From d1b34d407bbd53d1361e1b42fd39ba69bb091d79 Mon Sep 17 00:00:00 2001 From: dmiller Date: Mon, 17 Nov 2014 19:35:49 +0000 Subject: [PATCH] Don't try nameservers from a different AF than our spoofed source. --- nmap_dns.cc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/nmap_dns.cc b/nmap_dns.cc index c68979998..1a2e31ca4 100644 --- a/nmap_dns.cc +++ b/nmap_dns.cc @@ -840,7 +840,8 @@ static void add_dns_server(char *ipaddrs) { for (hostname = strtok(ipaddrs, " ,"); hostname != NULL; hostname = strtok(NULL, " ,")) { - if (resolve(hostname, 0, (struct sockaddr_storage *) &addr, &addr_len, PF_UNSPEC) != 0) + if (resolve(hostname, 0, (struct sockaddr_storage *) &addr, &addr_len, + o.spoofsource ? o.af() : PF_UNSPEC) != 0) continue; for(servI = servs.begin(); servI != servs.end(); servI++) {