<sigh>
Bug 7156
Bug 7104
Bug 6896
On 07/11/2016 01:42 PM, Jari Fredriksson wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Reindl Harald kirjoitti 11.7.2016 14:34:
Am 11.07.2016 um 13:27 schrieb Jari Fredriksson:
Reindl Harald kirjoitti 11.7.2016 11:52:
Am 11.07.2016 um 10:02 schrieb Jari Fredriksson:
Define correctly, please.
"www..windstrom.at" is obvious wrong and was meant as
"www.windstrom.at", so fix that typo in the background or just ignore
the url at all since it CAN NOT become a positive dns response
I have been in this camp too as younger and wanting be user friendly.
After that I have been impressed by a fellow talking about deterministic
functions and that. Garbage in, garbage out. Invalid DNS name can not
become positive dns response. Ever. Why should we change that somehow?
because "we" are a score-based contentfilter and deal by definition
with garbage all day long?
so either recognize the garbage and don't send out invalid
dns-requests at all or normalize it - in any case their is no point
trigger hundrets of loglines with "a domain name contains a null
label"
Fair enough, and valid thinking. I was also thinking that if the
resolver returns garbage that can not be used as scoring points for SA,
when we have to handle this.
But the resolver is not responsible for this, it should be SA task to
identify invalid value and not even try to resolve it. And it just
occurred to me that the SA discussion list is the right forum for it,
and I have been a total fool.
Please bear with me, I was lazy...
10. heinäkuuta 2016 18.08.32 GMT+03:00 Reindl Harald
<h.rei...@thelounge.net> kirjoitti:
Jul 8 10:00:40 mail-gw spamd[14221]: dns: new_dns_packet
(domain=www..windstrom.at <http://windstrom.at>. type=A class=IN) failed: a
domain name
contains a null label
i guess that was a typo in the mail itself - shouldn't SA replace such
accidents (double dot) or at least recognize and ignore it so that
dns/uribl looksups suceed corretly?
- --
Jari Fredriksson
Bitwell Oy
+358 400 779 440
ja...@bitwell.biz
https://www.bitwell.biz - cost effective hosting and security for
ecommerce
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAleDhhwACgkQKL4IzOyjSrYl/wCg8vPCDH1uhmhDZya5ZiAeOdCY
gXYAoMLe7RimwzDTxEjvxJIDaxHPqJZx
=SbNH
-----END PGP SIGNATURE-----
