From patchwork Thu Sep 24 13:04:04 2015 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Kevin Darbyshire-Bryant X-Patchwork-Id: 522303 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from arrakis.dune.hu (arrakis.dune.hu [78.24.191.176]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 2CAC314027C for ; Thu, 24 Sep 2015 23:04:32 +1000 (AEST) Received: from arrakis.dune.hu (localhost [127.0.0.1]) by arrakis.dune.hu (Postfix) with ESMTP id D337F28B409; Thu, 24 Sep 2015 15:03:06 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on arrakis.dune.hu X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=BAD_ENC_HEADER,BAYES_00 autolearn=unavailable version=3.3.2 Received: from arrakis.dune.hu (localhost [127.0.0.1]) by arrakis.dune.hu (Postfix) with ESMTP id 9F3FD287035 for ; Thu, 24 Sep 2015 15:02:57 +0200 (CEST) X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 HELO_IP_IN_CL_SUBNET=-1.2 (check from: .darbyshire-bryant. - helo: .emea01-am1-obe.outbound.protection.outlook. - helo-domain: .outlook.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -7.7 Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0060.outbound.protection.outlook.com [157.56.112.60]) by arrakis.dune.hu (Postfix) with ESMTPS for ; Thu, 24 Sep 2015 15:02:56 +0200 (CEST) Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=kevin@darbyshire-bryant.me.uk; Received: from Animal.darbyshire-bryant.me.uk (151.226.15.214) by DB5PR07MB0933.eurprd07.prod.outlook.com (10.161.200.140) with Microsoft SMTP Server (TLS) id 15.1.274.16; Thu, 24 Sep 2015 13:04:11 +0000 From: Kevin Darbyshire-Bryant To: Date: Thu, 24 Sep 2015 14:04:04 +0100 Message-ID: <1443099844-23691-1-git-send-email-kevin@darbyshire-bryant.me.uk> X-Mailer: git-send-email 1.9.1 MIME-Version: 1.0 X-Originating-IP: [151.226.15.214] X-ClientProxiedBy: VI1PR04CA0008.eurprd04.prod.outlook.com (25.163.3.18) To DB5PR07MB0933.eurprd07.prod.outlook.com (25.161.200.140) X-Microsoft-Exchange-Diagnostics: 1; DB5PR07MB0933; 2:Af6wcjZOnfQbotWW1bfiV63TWRWeQGMyr/afxXYZELVAIxS83optYZ7D3gdH9KK7CqGrEQVCRfV41/2LCv9flPa4Fy7UsCZ5d1ba/4sy8sexc8XbWIF/0Y89d0bQuw8AXxU7C2YOpgU+5gbDzs3W1BIqUTlBWIVxM4YX2nxZFBQ=; 3:OPRKRjcAHtij5yEjEl/b/vQi+rkAqXb47rXsfs3O+3rtXKQMmv2Cr3PuMh2x8Bq2ju306ljMCILo+lXmycjzZ9eRVRJLwQGj41WKOrSjvEQl007m9z7D2KJEJkSlmwJyMFosULU4wPv1FoQeDtwLsg==; 25:uS50AcNy3jetGZjvmmMptl1w2XA3gRzNKNL8Q1TLs0ElGpGI5Avc894U4VgEKINwWzFb/SekV/jSAnw7d11qZoNmf3G9BAKAxR4ZlnufpvuACLwr9r5gPjfzVBOcLIcsHujLB+RflvmrmUJDvkjHQu0yd37Jd6UTwQeGlzKR1kJRUkbSY57FIgVoySGLZvxv4jCEsD50X2nOz6q06XSVPbSycbAsxL3KqWjZLZLSVcuExFskZuu5umyk955CxOWagMrzgjHWinGSohwRnPNxqg== X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB5PR07MB0933; X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001); SRVR:DB5PR07MB0933; BCL:0; PCL:0; RULEID:; SRVR:DB5PR07MB0933; X-Microsoft-Exchange-Diagnostics: 