Commit Graph

253 Commits

Author SHA1 Message Date
Mark Andrews
c37f3b1dc3 2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
[RT #16075]
2006-06-05 00:15:18 +00:00
Mark Andrews
5142baa79c 2026. [bug] Rate limit the two recursive client exceeded messages.
[RT #16044]
2006-05-18 03:15:46 +00:00
Mark Andrews
f4d3df45ec 2016. [bug] Return a partial answer if recursion is not
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
2006-05-16 03:29:41 +00:00
Mark Andrews
95599b4221 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 06:32:54 +00:00
Mark Andrews
e5232c979a update copyright notice 2006-02-03 23:51:37 +00:00
Mark Andrews
0e99a2424d 1977. [bug] Silence noisy log message. [RT #15704] 2006-02-02 22:52:44 +00:00
Mark Andrews
9f719d93ed 1910. [cleanup] Don't add DNSKEY records to the additional section. 2005-08-11 05:25:20 +00:00
Mark Andrews
a1d6a00eb4 result was not being assigned. 2005-07-28 05:48:29 +00:00
Mark Andrews
890a3d97d7 1905. [bug] Recursive clients soft quota support wasn't working
as expected. [RT #15103]
2005-07-27 02:53:16 +00:00
Mark Andrews
a6e3b20e24 typo in comment 2005-05-16 05:30:35 +00:00
Mark Andrews
242ef7b98a update copyright notice 2005-03-17 03:58:33 +00:00
Mark Andrews
f4d58150b7 1804. [bug] Ensure that if we are queried for glue that it fits
in the additional section or TC is set to tell the
                        client to retry using TCP. [RT #10114]
2005-03-15 01:31:58 +00:00
Mark Andrews
15a6bc40e5 order should be signed. 2004-06-30 14:13:05 +00:00
Mark Andrews
68212c7aaa 1675. [bug] named would sometimes add extra NSEC records to
the authority section.
2004-06-29 01:00:56 +00:00
Mark Andrews
76cdd6db55 1635. [bug] Memory leak on error in query_addds(). 2004-05-14 00:59:54 +00:00
Mark Andrews
46278b601d hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:10:41 +00:00
Mark Andrews
6790f1d962 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:55:59 +00:00
Mark Andrews
511621255e 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.

1527.  [cleanup]       Reduce the number of gettimeofday() calls without
                       losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
a09e55f624 update copyrights 2004-03-06 10:22:54 +00:00
Mark Andrews
694b001677 1586. [func] "check-names" is now implemented. 2004-02-27 21:45:34 +00:00
Mark Andrews
cc79bffa78 1561. [bug] It was possible to release the same name twice if
named ran out of memory. [RT #10197]
2004-01-22 15:32:54 +00:00
Mark Andrews
25a60b1d80 sync with HEAD 2003-10-15 05:32:25 +00:00
Mark Andrews
57b54234cd sizeof style 2003-09-11 00:18:18 +00:00
Mark Andrews
5696933e98 typo: s/baliwick/bailiwick/ 2003-09-02 02:27:37 +00:00
Mark Andrews
cb6b45d59c pullup:
arguements reversed
2003-08-26 05:26:08 +00:00
Mark Andrews
c6d78fc563 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-08-26 05:14:25 +00:00
Mark Andrews
c3fedc9282 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
2003-08-25 04:16:27 +00:00
Mark Andrews
1f5b23079e pullup:
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2003-08-21 07:05:12 +00:00
Mark Andrews
c28e1b5678 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2003-08-21 06:17:57 +00:00
Mark Andrews
30296ba800 pullup:
detach from quota in an error case.  I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2003-08-21 03:22:48 +00:00
Mark Andrews
7437b1e21b pullup:
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2003-08-20 06:36:06 +00:00
Mark Andrews
984d0d58e9 1368. [func] remove support for bitstring labels. 2003-08-20 05:33:18 +00:00
Mark Andrews
3d1d30c8bf pullup:
don't attempt to generate a wildcard proof unless the zone is secure.
2003-08-20 03:29:44 +00:00
Mark Andrews
e6bb021434 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2003-08-19 04:11:24 +00:00
Mark Andrews
d930eaf77b 1331. [func] Generate DNSSEC wildcard proofs. 2003-08-18 07:35:54 +00:00
Mark Andrews
9bc39842bb 1313. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2003-08-15 03:22:42 +00:00
Mark Andrews
45d8fa0d1a 1224. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2003-08-14 02:34:18 +00:00
Mark Andrews
820d86cbe6 1187. [bug] named was incorrectly returning DNSSEC records
in negative responses when the DO bit was not set.
2003-08-13 02:18:19 +00:00
Mark Andrews
fc12c58264 1169. [func] Identify recursive queries in the query log. 2003-08-12 05:36:03 +00:00
Mark Andrews
9052beb238 pullup
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews
9cadfb2c17 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2003-08-07 05:14:01 +00:00
Mark Andrews
c532a51b1b 1464. [bug] Preserve "out of zone" data for outgoing zone
transfers. [RT #5192]
2003-05-15 06:30:18 +00:00
Mark Andrews
e5192fd309 1449. [bug] query_addbestns() didn't handle running out of memory
gracefully.
2003-05-15 02:23:20 +00:00
Mark Andrews
b0fa111079 1448. [bug] Handle empty wildcards labels. 2003-05-14 06:51:38 +00:00
Mark Andrews
6fd5b7a222 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
2003-05-14 05:47:24 +00:00
Mark Andrews
a7efbe70e7 merge 9.2.2 back into v9_2 2003-03-06 04:38:29 +00:00
Mark Andrews
5b116f12fa 1325. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-08-02 04:17:21 +00:00
Mark Andrews
af54b372dc pullup:
1239.   [bug]           Under certain circumstances named could continue to
                        use a name after it had been freed triggering
                        INSIST() failures.  [RT #2614]
2002-03-28 05:10:09 +00:00
Mark Andrews
73d7583d98 update copyrights 2002-02-08 03:57:47 +00:00