From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 5 Nov 2020 14:51:12 +0000 (+0100)
Subject: stub: don't ever respond to datagrams coming in on non-localhost addreses, on the... 
X-Git-Tag: v248-rc1~592
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=565147b7bb2156277a2efaccd920d3ca9c21f8a8;p=thirdparty%2Fsystemd.git

stub: don't ever respond to datagrams coming in on non-localhost addreses, on the stub
---

diff --git a/src/resolve/resolved-dns-stub.c b/src/resolve/resolved-dns-stub.c
index 086d3d9d186..6a3dc9901ae 100644
--- a/src/resolve/resolved-dns-stub.c
+++ b/src/resolve/resolved-dns-stub.c
@@ -379,8 +379,7 @@ static void dns_stub_process_query(Manager *m, DnsStubListenerExtra *l, DnsStrea
         if (!l && /* l == NULL if this is the main stub */
             (in_addr_is_localhost(p->family, &p->sender) <= 0 ||
              in_addr_is_localhost(p->family, &p->destination) <= 0)) {
-                log_error("Got packet on unexpected IP range, refusing.");
-                dns_stub_send_failure(m, l, s, p, DNS_RCODE_SERVFAIL, false);
+                log_warning("Got packet on unexpected (i.e. non-localhost) IP range, ignoring.");
                 return;
         }