URL:
https://github.com/freeipa/freeipa/pull/3725
Author: cjeanner
Title: #3725: Ensure recursion is locked when deploying DNS service
Action: opened
PR body:
"""
This patch kind of revert what was done in [1]. 8 years ago,
amplification attack was maybe not "a thing", but nowadays, we can't
possibly get wide opened FreeIPA services.
A next step would be to add a new option to the install CLI, allowing to
list the additional networks we want to open.
Related-Bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1754530
[1]
https://github.com/freeipa/freeipa/commit/5f4c75eb28b3d50a35fbf3a86a6d842...
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3725/head:pr3725
git checkout pr3725