Mark AndrewsandPetr Špaček
3b3495a631
- Check that an NS in an authority section returned from a forwarder
which is above the name in a configured "forward first" or "forward
only" zone (i.e., net/NS in a response from a forwarder configured for
local.net) is not cached.
- Test that a DNAME for a parent domain will not be cached when sent
in a response from a forwarder configured to answer for a child.
- Check that glue is rejected if its name falls below that of zone
configured locally.
- Check that an extra out-of-bailiwick data in the answer section is
not cached (this was already working correctly, but was not explicitly
tested before).
(cherry picked from commit bf3fffff67)
17 lines
664 B
Plaintext
17 lines
664 B
Plaintext
; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
;
|
|
; SPDX-License-Identifier: MPL-2.0
|
|
;
|
|
; This Source Code Form is subject to the terms of the Mozilla Public
|
|
; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
; file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
;
|
|
; See the COPYRIGHT file distributed with this work for additional
|
|
; information regarding copyright ownership.
|
|
|
|
local.net. 3600 IN SOA . . 0 0 0 0 0
|
|
local.net. 3600 IN NS localhost.
|
|
ns.local.net. 3600 IN A 10.53.0.9
|
|
txt.local.net. 3600 IN TXT "something in the local auth zone"
|
|
sub.local.net. 3600 IN NS ns.spoofed.net. ; attacker will try to override this
|