mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-02 15:45:25 +00:00
abort transfer if SOA response is not authoritative.
This commit is contained in:
@@ -15,7 +15,7 @@
|
|||||||
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
* WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
||||||
*/
|
*/
|
||||||
|
|
||||||
/* $Id: xfrin.c,v 1.124 2001/08/08 22:54:46 gson Exp $ */
|
/* $Id: xfrin.c,v 1.125 2001/08/30 05:12:39 marka Exp $ */
|
||||||
|
|
||||||
#include <config.h>
|
#include <config.h>
|
||||||
|
|
||||||
@@ -1148,6 +1148,11 @@ xfrin_recv_done(isc_task_t *task, isc_event_t *ev) {
|
|||||||
goto try_axfr;
|
goto try_axfr;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (xfr->reqtype == dns_rdatatype_soa &&
|
||||||
|
(msg->flags & DNS_MESSAGEFLAG_AA) == 0) {
|
||||||
|
FAIL(DNS_R_NOTAUTHORITATIVE);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
result = dns_message_checksig(msg, dns_zone_getview(xfr->zone));
|
result = dns_message_checksig(msg, dns_zone_getview(xfr->zone));
|
||||||
if (result != ISC_R_SUCCESS) {
|
if (result != ISC_R_SUCCESS) {
|
||||||
|
Reference in New Issue
Block a user