Commit Graph

220 Commits

Author SHA1 Message Date
Mark Andrews
d23b1aa83f 2057. [bug] Make setting "ra" dependent on both allow-query and
allow-recursion. [RT #16290]
2006-07-22 01:09:38 +00:00
Mark Andrews
17ff2a570f 2055. [bug] Missing goto after dropping multicast query.
[RT #15944]
2006-07-21 23:41:41 +00:00
Mark Andrews
c37f3b1dc3 2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
[RT #16075]
2006-06-05 00:15:18 +00:00
Mark Andrews
a4c4295268 update copyright notice 2006-01-04 23:50:21 +00:00
Mark Andrews
577ee67047 1951. [security] Drop queries from particular well known ports.
Don't return FORMERR to queries from particular
                        well known ports.  [RT #15636]
2006-01-04 05:13:19 +00:00
Mark Andrews
890a3d97d7 1905. [bug] Recursive clients soft quota support wasn't working
as expected. [RT #15103]
2005-07-27 02:53:16 +00:00
Mark Andrews
242ef7b98a update copyright notice 2005-03-17 03:58:33 +00:00
Mark Andrews
231528cbdb style 2005-03-15 00:46:18 +00:00
Mark Andrews
ca92f19e88 Update error message. s/isc_socket_recv()/isc_socket_recv2()/ 2004-09-26 22:37:43 +00:00
Mark Andrews
5be0522f56 1690. [bug] Delay detaching view from the client until UPDATE
processing completes when shutting down. [RT #11714]
2004-07-23 02:56:52 +00:00
Mark Andrews
dce4b8574c 1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
available, and suppress wildcard binding if not.

1621.   [bug]           match-destinations did not work for IPv6 TCP queries.
                        [RT# 11156]
2004-04-29 01:31:23 +00:00
Mark Andrews
511621255e 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.

1527.  [cleanup]       Reduce the number of gettimeofday() calls without
                       losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
a09e55f624 update copyrights 2004-03-06 10:22:54 +00:00
Mark Andrews
b5e1ded573 1575. [func] Log TSIG name on TSIG verify failure. [RT #4404] 2004-02-10 06:06:31 +00:00
Mark Andrews
25a60b1d80 sync with HEAD 2003-10-15 05:32:25 +00:00
Mark Andrews
19548853e9 1432. [func] The advertised EDNS UDP buffer size can now be set
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
c6d78fc563 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-08-26 05:14:25 +00:00
Mark Andrews
6627b5242f pullup:
u_int32_t -> isc_uint32_t
2003-08-22 06:10:23 +00:00
Mark Andrews
370732d189 1391. [func] Add support for IPv6 scoped addresses in named. 2003-08-22 05:17:15 +00:00
Mark Andrews
c28e1b5678 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2003-08-21 06:17:57 +00:00
Mark Andrews
0671618280 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2003-08-14 07:00:33 +00:00
Mark Andrews
721cf64313 1271. [bug] "recursion available: {denied,approved}" was too
confusing.
2003-08-14 06:17:23 +00:00
Mark Andrews
45c5fb1fcd 1267. [func] isc_file_openunique() now creates file using mode
0666 rather than 0600.
2003-08-14 06:14:23 +00:00
Mark Andrews
59771f18b8 1254. [func] preferred-glue option from BIND 8.3. 2003-08-14 05:56:10 +00:00
Mark Andrews
229b4ea973 1219. [func] Named now reports the TSIG extended error code when
signature verification fails. [RT #1651]
2003-08-14 00:46:22 +00:00
Mark Andrews
820d86cbe6 1187. [bug] named was incorrectly returning DNSSEC records
in negative responses when the DO bit was not set.
2003-08-13 02:18:19 +00:00
Mark Andrews
33b82c3a70 1158. [func] Report the client's address when logging notify
messages.
2003-08-12 04:54:59 +00:00
Mark Andrews
79e2dd3eb8 1157. [func] match-clients and match-destinations now accept
keys. [RT #2045]
2003-08-11 05:58:18 +00:00
Mark Andrews
9052beb238 pullup
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews
022541a067 1036. [func] Silently drop requests received via multicast as
long as there is no final multicast DNS standard.

