[ previous ] [ next ] [ threads ]
 
 From:  Andrew White <andywhite at gmail dot com>
 To:  Scott Ullrich <sullrich at gmail dot com>
 Cc:  Chris Buechler <cbuechler at gmail dot com>, m0n0wall dash dev at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall-dev] Re: [m0n0wall-commits] r397 - in branches/freebsd6: . phpconf/inc webgui
 Date:  Wed, 25 Aug 2010 10:27:58 +0100
I looked at extending domain overrides into dnsmasq exclusions for rebind
checks, and as indicated, this was added in 2.53 and ISC lease file
inclusion was removed in 2.46 of dnsmasq , so there there would have to be a
drop of the ISC inclusion or some non trivial patching of dnsmasq.

When you say

On some things we warn the user that it might be a dns rebind and on the
other checks
we downright prevent the page from rendering with an error.


Can you give me more detail, is this something we could port to m0n0wall
easily ?

On Wed, Jul 21, 2010 at 7:15 PM, Scott Ullrich <sullrich at gmail dot com> wrote:

> On Wed, Jul 21, 2010 at 4:20 AM, Andrew White <andywhite at gmail dot com> wrote:
> > was this introduced post 1.2.3-RC3 , which is listed as the version
> effected
> > ?
>
>
> Yep, we just committed our changes to 1.2.3 this week.   2.0 has had
> commits off and on for a couple weeks now.
>
> We do a lot more checking in 2.0 than we do in 1.2.3.   On some things
> we warn the user that it might be a dns rebind and on the other checks
> we downright prevent the page from rendering with an error.
>
> Scott
>