[Dnsmasq-discuss] Please consider adding an option to filter request by type

doyoucare at secmail.pro doyoucare at secmail.pro
Fri Mar 20 00:06:31 GMT 2020


I'd like to allow A,AAAA request and reject other types for security of my
network.

Could you please add an new option to allow this?


example

limit_resolve_type=
(empty (default): allow all types
Specify values by comma

limit_resolve_type=A,TXT

This will allow resolving domain name to IP, lookup domain TXT record
but block anything else such as PTRing IP address to domain namem, lookup
MX record and so on.


Currently, there's only one server software allow this configuration
but it is Windows only. I'd like to use same thing on Linux.





More information about the Dnsmasq-discuss mailing list