$dnstype modifier

[ameshkov]

See the spec below.

Please mind that some of the examples use the $dnsrewrite modifier that is not yet implemented (see #2102).

dnstype

The $dnstype modifier allows specifying one or several DNS query types the rule will be working for.

The syntax is:

$dnstype=A|TXT|...

You can also specify "excluded" DNS query types by adding a ~ character before the record type. In this case, the rule will not be applied to DNS queries with this type.

$dnstype=~AAAA

Please note, that $dnstype is case-insensitive, i.e. $dnstype=a is the same as $dnstype=A.

Examples

• ||*^$dnstype=HTTPS — block all queries with the type HTTPS.
• ||*^$dnstype=HTTPS,dnsrewrite=REFUSED — block all queries with the type HTTPS, return empty response with REFUSED instead.
• ||*^$dnstype=AAAA — block all AAAA queries.
• ||*^$dnstype=AAAA,dnsrewrite=NOERROR — block all AAAA queries, return empty response with NOERROR status instead.
• @@||example.org^$dnstype=TXT — unblock all TXT queries for example.org and it's subdomains.