Control: forwarded -1 https://github.com/awaw/dnsproxy/issues/6 The changes [1] fixed the issue about listening to an unnecessary UDP port on all interfaces. But when dnsproxy receive a query from some client it sends a UDP datagram, via sendto(), to the configured DNS servers. When dnsproxy calls sendto() without a previous bind(), the UDP stack of Linux (and certainly on other kernels), starts to listen to a random UDP port on IN-ADDR_ANY, so, the port will be opened on all interfaces. A new patch to fix this was forwarded in [2]. [1] https://github.com/awaw/dnsproxy/issues/1 [2] https://github.com/awaw/dnsproxy/issues/6
Attachment:
signature.asc
Description: PGP signature