Skip to content

v0.1.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Mar 05:12
· 43 commits to main since this release
v0.1.4
ee8e4f4

v0.1.4 — DNS Query Engine Hardening

Bug Fixes

  • Fix truncated DNS responses losing NS records — Added EDNS0 (1232-byte UDP buffer) to all queries. Without it, responses over 512 bytes were silently truncated, causing tunnel checks to report "no DNS" on valid subdomain delegations.
  • Add TCP fallback on truncation — When a response still exceeds UDP buffer (TC bit set), the query automatically retries over TCP.
  • TCP fallback on UDP failure — If UDP is blocked entirely (middlebox/firewall), automatically falls back to TCP before giving up.
  • EDNS0 FORMERR fallback — If a resolver doesn't support EDNS0 and returns FORMERR, retries without it.
  • Fix SERVFAIL hiding valid NS delegations — QueryNS and QueryDoHNS now inspect the Authority section even when the resolver returns SERVFAIL, catching subdomain delegations that resolvers couldn't fully chase.
  • Fix IPv6 resolver addresses — Replaced raw string concatenation (ip+":53") with net.JoinHostPort() across all DNS, EDNS, NXDOMAIN, and E2E checks. IPv6 addresses like 2001:4860:4860::8888 now work correctly.

Downloads

Platform Binary
Linux x64 findns-linux-amd64
Linux ARM64 findns-linux-arm64
macOS x64 findns-darwin-amd64
macOS ARM64 findns-darwin-arm64
Windows x64 findns-windows-amd64.exe
Assets 7
Loading