Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request] Disable HINFO responces #932

Closed
black-cerberon opened this issue Sep 14, 2019 · 6 comments
Closed

[Feature request] Disable HINFO responces #932

black-cerberon opened this issue Sep 14, 2019 · 6 comments

Comments

@black-cerberon
Copy link

I want to hide what DNS server I use in responses. It's shows when IPv6 is blocked or when refused requests looks like as HINFO. Can you set NXDOMAIN instead HINFO or disable this messages?

in dnsutils.go:
hinfo.Cpu = "This query has been locally blocked"
hinfo.Os = "by dnscrypt-proxy"

in plugin_block_ipv6.go:
hinfo.Cpu = "AAAA queries have been locally blocked by dnscrypt-proxy"
hinfo.Os = "Set block_ipv6 to false to disable this feature"

@jedisct1
Copy link
Member

Look for "hinfo" in the configuration file, not in the source code :)

@black-cerberon
Copy link
Author

In config it can be set REFUSED or HINFO or IP as responce. How it set with custom HINFO or void message like it?
hinfo.Cpu = ""
hinfo.Os = ""

@jedisct1
Copy link
Member

You can't send a custom HINFO, but REFUSED shouldn't send any records besides the question.

@black-cerberon
Copy link
Author

Anyway, if block_ipv6=true and blocked_query_response='refused', then return HINFO

@black-cerberon
Copy link
Author

Also, if it set to blocked_query_response='a:127.0.0.1,aaaa:::1', MX return as HINFO

>host mc.yandex.ru
mc.yandex.ru has address 127.0.0.1
mc.yandex.ru has IPv6 address ::1
mc.yandex.ru host information "This query has been locally blocked" "by dnscrypt-proxy"

@jedisct1
Copy link
Member

Since we are not returning the correct answer, having an extra record justifying why is useful, if only for troubleshooting purpose.
If you really want a different message, the best option is to change these, and you already found how to do it :)

@DNSCrypt DNSCrypt locked and limited conversation to collaborators Oct 20, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants