config dnsmasq
	option cachesize	100	# query with 'kill -SIGUSR1 $( pidof dnsmasq ); logread | tail -n5'
	option domainneeded	0	# forward querys without dots
	option boguspriv	1
	option filterwin2k	0	# enable for dial on demand
	option localise_queries	1
	option rebind_protection 0	# disable if upstream must serve RFC1918 addresses
	option rebind_localhost 0	# enable for RBL checking and similar services
	# list rebind_domain example.lan # whitelist RFC1918 responses for domains
	option local	'/lan/'
	option domain	'lan'
	option expandhosts	1
	option nonegcache	0
	option authoritative	1
	option readethers	1
	option leasefile	'/tmp/dhcp.leases'
	option resolvfile	'/tmp/resolv.conf.auto'
	list addnhosts		'/var/run/hosts_olsr'
	list addnhosts		'/etc/local.hosts'
	list server 		'8.8.8.8'
	# list server		'/mycompany.local/1.2.3.4'
	# option nonwildcard	1
	# list interface	br-lan
	list notinterface	wan
	option dhcpscript	'/etc/dhcp-script.d/10dhcpscript'

config dhcp lan
	option interface	lan
	option start 		34
	option limit		29
	option leasetime	2h
	option force		1
	option ignore		0

config dhcp wlan
	option interface	wlan
	option start 		2
	option netmask		255.255.255.240 	# maybe lower than wifimask
	option limit		13			 # fixme! better: 21
	option leasetime	1h
	option force		1
	option ignore		0

config dhcp wan
	option interface	wan
	option ignore		1