Íåñêîëüêî DNS è dnsmasq

**macek** · 28-01-2010, 16:27

Óñòàíîâèë è íàñòðîèë bind.
âðîäå áû äíñèò ))

òåïåðü ïûòàþñü çàðåãèñòðèðîâàòüñÿ íà ns2.trifle.net è âîò ÷òî ïîëó÷àþ:

Îøèáêà: ñåðâåð <ìîé_IP> íå ÿâëÿåòñÿ primary äëÿ <ìîé_ñàéò.ðó> èëè íå îòäàåò AXFR.

Ïîïðîáîâàë çàïðîñèòü axfr ñàì:
dig <èìÿ_çîíû> axfr @ìîé_ñàéò.ðó
;; communications error to <ìîé_IP>#53: connection reset

Ïîðò 53 îòêðûò íà ôàéðâîëå. ñìîòðþ ëîãè:

Jan 27 13:48:48 named[1410]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 27 13:48:48 named[1410]: binding TCP socket: address in use
Jan 27 13:48:48 named[1410]: listening on IPv4 interface vlan1, <ìîé_IP>#53
Jan 27 13:48:48 named[1410]: binding TCP socket: address in use
Jan 27 13:48:48 named[1410]: listening on IPv4 interface br0, 192.168.1.1#53
Jan 27 13:48:48 named[1410]: binding TCP socket: address in use

Ò.å. ñêîðåå âñåãî ïîðò äåðæèò dnsmasq.
Òåïåðü âîïðîñ - åñëè ÿ îòêëþ÷ó åãî (port=0 â /tmp/local/dnsmasq.conf), íå ïîâëèÿåò ëè ýòî íà ôóíêöèîíàëüíîñòü dhcp è ðåñîëâèíêà ëîêàëüíûõ èì¸í?

**mixir** · 12-07-2011, 15:00

Ïîäñêàæèòå ïîæàëóéñòà êàê ìîæíî îáîéòè äàííóþ ïðîáëåìû? èìåþ ðîóòåð è ñåðâåð â ëîê ñåòè, ïîðòû 21, 80 è òä ïðîáðîñèëèñü íîðìàëüíî, ñåðâåð ðàáîòàåò, à 53 äëÿ íñ ñåðâåðà â ëî ñåòè íåò - èç âíåøêè îí âñåãäà çàêðûò, ÿ óæå ìíîãî ðàç ïûòàëñÿ íàñòðàèâàòü virtual server íè÷å íå ïîìîãàåò, ãðåøó íà âñòðîåííûé dnsmasq íî òîãäà ïî÷åìó 80 ïîðò ïðîðîñèëñÿ áåç ïðîáëåì ? ((

**reiten** · 12-07-2011, 18:24

Ñòðàííî. Åñëè âñå ñäåëàíî ïðàâèëüíî, äîëæíî ðàáîòàòü. Êàêàÿ ïðîøèâêà? 53-é ïîðò ïðîáðàñûâàåòñÿ è äëÿ tcp-, è äëÿ udp-ñîåäèíåíèé?

Êàê âàðèàíò - âïèñàòü â post-firewall

Code:

iptables -t nat -A VSERVER -p tcp -m tcp --dport 53 -j DNAT --to-destination 192.168.1.x
iptables -t nat -A VSERVER -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.1.x

Íî ýòî êðàéíÿÿ ìåðà.

**mixir** · 13-07-2011, 10:12

Originally Posted by reiten

Ñòðàííî. Åñëè âñå ñäåëàíî ïðàâèëüíî, äîëæíî ðàáîòàòü. Êàêàÿ ïðîøèâêà? 53-é ïîðò ïðîáðàñûâàåòñÿ è äëÿ tcp-, è äëÿ udp-ñîåäèíåíèé?

Êàê âàðèàíò - âïèñàòü â post-firewall

Code:

iptables -t nat -A VSERVER -p tcp -m tcp --dport 53 -j DNAT --to-destination 192.168.1.x
iptables -t nat -A VSERVER -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.1.x

Íî ýòî êðàéíÿÿ ìåðà.

Ïðîøèâêà 1.9.2.7-10 ïðîáðàñûâàë îáà TCP è UPD ÷åðåç BOTH, udp ïðîáðîñèëñÿ è ðàáîòàåò, à TCP íåò. Ñåðâåð íà ëîêàëüíîé ìàøèíå bind îòêðûâàåò è tcp è udp.

