Evan Hunt
d46855caed
[master] ECS authoritative support
...
3936. [func] Added authoritative support for the EDNS Client
Subnet (ECS) option.
ACLs can now include "ecs" elements which specify
an address or network prefix; if an ECS option is
included in a DNS query, then the address encoded
in the option will be matched against "ecs" ACL
elements.
Also, if an ECS address is included in a query,
then it will be used instead of the client source
address when matching "geoip" ACL elements. This
behavior can be overridden with "geoip-use-ecs no;".
When "ecs" or "geoip" ACL elements are used to
select a view for a query, the response will include
an ECS option to indicate which client network the
answer is valid for.
(Thanks to Vincent Bernat.) [RT #36781 ]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572
[master] fix geoip asnum matching
...
3935. [bug] "geoip asnum" ACL elements would not match unless
the full organization name was specified. They
can now match against the AS number alone (e.g.,
AS1234). [RT #36945 ]
2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13
3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
...
sit-secrets documentation. [RT #36980 ]
2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36
[master] fixes to checkconf test, HIP casecompare
...
3933. [bug] Corrected the implementation of dns_rdata_casecompare()
for the HIP rdata type. [RT #36911 ]
3932. [test] Improved named-checkconf tests. [RT #36911 ]
2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311
3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879 ]
2014-08-26 15:01:29 +10:00
Evan Hunt
74745c760c
[master] "rndc nta -r" could hang
...
3930. [bug] "rndc nta -r" could cause a server hang if the
NTA was not found. [RT #36909 ]
2014-08-25 18:01:26 -07:00
Mark Andrews
905ba39e10
3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963 ]
2014-08-26 08:27:24 +10:00
Evan Hunt
06f329afe1
[master] silence coverity
2014-08-22 18:19:09 -07:00
Tinderbox User
cefd74ae81
regen master
2014-08-23 01:06:12 +00:00
Tinderbox User
fea81a5e0e
update copyright notice
2014-08-22 23:45:27 +00:00
Evan Hunt
087b3e8d90
[master] add to rndc test
...
3928. [test] Improve rndc system test. [RT #36898 ]
2014-08-22 16:41:57 -07:00
Evan Hunt
24aaa04401
[master] register pkcs11 error codes in dig
...
3927. [bug] dig: report PKCS#11 error codes correctly when
compiled with --enable-native-pkcs11. [RT #36956 ]
2014-08-22 10:40:43 -07:00
Jeremy C. Reed
f3150c99d7
add missing -Q from synopsis
2014-08-22 08:22:17 -05:00
Mark Andrews
840d6a4614
3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917
2014-08-22 16:32:19 +10:00
Mark Andrews
d4859b0b2a
3924. [bug] Improve 'rndc addzone' error reporting. RT #35187
2014-08-22 16:18:49 +10:00
Evan Hunt
eeb13c7cd2
[master] don't clear signatures from zone cuts
...
3922. [bug] When resigning, dnssec-signzone was removing
all signatures from delegation nodes. It now
retains DS and (if applicable) NSEC signatures.
[RT #36946 ]
2014-08-21 22:56:12 -07:00
Mark Andrews
cef76ee5bd
3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833 ]
2014-08-22 15:45:40 +10:00
Mark Andrews
3d66a979b5
3919. [bug] dig: continue to next line if a address lookup fails
...
in batch mode. [RT #36755 ]
2014-08-22 15:40:43 +10:00
Tinderbox User
5165c59007
update copyright notice
2014-08-21 23:45:22 +00:00
Mark Andrews
f5695ad0e1
3917. [bug] dig, nslookup and host now continue on names that are
...
too long after applying a search list elements.
[RT #36892 ]
2014-08-21 18:05:55 +10:00
Tinderbox User
e2eaaf8015
update copyright notice
2014-08-18 23:45:21 +00:00
Mark Andrews
a7d4d52874
quiet mode is -q
2014-08-18 19:38:43 +10:00
Mark Andrews
5244e505ad
3915 [bug] Address a assertion if a route event arrived while
...
shutting down. [RT #36887 ]
2014-08-18 13:17:35 +10:00
Tinderbox User
a24330c480
regen master
2014-08-16 01:06:20 +00:00
Tinderbox User
aebd0e85bf
update copyright notice
2014-08-15 23:45:20 +00:00
Jeremy C. Reed
b0af7cbe92
SEE ALSO cleanup in pkcs11 manuals
...
This sorts them, adds missing from one manual, uses correct section number,
and gets rid of a trailing comma.
Okayed via RT ticket 36830.
2014-08-15 11:39:55 -05:00
Jeremy C. Reed
821350367e
fix typos or misspellings
2014-08-15 10:35:31 -05:00
Jeremy C. Reed
2f5461d23b
remove the now gone -all switch from flushtree
...
This is for RT ticket #36832 .
While here update manual page date.
2014-08-15 09:28:37 -05:00
Jeremy C. Reed
474faea7dd
change ecgen to keygen in a few places in manpage
...
I didn't create a CHANGES entry for this as it was trivial and
the name of the installed manual didn't change.
This is for RT ticket #36830 .
2014-08-15 09:16:50 -05:00
Tinderbox User
cd14665cdf
update copyright notice
2014-08-07 23:45:19 +00:00
Evan Hunt
cfe32752a6
[master] [36737] allow zero-length URI and CAA fields
...
3914. [bug] Allow the URI target and CAA value fields to
be zero length. [RT #36737 ]
2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07
update copyright notice
2014-08-06 23:45:23 +00:00
Mark Andrews
43b9737b11
3911. [func] Implement EDNS EXPIRE option client side. [RT #35925 ]
2014-08-06 11:50:40 +10:00
Tinderbox User
79bb509936
update copyright notice
2014-08-02 23:45:21 +00:00
Mark Andrews
c38341ec43
3908. [bug] rndc now differentiates between a zone in multiple
...
views and a zone that doesn't exist at all. [RT #36691 ]
2014-08-02 14:43:26 +10:00
Mark Andrews
323bb31d7c
move 'nta -dump'
2014-08-01 10:41:47 +10:00
Mark Andrews
d96f74a3cb
3907. [cleanup] Alphabetise rndc help. [RT#36683]
2014-08-01 10:31:41 +10:00
Tinderbox User
25633bca23
update copyright notice
2014-07-31 23:45:21 +00:00
Mark Andrews
db8369d873
remove trailing whitespace
2014-08-01 00:30:02 +10:00
Mark Andrews
f2a91da02e
adjust range
2014-07-31 20:32:50 +10:00
Mark Andrews
3a55d43527
3904. [func] Add the RPZ SOA to the additional section. [RT36507]
2014-07-31 10:51:48 +10:00
Mark Andrews
bc5db10d72
[rt36611]
...
3903. [bug] Improve the accuracy of DiG's reported round trip
time. [RT 36611]
2014-07-31 07:39:59 +10:00
Mark Andrews
70be388974
[rt36039]
...
3902. bug] liblwres wasn't handling link-local addresses in
nameserver clauses in resolv.conf. [RT #36039 ]
2014-07-30 23:26:37 +10:00
Evan Hunt
a5e2e389ef
[master] complete change #3882
...
Parse arguments to "rndc nta" so they can be either
long or shortened (i.e., both "-dump" and "-d" will work).
2014-07-29 20:28:42 -07:00
Tinderbox User
d1b499c827
update copyright notice
2014-07-29 23:45:20 +00:00
Evan Hunt
2383eb5272
[master] add CAA rdata support
...
3056. [protocol] Added support for CAA record type (RFC 6844).
[RT #36625 ]
2014-07-29 08:40:35 -07:00
Mark Andrews
275a8affe7
3899. [bug] "request-ixfr" is only applicable to slave and redirect
...
zones. [RT #36608 ]
2014-07-25 14:23:14 +10:00
Mark Andrews
ac5ed74860
3897. [bug] RPZ summary information was not properly being updated
...
after a AXFR resulting in changes sometimes being
ignored. [RT #35885 ]
2014-07-22 10:57:58 +10:00
Tinderbox User
d9f0b06dc2
regen master
2014-07-16 01:05:40 +00:00
Mark Andrews
2064e46209
3895. [func] Add the ability to set the DSCP code point to dig.
...
[RT #36546 ]
2014-07-15 23:27:14 +10:00