Package:Dnsmasq

Dnsmasq

   Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

   Warning

As this page deals with DNS it has the potential to break your internet access! Ensure you have stable live media that can restore your system.

Dnsmasq is a dns cache, dhcp, and pxe server. This package is lightweight, and will work well for individual computers, or small lans.

Installation

root # emerge net-dns/dnsmasq

Configuration

/etc/dnsmasq.conf is where most of dnsmasq's configuration is done. It's file is well commented, and ready for several scenarios.

DNS only

   Important

place other upstream dns servers in /etc/resolv.dnsmasq.conf with your preferred DNS server at the top of the list. The first console command in the block will wipe out existing /etc/resolv.dnsmasq.conf settings, back them up if you have anything important in them.

root # echo "nameserver 8.8.8.8" > /etc/resolv.dnsmasq.conf

   /etc/dnsmasq.conf - insert local dns only configs at the bottom of the dnsmasq.conf file.

...
resolv-file=/etc/resolv.dnsmasq.conf
listen-address=127.0.0.1

To listen to a DNS server on an alternate port: In this example we'll install net-dns/dnscrypt-proxy:

   /etc/dnsmasq.conf - insert local dns only configs at the bottom of the dnsmasq.conf file.

...
#resolv-file=/etc/resolv.dnsmasq.conf
server=127.0.0.1#2053
listen-address=127.0.0.1

Now your localhost / 127.0.0.1 is your primary DNS to point net connection scripts to. This is the point of no return command. Start the service before you run this, and be prepaired to test with dig that it's pulling up servers through dnsmasq.

root # echo "nameserver 127.0.0.1" > /etc/resolv.conf

This is the revert to known working DNS servers command:

root # echo "nameserver 8.8.8.8" > /etc/resolv.conf

Runtime

root # rc-update add dnsmasq default
root # rc

Testing

DNS only

net-dns/bind-tools contains dns testing utilities. To verify that dns requests are returned from the local server: emerge bind-tools, then run:

root # dig google.com | grep -i server
;; SERVER: 127.0.0.1#53(127.0.0.1)