Module ForwardSecurity 

DNS Forward Security

Allowlist-based security wrapper for DNS forwarding. Prevents sidecars from reaching arbitrary external hosts via DNS.

Query ──► Is *.editor.land? ──► Authoritative (Local)
           │ No
           ▼
    Is in Allowlist? ──► Forward to Upstream
           │ No
           ▼
       Return REFUSED

Functions

DefaultForwardAllowlist

Returns the default DNS forward allowlist.