ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
14,799 Commits 589 Branches 805 Tags
01b2ff64ccdcc51caab40a1bbf4f3dbfdfd38281
Commit Graph

287 Commits

Author SHA1 Message Date
Mark Andrews
86c4403666 2026. [bug] Rate limit the two recursive client exceeded messages. 
[RT #16044]
 2006-05-18 03:14:03 +00:00
Mark Andrews
bbbdc97ccf 2016. [bug] Return a partial answer if recursion is not 
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
 2006-05-16 03:28:16 +00:00
Mark Andrews
e9724570aa 2008. [func] It is now posssible to enable/disable DNSSEC 
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
 2006-03-09 23:46:20 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC 
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
 2006-03-09 23:38:21 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
ea407e7082 1991. [cleanup] The configuration data, once read, should be treated 
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
 2006-02-28 03:10:49 +00:00
Mark Andrews
0c3fa5d938 1977. [bug] Silence noisy log message. [RT #15704] 2006-02-02 22:52:57 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to 
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
 2006-01-05 02:24:27 +00:00
Mark Andrews
e770e36d60 update copyright notice 2006-01-04 23:50:23 +00:00
Mark Andrews
f53e702b25 1947. [func] It is now possible to configure named to accept 
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
 2006-01-04 02:58:42 +00:00
Mark Andrews
3c8367a203 1940. [bug] Fixed a number of error conditions reported by 
Coverity.
 2005-11-30 03:44:39 +00:00
Mark Andrews
52fa04c198 1935. [bug] 'acache' was DO sensitive. [RT #15430] 
1934.   [func]          Validate pending NS RRsets, in the authority section,
                        prior to returning them if it can be done without
                        requiring DNSKEYs to be fetched.  [RT #15430]
 2005-11-02 01:37:35 +00:00
Mark Andrews
369f44092a 1927. [bug] Access to soanode or nsnode in rbtdb violated the 
lock order rule and could cause a dead lock.
                        [RT# 15518]
 2005-10-13 02:12:25 +00:00
Mark Andrews
756c1c98e4 1913. [func] Integrate contibuted DLZ code into named. [RT #11382] 2005-09-05 00:20:08 +00:00
Mark Andrews
4df834d69f 1913. [func] Automatic empty zone creation for D.F.IP6.ARPA and 
friends.  Note: RFC 1918 zones are not yet covered by
                        this but are likely to be in a future release.

                        New options: empty-server, empty-contact,
                        empty-zones-enable and disable-empty-zone.
 2005-08-18 01:03:03 +00:00
Mark Andrews
79a5a49135 1910. [cleanup] Don't add DNSKEY records to the additional section. 2005-08-11 05:35:12 +00:00
Mark Andrews
6dff954cda result was not being assigned. 2005-07-28 05:46:55 +00:00
Mark Andrews
b9ee625560 1905. [bug] Recursive clients soft quota support wasn't working 
as expected. [RT #15103]
 2005-07-27 02:44:22 +00:00
Mark Andrews
e021d8eff8 1891. [func] Limit the number of recursive clients that can be 
waiting for a single query (<qname,qtype,qclass>) to
                        resolve.  New options clients-per-query and
                        max-clients-per-query.
 2005-06-27 00:20:04 +00:00
Mark Andrews
02ff44e8ef sync w/ head 2005-06-22 22:05:50 +00:00
Mark Andrews
9ac4b79fc1 1887. [func] Detect duplicates of UDP queries we are recursing on 
and drop them.  New stats category "duplicates".
                        [RT #2471]
 2005-06-17 02:04:33 +00:00
Mark Andrews
3783523d04 typo in comment 2005-05-16 05:31:22 +00:00
Rob Austein
372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews
04aed74c85 update copyright 2005-03-16 00:56:29 +00:00
Mark Andrews
163f0fd424 1804. [bug] Ensure that if we are queried for glue that it fits 
in the additional section or TC is set to tell the
                        client to retry using TCP. [RT #10114]
 2005-03-15 01:31:31 +00:00
Tatuya JINMEI 神明達哉
7a79852eb2 1526. [func] Implemented "additional section caching (or acache)", 
an internal cache framework for additional section
			content to improve response performance.  Several
			configuration options were provided to control the
			behavior.

(merged into 9_4)
 2004-12-21 10:59:02 +00:00
Mark Andrews
219967d623 order should be signed. 2004-06-30 14:14:46 +00:00
Mark Andrews
753b90055a 1675. [bug] named would sometimes add extra NSEC records to 
the authority section.
 2004-06-29 00:52:18 +00:00
Mark Andrews
df73d89a1c 1635. [bug] Memory leak on error in query_addds(). 2004-05-14 00:59:30 +00:00
Mark Andrews
3bdf0a6885 hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:04:05 +00:00
Mark Andrews
50105afc55 1589. [func] DNSSEC lookaside validation. 
enable-dnssec -> dnssec-enable
 2004-03-10 02:19:58 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews
89783da064 1581. [func] Disable DNSSEC support by default. To enable 
DNSSEC specify "enable-dnssec yes;" in named.conf.
 2004-02-17 03:40:23 +00:00
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
73f5c1ff00 stop listening to AD 2004-01-27 05:01:12 +00:00
Mark Andrews
2f35edba9c AD is independent of DO/AD 2004-01-21 15:47:22 +00:00
Mark Andrews
9cf0970f43 1561. [bug] It was possible to release the same name twice if 
named ran out of memory. [RT #10197]
 2004-01-21 15:44:24 +00:00
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into 
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
 2004-01-14 02:06:51 +00:00
Tatuya JINMEI 神明達哉
e407562a75 1528. [cleanup] Simplify some dns_name_ functions based on the 
deprecation of bitstring labels.
 2003-10-25 00:31:12 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Tatuya JINMEI 神明達哉
1e271ac738 typo: s/baliwick/bailiwick/ 
(I hope it is okay to commit this since it is so trivial)
 2003-07-29 22:05:01 +00:00
Mark Andrews
b0c2141b23 1464. [bug] Preserve "out of zone" data for outgoing zone 
transfers. [RT #5192]
 2003-04-17 05:40:45 +00:00
Mark Andrews
0c2509b0b9 1449. [bug] query_addbestns() didn't handle running out of memory 
gracefully.
developer: marka
reviewer: explorer
 2003-02-27 02:11:16 +00:00
Mark Andrews
8b5de97014 1448. [bug] Handle empty wildcards labels. 
developer: marka
reviewer: explorer
 2003-02-27 00:19:04 +00:00
Mark Andrews
308094e467 arguements reversed 2003-01-31 12:07:56 +00:00
Mark Andrews
838d608e6f 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-01-21 06:11:46 +00:00
Mark Andrews
421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN. 
[RT #4715]
developer: marka
reviewer: explorer
 2003-01-18 03:18:31 +00:00
Mark Andrews
c86eed4bde 1410. [func] handle records that live in the parent zone, e.g. DS. 
developer: marka
reviewer: explorer
 2003-01-14 00:28:50 +00:00
Mark Andrews
49a940dc68 1402. [cleanup] A6 has been moved to experimental and is no longer 
fully supported.
developer: jinmei
reviewer: marka
 2002-11-27 09:52:58 +00:00