TinyBacklog/relapse-exploit-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow homebrew store DNS lookups

Browse Source
This commit is contained in:
kadinho
2026-10-07 17:24:27 +01:00
parent 0e48387f70
commit fd5685c5bb
4 changed files with 102 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/HANDOFF.md
+11 -6
View File
@@ -69,9 +69,11 @@ kadinho <[email protected]>
- restart policy: `unless-stopped`.
The same Compose project also runs `ps5-guide-gateway`, bound specifically to
`192.168.20.30` on DNS UDP/TCP 53 and HTTP/HTTPS TCP 80/443. It resolves only
`manuals.playstation.net`, returns NXDOMAIN for every other name, and redirects the
User Guide to `http://192.168.20.30:8000/`.
`192.168.20.30` on DNS UDP/TCP 53 and HTTP/HTTPS TCP 80/443. It resolves
`manuals.playstation.net` locally and forwards only `homebrew.page`, `github.com`
and `release-assets.githubusercontent.com` to the configured upstream resolver
(`1.1.1.1` by default). Every other name receives NXDOMAIN. The HTTP/HTTPS gateway
redirects the User Guide to `http://192.168.20.30:8000/`.
Port `8080` on the host is already used by `unifi-network-application`; do not move
this service there. At the last verification, the Relapse container was healthy,
@@ -169,9 +171,12 @@ the local container. The local gateway was therefore added. Configure the PS5 wi
primary DNS `192.168.20.30` and secondary DNS `0.0.0.0`, then restart the console and
accept the self-signed certificate warning in the User Guide.
The gateway intentionally provides no recursive DNS forwarding. Only
`manuals.playstation.net` resolves; all other names receive NXDOMAIN. This blocks
PSN and update resolution and keeps the setup independent of a public DNS operator.
The gateway provides allowlisted recursive DNS forwarding only for `homebrew.page`,
`github.com` and `release-assets.githubusercontent.com`. Only those names and
`manuals.playstation.net` resolve; all other names receive NXDOMAIN. This permits
the homebrew store catalog and HTTPS release downloads while continuing to block
PSN and update resolution. The PS5 sends DNS only to `net-utils01`; that host must
be allowed to reach the configured upstream resolver on UDP/TCP 53.
The PS5 was previously identified as `192.168.10.26`; requests from
`192.168.10.6` seen at that time were from a different client. Those addresses
are historical and must not be used as the current payload destination.