Fix RFC 7766 violation

gombadi · Mar 28, 2022 · 0dec722 · 0dec722
1 parent b78cb42
commit 0dec722
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -99,6 +99,7 @@ One solution is using an iptables rule (Linux only) to redirect it to
 a non-privileged port:
 
 $ iptables -t nat -A PREROUTING -p udp --dport 53 -j REDIRECT --to-port 5353
+$ iptables -t nat -A PREROUTING -p tcp --dport 53 -j REDIRECT --to-port 5353
 
 If properly configured, this will allow you to run dnsseeder in userspace, using
 the -p 5353 option.

diff --git a/main.go b/main.go
@@ -115,7 +115,8 @@ func main() {
 	// start dns server
 	dns.HandleFunc(".", handleDNS)
 	go serve("udp", config.port)
-	//go serve("tcp", config.port)
+	// RFC 7766 Sec. 5: "Authoritative server implementations MUST support TCP"
+	go serve("tcp", config.port)
 
 	var wg sync.WaitGroup