Comments (5)
I've added an environment variable PRIVATE_ADDRESS
that defaults to 127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,169.254.0.0/16,::1/128,fc00::/7,fe80::/10,::ffff:0:0/96
but you can now set it to what you want.
If it still does not work, I may be because the IP addresses are in the block lists. I am reworking the generation of these lists with a proper Go program, so you should be able to have a finer grain control over what to block soon as well.
from dns.
@qdm12 It works great!! Thanks for the reply and quick action!
from dns.
Thanks for the issue and response.
The blocks-malicious.conf
still has all private-address
listed which prevents unbound from returning those IPs.
/unbound $ cat blocks-malicious.conf | grep 10.0.0.0
private-address: 10.0.0.0/8
I'd love to use BLOCK_MALICIOUS=on
, is there any updates on customizing the blocks-malicious
list to exclude private-address
?
from dns.
Private IPs shouldn't be in there. I'll adapt the program building the block lists to remove private IP addresses. I'll re-open the issue until it's done. Thanks for pointing this out.
from dns.
Hi @wei
There should not be any private IP addresses in the block lists anymore.
I triggered a build which should push the Docker images in a few minutes to Docker hub, simply docker pull qmcgaw/cloudflare-dns-server
and restart the container 👍
For your information, files used in this Docker image (DNS cryptographic stuff and block lists) are in the files repository if you want to search through them easily. They are also updated automatically by updated I wrote.
Happy DNS-over-TLSing!
from dns.
Related Issues (20)
- feature request: environment variable to allow privileged ports when running without root
- All `pkg` constructors should validate settings and return an error HOT 1
- Remove exported interfaces in `pkg` and use only local interfaces HOT 1
- Remove prometheus.Registerer interface usage HOT 1
- Add comments for all exported methods in the `pkg` directory
- Option to log requests/responses in color
- cache: remove all expired elements from oldest to newest
- filter: Middleware should keep blocked cached response HOT 1
- Cannot start v2-beta container: invalid value for max entries of the LRU cache HOT 2
- Hardcode DoH URL ip addresses if no DoT/plaintext-DNS should be used to resolve the URL HOT 1
- Add Mullvad DNS servers
- Review namings according to IEFT document
- Respond too large responses with truncated field and switch to TCP
- Ensure dns:v2.0.0-beta works with TCP over 53 for truncated messages
- Enhancement: use pool of DNS connections
- Document the difference between DoT and DoH
- Investigate using `golang.org/x/net/dns`
- MacOS port 53 conflict with mdnsresponder HOT 17
- Panic error on Windows Server 2022 running on a VM HOT 13
- Error on Linux Cent OS with beta version HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dns.