rufengsuixing / luci-app-adguardhome

maybe the best AdGuardHome luci for openwrt
1.31k stars 487 forks source link

Default configuration sets up a public DNS server #129

Open asskii opened 2 years ago

asskii commented 2 years ago

the default configuration for this is incredibly insecure. By defaulting both bind_host (http and dns) values to 0.0.0.0, it allows for anyone with an internet connection to use your device as a DNS server. This will be quickly found by port scanners and allows for DNS amplification attacks.

Why is this even pre-set, why is it not configured by AdGuardHome during the initial configuration like what would be done if you install it using the command on the official github?