Le Jeudi 8 Septembre 2005 15:28, Florian Weimer a écrit :
> Package: ike-scan
> Version: 1.7-3
> Severity: important
>
> Upon start, the software queries a special DNS domain:
>
> 15:26:07.600200 IP 212.9.189.171.33060 > 212.9.189.162.53: 21631+ A?
> ike-scan-target.test.nta-monitor.com. (54) 15:26:08.065920 IP
> 212.9.189.162.53 > 212.9.189.171.33060: 21631 1/1/1 (126)
>
> Upstream probably uses this to track usage of the software.
>
> Such functionality has no place in a Debian package. At least it should
> be strictly opt-in.
After talking with upstream the offending line will be removed from the next
upload.
quoting from is mail the offending lines are :
"
The code concerned in ike-scan.c is:
if (!no_dns_flag)
hp = gethostbyname("ike-scan-target.test.nta-monitor.com");
"
In the future the upstream agreed to put a switch in configure to give to
the user the choice of desactivating this dns query.
In the mean time you can avoid those dns query with the -N switch, beware
that with this switch all dns request will be disabled.
Cheers
--
Benoit Mortier
CEO
www.opensides.be