1; DB5PR07MB0933; 4:hyzlSBqd7a3neoyjRqn3Ajjj7p44e6d2K9feFKZCYCvQ43afAFzbh1DqAfk+MYKPXovrTKTBuRLYQcojhIQyeAGJ5VmKnMOtQe7uNCPQm75X4IKc1VcIKFQYX0UenRcwV+uJfeDF47v/KrrG91rE6BQFUrOQRjecBul3xzEMVmaRStHBixC9Og02gyXhkrUqLFtY7f6b83VHZx8u7ErHozUfnAj9tNjxeA/vwQPTqReRn5l6S9wuoO7MZfb6m7jjFevMIFQ9xHNsANeIHTlVic2NucRQLnVX1u3I9ZfWKhP5PxSrl7KRb/B6mUpI00GTgr+nvpzu1RrNhbKot9gCZUBl4cYnXmdujSACIgB2zRk= X-Forefront-PRVS: 070912876F X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(6009001)(199003)(189002)(105586002)(74482002)(50226001)(50986999)(97736004)(81156007)(122386002)(5001830100001)(87976001)(4001540100001)(5001860100001)(42186005)(110136002)(40100003)(101416001)(50466002)(189998001)(69596002)(5001960100002)(68736005)(66066001)(5001920100001)(53416004)(5003940100001)(36756003)(107886002)(450100001)(77156002)(64706001)(47776003)(106356001)(5004730100002)(229853001)(2351001)(33646002)(48376002)(19580405001)(46102003)(62966003)(77096005)(5007970100001)(19580395003)(86362001)(92566002)(4001430100001); DIR:OUT; SFP:1101; SCL:1; SRVR:DB5PR07MB0933; H:Animal.darbyshire-bryant.me.uk; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: darbyshire-bryant.me.uk does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DB5PR07MB0933; 23:jya0+pswWGWgIF1e08lPfZRR0KP/pTdd6yRN4WKiG?= =?us-ascii?Q?WX3Fj3dImC4GNZlt5cO+0cjmT/Ov46H9PrWXZva0zKpYtmlxDgTnV3u4Szbv?= =?us-ascii?Q?OZZ/vThbLS5U9B2iommzPToWw5jkoRfLrc6v+/+m9YprjRxhdCm9QidOEDLn?= =?us-ascii?Q?30UibgzyoCICd4bdIEHJdeEuaJrIgvOCu2T4q7lpVSASUjU03BjXIu+SfXEr?= =?us-ascii?Q?rjZnaU6tjjg1HZkhfWLVwHGVAcTWpgi9iTYLOD6gj/gJWMIeKBwtNmptwCYt?= =?us-ascii?Q?GZzYNGlHzfSMp/yp19upMYjGD/lCVfL3qqp/bG7SMgoBJaLH9lDEIoaQAbjH?= =?us-ascii?Q?KEAmZvWvLOM8LJLq3jdl87ocq0kePiGPySFaE3nyJeVch/Xc+9fDnFFUq2QC?= =?us-ascii?Q?rXwUDvlSoZAPQNUiPMQLKtbXPu/tbwgOKqOOkCoqzp3MrUEFhKsSVVhFqfkV?= =?us-ascii?Q?uOtYTy2VMrp2c2SV+QHQQWrq2eKTUdrn/hoXTye1l81TDHSWGP4XNPTq75tA?= =?us-ascii?Q?djguYjc82g4q/OHvg8RmnOoP5iCAm5hNXjSW/+f0rXBEhwkUGINo2JFd+oTb?= =?us-ascii?Q?aR/1AVGoEqOgBIXH1SfIBzIIo8P+r6tdzdmR26L7Ml/werg23bdMbsISlDVd?= =?us-ascii?Q?Rb9Ltkx7L9smFf4+jW5hqxRpBE/XwZtE9doP5vzSK0J4wqHbRK2MhZuC5Ds7?= =?us-ascii?Q?tXrOyr/K04GW+Lbj2lhNyuKKLNpbI0G5W13QgxrrEVR2rGNohNuMoj5ns7nB?= =?us-ascii?Q?JuzpMR1OaZZa4AYUmZMhdfkwRy191m/TzAndxXVwC9VqNFM3iiZXu0kgZrrW?= =?us-ascii?Q?s4gsTQaUzZKLrUPTgXHjtJMxjnmPgWHRAZgAnqhihDSckPLYzMLc0CfliTNj?= =?us-ascii?Q?tqq3QNZt7C+wfnG3A0ctWD1tluzde9CKDNUtggttd3a583grxKGgB4y72cxW?