mirror of
https://github.com/isc-projects/bind9.git
synced 2026-04-28 17:46:40 -04:00
log zone/class when denying zone transfers
(patch posted to bind9-users by Mark Mentovai <mark-list@mentovai.com>
This commit is contained in:
parent
474a81662f
commit
045c9678e2
1 changed files with 6 additions and 2 deletions
|
|
@ -15,7 +15,7 @@
|
|||
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
||||
*/
|
||||
|
||||
/* $Id: xfrout.c,v 1.99 2001/06/07 18:18:24 gson Exp $ */
|
||||
/* $Id: xfrout.c,v 1.100 2001/06/18 19:04:32 gson Exp $ */
|
||||
|
||||
#include <config.h>
|
||||
|
||||
|
|
@ -873,6 +873,8 @@ ns_xfr_start(ns_client_t *client, dns_rdatatype_t reqtype) {
|
|||
dns_peer_t *peer = NULL;
|
||||
isc_buffer_t *tsigbuf = NULL;
|
||||
char *journalfile;
|
||||
char msg[DNS_RDATACLASS_FORMATSIZE + DNS_NAME_FORMATSIZE
|
||||
+ sizeof("zone transfer '/'")];
|
||||
|
||||
switch (reqtype) {
|
||||
case dns_rdatatype_axfr:
|
||||
|
|
@ -989,7 +991,9 @@ ns_xfr_start(ns_client_t *client, dns_rdatatype_t reqtype) {
|
|||
/*
|
||||
* Decide whether to allow this transfer.
|
||||
*/
|
||||
CHECK(ns_client_checkacl(client, "zone transfer",
|
||||
ns_client_aclmsg("zone transfer", question_name,
|
||||
client->view->rdclass, msg, sizeof(msg));
|
||||
CHECK(ns_client_checkacl(client, msg,
|
||||
dns_zone_getxfracl(zone), ISC_TRUE,
|
||||
ISC_LOG_ERROR));
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue