Ubuntu/Bespin/DNS - Revision history

Unknown user at 05:34, 19 August 2020

2020-08-19T05:34:19Z

← Older revision		Revision as of 05:34, 19 August 2020
Line 141:		Line 141:
	log-facility=/var/log/dnsmasq.log		log-facility=/var/log/dnsmasq.log
	</pre>		</pre>



			[[Category:DNS]]
			[[Category:DHCP]]
			[[Category:Dnsmasq]]
			[[Category:Ubuntu]]
			[[Category:Linux]]
			[[Category:Bespin]]
			[[Category:Dhcpcd]]
			[[Category:Dhclient]]

Unknown user: /* Set Preferred DNS Nameservers */

2020-08-19T05:33:19Z

Set Preferred DNS Nameservers

@@ Line 103: / Line 103: @@
 ===Set Preferred DNS Nameservers===
 Set preferred nameservers by editing the dhcp configuration file:
@@ Line 112: / Line 124: @@
 </pre>
-or for dhclient:
+====dhclient====
 <code>/etc/dhcp/dhclient.conf</code>
@@ Line 119: / Line 133: @@
 prepend domain-name-servers 127.0.0.1;
 </pre>
 ===Improved Logging===

Unknown user: /* dnsmasq config with hostapd */

2020-08-19T05:29:08Z

dnsmasq config with hostapd

← Older revision		Revision as of 05:29, 19 August 2020
Line 82:		Line 82:
	# all dns queries use pihole dns server		# all dns queries use pihole dns server
	server=127.53.0.1		server=127.53.0.1

			## to specify different upstream dns for each network,
			## can specify server in the following form:
			## server=<dest-ip>/<src-ip>
			## use PiHole for local DNS queries
			#server=127.53.0.1/127.0.0.1
			## use Google DNS for hostapd queries
			#server=8.8.8.8/192.168.0.1

	# send dnsmasq logs to a single place		# send dnsmasq logs to a single place

Unknown user: /* dnsmasq config with hostapd */

2020-08-19T05:26:54Z

dnsmasq config with hostapd

← Older revision		Revision as of 05:26, 19 August 2020
Line 80:		Line 80:

	# define what to do if no name resolution		# define what to do if no name resolution
			# all dns queries use pihole dns server
	server=127.53.0.1		server=127.53.0.1

Unknown user: /* dnsmasq config without hostapd */

2020-08-19T05:26:41Z

dnsmasq config without hostapd

← Older revision		Revision as of 05:26, 19 August 2020
Line 46:		Line 46:
	# listen on these interfaces and only these interfaces		# listen on these interfaces and only these interfaces
	listen-address=127.0.0.1		listen-address=127.0.0.1
			bind-interfaces
	# don't read /etc/resolv.conf		# don't read /etc/resolv.conf
	no-resolv		no-resolv

Unknown user: /* dnsmasq config with hostapd */

2020-08-19T05:26:30Z

dnsmasq config with hostapd

← Older revision		Revision as of 05:26, 19 August 2020
Line 73:		Line 73:
	listen-address=192.168.10.1		listen-address=192.168.10.1
	bind-interfaces		bind-interfaces
			# don't read /etc/resolv.conf
			no-resolv
	# define range of IP addresses to hand out		# define range of IP addresses to hand out
	dhcp-range=192.168.10.100,192.168.10.150,255.255.255.0,24h		dhcp-range=192.168.10.100,192.168.10.150,255.255.255.0,24h

Unknown user: /* dnsmasq config with hostapd */

2020-08-19T05:26:07Z

dnsmasq config with hostapd

← Older revision		Revision as of 05:26, 19 August 2020
Line 75:		Line 75:
	# define range of IP addresses to hand out		# define range of IP addresses to hand out
	dhcp-range=192.168.10.100,192.168.10.150,255.255.255.0,24h		dhcp-range=192.168.10.100,192.168.10.150,255.255.255.0,24h

	# define what to do if no name resolution		# define what to do if no name resolution
	~~no-resolv~~		server=127.53.0.1
	server=8.8.8.8
	# send dnsmasq logs to a single place		# send dnsmasq logs to a single place
	log-facility=/var/log/dnsmasq.log		log-facility=/var/log/dnsmasq.log

Unknown user: /* dnsmasq config without hostapd */

2020-08-19T05:24:21Z

dnsmasq config without hostapd

← Older revision		Revision as of 05:24, 19 August 2020
Line 50:		Line 50:

	# define what to do if no name resolution		# define what to do if no name resolution
	# ~~the notation for server used here is~~		# all dns queries use pihole dns server
	~~# <dest-ip>/<src-ip>~~		server=127.53.0.1
	~~# local~~ dns queries use pihole dns server
	server=127.53~~.0.1/127.0~~.0.1

	# send dnsmasq logs to a single place		# send dnsmasq logs to a single place

Unknown user: Created page with "Up: Ubuntu/Bespin Previous: Ubuntu/Bespin/PIA Next: Ubuntu/Bespin/PiHole This page covers the installation of dnsmasq to provide DHCP and DNS services. ==Insta..."

