Commit Graph

2257 Commits

Author SHA1 Message Date
Mark Andrews
9e0b69bf49 2030. [bug] We were being overly conservative when disabling
openssl engine support. [RT #16030]
2006-05-23 04:50:52 +00:00
Mark Andrews
7c7ca945e9 2029. [bug] host printed out the server multiple times when
specified on the command line. [RT #15992]
2006-05-23 04:40:42 +00:00
Mark Andrews
bc8780cbea s/x68/x86/ 2006-05-19 04:43:11 +00:00
Mark Andrews
8ae91c8651 change number 2006-05-19 02:52:16 +00:00
Mark Andrews
e7e7964c74 2026. [port] linux: socket.c compatability for old systems.
[RT #16015]
2006-05-19 02:49:29 +00:00
Mark Andrews
c838b53140 2027. [port] libbind: solaris x68 support. [RT #16020] 2006-05-19 02:36:00 +00:00
Mark Andrews
86c4403666 2026. [bug] Rate limit the two recursive client exceeded messages.
[RT #16044]
2006-05-18 03:14:03 +00:00
Mark Andrews
740051909d 2025. [func] Update "zone serial unchanged" message. [RT #16026] 2006-05-18 02:38:27 +00:00
Mark Andrews
eab272cfeb 2023. [bug] "make install" should create ${localstatedir}/run and
${sysconfdir} if they do not exist. [RT #16033]
2006-05-18 01:04:34 +00:00
Mark Andrews
c3425b89a5 2022. [bug] If dnssec validation is disabled only assert CD if
CD was requested. [RT #16037]

