| blob | 37395418652da00cb05efbea3ea1f13a5a54dd96 |
1 version 2.55
2 Fix crash when /etc/ethers is in use. Thanks to
3 Gianluigi Tiesi for finding this.
5 Fix crash in netlink_multicast(). Thanks to Arno Wald for
6 finding this one.
8 Allow the empty domain "." in dhcp domain-search (119)
9 options.
12 version 2.54
13 There is no version 2.54 to avoid confusion with 2.53,
14 which incorrectly identifies itself as 2.54.
17 version 2.53
18 Fix failure to compile on Debian/kFreeBSD. Thanks to
19 Axel Beckert and Petr Salinger.
21 Fix code to avoid scary strict-aliasing warnings
22 generated by gcc 4.4.
24 Added FAQ entry warning about DHCP failures with Vista
25 when firewalls block 255.255.255.255.
27 Fixed bug which caused bad things to happen if a
28 resolv.conf file which exists is subsequently removed.
29 Thanks to Nikolai Saoukh for the patch.
31 Rationalised the DHCP tag system. Every configuration item
32 which can set a tag does so by adding "set:<tag>" and
33 every configuration item which is conditional on a tag is
34 made so by "tag:<tag>". The NOT operator changes to '!',
35 which is a bit more intuitive too. Dhcp-host directives
36 can set more than one tag now. The old '#' NOT,
37 "net:" prefix and no-prefixes are still honoured, so
38 no existing config file needs to be changed, but
39 the documentation and new-style config files should be
40 much less confusing.
42 Added --tag-if to allow boolean operations on tags.
43 This allows complicated logic to be clearer and more
44 general. A great suggestion from Richard Voigt.
46 Add broadcast/unicast information to DHCP logging.
48 Allow --dhcp-broadcast to be unconditional.
50 Fixed incorrect behaviour with NOT <tag> conditionals in
51 dhcp-options. Thanks to Max Turkewitz for assistance
52 finding this.
54 If we send vendor-class encapsulated options based on the
55 vendor-class supplied by the client, and no explicit
56 vendor-class option is given, echo back the vendor-class
57 from the client.
59 Fix bug which stopped dnsmasq from matching both a
60 circuitid and a remoteid. Thanks to Ignacio Bravo for
61 finding this.
63 Add --dhcp-proxy, which makes it possible to configure
64 dnsmasq to use a DHCP relay agent as a full proxy, with
65 all DHCP messages passing through the proxy. This is
66 useful if the relay adds extra information to the packets
67 it forwards, but cannot be configured with the RFC 5107
68 server-override option.
70 Added interface:<iface name> part to dhcp-range. The
71 semantics of this are very odd at first sight, but it
72 allows a single line of the form
73 dhcp-range=interface:virt0,192.168.0.4,192.168.0.200
74 to be added to dnsmasq configuration which then supplies
75 DHCP and DNS services to that interface, without affecting
76 what services are supplied to other interfaces and
77 irrespective of the existance or lack of
78 interface=<interface>
79 lines elsewhere in the dnsmasq configuration. The idea is
80 that such a line can be added automatically by libvirt
81 or equivalent systems, without disturbing any manual
82 configuration.
84 Similarly to the above, allow --enable-tftp=<interface>
86 Allow a TFTP root to be set separately for requests via
87 different interfaces, --tftp-root=<path>,<interface>
89 Correctly handle and log clashes between CNAMES and
90 DNS names being given to DHCP leases. This fixes a bug
91 which caused nonsense IP addresses to be logged. Thanks to
92 Sergei Zhirikov for finding and analysing the problem.
94 Tweak flush_log so as to avoid leaving the log
95 file in non-blocking mode. O_NONBLOCK is a property of the
96 file, not the process/descriptor.
98 Fix contrib/Solaris10/create_package
99 (/usr/man -> /usr/share/man) Thanks to Vita Batrla.
101 Fix a problem where, if a client got a lease, then went
102 to another subnet and got another lease, then moved back,
103 it couldn't resume the old lease, but would instead get
104 a new address. Thanks to Leonardo Rodrigues for spotting
105 this and testing the fix.
107 Fix weird bug which sometimes omitted certain characters
108 from the start of quoted strings in dhcp-options. Thanks
109 to Dayton Turner for spotting the problem.
111 Add facility to redirect some domains to the standard
112 upstream servers: this allows something like
113 --server=/google.com/1.2.3.4 --server=/www.google.com/#
114 which will send queries for *.google.com to 1.2.3.4,
115 except *www.google.com which will be forwarded as usual.
116 Thanks to AJ Weber for prompting this addition.
118 Improve the hash-algorithm used to generate IP addresses
119 from MAC addresses during initial DHCP address
120 allocation. This improves performance when large numbers
121 of hosts with similar MAC addresses all try and get an IP
122 address at the same time. Thanks to Paul Smith for his
123 work on this.
125 Tweak DHCP code so that --bridge-interface can be used to
126 select which IP alias of an interface should be used for
127 DHCP purposes on Linux. If eth0 has an alias eth0:dhcp
128 then adding --bridge-interface=eth0:dhcp,eth0 will use
129 the address of eth0:dhcp to determine the correct subnet
130 for DHCP address allocation. Thanks to Pawel Golaszewski
131 for prompting this and Eric Cooper for further testing.
133 Add --dhcp-generate-names. Suggestion by Ferenc Wagner.
135 Tweak DNS server selection algorithm when there is more
136 than one server available for a domain, eg.
137 --server=/mydomain/1.1.1.1
138 --server=/mydomain/2.2.2.2
139 Thanks to Alberto Cuesta-Canada for spotting a weakness
140 here.
142 Add --max-ttl. Thanks to Fredrik Ringertz for the patch.
144 Allow --log-facility=- to force all logging to
145 stderr. Suggestion from Clemens Fischer.
147 Fix regression which caused configuration like
148 --address=/.domain.com/1.2.3.4 to be rejected. The dot to the
149 left of the domain has been implied and not required for a
150 long time, but it should be accepted for backward
151 compatibility. Thanks to Andrew Burcin for spotting this.
153 Add --rebind-domain-ok and --rebind-localhost-ok.
154 Suggestion from Clemens Fischer.
156 Log replies to queries of type TXT, when --log-queries
157 is set.
159 Fix compiler warnings when compiled with -DNO_DHCP. Thanks
160 to Shantanu Gadgil for the patch.
162 Updated French translation. Thanks to Gildas Le Nadan.
164 Updated Polish translation. Thanks to Jan Psota.
166 Updated German translation. Thanks to Matthias Andree.
168 Added contrib/static-arp, thanks to Darren Hoo.
170 Fix corruption of the domain when a name from /etc/hosts
171 overrides one supplied by a DHCP client. Thanks to Fedor
172 Kozhevnikov for spotting the problem.
174 Updated Spanish translation. Thanks to Chris Chatham.
177 version 2.52
178 Work around a Linux kernel bug which insists that the
179 length of the option passed to setsockopt must be at least
180 sizeof(int) bytes, even if we're calling SO_BINDTODEVICE
181 and the device name is "lo". Note that this is fixed
182 in kernel 2.6.31, but the workaround is harmless and
183 allows earlier kernels to be used. Also fix dnsmasq
184 bug which reported the wrong address when this failed.
185 Thanks to Fedor for finding this.
187 The API for IPv6 PKTINFO changed around Linux kernel
188 2.6.14. Workaround the case where dnsmasq is compiled
189 against newer headers, but then run on an old kernel:
190 necessary for some *WRT distros.
192 Re-read the set of network interfaces when re-loading
193 /etc/resolv.conf if --bind-interfaces is not set. This
194 handles the case that loopback interfaces do not exist
195 when dnsmasq is first started.
197 Tweak the PXE code to support port 4011. This should
198 reduce broadcasts and make things more reliable when other
199 servers are around. It also improves inter-operability
200 with certain clients.
202 Make a pxe-service configuration with no filename or boot
203 service type legal: this does a local boot. eg.