1035.   [bug]           If we respond to multicast queries (which we
                        currently do not), respond from a unicast address
                        as specified in RFC 1123. [RT #137]

1034.   [bug]           Ignore the RD bit on multicast queries as specified
                        in RFC 1123. [RT #137]
2003-08-06 04:30:53 +00:00
Mark Andrews
6d5f0c1947 1490. [bug] Accept reading state as well as working state in
ns_client_next(). [RT #6813]
2003-07-18 06:14:30 +00:00
Mark Andrews
a7efbe70e7 merge 9.2.2 back into v9_2 2003-03-06 04:38:29 +00:00
Mark Andrews
09fb82a40d Reviewed by: gson@nominum.com
1244.   [bug]           Receiving a TCP message from a blackhole address would
                        prevent further messages being received over that
                        interface.
2002-04-23 01:53:53 +00:00
Mark Andrews
73d7583d98 update copyrights 2002-02-08 03:57:47 +00:00
Andreas Gustafsson
3f25cb17e3 pullup:
1070.  [bug]           Copy DNSSEC OK (DO) to response as specified by
                       draft-ietf-dnsext-dnssec-okbit-03.txt.
2002-01-24 19:00:27 +00:00
Brian Wellington
04999a9c03 pullup:
1131.   [bug]           The match-destinations view option did not work with
                        IPv6 destinations. [RT #2073, #2074]
2001-11-16 21:21:42 +00:00
Mark Andrews
5b477dd3b9 1126. [bug] The server could access a freed event if shut
down while a client start event was pending
                        delivery. [RT #2061]
2001-11-15 02:51:46 +00:00
Mark Andrews
309979a136 pullup:
Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-11-15 01:24:21 +00:00
Mark Andrews
58fbc62a4a pullup:
running out of memory during ns_client_t construction could crash server
[RT #409]
2001-10-30 01:12:34 +00:00
Andreas Gustafsson
31da643c6a pullup:
1033.   [bug]           Always respond to requests with an unsupported opcode
                        with NOTIMP, even if we don't have a matching view
                        or cannot determine the class.
2001-10-12 19:14:47 +00:00
Andreas Gustafsson
dd0319d149 1047. [bug] named was incorrectly refusing all requests signed
with a TSIG key derived from an unsigned TKEY
                        negotiation with a NOERROR response. [RT #1886]
2001-10-12 18:20:14 +00:00
Mark Andrews
a3ed377607 pullup:
1047.   [bug]           When a request was refused due to being signed with
                        a TSIG key derived from an unsigned TKEY negotiation,
                        the response could have an rcode of SUCCESS rather
                        than REFUSED. [RT #1886]
2001-10-12 01:05:51 +00:00
Mark Andrews
99a0822e3c pullup:
1005.   [bug]           Don't copy nonzero RCODEs from request to response.
                        [RT #1765]
2001-09-19 02:44:00 +00:00
Andreas Gustafsson
76c8294c81 format string bugs and improved format string checking [RT #1578] 2001-08-08 22:54:55 +00:00
Brian Wellington
ee3ab6063d 945. [func] Add the new view-specific options
"match-destinations" and "match-recursive-only".
2001-07-26 20:42:46 +00:00
Mark Andrews
b52c49c6e1 lower unknown class/view to DEBUG(1) 2001-06-28 02:39:46 +00:00
Andreas Gustafsson
5465e5f7dd query_getzonedb() formatted the domain name and class being queried
for at least once for every query to authoritative data, whether or not a log
message was actually printed, which adversely affected query performance
2001-06-15 23:28:29 +00:00
Andreas Gustafsson
27ee1d06e9 typo 2001-06-15 22:35:42 +00:00
Mark Andrews
03f91269f5 856. [func] Allow partial rdatasets to be returned in answer and
authority sections to help non-TCP capable clients
                        recover from truncation.  [RT #1301]
2001-06-05 09:02:16 +00:00