pfSense » pfSense Plus

The problem is that when you add a trailing dot it's a valid hostname, not an IP address. Hostnames are allowed in aliases, but since that particular hostname doesn't exist in DNS, it can't be resolved, so it doesn't end up being added to the table.

We have no idea if the user intended to do that or not. We can't just reject that since it's technically not invalid input, so it's not clear what, if anything we should do here.

Forcing the user to declare whether input should specifically be a hostname as an extra step is about the only thing you could do but that puts a ton of extra burden on users to catch a very rare case of user error.

When Save is clicked, the system could compare the value with the trimmed value but display a yellow warning at the top of the page with a message similar to A trailing '.' was detected in entry <entry value>. Confirm that this is intentional.
The value would still be saved exactly as entered, so no functional changes there. It would just display the warning message.

I could see this error happening if something is copied and the IP address was the last word of the sentence (e.g. Please add aliases for 172.16.0.0 and 10.0.0.0. This is needed to allow service xyz.)

Jim Pingle wrote in #note-1:

The problem is that when you add a trailing dot it's a valid hostname, not an IP address. Hostnames are allowed in aliases, but since that particular hostname doesn't exist in DNS, it can't be resolved, so it doesn't end up being added to the table.

We have no idea if the user intended to do that or not. We can't just reject that since it's technically not invalid input, so it's not clear what, if anything we should do here.

Forcing the user to declare whether input should specifically be a hostname as an extra step is about the only thing you could do but that puts a ton of extra burden on users to catch a very rare case of user error.

Thank you for looking at this.

I can understand the issue but as it's such a critical function I find it hard to agree with keeping it as is.

Would a semantic check work? A regex check for an ip address that contains a period?

 ^\d{1,3}(\.\d{1,3}){3}\.$