Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It
is designed to provide DNS and, optionally, DHCP, to a small network. It can
serve the names of local machines which are not in the global DNS. The DHCP
server integrates with the DNS server and allows machines with DHCP-allocated
addresses to appear in the DNS with names configured either in each host or in
a central configuration file. Dnsmasq supports static and dynamic DHCP leases
and BOOTP/TFTP/PXE for network booting of diskless machines.
Dnsmasq is targeted at home networks using NAT and connected to the internet
via a modem, cable-modem or ADSL connection but would be a good choice for any
smallish network (up to 1000 clients is known to work) where low resource use
and ease of configuration are important. -- Simon Kelley
===> The following configuration options are available for dnsmasq-devel-2.93.r3,8:
DBUS=off: D-Bus IPC system support
DNSSEC=on: Enable DNSSEC caching and validation (needs nettle)
DOCS=on: Build and/or install documentation
IPSET=on: Dynamic firewall management of resolved names (needs PF)
IPV6=on: IPv6 protocol support
LUA=off: Support lease-change scripts written in Lua
====> Internationalization Support Level: you can only select none or one of them
IDN=off: IDN: Int'l Domain Names WITHOUT full NLS
NLS=on: IDN+NLS: Int'l Domain Names & National Language support
===> Use 'make config' to modify these settings
Reason:
The dns/dnsmasq-devel port has been unable to keep the pace of the upstream
releases due project admin issues beyond its maintainer's control. At the
same time, dns/dnsmasq is now at the 2.93 release, thus newer than
dnsmasq-devel. The -devel port is no longer useful at this time.
Users are sought to replace the dnsmasq-devel port and install dnsmasq
instead. The configuration including rc.conf settings are compatible,
so a simple "pkg install dnsmasq" or, for portmaster users,
"portmaster -o dns/dnsmasq dns/dnsmasq-devel" should achieve that.
Port Moves
port moved to dns/dnsmasq on 2026-06-05 REASON: Discontinued -devel port, use dns/dnsmasq instead
Number of commits found: 188 (showing only 100 on this page) #
dns/dnsmasq-devel: remove port, dns/dnsmasq is newer
Due to administrative issues effectuated earlier in 2026 that have been
unresolved to date, this port been unable to move usefully fast enough.
Let's not pretend otherwise and remove the dnsmasq-devel port,
as announced in its DEPRECATED tag, now that dns/dnsmasq is newer
than this dns/dnsmasq-devel; the DEPRECATED has announced for months
this would happen after dnsmasq's v2.93 release. (There was no
EXPIRATION_DATE because the v2.93 release wasn't fixed to a date.)
Add MOVED and UPDATING entries to suggest that
users should install the stable dns/dnsmasq port instead.
In order to minimize disruption on the quarterly branch, this shall not
be MFH'd, I will propose to update dnsmasq-devel to 2.93 release for
2026Q2 by direct commit instead.
PR: 295851
Pull Request: https://github.com/freebsd/freebsd-ports/pull/529
dns/dnsmasq-devel: update to v2.93rc3
Announcement URLs for rc2 and rc3, in that order:
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018486.htmlhttps://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018487.html
(Note the upstream repo already contains one other commit, so v2.93
will likely be different than this one.)
* 7d42376 2026-06-01 | Fix get_line_alloc() (tag: v2.93rc3) [Simon Kelley]
* 08cc209 2026-06-01 | Add --log-debug to man page. [Simon Kelley]
* ff4964d 2026-05-31 | Re-implement print_mac() to do its own buffer managment.
(tag: v2.93rc2) [Simon Kelley]
* 45771dc 2026-05-30 | Fix OOB writes in contrib/leasequesry/leasequery.c
[Michalis Vasileiadis]
* af73e48 2026-05-30 | Include fc00::/8 in the set of local addresses. [Simon
Kelley]
* 77d4749 2026-05-29 | Fix DNSSEC frec use-after-free in TCP validation path.
[Simon Kelley]
* 0375e40 2026-05-29 | Fix bounds-checking in
contrib/lease-tools/dhcp_release6.c [OpenAI Security Research Team]
* 18a139f 2026-05-17 | Change "limit" arg to add_pseudoheader() to a length.
