From: Wouter Wijngaards <wouter@nlnetlabs.nl>
Date: Mon, 10 Dec 2018 09:38:50 +0000 (+0000)
Subject: - ip-ratelimit-factor of 1 allows all traffic through, instead of the
X-Git-Tag: release-1.9.0rc1~66
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=21d03697ca72de9ddb69c2a1d3d0ac9afd243c58;p=thirdparty%2Funbound.git

- ip-ratelimit-factor of 1 allows all traffic through, instead of the
  previous blocking everything.


git-svn-id: file:///svn/unbound/trunk@5015 be551aaa-1e26-0410-a405-d3ace91eadb9
---

diff --git a/daemon/worker.c b/daemon/worker.c
index 43cf3c3fd..f40d1cc2f 100644
--- a/daemon/worker.c
+++ b/daemon/worker.c
@@ -1175,7 +1175,7 @@ worker_handle_request(struct comm_point* c, void* arg, int error,
 		/* See if we are passed through with slip factor */
 		if(worker->env.cfg->ip_ratelimit_factor != 0 &&
 			ub_random_max(worker->env.rnd,
-						  worker->env.cfg->ip_ratelimit_factor) == 1) {
+						  worker->env.cfg->ip_ratelimit_factor) == 0) {
 
 			char addrbuf[128];
 			addr_to_str(&repinfo->addr, repinfo->addrlen,
diff --git a/doc/Changelog b/doc/Changelog
index 9d7eb9d01..77d4bb5f8 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,5 +1,7 @@
 10 December 2018: Wouter
 	- Fix config parser memory leaks.
+	- ip-ratelimit-factor of 1 allows all traffic through, instead of the
+	  previous blocking everything.
 
 6 December 2018: Wouter
 	- Fix dns64 allocation in wrong region for returned internal queries.