-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reindl Harald kirjoitti 11.7.2016 14:34: > Am 11.07.2016 um 13:27 schrieb Jari Fredriksson: >> Reindl Harald kirjoitti 11.7.2016 11:52: >>> Am 11.07.2016 um 10:02 schrieb Jari Fredriksson: >>>> Define correctly, please. >> >>> "www..windstrom.at" is obvious wrong and was meant as >>> "www.windstrom.at", so fix that typo in the background or just ignore >>> the url at all since it CAN NOT become a positive dns response >> >> I have been in this camp too as younger and wanting be user friendly. >> After that I have been impressed by a fellow talking about deterministic >> functions and that. Garbage in, garbage out. Invalid DNS name can not >> become positive dns response. Ever. Why should we change that somehow? > > because "we" are a score-based contentfilter and deal by definition > with garbage all day long? > > so either recognize the garbage and don't send out invalid > dns-requests at all or normalize it - in any case their is no point > trigger hundrets of loglines with "a domain name contains a null > label"
Fair enough, and valid thinking. I was also thinking that if the resolver returns garbage that can not be used as scoring points for SA, when we have to handle this. But the resolver is not responsible for this, it should be SA task to identify invalid value and not even try to resolve it. And it just occurred to me that the SA discussion list is the right forum for it, and I have been a total fool. Please bear with me, I was lazy... > >>>> 10. heinäkuuta 2016 18.08.32 GMT+03:00 Reindl Harald >>>> <h.rei...@thelounge.net> kirjoitti: >>>> >>>> Jul 8 10:00:40 mail-gw spamd[14221]: dns: new_dns_packet >>>> (domain=www..windstrom.at <http://windstrom.at>. type=A class=IN) >>>> failed: a domain name >>>> contains a null label >>>> >>>> i guess that was a typo in the mail itself - shouldn't SA replace such >>>> accidents (double dot) or at least recognize and ignore it so that >>>> dns/uribl looksups suceed corretly? - -- Jari Fredriksson Bitwell Oy +358 400 779 440 ja...@bitwell.biz https://www.bitwell.biz - cost effective hosting and security for ecommerce -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAleDhhwACgkQKL4IzOyjSrYl/wCg8vPCDH1uhmhDZya5ZiAeOdCY gXYAoMLe7RimwzDTxEjvxJIDaxHPqJZx =SbNH -----END PGP SIGNATURE-----
