BIND 10 #772: Update xfrout to use ACL checking library

BIND 10 Development do-not-reply at isc.org
Fri Jul 15 07:02:58 UTC 2011


#772: Update xfrout to use ACL checking library
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  vorner
  stephen                            |                Status:  reviewing
                       Type:         |             Milestone:
  enhancement                        |  Sprint-20110802
                   Priority:  major  |            Resolution:
                  Component:         |             Sensitive:  0
  xfrout                             |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  3.0
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:         |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------

Comment (by jinmei):

 Two more things:

 - The configuration name "ACL" may not be the best one in that the all
   upper-case name is inconsistent with that of b10-resolver (which
   uses "query_acl") and also that it may be too generic (for example,
   we may want to have a different ACL that is performed even before
   TSIG check).
 - this is probably abusing the task, but now that we have the remote
   address, it would be nice we can add some small extensions to some
   log messages so that they print the remote address. (but maybe it
   should rather be deferred to a separate ticket)

-- 
Ticket URL: <http://bind10.isc.org/ticket/772#comment:9>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list