mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-29 13:38:26 +00:00
obey the "auth-nxdomain" config option (but the default
is now "no"
This commit is contained in:
parent
0fb226f025
commit
f882ab1ac2
@ -2472,8 +2472,22 @@ query_find(ns_client_t *client, dns_fetchevent_t *event) {
|
|||||||
|
|
||||||
if (eresult != ISC_R_SUCCESS && !PARTIALANSWER(client))
|
if (eresult != ISC_R_SUCCESS && !PARTIALANSWER(client))
|
||||||
ns_client_error(client, eresult);
|
ns_client_error(client, eresult);
|
||||||
else if (!RECURSING(client))
|
else if (!RECURSING(client)) {
|
||||||
|
/*
|
||||||
|
* We are done. Make a final tweak to the AA bit if the
|
||||||
|
* auth-nxdomain config option says so, then send the
|
||||||
|
* response.
|
||||||
|
*/
|
||||||
|
if (client->message->rcode == dns_rcode_nxdomain) {
|
||||||
|
/* Note: default was "true" in BIND 8. */
|
||||||
|
isc_boolean_t auth_nxdomain = ISC_FALSE;
|
||||||
|
(void) dns_c_ctx_getauth_nx_domain(ns_g_confctx,
|
||||||
|
&auth_nxdomain);
|
||||||
|
if (auth_nxdomain == ISC_TRUE)
|
||||||
|
client->message->flags |= DNS_MESSAGEFLAG_AA;
|
||||||
|
}
|
||||||
ns_client_send(client);
|
ns_client_send(client);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/*
|
/*
|
||||||
|
Loading…
x
Reference in New Issue
Block a user