From da71e7e9de233bc0e40a90adb2db6d0944a1356a Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Wed, 4 May 2016 10:30:18 +0200 Subject: DNS: Warn if forwarding policy conflicts with automatic empty zones Forwarding policy "first" or "none" may conflicts with some automatic empty zones. Queries for zones specified by RFC 6303 will ignore forwarding and recursion and always result in NXDOMAIN answers. This is not detected and warned about. Global forwarding is equivalent to forward zone ".". Example: Forward zone 1.10.in-addr.arpa with policy "first" will not forward anything because BIND will automatically prefer automatic empty zone "10.in-addr.arpa." which is authoritative. https://fedorahosted.org/freeipa/ticket/5710 Reviewed-By: Martin Basti --- ipatests/test_xmlrpc/test_dns_plugin.py | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'ipatests/test_xmlrpc') diff --git a/ipatests/test_xmlrpc/test_dns_plugin.py b/ipatests/test_xmlrpc/test_dns_plugin.py index 0953de8b5..7351d0b1d 100644 --- a/ipatests/test_xmlrpc/test_dns_plugin.py +++ b/ipatests/test_xmlrpc/test_dns_plugin.py @@ -1762,6 +1762,13 @@ class test_dns(Declarative): 'value': None, 'summary': None, u'messages': ( + {u'message': lambda x: x.startswith( + u"Forwarding policy conflicts with some " + "automatic empty zones."), + u'code': 13021, + u'type': u'warning', + u'name': u'DNSForwardPolicyConflictWithEmptyZone', + u'data': {}}, {u'message': lambda x: x.startswith( u"DNS server %s: query '. SOA':" % fwd_ip), u'code': 13006, @@ -3437,6 +3444,13 @@ class test_forward_zones(Declarative): 'value': fwzone2_dnsname, 'summary': None, u'messages': ( + {u'message': lambda x: x.startswith( + u"Forwarding policy conflicts with some " + "automatic empty zones."), + u'code': 13021, + u'type': u'warning', + u'name': u'DNSForwardPolicyConflictWithEmptyZone', + u'data': {}}, {u'message': lambda x: x.startswith( u"DNS server %s: query '%s SOA':" % (forwarder1, fwzone2)), -- cgit