204 pxe-service=x86PC, "Local boot"
206 Be more conservative in detecting "A for A"
207 queries. Dnsmasq checks if the name in a type=A query looks
208 like a dotted-quad IP address and answers the query itself
209 if so, rather than forwarding it. Previously dnsmasq
210 relied in the library function inet_addr() to convert
211 addresses, and that will accept some things which are
212 confusing in this context, like 1.2.3 or even just
213 1234. Now we only do A for A processing for four decimal
214 numbers delimited by dots.
216 A couple of tweaks to fix compilation on Solaris. Thanks
217 to Joel Macklow for help with this.
219 Another Solaris compilation tweak, needed for Solaris
220 2009.06. Thanks to Lee Essen for that.
222 Added extract packaging stuff from Lee Essen to
223 contrib/Solaris10.
225 Increased the default limit on number of leases to 1000
226 (from 150). This is mainly a defence against DoS attacks,
227 and for the average "one for two class C networks"
228 installation, IP address exhaustion does that just as
229 well. Making the limit greater than the number of IP
230 addresses available in such an installation removes a
231 surprise which otherwise can catch people out.
233 Removed extraneous trailing space in the value of the
234 DNSMASQ_TIME_REMAINING DNSMASQ_LEASE_LENGTH and
235 DNSMASQ_LEASE_EXPIRES environment variables. Thanks to
236 Gildas Le Nadan for spotting this.
238 Provide the network-id tags for a DHCP transaction to
239 the lease-change script in the environment variable
240 DNSMASQ_TAGS. A good suggestion from Gildas Le Nadan.
242 Add support for RFC3925 "Vendor-Identifying Vendor
243 Options". The syntax looks like this:
244 --dhcp-option=vi-encap:<enterprise number>, .........
246 Add support to --dhcp-match to allow matching against
247 RFC3925 "Vendor-Identifying Vendor Classes". The syntax
248 looks like this:
249 --dhcp-match=tag,vi-encap<enterprise number>, <value>
251 Add some application specific code to assist in
252 implementing the Broadband forum TR069 CPE-WAN
253 specification. The details are in contrib/CPE-WAN/README
255 Increase the default DNS packet size limit to 4096, as
256 recommended by RFC5625 section 4.4.3. This can be
257 reconfigured using --edns-packet-max if needed. Thanks to
258 Francis Dupont for pointing this out.
260 Rewrite query-ids even for TSIG signed packets, since
261 this is allowed by RFC5625 section 4.5.
263 Use getopt_long by default on OS X. It has been supported
264 since version 10.3.0. Thanks to Arek Dreyer for spotting
265 this.
267 Added up-to-date startup configuration for MacOSX/launchd
268 in contrib/MacOSX-launchd. Thanks to Arek Dreyer for
269 providing this.
271 Fix link error when including Dbus but excluding DHCP.
272 Thanks to Oschtan for the bug report.
274 Updated French translation. Thanks to Gildas Le Nadan.
276 Updated Polish translation. Thanks to Jan Psota.
278 Updated Spanish translation. Thanks to Chris Chatham.
280 Fixed confusion about domains, when looking up DHCP hosts
281 in /etc/hosts. This could cause spurious "Ignoring
282 domain..." messages. Thanks to Fedor Kozhevnikov for
283 finding and analysing the problem.
286 version 2.51
287 Add support for internationalised DNS. Non-ASCII characters
288 in domain names found in /etc/hosts, /etc/ethers and
289 /etc/dnsmasq.conf will be correctly handled by translation to
290 punycode, as specified in RFC3490. This function is only
291 available if dnsmasq is compiled with internationalisation
292 support, and adds a dependency on GNU libidn. Without i18n
293 support, dnsmasq continues to be compilable with just
294 standard tools. Thanks to Yves Dorfsman for the
295 suggestion.
297 Add two more environment variables for lease-change scripts:
298 First, DNSMASQ_SUPPLIED_HOSTNAME; this is set to the hostname
299 supplied by a client, even if the actual hostname used is
300 over-ridden by dhcp-host or dhcp-ignore-names directives.
301 Also DNSMASQ_RELAY_ADDRESS which gives the address of
302 a DHCP relay, if used.
303 Suggestions from Michael Rack.
305 Fix regression which broke echo of relay-agent
306 options. Thanks to Michael Rack for spotting this.
308 Don't treat option 67 as being interchangeable with
309 dhcp-boot parameters if it's specified as
310 dhcp-option-force.
312 Make the code to call scripts on lease-change compile-time
313 optional. It can be switched off by editing src/config.h
314 or building with "make COPTS=-DNO_SCRIPT".
316 Make the TFTP server cope with filenames from Windows/DOS
317 which use '\' as pathname separator. Thanks to Ralf for
318 the patch.
320 Updated Polish translation. Thanks to Jan Psota.
322 Warn if an IP address is duplicated in /etc/ethers. Thanks
323 to Felix Schwarz for pointing this out.
325 Teach --conf-dir to take an option list of file suffices
326 which will be ignored when scanning the directory. Useful
327 for backup files etc. Thanks to Helmut Hullen for the
328 suggestion.
330 Add new DHCP option named tftpserver-address, which
331 corresponds to the third argument of dhcp-boot. This
332 allows the complete functionality of dhcp-boot to be
333 replicated with dhcp-option. Useful when using
334 dhcp-optsfile.
336 Test which upstream nameserver to use every 10 seconds
337 or 50 queries and not just when a query times out and
338 is retried. This should improve performance when there
339 is a slow nameserver in the list. Thanks to Joe for the
340 suggestion.
342 Don't do any PXE processing, even for clients with the
343 correct vendorclass, unless at least one pxe-prompt or
344 pxe-service option is given. This stops dnsmasq
345 interfering with proxy PXE subsystems when it is just
346 the DHCP server. Thanks to Spencer Clark for spotting this.
348 Limit the blocksize used for TFTP transfers to a value
349 which avoids packet fragmentation, based on the MTU of the
350 local interface. Many netboot ROMs can't cope with
351 fragmented packets.
353 Honour dhcp-ignore configuration for PXE and proxy-PXE
354 requests. Thanks to Niels Basjes for the bug report.
356 Updated French translation. Thanks to Gildas Le Nadan.
359 version 2.50
360 Fix security problem which allowed any host permitted to
361 do TFTP to possibly compromise dnsmasq by remote buffer
362 overflow when TFTP enabled. Thanks to Core Security
363 Technologies and Iván Arce, Pablo Hernán Jorge, Alejandro
364 Pablo Rodriguez, MartÃn Coco, Alberto Soliño Testa and
365 Pablo Annetta. This problem has Bugtraq id: 36121
366 and CVE: 2009-2957
368 Fix a problem which allowed a malicious TFTP client to
369 crash dnsmasq. Thanks to Steve Grubb at Red Hat for
370 spotting this. This problem has Bugtraq id: 36120 and
371 CVE: 2009-2958
374 version 2.49
375 Fix regression in 2.48 which disables the lease-change
376 script. Thanks to Jose Luis Duran for spotting this.
378 Log TFTP "file not found" errors. These were not logged,
379 since a normal PXELinux boot generates many of them, but
380 the lack of the messages seems to be more confusing than
381 routinely seeing them when there is no real error.
383 Update Spanish translation. Thanks to Chris Chatham.
386 version 2.48
387 Archived the extensive, backwards, changelog to
388 CHANGELOG.archive. The current changelog now runs from
389 version 2.43 and runs conventionally.
391 Fixed bug which broke binding of servers to physical
392 interfaces when interface names were longer than four
393 characters. Thanks to MURASE Katsunori for the patch.
395 Fixed netlink code to check that messages come from the
396 correct source, and not another userspace process. Thanks
397 to Steve Grubb for the patch.
399 Maintainability drive: removed bug and missing feature
400 workarounds for some old platforms. Solaris 9, OpenBSD
401 older than 4.1, Glibc older than 2.2, Linux 2.2.x and
402 DBus older than 1.1.x are no longer supported.
404 Don't read included configuration files more than once:
405 allows complex configuration structures without problems.
407 Mark log messages from the various subsystems in dnsmasq:
408 messages from the DHCP subsystem now have the ident string
409 "dnsmasq-dhcp" and messages from TFTP have ident
410 "dnsmasq-tftp". Thanks to Olaf Westrik for the patch.
