Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Root (".") domain request does not drop even though it is on the disallowed domains list #6049

Closed
4 tasks done
cenk opened this issue Jul 27, 2023 · 2 comments
Closed
4 tasks done
Assignees
Milestone

Comments

@cenk
Copy link

cenk commented Jul 27, 2023

Prerequisites

Platform (OS and CPU architecture)

Linux, ARMv6

Installation

GitHub releases or script from README

Setup

On one machine

AdGuard Home version

v0.108.0-a.633+5f8fa006

Action

dietpi@ulasdietpi:~$ dig @10.0.0.15 .
; <<>> DiG 9.16.42-Raspbian <<>> @10.0.0.15 .
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62964
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;.                              IN      A
;; AUTHORITY SECTION:
.                       8512    IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2023072700 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 10.0.0.15#53(10.0.0.15)
;; WHEN: Thu Jul 27 16:06:35 +03 2023
;; MSG SIZE  rcvd: 103

Expected result

Drop request.

Actual result

Resolving disallowed root (".") domain.

Additional information and/or screenshots

IMG_20230727_161059

Root (".") domain is resolving but others dropping.

@cenk cenk changed the title Root (".") domain resolving even though it is on the disallowed domains list Root (".") domain does not drop even though it is on the disallowed domains list Jul 27, 2023
@cenk cenk changed the title Root (".") domain does not drop even though it is on the disallowed domains list Root (".") domain request does not drop even though it is on the disallowed domains list Jul 27, 2023
@ainar-g ainar-g self-assigned this Jul 27, 2023
@ainar-g ainar-g added this to the v0.107.36 milestone Jul 27, 2023
adguard pushed a commit that referenced this issue Jul 27, 2023
Updates #6049.

Squashed commit of the following:

commit 288a486
Author: Ainar Garipov <A.Garipov@AdGuard.COM>
Date:   Thu Jul 27 20:59:14 2023 +0300

    dnsforward: fix blocking of ns root
@ainar-g
Copy link
Contributor

ainar-g commented Jul 27, 2023

Thanks for the report. Please try version v0.108.0-a.635+79306cb4 or newer on the Edge channel. Note that you need to use the |.^ AdBlock-style rule.

@cenk
Copy link
Author

cenk commented Jul 27, 2023

Yes. Works with |.^ on v0.108.0-a.635+79306cb4.
Thanks.

dietpi@ulasdietpi:~$ dig @10.0.0.15 .
; <<>> DiG 9.16.42-Raspbian <<>> @10.0.0.15 .
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

@ainar-g ainar-g closed this as completed Jul 28, 2023
@ainar-g ainar-g modified the milestones: v0.107.37, v0.107.36 Aug 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants