In-Reply-To: Subject: Re: [ISC-Bugs #47109] Changes in 9.12 (related to additional-from changes?) break functionality of a recursive resolver that has cnames crossing zones To: bind9-confidential@isc.org X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=nF4MoKlrvDcAvfPbLLDb06th0n/Gp8Y5QCJegotQ3ic=; b=Guo3uchHxUBuIqbtpDT7o0Rhhtk3+vDJk4sNXWO8s01wECOgEIsYhSGu5xPUsrDlRR YzOHcugM5ZvopTHd94xj40Aqu3t8HRAuhZGY6LFzJhtp+rnk8uQEQ2WS0GQw9cHVG11w zNZ1lwh/s8lvGsU9NRdD7rUMARsKkWdPGDdXx5M0nWcw/V/0TcWTLoL1+9zAIh1wvBcx GoOB/j5iPcjWaL0+R93UhtmInbPF454Nw7dhR6bGGsUpZCWUj2VFQbENeLlT6U1IcwL4 qKTunYuVNplLaR6bdCV9UCkZYvJPLQ5/drf1tLFbLu88LCG+WP0UPzvnkfHUbk1JQy/n e+sA== X-GM-Message-State: AKwxytcR3ZVdi8X8rO/I3Cp+vqOFSCbpsYoHpiFXAcJk/89tecpc52My CwT3xQ+AQXygxCwox1X7Ha16T3YU content-type: text/plain; charset="utf-8"; format="flowed" Date: Fri, 2 Feb 2018 12:49:28 -0600 Return-Path: X-Spam-Status: No, score=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW autolearn=disabled version=3.4.1 Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mst.edu; s=google; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=nF4MoKlrvDcAvfPbLLDb06th0n/Gp8Y5QCJegotQ3ic=; b=N/ob9gwHaKadICm7PFp9zVI95NDMwLGyaEvZBoZ34Ke0oHUO5KH6iyaCF/hF9SwTgS 3BL3bnpJpYwNXlT7nCaSSg8FCS3Xo6OQBAd6/Fu4m2kUNgroWb26W+jSR/2r3BLy3V8V 4sTrszrhh44Y5JcpzWdmadlzdmh6hapvcPNk0= Received: from mx.pao1.isc.org (mx.pao1.isc.org [149.20.64.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx.pao1.isc.org", Issuer "COMODO RSA Organization Validation Secure Server CA" (not verified)) by bugs.isc.org (Postfix) with ESMTPS id BEC1ED78B0E for ; Fri, 2 Feb 2018 18:49:33 +0000 (UTC) Received: from mail-it0-x234.google.com (mail-it0-x234.google.com [IPv6:2607:f8b0:4001:c0b::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx.pao1.isc.org (Postfix) with ESMTPS id B70D93AB06A for ; Fri, 2 Feb 2018 18:49:31 +0000 (UTC) Received: by mail-it0-x234.google.com with SMTP id k6so8992204ita.3 for ; Fri, 02 Feb 2018 10:49:31 -0800 (PST) Received: from [192.168.125.10] (67-43-241-123.fidnet.com. [67.43.241.123]) by smtp.gmail.com with ESMTPSA id 15sm1380442iti.15.2018.02.02.10.49.29 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 02 Feb 2018 10:49:29 -0800 (PST) Message-ID: <7ec9e4a3-b15f-db85-7ef9-c5de85aa187b@mst.edu> From: "Nathan Neulinger" X-RT-Original-Encoding: utf-8 Organization: Missouri S&T X-RT-Interface: Email MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:58.0) Gecko/20100101 Thunderbird/58.0 X-Received: by 10.36.95.71 with SMTP id r68mr48237166itb.130.1517597370498; Fri, 02 Feb 2018 10:49:30 -0800 (PST) X-RT-Incoming-Encryption: Not encrypted X-Google-SMTP-Source: AH8x224YgaZbuV6jt15uZ6q6k5rDNcnf2/vUXKwwP2ewWW9YSEgSXvhrfxGh4wpjKueiZiMYqwMAxQ== From nneul@mst.edu Fri Feb 2 18:49:34 2018 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mx.pao1.isc.org Content-Language: en-US Content-Transfer-Encoding: 7bit Delivered-To: bind9-confidential@bugs.isc.org References: <20180202183831.GA97752@isc.org> <3dfe4ded-7240-de6e-0f65-097957c06bc6@mst.edu> X-Original-To: bind9-confidential@bugs.isc.org RT-Message-ID: Content-Length: 966 If you can make this public that would be appreciated. -- Nathan On 2/2/18 12:39 PM, Neulinger, Nathan via RT wrote: > Thank you! > > On 2/2/18 12:38 PM, Evan Hunt via RT wrote: >> Thank you for the report. This is a known bug; the restriction of >> cross-zone CNAMEs was being incorrectly applied to recursive queries as >> well as authoritative. (The bug has existed for a long time, actually, >> but was masked by another one that went away when we removed >> additional-from-auth.) Someone else reported the same issue last week, >> and it's already been fixed for the 9.12.1 maintenance release. >> >> If you wish you can pull an updated version of the v9_12 branch from our >> source repository (source.isc.org), or apply the attached patch. >> > -- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect