Dnsmasq patch with options for filtering IPv6, HTTPS-query and unknown query types.
Phazor / Cascade 1733
Please feel free to copy, distribute and change this program in any way you like.
This patch adds the following configuration options:
- filter-aaaa: filter all ipv6 queries
- filter-https: filter all https / query type 65
- filter-unknown: filter all unknown query types (except https)
Further changes as well:
- increase ttl-floor-limit to 604800 (--min-cache-ttl)
- increase dnssec-min-ttl to 3600 (DNSKEY and DS records in cache last at least this long)
- conntrack
- dnssec
- no dumpfile
- no dhcp6
-
git clone git://thekelleys.org.uk/dnsmasq.git (version 2.82)
-
cd dnsmasq
-
git apply dnsmasq-2.82-filter-aaaa+https+unknown.patch
-
make
-
cp src/dnsmaq to your server
-
Add following options to your dnsmasq.conf:
- filter-aaaa
- filter-https
- filter-unknown
-
Enjoy the silence!
Got inspiration from other coders and patches online.
- ?