• Marek Vavrusa's avatar
    lib/iterate: ignore out-of-bailiwick NSs for positive answers · 2800e375
    Marek Vavrusa authored
    there are broken resolution chains where a zone cut is advertised,
    but it doesn't exist and the final NS answers from its parent's
    zone cut, which is an attempt to escape bailiwick
    resolving A ab.cd.ef
    NS ef responds:
     - ab.cd.ef NS X ; adverises ab.cd.ef zone cut
    X responds:
     - A ab.cd.ef A
     - cd.ef NS X ; escapes previously advertised cut
    on the other hand, it is important to fail early for referrals as
    it signifies a lame answer
iterate.c 17.8 KB