| Port details on branch 2025Q1 |
- dnsmasq-devel Lightweight DNS forwarder, DHCP, and TFTP server
- 2.91.r6,6 dns
 =0      2.91.r6,6Version of this port present on the latest quarterly branch.  DEPRECATED: Short-lived test branch, to be removed after v2.91 release
- Maintainer: mandree@FreeBSD.org
- Port Added: 2025-01-14 21:42:04
- Last Update: 2025-03-20 22:05:34
- Commit Hash: a5e35c8
- License: GPLv2
- WWW:
- https://www.thekelleys.org.uk/dnsmasq/doc.html
- Description:
- Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It
is designed to provide DNS and, optionally, DHCP, to a small network. It can
serve the names of local machines which are not in the global DNS. The DHCP
server integrates with the DNS server and allows machines with DHCP-allocated
addresses to appear in the DNS with names configured either in each host or in
a central configuration file. Dnsmasq supports static and dynamic DHCP leases
and BOOTP/TFTP/PXE for network booting of diskless machines.
Dnsmasq is targeted at home networks using NAT and connected to the internet
via a modem, cable-modem or ADSL connection but would be a good choice for any
smallish network (up to 1000 clients is known to work) where low resource use
and ease of configuration are important. -- Simon Kelley
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- dnsmasq-devel>0:dns/dnsmasq-devel
- Conflicts:
- CONFLICTS_INSTALL:
- To install the port:
- cd /usr/ports/dns/dnsmasq-devel/ && make install clean
- To add the package, run one of these commands:
- pkg install dns/dnsmasq-devel
- pkg install dnsmasq-devel
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: dnsmasq-devel
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1742508151
SHA256 (dnsmasq-2.91rc6.tar.xz) = 4cdd4fa04c5d28114bc0648a872af0c024386301cd1225faa3b93148141b5985
SIZE (dnsmasq-2.91rc6.tar.xz) = 575764
No package information for this port in our database- Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- gettext-runtime>=0.22_1 : devel/gettext-runtime
- msgfmt : devel/gettext-tools
- gmake>=4.4.1 : devel/gmake
- pkgconf>=1.3.0_1 : devel/pkgconf
- Library dependencies:
-
- libidn2.so : dns/libidn2
- libgmp.so : math/gmp
- libnettle.so : security/nettle
- libintl.so : devel/gettext-runtime
- There are no ports dependent upon this port
Configuration Options:- ===> The following configuration options are available for dnsmasq-devel-2.91.r6,6:
DBUS=off: D-Bus IPC system support
DNSSEC=on: Enable DNSSEC caching and validation (needs nettle)
DOCS=on: Build and/or install documentation
IPSET=on: Dynamic firewall management of resolved names (needs PF)
IPV6=on: IPv6 protocol support
LUA=off: Support lease-change scripts written in Lua
====> Internationalization Support Level: you can only select none or one of them
IDN=off: IDN: Int'l Domain Names WITHOUT full NLS
NLS=on: IDN+NLS: Int'l Domain Names & National Language support
===> Use 'make config' to modify these settings
- Options name:
- dns_dnsmasq-devel
- USES:
- cpe shebangfix tar:xz gettext gmake iconv pkgconfig pkgconfig
- pkg-message:
- To enable dnsmasq, edit /usr/local/etc/dnsmasq.conf and
set dnsmasq_enable="YES" in /etc/rc.conf[.local]
Further options and actions are documented inside
/usr/local/etc/rc.d/dnsmasq
SECURITY RECOMMENDATION
~~~~~~~~~~~~~~~~~~~~~~~
It is recommended to enable the wpad-related options
at the end of the configuration file (you may need to
copy them from the example file to yours) to fix
CERT Vulnerability VU#598349.
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
2.91.r6,6
20 Mar 2025 22:05:34
 |
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91rc6
...which is the same as v2.91.
ChangeLog: https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=blob_plain;f=CHANGELOG;hb=v2.91rc6
Not updating to v2.92test1 yet because we see no need to upgrade
the dns/dnsmasq port to v2.91 and so dnsmasq-devel can reach a
stable end in 2025Q1. |
2.91.r5,6
22 Feb 2025 12:40:08
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91rc5
Upstream changes since rc4, all by Simon Kelley:
* 5990074 2025-02-21 | Fix stupid error in allocating 0x20-flip bitmaps.
