Commit f68d4cba authored by Committed by Michał KępieńBrowse files
Check SOA owner names in zone transfers
An IXFR containing SOA records with owner names different than the transferred zone's origin can result in named serving a version of that zone without an SOA record at the apex. This causes a RUNTIME_CHECK assertion failure the next time such a zone is refreshed. Fix by immediately rejecting a zone transfer (either an incremental or non-incremental one) upon detecting an SOA record not placed at the apex of the transferred zone.
Showing with 14 additions and 0 deletions