[Simon Kelley]
* d5d2bfb 2026-05-17 | Change "limit" arg to make_local_answer() to a length.
[Simon Kelley]
* 7f5802c 2026-05-17 | Tidy up get_line_alloc() [Simon Kelley]
* 7280e46 2026-05-17 | Check for too-small packets in relay_upstream6() [Simon
Kelley]
* 754177b 2026-05-16 | Fix hostname_issubdomain() confusion. [Simon Kelley]
* 228d7ff 2026-05-14 | Remove arbitrary limit on config file line lengths.
[Simon Kelley]
Pull Request: https://github.com/freebsd/freebsd-ports/pull/528
dns/dnsmasq-devel: Update 2.93test10 => 2.93rc1 (6 CVEs)
This contains the six security fixed (or variants thereof) recently
appeared in 2.92rel2.
Including privilege escalation, cache poisoning/rediction, information
leak, and denial of service.
See https://www.kb.cert.org/vuls/id/471747
See https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
Upstream Git changelog since v2.93test10:
* 14094e8 2026-05-09 | Fix buffer OOB read in find_soa() (tag: v2.93rc1)
[do litli]
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: enable inotify support.
Patch submitted upstream.
I'll not enable this on the existing dns/dnsmasq port for now.
Reported by: Felix Hanley
PR: 291624
dns/dnsmasq-devel: update to v2.92rc2
* 05464a1 2025-12-04 | Fix some issues with the swedish manual page, some
causing lintian warnings (tag: v2.92rc2) [Sven Geuer]
* ae3d3d9 2025-12-04 | Fix typos in the english manual page [Sven Geuer]
* d184578 2025-12-04 | Remove trailing white space from dnsmasq.conf.example
[Sven Geuer]
* edb5f85 2025-12-03 | CHANGELOG: Fix two typos [Matthias Andree]
dns/dnsmasq-devel: update to v2.92rc1
Upstream changes since test22:
* cef7442 2025-12-01 | Log error if we try and use netlink in a child process.
(tag: v2.92rc1) [Simon Kelley]
* 959dead 2025-11-30 | More fixes for DHCP ops in Dbus when DHCP not configured.
[Simon Kelley]
MFH: 2025Q4
dns/dnsmasq-devel: update to v2.92test22
| Fix failure to add client MAC address to queries in TCP mode.
| The options which cause dnsmasq to decorate a DNS query with the MAC
| address on the originating client can fail when the query is sent
| using TCP. Thanks to Bruno Ravara for spotting and
| characterising this bug.
Upstream Git changelog:
* eb60168 2025-11-28 | Fix SEGV in Dbus code. (tag: v2.92test22) [Simon Kelley]
* 57a2f57 2025-11-28 | Fix confusion in address checking code. [Simon Kelley]
* 7d5fbe7 2025-11-26 | Fix failure to add client MAC address to queries in TCP
mode. [Simon Kelley]
* ded935b 2025-11-18 | Add captive-portal name support for DHCP options [Petr
Menšík]
* aa9b71c 2025-11-18 | Merge translated strings. [Simon Kelley]
* e497f3f 2025-11-18 | Add Swedish translation. [Daniel Nylander]
dns/dnsmasq-devel: update to v2.92test18
CHANGELOG additions in upstream repo:
Change the behaviour of the DHVPv6 server when a REBIND message
is received but no lease exists. Under these circumstances a new
lease is created _only_ when the --dhcp-authoritative option is
set. This matches the behavior of the DHCPv4 server.
Add --dhcp-split-relay option. This makes a DHCPv4 relay which
is functional when client and server networks aren't mutually
route-able.
Detailed commit list:
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: update to v2.92test14
Upstream changelog since v2.92test13, all changes by Simon Kelley:
* ec8f3e6 2025-06-23 | Tweak domain-specific servers and DNSSEC code to treat
servers for plain names (server=//1.2.3.4) as domain-specific. (tag:
v2.92test14)
* 15841f1 2025-06-22 | Fix issue with fast file-descriptor close on *BSD.
