Mark Andrews
61731ad937
3337. [bug] Change #3294 broke support for the multiple keys
...
in controls. [RT #29694 ]
2012-06-13 16:51:43 +10:00
Tinderbox User
ea3156ce2e
update copyright notice
2012-06-08 23:45:33 +00:00
Mark Andrews
bdedbcd9d0
3333. [bug] Setting resolver-query-timeout too low can cause
...
named to not recover if it looses connectivity.
[RT #29623 ]
2012-06-08 12:45:19 +10:00
Tinderbox User
f3c44ec867
update copyright notice
2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba
Squashed commit of the following:
...
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a
for rt26172
Add
- optional "recursive-only yes|no" to the response-policy statement
- optional max-policy-ttl to limit the lies that "recursive-only no"
can introduce into resolvers' caches
- test that queries with RD=0 are not rewritten by default
- performance smoke test
Change encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
Fix rt26180 assert botch in zone_findrdataset() in this branch
as well.
Fix missing signatures on NOERROR results despite RPZ hits
when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Tinderbox User
b008cf0a4d
update copyright notice
2012-05-17 23:45:35 +00:00
Evan Hunt
58e0170e5e
Handle RRSIG signer case consistently
...
3329. [bug] Handle RRSIG signer-name case consistently: We
generate RRSIG records with the signer-name in
lower case. We accept them with any case, but if
they fail to validate, we try again in lower case.
[RT #27451 ]
2012-05-17 11:08:49 -07:00
Mark Andrews
4dbd99bcae
3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301 ]
2012-04-27 15:00:02 +10:00
Tinderbox User
5771a59496
update copyright notice
2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30
3306. [bug] Improve DNS64 reverse zone performance. [RT #28563 ]
...
3305. [func] Add wire format lookup method to sdb. [RT #28563 ]
2012-04-11 12:33:08 +10:00
Mark Andrews
183a1f9e79
3299. [bug] Make SDB handle errors from database drivers better.
...
[RT #28534 ]
2012-03-28 10:33:20 +11:00
Tinderbox User
1ceec0a211
update copyright notice
2012-03-10 23:45:31 +00:00
Tinderbox User
806001cc51
regen
2012-03-09 23:30:19 +00:00
Mark Andrews
c95802e3b8
3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
...
error. [RT #28265 ]
2012-03-08 14:43:16 +11:00
Tinderbox User
91f0609aae
regen v9_8
2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf
add gitignore, remove cvsignore
2012-03-03 23:33:18 -08:00
Automatic Updater
755858999f
update copyright notice
2012-02-22 23:46:36 +00:00
Evan Hunt
b0c906596a
3288. [bug] dlz_destroy() function wasn't correctly registered
...
by the DLZ dlopen driver. [RT #28056 ]
2012-02-22 21:44:24 +00:00
Evan Hunt
15601edb93
3286. [bug] Managed key maintenance timer could fail to start
...
after 'rndc reconfig'. [RT #26786 ]
2012-02-22 00:33:33 +00:00
Mark Andrews
930151fcab
3280. [bug] Potential double free of a rdataset on out of memory
...
with DNS64. [RT #27762 ]
2012-02-07 01:14:39 +00:00
Automatic Updater
f228a6b6cf
update copyright notice
2012-02-06 23:45:58 +00:00
Evan Hunt
2a2657427f
3277. [bug] Make sure automatic key maintenance is started
...
when "auto-dnssec maintain" is turned on during
"rndc reconfig". [RT #26805 ]
2012-02-06 21:27:52 +00:00
Mark Andrews
0e4f7d9939
3276. [bug] win32: ns_os_openfile failed to return NULL on
...
safe_open failure. [RT #27696 ]
2012-02-06 05:16:07 +00:00
Automatic Updater
33a62e8d0f
update copyright notice
2012-01-31 23:46:41 +00:00
Mark Andrews
cc52242055
3274. [bug] Log when a zone is not reusable. Only set loadtime
...
on successful loads. [RT #27650 ]
2012-01-31 22:31:46 +00:00
Evan Hunt
6522a6b265
3273. [bug] AAAA responses could be returned in the additional
...
section even when filter-aaaa-on-v4 was in use.
[RT #27292 ]
2012-01-31 17:54:12 +00:00
Curtis Blackburn
fab590d3f3
added myself to the list of authors.
