Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DNS : recurse for ptr records only if recursion is desired and configured #20412

Closed
wants to merge 3 commits into from

Conversation

the-nando
Copy link

@the-nando the-nando commented Jan 31, 2024

Description

This PR checks that the DNS request for the PTR has rd set (RecursionDesired) and we have recursors configured before calling the handleRecurse function.

Fixes:

Testing & Reproduction steps

Issue with calling handleRecurse if not neeed:

  • Start Consul without recursors configured
  • dig -p 8600 -x 127.0.0.3 @localhost
  • It should return NXDOMAIN but returns SERVFAIL

Issue with lack of handling of the rd flag:

  • Start Consul with recursors = ["1.1.1.1"] configured
  • dig -p 8600-x 1.1.1.1 @localhost +norecurse
  • It should return NXDOMAIN but returns one.one.one.one.

Links

Fixes: #20413

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

@david-yu
Copy link
Contributor

Closing as is superseded by #20679. Thank you for looking into this.

@david-yu david-yu closed this Feb 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

DNS : SERVFAIL when resolving PTR records
2 participants