Re: dnsmasq to syslog

Le 20/10/2013 23:59, Fred Grayson a écrit :
> On 10/20/2013 5:20 PM, Pierre Nast wrote:
>> Le 04/02/2013 20:17, Lee Sharp a écrit :
>>> On 02/04/2013 01:05 PM, Francisco Artes wrote:
>>>> Due to some testing I am doing, I would like to log all DNS queries
>>>> made to
>>>> dnsmasq.  Is there a configuration file I can edit via exec.php to
>>>> set dnsmasq
>>>> to put standard error and out to syslog vs. what I think is either
>>>> set to
>>>> null or console?  Thanks!
>>> Create a firewall rule under LAN to allow access to the Gateway IP on
>>> port 53, and log it.  Put it at the top.  Instant log to syslog of who
>>> is polling DNS.  If you need to log what they are asking, that is
>>> different.
>>>
>>>              Lee
>>>
>>>
>> Hi all,
>>
>> As I was working on a DNS setup, I had the same question.
>> I found another way of doing things than the above.
>> I downloaded /etc/inc/services.inc from my m0n0wall box (using the
>> exec.php page).
>> I changed the way dnsmasq is started in the function
>> services_dnsmasq_configure() by adding the -q option that I found in the
>> dnsmasq man page :
>>
>> *-q, --log-queries*
>>     Log the results of DNS queries handled by dnsmasq. Enable a full
>>     cache dump on receipt of SIGUSR1.
>> I uploaded back the edited file on the m0n0wall box, and moved it from
>> /tmp to /etc/inc like it is written in the m0n0wall developer handbook
>> (see http://doc.m0n0.ch/dev/faq.html#id11623234).
>> I toggled one of the options in the "Services > DNS forwarder" page and
>> then applied changes in order to trigger a reload of the service. Now,
>> all the DNS queries received by dnsmasq are showing in the "Diagnostics
>>> Logs" page, under the "System" tab.
> Will your modifications to /etc/inc/services.inc file survive a reboot
> of m0n0wall?
>
Hi,

No, as stated in the m0n0wall developer handbook (see 
http://doc.m0n0.ch/dev/faq.html#id11623234), using this method, the 
modifications are lost on reboot.

-- 
Pierre