Commit Graph
349 Commits
Author SHA1 Message Date
Mark Andrews 8c6e8dd6c1 3081. [bug] Failure of DNAME substitution did not return
YXDOMAIN. [RT #23591]
2011-03-19 10:06:40 +00:00
Automatic Updater 88a65863a5 update copyright notice 2011-03-12 04:58:33 +00:00
Mark Andrews 526b51ec93 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 07:12:03 +00:00
Mark Andrews 0a2897853b 2963. [security] The allow-query acl was being applied instead of the
allow-query-cache acl to cache lookups. [RT #22114]
2010-09-24 05:54:06 +00:00
Mark Andrews 3f9371b30c 2960. [func] Check that named accepts non-authoritative answers.
[RT #21594]
2010-09-15 12:10:54 +00:00
Mark Andrews ad8fd9b034 2953. [bug] Silence spurious "expected covering NSEC3, got an
exact match" message when returning a wildcard
                        no data response. [RT #21744]
2010-09-07 02:52:10 +00:00
Tatuya JINMEI 神明達哉 9891a60571 2931. [bug] Temporarily and partially disable change 2864
because it would cause inifinite attempts of RRSIG
			queries.  This is an urgent care fix; we'll
			revisit the issue and complete the fix later.
			[RT #21710]
2010-07-15 01:26:10 +00:00
Automatic Updater 4fe6e5b494 update copyright notice 2010-06-26 23:46:27 +00:00
Mark Andrews 5a7f05ee3c 2925. [bug] Named failed to accept uncachable negative responses
from insecure zones. [RT# 21555]
2010-06-25 23:52:09 +00:00
Automatic Updater 275c562ce7 update copyright notice 2010-06-22 23:46:34 +00:00
Mark Andrews 13ce1be5d3 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:04:22 +00:00
Automatic Updater 3fe2c091cc update copyright notice 2010-03-12 23:49:56 +00:00
Mark Andrews 02d3754d1e 2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
[RT #21050]
2010-03-12 02:00:58 +00:00
Tatuya JINMEI 神明達哉 6ca6cc975f 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:33:41 +00:00
Vernon Schryver 5d9922e86f Allow the optional filter-aaaa-on-v4 option in view statements to close #20635 2009-11-28 15:57:37 +00:00
Mark Andrews d0ca4e90e2 2786. [bug] Additional could be promoted to answer. [RT #20663] 2009-11-25 02:22:05 +00:00
Mark Andrews dc92707066 2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
buffer size of 512 or less.  [RT #20654]
2009-11-24 03:09:57 +00:00
Mark Andrews a39a5f4d81 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-17 23:55:18 +00:00
Mark Andrews 9d856845d6 2744. [func] Log if a query was over TCP. [RT #19961] 2009-11-03 04:39:41 +00:00
Automatic Updater 5f744ebbdc update copyright notice 2009-10-26 23:47:35 +00:00
Evan Hunt c8aa7ce70d 2732. [func] Add optional filter-aaaa-on-v4 option, available
if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]
2009-10-26 23:14:54 +00:00
Mark Andrews c07236a635 2729. [func] When constructing a CNAME from a DNAME use the DNAME
TTL. [RT #20451]
2009-10-24 04:38:19 +00:00
Mark Andrews a12c8549d6 2678. [func] Treat DS queries as if "minimal-response yes;"
was set. [RT #20258]
2009-09-14 23:13:37 +00:00
Mark Andrews 6beee732e4 2643. [bug] Stub zones interacted badly with NSEC3 support.
[RT #19777]
2009-08-05 02:09:04 +00:00
Tatuya JINMEI 神明達哉 e47809ad55 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:02:57 +00:00
Francis Dupont ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Francis Dupont cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews 56708c6fb4 2576. [bug] NSEC record were not being correctly signed when
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
2009-03-13 01:35:18 +00:00
Mark Andrews d36ba0f0ca 2570. [func] Log the destination address the query was sent to.
[RT #19209]
2009-03-03 01:36:17 +00:00
Mark Andrews 692ce6c313 2551. [bug] Potential Reference leak on return. [RT #19341] 2009-02-15 23:04:38 +00:00
Tatuya JINMEI 神明達哉 d9059b0c38 2537. [func] Added more statistics counters including those on socket
I/O events and query RTT histograms.  [RT #18802]
2009-01-27 22:30:00 +00:00
Francis Dupont 7f1785d0de spelling 2009-01-17 11:23:46 +00:00
Automatic Updater d7845fc5ba update copyright notice 2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉 609f86163a 2525. [func] New logging category "query-errors" to provide detailed
internal information about query failures, especially
			about server failures. [RT #19027]
2009-01-07 01:46:40 +00:00
Tatuya JINMEI 神明達哉 cb30636abd 2516. [bug] glue sort for responses was performed even when not
needed. [RT #19039]
2008-12-16 02:19:46 +00:00
Mark Andrews 69f0cf898e 2507. [func] Log the recursion quota values when killing the
oldest query or refusing to recurse due to quota.
                        [RT #19022]
2008-12-08 06:39:42 +00:00
Mark Andrews a14aff6984 2484. [bug] It was possible to trigger a REQUIRE failure when
adding NSEC3 proofs to the response in
                        query_addwildcardproof().  [RT #18828]
2008-11-03 23:57:22 +00:00
Mark Andrews 24a56e15f7 silence compiler warning 2008-10-15 02:37:11 +00:00
Mark Andrews e6c5224571 2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
[RT #18697]
2008-10-02 20:35:39 +00:00
Automatic Updater 6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Mark Andrews 1e02091371 2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
was set. [RT #18528]
2008-08-26 06:09:18 +00:00
Mark Andrews 2294423014 2364. [bug] named could trigger a assertion when serving a
malformed signed zone. [RT #17828]
2008-04-29 00:54:28 +00:00
Tatuya JINMEI 神明達哉 bf64a0d5d9 2361. [bug] "recursion" statistics counter could be counted
multiple times for a single query.  [RT #17990]
2008-04-23 01:14:24 +00:00
Mark Andrews 8907d8fa04 2355. [func] Extend the number statistics counters available.
[RT #17590]
2008-04-03 05:55:52 +00:00
Mark Andrews a76b380643 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]
2008-04-01 01:37:25 +00:00
Tatuya JINMEI 神明達哉 1c3ed2a83d 2320. [func] Make statistics couters thread-safe for platforms
that support certain atomic operations. [RT #17466]
2008-01-24 02:00:44 +00:00
Automatic Updater 2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Mark Andrews 2678fccde3 2290. [bug] Let AD in the query signal that the client wants AD
set in the response. [RT #17301]
2008-01-09 04:09:12 +00:00
Automatic Updater 1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00