Skip to content

Commit

Permalink
Update README.md for new --ednsopt option
Browse files Browse the repository at this point in the history
  • Loading branch information
jubarbot-cisco committed Jul 20, 2020
1 parent 61a8a31 commit f633a3f
Showing 1 changed file with 21 additions and 1 deletion.
22 changes: 21 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,6 +59,7 @@ Application Options:
--refuse-any If specified, refuse ANY requests
--edns Use EDNS Client Subnet extension
--edns-addr= Send EDNS Client Address
--ednsopt= List of EDNS extensions to send along with the DNS query (ex: 8:deadbeaf)
--ipv6-disabled If specified, all AAAA requests will be replied with NoError RCode and empty answer
--bogus-nxdomain= Transform responses that contain only given IP addresses into NXDOMAIN. Can be specified multiple times.
--version Prints the program version
Expand Down Expand Up @@ -202,6 +203,25 @@ If you want to use EDNS CS feature when you're connecting to the proxy from a lo

Now even if your IP address is 192.168.0.1 and it's not a public IP, the proxy will pass through 72.72.72.72 to the upstream server.


### EDNS Generic raw option

You can add any EDNS extension of your choice with the `--ednsopt` flag.

The option argument for this flag is of the form:

option_code:base64_data

where:

`option_code` is a 16 bit unsigned integer (0-65535)
`base64_data` is a base64 encoded byte array

```
DATA=$(echo -n "This is a binary string" | base64)
./dnsproxy -u 8.8.8.8:53 --ednsopt="4242:${DATA}"
```

### Bogus NXDomain

This option is similar to dnsmasq `bogus-nxdomain`. If specified, `dnsproxy` transforms responses that contain only the given IP addresses into `NXDOMAIN`. Can be specified multiple times.
Expand All @@ -210,4 +230,4 @@ In the example below, we use AdGuard DNS server that returns `0.0.0.0` for block

```
./dnsproxy -u 176.103.130.130:53 --bogus-nxdomain=0.0.0.0
```
```

0 comments on commit f633a3f

Please sign in to comment.