#dnsmasq — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #dnsmasq, aggregated by home.social.
-
Ubuntu 26.04 как маршрутизатор для GNS3: настраиваем NAT, DHCP и DNS в Hyper-V
Как дать узлам внутри GNS3 доступ в интернет, не используя встроенный NAT Hyper-V? В этой статье превратим Ubuntu 26.04 в маршрутизатор лабораторного стенда. Настроим NAT, DHCP и DNS только средствами Linux. В результате Alpine получит сетевые параметры по DHCP, выйдет в интернет и мы установим на него клиент OpenSSH. Заодно разберем неочевидную проблему с маршрутом по умолчанию в Windows, из-за которой трафик физического хоста может попасть в петлю. Настраиваем стенд
https://habr.com/ru/articles/1058702/
#dnsmasq #dhcp #ubuntu #gns3 #gns3_vm #alpine #openssh #hyperv #nftables #powershell
-
Ubuntu 26.04 как маршрутизатор для GNS3: настраиваем NAT, DHCP и DNS в Hyper-V
Как дать узлам внутри GNS3 доступ в интернет, не используя встроенный NAT Hyper-V? В этой статье превратим Ubuntu 26.04 в маршрутизатор лабораторного стенда. Настроим NAT, DHCP и DNS только средствами Linux. В результате Alpine получит сетевые параметры по DHCP, выйдет в интернет и мы установим на него клиент OpenSSH. Заодно разберем неочевидную проблему с маршрутом по умолчанию в Windows, из-за которой трафик физического хоста может попасть в петлю. Настраиваем стенд
https://habr.com/ru/articles/1058702/
#dnsmasq #dhcp #ubuntu #gns3 #gns3_vm #alpine #openssh #hyperv #nftables #powershell
-
Ubuntu 26.04 как маршрутизатор для GNS3: настраиваем NAT, DHCP и DNS в Hyper-V
Как дать узлам внутри GNS3 доступ в интернет, не используя встроенный NAT Hyper-V? В этой статье превратим Ubuntu 26.04 в маршрутизатор лабораторного стенда. Настроим NAT, DHCP и DNS только средствами Linux. В результате Alpine получит сетевые параметры по DHCP, выйдет в интернет и мы установим на него клиент OpenSSH. Заодно разберем неочевидную проблему с маршрутом по умолчанию в Windows, из-за которой трафик физического хоста может попасть в петлю. Настраиваем стенд
https://habr.com/ru/articles/1058702/
#dnsmasq #dhcp #ubuntu #gns3 #gns3_vm #alpine #openssh #hyperv #nftables #powershell
-
#OpenWrt: Updates schließen teils kritische Sicherheitslücken | Security https://www.heise.de/news/OpenWrt-Updates-schliessen-teils-kritische-Sicherheitsluecken-11381496.html #Patchday #XSS #CrossSiteScripting #Linux :tux: #OpenSource #openSSL #odhcpd #dnsmasq @openwrt
-
#OpenWrt: Updates schließen teils kritische Sicherheitslücken | Security https://www.heise.de/news/OpenWrt-Updates-schliessen-teils-kritische-Sicherheitsluecken-11381496.html #Patchday #XSS #CrossSiteScripting #Linux :tux: #OpenSource #openSSL #odhcpd #dnsmasq @openwrt
-
#OpenWrt: Updates schließen teils kritische Sicherheitslücken | Security https://www.heise.de/news/OpenWrt-Updates-schliessen-teils-kritische-Sicherheitsluecken-11381496.html #Patchday #XSS #CrossSiteScripting #Linux :tux: #OpenSource #openSSL #odhcpd #dnsmasq @openwrt
-
#OpenWrt: Updates schließen teils kritische Sicherheitslücken | Security https://www.heise.de/news/OpenWrt-Updates-schliessen-teils-kritische-Sicherheitsluecken-11381496.html #Patchday #XSS #CrossSiteScripting #Linux :tux: #OpenSource #openSSL #odhcpd #dnsmasq @openwrt
-
#OpenWrt: Updates schließen teils kritische Sicherheitslücken | Security https://www.heise.de/news/OpenWrt-Updates-schliessen-teils-kritische-Sicherheitsluecken-11381496.html #Patchday #XSS #CrossSiteScripting #Linux :tux: #OpenSource #openSSL #odhcpd #dnsmasq @openwrt
-
So after running a @prosodyim container and a #dn42 node on my #MikroTik it was only logical to also host the dn42 authoritative #DNS zone on it... using #dnsmasq 🤪
Blog post: https://op-co.de/blog/posts/mikrotik_authoritative_dnsmasq/
-
So after running a @prosodyim container and a #dn42 node on my #MikroTik it was only logical to also host the dn42 authoritative #DNS zone on it... using #dnsmasq 🤪
Blog post: https://op-co.de/blog/posts/mikrotik_authoritative_dnsmasq/
-
So after running a @prosodyim container and a #dn42 node on my #MikroTik it was only logical to also host the dn42 authoritative #DNS zone on it... using #dnsmasq 🤪
Blog post: https://op-co.de/blog/posts/mikrotik_authoritative_dnsmasq/
-
So after running a @prosodyim container and a #dn42 node on my #MikroTik it was only logical to also host the dn42 authoritative #DNS zone on it... using #dnsmasq 🤪
Blog post: https://op-co.de/blog/posts/mikrotik_authoritative_dnsmasq/
-
So after running a @prosodyim container and a #dn42 node on my #MikroTik it was only logical to also host the dn42 authoritative #DNS zone on it... using #dnsmasq 🤪
Blog post: https://op-co.de/blog/posts/mikrotik_authoritative_dnsmasq/
-
Can anyone out there who knows #IPv6, #dnsmasq and #OPNsense help me?
I’m trying to figure out why DHCP clients on my LAN are respecting Option 6 to force IPv4 DNS servers, but not Option 23 for DNS over IPv6
Much more detail here:
https://forum.opnsense.org/index.php?topic=52230.msg269245 -
Can anyone out there who knows #IPv6, #dnsmasq and #OPNsense help me?
I’m trying to figure out why DHCP clients on my LAN are respecting Option 6 to force IPv4 DNS servers, but not Option 23 for DNS over IPv6
Much more detail here:
https://forum.opnsense.org/index.php?topic=52230.msg269245 -
Can anyone out there who knows #IPv6, #dnsmasq and #OPNsense help me?
I’m trying to figure out why DHCP clients on my LAN are respecting Option 6 to force IPv4 DNS servers, but not Option 23 for DNS over IPv6
Much more detail here:
https://forum.opnsense.org/index.php?topic=52230.msg269245 -
Can anyone out there who knows #IPv6, #dnsmasq and #OPNsense help me?
I’m trying to figure out why DHCP clients on my LAN are respecting Option 6 to force IPv4 DNS servers, but not Option 23 for DNS over IPv6
Much more detail here:
https://forum.opnsense.org/index.php?topic=52230.msg269245 -
Can anyone out there who knows #IPv6, #dnsmasq and #OPNsense help me?
I’m trying to figure out why DHCP clients on my LAN are respecting Option 6 to force IPv4 DNS servers, but not Option 23 for DNS over IPv6
Much more detail here:
https://forum.opnsense.org/index.php?topic=52230.msg269245 -
Simon Kelley released #Dnsmasq version 2.93. http://www.thekelleys.org.uk/dnsmasq/doc.html
-
Simon Kelley released #Dnsmasq version 2.93. http://www.thekelleys.org.uk/dnsmasq/doc.html
-
Simon Kelley released #Dnsmasq version 2.93. http://www.thekelleys.org.uk/dnsmasq/doc.html
-
Simon Kelley released #Dnsmasq version 2.93. http://www.thekelleys.org.uk/dnsmasq/doc.html
-
Simon Kelley released #Dnsmasq version 2.93. http://www.thekelleys.org.uk/dnsmasq/doc.html
-
DoH на роутере OpenWRT, Mikrotik и Asus: пошаговая инструкция от того, кто сам хостит резолвер
Если коротко, DNS это последний открытый протокол в вашей сети, по которому провайдер (и любой джентльмен в кафе на open WiFi) видит, куда вы ходите. HTTPS закрыли, SNI потихоньку прячут через ECH, а DNS как был в плейне на 53-м порту, так в большинстве домашних сетей и остался. DoH (DNS over HTTPS) это лечит, но не на устройстве, а на роутере, чтобы один раз настроил и забыл про все смартфоны, тостеры и умные лампочки. Я три месяца пилю свой DNS-резолвер с фильтрацией и за это время насмотрелся на чужие конфиги достаточно, чтобы написать инструкцию без воды. Разберу OpenWRT, Mikrotik (RouterOS 7+) и Asus с Merlin, плюс подводные камни, в которые я лично наступил.
