diff options
| -rw-r--r-- | plugin/forward/setup.go | 5 | ||||
| -rw-r--r-- | plugin/forward/setup_test.go | 1 |
2 files changed, 6 insertions, 0 deletions
diff --git a/plugin/forward/setup.go b/plugin/forward/setup.go index 8070369c9..b5eeab912 100644 --- a/plugin/forward/setup.go +++ b/plugin/forward/setup.go @@ -99,8 +99,13 @@ func parseStanza(c *caddy.Controller) (*Forward, error) { } transports := make([]string, len(toHosts)) + allowedTrans := map[string]bool{"dns": true, "tls": true} for i, host := range toHosts { trans, h := parse.Transport(host) + + if !allowedTrans[trans] { + return f, fmt.Errorf("'%s' is not supported as a destination protocol in forward: %s", trans, host) + } p := NewProxy(h, trans) f.proxies = append(f.proxies, p) transports[i] = trans diff --git a/plugin/forward/setup_test.go b/plugin/forward/setup_test.go index 0949e0935..6864136e4 100644 --- a/plugin/forward/setup_test.go +++ b/plugin/forward/setup_test.go @@ -37,6 +37,7 @@ func TestSetup(t *testing.T) { {"forward . 127.0.0.1 {\nblaatl\n}\n", true, "", nil, 0, options{hcRecursionDesired: true}, "unknown property"}, {`forward . ::1 forward com ::2`, true, "", nil, 0, options{hcRecursionDesired: true}, "plugin"}, + {"forward . https://127.0.0.1 \n", true, ".", nil, 2, options{hcRecursionDesired: true}, "'https' is not supported as a destination protocol in forward: https://127.0.0.1"}, } for i, test := range tests { |