Feature request - DNS rebinding protection
It would be nice to have DNS rebinding protection.
Maybe It would be enought to add special filter for that (just blind idea) where you can filter all local subnet which aren't part of active hints. http://knot-resolver.readthedocs.io/en/stable/modules.html#query-policies