ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[master] fix DNS64 with RPZ-remapped A records

Browse Source 
3468.	[security]	RPZ rules to generate A records (but not AAAA records)
			could trigger an assertion failure when used in
			conjunction with DNS64. [RT #32141]
This commit is contained in:
Evan Hunt
2013-01-17 11:23:30 -08:00
parent c8803902d6
commit 71f8edccba
6 changed files with 63 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
bin/tests/system/dns64/tests.sh
View File

@@ -1352,5 +1352,12 @@ n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I: checking synthesis of AAAA from RPZ-remapped A ($n)"
$DIG $DIGOPTS aaaa rpz.example +rec -b 10.53.0.7 @10.53.0.2 > dig.out.ns2.test$n || ret=1
grep -i 'rpz.example.*IN.AAAA.2001:96::a0a:a0a' dig.out.ns2.test$n >/dev/null || ret=1
n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:exit status: $status"
exit $status