MaraDNS is a full featured DNS server written with security, simplicity, and performance in mind. It supports redundancy, using primary and secondary servers.

opkg

opkg install maradns
vi /etc/mararc
. /etc/init.d/maradns enable
. /etc/init.d/maradns start
netstat -a
iptables -I INPUT -j ACCEPT -i eth0.1 -p tcp --dport 53
iptables -I INPUT -j ACCEPT -i eth0.1 -p udp --dport 53

The only configuration file is /etc/marac.
There four executables: maradns, askmara, zoneserver and getzone.

If you want MaraDNS to act like dnsmasq, as a recursive and/or authoritative DNS server edit /etc/mararc:

recursive_acl="192.168.1.0/24"

If you want to tie the process to a specific interface, edit the bind_address parameter. This defaults to 0.0.0.0 meaning any interface. If both recursive and authoritative DNS is needed (i.e. you add a zonefile) you have to change this to the specific IP addresse(s) where you need maradns to listen, otherwise it will refuse to start.

If you want it to act as a primary server to other secondaries, you'll need to start zoneserver additionally. Then add your zonefiles to /etc/marac.

If you want to act as a secondary server, you'll need to do regular zonetransfers with getzone. Generally you want to run a command like this on either a regular basis or triggered by some external event:

getzone domain.test 192.168.1.2 > /etc/maradns/db.domain.test

Where

domain.test

192.168.1.2

db.domain.test

See etccrontabsroot to utilize crond for that.

You can use MaraDNS and dnsmasq at the same time, but you will need to shut down the DNS functionality of dnsmasq by setting the option 'port' to '0' in /etc/config/dhcp. See dhcp for more informations.

More information about dnsmasq in general can be found at dns.server.dnsmasq or dhcp.dnsmasq

following uses NVRAM variable, these are not available any longer

It is possible to run dnsmasq and MaraDNS concurrently and have both listen on different interfaces. This allows for the separation of internal and external DNS services, as detailed by synthrax on this post:

I have both maradns and dnsmasq running on port 53. maradns serves public dns at the wan interface and dnsmasq takes care of the private subnet. in order for both to get along, you have to start maradns BEFORE dnsmasq.

Additionally, you need to have the line:

bind_address="external_ip"

in your mararc file. To start the two name servers, you could modify /etc/init.d/S50dnsmasq:

#!/bin/sh
. /etc/functions.sh
# maradns stuff starts here
publicip=$(whatismyip vlan1)
zonefile=/etc/maradns/my_dns_zone
cat $zonefile.template |sed s/external_ip/$publicip/ > $zonefile.zone
cat /etc/maradns/mararc.template |sed s/external_ip/$publicip/ > /etc/mararc
/usr/sbin/maradns >/var/log/maradns 2>&1 &
# maradns stuff ends here
# interface to use for DHCP
iface=lan
[...the script continues...]

this script does the following things:

1. it determines your external IP address with a script i got from the openwrt wiki (whatismyip) MiniHowtos Section 3.3. Instead of hardcoding "vlan1", better to say:

publicip=$(whatismyip $(nvram get wan_ifname))

1. it rewrites my maradns zone file to insert the external ip (just put "external_ip" in place of the actual ip in the zone template)
2. it rewrites mararc to insert the correct IP in "bind_address=…"
3. finally, it starts maradns

After maradns has started, port 53 of the external iface will be "occupied", which dnsmasq will complain about in the syslog ("[dnsmasq] setting –bind-interfaces option because of OS limitations"). You can safely ignore this message or you could probably start dnsmasq explicitly with the –bind-interfaces option to get rid of the message. Now, am adding two more options apart from the normal ones:

dnsmasq -a $(whatismyip $(nvram get lan_ifname)) -z

BTW: this works fine for me, as my ISP does (almost) never change my assigned IP. if you have a provider which changes your ip with every dhcp lease period or so, you would probably need to place something similar in /etc/hotplug.d/iface (or i don't know where)

• Project Homepage http://www.maradns.org/