We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
屏蔽 ANY 在公网部署 MosDNS 可以有效屏蔽对服务器的恶意消耗。RFC8482
CoreDNS 实现插件参考:https://github.com/coredns/coredns/tree/master/plugin/any
其效果为:
[root@centos ~]# q "@https://mydns.com/dns-query" www.qq.com any www.qq.com. 2h21m22s HINFO "ANY obsoleted" "See RFC 8482"
虽然 mosdns 可以通过丢弃 255 (any) 请求类型的方式来实现,但是如果做成现成插件,会变得非常方便。
- tag: "" type: sequence args: - matches: qtype 255 exec: reject 3
The text was updated successfully, but these errors were encountered:
如果做成现成插件,会变得非常方便。
直接 match 255 需要两行配置
做成插件需要写三行。
args: - exec: reject_any - match: has_resp exec: accept
Sorry, something went wrong.
有道理,不过其实就是想它 return 个 ANY obsoleted 的信息出来 😂
没人会请求 any。直接丢弃都可以。回复一个 REFUSE 已经算仁慈了。
No branches or pull requests
希望添加的功能
屏蔽 ANY 在公网部署 MosDNS 可以有效屏蔽对服务器的恶意消耗。RFC8482
CoreDNS 实现插件参考:https://github.com/coredns/coredns/tree/master/plugin/any
其效果为:
虽然 mosdns 可以通过丢弃 255 (any) 请求类型的方式来实现,但是如果做成现成插件,会变得非常方便。
The text was updated successfully, but these errors were encountered: