ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
16,402 Commits 589 Branches 805 Tags
147b3de4859f49cce103287e155117300a75aec3
Commit Graph
4813 Commits
Author SHA1 Message Date
Mark Andrews b33243b8d1 update copyright notice 2006-02-19 06:50:46 +00:00
Mark Andrews f0cfe5bd39 1985. [protocol] DLV has now been assigned a official type code of 
32769. [RT #15807]

                        Note: care should be taken to ensure you upgrade
                        both named and dnssec-signzone at the same time for
                        zones with DLV records where named is the master
                        server for the zone.  Also any zones that contain
                        DLV records should be removed when upgrading a slave
                        zone.  You do not however have to upgrade all
                        servers for a zone with DLV records simultaniously.
 2006-02-17 01:12:54 +00:00
cvs2git 20c873f12f This commit was manufactured by cvs2git to create branch 'v9_3'. 2006-02-17 01:04:15 +00:00
Mark Andrews f3a8cd3835 1985. [protocol] DLV has now been assigned a official type code of 
32769. [RT #15807]
 2006-02-17 01:04:14 +00:00
Mark Andrews 7d4a465de0 1597. [func] Allow notify-source and query-source to be specified 
on a per server basis similar to transfer-source.
 2006-02-17 00:24:21 +00:00
Mark Andrews fd3cdd15de update copyright notice 2006-02-16 23:51:33 +00:00
Mark Andrews 6e373c5025 1983. [func] Two new update policies. "selfsub" and "selfwild". 
[RT #12895]
 2006-02-16 01:34:24 +00:00
Mark Andrews 33138c5db3 1982. [bug] DNSKEY was being accepted on the parent side of 
a delegation.  KEY is still accepted there for
                        RFC 3007 validated updates. [RT #15620]
 2006-02-16 01:24:07 +00:00
Mark Andrews 3bf783a6d4 1982. [bug] DNSKEY was being accepted on the parent side of 
a delegation.  KEY is still accepted there for
                        RFC 3007 validated updates. [RT #15620]
 2006-02-16 00:59:38 +00:00
Mark Andrews cee51b9f4d update copyright notice 2006-02-01 23:48:51 +00:00
Mark Andrews 3f6bc7959d comment typo 2006-02-01 22:39:32 +00:00
Mark Andrews b32bf402e0 comment typo 2006-02-01 22:38:56 +00:00
Mark Andrews 26e2a07a0b update copyright notice 2006-01-27 23:57:46 +00:00
Mark Andrews c6d4f78152 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and 
HMACSHA512 support. [RT #13606]
 2006-01-27 02:35:15 +00:00
Mark Andrews 601586bc45 1955. [bug] Pre-allocate the cache cleaning interator. [RT #14998] 
Fix the CLEANER_IDLE macro to make this change complete. [RT #15815]
 2006-01-26 23:09:36 +00:00
Mark Andrews d0207ee71b 1955. [bug] Pre-allocate the cache cleaning interator. [RT #14998] 
Fix the CLEANER_IDLE macro to make this change complete. [RT #15815]
 2006-01-26 22:56:04 +00:00
Mark Andrews 9d34316481 update copyright notice 2006-01-10 23:50:42 +00:00
Mark Andrews 4cf50d58d6 style 2006-01-10 02:59:56 +00:00
Mark Andrews 141132c272 update copyright notice 2006-01-07 00:23:35 +00:00
Mark Andrews 00b872e4f7 4255: Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints 2006-01-06 23:16:00 +00:00
Mark Andrews bf7497ab01 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:21:08 +00:00
Mark Andrews fde1a334ee 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:05:46 +00:00
Mark Andrews fa6c90ade6 1966. [bug] Don't set CD when we have fallen back to plain DNS. 
[RT #15727]
 2006-01-06 00:47:31 +00:00
Mark Andrews 14c80ce1b2 1966. [bug] Don't set CD when we have fallen back to plain DNS. 
