]> git.ipfire.org Git - thirdparty/pdns.git/commit - pdns/recursordist/test-syncres_cc.cc
rec: Only apply root-nx-trust if the received SOA is "."
authorRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 18 Apr 2017 08:27:27 +0000 (10:27 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Tue, 18 Apr 2017 08:59:30 +0000 (10:59 +0200)
commit898856caed7cdfc584dfb77fe99ac76b90245227
tree7b44e31b3fe19ccbc2d3c5ac80aa0bcafe7b03d3
parent124cdb30a6d9c7dadb319e80deba5df49f06d75a
rec: Only apply root-nx-trust if the received SOA is "."

If `root-nx-trust` is enabled and we got a NX answer from the root, check that the received SOA is for the root before negatively caching the entire TLD. This might happen if "." is forwarded, for example.
pdns/recursordist/test-syncres_cc.cc
pdns/syncres.cc