mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-05 00:55:24 +00:00
0680eb6f64
The ANS servers were not to written to handle NS queries at the QNAME resulting in gratuitious protocol errors that will break tests when NS requests are made for the QNAME.
286 lines
8.2 KiB
Python
Executable File
286 lines
8.2 KiB
Python
Executable File
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
from __future__ import print_function
|
|
import os
|
|
import sys
|
|
import signal
|
|
import socket
|
|
import select
|
|
from datetime import datetime, timedelta
|
|
import time
|
|
import functools
|
|
|
|
import dns, dns.message, dns.query, dns.flags
|
|
from dns.rdatatype import *
|
|
from dns.rdataclass import *
|
|
from dns.rcode import *
|
|
from dns.name import *
|
|
|
|
|
|
# Log query to file
|
|
def logquery(type, qname):
|
|
with open("qlog", "a") as f:
|
|
f.write("%s %s\n", type, qname)
|
|
|
|
|
|
def endswith(domain, labels):
|
|
return domain.endswith("." + labels) or domain == labels
|
|
|
|
|
|
############################################################################
|
|
# Respond to a DNS query.
|
|
# For good. it serves:
|
|
# zoop.boing.good. NS ns3.good.
|
|
# icky.ptang.zoop.boing.good. NS a.bit.longer.ns.name.good.
|
|
# it responds properly (with NODATA empty response) to non-empty terminals
|
|
#
|
|
# For slow. it works the same as for good., but each response is delayed by 400 milliseconds
|
|
#
|
|
# For bad. it works the same as for good., but returns NXDOMAIN to non-empty terminals
|
|
#
|
|
# For ugly. it works the same as for good., but returns garbage to non-empty terminals
|
|
#
|
|
# For stale. it serves:
|
|
# a.b.stale. IN TXT peekaboo (resolver did not do qname minimization)
|
|
############################################################################
|
|
def create_response(msg):
|
|
m = dns.message.from_wire(msg)
|
|
qname = m.question[0].name.to_text()
|
|
lqname = qname.lower()
|
|
labels = lqname.split(".")
|
|
suffix = ""
|
|
|
|
# get qtype
|
|
rrtype = m.question[0].rdtype
|
|
typename = dns.rdatatype.to_text(rrtype)
|
|
if typename == "A" or typename == "AAAA":
|
|
typename = "ADDR"
|
|
bad = False
|
|
ugly = False
|
|
slow = False
|
|
|
|
# log this query
|
|
with open("query.log", "a") as f:
|
|
f.write("%s %s\n" % (typename, lqname))
|
|
print("%s %s" % (typename, lqname), end=" ")
|
|
|
|
r = dns.message.make_response(m)
|
|
r.set_rcode(NOERROR)
|
|
|
|
ip6req = False
|
|
|
|
if endswith(lqname, "bad."):
|
|
bad = True
|
|
suffix = "bad."
|
|
lqname = lqname[:-4]
|
|
elif endswith(lqname, "ugly."):
|
|
ugly = True
|
|
suffix = "ugly."
|
|
lqname = lqname[:-5]
|
|
elif endswith(lqname, "good."):
|
|
suffix = "good."
|
|
lqname = lqname[:-5]
|
|
elif endswith(lqname, "slow."):
|
|
slow = True
|
|
suffix = "slow."
|
|
lqname = lqname[:-5]
|
|
elif endswith(lqname, "8.2.6.0.1.0.0.2.ip6.arpa."):
|
|
ip6req = True
|
|
elif endswith(lqname, "a.b.stale."):
|
|
if lqname == "a.b.stale.":
|
|
r.flags |= dns.flags.AA
|
|
if rrtype == TXT:
|
|
# Direct query.
|
|
r.answer.append(dns.rrset.from_text(lqname, 1, IN, TXT, "peekaboo"))
|
|
elif rrtype == NS:
|
|
# NS a.b.
|
|
r.answer.append(dns.rrset.from_text(lqname, 1, IN, NS, "ns.a.b.stale."))
|
|
r.additional.append(
|
|
dns.rrset.from_text("ns.a.b.stale.", 1, IN, A, "10.53.0.3")
|
|
)
|
|
elif rrtype == SOA:
|
|
# SOA a.b.
|
|
r.answer.append(
|
|
dns.rrset.from_text(
|
|
lqname, 1, IN, SOA, "a.b.stale. hostmaster.a.b.stale. 1 2 3 4 5"
|
|
)
|
|
)
|
|
else:
