ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
20,390 Commits 589 Branches 805 Tags
c2e81e151a8a746a7dc0ee23328aed31074bbd21
Commit Graph
394 Commits
Author SHA1 Message Date
Mark Andrews 352c9f0750 3371. [bug] AD=1 should behave like DO=1 when deciding whether to 
add NS RRsets to the additional section or not.
                        [RT #30479]
 2012-08-31 11:25:04 +10:00
Tinderbox User bc0ad9c673 update copyright notice 2012-07-25 23:45:49 +00:00
ckb 66e472cd74 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are 
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
 2012-07-25 17:12:57 -05:00
Mark Andrews acebc2457c 3339. [func] Allow the maximum supported rsa exponent size to be 
specified: "max-rsa-exponent-size <value>;" [RT #29228]
 2012-06-20 21:34:24 +10:00
Tinderbox User de16ff6d04 update copyright notice 2012-06-01 23:45:51 +00:00
Vernon Schryver f05089ea5c For rt26172: 
Add
      - optional "recursive-only yes|no" to the response-policy statement
      - optional max-policy-ttl to limit the lies that "recursive-only no"
          can introduce into resolvers' caches
      - test that queries with RD=0 are not rewritten by default
      - performance smoke test

    Change encoding of PASSTHRU action to "rpz-passthru".
          (The old encoding is still accepted.)
    Fix rt26180  assert botch in zone_findrdataset() in this branch
         as well.

    Fix missing signatures on NOERROR results despite RPZ hits
        when there are signatures and the client asks for DNSSEC,
 2012-06-01 01:03:43 +00:00
Tinderbox User 6860df599d update copyright notice 2012-04-27 04:03:10 +00:00
Mark Andrews 9a9f67d54b 3273. [bug] AAAA responses could be returned in the additional 
section even when filter-aaaa-on-v4 was in use.
                        [RT #27292]
 2012-04-27 13:02:03 +10:00
Mark Andrews 081fda43c1 3299. [bug] Make SDB handle errors from database drivers better. 
[RT #28534]
 2012-03-28 10:25:43 +11:00
Tinderbox User c201888c2a regen v9_9 2012-03-07 01:59:30 +00:00
Evan Hunt f94af76649 Revert "added gitignore, removed cvsignore" 
This reverts commit e8ae173655.
 2012-03-05 08:24:17 -08:00
Evan Hunt e8ae173655 added gitignore, removed cvsignore 2012-03-03 23:24:11 -08:00
Mark Andrews 1acf745243 3280. [bug] Potential double free of a rdataset on out of memory 
with DNS64. [RT #27762]
 2012-02-07 01:09:42 +00:00
Evan Hunt c19cfefe7e 3262. [bug] Signed responses were handled incorrectly by RPZ. 
[RT #27316]
 2012-01-07 00:19:59 +00:00
Automatic Updater f76bddd50b update copyright notice 2012-01-04 23:46:49 +00:00
Evan Hunt 56c9fcf075 3260. [bug] "rrset-order cyclic" could appear not to rotate 
for some query patterns.  [RT #27170/27185]
 2012-01-04 03:06:51 +00:00
Evan Hunt 7c6a1a11fa 3218. [security] Cache lookup could return RRSIG data associated with 
nonexistent records, leading to an assertion
			failure. [RT #26590]
 2011-11-16 09:44:32 +00:00
Mark Andrews 7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Mark Andrews ada40193c8 3175. [bug] Fix how DNSSEC positive wildcard responses from a 
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
 2011-10-20 21:42:11 +00:00
Automatic Updater 304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Vernon Schryver 9fee08f655 Commit rt25172 changes to HEAD including 
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
 2011-10-13 01:32:34 +00:00
Automatic Updater ea68e8eba9 update copyright notice 2011-10-12 23:46:34 +00:00
Mark Andrews af850c4120 3168. [bug] Nxdomain redirection could trigger a assert with 
a ANY query. [RT #26017]
 2011-10-12 23:09:35 +00:00
Automatic Updater 0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Evan Hunt 793814f807 3164. [func] Enable DLZ modules to retrieve client information, 
so that responses can be changed depending on the
			source address of the query. [RT #25768]
 2011-10-11 00:09:03 +00:00
Automatic Updater ca894e53b5 update copyright notice 2011-09-02 23:46:33 +00:00
Evan Hunt 9e4afc9b39 3151. [bug] Queries for type RRSIG or SIG could be handled 
incorrectly.  [RT #21050]
 2011-09-02 21:55:16 +00:00
Mark Andrews 475b1ed9cc 3126. [security] Using DNAME record to generate replacements caused 
RPZ to exit with a assertion failure. [RT #23766]
 2011-06-09 03:10:17 +00:00
Mark Andrews b64e3b8358 3125. [security] Using wildcard CNAME records as a replacement with 
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
 2011-06-09 00:42:51 +00:00
Evan Hunt 6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate 
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
 2011-06-08 22:13:51 +00:00
Mark Andrews c0984ac8bd 3115. [bug] Named could fail to return requested data when 
following a CNAME that points into the same zone.
                        [RT #2445]
 2011-05-20 05:09:30 +00:00
Automatic Updater 46ce2f7b60 update copyright notice 2011-04-27 23:47:26 +00:00
Evan Hunt 76db58eb81 3100. [security] Certain response policy zone configurations could 
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
 2011-04-27 17:46:47 +00:00
Evan Hunt 7a2173839c 3099. [test] "dlz" system test now runs but gives R:SKIPPED if 
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
 2011-04-19 22:30:52 +00:00
Francis Dupont a8e6a8cd6c fix too long with dname error 2011-03-18 21:12:19 +00:00
Mark Andrews 0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Evan Hunt 422009fe5b 3066. [func] The DLZ "dlopen" driver is now built by default, 
no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
                        Driver also supported on win32.  [RT #23467]
 2011-03-10 04:36:16 +00:00
Automatic Updater 45caada8cb update copyright notice 2011-02-23 23:47:20 +00:00
Mark Andrews 0e507dbb81 2039. [func] Redirect on NXDOMAIN support. [RT #23146] 2011-02-23 03:08:11 +00:00
Scott Mann 57b403c1e9 Fix prz SERVFAILs after failed zone transfers (RT23246). 2011-02-18 15:18:30 +00:00
Mark Andrews c1ee8bb4ba 3013. [bug] The DNS64 ttl was not always being set as expected. 
[RT #23034]
 2011-02-03 07:35:56 +00:00
Mark Andrews cc5e0baaef arguements out of order 2011-01-13 23:16:06 +00:00
Automatic Updater 9cee5bb028 update copyright notice 2011-01-13 04:59:26 +00:00
Mark Andrews 87708bde16 3008. [func] Response policy zones (RPZ) support. [RT #21726] 2011-01-13 01:59:28 +00:00
Evan Hunt d9ad0a55bb 3000. [bug] More TKEY/GSS fixes: 
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
 2010-12-24 02:20:47 +00:00
Tatuya JINMEI 神明達哉 743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub 
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
 2010-12-16 09:51:30 +00:00
Automatic Updater b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Mark Andrews ed83fa75f5 2963. [security] The allow-query acl was being applied instead of the 
allow-query-cache acl to cache lookups. [RT #22114]
 2010-09-24 05:09:03 +00:00
Mark Andrews 082f42dcf2 2960. [func] Check that named accepts non-authoritative answers. 
[RT #21594]
 2010-09-15 12:07:56 +00:00