From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Mon, 13 Jun 2016 09:08:25 +0000 (+0200)
Subject: Auth: warn when NOTIFY is received for master domain
X-Git-Tag: auth-4.0.0-rc1~13^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d2adca9d331ccf593ffddbe44c4d16b4d3f1b525;p=thirdparty%2Fpdns.git

Auth: warn when NOTIFY is received for master domain
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 5202c21d11..7ef2d73b51 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -870,6 +870,10 @@ int PacketHandler::processNotify(DNSPacket *p)
       return RCode::Refused;
     }
   }
+  else if(::arg().mustDo("master") && di.kind == DomainInfo::Master) {
+    L<<Logger::Error<<"Received NOTIFY for "<<p->qdomain<<" from "<<p->getRemote()<<" but we are master, rejecting"<<endl;
+    return RCode::Refused;
+  }
   else if(!db->isMaster(p->qdomain, p->getRemote())) {
     L<<Logger::Error<<"Received NOTIFY for "<<p->qdomain<<" from "<<p->getRemote()<<" which is not a master"<<endl;
     return RCode::Refused;