Baltasar Blanco dea2f90f24 plugin/file: return SERVFAIL on self-referential CNAME loops (#8475) ...

A CNAME whose target is its own owner name is chased by externalLookup
until the depth cap, appending the same record on every pass. The reply
was NOERROR with the CNAME repeated ten times.

Self-referential DNAME already returns SERVFAIL, as do wildcard CNAME
loops. Return SERVFAIL here too. The check runs on the CNAME chase path
only, so normal responses are unaffected.

Fixes #6421

Signed-off-by: baltasarblanco <baltablanco9008@gmail.com>

2026-09-08 12:21:54 -07:00

16 KiB

Raw Blame History

View Raw