ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,160 Commits 589 Branches 805 Tags
470c85218c4603852401ed3c7bf7f052d45fcc8b
Commit Graph

331 Commits

Author SHA1 Message Date
Automatic Updater
08f36cf4fb update copyright notice 2010-03-12 23:48:26 +00:00
Mark Andrews
5641d615c8 2864. [bug] Direct SIG/RRSIG queries were not handled correctly. 
[RT #21050]
 2010-03-12 02:01:57 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients 
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
 2009-12-30 08:34:30 +00:00
Mark Andrews
fce41660df 2593. [bug] Improve a corner source of SERVFAILs [RT #19632] 2009-12-03 04:38:28 +00:00
Mark Andrews
eb5f89b06e 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:25:56 +00:00
Mark Andrews
32967e6895 2783. [func] Return minimal responses to EDNS/UDP queries with a UDP 
buffer size of 512 or less.  [RT #20654]
 2009-11-24 03:15:31 +00:00
Mark Andrews
e7f4d4e09d 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-18 00:15:38 +00:00
Mark Andrews
c363a13c50 2729. [func] When constructing a CNAME from a DNAME use the DNAME 
TTL. [RT #20451]
 2009-10-27 22:45:07 +00:00
Mark Andrews
69f73c967e 2678. [func] Treat DS queries as if "minimal-response yes;" 
was set. [RT #20258]
 2009-09-14 23:19:36 +00:00
Mark Andrews
4a8fa74137 2643. [bug] Stub zones interacted badly with NSEC3 support. 
[RT #19777]
 2009-08-05 02:11:48 +00:00
Tatuya JINMEI 神明達哉
81bae80881 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:03:47 +00:00
Mark Andrews
50b107e596 2576. [bug] NSEC record were not being correctly signed when 
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RT #19114]
 2009-03-13 01:38:51 +00:00
Mark Andrews
b783a1581b 2551. [bug] Potential Reference leak on return. [RT #19341] 2009-02-15 23:07:33 +00:00
Tatuya JINMEI 神明達哉
809350646f 2537. [experimental] Added more statistics counters including those on socket 
I/O events and query RTT histograms. [RT #18802]
 2009-01-29 22:40:36 +00:00
Mark Andrews
d7900926bf spelling 2009-01-18 23:25:18 +00:00
Automatic Updater
eb38c046c2 update copyright notice 2009-01-07 23:47:16 +00:00
Tatuya JINMEI 神明達哉
8bdbeeb578 2525. [experimental] New logging category "query-errors" to provide detailed 
internal information about query failures, especially
			about server failures. [RT #19027]
 2009-01-07 01:50:15 +00:00
Tatuya JINMEI 神明達哉
7170458302 2516. [bug] glue sort for responses was performed even when not 
needed. [RT #19039]
 2008-12-29 23:50:35 +00:00
Mark Andrews
a14aff6984 2484. [bug] It was possible to trigger a REQUIRE failure when 
adding NSEC3 proofs to the response in
                        query_addwildcardproof().  [RT #18828]
 2008-11-03 23:57:22 +00:00
Mark Andrews
24a56e15f7 silence compiler warning 2008-10-15 02:37:11 +00:00
Mark Andrews
e6c5224571 2460. [bug] Don't call dns_db_getnsec3parameters() on the cache. 
[RT #18697]
 2008-10-02 20:35:39 +00:00
Automatic Updater
6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Mark Andrews
1e02091371 2427. [func] Treat DNSKEY queries as if "minimal-response yes;" 
was set. [RT #18528]
 2008-08-26 06:09:18 +00:00
Mark Andrews
2294423014 2364. [bug] named could trigger a assertion when serving a 
malformed signed zone. [RT #17828]
 2008-04-29 00:54:28 +00:00
Tatuya JINMEI 神明達哉
bf64a0d5d9 2361. [bug] "recursion" statistics counter could be counted 
multiple times for a single query.  [RT #17990]
 2008-04-23 01:14:24 +00:00
Mark Andrews
8907d8fa04 2355. [func] Extend the number statistics counters available. 
[RT #17590]
 2008-04-03 05:55:52 +00:00
Mark Andrews
a76b380643 2349. [func] Provide incremental re-signing support for secure 
dynamic zones. [RT #1091]
 2008-04-01 01:37:25 +00:00
Tatuya JINMEI 神明達哉
1c3ed2a83d 2320. [func] Make statistics couters thread-safe for platforms 
that support certain atomic operations. [RT #17466]
 2008-01-24 02:00:44 +00:00
Automatic Updater
2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Mark Andrews
2678fccde3 2290. [bug] Let AD in the query signal that the client wants AD 
set in the response. [RT #17301]
 2008-01-09 04:09:12 +00:00
Automatic Updater
1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews
f5d0f49584 2285. [func] Test framework for client memory context management. 
[RT #17377]
 2008-01-02 05:03:07 +00:00
Evan Hunt
05d2776f6f Only set Authentic Data bit if client wants DNSSEC, per RFC 3655. [RT #17175] 2007-09-26 03:04:45 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
f3139b9d76 2187. [bug] query_addds(), query_addwildcardproof() and 
query_addnxrrsetnsec() should take a version
                        arguement. [RT #16368]
 2007-05-18 06:53:01 +00:00
Mark Andrews
cd1e58c339 2172. [bug] query_addsoa() was being called with a non zone db. 
[RT #16834]
 2007-04-30 01:02:53 +00:00
Mark Andrews
819b98479e 2165. [func] Allow the destination address of a query to determine 
if we will answer the query or recurse.
                        allow-query-on, allow-recursion-on and
                        allow-query-cache-on. [RT #16291]
 2007-03-29 06:36:31 +00:00
Mark Andrews
8943ff626f 2130. [func] Log if CD or DO were set. [RT #16640] 2007-02-06 04:00:21 +00:00
Mark Andrews
f36c85c3ce update copyright notice 2007-01-08 02:45:04 +00:00
Mark Andrews
e7d32e57a5 2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ 
was defined. [RT #16574]
 2007-01-08 00:54:15 +00:00
Mark Andrews
1a8efeab76 2110. [bug] "minimal-response yes;" interacted badly with BIND 8 
priming queries. [RT #16491]
 2006-12-07 04:38:56 +00:00
Mark Andrews
f34249bb28 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:56:36 +00:00
Mark Andrews
5d51f53483 2036. [bug] 'rndc recursing' could cause trigger a REQUIRE. 
[RT #16075]
 2006-06-04 23:59:33 +00:00
Mark Andrews
9a1e8f1baf 2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074] 2006-05-26 02:44:02 +00:00
Mark Andrews
444bbadb54 2026. [bug] Rate limit the two recursive client exceeded messages. 
[RT #16044]
 2006-05-18 03:12:36 +00:00
Mark Andrews
82ecc9cd96 2016. [bug] Return a partial answer if recursion is not 
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
 2006-05-16 03:10:23 +00:00
Mark Andrews
d2ef84e07b 2008. [func] It is now posssible to enable/disable DNSSEC 
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
 2006-03-09 23:39:00 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC 
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
 2006-03-09 23:21:54 +00:00
Mark Andrews
d76ed813a5 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:43:35 +00:00