From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	HTML_MESSAGE,MAILING_LIST_MULTI,T_SCC_BODY_TEXT_LINE autolearn=ham
	autolearn_force=no version=3.4.4
Received: (qmail 25749 invoked from network); 27 Jun 2023 14:13:09 -0000
Received: from second.openwall.net (193.110.157.125)
  by inbox.vuxu.org with ESMTPUTF8; 27 Jun 2023 14:13:09 -0000
Received: (qmail 3520 invoked by uid 550); 27 Jun 2023 14:13:04 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
List-ID: <musl.lists.openwall.com>
Reply-To: musl@lists.openwall.com
Received: (qmail 3481 invoked from network); 27 Jun 2023 14:13:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=coosto.com; s=google2; t=1687875172; x=1690467172;
        h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
         :date:message-id:reply-to;
        bh=cwGGnKMV8c4ziCCxLPPPYy4RXaQ3oaXmam6vo2gAh84=;
        b=dT/TnDbKNHKbBaywRW0FzqL9XbX+CD+hR9+NQuKGr4Gbxj/X54t8TQDxLh5M4T+6iN
         GH4ky7JrKUEvZQdqMDE06SaWLBWTBulbPD+M7dBoH0ld529clamuzvLdD4J4pSDObmy8
         5RiAAYsIVwt5ULFTAg1ZhQZKgFd6S9JXRKohTIaEn4wc78GWluk1uT0asc0cq7LI1Isb
         USBNeBR5iCoDjsfz+3WGHXXGJgI2jfpF+T57ZGMByuOsipPmwB6yA7zdt58BqdGyCtby
         p0CRsjnOoNFUfnmvKAipJIOoNxtkM2ck61L51bgaTVmG5txnZJFY7YCs1jq2r9OvDNmV
         H6Lg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20221208; t=1687875172; x=1690467172;
        h=to:subject:message-id:date:from:mime-version:x-gm-message-state
         :from:to:cc:subject:date:message-id:reply-to;
        bh=cwGGnKMV8c4ziCCxLPPPYy4RXaQ3oaXmam6vo2gAh84=;
        b=gJUh19j9dNYpkWtLJvPcnpJYmTXPmCvPuoMkcxTdgQ6UzaSidASy53KWjBA1XJ1ArA
         slh4SKQ7XhI4us1CiuZqCQK4th7M75PaUY6AoOkH+osHIkbYqx7rv1C9nawIhkDIwXiv
         mF5IJNumIpCJGXhDBFVjGELXGNaAoRhrf8GE8EEbDGinN0lcxJ5wK1nng84fSGkm+kc1
         d0qsod2tsqqc91hQCb8XV0Gky4xtxLf7dQg/DPAkQK690e2WGo0S5Dkcz/0unGB5K/gJ
         c6dMkNbirPAC6Em7r8cciI7ZcXQ7//ccLI94UqjPaS4gGgFyBhvdkKNRFO3fZ6cH/0JY
         U4ug==
X-Gm-Message-State: AC+VfDxDk+Z0kJ+rFzHh8pqW3XjePhArBUgeTWVkt/2wgVG5o+b2Kzgw
	SR7UhjCwjfrCJxBEagSXlUdlLr3h9/ac67ya6xcQECRQjWBQK23x
X-Google-Smtp-Source: ACHHUZ7GUgvyZLrMVk8gcw9t6E7muk/tX/NCrOXdQxbtC5qOZOHAnxsq/esXnnIsX2BWijR0w5jkoFY9k2qK0LAQezo=
X-Received: by 2002:a2e:9e4f:0:b0:2b1:b4e9:4c3 with SMTP id
 g15-20020a2e9e4f000000b002b1b4e904c3mr21935881ljk.2.1687875172019; Tue, 27
 Jun 2023 07:12:52 -0700 (PDT)
Mime-Version: 1.0 (Mimestream 1.0.3)
From: Rob de Wit <rob.dewit@coosto.com>
Date: Tue, 27 Jun 2023 07:12:51 -0700
Message-ID: <CAPBMcbtvCz6OKR+iQi55-4_nLEzMBJLKTNf6PHME2xCvZ=v6zA@mail.gmail.com>
To: musl@lists.openwall.com
Content-Type: multipart/alternative; boundary="0000000000000dc4f305ff1d1083"
Subject: [musl] Clarification on the NOERROR resolving choices

--0000000000000dc4f305ff1d1083
Content-Type: text/plain; charset="UTF-8"

Hi

I ran into some issues lately and found this in the mailing list archive
https://www.openwall.com/lists/musl/2019/05/30/3

The problem I had was with Alpine containers that suddenly failed resolving
any hostname. I ended up tracing it back to a change I made in a domain
that was in the "search" fiels in /etc/resolv.conf. The change was a
wildcard TXT field. So when the resolver was resolving
<host>.<tld>.<searchdomain>.<tld> it received an NOERROR reply. This
indicates there is a record but just not a "A" or "AAAA" one. Perfectly
valid as far as I know, but the resolver then quits the search.

Maybe someone here can clarify this behaviour, because from the referred
thread in the mailing list I get that this is caused by malfunctioning DNS,
but in my case I don't think it is.

Right now our options are:

   - adjusting ndots in resolv.conf - but we actually use the search path
   - adding a dot at the end - this can only work if we know up front we
   don't want the search path
   - replacing Alpine with some libc-based image - this involves many
   changes
   - not to do it again (adding wildcard for something other than A or AAAA
   records)



Met vriendelijke groet / Kind regards

*Rob de Wit*

--0000000000000dc4f305ff1d1083
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<html><body><div dir=3D"ltr">Hi<div><br></div><div dir=3D"ltr">I ran into s=
ome issues lately and found this in the mailing list archive=C2=A0<a href=
=3D"https://www.openwall.com/lists/musl/2019/05/30/3">https://www.openwall.=
com/lists/musl/2019/05/30/3</a></div><div dir=3D"ltr"><br></div><div dir=3D=
"ltr">The problem I had was with Alpine containers that suddenly failed res=
olving any hostname. I ended up tracing it back to a change I made in a dom=
ain that was in the &quot;search&quot; fiels in /etc/resolv.conf. The chang=
e was a wildcard TXT field. So when the resolver was resolving &lt;host&gt;=
.&lt;tld&gt;.&lt;searchdomain&gt;.&lt;tld&gt; it received an NOERROR reply.=
 This indicates there is a record but just not a &quot;A&quot; or &quot;AAA=
A&quot; one. Perfectly valid as far as I know, but the resolver then quits =
the search.</div><div dir=3D"ltr"><br></div><div dir=3D"ltr">Maybe someone =
here can clarify this behaviour, because from the referred thread in the ma=
iling list I get that this is caused by malfunctioning DNS, but in my case =
I don&#39;t think it is.<br></div><div dir=3D"ltr"><br></div><div dir=3D"lt=
r">Right now our options are:</div><div dir=3D"ltr"><ul style=3D"margin:0px=
;list-style-type:&quot;\002013   &quot;" dir=3D"ltr"><li>adjusting ndots in=
 resolv.conf - but we actually use the search path<br></li><li>adding a dot=
 at the end - this can only work if we know up front we don&#39;t want the =
search path</li><li>replacing Alpine with some libc-based image - this invo=
lves many changes</li><li>not to do it again (adding wildcard for something=
 other than A or AAAA records)</li></ul><div><br></div></div><div dir=3D"lt=
r"><div><br></div><div><div><div class=3D"gmail_signature" data-smartmail=
=3D"gmail_signature"><div dir=3D"ltr"><table width=3D"380" cellspacing=3D"0=
" cellpadding=3D"0" border=3D"0"><tbody><tr><td colspan=3D"8" style=3D"padd=
ing-bottom:1.5em!important">Met vriendelijke groet / Kind regards <br><br>
<strong style=3D"font-family:&#39;Open Sans&#39;,sans-serif!important">Rob =
de Wit</strong>=C2=A0</td></tr></tbody></table></div></div></div></div></di=
v></div></body></html>

--0000000000000dc4f305ff1d1083--