home-assistant / plugin-dns

CoreDNS implementation for Home Assistant
Apache License 2.0
20 stars 14 forks source link

Private `hassio` addresses leaked to network #106

Open scolby33 opened 1 year ago

scolby33 commented 1 year ago

I have URPF validation enabled in my network, and I noticed a lot of packets being sent from 172.30.32.3 to 1.1.1.1. They were being blocked, since my LAN is on 10.0.0.0/24, and I was observing the flooding from #90. Running ha dns options --fallback=false stopped this, as expected.

However, I'm still quite confused how the 172.30.32.3/23 address was making it out of the machine running HAOS instead of being NAT'd by Docker, so I think this is a bug.

I am running Home Assistant 2023.3.5 Supervisor 2023.03.1 Operating System 9.5 Frontend 20230309.1 - latest on Home Assistant Yellow. I had not performed any weird/unsupported modifications to my installation when I noticed this issue.