---
type: entity
title: dnsmasq
tags: [linux, dns, dhcp, network-tool]
related: [dnssec]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_support_dokumentation_anleitungen_dnssec_linux.md"]
---

# dnsmasq

`dnsmasq` is a lightweight, easy-to-configure DNS forwarder and DHCP server. It is frequently used in small networks or on individual Linux machines to provide DNS caching and local name resolution.

## DNSSEC Support
`dnsmasq` supports DNSSEC validation. To enable this feature, the `dnssec` directive must be added to `/etc/dnsmasq.conf`. 

Unlike some automated resolvers, `dnsmasq` requires the explicit definition of **trust anchors** (root keys) in its configuration to verify the authenticity of DNS responses. Additionally, the `dnssec-check-unsigned` directive is used to manage the validation of zones that are not signed with DNSSEC.