+4593. [func] "host -A" returns most records for a name but
+ omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
+ [RT #43032]
+
4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]
static isc_boolean_t default_lookups = ISC_TRUE;
static int seen_error = -1;
static isc_boolean_t list_addresses = ISC_TRUE;
+static isc_boolean_t list_almost_all = ISC_FALSE;
static dns_rdatatype_t list_type = dns_rdatatype_a;
static isc_boolean_t printed_server = ISC_FALSE;
static isc_boolean_t ipv4only = ISC_FALSE, ipv6only = ISC_FALSE;
"Usage: host [-aCdilrTvVw] [-c class] [-N ndots] [-t type] [-W time]\n"
" [-R number] [-m flag] hostname [server]\n"
" -a is equivalent to -v -t ANY\n"
+" -A is like -a but omits RRSIG, NSEC, NSEC3\n"
" -c specifies query class for non-IN data\n"
" -C compares SOA records on authoritative nameservers\n"
" -d is equivalent to -v\n"
rdataset->type == dns_rdatatype_ns ||
rdataset->type == dns_rdatatype_ptr))))
continue;
+ if (list_almost_all &&
+ (rdataset->type == dns_rdatatype_rrsig ||
+ rdataset->type == dns_rdatatype_nsec ||
+ rdataset->type == dns_rdatatype_nsec3))
+ continue;
if (!short_form) {
result = dns_rdataset_totext(rdataset,
print_name,
return (result);
}
-static const char * optstring = "46ac:dilnm:rst:vVwCDN:R:TW:";
+static const char * optstring = "46aAc:dilnm:rst:vVwCDN:R:TW:";
/*% version */
static void
ipv6only = ISC_TRUE;
break;
case 'a': break;
+ case 'A': break;
case 'c': break;
case 'd': break;
case 'i': break;
}
default_lookups = ISC_FALSE;
break;
+ case 'A':
+ list_almost_all = ISC_TRUE;
+ /* FALL THROUGH */
case 'a':
if (!lookup->rdtypeset ||
lookup->rdtype != dns_rdatatype_axfr)
<refsynopsisdiv>
<cmdsynopsis sepchar=" ">
<command>host</command>
- <arg choice="opt" rep="norepeat"><option>-aCdlnrsTwv</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-aACdlnrsTwv</option></arg>
<arg choice="opt" rep="norepeat"><option>-c <replaceable class="parameter">class</replaceable></option></arg>
<arg choice="opt" rep="norepeat"><option>-N <replaceable class="parameter">ndots</replaceable></option></arg>
<arg choice="opt" rep="norepeat"><option>-R <replaceable class="parameter">number</replaceable></option></arg>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>-A</term>
+ <listitem>
+ <para>
+ "Almost all". The <option>-A</option> option is equivalent
+ to <option>-a</option> except RRSIG, NSEC, and NSEC3
+ records are omitted from the output.
+ </para>
+ </listitem>
+ </varlistentry>
+
<varlistentry>
<term>-c <replaceable class="parameter">class</replaceable></term>
<listitem>
<section xml:id="relnotes_features"><info><title>New Features</title></info>
<itemizedlist>
+ <listitem>
+ <para>
+ The <command>host -A</command> option returns most
+ records for a name, but omits types RRSIG, NSEC and NSEC3.
+ </para>
+ </listitem>
<listitem>
<para>
Query logic has been substantially refactored (e.g. query_find