* d17581c 2025-02-21 | Use correct packet length when 0x20 flipping truncated
packet.
* 2c9ed7f 2025-02-20 | Fix possible problems with case-encode bigmap array
allocation.
* 717ff6a 2025-02-10 | Update plen when getting retried query from stash.
MFH: 2025Q1
(cherry picked from commit 05d61c2eda9fdff5d9789502507718c282ff0fec) |
2.91.r4,6
11 Feb 2025 21:46:34
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91rc4
Upstream git log since v2.91rc3, changes by Simon Kelley:
* f9f8d19 2025-02-09 | Yet another 0x20 fix.
Upstream has one more fix in Git,
so this isn't going to be the release yet.
MFH: 2025Q1
(cherry picked from commit 884bdef652b25c2c6491989f89cc2b13263d1fcc) |
2.91.r3,6
08 Feb 2025 22:45:10
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91rc3
* bceab45 2025-02-07 | Fix 0x20 problem.
Also fix ordering of chrony vs. dnsmasq (from dns/dnsmasq main port)
MFH: 2025Q1
(cherry picked from commit fe9d683cf82809f877f307d2cfae790944eed325) |
2.91.r2,6
07 Feb 2025 01:06:38
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91rc2
changes since v2.91rc1:
* 368ceff 2025-02-06 | TFTP off-by-2 bugfix [Helge Deller]
* 77c4e95 2025-02-06 | Fix for case-sensitivity problems in DNS. [Simon Kelley]
* e44165c 2025-02-06 | Fix bug in 0x20 encoding. [Simon Kelley]
CHANGELOG addition:
| Fix a long-standing problem when two queries which are identical in
| every repect _except_ case, get combined by dnsmasq. If dnsmasq gets
| eg, two queries for example.com and Example.com in quick succession it
| will get the answer for example.com from upstream and send that answer
| to both requestors. This means that the query for Example.com will get
| an answer for example.com, and in the modern DNS, that answer may not
| be accepted.
MFH: 2025Q1
(cherry picked from commit 25b9e07a704924e2a6797a9491514b7e4fc68c8e) |
2.91.r1,6
05 Feb 2025 23:25:45
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to 2.91rc1
Changes since 2.91test10, by Simon Kelley unless noted otherwise:
* a1a214c 2025-02-05 | Bump date on manpage.
* 94b7144 2025-02-05 | Fix c99ism added in
0b6144583b128330e7cffa105bc9ccbc4d6f0692
* e72910d 2025-02-05 | Spell check v2.91 CHANGELOG [Matthias Andree]
* 0b61445 2025-02-05 | Log failed TCP DNS connections upstream when --log-debug
active.
* f316673 2025-02-05 | Manpage typo.
* 5226b71 2025-02-03 | Add --no-0x20-encode config option.
* 1f84cde 2025-02-03 | Tweak to logging.
* 046bfa2 2025-01-31 | Clean up some of the man page formatting. [Paul Donald]
* 0762732 2025-02-01 | belt-and-braces extra call to check_log_writer() in
tcp_request()
MFH: 2025Q1
(cherry picked from commit 9c05711b4c942325f1963cc75871c91906a802ac) |
2.91.t10,5
01 Feb 2025 09:58:39
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test10
Git history:
* efb8f10 2025-01-23 | Fix potential memory leak [Brian Haley]
* 6dbdf16 2025-01-24 | Move debian submodule to submodules/dnsmasq-debian.
[Simon Kelley]
* 6e6a45a 2025-01-23 | Bump copyrights to 2025. [Simon Kelley]
MFH: 2025Q1
(cherry picked from commit bbee93d4beba19ab9767f3cfe0948df039aabb7f) |
2.91.t9,5
31 Jan 2025 21:12:14
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test9
Upstream commit history, all changes by Simon Kelley:
* a4569c2 2025-01-20 | Correct BNF for --trust-anchor in manpage.