ïî÷åìó òî post-firewall òàì ãäå îí äîëæåí ëåæàòü ÿ íå íàøåë ó ñåáÿ íà ðîóòåðå

âïèñûâàíèå ÷åðåç telnet íå äàëî ðåçóëüòàòîâ, 53 ïîðò çàêðûò íàðóæó..

**mixir** · 13-07-2011, 14:23

53 UDP ïðîáðàñûâàåòñÿ íîðìàëüíî, èç èíòåðíåòà âèäíî è ìîæíî ðåçîëâèòü àäðåñà, à âîò 53 TCP çàêðûò....âñå áû íè÷åãî íî 53 TCP íóæåí äëÿ AXFR

**mixir** · 13-07-2011, 18:32

Õåëï

âîò ëèñòèíã IPTABLES

Code:

IP Tables

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 
 3787 1146K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           ctstate NEW 
  172 37632 ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0           ctstate NEW 
    4   128 ACCEPT     2    --  *      *       0.0.0.0/0            224.0.0.0/4         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         udp dpt:!1900 
   15  6981 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:67 dpt:68 
  983 79078 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 1303 packets, 77261 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  br0    br0     0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         
  820 42000 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
 4927 1231K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 DROP       all  --  !br0   ppp0    0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  !br0   vlan1   0.0.0.0/0            0.0.0.0/0           
  132 10040 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate DNAT 

Chain OUTPUT (policy ACCEPT 4404 packets, 1150K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain BRUTE (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain MACS (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain SECURITY (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02 limit: avg 1/sec burst 5 
    0     0 RETURN     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x04 limit: avg 1/sec burst 5 
    0     0 RETURN     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 5/sec burst 5 
    0     0 RETURN     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 5/sec burst 5 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain UPNP (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.1.10        udp dpt:60669 

Chain logaccept (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate NEW LOG flags 39 level 4 prefix `ACCEPT ' 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate NEW LOG flags 39 level 4 prefix `DROP ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           


IP Tables NAT

Chain PREROUTING (policy ACCEPT 1871 packets, 133K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  332 25807 VSERVER    all  --  *      *       0.0.0.0/0            85.21.63.199        
  192 10109 VSERVER    all  --  *      *       0.0.0.0/0            10.86.68.141        

Chain POSTROUTING (policy ACCEPT 47 packets, 4283 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  544 31737 MASQUERADE  all  --  *      ppp0   !85.21.63.199         0.0.0.0/0           
  143  7796 MASQUERADE  all  --  *      vlan1  !10.86.68.141         0.0.0.0/0           
   28  2250 MASQUERADE  all  --  *      br0     192.168.1.0/24       192.168.1.0/24      

Chain OUTPUT (policy ACCEPT 49 packets, 4595 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain UPNP (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    80 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:60669 to:192.168.1.10:60669 

Chain VSERVER (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  524 35916 UPNP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:9300:9600 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 to:192.168.1.5 
    8   516 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 to:192.168.1.5 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:60 to:192.168.1.5:80

**mixir** · 13-07-2011, 18:40

È åùå ïî÷åìó òî åùå îäíî ïðàâèëî èç VSERVER íå îáðàáàòûâàåòñÿ
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:60 to:192.168.1.5:80

äîñòóï èç âíåøêè íà 60 ñ ôîðâàðäèíãîì íà HTTP

ïðîøèâêó îáíîâèë äî 1.9.2.7-rtn-r3121 - òåæå ãðàáëè

**reiten** · 13-07-2011, 19:29

Ïîäðîáíî ðàçîáðàë âûâîä iptables è ñðàâíèë ñ ñèòóàöèåé íà ñâîåì RT-N16. Íèêàêîé êðàìîëû íå íàøåë.

Êàê âðåìåííóþ ìåðó, ìîæíî ïîïðîáîâàòü íà ðîóòåðå ÷òî-òî âðîäå

Code:

iptables -I FORWARD -d 192.168.1.5 -p tcp -m tcp --dport 53 -j ACCEPT

Ýòî íà ñëó÷àé, åñëè ÿ ÷òî-òî ïðîãëÿäåë, è ñ ôèëüòðàìè ÷òî-òî íàõîìóòàëè.

Â ïðîòèâíîì ñëó÷àå õîòåëîñü áû ãëÿíóòü ëîã iptables ñ êîìïüþòåðà 192.168.1.5 - ìîæåò íà íåì ÷òî-òî èíòåðåñíîå ïðîïèñàíî.
Êñòàòè, ÷òî ïðîèñõîäèò, åñëè ñ ðîóòåðà ïîïðîáîâàòü çàïóñòèòü:

Code:

 telnet 192.168.1.5 53

?

