diff options
| author | Simon Kelley <simon@thekelleys.org.uk> | 2022-08-17 15:33:15 +0100 |
|---|---|---|
| committer | Simon Kelley <simon@thekelleys.org.uk> | 2022-09-06 22:43:33 +0100 |
| commit | 24c3b5b3d49b52d4bc954b4a820a4c3ec8947b2c (patch) | |
| tree | c14c42af15741a5398c2b2a895e6c55da9e940fa /man | |
| parent | 4447d48bb9ad3c19234594f0a5eb81f7959cbb10 (diff) | |
| download | dnsmasq-24c3b5b3d49b52d4bc954b4a820a4c3ec8947b2c.tar.gz | |
Add --port-limit option.
By default, when sending a query via random ports to multiple upstream servers or
retrying a query dnsmasq will use a single random port for all the tries/retries.
This option allows a larger number of ports to be used, which can increase robustness
in certain network configurations. Note that increasing this to more than
two or three can have security and resource implications and should only
be done with understanding of those.
Diffstat (limited to 'man')
| -rw-r--r-- | man/dnsmasq.8 | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/man/dnsmasq.8 b/man/dnsmasq.8 index adb10a4..e0a1117 100644 --- a/man/dnsmasq.8 +++ b/man/dnsmasq.8 @@ -180,7 +180,15 @@ specific UDP port <query_port> instead of using random ports. NOTE that using this option will make dnsmasq less secure against DNS spoofing attacks but it may be faster and use less resources. Setting this option to zero makes dnsmasq use a single port allocated to it by the -OS: this was the default behaviour in versions prior to 2.43. +OS: this was the default behaviour in versions prior to 2.43. +.TP +.B --port-limit=<#ports> +By default, when sending a query via random ports to multiple upstream servers or +retrying a query dnsmasq will use a single random port for all the tries/retries. +This option allows a larger number of ports to be used, which can increase robustness +in certain network configurations. Note that increasing this to more than +two or three can have security and resource implications and should only +be done with understanding of those. .TP .B --min-port=<port> Do not use ports less than that given as source for outbound DNS |