NAME

     dnsproxy — DNS proxy

SYNOPSIS

     dnsproxy [-dhV] [-c file]

DESCRIPTION

     The dnsproxy daemon waits for nameserver queries on a user specified address, dispatches
     these queries to authoritative and recursive nameservers and forwards the received answers
     back to the original client.

     The options are as follows:

     -c file  Read configuration from file.

     -d       Detach from current terminal and run as background process.

     -h       Show usage.

     -V       Show version.

     If a client from an internal IP address does a recursive lookup the query is forwarded to a
     recursive DNS server.  Authoritative queries and queries coming from clients in foreign
     networks are forwarded to an authoritative DNS server.

CONFIGURATION FILE

     At startup dnsproxy reads a configuration file specified via the -c option or at the default
     location of /etc/dnsproxy.conf.

     The following keywords are recognized:

     authoritative IP
     Address of the authoritative nameserver [required].

     recursive IP
     Address of the recursive nameserver [required].

     listen IP
     Local address (defaults to 0.0.0.0).

     port number
     Local port number (defaults to 53).

     chroot path
     A path to chroot to before starting to answer queries.

     user name
     A user to change to before starting to answer queries.

     authoritative-timeout seconds
     Time in seconds when authoritative queries time out (defaults to 10).

     recursive-timeout seconds
     Time in seconds when recursive queries time out (defaults to 90).

     authoritative-port number
     Port number on authoritative nameserver (defaults to 53).

     recursive-port number
     Port number on recursive nameserver (defaults to 53).

     statistics seconds
     Period between output of statistics (defaults to 3600).  Use 0 to disable output of
     statistics completely.

     internal network
     Declare networks recognized as internal and thus eligible to do recursive queries. One
     network in CIDR notation per keyword.

   EXAMPLE
           authoritative 10.1.1.1
           recursive 127.0.0.1
           recursive-port 10053
           listen 192.168.1.1
           port 53
           chroot /var/empty
           user nobody
           internal 192.168.1.0/24
           internal 127.0.0.1

STATISTICS

     Every hour (by default) dnsproxy logs the collected statistics about its usage to standard
     error (or syslog when running detached). Statistics look like

           ActiveQr AuthorQr RecursQr AllQuery Answered
           0        0        0        0        0
           TimeoutQ DroppedQ DroppedA LateAnsw HashColl
           0        0        0        0        0

     and have the following meaning:

     ActiveQr
     Number of currently active queries proxied to the servers.

     AuthorQr
     Accumulated number of authoritative queries.

     RecursQr
     Accumulated number of recursive queries.

     AllQuery
     Accumulated number of all queries ever received.

     Answered
     Accumulated number of answered queries.

     TimeoutQ
     Accumulated number of queries that did not receive an answer in time.

     DroppedQ
     Accumulated number of dropped queries (e.g. transmission errors).

     DroppedA
     Accumulated number of dropped answers.

     LateAnsw
     Accumulated number of answers received after the timeout period.

     HashColl
     Accumulated number of hash collisions in the query list.

SEE ALSO

     named(1)

VERSION

     This manual page describes dnsproxy version 1.16.

AUTHORS

     Armin Wolfermann <armin@wolfermann.org>

     The dnsproxy homepage is at http://www.wolfermann.org/dnsproxy.html.