ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
28,102 Commits 589 Branches 805 Tags
3f95f4ffbb516ae19d742cf9d81f745bb282f28d
Commit Graph

880 Commits

Author SHA1 Message Date
Mark Andrews
fe09d4b609 s/secret_string/algorithm_id/ for cookie-algorithm 2016-09-01 12:04:47 +10:00
Evan Hunt
b46760b373 [master] correct default value of tcp-clients 2016-08-30 23:02:27 -07:00
Jeremy C. Reed
25a13a0861 fix the 8K number 
from the upstream source:
/** Default `buffer_hint` value. */
 2016-08-25 13:55:17 -04:00
Evan Hunt
864dc79dce [master] add missing release notes and fix other doc nits 2016-08-24 16:25:20 -07:00
Evan Hunt
1e50c0d857 [master] add dnssec-keygen and nslookup man page links to ARM 2016-08-24 20:39:03 +00:00
Evan Hunt
dd666442d3 [master] document power of 2 requirement for fstrm-set-input-queue-size 2016-08-18 18:10:32 -07:00
Evan Hunt
b715ad3cdb [master] missed renaming SIT to COOKIE 2016-08-18 18:08:35 -07:00
Mark Andrews
934837913f 4447. [tuning] Allow the fstrm_iothr_init() options to be set using 
named.conf to control how dnstap manages the data
                        flow. [RT #42974]
 2016-08-18 11:16:06 +10:00
Mark Andrews
78e31dd187 4437. [func] Minimal-responses now has two additional modes 
no-auth and no-auth-recursive which suppress
                        adding the NS records to the authority section
                        as well as the associated address records for the
                        nameservers. [RT #42005]
 2016-08-12 10:48:51 +10:00
Mark Andrews
915544f389 add mdig, named-nzd2nzf, pkcs11-destroy, pkcs11-list, pkcs11-keygen and pkcs11-tokens manpages 2016-07-27 05:00:20 +10:00
Mark Andrews
f20179857a 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries 
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]
 2016-07-22 20:02:17 +10:00
Mark Andrews
813e9f7ee2 copyright 2016-07-21 17:00:44 +10:00
Mark Andrews
557c7221fd 4409. [bug] DNS64 should exlude mapped addresses by default when 
a exclude acl is not defined. [RT #42810]
 2016-07-11 14:11:34 +10:00
Mark Andrews
0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews
13dcf86725 request-ixfr is a slave option rather than a master option 2016-06-22 08:12:17 +10:00
Witold Krecicki
7a00d69909 4376. [experimental] Added support for Catalog Zones, a new method for 
provisioning secondary servers in which a list of
                        zones to be served is stored in a DNS zone and can
                        be propagated to slaves via AXFR/IXFR. [RT #41581]

4375.   [func]          Add support for automatic reallocation of isc_buffer
                        to isc_buffer_put* functions. [RT #42394]
 2016-05-26 21:23:19 +02:00
Evan Hunt
0cbe448914 [master] minimal-any 
4371.	[func]		New "minimal-any" option reduces the size of UDP
			responses for qtype ANY by returning a single
			arbitrarily selected RRset instead of all RRsets.
			Thanks to Tony Finch. [RT #41615]
 2016-05-25 13:54:34 -07:00
Mark Andrews
2fef945936 remove repeated like 2016-05-10 07:22:59 +10:00
Mark Andrews
08e36aa5a5 4356. [func] Add the ability to specify whether to wait for 
nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]
 2016-05-05 16:29:05 +10:00
Jeremy C. Reed
6693c9a2f0 fix spelling 2016-03-16 15:41:18 -04:00
Jeremy C. Reed
10b7784c59 minor grammar fix 2016-03-10 16:51:40 -05:00
Mark Andrews
3cf2fb29ac add automatic-interface-scan to ARM grammar 
(cherry picked from commit 90499817bf)
 2016-03-09 08:57:32 +11:00
Mark Andrews
e011df2927 add AVC 2016-03-05 17:56:49 +11:00
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Evan Hunt
e79e346bf2 [master] correct also-notify grammar 2016-01-27 19:07:31 -08:00
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Mark Andrews
322e6b5be7 4276. [protocol] Add support for SMIMEA. [RT #40513] 2015-12-08 08:16:41 +11:00
Evan Hunt
4071efbec0 [master] disallow map zones in response-policy 
4269.	[bug]		Zones using "map" format master files currently
			don't work as policy zones.  This limitation has
			now been documented; attempting to use such zones
			in "response-policy" statements is now a
			configuration error.  [RT #38321]
 2015-12-02 21:10:09 -08:00
Jeremy C. Reed
414678df72 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-16 12:53:55 -05:00
Mukund Sivaraman
58f7af60e7 Allow non-destructive control channel access using a "read-only" clause (#40498) 2015-11-11 13:46:57 +05:30
Jeremy C. Reed
e08c32f45f add simpara to some note tags 
So generated "Note" header isn't on same line as content.

