Mark Andrews
d23b1aa83f
2057. [bug] Make setting "ra" dependent on both allow-query and
...
allow-recursion. [RT #16290 ]
2006-07-22 01:09:38 +00:00
Mark Andrews
17ff2a570f
2055. [bug] Missing goto after dropping multicast query.
...
[RT #15944 ]
2006-07-21 23:41:41 +00:00
Mark Andrews
c37f3b1dc3
2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
...
[RT #16075 ]
2006-06-05 00:15:18 +00:00
Mark Andrews
a4c4295268
update copyright notice
2006-01-04 23:50:21 +00:00
Mark Andrews
577ee67047
1951. [security] Drop queries from particular well known ports.
...
Don't return FORMERR to queries from particular
well known ports. [RT #15636 ]
2006-01-04 05:13:19 +00:00
Mark Andrews
890a3d97d7
1905. [bug] Recursive clients soft quota support wasn't working
...
as expected. [RT #15103 ]
2005-07-27 02:53:16 +00:00
Mark Andrews
242ef7b98a
update copyright notice
2005-03-17 03:58:33 +00:00
Mark Andrews
231528cbdb
style
2005-03-15 00:46:18 +00:00
Mark Andrews
ca92f19e88
Update error message. s/isc_socket_recv()/isc_socket_recv2()/
2004-09-26 22:37:43 +00:00
Mark Andrews
5be0522f56
1690. [bug] Delay detaching view from the client until UPDATE
...
processing completes when shutting down. [RT #11714 ]
2004-07-23 02:56:52 +00:00
Mark Andrews
dce4b8574c
1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
...
available, and suppress wildcard binding if not.
1621. [bug] match-destinations did not work for IPv6 TCP queries.
[RT# 11156]
2004-04-29 01:31:23 +00:00
Mark Andrews
511621255e
1528. [cleanup] Simplify some dns_name_ functions based on the
...
deprecation of bitstring labels.
1527. [cleanup] Reduce the number of gettimeofday() calls without
losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews
a821d5fa3d
DNSSEC bis merge from HEAD:
...
1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
1565. [bug] CD flag should be copied to outgoing queries unless
the query is under a secure entry point in which case
CD should be set.
1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
algorithm. Such child zones are treated as unsigned.
1557. [func] Implement missing DNSSEC tests for
* NOQNAME proof with wildcard answers.
* NOWILDARD proof with NXDOMAIN.
Cache and return NOQNAME with wildcard answers.
1541. [func] NSEC now uses new bitmap format.
1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
a09e55f624
update copyrights
2004-03-06 10:22:54 +00:00
Mark Andrews
b5e1ded573
1575. [func] Log TSIG name on TSIG verify failure. [RT #4404 ]
2004-02-10 06:06:31 +00:00
Mark Andrews
25a60b1d80
sync with HEAD
2003-10-15 05:32:25 +00:00
Mark Andrews
19548853e9
1432. [func] The advertised EDNS UDP buffer size can now be set
...
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
c6d78fc563
1422. [func] Log name/type/class when denying a query. [RT #4663 ]
2003-08-26 05:14:25 +00:00
Mark Andrews
6627b5242f
pullup:
...
u_int32_t -> isc_uint32_t
2003-08-22 06:10:23 +00:00
Mark Andrews
370732d189
1391. [func] Add support for IPv6 scoped addresses in named.
2003-08-22 05:17:15 +00:00
Mark Andrews
c28e1b5678
1380. [func] 'rndc recursing' dump recursing queries to
...
'recursing-file = "named.recursing";'.
2003-08-21 06:17:57 +00:00
Mark Andrews
0671618280
1213. [func] Report view associated with client if it is not a
...
standard view (_default or _bind).
2003-08-14 07:00:33 +00:00
Mark Andrews
721cf64313
1271. [bug] "recursion available: {denied,approved}" was too
...
confusing.
2003-08-14 06:17:23 +00:00
Mark Andrews
45c5fb1fcd
1267. [func] isc_file_openunique() now creates file using mode
...
0666 rather than 0600.
2003-08-14 06:14:23 +00:00
Mark Andrews
59771f18b8
1254. [func] preferred-glue option from BIND 8.3.
2003-08-14 05:56:10 +00:00
Mark Andrews
229b4ea973
1219. [func] Named now reports the TSIG extended error code when
...
signature verification fails. [RT #1651 ]
2003-08-14 00:46:22 +00:00
Mark Andrews
820d86cbe6
1187. [bug] named was incorrectly returning DNSSEC records
...
in negative responses when the DO bit was not set.
