Re: [NSE] - dns.query() return types

[jah <jah () zadkiel plus com>]

On 22/07/2009 04:25, David Fifield wrote:
> What is the MX change that you mentioned?
>   
Code in the answerFetcher for MX records tries to index the MX table of
a dec.answer with the field 'ip' when all MX records present are
requested to be returned (as opposed to returning just the first).  The
'ip' field exists not in the MX table, but in dec.add (additional records).
Additionally, when selecting an IP address to be associated with an MX
record, the first MX record appearing in the DNS response is joined with
the IP address of the first additional record found - there is no
checking that the MX host name and IP address belong together so there's
the possibility of returning an incorrect IP address with an MX host name.
I've fixed that and also extracted the maximum information from the
additional records found in an MX record by appending every matching IP
address to the MX host name - e.g.

pref:hostname:IP(s)
10:mx.example.com:192.168.1.1:192.168.1.2

jah

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org