Commit Graph

559 Commits

Author SHA1 Message Date
Mark Andrews
a74224ad1e regen 2006-05-17 02:38:44 +00:00
Mark Andrews
c14078b211 grammer, spelling and clarity 2006-05-17 01:59:30 +00:00
Mark Andrews
72cec30321 grammer, spelling and clarity 2006-05-17 01:33:29 +00:00
Mark Andrews
82841337bb grammer, spelling and clarity 2006-05-16 06:43:06 +00:00
Mark Andrews
317363c3d7 regen 2006-05-08 15:46:15 +00:00
Mark Andrews
82c943cfb2 9.4.0a5 2006-05-03 02:28:25 +00:00
Mark Andrews
36109acaf9 regen 2006-05-03 02:26:59 +00:00
Mark Andrews
b209b57067 2015. [cleanup] use-additional-cache is now acache-enable for
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
2006-05-03 01:46:40 +00:00
Mark Andrews
3e6da549e0 regen 2006-04-23 10:12:43 +00:00
Mark Andrews
db8ac421d8 regen 2006-03-10 00:47:40 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
Mark Andrews
980c5d7b8d regen 2006-03-09 05:04:01 +00:00
Mark Andrews
1ba9283d78 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:40:33 +00:00
Mark Andrews
cdaad1be46 regen 2006-03-06 08:06:49 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:38:01 +00:00
Mark Andrews
e608c03f34 regen 2006-02-27 02:18:04 +00:00
Mark Andrews
7af42116ba fix minor typos 2006-02-26 23:01:58 +00:00
Mark Andrews
902d68b8bf regen 2006-02-17 02:05:47 +00:00
Mark Andrews
8fc5e43bd9 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
                        [RT #6496]
2006-02-17 00:42:10 +00:00
Mark Andrews
918db3b403 regen 2006-02-16 04:57:56 +00:00
Mark Andrews
dfb3eacdfb 1983. [func] Two new update policies. "selfsub" and "selfwild".
[RT #12895]
2006-02-16 01:38:49 +00:00
Mark Andrews
26e33ad133 regen 2006-02-07 05:52:36 +00:00
Mark Andrews
60579704fe regen 2006-02-06 05:28:42 +00:00
Mark Andrews
2472552390 regen 2006-02-06 03:36:44 +00:00
Mark Andrews
15cd70917b regen 2006-01-30 02:26:25 +00:00
Mark Andrews
572e225823 delegation-only is valid for type forward 2006-01-30 00:39:39 +00:00
Mark Andrews
5c40f431b8 1974. [doc] List each of the zone types and associated zone
options seperately in the ARM.
2006-01-30 00:30:04 +00:00
Mark Andrews
c3f2d61ede regen 2006-01-29 22:56:53 +00:00
Mark Andrews
17b2cc8f16 regen 2006-01-28 02:15:41 +00:00
Mark Andrews
1ed167177d regen 2006-01-27 05:16:45 +00:00
Mark Andrews
65fdd79a50 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
HMACSHA512 support. [RT #13606]
2006-01-27 02:50:51 +00:00
Mark Andrews
e9726c25ba regen 2006-01-18 04:59:11 +00:00
Mark Andrews
73e8579252 regen 2006-01-17 02:14:43 +00:00
Mark Andrews
8b774c8c4e regen 2006-01-07 03:40:23 +00:00
Mark Andrews
df6f75f878 regen 2006-01-06 01:48:04 +00:00
Mark Andrews
76f6d0382a 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-06 00:10:00 +00:00
Mark Andrews
a788a04b08 unbalances <term>'s 2006-01-05 11:42:36 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:24:27 +00:00
Mark Andrews
48d9f5bdaa inclu1954. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1953.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:10:44 +00:00
Mark Andrews
e770e36d60 update copyright notice 2006-01-04 23:50:23 +00:00
Mark Andrews
e74b6c9c74 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:29:18 +00:00
Mark Andrews
f53e702b25 1947. [func] It is now possible to configure named to accept
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
2006-01-04 02:58:42 +00:00
Mark Andrews
5b6d8a55ec v9_4_0a3 2005-12-06 03:03:34 +00:00
Mark Andrews
e3a0c1266e regen 2005-12-05 01:40:16 +00:00
Mark Andrews
cf4e1143ea 1942. [bug] If the name of a DNSKEY match that of one in
trusted-keys do not attempt to validate the DNSKEY
                        using the parents DS RRset. [RT #15649]
2005-12-05 00:00:03 +00:00
Mark Andrews
c96954b3fb regen 2005-11-03 02:44:32 +00:00
Mark Andrews
c7d337e4ff 1939. [bug] The resolver could dereference a null pointer after
validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
2005-11-03 00:58:00 +00:00
Mark Andrews
a748400418 regen 2005-11-02 23:26:03 +00:00
Mark Andrews
68cf43ce19 move clients-per-query to tuning 2005-11-02 22:24:51 +00:00
Mark Andrews
b1439dd74c regen 2005-10-26 06:02:02 +00:00