Alex Paguis 6edce5f94f fix(cli): keep Active Directory lookups off Control D's public resolver ...

The auto-added AD split rules route corp names to upstream.os, but a rule
match returned before the LAN-query marking, so osResolver raced the domain
controller against 76.76.2.0 and sent every AD lookup (DC hostnames,
DC-locator SRV names carrying the machine name, WPAD) there in plaintext.
Mark a matched query under the machine's AD domain whose upstreams are the
OS resolver alone as a LAN query, which drops 76.76.2.0 for it.

2026-10-07 14:15:54 +07:00

..

619-target-ownership-limits.md

Port DNS64, VPN routing and DNS recovery ownership to master

2026-09-28 14:44:47 +07:00

config.md

feat(cli): port the log journal and network journal events to master

2026-09-22 21:07:51 +07:00

contributing.md

Import code, preparing for release

2022-12-13 01:27:48 +07:00

ctrldsplash.png

Add README.md image

2024-05-09 18:39:30 +07:00

dns-intercept-mode.md

feat(cli): port the log journal and network journal events to master

2026-09-22 21:07:51 +07:00

ephemeral_mode.md

Rename ctrld v2.0.0 to ctrld-client

2026-09-03 13:57:38 +07:00

firewall-mode.md

Rename ctrld v2.0.0 to ctrld-client

2026-09-03 13:57:38 +07:00

internal-domains.md

fix(cli): keep Active Directory lookups off Control D's public resolver

2026-10-07 14:15:54 +07:00

ipv6-only-dns-target-qa.md

macOS: port native CLAT DNS-target fallback to master

2026-09-25 13:20:27 +07:00

known-issues.md

Rename ctrld v2.0.0 to ctrld-client

2026-09-03 13:57:38 +07:00

network-recovery-diagnostics.md

macOS: port native CLAT DNS-target fallback to master

2026-09-25 13:20:27 +07:00

pf-dns-intercept.md

feat(cli): port the log journal and network journal events to master

2026-09-22 21:07:51 +07:00

provisioning-failure-codes.md

docs: complete the provisioning failure runbook and canary matrix

2026-09-04 16:48:32 +07:00

runtime-internal-logging.md

feat(cli): port the log journal and network journal events to master

2026-09-22 21:07:51 +07:00

username-detection.md

Rename ctrld v2.0.0 to ctrld-client

2026-09-03 13:57:38 +07:00

v2.0.0-breaking-changes.md

Rename ctrld v2.0.0 to ctrld-client

2026-09-03 13:57:38 +07:00

wfp-dns-intercept.md

dns_intercept: don't write a GP sibling on failed NRPT handback

2026-09-21 19:06:13 +07:00