ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,645 Commits 589 Branches 805 Tags
dd5dff30961b85e30461da170c4b8d8529ac317e
Commit Graph
8425 Commits
Author SHA1 Message Date
Mark Andrews b24061719c 3967. [test] Add test for inlined signed zone in multiple views 
with different DNSKEY sets. [RT #35759]
 2014-10-03 07:59:44 +10:00
Mark Andrews 9c0589bc8b 3966. [bug] Missing dns_db_closeversion call in receive_secure_db. 
[RT #35746]
 2014-10-03 07:50:09 +10:00
Mark Andrews a837c939c4 SIG(0) update forwarding testing requires crypto be configured 2014-10-02 11:07:01 +10:00
Tinderbox User b68a2d272b regen master 2014-10-02 01:05:48 +00:00
Tinderbox User 3fd181c98f update copyright notice 2014-10-01 23:45:24 +00:00
Mark Andrews ed1c845c1d 3964. [func] nsupdate now performs check-names processing. 
[RT #36266]
 2014-10-02 09:35:43 +10:00
Evan Hunt 7b04216015 [master] improve dlzexternal test 
3963.	[test]		Added NXRRSET test cases to the "dlzexternal"
			system test. [RT #37344]
 2014-09-30 17:08:12 -07:00
Mark Andrews 7d891eaf91 3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error conditions. [RT #34663] 2014-10-01 10:01:54 +10:00
Tinderbox User be484acb22 update copyright notice 2014-09-30 23:45:22 +00:00
Mark Andrews ffeaac1d82 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with 
BADSIG.  [RT #37216]
 2014-10-01 07:24:16 +10:00
Mark Andrews c83b91fb63 3960. [bug] 'dig +sigchase' could loop forever. [RT #37220] 2014-10-01 07:06:20 +10:00
Tinderbox User 2fb35a6d59 update copyright notice 2014-09-29 23:45:24 +00:00
Mark Andrews 4bc581ca31 use RANDFILE rather than /dev/urandom 2014-09-29 23:39:07 +10:00
Mark Andrews 1c5990c2f9 3958. [bug] Detect when writeable files have multiple references 
in named.conf. [RT #37172]
 2014-09-29 12:10:10 +10:00
Mark Andrews 80169c379d 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 
and ECDSAP384SHA384. [RT #37183]
 2014-09-29 10:18:54 +10:00
Mark Andrews 10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Mark Andrews 6b6d6509f6 3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112] 2014-09-27 12:30:00 +10:00
Mark Andrews 9a36fb86f5 3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159] 2014-09-27 12:14:20 +10:00
Mark Andrews 27cd03a21c use more portable awk 2014-09-19 15:00:18 +10:00
Mark Andrews 06e28e50bd give the nameserver a little longer to response 2014-09-18 10:06:48 +10:00
Mark Andrews 1a5f84d56a UNTESTED -> SKIPPED 2014-09-16 23:49:52 +10:00
Mark Andrews f4a9c9226a silence signed/unsigned warning 2014-09-16 23:46:37 +10:00
Mark Andrews 13a9b42a43 make depend fails in bin/python 2014-09-15 14:06:17 +10:00
Tinderbox User 4fe1df3962 regen master 2014-09-14 01:05:19 +00:00
Mark Andrews 3867312e4c 3951. [func] Add the ability to set yet-to-be-defined EDNS flags 
to dig (+ednsflags=#). [RT #37142]
 2014-09-13 19:13:59 +10:00
Tinderbox User c25602ed66 regen master 2014-09-13 01:05:26 +00:00
Evan Hunt 8dba0e7d87 [master] [rt36993] work around a bmake bug in BSD 
3950.	[port]		Changed the bin/python Makefile to work around a
			bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
 2014-09-12 15:21:47 -07:00
Mark Andrews 48b093c864 update named-checkzone manpage for SPF changes 2014-09-13 07:55:57 +10:00
Tinderbox User 2c69f767d6 update copyright notice 2014-09-10 23:45:21 +00:00
Mark Andrews 947cf282a7 3949. [experimental] Experimental support for draft-andrews-edns1 by sending 
EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
                        building).  Add support for limiting the EDNS version
                        advertised to servers: server { edns-version 0; };
                        Log the EDNS version received in the query log.
                        [RT #35864]
 2014-09-10 15:31:40 +10:00
Mark Andrews 5c420ccc29 drop 'I:send many simultaneous updates via a update forwarder' test until re-written using perl 2014-09-07 22:08:45 +10:00
Mark Andrews 76a17033db also fix the expected count 2014-09-07 20:24:59 +10:00
Mark Andrews 48179343c2 reduce number of nsupdates being simultaeously forked 2014-09-07 20:24:14 +10:00
Mark Andrews 8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Tinderbox User 5fa6a064b8 regen master 2014-09-05 19:26:47 +00:00
Evan Hunt 1aa8b80767 [master] fix warnings/doc errors 
- possible use before assignment in query.c
- missing <varlistentry> in ARM
 2014-09-04 18:35:30 -07:00
Evan Hunt c9e976dc43 [master] [rt37057] server-id tests 
3944.	[test]		Added a regression test for "server-id". [RT #37057]
 2014-09-04 18:18:36 -07:00
Tinderbox User 948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt a878301981 [master] servfail cache 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
 2014-09-03 23:28:14 -07:00
Mark Andrews fec7998314 3942. [bug] Wildcard responses from a optout range should be 
marked as insecure. [RT #37072]
 2014-09-04 13:57:50 +10:00
Evan Hunt c3d0221104 [master] oops, nta lifetime change broke dnssec test 2014-09-03 20:51:32 -07:00
Evan Hunt 3d066288ad [master] [rt37069] update NTA limit to a week 
3940.	[func]		"rndc nta" now allows negative trust anchors to be
			set for up to one week. [RT #37069]
 2014-09-03 19:00:03 -07:00
Mark Andrews 74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP 
connections to be shared. [RT #37039]
 2014-09-04 10:37:45 +10:00
Mark Andrews 3547641f76 error message was not being returned 2014-08-30 20:26:48 +10:00
Mark Andrews 22e0fcb055 conditional UNUSED(task) 2014-08-30 15:47:25 +10:00
Mark Andrews 1a63fb1d14 update copyrights 2014-08-30 12:27:49 +10:00
Tinderbox User 3278ff814d update copyright notice 2014-08-29 23:45:22 +00:00
Mark Andrews 25c5d8e89e #include isc/print.h> 2014-08-29 16:17:35 +10:00
Evan Hunt f5c24a7f48 [master] add better servfail logging 
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]
 2014-08-28 22:37:55 -07:00
Evan Hunt d46855caed [master] ECS authoritative support 
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
 2014-08-28 22:05:57 -07:00