* ade9749 2025-06-20 | Trvial formatting fix.
* 2b19285 2025-06-20 | Fix breakage of ipset on *BSD.
* a444715 2025-06-20 | Fix FTBFS on Jurassic gcc versions.
PR: 287324
MFH: 2025Q2
dns/dnsmasq-devel: update to v2.92test11
Changes since v2.92test10:
* c378d2c 2025-06-02 | Fix crash in filter_servers(). (tag: v2.92test11) [Simon
Kelley]
* 5846f74 2025-05-29 | Rewrite chunks of inotify.c to remove a memory leak.
[Simon Kelley]
* c9a4240 2025-05-24 | Unbreak compilation on non-Linux systems (FreeBSD)
[Matthias Andree]
(The latter was already in FreeBSD's port.)
MFH: 2025Q2
dns/dnsmasq-devel: update to v2.92test10 with one FreeBSD patch
Changes since v2.92test9:
This one has been submitted upstream to unbreak compilation:
* e4bc90e 2025-05-24 | Unbreak compilation on non-Linux systems (FreeBSD)
[Matthias Andree]
These are part of the official v2.92test10:
* 90b2485 2025-05-24 | Remove compiler warnings for obscure combinations of
build options. (tag: v2.92test10) [Simon Kelley]
* ebef27f 2025-05-24 | Add TFTP options windowsize (RFC 7440) and timeout (RFC
2349). [Simon Kelley]
* 1861a88 2025-05-21 | Only define variable "a" if we HAVE_LINUX_NETWORK
[Matthias Andree]
* 96bdb42 2025-05-20 | Fix GCC's -Wunterminated-string-initialization warning in
edns0.c. [Matthias Andree]
* c7a909a 2025-05-21 | Add RRtypes HHIT and BRID to the table. [Simon Kelley]
MFH: 2025Q2
dns/dnsmasq-devel: update to v2.92test7
Changes since v2.925test5, all by Simon Kelley, newest first:
* b0aa604 2025-05-11 | Tidy-up of TCP-child pipe handling code. (tag:
v2.92test7)
* 8ddabd1 2025-05-09 | DNSSEC validation change for reverse lookups in RFC-1918
ranges and friends.
* 98189ff 2025-05-07 | Fix problems with ipset or nftset and TCP DNS transport.
(tag: v2.92test6)
MFH: 2025Q2
dns/dnsmasq-devel: update to v2.92test5
Upstream changes since test4, by Simon Kelley:
* e86d53c 2025-04-29 | Fix some edge cases wth domains and
--address and --server.
* e127a97 2025-04-27 | Fix logging booboo.
MFH: 2025Q2
dns/dnsmasq-devel: update to 2.92test4
Changes since 2.92test3, by Simon Kelley unless stated otherwise:
* a458c2b 2025-04-23 | Tidy up pipe-to-parent code in DNS TCP path. (tag:
v2.92test4)
* 9e67099 2025-04-22 | Tidy up replies to non-QUERY DNS opcodes in auth mode.
* cfa1313 2025-04-20 | Log format error from upstream as 'FORMERR' [Rob Gill]
* e3a2c8d 2025-04-20 | Add --log-queries=auth option.
I had cherry-picked this in FreeBSD's test3 port already:
* 95b74a7 2025-04-18 | Fix copy 'n paste error in DBUS server-statistics code.
MFH: 2025Q2
dns/dnsmasq-devel: update to v2.91rc4
Upstream git log since v2.91rc3, changes by Simon Kelley:
* f9f8d19 2025-02-09 | Yet another 0x20 fix.
Upstream has one more fix in Git,
so this isn't going to be the release yet.
MFH: 2025Q1
dns/dnsmasq-devel: update to v2.91rc3
* bceab45 2025-02-07 | Fix 0x20 problem.
Also fix ordering of chrony vs. dnsmasq (from dns/dnsmasq main port)
MFH: 2025Q1
dns/dnsmasq-devel: update to v2.91rc2
changes since v2.91rc1:
* 368ceff 2025-02-06 | TFTP off-by-2 bugfix [Helge Deller]
* 77c4e95 2025-02-06 | Fix for case-sensitivity problems in DNS. [Simon Kelley]
* e44165c 2025-02-06 | Fix bug in 0x20 encoding. [Simon Kelley]
CHANGELOG addition:
| Fix a long-standing problem when two queries which are identical in
| every repect _except_ case, get combined by dnsmasq. If dnsmasq gets
| eg, two queries for example.com and Example.com in quick succession it
| will get the answer for example.com from upstream and send that answer
| to both requestors. This means that the query for Example.com will get
| an answer for example.com, and in the modern DNS, that answer may not
| be accepted.
MFH: 2025Q1
dns/dnsmasq-devel: update to v2.91test9
Upstream commit history, all changes by Simon Kelley:
* a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage.
* 199e65c 2025-01-20 | Remove misleading comment.
* bb8811d 2025-01-20 | Convert DNS names in logs to all lower case.
* 995a16c 2025-01-19 | Implement "DNS-0x20 encoding".
* 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers.
Upstream CHANGELOG addition:
| Implement "DNS-0x20 encoding", for extra protection against
| reply-spoof attacks. Since DNS queries are case-insensitive, it's
| possible to randomly flip the case of letters in a query and still get
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: update to v2.91test8
Upstream CHANGELOG file addition:
| Handle DS queries to auth zones. When dnsmasq is configured to act as
| an authoritative server and has an authoritative zone configured, and
| recieves a query for that zone _as_forwarder_ it answers the query
| directly rather than forwarding it. This doesn't affect the answer, but
| it saves dnsmasq forwarding the query to the recusor upstream, whch then
| bounces it back to dnsmasq in auth mode. The exception should be when
| the query is for the root of zone, for a DS RR. The answer to that has
| to come from the parent, via the recursor, and will typically be a
| proof-of-nonexistence since dnsmasq doesn't support signed zones. This
| patch suppresses local answers and forces forwarding to the upstream
| recursor for such queries. It stops breakage when a DNSSEC validating
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: update to v2.91test7
The local patch got merged upstream and was removed.
This is the changelog since test6:
* da58455 2025-01-13 | Tweak 7d915a0bb94260073ec7aa4dd00b787f3ea4b9e8 (tag:
v2.91test7)
* b915c9a 2025-01-13 | Attempt to keep running if a child process dies.
* 424aaa0 2025-01-13 | Fix another 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
SNAFU
* c72c895 2025-01-12 | Improve "no upstream servers configured" when D-Bus is
enabled [Andrew Sayers]
* b715611 2025-01-12 | Fix SNAFU in 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
* 7d915a0 2025-01-12 | Don't do retries over UDP when we've sent the query by
TCP.
* 509afcd 2025-01-12 | Refactor poll() loop.
* 51343bd 2025-01-12 | Treat replies with CD flag set the same for UDP and TCP
code paths.
* b58276a 2025-01-12 | Return EDE OTHER error when DNSSEC validation abandoned.
* f162d34 2024-12-29 | cache: Fix potential NULL deref in arcane situations.
[Matthias Andree]
dns/dnsmasq-devel: update to 2.91test4.
Upstream Git history since our 2.91test3:
* 5ef6c8c 2024-12-30 | Extend fcb40ee73d04e1ffd46f8c19e537f118526f57ea to cover
"Make install-i18n" (tag: v2.91test4, origin/master, origin/HEAD) [Simon Kelley]
* 7c348a0 2024-12-24 | Extend d578da0665c496ca709c25ae8d6963d1bff141c4 to
Linux-only code. [Simon Kelley]
* d578da0 2024-12-24 | Fix FTBFS when using -pedantic compiler flag. [Matthias
Andree]
* 8949ef4 2024-12-24 | Update DE translation. [Conrad Kostecki]
The patches I shipped in earlier 2.91test2/test3 have been integrated
upstream with d578da0 and are no longer needed.
Let's swap FreeBSD's distcache in first place because the upstream
master site is slow, let's relieve it a bit.
dns/dnsmasq-devel: update to v2.91test3.
