Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
D
Dnsmasq
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Locked Files
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Security & Compliance
Security & Compliance
Dependency List
License Compliance
Packages
Packages
List
Container Registry
Analytics
Analytics
CI / CD
Code Review
Insights
Issues
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
nanahira
Dnsmasq
Commits
5a7212c7
Commit
5a7212c7
authored
Apr 24, 2017
by
Vladislav Grishenko
Committed by
Simon Kelley
Apr 24, 2017
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Make --rev-server work in the presence of --bogus-priv.
parent
3a8b0f6f
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
37 additions
and
7 deletions
+37
-7
CHANGELOG
CHANGELOG
+4
-0
src/rfc1035.c
src/rfc1035.c
+33
-7
No files found.
CHANGELOG
View file @
5a7212c7
...
...
@@ -99,7 +99,11 @@ version 2.77
when the script accidentally emits error messages.
Thanks to Petr Mensik for the patch.
Make --rev-server for an RFC1918 subnet work even in the
presence of the --bogus-priv flag. Thanks to
Vladislav Grishenko for the patch.
version 2.76
Include 0.0.0.0/8 in DNS rebind checks. This range
translates to hosts on the local network, or, at
...
...
src/rfc1035.c
View file @
5a7212c7
...
...
@@ -1459,13 +1459,39 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
#endif
(
is_arpa
==
F_IPV4
&&
private_net
(
addr
.
addr
.
addr4
,
1
))))
{
/* if not in cache, enabled and private IPV4 address, return NXDOMAIN */
ans
=
1
;
sec_data
=
0
;
nxdomain
=
1
;
if
(
!
dryrun
)
log_query
(
F_CONFIG
|
F_REVERSE
|
is_arpa
|
F_NEG
|
F_NXDOMAIN
,
name
,
&
addr
,
NULL
);
struct
server
*
serv
;
unsigned
int
namelen
=
strlen
(
name
);
char
*
nameend
=
name
+
namelen
;
/* see if have rev-server set */
for
(
serv
=
daemon
->
servers
;
serv
;
serv
=
serv
->
next
)
{
unsigned
int
domainlen
;
char
*
matchstart
;
if
((
serv
->
flags
&
(
SERV_HAS_DOMAIN
|
SERV_NO_ADDR
))
!=
SERV_HAS_DOMAIN
)
continue
;
domainlen
=
strlen
(
serv
->
domain
);
if
(
domainlen
==
0
||
domainlen
>
namelen
)
continue
;
matchstart
=
nameend
-
domainlen
;
if
(
hostname_isequal
(
matchstart
,
serv
->
domain
)
&&
(
namelen
==
domainlen
||
*
(
matchstart
-
1
)
==
'.'
))
break
;
}
/* if no configured server, not in cache, enabled and private IPV4 address, return NXDOMAIN */
if
(
!
serv
)
{
ans
=
1
;
sec_data
=
0
;
nxdomain
=
1
;
if
(
!
dryrun
)
log_query
(
F_CONFIG
|
F_REVERSE
|
is_arpa
|
F_NEG
|
F_NXDOMAIN
,
name
,
&
addr
,
NULL
);
}
}
}
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment