-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On 22/02/17 21:52, Petr Menšík wrote: > I would suggest a new option then. For example > --bind-interfaces-exact. It would listen just like > --bind-interfaces, but would allow you to listen only on virbr0, > when ignoring any addresses with labels. Current behavior in other > words, but documented as a new feature. It would allow previous > behavior at the same time also. Ugh. There are already _three_ different modes for this. The default (bind wildcard address), bind-interfaces (bind individual addresses) and bind-dynamic (bind individual addresses, keep up with changes in interface config) On linux, there's actually no sane reason not to use --bind-dynamic, and it's only not the default for historical reasons. The other two modes still exist for *BSD where bind-dynamic doesn't exist and you have the Hobson's choice of the other two: which is least-bad depending on circumstances. Since labels are a Linux-only thing, AFAIK, this whole problem may best be solved by mandating that --bind-dynamic should be used on linux if you want labels to work, and generating warnings if an label != interface name is found in the default mode. Or possibly ignoring labels entirely in the default mode. And documenting same and that - --bind-dynamic is needed to use labels. (or maybe --bind-dynamic or - --bind-interfaces) Apart from the documentation changes, that would involve removing label_exception, so pre-2.67 behavior would return for the default mode, ie --interface must give an interface name and label-aware behavior would exist in --bind-dynamic ie --interface must give a label. This stuff is all horrible: it's really difficult to even explain what it's for and why it needs to be configured. Cheers, Simon. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCAAGBQJYr0sdAAoJEBXN2mrhkTWi8X0P/irtSCpt0AljtsjwKVhgYj0F TlidegXBIQvnfk8gFZboI07twkB/iIp5La/xj/erpIDwnAR3/ntnq0yrXHhx27Qe Ts1V1wHN0RnjxlzxJGiYVLJCE1Q8Pv/ckjdYgXdrXtrINzEer5vzb2/wvP5geyVg 0rx5tn6+JuiabZP0gDJASL1qHyozRgIKp0MNRMCzKrY+SMswjqrKVZwElCxbqELO kP6mwfLsqzRXjESxLlO4h5TU3QqssfycDeEfuJZdCKUJkrIVEcKTnCjzl3+TNvRN u/HW9gBWZaU/tKc3qEPlW6Tk8U9DKoXM9n7ml3goyhcBmeAENWHKn5TULoMR/Ns3 74HDDS/CKUgNW8u8iF2JD3yAHR7brki+PIuF5MjzP+czw56J/sWYpi/icHqU8tRH oNxfONMcN9SmBB7JgQCD/TvlAl8mv/bbCs9QW+QQh/A6OigTudV1fx57Nig0YwvC 0usHS6LmX24PtcYRc/3wTrQFI9rsVBmBWVrYTRU1/b3FyVeLlOIXHK4SQ5fHVnvv xM3BD1YC6etLZjvYdpRyRw6A9UcYvpbqIzXg+HG4EAgJskxf1lJdOIkYAI+qg+d5 3IeZ82wew1ZfjWTMuHVGwUCKaE1119JIr19iXyTfnrKxzP2dQ3rxZqCiCVNG4Equ 6n5FU197tGikv97kEtWo =Rxi7 -----END PGP SIGNATURE----- _______________________________________________ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss