Pull request: all: do not refuse reqs from untrusted proxies

Updates #2799.

Squashed commit of the following:

commit bc768fdd48b563017520f962480be4b2be90666a
Author: Ainar Garipov <A.Garipov@AdGuard.COM>
Date:   Mon Aug 2 15:00:10 2021 +0300

    all: do not refuse reqs from untrusted proxies
This commit is contained in:
Ainar Garipov
2021-08-02 15:11:00 +03:00
parent 12db98230c
commit fb6bc322c1
3 changed files with 6 additions and 5 deletions

View File

@@ -43,8 +43,9 @@ and this project adheres to
### Changed
- Proxied DNS-over-HTTPS queries are now only accepted from proxy servers on the
`trusted_proxies` list ([#2799]).
- DNS-over-HTTPS queries that come from HTTP proxies in the `trusted_proxies`
list now use the real IP address of the client instead of the address of the
proxy ([#2799]).
- Clients who are blocked by access settings now receive a `REFUSED` response
when a protocol other than DNS-over-UDP and DNSCrypt is used.
- `querylog_interval` setting is now formatted in hours.