]> git.ipfire.org Git - thirdparty/pdns.git/commit
Make the negcache forwarded zones aware
authorPieter Lexis <pieter.lexis@powerdns.com>
Mon, 29 Aug 2016 09:05:17 +0000 (11:05 +0200)
committerPieter Lexis <pieter.lexis@powerdns.com>
Thu, 20 Oct 2016 12:00:42 +0000 (14:00 +0200)
commitd8cd67be324881403d99733d5efd3c83410a9fc8
treec3f8faee3098486722847f96edcd433983648f18
parent0dbcd628d22d9cefded23ae22a41a4061ea43dab
Make the negcache forwarded zones aware

Because of DNSSEC (without NTAs configured), we 'leak' the forwarded
name to the cache when looking for the DNSKEY. This resulted in NXDOMAIN
answers for actual NXDOMAINs, but with the root SOA record. Leading to
inconsistent answers to the client.
pdns/syncres.cc