cqrenet/relay
5
0
Fork 0
mirror of https://github.com/chatmail/relay.git synced 2026-08-10 18:40:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: ignore CNAME records when resolving TXT records (#177)

Browse Source
This commit is contained in:
l
2026-06-06 07:55:18 +00:00
committed by GitHub
parent 939e5367c9
commit fb5a25939c
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
filtermail/src/dkim_verifier.rs
+6
View File
@@ -95,6 +95,12 @@ impl LookupTxt for CachedResolver {
lookup lookup
.answers() .answers()
.iter() .iter()
.filter(|record| {
// Select only TXT records.
// When resolving TXT query, CNAMEs are also returned as answers.
// We want to filter out CNAMEs first.
matches!(record.data, hickory_resolver::proto::rr::RData::TXT(_))
})
// We don't check all records, as this can be a DoS attack vector. // We don't check all records, as this can be a DoS attack vector.
// In theory, selector domains should only have a single TXT record. // In theory, selector domains should only have a single TXT record.
// In practice, we check at most 3, just in case of weird configuration. // In practice, we check at most 3, just in case of weird configuration.