[RT #15727]
 2006-01-06 00:38:21 +00:00
Mark Andrews 1b06367c34 update copyright notice 2006-01-06 00:01:44 +00:00
Mark Andrews 18900ef649 update copyright notice 2006-01-06 00:01:42 +00:00
Mark Andrews dc6da18ccb 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-05 23:45:34 +00:00
Mark Andrews f21dcfa98d 1941. [bug] ncache_adderesult() should set eresult even if no 
rdataset is passed to it. [RT #15642]

1939.   [bug]           The resolver could dereference a null pointer after
                        validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
 2006-01-05 05:38:47 +00:00
Mark Andrews 9742ad0d4d 1942. [bug] If the name of a DNSKEY match that of one in 
trusted-keys do not attempt to validate the DNSKEY
                        using the parents DS RRset. [RT #15649]
 2006-01-05 04:45:24 +00:00
Mark Andrews d5a86dad2e 1961. [bug] Check the port and address of responses forwarded 
to dispatch. [RT #15474]
 2006-01-05 03:31:06 +00:00
Mark Andrews a295fbb55c 1961. [bug] Check the port and address of responses forwarded 
to dispatch. [RT #15474]
 2006-01-05 03:26:01 +00:00
Mark Andrews a1bc941093 1959. [func] Control the zeroing of the negative response TTL to 
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
 2006-01-05 02:19:02 +00:00
Mark Andrews d5a141a8d5 1958. [bug] Named failed to update the zone's secure state 
until the zone was reloaded. [RT #15412]
 2006-01-05 01:34:32 +00:00
Mark Andrews d9c4f954a1 1958. [bug] Named failed to update the zone's secure state 
until the zone was reloaded. [RT #15412]
 2006-01-05 01:09:14 +00:00
Mark Andrews bf83725de0 1957. [bug] Dig mishandled responses to class ANY queries. 
[RT #15402]
 2006-01-05 01:04:10 +00:00
Mark Andrews 6657a9e2d8 1957. [bug] Dig mishandled responses to class ANY queries. 
[RT #15402]
 2006-01-05 00:58:22 +00:00
Mark Andrews a6a804c14a 1956. [bug] Improve cross compile support, 'gen' is now built 
by native compiler.  See README for additional
                        cross compile support information. [RT #15148]
 2006-01-05 00:41:21 +00:00
Mark Andrews 118394ef2e 1956. [bug] Improve cross compile support, 'gen' is now built 
by native compiler.  See README for additional
                        cross compile support information. [RT #15148]
 2006-01-05 00:30:34 +00:00
Mark Andrews c05d5c333d 1955. [bug] Pre-allocate the cache cleaning interator. [RT #14998] 2006-01-05 00:19:49 +00:00
Mark Andrews 6178552326 1955. [bug] Pre-allocate the cache cleaning interator. [RT #14998] 2006-01-05 00:13:58 +00:00
Mark Andrews 08c9026166 1953. [func] Named now falls back to advertising EDNS with a 
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1952.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
 2006-01-05 00:01:46 +00:00
Mark Andrews acb4f52369 update copyright notice 2006-01-04 23:50:24 +00:00
Mark Andrews a4c4295268 update copyright notice 2006-01-04 23:50:21 +00:00
Mark Andrews 2b6fdd9c92 type-punned pointer 2006-01-04 21:43:15 +00:00
Mark Andrews a93ccce87d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect() 
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
 2006-01-04 04:26:56 +00:00
Mark Andrews 2b66a51a7d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect() 
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
 2006-01-04 04:15:55 +00:00
Mark Andrews 8019162f81 1940. [bug] Fixed a number of error conditions reported by 
Coverity.
 2006-01-04 03:43:20 +00:00
Mark Andrews f0af75009b 1948. [bug] If was possible to trigger a REQUIRE failure in 
xfrin.c:maybe_free() if named ran out of memory.
                        [RT #15568]
 2006-01-04 03:08:54 +00:00
Mark Andrews 332ed11af0 1948. [bug] If was possible to trigger a REQUIRE failure in 
xfrin.c:maybe_free() if named ran out of memory.
                        [RT #15568]
 2006-01-04 03:03:11 +00:00
Mark Andrews fabf2ee6b0 1947. [func] It is now possible to configure named to accept 
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
 2006-01-04 02:35:49 +00:00