= =?us-ascii?Q?rI64BtasTsJkhghSmVaiaIyxOhNJAe3UyiShtRIMRcdsJCDLfeJHGpCGAj49?= =?us-ascii?Q?zRvEXEyr0Npv49aZSk9IrWUhvwD7XtXRkD0b40cFxA5vlv1HoiN0BXld8IP6?= =?us-ascii?Q?m4mtreziEHYH6LF/Iev7uUCK3DBf4wi0t83CwzBfOneKzHyK/BT0VMtkQoh8?= =?us-ascii?Q?IMqcT86tPWhmXA2cwPfvkb5UUJE+Uk7HPFNvn+glmo+rxm/Qqg3WIZ4U0cs7?= =?us-ascii?Q?T6PWMJreB8fgceULqmTUOCFCtN6+1PbC5KRMesPF4T/SIDvlONE0MX4xUcp+?= =?us-ascii?Q?MvfSrhd5fiPCxk2d3tgcaW628RD2PdZ3Cl0yrDyxtQ8kb+Y/JGuYPqd0jfQ+?= =?us-ascii?B?dz09?= X-Microsoft-Exchange-Diagnostics: 1; DB5PR07MB0933; 5:TssRUOxoZRkkmSf903AbnTGY3L5sEJW6Ro3hI0E+QHJAqzYSrn0Mt4Qs2/rj/vBVDr/8mf6MCexAllioZf60rC3kFr5D8xVS4gBuCPai1nMf+pkFCkWZ570JyfVkKa5LUZPqUfPkWelgFckzSDGGuQ==; 24:YJB4K+NErwMCpIL/yvsoTUJrhtIBvl9z/20oJvjcvevO7id/wUYJBgOqQxgQ4kRrXBwCbAtfQgG/u5AUMxQqCLE3Eec1fL9qAEMOxjSx3Ag=; 20:NnE1IunmcOixc6HuVXRZDblzM5ykZadHo1yB7XN+b96xXYxULyeWsCcFU6Cmkd1Smh6U8Cf0uprKG8/SVschOA== SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: darbyshire-bryant.me.uk X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Sep 2015 13:04:11.3911 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR07MB0933 Subject: [OpenWrt-Devel] [PATCH] dnsmasq: prevent forwarding RFC6303 zones X-BeenThere: openwrt-devel@lists.openwrt.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: OpenWrt Development List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openwrt-devel-bounces@lists.openwrt.org Sender: "openwrt-devel" RFC6303 specifies reverse dns zones that ideally should not be forwarded to upstream (root) servers and create unnecessary load upon them. Signed-off-by: Kevin Darbyshire-Bryant --- package/network/services/dnsmasq/files/dhcp.conf | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/package/network/services/dnsmasq/files/dhcp.conf b/package/network/services/dnsmasq/files/dhcp.conf index 362b90a..88ff14d 100644 --- a/package/network/services/dnsmasq/files/dhcp.conf +++ b/package/network/services/dnsmasq/files/dhcp.conf @@ -20,6 +20,18 @@ config dnsmasq #list notinterface lo #list bogusnxdomain '64.94.110.11' option localservice 1 # disable to allow DNS requests from non-local subnets + list server '/0.in-addr.arpa/' + list server '/127.in-addr.arpa/' + list server '/254.169.in-addr.arpa/' + list server '/2.0.192.in-addr.arpa/' + list server '/100.51.198.in-addr.arpa/' + list server '/113.0.203.in-addr.arpa/' + list server '/255.255.255.255.in-addr.arpa/' + list server '/d.f.ip6.arpa/' + list server '/8.e.f.ip6.arpa/' + list server '/9.e.f.ip6.arpa/' + list server '/a.e.f.ip6.arpa/' + list server '/b.e.f.ip6.arpa/' config dhcp lan option interface lan