2020-08-19T05:23:22Z

Created page with "Up: Ubuntu/Bespin Previous: Ubuntu/Bespin/PIA Next: Ubuntu/Bespin/PiHole This page covers the installation of dnsmasq to provide DHCP and DNS services. ==Insta..."

New page

Up: [[Ubuntu/Bespin]]

Previous: [[Ubuntu/Bespin/PIA]]

Next: [[Ubuntu/Bespin/PiHole]]

This page covers the installation of dnsmasq to provide DHCP and DNS services.

==Install dnsmasq==

Start by installing dnsmasq with apt-get:

<pre>
sudo apt-get -y install dnsmasq
</pre>

This will try to start dnsmasq, but it will fail and print red text. This is fine - the system's built-in systemd-resolved is already listening on port 53 so we will need to disable this service.

ORDER IS IMPORTANT! We need dnsmasq installed FIRST, because disabling systemd-resolved will cause DNS queries to fail, so the internet connection will break. We need dnsmasq ready to start and take over the DNS duties.

<pre>
sudo systemctl disable systemd-resolved
sudo systemctl stop systemd-resolved
</pre>

Preserve the original dnsmasq config file, which has a lot of useful information:

<pre>
sudo mv /etc/dnsmasq.conf{,.orig}
</pre>

Now create the dnsmasq config file

===dnsmasq config without hostapd===

<code>/etc/dnsmasq.conf</code>

<pre>
# don't send external traffic that is missing a domain
domain-needed
# don't send external traffic that has bogus private ip
bogus-priv
# set the local domain
domain=mylocalnet
local=/mylocalnet/
# listen on these interfaces and only these interfaces
listen-address=127.0.0.1
# don't read /etc/resolv.conf
no-resolv

# define what to do if no name resolution
# the notation for server used here is
# <dest-ip>/<src-ip>
# local dns queries use pihole dns server
server=127.53.0.1/127.0.0.1

# send dnsmasq logs to a single place
log-facility=/var/log/dnsmasq.log
</pre>

===dnsmasq config with hostapd===

<code>/etc/dnsmasq.conf</code>

<pre>
# don't send external traffic that is missing a domain
domain-needed
# don't send external traffic that has bogus private ip
bogus-priv
# set the local domain
domain=mynet
local=/mynet/
# listen on these interfaces and only these interfaces
listen-address=127.0.0.1
listen-address=192.168.10.1
bind-interfaces
# define range of IP addresses to hand out
dhcp-range=192.168.10.100,192.168.10.150,255.255.255.0,24h
# define what to do if no name resolution
no-resolv
server=8.8.8.8
# send dnsmasq logs to a single place
log-facility=/var/log/dnsmasq.log
</pre>

Now we are ready to start up dnsmasq:

<pre>
sudo systemctl enable dnsmasq
sudo systemctl start dnsmasq
</pre>

===Set Preferred DNS Nameservers===

Set preferred nameservers by editing the dhcp configuration file:

<code>/etc/dhcp/dhcpcd.conf</code>

<pre>
static domain_name_servers=8.8.8.8
</pre>

or for dhclient:

<code>/etc/dhcp/dhclient.conf</code>

<pre>
prepend domain-name-servers 127.0.0.1;
</pre>

<s>
(THESE INSTRUCTIONS FROM [[RaspberryPi/Hotspot]] ARE OLD)

Remove the existing file at <code>/etc/resolv.conf</code> (a symlink to a network manager thing). Create a new version of the file that specifies preferred nameservers:

<pre>
nameserver 8.8.8.8
</pre>

NOTE: this file will be overwritten at boot by Network Manager. If your DNS is broken and dnsmasq does not seem to be able to find a preferred nameserver, circle back and double-check that network manager has been disabled.
</s>

===Improved Logging===

Dnsmasq configuration file has a log-facility option to control where logs go. Add this to the config file:

<pre>
log-facility=/var/log/dnsmasq.log
</pre>