| To: | bind9-public@isc.org |
| From: | Evan_Hunt@isc.org |
| Date: | Mon, 11 Sep 2017 19:53:33 +0000 |
| Subject: | continued work on DNSRPS |
Some comments from Mukund on 43376:
* It looks like some of the changes fix issues with the RPZ
implementation in release branches and should be backported. E.g., the
change to rpz_rrset_find(), addition of qresult_type_t, etc.
* Should calls to conf_dnsrps_sadd() not check the return value? Why is
it returning isc_boolean_t then if none of the calls should check the
return value?
In addition, we need to improve the rpz test so that it reconfigures a
running server to switch from native RPZ to DNSRPS and back again, to
confirm that that works.