Commit Graph
237 Commits
Author SHA1 Message Date
Mark Andrews 02b772da47 developer: bwelling
reviewed: marka
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2002-09-11 06:36:17 +00:00
Michael Graff ab7ce5eb6e detach from quota in an error case. I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2002-09-08 18:40:58 +00:00
Mark Andrews 9130ab90fe developer: bwelling
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews a2239239cf reviewed: marka
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews 95d24aa0d0 prevent assertion failure 2002-08-07 02:03:49 +00:00
Mark Andrews 4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews 34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews 240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews 8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews 475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews ac65e45126 1333. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews 0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews 7c441b7f4a 1239. [bug] Under certain circumstances named could continue to
use a name after it had been freed triggering
                        INSIST() failures.  [RT #2614]
2002-03-28 04:03:50 +00:00
Mark Andrews 2dd99c098c 1234. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2002-03-07 13:46:41 +00:00
Mark Andrews a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington b2ca6fd3a8 #1187 was both unclean and broken. Fix it and clean it up. 2002-01-23 08:46:40 +00:00
Mark Andrews 9ab461a6ff 1169. [func] Identify recursive queries in the query log. 2001-12-29 05:31:26 +00:00
Andreas Gustafsson 1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Andreas Gustafsson 6b31d9c568 1136. [bug] CNAME records synthesized from DNAMEs did not
have a TTL of zero as required by RFC2672
                        [RT #2129]
2001-11-26 22:54:16 +00:00
Andreas Gustafsson cde2f4dabe style 2001-11-16 23:58:39 +00:00
Mark Andrews 773e64ec15 try-edns is no more 2001-11-07 04:25:19 +00:00
Andreas Gustafsson b352902413 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2001-10-29 19:02:48 +00:00
Andreas Gustafsson 2562a84dc5 make error message issued when exceeding the recursive client
quota more meaningful to users
2001-10-25 01:50:15 +00:00
Andreas Gustafsson d352f188cb 1072. [bug] The TCP client quota could be exceeded when
recursion occurred. [RT #1937]
2001-10-25 00:13:37 +00:00
Andreas Gustafsson 5b4f07a4f3 redid 1.204 using a subroutine to reduce code duplication and
to eliminate a rather confusing for loop
2001-10-24 18:55:04 +00:00
Mark Andrews b19619260f 1069. [func] Kill oldest recursive query when recursive query
quota is exhausted.
2001-10-24 03:10:18 +00:00
Mark Andrews 5d4bffa427 cancelled fetches wern't being detected. 2001-10-23 06:04:37 +00:00
Mark Andrews f0a464d58a memory leak on error. 2001-10-23 06:01:14 +00:00
Andreas Gustafsson 9066d09c3e Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-10-01 18:54:05 +00:00
Andreas Gustafsson 808b909f27 1014. [bug] Some queries would cause statistics counters to
increment more than once or not at all. [RT #1321]
2001-09-21 19:08:06 +00:00
Andreas Gustafsson 2f734e0a7e sizeof style 2001-09-19 23:08:24 +00:00
Andreas Gustafsson 1e9efeeb22 986. [bug] 'additional-from-auth no;' did not work reliably
in the case of queries answered from the cache.
                        [RT #1436]
2001-09-11 01:21:39 +00:00
Mark Andrews 06a960c681 971. [func] 'try-edns' can be use to disable edns on all queries. 2001-08-30 05:52:18 +00:00
Andreas Gustafsson 135c1c53b8 don't INSIST() that calling dns_db_find() on the root hints
only binds the rdataset when returning ISC_R_SUCCESS, because that's not the case -
for example, if the root hints are '. 300 IN CNAME .', DNS_R_CNAME is returned and
the rdataset is bound
2001-08-27 17:20:10 +00:00
Mark Andrews 89555ff443 965. [bug] Using non root hints caused a rbtdb node reference
leak.    [RT #1581, RT #1618]
2001-08-27 06:10:17 +00:00
Andreas Gustafsson 5465e5f7dd query_getzonedb() formatted the domain name and class being queried
for at least once for every query to authoritative data, whether or not a log
message was actually printed, which adversely affected query performance
2001-06-15 23:28:29 +00:00
Andreas Gustafsson 6cc2f10547 indentation 2001-05-19 00:08:21 +00:00
Andreas Gustafsson 3242899a56 818. [bug] Certain pathological responses to ANY queries could
cause an assertion failure. [RT #1218]
2001-04-28 00:21:30 +00:00
Andreas Gustafsson aed6a8ed2e 805. [bug] When using "forward only", missing root hints should
not cause queries to fail. [RT #1143]
2001-04-09 21:16:47 +00:00
Brian Wellington 55ddb88e53 803. [bug] Treat all SIG queries as if they have the CD bit set,
otherwise no data will be returned [RT #749]
2001-04-04 18:47:06 +00:00
Brian Wellington b0390aab30 783. [bug] Following CNAMEs could cause an assertion failure
when either using an sdb database or under very
                        rare conditions.
2001-03-20 00:00:45 +00:00
Brian Wellington fed2c6d186 80 columns 2001-03-19 22:59:03 +00:00
Bob Halley d911284333 add support for minimal-responses 2001-03-14 21:53:29 +00:00
Bob Halley 02a402afe5 add response minimization if MINIMIZE_RESPONSES is defined 2001-03-14 19:33:00 +00:00