Project

General

Profile

Actions

Todo #15465

closed

Update dnsmasq to version 2.90

Added by Craig Coonrad 7 months ago. Updated 9 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
DNS Forwarder
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.11
Release Notes:
Default

Description

Apple (and likely others) are using a relatively new type of DNS record.

Service binding and parameter specification via the DNS (DNS SVCB and HTTPSSVC)
https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-httpssvc

If you are using Safari to access local network resources by name. Safari will query for type 65 HTTPS records. These are forwarded by dnsmasq to upstream name servers. This information leak of local network names/resources may be undesirable to the user. Version 2.90 of dnsmasq introduces the following:

    Add --filter-rr option, to filter arbitrary RR-types.
    --filter-rr=ANY has a special meaning: it filters the
    answers to queries for the ANY RR-type.

This allows you to filter these records. This can be added to the custom fields option, or alternately would be nice to have a checkbox to filter these RRs if desired.

Actions #1

Updated by Craig Coonrad 11 days ago

  • Status changed from New to Resolved

Resolved with 24.11-RELEASE

dnsmasq-2.90_2,1               Lightweight DNS forwarder, DHCP, and TFTP server
Actions #2

Updated by Jim Pingle 9 days ago

  • Tracker changed from Feature to Todo
  • Subject changed from Update dnsmasq to version 2.90 to support resource record filtering to Update dnsmasq to version 2.90
  • Target version set to 2.8.0
  • % Done changed from 0 to 100
  • Plus Target Version set to 24.11
Actions

Also available in: Atom PDF