From 53ebc0959bd1dc49b32c7043335f6ef17e2b3715 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Mon, 24 Feb 2014 23:49:21 +1100 Subject: [PATCH] #ifdef notyet error handling for bad sit --- lib/dns/resolver.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c index 7245558da5..0e0e903347 100644 --- a/lib/dns/resolver.c +++ b/lib/dns/resolver.c @@ -7265,6 +7265,19 @@ resquery_response(isc_task_t *task, isc_event_t *event) { if (opt != NULL) process_opt(query, opt); +#ifdef notyet +#ifdef ISC_PLATFORM_USESIT + if (message->sitbad) { + /* + * If the SIT is bad assume it is a attack and retry. + */ + resend = ISC_TRUE; + /* XXXMPA log it */ + goto done; + } +#endif +#endif + /* * If the message is signed, check the signature. If not, this * returns success anyway.