Add release note and CHANGES for #3743

(cherry picked from commit e43a26fd1e6a881fda2be80db1aa7ee0b63bef14)

diff --git a/CHANGES b/CHANGES
index 6ad4ac890fd1b41eaf7dff8b352cca6d117bd6ba..4be8c4465dde4a9df989c9b45f49d2e4cdee35e3 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,9 @@
                        effect, and a warning will be logged that
                        the feature should no longer be used. [GL #3773]
 
+6061.  [bug]           Fix unexpected "Prohibited" extended DNS error
+                       on allow-recursion. [GL #3743]
+
 6059.  [bug]           In some serve stale scenarios, like when following an
                        expired CNAME record, named could return SERVFAIL if the
                        previous request wasn't successful. Consider non-stale

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 49aba2e7b643e38cb0773ee6ad081de585ad50b7..d8c23bb200f64683beb5aaa019616fe93bdac831 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -61,6 +61,9 @@ Bug Fixes
   configured forwarders, resulting in SERVFAIL answers being sent to clients.
   This has been fixed. :gl:`#3752`
 
+- Clients may see an unexpected "Prohibited" extended DNS error when ``named``
+  is configured with :any:`allow-recursion`). :gl:`#3743`
+
 Known Issues
 ~~~~~~~~~~~~