Skip to content

How to filter out LAN / private addresses resolution? #1706

Answered by jedisct1
macruspareto asked this question in Q&A
Discussion options

You must be logged in to vote

SYNTH means that the response was locally synthesized. PTR queries for local addresses are never sent to upstream resolvers; there's nothing to configure, dnscrypt-proxy does it out of the box.

224.0.* is not a set of internal addresses. With the exception of 224.0.0.*, everything here is routable to the Internet.

224.0.1.1 for example, has a PTR record:

 drill PTR 1.1.0.224.in-addr.arpa.
;; ANSWER SECTION:
1.1.0.224.in-addr.arpa.	28633	IN	PTR	ntp.mcast.net.

If you really want to block something, you can add it to your block list, like any zone.

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@flesler
Comment options

Answer selected by jedisct1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
3 participants
Converted from issue

This discussion was converted from issue #1705 on May 08, 2021 17:13.