cloudflare / cloudflare/cloudflared

cloudflared daemon resolving addresses that are blocked by 1.1.1.3

Open
#252 3 comments 1 reaction 0 assignees View on GitHub
Priority: Deferred
Dominant language
Go
Stars
15.6k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

The cloudflared daemon appears to be using 1.1.1.1 even when 1.1.1.3 is specified as the upstream URL. See example below. A website that should be blocked is resolving.

**Info on daemon startup:**
`Environment variables map[config:/etc/cloudflared/config.yml no-autoupdate:true origincert:/etc/cloudflared/cert.pem proxy-dns:true proxy-dns-port:5053 proxy-dns-upstream:https://1.1.1.3/dns-query, https://1.0.0.3/dns-query]`

**dig results with cloudflared daemon:**
```
; <<>> DiG 9.11.5-P4-5.1+deb10u2-Raspbian <<>> @127.0.0.1 -p5053 pornhub.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58580
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;pornhub.com. IN A

;; ANSWER SECTION:
pornhub.com. 2887 IN A 66.254.114.41

;; Query time: 12 msec
;; SERVER: 127.0.0.1#5053(127.0.0.1)
;; WHEN: Tue Oct 27 09:15:46 CDT 2020
;; MSG SIZE rcvd: 67
```

**dig results using 1.1.1.3 directly:**
```
; <<>> DiG 9.11.5-P4-5.1+deb10u2-Raspbian <<>> @1.1.1.3 pornhub.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6271
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;pornhub.com. IN A

;; ANSWER SECTION:
pornhub.com. 60 IN A 0.0.0.0

;; Query time: 10 msec
;; SERVER: 1.1.1.3#53(1.1.1.3)
;; WHEN: Tue Oct 27 09:16:59 CDT 2020
;; MSG SIZE rcvd: 56
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.