News for hackers. Stuff that matters.

A comment on Caddy 0.10 Released. Parent comment

Re:Caddy 0.10 Released by kevinburke on Friday April 21, 2017 @10:49AM (#14166049)
Go ships with both a pure Go and a libc-based DNS resolver. Some systems (like OS X) don't let Go make DNS requests directly. For more see https://golang.org/pkg/net/#hdr-Name_Resolution
[ Parent | on HN ]
Re:Caddy 0.10 Released by cutsoup on Friday April 21, 2017 @08:41PM (#14170518)
> Some systems (like OS X) don't let Go make DNS requests directly.

I don't think this is a reasonable summary of the situation on OS X. That being that if you turn the firewall on and then turn on block of incoming connections on 10.11 and earlier, responses seem to get dropped. Characterizing that as a blanket disallowing of direct DNS requests is misleading. (I'm not defending OS X here, it's just that summaries like this turn into cargo cults.)

[ Parent | on HN ]