Skip to content

Exempt Security and Management networks from DNS DNAT requirement#382

Merged
tvancott42 merged 1 commit intodevfrom
feature/dns-exempt
Feb 28, 2026
Merged

Exempt Security and Management networks from DNS DNAT requirement#382
tvancott42 merged 1 commit intodevfrom
feature/dns-exempt

Conversation

@tvancott42
Copy link
Collaborator

@tvancott42 tvancott42 commented Feb 28, 2026

Summary

  • Security and Management networks now get an Informational issue (zero score impact) instead of a Recommended issue when not covered by DNS DNAT rules or third-party DNS
  • These infrastructure networks (cameras, network admin devices) may work best with gateway DNS - no need to flag them
  • Follows the existing DMZ and Guest network exemption pattern

Closes #379

Test plan

  • 4 new tests covering Security, Management, DNAT partial coverage, and mixed network separation
  • Full test suite passes (5,641 tests, zero failures)
  • Deploy to NAS and run audit on a network with Security/Management VLANs

Security (cameras) and Management networks contain infrastructure devices
that work best with gateway DNS. Instead of flagging them as missing DNAT
coverage (Recommended severity), they now get an Informational issue with
zero score impact - matching the existing DMZ and Guest exemption pattern.

Closes #379
@tvancott42 tvancott42 merged commit a844257 into dev Feb 28, 2026
@tvancott42 tvancott42 deleted the feature/dns-exempt branch February 28, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant