From d2adca9d331ccf593ffddbe44c4d16b4d3f1b525 Mon Sep 17 00:00:00 2001
From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Mon, 13 Jun 2016 11:08:25 +0200
Subject: [PATCH] Auth: warn when NOTIFY is received for master domain

---
 pdns/packethandler.cc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pdns/packethandler.cc b/pdns/packethandler.cc
index 5202c21d1..7ef2d73b5 100644
--- a/pdns/packethandler.cc
+++ b/pdns/packethandler.cc
@@ -870,6 +870,10 @@ int PacketHandler::processNotify(DNSPacket *p)
       return RCode::Refused;
     }
   }
+  else if(::arg().mustDo("master") && di.kind == DomainInfo::Master) {
+    L<<Logger::Error<<"Received NOTIFY for "<<p->qdomain<<" from "<<p->getRemote()<<" but we are master, rejecting"<<endl;
+    return RCode::Refused;
+  }
   else if(!db->isMaster(p->qdomain, p->getRemote())) {
     L<<Logger::Error<<"Received NOTIFY for "<<p->qdomain<<" from "<<p->getRemote()<<" which is not a master"<<endl;
     return RCode::Refused;
-- 
2.40.0