TinyBacklog/relapse-exploit-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow PS5 Payload Manager catalog DNS

Browse Source
This commit is contained in:
kadinho
2026-10-07 21:27:27 +01:00
parent 5163d7a893
commit 7df4a40c78
5 changed files with 44 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/HANDOFF.md
+18 -9
View File
@@ -70,10 +70,11 @@ kadinho <[email protected]>
The same Compose project also runs `ps5-guide-gateway`, bound specifically to
`192.168.20.30` on DNS UDP/TCP 53 and HTTP/HTTPS TCP 80/443. It resolves
`manuals.playstation.net` locally and forwards only `homebrew.page`, `github.com`
and `release-assets.githubusercontent.com` to the configured upstream resolver
(`1.1.1.1` by default). Every other name receives NXDOMAIN. The HTTP/HTTPS gateway
redirects the User Guide to `http://192.168.20.30:8000/`.
`manuals.playstation.net` locally and forwards only `homebrew.page`,
`itsplk.github.io`, `github.com` and `release-assets.githubusercontent.com` to the
configured upstream resolver (`1.1.1.1` by default). Every other name receives
NXDOMAIN. The HTTP/HTTPS gateway redirects the User Guide to
`http://192.168.20.30:8000/`.
Port `8080` on the host is already used by `unifi-network-application`; do not move
this service there. At the last verification, the Relapse container was healthy,
@@ -178,11 +179,19 @@ primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`, then restart the consol
accept the self-signed certificate warning in the User Guide.
The gateway provides allowlisted recursive DNS forwarding only for `homebrew.page`,
`github.com` and `release-assets.githubusercontent.com`. Only those names and
`manuals.playstation.net` resolve; all other names receive NXDOMAIN. This permits
the homebrew store catalog and HTTPS release downloads while continuing to block
PSN and update resolution. The PS5 sends DNS only to `net-utils01`; that host must
be allowed to reach the configured upstream resolver on UDP/TCP 53.
`itsplk.github.io`, `github.com` and `release-assets.githubusercontent.com`. Only
those names and `manuals.playstation.net` resolve; all other names receive NXDOMAIN.
This permits the homebrew store and the official PS5 Payload Manager catalog and
HTTPS release downloads while continuing to block PSN and update resolution. The
PS5 sends DNS only to `net-utils01`; that host must be allowed to reach the
configured upstream resolver on UDP/TCP 53.
The Payload Manager review used upstream commit
`e4e72dc9d831dd09ee8fabc222ad1e7f5139050e` and the official catalog current on
2026-10-07. Its fixed catalog URL uses `itsplk.github.io`; all 25 catalog download
URLs used `github.com`, with observed redirects only to
`release-assets.githubusercontent.com`. Custom repositories are intentionally not
covered because their catalog and payload URLs are user-controlled.
The PS5 was previously identified as `192.168.10.26`; requests from
`192.168.10.6` seen at that time were from a different client. Those addresses
are historical and must not be used as the current payload destination.