Commit Graph

6776 Commits

Author SHA1 Message Date
Evan Hunt
d46855caed [master] ECS authoritative support
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
sit-secrets documentation. [RT #36980]
2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36 [master] fixes to checkconf test, HIP casecompare
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]
2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879] 2014-08-26 15:01:29 +10:00
Evan Hunt
74745c760c [master] "rndc nta -r" could hang
3930.	[bug]		"rndc nta -r" could cause a server hang if the
			NTA was not found. [RT #36909]
2014-08-25 18:01:26 -07:00
Mark Andrews
905ba39e10 3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963] 2014-08-26 08:27:24 +10:00
Evan Hunt
06f329afe1 [master] silence coverity 2014-08-22 18:19:09 -07:00
Tinderbox User
cefd74ae81 regen master 2014-08-23 01:06:12 +00:00
Tinderbox User
fea81a5e0e update copyright notice 2014-08-22 23:45:27 +00:00
Evan Hunt
087b3e8d90 [master] add to rndc test
3928.	[test]		Improve rndc system test. [RT #36898]
2014-08-22 16:41:57 -07:00
Evan Hunt
24aaa04401 [master] register pkcs11 error codes in dig
3927.	[bug]		dig: report PKCS#11 error codes correctly when
			compiled with --enable-native-pkcs11. [RT #36956]
2014-08-22 10:40:43 -07:00
Jeremy C. Reed
f3150c99d7 add missing -Q from synopsis 2014-08-22 08:22:17 -05:00
Mark Andrews
840d6a4614 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917 2014-08-22 16:32:19 +10:00
Mark Andrews
d4859b0b2a 3924. [bug] Improve 'rndc addzone' error reporting. RT #35187 2014-08-22 16:18:49 +10:00
Evan Hunt
eeb13c7cd2 [master] don't clear signatures from zone cuts
3922.	[bug]		When resigning, dnssec-signzone was removing
			all signatures from delegation nodes. It now
			retains	DS and (if applicable) NSEC signatures.
			[RT #36946]
2014-08-21 22:56:12 -07:00
Mark Andrews
cef76ee5bd 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] 2014-08-22 15:45:40 +10:00
Mark Andrews
3d66a979b5 3919. [bug] dig: continue to next line if a address lookup fails
in batch mode. [RT #36755]
2014-08-22 15:40:43 +10:00
Tinderbox User
5165c59007 update copyright notice 2014-08-21 23:45:22 +00:00
Mark Andrews
f5695ad0e1 3917. [bug] dig, nslookup and host now continue on names that are
too long after applying a search list elements.
                        [RT #36892]
2014-08-21 18:05:55 +10:00
Tinderbox User
e2eaaf8015 update copyright notice 2014-08-18 23:45:21 +00:00
Mark Andrews
a7d4d52874 quiet mode is -q 2014-08-18 19:38:43 +10:00
Mark Andrews
5244e505ad 3915 [bug] Address a assertion if a route event arrived while
shutting down. [RT #36887]
2014-08-18 13:17:35 +10:00
Tinderbox User
a24330c480 regen master 2014-08-16 01:06:20 +00:00
Tinderbox User
aebd0e85bf update copyright notice 2014-08-15 23:45:20 +00:00
Jeremy C. Reed
b0af7cbe92 SEE ALSO cleanup in pkcs11 manuals
This sorts them, adds missing from one manual, uses correct section number,
and gets rid of a trailing comma.

Okayed via RT ticket 36830.
2014-08-15 11:39:55 -05:00
Jeremy C. Reed
821350367e fix typos or misspellings 2014-08-15 10:35:31 -05:00
Jeremy C. Reed
2f5461d23b remove the now gone -all switch from flushtree
This is for RT ticket #36832.
While here update manual page date.
2014-08-15 09:28:37 -05:00
Jeremy C. Reed
474faea7dd change ecgen to keygen in a few places in manpage
I didn't create a CHANGES entry for this as it was trivial and
the name of the installed manual didn't change.
This is for RT ticket #36830.
2014-08-15 09:16:50 -05:00
Tinderbox User
cd14665cdf update copyright notice 2014-08-07 23:45:19 +00:00
Evan Hunt
cfe32752a6 [master] [36737] allow zero-length URI and CAA fields
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]
2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07 update copyright notice 2014-08-06 23:45:23 +00:00
Mark Andrews
43b9737b11 3911. [func] Implement EDNS EXPIRE option client side. [RT #35925] 2014-08-06 11:50:40 +10:00
Tinderbox User
79bb509936 update copyright notice 2014-08-02 23:45:21 +00:00
Mark Andrews
c38341ec43 3908. [bug] rndc now differentiates between a zone in multiple
views and a zone that doesn't exist at all. [RT #36691]
2014-08-02 14:43:26 +10:00
Mark Andrews
323bb31d7c move 'nta -dump' 2014-08-01 10:41:47 +10:00
Mark Andrews
d96f74a3cb 3907. [cleanup] Alphabetise rndc help. [RT#36683] 2014-08-01 10:31:41 +10:00
Tinderbox User
25633bca23 update copyright notice 2014-07-31 23:45:21 +00:00
Mark Andrews
db8369d873 remove trailing whitespace 2014-08-01 00:30:02 +10:00
Mark Andrews
f2a91da02e adjust range 2014-07-31 20:32:50 +10:00
Mark Andrews
3a55d43527 3904. [func] Add the RPZ SOA to the additional section. [RT36507] 2014-07-31 10:51:48 +10:00
Mark Andrews
bc5db10d72 [rt36611]
3903.   [bug]           Improve the accuracy of DiG's reported round trip
                        time. [RT 36611]
2014-07-31 07:39:59 +10:00
Mark Andrews
70be388974 [rt36039]
3902.   bug]            liblwres wasn't handling link-local addresses in
                        nameserver clauses in resolv.conf. [RT #36039]
2014-07-30 23:26:37 +10:00
Evan Hunt
a5e2e389ef [master] complete change #3882
Parse arguments to "rndc nta" so they can be either
long or shortened (i.e., both "-dump" and "-d" will work).
2014-07-29 20:28:42 -07:00
Tinderbox User
d1b499c827 update copyright notice 2014-07-29 23:45:20 +00:00
Evan Hunt
2383eb5272 [master] add CAA rdata support
3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]
2014-07-29 08:40:35 -07:00
Mark Andrews
275a8affe7 3899. [bug] "request-ixfr" is only applicable to slave and redirect
zones. [RT #36608]
2014-07-25 14:23:14 +10:00
Mark Andrews
ac5ed74860 3897. [bug] RPZ summary information was not properly being updated
after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]
2014-07-22 10:57:58 +10:00
Tinderbox User
d9f0b06dc2 regen master 2014-07-16 01:05:40 +00:00
Mark Andrews
2064e46209 3895. [func] Add the ability to set the DSCP code point to dig.
[RT #36546]
2014-07-15 23:27:14 +10:00