<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 01/01/2022 15:27, Andreas Metzler
wrote:<br>
</div>
<blockquote type="cite" cite="mid:YdByz5JlpiI7MAru@argenau.bebt.de">
<pre class="moz-quote-pre" wrap="">On 2022-01-01 Aaron Jones <a class="moz-txt-link-rfc2396E" href="mailto:me-0HtfSeinixJQY5hu7U7n2A@public.gmane.org"><me-0HtfSeinixJQY5hu7U7n2A@public.gmane.org></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 01/01/2022 05:30, Hongyi Zhao wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">If I enable the filterwin2k option, the dig command will fail to query
SOA, say, for the following ones:
</pre>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">$ dig +short SOA bp.hyddns.xyz
<a class="moz-txt-link-abbreviated" href="http://www.hyddns.xyz">www.hyddns.xyz</a>.
$ dig +short SOA hyddns.xyz
donald.dnspod.net. freednsadmin.dnspod.com. 1640510300 3600 180 1209600 180
</pre>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">When filterwin2k option is enabled, nothing will be returned by the
above commands.
</pre>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">[...]
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">This is working as designed. From the manpage [1]:
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">-f, --filterwin2k
Later versions of windows make periodic DNS requests which don't get
sensible answers from the public DNS and can cause problems by
triggering dial-on-demand links. This flag turns on an option to filter
such requests. The requests blocked are for records of types SOA and
SRV, and type ANY where the requested name has underscores, to catch
LDAP requests.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">[...]
The manpage says "The requests blocked are for records [...] where
the requested name has underscores". The test-query shown above is not
for a name with underscores. So, afaict not working as documented.
cu Andreas
</pre>
</blockquote>
<br>
I'm afraid you are misinterpreting the man page. Without the part
you elided, as quoted above, it specifies that blocking is for
**all** queries of type SOA and SRV, plus the subset of queries with
type=ANY that contain underscores.<br>
<br>
Regards,<br>
<br>
Geoff.<br>
<pre class="moz-signature" cols="72">--
Geoff Back
What if we're all just characters in someone's nightmares?</pre>
</body>
</html>