mirror of
https://github.com/daeuniverse/dae.git
synced 2024-12-22 15:24:39 +07:00
docs: refine DNS example (#329)
This commit is contained in:
parent
9e7460f588
commit
49be5c7eb1
@ -180,7 +180,7 @@ dns {
|
||||
}
|
||||
response {
|
||||
upstream(googledns) -> accept
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
fallback: accept
|
||||
}
|
||||
}
|
||||
|
@ -62,7 +62,7 @@ dns {
|
||||
upstream(googledns) -> accept
|
||||
# If DNS request name is not in CN and response answers include private IP, which is most likely polluted
|
||||
# in China mainland. Therefore, resend DNS request to 'googledns' to get correct result.
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
fallback: accept
|
||||
}
|
||||
}
|
||||
@ -112,7 +112,7 @@ dns {
|
||||
# Trusted upstream. Always accept its result.
|
||||
upstream(googledns) -> accept
|
||||
# Possibly polluted, re-lookup using googledns.
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
# fallback is also called default.
|
||||
fallback: accept
|
||||
}
|
||||
|
@ -127,7 +127,7 @@ dns {
|
||||
}
|
||||
response {
|
||||
upstream(googledns) -> accept
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
fallback: accept
|
||||
}
|
||||
}
|
||||
|
@ -174,7 +174,7 @@ dns {
|
||||
}
|
||||
response {
|
||||
upstream(googledns) -> accept
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
fallback: accept
|
||||
}
|
||||
}
|
||||
|
@ -61,7 +61,7 @@ dns {
|
||||
# 接受upstream 'googledns' 回复的 DNS 响应。 有助于避免回环。
|
||||
upstream(googledns) -> accept
|
||||
# 若 DNS 请求的域名不属于 CN 且回复包含私有 IP, 大抵是被污染了,向 'googledns' 重查。
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
fallback: accept
|
||||
}
|
||||
}
|
||||
@ -111,7 +111,7 @@ dns {
|
||||
# 可信的 upstream。总是接受它的回复。
|
||||
upstream(googledns) -> accept
|
||||
# 疑似被污染结果,向 'googledns' 重查。
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
# fallback 意为 default。
|
||||
fallback: accept
|
||||
}
|
||||
|
@ -152,7 +152,7 @@ dns {
|
||||
# Trusted upstream. Always accept its result.
|
||||
upstream(googledns) -> accept
|
||||
# Possibly polluted, re-lookup using googledns.
|
||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
||||
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||
# fallback is also called default.
|
||||
fallback: accept
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user