Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)

[Christos Zoulas <christos%zoulas.com@localhost>]

The following reply was made to PR bin/58170; it has been noted by GNATS.

From: Christos Zoulas <christos%zoulas.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: Christos Zoulas <christos%netbsd.org@localhost>,
 gnats-admin%netbsd.org@localhost,
 netbsd-bugs%netbsd.org@localhost,
 "riastradh%netbsd.org@localhost" <riastradh%NetBSD.org@localhost>,
 toku%tokugawa.org@localhost
Subject: Re: bin/58170 (NetBSD10.0 /usr/sbin/bind problem)
Date: Fri, 19 Apr 2024 08:33:42 -0400

 The only difference is that the old code was inside a log statement so =
 it never
 fired. Moving it inside the log just does not make sense (blocking =
 should not
 depend on logging). The question is if we should remove the filtering =
 statement
 that blocks a querier when the query is not allowed. I think we should, =
 since the
 querier has no way to know that there is an ACL preventing the query so =
 this
 is not an abuse.
 
 christos