]> granicus.if.org Git - pdns/commit
Make the negcache forwarded zones aware
authorPieter Lexis <pieter.lexis@powerdns.com>
Mon, 29 Aug 2016 09:05:17 +0000 (11:05 +0200)
committerPieter Lexis <pieter.lexis@powerdns.com>
Wed, 31 Aug 2016 14:52:28 +0000 (16:52 +0200)
commit64a8b6a1c1e1f165c8eb716f399e4da6d71156e7
tree2b6de1abff699cdd260350c887b511feb4cd0eb7
parent7370d357fec3c653da6110089c064b64bf74d437
Make the negcache forwarded zones aware

Because of DNSSEC (without NTAs configured), we 'leak' the forwarded
name to the cache when looking for the DNSKEY. This resulted in NXDOMAIN
answers for actual NXDOMAINs, but with the root SOA record. Leading to
inconsistent answers to the client.
pdns/syncres.cc