Commit Graph

2301 Commits

Author SHA1 Message Date
Mark Andrews
61731ad937 3337. [bug] Change #3294 broke support for the multiple keys
in controls. [RT #29694]
2012-06-13 16:51:43 +10:00
Tinderbox User
ea3156ce2e update copyright notice 2012-06-08 23:45:33 +00:00
Mark Andrews
bdedbcd9d0 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:45:19 +10:00
Tinderbox User
f3c44ec867 update copyright notice 2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba Squashed commit of the following:
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Tinderbox User
b008cf0a4d update copyright notice 2012-05-17 23:45:35 +00:00
Evan Hunt
58e0170e5e Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 11:08:49 -07:00
Mark Andrews
4dbd99bcae 3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301] 2012-04-27 15:00:02 +10:00
Tinderbox User
5771a59496 update copyright notice 2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
2012-04-11 12:33:08 +10:00
Mark Andrews
183a1f9e79 3299. [bug] Make SDB handle errors from database drivers better.
[RT #28534]
2012-03-28 10:33:20 +11:00
Tinderbox User
1ceec0a211 update copyright notice 2012-03-10 23:45:31 +00:00
Tinderbox User
806001cc51 regen 2012-03-09 23:30:19 +00:00
Mark Andrews
c95802e3b8 3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
error. [RT #28265]
2012-03-08 14:43:16 +11:00
Tinderbox User
91f0609aae regen v9_8 2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf add gitignore, remove cvsignore 2012-03-03 23:33:18 -08:00
Automatic Updater
755858999f update copyright notice 2012-02-22 23:46:36 +00:00
Evan Hunt
b0c906596a 3288. [bug] dlz_destroy() function wasn't correctly registered
by the DLZ dlopen driver. [RT #28056]
2012-02-22 21:44:24 +00:00
Evan Hunt
15601edb93 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:33:33 +00:00
Mark Andrews
930151fcab 3280. [bug] Potential double free of a rdataset on out of memory
with DNS64. [RT #27762]
2012-02-07 01:14:39 +00:00
Automatic Updater
f228a6b6cf update copyright notice 2012-02-06 23:45:58 +00:00
Evan Hunt
2a2657427f 3277. [bug] Make sure automatic key maintenance is started
when "auto-dnssec maintain" is turned on during
			"rndc reconfig". [RT #26805]
2012-02-06 21:27:52 +00:00
Mark Andrews
0e4f7d9939 3276. [bug] win32: ns_os_openfile failed to return NULL on
safe_open failure. [RT #27696]
2012-02-06 05:16:07 +00:00
Automatic Updater
33a62e8d0f update copyright notice 2012-01-31 23:46:41 +00:00
Mark Andrews
cc52242055 3274. [bug] Log when a zone is not reusable. Only set loadtime
on successful loads.  [RT #27650]
2012-01-31 22:31:46 +00:00
Evan Hunt
6522a6b265 3273. [bug] AAAA responses could be returned in the additional
section even when filter-aaaa-on-v4 was in use.
                        [RT #27292]
2012-01-31 17:54:12 +00:00
Curtis Blackburn
fab590d3f3 added myself to the list of authors. 2012-01-11 20:19:40 +00:00
Automatic Updater
72e11c3ce5 update copyright notice 2012-01-10 23:46:34 +00:00
Scott Mann
369ebc851b added scott mann to bind authors 2012-01-10 00:26:11 +00:00
Evan Hunt
fb55b8f34d 3262. [bug] Signed responses were handled incorrectly by RPZ.
[RT #27316]
2012-01-07 00:19:29 +00:00
Automatic Updater
8ead053cb0 update copyright notice 2012-01-04 23:46:19 +00:00
Evan Hunt
c0990ffd88 3260. [bug] "rrset-order cyclic" could appear not to rotate
for some query patterns.  [RT #27170/27185]
2012-01-04 03:07:29 +00:00
Mark Andrews
0700fb6e22 3256. [bug] Disable empty zones for lwresd -C. [RT #27139] 2011-12-22 08:25:16 +00:00
Mark Andrews
da549bfcb8 3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
[RT #22249]
2011-12-22 08:10:09 +00:00
Mark Andrews
d239e3b205 3249. [bug] Update log message when saving slave zones files for
analysis after load failures. [RT #27087]

3248.   [bug]           Configure options --enable-fixed-rrset and
                        --enable-exportlib were incompatible with each
                        other. [RT #27087]

3247.   [bug]           'raw' format zones failed to preserve load order
                        breaking 'fixed' sort order. [RT #27087]
2011-12-20 00:12:10 +00:00
Mark Andrews
fb36d70c76 3231. [bug] named could fail to send a uncompressable zone.
[RT #26796]

3230.   [bug]           'dig axfr' failed to properly handle a multi-message
                        axfr with a serial of 0. [RT #26796]
2011-12-01 01:00:51 +00:00
Mark Andrews
b2adef3fb0 3218. [security] Cache lookup could return RRSIG data associated with
nonexistent records, leading to an assertion
                        failure. [RT #26590]
2011-11-16 09:56:56 +00:00
Automatic Updater
c9c9e24174 regen v9_8 2011-11-07 01:53:28 +00:00
Mark Andrews
65f3e99e21 3209. [func] Add "dnssec-lookaside 'no'". [RT #24858] 2011-11-07 00:31:48 +00:00
Evan Hunt
a41f5d10d1 3206. [cleanup] Add ISC information to log at start time. [RT #25484] 2011-11-05 00:45:52 +00:00
Evan Hunt
318246dc18 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
dnssec.h. [RT #26415]
2011-11-03 02:55:35 +00:00
Mark Andrews
2136c92599 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-31 02:55:07 +00:00
Mark Andrews
f4105ef7b8 3175. [bug] Fix how DNSSEC positive wildcard responses from a
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
2011-10-20 21:44:36 +00:00
Automatic Updater
498015c13a update copyright notice 2011-10-14 23:46:08 +00:00
Mark Andrews
cecf9557f2 3171. [bug] Exclusively lock the task when adding a zone using
'rndc addzone'.  [RT #25600]
2011-10-14 05:45:20 +00:00
Mark Andrews
89769cb5a5 3170. [func] RPZ update:
- fix precedence among competing rules
                        - improve ARM text including documenting rule precedence
                        - try to rewrite CNAME chains until first hit
                        - new "rpz" logging channel
2011-10-14 03:51:07 +00:00
Evan Hunt
6a4d92efe5 3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
the config file before pausing the server. [RT #21373]
2011-10-07 04:42:49 +00:00
Automatic Updater
a856c33738 update copyright notice 2011-09-02 23:45:51 +00:00
Evan Hunt
404329080f 3151. [bug] Queries for type RRSIG or SIG could be handled
incorrectly.  [RT #21050]
2011-09-02 21:54:52 +00:00
Mark Andrews
6b7f4adaba 3148. [bug] Processing of normal queries could be stalled when
forwarding a UPDATE message. [RT #24711]
2011-08-31 07:01:47 +00:00