Aram Sargsyan 3ad0f165ab Fix RRL responses-per-second bypass using wildcard names ... It is possible to bypass Response Rate Limiting (RRL) `responses-per-second` limitation using specially crafted wildcard names, because the current implementation, when encountering a found DNS name generated from a wildcard record, just strips the leftmost label of the name before making a key for the bucket. While that technique helps with limiting random requests like <random>.example.com (because all those requests will be accounted as belonging to a bucket constructed from "example.com" name), it does not help with random names like subdomain.<random>.example.com. The best solution would have been to strip not just the leftmost label, but as many labels as necessary until reaching the suffix part of the wildcard record from which the found name is generated, however, we do not have that information readily available in the context of RRL processing code. Fix the issue by interpreting all valid wildcard domain names as the zone's origin name concatenated to the "*" name, so they all will be put into the same bucket. (cherry picked from commit baa9698c9d)		2022-09-08 09:41:15 +02:00
..
bind9	dnssec-policy now requires inline-signing	2022-09-06 09:06:17 +02:00
dns	Fix RRL responses-per-second bypass using wildcard names	2022-09-08 09:41:15 +02:00
irs	Update clang to version 14	2022-06-16 18:11:03 +02:00
isc	Add mctx attach/detach when creating/destroying a memory pool	2022-09-02 09:05:03 +00:00
isccc	Update clang to version 14	2022-06-16 18:11:03 +02:00
isccfg	Update clang to version 14	2022-06-16 18:11:03 +02:00
ns	Fix RRL responses-per-second bypass using wildcard names	2022-09-08 09:41:15 +02:00
win32/bindevt	Update the copyright information in all files in the repository	2022-01-11 12:22:09 +01:00
.gitignore	added gitignore, removed cvsignore	2012-03-03 23:10:05 -08:00
Kyuafile	Update the copyright information in all files in the repository	2022-01-11 12:22:09 +01:00
Makefile.in	Update the copyright information in all files in the repository	2022-01-11 12:22:09 +01:00