Commit Graph

3899 Commits

Author SHA1 Message Date
Mark Andrews
80c5a37ddc 1575. [func] Log TSIG name on TSIG verify failure. [RT #4404] 2004-02-09 23:25:22 +00:00
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
73f5c1ff00 stop listening to AD 2004-01-27 05:01:12 +00:00
Mark Andrews
148d848bbc NSEC does not support raw type numbers 2004-01-27 04:39:29 +00:00
Mark Andrews
8d1374958f create/destroy hash 2004-01-27 04:25:36 +00:00
Mark Andrews
f8dfdef682 1564. [func] Attempt to provide a fallback entropy source to be
used if named is running chrooted and named is unable
                        to open entropy source within the chroot area.
                        [RT #10133]
2004-01-27 02:13:22 +00:00
Mark Andrews
b3d3e57841 update wording 2004-01-27 01:19:41 +00:00
Mark Andrews
ea40cebe2b 1563. [bug] Gracefully fail when unable to obtain neither a IPv4
or a IPv6 dispatch. [RT #10230]
2004-01-26 23:44:12 +00:00
Mark Andrews
2f35edba9c AD is independent of DO/AD 2004-01-21 15:47:22 +00:00
Mark Andrews
9cf0970f43 1561. [bug] It was possible to release the same name twice if
named ran out of memory. [RT #10197]
2004-01-21 15:44:24 +00:00
Mark Andrews
841ed46de5 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.
2004-01-15 04:09:17 +00:00
Mark Andrews
b346807a32 regen documentation 2004-01-14 02:13:45 +00:00
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews
9cc75a3e5b 1554. [bug] dig, host, nsloolup failed when no nameservers
were specified in /etc/resolv.conf. [RT #8232]
2004-01-12 03:39:29 +00:00
Mark Andrews
c52ae25dd7 1551. [port] Open "/dev/null" before calling chroot(). 2004-01-07 06:17:04 +00:00
Mark Andrews
6286983c50 1550. [port] Call tzset(), if available, before calling chroot(). 2004-01-07 05:48:15 +00:00
Mark Andrews
d0aebc5a55 1549. [func] named-checkzone can now write out the zone contents
in a easily parsable format (-D and -o).
2004-01-07 05:27:17 +00:00
Mark Andrews
62700b67eb 1539. [bug] Open UDP sockets for notify-source and transfer-source
that use reserved ports at startup. [RT #9475]
2004-01-05 06:56:44 +00:00
Mark Andrews
9991accfe2 sync options string with reality 2004-01-05 05:14:51 +00:00
Mark Andrews
185fd22738 1541. [func] NSEC now uses new bitmap format. 2003-12-13 04:20:44 +00:00
Mark Andrews
0f98d5c83e repeated words 2003-11-02 22:49:10 +00:00
Mark Andrews
b7e6fb4e84 whitespace 2003-10-26 21:33:47 +00:00
Tatuya JINMEI 神明達哉
e407562a75 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.
2003-10-25 00:31:12 +00:00
Tatuya JINMEI 神明達哉
6da7c87a77 1527. [cleanup] Reduce the number of gettimeofday() calls without
losing necessary timer granularity.

(reviewed by marka and Kurt)
2003-10-25 00:09:14 +00:00
Mark Andrews
fcb54ce0a4 whitespace / layout 2003-10-17 03:46:46 +00:00
Mark Andrews
b6d52ee5be 1524. [port] AIX needs to be able to resolve all symbols when
creating shared libraries (--with-libtool).
2003-10-08 06:36:13 +00:00
Mark Andrews
ea72ae09ff print out zone if set 2003-10-02 02:59:58 +00:00
Mark Andrews
94be8e357c 1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
2003-10-01 04:10:26 +00:00
Mark Andrews
3970098dcd regen documentation 2003-09-30 06:13:33 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Tatuya JINMEI 神明達哉
600cbd1fce 1515. [func] Allow transfer source to be set in a server statement.
[RT #6496]

