At least it seems so...

Clearing the query flags lead to kresd iterating over authoritative
servers.  Related: https://gitlab.labs.nic.cz/knot/resolver/issues/217

Note that validation of synthesised AAAA behind a CNAME doesn't work
when policy.FORWARD + dns64.  Example: www.regiojet.cz.
policy.STUB + dns64 seems not to work at all.

If CNAME chain occurs CNAME is placed before AAAA.

I also verified there's no other usage of the `moduledir` symbol from
lua.  Bug introduced in 2f81b111 (within !298).

Casting is dangerous, e.g. it's easy to misconfigure policy with
  policy.add(policy.FORWARD('some address'))
which lead to segfault without showing any indication of the cause.
Now this case will show as
  .../policy.lua:98: 'struct kr_query' has no member named 'current'
and only abort the policy module instead of the whole process.

Thanks to Petr for finding this issue.

I'm sorry.  I'm not certain about this and don't like to invest much
time into it.

I see no sane way to set the flags from lua, so I made a C function.

This started working since the grandparent commit.  Suggested at
https://gitter.im/CZ-NIC/knot-resolver?at=58ca5a03f7f7d48104212607

It would break after making rr2str pretty-print the data.

Probably.  The problem sometimes appeared on osx Travis.

modules/dnstap: Change option names to socket_path and log_responses, we don't use camelCase anywhere else

Vladimír Čunát authored 8 years ago and Ondřej Surý committed 8 years ago

... and generate files instead of including them.

Marek Vavruša authored 8 years ago and Vladimír Čunát committed 8 years ago

(cherry picked from commit 924d9936)

Vladimír Čunát authored 8 years ago and Ondřej Surý committed 8 years ago

So far it wasn't possible to load multiple files (!).  Real use case:
https://forum.turris.cz/t/how-to-configure-local-address-dns-resoultion-on-omnia/1000/14

Vladimír Čunát authored 8 years ago and Ondřej Surý committed 8 years ago

These shouldn't make any problems:
- the verbose messages don't print any scope, and
- reputation cache doesn't consider scope.

Comment parsing will only be supported in future libzscanner version.
Also move out of the module, as trust_anchors.lua requires it and isn't
in a module.

Some of their nameservers return 192.168.1.1, but it seems an
improvement, as meaningful address is returned sometimes now.