From 565147b7bb2156277a2efaccd920d3ca9c21f8a8 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 5 Nov 2020 15:51:12 +0100
Subject: [PATCH] stub: don't ever respond to datagrams coming in on
 non-localhost addreses, on the stub

---
 src/resolve/resolved-dns-stub.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/resolve/resolved-dns-stub.c b/src/resolve/resolved-dns-stub.c
index 086d3d9d18..6a3dc9901a 100644
--- a/src/resolve/resolved-dns-stub.c
+++ b/src/resolve/resolved-dns-stub.c
@@ -379,8 +379,7 @@ static void dns_stub_process_query(Manager *m, DnsStubListenerExtra *l, DnsStrea
         if (!l && /* l == NULL if this is the main stub */
             (in_addr_is_localhost(p->family, &p->sender) <= 0 ||
              in_addr_is_localhost(p->family, &p->destination) <= 0)) {
-                log_error("Got packet on unexpected IP range, refusing.");
-                dns_stub_send_failure(m, l, s, p, DNS_RCODE_SERVFAIL, false);
+                log_warning("Got packet on unexpected (i.e. non-localhost) IP range, ignoring.");
                 return;
         }