sing-box/dns
世界 b5ec033a57
Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-06-25 17:38:02 +08:00
..
transport Standardize hosts path 2026-06-25 17:38:00 +08:00
client.go Add optimistic DNS cache 2026-06-25 17:37:59 +08:00
client_log.go Add optimistic DNS cache 2026-06-25 17:37:59 +08:00
client_truncate.go Fix dns truncate 2025-10-05 17:58:21 +08:00
extension_edns0_subnet.go Fix set edns0 client subnet 2025-07-08 13:14:38 +08:00
rcode.go Fix darwin local DNS transport 2026-06-25 17:35:29 +08:00
repro_test.go Add evaluate DNS rule action and related rule items 2026-06-25 17:35:25 +08:00
router.go Reject pure-IP rule-set references without match_response 2026-06-25 17:38:02 +08:00
router_test.go Reject pure-IP rule-set references without match_response 2026-06-25 17:38:02 +08:00
transport_adapter.go Add evaluate DNS rule action and related rule items 2026-06-25 17:35:25 +08:00
transport_dialer.go Add evaluate DNS rule action and related rule items 2026-06-25 17:35:25 +08:00
transport_manager.go Improve local DNS server on darwin 2026-01-17 05:44:28 +08:00
transport_registry.go refactor: DNS 2025-07-08 13:12:14 +08:00