Check for DNS rebinding attacks

2020-12-01 18:36:04 +01:00
parent 2313eda123
commit b338bf9b3f
7 changed files with 230 additions and 15 deletions
--- a/internal/dnsforward/config.go
+++ b/internal/dnsforward/config.go
@@ -76,6 +76,11 @@ type FilteringConfig struct {
 	CacheMinTTL uint32 `yaml:"cache_ttl_min"` // override TTL value (minimum) received from upstream server
 	CacheMaxTTL uint32 `yaml:"cache_ttl_max"` // override TTL value (maximum) received from upstream server

+	// DNS rebinding protection settings
+	// --
+	RebindingEnabled      bool     `yaml:"rebinding_enabled"`
+	RebindingAllowedHosts []string `yaml:"rebinding_allowed_hosts"`
+
 	// Other settings
 	// --