Purpose of the --ignore-nofqdn option?

[Erik G.]

Hi, this is just a question: What's the purpose of the --ignore-nofqdn option? I understand that clients can send their hostname/FQDN in their DHCPv6 messages in order to update the record. In most mitm6 guides, the option --ignore-nofqdn is used but nobody says anything about the purpose. Are there specific types of clients that don't send FQDNs?

The only guess I have is that the --host-whitelist and --host-blacklist flags would be useless for DHCPv6 messages lacking a FQDN. Then users would be able to decide whether or not to answer those with the --ignore-nofqdn option. Am I correct in assuming that this is the purpose of this option?

Thanks for your great tool! Feel free to close this issue.

[Dirk-jan]

Your assumption is correct. The functioning of the two lists works on hostname which is supplied by the client. Not all clients supply this (IIRC non-Windows ones don't include it, but i'd have to check this to be sure). If they don't supply their desired hostname, there is nothing to match on. So the decision whether or not we want to attack those is made on the --ignore-nofqdn option. If that option is set, then those hosts will be ignored. If it's not set, then the hostname matching is ignored and the host will be included in the attack.