[Pdns-dev] AXFR check

[Norbert Sendetzky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Bert

The current check for allowing AXFR in tcpreceiver.cc line 249 is:

if(!arg().mustDo("disable-axfr") || !arg()["allow-axfr-ips"].empty())
   return true;

IMHO it should be:

if(!arg().mustDo("disable-axfr")
    return false;

if(arg()["allow-axfr-ips"].empty())
   return true;

Otherwise AXFR is allowed even if disable-axfr=yes.


Norbert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+9G+axMLs5v5/7eARAofjAJ0SxLGI7D95dpftudhTUClVefb9+ACfVRj3
zvZr9mSifuSFulznRq30EfY=
=R8Rl
-----END PGP SIGNATURE-----