Commit Graph
5556 Commits
Author SHA1 Message Date
Francis Dupont 9b9182fe00 Added Ed25519 support (#44696) 2017-07-31 15:26:00 +02:00
Tinderbox User 93ae9a09a9 regen master 2017-07-29 01:10:15 +00:00
Evan Hunt 268cea9c12 [master] glue-cache option
4664.	[func]		Add a "glue-cache" option to enable or disable the
			glue cache. The default is "no" to reduce memory
			usage, but enabling this option will improve
			performance in delegation-heavy zones. [RT #45125]
2017-07-28 12:57:50 -07:00
Evan Hunt cee0d603a3 [master] remove unnecessary acronym expansions 2017-07-28 12:22:31 -07:00
Tinderbox User 2f575e645b regen master 2017-07-16 01:07:52 +00:00
Evan Hunt 8abc9db6bf [master] update relnotes to mention termination of windows XP support 2017-07-15 13:56:34 -07:00
Tinderbox User a28cf7bfb5 regen master 2017-07-12 01:09:15 +00:00
Mark Andrews 56d8312a48 note change in AD setting on some truncated answers 2017-07-11 13:29:19 +10:00
Mark Andrews 9987992232 add note about .local 2017-07-11 12:43:31 +10:00
Tinderbox User c6a2d3a9e6 regen master 2017-06-28 01:09:32 +00:00
Evan Hunt 581c1526ab [master] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]
2017-06-27 11:39:19 -07:00
Tinderbox User d6b626e9a7 regen master 2017-06-14 01:08:21 +00:00
Evan Hunt bf05e66bb3 [master] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]
2017-06-13 10:15:34 -07:00
Evan Hunt 0471530aae [master] nsec3hash -r
4637.	[func]		"nsec3hash -r" option ("rdata order") takes arguments
			in the same order as they appear in NSEC3 or
			NSEC3PARAM records, so that NSEC3 parameters can
			be cut and pasted from an existing record. Thanks
			to Tony Finch for the contribution. [RT #45183]
2017-06-13 00:39:10 -07:00
Tinderbox User d37d9a6873 regen master 2017-05-31 01:08:13 +00:00
Evan Hunt 967a3b9419 [master] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]
2017-05-30 13:35:59 -07:00
Evan Hunt 2648c49be7 [master] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:30:28 -07:00
Tinderbox User a014b329f2 regen master 2017-05-19 01:09:39 +00:00
Evan Hunt ef9ab10ce0 [master] remove outdated reference to libbind 2017-05-18 15:35:06 -07:00
Tinderbox User bdf087ba00 regen master 2017-05-12 01:09:53 +00:00
Mark Andrews d4d73bca79 add warning about semicolon no longer being escaped 2017-05-11 11:02:35 +10:00
Tinderbox User f9d602f35c regen master 2017-05-05 01:08:31 +00:00
Evan Hunt 3a554a444c [master] fix lmdb delzone
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]
2017-05-04 12:32:32 -07:00
Tinderbox User 51da560543 regen master 2017-05-04 01:08:23 +00:00
Mark Andrews 071fe723a1 fix tag mismatch 2017-05-03 11:15:14 +10:00
Evan Hunt d39ab7440e [master] automatically tune max-journal-size
4613.	[func]		By default, the maximum size of a zone journal file
			is now twice the size of the zone's contents (there
			is little benefit to a journal larger than this).
			This can be overridden by setting "max-journal-size"
			to "unlimited" or to an explicit value up to 2G.
			Thanks to Tony Finch. [RT #38324]
2017-05-02 13:23:08 -07:00
Evan Hunt a7dc84cd4b [master] change markdown comment style for pandoc 2017-04-27 23:43:44 -07:00
Tinderbox User 57994a07f7 regen master 2017-04-27 00:43:03 +00:00
Mukund Sivaraman 241b49e611 Set a LMDB mapsize and also provide a config option to control it (#44954) 2017-04-26 23:51:26 +05:30
Tinderbox User c118d16a1c regen master 2017-04-25 01:06:00 +00:00
Tinderbox User 18b7760b29 update copyright notice / whitespace 2017-04-24 23:45:33 +00:00
Evan Hunt 2dfb992349 [master] new-zones-directory option
4610.	[func]		The "new-zones-directory" option specifies the
			location of NZF or NZD files for storing
			configuration of zones added by "rndc addzone".
			Thanks to Petr Menšík. [RT #44853]
2017-04-23 23:16:53 -07:00
Evan Hunt 6ce8a05f6c [master] update copyrights that had been missed recently 2017-04-23 17:06:00 -07:00
Tinderbox User f5fa655319 regen master 2017-04-23 01:06:11 +00:00
Tinderbox User 1f6505a424 update copyright notice / whitespace 2017-04-22 23:45:41 +00:00
Evan Hunt 3a10cf1f07 [master] add a release note for performance improvements 2017-04-21 21:48:50 -07:00
Mukund Sivaraman 03be5a6b4e Improve performance for delegation heavy answers and also general query performance (#44029) 2017-04-22 09:22:44 +05:30
Evan Hunt 8a28d9f1d4 [master] auto-generate named.conf.docbook
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
2017-04-21 16:27:56 -07:00
Evan Hunt d26ae7fc08 [master] give threads unique names to assist debugging
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]
2017-04-21 13:59:40 -07:00
Evan Hunt f5c39b072c [master] hex output mode for dnstap-read
4594.	[func]		"dnstap-read -x" prints a hex dump of the wire
			format of each logged DNS message. [RT #44816]
2017-04-20 20:22:19 -07:00
Evan Hunt 95f7e98da0 [master] update README, remove FAQ
4593.	[doc]		Update README using markdown, remove outdated FAQ
			file in favor of the knowledge base.
2017-04-20 19:21:54 -07:00
Tinderbox User 2d863323b6 regen master 2017-04-21 01:05:18 +00:00
Tinderbox User 19643a1ded regen master 2017-04-13 01:05:08 +00:00
Evan Hunt 52e398c0af [master] formatting 2017-04-12 14:05:54 -07:00
Tinderbox User e67fe90a1f regen master 2017-04-12 01:05:15 +00:00
Tinderbox User 0a1d79ed8f regen master 2017-03-30 01:05:19 +00:00
Mark Andrews fe1ad70e51 add CVE-2017-3138 2017-03-30 02:56:33 +11:00
Tinderbox User 38704ecee9 regen master 2017-03-26 01:05:14 +00:00
Evan Hunt 39eb1d0353 [master] host -A
4593.	[func]		"host -A" returns most records for a name but
			omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
			[RT #43032]
2017-03-25 12:49:25 -07:00
Tinderbox User ecbef65ae5 regen master 2017-03-13 01:05:40 +00:00