This repository was archived by the owner on Apr 26, 2024. It is now read-only.
This repository was archived by the owner on Apr 26, 2024. It is now read-only.
ip_range_whitelist has no impact on federation client #9569
Description
Description
ip_range_whitelist does not affect federation ip blacklisting. I have an internal matrix server which cannot federate with other servers on the same network.
Steps to reproduce
- Setup a homeserver using an internal ip address
- Set
ip_range_whitelistto include the other servers ip address - Attempt to federate with it
Relevant log entry
INFO - None - Dropped 10.x.x.x from DNS resolution to hs-name due to blacklist
Looking at the code the federation client is setup without passing an ip_whitelist to its DNS resolver. Only application services appears to at present use the ip_range_whitelist attribute.
Version information
-
Version: 1.29.0
-
Install method: debian package
- Platform: debian