412 Fix possible infinite DHCP protocol loop when an IP
413 address nailed to a hostname (not a MAC address) and a
414 host sometimes provides the name, sometimes not.
416 Allow --addn-hosts to take a directory: all the files
417 in the directory are read. Thanks to Phil Cornelius for
418 the suggestion.
420 Support --bridge-interface on all platforms, not just BSD.
422 Added support for advanced PXE functions. It's now
423 possible to define a prompt and menu options which will
424 be displayed when a client PXE boots. It's also possible to
425 hand-off booting to other boot servers. Proxy-DHCP, where
426 dnsmasq just supplies the PXE information and another DHCP
427 server does address allocation, is also allowed. See the
428 --pxe-prompt and --pxe-service keywords. Thanks to
429 Alkis Georgopoulos for the suggestion and Guilherme Moro
430 and Michael Brown for assistance.
432 Improvements to DHCP logging. Thanks to Tom Metro for
433 useful suggestions.
435 Add ability to build dnsmasq without DHCP support. To do
436 this, edit src/config.h or build with
437 "make COPTS=-DNO_DHCP". Thanks to Mahavir Jain for the patch.
439 Added --test command-line switch - syntax check
440 configuration files only.
442 Updated French translation. Thanks to Gildas Le Nadan.
445 version 2.47
446 Updated French translation. Thanks to Gildas Le Nadan.
448 Fixed interface enumeration code to work on NetBSD
449 5.0. Thanks to Roy Marples for the patch.
451 Updated config.h to use the same location for the lease
452 file on NetBSD as the other *BSD variants. Also allow
453 LEASEFILE and CONFFILE symbols to be overriden in CFLAGS.
455 Handle duplicate address detection on IPv6 more
456 intelligently. In IPv6, an interface can have an address
457 which is not usable, because it is still undergoing DAD
458 (such addresses are marked "tentative"). Attempting to
459 bind to an address in this state returns an error,
460 EADDRNOTAVAIL. Previously, on getting such an error,
461 dnsmasq would silently abandon the address, and never
462 listen on it. Now, it retries once per second for 20
463 seconds before generating a fatal error. 20 seconds should
464 be long enough for any DAD process to complete, but can be
465 adjusted in src/config.h if necessary. Thanks to Martin
466 Krafft for the bug report.
468 Add DBus introspection. Patch from Jeremy Laine.
470 Update Dbus configuration file. Patch from Colin Walters.
471 Fix for this bug:
472 http://bugs.freedesktop.org/show_bug.cgi?id=18961
474 Support arbitrarily encapsulated DHCP options, suggestion
475 and initial patch from Samium Gromoff. This is useful for
476 (eg) gPXE, which expect all its private options to be
477 encapsulated inside a single option 175. So, eg,
479 dhcp-option = encap:175, 190, "iscsi-client0"
480 dhcp-option = encap:175, 191, "iscsi-client0-secret"
482 will provide iSCSI parameters to gPXE.
484 Enhance --dhcp-match to allow testing of the contents of a
485 client-sent option, as well as its presence. This
486 application in mind for this is RFC 4578
487 client-architecture specifiers, but it's generally useful.
488 Joey Korkames suggested the enhancement.
490 Move from using the IP_XMIT_IF ioctl to IP_BOUND_IF on
491 OpenSolaris. Thanks to Bastian Machek for the heads-up.
493 No longer complain about blank lines in
494 /etc/ethers. Thanks to Jon Nelson for the patch.
496 Fix binding of servers to physical devices, eg
497 --server=/domain/1.2.3.4@eth0 which was broken from 2.43
498 onwards unless --query-port=0 set. Thanks to Peter Naulls
499 for the bug report.
501 Reply to DHCPINFORM requests even when the supplied ciaddr
502 doesn't fall in any dhcp-range. In this case it's not
503 possible to supply a complete configuration, but
504 individually-configured options (eg PAC) may be useful.
506 Allow the source address of an alias to be a range:
507 --alias=192.168.0.0,10.0.0.0,255.255.255.0 maps the whole
508 subnet 192.168.0.0->192.168.0.255 to 10.0.0.0->10.0.0.255,
509 as before.
510 --alias=192.168.0.10-192.168.0.40,10.0.0.0,255.255.255.0
511 maps only the 192.168.0.10->192.168.0.40 region. Thanks to
512 Ib Uhrskov for the suggestion.
514 Don't dynamically allocate DHCP addresses which may break
515 Windows. Addresses which end in .255 or .0 are broken in
516 Windows even when using supernetting.
517 --dhcp-range=192.168.0.1,192.168.1.254,255,255,254.0 means
518 192.168.0.255 is a valid IP address, but not for Windows.
519 See Microsoft KB281579. We therefore no longer allocate
520 these addresses to avoid hard-to-diagnose problems.
522 Update Polish translation. Thanks to Jan Psota.
524 Delete the PID-file when dnsmasq shuts down. Note that by
525 this time, dnsmasq is normally not running as root, so
526 this will fail if the PID-file is stored in a root-owned
527 directory; such failure is silently ignored. To take
528 advantage of this feature, the PID-file must be stored in a
529 directory owned and write-able by the user running
530 dnsmasq.
533 version 2.46
534 Allow --bootp-dynamic to take a netid tag, so that it may
535 be selectively enabled. Thanks to Olaf Westrik for the
536 suggestion.
538 Remove ISC-leasefile reading code. This has been
539 deprecated for a long time, and last time I removed it, it
540 ended up going back by request of one user. This time,
541 it's gone for good; otherwise it would need to be
542 re-worked to support multiple domains (see below).
544 Support DHCP clients in multiple DNS domains. This is a
545 long-standing request. Clients are assigned to a domain
546 based in their IP address.
548 Add --dhcp-fqdn flag, which changes behaviour if DNS names
549 assigned to DHCP clients. When this is set, there must be
550 a domain associated with each client, and only
551 fully-qualified domain names are added to the DNS. The
552 advantage is that the only the FQDN needs to be unique,
553 so that two or more DHCP clients can share a hostname, as
554 long as they are in different domains.
556 Set environment variable DNSMASQ_DOMAIN when invoking
557 lease-change script. This may be useful information to
558 have now that it's variable.
560 Tighten up data-checking code for DNS packet
561 handling. Thanks to Steve Dodd who found certain illegal
562 packets which could crash dnsmasq. No memory overwrite was
563 possible, so this is not a security issue beyond the DoS
564 potential.
566 Update example config dhcp option 47, the previous
567 suggestion generated an illegal, zero-length,
568 option. Thanks to Matthias Andree for finding this.
570 Rewrite hosts-file reading code to remove the limit of
571 1024 characters per line. John C Meuser found this.
573 Create a net-id tag with the name of the interface on
574 which the DHCP request was received.
576 Fixed minor memory leak in DBus code, thanks to Jeremy
577 Laine for the patch.
579 Emit DBus signals as the DHCP lease database
580 changes. Thanks to Jeremy Laine for the patch.
582 Allow for more that one MAC address in a dhcp-host
583 line. This configuration tells dnsmasq that it's OK to
584 abandon a DHCP lease of the fixed address to one MAC
585 address, if another MAC address in the dhcp-host statement
586 asks for an address. This is useful to give a fixed
587 address to a host which has two network interfaces
588 (say, a laptop with wired and wireless interfaces.)
589 It's very important to ensure that only one interface
590 at a time is up, since dnsmasq abandons the first lease
591 and re-uses the address before the leased time has
592 elapsed. John Gray suggested this.
594 Tweak the response to a DHCP request packet with a wrong
595 server-id when --dhcp-authoritative is set; dnsmasq now
596 returns a DHCPNAK, rather than silently ignoring the
597 packet. Thanks to Chris Marget for spotting this
598 improvement.
600 Add --cname option. This provides a limited alias
601 function, usable for DHCP names. Thanks to AJ Weber for
602 suggestions on this.
604 Updated contrib/webmin with latest version from Neil
605 Fisher.
607 Updated Polish translation. Thanks to Jan Psota.
609 Correct the text names for DHCP options 64 and 65 to be
610 "nis+-domain" and "nis+-servers".
612 Updated Spanish translation. Thanks to Chris Chatham.
614 Force re-reading of /etc/resolv.conf when an "interface
615 up" event occurs.
618 version 2.45
619 Fix total DNS failure in release 2.44 unless --min-port
620 specified. Thanks to Steven Barth and Grant Coady for
621 bugreport. Also reject out-of-range port spec, which could
622 break things too: suggestion from Gilles Espinasse.
625 version 2.44
626 Fix crash when unknown client attempts to renew a DHCP
627 lease, problem introduced in version 2.43. Thanks to
628 Carlos Carvalho for help chasing this down.
630 Fix potential crash when a host which doesn't have a lease
631 does DHCPINFORM. Again introduced in 2.43. This bug has
632 never been reported in the wild.
634 Fix crash in netlink code introduced in 2.43. Thanks to
635 Jean Wolter for finding this.
637 Change implementation of min_port to work even if min-port
638 is large.
640 Patch to enable compilation of latest Mac OS X. Thanks to
641 David Gilman.
643 Update Spanish translation. Thanks to Christopher Chatham.
646 version 2.43
647 Updated Polish translation. Thanks to Jan Psota.
649 Flag errors when configuration options are repeated
650 illegally.
652 Further tweaks for GNU/kFreeBSD
654 Add --no-wrap to msgmerge call - provides nicer .po file
655 format.
657 Honour lease-time spec in dhcp-host lines even for
658 BOOTP. The user is assumed to known what they are doing in
659 this case. (Hosts without the time spec still get infinite
660 leases for BOOTP, over-riding the default in the
661 dhcp-range.) Thanks to Peter Katzmann for uncovering this.
663 Fix problem matching relay-agent ids. Thanks to Michael
664 Rack for the bug report.
666 Add --naptr-record option. Suggestion from Johan
667 Bergquist.
669 Implement RFC 5107 server-id-override DHCP relay agent
670 option.
672 Apply patches from Stefan Kruger for compilation on
673 Solaris 10 under Sun studio.
675 Yet more tweaking of Linux capability code, to suppress
676 pointless wingeing from kernel 2.6.25 and above.
678 Improve error checking during startup. Previously, some
679 errors which occurred during startup would be worked
680 around, with dnsmasq still starting up. Some were logged,
681 some silent. Now, they all cause a fatal error and dnsmasq
682 terminates with a non-zero exit code. The errors are those
683 associated with changing uid and gid, setting process
684 capabilities and writing the pidfile. Thanks to Uwe
685 Gansert and the Suse security team for pointing out
686 this improvement, and Bill Reimers for good implementation
687 suggestions.
689 Provide NO_LARGEFILE compile option to switch off largefile
690 support when compiling against versions of uclibc which
691 don't support it. Thanks to Stephane Billiart for the patch.
693 Implement random source ports for interactions with
694 upstream nameservers. New spoofing attacks have been found
695 against nameservers which do not do this, though it is not
696 clear if dnsmasq is vulnerable, since to doesn't implement
697 recursion. By default dnsmasq will now use a different
698 source port (and socket) for each query it sends
699 upstream. This behaviour can suppressed using the
700 --query-port option, and the old default behaviour
701 restored using --query-port=0. Explicit source-port
702 specifications in --server configs are still honoured.
704 Replace the random number generator, for better
705 security. On most BSD systems, dnsmasq uses the
706 arc4random() RNG, which is secure, but on other platforms,
707 it relied on the C-library RNG, which may be
708 guessable and therefore allow spoofing. This release
709 replaces the libc RNG with the SURF RNG, from Daniel
710 J. Berstein's DJBDNS package.
712 Don't attempt to change user or group or set capabilities
713 if dnsmasq is run as a non-root user. Without this, the
714 change from soft to hard errors when these fail causes
715 problems for non-root daemons listening on high
716 ports. Thanks to Patrick McLean for spotting this.
718 Updated French translation. Thanks to Gildas Le Nadan.
721 version 2.42
722 The changelog for version 2.42 and earlier is
723 available in CHANGELOG.archive.