1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
pdnslog("pdns-recursor starting!", pdns.loglevels.Info)
function endswith(s, send)
return #s >= #send and s:find(send, #s-#send+1, true) and true or false
end
function preresolve ( remoteip, domain, qtype )
print ("prequery handler called for: ", remoteip, "local: ", getlocaladdress(), domain, qtype)
pdnslog("a test message.. received query from "..remoteip.." on "..getlocaladdress(), pdns.loglevels.Info);
if endswith(domain, "f.f.7.7.b.1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa.")
then
print("This is our faked AAAA record in reverse")
return "getFakePTRRecords", domain, "fe80::21b::77ff:0:0"
end
if domain == "www.followme.com."
then
print ("Need to CNAME www.followme.com to www.powerdns.com")
return "followCNAMERecords", 0, {{qtype=pdns.CNAME, content="www.powerdns.com"}}
end
if domain == "www.donotanswer.org."
then
print("we won't answer a query for donotanswer.org")
return pdns.DROP, {}
end
if domain == "www.donotcache.org."
then
print("making sure www.donotcache.org will never end up in the cache", pdns.loglevels.Debug)
setvariable()
return pdns.PASS, {}
end
if domain == "www.powerdns.org."
then
ret={}
ret[1]= {qtype=pdns.A, content="85.17.220.215", ttl=86400}
print "dealing!"
return 0, ret
elseif domain == "www.baddomain.com."
then
print "dealing - faking nx"
return pdns.NXDOMAIN, {}
elseif domain == "echo."
then
print "dealing with echo!"
return 0, {{qtype=pdns.A, content=remoteip}}
elseif domain == "echo6."
then
print "dealing with echo6!"
return 0, {{qtype=pdns.AAAA, content=remoteip}}
else
print "not dealing!"
return pdns.PASS, {}
end
end
function nxdomain ( remoteip, domain, qtype )
print ("nxhandler called for: ", remoteip, getlocaladdress(), domain, qtype, pdns.AAAA)
if qtype ~= pdns.A then
pdnslog("Only A records", pdns.loglevels.Error)
return pdns.PASS, {}
end -- only A records
if not string.find(domain, "^www%.") then
pdnslog("Only strings that start with www.", pdns.loglevels.Error)
return pdns.PASS, {}
end -- only things that start with www.
setvariable()
if matchnetmask(remoteip, {"127.0.0.1/32", "10.1.0.0/16"})
then
print "dealing"
ret={}
ret[1]={qtype=pdns.CNAME, content="www.webserver.com", ttl=3602}
ret[2]={qname="www.webserver.com", qtype=pdns.A, content="1.2.3.4", ttl=3602}
ret[3]={qname="webserver.com", qtype=pdns.NS, content="ns1.webserver.com", place=2}
-- ret[1]={15, "25 ds9a.nl", 3602}
return 0, ret
else
print "not dealing"
return pdns.PASS, ret
end
end
function axfrfilter(remoteip, zone, qname, qtype, ttl, priority, content)
if qtype ~= pdns.SOA or zone ~= "secured-by-gost.org"
then
ret = {}
return pdns.PASS, ret
end
print "got soa!"
ret={}
ret[1]={qname=qname, qtype=qtype, content=content, ttl=ttl}
ret[2]={qname=qname, qtype=pdns.TXT, content=os.date("Retrieved at %Y-%m-%d %H:%M"), ttl=ttl}
return 0, ret
end
function nodata ( remoteip, domain, qtype, records )
print ("nodata called for: ", remoteip, getlocaladdress(), domain, qtype)
if qtype ~= pdns.AAAA then return pdns.PASS, {} end -- only AAAA records
setvariable()
return "getFakeAAAARecords", domain, "fe80::21b:77ff:0:0"
end
-- records contains the entire packet, ready for your modifying pleasure
function postresolve ( remoteip, domain, qtype, records, origrcode )
print ("postresolve called for: ", remoteip, getlocaladdress(), domain, qtype, origrcode, pdns.loglevels.Info)
for key,val in ipairs(records)
do
if(val.content == '173.201.188.46' and val.qtype == pdns.A)
then
val.content = '127.0.0.1'
setvariable()
end
if val.qtype == pdns.A and matchnetmask(remoteip, "192.168.0.0/16") and matchnetmask(val.content, "85.17.219.0/24")
then
val.content = string.gsub(val.content, "^85.17.219.", "192.168.219.", 1)
setvariable()
end
-- print(val.content)
end
return origrcode, records
end
function prequery ( dnspacket )
-- pdnslog ("prequery called for ".. tostring(dnspacket) )
qname, qtype = dnspacket:getQuestion()
pdnslog ("q: ".. qname.." "..qtype)
if qtype == pdns.A and qname == "www.domain.com"
then
pdnslog ("calling dnspacket:setRcode", pdns.loglevels.Debug)
dnspacket:setRcode(pdns.NXDOMAIN)
pdnslog ("called dnspacket:setRcode", pdns.loglevels.Debug)
pdnslog ("adding records", pdns.loglevels.Debug)
ret = {}
ret[1] = {qname=qname, qtype=qtype, content="1.2.3.4", place=2}
ret[2] = {qname=qname, qtype=pdns.TXT, content=os.date("Retrieved at %Y-%m-%d %H:%M"), ttl=ttl}
dnspacket:addRecords(ret)
pdnslog ("returning true", pdns.loglevels.Debug)
return true
end
pdnslog ("returning false")
return false
end
|
