FreshTomato Wiki

User Tools

Site Tools

Trace:
dhcp_dns

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
dhcp_dns [2021/05/06 17:25]
pedro 		dhcp_dns [2021/09/07 17:42] (current)
techie007 [DHCP/DNS] Removed incorrect information
Line 1: Line 1:
-FIXME (description applies to the old version of the page) 
- 
 ====== DHCP/DNS ====== ====== DHCP/DNS ======
  
-The Advanced / DHCP/DNS page allows you to configure advanced settings for the DHCP and DNS services for the LAN and WAN. Most of this functionality is provided by FreshTomato's dnsmasq(uerade) module.+The Advanced / DHCP/DNS page allows you to configure advanced settings for the DHCP and DNS services for the LAN and WAN. Most of this functionality is provided by FreshTomato's dnsmasq module.
  
 ===== DHCP / DNS Server (LAN) ===== ===== DHCP / DNS Server (LAN) =====
  
-**Use internal DNS:** Makes dnsmasq(uerade) act as the DNS server on your LAN. DHCP clients will receive FreshTomato's IP address as the DNS server. (Default: Enabled).+**Use internal DNS:** Makes dnsmasq act as the DNS server on your LAN. DHCP clients will receive FreshTomato's IP address as the DNS server. (Default: Enabled).
  
 **Debug mode:** Checking this makes FreshTomato write detailed information the log file. **Debug mode:** Checking this makes FreshTomato write detailed information the log file.
  
-**Use received DNS with user-entered DNS: **Add DNS servers received from DHCP on your WAN connection to the static (manual) DNS server list. +**Use received DNS with user-entered DNS: **Add DNS servers received from DHCP on your WAN connection to the static (manual) DNS server list. See Basic/Network for more information. (Default: Disabled).
- +
-See Basic/Network for more information. (Default: Disabled).+
  
 **Prevent DNS-rebind attacks:** Enable DNS rebinding protection in dnsmasq. (Default: Enabled). **Prevent DNS-rebind attacks:** Enable DNS rebinding protection in dnsmasq. (Default: Enabled).
Line 19: Line 15:
 **Intercept DNS port:** Any DNS requests/packets sent out on UDP/TCP port 53 are redirected to the internal DNS server. Currently, only IPv4 DNS requests are intercepted. (Default: Disabled). **Intercept DNS port:** Any DNS requests/packets sent out on UDP/TCP port 53 are redirected to the internal DNS server. Currently, only IPv4 DNS requests are intercepted. (Default: Disabled).
  
-**Use user-entered gateway if WAN is disabled**: DHCP will assign the router's IP address as the default gateway on the LAN. (Default:Disabled)\\ +**Use user-entered gateway if WAN is disabled**: DHCP will assign the router's IP address as the default gateway on the LAN. (Default:Disabled)\\  \\  [[https://wiki.freshtomato.org/lib/exe/detail.php?id=dhcp_dns&media=5f4fb9623990a3574d3b9fea16226ed7.png|{{:5f4fb9623990a3574d3b9fea16226ed7.png}}]]
-\\ +
-[[https://wiki.freshtomato.org/lib/exe/detail.php?id=dhcp_dns&media=5f4fb9623990a3574d3b9fea16226ed7.png|{{:5f4fb9623990a3574d3b9fea16226ed7.png}}]]+
  
-\\ +\\  \\  **Ignore DHCP requests from unknown devices: **dnsmasq will ignore DHCP requests from MAC addresses not listed on the Static DHCP/ARP/IPT page. These clients won't be able to obtain an IP address through DHCP. Note that this setting is also available on the Static DHCP/ARP/IPT page. (Default: Disabled).
-\\ +
-**Ignore DHCP requests from unknown devices: **dnsmasq will ignore DHCP requests from MAC addresses not listed on the Static DHCP/ARP/IPT page. These clients won't be able to obtain an IP address through DHCP. Note that this setting is also available on the Static DHCP/ARP/IPT page. (Default: Disabled).+
  
 **Maximum active DHCP leases:** Maximum allowable active DHCP leases at one time. (Default: 255). **Maximum active DHCP leases:** Maximum allowable active DHCP leases at one time. (Default: 255).
Line 31: Line 23:
 **Static lease time:** The absolute maximum valid time for any DHCP lease. **Static lease time:** The absolute maximum valid time for any DHCP lease.
  
-   * Same as Normal Lease Time: The Static lease time is the same as the normal lease time (1440 minutes).+  * Same as Normal Lease Time: The Static lease time is the same as the normal lease time (1440 minutes).
   * Infinite: The Static lease time is infinity.   * Infinite: The Static lease time is infinity.
   * Custom: This allows you to enter a custom Static DHCP lease time. \\ (Default: Same as Normal Lease Time).   * Custom: This allows you to enter a custom Static DHCP lease time. \\ (Default: Same as Normal Lease Time).
  
-**Announce IPv6 on LAN (SLAAC): **Enabling this turns on router advertisements for IPv6 //Stateless Address Autoconfiguration (SLAAC)//  protocol. This allows hosts to self-configure an IP address with minimal contact with a server. The client sends out an RS (router solicitation) ICMP packet. The nearest router responds with a RA (router advertisement) packet. The client uses the IPv6 prefix provided in the RA packet as the first 64 bits of its address. It then derives the last 64 bits of its address using the EUI-64 process or a randomizatiion algorithm.+**Announce IPv6 on LAN (SLAAC): **Enabling this turns on router advertisements for IPv6 //Stateless Address Autoconfiguration (SLAAC)//  protocol. This allows hosts to self-configure an IP address with minimal contact with a server. The client sends out an RS (router solicitation) ICMP packet. The nearest router responds with a RA (router advertisement) packet. The client uses the IPv6 prefix provided in the RA packet as the first 64 bits of its address. It then derives the last 64 bits of its address using the EUI-64 process or a randomization algorithm.
  
