Beniamino Galvani f10e4fe8c8 dns: change default DNS priority of VPNs to -50 ... Change the default DNS priority of VPNs to -50, to avoid leaking queries out of full-tunnel VPNs. This is a change in behavior. In particular: - when using dns=default (i.e. no split-dns) before this patch both VPN and the local name server were added (in this order) to resolv.conf; the result was that depending on resolv.conf options and resolver implementation, the name servers were tried in a certain manner which does not prevent DNS leaks. With this change, only the VPN name server is added to resolv.conf. - When using a split-dns plugin (systemd-resolved or dnsmasq), before this patch the full-tunnel VPN would get all queries except those ending in a local domain, that would instead be directed to the local server. After this patch, the VPN gets all queries. To revert to the old behavior, set the DNS priority to 50 in the connection profile. (cherry picked from commit af13081bec)		2020-10-09 10:31:18 +02:00
..
cli	cli: fix showing active state for nmcli con show with fields	2020-10-09 10:24:02 +02:00
cloud-setup	all: unify comment style for SPDX-License-Identifier tag	2020-09-29 16:50:53 +02:00
common	dns: change default DNS priority of VPNs to -50	2020-10-09 10:31:18 +02:00
tests	all: add ipv4.dhcp-reject-servers property	2020-08-26 17:28:45 +02:00
tui	all: unify comment style for SPDX-License-Identifier tag	2020-09-29 16:50:53 +02:00
meson.build	docs: generate nm-settings-docs-nmcli.xml based on nmcli meta data	2020-06-11 10:53:50 +02:00
nm-online.c	all: unify comment style for SPDX-License-Identifier tag	2020-09-29 16:50:53 +02:00