| Port details on branch 2025Q1 |
- dnsmasq-devel Lightweight DNS forwarder, DHCP, and TFTP server
- 2.91.t10,5 dns
 =0      2.91.t10,5Version of this port present on the latest quarterly branch.  DEPRECATED: Short-lived test branch, to be removed after v2.91 release
- Maintainer: mandree@FreeBSD.org
- Port Added: 2025-01-14 21:42:04
- Last Update: 2025-02-01 09:58:39
- Commit Hash: c9a9693
- License: GPLv2
- WWW:
- https://www.thekelleys.org.uk/dnsmasq/doc.html
- Description:
- Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It
is designed to provide DNS and, optionally, DHCP, to a small network. It can
serve the names of local machines which are not in the global DNS. The DHCP
server integrates with the DNS server and allows machines with DHCP-allocated
addresses to appear in the DNS with names configured either in each host or in
a central configuration file. Dnsmasq supports static and dynamic DHCP leases
and BOOTP/TFTP/PXE for network booting of diskless machines.
Dnsmasq is targeted at home networks using NAT and connected to the internet
via a modem, cable-modem or ADSL connection but would be a good choice for any
smallish network (up to 1000 clients is known to work) where low resource use
and ease of configuration are important. -- Simon Kelley
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- dnsmasq-devel>0:dns/dnsmasq-devel
- Conflicts:
- CONFLICTS_INSTALL:
- To install the port:
- cd /usr/ports/dns/dnsmasq-devel/ && make install clean
- To add the package, run one of these commands:
- pkg install dns/dnsmasq-devel
- pkg install dnsmasq-devel
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: dnsmasq-devel
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1738403531
SHA256 (dnsmasq-2.91test10.tar.xz) = c691d2b3e9c1c04f86ff945c20e70a9cd4f6149ee3b0964105f3c499cdbf3f0f
SIZE (dnsmasq-2.91test10.tar.xz) = 573292
No package information for this port in our database- Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- gettext-runtime>=0.22_1 : devel/gettext-runtime
- msgfmt : devel/gettext-tools
- gmake>=4.4.1 : devel/gmake
- pkgconf>=1.3.0_1 : devel/pkgconf
- Library dependencies:
-
- libidn2.so : dns/libidn2
- libgmp.so : math/gmp
- libnettle.so : security/nettle
- libintl.so : devel/gettext-runtime
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for dnsmasq-devel-2.91.t10,5:
DBUS=off: D-Bus IPC system support
DNSSEC=on: Enable DNSSEC caching and validation (needs nettle)
DOCS=on: Build and/or install documentation
IPSET=on: Dynamic firewall management of resolved names (needs PF)
IPV6=on: IPv6 protocol support
LUA=off: Support lease-change scripts written in Lua
====> Internationalization Support Level: you can only select none or one of them
IDN=off: IDN: Int'l Domain Names WITHOUT full NLS
NLS=on: IDN+NLS: Int'l Domain Names & National Language support
===> Use 'make config' to modify these settings
- Options name:
- dns_dnsmasq-devel
- USES:
- cpe shebangfix tar:xz gettext gmake iconv pkgconfig pkgconfig
- pkg-message:
- To enable dnsmasq, edit /usr/local/etc/dnsmasq.conf and
set dnsmasq_enable="YES" in /etc/rc.conf[.local]
Further options and actions are documented inside
/usr/local/etc/rc.d/dnsmasq
SECURITY RECOMMENDATION
~~~~~~~~~~~~~~~~~~~~~~~
It is recommended to enable the wpad-related options
at the end of the configuration file (you may need to
copy them from the example file to yours) to fix
CERT Vulnerability VU#598349.
- Master Sites:
|
Number of commits found: 5
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
2.91.t10,5
01 Feb 2025 09:58:39
 |
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test10
Git history:
* efb8f10 2025-01-23 | Fix potential memory leak [Brian Haley]
* 6dbdf16 2025-01-24 | Move debian submodule to submodules/dnsmasq-debian.
