From: Kees Monshouwer <mind04@monshouwer.org>
Date: Wed, 28 Aug 2013 20:38:20 +0000 (+0200)
Subject: send empty SERVFAIL on exeeded retargetcount and log failures
X-Git-Tag: auth-3.3.1~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dfd1b82cc9fc45c2a1729a848ac870e81eec2f07;p=thirdparty%2Fpdns.git

send empty SERVFAIL on exeeded retargetcount and log failures
---

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 3ce671e934..674ac53c19 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -1206,6 +1206,9 @@ DNSPacket *PacketHandler::questionOrRecurse(DNSPacket *p, bool *shouldRecurse)
 
   retargeted:;
     if(retargetcount > 10) {    // XXX FIXME, retargetcount++?
+      L<<Logger::Warning<<"Abort CNAME chain resolution after "<<--retargetcount<<" redirects, sending out servfail. Initial query: '"<<p->qdomain<<"'"<<endl;
+      delete r;
+      r=p->replyPacket();
       r->setRcode(RCode::ServFail);
       return r;
     }