From 41d3e2027cfa1227906a5a0920ee68ee9ccf734e Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" Date: Tue, 10 Dec 2019 13:09:50 +0100 Subject: [PATCH] - Fix to make auth zone IXFR to fallback to AXFR if a single response RR is received over TCP with the SOA in it. --- doc/Changelog | 4 ++++ services/authzone.c | 5 ++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/doc/Changelog b/doc/Changelog index 1fca26b64..c27877609 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,7 @@ +10 December 2019: Wouter + - Fix to make auth zone IXFR to fallback to AXFR if a single + response RR is received over TCP with the SOA in it. + 6 December 2019: Wouter - Fix ipsecmod compile. - Fix Makefile.in for ipset module compile, from Adi Prasaja. diff --git a/services/authzone.c b/services/authzone.c index 7d806d9d5..9621d6ee3 100644 --- a/services/authzone.c +++ b/services/authzone.c @@ -5530,9 +5530,12 @@ check_xfer_packet(sldns_buffer* pkt, struct auth_xfer* xfr, xfr->task_transfer->rr_scan_num == 0 && LDNS_ANCOUNT(wire)==1) { verbose(VERB_ALGO, "xfr to %s ended, " - "IXFR reply that zone has serial %u", + "IXFR reply that zone has serial %u," + " fallback from IXFR to AXFR", xfr->task_transfer->master->host, (unsigned)serial); + xfr->task_transfer->ixfr_fail = 1; + *gonextonfail = 0; return 0; } -- 2.47.3