• Mark Andrews's avatar
    Check SOA owner names in zone transfers · f68d4cba
    Mark Andrews authored
    An IXFR containing SOA records with owner names different than the
    transferred zone's origin can result in named serving a version of that
    zone without an SOA record at the apex.  This causes a RUNTIME_CHECK
    assertion failure the next time such a zone is refreshed.  Fix by
    immediately rejecting a zone transfer (either an incremental or
    non-incremental one) upon detecting an SOA record not placed at the apex
    of the transferred zone.
    f68d4cba
xfrin.c 40.9 KB