
Simon Kelley333b2ce2013-01-07 21:46:03 +000083version 2.66
84 Add the ability to act as an authoritative DNS
85 server. Dnsmasq can now answer queries from the wider 'net
86 with local data, as long as the correct NS records are set
87 up. Only local data is provided, to avoid creating an open
88 DNS relay. Zone transfer is supported, to allow secondary
89 servers to be configured.
90
91 Add "constructed DHCP ranges" for DHCPv6. This is intended
92 for IPv6 routers which get prefixes dynamically via prefix
93 delegation. With suitable configuration, stateful DHCPv6
94 and RA can happen automatically as prefixes are delegated
95 and then deprecated, without having to re-write the
96 dnsmasq configuration file or restart the daemon. Thanks to
97 Steven Barth for extensive testing and development work on
98 this idea.
Simon Kelley71c73ac2013-01-08 21:22:24 +000099
100 Fix crash on startup on Solaris 11. Regression probably
Simon Kelley22ce5502013-01-22 13:53:04 +0000101 introduced in 2.61. Thanks to Geoff Johnstone for the
102 patch.
103
104 Add code to make behaviour for TCP DNS requests that same
105 as for UDP requests, when a request arrives for an allowed
106 address, but via a banned interface. This change is only
107 active on Linux, since the relevant API is missing (AFAIK)
108 on other platforms. Many thanks to Tomas Hozza for
109 spotting the problem, and doing invaluable discovery of
110 the obscure and undocumented API required for the solution.
Simon Kelleya21e27b2013-02-17 16:41:35 +0000111
112 Don't send the default DHCP option advertising dnsmasq as
113 the local DNS server if dnsmasq is configured to not act
114 as DNS server, or it's configured to a non-standard port.
Simon Kelleydd1721c2013-02-18 21:04:04 +0000115
116 Add DNSMASQ_CIRCUIT_ID, DNSMASQ_SUBCRIBER_ID,
117 DNSMASQ_REMOTE_ID variables to the environment of the
Simon Kelley3d77c042013-03-22 10:03:50 +0000118 lease-change script (and the corresponding Lua). These hold
Simon Kelleydd1721c2013-02-18 21:04:04 +0000119 information inserted into the DHCP request by a DHCP relay
120 agent. Thanks to Lakefield Communications for providing a
121 bounty for this addition.
122
Simon Kelley4038ae22013-02-19 16:47:07 +0000123 Fixed crash, introduced in 2.64, whilst handling DHCPv6
124 information-requests with some common configurations.
125 Thanks to Robert M. Albrecht for the bug report and
126 chasing the problem.
127
Jason A. Donenfeld13d86c72013-02-22 18:20:53 +0000128 Add --ipset option. Thanks to Jason A. Donenfeld for the
129 patch.
130
Simon Kelleyc7961072013-02-28 15:17:58 +0000131 Don't erroneously reject some option names in --dhcp-match
Simon Kelley3d77c042013-03-22 10:03:50 +0000132 options. Thanks to Benedikt Hochstrasser for the bug report.
Simon Kelley49333cb2013-03-15 20:30:51 +0000133
134 Allow a trailing '*' wildcard in all interface-name
135 configurations. Thanks to Christian Parpart for the patch.
Simon Kelleyc7961072013-02-28 15:17:58 +0000136
Simon Kelley56a11422013-04-02 17:02:58 +0100137 Handle the situation where libc headers define
138 SO_REUSEPORT, but the kernel in use doesn't, to cope with
139 the introduction of this option to Linux. Thanks to Rich
140 Felker for the bug report.
141
Simon Kelleycd1e04a2013-04-02 20:11:48 +0100142 Update Polish translation. Thanks to Jan Psota.
Simon Kelley0b0a73c2013-04-11 14:07:02 +0100143
144 Fix crash if the configured DHCP lease limit is
145 reached. Regression occurred in 2.61. Thanks to Tsachi for
146 the bug report.
Simon Kelleycd1e04a2013-04-02 20:11:48 +0100147
Simon Kelley834f36f2013-04-17 13:52:49 +0100148 Update the French translation. Thanks to Gildas le Nadan.
149
Simon Kelley49333cb2013-03-15 20:30:51 +0000150
Simon Kelleyee86ce62012-12-07 11:54:46 +0000151version 2.65
152 Fix regression which broke forwarding of queries sent via
153 TCP which are not for A and AAAA and which were directed to
154 non-default servers. Thanks to Niax for the bug report.
155
Simon Kelleyb5a8dd12012-12-10 11:37:25 +0000156 Fix failure to build with DHCP support excluded. Thanks to
157 Gustavo Zacarias for the patch.
Simon Kelley1d6c6392012-12-14 11:19:36 +0000158
159 Fix nasty regression in 2.64 which completely broke cacheing.
Simon Kelleyb5a8dd12012-12-10 11:37:25 +0000160
161
Simon Kelley2e34ac12012-08-29 14:15:25 +0100162version 2.64
163 Handle DHCP FQDN options with all flag bits zero and
164 --dhcp-client-update set. Thanks to Bernd Krumbroeck for
165 spotting the problem.
166
Simon Kelley12d71ed2012-08-30 15:16:41 +0100167 Finesse the check for /etc/hosts names which conflict with
168 DHCP names. Previously a name/address pair in /etc/hosts
169 which didn't match the name/address of a DHCP lease would
170 generate a warning. Now that only happesn if there is not
171 also a match. This allows multiple addresses for a name in
172 /etc/hosts with one of them assigned via DHCP.
173
Simon Kelley4d0f5b42012-09-05 23:29:30 +0100174 Fix broken vendor-option processing for BOOTP. Thanks to
175 Hans-Joachim Baader for the bug report.
176
Simon Kelleydfb23b32012-09-18 21:44:47 +0100177 Don't report spurious netlink errors, regression in
178 2.63. Thanks to Vladislav Grishenko for the patch.
179
Simon Kelley2b127a12012-09-18 21:51:22 +0100180 Flag DHCP or DHCPv6 in starup logging. Thanks to
181 Vladislav Grishenko for the patch.
182
Simon Kelley295a54e2012-12-01 21:02:15 +0000183 Add SetServersEx method in DBus interface. Thanks to Dan
Simon Kelleyfaafb3f2012-09-20 14:17:39 +0100184 Williams for the patch.
185
Simon Kelley295a54e2012-12-01 21:02:15 +0000186 Add SetDomainServers method in DBus interface. Thanks to
187 Roy Marples for the patch.
188
Simon Kelley289a2532012-09-20 15:29:35 +0100189 Fix build with later Lua libraries. Thansk to Cristian
190 Rodriguez for the patch.
Simon Kelley2e34ac12012-08-29 14:15:25 +0100191
Simon Kelley1d860412012-09-20 20:48:04 +0100192 Add --max-cache-ttl option. Thanks to Dennis Kaarsemaker
193 for the patch.
194
Simon Kelleye4807d82012-09-27 21:52:26 +0100195 Fix breakage of --host-record parsing, resulting in
196 infinte loop at startup. Regression in 2.63. Thanks to
197 Haim Gelfenbeyn for spotting this.
198
Simon Kelley20223102012-10-15 10:41:17 +0100199 Set SO_REUSEADDRESS and SO_V6ONLY options on the DHCPv6
200 socket, this allows multiple instances of dnsmasq on a
201 single machine, in the same way as for DHCPv4. Thanks to
202 Gene Czarcinski and Vladislav Grishenko for work on this.
203
Simon Kelleybe6cfb42012-10-16 20:38:31 +0100204 Fix DHCPv6 to do access control correctly when it's
205 configured with --listen-address. Thanks to
206 Gene Czarcinski for sorting this out.
207
Simon Kelley819ff4d2012-10-21 18:25:12 +0100208 Add a "wildcard" dhcp-range which works for any IPv6
209 subnet, --dhcp-range=::,static Useful for Stateless
210 DHCPv6. Thanks to Vladislav Grishenko for the patch.
211
Simon Kelleyd1a59752012-11-05 16:50:30 +0000212 Don't include lease-time in DHCPACK replies to DHCPINFORM
213 queries, since RFC-2131 says we shouldn't. Thanks to
214 Wouter Ibens for pointing this out.
Simon Kelley8e4b8792012-11-14 14:12:56 +0000215
216 Makefile tweak to do dependency checking on header files.
217 Thanks to Johan Peeters for the patch.
Simon Kelleyd89fb4e2012-12-01 21:21:13 +0000218
219 Check interface for outgoing unsolicited router
220 advertisements, rather than relying on interface address
221 configuration. Thanks to Gene Czarinski for the patch.
Simon Kelley29d28dd2012-12-03 14:05:59 +0000222
223 Handle better attempts to transmit on interfaces which are
224 still doing DAD, and specifically do not just transmit
225 without setting source address and interface, since this
226 can cause very puzzling effects when a router
227 advertisement goes astray. Thanks again to Gene Czarinski.
228
229 Get RA timers right when there is more than one
230 dhcp-range on a subnet.
Simon Kelley289a2532012-09-20 15:29:35 +0100231
Simon Kelleyd1a59752012-11-05 16:50:30 +0000232
Simon Kelley078a6302012-06-07 13:56:23 +0100233version 2.63
234 Do duplicate dhcp-host address check in --test mode.
235
Simon Kelley8b3ae2f2012-06-13 13:43:49 +0100236 Check that tftp-root directories are accessible before
237 start-up. Thanks to Daniel Veillard for the initial patch.
238
239 Allow more than one --tfp-root flag. The per-interface
240 stuff is pointless without that.
241
Simon Kelley54dd3932012-06-20 11:23:38 +0100242 Add --bind-dynamic. A hybrid mode between the default and
243 --bind-interfaces which copes with dynamically created
244 interfaces.
Simon Kelley6b617c02012-06-29 21:15:42 +0100245
246 A couple of fixes to the build system for Android. Thanks
247 to Metin Kaya for the patches.
Simon Kelley54dd3932012-06-20 11:23:38 +0100248
Simon Kelley8bc4cec2012-07-03 21:04:11 +0100249 Remove the interface:<interface> argument in --dhcp-range, and
250 the interface argument to --enable-tftp. These were a
251 still-born attempt to allow automatic isolated
252 configuration by libvirt, but have never (to my knowledge)
253 been used, had very strange semantics, and have been
254 superceded by other mechanisms.
255
Simon Kelleyc4a7f902012-07-12 20:52:12 +0100256 Fixed bug logging filenames when duplicate dhcp-host
257 addresses are found. Thanks to John Hanks for the patch.
258
Simon Kelley611ebc52012-07-16 16:23:46 +0100259 Fix regression in 2.61 which broke caching of CNAME
260 chains. Thanks to Atul Gupta for the bug report.
261
Simon Kelleyb2714462012-07-17 12:09:26 +0100262 Allow the target of a --cname flag to be another --cname.
Simon Kelley611ebc52012-07-16 16:23:46 +0100263
Simon Kelley42243212012-07-20 15:19:18 +0100264 Teach DHCPv6 about the RFC 4242 information-refresh-time
265 option, and add parsing if the minutes, hours and days
266 format for options. Thanks to Francois-Xavier Le Bail for
267 the suggestion.
268
269 Allow "w" (for week) as multiplier in lease times, as well
270 as seconds, minutes, hours and days. Álvaro Gámez Machado
271 spotted the ommission.
Simon Kelleyc4c04882012-08-06 20:09:15 +0100272
273 Update French translation. Thanks to Gildas Le Nadan.
Simon Kelley42243212012-07-20 15:19:18 +0100274
Simon Kelleyad094272012-08-10 17:10:54 +0100275 Allow a DBus service name to be given with --enable-dbus
276 which overrides the default,
277 uk.org.thekelleys.dnsmasq. Thanks to Mathieu
278 Trudel-Lapierre for the patch.
279
Simon Kelleyfd05f122012-08-12 17:48:50 +0100280 Set the "prefix on-link" bit in Router
281 Advertisements. Thanks to Gui Iribarren for the patch.
282
Simon Kelley078a6302012-06-07 13:56:23 +0100283
Simon Kelley8358e0f2012-04-29 21:53:09 +0100284version 2.62
285 Update German translation. Thanks to Conrad Kostecki.
286
Simon Kelleyf632e562012-05-12 15:05:34 +0100287 Cope with router-solict packets wich don't have a valid
288 source address. Thanks to Vladislav Grishenko for the patch.
289
Simon Kelley919dd7c2012-05-12 15:23:09 +0100290 Fixed bug which caused missing periodic router
291 advertisements with some configurations. Thanks to
292 Vladislav Grishenko for the patch.
293
Simon Kelleyc64b7f62012-05-18 10:19:59 +0100294 Fixed bug which broke DHCPv6/RA with prefix lengths
295 which are not divisible by 8. Thanks to Andre Coetzee
296 for spotting this.
297
Simon Kelley18c63ef2012-05-21 14:34:15 +0100298 Fix non-response to router-solicitations when
299 router-advertisement configured, but DHCPv6 not
300 configured. Thanks to Marien Zwart for the patch.
301
Simon Kelley9f7f3b12012-05-28 21:39:57 +0100302 Add --dns-rr, to allow arbitrary DNS resource records.
303
Simon Kelley5ae34bf2012-06-04 21:14:03 +0100304 Fixed bug which broke RA scheduling when an interface had
305 two addresses in the same network. Thanks to Jim Bos for
306 his help nailing this.
307
Simon Kelleyeabc6dd2012-03-07 20:28:20 +0000308version 2.61
309 Re-write interface discovery code on *BSD to use
310 getifaddrs. This is more portable, more straightforward,
311 and allows us to find the prefix length for IPv6
312 addresses.
313
Simon Kelley01d1b8d2012-03-28 21:37:25 +0100314 Add ra-names, ra-stateless and slaac keywords for DHCPv6.
315 Dnsmasq can now synthesise AAAA records for dual-stack
316 hosts which get IPv6 addresses via SLAAC. It is also now
317 possible to use SLAAC and stateless DHCPv6, and to
318 tell clients to use SLAAC addresses as well as DHCP ones.
319 Thanks to Dave Taht for help with this.
Simon Kelley7023e382012-03-09 12:05:49 +0000320
Simon Kelley8b372702012-03-09 17:45:10 +0000321 Add --dhcp-duid to allow DUID-EN uids to be used.
322
Simon Kelley8643ec72012-03-12 20:04:14 +0000323 Explicity send DHCPv6 replies to the correct port, instead
324 of relying on clients to send requests with the correct
325 source address, since at least one client in the wild gets
Simon Kelley8358e0f2012-04-29 21:53:09 +0100326 this wrong. Thanks to Conrad Kostecki for help tracking
Simon Kelley8643ec72012-03-12 20:04:14 +0000327 this down.
Simon Kelleyeabc6dd2012-03-07 20:28:20 +0000328
Simon Kelley8643ec72012-03-12 20:04:14 +0000329 Send a preference value of 255 in DHCPv6 replies when
330 --dhcp-authoritative is in effect. This tells clients not
331 to wait around for other DHCP servers.
332
333 Better logging of DHCPv6 options.
334
Simon Kelleye759d422012-03-16 13:18:57 +0000335 Add --host-record. Thanks to Rob Zwissler for the
336 suggestion.
337
Simon Kelleya9530962012-03-20 22:07:35 +0000338 Invoke the DHCP script with action "tftp" when a TFTP file
339 transfer completes. The size of the file, address to which
340 it was sent and complete pathname are supplied. Note that
341 version 2.60 introduced some script incompatibilties
342 associated with DHCPv6, and this is a further change. To
343 be safe, scripts should ignore unknown actions, and if
344 not IPv6-aware, should exit if the environment
345 variable DNSMASQ_IAID is set. The use-case for this is
346 to track netboot/install. Suggestion from Shantanu
347 Gadgil.
348
349 Update contrib/port-forward/dnsmasq-portforward to reflect
350 the above.
351
352 Set the environment variable DNSMASQ_LOG_DHCP when running
353 the script id --log-dhcp is in effect, so that script can
Simon Kelley52d4abf2012-03-21 21:39:48 +0000354 taylor their logging verbosity. Suggestion from Malte
355 Forkel.
356
357 Arrange that addresses specified with --listen-address
358 work even if there is no interface carrying the
359 address. This is chiefly useful for IPv4 loopback
360 addresses, where any address in 127.0.0.0/8 is a valid
361 loopback address, but normally only 127.0.0.1 appears on
362 the lo interface. Thanks to Mathieu Trudel-Lapierre for
363 the idea and initial patch.
Simon Kelleya9530962012-03-20 22:07:35 +0000364
Simon Kelley7d2b5c92012-03-23 10:00:02 +0000365 Fix crash, introduced in 2.60, when a DHCPINFORM is
366 received from a network which has no valid dhcp-range.
367 Thanks to Stephane Glondu for the bug report.
368
Simon Kelleyc8257542012-03-28 21:15:41 +0100369 Add a new DHCP lease time keyword, "deprecated" for
370 --dhcp-range. This is only valid for IPv6, and sets the
371 preffered lease time for both DHCP and RA to zero. The
372 effect is that clients can continue to use the address
373 for existing connections, but new connections will use
374 other addresses, if they exist. This makes hitless
375 renumbering at least possible.
