tree 664d70327bd2e2c7c4af566bfc8989333b3aa586
parent d1b102a58056b842bf81e0846b2d4a21e7c964eb
author Lorenzo Colitti <lorenzo@google.com> 1409087194 -0700
committer Lorenzo Colitti <lorenzo@google.com> 1409189773 -0700

Allow configuring a socket mark for DNS packets.

This allows dnsmasq to send DNS queries on a non-default network
(e.g., the DUN APN). We add support for a mark instead of using
existing code to bind DNS servers to interfaces because:

1. Marks are more flexible, and we use them elsewhere.
2. The existing code to bind DNS servers to interfaces causes
   the DNS socket to be bound to a constant port, which exposes
   us to a Kaminsky attack.

Bug: 16357676
Change-Id: I8933b6de198a92c2aaf0291931ace8966ddba275