workarounds: prototype of a new module

including code to deal with #128 and #140.

diff --git a/modules/modules.mk b/modules/modules.mk
index d6077ebc713c2496163c71970cb0f35c4e651cb0..4687bc41ca88d33cd0c008c80231902857095007 100644 (file)
--- a/modules/modules.mk
+++ b/modules/modules.mk
@@ -27,6 +27,7 @@ modules_TARGETS += ketcd \
                    renumber \
                    http \
                    daf \
+                   workarounds \
                    version
 endif
 

diff --git a/modules/workarounds/README.rst b/modules/workarounds/README.rst
new file mode 100644 (file)
index 0000000..872a1af
--- /dev/null
+++ b/modules/workarounds/README.rst
@@ -0,0 +1,4 @@
+.. _mod-workarounds:
+
+FIXME
+

diff --git a/modules/workarounds/workarounds.lua b/modules/workarounds/workarounds.lua
new file mode 100644 (file)
index 0000000..255fe78
--- /dev/null
+++ b/modules/workarounds/workarounds.lua
@@ -0,0 +1,20 @@
+-- Load dependent module
+if not policy then modules.load('policy') end
+
+local M = {} -- the module
+
+function M.config()
+       policy.add(policy.suffix(policy.FLAGS(kres.query.NO_0X20), {
+       --  https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0003.md
+               todname('avqs.mcafee.com'),
+
+       --  https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0006.md
+       --  Obtained via a reverse search on {ns1,ns3}.panthercdn.com.
+               todname('cdnga.com'), todname('cdngc.com'), todname('cdngd.com'),
+               todname('cdngl.com'), todname('cdngm.com'),
+               todname('cdngc.net'), todname('panthercdn.com'),
+       }))
+end
+
+return M
+

diff --git a/modules/workarounds/workarounds.mk b/modules/workarounds/workarounds.mk
new file mode 100644 (file)
index 0000000..6b0493e
--- /dev/null
+++ b/modules/workarounds/workarounds.mk
@@ -0,0 +1,2 @@
+workarounds_SOURCES := workarounds.lua
+$(call make_lua_module,workarounds)