mirrors/dnscrypt-proxy
1
0
Fork 0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2025-03-04 10:24:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Cloak plugin: reject uncloaked records, except NS & SOA

Browse source 
Fixes #2220
This commit is contained in:
Frank Denis 2023-02-02 19:59:00 +01:00
parent 5f88a9146c
commit 9e208e6090
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
dnscrypt-proxy/plugin_cloak.go
View file

@ -138,6 +138,10 @@ func (plugin *PluginCloak) Eval(pluginsState *PluginsState, msg *dns.Msg) error
question := msg.Question[0] question := msg.Question[0]
if question.Qclass != dns.ClassINET || if question.Qclass != dns.ClassINET ||
(question.Qtype != dns.TypeA && question.Qtype != dns.TypeAAAA && question.Qtype != dns.TypePTR) { (question.Qtype != dns.TypeA && question.Qtype != dns.TypeAAAA && question.Qtype != dns.TypePTR) {
if question.Qclass != dns.ClassINET || (question.Qtype != dns.TypeNS || question.Qtype == dns.TypeSOA) {
pluginsState.action = PluginsActionReject
pluginsState.returnCode = PluginsReturnCodeCloak
}
return nil return nil
} }
now := time.Now() now := time.Now()