dnsproxy (1.17-3) unstable; urgency=medium Starting in this release, the dnsproxy in Debian have two additional configuration parameters on dnsproxy.conf: listen_answer and port_answer. These two new parameters are used to set a listen address for the socket that communicates with the DNS servers. In the previous releases, the dnsproxy used 0.0.0.0 with a random UDP port as a listen address. This was a security problem and was mitigated with the use of these new parameters. If your DNS servers are accessed by different network interfaces, you must use 0.0.0.0 as listen_answer. But if they are accessed by the same network interface, just set it to the IP address that you have on that interface. -- Marcos Talau Tue, 30 Nov 2021 23:41:42 -0300