ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,740 Commits 589 Branches 805 Tags
71abcecb3bd03af682d0d70df705fdd2d5f06dbf
Commit Graph
2262 Commits
Author SHA1 Message Date
Automatic Updater 313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Evan Hunt e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when 
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
 2011-06-17 07:05:02 +00:00
Automatic Updater 0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt 79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an 
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
 2011-06-10 01:51:09 +00:00
Mark Andrews 475b1ed9cc 3126. [security] Using DNAME record to generate replacements caused 
RPZ to exit with a assertion failure. [RT #23766]
 2011-06-09 03:10:17 +00:00
Mark Andrews b64e3b8358 3125. [security] Using wildcard CNAME records as a replacement with 
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
 2011-06-09 00:42:51 +00:00
Evan Hunt 6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate 
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
 2011-06-08 22:13:51 +00:00
Evan Hunt bfe32d08c5 3116. [func] New 'dnssec-update-mode' option controls updates 
of DNSSEC records in signed dynamic zones.  Set to
			'no-resign' to disable automatic RRSIG regeneration
			while retaining the ability to sign new or changed
			data. [RT #24533]
 2011-05-23 20:10:03 +00:00
Mark Andrews c0984ac8bd 3115. [bug] Named could fail to return requested data when 
following a CNAME that points into the same zone.
                        [RT #2445]
 2011-05-20 05:09:30 +00:00
Automatic Updater d9c707589a regen HEAD 2011-05-09 01:14:47 +00:00
Evan Hunt ac21f918f2 3109. [func] The also-notify option now uses the same syntax 
as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]
 2011-05-06 21:23:51 +00:00
Mark Andrews fe646be4b7 set/reset client->signer. change 3106 used it before it was set 2011-05-05 23:44:52 +00:00
Evan Hunt 9eea4c5cbd 3106. [func] When logging client requests, include the name of 
the TSIG key if any. [RT #23619]
 2011-05-05 20:04:24 +00:00
Evan Hunt 39f2d1a96a 3102. [func] New 'dnssec-loadkeys-interval' option configures 
how often, in minutes, to check the key repository
			for updates when using automatic key maintenance.
			Default is every 60 minutes (formerly hard-coded
			to 12 hours). [RT #23744]

3101.	[bug]		Zones using automatic key maintenance could fail
			to check the key repository for updates. [RT #23744]
 2011-04-29 21:37:15 +00:00
Automatic Updater 46ce2f7b60 update copyright notice 2011-04-27 23:47:26 +00:00
Evan Hunt 76db58eb81 3100. [security] Certain response policy zone configurations could 
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
 2011-04-27 17:46:47 +00:00
Evan Hunt 7a2173839c 3099. [test] "dlz" system test now runs but gives R:SKIPPED if 
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
 2011-04-19 22:30:52 +00:00
Evan Hunt 319b8a1488 3092. [bug] Signatures for records at the zone apex could go 
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
 2011-03-25 23:53:02 +00:00
Automatic Updater 6333ba02a5 update copyright notice 2011-03-21 23:47:21 +00:00
Evan Hunt 1063914c30 Fixed some problems from change #3084 that turned up after committing it; 
"freeze" and "thaw" weren't working quite right when used without a
specific zone name.
 2011-03-21 18:38:40 +00:00
Evan Hunt d965c91f95 clarify "rndc sync" logging, add it to "rndc -h" output, per francis 
review comments in rt22473.
 2011-03-21 15:39:05 +00:00
Evan Hunt 7cb226ec34 3084. [func] A new command "rndc sync" dumps pending changes in 
a dynamic zone to disk; "rndc sync -clean" also
			removes the journal file after syncing.  Also,
			"rndc freeze" no longer removes journal files.
			[RT #22473]
 2011-03-21 07:22:14 +00:00
Francis Dupont a8e6a8cd6c fix too long with dname error 2011-03-18 21:12:19 +00:00
Francis Dupont 50f64cf0e5 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:25:54 +00:00
Automatic Updater c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Mark Andrews 4f587beb8e 3071. [bug] has_nsec could be used unintialised in 
update.c:next_active. [RT #20256]
 2011-03-11 12:51:40 +00:00
Mark Andrews 0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Mark Andrews 2d96b63d31 3067. [bug] ixfr-from-differences {master|slave}; failed to 
select the master/slave zones.  [RT #23580]
 2011-03-11 00:43:54 +00:00
Automatic Updater cf786a52ce update copyright notice 2011-03-10 23:47:50 +00:00
Evan Hunt 422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default, 
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
 2011-03-10 04:36:16 +00:00
Francis Dupont 228bddfc12 update do_authors_lookup() 2011-03-07 15:29:32 +00:00
Automatic Updater 0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Mark Andrews 7d09a0190b add #include <isc/file.h> 2011-03-05 03:03:57 +00:00
Scott Mann 32babe43eb Ensure that log files are plain files. (RT #22771) 2011-03-04 14:07:03 +00:00
Evan Hunt f385bac3b9 3057. [bug] "rndc secroots" would abort after the first error 
and so could miss some views. [RT #23488]
 2011-03-03 16:16:47 +00:00
Evan Hunt 70c7f4fb4f 3053. [bug] Under a sustained high query load with a finite 
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
 2011-03-03 04:42:25 +00:00
Mark Andrews 88c63fe9c7 3039. [bug] Save and restore the gid when creating creating 
named.pid at startup. [RT #23290]
 2011-03-02 00:02:54 +00:00
Automatic Updater ddc163d532 regen 2011-02-28 23:31:05 +00:00
Automatic Updater 1c743aa176 regen 2011-02-27 23:30:42 +00:00
Automatic Updater 8a8d38eb8e regen HEAD 2011-02-24 01:14:22 +00:00
Automatic Updater 45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00
Mark Andrews 0e507dbb81 2039. [func] Redirect on NXDOMAIN support. [RT #23146] 2011-02-23 03:08:11 +00:00
Automatic Updater b01d422daf update copyright notice 2011-02-21 23:47:45 +00:00
Mark Andrews a360461b34 check for snprintf failure 2011-02-21 07:14:43 +00:00
Scott Mann 57b403c1e9 Fix prz SERVFAILs after failed zone transfers (RT23246). 2011-02-18 15:18:30 +00:00
Evan Hunt 29bd52e4ee 3021. [bug] Change #3010 was incomplete. [RT #22296] 2011-02-16 19:48:12 +00:00
Francis Dupont 931814de4a typo in comment 2011-02-15 18:23:34 +00:00
Automatic Updater 79cf9524b1 regen HEAD 2011-02-04 01:14:16 +00:00
Automatic Updater 784a904bd0 update copyright notice 2011-02-03 12:18:12 +00:00
Mark Andrews c1ee8bb4ba 3013. [bug] The DNS64 ttl was not always being set as expected. 
[RT #23034]
 2011-02-03 07:35:56 +00:00