fergalmoran/DnsServer
1
0
Fork 0
mirror of https://github.com/fergalmoran/DnsServer.git synced 2026-05-10 13:16:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1106 from IngmarStein/filter_aaaa_dnssec

Browse Source 
Filter AAAA: allow modification of unsigned responses for DNSSEC-aware clients
This commit is contained in:
Shreyas Zare
2024-11-16 18:31:15 +05:30
committed by GitHub
parent 46b79b3ab2 e6979353b2
commit acd72344d4
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Apps/FilterAaaaApp/App.cs
View File

@@ -116,7 +116,16 @@ namespace FilterAaaa
return response;
if (request.DnssecOk)
return response;
{
foreach (DnsResourceRecord record in response.Answer)
{
if (record.Type == DnsResourceRecordType.RRSIG)
{
//response is signed and the client is DNSSEC aware; must not be modified
return response;
}
}
}
if (response.RCODE != DnsResponseCode.NoError)
return response;