From 2a41c9ba0ae119321e827c61c5675e061fe3790c Mon Sep 17 00:00:00 2001 From: Remi Gacogne Date: Wed, 15 Sep 2021 15:13:34 +0200 Subject: [PATCH] Update pdns/syncres.cc Co-authored-by: Otto Moerbeek (cherry picked from commit 68a1512030b2e2fa721c17b010d5787a20951a1a) --- pdns/syncres.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pdns/syncres.cc b/pdns/syncres.cc index 469d7ce941..9dce595a46 100644 --- a/pdns/syncres.cc +++ b/pdns/syncres.cc @@ -3363,7 +3363,7 @@ RCode::rcodes_ SyncRes::updateCacheFromRecords(unsigned int depth, LWResult& lwr } if ((isCNAMEAnswer || isDNAMEAnswer) && i->first.place == DNSResourceRecord::AUTHORITY && i->first.type == QType::NS && auth == i->first.name) { - /* These NS can't be authoritative since we have a CNAME answer for which (see above) only the + /* These NS can't be authoritative since we have a CNAME/DNAME answer for which (see above) only the record describing that alias is necessarily authoritative. But if we allow the current auth, which might be serving the child zone, to raise the TTL of non-authoritative NS in the cache, they might be able to keep a "ghost" zone alive forever, -- 2.47.2