|
4 Oct 2003, 13:27
|
#1
|
Born Sinful
Join Date: Nov 2000
Location: Loughborough, UK
Posts: 4,059
|
ICANN in "taking swift and proper action" shocker
Good grief - they actually only took a month to get VeriSign to pull SiteFinder. That must be a new speed record or something.
Not only that, they actually properly attacked VeriSign, accusing them of breach of contract in no less than 5 areas.
Well, much as I dislike ICANN, it looks like the recent reshuffle might have actually meant something rather than just being a publicity stunt to make the US Govt. back off a bit.
That, and the only internet body I dislike more than ICANN is VeriSign.
__________________
Worth dying for. Worth killing for. Worth going to hell for. Amen.
|
|
|
13 Oct 2003, 23:47
|
#2
|
/dev/zero Retired Mod
Join Date: May 2000
Posts: 415
|
Re: ICANN in "taking swift and proper action" shocker
Code:
diff -u orig/dnscache.c ./dnscache.c
--- orig/dnscache.c 2001-02-11 16:11:45.000000000 -0500
+++ ./dnscache.c 2003-09-16 23:23:36.000000000 -0400
@@ -23,6 +23,8 @@
#include "okclient.h"
#include "droproot.h"
+stralloc ignoreip = {0};
+
static int packetquery(char *buf,unsigned int len,char **q,char qtype[2],char qclass[2],char id[2])
{
unsigned int pos;
@@ -389,6 +391,7 @@
int main()
{
char *x;
+ unsigned int i, j, k;
unsigned long cachesize;
x = env_get("IP");
@@ -431,6 +434,20 @@
if (!cache_init(cachesize))
strerr_die3x(111,FATAL,"not enough memory for cache of size ",x);
+ if (openreadclose("ignoreip",&ignoreip,64) < 0)
+ strerr_die2x(111,FATAL,"trouble reading ignoreip");
+ for(j = k = i = 0; i < ignoreip.len; i++)
+ if (ignoreip.s[i] == '\n') {
+ ignoreip.s[i] = '\0';
+ if (j + 4 > i)
+ strerr_die3x(111,FATAL,"badly malformed ip4 address ",ignoreip.s+k);
+ if (!ip4_scan(ignoreip.s+k,ignoreip.s+j))
+ strerr_die3x(111,FATAL,"unable to parse address in ignoreip ",ignoreip.s+k);
+ j += 4;
+ k = i + 1;
+ }
+ ignoreip.len = j;
+
if (env_get("HIDETTL"))
response_hidettl();
if (env_get("FORWARDONLY"))
diff -u orig/query.c ./query.c
--- orig/query.c 2001-02-11 16:11:45.000000000 -0500
+++ ./query.c 2003-09-16 23:31:41.000000000 -0400
@@ -13,6 +13,8 @@
#include "response.h"
#include "query.h"
+extern stralloc ignoreip;
+
static int flagforwardonly = 0;
void query_forwardonly(void)
@@ -193,6 +195,7 @@
int k;
int p;
int q;
+ unsigned int ii;
errno = error_io;
if (state == 1) goto HAVEPACKET;
@@ -643,6 +646,9 @@
pos = dns_packet_copy(buf,len,pos,header,10); if (!pos) goto DIE;
if (byte_equal(header + 8,2,"\0\4")) {
pos = dns_packet_copy(buf,len,pos,header,4); if (!pos) goto DIE;
+ if (ignoreip.len)
+ for(ii = 0; ii < ignoreip.len; ii+= 4)
+ if (byte_equal(header,4,ignoreip.s+ii)) goto NXDOMAIN;
save_data(header,4);
log_rr(whichserver,t1,DNS_T_A,header,4,ttl);
}
__________________
#linux : Home of Genius
<idimmu> ok i was chained to a desk with this oriental dude
|
|
|
|
All times are GMT +1. The time now is 16:33.
| |