From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 8882 invoked from network); 27 Jul 2021 14:41:50 -0000 Received: from mother.openwall.net (195.42.179.200) by inbox.vuxu.org with ESMTPUTF8; 27 Jul 2021 14:41:50 -0000 Received: (qmail 19713 invoked by uid 550); 27 Jul 2021 14:41:48 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: musl@lists.openwall.com Received: (qmail 19695 invoked from network); 27 Jul 2021 14:41:48 -0000 Date: Tue, 27 Jul 2021 10:41:35 -0400 From: Rich Felker To: Yuri Kanivetsky Cc: musl@lists.openwall.com Message-ID: <20210727144135.GP13220@brightrain.aerifal.cx> References: <5463e48e-c6b7-f6e3-e405-6cf654b35c57@gmail.com> <20210719211225.GK13220@brightrain.aerifal.cx> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Subject: Re: [musl] getaddrinfo() fails for domains with no AAAA records (regression?) On Tue, Jul 27, 2021 at 05:21:14PM +0300, Yuri Kanivetsky wrote: > Well, the way it looks... they (registrar) aren't gonna fix this. But > the problem is only with wildcard RRs, so bearable. > > By the way, do you know which dns servers are buggy, and which are not? As far as I know, there's no actual DNS software that's open source or commercially offered that has this kind of severe problem. It only happens when the hosting provider has rolled their own broken software or made in-house hacks to existing software to break it. If your registrar is really this bad, you should probably move or at least use them only as a registrar (not a DNS host) and delegate the DNS hosting to someone who doesn't botch it so bad. Rich > On Fri, Jul 23, 2021 at 11:45 PM Laurent Bercot > wrote: > > > > > > I wrote a tool some time ago that was precisely designed to work > > around buggy DNS servers incorrectly returning NXDOMAIN, precisely > > because such a need was expressed in Alpine. > > > > This tool is called dnsfunnel, and is available here: > > https://skarnet.org/software/dnsfunnel/ > > > > It is also available in Alpine, in testing/ - it has been rotting there > > for months because I asked Alpine people to test it in situations > > involving actual buggy servers (my own infrastructure is not exposed > > to this problem), but my request apparently got lost in the void. > > > > If there is motivation to actually work around incorrect NXDOMAINs, > > it may be a good idea to bring this back to life and actually test > > dnsfunnel in real situations where it could be useful, so it can > > properly be packaged in Alpine and set up for users who need it. > > > > -- > > Laurent > >