**_ad** · 25-08-2011, 10:33

Ìîæåò áûòü óæå îáñóæäàëîñü, òêíèòå íîñîì åñëè òàê.
Íóæíî âî âíóòðåííåé ñåòè èìåòü DNS ñåðâåð äîñòóïíûé ñíàðóæè. Ñåðâåð åñòü, ðàáîòàåò, nslookup âñå ïðàâèëüíî ïîêàçûâàåò.

PHP Code:


nslookup <xxxx>.cz.cc 192.168.2.21

&#9572;õ¨òõ¨:  UnKnown

Address:  192.168.2.21

&#9562;ü*:     <xxxx>.cz.cc

Address:  109.195.81.187

Äëÿ äîñòóïà ñíàðóæè ñäåëàë ïîðò-ôîðâàðäèíã ïîðòà 53 íà ip DNS ñåðâåðà. Îòâå÷àåò ïîõîæå DNS ïðîâàéäåðà:

PHP Code:


nslookup <xxxx>.cz.cc 109.195.81.187

&#9572;õ¨òõ¨:  net81.195.109-187.spb.ertelecom.ru

Address:  109.195.81.187



*** net81.195.109-187.spb.ertelecom.ru íå óäàëîñü íàéòè <xxxx>.cz.cc: Server failed

Ïîìîãèòå ïîæàëóéñòà, êóäà ñìîòðåòü?

RT-N16/RT-N16-1.9.2.7-rtn-r3121.trx

UPD: Âñå ðàáîòàåò. Çàáûë ïðî UDP.

**DeeZ** · 03-09-2011, 22:39

Ïîñòàâèë bind, íàñòðîèë ëîêàëüíóþ çîíó è îäèí ñàéò.
Èç ëîêàëêè âñå íîðìàëüíî ðåçîëâèòñÿ, à ñíàðóæè äíñ íå äîñòóïåí. Ñëåéâ äíñ íå ìîæåò ñòÿíóòü çîíó, õîòÿ ïîëó÷àåò óâåäîìëåíèÿ ÷òî çîíà îáíîâëåíà.

bind èíòåðôåñ ñëóøàåò:
named[6887]: listening on IPv4 interface ppp0, 1.2.3.4#53

Ïðîáîâàë:
iptables -A INPUT -s 0/0 -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -s 0/0 -p udp --dport 53 -j ACCEPT

Âñå ðàâíî íå îòâå÷àåò ñåðâåð ñíàðóæè. êóäà êîïàòü?

**DeeZ** · 03-09-2011, 22:50

ðàçîáðàëñÿ
iptables -I INPUT -p udp -m udp --dport 53 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 53 -j ACCEPT

**djserg-minyar** · 16-09-2011, 07:10

Ðåáÿòà âñåì ïðèâåò, òðåáóåòñÿ ïîäíÿòü äàííóþ îïöèþ â DHCP ïóëå, íåîáõîäèìî äëÿ ïðîøèâêè òåëåôîíà Cisco.
Äàííàÿ îïöèÿ óêàçûâàåò åìó ãäå íàõîäèòüñÿ TFTP ñåðâåð.

Ïîêà ñäåëàë òàê
[#etc]$ cat dnsmasq.conf
user=nobody
resolv-file=/tmp/resolv.conf
no-poll
interface=br0
domain=Serg-Router
expand-hosts
no-negcache
cache-size=512
dhcp-leasefile=/tmp/dnsmasq.log
dhcp-range=lan,192.168.1.13,192.168.1.25,86400
dhcp-option=lan,15,Router
dhcp-option=lan,150,192.168.1.9
read-ethers
dhcp-authoritative

ïîòîì óáèâàåì ñåðâèñ dnsmasq - killall dnsmasq
è ïîäíèìàåì ñíîâà - dnsmasq

ïî èäåå âñå äîëæíî ðàáîòàòü, íî ÷åò íå âèæó àêòèâíîñòè íà TFTP ñåðâåðå ïî àäðåñó 192.168.1.9

ìîæåò ÷òî íå òàê äåëàþ?
è ïîñëå ðåáóòà íàñòðîéêè ýòîãî ôàéëà ñëåòàþò.

**TReX** · 16-09-2011, 10:30

Originally Posted by djserg-minyar

Ðåáÿòà âñåì ïðèâåò, òðåáóåòñÿ ïîäíÿòü äàííóþ îïöèþ â DHCP ïóëå, íåîáõîäèìî äëÿ ïðîøèâêè òåëåôîíà Cisco.
Äàííàÿ îïöèÿ óêàçûâàåò åìó ãäå íàõîäèòüñÿ TFTP ñåðâåð.

Ïîêà ñäåëàë òàê
[#etc]$ cat dnsmasq.conf
user=nobody
resolv-file=/tmp/resolv.conf
no-poll
interface=br0
domain=Serg-Router
expand-hosts
no-negcache
cache-size=512
dhcp-leasefile=/tmp/dnsmasq.log
dhcp-range=lan,192.168.1.13,192.168.1.25,86400
dhcp-option=lan,15,Router
dhcp-option=lan,150,192.168.1.9
read-ethers
dhcp-authoritative

ïîòîì óáèâàåì ñåðâèñ dnsmasq - killall dnsmasq
è ïîäíèìàåì ñíîâà - dnsmasq

ïî èäåå âñå äîëæíî ðàáîòàòü, íî ÷åò íå âèæó àêòèâíîñòè íà TFTP ñåðâåðå ïî àäðåñó 192.168.1.9

ìîæåò ÷òî íå òàê äåëàþ?
è ïîñëå ðåáóòà íàñòðîéêè ýòîãî ôàéëà ñëåòàþò.

Ìîæíî êîíå÷íî è ãëàíäû àâòîãåíîì, íî òàê http://www.cisco.com/en/US/products/...80a277a3.shtml ïðîùå )

**synemo** · 27-09-2011, 16:23

äîáðîãî âðåìåíè ñóòîê! ïîìîãèòå ðåøèòü ïðîáëåìó...
bind íà ðîóòåðå íå ïåðåäàåò çîíó âòîðè÷íîìó dns ñåðâåðó. Åñëè åãî íàñòðîèòü êàê âòîðè÷íûé ñåðâåð, òî âñå èäåò íà óðà. Íà âðåìÿ ïåðåäà÷è óäàëÿë âñå ïðàâèëà â iptables ñ äåéñòâèåì drop, ðàçðåøàë âõîäÿùèå è èñõîäÿùèå tcp53 è udp53.
ïîäñêàæèòå, ÷òî åùå ìîæíî ïîïðîáîâàòü? ÿ ñ ñòóïîðå. èëè çäåñü óñå÷åííûé bind, êîòîðûé íå ìîæåò ïåðåäàâàòü çîíû âòîðè÷íîìó ñåðâåðó?

âîò ëîã slave:

Code:

Sep 26 15:15:50 server named[12844]: zone domain.ru/IN: Transfer started.
Sep 26 15:15:50 server named[12844]: transfer of 'domain.ru/IN' from 1.1.1.1#53: connected using 2.2.2.2#37496
Sep 26 15:15:50 server named[12844]: transfer of 'domain.ru/IN' from 1.1.1.1#53: failed while receiving responses: end of file
Sep 26 15:15:50 server named[12844]: transfer of 'domain.ru/IN' from 1.1.1.1#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.001 secs (0 bytes/sec)

âîò ëîã ñ ðîóòåðà:

Code:

26-Sep-2011 15:15:50.048 socket 0x2af98008: dispatch_recv:  event 0x2af84698 -> task 0x2af77740
26-Sep-2011 15:15:50.049 socket 0x2af98008: internal_recv: task 0x2af77740 got event 0x2af98060
26-Sep-2011 15:15:50.049 socket 0x2af98008 2.2.2.2#44527: packet received correctly
26-Sep-2011 15:15:50.050 socket 0x2af98008: processing cmsg 0x2af78078
26-Sep-2011 15:15:50.050 client 2.2.2.2#44527: UDP request
26-Sep-2011 15:15:50.051 client 2.2.2.2#44527: using view '_default'
26-Sep-2011 15:15:50.051 client 2.2.2.2#44527: request is not signed
26-Sep-2011 15:15:50.051 client 2.2.2.2#44527: recursion not available
26-Sep-2011 15:15:50.052 client 2.2.2.2#44527: query
26-Sep-2011 15:15:50.052 client 2.2.2.2#44527: ns_client_attach: ref = 1
26-Sep-2011 15:15:50.053 client 2.2.2.2#44527: query 'domain.ru/SOA/IN' approved
26-Sep-2011 15:15:50.054 client 2.2.2.2#44527: send
26-Sep-2011 15:15:50.054 client 2.2.2.2#44527: sendto
26-Sep-2011 15:15:50.055 client 2.2.2.2#44527: senddone
26-Sep-2011 15:15:50.056 client 2.2.2.2#44527: next
26-Sep-2011 15:15:50.056 client 2.2.2.2#44527: ns_client_detach: ref = 0
26-Sep-2011 15:15:50.057 client 2.2.2.2#44527: endrequest
26-Sep-2011 15:15:50.058 client @0x2af95368: udprecv
26-Sep-2011 15:15:50.058 socket 0x2af98008: socket_recv: event 0x2af84698 -> task 0x2af77740

