Finalize without forward

[maitredede]

Hello,

I don't know if I use correctly the plugin, but I would like to configure a server that resolves domains as CNAME and finalize the requests (to have real ip).

But with the forward directive, the server becomes an open resolver.

My config (replaced domain) :

.:53 {
  # ...
  file fakedomain.nc fakedomain.nc
  forward . /etc/resolv.conf
  finalize
}

$TTL 5M
@	IN SOA	ns.fakedomain.nc. support.fakedomain.nc. (
		2022061404 ; Serial
		28800      ; refresh (8 hours)
		7200       ; retry (2 hours)
		1209600    ; expire (1 week)
		3600       ; minimum (1 hour)
		)
	IN	NS	ns.fakedomain.nc.
	IN	NS	ns2.fakedomain.nc.

@	IN	CNAME	realdomain.com.
*	IN	CNAME	@

[tmeckel]

The plugin is using the internal mechanism of CoreDNS to reevaluate a DNS query:

https://github.com/tmeckel/coredns-finalizer/blob/master/finalize.go#L79=

So what the plugin is able to resolve depends on the remaining configuration of CoreDNS.

But I don't want to rule out that the plugin has a bug (or even more than one).