implemented by marka, reviewed and documented by jinmei.
Notes:
  lib/dns/zone.c had to be modified manually.
  ARM html files were not regenerated (yet).
2003-09-25 18:16:50 +00:00
Mark Andrews
1160ecfd14 1514. [bug] named: isc_hash_destroy() was being called to early.
[RT #9160]
2003-09-24 23:20:54 +00:00
Mark Andrews
0b1da8124c 1510. [func] New view option "root-delegation-only". Apply
delegation-only check to all TLDs and root.
                        Note there are some TLDs that are NOT delegation
                        only (e.g. DE and MUSEUM) these can be excluded
                        from the checks buy using exclude.

                        root-delegation-only exclude { "DE"; "MUSEUM"; };
2003-09-19 12:39:49 +00:00
Mark Andrews
da34d92aee 1509. [bug] Hint zones should accept delegation-only. Forward
zone should not accept delegation-only.

1508.   [bug]           Don't apply delegation-only checks to answers from
                        forwarders.

1507.   [bug]           Handle BIND 8 style returns to NS queries to parents
                        when making delegation-only checks.
2003-09-19 05:53:28 +00:00
Mark Andrews
4607e7a9b8 1504. [func] New zone type "delegation-only". 2003-09-17 05:24:43 +00:00
Mark Andrews
2f025ec6fe 1503. [port] win32: install libeay32.dll outside of system32. 2003-09-09 03:38:47 +00:00
Tatuya JINMEI 神明達哉
ce28ea0f2f fixed a typo in a comment line: s/compatability/compatibility/ 2003-08-08 22:46:37 +00:00
Mark Andrews
5e9f612524 1498. [port] bsdos: 5.x support. 2003-07-30 01:43:28 +00:00
Mark Andrews
3818601601 remove redundant check [RT #8539] 2003-07-30 00:19:06 +00:00
Tatuya JINMEI 神明達哉
1e271ac738 typo: s/baliwick/bailiwick/
(I hope it is okay to commit this since it is so trivial)
2003-07-29 22:05:01 +00:00
Mark Andrews
974f1d7b49 pass the size of the result buffer in get_reverse 2003-07-25 04:02:54 +00:00
Mark Andrews
1e107b3d7b 1495. [cleanup] Replace hash functions with universal hash. 2003-07-25 02:22:26 +00:00
Mark Andrews
5eb91bd90e silence compiler warnings (HPUX/11i) 2003-07-25 00:01:16 +00:00
Mark Andrews
743ffc91bd 1484. [bug] The number of records reported after a AXFR was wrong.
[RT #6229]

1483.   [bug]           dig axfr failed if the message id failed to match
                        that in the request.  Only the id in the first message
                        is require to match. [RT #8138]
2003-07-17 07:42:00 +00:00
Mark Andrews
ca18417083 1482. [bug] Named could fail to start if the kernel supports
IPv6 but no interfaces are configured.  Similarly
                        for IPv4. [RT #6229]
2003-07-17 07:22:21 +00:00
Mark Andrews
72ddc4cef9 1480. [bug] Provide replay protection for rndc commands. Full
replay protection requires both rndc and named to
                        be updated.  Partial replay protection (limited
                        exposure after restart) is provided if just named
                        is updated.
2003-07-17 06:24:44 +00:00
Mark Andrews
a947b0145f convert bit-string labels to nibbles. 2003-07-08 05:17:20 +00:00
Mark Andrews
5e4f63dbc1 error path could trigger a REQUIRE failure in ns_client_next. 2003-07-04 04:38:54 +00:00
Mark Andrews
21f1794606 1474. [port] Provide strtoul() and memmove() for platforms
without them.
2003-06-24 05:11:53 +00:00
Mark Andrews
ebb9c914f2 Change #1466 resulted in ns_lwdmanager_detach() not always setting the
pointer to NULL.
remove reference after detach
2003-05-05 07:16:44 +00:00