Skip to content

check port in *-source and *-source-v6 options in named.conf

Ondřej Surý requested to merge 2888-be-more-strict-about-clashing-source-ports-v9_16 into v9_16
  • when transfer-source(-v6), query-source(-v6), notify-source(-v6) or parental-source(-v6) are specified with a port number, issue a warning.
  • when the port specified is the same as the DNS listener port (i.e., 53, or whatever was specified as "port" in "options"), issue a fatal error.
  • check that "port" is in range. (previously this was only checked by named, not by named-checkconf.)
  • added checkconf tests.
  • incidental fix: removed dead code in check.c:bind9_check_namedconf().

(note: if the DNS port is specified on the command line with "named -p", that is not conveyed to libbind9, so these checks will not take it into account.)

(cherry picked from commit 14c8d7df)

Closes #2888 (closed)

Merge request reports