https://habr.com/ru/articles/1035612/
#DoH #OpenWRT #Mikrotik #RouterOS #AsuswrtMerlin #dnsmasq #httpsdnsproxy #DNSoverHTTPS #роутер #privacy
-
DoH на роутере OpenWRT, Mikrotik и Asus: пошаговая инструкция от того, кто сам хостит резолвер
Если коротко, DNS это последний открытый протокол в вашей сети, по которому провайдер (и любой джентльмен в кафе на open WiFi) видит, куда вы ходите. HTTPS закрыли, SNI потихоньку прячут через ECH, а DNS как был в плейне на 53-м порту, так в большинстве домашних сетей и остался. DoH (DNS over HTTPS) это лечит, но не на устройстве, а на роутере, чтобы один раз настроил и забыл про все смартфоны, тостеры и умные лампочки. Я три месяца пилю свой DNS-резолвер с фильтрацией и за это время насмотрелся на чужие конфиги достаточно, чтобы написать инструкцию без воды. Разберу OpenWRT, Mikrotik (RouterOS 7+) и Asus с Merlin, плюс подводные камни, в которые я лично наступил.
https://habr.com/ru/articles/1035612/
#DoH #OpenWRT #Mikrotik #RouterOS #AsuswrtMerlin #dnsmasq #httpsdnsproxy #DNSoverHTTPS #роутер #privacy
-
DoH на роутере OpenWRT, Mikrotik и Asus: пошаговая инструкция от того, кто сам хостит резолвер
Если коротко, DNS это последний открытый протокол в вашей сети, по которому провайдер (и любой джентльмен в кафе на open WiFi) видит, куда вы ходите. HTTPS закрыли, SNI потихоньку прячут через ECH, а DNS как был в плейне на 53-м порту, так в большинстве домашних сетей и остался. DoH (DNS over HTTPS) это лечит, но не на устройстве, а на роутере, чтобы один раз настроил и забыл про все смартфоны, тостеры и умные лампочки. Я три месяца пилю свой DNS-резолвер с фильтрацией и за это время насмотрелся на чужие конфиги достаточно, чтобы написать инструкцию без воды. Разберу OpenWRT, Mikrotik (RouterOS 7+) и Asus с Merlin, плюс подводные камни, в которые я лично наступил.
https://habr.com/ru/articles/1035612/
#DoH #OpenWRT #Mikrotik #RouterOS #AsuswrtMerlin #dnsmasq #httpsdnsproxy #DNSoverHTTPS #роутер #privacy
-
@openwrt It feels reassuring to see an OpenWRT release a short time after the #dnsmasq security fix with release notes explicitly mentioning said fix.
#pfSense has been running incredibly stable for years on my home router but its update frequency feels questionable to me. I'm going to migrate to OpenWRT. After using it on some actual WiFi gear I am amazed how much OpenWRT has matured! 🤗
-
@openwrt It feels reassuring to see an OpenWRT release a short time after the #dnsmasq security fix with release notes explicitly mentioning said fix.
#pfSense has been running incredibly stable for years on my home router but its update frequency feels questionable to me. I'm going to migrate to OpenWRT. After using it on some actual WiFi gear I am amazed how much OpenWRT has matured! 🤗
-
@openwrt It feels reassuring to see an OpenWRT release a short time after the #dnsmasq security fix with release notes explicitly mentioning said fix.
#pfSense has been running incredibly stable for years on my home router but its update frequency feels questionable to me. I'm going to migrate to OpenWRT. After using it on some actual WiFi gear I am amazed how much OpenWRT has matured! 🤗
-
@openwrt It feels reassuring to see an OpenWRT release a short time after the #dnsmasq security fix with release notes explicitly mentioning said fix.
#pfSense has been running incredibly stable for years on my home router but its update frequency feels questionable to me. I'm going to migrate to OpenWRT. After using it on some actual WiFi gear I am amazed how much OpenWRT has matured! 🤗
-
@openwrt It feels reassuring to see an OpenWRT release a short time after the #dnsmasq security fix with release notes explicitly mentioning said fix.
#pfSense has been running incredibly stable for years on my home router but its update frequency feels questionable to me. I'm going to migrate to OpenWRT. After using it on some actual WiFi gear I am amazed how much OpenWRT has matured! 🤗
-
Okay, so I’ve been hating on the #Verizon #CR1000A router that was tossed in for free with my #fios internet service. It’s really not THAT bad. From a software standpoint, it’s quite feature rich and powerful being primarily powered by #dnsmasq. It probably uses #Linux. It’s lacking in the hardware department having an anemic CPU but it does have a 10Gbps Ethernet port.
