Package: dnsmasq Version: 2.85-1 Severity: important -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
If 'enable-tftp' is set, the TFTP server appears on all interfaces. It completely disregards bind-interfaces and friends. One would think that TFTP would only be offered on interfaces where dnsmasq happens to offer DHCP services (since DHCP essentially is a superset of BOOTP, to which TFTP is related), but apparently not. The relevant part of my config: bind-interfaces interface=br0 except-interface=enp4s0 no-dhcp-interface=enp4s0 IMHO, the only service that dnsmasq should offer on both loopback and 'interface' is DNS. It ought to be possible to bind every other service that dnsmasq can offer to specific interfaces. If the above already is possible, but my particular combination of bind-interfaces/interface/except-interface/no-dhcp-interface prevents that, I welcome tips on how to fix it. Martin-Éric - -- System Information: Debian Release: 11.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-11-amd64 (SMP w/8 CPU threads) Locale: LANG=fi_FI.utf8, LC_CTYPE=fi_FI.utf8 (charmap=UTF-8), LANGUAGE=fi:en Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages dnsmasq depends on: ii dnsmasq-base [dnsmasq-base] 2.85-1 ii init-system-helpers 1.60 ii lsb-base 11.1.0 ii netbase 6.3 ii runit-helper 2.10.3 dnsmasq recommends no packages. Versions of packages dnsmasq suggests: pn resolvconf <none> - -- no debconf information -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyJACx3qL7GpObXOQrh+Cd8S017YFAmIM/0IACgkQrh+Cd8S0 17YxjQ//fWx8Gq8SlkyP9MGBtnvvYoWX3Vov2i2QPNXgAoBIhbsyA6ELxYQVT/9B oYViMGJxXxkU7+JmjZ5FJTKd6rv1hroOfL7N1esdEjh69GUUXxVTjkZ4I95AnE9i 6L3qQmIiq2jbzOK7D8S5bSACfxBUSKFd20eG5CHPJxK7hGaH+JqltiuqbsFCxhxC OAnZzFeR/tmcLB6npRB0H0fnJmiA+J0S6i6+iI4fGwcnQV7rssK0GKMtqGpxKVVU 8knR/ZD5JkSEQJgKnLRWYkw4Vttjf0UDa5Fiw0WWgcYZHVneciYDAsDAK3G6cPJ6 Vy+A6A2XTgZD0TKzmJWxcWMCcetOMYxHfftdw8Ky+6BcKJ5tqd1jH9C6CLFgsQSU vnk6LCwxBXz3toN6m7cuhxP8jws7YkVouMfUzwX0jW6MQS1Fw3rr73pKb4ssibDJ nqqaG4DKdxZ+jOLwYKd0NllaDHauKezf85hMx4wnyVSp+gmPhFFLLjKujIXCiw3u EvFSRuRas/86HirsCp8WHU7I5YraNv1ksU4IjEn4zwRPPhLiu0fxz4NIKgzhET6R J+SpXty5rNw68w+m/Nro6OFnMUL1AMoY/JZNPJGvwYMRXl7/gRehgTH+H6KSXT3R WYMQ0Xy05Slie3GeONeSE5uSw4I3bIJGTaNKUnEPbwCMywjNBKQ= =7Yhl -----END PGP SIGNATURE-----
