[SSSD] [PATCH] Filter out IP addresses inappropriate for DNS forward records

Jan Cholasta jcholast at redhat.com
Mon Jul 11 14:57:45 UTC 2011


On 5.7.2011 00:33, Jakub Hrozek wrote:
> When used with the ipa_dyndns_iface option, the dynamic DNS code would
> blindly put in any addresses the interface has. I think we should filter
> addresses such as multicast, loopback and IPv6 link-local -- they don't
> belong to DNS.
>
> Adding Honza to CC list as he's probably got the most experience with
> address formats and was solving a similar issue on the server side. Are
> there any other I should filter out?

You should also filter out IPv4 link-local (169.254.0.0/16) and 
broadcast addresses and IPv4/IPv6 network and reserved addresses (see 
python-netaddr source for a list). BTW IPv4 loopback is the whole 
127.0.0.0/8 net, you might also want to check that.

Honza

-- 
Jan Cholasta



More information about the sssd-devel mailing list