[Question] How to block canonical name

[rapdodge]

Hello there,

I have a question about canonical name, so, there is an DNS that using canonical name to do blocking site like this screenshot down below:

How to just blacklist canonical name to certain domain or subdomains? Because I've already adding ignore rules like this screenshot down below:

BR,

[pymumu]

The current version does not support cname cloaking protection feature, the consideration was to worry about the performance impact, and the popular adblock list will add all domain names, so there was no support.

Maybe can add an cname cloaking protection ​​function switch and turn it on if needed.

currently you need to block the main domain.

[rapdodge]

The current version does not support cname cloaking protection feature, the consideration was to worry about the performance impact, and the popular adblock list will add all domain names, so there was no support.

Maybe can add an cname cloaking protection ​​function switch and turn it on if needed.

currently you need to block the main domain.

I've already block the main domain

address /aduankonten.id/#

Is there anything that could I do?

[PikuZheng]

are you menas force-no-CNAME yes

[rapdodge]

are you menas force-no-CNAME yes

I'm not really sure, but I'll try that later...

[PikuZheng]

https://github.com/pymumu/smartdns/issues/1743#issuecomment-2130430853 fyi

translated by google:

The situation you are talking about occurs when the smartdns subordinate is not the end user but another dns server. According to the RFC specification, the dns server will initiate two queries. The first query is for the A record. If the upstream returns CNAME and A records, the second query should use CNAME to query the AAAA record again. However, when the end user queries, it will query the A+AAAA record, so there will be no second query using CNAME.

Configure force-no-CNAME yes to make smartdns not return cname when answering (this is not in compliance with the RFC). At this point the client will use the original domain name to initiate an AAAA query.

Or just smartdns for end users, not forwarder.