Tinderbox User
a68111c6f9
update copyright notice / whitespace
2015-11-09 23:45:50 +00:00
Evan Hunt
fbf5b36b69
[v9_10] fix python script versions
...
4257. [cleanup] Python scripts reported incorrect version. [RT #41080 ]
2015-11-08 21:36:27 -08:00
Mark Andrews
24672444a7
4244. [bug] The parser was not reporting that use-ixfr is obsolete.
...
[RT #41010 ]
2015-10-29 12:53:05 +11:00
Mark Andrews
36d6fb03c7
Introduce end-of-line normalization
2015-09-29 08:26:56 +10:00
Mark Andrews
33cc6456c7
document optional class
...
(cherry picked from commit 2592ee16b5 )
2015-09-18 13:25:57 +10:00
Mark Andrews
b6ac63e13c
document that the syslog facility is optional
...
(cherry picked from commit 03fac9f931 )
2015-09-18 13:15:33 +10:00
Evan Hunt
abfa2247af
[v9_10] spurious spaces in named-checkconf -p
...
4205. [bug] 'named-checkconf -p' could include unwanted spaces
when printing tuples with unset optional fields.
[RT #40731 ]
2015-09-14 08:53:17 -07:00
Mark Andrews
513f6f6ff5
4198. [doc] Add fetch-quota-params, fetches-per-server, and
...
fetches-per-zone to doc/misc/options. [RT #40601 ]
2015-09-09 18:04:50 +10:00
Mark Andrews
f524494512
4196. [doc] Improve how "enum + other" types are documented.
...
[RT #40608 ]
4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608 ]
(cherry picked from commit 4ca7391e64 )
2015-09-09 17:23:11 +10:00
Mark Andrews
74b964fabe
4194. [bug] named-checkconf -p failed to properly print a port
...
range. [RT #40634 ]
(cherry picked from commit fbd9aaa58c )
2015-09-09 16:49:54 +10:00
Mark Andrews
0d9fcd6afe
*.vcxproj.in should use CRLF as EOL
2015-08-27 21:59:45 +00:00
Mark Andrews
4bf90d3566
4189. [cleanup] Don't exit on overly long tokens in named.conf.
...
[RT #40418 ]
(cherry picked from commit 7d0dfa63cf )
2015-08-22 15:08:48 +10:00
Mukund Sivaraman
63dcc28d3e
Fix win32 build (UNUSED is present later)
2015-07-31 14:32:47 +05:30
Mukund Sivaraman
8ddb21cd82
Bump api versions
2015-07-31 12:33:36 +05:30
Tinderbox User
a704920204
update copyright notice / whitespace
2015-07-09 23:45:51 +00:00
Evan Hunt
83d0b1ab69
[v9_10] DDoS mitigation features
...
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
These options are not available by default;
use "configure --enable-fetchlimit" (or
--enable-developer) to include them in the build.
See the ARM for details of these options. [RT #37125 ]
2015-07-08 22:55:31 -07:00
Mukund Sivaraman
8134e7662e
Fix parsing of NZFs saved by rndc addzone with view specified ( #39845 )
...
(cherry picked from commit 0439bfedd9 )
Conflicts:
bin/named/server.c
bin/tests/system/addzone/tests.sh
2015-06-23 14:57:20 +05:30
Mark Andrews
1e0d972fcd
update comment as per rt39703
...
(cherry picked from commit bc6ed947572243587dec59918fdff382b2b4229c)
2015-06-05 11:07:59 +10:00
Mark Andrews
2865753e29
4110. [bug] Address memory leaks / null pointer dereferences
...
on out of memory. [RT #39310 ]
(cherry picked from commit b292230ab8 )
2015-04-29 03:18:04 +10:00
Tinderbox User
4c15022601
update copyright notice / whitespace
2015-04-17 23:45:52 +00:00
Mark Andrews
cc38fe32c0
4104. [bug] Address uninitialized elements. [RT #39252 ]
...
(cherry picked from commit f1a261ba2d )
2015-04-17 14:06:53 +10:00
Evan Hunt
d17847d30d
[v9_10] prep 9.10.2rc1
2015-01-22 10:35:49 -08:00
Tinderbox User
3817256ab9
update copyright notice / whitespace
2015-01-20 23:47:01 +00:00
Evan Hunt
1ef4faabd5
[v9_10] clean up gcc -Wshadow warnings
...
4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381 ]
2015-01-20 13:43:35 -08:00
Evan Hunt
4dde796836
[v9_10] more windows build fixes
2014-12-29 12:05:59 -08:00
Evan Hunt
8a64e078d1
[v9_10] prep 9.10.2b1
2014-12-18 13:51:12 -08:00
Mark Andrews
70759e6c14
add missing entries
...
