mirror of
https://github.com/daeuniverse/dae.git
synced 2025-07-14 17:59:57 +07:00
docs: refine DNS example (#329)
This commit is contained in:
@ -180,7 +180,7 @@ dns {
|
|||||||
}
|
}
|
||||||
response {
|
response {
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -62,7 +62,7 @@ dns {
|
|||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
# If DNS request name is not in CN and response answers include private IP, which is most likely polluted
|
# If DNS request name is not in CN and response answers include private IP, which is most likely polluted
|
||||||
# in China mainland. Therefore, resend DNS request to 'googledns' to get correct result.
|
# in China mainland. Therefore, resend DNS request to 'googledns' to get correct result.
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -112,7 +112,7 @@ dns {
|
|||||||
# Trusted upstream. Always accept its result.
|
# Trusted upstream. Always accept its result.
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
# Possibly polluted, re-lookup using googledns.
|
# Possibly polluted, re-lookup using googledns.
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
# fallback is also called default.
|
# fallback is also called default.
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
|
@ -127,7 +127,7 @@ dns {
|
|||||||
}
|
}
|
||||||
response {
|
response {
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -174,7 +174,7 @@ dns {
|
|||||||
}
|
}
|
||||||
response {
|
response {
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -61,7 +61,7 @@ dns {
|
|||||||
# 接受upstream 'googledns' 回复的 DNS 响应。 有助于避免回环。
|
# 接受upstream 'googledns' 回复的 DNS 响应。 有助于避免回环。
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
# 若 DNS 请求的域名不属于 CN 且回复包含私有 IP, 大抵是被污染了,向 'googledns' 重查。
|
# 若 DNS 请求的域名不属于 CN 且回复包含私有 IP, 大抵是被污染了,向 'googledns' 重查。
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@ -111,7 +111,7 @@ dns {
|
|||||||
# 可信的 upstream。总是接受它的回复。
|
# 可信的 upstream。总是接受它的回复。
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
# 疑似被污染结果,向 'googledns' 重查。
|
# 疑似被污染结果,向 'googledns' 重查。
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
# fallback 意为 default。
|
# fallback 意为 default。
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
|
@ -152,7 +152,7 @@ dns {
|
|||||||
# Trusted upstream. Always accept its result.
|
# Trusted upstream. Always accept its result.
|
||||||
upstream(googledns) -> accept
|
upstream(googledns) -> accept
|
||||||
# Possibly polluted, re-lookup using googledns.
|
# Possibly polluted, re-lookup using googledns.
|
||||||
!qname(geosite:cn) && ip(geoip:private) -> googledns
|
ip(geoip:private) && !qname(geosite:cn) -> googledns
|
||||||
# fallback is also called default.
|
# fallback is also called default.
|
||||||
fallback: accept
|
fallback: accept
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user