Contributions from the Open-Source Community

From UntangleWiki

Jump to: navigation, search

Untangle (5.0) - Alternate DNS via DHCP and using multiple DynDNS services

At my house I use OpenDNS instead of my ISP's dns servers. They are faster and they allow me some control over content filtering. Untangle had two issues with this though;

First, if you set Untangle's "External IP Settings" to "Automatically Set" because you receive a DHCP address from your ISP, Untangle passes on your ISP's DNS settings through to your network via DHCP and you cannot override this.

To make Untangle advertise a different DNS server than what it is given via your ISP do the following:<br>
	You must first create a root password and carry out these steps via the command line on the Untangle box
	Edit /etc/default/dnsmasq with your favorite editor.
	Uncomment the line DNSMASQ_OPTS="--conf-file=/etc/dnsmasq.alt"
	Copy /etc/dnsmasq.conf to /etc/dnsmasq.alt
	Add the servers you want to advertise to the following line 
		# Nameservers:
		dhcp-option=6,(your.servers.here),(your.servers.here)

Second, if you use OpenDNS to do content filtering, they have to know what IP you will be coming from. You can update them via a dyndns client but Untangle only allows for one dyndns client and doesnt have OpenDNS listed. Also, OpenDNS will only accept updates via a dyndns client over ssl and the current version of ddclient that comes with Untangle doesnt have ssl support. So first you have to install an updated ddclient. For the most part I followed the instructions I found here [1].

I did the following:
	wget http://superb-east.dl.sourceforge.net/sourceforge/ddclient/ddclient-3.7.3.tar.gz
	tar -xzvf ddclient-3.7.3.tar.gz
	cd ddclient-3.7.3/
	mv /usr/sbin/ddclient /usr/sbin/ddclient-3.6.2
	mv ddclient /usr/sbin/
	mkdir /etc/ddclient
	mv /etc/ddclient.conf /etc/ddclient/
	cp /etc/ddclient/ddclient.conf /etc/ddclient/ddclient.alt
	Edit /etc/ddclient/ddclient.alt to the OpenDNS specs described here: http://www.opendns.com/support/article/192
	cp /etc/init.d/ddclient /etc/init.d/ddclient-alt
	Edit /etc/init.d/ddclient-alt and add "-file /etc/ddclient/ddclient.alt" to the OPTIONS line
	ln -s /etc/init.d/ddclient-alt /etc/rcS.d/S21ddclient-alt

That should start a second instance of ddclient and point it to OpenDNS so you can update them with your current IP.

Personal tools