mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 18:28:25 +00:00
RRSIG answer logging.
This commit is contained in:
@@ -1335,7 +1335,7 @@ size_t dnssec_generate_query(struct dns_header *header, char *end, char *name, i
|
|||||||
unsigned char *p;
|
unsigned char *p;
|
||||||
char types[20];
|
char types[20];
|
||||||
|
|
||||||
querystr("dnssec", types, type);
|
querystr("dnssec-query", types, type);
|
||||||
|
|
||||||
if (addr->sa.sa_family == AF_INET)
|
if (addr->sa.sa_family == AF_INET)
|
||||||
log_query(F_DNSSEC | F_IPV4, name, (struct all_addr *)&addr->in.sin_addr, types);
|
log_query(F_DNSSEC | F_IPV4, name, (struct all_addr *)&addr->in.sin_addr, types);
|
||||||
|
|||||||
@@ -1609,7 +1609,15 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
|
|||||||
while ((crecp = cache_find_by_name(crecp, name, now, F_DNSKEY | F_DS)))
|
while ((crecp = cache_find_by_name(crecp, name, now, F_DNSKEY | F_DS)))
|
||||||
if (crecp->uid == qclass && (qtype == T_RRSIG || (sec_reqd && crecp->addr.sig.type_covered == qtype)) &&
|
if (crecp->uid == qclass && (qtype == T_RRSIG || (sec_reqd && crecp->addr.sig.type_covered == qtype)) &&
|
||||||
!dryrun &&
|
!dryrun &&
|
||||||
(keydata = blockdata_retrieve(crecp->addr.sig.keydata, crecp->addr.sig.keylen, NULL)) &&
|
(keydata = blockdata_retrieve(crecp->addr.sig.keydata, crecp->addr.sig.keylen, NULL)))
|
||||||
|
{
|
||||||
|
if (qtype == T_RRSIG)
|
||||||
|
{
|
||||||
|
char types[20];
|
||||||
|
querystr("rrsig", types, crecp->addr.sig.type_covered);
|
||||||
|
log_query(F_RRNAME, name, NULL, types);
|
||||||
|
}
|
||||||
|
if ((keydata = blockdata_retrieve(crecp->addr.sig.keydata, crecp->addr.sig.keylen, NULL)) &&
|
||||||
add_resource_record(header, limit, &trunc, nameoffset, &ansp,
|
add_resource_record(header, limit, &trunc, nameoffset, &ansp,
|
||||||
crec_ttl(crecp, now), &nameoffset,
|
crec_ttl(crecp, now), &nameoffset,
|
||||||
T_RRSIG, qclass, "t", crecp->addr.sig.keylen, keydata))
|
T_RRSIG, qclass, "t", crecp->addr.sig.keylen, keydata))
|
||||||
@@ -1617,6 +1625,7 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
}
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
if (qclass == C_IN)
|
if (qclass == C_IN)
|
||||||
|
|||||||
Reference in New Issue
Block a user