mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-28 04:21:07 -05:00
There was a bug in the checking of the "blackhole" ACL in
dns_request_create*(), causing an address to be treated as included
in the ACL if it was explicitly *excluded*. Thus, leaving "blackhole"
unset had no effect, but setting it to "none" would cause any
destination addresses to be rejected for dns_request purposes. This
would cause zone transfer requests and SOA queries to fail, among
other things.
The bug has been fixed, and "blackhole { none; };" was added to the
xfer system test as a regression test.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| ans5 | ||
| ns1 | ||
| ns2 | ||
| ns3 | ||
| ns4 | ||
| ns6 | ||
| ns7 | ||
| ns8 | ||
| axfr-stats.good | ||
| clean.sh | ||
| dig1.good | ||
| dig2.good | ||
| knowngood.mapped | ||
| setup.sh | ||
| tests.sh | ||