resolved: never respond to .alt pseudo-TLD.

From RFC 9476:

Because names beneath .alt are in an alternative namespace, they have no
significance in the regular DNS context. DNS stub and recursive
resolvers do not need to look them up in the DNS context.

See: https://datatracker.ietf.org/doc/html/rfc9476#name-the-alt-namespace
This commit is contained in:
Bertrand Jacquin 2023-09-27 19:39:52 +01:00 committed by Lennart Poettering
parent b92abd712e
commit bdf58b47c3
2 changed files with 5 additions and 0 deletions

View file

@ -1413,5 +1413,9 @@ bool dns_name_dont_resolve(const char *name) {
if (dns_name_endswith(name, "invalid") > 0)
return true;
/* Never respond to some of the domains listed in RFC9476 */
if (dns_name_endswith(name, "alt") > 0)
return true;
return false;
}

View file

@ -317,6 +317,7 @@ FILTERED_NAMES=(
"255.255.255.255.in-addr.arpa"
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa"
"hello.invalid"
"hello.alt"
)
for name in "${FILTERED_NAMES[@]}"; do