From eb48d5e4a80a5c120757b576003d7cecd5d82b45 Mon Sep 17 00:00:00 2001
From: Uragami Taichi <backpaper0@gmail.com>
Date: Sat, 16 Aug 2025 06:38:34 +0900
Subject: [PATCH] fix: improve DNS resolution in firewall script to filter
 CNAME records

---
 .devcontainer/init-firewall.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/init-firewall.sh b/.devcontainer/init-firewall.sh
index 0b987171..b126dd98 100644
--- a/.devcontainer/init-firewall.sh
+++ b/.devcontainer/init-firewall.sh
@@ -71,7 +71,7 @@ for domain in \
     "statsig.anthropic.com" \
     "statsig.com"; do
     echo "Resolving $domain..."
-    ips=$(dig +short A "$domain")
+    ips=$(dig +noall +answer A "$domain" | awk '$4 == "A" {print $5}')
     if [ -z "$ips" ]; then
         echo "ERROR: Failed to resolve $domain"
         exit 1