From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Mon, 30 Jan 2017 16:38:27 +0000 (+0100)
Subject: workarounds: prototype of a new module
X-Git-Tag: v1.3.0~23^2~75^2~7
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=40c68f7dd7c62c53954452faa63c9cc50af96fe2;p=thirdparty%2Fknot-resolver.git

workarounds: prototype of a new module

including code to deal with #128 and #140.
---

diff --git a/modules/modules.mk b/modules/modules.mk
index d6077ebc7..4687bc41c 100644
--- a/modules/modules.mk
+++ b/modules/modules.mk
@@ -27,6 +27,7 @@ modules_TARGETS += ketcd \
                    renumber \
                    http \
                    daf \
+                   workarounds \
                    version
 endif
 
diff --git a/modules/workarounds/README.rst b/modules/workarounds/README.rst
new file mode 100644
index 000000000..872a1af7d
--- /dev/null
+++ b/modules/workarounds/README.rst
@@ -0,0 +1,4 @@
+.. _mod-workarounds:
+
+FIXME
+
diff --git a/modules/workarounds/workarounds.lua b/modules/workarounds/workarounds.lua
new file mode 100644
index 000000000..255fe7848
--- /dev/null
+++ b/modules/workarounds/workarounds.lua
@@ -0,0 +1,20 @@
+-- Load dependent module
+if not policy then modules.load('policy') end
+
+local M = {} -- the module
+
+function M.config()
+	policy.add(policy.suffix(policy.FLAGS(kres.query.NO_0X20), {
+	--  https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0003.md
+		todname('avqs.mcafee.com'),
+
+	--  https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0006.md
+	--  Obtained via a reverse search on {ns1,ns3}.panthercdn.com.
+		todname('cdnga.com'), todname('cdngc.com'), todname('cdngd.com'),
+		todname('cdngl.com'), todname('cdngm.com'),
+		todname('cdngc.net'), todname('panthercdn.com'),
+	}))
+end
+
+return M
+
diff --git a/modules/workarounds/workarounds.mk b/modules/workarounds/workarounds.mk
new file mode 100644
index 000000000..6b0493e25
--- /dev/null
+++ b/modules/workarounds/workarounds.mk
@@ -0,0 +1,2 @@
+workarounds_SOURCES := workarounds.lua
+$(call make_lua_module,workarounds)