Skip to content

Commit 48f3503

Browse files
committed
Add additional context
1 parent fcb43d5 commit 48f3503

File tree

2 files changed

+11
-3
lines changed

2 files changed

+11
-3
lines changed

src/content/docs/cloudflare-one/policies/gateway/dns-policies/common-policies.mdx

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -68,9 +68,17 @@ The categories included in this policy are not always a security threat, but blo
6868
product="cloudflare-one"
6969
/>
7070

71-
## Block dynamic list of categories
71+
## Block a dynamic list of categories
7272

73-
Block a set of categories sent in the EDNS section of the request. The integer category list to block on, can be sent to the gateway DNS as JSON(`{"categories": [<category-int-codes..>]}`) via OPT code 65050. This is useful to filter by categories, that are not known at the time of creating a rule. Whenever a DNS request is blocked because of the request context categories, gateway will reply with an EDE Blocked(15) field containing an array of matched categories.
73+
You can block a set of categories sent in the [EDNS](https://datatracker.ietf.org/doc/html/rfc6891) portion of a request with the [Request Context Categories](/cloudflare-one/policies/gateway/dns-policies/#request-context-categories) selector. The category ID list to block on can be sent to the gateway DNS as JSON using OPT code `65050`. For example:
74+
75+
```json
76+
{
77+
"categories": [2, 67, 125, 133]
78+
}
79+
```
80+
81+
This is useful to filter by categories that are not known at the time of creating a rule. When a DNS request is blocked because of the request context categories, Gateway will reply with an EDE Blocked(15) field containing an array of the matched categories.
7482

7583
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
7684

src/content/docs/cloudflare-one/policies/gateway/dns-policies/index.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -394,7 +394,7 @@ Use this selector to filter based on the IP addresses that the query resolves to
394394

395395
### Request Context Categories
396396

397-
Use this selector to match a dynamic list of [category IDs](/cloudflare-one/policies/gateway/domain-categories/#category-and-subcategory-ids) sent in the EDNS portion of a DNS query. Gateway includes request context with the OPT code `65050`.
397+
Use this selector to match a dynamic list of [category IDs](/cloudflare-one/policies/gateway/domain-categories/#category-and-subcategory-ids) sent in the [EDNS](https://datatracker.ietf.org/doc/html/rfc6891) portion of a DNS query. Gateway includes request context with the OPT code `65050`.
398398

399399
| UI name | API example | Evaluation phase |
400400
| -------------------------- | --------------------------------------------------------------------- | --------------------- |

0 commit comments

Comments
 (0)