This still needs my patches added for test2; while the public
repo as of this commit does not have the v2.91test3 tag,
I suppose it's 3ac11cd from looking at the tarball; we have
DSYNC added to src/cache.c but not the de.po update.
This makes for the upstream changes since v2.91test2 then:
* 3ac11cd 2024-12-22 | Add newly assigned RRTYPE DSYNC [DL6ER]
* 5d49fa1 2024-07-26 | Add newly assigned RRTYPEs NXNAME, CLA, and IPN [DL6ER]
* d29d19e 2024-06-21 | Add newly assigned RRTYPE WALLET (262) [DL6ER]
* 49ea7db 2024-12-23 | Fix c9bc0156a8d36d56735831cb81e786d628ed73e [Simon
Kelley]
* fcb40ee 2023-10-16 | Fix dependency in make install target [Olaf Hering]
dns/dnsmasq-devel: update to v2.91test2 plus warning fixes
I am also adding a set of fixes I've also sent upstream,
to make this compile without GNU extensions under -pedantic-errors.
Upstream Git history since test1, author Simon Kelley unless stated
otherwise.
* 0f437b3 2024-12-20 | Banish compiler warnings. (tag: v2.91test2,
origin/master, origin/HEAD)
* 8a5fe8c 2024-12-20 | Extend the code to effciently close unwanted file
descriptors to *BSD.
* 2a664c0 2024-12-20 | bpf.c: Follow callback updates. [Matthias Andree]
* 4902807 2024-12-20 | Fix [-Wgnu-variable-sized-type-not-at-end] warning.
* 742af6e 2024-12-20 | Refactor receive_query() to removed duplicated code.
* 3eb008c 2024-12-19 | Further refactoring of the TCP DNS codepath.
* 32248eb 2024-12-19 | Fix thinko in 3b74df4f55b1107b051183d6b628eb02933cb00a
dns/dnsmasq*: add a checkconfig option to rcfile
and automatically invoke it before restart or stop.
Under the hood, this runs dnsmasq --test.
Bump PORTREVISION of dnsmasq only, the -devel port is not
built regularly.
[commit message by Matthias Andree <mandree@FreeBSD.org>]
dns/dnsmasq-devel: update to rc5
CHANGELOG diff vs. rc3:
Optimise reading large numbers of --server options. When re-reading
upstream servers from /etc/resolv.conf or other sources that
can change dnsmasq tries to avoid memory fragmentation by re-using
existing records that are being re-read unchanged. This involves
seaching all the server records for each new one installed.
During startup this search is pointless, and can cause long
start times with thousands of --server options because the work
needed is O(n^2). Handle this case more intelligently.
Thanks to Ye Zhou for spotting the problem and an initial patch.
If we detect that a DNS reply from upstream is malformed don't
return it to the requestor; send a SEVFAIL rcode instead.
dns/dnsmasq-devel: 2.87rc1 release candidate
Changes since test9:
+ Tweak DHCPv6 relay code so that packets relayed towards a server
have source address on the server-facing network, not the
client facing network. Thanks to Luis Thomas for spotting this
and initial patch.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: update to 2.87test9
CHANGELOG difference in Git between test8 and test9
* Enhance --domain to accept, for instance,
--domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
which relects the interface they are attached to in a way which
doesn't require hard-coding addresses. Thanks to Sten Spans for
the idea.
* Fix write-after-free error in DHCPv6 server code.
CVE-2022-0934 refers.
* Add the ability to specify destination port in
DHCP-relay mode. This change also removes a previous bug
(Only the first 15 lines of the commit message are shown above )
dns: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Aaron Dalton <aaron@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Samorukov <samm@freebsd.org>
* Alexey Dokuchaev <danfe@FreeBSD.org>
* Allan Jude <allanjude@freebsd.org>
* Amar Takhar <verm@drunkmonk.net>
* Anders Nordby <anders@fix.no>
* Andrew Greenwood <greenwood.andy@gmail.com>
* Anton Berezin <tobez@FreeBSD.org>
* Ashish SHUKLA <ashish@FreeBSD.org>
* Attila Nagy <bra@fsn.hu>
(Only the first 15 lines of the commit message are shown above )
dns/dnsmasq-devel: update to v2.87test8
new CHANGELOG entries since test7:
- Fix problem with binding DHCP sockets to an individual interface.
Despite the fact that the system call tales the interface _name_ as a
parameter, it actually, binds the socket to interface _index_.
Deleting the interface and creating a new one with the same name
leaves the socket bound to the old index. (Creating new sockets always
allocates a fresh index, they are not reused). We now take this
behaviour into account and keep up with changing indexes.
- Add --conf-script configuration option.
dns/dnsmasq-devel: update to rc1 release candidate
Changes:
* a42ee39 2021-08-16 | Man page BNF error fix. [Geert Stappers]
* e58f8bb 2021-08-25 | Merge message changes into I18N files. [Simon Kelley]
* 58cf958 2021-08-20 | Fix empty domain in server option parsing when more than
one domain is given [Dominik DL6ER]
* 06d01f7 2021-07-22 | Make comment style consistent. [Etan Kissling]
* 1a33eec 2021-07-22 | Adjust logging levels for connmark patterns. [Etan
Kissling]
* 82de7a1 2021-07-22 | Re-order UBus teardown logic. [Etan Kissling]
* 8e9bde5 2021-07-22 | Eliminate redundant UBus `notify` variable. [Etan
Kissling]
* 1bb70e0 2021-07-22 | Handle UBus serialization errors. [Etan Kissling]
* 9afcb7a 2021-08-12 | Revert "There was a `notify` variable to keep track
whether a subscriber is" [Simon Kelley]
* 545c495 2021-08-12 | Revert "Re-order UBus teardown logic." [Simon Kelley]
* 2f2d59b 2021-08-12 | Define order of reading files when --addn-hosts given a
directory. [Simon Kelley]
CHANGELOG addition:
+ When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
+ given a directory as argument, define the order in which
+ files within that directory are read (alphabetical order
+ of filename). Thanks to Ed Wildgoose for the initial patch
+ and motivation for this.
dns/dnsmasq-devel: update to v2.86test7
Changes since test6, per Git, without merges, and by Simon Kelley unless
noted otherwise:
* a1729de 2021-08-11 | Fiz sizeof() confusion in 527c3c7 (tag:
v2.86test7)
* fc64b97 2021-08-10 | dhcp_buff2 not availble in log_packet, use
daemon->addrbuff
* a163c63 2021-08-05 | CONNTRACK needs CAP_NET_ADMIN.
* 527c3c7 2021-08-10 | Remove remaining uses of deprecated inet_ntoa()
[Petr Menšík]
* fcb4dca 2021-08-10 | Remove remaining uses of deprecated inet_addr()
function. [Petr Menšík]
* 3ca4995 2021-08-10 | CHANGELOG: spell-check [Matthias Andree]
* d387f8f 2021-07-22 | Re-order UBus teardown logic. [Etan Kissling]
* ea43234 2021-08-10 | There was a `notify` variable to keep track
whether a subscriber is observing our UBus object. However, it was not
properly cleaned up in `ubus_destroy`, potentially becoming stale over
UBus reconnections. The variable was removed and the current state is
examined when sending notifications, similarly as is done in other
existing OpenWrt code. [Etan Kissling]
* 867e56a 2021-08-08 | Fix NOERR/NXDOMAIN in answers configured by
--domain-needed.
dns/dnsmasq-devel: update to 2.86test6
CHANGELOG additions since test5:
* Allow smaller then 64 prefix lengths in synth-domain, with caveats.
--synth-domain=1234:4567::/56,example.com is now valid.
* Make domains generated by --synth-domain appear in replies
when in authoritative mode.
