Bug#343140: resolver uses the search list before other address families
Hi,
I think that this bug (#343140) could also be a security problem.
Indeed, lots of IPv6 DNS queries related to internal hosts are then blindly
forwarded to the root servers or to bind's "forwarders". So someone on the
Internet will be able to discover your LAN hosts.
To stop this information leak there could be a few solutions:
- tell the libc6 not to try IPv6 DNS queries, or try IPv4 before IPv6
(resolv.conf option ?)
- or configure bind to filter IPv6 queries
- or finding a nice iptables rule which stops IPv6 queries.
Cheers,
Ludovic.
--
http://www.palmopensource.com - The PalmOS open source portal
http://www.drolez.com - Personal site
Reply to: