Commit Graph
4835 Commits
Author SHA1 Message Date
Automatic Updater b6306ef56e update copyright notice 2009-06-10 23:47:47 +00:00
Evan Hunt 18ad4708eb commit windows build changes needed for DDNS patch 2009-06-10 23:36:57 +00:00
Evan Hunt 8c091f4733 add #include <isc/print.h> 2009-06-10 01:44:53 +00:00
Automatic Updater 852ccdd42a regen 2009-06-10 01:12:51 +00:00
Evan Hunt 68d766400e added .cvsignore files 2009-06-10 00:56:15 +00:00
Evan Hunt f8c3dfee69 added missing file 2009-06-10 00:55:02 +00:00
Evan Hunt 351b62535d 2609. [func] Simplify the configuration of dynamic zones:
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
2009-06-10 00:27:22 +00:00
Mark Andrews 996b4d8982 fix bad test to determine if both ksk's and zsk's are present. [RT #19802] 2009-06-09 22:54:21 +00:00
Automatic Updater 1c51f79aba regen 2009-06-06 01:12:32 +00:00
Jeremy Reed 6a550cb83c Please bump date on manpage. So we know we aren't using 2000 docs.
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)
2009-06-05 21:59:43 +00:00
Mark Andrews 988023d8bc missing unsigned 2009-06-05 06:59:03 +00:00
Automatic Updater 6283056805 regen 2009-06-05 01:12:33 +00:00
Automatic Updater 9f4702d025 update copyright notice 2009-06-04 23:47:53 +00:00
Mark Andrews 97573334cb fix up bad merge 2009-06-04 04:33:11 +00:00
Automatic Updater 39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews 2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and
named-comilezone argv[0] names under windows.
                        [RT #19767]
2009-05-29 02:14:31 +00:00
Automatic Updater a9a054302d regen 2009-05-22 01:14:49 +00:00
Automatic Updater bbe20aa62c update copyright notice 2009-05-21 23:47:28 +00:00
Jeremy Reed 5d924e398e 2601. [doc] Mention file creation mode mask in the
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
2009-05-21 19:54:28 +00:00
Automatic Updater 54cdd2b307 update copyright notice 2009-05-07 23:47:44 +00:00
Francis Dupont ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Francis Dupont ddac1a2b98 reserve -F 2009-05-07 09:33:52 +00:00
Automatic Updater 7a272c6b0d update copyright notice 2009-05-06 23:47:50 +00:00
Francis Dupont 0e77d33686 add isc/print.h 2009-05-06 11:41:07 +00:00
Francis Dupont d302a620e0 Fix unknown extended rcodes in dig 2009-05-06 10:16:32 +00:00
Jeremy Reed 4144efb390 2594. [func] Have rndc warn if using its default configuration file
when the key file also exists. [RT #19424]
2009-05-04 17:38:56 +00:00
Francis Dupont cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews 3836f447ee 2592. [bug] Treat "any" as a type in nsupdate. [RT #19455] 2009-04-30 07:10:09 +00:00
Mark Andrews 47323be2af 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 06:59:11 +00:00
Mark Andrews b9636a8e43 2583. [port] netbsd: provide a control to not add the compile
date to the version string, -DNO_VERSION_DATE.
2009-04-03 19:55:59 +00:00
Evan Hunt 8c5482b3ea Corrected install rule to install arpaname.1 not arpaname.8 2009-03-23 21:59:56 +00:00
Tatuya JINMEI 神明達哉 3af7cd2661 2580. [bug] UpdateRej statistics counter could be incremented twice
for one rejection. [RT #19476]
2009-03-18 22:17:24 +00:00
Evan Hunt ca23cf7e28 2578. [bug] Changed default sig-signing-type to 65534, because
65535 turns out to be reserved.  [RT #19477]
2009-03-16 23:41:21 +00:00
Mark Andrews 56708c6fb4 2576. [bug] NSEC record were not being correctly signed when
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
2009-03-13 01:35:18 +00:00
Automatic Updater ed4475f3f5 regen 2009-03-10 01:12:31 +00:00
Mark Andrews b98225ff8a 2574. [doc] Document nsupdate -g and -o. [RT #19351] 2009-03-09 04:18:51 +00:00
Automatic Updater 2919fef5d1 update copyright notice 2009-03-07 23:47:45 +00:00
Automatic Updater 7a7a44400d regen 2009-03-06 01:12:33 +00:00
Automatic Updater 2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Mark Andrews f605647060 Undocumented firewall test hook. [RT #19398] 2009-03-05 03:13:55 +00:00
Automatic Updater e61db954bf update copyright notice 2009-03-04 23:48:02 +00:00
Mark Andrews 1559511ada don't use a implied source in a direct rule 2009-03-04 05:48:32 +00:00
Evan Hunt 3a30493983 2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
Mark Andrews ffcd068f87 add config.h 2009-03-04 02:23:36 +00:00
Evan Hunt 6201345ba9 Added .cvsignore for bin/tools 2009-03-04 01:55:32 +00:00
Mark Andrews 620508359f 2571. [func] Add a new tool "arpaname" which translates IP addresses
to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
                        [RT #18976]
2009-03-04 01:30:27 +00:00
Automatic Updater cd83ba4484 update copyright notice 2009-03-03 23:48:02 +00:00