]> git.ipfire.org Git - thirdparty/pdns.git/commitdiff
do not leak requests for addzone.com to the Internet 6861/head
authorPeter van Dijk <peter.van.dijk@powerdns.com>
Fri, 17 Aug 2018 12:50:33 +0000 (14:50 +0200)
committerPeter van Dijk <peter.van.dijk@powerdns.com>
Fri, 17 Aug 2018 12:50:33 +0000 (14:50 +0200)
regression-tests/tests/00dnssec-grabkeys/command

index 80eb7065a483dfe4bcca492e84c7b4df7bd882dd..443a8e1b71b82c3bb4c70f3b8aa3c42211f3ce2a 100755 (executable)
@@ -2,9 +2,9 @@
 rm -f trustedkeys
 rm -f unbound-host.conf
 
-for zone in $(grep 'zone ' named.conf  | cut -f2 -d\")
+for zone in $(grep 'zone ' named.conf  | cut -f2 -d\") addzone.com
 do
-       if [ "${zone: 0:16}" != "secure-delegated" ] && [ "$zone" != "stest.com" ]
+       if [ "${zone: 0:16}" != "secure-delegated" ] && [ "$zone" != "stest.com" ] && [ "$zone" != "addzone.com" ]
        then
                drill -p $port -o rd -D dnskey $zone @$nameserver | grep $'DNSKEY\t257' | grep -v 'RRSIG' | grep -v '^;' | grep -v AwEAAarTiHhPgvD28WCN8UBXcEcf8f >> trustedkeys
        fi