(cherry picked from commit 7799a5edea )
2014-12-16 14:41:44 +11:00
Evan Hunt
b3aa528d7e
[v9_10] add max-recursion-queries
...
also fixes and documentation for max-recursion-depth
(cherry picked from commit c4f54e5bd1 )
2014-11-18 22:13:13 -08:00
Evan Hunt
6fd51d5088
[v9_10] limit recursion depth and iterative queries
...
4006. [security] A flaw in delegation handling could be exploited
to put named into an infinite loop. This has
been addressed by placing limits on the number
of levels of recursion named will allow (default 7),
and the number of iterative queries that it will
send (default 50) before terminating a recursive
query (CVE-2014-8500).
The recursion depth limit is configured via the
"max-recursion-depth" option. [RT #35780 ]
2014-11-17 23:48:20 -08:00
Tinderbox User
0253b39064
update copyright notice
2014-09-05 23:45:59 +00:00
Evan Hunt
aa430f55f4
[v9_10] [rt36786] use INSTALL_PROGRAM for shared libs
...
3947. [cleanup] Set the executable bit on libraries when using
libtool. [RT #36786 ]
(cherry picked from commit f687e639f0 )
2014-09-05 10:24:54 -07:00
Evan Hunt
9c1a043383
[v9_10] prep 9.10.1rc1
2014-08-29 18:21:23 -07:00
Evan Hunt
4ab9bb2b27
[v9_10] fix geoip asnum matching
...
3935. [bug] "geoip asnum" ACL elements would not match unless
the full organization name was specified. They
can now match against the AS number alone (e.g.,
AS1234). [RT #36945 ]
2014-08-28 21:39:43 -07:00
Mark Andrews
5859a1e047
3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879 ]
...
(cherry picked from commit 1164997311 )
2014-08-26 15:02:13 +10:00
Mark Andrews
d07f2a7497
dlz clauses are not inheritable
...
(cherry picked from commit be5d42f255 )
2014-08-25 14:52:53 +10:00
Mark Andrews
0a484c39fc
remove duplicate request-ixfr rt36878
2014-08-16 08:50:36 +10:00
Evan Hunt
649dca47a8
[v9_10] prep 9.10.1b2
2014-08-05 21:54:13 -07:00
Mark Andrews
d31ab36e72
alphabetize zone_clauses
2014-08-06 11:55:32 +10:00
Mark Andrews
1a90775452
3910. [bug] When computing the number of elements required for a
...
acl count_acl_elements could have a short count leading
to a assertion failure. Also zero out new acl elements
in dns_acl_merge. [RT #36675 ]
(cherry picked from commit 3e90f6c373 )
2014-08-03 10:05:40 +10:00
Mark Andrews
e187f3f027
alphabetize server_clauses
...
(cherry picked from commit 0e50e50206 )
2014-07-22 14:00:57 +10:00
Evan Hunt
4266ef751e
[v9_10] fixed geoip elements in named ACLs
...
3835. [bug] Geoip ACL elements didn't work correctly when
referenced via named or nested ACLs. [RT #35879 ]
(cherry picked from commit c0c4512020 )
2014-04-30 20:23:38 -07:00
Tinderbox User
1756e623f9
update copyright notice
2014-04-04 23:46:15 +00:00
Mark Andrews
866606b9c7
3802. [bug] Various header files were not being installed
2014-04-04 21:56:08 +11:00
Evan Hunt
9896a01aeb
[master] prep 9.10.0b2
2014-03-12 21:57:11 -07:00
Evan Hunt
9ba2cef72d
[master] clarify error
...
3779. [cleanup] Clarify the error message when using an option
that was not enabled at compile time. [RT #35504 ]
2014-03-07 15:59:55 -08:00
Tinderbox User
4b1a933811
update copyright notice
2014-03-07 23:47:09 +00:00
Evan Hunt
78f79084fc
[master] warn when wrong address family used in listen-on/-v6
...
3778. [bug] Log a warning when the wrong address family is
used in "listen-on" or "listen-on-v6". [RT #17848 ]
2014-03-07 11:31:51 -08:00
Evan Hunt
98922b2b2b
[master] merge several interdependent fixes
...
3760. [bug] Improve SIT with native PKCS#11 and on Windows.
[RT #35433 ]
3759. [port] Enable delve on Windows. [RT #35441 ]
3758. [port] Enable export library APIs on windows. [RT #35382 ]
2014-02-26 19:00:05 -08:00
Mark Andrews
b0d8002354
use cfg_type_sstring rather than cfg_type_qstring for sit-secret
2014-02-27 01:11:13 +11:00
Mark Andrews
5e45c8aabf
add CFG_CLAUSEFLAG_NOTCONFIGURED flag
2014-02-21 12:48:39 +11:00