Beta 2.4.2 (Mac)
Looks like 2.4.2 will be the biggest update for us in ~2 years since we purchased DNSFilter. We are optimistic.
A few question for you regarding beta 2.4.2:
1 Following 2.4.2, does allowExtensionBypass=true still need to be manually added to our configuration (/Library/Application Support/DNSFilter Agent/daemon.conf)?
2 Can a DNSFilter binary (example /Applications/DNSFilter Agent.app/Contents/MacOS/DNSFilter Agent) be used to query for the exact version and build?
3 Rough ETA date on when 2.4.2 may move to production?
-
Hey Daniel! Great questions—let me take them one at a time.
- The
allowExtensionBypassconfig behavior is part of the documented MDM setup path since v2.3.9—that one hasn't changed with 2.4.2, so your existing configuration should carry forward as-is during upgrades. - Could you clarify what you're trying to accomplish here? Knowing the end goal will help us point you in the right direction!
- 2.4.2 just hit the beta channel on June 15—if testing goes smoothly, production is currently targeting next week. A new changelog will post when the agent moves to Production.
1 - The
-
1 That's not really a ‘MDM solution’, thats just a script that can run via MDM (like any script). Im referring to moving DNSFilter settings like Wi-Fi Travel Mode to modern MDM/DDM porifles/configurations. These are dynamic, robust and can be automated, better than running a script for a policy from a MDM server like Jamf Pro etc.
I was asking if TWM in DSNFilter 2.4.2 is still something admins need to set up or a feature that is already available to users without IT configurations. To my knowledge, DNSFilter is the only DNS security solution that requires extra steps to work in airports/airlines, etc.
2 I was just curious if I can query DNSFilter directly from CLI, a script, over SSH etc to get the version (as opposed to having to use the macOS defaults commands to pull a version for a Info.plist buried in the app bundle).
3 Good to know, thank you.1 -
Hey Daniel! Circling back on your questions:
- The
allowExtensionBypassconfig still applies as a fallback for when automatic captive portal detection doesn't catch it—that's by design. Worth noting: as of 2.4.2, silent installs now also supportCONFIG_ALLOW_MANUAL_CAPTIVE_PORTALin the temporary config at/tmp/dns_agent.confif that's useful for your deployment workflow. Here's an article about modifications that might be helpful. - You can query the version directly from the command line with:
/usr/libexec/PlistBuddy -c 'Print CFBundleShortVersionString' /Applications/DNSFilter\ Agent.app/Contents/Info.plistReturns a clean version string that's easy to use in scripts too. 🙌
0 - The
Iniciar sesión para dejar un comentario.
Comentarios
3 comentarios