Small follow-up to v1.3.7 - extends the partial coverage tracking introduced there to DoT and DoQ protocols. See the v1.3.7 release notes for the full picture on zone-aware auditing and DNS coverage improvements.
Security Audit
- DoT/DoQ partial coverage detection - DoT (TCP 853) and DoQ (UDP 853) now show "Partially Blocked" when firewall rules exist but don't cover all networks, matching the DNS53 behavior added in v1.3.7. Previously these showed binary blocked/open, which could give a false sense of full protection.
- Full DNS Protection accuracy - "Full DNS Protection" status now requires full network coverage for DoT and DoQ, not just rule existence.
PDF Report
- DoQ row added - The PDF report was missing the DoQ row entirely. Now includes all three protocols (DNS53, DoT, DoQ) with partial status support matching the web UI.
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dmacOS (native, recommended for accurate speed tests vs Docker Desktop):
git clone https://github.com/Ozark-Connect/NetworkOptimizer.git && cd NetworkOptimizer && ./scripts/install-macos-native.sh
# or if you already have it cloned
cd NetworkOptimizer && git pull && ./scripts/install-macos-native.shProxmox:
bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ozark-Connect/NetworkOptimizer/main/scripts/proxmox/install.sh)"For other platforms (Synology, QNAP, Unraid, native Linux), see the Deployment Guide.