subgraph / fw-daemon

Subgraph Application Firewall
Other
104 stars 24 forks source link

CNAME hostnames not tracked #42

Open DonnchaC opened 7 years ago

DonnchaC commented 7 years ago

The gnome-calculator firewall demo no longer displays the ECB and IMF hostnames as both are now using Akamai. The firewall does not associate the original hostname with the final connection. Only the CNAME hostname is displayed to the user.

Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0a7 Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu. 5 1 809 31} www.ecb.europa.eu.edgekey.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0a8 Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu.edgekey.net. 5 1 16411 23} e7443.ksd.akamaiedge.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0a9 Adding www.ecb.europa.eu: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0aa Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu. 5 1 809 31} www.ecb.europa.eu.edgekey.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0ab Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu.edgekey.net. 5 1 16411 23} e7443.ksd.akamaiedge.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0ac Adding www.ecb.europa.eu: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0ae Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu.edgekey.net. 5 1 16411 23} e7443.ksd.akamaiedge.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0af Adding www.ecb.europa.eu.edgekey.net: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: WARN 0b0 Unexpected RR type in answer section of A response: &{{www.ecb.europa.eu.edgekey.net. 5 1 16411 23} e7443.ksd.akamaiedge.net.}
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0b1 Adding www.ecb.europa.eu.edgekey.net: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0b3 Adding e7443.ksd.akamaiedge.net: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0b4 Adding e7443.ksd.akamaiedge.net: 104.102.16.7
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0b6 Lookup(104.102.16.7): e7443.ksd.akamaiedge.net
Jun 28 23:20:39 localhost fw-daemon[20335]: INFO 0b7 prompting...