iterate: fix bad zone_cut update in a rare case

See merge request !1237

https://forum.turris.cz/t/kresd-name-unresolution/16275

Example problematic query during QNAME minimization:
```
[resolv][43578.24]   => id: '08532' querying: 'ns-921.amazon.com.'@'34.196.62.143#00053' zone cut: 'aws.amazon.com.' qname: 'coNsOlE.aWs.AmAzON.Com.' qtype: 'NS' proto: 'udp'
[iterat][43578.24]   <= answer received:
;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 8532
;; Flags: qr aa  QUERY: 1; ANSWER: 4; AUTHORITY: 1; ADDITIONAL: 0

;; QUESTION SECTION
console.aws.amazon.com.         NS

;; ANSWER SECTION
console.aws.amazon.com. 600     NS      ns-921.amazon.com.
console.aws.amazon.com. 60      CNAME   us-east-1.console.aws.amazon.com.
us-east-1.console.aws.amazon.com. 600   NS      ns-921.amazon.com.
us-east-1.console.aws.amazon.com. 60    CNAME   gr.console-geo.us-east-1.amazonaws.com.

;; AUTHORITY SECTION
us-east-1.amazonaws.com.        60      SOA     ns-921.amazon.com. root.amazon.com. 1638962488 3600 900 7776000 60

[iterat][43578.24]   <= rcode: NXDOMAIN
```

Here the zone_cut would get updated to us-east-1.console.aws.amazon.com.
breaking further resolution towards    eu-west-3.console.aws.amazon.com.

release 5.4.3

See merge request !1236

nitpicks

See merge request !1235

lua: add parse_rdata() utility function

See merge request !1233

Credit for code goes to Vladimír Čunát

renumber and reroute: documentation updates

See merge request !1232

Unspecified mask is already returned as full bitlen by
kr_straddr_subnet().

Fixes #657

Tomas Krizek authored 3 years ago and Vladimír Čunát committed 3 years ago

Answers to EDNS requests from certain lua policies that use the
answer_clear() function would lack OPT RR and thus violate the MUST
condition in RFC6891.6.1.1.

nitpicks

See merge request !1224

On some platforms in CI, even 8s doesn't seem sufficient enough to
guarantee stability. Hopefully this improves the situation.

.gitignore: add '.cache'

See merge request !1231

modules/policy: add 'domain' filter for equality matching

See merge request !1228

Vladimír Čunát authored 3 years ago and Oto Šťáva committed 3 years ago

Overriding records makes more sense on a particular name
than in a whole sub-tree.

spelling & edns_keepalive fix

See merge request !1229

Josh Soref authored 3 years ago and Tomas Krizek committed 3 years ago

Due to the typo in the EDNS keepalive init funcion name, the module
wouldn't be properly initialized after loading and wouldn't be
functional.

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Josh Soref authored 3 years ago and Tomas Krizek committed 3 years ago

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

nitpicks

See merge request !1220