Project

General

Profile

Actions
Copy link

Todo #15465

closed

Update dnsmasq to version 2.90

Added by Craig Coonrad 7 months ago. Updated 9 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
DNS Forwarder
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.11
Release Notes:
Default

Description

Apple (and likely others) are using a relatively new type of DNS record.

Service binding and parameter specification via the DNS (DNS SVCB and HTTPSSVC)
https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-svcb-httpssvc

If you are using Safari to access local network resources by name. Safari will query for type 65 HTTPS records. These are forwarded by dnsmasq to upstream name servers. This information leak of local network names/resources may be undesirable to the user. Version 2.90 of dnsmasq introduces the following:

    Add --filter-rr option, to filter arbitrary RR-types.
    --filter-rr=ANY has a special meaning: it filters the
    answers to queries for the ANY RR-type.

This allows you to filter these records. This can be added to the custom fields option, or alternately would be nice to have a checkbox to filter these RRs if desired.

Actions
Copy link

Also available in: Atom PDF