bind9/bin
Evan Hunt da029f10ba negative 'blackhole' ACL match could be treated as positive
There was a bug in the checking of the "blackhole" ACL in
dns_request_create*(), causing an address to be treated as included
in the ACL if it was explicitly *excluded*. Thus, leaving "blackhole"
unset had no effect, but setting it to "none" would cause any
destination addresses to be rejected for dns_request purposes. This
would cause zone transfer requests and SOA queries to fail, among
other things.

The bug has been fixed, and "blackhole { none; };" was added to the
xfer system test as a regression test.

(cherry picked from commit 4444b168db)
2022-02-16 22:20:25 -08:00
..
check Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
confgen Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
delv Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
dig Remove spurious 'debugging = true;' 2022-02-01 10:22:41 +11:00
dnssec Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
named Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
nsupdate Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
plugins Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
rndc Use compile-time paths in the manual pages 2022-02-10 17:08:24 +01:00
tests negative 'blackhole' ACL match could be treated as positive 2022-02-16 22:20:25 -08:00
tools Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00