* 199e65c 2025-01-20 | Remove misleading comment.
* bb8811d 2025-01-20 | Convert DNS names in logs to all lower case.
* 995a16c 2025-01-19 | Implement "DNS-0x20 encoding".
* 65f9c1a 2025-01-19 | Case-sensitive matching of questions and answers.
Upstream CHANGELOG addition:
| Implement "DNS-0x20 encoding", for extra protection against
| reply-spoof attacks. Since DNS queries are case-insensitive, it's
| possible to randomly flip the case of letters in a query and still get (Only the first 15 lines of the commit message are shown above  ) |
2.91.t8,5
21 Jan 2025 20:21:17
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test8
Upstream CHANGELOG file addition:
| Handle DS queries to auth zones. When dnsmasq is configured to act as
| an authoritative server and has an authoritative zone configured, and
| recieves a query for that zone _as_forwarder_ it answers the query
| directly rather than forwarding it. This doesn't affect the answer, but
| it saves dnsmasq forwarding the query to the recusor upstream, whch then
| bounces it back to dnsmasq in auth mode. The exception should be when
| the query is for the root of zone, for a DS RR. The answer to that has
| to come from the parent, via the recursor, and will typically be a
| proof-of-nonexistence since dnsmasq doesn't support signed zones. This
| patch suppresses local answers and forces forwarding to the upstream
| recursor for such queries. It stops breakage when a DNSSEC validating (Only the first 15 lines of the commit message are shown above ) |
2.91.t7,5
14 Jan 2025 21:36:18
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to v2.91test7
The local patch got merged upstream and was removed.
This is the changelog since test6:
* da58455 2025-01-13 | Tweak 7d915a0bb94260073ec7aa4dd00b787f3ea4b9e8 (tag:
v2.91test7)
* b915c9a 2025-01-13 | Attempt to keep running if a child process dies.
* 424aaa0 2025-01-13 | Fix another 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
SNAFU
* c72c895 2025-01-12 | Improve "no upstream servers configured" when D-Bus is
enabled [Andrew Sayers]
* b715611 2025-01-12 | Fix SNAFU in 509afcd1d2f9edbd1e11c9abd0f335f02baa7fc4
* 7d915a0 2025-01-12 | Don't do retries over UDP when we've sent the query by
TCP.
* 509afcd 2025-01-12 | Refactor poll() loop.
* 51343bd 2025-01-12 | Treat replies with CD flag set the same for UDP and TCP
code paths.
* b58276a 2025-01-12 | Return EDE OTHER error when DNSSEC validation abandoned.
* f162d34 2024-12-29 | cache: Fix potential NULL deref in arcane situations.
[Matthias Andree]
(cherry picked from commit 44de445d96ac7096fb803c1bba9019c23cc24990) |
2.91.t6,5
14 Jan 2025 21:36:18
|
Matthias Andree (mandree) |
dns/dnsmasq-devel: update to 2.91test6.
Also include one potential cache.c NULL deref which I have
submitted upstream.
Upstream Git log:
* 0003db1 2025-01-07 | Fix crash introduced in
6656790f2498f2a0b21086bc4ab47a2e38429a7c (tag: v2.91test6)
* 275f4a4 2025-01-07 | Remove arbitrary workspace size limit. (tag: v2.91test5)
* 12e4565 2025-01-06 | Improve "chown of PID file failed" message for missing
CAP_CHOWN [Andrew Sayers]
* 7af26ee 2025-01-07 | Fix manpage typo. [Andrew Sayers]
* 63dc6eb 2025-01-07 | Fix read_write() changes for TCP timeout.
* 6656790 2025-01-07 | Handle queries with EDNS client subnet fields better.
* c8de423 2025-01-07 | Fix finger-trouble in immediately previous commit.
* c52653f 2025-01-06 | Correctly handle failure of pipe() call in swap_to_tcp()
* e24c341 2025-01-01 | Fix wrong packet size when dumpong packets to file.
(cherry picked from commit c822c10442a488fe79326e2095236b94ea1e4a22) |
As an Amazon Associate I earn from qualifying purchases.