dnsproxy (1.17-3) unstable; urgency=medium

  Starting in this release, the dnsproxy in Debian have two additional
  configuration parameters on dnsproxy.conf: listen_answer and port_answer.

  These two new parameters are used to set a listen address for the socket
  that communicates with the DNS servers. In the previous releases, the
  dnsproxy used 0.0.0.0 with a random UDP port as a listen address. This was
  a security problem and was mitigated with the use of these new parameters.

  If your DNS servers are accessed by different network interfaces, you must
  use 0.0.0.0 as listen_answer. But if they are accessed by the same network
  interface, just set it to the IP address that you have on that interface.

 -- Marcos Talau <marcos@talau.info>  Tue, 30 Nov 2021 23:41:42 -0300