376
377 Fix bug in address6_available() which caused DHCPv6 lease
Simon Kelley8358e0f2012-04-29 21:53:09 +0100378 aquisition to fail if more than one dhcp-range in use.
Simon Kelley18f0fb02012-03-31 21:18:55 +0100379
380 Provide RDNSS and DNSSL data in router advertisements,
381 using the settings provided for DHCP options
382 option6:domain-search and option6:dns-server.
Simon Kelley6c559c32012-04-02 20:40:34 +0100383
384 Tweak logo/favicon.ico to add some transparency. Thanks to
385 SamLT for work on this.
Simon Kelleyc8257542012-03-28 21:15:41 +0100386
Simon Kelley1023dcb2012-04-09 18:00:08 +0100387 Don't cache data from non-recursive nameservers, since it
388 may erroneously look like a valid CNAME to a non-exitant
389 name. Thanks to Ben Winslow for finding this.
Simon Kelley9380ba72012-04-16 14:41:56 +0100390
391 Call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP
Simon Kelley8358e0f2012-04-29 21:53:09 +0100392 on exactly one interface and --bind-interfaces is set. This
Simon Kelley9380ba72012-04-16 14:41:56 +0100393 makes the OpenStack use-case of one dnsmasq per virtual
394 interface work. This is only available on Linux; it's not
395 supported on other platforms. Thanks to Vishvananda Ishaya
Simon Kelleye46164e2012-04-16 16:39:38 +0100396 and the OpenStack team for the suggestion.
397
398 Updated French translation. Thanks to Gildas Le Nadan.
Simon Kelleyd1c759c2012-04-16 17:26:19 +0100399
400 Give correct from-cache answers to explict CNAME queries.
401 Thanks to Rob Zwissler for spotting this.
Simon Kelley1023dcb2012-04-09 18:00:08 +0100402
Simon Kelleyfc92ead2012-04-22 21:28:24 +0100403 Add --tftp-lowercase option. Thanks to Oliver Rath for the
Simon Kelley61ce6002012-04-20 21:28:49 +0100404 patch.
Simon Kelleydcffad22012-04-24 15:25:18 +0100405
406 Ensure that the DBus DhcpLeaseUpdated events are generated
407 when a lease goes through INIT_REBOOT state, even if the
Simon Kelley8358e0f2012-04-29 21:53:09 +0100408 dhcp-script is not in use. Thanks to Antoaneta-Ecaterina
Simon Kelleydcffad22012-04-24 15:25:18 +0100409 Ene for the patch.
Simon Kelley19d69be2012-04-27 10:14:34 +0100410
411 Fix failure of TFTP over IPv4 on OpenBSD platform. Thanks
412 to Brad Smith for spotting this.
Simon Kelley61ce6002012-04-20 21:28:49 +0100413
Simon Kelleyc8257542012-03-28 21:15:41 +0100414
Simon Kelleyc72daea2012-01-05 21:33:27 +0000415version 2.60
416 Fix compilation problem in Mac OS X Lion. Thanks to Olaf
417 Flebbe for the patch.
Simon Kelley74c95c22011-10-19 09:33:39 +0100418
Simon Kelleyc72daea2012-01-05 21:33:27 +0000419 Fix DHCP when using --listen-address with an IP address
420 which is not the primary address of an interface.
421
422 Add --dhcp-client-update option.
423
424 Add Lua integration. Dnsmasq can now execute a DHCP
425 lease-change script written in Lua. This needs to be
426 enabled at compile time by setting HAVE_LUASCRIPT in
427 src/config.h or running "make COPTS=-DHAVE_LUASCRIPT"
428 Thanks to Jan-Piet Mens for the idea and proof-of-concept
429 implementation.
430
431 Tidied src/config.h to distinguish between
432 platform-dependent compile-time options which are selected
433 automatically, and builder-selectable compile time
434 options. Document the latter better, and describe how to
435 set them from the make command line.
436
437 Tidied up IPPROTO_IP/SOL_IP (and IPv6 equivalent)
438 confusion. IPPROTO_IP works everywhere now.
439
440 Set TOS on DHCP sockets, this improves things on busy
441 wireless networks. Thanks to Dave Taht for the patch.
442
Simon Kelley984d2fd2012-01-06 14:34:32 +0000443 Determine VERSION automatically based on git magic:
444 release tags or hash values.
Simon Kelleyc72daea2012-01-05 21:33:27 +0000445
Simon Kelleya2761752012-01-18 16:07:21 +0000446 Improve start-up speed when reading large hosts files
447 containing many distinct addresses.
448
449 Fix problem if dnsmasq is started without the stdin,
450 stdout and stderr file descriptors open. This can manifest
451 itself as 100% CPU use. Thanks to Chris Moore for finding
452 this.
453
Simon Kelley9bbc8872012-02-09 21:33:09 +0000454 Fix shell-scripting bug in bld/pkg-wrapper. Thanks to
455 Mark Mitchell for the patch.
456
Simon Kelley751d6f42012-02-10 15:24:51 +0000457 Allow the TFP server or boot server in --pxe-service, to
458 be a domain name instead of an IP address. This allows for
459 round-robin to multiple servers, in the same way as
460 --dhcp-boot. A good suggestion from Cristiano Cumer.
461
Simon Kelleyfdacfb02012-02-28 15:20:25 +0000462 Support BUILDDIR variable in the Makefile. Allows builds
463 for multiple archs from the same source tree with eg.
464 make BUILDDIR=linux (relative to dnsmasq tree)
465 make BUILDDIR=/tmp/openbsd (absolute path)
Simon Kelleye5ffdb92012-02-13 14:19:25 +0000466 If BUILDDIR is not set, compilation happens in the src
Simon Kelleyb36ae192012-02-13 12:54:34 +0000467 directory, as before. Suggestion from Mark Mitchell.
468
Simon Kelleyfdacfb02012-02-28 15:20:25 +0000469 Support DHCPv6. Support is there for the sort of things
470 the existing v4 server does, including tags, options,
471 static addresses and relay support. Missing is prefix
472 delegation, which is probably not required in the dnsmasq
473 niche, and an easy way to accept prefix delegations from
474 an upstream DHCPv6 server, which is. Future plans include
475 support for DHCPv6 router option and MAC address option
476 (to make selecting clients by MAC address work like IPv4).
477 These will be added as the standards mature.
478 This code has been tested, but this is the first release,
479 so don't bet the farm on it just yet. Many thanks to all
480 testers who have got it this far.
Simon Kelley1adadf52012-02-13 22:15:58 +0000481
Simon Kelleyac8540c2012-02-26 20:57:31 +0000482 Support IPv6 router advertisements. This is a
483 simple-minded implementation, aimed at providing the
484 vestigial RA needed to go alongside IPv6. Is picks up
485 configuration from the DHCPv6 conf, and should just need
486 enabling with --enable-ra.
487
Simon Kelley552af8b2012-02-29 20:10:31 +0000488 Fix long-standing wrinkle with --localise-queries that
489 could result in wrong answers when DNS packets arrive
490 via an interface other than the expected one. Thanks to
491 Lorenzo Milesi and John Hanks for spotting this one.
Simon Kelley71ee7ee2012-03-03 18:06:49 +0000492
493 Update French translation. Thanks to Gildas Le Nadan.
Simon Kelley552af8b2012-02-29 20:10:31 +0000494
Simon Kelleydf66e342012-03-04 20:04:22 +0000495 Update Polish translation. Thanks to Jan Psota.
496
497
Simon Kelleyc72daea2012-01-05 21:33:27 +0000498version 2.59
499 Fix regression in 2.58 which caused failure to start up
500 with some combinations of dnsmasq config and IPv6 kernel
501 network config. Thanks to Brielle Bruns for the bug
502 report.
503
504 Improve dnsmasq's behaviour when network interfaces are
505 still doing duplicate address detection (DAD). Previously,
506 dnsmasq would wait up to 20 seconds at start-up for the
507 DAD state to terminate. This is broken for bridge
508 interfaces on recent Linux kernels, which don't start DAD
509 until the bridge comes up, and so can take arbitrary
510 time. The new behaviour lets dnsmasq poll for an arbitrary
511 time whilst providing service on other interfaces. Thanks
512 to Stephen Hemminger for pointing out the problem.
Simon Kelley74c95c22011-10-19 09:33:39 +0100513
514
Simon Kelley7de060b2011-08-26 17:24:52 +0100515version 2.58
516 Provide a definition of the SA_SIZE macro where it's
517 missing. Fixes build failure on openBSD.
