DOT/DOH for "Internet IP discover"? #1667
Answered
by
jokob-sk
returntrip
asked this question in
Q&A
|
Can INTRNT plugin use DOT/DOH for "Internet IP discover"? In my setup I allow only secure DNS to port 853 and DNS resolution towards port 53 is disabled on the FW. |
Answered by
jokob-sk
Jun 2, 2026
Replies: 1 comment
|
No. The current INTRNT plugin uses: dig +short ...and In your setup, the curl ifconfig.me/ipwhich uses HTTPS and should still successfully detect your public IP. Supporting DoT/DoH directly would require either a DoT-capable client (e.g. |
0 replies
Answer selected by
returntrip
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
No. The current INTRNT plugin uses:
and
digonly performs standard DNS queries over port 53 (UDP/TCP). It does not support DoT (853) or DoH (443).In your setup, the
diglookup will fail, and the plugin will fall back to:which uses HTTPS and should still successfully detect your public IP.
Supporting DoT/DoH directly would require either a DoT-capable client (e.g.
kdig) or changing the plugin to use an HTTPS-based IP lookup as the primary method.