From 1faff2dbed913aa7774ca9104ca30e0df18f3370 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Thu, 1 Jul 2010 15:15:25 -0400
Subject: [PATCH] Do not allow dns rebinding

---
 etc/inc/services.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/inc/services.inc b/etc/inc/services.inc
index d014b13ab6..9554c96083 100644
--- a/etc/inc/services.inc
+++ b/etc/inc/services.inc
@@ -636,7 +636,7 @@ function services_dnsmasq_configure() {
 		//}
 
 		/* run dnsmasq */
-		mwexec("/usr/local/sbin/dnsmasq --all-servers {$args}");
+		mwexec("/usr/local/sbin/dnsmasq --stop-dns-rebind --all-servers {$args}");
 
 		if ($g['booting'])
 			echo "done.\n";