518
519 Don't include a zero terminator at the end of messages
520 sent to /dev/log when /dev/log is a datagram socket.
521 Thanks to Didier Rabound for spotting the problem.
522
523 Add --dhcp-sequential-ip flag, to force allocation of IP
524 addresses in ascending order. Note that the default
525 pseudo-random mode is in general better but some
526 server-deployment applications need this.
527
528 Fix problem where a server-id of 0.0.0.0 is sent to a
529 client when a dhcp-relay is in use if a client renews a
530 lease after dnsmasq restart and before any clients on the
531 subnet get a new lease. Thanks to Mike Ruiz for assistance
532 in chasing this one down.
533
534 Don't return NXDOMAIN to an AAAA query if we have CNAME
535 which points to an A record only: NODATA is the correct
536 reply in this case. Thanks to Tom Fernandes for spotting
537 the problem.
538
539 Relax the need to supply a netmask in --dhcp-range for
540 networks which use a DHCP relay. Whilst this is still
541 desireable, in the absence of a netmask dnsmasq will use
542 a default based on the class (A, B, or C) of the address.
543 This should at least remove a cause of mysterious failure
544 for people using RFC1918 addresses and relays.
545
546 Add support for Linux conntrack connection marking. If
547 enabled with --conntrack, the connection mark for incoming
548 DNS queries will be copied to the outgoing connections
549 used to answer those queries. This allows clever firewall
550 and accounting stuff. Only available if dnsmasq is
551 compiled with HAVE_CONNTRACK and adds a dependency on
552 libnetfilter-conntrack. Thanks to Ed Wildgoose for the
553 initial idea, testing and sponsorship of this function.
554
555 Provide a sane error message when someone attempts to
556 match a tag in --dhcp-host.
557
558 Tweak the behaviour of --domain-needed, to avoid problems
559 with recursive nameservers downstream of dnsmasq. The new
560 behaviour only stops A and AAAA queries, and returns
561 NODATA rather than NXDOMAIN replies.
562
563 Efficiency fix for very large DHCP configurations, thanks
564 to James Gartrell and Mike Ruiz for help with this.
565
566 Allow the TFTP-server address in --dhcp-boot to be a
567 domain-name which is looked up in /etc/hosts. This can
568 give multiple IP addresses which are used round-robin,
569 thus doing TFTP server load-balancing. Thanks to Sushil
570 Agrawal for the patch.
571
572 When two tagged dhcp-options for a particular option
573 number are both valid, use the one which is valid without
574 a tag from the dhcp-range. Allows overriding of the value
575 of a DHCP option for a particular host as well as
576 per-network values. So
577 --dhcp-range=set:interface1,......
578 --dhcp-host=set:myhost,.....
579 --dhcp-option=tag:interface1,option:nis-domain,"domain1"
580 --dhcp-option=tag:myhost,option:nis-domain,"domain2"
581 will set the NIS-domain to domain1 for hosts in the range, but
582 override that to domain2 for a particular host.
583
584 Fix bug which resulted in truncated files and timeouts for
585 some TFTP transfers. The bug only occurs with netascii
586 transfers and needs an unfortunate relationship between
587 file size, blocksize and the number of newlines in the
588 last block before it manifests itself. Many thanks to
589 Alkis Georgopoulos for spotting the problem and providing
590 a comprehensive test-case.
591
592 Fix regression in TFTP server on *BSD platforms introduced
593 in version 2.56, due to confusion with sockaddr
Simon Kelleyde604c12012-10-19 09:50:01 +0100594 length. Many thanks to Loic Pefferkorn for finding this.
Simon Kelley7de060b2011-08-26 17:24:52 +0100595
596 Support scope-ids in IPv6 addresses of nameservers from
597 /etc/resolv.conf and in --server options. Eg
598 nameserver fe80::202:a412:4512:7bbf%eth0 or
599 server=fe80::202:a412:4512:7bbf%eth0. Thanks to
600 Michael Stapelberg for the suggestion.
601
602 Update Polish translation, thanks to Jan Psota.
603
604 Update French translation. Thanks to Gildas Le Nadan.
605
606
Simon Kelley572b41e2011-02-18 18:11:18 +0000607version 2.57
608 Add patches to allow build under Android.
609
610 Provide our own header for the DNS protocol, rather than
611 relying on arpa/nameser.h. This has proved more or less
612 defective over the years and the final straw is that it's
613 effectively empty on Android.
614
615 Fix regression in 2.56 which caused hex constants in
616 configuration to be rejected if they contain the '*'
617 wildcard.
618
619 Correct wrong casts of arguments to ctype.h functions,
620 isdigit(), isxdigit() etc. Thanks to Matthias Andree for
621 spotting this.
622
623 Allow build with IDN support independently from i18n.
624 IDN support continues to be included automatically
625 when i18n is included.
626 'make COPTS=-DHAVE_IDN' is the magic incantation.
627
628 Modify check on extraneous command line junk (added in
629 2.56) so that it doesn't complain about extra _empty_
630 arguments. Otherwise this breaks libvirt.
631
632
Simon Kelley28866e92011-02-14 20:19:14 +0000633version 2.56
634 Add a patch to allow dnsmasq to get interface names right in a
635 Solaris zone. Thanks to Dj Padzensky for this.
636
637 Improve data-type parsing heuristics so that
638 --dhcp-option=option:domain-search,.
639 treats the value as a string and not an IP address.
640 Thanks to Clemens Fischer for spotting that.
641
642 Add IPv6 support to the TFTP server. Many thanks to Jan
643 'RedBully' Seiffert for the patches.
644
645 Log DNS queries at level LOG_INFO, rather then
646 LOG_DEBUG. This makes things consistent with DHCP
647 logging. Thanks to Adam Pribyl for spotting the problem.
648
649 Ensure that dnsmasq terminates cleanly when using
650 --syslog-async even if it cannot make a connection to the
651 syslogd.
652
653 Add --add-mac option. This is to support currently
654 experimental DNS filtering facilities. Thanks to Benjamin
655 Petrin for the orignal patch.
656
657 Fix bug which meant that tags were ignored in dhcp-range
658 configuration specifying PXE-proxy service. Thanks to
659 Cristiano Cumer for spotting this.
660
661 Raise an error if there is extra junk, not part of an
662 option, on the command line.
663
664 Flag a couple of log messages in cache.c as coming from
665 the DHCP subsystem. Thanks to Olaf Westrik for the patch.
666
667 Omit timestamps from logs when a) logging to stderr and
668 b) --keep-in-forground is set. The logging facility on the
669 other end of stderr can be assumned to supply them. Thanks
670 to John Hallam for the patch.
671
672 Don't complain about strings longer than 255 characters in
673 --txt-record, just split the long strings into 255
674 character chunks instead.
675
676 Fix crash on double-free. This bug can only happen when
677 dhcp-script is in use and then only in rare circumstances
678 triggered by high DHCP transaction rate and a slow
679 script. Thanks to Ferenc Wagner for finding the problem.
680
681 Only log that a file has been sent by TFTP after the
682 transfer has completed succesfully.
683
684 A good suggestion from Ferenc Wagner: extend
685 the --domain option to allow this sort of thing:
686 --domain=thekelleys.org.uk,192.168.0.0/24,local
687 which automatically creates
688 --local=/thekelleys.org.uk/
689 --local=/0.168.192.in-addr.arpa/
690
691 Tighten up syntax checking of hex contants in the config
692 file. Thanks to Fred Damen for spotting this.
693
694 Add dnsmasq logo/icon, contributed by Justin Swift. Many
695 thanks for that.
696
697 Never cache DNS replies which have the 'cd' bit set, or
698 which result from queries forwarded with the 'cd' bit
699 set. The 'cd' bit instructs a DNSSEC validating server
700 upstream to ignore signature failures and return replies
701 anyway. Without this change it's possible to pollute the
702 dnsmasq cache with bad data by making a query with the
703 'cd' bit set and subsequent queries would return this data
704 without its being marked as suspect. Thanks to Anders
705 Kaseorg for pointing out this problem.
706
707 Add --proxy-dnssec flag, for compliance with RFC
708 4035. Dnsmasq will now clear the 'ad' bit in answers returned
709 from upstream validating nameservers unless this option is
710 set.
711
712 Allow a filename of "-" for --conf-file to read
713 stdin. Suggestion from Timothy Redaelli.
714
715 Rotate the order of SRV records in replies, to provide
716 round-robin load balancing when all the priorities are
717 equal. Thanks to Peter McKinney for the suggestion.
718
719 Edit
720 contrib/MacOSX-launchd/uk.org.thekelleys.dnsmasq.plist
721 so that it doesn't log all queries to a file by
722 default. Thanks again to Peter McKinney.