 **Announce IPv6 on LAN (DHCP):**  Enabling this makes FreshTomato turn on router advertisements using IPv6 DHCP. **Announce IPv6 on LAN (DHCP):**  Enabling this makes FreshTomato turn on router advertisements using IPv6 DHCP.
Line 55: Line 47:
 **Use Stubby (DNS-over-TLS):** This enhances DNS privacy. Checking this box enables Stubby, a DNS Stub resolver. DNS over TLS sends DNS queries over a secure connection, encrypted with TLS, the same technology that encrypts secure Web traffic. This prevents third parties from seeing your DNS queries. **Use Stubby (DNS-over-TLS):** This enhances DNS privacy. Checking this box enables Stubby, a DNS Stub resolver. DNS over TLS sends DNS queries over a secure connection, encrypted with TLS, the same technology that encrypts secure Web traffic. This prevents third parties from seeing your DNS queries.
  
-**WINS (for DHCP): **Here, you can specify the IP adddress of a WINS Server which will be given to DHCP clients. NOTE: This does NOT actually enable the WINS service. FreshTomato's WINS Server function is enabled on the USB and NAS/**[[:file_sharing|File Sharing]]** menu.+**WINS (for DHCP): **Here, you can specify the IP address of a WINS Server which will be given to DHCP clients. NOTE: This does NOT actually enable the WINS service. FreshTomato's WINS Server function is enabled on the USB and NAS/**[[:file_sharing|File Sharing]]** menu.
  
 Windows Internet Name Service (WINS) is a legacy computer name registration and resolution service that maps computer NetBIOS names to IP addresses. Officially, WINS is outdated and largely obsolete. DNS is supposed to have replaced most WINS functionality. However, Microsoft has not officially deprecated WINS. It may still be necessary for some Windows LAN browsing functions, especially on very old Windows versions. Windows Internet Name Service (WINS) is a legacy computer name registration and resolution service that maps computer NetBIOS names to IP addresses. Officially, WINS is outdated and largely obsolete. DNS is supposed to have replaced most WINS functionality. However, Microsoft has not officially deprecated WINS. It may still be necessary for some Windows LAN browsing functions, especially on very old Windows versions.
  
-More details about WINS can be found here:\\ +More details about WINS can be found here:\\  [[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784707(v=ws.10)|https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784707(v=ws.10)]] 
-[[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784707(v=ws.10)|https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784707(v=ws.10)]]+ 
 +//DNSSEC NOTE//: Do not use results from: [[https://1.1.1.1/help|https://1.1.1.1/help]] . 
 + 
 +That webpage is likely to provide wrong results.
  
-Note about DNSSEC: do not use results from site [[https://1.1.1.1/help|https://1.1.1.1/help]] . That webpage is likely to provide wrong results. Use [[https://rootcanary.org/test.html|https://rootcanary.org/test.html]] or [[http://0kar.cz/dns/en/|http://0kar.cz/dns/en/]]+Instead, use:  [[https://rootcanary.org/test.html|https://rootcanary.org/test.html]]
  
 **dhcpc options: **In this field you can enter custom configuration settings for the dhcp client. **dhcpc options: **In this field you can enter custom configuration settings for the dhcp client.
Line 68: Line 63:
 **Reduce Packet Size:** udhcpc (the DHCP client FreshTomato uses to obtain a WAN IP address) has a problem. It has a DHCP discovery packet size 590 bytes long. However, DHCP relay servers can only handle DHCP discovery packets up to 576 bytes. If there are DHCP relay servers between your FreshTomato router and your Internet provider's DHCP server, FreshTomato might fail to acquire a DHCP lease on the WAN interface. **Reduce Packet Size:** udhcpc (the DHCP client FreshTomato uses to obtain a WAN IP address) has a problem. It has a DHCP discovery packet size 590 bytes long. However, DHCP relay servers can only handle DHCP discovery packets up to 576 bytes. If there are DHCP relay servers between your FreshTomato router and your Internet provider's DHCP server, FreshTomato might fail to acquire a DHCP lease on the WAN interface.
  
-The extra bytes appeared to be entirely padding, and not necessary. FreshTomato developers eliminated the padding, which reduced udhcpc's DHCP discovery packet size to only 331 bytes. This 331 byte size eventually became FreshTomato's default setting. This way, udhcpc can succesfully obtain a DHCP lease from a provider which might have DHCP relays. It may be possible that some users may not be able to obtain a WAN IP address unless they disable this feature, however. (Default: Enabled).\\ +The extra bytes appeared to be entirely padding, and not necessary. FreshTomato developers eliminated the padding, which reduced udhcpc's DHCP discovery packet size to only 331 bytes. This 331 byte size eventually became FreshTomato's default setting. This way, udhcpc can successfully obtain a DHCP lease from a provider which might have DHCP relays. It may be possible that some users may not be able to obtain a WAN IP address unless they disable this feature, however. (Default: Enabled).\\  \\  [[https://wiki.freshtomato.org/lib/exe/detail.php?id=dhcp_dns&media=d90d1b21f72f758269c6516f336b3b5f.png|{{:d90d1b21f72f758269c6516f336b3b5f.png}}]]
-\\ +
-[[https://wiki.freshtomato.org/lib/exe/detail.php?id=dhcp_dns&media=d90d1b21f72f758269c6516f336b3b5f.png|{{:d90d1b21f72f758269c6516f336b3b5f.png}}]]+
  
  
dhcp_dns.1620318300.txt.gz · Last modified: 2021/05/06 17:25 by pedro

Page Tools

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki