Changeset 697 for trunk/pdns/pdns/pdns_recursor.cc

Timestamp:

04/14/06 10:39:16 (4 years ago)

Author:

ahu

Message:

WARNING WARNING: We now listen on 127.0.0.1 by default *AND* only reply to RFC 1918 addresses by default
Ignore answers w/o a question
s/spoof/unexpected/

Files:

• trunk/pdns/pdns/pdns_recursor.cc (modified) (4 diffs)

trunk/pdns/pdns/pdns_recursor.cc

@@ -726 +726 @@
     ::arg().set("aaaa-additional-processing","turn on to do AAAA additional processing (slow)")="off";
     ::arg().set("local-port","port to listen on")="53";
-    ::arg().set("local-address","IP addresses to listen on, separated by spaces or commas")="0.0.0.0";
+    ::arg().set("local-address","IP addresses to listen on, separated by spaces or commas")="127.0.0.1";
     ::arg().set("trace","if we should output heaps of logging")="off";
     ::arg().set("daemon","Operate as a daemon")="yes";
@@ -742 +742 @@
     ::arg().set("hint-file", "If set, load root hints from this file")="";
     ::arg().set("max-cache-entries", "If set, maximum number of entries in the main cache")="0";
-    ::arg().set("allow-from", "If set, only allow these comma separated netmasks to recurse")="";
+    ::arg().set("allow-from", "If set, only allow these comma separated netmasks to recurse")="127.0.0.0/8, 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12";
     ::arg().set("max-tcp-per-client", "If set, maximum number of TCP sessions per client (IP address)")="0";
     ::arg().set("fork", "If set, fork the daemon for possible double performance")="no";
@@ -943 +943 @@
             memcpy(&dh, data, sizeof(dh));
             
-            if(dh.qr) {
+            if(dh.qr && dh.qdcount) {
               pident.remote=fromaddr;
               pident.id=dh.id;
@@ -950 +950 @@
               if(!MT->sendEvent(pident, &packet)) {
                 if(logCommonErrors)
-                  L<<Logger::Warning<<"Discarding unexpected packet from "<<sockAddrToString((struct sockaddr_in*) &fromaddr, addrlen)<<"\n";
-                g_stats.spoofedCount++;
+                  L<<Logger::Warning<<"Discarding unexpected packet from "<<sockAddrToString((struct sockaddr_in*) &fromaddr, addrlen)<<endl;
+                g_stats.unexpectedCount++;
               }
             }