]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Ensure dnssec test doesn't leak queries to root servers
authorTom Krizek <tkrizek@isc.org>
Fri, 19 Jan 2024 15:01:47 +0000 (16:01 +0100)
committerNicki Křížek <nicki@isc.org>
Mon, 6 May 2024 12:44:09 +0000 (14:44 +0200)
The config was recently modified to ensure ns4 won't leak any queries to
root servers. However, the test wasn't executed and it turns out the way
this was handled actually broke the test case. Add our custom root hint
to both of the views to ensure the test can still pass without leaking
any queries.

bin/tests/system/dnssec/ns4/named4.conf.in

index 7d9d6e7ba36f19ac6382b795a29aebba66e21acb..941211993d564e362234fff9a85a9f832f865fdc 100644 (file)
@@ -39,11 +39,6 @@ key auth {
 
 include "trusted.conf";
 
-zone "." {
-       type hint;
-       file "../../_common/root.hint";
-};
-
 view rec {
        match-recursive-only yes;
        recursion yes;
@@ -51,6 +46,11 @@ view rec {
        dnssec-accept-expired yes;
        minimal-responses no;
 
+       zone "." {
+               type hint;
+               file "../../_common/root.hint";
+       };
+
        zone secure.example {
                type static-stub;
                server-addresses { 10.53.0.4; };
@@ -66,6 +66,11 @@ view auth {
        recursion no;
        allow-recursion { none; };
 
+       zone "." {
+               type hint;
+               file "../../_common/root.hint";
+       };
+
        zone secure.example {
                type secondary;
                primaries { 10.53.0.3; };