[GH-ISSUE #1719] IP allow/deny-lists for the server #746

New issue

Closed

opened 2026-03-16 00:07:24 +03:00 by kerem · 1 comment

kerem commented

2026-03-16 00:07:24 +03:00

Owner

Originally created by @bluejekyll on GitHub (Jun 6, 2022).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1719

Is your feature request related to a problem? Please describe.

Allow for rejection of requests coming from unwanted IP ranges. The implementation should support ipv4 and ipv6 CIDR formatted configuration. Optionally consider more narrow ranges where CIDR does not properly bound the list.

Describe the solution you'd like

Add this to the configuration file for the server. Each protocol handler should be updated to evaluate this list. Rejection of the request and closing with no action taken on the server. There should be a test for each protocol type that ensures the list is being evaluated.

Originally created by @bluejekyll on GitHub (Jun 6, 2022). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1719 **Is your feature request related to a problem? Please describe.** Allow for rejection of requests coming from unwanted IP ranges. The implementation should support ipv4 and ipv6 CIDR formatted configuration. Optionally consider more narrow ranges where CIDR does not properly bound the list. **Describe the solution you'd like** Add this to the configuration file for the server. Each protocol handler should be updated to evaluate this list. Rejection of the request and closing with no action taken on the server. There should be a test for each protocol type that ensures the list is being evaluated.

kerem

2026-03-16 00:07:24 +03:00

closed this issue
added the
crate:server

ops
labels

kerem commented

2026-03-16 00:07:40 +03:00

Author

Owner

@dns2utf8 commented on GitHub (Aug 1, 2022):

Design wise I would go with an allow list only.
Then searching a short list is very fast so we don't need any fancy data structure.

@dns2utf8 commented on GitHub (Aug 1, 2022): Design wise I would go with an allow list only. Then searching a short list is very fast so we don't need any fancy data structure.

kerem referenced this issue

2026-03-16 02:17:52 +03:00

[PR #746] [MERGED] update test certificates #1649