import { type LookupFunction } from 'node:net';
/**
 * Returns a drop-in replacement for `dns.lookup` that errors with
 * {@link SsrfBlockedError} if any resolved address is in the blocklist.
 *
 * Install on an http/https agent (`connect.lookup` for undici, or `lookup` for a node:https Agent)
 * so that every socket connection — including those made while following redirects — is re-validated
 * against the blocklist at connect time.
 */
export declare function createSsrfSafeLookup({ allowLoopback, }?: {
    allowLoopback?: boolean;
}): LookupFunction;
//# sourceMappingURL=ssrf-safe-lookup.d.ts.map