[Freeipa-devel] [freeipa PR#3725][opened] Ensure recursion is locked when deploying DNS service

[cjeanner]

   URL: https://github.com/freeipa/freeipa/pull/3725
Author: cjeanner
 Title: #3725: Ensure recursion is locked when deploying DNS service
Action: opened

PR body:
"""
This patch kind of revert what was done in [1]. 8 years ago,
amplification attack was maybe not "a thing", but nowadays, we can't
possibly get wide opened FreeIPA services.

A next step would be to add a new option to the install CLI, allowing to
list the additional networks we want to open.

Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1754530
[1] https://github.com/freeipa/freeipa/commit/5f4c75eb28b3d50a35fbf3a86a6d842...
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3725/head:pr3725
git checkout pr3725