Commit Graph

498 Commits

Author SHA1 Message Date
Tinderbox User
a68111c6f9 update copyright notice / whitespace 2015-11-09 23:45:50 +00:00
Evan Hunt
fbf5b36b69 [v9_10] fix python script versions
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
2015-11-08 21:36:27 -08:00
Mark Andrews
24672444a7 4244. [bug] The parser was not reporting that use-ixfr is obsolete.
[RT #41010]
2015-10-29 12:53:05 +11:00
Mark Andrews
36d6fb03c7 Introduce end-of-line normalization 2015-09-29 08:26:56 +10:00
Mark Andrews
33cc6456c7 document optional class
(cherry picked from commit 2592ee16b5)
2015-09-18 13:25:57 +10:00
Mark Andrews
b6ac63e13c document that the syslog facility is optional
(cherry picked from commit 03fac9f931)
2015-09-18 13:15:33 +10:00
Evan Hunt
abfa2247af [v9_10] spurious spaces in named-checkconf -p
4205.	[bug]		'named-checkconf -p' could include unwanted spaces
			when printing tuples with unset optional fields.
			[RT #40731]
2015-09-14 08:53:17 -07:00
Mark Andrews
513f6f6ff5 4198. [doc] Add fetch-quota-params, fetches-per-server, and
fetches-per-zone to doc/misc/options. [RT #40601]
2015-09-09 18:04:50 +10:00
Mark Andrews
f524494512 4196. [doc] Improve how "enum + other" types are documented.
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]

(cherry picked from commit 4ca7391e64)
2015-09-09 17:23:11 +10:00
Mark Andrews
74b964fabe 4194. [bug] named-checkconf -p failed to properly print a port
range.  [RT #40634]

(cherry picked from commit fbd9aaa58c)
2015-09-09 16:49:54 +10:00
Mark Andrews
0d9fcd6afe *.vcxproj.in should use CRLF as EOL 2015-08-27 21:59:45 +00:00
Mark Andrews
4bf90d3566 4189. [cleanup] Don't exit on overly long tokens in named.conf.
[RT #40418]

(cherry picked from commit 7d0dfa63cf)
2015-08-22 15:08:48 +10:00
Mukund Sivaraman
63dcc28d3e Fix win32 build (UNUSED is present later) 2015-07-31 14:32:47 +05:30
Mukund Sivaraman
8ddb21cd82 Bump api versions 2015-07-31 12:33:36 +05:30
Tinderbox User
a704920204 update copyright notice / whitespace 2015-07-09 23:45:51 +00:00
Evan Hunt
83d0b1ab69 [v9_10] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			These options are not available by default;
			use "configure --enable-fetchlimit" (or
			--enable-developer) to include them in the build.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:55:31 -07:00
Mukund Sivaraman
8134e7662e Fix parsing of NZFs saved by rndc addzone with view specified (#39845)
(cherry picked from commit 0439bfedd9)

Conflicts:
	bin/named/server.c
	bin/tests/system/addzone/tests.sh
2015-06-23 14:57:20 +05:30
Mark Andrews
1e0d972fcd update comment as per rt39703
(cherry picked from commit bc6ed947572243587dec59918fdff382b2b4229c)
2015-06-05 11:07:59 +10:00
Mark Andrews
2865753e29 4110. [bug] Address memory leaks / null pointer dereferences
on out of memory. [RT #39310]

(cherry picked from commit b292230ab8)
2015-04-29 03:18:04 +10:00
Tinderbox User
4c15022601 update copyright notice / whitespace 2015-04-17 23:45:52 +00:00
Mark Andrews
cc38fe32c0 4104. [bug] Address uninitialized elements. [RT #39252]
(cherry picked from commit f1a261ba2d)
2015-04-17 14:06:53 +10:00
Evan Hunt
d17847d30d [v9_10] prep 9.10.2rc1 2015-01-22 10:35:49 -08:00
Tinderbox User
3817256ab9 update copyright notice / whitespace 2015-01-20 23:47:01 +00:00
Evan Hunt
1ef4faabd5 [v9_10] clean up gcc -Wshadow warnings
4039.	[cleanup]	Cleaned up warnings from gcc -Wshadow. [RT #37381]
2015-01-20 13:43:35 -08:00
Evan Hunt
4dde796836 [v9_10] more windows build fixes 2014-12-29 12:05:59 -08:00
Evan Hunt
8a64e078d1 [v9_10] prep 9.10.2b1 2014-12-18 13:51:12 -08:00
Mark Andrews
70759e6c14 add missing entries
(cherry picked from commit 7799a5edea)
2014-12-16 14:41:44 +11:00
Evan Hunt
b3aa528d7e [v9_10] add max-recursion-queries
also fixes and documentation for max-recursion-depth

