Commit graph

9 commits

Author SHA1 Message Date
David Vašek
72042f9717 tests-extra: add a missing python shebang and some missing separating lines 2023-06-10 08:34:29 +02:00
Daniel Salzman
1f98f8dc18 nameserver: decrease maximum CNAME/DNAME chain length from 20 to 5
The reason for this change is to reduce possible amplification attacks and
other negative effects of long processing loops.

Also most resolvers don't accept multiple jumps without requerying, so this
change should be harmless.
2021-03-05 08:50:06 +01:00
Libor Peltan
33324965ca DNAME: synthesized CNAME might be perfect answer to CNAME query 2020-11-20 09:26:45 +01:00
Libor Peltan
40385080a5 ANY over TCP returns one random RRSet not all 2020-05-12 15:38:57 +02:00
Libor Peltan
197314d451 ANY: when UDP, always answer with one RRSet 2020-05-01 20:14:03 +02:00
Daniel Salzman
3831d74ffa tests-extra: unify zone file for cname-follow 2019-11-26 13:12:40 +01:00
Libor Peltan
af0025424a nameserver: limit processing depth of C/DNAME chain 2019-11-26 13:12:40 +01:00
Libor Peltan
2b5b4f6679 tests-extra: dname cname too long 2017-03-02 10:47:55 +01:00
Jan Vcelak
340ab89c37 tests-extra: add tests for CNAME following 2015-07-13 12:48:04 +02:00