Meaning of --verify-ip flag

blechschmidt / massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

GNU General Public License v3.0

3.05k stars 456 forks source link

Meaning of --verify-ip flag #150

Closed msasad closed 3 months ago

msasad commented 3 months ago

Can someone with certain knowledge please explain What does this flag do? I tried to search on the Internet but couldn't find any good answers.

blechschmidt commented 3 months ago

By default, massdns will not verify incoming IP addresses. This option enables source IP verification of incoming packets. That is, it only accepts replies from the resolver addresses specified in the resolvers file.

For example, if you send DNS requests to 1.1.1.1, massdns would by default accept answers from 8.8.8.8. With this option, it no longer does.

msasad commented 3 months ago

Thanks