PDA

View Full Version : Special domainnames


daveyw
09-29-2008, 12:25 AM
Hello,

We are using DirectAdmin and are very happy with it. But I guess it would be nice that if a user is trying to add a domainname like "später.tld" he will say "Sorry can't add that domainname".

Now it just accept it, and a few minutes later BIND is down, due to the "ä".

So I think it would be nice if there is a protection for that when people are trying to add a domainname.
sce
09-29-2008, 05:17 AM
Hm... That's a nice "bug". Maybe they will fix it ;) It's nice to know that thought.
morfargekko
09-29-2008, 05:46 AM
Hello, why not use Punycode to get the domain up and running.
http://www.afilias.info/cgi-bin/convert_punycode.cgi

I an not sure that BIND can handel IDN yet, correct me if I'm wrong.
daveyw
09-29-2008, 06:09 AM
Hello, why not use Punycode to get the domain up and running.
http://www.afilias.info/cgi-bin/convert_punycode.cgi

I an not sure that BIND can handel IDN yet, correct me if I'm wrong.I think you don't understand me.

When you add a domain with directadmin you can use "ä" "é" etc in the domainname, and after few seconds NAMED/BIND will try to update the DNS entries, but he will fail and NAMED/BIND will crash. This due to the special characters in the domainname.

So I think it would be nice if there is a protection for special characters when someone is trying to add a domainname.
morfargekko
09-29-2008, 06:30 AM
Sorry, I missunderstood completly, and Yes You are totaly right it would be nice if there was such protection in DA.
DirectAdmin Support
09-29-2008, 09:53 PM
Hello,

What version of bind are you using? It should be able to handle the character ...

What error message does bind/named show in the /var/log/messages file?

The characters were allowed so that people could actually use those domain types, with some manual punycode modifications to apache.

I added that domain as a test and bind didn't crash.. so something is different on your box from our test boxes.

John
daveyw
09-30-2008, 01:16 AM
It whas a few weeks ago, so I don't have any logs anymore.
But the BIND version we have running on that box: Named 9.4.1.

I will try it now on my box, and see what's happening. On a box with Named 9.2.4 it works, but with a box on 9.4.1 it doesn't work here.

I tested it again and here is the log


Sep 30 10:05:07 server2 named[13020]: dns_rdata_fromtext: /var/named/tëstdömáïn.com.db:8: near 'root.tëstdömáïn.com.': bad name (check-names)
Sep 30 10:05:07 server2 named[13020]: zone t\235std\246m\225\239n.com/IN: loading from master file /var/named/tëstdömáïn.com.db failed: bad name (check-names)
daveyw
10-08-2008, 05:01 AM
Any news about this?
floyd
10-08-2008, 10:25 AM
What OS are you using?
daveyw
10-08-2008, 02:33 PM
On that system where we have Named 9.4.1 with the problem we are using


Fedora Core release 4 (Stentz)

On the system where we have Named 9.2.4 we have


CentOS release 4.6 (Final)
floyd
10-08-2008, 02:37 PM
So it looks like you have upgraded Bind yourself. If 9.2.4 works then I would back down to that.