Also removed one place that said "Note" (so doesn't say
"Note Note").
 2015-11-09 22:10:01 -05:00
Jeremy C. Reed
dde7a7d357 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-09 11:25:01 -05:00
Mukund Sivaraman
517b58429c Fix typo 2015-11-09 15:17:44 +05:30
Evan Hunt
17834caa6c [master] clarify message-compression doc 
- mention TCP and RFC compliance issues
 2015-11-06 13:44:28 -08:00
Witold Krecicki
bfd4b9e11a 4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726] 2015-11-05 12:19:04 +01:00
Jeremy C. Reed
fe12c35c3e fix some spelling typos and standardize some English spellings 
(to be consistent)
 2015-10-23 13:04:09 -04:00
Jeremy C. Reed
a8ce30c861 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-10-23 08:14:48 -04:00
Mark Andrews
30eec077db cleanup trailing white space in SGML like files 2015-10-22 16:09:46 +11:00
Jeremy C. Reed
134788b041 remove errant word 
a word is repeated in a sentence and didn't make sense as-is
so removed it
 2015-10-20 14:56:46 -04:00
Jeremy C. Reed
bb2e9569fe get rid of the "See also fetch-glue" since is obsolete 
This doesn't remove the description but don't have other
options refer to obsolete option.

No CHANGES entry since very minor.
 2015-10-20 10:45:49 -04:00
Evan Hunt
932715fbbe [master] update TSIG, TKEY, SIG(0) documentation 
4241.	[doc]		Improved the TSIG, TKEY, and SIG(0) sections in
			the ARM. [RT #40955]
 2015-10-19 08:48:18 -07:00
Evan Hunt
90174e64f4 [master] shorten default servfail-ttl 
4239.	[func]		Changed default servfail-ttl value to 1 second from 10.
			Also, the maximum value is now 30 instead of 300. [RT #37556]
 2015-10-17 13:44:01 -07:00
Evan Hunt
c3cb3953b6 [master] remove unneeded xsl code, fix a link in ARM 2015-10-14 14:57:54 -07:00
Evan Hunt
b2171b164c [master] add link achors to to <section> tags 2015-10-12 13:01:13 -07:00
Tinderbox User
2eeb74d1cf regen master 2015-10-06 05:45:21 +00:00
Evan Hunt
14a656f94b [master] upgrade doc toolchain 
4237.	[doc]		Upgraded documentation toolchain to use DocBook 5
			and dblatex. [RT #40766]
 2015-10-05 21:59:35 -07:00
Jeremy C. Reed
dfd19d9ff6 add missing <listitem> tags 
because require-server-cookie and request-sit explanations were
missing.
 2015-10-05 11:53:13 -04:00
Evan Hunt
b66b333f59 [master] dnstap 
4235.	[func]		Added support in named for "dnstap", a fast method of
			capturing and logging DNS traffic, and a new command
			"dnstap-read" to read a dnstap log file.  Use
			"configure --enable-dnstap" to enable this
			feature (note that this requires libprotobuf-c
			and libfstrm). See the ARM for configuration details.

			Thanks to Robert Edmonds of Farsight Security.
			[RT #40211]
 2015-10-02 12:32:42 -07:00
Mark Andrews
6c4f9b5cf6 split out logging-categories [RT #40844] 2015-09-30 12:56:31 +10:00
Evan Hunt
a00f9e2f50 [master] merge dyndb 
4224.	[func]		Added support for "dyndb", a new interface for loading
			zone data from an external database, developed by
			Red Hat for the FreeIPA project.

			DynDB drivers fully implement the BIND database
			API, and are capable of significantly better
			performance and functionality than DLZ drivers,
			while taking advantage of advanced database
			features not available in BIND such as multi-master
			replication.

			Thanks to Adam Tkac and Petr Spacek of Red Hat.
			[RT #35271]
 2015-09-28 23:12:35 -07:00