Git log since v2.86test5:
* 8389b94 2021-07-21 | Better fix than f2266d9678d71633d62d70238be3782ea74019c9
(tag: v2.86test6) [Simon Kelley]
* f2266d9 2021-07-21 | Add UINT32_MAX if not defined by system. [Simon Kelley]
* 56bd806 2021-07-21 | Typo in new EDE code. [Simon Kelley]
* ac7eeea 2021-07-21 | Handle empty hostmaster in --auth-soa [Simon Kelley]
* b741059 2021-07-20 | Detect malformed --dhcp-relay option. [Simon Kelley]
* cbd9842 2021-07-20 | Fix argument checking for --dhcp-match. [Simon Kelley]
* 32e15c3 2021-07-20 | canonicalise_opt must always return heap memory. [Simon
Kelley]
* f0dc324 2021-07-20 | Checks on prefix-length in --domain --synth-domain and
--rev-server. [Simon Kelley]
* f83c6cf 2021-07-20 | Return REFUSED in auth mode when we are not authoritative
for the query. [Simon Kelley]
* c068b3a 2021-07-19 | --synth-domain now works in auth mode. [Simon Kelley]
* adf9dec 2021-07-18 | Allow shorter IPv6 prefix lengths in (some)
--synth-domain options. [Simon Kelley]
* 767d9cb 2021-07-09 | Add --quiet-tftp. [Kevin Darbyshire-Bryant]
dns/dnsmasq-devel: update to 2.86test2
* 1c9f136 2021-06-15 | Man page update, lease times can be given in days or
weeks. (tag: v2.86test2) [Simon Kelley]
* 5ab7e4a 2021-06-14 | Improve efficiency of DNSSEC. [Simon Kelley]
* 3236f35 2021-06-13 | Revise resource handling for number of concurrent DNS
queries. [Simon Kelley]
* 4a6550d 2021-06-10 | Move make_local_answer() to domain-match.c
(refs/bisect/bad) [Simon Kelley]
* ff523d0 2021-06-10 | Fix TCP replies with --domain-needed. [Simon Kelley]
* 3c93e8e 2021-06-08 | Re-order UBus initialisation to avoid logging before logs
set up. [Simon Kelley]
Reported by: portscout
dns/dnsmasq-devel: update to v2.85rc2
* ea28d0e 2021-03-26 | Scale the DNS random scket pool on the value of
dns-forward-max. (HEAD -> master, tag: v2.85rc2, origin/master, origin/HEAD)
[Simon Kelley]
* 4a8c098 2021-03-26 | Change the method of allocation of random source ports
for DNS. [Simon Kelley]
* ffa4628 2021-03-22 | Fix thinko in 51f7bc924cbcdeb09cbb83249b70c121d1ffa31e
[Li Xing Cong ]
* e10a923 2021-03-15 | Move repeated test pattern to server_test_type [Petr
Mensik]
* 51f7bc9 2021-03-18 | Create common function for forward dump, log and send
[Petr Mensik]
* 6c0bf79 2021-03-18 | Reduce few repetitions in forward code [Petr Mensik]
* 4b03170 2021-03-20 | Update German translation for 2.85rc1. [Matthias Andree]
* 1de6bbc 2021-03-19 | Fix FTBS on FreeBSD due to Linux-specific optimisation of
if_nametoindex() [Simon Kelley]
fixup PORTEPOCH for dnsmasq-devel
which used to be at 3 already earlier. Adjust vuxml entry accordingly.
Security: CVE-2021-3448
Security: 5b72b1ff-877c-11eb-bd4f-2f1d57dafe46
dns/dnsmasq: update to 2.81, unlink dnsmasq-devel
Update dns/dnsmasq to the new upstream version 2.81.
The Makefile has been rearranged with portfmt, except the
LDFLAGS+=..._intllibs... line that portfmt does not recognize.
Changelog:
<http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG;h=60b08d015b2d5a979f39b8ad43633b419135cb64;hb=7ddb99d251c3f5870c8c308a98bb8f283c831872#l1>
(or see CHANGELOG in the package)
Unlink dnsmasq-devel from the build, but keep the sources,
and mark it IGNORE and list dnsmasq-devel in MOVED.
Update dnsmasq-devel to 2.81rc1.
This currently adds two portability fixes that have been reported upstream.
Changelog:
<http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob;f=CHANGELOG;h=31b395c987fe50174533065afe816dec3d4284a1;hb=b2ed691eb3ca6488a8878f5f3dd950a07b14a9db#l1>
