Commit Graph
436 Commits
Author SHA1 Message Date
Tatuya JINMEI 神明達哉 9a8852a9df 2386. [func] Add warning about too small 'open files' limit.
[RT #18269]
2008-08-01 02:12:46 +00:00
Mark Andrews 5a60427526 2389 [bug] Move the working directory writable to after the
ns_os_changeuser() call. [RT #18326]
2008-07-18 01:41:01 +00:00
Tatuya JINMEI 神明達哉 e56e0eecbb 2384. [security] Additional support for query port randomization (change
#2375) including performance improvement and port range
			specification.  [RT #17949, #18098]
2008-06-25 00:03:29 +00:00
Evan Hunt 6421f9a9aa Fully randomize UDP query ports to improve forgery resilience. [rt17949] 2008-05-22 20:46:35 +00:00
Automatic Updater 6452b4fe60 update copyright notice 2008-01-17 23:45:28 +00:00
Automatic Updater f92affe176 update copyright notice 2008-01-09 23:45:30 +00:00
Mark Andrews bb47bc7e0d 2292. [bug] Log if the working directory is not writable.
[RT #17312]

2291.   [bug]           PR_SET_DUMPABLE may be set too late.  Also report
                        failure to set PR_SET_DUMPABLE. [RT #17312]
2008-01-09 04:52:48 +00:00
Automatic Updater 10eef33fc6 update copyright notice 2007-08-28 07:19:18 +00:00
Mark Andrews ea153228e2 2178. [bug] 'rndc reload' of a slave or stub zone resulted in
a reference leak. [RT #16867]
2007-05-15 02:30:43 +00:00
Automatic Updater 9459ddefbb update copyright notice 2007-04-03 23:43:25 +00:00
Mark Andrews 98c588a831 2161. [bug] 'rndc flush' could report a false success. [RT #16698] 2007-04-03 00:04:02 +00:00
Mark Andrews 23ef2906b0 2112. [security] Warn if weak RSA exponent is used. [RT #16460] 2006-12-07 05:24:05 +00:00
Mark Andrews dfbbf9bb55 2031. [bug] Emit a error message when "rndc refresh" is called on
a non slave/stub zone. [RT # 16073]
2006-05-24 04:30:24 +00:00
Mark Andrews 95599b4221 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 06:32:54 +00:00
Mark Andrews 089321fb44 fix minor typos 2006-02-26 23:06:40 +00:00
Mark Andrews a4c4295268 update copyright notice 2006-01-04 23:50:21 +00:00
Mark Andrews 8019162f81 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2006-01-04 03:43:20 +00:00
Mark Andrews 890a3d97d7 1905. [bug] Recursive clients soft quota support wasn't working
as expected. [RT #15103]
2005-07-27 02:53:16 +00:00
Mark Andrews c84f7be508 1857. [bug] named could trigger a INSIST() if reconfigured /
reloaded too fast.  [RT #14673]
2005-06-07 01:53:21 +00:00
Mark Andrews 50403af68a further changes for
1848.   [bug]           Improve SMF integration. [RT #13238]
2005-04-29 01:04:48 +00:00
Mark Andrews 465ad8b3ab 1848. [bug] Improve SMF integration. [RT #13238] 2005-04-05 01:13:45 +00:00
Mark Andrews 242ef7b98a update copyright notice 2005-03-17 03:58:33 +00:00
Mark Andrews 6878b44251 1795. [bug] "rndc dumpb" was not fully documented. Minor
formating issues with "rndc dumpdb -all".  [RT #13396]
2005-03-14 23:56:31 +00:00
Mark Andrews d337b85366 1759. [bug] Named failed to startup if the OS supported IPv6
but had no IPv6 interfaces configured. [RT #12942]
2004-11-10 22:13:56 +00:00
Mark Andrews 5c76a2c1a8 1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
[RT #12467]
2004-10-05 04:38:30 +00:00
Mark Andrews a633803768 1733. [bug] Return non-zero exit status on initial load failure.
[RT #12658]
2004-09-29 06:36:44 +00:00
Mark Andrews 2e123bfca2 1666. [bug] The optional port on hostnames in dual-stack-servers
was being ignored.
2004-06-18 04:39:48 +00:00
Mark Andrews 690fbd74af 1648. [func] Update dnssec-lookaside named.conf syntax to support
multiple dnssec-lookaside namespaces (not yet
                        implemented).
2004-06-04 02:33:01 +00:00
Mark Andrews 90af381fa5 move cleanup of in_roothints earlier to make it easier to detect reference
count mismatches.
2004-05-14 01:03:44 +00:00
Mark Andrews ee38b7e417 1612. [bug] check-names at the option/view level could trigger
an INSIST. [RT# 11116]
2004-04-20 14:12:10 +00:00
Mark Andrews 47536dfd8a 1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
[RT# 11118]
2004-04-20 07:10:33 +00:00
Mark Andrews d2d1019a7c 1617. [port] win32: VC++ 6.0 support. 2004-04-19 06:39:56 +00:00
Mark Andrews 69b34284dc 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews 9b6c8fed04 1601. [bug] Silence spurious warning 'both "recursion no;" and
"allow-recursion" active' warning from view "_bind".
                        [RT# 10920]
2004-04-10 05:02:53 +00:00
Mark Andrews 891a465e1c 1594. [bug] 'rndc dumpdb' could prevent named from answering
queries while the dump was in progress.  [RT #10565]
2004-04-08 00:12:14 +00:00
Mark Andrews 441be01d84 remove unused variables: dispatchv4, dispatchv6. 2004-03-14 23:01:51 +00:00
Mark Andrews d330b2828b 1592. [bug] configure_view() could leak a dispatch. 2004-03-14 22:44:47 +00:00
Mark Andrews 6790f1d962 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:55:59 +00:00
Mark Andrews a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews a09e55f624 update copyrights 2004-03-06 10:22:54 +00:00
Mark Andrews 5bc136b1a1 1537. [func] New option "querylog". If set specify whether query
logging is to be enabled or disabled at startup.
2004-03-02 01:11:46 +00:00
Mark Andrews 694b001677 1586. [func] "check-names" is now implemented. 2004-02-27 21:45:34 +00:00
Mark Andrews 795a99528c 1533. [func] Warn if both "recusion no;" and "allow-recursion"
are active. [RT# 4389]
2004-02-24 03:37:48 +00:00
Mark Andrews 08a1ad875f 1564. [func] Attempt to provide a fallback entropy source to be
used if named is running chrooted and named is unable
                        to open entropy source within the chroot area.
                        [RT #10133]
2004-01-27 02:30:32 +00:00
Mark Andrews d80c8340d3 update wording 2004-01-27 01:17:41 +00:00
Mark Andrews 0cfef78e0f 1563. [bug] Gracefully fail when unable to obtain neither a IPv4
or a IPv6 dispatch. [RT #10230]
2004-01-26 23:53:41 +00:00
Mark Andrews 673e6299fd 1539. [bug] Open UDP sockets for notify-source and transfer-source
that use reserved ports at startup. [RT #9475]
2004-01-05 07:00:12 +00:00
Mark Andrews 608740d240 1515. [func] Allow transfer source to be set in a server statement.
[RT #6496]
2003-10-21 05:49:19 +00:00
Mark Andrews 25a60b1d80 sync with HEAD 2003-10-15 05:32:25 +00:00
Mark Andrews c298c27f3c remove max-adb-size 2003-10-14 03:04:02 +00:00