server/user-documentation
10
3
Fork 8
Code Issues Pull requests 2 Projects Activity

Add systemd-resolved LLMNR and mDNS configuration in response to #114

Browse source
This commit is contained in:
Paul Maconi 2025-11-12 19:23:48 -06:00
commit 9ed1abcc73
1 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/ROOT/pages/installation/postinstallation-tasks.adoc
View file

@ -365,7 +365,25 @@ root: real@address.for.root
[…]# newaliases
----
== Disable systemd-resolved LLMNR and/or mDNS
You may want to disable LLMNR and/or mDNS depending on your environment. Both protocols are subject to trivial DNS poisoning attacks by a rogue responder.
[source,]
-----
sudo mkdir -p /etc/systemd/resolved.conf.d
sudo touch /etc/systemd/resolved.conf.d/20-disable-llmnr-mdns.conf
sudo tee -a /etc/systemd/resolved.conf.d/20-disable-llmnr-mdns.conf > /dev/null << EOF
# see man resolved.conf for details
[Resolve]
# false = disable, true = resolve AND respond, resolve = resolve only
LLMNR=false
MulticastDNS=false
EOF
sudo systemctl restart systemd-resolved
-----
You can view the status of LLMNR and mDNS with the following command: `sudo systemd-resolve --status`
== Manage system updates