[Cerowrt-devel] open recursive DNS server

[Dave Taht]

hmm. you should still have been firewalled off. Is it really
responding to dns queries from the
outside world?

Add to /etc/config/dhcp

 list notinterface 'yourotherinterface'

there are other ways.

On Tue, Nov 25, 2014 at 10:25 AM, Michael Richardson <mcr at sandelman.ca> wrote:
>
> I noticed that I'm being used as an open recursive relay.
> I see:
>
> except-interface=ge00
>
> in the generated /var/etc/dnsmasq.conf, but that's wrong.  It should except
> pppoe-storm from service!
>
> Can I fix this somewhere in /etc/config?  Can I just put in a CIDR?
>
> --
> ]               Never tell me the odds!                 | ipv6 mesh networks [
> ]   Michael Richardson, Sandelman Software Works        | network architect  [
> ]     mcr at sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel at lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
Dave Täht

thttp://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks