ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
15,935 Commits 589 Branches 805 Tags
2004ccf6bf898dc75df910bc3108eba7a046818f
Commit Graph

4829 Commits

Author SHA1 Message Date
Evan Hunt
351b62535d 2609. [func] Simplify the configuration of dynamic zones: 
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
 2009-06-10 00:27:22 +00:00
Mark Andrews
996b4d8982 fix bad test to determine if both ksk's and zsk's are present. [RT #19802] 2009-06-09 22:54:21 +00:00
Automatic Updater
1c51f79aba regen 2009-06-06 01:12:32 +00:00
Jeremy Reed
6a550cb83c Please bump date on manpage. So we know we aren't using 2000 docs. 
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)
 2009-06-05 21:59:43 +00:00
Mark Andrews
988023d8bc missing unsigned 2009-06-05 06:59:03 +00:00
Automatic Updater
6283056805 regen 2009-06-05 01:12:33 +00:00
Automatic Updater
9f4702d025 update copyright notice 2009-06-04 23:47:53 +00:00
Mark Andrews
97573334cb fix up bad merge 2009-06-04 04:33:11 +00:00
Automatic Updater
39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:13:37 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Mark Andrews
fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and 
named-comilezone argv[0] names under windows.
                        [RT #19767]
 2009-05-29 02:14:31 +00:00
Automatic Updater
a9a054302d regen 2009-05-22 01:14:49 +00:00
Automatic Updater
bbe20aa62c update copyright notice 2009-05-21 23:47:28 +00:00
Jeremy Reed
5d924e398e 2601. [doc] Mention file creation mode mask in the 
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
 2009-05-21 19:54:28 +00:00
Automatic Updater
54cdd2b307 update copyright notice 2009-05-07 23:47:44 +00:00
Francis Dupont
ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Francis Dupont
ddac1a2b98 reserve -F 2009-05-07 09:33:52 +00:00
Automatic Updater
7a272c6b0d update copyright notice 2009-05-06 23:47:50 +00:00
Francis Dupont
0e77d33686 add isc/print.h 2009-05-06 11:41:07 +00:00
Francis Dupont
d302a620e0 Fix unknown extended rcodes in dig 2009-05-06 10:16:32 +00:00
Jeremy Reed
4144efb390 2594. [func] Have rndc warn if using its default configuration file 
when the key file also exists. [RT #19424]
 2009-05-04 17:38:56 +00:00
Francis Dupont
cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews
3836f447ee 2592. [bug] Treat "any" as a type in nsupdate. [RT #19455] 2009-04-30 07:10:09 +00:00
Mark Andrews
47323be2af 2591. [bug] named could die when processing a update in 
removed_orphaned_ds(). [RT #19507]
 2009-04-30 06:59:11 +00:00
Mark Andrews
b9636a8e43 2583. [port] netbsd: provide a control to not add the compile 
date to the version string, -DNO_VERSION_DATE.
 2009-04-03 19:55:59 +00:00
Evan Hunt
8c5482b3ea Corrected install rule to install arpaname.1 not arpaname.8 2009-03-23 21:59:56 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661 2580. [bug] UpdateRej statistics counter could be incremented twice 
for one rejection. [RT #19476]
 2009-03-18 22:17:24 +00:00
Evan Hunt
ca23cf7e28 2578. [bug] Changed default sig-signing-type to 65534, because 
65535 turns out to be reserved.  [RT #19477]
 2009-03-16 23:41:21 +00:00
Mark Andrews
56708c6fb4 2576. [bug] NSEC record were not being correctly signed when 
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
 2009-03-13 01:35:18 +00:00
Automatic Updater
ed4475f3f5 regen 2009-03-10 01:12:31 +00:00
Mark Andrews
b98225ff8a 2574. [doc] Document nsupdate -g and -o. [RT #19351] 2009-03-09 04:18:51 +00:00
Automatic Updater
2919fef5d1 update copyright notice 2009-03-07 23:47:45 +00:00
Automatic Updater
7a7a44400d regen 2009-03-06 01:12:33 +00:00
Automatic Updater
2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Mark Andrews
f605647060 Undocumented firewall test hook. [RT #19398] 2009-03-05 03:13:55 +00:00
Automatic Updater
e61db954bf update copyright notice 2009-03-04 23:48:02 +00:00
Mark Andrews
1559511ada don't use a implied source in a direct rule 2009-03-04 05:48:32 +00:00
Evan Hunt
3a30493983 2572. [func] Simplify DLV configuration, with a new option 
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
 2009-03-04 02:42:31 +00:00
Mark Andrews
ffcd068f87 add config.h 2009-03-04 02:23:36 +00:00
Evan Hunt
6201345ba9 Added .cvsignore for bin/tools 2009-03-04 01:55:32 +00:00
Mark Andrews
620508359f 2571. [func] Add a new tool "arpaname" which translates IP addresses 
to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
                        [RT #18976]
 2009-03-04 01:30:27 +00:00
Automatic Updater
cd83ba4484 update copyright notice 2009-03-03 23:48:02 +00:00
Mark Andrews
d36ba0f0ca 2570. [func] Log the destination address the query was sent to. 
[RT #19209]
 2009-03-03 01:36:17 +00:00
Automatic Updater
bd537d750f regen 2009-03-03 01:12:26 +00:00
Automatic Updater
4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Evan Hunt
ca42dcc068 2569. [func] Move journalprint, nsec3hash, and genrandom 
commands from bin/tests into bin/tools;
                        "make install" will put them in $sbindir. [RT #19301]
 2009-03-02 03:54:10 +00:00
Mark Andrews
dfa3ca995c 2568. [bug] Report when the write to indicate a otherwise 
successful start fails. [RT #19360]
 2009-03-02 03:08:22 +00:00
Mark Andrews
98b2be76fc 2567. [bug] dst__privstruct_writefile() could miss write errors. 
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
 2009-03-02 03:01:04 +00:00