]> git.ipfire.org Git - thirdparty/pdns.git/commitdiff
Use RDRule in dnsdist example
authorMaxHearnden <MaxHearnden@users.noreply.github.com>
Mon, 22 Sep 2025 00:21:18 +0000 (01:21 +0100)
committerGitHub <noreply@github.com>
Mon, 22 Sep 2025 00:21:18 +0000 (01:21 +0100)
This would allow IP addresses with access to the recursive DNS server to also access the authoritative DNS server to e.g. perform zone transfers.

Signed-off-by: MaxHearnden <MaxHearnden@users.noreply.github.com>
docs/guides/recursion.rst

index 8f747fd1f5d1f56a88aaad3355dcfa8f0dfec895..a9b9d10f79849f9bd60eff65d3e60513d25ee862 100644 (file)
@@ -207,12 +207,12 @@ This is where several settings from the existing Authoritative Server
     recursive_ips:addMask('NETWORKMASK1') -- These network masks are the ones from allow-recursion in the Authoritative Server
     recursive_ips:addMask('NETWORKMASK2')
 
-    addAction(NetmaskGroupRule(recursive_ips), PoolAction('recursor'))
+    addAction(AndRule({NetmaskGroupRule(recursive_ips), RDRule()}), PoolAction('recursor'))
     addAction(AllRule(), PoolAction('auth'))
 
-This configuration will route all queries from the netmasks that are
-allowed to do recursion to the Recursor and all other queries to the
-Authoritative Server.
+This configuration will route all recursive queries from the netmasks
+that are allowed to do recursion to the Recursor and all other queries
+to the Authoritative Server.
 
 5. Restart the Authoritative Server, the Recursor and dnsdist
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^