My router can be joined by clients.

enable // I'd like to redirect all traffic to an IP (, I mean any IP and any domain.

disable // Then I d like to be able to disable it. Then clients can browse the web I can do that for IP but not with IPTables.

How can I do that ?

Here is my router config:


option domain-name-servers;
default-lease-time 600;
max-lease-time 7200;    
log-facility local7;

    subnet netmask {
        #option domain-name "wifi.localhost";
        option routers;  
        option subnet-mask;
        option broadcast-address;    
        option domain-name-servers;
        range dynamic-bootp;   



Finally, I turned on ip_forward:

echo 1 > /proc/sys/net/ipv4/ip_forward

I guess my system cannot find DNS resolver anywhere (?)

  • What are IP addresses assigned to your router and client? And please give some examples of IP addresses that worked with your browser as you expected. – yaegashi Jul 20 '15 at 11:52
  • broadcast-address should be You should check your clients resolve every domain name to using DNS utility like host, dig or nslookup. And, can you open with your browser and see content intended for clients? – yaegashi Jul 20 '15 at 20:33
  • @yaegashi thanks. Yes I can open with a client browser, and see content indeed. + address=/#/ resolve every domain name to, this is the problem. If I comment address=/#/, i can get no DNS resolving. Note : I do want my clients access Internet, if they enter www.someting.com, then they do see `www.someting.com' – ArchiT3K Jul 21 '15 at 7:12
  • @yaegashi where shall I add broadcast-address please ? – ArchiT3K Jul 21 '15 at 7:22
  • Modify that in dhcpd.conf: it should be option broadcast-address;. If you want clients to normally resolve domain names using dnsmasq, just remove no-resolv, or add server=<upstream DNS address> in dnsmasq.conf. – yaegashi Jul 21 '15 at 7:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.