bind9/lib
Diego Fronza cf7b0de1eb Fixed rebinding protection bug when using forwarder setups
BIND wasn't honoring option "deny-answer-aliases" when configured to
forward queries.

Before the fix it was possible for nameservers listed in "forwarders"
option to return CNAME answers pointing to unrelated domains of the
original query, which could be used as a vector for rebinding attacks.

The fix ensures that BIND apply filters even if configured as a forwarder
instance.

(cherry picked from commit af6a4de3d5ad6c1967173facf366e6c86b3ffc28)
2020-04-08 09:37:33 +02:00
..
bind9 Use the new sorting rules to regroup #include headers 2020-03-09 16:19:22 +01:00
dns Fixed rebinding protection bug when using forwarder setups 2020-04-08 09:37:33 +02:00
irs Fixup the headers formatting 2020-03-11 10:19:32 +01:00
isc Remove the extra decstats on STATID_ACTIVE for children sockets 2020-04-03 19:41:46 +02:00
isccc Stop leaking OpenSSL types and defines in the isc/md.h 2020-03-17 09:11:13 +01:00
isccfg Refactor the isc_log API so it cannot fail on memory failures 2020-03-18 09:05:59 +01:00
ns Fix the statistic counter underflow in ns_client_t 2020-04-03 19:41:46 +02:00
samples Use the new sorting rules to regroup #include headers 2020-03-09 16:19:22 +01:00
win32/bindevt apply the modified style 2020-02-13 15:05:06 -08:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile link in lib/isccc/tests/Kyuafile 2018-11-13 07:23:36 +11:00
Makefile.in remove lib/tests as nothing uses it anymore 2018-03-09 14:12:50 -08:00