Skip to content

Blocks mDNS only in chromiumΒ #2116

@Daniil-Demyanenko

Description

@Daniil-Demyanenko

What happened?

In my LAN, Avahi is configured on one of the devices for the orangepi.local domain. All programs can work with this domain (ssh, samba, ping, etc.).
But the connection for chrome is blocked with the message

Reason: DNS server horizon violation: global DNS server returned local IP address
Applied Setting:Enforce Global/Private Split-View from Global Settings

At the same time, the correct address of my device is indicated in the response, but it is blocked.

What did you expect to happen?

nDNS will be blocked either for all programs or for no one.

How did you reproduce it?

  1. Configure Avahi on other device.
  2. Try ping, mount smb, ssh by local domain.
  3. Try open web-gui in chromium and see in Portmaster History, what it block correct dns resolving (in firefox it works normaly).

Additional information

JSON from Portmaster History (copied from blocked response)

{
    "active": false,
    "allowed": false,
    "as_owner": "",
    "asn": 0,
    "bytes_received": 0,
    "bytes_sent": 0,
    "country": "",
    "direction": "outbound",
    "domain": "orangepi.local.",
    "encrypted": false,
    "ended": "2026-01-13T17:47:20Z",
    "exit_node": null,
    "external": false,
    "extra_data": {
        "blockedByLists": null,
        "blockedEntities": null,
        "cname": null,
        "dns": {
            "Domain": "orangepi.local.",
            "Question": "A",
            "RCode": "NXDOMAIN",
            "ServedFromCache": true,
            "RequestingNew": true,
            "IsBackup": false,
            "Filtered": false,
            "Modified": "2026-01-13T20:08:55+03:00",
            "Expires": "2026-01-13T20:09:05+03:00"
        },
        "pid": 88171,
        "processCreatedAt": 1768324798000,
        "reason": {
            "Msg": "DNS server horizon violation: global DNS server returned local IP address",
            "OptionKey": "filter/removeOutOfScopeDNS",
            "Profile": "",
            "Context": null
        }
    },
    "firewall_verdict": 0,
    "id": "88171-1768324798000-6-192.168.0.107-53354-192.168.0.105-80",
    "internal": false,
    "ip_protocol": 6,
    "ip_version": 4,
    "latitude": 0,
    "local_ip": "192.168.0.107",
    "local_port": 53354,
    "longitude": 0,
    "path": "/usr/lib/chromium/chromium",
    "profile": "local/PTaxVfeGgCiquMXig9w7YjbriZYsbDHV8fopfGpcDFvd8V",
    "profile_name": "Chromium",
    "profile_revision": 7,
    "remote_ip": "192.168.0.105",
    "remote_port": 80,
    "scope": 3,
    "started": "2026-01-13T17:47:16Z",
    "tunneled": false,
    "type": "ip",
    "verdict": 3,
    "worst_verdict": 0,
    "__profile": {
        "ID": "PTaxVfeGgCiquMXig9w7YjbriZYsbDHV8fopfGpcDFvd8V",
        "Source": "local",
        "Name": "Chromium",
        "Description": "",
        "Warning": "",
        "WarningLastUpdated": "0001-01-01T00:00:00Z",
        "Homepage": "",
        "Icon": "",
        "IconType": "",
        "Icons": [
            {
                "Type": "api",
                "Value": "1565e316b02033863a88acc533e82b059d7d1540.png",
                "Source": "ui"
            }
        ],
        "LinkedPath": "/usr/lib/chromium/chromium",
        "PresentationPath": "/usr/lib/chromium/chromium",
        "UsePresentationPath": true,
        "Fingerprints": [
            {
                "Type": "path",
                "Key": "",
                "Operation": "equals",
                "Value": "/usr/lib/chromium/chromium",
                "MergedFrom": ""
            }
        ],
        "Config": {},
        "LastEdited": 1768324268,
        "Created": 1758828221,
        "Internal": false,
        "_meta": {
            "Created": 1768324268,
            "Modified": 1768324268,
            "Expires": 0,
            "Deleted": 0,
            "Key": "core:profiles/local/PTaxVfeGgCiquMXig9w7YjbriZYsbDHV8fopfGpcDFvd8V"
        },
        "FlatConfig": {}
    },
    "_chart": null,
    "_group": null
}

Debug-Info: https://support.safing.io/privatebin/?8fb55422c32148fb#3EnC4ZuJhmppLsKzY3upsYPrzW9gMNCMEo7uVkQ2F8oC

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugTYPE: a report on something that isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions