On 2022-01-01 Aaron Jones <me-0htfseinixjqy5hu7u7...@public.gmane.org> wrote: > On 01/01/2022 05:30, Hongyi Zhao wrote: >> If I enable the filterwin2k option, the dig command will fail to query >> SOA, say, for the following ones:
>> $ dig +short SOA bp.hyddns.xyz >> www.hyddns.xyz. >> $ dig +short SOA hyddns.xyz >> donald.dnspod.net. freednsadmin.dnspod.com. 1640510300 3600 180 1209600 180 >> When filterwin2k option is enabled, nothing will be returned by the >> above commands. [...] > This is working as designed. From the manpage [1]: > -f, --filterwin2k > Later versions of windows make periodic DNS requests which don't get > sensible answers from the public DNS and can cause problems by > triggering dial-on-demand links. This flag turns on an option to filter > such requests. The requests blocked are for records of types SOA and > SRV, and type ANY where the requested name has underscores, to catch > LDAP requests. [...] The manpage says "The requests blocked are for records [...] where the requested name has underscores". The test-query shown above is not for a name with underscores. So, afaict not working as documented. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' _______________________________________________ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk https://lists.thekelleys.org.uk/cgi-bin/mailman/listinfo/dnsmasq-discuss