[Simon Kelley]
* 6e6a45a 2025-01-23 | Bump copyrights to 2025. [Simon Kelley]
MFH: 2025Q1
(cherry picked from commit bbee93d4beba19ab9767f3cfe0948df039aabb7f) |
2.91.t9,5
31 Jan 2025 21:12:14
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test9
Upstream commit history, all changes by Simon Kelley:
* a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage.
* 199e65c 2025-01-20 | Remove misleading comment.
* bb8811d 2025-01-20 | Convert DNS names in logs to all lower case.
* 995a16c 2025-01-19 | Implement "DNS-0x20 encoding".
* 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers.
Upstream CHANGELOG addition:
| Implement "DNS-0x20 encoding", for extra protection against
| reply-spoof attacks. Since DNS queries are case-insensitive, it's
| possible to randomly flip the case of letters in a query and still get (Only the first 15 lines of the commit message are shown above  ) |
2.91.t8,5
21 Jan 2025 20:21:17
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test8
Upstream CHANGELOG file addition:
| Handle DS queries to auth zones. When dnsmasq is configured to act as
| an authoritative server and has an authoritative zone configured, and
| recieves a query for that zone _as_forwarder_ it answers the query
| directly rather than forwarding it. This doesn't affect the answer, but
| it saves dnsmasq forwarding the query to the recusor upstream, whch then
| bounces it back to dnsmasq in auth mode. The exception should be when
| the query is for the root of zone, for a DS RR. The answer to that has
| to come from the parent, via the recursor, and will typically be a
| proof-of-nonexistence since dnsmasq doesn't support signed zones. This
| patch suppresses local answers and forces forwarding to the upstream
| recursor for such queries. It stops breakage when a DNSSEC validating (Only the first 15 lines of the commit message are shown above ) |
2.91.t7,5
14 Jan 2025 21:36:18
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test7
The local patch got merged upstream and was removed.
This is the changelog since test6:
* da58455 2025-01-13 | Tweak 7d915a0bb94260073ec7aa4dd00b787f3ea4b9e8 (tag:
v2.91test7)
* b915c9a 2025-01-13 | Attempt to keep running if a child process dies.
* 424aaa0 2025-01-13 | Fix another 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
SNAFU
* c72c895 2025-01-12 | Improve "no upstream servers configured" when D-Bus is
enabled [Andrew Sayers]
* b715611 2025-01-12 | Fix SNAFU in 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
* 7d915a0 2025-01-12 | Don't do retries over UDP when we've sent the query by
TCP.
* 509afcd 2025-01-12 | Refactor poll() loop.
* 51343bd 2025-01-12 | Treat replies with CD flag set the same for UDP and TCP
code paths.
* b58276a 2025-01-12 | Return EDE OTHER error when DNSSEC validation abandoned.
* f162d34 2024-12-29 | cache: Fix potential NULL deref in arcane situations.
[Matthias Andree]
(cherry picked from commit 44de445d96ac7096fb803c1bba9019c23cc24990) |
2.91.t6,5
14 Jan 2025 21:36:18
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to 2.91test6.
Also include one potential cache.c NULL deref which I have
submitted upstream.
Upstream Git log:
* 0003db1 2025-01-07 | Fix crash introduced in
6656790f2498f2a0b21086bc4ab47a2e38429a7c (tag: v2.91test6)
* 275f4a4 2025-01-07 | Remove arbitrary workspace size limit. (tag: v2.91test5)
* 12e4565 2025-01-06 | Improve "chown of PID file failed" message for missing
CAP_CHOWN [Andrew Sayers]
* 7af26ee 2025-01-07 | Fix manpage typo. [Andrew Sayers]
* 63dc6eb 2025-01-07 | Fix read_write() changes for TCP timeout.
* 6656790 2025-01-07 | Handle queries with EDNS client subnet fields better.
* c8de423 2025-01-07 | Fix finger-trouble in immediately previous commit.
* c52653f 2025-01-06 | Correctly handle failure of pipe() call in swap_to_tcp()
* e24c341 2025-01-01 | Fix wrong packet size when dumpong packets to file.
(cherry picked from commit c822c10442a488fe79326e2095236b94ea1e4a22) |
Number of commits found: 5
|
As an Amazon Associate I earn from qualifying purchases.