2021.   [bug]           dnssec-enable no; triggered a REQUIRE. [RT #16037]
2006-05-18 00:54:41 +00:00
Mark Andrews
6216aa9b81 2020. [bug] rdataset_setadditional() could leak memory. [RT #16034] 2006-05-16 04:11:39 +00:00
Mark Andrews
a2a3e2935e 2019. [tuning] Reduce the amount of work performed per quantum
when cleaning the cache. [RT #15986]
2006-05-16 03:57:15 +00:00
Mark Andrews
b815ddd122 2018. [bug] Checking if the HMAC MD5 private file was broken.
[RT #15960]
2006-05-16 03:47:14 +00:00
Mark Andrews
974ea3c6f7 2017. [bug] allow-query default was net correct. [RT #15946] 2006-05-16 03:39:57 +00:00
Mark Andrews
bbbdc97ccf 2016. [bug] Return a partial answer if recursion is not
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
2006-05-16 03:28:16 +00:00
Mark Andrews
a5f8e650e8 9.4.0a5 2006-05-03 01:49:09 +00:00
Mark Andrews
b209b57067 2015. [cleanup] use-additional-cache is now acache-enable for
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
2006-05-03 01:46:40 +00:00
Shane Kerr
a80207d2a3 Stats for acache. Currently running on senna (ns-ext). 2006-05-02 12:55:31 +00:00
Mark Andrews
317964b121 2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
responses more gracefully. [RT #15941]
2006-05-02 04:23:12 +00:00
Mark Andrews
ca97057dca 2012. [func] Don't insert new acache entries if acache is full.
[RT #15970]
2006-05-02 03:28:41 +00:00
David Hankins
66da3a511e 2011. [func] dnssec-signzone can now update the SOA record of
the signed zone, either as an increment or as the
                        system time(). [RT #15633]
2006-04-13 18:09:46 +00:00
Mark Andrews
50c7241d69 9.4.0a4 2006-03-10 00:28:00 +00:00
Mark Andrews
a501e657d3 2009. [bug] libbind: coverity fixes. [RT #15808] 2006-03-10 00:20:08 +00:00
Mark Andrews
e9724570aa 2008. [func] It is now posssible to enable/disable DNSSEC
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
2006-03-09 23:46:20 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
Mark Andrews
1ba9283d78 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:40:33 +00:00
Mark Andrews
8a6f69ef96 2005. [bug] libbind: Retransmission timeouts should be
based on which attempt it is to the nameserver
                        and not the nameserver itself. [RT #13548]
2006-03-08 04:14:17 +00:00
Mark Andrews
b16c72bf12 2004. [bug] dns_tsig_sign() could pass a NULL pointer to
dst_context_destroy() when cleaning up after a
                        error. [RT #15835]
2006-03-08 03:55:50 +00:00
Mark Andrews
9b6c85ca20 2003. [bug] libbind: The DNS name/address lookup functions could
occasionally follow a random pointer due to
                        structures not being completely zeroed. [RT #15806]
2006-03-08 03:43:18 +00:00
Mark Andrews
13481a92d8 2002 [bug] libbind: tighten the constraints on when
struct addrinfo._ai_pad exists.  [RT #15783]
2006-03-06 02:27:15 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:38:01 +00:00
Mark Andrews
ac5fb539db 2000. [bug] memmove()/strtol() fix was incomplete. [#RT 15812] 2006-03-06 01:11:04 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
7cdc4b985e 1998. [bug] Restrict handling of fifos as sockets to just SunOS.
This allows named to connect to entropy gathering
                        daemons that use fifos instead of sockets. [RT #15840]
2006-03-02 23:29:24 +00:00
Mark Andrews
3497fc3b77 1997. [bug] Named was failing to replace negative cache entries
when a positive one for the type was learnt.
                        [RT #15818]
2006-03-02 23:19:20 +00:00
Mark Andrews
c4f3ffc491 1995. [bug] 'host' was reporting multiple "is an alias" messages.
[RT #15702]
2006-03-02 01:50:15 +00:00
Mark Andrews
8fe36fefe9 1994. [port] OpenSSL 0.9.8 support. [RT #15694] 2006-03-01 02:41:02 +00:00
Mark Andrews
da7a930549 1993. [bug] Log messsage, via syslog, were missing the space
after the timestamp if "print-time yes" was specified.
                        [RT #15844]
2006-03-01 02:25:11 +00:00
Mark Andrews
e73fc6bcef 1992. [bug] Not all incoming zone transfer messages included the
view.  [RT #15825]
2006-03-01 02:13:19 +00:00
Mark Andrews
ea407e7082 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 03:10:49 +00:00
Mark Andrews
f537534a39 1990. [bug] libbind: isc's override of broken gettimeofday()
implementions was not always effective.
                        [RT #15709]
2006-02-28 00:11:03 +00:00
Mark Andrews
7af42116ba fix minor typos 2006-02-26 23:01:58 +00:00
Mark Andrews
bfca12c389 1989. [bug] win32: don't check the service password when
re-installing. [RT #15882]
2006-02-24 03:54:16 +00:00
Mark Andrews
4faccdcc07 1988. [bug] Remove a bus error from the SHA256/SHA512 support.
[RT #15878]
2006-02-24 00:06:32 +00:00
Mark Andrews
c017465e4a 1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608] 2006-02-21 23:53:35 +00:00
Mark Andrews
77c5b1c067 1986. [func] Report when a zone is removed. [RT #15849] 2006-02-21 23:17:32 +00:00
Mark Andrews
f773366d5e 1985. [protocol] DLV has now been assigned a official type code of
32769. [RT #15807]

                        Note: care should be taken to ensure you upgrade
                        both named and dnssec-signzone at the same time for
                        zones with DLV records where named is the master
                        server for the zone.  Also any zones that contain
                        DLV records should be removed when upgrading a slave
                        zone.  You do not however have to upgrade all
                        servers for a zone with DLV records simultaniously.
2006-02-17 01:12:01 +00:00
Mark Andrews
8fc5e43bd9 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
                        [RT #6496]
2006-02-17 00:42:10 +00:00
Mark Andrews
80693a5fe0 1984. [func] dig, nslookup and host now advertise a 4096 byte
EDNS UDP buffer size by default. [RT #15855]
2006-02-17 00:14:21 +00:00
Mark Andrews
dfb3eacdfb 1983. [func] Two new update policies. "selfsub" and "selfwild".
[RT #12895]
2006-02-16 01:38:49 +00:00