(cherry picked from commit c4f54e5bd1)
2014-11-18 22:13:13 -08:00
Evan Hunt
6fd51d5088 [v9_10] limit recursion depth and iterative queries
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
2014-11-17 23:48:20 -08:00
Tinderbox User
0253b39064 update copyright notice 2014-09-05 23:45:59 +00:00
Evan Hunt
aa430f55f4 [v9_10] [rt36786] use INSTALL_PROGRAM for shared libs
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]

(cherry picked from commit f687e639f0)
2014-09-05 10:24:54 -07:00
Evan Hunt
9c1a043383 [v9_10] prep 9.10.1rc1 2014-08-29 18:21:23 -07:00
Evan Hunt
4ab9bb2b27 [v9_10] fix geoip asnum matching
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
2014-08-28 21:39:43 -07:00
Mark Andrews
5859a1e047 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879]
(cherry picked from commit 1164997311)
2014-08-26 15:02:13 +10:00
Mark Andrews
d07f2a7497 dlz clauses are not inheritable
(cherry picked from commit be5d42f255)
2014-08-25 14:52:53 +10:00
Mark Andrews
0a484c39fc remove duplicate request-ixfr rt36878 2014-08-16 08:50:36 +10:00
Evan Hunt
649dca47a8 [v9_10] prep 9.10.1b2 2014-08-05 21:54:13 -07:00
Mark Andrews
d31ab36e72 alphabetize zone_clauses 2014-08-06 11:55:32 +10:00
Mark Andrews
1a90775452 3910. [bug] When computing the number of elements required for a
acl count_acl_elements could have a short count leading
                        to a assertion failure.  Also zero out new acl elements
                        in dns_acl_merge.  [RT #36675]

(cherry picked from commit 3e90f6c373)
2014-08-03 10:05:40 +10:00
Mark Andrews
e187f3f027 alphabetize server_clauses
(cherry picked from commit 0e50e50206)
2014-07-22 14:00:57 +10:00
Evan Hunt
4266ef751e [v9_10] fixed geoip elements in named ACLs
3835.	[bug]		Geoip ACL elements didn't work correctly when
                        referenced via named or nested ACLs. [RT #35879]

(cherry picked from commit c0c4512020)
2014-04-30 20:23:38 -07:00
Tinderbox User
1756e623f9 update copyright notice 2014-04-04 23:46:15 +00:00
Mark Andrews
866606b9c7 3802. [bug] Various header files were not being installed 2014-04-04 21:56:08 +11:00
Evan Hunt
9896a01aeb [master] prep 9.10.0b2 2014-03-12 21:57:11 -07:00
Evan Hunt
9ba2cef72d [master] clarify error
3779.	[cleanup]	Clarify the error message when using an option
			that was not enabled at compile time. [RT #35504]
2014-03-07 15:59:55 -08:00
Tinderbox User
4b1a933811 update copyright notice 2014-03-07 23:47:09 +00:00
Evan Hunt
78f79084fc [master] warn when wrong address family used in listen-on/-v6
3778.	[bug]		Log a warning when the wrong address family is
			used in "listen-on" or "listen-on-v6". [RT #17848]
2014-03-07 11:31:51 -08:00
Evan Hunt
98922b2b2b [master] merge several interdependent fixes
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
2014-02-26 19:00:05 -08:00
Mark Andrews
b0d8002354 use cfg_type_sstring rather than cfg_type_qstring for sit-secret 2014-02-27 01:11:13 +11:00
Mark Andrews
5e45c8aabf add CFG_CLAUSEFLAG_NOTCONFIGURED flag 2014-02-21 12:48:39 +11:00