mirror of
https://github.com/Dasharo/systemd.git
synced 2026-03-06 15:02:31 -08:00
resolved: never respond to .alt pseudo-TLD.
From RFC 9476: Because names beneath .alt are in an alternative namespace, they have no significance in the regular DNS context. DNS stub and recursive resolvers do not need to look them up in the DNS context. See: https://datatracker.ietf.org/doc/html/rfc9476#name-the-alt-namespace
This commit is contained in:
committed by
Lennart Poettering
parent
b92abd712e
commit
bdf58b47c3
@@ -1413,5 +1413,9 @@ bool dns_name_dont_resolve(const char *name) {
|
||||
if (dns_name_endswith(name, "invalid") > 0)
|
||||
return true;
|
||||
|
||||
/* Never respond to some of the domains listed in RFC9476 */
|
||||
if (dns_name_endswith(name, "alt") > 0)
|
||||
return true;
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
@@ -317,6 +317,7 @@ FILTERED_NAMES=(
|
||||
"255.255.255.255.in-addr.arpa"
|
||||
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa"
|
||||
"hello.invalid"
|
||||
"hello.alt"
|
||||
)
|
||||
|
||||
for name in "${FILTERED_NAMES[@]}"; do
|
||||
|
||||
Reference in New Issue
Block a user