CVSROOT: /cvs
Module name: src
Changes by: flor...@cvs.openbsd.org 2019/11/03 11:15:26
Modified files:
sbin/unwind : resolver.c
Log message:
When we are talking to an upstream nameserver we should not refuse to
forward queries for certain reverse zones (e.g. RFC1918 space). The
local network might use them and it's the policy of the upstream
nameserver what should be done with these.
Of course if we are recursively resolving ourselves these should not
leak to the global internet so we continue to synthesize NXDOMAIN
ourselves.
For now we also always synthesize NXDOMAIN for special use domains like
test and onion.
Pointed out by henning.
Input & OK sthen
