Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DNS Configuration Options #1533

Open
adhilto opened this issue Jan 27, 2025 · 0 comments
Open

Add DNS Configuration Options #1533

adhilto opened this issue Jan 27, 2025 · 0 comments
Labels
enhancement This issue or pull request will add new or improve existing functionality

Comments

@adhilto
Copy link
Collaborator

adhilto commented Jan 27, 2025

💡 Summary

Add configuration options to allow users to fine-tune how ScubaGear should make the DNS queries needed for the Exchange Online baseline (SPF, DKIM, and DMARC).

Motivation and context

The system default DNS resolver for some users may be unable to resolve the domain names needed. If the users could specify which resolvers to use, they could specify one that will work in their environment.

See #1479 (comment).

Implementation notes

There a lot of different knobs we could add. For example:

  • PreferredDnsResolvers: a list of IPs of the DNS resolvers the user wants to use. If not provided, use system default. If provided, use this list. If one resolver fails, try again with the next on list.
  • PreferredDoHServers: a list of IPs or domains that should be used for DoH queries.
  • PreferDoH: If true, skip the traditional DNS queries. Some users might be using ScubaGear in an environment where the local resolver is unable to resolve the domain (e.g., due to split horizon).
  • SkipDoH: If true, skip the DoH queries. Some users might be using ScubaGear where common DoH servers are blocked.

(the above list is far from set in stone but is a good starting place)

Acceptance criteria

DNS configuration options have been added.

@adhilto adhilto added the enhancement This issue or pull request will add new or improve existing functionality label Jan 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement This issue or pull request will add new or improve existing functionality
Projects
None yet
Development

No branches or pull requests

1 participant