an empty allow-from in the powerdns recursor conf seems to cause a signal 11 and
corefile in 4.6.0, but works in 4.5.9 and earlier.   adding 127.0.0.1 to the allow-from stops
the signal 11s.

freebsd 13/amd64

% ./configure --sysconfdir=/usr/local/etc/pdns --with-libsodium=no --without-net-snmp --without-systemd
 
pdns_recursor[98111]: PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
pdns_recursor[98111]: Enabling IPv4 transport for outgoing queries
pdns_recursor[98111]: NOT using IPv6 for outgoing queries - add an IPv6 address (like '::') to query-local-address to enable
kernel: pid 98111 (pdns_recursor), jid 0, uid 0: exited on signal 11 (core dumped)
 
 
the 'WARNING: Allowing queries from all IP addresses - this can be a security risk!' message is not printed.
 
access controls are via packet filter.
 
 
gdp shows the parseacl function
 
 
/usr/local/bin/gdb /usr/local/sbin/pdns_recursor ./pdns_recursor.core
Core was generated by `/usr/local/sbin/pdns_recursor --daemon=no --write-pid=no'.
Program terminated with signal SIGSEGV, Segmentation fault.
Address not mapped to object.
#0  parseACLs () at pdns_recursor.cc:4847
4847      if(allowFrom->size() == 0) {
(gdb)
~
 
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to