bogus-priv                     # Block fake private IP responses
no-resolv                      # Ignore /etc/resolv.conf for upstream DNS
dns-forward-max=150            # Limit parallel DNS queries to 150
clear-on-reload               # Clear cache when dnsmasq reloads
domain-needed                 # Ignore queries without a domain name
no-negcache                   # Do not cache negative (non-existent) DNS responses
no-poll                       # Do not poll /etc/resolv.conf for changes
strict-order                  # Use upstream DNS servers in the order they are listed

# AdGuard DNS 封鎖廣告和追蹤器。
# server=94.140.14.14    # AdGuard DNS (primary) - Standard DNS with no filtering
# server=94.140.15.15    # AdGuard DNS (secondary) - Standard DNS with no filtering

# AdGuard DNS 封鎖廣告、追蹤器、成人內容，並在可能的情況下啟用安全搜尋和安全模式。
# server=94.140.14.15    # AdGuard DNS (primary) - Filters ads and trackers
# server=94.140.15.16    # AdGuard DNS (secondary) - Filters ads and trackers

# server=1.0.0.1    # Cloudflare DNS (secondary)
# server=1.1.1.1    # Cloudflare DNS (primary)

server=8.8.8.8      # Use Google DNS as an upstream server
server=168.95.1.1   # Use Hinet DNS as an upstream server
server=8.8.4.4      # Use Google DNS as an upstream server

listen-address=127.0.0.1,192.168.88.1  # Listen on localhost and the specific network interface
# cache-size=1000                        # Set DNS cache size to 1000 entries
cache-size=5000                # Cache up to 5000 DNS entries for high traffic
all-servers                            # Forward DNS queries to all upstream servers

log-queries                   # Log all DNS queries
log-dhcp                      # Log all DHCP requests and responses
# log-facility=/var/log/dnsmasq.log  # Save logs to /var/log/dnsmasq.log
log-facility=/dev/null        # Disable logging by sending logs to /dev/null

dhcp-range=192.168.88.100,192.168.88.200,24h   # DHCP range with a 24-hour lease
dhcp-option=1,255.255.255.0                  # Subnet mask: 255.255.255.0
dhcp-option=3,192.168.88.1                   # Default gateway: 192.168.88.1
dhcp-option=6,192.168.88.1                   # DNS server: 192.168.88.1
dhcp-option=15,local                         # DNS domain name: local
dhcp-lease-max=151                           # Maximum number of DHCP leases: 151
dhcp-leasefile=/var/lib/misc/dnsmasq.leases  # File to store DHCP lease information

dhcp-host=00:0c:29:aa:bb:cc,192.168.88.10,infinite  # Static IP for Application Server
dhcp-host=00:0c:29:dd:ee:ff,192.168.88.11,infinite  # Static IP for Version Control Server
dhcp-host=00:0c:29:11:22:33,192.168.88.12,infinite  # Static IP for Database Server
dhcp-host=00:0c:29:44:55:66,192.168.88.13,infinite  # Static IP for Web Proxy

address=/example.com/192.168.88.10    # Route all requests for example.com to 192.168.88.10
address=/test.local/127.0.0.1         # Map test.local to localhost
address=/ads.example.com/0.0.0.0      # Block ads.example.com by pointing to an invalid IP
address=/#/192.168.88.1               # Redirect all unknown domains to 192.168.88.1

txt-record=example.com,"v=spf1 include:_spf.google.com ~all"
txt-record=_acme-challenge.example.com,"abcdef1234567890"
txt-record=test.local,"Test TXT Record for Internal Use"

host-record=example.com,192.168.88.10      # Map example.com to 192.168.88.10
host-record=server.local,192.168.88.20,192.168.88.30  # Map server.local to two IPs for load balancing
host-record=test.local,fe80::1             # Map test.local to IPv6 address fe80::1

srv-host=_sip._udp.example.com,sipserver.example.com,5060,10,60
srv-host=_sip._udp.example.com,backup.example.com,5060,20,30
srv-host=_ldap._tcp.example.com,ldap.example.com,389,5,50
srv-host=_xmpp._tcp.example.com,xmppserver.local,5222,10,100