723
724 By default, setting an IPv4 address for a domain but not
725 an IPv6 address causes dnsmasq to return
726 an NODATA reply for IPv6 (or vice-versa). So
727 --address=/google.com/1.2.3.4 stops IPv6 queries for
728 *google.com from being forwarded. Make it possible to
729 override this behaviour by defining the sematics if the
730 same domain appears in both --server and --address.
731 In that case, the --address has priority for the address
732 family in which is appears, but the --server has priority
733 of the address family which doesn't appear in --adddress
734 So:
735 --address=/google.com/1.2.3.4
736 --server=/google.com/#
737 will return 1.2.3.4 for IPv4 queries for *.google.com but
738 forward IPv6 queries to the normal upstream nameserver.
739 Similarly when setting an IPv6 address
740 only this will allow forwarding of IPv4 queries. Thanks to
741 William for pointing out the need for this.
742
743 Allow more than one --dhcp-optsfile and --dhcp-hostsfile
744 and make them understand directories as arguments in the
745 same way as --addn-hosts. Suggestion from John Hanks.
746
747 Ignore rebinding requests for leases we don't know
748 about. Rebind is broadcast, so we might get to overhear a
749 request meant for another DHCP server. NAKing this is
750 wrong. Thanks to Brad D'Hondt for assistance with this.
751
Simon Kelley572b41e2011-02-18 18:11:18 +0000752 Fix cosmetic bug which produced strange output when
753 dumping cache statistics with some configurations. Thanks
754 to Fedor Kozhevnikov for spotting this.
Simon Kelley28866e92011-02-14 20:19:14 +0000755
756
Simon Kelleyc52e1892010-06-07 22:01:39 +0100757version 2.55
Simon Kelley28866e92011-02-14 20:19:14 +0000758 Fix crash when /etc/ethers is in use. Thanks to
759 Gianluigi Tiesi for finding this.
Simon Kelleyc52e1892010-06-07 22:01:39 +0100760
Simon Kelley28866e92011-02-14 20:19:14 +0000761 Fix crash in netlink_multicast(). Thanks to Arno Wald for
762 finding this one.
Simon Kelleyc52e1892010-06-07 22:01:39 +0100763
Simon Kelley28866e92011-02-14 20:19:14 +0000764 Allow the empty domain "." in dhcp domain-search (119)
765 options.
Simon Kelleyc52e1892010-06-07 22:01:39 +0100766
767
768version 2.54
Simon Kelley28866e92011-02-14 20:19:14 +0000769 There is no version 2.54 to avoid confusion with 2.53,
770 which incorrectly identifies itself as 2.54.
Simon Kelleyc52e1892010-06-07 22:01:39 +0100771
772
Simon Kelley8ef5ada2010-06-03 19:42:45 +0100773version 2.53
774 Fix failure to compile on Debian/kFreeBSD. Thanks to
775 Axel Beckert and Petr Salinger.
776
777 Fix code to avoid scary strict-aliasing warnings
778 generated by gcc 4.4.
779
780 Added FAQ entry warning about DHCP failures with Vista
781 when firewalls block 255.255.255.255.
782
783 Fixed bug which caused bad things to happen if a
784 resolv.conf file which exists is subsequently removed.
785 Thanks to Nikolai Saoukh for the patch.
786
787 Rationalised the DHCP tag system. Every configuration item
788 which can set a tag does so by adding "set:<tag>" and
789 every configuration item which is conditional on a tag is
790 made so by "tag:<tag>". The NOT operator changes to '!',
791 which is a bit more intuitive too. Dhcp-host directives
792 can set more than one tag now. The old '#' NOT,
793 "net:" prefix and no-prefixes are still honoured, so
794 no existing config file needs to be changed, but
795 the documentation and new-style config files should be
796 much less confusing.
797
798 Added --tag-if to allow boolean operations on tags.
799 This allows complicated logic to be clearer and more
800 general. A great suggestion from Richard Voigt.
801
802 Add broadcast/unicast information to DHCP logging.
803
804 Allow --dhcp-broadcast to be unconditional.
805
806 Fixed incorrect behaviour with NOT <tag> conditionals in
807 dhcp-options. Thanks to Max Turkewitz for assistance
808 finding this.
809
810 If we send vendor-class encapsulated options based on the
811 vendor-class supplied by the client, and no explicit
812 vendor-class option is given, echo back the vendor-class
813 from the client.
814
815 Fix bug which stopped dnsmasq from matching both a
816 circuitid and a remoteid. Thanks to Ignacio Bravo for
817 finding this.
818
819 Add --dhcp-proxy, which makes it possible to configure
820 dnsmasq to use a DHCP relay agent as a full proxy, with
821 all DHCP messages passing through the proxy. This is
822 useful if the relay adds extra information to the packets
823 it forwards, but cannot be configured with the RFC 5107
824 server-override option.
825
826 Added interface:<iface name> part to dhcp-range. The
827 semantics of this are very odd at first sight, but it
828 allows a single line of the form
829 dhcp-range=interface:virt0,192.168.0.4,192.168.0.200
830 to be added to dnsmasq configuration which then supplies
831 DHCP and DNS services to that interface, without affecting
832 what services are supplied to other interfaces and
833 irrespective of the existance or lack of
834 interface=<interface>
835 lines elsewhere in the dnsmasq configuration. The idea is
836 that such a line can be added automatically by libvirt
837 or equivalent systems, without disturbing any manual
838 configuration.
839
840 Similarly to the above, allow --enable-tftp=<interface>
841
842 Allow a TFTP root to be set separately for requests via
843 different interfaces, --tftp-root=<path>,<interface>
844
845 Correctly handle and log clashes between CNAMES and
846 DNS names being given to DHCP leases. This fixes a bug
847 which caused nonsense IP addresses to be logged. Thanks to
848 Sergei Zhirikov for finding and analysing the problem.
849
850 Tweak flush_log so as to avoid leaving the log
851 file in non-blocking mode. O_NONBLOCK is a property of the
852 file, not the process/descriptor.
853
854 Fix contrib/Solaris10/create_package
855 (/usr/man -> /usr/share/man) Thanks to Vita Batrla.
856
857 Fix a problem where, if a client got a lease, then went
858 to another subnet and got another lease, then moved back,
859 it couldn't resume the old lease, but would instead get
860 a new address. Thanks to Leonardo Rodrigues for spotting
861 this and testing the fix.
862
863 Fix weird bug which sometimes omitted certain characters
864 from the start of quoted strings in dhcp-options. Thanks
865 to Dayton Turner for spotting the problem.
866
867 Add facility to redirect some domains to the standard
868 upstream servers: this allows something like
869 --server=/google.com/1.2.3.4 --server=/www.google.com/#
870 which will send queries for *.google.com to 1.2.3.4,
871 except *www.google.com which will be forwarded as usual.
872 Thanks to AJ Weber for prompting this addition.
873
874 Improve the hash-algorithm used to generate IP addresses
875 from MAC addresses during initial DHCP address
876 allocation. This improves performance when large numbers
877 of hosts with similar MAC addresses all try and get an IP
878 address at the same time. Thanks to Paul Smith for his
879 work on this.
880
881 Tweak DHCP code so that --bridge-interface can be used to
882 select which IP alias of an interface should be used for
883 DHCP purposes on Linux. If eth0 has an alias eth0:dhcp
884 then adding --bridge-interface=eth0:dhcp,eth0 will use
885 the address of eth0:dhcp to determine the correct subnet
886 for DHCP address allocation. Thanks to Pawel Golaszewski
887 for prompting this and Eric Cooper for further testing.
888
889 Add --dhcp-generate-names. Suggestion by Ferenc Wagner.
890
891 Tweak DNS server selection algorithm when there is more
892 than one server available for a domain, eg.
893 --server=/mydomain/1.1.1.1
894 --server=/mydomain/2.2.2.2
895 Thanks to Alberto Cuesta-Canada for spotting a weakness
896 here.
897
898 Add --max-ttl. Thanks to Fredrik Ringertz for the patch.
899
900 Allow --log-facility=- to force all logging to
901 stderr. Suggestion from Clemens Fischer.
902
903 Fix regression which caused configuration like
904 --address=/.domain.com/1.2.3.4 to be rejected. The dot to the
905 left of the domain has been implied and not required for a
906 long time, but it should be accepted for backward
907 compatibility. Thanks to Andrew Burcin for spotting this.
908
909 Add --rebind-domain-ok and --rebind-localhost-ok.
910 Suggestion from Clemens Fischer.
911
912 Log replies to queries of type TXT, when --log-queries
913 is set.
914
915 Fix compiler warnings when compiled with -DNO_DHCP. Thanks
916 to Shantanu Gadgil for the patch.
917
918 Updated French translation. Thanks to Gildas Le Nadan.
919
920 Updated Polish translation. Thanks to Jan Psota.
921
922 Updated German translation. Thanks to Matthias Andree.
923
924 Added contrib/static-arp, thanks to Darren Hoo.
925
926 Fix corruption of the domain when a name from /etc/hosts
927 overrides one supplied by a DHCP client. Thanks to Fedor
928 Kozhevnikov for spotting the problem.
929
930 Updated Spanish translation. Thanks to Chris Chatham.
931
932
Simon Kelley316e2732010-01-22 20:16:09 +0000933version 2.52
934 Work around a Linux kernel bug which insists that the
935 length of the option passed to setsockopt must be at least
936 sizeof(int) bytes, even if we're calling SO_BINDTODEVICE
937 and the device name is "lo". Note that this is fixed
938 in kernel 2.6.31, but the workaround is harmless and
939 allows earlier kernels to be used. Also fix dnsmasq
940 bug which reported the wrong address when this failed.
941 Thanks to Fedor for finding this.
942
943 The API for IPv6 PKTINFO changed around Linux kernel
944 2.6.14. Workaround the case where dnsmasq is compiled
945 against newer headers, but then run on an old kernel:
946 necessary for some *WRT distros.
947
948 Re-read the set of network interfaces when re-loading
949 /etc/resolv.conf if --bind-interfaces is not set. This
950 handles the case that loopback interfaces do not exist
951 when dnsmasq is first started.
952
953 Tweak the PXE code to support port 4011. This should
954 reduce broadcasts and make things more reliable when other
955 servers are around. It also improves inter-operability
956 with certain clients.
957
958 Make a pxe-service configuration with no filename or boot
959 service type legal: this does a local boot. eg.
960 pxe-service=x86PC, "Local boot"
961
962 Be more conservative in detecting "A for A"
963 queries. Dnsmasq checks if the name in a type=A query looks
964 like a dotted-quad IP address and answers the query itself
965 if so, rather than forwarding it. Previously dnsmasq
966 relied in the library function inet_addr() to convert
967 addresses, and that will accept some things which are
968 confusing in this context, like 1.2.3 or even just
969 1234. Now we only do A for A processing for four decimal
970 numbers delimited by dots.
971
972 A couple of tweaks to fix compilation on Solaris. Thanks
973 to Joel Macklow for help with this.
974
975 Another Solaris compilation tweak, needed for Solaris
976 2009.06. Thanks to Lee Essen for that.
977
978 Added extract packaging stuff from Lee Essen to
979 contrib/Solaris10.
980
981 Increased the default limit on number of leases to 1000
982 (from 150). This is mainly a defence against DoS attacks,
983 and for the average "one for two class C networks"
984 installation, IP address exhaustion does that just as
985 well. Making the limit greater than the number of IP
986 addresses available in such an installation removes a
987 surprise which otherwise can catch people out.
988
989 Removed extraneous trailing space in the value of the
990 DNSMASQ_TIME_REMAINING DNSMASQ_LEASE_LENGTH and
991 DNSMASQ_LEASE_EXPIRES environment variables. Thanks to
992 Gildas Le Nadan for spotting this.
993
994 Provide the network-id tags for a DHCP transaction to
995 the lease-change script in the environment variable
996 DNSMASQ_TAGS. A good suggestion from Gildas Le Nadan.
997
998 Add support for RFC3925 "Vendor-Identifying Vendor
999 Options". The syntax looks like this:
1000 --dhcp-option=vi-encap:<enterprise number>, .........
1001
1002 Add support to --dhcp-match to allow matching against
1003 RFC3925 "Vendor-Identifying Vendor Classes". The syntax
1004 looks like this:
1005 --dhcp-match=tag,vi-encap<enterprise number>, <value>
1006
1007 Add some application specific code to assist in
1008 implementing the Broadband forum TR069 CPE-WAN
1009 specification. The details are in contrib/CPE-WAN/README
1010
1011 Increase the default DNS packet size limit to 4096, as
1012 recommended by RFC5625 section 4.4.3. This can be
1013 reconfigured using --edns-packet-max if needed. Thanks to
1014 Francis Dupont for pointing this out.
1015
Simon Kelley8ef5ada2010-06-03 19:42:45 +01001016 Rewrite query-ids even for TSIG signed packets, since
Simon Kelley316e2732010-01-22 20:16:09 +00001017 this is allowed by RFC5625 section 4.5.
1018
1019 Use getopt_long by default on OS X. It has been supported
1020 since version 10.3.0. Thanks to Arek Dreyer for spotting
1021 this.
1022
1023 Added up-to-date startup configuration for MacOSX/launchd
1024 in contrib/MacOSX-launchd. Thanks to Arek Dreyer for
1025 providing this.
1026
1027 Fix link error when including Dbus but excluding DHCP.
1028 Thanks to Oschtan for the bug report.
1029
1030 Updated French translation. Thanks to Gildas Le Nadan.
1031
1032 Updated Polish translation. Thanks to Jan Psota.
1033
1034 Updated Spanish translation. Thanks to Chris Chatham.
1035
Simon Kelley8ef5ada2010-06-03 19:42:45 +01001036 Fixed confusion about domains, when looking up DHCP hosts
1037 in /etc/hosts. This could cause spurious "Ignoring
1038 domain..." messages. Thanks to Fedor Kozhevnikov for
1039 finding and analysing the problem.
Simon Kelley316e2732010-01-22 20:16:09 +00001040
Simon Kelley8ef5ada2010-06-03 19:42:45 +01001041
Simon Kelley1f15b812009-10-13 17:49:32 +01001042version 2.51
1043 Add support for internationalised DNS. Non-ASCII characters
1044 in domain names found in /etc/hosts, /etc/ethers and
1045 /etc/dnsmasq.conf will be correctly handled by translation to
1046 punycode, as specified in RFC3490. This function is only
1047 available if dnsmasq is compiled with internationalisation
1048 support, and adds a dependency on GNU libidn. Without i18n
1049 support, dnsmasq continues to be compilable with just
1050 standard tools. Thanks to Yves Dorfsman for the
1051 suggestion.
1052
1053 Add two more environment variables for lease-change scripts:
1054 First, DNSMASQ_SUPPLIED_HOSTNAME; this is set to the hostname
1055 supplied by a client, even if the actual hostname used is
1056 over-ridden by dhcp-host or dhcp-ignore-names directives.
1057 Also DNSMASQ_RELAY_ADDRESS which gives the address of
1058 a DHCP relay, if used.
1059 Suggestions from Michael Rack.
1060
1061 Fix regression which broke echo of relay-agent
1062 options. Thanks to Michael Rack for spotting this.
1063
1064 Don't treat option 67 as being interchangeable with
1065 dhcp-boot parameters if it's specified as
1066 dhcp-option-force.
1067
1068 Make the code to call scripts on lease-change compile-time
1069 optional. It can be switched off by editing src/config.h
1070 or building with "make COPTS=-DNO_SCRIPT".
1071
1072 Make the TFTP server cope with filenames from Windows/DOS
1073 which use '\' as pathname separator. Thanks to Ralf for
1074 the patch.
1075
1076 Updated Polish translation. Thanks to Jan Psota.
1077
1078 Warn if an IP address is duplicated in /etc/ethers. Thanks
1079 to Felix Schwarz for pointing this out.
1080
1081 Teach --conf-dir to take an option list of file suffices
1082 which will be ignored when scanning the directory. Useful
1083 for backup files etc. Thanks to Helmut Hullen for the
1084 suggestion.
1085
1086 Add new DHCP option named tftpserver-address, which
1087 corresponds to the third argument of dhcp-boot. This
1088 allows the complete functionality of dhcp-boot to be
1089 replicated with dhcp-option. Useful when using
1090 dhcp-optsfile.
1091
1092 Test which upstream nameserver to use every 10 seconds
1093 or 50 queries and not just when a query times out and
1094 is retried. This should improve performance when there
1095 is a slow nameserver in the list. Thanks to Joe for the
1096 suggestion.
1097
1098 Don't do any PXE processing, even for clients with the
1099 correct vendorclass, unless at least one pxe-prompt or
1100 pxe-service option is given. This stops dnsmasq
1101 interfering with proxy PXE subsystems when it is just
1102 the DHCP server. Thanks to Spencer Clark for spotting this.
1103
1104 Limit the blocksize used for TFTP transfers to a value
1105 which avoids packet fragmentation, based on the MTU of the
1106 local interface. Many netboot ROMs can't cope with
1107 fragmented packets.
1108
1109 Honour dhcp-ignore configuration for PXE and proxy-PXE
1110 requests. Thanks to Niels Basjes for the bug report.
1111
1112 Updated French translation. Thanks to Gildas Le Nadan.
1113
1114
Simon Kelley77e94da2009-08-31 17:32:17 +01001115version 2.50
Simon Kelley1f15b812009-10-13 17:49:32 +01001116 Fix security problem which allowed any host permitted to
Simon Kelley77e94da2009-08-31 17:32:17 +01001117 do TFTP to possibly compromise dnsmasq by remote buffer
1118 overflow when TFTP enabled. Thanks to Core Security
1119 Technologies and Iván Arce, Pablo Hernán Jorge, Alejandro
1120 Pablo Rodriguez, Martín Coco, Alberto Soliño Testa and
1121 Pablo Annetta. This problem has Bugtraq id: 36121
1122 and CVE: 2009-2957
1123
1124 Fix a problem which allowed a malicious TFTP client to
1125 crash dnsmasq. Thanks to Steve Grubb at Red Hat for
1126 spotting this. This problem has Bugtraq id: 36120 and
1127 CVE: 2009-2958
1128
1129
Simon Kelley03a97b62009-06-10 20:55:49 +01001130version 2.49
1131 Fix regression in 2.48 which disables the lease-change
1132 script. Thanks to Jose Luis Duran for spotting this.
1133
1134 Log TFTP "file not found" errors. These were not logged,
1135 since a normal PXELinux boot generates many of them, but
1136 the lack of the messages seems to be more confusing than
1137 routinely seeing them when there is no real error.
1138
1139 Update Spanish translation. Thanks to Chris Chatham.
1140
1141
Simon Kelley7622fc02009-06-04 20:32:05 +01001142version 2.48
1143 Archived the extensive, backwards, changelog to
1144 CHANGELOG.archive. The current changelog now runs from
1145 version 2.43 and runs conventionally.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001146
Simon Kelley7622fc02009-06-04 20:32:05 +01001147 Fixed bug which broke binding of servers to physical
1148 interfaces when interface names were longer than four
1149 characters. Thanks to MURASE Katsunori for the patch.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001150
Simon Kelley7622fc02009-06-04 20:32:05 +01001151 Fixed netlink code to check that messages come from the
1152 correct source, and not another userspace process. Thanks
1153 to Steve Grubb for the patch.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001154
Simon Kelley7622fc02009-06-04 20:32:05 +01001155 Maintainability drive: removed bug and missing feature
1156 workarounds for some old platforms. Solaris 9, OpenBSD
1157 older than 4.1, Glibc older than 2.2, Linux 2.2.x and
1158 DBus older than 1.1.x are no longer supported.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001159
Simon Kelley7622fc02009-06-04 20:32:05 +01001160 Don't read included configuration files more than once:
1161 allows complex configuration structures without problems.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001162
Simon Kelley7622fc02009-06-04 20:32:05 +01001163 Mark log messages from the various subsystems in dnsmasq:
1164 messages from the DHCP subsystem now have the ident string
1165 "dnsmasq-dhcp" and messages from TFTP have ident
1166 "dnsmasq-tftp". Thanks to Olaf Westrik for the patch.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001167
Simon Kelley7622fc02009-06-04 20:32:05 +01001168 Fix possible infinite DHCP protocol loop when an IP
1169 address nailed to a hostname (not a MAC address) and a
1170 host sometimes provides the name, sometimes not.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001171
Simon Kelley7622fc02009-06-04 20:32:05 +01001172 Allow --addn-hosts to take a directory: all the files
1173 in the directory are read. Thanks to Phil Cornelius for
1174 the suggestion.
Simon Kelley9e4abcb2004-01-22 19:47:41 +00001175
Simon Kelley7622fc02009-06-04 20:32:05 +01001176 Support --bridge-interface on all platforms, not just BSD.
Simon Kelley1ab84e22004-01-29 16:48:35 +00001177
Simon Kelley7622fc02009-06-04 20:32:05 +01001178 Added support for advanced PXE functions. It's now
1179 possible to define a prompt and menu options which will
1180 be displayed when a client PXE boots. It's also possible to
1181 hand-off booting to other boot servers. Proxy-DHCP, where
1182 dnsmasq just supplies the PXE information and another DHCP
1183 server does address allocation, is also allowed. See the
1184 --pxe-prompt and --pxe-service keywords. Thanks to
1185 Alkis Georgopoulos for the suggestion and Guilherme Moro
1186 and Michael Brown for assistance.
Simon Kelley1ab84e22004-01-29 16:48:35 +00001187
Simon Kelley7622fc02009-06-04 20:32:05 +01001188 Improvements to DHCP logging. Thanks to Tom Metro for
1189 useful suggestions.
1190
1191 Add ability to build dnsmasq without DHCP support. To do
1192 this, edit src/config.h or build with
1193 "make COPTS=-DNO_DHCP". Thanks to Mahavir Jain for the patch.
1194
1195 Added --test command-line switch - syntax check
1196 configuration files only.
Simon Kelley33820b72004-04-03 21:10:00 +01001197
Simon Kelley7622fc02009-06-04 20:32:05 +01001198 Updated French translation. Thanks to Gildas Le Nadan.
Simon Kelley9009d742008-11-14 20:04:27 +00001199
Simon Kelley73a08a22009-02-05 20:28:08 +00001200
1201version 2.47
1202 Updated French translation. Thanks to Gildas Le Nadan.
1203
1204 Fixed interface enumeration code to work on NetBSD
1205 5.0. Thanks to Roy Marples for the patch.
1206
1207 Updated config.h to use the same location for the lease
1208 file on NetBSD as the other *BSD variants. Also allow
1209 LEASEFILE and CONFFILE symbols to be overriden in CFLAGS.
1210
1211 Handle duplicate address detection on IPv6 more
1212 intelligently. In IPv6, an interface can have an address
1213 which is not usable, because it is still undergoing DAD
1214 (such addresses are marked "tentative"). Attempting to
1215 bind to an address in this state returns an error,
1216 EADDRNOTAVAIL. Previously, on getting such an error,
1217 dnsmasq would silently abandon the address, and never
1218 listen on it. Now, it retries once per second for 20
1219 seconds before generating a fatal error. 20 seconds should
1220 be long enough for any DAD process to complete, but can be
1221 adjusted in src/config.h if necessary. Thanks to Martin
1222 Krafft for the bug report.
1223
1224 Add DBus introspection. Patch from Jeremy Laine.
1225
1226 Update Dbus configuration file. Patch from Colin Walters.
1227 Fix for this bug:
1228 http://bugs.freedesktop.org/show_bug.cgi?id=18961
1229
1230 Support arbitrarily encapsulated DHCP options, suggestion
1231 and initial patch from Samium Gromoff. This is useful for
1232 (eg) gPXE, which expect all its private options to be
1233 encapsulated inside a single option 175. So, eg,
1234
1235 dhcp-option = encap:175, 190, "iscsi-client0"
1236 dhcp-option = encap:175, 191, "iscsi-client0-secret"
1237
1238 will provide iSCSI parameters to gPXE.
1239
1240 Enhance --dhcp-match to allow testing of the contents of a
1241 client-sent option, as well as its presence. This
1242 application in mind for this is RFC 4578
1243 client-architecture specifiers, but it's generally useful.
1244 Joey Korkames suggested the enhancement.
1245
1246 Move from using the IP_XMIT_IF ioctl to IP_BOUND_IF on
1247 OpenSolaris. Thanks to Bastian Machek for the heads-up.
1248
1249 No longer complain about blank lines in
1250 /etc/ethers. Thanks to Jon Nelson for the patch.
1251
1252 Fix binding of servers to physical devices, eg
1253 --server=/domain/1.2.3.4@eth0 which was broken from 2.43
1254 onwards unless --query-port=0 set. Thanks to Peter Naulls
1255 for the bug report.
1256
1257 Reply to DHCPINFORM requests even when the supplied ciaddr
1258 doesn't fall in any dhcp-range. In this case it's not
1259 possible to supply a complete configuration, but
1260 individually-configured options (eg PAC) may be useful.
1261
1262 Allow the source address of an alias to be a range:
1263 --alias=192.168.0.0,10.0.0.0,255.255.255.0 maps the whole
1264 subnet 192.168.0.0->192.168.0.255 to 10.0.0.0->10.0.0.255,
1265 as before.
