Commit Graph

3969 Commits

Author SHA1 Message Date
Mark Andrews
a39a2424bb '\0' terminate code.
All reasons for marking a server bad should be logged to the lame channel.
2002-08-29 07:01:49 +00:00
Mark Andrews
b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
39fe146f2a developer: marka
reviewed: jinmei
1364.  [func]          Use response times to select forwarders.
2002-08-23 00:27:10 +00:00
Mark Andrews
741a75f81b reviewed: marka
developer: mayer
relative paths
build against openssl 0.9.6g
2002-08-17 01:34:09 +00:00
Mark Andrews
5bd76af084 1358. [func] log the reason for rejecting a server when resolving
queries.
2002-08-09 06:12:50 +00:00
Mark Andrews
5c10f54fe3 1355. [bug] It was possible to trigger a INSIST when debugging
large dynamic updates. [RT #3390]
2002-08-06 14:33:08 +00:00
Mark Andrews
1feb76edcb 1355. [tuning] Reduce the number events / quantum for zone tasks. 2002-08-06 02:16:09 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews
0ad5cb4782 1350. [bug] dns_name_fromtext() failed to handle too many labels
gracefully.
2002-08-02 00:25:15 +00:00
Danny Mayer
ace73367af Added files and functions 2002-08-01 03:37:01 +00:00
Danny Mayer
59d1535572 casts required 2002-08-01 03:31:44 +00:00
Mark Andrews
87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
3733c24efa 1342, [func] Log remote address with TCP dispatch failures. 2002-07-29 01:03:24 +00:00
Mark Andrews
f6ff008101 1340. [bug] Delay and spread out the startup refresh load. 2002-07-26 06:27:31 +00:00
Mark Andrews
f0471ca4b7 1336. [func] Nibble lookups under IP6.ARPA are now supported by
dns_byaddr_create().  dns_byaddr_createptrname() is
                        deprecated, use dns_byaddr_createptrname2() instead.
2002-07-24 06:42:32 +00:00
Mark Andrews
03d337f54a For some zones, querying for a DS record before anything else would SERVFAIL. 2002-07-23 03:41:44 +00:00
Mark Andrews
638fe804a5 1255. [bug] When performing a nonexistence proof, the validator
should discard parent NXTs from higher in the DNS.
2002-07-22 03:00:49 +00:00
Mark Andrews
9db3d9d14e 1254. [bug] When signing/verifying rdatasets, duplicate rdatas
need to be suppressed.
2002-07-22 02:49:14 +00:00
Mark Andrews
0b75a2dd3b 1252. [func] Report the current serial with periodic commits when
rolling forward the journal.
2002-07-22 02:06:04 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews
d196b45738 1248. [bug] The validator could incorrectly verify an invalid
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure
when seeing a bogus signature before a correct
                        signature.
2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews
53f9ddf27c silence pointer mismatch 2002-07-04 04:19:54 +00:00
Mark Andrews
de49761421 1330. [bug] 'rndc stop' failed to cause zones to be flushed
sometimes. [RT #3157]
2002-06-19 07:14:48 +00:00
Mark Andrews
5758e9adfb 1329. [func] Log that a zone transfer was covered by a TSIG. 2002-06-19 06:47:25 +00:00
Mark Andrews
b0d31c78bc uninitalised variable 2002-06-19 04:15:12 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
e0fa16fe19 1326. [bug] Badly encoded LOC record when the size, horizontal
precision or vertical precision was 0.1m.
2002-06-14 23:40:14 +00:00
Mark Andrews
5991ce4236 remove change #1284 2002-06-13 07:25:25 +00:00
Mark Andrews
7d389c324c 1324. [func] New function: dns_zone_name(). 2002-06-13 07:05:47 +00:00
Mark Andrews
9b7c023fe6 1218. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
could be left with a trailing "\" after configure
                        has been run.
2002-06-05 22:34:57 +00:00
Mark Andrews
8f96645217 1208. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
reflect written requirements.
2002-05-29 00:27:53 +00:00
Mark Andrews
da091cda77 1207. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
a rdataset to a zone db in the rbtdb implementation of
                        addrdataset.
2002-05-28 05:49:20 +00:00
Mark Andrews
d8d489cd8e 1206. [bug] dns_name_downcase() enforce requirement that
target != NULL or name->buffer != NULL.
2002-05-28 03:39:46 +00:00
Mark Andrews
c8aa2c8311 1204. [bug] The RTT estimate on unused servers was not aged.
[RT #2569]
2002-05-27 06:30:25 +00:00
Mark Andrews
acc8b7ac3d 1299. [port] Darwin uses (unsigned long) for size_t. [RT #2590] 2002-05-23 04:32:30 +00:00
Mark Andrews
b9efcf0a37 1297. [func] You can now create your own customised printing
styles: dns_master_stylecreate() and
                        dns_master_styledestroy().
2002-05-21 06:12:45 +00:00
Mark Andrews
29f5bb81e2 1284. [bug] Memory leak if dns_db_beginload() failed. 2002-05-08 06:51:52 +00:00
Mark Andrews
ddc592d128 1283. [bug] Reference after free error if dns_dispatchmgr_create()
failed.
2002-05-08 06:34:30 +00:00
Mark Andrews
ab36b9cfee add config.h 2002-05-02 06:55:23 +00:00
Mark Andrews
c99d9017ba 1275. [bug] When verifying that an NXT proves nonexistence, check
the rcode of the message and only do the matching NXT
                        check.  That is, for NXDOMAIN responses, check that
                        the name is in the range between the NXT owner and
                        next name, and for NOERROR NODATA responses, check
                        that the type is not present in the NXT bitmap.
2002-04-29 23:50:26 +00:00
Mark Andrews
c4a9ce445c 1274. [func] preferred-glue option from BIND 8.3. 2002-04-26 00:40:37 +00:00
Mark Andrews
d6fbfd28ea 1243. [bug] It was possible to trigger a REQUIRE() in
dns_message_findtype(). [RT #2659]
2002-04-03 02:44:57 +00:00
Mark Andrews
2eeaed2812 missed one change 2002-04-02 08:04:42 +00:00
Mark Andrews
7791dd06ea 1242. [bug] named-checkzone failed if a journal existed. [RT #2657] 2002-04-02 06:54:07 +00:00
Mark Andrews
abc93ada82 rrset-order cyclic w/ sortlist broken. 2002-04-02 06:06:29 +00:00