Mark Andrews
3742338a7b
4585. [port] win32: Set CompileAS value. [RT #42474 ]
2017-04-20 12:41:40 +10:00
Tinderbox User
0fbf291dad
update copyright notice / whitespace
2017-03-16 23:46:35 +00:00
Mark Andrews
f94f3e2791
4581. [port] Linux: Add getpid and getrandom to the list of system
...
calls named uses for seccomp. [RT #44883 ]
2017-03-16 11:21:18 +11:00
Tinderbox User
db1010fe82
update copyright notice / whitespace
2017-03-10 23:46:18 +00:00
Evan Hunt
612b2e2c0d
[master] timestamp suffixes for log files
...
4579. [func] Logging channels and dnstap output files can now
be configured with a "suffix" option, set to
either "increment" or "timestamp", indicating
whether to use incrementing numbers or timestamps
as the file suffix when rolling over a log file.
[RT #42838 ]
2017-03-08 23:20:40 -08:00
Tinderbox User
e04dff4bfd
update copyright notice / whitespace
2017-02-21 23:45:37 +00:00
Witold Krecicki
0790f8a361
4577. [func] Make qtype of resolver fuzzing packet configurable via command line. [RT #43540 ]
2017-02-21 03:49:55 -08:00
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Mark Andrews
3bce12e4b6
4575. [security] Dns64 with break-dnssec yes; can result in a
...
assertion failure. (CVE-2017-3136) [RT #44653 ]
2017-02-15 12:18:51 +11:00
Evan Hunt
1df7a6fed6
[master] call flow description was incomplete
2017-02-09 13:52:45 -08:00
Evan Hunt
d16500cece
[master] restore some code from change 4556
2017-02-08 17:33:13 -08:00
Tinderbox User
f929677ed8
update copyright notice / whitespace
2017-02-08 23:45:32 +00:00
wpk
96912e44b0
4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability
2017-02-08 22:15:01 +01:00
Evan Hunt
c4e4bd6a09
[master] dnstap size and versions options
...
4572. [func] The "dnstap-output" option can now take "size" and
"versions" parameters to indicate the maximum size
a dnstap log file can grow before rolling to a new
file, and how many old files to retain. [RT #44502 ]
2017-02-06 16:34:58 -08:00
Evan Hunt
0f91e968c7
[master] fall back to builtin keys if bind.keys is empty
...
4570. [cleanup] named did not correctly fall back to the built-in
initializing keys if the bind.keys file was present
but empty. [RT #44531 ]
2017-02-04 00:37:37 -08:00
Evan Hunt
650b5e7592
[master] store local and remote addresses in dnstap
...
4569. [func] Store both local and remote addresses in dnstap
logging, and modify dnstap-read output format to
print them. [RT #43595 ]
2017-02-03 17:05:58 -08:00
Tinderbox User
2cd2e915c3
regen
2017-02-03 23:30:02 +00:00
Tinderbox User
194f07c628
update copyright notice / whitespace
2017-02-02 23:45:47 +00:00
Evan Hunt
4ecfa356d1
[master] silence warning
2017-02-02 13:24:17 -08:00
Evan Hunt
aace5d0fb3
[master] include ECS in query logging
...
4566. [func] Query logging now includes the ECS option if one
was included in the query. [RT #44476 ]
2017-02-02 11:54:28 -08:00
Mark Andrews
e5fe0d7823
fix not HAVE_LMDB case
2017-02-03 06:18:07 +11:00
Mark Andrews
2f5444972a
perform more testing on rndc <op> -redirect
2017-02-02 17:25:54 +11:00
Mark Andrews
f783c2d579
4562. [func] Add additional memory statistics currently malloced
...
and maxmalloced per memory context. [RT #43593 ]
2017-02-02 15:36:38 +11:00
Mark Andrews
b1b5229a47
4556. [security] Combining dns64 and rpz can result in dereferencing
...
a NULL pointer (read). (CVE-2017-3135) [RT#44434]
(cherry picked from commit 5abe80ef13 )
2017-01-24 09:55:51 +11:00
Tinderbox User
31c2480cd4
update copyright notice / whitespace
2017-01-19 23:45:37 +00:00
Mark Andrews
bf0b649993
whitespace
2017-01-19 13:16:04 +11:00
Evan Hunt
66b61a029d
[master] more specific date for DLV shutdown warning
2017-01-12 09:10:41 -08:00
Tinderbox User
2067cfdb46
regen master
2017-01-06 01:05:20 +00:00
Tinderbox User
f557aeef7c
update copyright notice / whitespace
2017-01-05 23:45:24 +00:00
Tinderbox User
37ae137942
regen master
2017-01-05 01:05:07 +00:00
Evan Hunt
5804332588
[master] EDNS padding and keepalive support
...
4549. [func] Added support for the EDNS TCP Keepalive option
(RFC 7828). [RT #42126 ]
4548. [func] Added support for the EDNS Padding option (RFC 7830).
[RT #42094 ]
2017-01-04 09:16:30 -08:00
Tinderbox User
ed07d7a8f5
update copyright notice / whitespace
2016-12-30 23:46:36 +00:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Tinderbox User
4ef83f4333
update copyright notice / whitespace
2016-12-28 23:48:39 +00:00
Mark Andrews
d376792dae
4531. [security] 'is_zone' was not being properly updated by redirect2
...
and subsequently preserved leading to an assertion
failure. (CVE-2016-9778) [RT #43837 ]
2016-12-29 10:25:01 +11:00
Mark Andrews
5093e8d482
4542. [func] Allow rndc to manipulate redirect zones with using
...
-redirect as the zone name (use "-redirect." to
manipulate a zone named "-redirect"). [RT #43971 ]
2016-12-28 11:36:31 +11:00
Tinderbox User
d029dfe95c
update copyright notice / whitespace
2016-12-27 23:46:44 +00:00
Mark Andrews
e20db12918
4541. [bug] rndc addzone should properly reject non master/slave
...
zones. [RT #43665 ]
2016-12-28 10:27:56 +11:00
Mark Andrews
8e333f42ef
4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
...
[RT #43601 ]
2016-12-27 09:49:02 +11:00
Mark Andrews
762c4fc5a8
4539. [bug] Referencing a nonexistant zone with rpz could lead
...
to a assertion failure when configuring. [RT #43787 ]
2016-12-27 08:59:07 +11:00
Mark Andrews
a678e70481
4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
...
when reusing the event structure. [RT #43885 ]
2016-12-14 10:42:38 +11:00
Mark Andrews
def6b33bad
4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879 ]
2016-12-13 16:27:18 +11:00
Tinderbox User
16fde7f0b3
regen master
2016-12-07 01:05:34 +00:00
Mark Andrews
1b8ce3b330
4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831 ]
2016-12-07 10:49:55 +11:00
Mark Andrews
c9ee977f31
added -T keepstderr to keep stderr open when daemonizing [RT #43736 ]
2016-12-05 10:38:16 +11:00
Evan Hunt
6bdb70057d
[master] log as error if entropy unavailable
...
4521. [cleanup] Log it as an error if an entropy source is not
found and there is no fallback available. [RT #43659 ]
2016-11-29 11:30:31 -08:00
Evan Hunt
62c85a4a52
[master] allow different time formats: local, iso8601, iso8601-utc
...
4518. [func] The "print-time" option in the logging configuration
can now take arguments "local", "iso8601" or
"iso8601-utc" to indicate the format in which the
date and time should be logged. For backward
compatibility, "yes" is a synonym for "local".
[RT #42585 ]
2016-11-22 23:34:47 -08:00
Tinderbox User
8d8839b3a0
regen master
2016-11-03 01:06:32 +00:00
Mark Andrews
5f8412a4cb
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
2016-11-02 17:31:27 +11:00
Evan Hunt
6087f87afb
[master] make uninstall
...
4503. [cleanup] "make uninstall" now removes file installed by
BIND. (This currently excludes Python files
due to lack of support in setup.py.) [RT #42912 ]
2016-11-01 19:17:07 -07:00