Commit Graph

1447 Commits

Author SHA1 Message Date
Mark Andrews
b4bd8d0662 772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-25 04:50:25 +00:00
Automatic Updater
1c52929b3c update copyright notice 2009-09-24 23:46:07 +00:00
Tatuya JINMEI 神明達哉
aaa2233e76 2525. [experimental] New logging category "query-errors" to provide detailed
internal information about query failures, especially
			about server failures.  (backported as a special
			exception to the general policy) [RT #19027]
2009-09-24 21:38:52 +00:00
Mark Andrews
32a1ab66b9 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-11 04:30:50 +00:00
Automatic Updater
2a6997e72c update copyright notice 2009-01-19 23:46:17 +00:00
Mark Andrews
0f4ec602dd spelling 2009-01-19 00:36:29 +00:00
Automatic Updater
f32008623e update copyright notice 2009-01-06 23:45:57 +00:00
Automatic Updater
9a2ebc4415 update copyright notice 2009-01-05 23:46:21 +00:00
Tatuya JINMEI 神明達哉
42c20e9207 trivial comment cleanups (RT#19118) 2009-01-05 23:22:26 +00:00
Automatic Updater
f947582727 update copyright notice 2008-12-12 23:46:04 +00:00
Mark Andrews
e6e8f672c1 2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
[RT #18885]
2008-12-12 04:53:17 +00:00
Automatic Updater
d53d756c84 update copyright notice 2008-11-20 23:46:03 +00:00
Mark Andrews
46bcf31c17 2494. [bug] dns/sdlz.h and dns/dlz.h were not being installed.
[RT #18826]
2008-11-20 01:49:22 +00:00
Automatic Updater
bd5ddeb924 update copyright notice 2008-06-24 23:45:56 +00:00
Tatuya JINMEI 神明達哉
0edc9d2bf7 2384. [security] Additional support for query port randomization (change
#2375) including performance improvement and port range
			specification.  [RT #17949, #18098]
2008-06-24 02:02:51 +00:00
Automatic Updater
a764b8dcc9 update copyright notice 2008-05-22 23:46:03 +00:00
Evan Hunt
906685e44d Fully randomize UDP query ports to improve forgery resilience. [rt17949] 2008-05-22 21:16:05 +00:00
Evan Hunt
47e37d8ebd Validating lack of DS records at trust anchors wasn't working. [RT #17151] 2007-09-26 04:39:45 +00:00
Automatic Updater
beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Automatic Updater
2859f78491 update copyright notice 2007-06-26 23:46:21 +00:00
Mark Andrews
833c6d566b 2203. [security] Query id generation was cryptographically weak.
[RT # 16915]
2007-06-26 02:56:59 +00:00
Automatic Updater
43af05a84f update copyright notice 2007-03-06 02:12:08 +00:00
Mark Andrews
154e92a9e6 2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:50:11 +00:00
Mark Andrews
64d5cc809c update copyright notice 2007-01-08 02:42:00 +00:00
Mark Andrews
9aefa7e508 2126. [bug] Serialise validation of type ANY responses. [RT #16555] 2007-01-08 01:37:53 +00:00
Mark Andrews
44a5930e91 spelling 2006-08-01 03:45:21 +00:00
Mark Andrews
41f4a6a513 update copyright notice 2006-07-20 01:10:30 +00:00
Mark Andrews
28d310d40a of -> or 2006-07-19 01:03:51 +00:00
Mark Andrews
fbcf5c31ae 2049. [bug] Restore SOA before AXFR when falling back from
a attempted IXFR when transfering in a zone.
                        Allow a initial SOA query before attempting
                        a AXFR to be requested. [RT #16156]
2006-07-19 00:58:01 +00:00
Mark Andrews
0211c78765 update copyright notice 2006-05-03 00:07:49 +00:00
Shane Kerr
a80207d2a3 Stats for acache. Currently running on senna (ns-ext). 2006-05-02 12:55:31 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:38:01 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
3497fc3b77 1997. [bug] Named was failing to replace negative cache entries
when a positive one for the type was learnt.
                        [RT #15818]
2006-03-02 23:19:20 +00:00
Mark Andrews
1f8449c606 update copyright notice 2006-03-02 00:37:22 +00:00
Mark Andrews
ea407e7082 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 03:10:49 +00:00
Mark Andrews
ae3a8d847a update copyright notice 2006-02-22 23:50:09 +00:00
Mark Andrews
c017465e4a 1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608] 2006-02-21 23:53:35 +00:00
Mark Andrews
77c5b1c067 1986. [func] Report when a zone is removed. [RT #15849] 2006-02-21 23:17:32 +00:00
Mark Andrews
8fc5e43bd9 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
                        [RT #6496]
2006-02-17 00:42:10 +00:00
Mark Andrews
e77385c265 update copyright notice 2006-02-16 23:51:32 +00:00
Mark Andrews
dfb3eacdfb 1983. [func] Two new update policies. "selfsub" and "selfwild".
[RT #12895]
2006-02-16 01:38:49 +00:00
Mark Andrews
4dd7e34f48 comment typo 2006-02-01 22:39:17 +00:00
Mark Andrews
deaa25fd63 update copyright notice 2006-01-27 23:57:45 +00:00
Mark Andrews
65fdd79a50 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
HMACSHA512 support. [RT #13606]
2006-01-27 02:50:51 +00:00
Mark Andrews
76f6d0382a 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-06 00:10:00 +00:00
Mark Andrews
586f82c999 update copyright notice 2006-01-06 00:01:43 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:24:27 +00:00
Mark Andrews
1e53d23ec4 1957. [bug] Dig mishandled responses to class ANY queries.
[RT #15402]
2006-01-05 01:04:28 +00:00