2003-08-13 02:18:19 +00:00
Mark Andrews
33b82c3a70
1158. [func] Report the client's address when logging notify
...
messages.
2003-08-12 04:54:59 +00:00
Mark Andrews
79e2dd3eb8
1157. [func] match-clients and match-destinations now accept
...
keys. [RT #2045 ]
2003-08-11 05:58:18 +00:00
Mark Andrews
9052beb238
pullup
...
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews
022541a067
1036. [func] Silently drop requests received via multicast as
...
long as there is no final multicast DNS standard.
1035. [bug] If we respond to multicast queries (which we
currently do not), respond from a unicast address
as specified in RFC 1123. [RT #137 ]
1034. [bug] Ignore the RD bit on multicast queries as specified
in RFC 1123. [RT #137 ]
2003-08-06 04:30:53 +00:00
Mark Andrews
6d5f0c1947
1490. [bug] Accept reading state as well as working state in
...
ns_client_next(). [RT #6813 ]
2003-07-18 06:14:30 +00:00
Mark Andrews
a7efbe70e7
merge 9.2.2 back into v9_2
2003-03-06 04:38:29 +00:00
Mark Andrews
09fb82a40d
Reviewed by: gson@nominum.com
...
1244. [bug] Receiving a TCP message from a blackhole address would
prevent further messages being received over that
interface.
2002-04-23 01:53:53 +00:00
Mark Andrews
73d7583d98
update copyrights
2002-02-08 03:57:47 +00:00
Andreas Gustafsson
3f25cb17e3
pullup:
...
1070. [bug] Copy DNSSEC OK (DO) to response as specified by
draft-ietf-dnsext-dnssec-okbit-03.txt.
2002-01-24 19:00:27 +00:00
Brian Wellington
04999a9c03
pullup:
...
1131. [bug] The match-destinations view option did not work with
IPv6 destinations. [RT #2073 , #2074 ]
2001-11-16 21:21:42 +00:00
Mark Andrews
5b477dd3b9
1126. [bug] The server could access a freed event if shut
...
down while a client start event was pending
delivery. [RT #2061 ]
2001-11-15 02:51:46 +00:00
Mark Andrews
309979a136
pullup:
...
Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-11-15 01:24:21 +00:00
Mark Andrews
58fbc62a4a
pullup:
...
running out of memory during ns_client_t construction could crash server
[RT #409 ]
2001-10-30 01:12:34 +00:00
Andreas Gustafsson
31da643c6a
pullup:
...
1033. [bug] Always respond to requests with an unsupported opcode
with NOTIMP, even if we don't have a matching view
or cannot determine the class.
2001-10-12 19:14:47 +00:00
Andreas Gustafsson
dd0319d149
1047. [bug] named was incorrectly refusing all requests signed
...
with a TSIG key derived from an unsigned TKEY
negotiation with a NOERROR response. [RT #1886 ]
2001-10-12 18:20:14 +00:00
Mark Andrews
a3ed377607
pullup:
...
1047. [bug] When a request was refused due to being signed with
a TSIG key derived from an unsigned TKEY negotiation,
the response could have an rcode of SUCCESS rather
than REFUSED. [RT #1886 ]
2001-10-12 01:05:51 +00:00
Mark Andrews
99a0822e3c
pullup:
...
1005. [bug] Don't copy nonzero RCODEs from request to response.
[RT #1765 ]
2001-09-19 02:44:00 +00:00
Andreas Gustafsson
76c8294c81
format string bugs and improved format string checking [RT #1578 ]
2001-08-08 22:54:55 +00:00
Brian Wellington
ee3ab6063d
945. [func] Add the new view-specific options
...
"match-destinations" and "match-recursive-only".
2001-07-26 20:42:46 +00:00
Mark Andrews
b52c49c6e1
lower unknown class/view to DEBUG(1)
2001-06-28 02:39:46 +00:00
Andreas Gustafsson
5465e5f7dd
query_getzonedb() formatted the domain name and class being queried
...
for at least once for every query to authoritative data, whether or not a log
message was actually printed, which adversely affected query performance
2001-06-15 23:28:29 +00:00
Andreas Gustafsson
27ee1d06e9
typo
2001-06-15 22:35:42 +00:00
Mark Andrews
03f91269f5
856. [func] Allow partial rdatasets to be returned in answer and
...
authority sections to help non-TCP capable clients
recover from truncation. [RT #1301 ]
2001-06-05 09:02:16 +00:00