diff options
| author | Lennart Poettering <lennart@poettering.net> | 2016-06-23 23:46:56 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2016-06-23 23:46:56 +0200 |
| commit | b3c6b00a93cca0e9108cef0b63e11787c1e10fc3 (patch) | |
| tree | 18528b22923c5768a6e2eeddb8149f71d23ef048 /TODO | |
| parent | 6ff01a0d645e21e44fb0d6222d9d098019bcbefd (diff) | |
resolved: when processing auxiliary DNSSEC transactions, accept those with SERVFAIL
Some upstream DNS servers return SERVFAIL if we ask them for DNSSEC RRs, which
some forwarding DNS servers pass on to us as SERVFAIL (other though as
NOERROR...). This is should not be considered a problem, as long as the domain
in question didn't have DNSSEC enabled. Hence: when making use of auxiliary
transactions accept those that return SERVFAIL.
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions