Commit Graph

1474 Commits

Author SHA1 Message Date
Mark Andrews
02b772da47 developer: bwelling
reviewed: marka
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2002-09-11 06:36:17 +00:00
Mark Andrews
a6b416d38c Don't call adjust_interfaces unless IPv6 support is enabled. [RT #3593] 2002-09-11 04:32:29 +00:00
Mark Andrews
dfd0eaf243 missing include 2002-09-10 05:07:56 +00:00
Mark Andrews
a9ae9d743c 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2002-09-10 04:45:54 +00:00
Mark Andrews
75ace6601e 1379. [func] 'rndc stats' now reports tcp and recursion quota
states.

1378.   [func]          Improved positive feedback for 'rndc {reload|refresh}.

1377.   [func]          dns_zone_load{new}() now reports if the zone was
                        loaded, queued for loading to up to date.

1376.   [func]          New function dns_zone_logc() to log to specified
                        category.
2002-09-10 02:23:46 +00:00
Michael Graff
e3239b40d2 remove the periodic 'still alive' message 2002-09-09 21:20:16 +00:00
Michael Graff
72ea295e09 change the 'I'm alive' messages to be 60 second apart, not 15 2002-09-09 20:03:18 +00:00
Michael Graff
ab7ce5eb6e detach from quota in an error case. I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2002-09-08 18:40:58 +00:00
Michael Graff
e64aa1b4f2 add 15-second 'alive' messages (sent to server info channel) and support for a temporary hack, 'rndc timerpoke' 2002-09-08 18:34:04 +00:00
Mark Andrews
9130ab90fe developer: bwelling
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews
3bdf879a53 developer: jinmei
reviewer: marka
1371    [bug]           notify-source-v6, transfer-source-v6 and
                        query-source-v6 with explict addresses and using the
                        same ports as named was listening on could interfere
                        with nameds ability to answer queries sent to those
                        addresses.
2002-08-30 02:05:30 +00:00
Mark Andrews
6b25d2f7f7 developer: bwelling
reviewed: marka
1369.   [bug]           Adding an NS record as the lexicographically last
                        record in a secure zone didn't work.
2002-08-29 05:40:07 +00:00
Mark Andrews
b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
a2239239cf reviewed: marka
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews
301ef360a1 supported multiple listen-on-v6 correctly. 2002-08-17 03:00:49 +00:00
Mark Andrews
741a75f81b reviewed: marka
developer: mayer
relative paths
build against openssl 0.9.6g
2002-08-17 01:34:09 +00:00
Mark Andrews
8689f943a4 reviewed: jinmei
developer: marka
1361.   [func]          Log file name when unable to open memory statistics
                        and dump database files. [RT# 3437]
2002-08-17 00:23:19 +00:00
Mark Andrews
2434ccfde7 reviewed: marka
developer: jinmei
1360.   [func]          Listen-on-v6 now supports specific addresses.
2002-08-16 23:46:11 +00:00
Mark Andrews
95d24aa0d0 prevent assertion failure 2002-08-07 02:03:49 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Danny Mayer
0956e3d607 Add check and warning message for Windows 2000 systems not running Service Pack 2 or later 2002-08-03 01:31:48 +00:00
Mark Andrews
a1d4da0dc7 initalise str 2002-08-01 06:51:32 +00:00
Danny Mayer
977265bc5d Fixed fclose to close the lockfile and not fd 2002-08-01 03:25:34 +00:00
Danny Mayer
6f1437add9 Fixed missing newline and continuation character (\n\) 2002-08-01 03:23:36 +00:00
Mark Andrews
31fd8a17fb missing %s in format 2002-07-31 02:22:15 +00:00
Mark Andrews
87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
1431917c7c 1343. [func] Log successful notifies received (info). Adjust log level
for failed notifies to notice.
2002-07-29 05:15:32 +00:00
Mark Andrews
f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews
b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews
5d98cf67b3 white space cleanup 2002-07-10 01:13:44 +00:00
Mark Andrews
475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews
268c7ef56b don't apply cache-filename to "_bind" view. 2002-07-04 05:03:46 +00:00
Mark Andrews
0f8f42a09e 1341. [port] linux: Slackware 4.0 needs <asm/unistd.h>. 2002-07-03 05:09:43 +00:00
Mark Andrews
70f8c70cdd 1335. [bug] Options should apply to the internal _bind view. 2002-06-26 04:48:12 +00:00
Mark Andrews
ac65e45126 1333. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews
0423090da1 1332. [func] Log TSIG key used w/ outgoing zone transfers. 2002-06-25 04:08:43 +00:00
Mark Andrews
8f1bf2fb3a null pointer dereference 2002-06-20 00:21:35 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
cd9bfe5b25 1323. [func] Option 'flush-zones-on-shutdown <boolean>;'. 2002-06-13 05:54:34 +00:00
Mark Andrews
dcd371be7d 1220. [func] Extended rndc dumpdb to support dumping of zones and
view selection: 'dumpdb [-all|-zones|-cache] [view]'.
2002-06-13 05:12:54 +00:00
Mark Andrews
cc4928ec71 1219. [func] New category 'update-security'. 2002-06-12 06:29:49 +00:00
Mark Andrews
a1edcd1b8d 1203. [func] Use "dataready" accept filter if available. 2002-05-27 00:40:23 +00:00
Mark Andrews
7c23b791f4 1301. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2002-05-24 06:26:04 +00:00
Mark Andrews
f013b11377 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2002-05-24 06:22:30 +00:00