Question about URL being logged by resolver

[Mark Andrews]

People accidentally enter urls as domain names into tools.  https://app-measurement.com/sdk-exp/A is
a legal, but unusual, domain name consisting of 3 labels 'https://app-measurement’, 'com/sdk-exp/A’ and ‘.’.

Mark

> On 4 Nov 2023, at 13:29, Nick Tait via bind-users <bind-users at lists.isc.org> wrote:
> 
> Hi J.
> 
> I'm not sure what the cause of the URLs is, but I can confirm I'm seeing the same URLs in my own logs. The queries originate from multiple devices on my internal network - all Apple devices I think.
> 
> My advice: I wouldn't waste too much effort trying to solve this one, as it is almost certainly something that you will have no control over. E.g. It could be something bogus on a web page that these devices have all accessed?
> 
> Nick.
> 
> 
> On 4/11/23 11:30, J Doe wrote:
>> Hello,
>> 
>> On a Bind 9.18.19 server configured as a recursive resolver, I sometimes see URL's being noted in the log files.
>> 
>> One such example is:
>> 
>> 02-Nov-2023 23:32:19.435 lame-servers: info: success resolving 'https://app-measurement.com/sdk-exp/A' after disabling qname minimization due to 'ncache nxdomain'
>> 
>> This seems unusual to me because Bind usually notes the domain name it is attempting to resolve, not an URL.  In this particular case, I would expect to see a notation about "app-measurement.com" and not "http://etc".
>> 
>> What is the significance of logging the URL and why does this happen in only some cases ?
>> 
>> Thanks,
>> 
>> - J
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org