dns/server: blacklist rfc2606 domains in the resolver

handshake-org · Jan 27, 2021 · 8fb70df · 8fb70df
1 parent d304ff4
commit 8fb70df
Showing 1 changed file with 16 additions and 1 deletion.
diff --git a/lib/dns/server.js b/lib/dns/server.js
@@ -51,6 +51,20 @@ const TYPE_MAP = Buffer.from('000722000000000380', 'hex');
 const RES_OPT = { inet6: false, tcp: true };
 const CACHE_TTL = 30 * 60 * 1000;
 
+// reference: https://tools.ietf.org/id/draft-chapin-rfc2606bis-00.html#registry
+const rfc2606 = [
+  'corp',
+  'domain',
+  'example',
+  'home',
+  'host',
+  'invalid',
+  'lan',
+  'local',
+  'localdomain',
+  'localhost',
+  'test'
+];
 const blacklist = new Set([
   'bit', // Namecoin
   'eth', // ENS
@@ -59,7 +73,8 @@ const blacklist = new Set([
   'i2p', // Invisible Internet Project
   'onion', // Tor
   'tor', // OnioNS
-  'zkey' // GNS
+  'zkey', // GNS
+  ...rfc2606
 ]);
 
 /**