From: Remi Gacogne Date: Wed, 15 Sep 2021 13:13:34 +0000 (+0200) Subject: Update pdns/syncres.cc X-Git-Tag: dnsdist-1.7.0-alpha1~9^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F10718%2Fhead;p=thirdparty%2Fpdns.git Update pdns/syncres.cc Co-authored-by: Otto Moerbeek --- diff --git a/pdns/syncres.cc b/pdns/syncres.cc index 638c2a1861..3a9009df49 100644 --- a/pdns/syncres.cc +++ b/pdns/syncres.cc @@ -3370,7 +3370,7 @@ RCode::rcodes_ SyncRes::updateCacheFromRecords(unsigned int depth, LWResult& lwr } if ((isCNAMEAnswer || isDNAMEAnswer) && i->first.place == DNSResourceRecord::AUTHORITY && i->first.type == QType::NS && auth == i->first.name) { - /* These NS can't be authoritative since we have a CNAME answer for which (see above) only the + /* These NS can't be authoritative since we have a CNAME/DNAME answer for which (see above) only the record describing that alias is necessarily authoritative. But if we allow the current auth, which might be serving the child zone, to raise the TTL of non-authoritative NS in the cache, they might be able to keep a "ghost" zone alive forever,