Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Exception rule from the SDN filter does not work #460

Closed
ameshkov opened this issue Nov 18, 2018 · 3 comments
Closed

Exception rule from the SDN filter does not work #460

ameshkov opened this issue Nov 18, 2018 · 3 comments
Assignees
Milestone

Comments

@ameshkov
Copy link
Member

This rule should prevent blocking googleadapis.l.google.com (which is a CNAME for fonts.googleapis.com), but for some reason, it does not work:
@@||googleadapis.l.google.com^|

@hmage
Copy link
Contributor

hmage commented Nov 23, 2018

Correct rule is @@||googleadapis.l.google.com^, without the | in the end.

@ameshkov
Copy link
Member Author

Both are correct

@a-zazell
Copy link

Request from Internet host to NS 176.103.130.130:

:~$ host fonts.googleapis.com 176.103.130.130
Using domain server:
Name: 176.103.130.130
Address: 176.103.130.130#53
Aliases:

fonts.googleapis.com is an alias for googleadapis.l.google.com.
googleadapis.l.google.com has address 172.217.17.106
Host googleadapis.l.google.com not found: 3(NXDOMAIN)
Host googleadapis.l.google.com not found: 3(NXDOMAIN)

but Request for an googleadapis.l.google.com get:

:~$ host googleadapis.l.google.com 176.103.130.130
Using domain server:
Name: 176.103.130.130
Address: 176.103.130.130#53
Aliases:

Host googleadapis.l.google.com not found: 3(NXDOMAIN)

tcpdump:

IP 80.211.173.176.41922 > 176.103.130.130.53: 42379+ A? fonts.googleapis.com. (38)
IP 176.103.130.130.53 > 80.211.173.176.41922: 42379 2/0/0 CNAME googleadapis.l.google.com., A 172.217.17.106 (138)
IP 80.211.173.176.47154 > 176.103.130.130.53: 55875+ AAAA? googleadapis.l.google.com. (43)
IP 176.103.130.130.53 > 80.211.173.176.47154: 55875 NXDomain* 0/1/0 (177)
IP 176.103.130.130.53 > 80.211.173.176.47154: 55875 NXDomain- 0/0/0 (43)

and

IP 80.211.173.176.34344 > 176.103.130.130.53: 3001+ MX? googleadapis.l.google.com. (43)
IP 176.103.130.130.53 > 80.211.173.176.34344: 3001 NXDomain* 0/1/0 (177)
IP 176.103.130.130.53 > 80.211.173.176.34344: 3001 NXDomain- 0/0/0 (43)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants