Mark Andrews
a74224ad1e
regen
2006-05-17 02:38:44 +00:00
Mark Andrews
c14078b211
grammer, spelling and clarity
2006-05-17 01:59:30 +00:00
Mark Andrews
72cec30321
grammer, spelling and clarity
2006-05-17 01:33:29 +00:00
Mark Andrews
82841337bb
grammer, spelling and clarity
2006-05-16 06:43:06 +00:00
Mark Andrews
317363c3d7
regen
2006-05-08 15:46:15 +00:00
Mark Andrews
82c943cfb2
9.4.0a5
2006-05-03 02:28:25 +00:00
Mark Andrews
36109acaf9
regen
2006-05-03 02:26:59 +00:00
Mark Andrews
b209b57067
2015. [cleanup] use-additional-cache is now acache-enable for
...
consistancy. Default acache-enable off in BIND 9.4
as it requires memory usage to be configured.
It may be enabled by default in BIND 9.5 once we
have more experience with it.
2006-05-03 01:46:40 +00:00
Mark Andrews
3e6da549e0
regen
2006-04-23 10:12:43 +00:00
Mark Andrews
db8ac421d8
regen
2006-03-10 00:47:40 +00:00
Mark Andrews
f560a1877b
2007. [func] It is now possible to explicitly enable DNSSEC
...
validation. default dnssec-validation no; to
be changed to yes in 9.5.0. [RT #15674 ]
2006-03-09 23:38:21 +00:00
Mark Andrews
980c5d7b8d
regen
2006-03-09 05:04:01 +00:00
Mark Andrews
1ba9283d78
2006. [security] Allow-query-cache and allow-recursion now default
...
to the builtin acls "localnets" and "localhost".
This is being done to make caching servers less
attractive as reflective amplifying targets for
spoofed traffic. This still leave authoritative
servers exposed.
The best fix is for full BCP 38 deployment to
remove spoofed traffic.
2006-03-09 03:40:33 +00:00
Mark Andrews
cdaad1be46
regen
2006-03-06 08:06:49 +00:00
Mark Andrews
cb6bc372d8
2001. [func] Check the KSK flag when updating a dynamic zone.
...
New zone option "update-check-ksk yes;". [RT #15817 ]
2006-03-06 01:38:01 +00:00
Mark Andrews
e608c03f34
regen
2006-02-27 02:18:04 +00:00
Mark Andrews
7af42116ba
fix minor typos
2006-02-26 23:01:58 +00:00
Mark Andrews
902d68b8bf
regen
2006-02-17 02:05:47 +00:00
Mark Andrews
8fc5e43bd9
1597. [func] Allow notify-source and query-source to be specified
...
on a per server basis similar to transfer-source.
[RT #6496 ]
2006-02-17 00:42:10 +00:00
Mark Andrews
918db3b403
regen
2006-02-16 04:57:56 +00:00
Mark Andrews
dfb3eacdfb
1983. [func] Two new update policies. "selfsub" and "selfwild".
...
[RT #12895 ]
2006-02-16 01:38:49 +00:00
Mark Andrews
26e33ad133
regen
2006-02-07 05:52:36 +00:00
Mark Andrews
60579704fe
regen
2006-02-06 05:28:42 +00:00
Mark Andrews
2472552390
regen
2006-02-06 03:36:44 +00:00
Mark Andrews
15cd70917b
regen
2006-01-30 02:26:25 +00:00
Mark Andrews
572e225823
delegation-only is valid for type forward
2006-01-30 00:39:39 +00:00
Mark Andrews
5c40f431b8
1974. [doc] List each of the zone types and associated zone
...
options seperately in the ARM.
2006-01-30 00:30:04 +00:00
Mark Andrews
c3f2d61ede
regen
2006-01-29 22:56:53 +00:00
Mark Andrews
17b2cc8f16
regen
2006-01-28 02:15:41 +00:00
Mark Andrews
1ed167177d
regen
2006-01-27 05:16:45 +00:00
Mark Andrews
65fdd79a50
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
...
HMACSHA512 support. [RT #13606 ]
2006-01-27 02:50:51 +00:00
Mark Andrews
e9726c25ba
regen
2006-01-18 04:59:11 +00:00
Mark Andrews
73e8579252
regen
2006-01-17 02:14:43 +00:00
Mark Andrews
8b774c8c4e
regen
2006-01-07 03:40:23 +00:00
Mark Andrews
df6f75f878
regen
2006-01-06 01:48:04 +00:00
Mark Andrews
76f6d0382a
1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723 ]
2006-01-06 00:10:00 +00:00
Mark Andrews
a788a04b08
unbalances <term>'s
2006-01-05 11:42:36 +00:00
Mark Andrews
ff3b707f8a
1959. [func] Control the zeroing of the negative response TTL to
...
a soa query. Defaults "zero-no-soa-ttl yes;" and
"zero-no-soa-ttl-cache no;". [RT #15460 ]
2006-01-05 02:24:27 +00:00
Mark Andrews
48d9f5bdaa
inclu1954. [func] Named now falls back to advertising EDNS with a
...
512 byte receive buffer if the initial EDNS queries
fail. [RT #14852 ]
1953. [func] The maximum EDNS UDP response named will send can
now be set in named.conf (max-udp-size). This is
independent of the advertised receive buffer
(edns-udp-size). [RT #14852 ]
2006-01-05 00:10:44 +00:00
Mark Andrews
e770e36d60
update copyright notice
2006-01-04 23:50:23 +00:00
Mark Andrews
e74b6c9c74
1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
...
a TCP socket. This prevents the source address being
set for TCP connections. [RT #15628 ]
2006-01-04 04:29:18 +00:00
Mark Andrews
f53e702b25
1947. [func] It is now possible to configure named to accept
...
expired RRSIGs. Default "dnssec-accept-expired no;".
Setting "dnssec-accept-expired yes;" leaves named
vulnerable to replay attacks. [RT #14685 ]
2006-01-04 02:58:42 +00:00
Mark Andrews
5b6d8a55ec
v9_4_0a3
2005-12-06 03:03:34 +00:00
Mark Andrews
e3a0c1266e
regen
2005-12-05 01:40:16 +00:00
Mark Andrews
cf4e1143ea
1942. [bug] If the name of a DNSKEY match that of one in
...
trusted-keys do not attempt to validate the DNSKEY
using the parents DS RRset. [RT #15649 ]
2005-12-05 00:00:03 +00:00
Mark Andrews
c96954b3fb
regen
2005-11-03 02:44:32 +00:00
Mark Andrews
c7d337e4ff
1939. [bug] The resolver could dereference a null pointer after
...
validation if all the queries have timed out.
[RT #15528 ]
1938. [bug] The validator was not correctly handling unsecure
negative responses at or below a SEP. [RT #15528 ]
2005-11-03 00:58:00 +00:00
Mark Andrews
a748400418
regen
2005-11-02 23:26:03 +00:00
Mark Andrews
68cf43ce19
move clients-per-query to tuning
2005-11-02 22:24:51 +00:00
Mark Andrews
b1439dd74c
regen
2005-10-26 06:02:02 +00:00