1266 --alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0
1267 maps only the 192.168.0.10->192.168.0.40 region. Thanks to
1268 Ib Uhrskov for the suggestion.
1269
1270 Don't dynamically allocate DHCP addresses which may break
1271 Windows. Addresses which end in .255 or .0 are broken in
1272 Windows even when using supernetting.
1273 --dhcp-range=192.168.0.1,192.168.1.254,255,255,254.0 means
1274 192.168.0.255 is a valid IP address, but not for Windows.
1275 See Microsoft KB281579. We therefore no longer allocate
1276 these addresses to avoid hard-to-diagnose problems.
1277
1278 Update Polish translation. Thanks to Jan Psota.
1279
1280 Delete the PID-file when dnsmasq shuts down. Note that by
1281 this time, dnsmasq is normally not running as root, so
1282 this will fail if the PID-file is stored in a root-owned
1283 directory; such failure is silently ignored. To take
1284 advantage of this feature, the PID-file must be stored in a
1285 directory owned and write-able by the user running
1286 dnsmasq.
Simon Kelley7622fc02009-06-04 20:32:05 +01001287
1288
1289version 2.46
1290 Allow --bootp-dynamic to take a netid tag, so that it may
1291 be selectively enabled. Thanks to Olaf Westrik for the
1292 suggestion.
1293
1294 Remove ISC-leasefile reading code. This has been
1295 deprecated for a long time, and last time I removed it, it
1296 ended up going back by request of one user. This time,
1297 it's gone for good; otherwise it would need to be
1298 re-worked to support multiple domains (see below).
1299
1300 Support DHCP clients in multiple DNS domains. This is a
1301 long-standing request. Clients are assigned to a domain
1302 based in their IP address.
1303
1304 Add --dhcp-fqdn flag, which changes behaviour if DNS names
1305 assigned to DHCP clients. When this is set, there must be
1306 a domain associated with each client, and only
1307 fully-qualified domain names are added to the DNS. The
1308 advantage is that the only the FQDN needs to be unique,
1309 so that two or more DHCP clients can share a hostname, as
1310 long as they are in different domains.
1311
1312 Set environment variable DNSMASQ_DOMAIN when invoking
1313 lease-change script. This may be useful information to
1314 have now that it's variable.
1315
1316 Tighten up data-checking code for DNS packet
1317 handling. Thanks to Steve Dodd who found certain illegal
1318 packets which could crash dnsmasq. No memory overwrite was
1319 possible, so this is not a security issue beyond the DoS
1320 potential.
1321
1322 Update example config dhcp option 47, the previous
1323 suggestion generated an illegal, zero-length,
1324 option. Thanks to Matthias Andree for finding this.
1325
1326 Rewrite hosts-file reading code to remove the limit of
1327 1024 characters per line. John C Meuser found this.
1328
1329 Create a net-id tag with the name of the interface on
1330 which the DHCP request was received.
1331
1332 Fixed minor memory leak in DBus code, thanks to Jeremy
1333 Laine for the patch.
1334
1335 Emit DBus signals as the DHCP lease database
1336 changes. Thanks to Jeremy Laine for the patch.
1337
1338 Allow for more that one MAC address in a dhcp-host
1339 line. This configuration tells dnsmasq that it's OK to
1340 abandon a DHCP lease of the fixed address to one MAC
1341 address, if another MAC address in the dhcp-host statement
1342 asks for an address. This is useful to give a fixed
1343 address to a host which has two network interfaces
1344 (say, a laptop with wired and wireless interfaces.)
1345 It's very important to ensure that only one interface
1346 at a time is up, since dnsmasq abandons the first lease
1347 and re-uses the address before the leased time has
1348 elapsed. John Gray suggested this.
1349
1350 Tweak the response to a DHCP request packet with a wrong
1351 server-id when --dhcp-authoritative is set; dnsmasq now
1352 returns a DHCPNAK, rather than silently ignoring the
1353 packet. Thanks to Chris Marget for spotting this
1354 improvement.
1355
1356 Add --cname option. This provides a limited alias
1357 function, usable for DHCP names. Thanks to AJ Weber for
1358 suggestions on this.
1359
1360 Updated contrib/webmin with latest version from Neil
1361 Fisher.
1362
1363 Updated Polish translation. Thanks to Jan Psota.
1364
1365 Correct the text names for DHCP options 64 and 65 to be
1366 "nis+-domain" and "nis+-servers".
1367
1368 Updated Spanish translation. Thanks to Chris Chatham.
1369
1370 Force re-reading of /etc/resolv.conf when an "interface
1371 up" event occurs.
1372
1373
1374version 2.45
1375 Fix total DNS failure in release 2.44 unless --min-port
1376 specified. Thanks to Steven Barth and Grant Coady for
1377 bugreport. Also reject out-of-range port spec, which could
1378 break things too: suggestion from Gilles Espinasse.
1379
1380
1381version 2.44
1382 Fix crash when unknown client attempts to renew a DHCP
1383 lease, problem introduced in version 2.43. Thanks to
1384 Carlos Carvalho for help chasing this down.
1385
1386 Fix potential crash when a host which doesn't have a lease
1387 does DHCPINFORM. Again introduced in 2.43. This bug has
1388 never been reported in the wild.
1389
1390 Fix crash in netlink code introduced in 2.43. Thanks to
1391 Jean Wolter for finding this.
1392
1393 Change implementation of min_port to work even if min-port
1394 is large.
1395
1396 Patch to enable compilation of latest Mac OS X. Thanks to
1397 David Gilman.
1398
1399 Update Spanish translation. Thanks to Christopher Chatham.
1400
1401
1402version 2.43
1403 Updated Polish translation. Thanks to Jan Psota.
1404
1405 Flag errors when configuration options are repeated
1406 illegally.
1407
1408 Further tweaks for GNU/kFreeBSD
1409
1410 Add --no-wrap to msgmerge call - provides nicer .po file
1411 format.
1412
1413 Honour lease-time spec in dhcp-host lines even for
1414 BOOTP. The user is assumed to known what they are doing in
1415 this case. (Hosts without the time spec still get infinite
1416 leases for BOOTP, over-riding the default in the
1417 dhcp-range.) Thanks to Peter Katzmann for uncovering this.
1418
1419 Fix problem matching relay-agent ids. Thanks to Michael
1420 Rack for the bug report.
1421
1422 Add --naptr-record option. Suggestion from Johan
1423 Bergquist.
1424
1425 Implement RFC 5107 server-id-override DHCP relay agent
1426 option.
1427
1428 Apply patches from Stefan Kruger for compilation on
1429 Solaris 10 under Sun studio.
1430
1431 Yet more tweaking of Linux capability code, to suppress
1432 pointless wingeing from kernel 2.6.25 and above.
1433
1434 Improve error checking during startup. Previously, some
1435 errors which occurred during startup would be worked
1436 around, with dnsmasq still starting up. Some were logged,
1437 some silent. Now, they all cause a fatal error and dnsmasq
1438 terminates with a non-zero exit code. The errors are those
1439 associated with changing uid and gid, setting process
1440 capabilities and writing the pidfile. Thanks to Uwe
1441 Gansert and the Suse security team for pointing out
1442 this improvement, and Bill Reimers for good implementation
1443 suggestions.
1444
1445 Provide NO_LARGEFILE compile option to switch off largefile
1446 support when compiling against versions of uclibc which
1447 don't support it. Thanks to Stephane Billiart for the patch.
1448
1449 Implement random source ports for interactions with
1450 upstream nameservers. New spoofing attacks have been found
1451 against nameservers which do not do this, though it is not
1452 clear if dnsmasq is vulnerable, since to doesn't implement
1453 recursion. By default dnsmasq will now use a different
1454 source port (and socket) for each query it sends
1455 upstream. This behaviour can suppressed using the
1456 --query-port option, and the old default behaviour
1457 restored using --query-port=0. Explicit source-port
1458 specifications in --server configs are still honoured.
1459
1460 Replace the random number generator, for better
1461 security. On most BSD systems, dnsmasq uses the
1462 arc4random() RNG, which is secure, but on other platforms,
1463 it relied on the C-library RNG, which may be
1464 guessable and therefore allow spoofing. This release
1465 replaces the libc RNG with the SURF RNG, from Daniel
1466 J. Berstein's DJBDNS package.
1467
1468 Don't attempt to change user or group or set capabilities
1469 if dnsmasq is run as a non-root user. Without this, the
1470 change from soft to hard errors when these fail causes
1471 problems for non-root daemons listening on high
1472 ports. Thanks to Patrick McLean for spotting this.
1473
1474 Updated French translation. Thanks to Gildas Le Nadan.
Simon Kelley1f15b812009-10-13 17:49:32 +01001475
1476
1477version 2.42
1478 The changelog for version 2.42 and earlier is
1479 available in CHANGELOG.archive.