default log level leaks ip querry domain now

Question

default log level leaks ip querry domain now

LuckyTurtleDev opened this issue a year ago · comments

Todo:

wait for reaction at hickory-dns/hickory-dns#2014 first

LuckyTurtleDev · Answer 1 · Tue Oct 17 2023 21:48:06 GMT+0800 (China Standard Time)

hickory-dns/hickory-dns#2014 does not make much progress. So I think it would be the best to impl our own filtering for now.
The best think should be to match the private data with a regex and replace them, with a placeholder.

LuckyTurtleDev · Answer 2 · Mon Oct 30 2023 02:12:44 GMT+0800 (China Standard Time)

#23 has fix large parts of this issue. But toplevel domains like fritzbox. will still be looked since matching by a regex would cause to main false positives. Lucky query toplevel domains is not very common. However this no guarantee that all private in all edge-cases is not logged. A upstream solution at trust/hickory-dns is still desirable.