답변:
나를 좋아하는 사람들을 위해 포트 53이 어떤 옵션을 사용하도록 제한했는지에 관계없이 모든 인터페이스에 여전히 포트 53이 열려있는 이유를 혼란스럽게 생각합니다. 설정해야 할 옵션이 하나 더 있습니다.
-z, --bind-interfaces
On systems which support it, dnsmasq binds the wildcard address, even when it is listening on only some interfaces. It then discards requests that it shouldn't reply to. This has the advantage of working even when interfaces come and go and change address. This option forces dnsmasq to really bind only the interfaces it is listening on. About the only time when this is useful is when running another nameserver (or another instance of dnsmasq) on the same machine. Setting this option also enables multiple instances of dnsmasq which provide DHCP service to run in the same machine.
이것은 dnsmasq 구성 파일에서도 가능하며 Simon Kelley의 예제 파일 ( http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq.conf.example)에 설명되어 있습니다 .
# If you want dnsmasq to listen for DHCP and DNS requests only on
# specified interfaces (and the loopback) give the name of the
# interface (eg eth0) here.
# Repeat the line for more than one interface.
#interface=
# Or you can specify which interface _not_ to listen on
#except-interface=