upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-26 12:23:04 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'rpz-synth-dnssec' into 'master'

Browse source 
RPZ now treats covering NSEC records the same as negative answers

See merge request isc-projects/bind9!811
This commit is contained in:
Evan Hunt 2018-09-27 18:02:53 -04:00
commit e116beb68e
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
lib/ns/query.c
View file

@ -3977,6 +3977,7 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype,
case DNS_R_EMPTYWILD:
case DNS_R_NCACHENXDOMAIN:
case DNS_R_NCACHENXRRSET:
case DNS_R_COVERINGNSEC:
case DNS_R_CNAME:
case DNS_R_DNAME:
qresult_type = qresult_type_restart;