git.ipfire.org Git - thirdparty/knot-resolver.git/commit

]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit

projects / thirdparty / knot-resolver.git / commit

author	Marek Vavruša <mvavrusa@cloudflare.com>
	Fri, 15 Jun 2018 22:28:54 +0000 (15:28 -0700)
committer	Marek Vavruša <mvavrusa@cloudflare.com>
	Fri, 7 Sep 2018 17:45:21 +0000 (10:45 -0700)
commit	394881b7a785e2331bd092df62c55468882f9bf4
tree	48255f48267b76207da0c7a574fa2ecc813685fd	tree
parent	4f49404e9eaa7ee4598e31fc048f7ca460be9f94	commit \| diff

policy: apply filters on outgoing queries as well

This allows blocking names with intermediate CNAMEs, e.g.

```
example.com CNAME invalid
```

Before, the policies were only applied on query name,
which can be circumvented by a layer of indirection like this.

daemon/lua/sandbox.lua		diff \| blob \| blame \| history
modules/daf/daf.lua		diff \| blob \| blame \| history
modules/policy/policy.lua		diff \| blob \| blame \| history
modules/renumber/renumber.lua		diff \| blob \| blame \| history
modules/view/view.lua		diff \| blob \| blame \| history
modules/workarounds/workarounds.lua		diff \| blob \| blame \| history

Mirror of https://gitlab.nic.cz/knot/knot-resolver.git

RSS Atom