mirror of
https://github.com/Control-D-Inc/ctrld.git
synced 2026-03-25 23:30:41 +01:00
1e8240bd1c
Add --intercept-mode flag (dns/hard/off) with configuration support, recovery bypass for captive portals, probe-based interception verification, VPN DNS coexistence in the proxy layer, and IPv6 loopback listener guard. Remove standalone mDNSResponder hack files — the port 53 binding logic is now handled within the intercept mode infrastructure. Squashed from intercept mode development on v1.0 branch (#497).
40 lines
1.0 KiB
Go
40 lines
1.0 KiB
Go
//go:build !windows && !darwin
|
|
|
|
package cli
|
|
|
|
import (
|
|
"fmt"
|
|
)
|
|
|
|
// startDNSIntercept is not supported on this platform.
|
|
// DNS intercept mode is only available on Windows (via WFP) and macOS (via pf).
|
|
func (p *prog) startDNSIntercept() error {
|
|
return fmt.Errorf("dns intercept: not supported on this platform (only Windows and macOS)")
|
|
}
|
|
|
|
// stopDNSIntercept is a no-op on unsupported platforms.
|
|
func (p *prog) stopDNSIntercept() error {
|
|
return nil
|
|
}
|
|
|
|
// exemptVPNDNSServers is a no-op on unsupported platforms.
|
|
func (p *prog) exemptVPNDNSServers(exemptions []vpnDNSExemption) error {
|
|
return nil
|
|
}
|
|
|
|
// ensurePFAnchorActive is a no-op on unsupported platforms.
|
|
func (p *prog) ensurePFAnchorActive() bool {
|
|
return false
|
|
}
|
|
|
|
// checkTunnelInterfaceChanges is a no-op on unsupported platforms.
|
|
func (p *prog) checkTunnelInterfaceChanges() bool {
|
|
return false
|
|
}
|
|
|
|
// scheduleDelayedRechecks is a no-op on unsupported platforms.
|
|
func (p *prog) scheduleDelayedRechecks() {}
|
|
|
|
// pfInterceptMonitor is a no-op on unsupported platforms.
|
|
func (p *prog) pfInterceptMonitor() {}
|