ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,793 Commits 589 Branches 805 Tags
480adc66edc4ec28d5250737a74b355518ef4738
Commit Graph

489 Commits

Author SHA1 Message Date
Michael Graff
b239c8294a commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit 2007-10-19 17:15:53 +00:00
Mark Andrews
a1e2170ad5 2250. [func] New flag 'memstatistics' to state whether the 
memory statistics file should be written or not.
                        Additionally named's -m option will cause the
                        statistics file to be written. [RT #17113]
 2007-09-26 03:22:45 +00:00
Mark Andrews
ca84283333 2244. [func] Allow the check of nameserver names against the 
SOA MNAME field to be disabled by specifying
                        'notify-to-soa yes;'.  [RT #17073]
 2007-09-18 00:22:31 +00:00
Mark Andrews
4c4327348e typo DNSSSEC -> DNSSEC 2007-09-17 23:15:12 +00:00
Mark Andrews
4a0e09466a s/AAA/AAAA/ 2007-09-14 01:43:23 +00:00
Evan Hunt
c7e266b7e5 Add support for O(1) ACL processing, based on radix tree code originally 
written by kevin brintnall. [RT #16288]
 2007-09-12 01:09:08 +00:00
Mark Andrews
ef1b4800df update YYYYMMDDRR serial numbers 2007-09-07 07:29:22 +00:00
Mark Andrews
b4c3f617ac remove duplicate biblio entry 2007-08-13 03:56:35 +00:00
Mark Andrews
69826a6a2f 2206. [security] "allow-query-cache" and "allow-recursion" now 
cross inherit from each other.

                        If allow-query-cache is not set in named.conf then
                        allow-recursion is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        If allow-recursion is not set in named.conf then
                        allow-query-cache is used if set, otherwise allow-query
                        is used if set, otherwise the default (localnets;
                        localhost;) is used.

                        [RT #16987]
 2007-07-09 02:14:39 +00:00
Mark Andrews
6043e41fcf documentation updates from Jeremy 2007-06-19 06:58:04 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
3644c4e407 document duplicate and dropped stats cacategories 2007-06-13 07:04:47 +00:00
Mark Andrews
4d2a6960a7 more changes from Jeremy 2007-05-29 23:12:42 +00:00
Mark Andrews
ecd12b0acc s/dnssec-validate/dnssec-validatation/ 2007-05-28 00:09:07 +00:00
Mark Andrews
bc6af069c8 2190. [func] Make fallback to plain DNS from EDNS due to timeouts 
more visible.  New logging category "edns-disabled".
                        [RT #16871]
 2007-05-21 02:03:22 +00:00
Mark Andrews
c84ebdd23e Ø 2007-05-16 04:33:28 +00:00
Mark Andrews
959bdc628d more fixes from Jeremy [RT #16870] 2007-05-16 03:17:19 +00:00
Mark Andrews
0f78f78064 minor changes from Jeremy [RT #16869] 2007-05-16 01:42:26 +00:00
Mark Andrews
ab874d16f0 notify-delay documentation 2007-05-08 07:14:42 +00:00
Mark Andrews
9a8f76e238 minor documentation fixes from Jeremy [RT #16855] 2007-05-08 00:19:55 +00:00
Mark Andrews
57dff913d2 update Y2K comment 2007-04-26 06:14:26 +00:00
Mark Andrews
bf3370abb2 minor cleanups 2007-04-24 01:54:36 +00:00
Mark Andrews
ba5f402650 s/they/the/ 2007-03-30 02:27:13 +00:00
Mark Andrews
819b98479e 2165. [func] Allow the destination address of a query to determine 
if we will answer the query or recurse.
                        allow-query-on, allow-recursion-on and
                        allow-query-cache-on. [RT #16291]
 2007-03-29 06:36:31 +00:00
Mark Andrews
c53a5699c8 2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be 
matched in acls by omitting the scope. [RT #16599]
 2007-03-05 04:57:57 +00:00
Mark Andrews
8943ff626f 2130. [func] Log if CD or DO were set. [RT #16640] 2007-02-06 04:00:21 +00:00
Mark Andrews
281bab0f36 2129. [func] Provide a pool of UDP sockets for queries to be 
made over. See use-queryport-pool, queryport-pool-ports
                        and queryport-pool-updateinterval.  [RT #16415]
 2007-02-02 02:18:06 +00:00
Mark Andrews
c1a883f2e0 update copyright notice 2007-01-29 23:57:22 +00:00
Rob Austein
5cd4555ad4 2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635] 2007-01-29 22:16:02 +00:00
Mark Andrews
c4a23ba1b6 missing <para> 2006-12-04 04:54:44 +00:00
Mark Andrews
289ae548d5 2105. [func] GSS-TSIG support (RFC 3645). 2006-12-04 01:54:53 +00:00
Mark Andrews
7c693bfdbe 2082. [doc] Document 'cache-file' as a test only option. 2006-09-13 00:18:27 +00:00
Mark Andrews
b98c5adf3e minor wording change 2006-08-30 23:40:50 +00:00
Mark Andrews
d827ada5a9 grammer 2006-07-20 00:15:03 +00:00
Mark Andrews
49810c555f spelling / grammer 2006-06-08 01:41:21 +00:00
Mark Andrews
a45a6ea2b0 2035. [func] Make falling back to TCP on UDP refresh failure 
optional. Default "try-tcp-refresh yes;" for BIND 8
                        compatibility. [RT #16123]
 2006-06-04 23:17:07 +00:00
Mark Andrews
bf4538f2c7 grammer, spelling and clarity 2006-05-17 02:00:15 +00:00
Mark Andrews
1d49f4d5ec grammer, spelling and clarity 2006-05-17 01:31:50 +00:00
Mark Andrews
43dbc3935e grammer, spelling and clarity 2006-05-16 06:42:09 +00:00
Mark Andrews
6412902ffc 2015. [cleanup] use-additional-cache is now acache-enable for 
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
 2006-05-03 01:54:54 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC 
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
 2006-03-09 23:21:54 +00:00
Mark Andrews
fe6f384b2e 2006. [security] Allow-query-cache and allow-recursion now default 
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
 2006-03-09 03:30:18 +00:00
Mark Andrews
59d84d1b07 2001. [func] Check the KSK flag when updating a secure dynamic zone. 
New zone option "update-check-ksk yes;".  [RT #15817]
 2006-03-06 01:27:52 +00:00
Mark Andrews
95b484c958 fix minor typos 2006-02-26 22:57:18 +00:00
Mark Andrews
7d4a465de0 1597. [func] Allow notify-source and query-source to be specified 
on a per server basis similar to transfer-source.
 2006-02-17 00:24:21 +00:00
Mark Andrews
6e373c5025 1983. [func] Two new update policies. "selfsub" and "selfwild". 
[RT #12895]
 2006-02-16 01:34:24 +00:00
Mark Andrews
4e7d13747a delegation-only is valid for type forward 2006-01-30 00:38:14 +00:00
Mark Andrews
cf029c9369 1974. [doc] List each of the zone types and associated zone 
options seperately in the ARM.
 2006-01-30 00:26:37 +00:00
Mark Andrews
c6d4f78152 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and 
HMACSHA512 support. [RT #13606]
 2006-01-27 02:35:15 +00:00
Mark Andrews
dc6da18ccb 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-05 23:45:34 +00:00