Actions
Bug #16094
openpfBlocker-NG null blocking SERVFAIL
Start date:
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
25.03
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
The key for the dnsblDB dictionary is just q_name, meaning the same dictionary entry is used for all query types. The response answer is currently saved in the dictionary. If the first query is for AAAA, the response answer saved in the dictionary is an IPv6 address; otherwise it is an IPv4 address. Subsequent queries then always get the same response answer even if the answer is invalid for the query (e.g., the answer to an A query may be "::", or the answer to an MX query may be "0.0.0.0"). These invalid answers result in SERVFAIL errors because msg.set_return_msg(qstate) equals False when an invalid answer is appended.
Updated by Marcos M about 1 month ago
- Status changed from New to Feedback
- Target version set to 2.8.0
- Plus Target Version set to 25.03
Actions