Overall, I’ll regrade it from a C- to somewhere between a B+/A-. I think Verizon probably realized they underpowered it because the next generation CR1000B is better. I think they’re giving the A out to lower end customers like myself with only the 300Mbps service.
Nevertheless it can do QoS, VLANs, and more. 👍
-
Okay, so I’ve been hating on the #Verizon #CR1000A router that was tossed in for free with my #fios internet service. It’s really not THAT bad. From a software standpoint, it’s quite feature rich and powerful being primarily powered by #dnsmasq. It probably uses #Linux. It’s lacking in the hardware department having an anemic CPU but it does have a 10Gbps Ethernet port.
Overall, I’ll regrade it from a C- to somewhere between a B+/A-. I think Verizon probably realized they underpowered it because the next generation CR1000B is better. I think they’re giving the A out to lower end customers like myself with only the 300Mbps service.
Nevertheless it can do QoS, VLANs, and more. 👍
-
If you use #dnsmasq on @fedora or @centos Stream - be aware that there are recently disclosed CVEs - https://www.kb.cert.org/vuls/id/471747
@SUSE at least rates one of them a 9.2 on the CVSS 4.0 scale
https://www.suse.com/security/cve/CVE-2026-2291.html
Fedora updates for stable releases are about to hit testing: https://bodhi.fedoraproject.org/updates/?search=dnsmasq-2.92rel2
and if you have the #CentOSHyperscale repo enabled you can `sudo dnf install centos-release-hyperscale-testing && sudo dnf update 'dnsmasq*'`
Please give feedback for the Fedora builds and for the Hyperscale ones if you give them a spin!
https://gitlab.com/CentOS/Hyperscale/rpms/dnsmasq/-/work_items/1
As of the time of posting there is no advisory from #RedHat yet
-
If you use #dnsmasq on @fedora or @centos Stream - be aware that there are recently disclosed CVEs - https://www.kb.cert.org/vuls/id/471747
@SUSE at least rates one of them a 9.2 on the CVSS 4.0 scale
https://www.suse.com/security/cve/CVE-2026-2291.html
Fedora updates for stable releases are about to hit testing: https://bodhi.fedoraproject.org/updates/?search=dnsmasq-2.92rel2
and if you have the #CentOSHyperscale repo enabled you can `sudo dnf install centos-release-hyperscale-testing && sudo dnf update 'dnsmasq*'`
Please give feedback for the Fedora builds and for the Hyperscale ones if you give them a spin!
https://gitlab.com/CentOS/Hyperscale/rpms/dnsmasq/-/work_items/1
As of the time of posting there is no advisory from #RedHat yet
-
If you use #dnsmasq on @fedora or @centos Stream - be aware that there are recently disclosed CVEs - https://www.kb.cert.org/vuls/id/471747
@SUSE at least rates one of them a 9.2 on the CVSS 4.0 scale
https://www.suse.com/security/cve/CVE-2026-2291.html
Fedora updates for stable releases are about to hit testing: https://bodhi.fedoraproject.org/updates/?search=dnsmasq-2.92rel2
and if you have the #CentOSHyperscale repo enabled you can `sudo dnf install centos-release-hyperscale-testing && sudo dnf update 'dnsmasq*'`
Please give feedback for the Fedora builds and for the Hyperscale ones if you give them a spin!
https://gitlab.com/CentOS/Hyperscale/rpms/dnsmasq/-/work_items/1
As of the time of posting there is no advisory from #RedHat yet
-
If you use #dnsmasq on @fedora or @centos Stream - be aware that there are recently disclosed CVEs - https://www.kb.cert.org/vuls/id/471747
@SUSE at least rates one of them a 9.2 on the CVSS 4.0 scale
https://www.suse.com/security/cve/CVE-2026-2291.html
Fedora updates for stable releases are about to hit testing: https://bodhi.fedoraproject.org/updates/?search=dnsmasq-2.92rel2
and if you have the #CentOSHyperscale repo enabled you can `sudo dnf install centos-release-hyperscale-testing && sudo dnf update 'dnsmasq*'`
Please give feedback for the Fedora builds and for the Hyperscale ones if you give them a spin!
https://gitlab.com/CentOS/Hyperscale/rpms/dnsmasq/-/work_items/1
As of the time of posting there is no advisory from #RedHat yet
-
If you use #dnsmasq on @fedora or @centos Stream - be aware that there are recently disclosed CVEs - https://www.kb.cert.org/vuls/id/471747
@SUSE at least rates one of them a 9.2 on the CVSS 4.0 scale
https://www.suse.com/security/cve/CVE-2026-2291.html
Fedora updates for stable releases are about to hit testing: https://bodhi.fedoraproject.org/updates/?search=dnsmasq-2.92rel2
and if you have the #CentOSHyperscale repo enabled you can `sudo dnf install centos-release-hyperscale-testing && sudo dnf update 'dnsmasq*'`
Please give feedback for the Fedora builds and for the Hyperscale ones if you give them a spin!
https://gitlab.com/CentOS/Hyperscale/rpms/dnsmasq/-/work_items/1
As of the time of posting there is no advisory from #RedHat yet
-
CERT/CC just dropped 6 new CVEs for dnsmasq, many found by AI. These critical memory safety and input validation flaws, including heap overflows, affect everything from home routers to Linux distros. The maintainer called it 'a tsunami of AI-generated bug reports,' highlighting a new era of open-source security challenges and the 'Frankenstein' problem of distro updates. Learn how these…
#cybersecurity #certcc #dnsmasq
🤖 This post was AI-generated.
-
🚨 OMG, #dnsmasq is exploding! 🚨 In a shocking twist of fate, CERT drops six #CVEs on lazy vendors who didn't realize their software was a ticking time bomb. Apparently, "longstanding bugs" means "we've ignored this for years, but now it's an emergency" 😂.
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html #cybersecurity #softwarebugs #vendorresponsibility #emergencyfix #HackerNews #ngated -
🚨 OMG, #dnsmasq is exploding! 🚨 In a shocking twist of fate, CERT drops six #CVEs on lazy vendors who didn't realize their software was a ticking time bomb. Apparently, "longstanding bugs" means "we've ignored this for years, but now it's an emergency" 😂.
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html #cybersecurity #softwarebugs #vendorresponsibility #emergencyfix #HackerNews #ngated -
🚨 OMG, #dnsmasq is exploding! 🚨 In a shocking twist of fate, CERT drops six #CVEs on lazy vendors who didn't realize their software was a ticking time bomb. Apparently, "longstanding bugs" means "we've ignored this for years, but now it's an emergency" 😂.
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html #cybersecurity #softwarebugs #vendorresponsibility #emergencyfix #HackerNews #ngated -
🚨 OMG, #dnsmasq is exploding! 🚨 In a shocking twist of fate, CERT drops six #CVEs on lazy vendors who didn't realize their software was a ticking time bomb. Apparently, "longstanding bugs" means "we've ignored this for years, but now it's an emergency" 😂.
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html #cybersecurity #softwarebugs #vendorresponsibility #emergencyfix #HackerNews #ngated -
🚨 OMG, #dnsmasq is exploding! 🚨 In a shocking twist of fate, CERT drops six #CVEs on lazy vendors who didn't realize their software was a ticking time bomb. Apparently, "longstanding bugs" means "we've ignored this for years, but now it's an emergency" 😂.
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html #cybersecurity #softwarebugs #vendorresponsibility #emergencyfix #HackerNews #ngated -
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
#HackerNews #CERT #CVEs #dnsmasq #security #vulnerabilities #cybersecurity #patches
-
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
#HackerNews #CERT #CVEs #dnsmasq #security #vulnerabilities #cybersecurity #patches
-
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
#HackerNews #CERT #CVEs #dnsmasq #security #vulnerabilities #cybersecurity #patches
-
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
#HackerNews #CERT #CVEs #dnsmasq #security #vulnerabilities #cybersecurity #patches
-
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
#HackerNews #CERT #CVEs #dnsmasq #security #vulnerabilities #cybersecurity #patches
-
Простая настройка машины под Linux как роутера — NAT+iptables+dnsmasq
Короткое описание, как я настраивал себе на Linux-машине роутер с пересылкой трафика в интернет, собственным DNS и DHCP. Простое и элегантное решение.
-
Простая настройка машины под Linux как роутера — NAT+iptables+dnsmasq
Короткое описание, как я настраивал себе на Linux-машине роутер с пересылкой трафика в интернет, собственным DNS и DHCP. Простое и элегантное решение.
-
Простая настройка машины под Linux как роутера — NAT+iptables+dnsmasq
Короткое описание, как я настраивал себе на Linux-машине роутер с пересылкой трафика в интернет, собственным DNS и DHCP. Простое и элегантное решение.
