Feature request: add lo interface selection on DNS\Devices&Ports tab

[Mile-Lile]

What would you like to see in luci?

On cgi-bin/luci/admin/network/dns when using dnsmasq there is option "Listen addresses" but I don't have 127.0.0.1 and ::1 offered on drop-down list. I thing these IPs of local interfaces are 100% valid because apps on router itself use these IPs to do dns resolving. Not having these results in my nslookup not working, remote syslog, etc.. Can you include them please.

[systemcrash]

listening on loopback isn't always the same as listening on all interfaces 0.0.0.0 - and the behaviour varies sometimes.

dnsmasq is particular about this part tho:

-a, --listen-address=
Listen on the given IP address(es). Both --interface and --listen-address options may be given, in which case the set of both interfaces and addresses is used. Note that if no --interface option is given, but --listen-address is, dnsmasq will not automatically listen on the loopback interface. To achieve this, its IP address, 127.0.0.1, must be explicitly given as a --listen-address option.

I think with things like this, you need to consciously block ingress DNS on the WAN since dnsmasq might end up listening there also, otherwise. And this is a pitfall which is ideally avoided...

[Mile-Lile]

well, I have to check this but usually all firewalls has this so called anti-spoofing rules. I hope Openwrt is one of them. will check and write you again...

[brada4]

"anti-spoofing" is a vulgarism for "reverse path filtering"