How to filter out LAN / private addresses resolution? #1706
-
|
Running the latest 2.0.45 on Windows. In my dnscrypt access/nx logs I'm noticing tons of requests for PTR regarding intranet / non-routable private addresses. 127.0.0.1 255.1.168.192.in-addr.arpa PTR SYNTH 2ms - Is there an option to bounce any PTR requests for all internal addresses like 224.0.* or 192.168.* (because this doesn't make any sense and puts unnecessary strain on remote DNS servers). |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
drill PTR 1.1.0.224.in-addr.arpa.If you really want to block something, you can add it to your block list, like any zone. |
Beta Was this translation helpful? Give feedback.
SYNTHmeans that the response was locally synthesized.PTRqueries for local addresses are never sent to upstream resolvers; there's nothing to configure,dnscrypt-proxydoes it out of the box.224.0.*is not a set of internal addresses. With the exception of224.0.0.*, everything here is routable to the Internet.224.0.1.1for example, has aPTRrecord:If you really want to block something, you can add it to your block list, like any zone.