Dont default to nodata proofs
This commit is contained in:
parent
67573c14b3
commit
358df28cfc
6
nsec3.go
6
nsec3.go
|
@ -146,10 +146,12 @@ func (m *Msg) Nsec3Verify(q Question) (int, error) {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
if !ncdenied {
|
if !ncdenied {
|
||||||
|
if m.MsgHdr.Rcode == RcodeNameError {
|
||||||
|
// For NXDOMAIN this is a problem
|
||||||
|
return 0, ErrDenialNc // add next closer name here
|
||||||
|
}
|
||||||
// For NODATA we need to to check if the matching nsec3 has to correct type bit map
|
// For NODATA we need to to check if the matching nsec3 has to correct type bit map
|
||||||
goto NoData
|
goto NoData
|
||||||
// For NXDOMAIN this is a problem
|
|
||||||
return 0, ErrDenialNc // add next closer name here
|
|
||||||
}
|
}
|
||||||
|
|
||||||
// Check if the source of synthesis is covered and thus denied
|
// Check if the source of synthesis is covered and thus denied
|
||||||
|
|
Loading…
Reference in New Issue