Artem Boldariev 5ed3a76f9d BIND: Add 'allow-proxy' and 'allow-proxy-on' options ... The main intention of PROXY protocol is to pass endpoints information to a back-end server (in our case - BIND). That means that it is a valid way to spoof endpoints information, as the addresses and ports extracted from PROXYv2 headers, from the point of view of BIND, are used instead of the real connection addresses. Of course, an ability to easily spoof endpoints information can be considered a security issue when used uncontrollably. To resolve that, we introduce 'allow-proxy' and 'allow-proxy-on' ACL options. These are the only ACL options in BIND that work with real PROXY connections addresses, allowing a DNS server operator to specify from what clients and on which interfaces he or she is willing to accept PROXY headers. By default, for security reasons we do not allow to accept them.		2023-12-06 15:15:25 +02:00
..
arm	BIND: Add 'allow-proxy' and 'allow-proxy-on' options	2023-12-06 15:15:25 +02:00
design	Remove auto-dnssec from documentation	2023-07-20 11:04:24 +02:00
dev	Remove trailing whitespace from all text files	2023-06-13 15:05:40 +02:00
dnssec-guide	Fix broken link to TLD DNSSEC stats	2023-12-04 10:00:30 +00:00
doxygen	Remove trailing whitespace from all text files	2023-06-13 15:05:40 +02:00
man	Add support for User Statically Defined Tracing (USDT) probes	2023-08-21 18:39:53 +02:00
misc	BIND: Add 'allow-proxy' and 'allow-proxy-on' options	2023-12-06 15:15:25 +02:00
notes	Add release note and CHANGES for #4363	2023-12-05 14:58:58 +00:00
Makefile.am	Remove pregenerated manpages from the repo	2023-02-10 11:24:03 +01:00