Commit Graph

2115 Commits

Author SHA1 Message Date
Mark Andrews
9130ab90fe developer: bwelling
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews
3bdf879a53 developer: jinmei
reviewer: marka
1371    [bug]           notify-source-v6, transfer-source-v6 and
                        query-source-v6 with explict addresses and using the
                        same ports as named was listening on could interfere
                        with nameds ability to answer queries sent to those
                        addresses.
2002-08-30 02:05:30 +00:00
Mark Andrews
6b25d2f7f7 developer: bwelling
reviewed: marka
1369.   [bug]           Adding an NS record as the lexicographically last
                        record in a secure zone didn't work.
2002-08-29 05:40:07 +00:00
Mark Andrews
b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
a2239239cf reviewed: marka
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews
301ef360a1 supported multiple listen-on-v6 correctly. 2002-08-17 03:00:49 +00:00
Mark Andrews
741a75f81b reviewed: marka
developer: mayer
relative paths
build against openssl 0.9.6g
2002-08-17 01:34:09 +00:00
Mark Andrews
8689f943a4 reviewed: jinmei
developer: marka
1361.   [func]          Log file name when unable to open memory statistics
                        and dump database files. [RT# 3437]
2002-08-17 00:23:19 +00:00
Mark Andrews
2434ccfde7 reviewed: marka
developer: jinmei
1360.   [func]          Listen-on-v6 now supports specific addresses.
2002-08-16 23:46:11 +00:00
Mark Andrews
95d24aa0d0 prevent assertion failure 2002-08-07 02:03:49 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Danny Mayer
0956e3d607 Add check and warning message for Windows 2000 systems not running Service Pack 2 or later 2002-08-03 01:31:48 +00:00
Mark Andrews
a1d4da0dc7 initalise str 2002-08-01 06:51:32 +00:00
Danny Mayer
977265bc5d Fixed fclose to close the lockfile and not fd 2002-08-01 03:25:34 +00:00
Danny Mayer
6f1437add9 Fixed missing newline and continuation character (\n\) 2002-08-01 03:23:36 +00:00
Mark Andrews
31fd8a17fb missing %s in format 2002-07-31 02:22:15 +00:00
Mark Andrews
87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
1431917c7c 1343. [func] Log successful notifies received (info). Adjust log level
for failed notifies to notice.
2002-07-29 05:15:32 +00:00
Mark Andrews
f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews
b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews
5d98cf67b3 white space cleanup 2002-07-10 01:13:44 +00:00
Mark Andrews
475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews
268c7ef56b don't apply cache-filename to "_bind" view. 2002-07-04 05:03:46 +00:00
Mark Andrews
0f8f42a09e 1341. [port] linux: Slackware 4.0 needs <asm/unistd.h>. 2002-07-03 05:09:43 +00:00
Mark Andrews
70f8c70cdd 1335. [bug] Options should apply to the internal _bind view. 2002-06-26 04:48:12 +00:00
Mark Andrews
ac65e45126 1333. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews
0423090da1 1332. [func] Log TSIG key used w/ outgoing zone transfers. 2002-06-25 04:08:43 +00:00
Mark Andrews
8f1bf2fb3a null pointer dereference 2002-06-20 00:21:35 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
cd9bfe5b25 1323. [func] Option 'flush-zones-on-shutdown <boolean>;'. 2002-06-13 05:54:34 +00:00
Mark Andrews
dcd371be7d 1220. [func] Extended rndc dumpdb to support dumping of zones and
view selection: 'dumpdb [-all|-zones|-cache] [view]'.
2002-06-13 05:12:54 +00:00
Mark Andrews
cc4928ec71 1219. [func] New category 'update-security'. 2002-06-12 06:29:49 +00:00
Mark Andrews
a1edcd1b8d 1203. [func] Use "dataready" accept filter if available. 2002-05-27 00:40:23 +00:00
Mark Andrews
7c23b791f4 1301. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2002-05-24 06:26:04 +00:00
Mark Andrews
f013b11377 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2002-05-24 06:22:30 +00:00
Mark Andrews
4c83dd7f22 1291. [bug] "recursion available: {denied,approved}" was too
confusing.
2002-05-16 04:05:42 +00:00
Mark Andrews
88c2b83cc5 1282. [bug] ns_server_destroy() failed to set *serverp to NULL. 2002-05-08 04:45:43 +00:00
Mark Andrews
93e6ebcd0a 1277. [bug] Failure to write pid-file should not be fatal on
reload. [RT #2861]
2002-05-03 05:28:29 +00:00
Mark Andrews
0dfac52f06 null pointer de-reference 2002-04-29 23:43:46 +00:00
Mark Andrews
c4a9ce445c 1274. [func] preferred-glue option from BIND 8.3. 2002-04-26 00:40:37 +00:00
Mark Andrews
2b1c71b134 1244. [bug] Receiving a TCP message from a blackhole address would
prevent further messages being received over that
                        interface.
2002-04-03 05:30:03 +00:00
Mark Andrews
7d3458a972 1240. [bug] It was possible to leak zone references by
specifying an incorrect zone to rndc.
2002-03-29 01:10:22 +00:00
Mark Andrews
7c441b7f4a 1239. [bug] Under certain circumstances named could continue to
use a name after it had been freed triggering
                        INSIST() failures.  [RT #2614]
2002-03-28 04:03:50 +00:00
Brian Wellington
3c5f4710cf remove extraneous blank lines 2002-03-13 23:36:14 +00:00