@slicedearth/whoisleuth-cli 1.43.0 → 1.47.4

package/lib/dns-intelligence.mjs

@@ -7,11 +7,12 @@ import * as net from 'node:net';
 import { classifyMxRecords } from "./dns-mx.mjs";
 import { collectDnsDelegationHealth, skippedDnsDelegationHealth, } from "./dns-delegation-health.mjs";
 import { createObservation } from "./observation.mjs";
+import { MAX_LOOKUP_DNS_RECORDS_PER_TYPE, MAX_LOOKUP_REVERSE_DNS_PTR_RECORDS, } from "./lookup-network-evidence-bounds.mjs";
 import { isPrivateAddress } from "./safe-fetch.mjs";
 import { resolveServiceBindingRecords } from "./service-binding-dns.mjs";
 const DNS_TIMEOUT_MS = 5000;
-const MAX_RECORDS_PER_TYPE = 16;
-const MAX_PTR_RECORDS = 8;
+const MAX_RECORDS_PER_TYPE = MAX_LOOKUP_DNS_RECORDS_PER_TYPE;
+const MAX_PTR_RECORDS = MAX_LOOKUP_REVERSE_DNS_PTR_RECORDS;
 const MAX_HOSTNAME_LENGTH = 253;
 const MAX_POLICY_LENGTH = 1024;
 const MAX_ERROR_LENGTH = 180;

package/lib/dns-resolver-selection.mjs

@@ -1,5 +1,6 @@
 import { Resolver } from 'node:dns/promises';
 import { isIP } from 'node:net';
+import { isPrivateAddress } from "./safe-fetch.mjs";
 const MAX_SELECTED_DNS_RESOLVERS = 3;
 const MAX_SELECTED_DNS_RESOLVER_TEXT = 256;
 function normalizeSelectedDnsResolvers(value) {
@@ -7,15 +8,16 @@ function normalizeSelectedDnsResolvers(value) {
         throw new TypeError(`DNS resolver selection must contain at most ${MAX_SELECTED_DNS_RESOLVER_TEXT} characters.`);
     }
     const values = [...new Set(value.split(',').map((item) => item.trim()).filter(Boolean))];
-    if (!values.length || values.length > MAX_SELECTED_DNS_RESOLVERS || values.some((item) => isIP(item) === 0)) {
-        throw new TypeError(`DNS resolver selection requires 1 to ${MAX_SELECTED_DNS_RESOLVERS} literal IPv4 or IPv6 addresses.`);
+    if (!values.length || values.length > MAX_SELECTED_DNS_RESOLVERS
+        || values.some((item) => isIP(item) === 0 || isPrivateAddress(item))) {
+        throw new TypeError(`DNS resolver selection requires 1 to ${MAX_SELECTED_DNS_RESOLVERS} publicly routable literal IPv4 or IPv6 addresses.`);
     }
     return values;
 }
 function createSelectedDnsResolvers(servers) {
     if (!Array.isArray(servers) || !servers.length || servers.length > MAX_SELECTED_DNS_RESOLVERS
-        || servers.some((item) => typeof item !== 'string' || isIP(item) === 0)) {
-        throw new TypeError('Validated DNS resolver addresses are required.');
+        || servers.some((item) => typeof item !== 'string' || isIP(item) === 0 || isPrivateAddress(item))) {
+        throw new TypeError('Validated publicly routable DNS resolver addresses are required.');
     }
     const resolver = new Resolver();
     resolver.setServers([...servers]);