What's New
DNS Security Audit Improvements
-
Match Opposite Network Support — Firewall rules using UniFi's "Match Opposite Networks" option are now correctly evaluated. Previously, rules configured to apply to "all networks except X" were being interpreted incorrectly, causing false positives in inter-VLAN isolation and DNS security checks. (#92)
-
Network Coverage Tracking — The DNS security audit now tracks which specific networks are covered by your DNS blocking rules. If some networks aren't covered, you'll see exactly which ones need attention.
-
DNAT as DNS Leak Protection — Networks using DNAT rules to redirect DNS traffic (instead of blocking) now correctly show as "Protected" in the DNS Leak Prevention status.
-
Smarter Detail Text — The DNS Leak Prevention status now shows how you're protected:
- "External DNS queries blocked" (firewall blocking)
- "External DNS queries redirected" (DNAT redirection)
- "External DNS queries redirected and leakage blocked" (both methods)
Bug Fixes
-
Windows LAN Speed Tests — Fixed an issue where LAN speed tests on Windows could fail if iperf3 wasn't in the system PATH. The app now correctly uses its bundled iperf3 binary. (#96)
-
Audit Timestamp — The "Last run" time on the Audit page now displays in your local timezone instead of UTC after refreshing the page.
-
PDF Reports — DNS protection details now display correctly in exported PDF reports.