BIND 10 #772: Update xfrout to use ACL checking library
BIND 10 Development
do-not-reply at isc.org
Fri Jul 15 07:02:58 UTC 2011
#772: Update xfrout to use ACL checking library
-------------------------------------+-------------------------------------
Reporter: | Owner: vorner
stephen | Status: reviewing
Type: | Milestone:
enhancement | Sprint-20110802
Priority: major | Resolution:
Component: | Sensitive: 0
xfrout | Sub-Project: DNS
Keywords: | Estimated Difficulty: 3.0
Defect Severity: N/A | Total Hours: 0
Feature Depending on Ticket: |
Add Hours to Ticket: 0 |
Internal?: 0 |
-------------------------------------+-------------------------------------
Comment (by jinmei):
Two more things:
- The configuration name "ACL" may not be the best one in that the all
upper-case name is inconsistent with that of b10-resolver (which
uses "query_acl") and also that it may be too generic (for example,
we may want to have a different ACL that is performed even before
TSIG check).
- this is probably abusing the task, but now that we have the remote
address, it would be nice we can add some small extensions to some
log messages so that they print the remote address. (but maybe it
should rather be deferred to a separate ticket)
--
Ticket URL: <http://bind10.isc.org/ticket/772#comment:9>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list