Commit Graph
426 Commits
Author SHA1 Message Date
Mark Andrews 1872751420 2961. [bug] Be still more selective about the non-authoritative
answers we apply change 2748 to. [RT #22074]
2010-09-15 12:23:17 +00:00
Mark Andrews 910ceb6004 2928. [bug] Be more selective about the non-authoritative
answer we apply change 2748 to. [RT #21594]
2010-09-13 23:25:22 +00:00
Evan Hunt 92f39ccb5b 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:19 +00:00
Automatic Updater 5b17e46285 update copyright notice 2010-06-23 23:46:36 +00:00
Mark Andrews 773efb00d2 2921. [bug] The resolver could attempt to destroy a fetch context
to soon.  [RT #19878]
2010-06-23 01:50:55 +00:00
Automatic Updater 03d50bfec1 update copyright notice 2010-04-20 23:49:58 +00:00
Mark Andrews e104ca4071 2874. [bug] Cache lack of EDNS support only after the server
successfully responds to the query using plain DNS.
                        [RT #20930]
2010-04-20 07:32:51 +00:00
Mark Andrews 40b08512c4 2958. [bug] When canceling validation it was possible to leak
memory. [RT #20800]
2010-03-04 22:28:40 +00:00
Mark Andrews a3c95f281a 2957. [bug] RTT estimates were not being adjusted on ICMP errors.
[RT #20772]
2010-03-04 06:48:31 +00:00
Automatic Updater 8ce46dbe07 update copyright notice 2010-02-25 05:06:35 +00:00
Mark Andrews 8a98023414 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:05:09 +00:00
Automatic Updater ed0fd28aff update copyright notice 2010-01-07 23:48:16 +00:00
Evan Hunt cf00dcb23a 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:49:12 +00:00
Automatic Updater fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Mark Andrews a39a5f4d81 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-17 23:55:18 +00:00
Automatic Updater e34e9a8d68 update copyright notice 2009-11-17 23:48:13 +00:00
Evan Hunt 44a3999cf4 2770. [cleanup] Add log messages to resolver.c to indicate events
causing FORMERR responses. [RT #20526]
2009-11-17 02:23:15 +00:00
Mark Andrews 0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them
as referrals. [RT #18884]
2009-11-04 02:15:30 +00:00
Evan Hunt 5cb44a38d9 back out change 2740 2009-10-28 18:04:29 +00:00
Mark Andrews e9d45c0a04 2740. [func] Identify bad answers from GTLD servers and treat them
as referrals. [RT #18884]
2009-10-27 23:05:53 +00:00
Evan Hunt 95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust
anchors for a view. [RT #20211]
2009-10-27 22:46:13 +00:00
Tatuya JINMEI 神明達哉 307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9
applications.  See README.libdns. [RT #19369]
2009-09-01 00:22:28 +00:00
Mark Andrews bcd0cbfdae 2649. [bug] Set the domain for forward only zones. [RT #19944] 2009-08-13 04:33:51 +00:00
Mark Andrews 6d5852f318 2623. [bug] Named started seaches for DS non-optimally. [RT #19915] 2009-07-13 06:24:27 +00:00
Automatic Updater dc0c165ce3 update copyright notice 2009-06-02 23:47:50 +00:00
Mark Andrews 5422cf284f 2605. [bug] Accept DS responses from delegation only zones.
[RT # 19296]
2009-06-02 05:51:44 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater cc5f9fe224 update copyright notice 2009-05-11 02:38:35 +00:00
Mark Andrews 8a805c9f41 spelling 2009-05-11 02:30:07 +00:00
Mark Andrews 4c2ed3d141 2599. [bug] Address rapid memory growth when validation fails.
[RT #19654]
2009-05-11 02:22:03 +00:00
Francis Dupont ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Evan Hunt bfe0517fdc Clarify logged message when an insecure DNSSEC response arrives from a zone
thought to be secure: "insecurity proof failed" instead of "not insecure".
[RT #19400]
2009-03-01 02:45:38 +00:00
Mark Andrews 549e34bbf4 2564. [bug] Only take EDNS fallback steps when processing timeouts.
[RT #19405]
2009-02-27 23:01:48 +00:00
Mark Andrews 499fa72075 2564. [bug] 'named' was treating a TCP retry as a timeout when
deciding whether to perform a EDNS fallback step.
                        [RT #19393]
2009-02-25 22:46:05 +00:00
Mark Andrews 45c3c12ed3 2552. [bug] zero-no-soa-ttl-cache was not being honoured.
[RT #19340]
2009-02-15 23:13:32 +00:00
Tatuya JINMEI 神明達哉 d9059b0c38 2537. [func] Added more statistics counters including those on socket
I/O events and query RTT histograms.  [RT #18802]
2009-01-27 22:30:00 +00:00
Francis Dupont bdfaef63f5 spelling 2009-01-17 14:59:03 +00:00
Automatic Updater d7845fc5ba update copyright notice 2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉 609f86163a 2525. [func] New logging category "query-errors" to provide detailed
internal information about query failures, especially
			about server failures. [RT #19027]
2009-01-07 01:46:40 +00:00
Automatic Updater 5569e7de51 update copyright notice 2009-01-05 23:47:54 +00:00
Tatuya JINMEI 神明達哉 3fb1637c92 trivial comment cleanups (RT#19118) 2009-01-05 23:20:22 +00:00
Mark Andrews 09b45f7b58 2487. [bug] Give TCP connections longer to complete. [RT #18675] 2008-11-07 00:52:34 +00:00
Mark Andrews 2cada19312 align comment w/ code [RT #18833] 2008-11-06 02:20:14 +00:00
Tatuya JINMEI 神明達哉 35378bcc6a 2468. [bug] Resolver could try unreachable servers multiple times.
[RT #18739]
2008-10-17 21:58:09 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Mark Andrews f5662f41e7 2433. [tuning] Set initial timeout to 800ms. 2008-09-04 04:23:43 +00:00
Automatic Updater e6a6d0778c update copyright notice 2008-08-22 23:47:17 +00:00
Mark Andrews a0fb749d0b adjust log message added by change 2409. [RT #18497] 2008-08-22 05:00:29 +00:00
Evan Hunt a45f57a2d5 RTT banding. [rt18441] 2008-08-22 04:16:17 +00:00