luci: set Xray DNS nonIPQuery = drop
Xray DNS only basic IP queries (A and AAAA records) are supported. We should drop other queried types, otherwise the so-called "DNS leak" may appear.
This commit is contained in:
parent
0f321e7a27
commit
28f03a8a2e
@ -1122,7 +1122,7 @@ function gen_config(var)
|
|||||||
address = remote_dns_tcp_server,
|
address = remote_dns_tcp_server,
|
||||||
port = tonumber(remote_dns_tcp_port),
|
port = tonumber(remote_dns_tcp_port),
|
||||||
network = "tcp",
|
network = "tcp",
|
||||||
nonIPQuery = "skip"
|
nonIPQuery = "drop"
|
||||||
}
|
}
|
||||||
})
|
})
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user