]> git.ipfire.org Git - thirdparty/bind9.git/commit
Reject zones with TTL higher than dnssec-policy max-zone-ttl
authorMatthijs Mekking <matthijs@isc.org>
Wed, 13 Jul 2022 08:28:59 +0000 (10:28 +0200)
committerEvan Hunt <each@isc.org>
Wed, 20 Jul 2022 18:55:07 +0000 (11:55 -0700)
commita130737ea52337d3af2f262c41ce2e11c9727875
tree70571ca652d6d10017f423bfecfa8159338cea89
parentc52a82cbd9f06ed78e4bda7a6e1c3604ee9f0ffc
Reject zones with TTL higher than dnssec-policy max-zone-ttl

Reject loading of zones with TTL higher than the max-zone-ttl
from the dnssec-policy.

With this change, any zone with a dnssec-policy in use will ignore
the max-zone-ttl option in zone/view/options.
bin/named/zoneconf.c