2012-01-11 20:19:40 +00:00
Automatic Updater
72e11c3ce5
update copyright notice
2012-01-10 23:46:34 +00:00
Scott Mann
369ebc851b
added scott mann to bind authors
2012-01-10 00:26:11 +00:00
Evan Hunt
fb55b8f34d
3262. [bug] Signed responses were handled incorrectly by RPZ.
...
[RT #27316 ]
2012-01-07 00:19:29 +00:00
Automatic Updater
8ead053cb0
update copyright notice
2012-01-04 23:46:19 +00:00
Evan Hunt
c0990ffd88
3260. [bug] "rrset-order cyclic" could appear not to rotate
...
for some query patterns. [RT #27170/27185]
2012-01-04 03:07:29 +00:00
Mark Andrews
0700fb6e22
3256. [bug] Disable empty zones for lwresd -C. [RT #27139 ]
2011-12-22 08:25:16 +00:00
Mark Andrews
da549bfcb8
3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
...
[RT #22249 ]
2011-12-22 08:10:09 +00:00
Mark Andrews
d239e3b205
3249. [bug] Update log message when saving slave zones files for
...
analysis after load failures. [RT #27087 ]
3248. [bug] Configure options --enable-fixed-rrset and
--enable-exportlib were incompatible with each
other. [RT #27087 ]
3247. [bug] 'raw' format zones failed to preserve load order
breaking 'fixed' sort order. [RT #27087 ]
2011-12-20 00:12:10 +00:00
Mark Andrews
fb36d70c76
3231. [bug] named could fail to send a uncompressable zone.
...
[RT #26796 ]
3230. [bug] 'dig axfr' failed to properly handle a multi-message
axfr with a serial of 0. [RT #26796 ]
2011-12-01 01:00:51 +00:00
Mark Andrews
b2adef3fb0
3218. [security] Cache lookup could return RRSIG data associated with
...
nonexistent records, leading to an assertion
failure. [RT #26590 ]
2011-11-16 09:56:56 +00:00
Automatic Updater
c9c9e24174
regen v9_8
2011-11-07 01:53:28 +00:00
Mark Andrews
65f3e99e21
3209. [func] Add "dnssec-lookaside 'no'". [RT #24858 ]
2011-11-07 00:31:48 +00:00
Evan Hunt
a41f5d10d1
3206. [cleanup] Add ISC information to log at start time. [RT #25484 ]
2011-11-05 00:45:52 +00:00
Evan Hunt
318246dc18
3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
...
dnssec.h. [RT #26415 ]
2011-11-03 02:55:35 +00:00
Mark Andrews
2136c92599
3186. [bug] Version/db mis-match in rpz code. [RT #26180 ]
2011-10-31 02:55:07 +00:00
Mark Andrews
f4105ef7b8
3175. [bug] Fix how DNSSEC positive wildcard responses from a
...
NSEC3 signed zone are validated. Stop sending a
unnecessary NSEC3 record when generating such
responses. [RT #26200 ]
2011-10-20 21:44:36 +00:00
Automatic Updater
498015c13a
update copyright notice
2011-10-14 23:46:08 +00:00
Mark Andrews
cecf9557f2
3171. [bug] Exclusively lock the task when adding a zone using
...
'rndc addzone'. [RT #25600 ]
2011-10-14 05:45:20 +00:00
Mark Andrews
89769cb5a5
3170. [func] RPZ update:
...
- fix precedence among competing rules
- improve ARM text including documenting rule precedence
- try to rewrite CNAME chains until first hit
- new "rpz" logging channel
2011-10-14 03:51:07 +00:00
Evan Hunt
6a4d92efe5
3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
...
the config file before pausing the server. [RT #21373 ]
2011-10-07 04:42:49 +00:00
Automatic Updater
a856c33738
update copyright notice
2011-09-02 23:45:51 +00:00
Evan Hunt
404329080f
3151. [bug] Queries for type RRSIG or SIG could be handled
...
incorrectly. [RT #21050 ]
2011-09-02 21:54:52 +00:00
Mark Andrews
6b7f4adaba
3148. [bug] Processing of normal queries could be stalled when
...
forwarding a UPDATE message. [RT #24711 ]
2011-08-31 07:01:47 +00:00