Commit Graph

14757 Commits

Author SHA1 Message Date
Shane Kerr
59bfe4ee90 Pulling rt15970 into 9.4 pre-release. 2006-04-26 12:12:07 +00:00
Shane Kerr
cea64f9221 Pulling rt15958 into 9.4 pre-release. 2006-04-26 11:31:51 +00:00
Mark Andrews
3e6da549e0 regen 2006-04-23 10:12:43 +00:00
Michael Graff
564e2a6b6a pull up my changes from the mainline, to v9_4 2006-04-17 18:27:33 +00:00
Mark Andrews
80b382ff7b tag mis-match 2006-04-15 22:19:21 +00:00
Mark Andrews
02a387df62 update copyright notice 2006-04-15 01:30:15 +00:00
Mark Andrews
97065c4bcd newcopyrights 2006-04-13 23:30:12 +00:00
David Hankins
66da3a511e 2011. [func] dnssec-signzone can now update the SOA record of
the signed zone, either as an increment or as the
                        system time(). [RT #15633]
2006-04-13 18:09:46 +00:00
Mark Andrews
806f538c21 add const v9.4.0a4 2006-03-10 04:54:35 +00:00
Mark Andrews
d7704efa4f newcopyrights 2006-03-10 04:30:06 +00:00
Mark Andrews
a8b11b6a07 9.4.0a4 2006-03-10 04:29:35 +00:00
Mark Andrews
e0fd5aaec9 update copyright notice 2006-03-10 04:15:10 +00:00
Mark Andrews
12ab87da04 newcopyrights 2006-03-10 04:12:13 +00:00
Mark Andrews
00c089f67d sync with HEAD 2006-03-10 04:04:32 +00:00
Mark Andrews
4ba635bc47 win32 2006-03-10 03:30:54 +00:00
Mark Andrews
5a52a2084b win32 2006-03-10 03:29:12 +00:00
Mark Andrews
da1d72402a win32 2006-03-10 03:23:43 +00:00
Mark Andrews
0aaeda8d70 win32 2006-03-10 03:17:03 +00:00
Mark Andrews
f44f29c8d6 win32 2006-03-10 03:14:28 +00:00
Mark Andrews
36d7f4bc26 win32 2006-03-10 03:11:45 +00:00
Mark Andrews
af61764261 win32 2006-03-10 03:04:06 +00:00
Mark Andrews
bc15fe3357 win32 2006-03-10 03:01:52 +00:00
Mark Andrews
4dec833feb update 2006-03-10 01:32:26 +00:00
Mark Andrews
bf2fe05272 HAVE_RSA_GENERATE_KEY/HAVE_DSA_GENERATE_PARAMETERS/HAVE_DH_GENERATE_PARAMETERS 2006-03-10 01:13:42 +00:00
Mark Andrews
488e4f4e6a newcopyrights 2006-03-10 00:59:05 +00:00
Mark Andrews
db8ac421d8 regen 2006-03-10 00:47:40 +00:00
Mark Andrews
50c7241d69 9.4.0a4 2006-03-10 00:28:00 +00:00
Mark Andrews
a9c698bf3a update copyright notice 2006-03-10 00:23:20 +00:00
Mark Andrews
8e6f53c1b8 newcopyrights 2006-03-10 00:20:31 +00:00
Mark Andrews
a501e657d3 2009. [bug] libbind: coverity fixes. [RT #15808] 2006-03-10 00:20:08 +00:00
Mark Andrews
e9724570aa 2008. [func] It is now posssible to enable/disable DNSSEC
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
2006-03-09 23:46:20 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
cvs2git
915c9ab0fe This commit was manufactured by cvs2git to create branch 'v9_4'. 2006-03-09 21:58:58 +00:00
Mark Andrews
93875126dc new draft 2006-03-09 21:58:57 +00:00
Mark Andrews
035992291c regen 2006-03-09 05:04:38 +00:00
Mark Andrews
980c5d7b8d regen 2006-03-09 05:04:01 +00:00
Mark Andrews
1ba9283d78 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:40:33 +00:00
Mark Andrews
fe6f384b2e 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:30:18 +00:00
Mark Andrews
9cd148558b newcopyrights 2006-03-08 23:30:28 +00:00
Mark Andrews
2d583a44d6 newcopyrights 2006-03-08 23:30:18 +00:00
Mark Andrews
8a6f69ef96 2005. [bug] libbind: Retransmission timeouts should be
based on which attempt it is to the nameserver
                        and not the nameserver itself. [RT #13548]
2006-03-08 04:14:17 +00:00
Mark Andrews
5929cde251 2005. [bug] libbind: Retransmission timeouts should be
based on which attempt it is to the nameserver
                        and not the nameserver itself. [RT #13548]
2006-03-08 04:06:12 +00:00
Mark Andrews
b16c72bf12 2004. [bug] dns_tsig_sign() could pass a NULL pointer to
dst_context_destroy() when cleaning up after a
                        error. [RT #15835]
2006-03-08 03:55:50 +00:00
Mark Andrews
1412643ba5 2004. [bug] dns_tsig_sign() could pass a NULL pointer to
dst_context_destroy() when cleaning up after a
                        error. [RT #15835]
2006-03-08 03:51:01 +00:00
Mark Andrews
9b6c85ca20 2003. [bug] libbind: The DNS name/address lookup functions could
occasionally follow a random pointer due to
                        structures not being completely zeroed. [RT #15806]
2006-03-08 03:43:18 +00:00
Mark Andrews
6de9371826 2003. [bug] libbind: The DNS name/address lookup functions could
occasionally follow a random pointer due to
                        structures not being completely zeroed. [RT #15806]
2006-03-08 03:12:24 +00:00
Mark Andrews
1396c84257 tidy up 2006-03-07 05:06:09 +00:00
Mark Andrews
366c60aa36 tidy up 2006-03-07 04:58:51 +00:00
Mark Andrews
e1fd585739 update copyright notice 2006-03-07 00:34:55 +00:00
Mark Andrews
69036420c7 update copyright notice 2006-03-07 00:34:53 +00:00