From: Aram Sargsyan <aram@isc.org>
Date: Mon, 25 Jul 2022 14:59:41 +0000 (+0000)
Subject: Add CHANGES and release notes for [GL #3459]
X-Git-Tag: v9.19.5~9^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0b0cf12741f4d975328c1e4fe95ee1bbc4af46ba;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for [GL #3459]
---

diff --git a/CHANGES b/CHANGES
index 280ccc71a61..a7c5f1c51e6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5956.	[func]		Make RRL code treat all QNAMEs that are subject to
+			wildcard processing within a given zone as the same
+			name. [GL #3459]
+
 5955.	[port]		The libxml2 library has deprecated the usage of
 			xmlInitThreads() and xmlCleanupThreads() functions. Use
 			xmlInitParser() and xmlCleanupParser() instead.
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index e97eb97108c..e758ca89662 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -37,6 +37,10 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
+- Response Rate Limiting (RRL) code now treats all QNAMEs that are
+  subject to wildcard processing within a given zone as the same name,
+  to prevent circumventing the limits enforced by RRL. :gl:`#3459`
+
 - Zones using ``dnssec-policy`` now require dynamic DNS or
   ``inline-signing`` to be configured explicitly :gl:`#3381`.