mirror of
https://github.com/Control-D-Inc/ctrld.git
synced 2026-10-24 14:08:27 +02:00
The auto-added AD split rules route corp names to upstream.os, but a rule match skipped the LAN-query classification in proxy(), so osResolver raced the domain controller against 76.76.2.0 and sent every AD lookup (DC hostnames, DC-locator SRV names carrying the machine name, WPAD) there in plaintext. Mark a rule-matched query under the machine's AD domain (p.adDomain) whose upstreams are the OS resolver alone as a LAN query, which drops 76.76.2.0 for it. Explicit-resolver rules are unchanged.