From: Lennart Poettering Date: Wed, 9 Dec 2015 16:38:05 +0000 (+0100) Subject: resolved: honour RFC6761's ban on the invalid TLD X-Git-Tag: v229~217^2~17 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7bcffc2efa266823d9c2da1d8536e7f9c6e70a32;p=thirdparty%2Fsystemd.git resolved: honour RFC6761's ban on the invalid TLD --- diff --git a/src/resolve/resolved-dns-scope.c b/src/resolve/resolved-dns-scope.c index 4d83ac597c4..ac44cf23435 100644 --- a/src/resolve/resolved-dns-scope.c +++ b/src/resolve/resolved-dns-scope.c @@ -441,6 +441,10 @@ DnsScopeMatch dns_scope_good_domain(DnsScope *s, int ifindex, uint64_t flags, co dns_name_equal(domain, "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa") > 0) return DNS_SCOPE_NO; + /* Never respond to some of the domains listed in RFC6761 */ + if (dns_name_endswith(domain, "invalid") > 0) + return DNS_SCOPE_NO; + /* Always honour search domains for routing queries. Note that * we return DNS_SCOPE_YES here, rather than just * DNS_SCOPE_MAYBE, which means wildcard scopes won't be