|
|
# NODATA.
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
lqname, 1, IN, SOA, "a.b.stale. hostmaster.a.b.stale. 1 2 3 4 5"
|
|
)
|
|
)
|
|
elif lqname == "ns.a.b.stale.":
|
|
r.flags |= dns.flags.AA
|
|
if rrtype == A:
|
|
r.answer.append(
|
|
dns.rrset.from_text("ns.a.b.stale.", 1, IN, A, "10.53.0.3")
|
|
)
|
|
else:
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
lqname, 1, IN, SOA, "a.b.stale. hostmaster.a.b.stale. 1 2 3 4 5"
|
|
)
|
|
)
|
|
else:
|
|
r.flags |= dns.flags.AA
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
lqname, 1, IN, SOA, "a.b.stale. hostmaster.a.b.stale. 1 2 3 4 5"
|
|
)
|
|
)
|
|
r.set_rcode(NXDOMAIN)
|
|
# NXDOMAIN.
|
|
return r
|
|
else:
|
|
r.set_rcode(REFUSED)
|
|
return r
|
|
|
|
# Good/bad differs only in how we treat non-empty terminals
|
|
if lqname == "zoop.boing." and rrtype == NS:
|
|
r.answer.append(
|
|
dns.rrset.from_text(lqname + suffix, 1, IN, NS, "ns3." + suffix)
|
|
)
|
|
r.flags |= dns.flags.AA
|
|
elif endswith(lqname, "icky.ptang.zoop.boing."):
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
"icky.ptang.zoop.boing." + suffix,
|
|
1,
|
|
IN,
|
|
NS,
|
|
"a.bit.longer.ns.name." + suffix,
|
|
)
|
|
)
|
|
elif endswith("icky.ptang.zoop.boing.", lqname):
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
"zoop.boing." + suffix,
|
|
1,
|
|
IN,
|
|
SOA,
|
|
"ns3." + suffix + " hostmaster.arpa. 2018050100 1 1 1 1",
|
|
)
|
|
)
|
|
if bad:
|
|
r.set_rcode(NXDOMAIN)
|
|
if ugly:
|
|
r.set_rcode(FORMERR)
|
|
elif endswith(lqname, "zoop.boing."):
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
"zoop.boing." + suffix,
|
|
1,
|
|
IN,
|
|
SOA,
|
|
"ns3." + suffix + " hostmaster.arpa. 2018050100 1 1 1 1",
|
|
)
|
|
)
|
|
r.set_rcode(NXDOMAIN)
|
|
elif ip6req:
|
|
r.authority.append(
|
|
dns.rrset.from_text(
|
|
"1.1.1.1.8.2.6.0.1.0.0.2.ip6.arpa.", 60, IN, NS, "ns4.good."
|
|
)
|
|
)
|
|
r.additional.append(dns.rrset.from_text("ns4.good.", 60, IN, A, "10.53.0.4"))
|
|
else:
|
|
r.set_rcode(REFUSED)
|
|
|
|
if slow:
|
|
time.sleep(0.4)
|
|
return r
|
|
|
|
|
|
def sigterm(signum, frame):
|
|
print("Shutting down now...")
|
|
os.remove("ans.pid")
|
|
running = False
|
|
sys.exit(0)
|
|
|
|
|
|
############################################################################
|
|
# Main
|
|
#
|
|
# Set up responder and control channel, open the pid file, and start
|
|
# the main loop, listening for queries on the query channel or commands
|
|
# on the control channel and acting on them.
|
|
############################################################################
|
|
ip4 = "10.53.0.3"
|
|
ip6 = "fd92:7065:b8e:ffff::3"
|
|
|
|
try:
|
|
port = int(os.environ["PORT"])
|
|
except:
|
|
port = 5300
|
|
|
|
query4_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|
query4_socket.bind((ip4, port))
|
|
|
|
havev6 = True
|
|
try:
|
|
query6_socket = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM)
|
|
try:
|
|
query6_socket.bind((ip6, port))
|
|
except:
|
|
query6_socket.close()
|
|
havev6 = False
|
|
except:
|
|
havev6 = False
|
|
|
|
signal.signal(signal.SIGTERM, sigterm)
|
|
|
|
f = open("ans.pid", "w")
|
|
pid = os.getpid()
|
|
print(pid, file=f)
|
|
f.close()
|
|
|
|
running = True
|
|
|
|
print("Listening on %s port %d" % (ip4, port))
|
|
if havev6:
|
|
print("Listening on %s port %d" % (ip6, port))
|
|
print("Ctrl-c to quit")
|
|
|
|
if havev6:
|
|
input = [query4_socket, query6_socket]
|
|
else:
|
|
input = [query4_socket]
|
|
|
|
while running:
|
|
try:
|
|
inputready, outputready, exceptready = select.select(input, [], [])
|
|
except select.error as e:
|
|
break
|
|
except socket.error as e:
|
|
break
|
|
except KeyboardInterrupt:
|
|
break
|
|
|
|
for s in inputready:
|
|
if s == query4_socket or s == query6_socket:
|
|
print(
|
|
"Query received on %s" % (ip4 if s == query4_socket else ip6), end=" "
|
|
)
|
|
# Handle incoming queries
|
|
msg = s.recvfrom(65535)
|
|
rsp = create_response(msg[0])
|
|
if rsp:
|
|
print(dns.rcode.to_text(rsp.rcode()))
|
|
s.sendto(rsp.to_wire(), msg[1])
|
|
else:
|
|
print("NO RESPONSE")
|
|
if not running:
|
|
break
|