http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=32fc6db
CHANGELOG
Add --ignore-address option.
Ignore replies to A-record queries which include the specified address.
No error is generated, dnsmasq simply continues to listen for another reply.
This is useful to defeat blocking strategies which rely on quickly supplying a forged answer to a DNS request for certain domains, before the correct answer can arrive.
Thanks to Glen Huang for the patch.
以后不用再维护 openwrt-dnsmasq 了 :-D
 |
1
LazyZhu Dec 30, 2014
不错,但为啥不加个min-ttl选项, 有些网站ttl设置太短...
|
 |
2
yuhaaitao Dec 30, 2014 via Android
看不懂呀
|
 |
3
aa65535 OP  1
@LazyZhu 关于 min-ttl ，我之前也提交过 patch 给 dnsmasq 作者的，得到答复如下
``` Thanks for that. Extending TTLs is normally considered to be a Bad Thing. Do you have an application for this which is worthwhile? Cheers, Simon. ``` 有谁英语好，可以给他解释一下。 |
|
6
aa65535 OP |
 |
8
braveguywallce Dec 30, 2014
|
|
9
aa65535 OP @braveguywallce 这个应该会出现在 v2.73 里，目前还没有 release 。
ignore-address=2.1.1.2 ignore-address=4.193.80.0 ignore-address=4.36.66.178 ignore-address=8.105.84.0 ... |
|
10
braveguywallce Dec 30, 2014 via Android
@aa65535 太好了，期待！
|
 |
11
ma0dan Dec 30, 2014
不用添加iptables规则了，dnsmasq越发强大啊
|
 |
13
hanru Dec 30, 2014 via Android
可否推荐一个保持更新的gfw
|
|
14
hanru Dec 30, 2014 via Android
可否推荐一个保持更新的gfw劫持dns解析后返回的污染ip地址列表？谢谢。
|
|
15
aa65535 OP 1
|
 |
17
waltcow Dec 31, 2014 1
@aa65535 六级低分飘过，尝试一下翻译
Since the Chinese government has polluted the DNS service in China mainland . Every time we dig twitter.com in our network ,the GFW will return the false ip at first. so we use the unstandard port like 443,5353 to get the real ip from OpenDns server etc , unfortunately,most of this DNS servers are located outside China ,every time we query Domain IP result from this DNS server,We suffer a very long-latency. we hope the TTL could be longer so that we don't have to query much more frequently as ususal. |
 |
19
GPU Dec 31, 2014 via iPhone
可以说说这是什么功能吗？英文没看懂
|
|
22
aa65535 OP @GPU 目前的 openwrt-dnsmasq 也有这个功能，效果是一样的。
今天已经将 --min-cache-ttl 选项的 patch 发送出去了，如果作者接受的话就不用再更新 github 了。 |
 |
24
reguser12005 Jan 2, 2015
@aa65535 能不能给dnsmasq增加一个tcp查询dns的功能呢? 这样污染的可以直接在dnsmasq中用server直接tcp查询, 不用再用pdnsd呢?
|
|
25
waltcow Jan 2, 2015 via Android
@reguser12005 直接在vps搭建dns服务器，使用非标准端口
|
 |
26
leavic Jan 14, 2015
反正这次GFW更新了这堆fake IP我是看得醉了，min ttl绝对是灭掉GFW DNS污染的利器，除非我们的VPN比GFW的返回还快，不过真要这样我就全局VPN了。:)
|
|
27
leavic Jan 14, 2015
哦，我想我刚才理解错了min-ttl，想了想好像要自动滤掉前面的假IP，等待后面的真IP，单靠时间延迟确实没戏，还得维护IP列表，头痛。
|
 |
30
myliyifei Jan 27, 2015
正常min-ttl都是为了负载均衡用的，我觉得。
|
 |
31
luzuoqing Jun 23, 2015
@aa65535 从官方仓库安装的 dnsmasq-full 2.71。还是不能添加 min-cache-ttl 选项:
root@OpenWrt:/etc/config# dnsmasq -C /etc/dnsmasq.conf dnsmasq: bad option at line 41 of /etc/dnsmasq.conf 41行是： min-cache-ttl=3600 |
|
32
luzuoqing Jun 23, 2015
原来是我安装的版本过低的原因。。。
|
 |
33
zeroxia Apr 27, 2016
ignore-address 现在还有用吗？维护这个列表已经不现实了吧，现在的污染是不是随机给你垃圾 IP 。
|
Select Language