From: Mark Andrews <marka@isc.org>
Date: Wed, 26 Feb 2003 23:45:53 +0000 (+0000)
Subject: 1446.   [func]          Implemented undocumented alternate transfer sources
X-Git-Tag: v9.2.3rc1~104^2~88
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19;p=thirdparty%2Fbind9.git

1446.   [func]          Implemented undocumented alternate transfer sources
                        from BIND 8.  See use-alt-transfer-source,
                        alt-transfer-source-v4 and alt-transfer-source-v6.
---

diff --git a/CHANGES b/CHANGES
index 27c814b4179..d5df12da25e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,14 @@
+1446.	[func]		Implemented undocumented alternate transfer sources
+			from BIND 8.  See use-alt-transfer-source,
+			alt-transfer-source-v4 and alt-transfer-source-v6.
+
+			SECURITY: use-alt-transfer-source is ENABLED unless
+			you are using views.  This may caues a security risk
+			resulting in accidental disclosure of wrong zone
+			content if the master supplying different source
+			content based on IP address.  If you are not certian
+			ISC recommends setting use-alt-transfer-source no;
+
 1445.	[bug]		DNS_ADBFIND_STARTATROOT broke stub zones.  This has
 			been replaced with DNS_ADBFIND_STARTATZONE which
 			causes the search to start using the closest zone.