bind9/bin/tests/system/resolver
Evan Hunt 401a6374b0
Disable recursion for non-IN classes
Force recursion off, and set allow-recursion/allow-recursion-on ACLs
to none, for views with a class other than IN. Log a configuration
warning if recursion is explicitly enabled for a non-IN view.

This addresses YWH-PGM40640-74 and YWH-PGM40640-75 by preventing any
attempt at recursive processing in a class-CHAOS view, ensuring that
server addresses used for recursive queries and received in recursive
responses are of the expected format.

Fixes: isc-projects/bind9#5780
Fixes: isc-projects/bind9#5781

(cherry picked from commit 7becff1a14684a68208c92b3b0315c045c05ad75)
2026-05-07 13:21:59 +02:00
..
ans2 Add tests for CVE-2022-2795 2022-10-19 12:36:20 +02:00
ans3 Test resolver statistics when responses time out 2025-03-31 19:06:42 +00:00
ans8 Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
ans10 Add a server which returns FORMERR to all EDNS options 2023-06-26 16:36:11 +02:00
ns1 Remove licensing header check for root.hint[s] 2026-04-28 15:58:18 +01:00
ns4 Isolate using the -T noaa flag only for part of the resolver test 2025-01-15 14:13:17 +01:00
ns5 Remove licensing header check for root.hint[s] 2026-04-28 15:58:18 +01:00
ns6 Reformat shell scripts with shfmt 2023-10-26 13:05:00 +02:00
ns7 Remove licensing header check for root.hint[s] 2026-04-28 15:58:18 +01:00
ns9 Remove licensing header check for root.hint[s] 2026-04-28 15:58:18 +01:00
prereq.sh Reformat shell scripts with shfmt 2023-10-26 13:05:00 +02:00
setup.sh Add system test for dual-stack-servers with possible DNAME response 2022-11-17 13:05:12 +11:00
tests.sh Disable recursion for non-IN classes 2026-05-07 13:21:59 +02:00
tests_sh_resolver.py Test resolver statistics when responses time out 2025-03-31 19:06:42 +00:00