starred/hickory-dns

Fork 0

mirror of https://github.com/hickory-dns/hickory-dns.git synced 2026-04-25 11:15:54 +03:00

[GH-ISSUE #1734] disallowed_by_std3_ascii_rules problem #754

New issue

Closed

opened 2026-03-16 00:08:27 +03:00 by kerem · 4 comments

kerem commented

2026-03-16 00:08:27 +03:00

Owner

Originally created by @RickSKy on GitHub (Jul 8, 2022).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1734

Describe the bug

let mut response = resolver.ipv4_lookup("http://statototalitario.com/stub/index.php").await.unwrap();
    println!("{:#?}", response);

the program do not send the query packet, and return err like:

 thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: ResolveError { kind: Proto(ProtoError { kind: Msg("Label contains invalid characters: Err(Errors { invalid_mapping, disallowed_by_std3_ascii_rules })") }) }'

but on any os platform, we use nslookup:

nslookup http://statototalitario.com/stub/index.php
Server:		127.0.0.53
Address:	127.0.0.53#53

** server can't find http://statototalitario.com/stub/index.php: NXDOMAIN

it send the query packet, and return NXDOMAIN.
why need this unnormal query? just for some security verify purpose .

Expected behavior
send the query packet,and return NXDOMAIN result

System:

OS: ALL OS

Version:
Crate: trust-dns-proto
Version: 0.21

Originally created by @RickSKy on GitHub (Jul 8, 2022). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1734 **Describe the bug** ```rust let mut response = resolver.ipv4_lookup("http://statototalitario.com/stub/index.php").await.unwrap(); println!("{:#?}", response); ``` the program do not send the query packet, and return err like: ```bash thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: ResolveError { kind: Proto(ProtoError { kind: Msg("Label contains invalid characters: Err(Errors { invalid_mapping, disallowed_by_std3_ascii_rules })") }) }' ``` but on any os platform, we use nslookup: ```bash nslookup http://statototalitario.com/stub/index.php Server: 127.0.0.53 Address: 127.0.0.53#53 ** server can't find http://statototalitario.com/stub/index.php: NXDOMAIN ``` it send the query packet, and return NXDOMAIN. why need this unnormal query? just for some security verify purpose . **Expected behavior** send the query packet,and return NXDOMAIN result **System:** - OS: ALL OS **Version:** Crate: trust-dns-proto Version: 0.21

kerem closed this issue

2026-03-16 00:08:32 +03:00

kerem commented

2026-03-16 00:08:38 +03:00

Author

Owner

@bluejekyll commented on GitHub (Jul 11, 2022):

I'm not sure I understand what you're attempting to do here. The lookup methods expect a domain name as the input, not a full URL. For example instead of http://statototalitario.com/stub/index.php you'd want to pass in statototalitario.com.

To extract this information, you could use this method from the url crate to get the domain: https://docs.rs/url/2.2.2/url/struct.Url.html#method.domain

@bluejekyll commented on GitHub (Jul 11, 2022): I'm not sure I understand what you're attempting to do here. The lookup methods expect a domain name as the input, not a full URL. For example instead of `http://statototalitario.com/stub/index.php` you'd want to pass in `statototalitario.com`. To extract this information, you could use this method from the `url` crate to get the domain: https://docs.rs/url/2.2.2/url/struct.Url.html#method.domain

kerem commented

2026-03-16 00:08:43 +03:00

Author

Owner

@RickSKy commented on GitHub (Jul 16, 2022):

wireshark or tcpdump capture the dns query packet, you will see below

Name: http://statototalitario.com/stub/index.php
 Name Length:42
 Label Count:3
Type: A (Host Address) (1)
 Class:IN (0x0001)

Maybe it should send the packet, and the dns server reply No Such Name like nslookup(on any os platform), not just errored when sending.

@RickSKy commented on GitHub (Jul 16, 2022): wireshark or tcpdump capture the dns query packet, you will see below ``` Name: http://statototalitario.com/stub/index.php Name Length:42 Label Count:3 Type: A (Host Address) (1) Class:IN (0x0001) ``` Maybe it should send the packet, and the dns server reply No Such Name like nslookup(on any os platform), not just errored when sending.

kerem commented

2026-03-16 00:08:48 +03:00

Author

Owner

@bluejekyll commented on GitHub (Jul 16, 2022):

If you want to construct an invalid Name and send it, you can use the from labels methods https://docs.rs/trust-dns-proto/0.21.2/trust_dns_proto/rr/domain/struct.Name.html#method.from_labels and construct the labels using from raw bytes https://docs.rs/trust-dns-proto/0.21.2/trust_dns_proto/rr/domain/struct.Label.html#method.from_raw_bytes

@bluejekyll commented on GitHub (Jul 16, 2022): If you want to construct an invalid Name and send it, you can use the from labels methods https://docs.rs/trust-dns-proto/0.21.2/trust_dns_proto/rr/domain/struct.Name.html#method.from_labels and construct the labels using from raw bytes https://docs.rs/trust-dns-proto/0.21.2/trust_dns_proto/rr/domain/struct.Label.html#method.from_raw_bytes

kerem commented

2026-03-16 00:08:53 +03:00

Author

Owner

@RickSKy commented on GitHub (Jul 17, 2022):

Thanks.

@RickSKy commented on GitHub (Jul 17, 2022): Thanks.

kerem referenced this issue

2026-03-16 02:18:25 +03:00

[PR #754] [MERGED] Bump native-tls from 0.2.2 to 0.2.3 #1657