TomatoUSB

What I'm trying to to is assign all non static DHCP clients to opendns servers, they have some filtering enabled and the point is to set up a first line of defense for kids in my house. The computers for adults have static DHCP leases and I want them to use the normal DNS servers from my ISP. From other posts I've read this should be possible using the custom dnsmasq config section. So here is my setup:

DHCP range in the GUI is 192.168.1.100 - 192.168.1.149, this works fine
I have about a half dozen clients set up with static DHCP leases in the 192.168.1.50s area, this works fine
This is what I have in my dnsmasq custom config:

dhcp-range=set:red, 192.168.1.100, 192.168.1.149, 255.255.255.0
dhcp-option=net:red, 6, 208.67.222.222, 208.67.220.220

the dhcp-option line works fine, those are the opendns servers and if I set a computer to the tag red using mac address then it will get those servers when it renews it's lease, for example if I add a specific mac address like this:

dhcp-mac=red, XX:XX:XX:XX:XX:XX

So the question is how do I assign the range of 192.168.1.100 -192.168.1.149 to the tag red? This seems to work for other people but I'm not sure if they are using a newer version of dnsmasq or something.

I'm running this build of tomato on an asus n-16:
Tomato Firmware v1.28.9054 MIPSR2-beta K26 USB vpn3.6

dhcp-range=set:red, 192.168.1.100, 192.168.1.149, 255.255.255.0

Shoudl be

dhcp-range=set:red, 192.168.1.100, 192.168.1.149

EDIT: I created a separate vlan for my guests. in order to not allow inside passage to dns features. I did the following in the dnsmasq

dhcp-option=br1,44,172.16.1.1 #set netbios-over-TCP/IP nameserver(s) aka WINS server(s)
dhcp-option=br1,6,208.67.222.222,208.67.220.220 #sets dns servers.

I tried to get the set red to work and I couldn't. (not sure why) With the following settings.

dhcp-range=set:red,172.16.1.200,172.16.1.205
dhcp-option=tag:red,6,208.67.222.222,208.67.220.220

dhcp-range=set:red, 192.168.1.100, 192.168.1.149, 255.255.255.0

Shoudl be

dhcp-range=set:red, 192.168.1.100, 192.168.1.149

I tried that first (along with about a dozen other flavors), and I see from your edit that it didn't work for you either. So is this a bug in the version of dnsmasq that tomato is using? Is there any way to fix that if it is a bug?

With the separate vlan thing, I got a couple questions.
First does it prevent the computers on different vlans from talking to each other? I don't want to prevent network access to shares and storage and printers and such. And how does it determine who goes in what vlan?

Also, I don't understand what this line does even though you were nice enough to put a comment on it
dhcp-option=br1,44,172.16.1.1 #set netbios-over-TCP/IP nameserver(s) aka WINS server(s)

I wish it was more separate from one vlan to the other. I can still ping the other vlan1 (192.168.1.1) from vlan3 (172.16.1.1). dnsmasq has a setting to push a route i think (dhcp-option=br1,3,192.168.1.1) I haven't worked out how to remove this yet.

dhcp-option=br1,44,172.16.1.1 just sets the wins servers to look at vlan3. Again there is a dhcp-option=br1,44,192.168.1.1 already in place that I would like to remove as well. but it will work for what you need.

By changing the dns servers away from the router. you may have to use ip addresses in order to connect.