> [ more than one answer on reverse lookup of an ip with "acl srcdomain"
fails with 2.5Stable5 ]
> It also seems to work with 2.5Stable3!
The problem seems to be related to the RFC1035 unpack. The debugging shows
that
the fqdncache function returns a broken hostname with a garbled domain.
It looks like RR->rdlength isn't updated after uncompressing the DNS answer.
There was a change in fqdncache.c from 2.5Stable4 to 2.5Stable5 which leads
to the problem appearance:
f->names[f->name_count++] = xstrndup(answers[k].rdata, answers[k].rdlength);
was: ....xtrdup(answers[k].rdata)
Our internal solution will be to disable the internal dns.
Regards,
Matthias
Received on Tue Nov 16 2004 - 06:05:14 MST
This archive was generated by hypermail pre-2.1.9 : Wed Dec 01 2004 - 12:00:01 MST