---------------------------------
ïðîøèâêà: 1.9.2.7-rtn-r3300
named -v: BIND 9.6.1-P3

UPDATE:
êàæåòñÿ íàøåë ïðè÷èíó. âèäàòü êîíôëèêò ìåæäó dnsmasq è bind. îòêëþ÷åíèå dns â dnsmasq.conf (port=0) ðåøàåò ïðîáëåìó.
òåïåðü íîâûé âîïðîñ: êàê ñäåëàòü, ÷òîáû ñîõðàíèòü èçìåíåíèÿ â dnsmasq.conf ïîñëå ïåðåçàãðóçêè?

**zoger** · 15-09-2012, 11:20

Äîáðîãî âðåìåíè ñóòîê. Ñóòü ïðîáëåìû â ñëåäóþùåì - ðîóòåð ïîäêëþ÷åí ê äîìàøíåé ñåòè 192.168.26.0\24 â ýòîé ñåòè íàõîäèòñÿ VPN ñåðâåð ïî àäðåñó 192.168.26.27. Êëèåíòû ñîîòâåòñòâåííî ïîäêëþ÷àÿñü ê VPN ïîëó÷àþò ip èç ïîäñåòè 172.22.0.0. È èì ïðèñâàèâàåòñÿ ìàðøðóò ïî óìîë÷àíèþ ÷åðåç ñåðâåð 172.22.0.1. Ïîñëå ãóãëåíèé è ðàçäóìèé ðåøèë íàñòðîèòü ðîóòåð íà ïðèñâàèâàíèå ñòàòè÷åñêèõ ìàðøðóòîâ.

Âîò ëèñòèíã êîíôèãóðàöèè /etc/dnsmasq.conf

user=nobody
resolv-file=/tmp/resolv.conf
no-poll
interface=br0
no-negcache
cache-size=512
dhcp-leasefile=/tmp/dnsmasq.log
dhcp-range=lan,192.168.1.101,192.168.1.254,86400
dhcp-authoritative
dhcp-option=option:router
dhcp-option-force=121,192.168.26.0/24,192.168.1.1,192.168.4.0/24,192.168.1.1
dhcp-option-force=249,192.168.26.0/24,192.168.1.1,192.168.4.0/24,192.168.1.1
dhcp-option=vendor:MSFT,2,1i

È òóò íà÷èíàåòñÿ ñàìîå èíòåðåñíîå - ïðè òàêîé âîò ðàáîòå êëèåíòû Windows çàïðîñòî ïîëó÷àþò âñå íàñòðîéêè è ìàðøðóòû, à ïèíãâèíû âîîáùå íàïðî÷ îòêàçûâàþòñÿ ðàáîòàòü. Äåëî óæå íå â ìàðøðóòàõ, äàæå íàñòðîéêè ñåòè íå íàçíà÷àþòñÿ. Ïðîøó ïîìîùè â íàñòðîéêå. Çàðàíåå áëàãîäàðþ.

Thread: Íåñêîëüêî DNS è dnsmasq

Thread Tools

Rate This Thread

Display

Hybrid View

Ïðîáðîñ 53 ïîðòà (DNS server)

DNS âî âíóòðåííåé ñåòè

[ðåøåíî] bind + iptables

Óñòàíîâêà option 150 â dhcp ïóëå

rt-n16 bind íå ïåðåäàåò çîíó âòîðè÷íîìó ñåðâåðó

Ïåðåäà÷à ñòàòè÷åñêèõ ìàðøðóòîâ ñëóæáîé dnsmasq êëèåíòàì linux

Similar Threads

Ôèëüòðàöèÿ íåæåëàòåëüíîãî êîíòåíòà (dnsmasq+adsuck+dnscrypt)

Íåñêîëüêî âîïðîñîâ ïî Samba è USB HDD

problem with edited dnsmasq.conf

Dnsmasq, could this be a problem/security risk ?

New firmware - dnsmasq

Tags for this Thread

Posting Permissions