- Bugfix min-client-subnet-ipv6

git-svn-id: file:///svn/unbound/trunk@4958 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index b1135d98ddf1df8d53d4bfc1392fc2c72f648908..ffdeb93e7d8b9b8e7e807980cba2c68d3af602a4 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+6 November 2018:
+       - Bugfix min-client-subnet-ipv6
+
 25 October 2018: Ralph
        - Add min-client-subnet-ipv6 and min-client-subnet-ipv4 options.
 

diff --git a/edns-subnet/subnetmod.c b/edns-subnet/subnetmod.c
index bd57359b4e5fa88fc7fa12999eb283d7f00e5172..9725d66e0a38c8b15ee94d98a824d23a37eb0401 100644 (file)
--- a/edns-subnet/subnetmod.c
+++ b/edns-subnet/subnetmod.c
@@ -722,7 +722,7 @@ subnetmod_operate(struct module_qstate *qstate, enum module_ev event,
                        (sq->ecs_client_in.subnet_addr_fam == EDNSSUBNET_ADDRFAM_IP4 &&
                         sq->ecs_client_in.subnet_source_mask < qstate->env->cfg->min_client_subnet_ipv4) ||
                        (sq->ecs_client_in.subnet_addr_fam == EDNSSUBNET_ADDRFAM_IP6 &&
-                        sq->ecs_client_in.subnet_source_mask < qstate->env->cfg->max_client_subnet_ipv6))) {
+                        sq->ecs_client_in.subnet_source_mask < qstate->env->cfg->min_client_subnet_ipv6))) {
                                qstate->return_rcode = LDNS_RCODE_REFUSED;
                                qstate->ext_state[id] = module_finished;
                                return;