Actions
Bug #16094
closedpfBlocker-NG null blocking SERVFAIL
Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
pfBlockerNG
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
The key for the dnsblDB dictionary is just q_name, meaning the same dictionary entry is used for all query types. The response answer is currently saved in the dictionary. If the first query is for AAAA, the response answer saved in the dictionary is an IPv6 address; otherwise it is an IPv4 address. Subsequent queries then always get the same response answer even if the answer is invalid for the query (e.g., the answer to an A query may be "::", or the answer to an MX query may be "0.0.0.0"). These invalid answers result in SERVFAIL errors because msg.set_return_msg(qstate) equals False when an invalid answer is appended.
Updated by Jim Pingle 2 months ago
- Plus Target Version changed from 25.03 to 25.07
Updated by Jim Pingle about 2 months ago
- Status changed from Feedback to Resolved
- Target version deleted (
2.8.0) - Plus Target Version deleted (
25.07)
Actions