mirror of
https://github.com/wweir/sower.git
synced 2026-10-19 08:13:34 +00:00
Two findings from reviewing the self-target guard: - the guard sat at the top of DialSmart, so a blocked target that also points at this client reported ErrSelfProxyTarget instead of ErrBlocked, and every name on a served port paid an upstream lookup before the rules were even consulted. It now sits in directDial, the only other dial exit, so blocked targets are decided without resolution and policy keeps precedence. - selfProxyLookupTimeout was left behind by the switch to upstream resolution; drop it.