mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 10:18:25 +00:00
Ignore DNS queries from port 0: http://www.ietf.org/mail-archive/web/dnsop/current/msg11441.html
This commit is contained in:
@@ -1076,9 +1076,22 @@ void receive_query(struct listener *listen, time_t now)
|
|||||||
return;
|
return;
|
||||||
|
|
||||||
source_addr.sa.sa_family = listen->family;
|
source_addr.sa.sa_family = listen->family;
|
||||||
|
|
||||||
|
if (listen->family == AF_INET)
|
||||||
|
{
|
||||||
|
/* Source-port == 0 is an error, we can't send back to that.
|
||||||
|
http://www.ietf.org/mail-archive/web/dnsop/current/msg11441.html */
|
||||||
|
if (source_addr.in.sin_port == 0)
|
||||||
|
return;
|
||||||
|
}
|
||||||
#ifdef HAVE_IPV6
|
#ifdef HAVE_IPV6
|
||||||
if (listen->family == AF_INET6)
|
else
|
||||||
|
{
|
||||||
|
/* Source-port == 0 is an error, we can't send back to that. */
|
||||||
|
if (source_addr.in6.sin6_port == 0)
|
||||||
|
return;
|
||||||
source_addr.in6.sin6_flowinfo = 0;
|
source_addr.in6.sin6_flowinfo = 0;
|
||||||
|
}
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
/* We can be configured to only accept queries from at-most-one-hop-away addresses. */
|
/* We can be configured to only accept queries from at-most-one-hop-away addresses. */
|
||||||
|
|||||||
Reference in New Issue
Block a user