Commit Graph
1228 Commits
Author SHA1 Message Date
Tinderbox User 055fd5fcba update copyright notice 2013-04-30 05:03:43 +00:00
Tinderbox User 954e43e605 update copyright notice 2013-04-30 04:51:59 +00:00
Mark Andrews 26bb3b7a67 3559. [func] Check that both forms of Sender Policy Framework
records exist or do not exist. [RT #33355]
2013-04-30 13:49:41 +10:00
Tinderbox User 5655174c2c update copyright notice 2013-04-29 23:46:13 +00:00
Mark Andrews 9a785712f1 3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331] 2013-04-29 15:46:54 +10:00
Mark Andrews ec8a802114 3557. [bug] Reloading redirect zones was broken. [RT #33292] 2013-04-29 15:20:09 +10:00
Evan Hunt 0e932023c4 [master] resume overriding rrl test failures 2013-04-25 20:02:59 -07:00
Evan Hunt a6d43d18b1 [master] fixed several RRL issues
3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]
2013-04-25 14:42:44 -07:00
Mark Andrews 78e179da20 egrep was not precise enough 2013-04-13 22:34:35 +10:00
Evan Hunt b99bfa184b [master] unify internal and export libraries
3550.	[func]		Unified the internal and export versions of the
			BIND libraries, allowing external clients to use
			the same libraries as BIND. [RT #33131]
2013-04-10 13:49:57 -07:00
Mark Andrews cc444c73d5 add sleep 1 to loop 2013-04-10 21:35:36 +10:00
Tinderbox User 526cc7c2c0 update copyright notice 2013-04-09 23:46:07 +00:00
Mark Andrews 1cc4695f0d 3547. [bug] Some malformed unknown rdata records were not properly
detected and rejected. [RT #33129]
2013-04-08 09:55:14 +10:00
Mark Andrews 3a6d62c59f 3546. [func] Add EUI48 and EUI64 types. [RT #33082] 2013-04-05 09:07:28 +11:00
Mark Andrews c2838610c6 s/-e/-x/ 2013-04-05 07:37:40 +11:00
Tinderbox User f9adb48aea update copyright notice 2013-04-03 23:46:07 +00:00
Mark Andrews 085496379f add SAMPLE to the list of varables to be exported
(cherry picked from commit cf3e838fd3)
2013-04-04 07:27:21 +11:00
Mark Andrews 8013077aa7 3541. [bug] The parts if libdns was not being properly initialized
in when built in libexport mode. [RT #33028]
2013-04-03 17:27:40 +11:00
Tinderbox User 313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Evan Hunt 67adc03ef8 [master] add DSCP support
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
2013-03-22 14:05:33 -07:00
Evan Hunt 4bf686cf5d [master] zone parsing broken with embedded null
3534.	[bug]		Extra text after an embedded NULL was ignored when
			parsing zone files. [RT #32699]
2013-03-21 19:30:10 -07:00
Tinderbox User ad67363430 update copyright notice 2013-03-21 23:46:12 +00:00
Mark Andrews 15d970cb23 remove broken redundant test 2013-03-21 12:38:16 +11:00
Evan Hunt 831f59eb43 [master] add dnssec-coverage tool
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]
2013-03-20 14:39:13 -07:00
Tinderbox User cfa2326b5c update copyright notice 2013-03-14 23:46:11 +00:00
Evan Hunt 4eb998928b [master] algorithm flexibility for rndc
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
2013-03-13 17:53:11 -07:00
Evan Hunt 21a7fde6ba [master] handle servfail at DLZ zone apex
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]
2013-03-11 15:54:03 -07:00
Mark Andrews fae66f41c5 wait for upstream transfer to complete 2013-03-08 17:14:03 +11:00
Tinderbox User 40b42978b9 update copyright notice 2013-03-05 23:46:17 +00:00
Mark Andrews ab8ea5c51e check that the lwresd server has started before querying it
(cherry picked from commit 661f1197a200bdd3d2411e9b02a46b93fb1fb083)
2013-03-05 17:24:19 +11:00
Mark Andrews 8e5fce1f9c update copyrights 2013-03-01 10:39:29 +11:00
Evan Hunt 2a184ff865 [master] accept >4g max-{,a}cache-size
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
2013-02-28 09:29:12 -08:00
Evan Hunt 501941f0b6 [master] add geoip support
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
2013-02-27 17:19:39 -08:00
Tinderbox User bea3baa50c update copyright notice 2013-02-27 23:46:03 +00:00
Mark Andrews 90e1d62889 check that inlineslave.bk and inlineslave.bk.signed exist 2013-02-28 09:01:16 +11:00
Evan Hunt 40a7e85f3e [master] better zone-statistics syntax
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
2013-02-27 11:53:58 -08:00
Mark Andrews b3d3dd301b ensure test starting conditions are met 2013-02-27 17:02:16 +11:00
Evan Hunt 68357e5241 [master] avoid double-free in rrl
- RRL could assert when freeing qname
 - also, changed test addresses from 192.168/16 to 192.0/16
2013-02-26 19:15:11 -08:00
Evan Hunt d654c95c96 [master] force 0 exit status from rrl system test
RRL system test seems to be highly dependent on system speed.
We are leaving it running and reporting results, but forcing it
to return PASS unless one or more of the servers crashed or could
not start.
2013-02-26 18:46:57 -08:00
Mark Andrews 609b8d0817 update copyrights 2013-02-27 12:27:58 +11:00
Mark Andrews 30314ce9c5 '!' is not portable. 2013-02-26 23:11:43 +11:00
Mark Andrews 118bdfd8c4 3497. [func] When deleting a slave/stub zone using 'rndc delzone'
report the files that were being used so they can
                        be cleaned up if desired. [RT #27899]

Squashed commit of the following:

commit 0e4e69d0c3153fe94aaa375b908cf7e3e45b5059
Author: Mark Andrews <marka@isc.org>
Date:   Thu Feb 21 17:01:44 2013 +1100

    report the zones to be removed rather than removing them

commit 5d247ac592eef64c4c467d99af4983b8c1ff998f
Author: Mark Andrews <marka@isc.org>
Date:   Wed Feb 20 15:05:47 2013 +1100

    remove slave/stub files when deleting a zone using delzone
2013-02-26 14:48:21 +11:00
Tinderbox User f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt 94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's)
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
2013-02-25 12:46:51 -08:00
Evan Hunt 55e5c51e66 [master] DNS RRL
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
2013-02-25 12:45:56 -08:00
Tinderbox User 573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt a81ae06ed3 [master] forbid inline-signing slave with no file
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
2013-02-20 14:01:31 -08:00
Evan Hunt 2425d8bb7c [master] truncate logged rdata if too long
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
2013-02-20 13:54:52 -08:00
Mark Andrews 3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User 32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00