Commit Graph
6509 Commits
Author SHA1 Message Date
Mark Andrews ed70f92dd0 use ISC_PLATFORM_USESIT 2014-02-24 09:54:04 +11:00
Mark Andrews 6b8c78d6ab delve: -p was not affecting servers lernt from resolv.conf 2014-02-24 09:38:28 +11:00
Mark Andrews 9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Mark Andrews 02a5e3ed85 3755. [func] Add stats counters for known EDNS options + others.
[RT #35447]
2014-02-24 09:24:25 +11:00
Mark Andrews c48c691c4f check for zone being NULL 2014-02-24 08:52:15 +11:00
Mark Andrews 6d7aa71f2f encrypt nonce and time 2014-02-24 07:16:00 +11:00
Francis Dupont 35bcef6631 fixed ENABLE_LTR typos 2014-02-23 09:37:32 +01:00
Mark Andrews cc00679829 wait for zone to transfer 2014-02-23 14:06:15 +11:00
Mark Andrews 89b23dc57e silence compiler warning 2014-02-23 11:44:12 +11:00
Tinderbox User 892503bd48 regen master 2014-02-21 17:38:07 +00:00
Evan Hunt f0f3f595b1 [master] delve man page improvements 2014-02-21 08:33:17 -08:00
Evan Hunt 999926955b [master] fix test error 2014-02-21 08:05:40 -08:00
Evan Hunt 6ce1aa1902 [master] tag mismatch 2014-02-20 20:59:24 -08:00
Evan Hunt 2059d7950b [master] missing man pages, named-rrchecker had wrong name 2014-02-20 20:46:25 -08:00
Tinderbox User 20a96edbf9 update copyright notice 2014-02-20 23:46:35 +00:00
Tinderbox User 0e1dece22e regen master 2014-02-20 19:19:27 +00:00
Evan Hunt bce9696c7a [master] fix win32 installer
3754.	[cleanup]	win32: Installer now places files in the
			Program Files area rather than system services.
			[RT #35361]
2014-02-20 10:11:06 -08:00
Mark Andrews 80b37f909a increment dns_nsstatscounter_recursclients when prefetching 2014-02-21 01:40:54 +11:00
Mark Andrews caac342072 add @ISC_OPENSSL_LIBS@ 2014-02-21 00:35:22 +11:00
Mark Andrews c62ead1ae7 check the result of dns_zone_getdb call 2014-02-20 20:33:46 +11:00
Evan Hunt 5b7dbbf172 [master] silence win64 warnings 2014-02-19 22:58:09 -08:00
Mark Andrews 47cb20eae1 add EDNS EXPIRE processing on ixfr and axfr out 2014-02-20 17:51:31 +11:00
Evan Hunt 83eecff731 [master] adjust default -U
3751.	[tuning]	The default setting for the -U option (setting
			the number of UDP listeners per interface) has
			been adjusted to improve performance. [RT #35417]
2014-02-19 21:54:43 -08:00
Evan Hunt 9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews 16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
2014-02-20 14:56:20 +11:00
Mark Andrews 801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews 72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews 86a85a3bbd don't error on rpz percentage checks as they fail inconsistently on virtual machines 2014-02-20 12:22:14 +11:00
Evan Hunt 2af7d81efd [master] unbalanced tag 2014-02-19 17:15:51 -08:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt d7b9756a21 [master] ENDS client-subnet in dig
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
2014-02-19 15:51:02 -08:00
Tinderbox User 1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Mark Andrews e0c6a3944d silence Function returns no value 2014-02-20 00:27:36 +11:00
Mark Andrews ab830e68aa silence unreachable statement by adding #if/#endif 2014-02-20 00:24:56 +11:00
Mark Andrews f45c36fb19 add client cookie in hmacsha* 2014-02-19 20:19:36 +11:00
Mark Andrews 7e2e41df67 3748. [func] Use delve to test dns_client interfaces. [RT #35383] 2014-02-19 19:33:21 +11:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
2014-02-18 23:26:50 -08:00
Evan Hunt 6a3fa181d1 [master] add "--with-tuning=large" option
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
2014-02-18 22:36:14 -08:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00
Mark Andrews 43c1433ef2 add attributes to fatal, warn and delve_log 2014-02-19 07:25:29 +11:00
Mark Andrews 657f0f11ac use return rather than exit 2014-02-19 07:15:27 +11:00
Evan Hunt 9201e2b2f2 [master] remove extra isc_buffer_init 2014-02-17 18:21:37 -08:00
Tinderbox User 3fd910dec5 update copyright notice 2014-02-17 23:46:29 +00:00
Mark Andrews 38eabfcee7 3743. [bug] delegation-only flag wasn't working in forward zone
declarations despite being documented.  This is
                        needed to support turning off forwarding and turning
                        on delegation only at the same name.  [RT #35392]
2014-02-18 10:09:07 +11:00
Evan Hunt 5efcb3a3e2 [master] fix test errors
- require 5.006_001
- cut off the least significant figures of rrsig dates before
  comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00
Mark Andrews 846cb7015b unchecked isc_mem_get calls; fix loop over getaddrinfo results 2014-02-18 02:07:37 +11:00
Mark Andrews 0e8cfb69d1 a4 and a6 were being referenced out of scope 2014-02-18 01:53:21 +11:00
Mark Andrews 5114325978 3742. [port] linux: libcap support: curval was used before it
was declared. [RT #35387]
2014-02-18 00:27:15 +11:00