Commit Graph

4759 Commits

Author SHA1 Message Date
Evan Hunt
fa2cf1a85e [v9_10] document default DNSKEY TTL
- see RT #38268
2015-01-13 09:55:21 -08:00
Evan Hunt
351181c89d [v9_10] document dscp option 2015-01-13 09:16:00 -08:00
Tinderbox User
6c4bed17c9 regen v9_10 2015-01-12 03:39:18 +00:00
Tinderbox User
631be33a32 regen v9_10 2015-01-11 01:09:02 +00:00
Tinderbox User
71b009ae5a update copyright notice / whitespace 2015-01-10 23:45:50 +00:00
Evan Hunt
45adb24e0f [v9_10] revise pkcs11 doc 2015-01-10 11:39:41 -08:00
Mark Andrews
41460026bc 4032. [bug] Built-in "empty" zones did not correctly inherit the
"allow-transfer" ACL from the options or view.
                        [RT #38310]

(cherry picked from commit 7952156995)
2015-01-10 22:03:57 +11:00
Evan Hunt
173d9db665 [v9_10] improve pkcs11.xml documentation
see RT #37801
2015-01-10 00:37:38 -08:00
Tinderbox User
dae9be9597 regen v9_10 2015-01-09 01:08:52 +00:00
Tinderbox User
167beb6aa5 update copyright notice / whitespace 2015-01-08 23:45:50 +00:00
Evan Hunt
b21229de09 [v9_10] clean up release note stylesheets 2015-01-07 17:29:11 -08:00
Tinderbox User
ab4c346072 regen v9_10 2015-01-06 01:08:17 +00:00
Tinderbox User
99d9cff985 update copyright notice / whitespace 2015-01-05 23:45:50 +00:00
Evan Hunt
8589b25367 [v9_10] suppress table of contents in notes.html and notes.pdf 2015-01-05 14:31:52 -08:00
Evan Hunt
81e7b830bc [v9_10] add style and developer guide source 2014-12-31 12:51:11 -08:00
Tinderbox User
fb3b6818ad regenerate 2014-12-29 23:44:02 +00:00
Tinderbox User
4e94e71fd5 regen v9_10 2014-12-19 01:08:42 +00:00
Tinderbox User
c6b7736111 regen v9_10 2014-12-17 01:08:28 +00:00
Evan Hunt
b0e9108311 [v9_10] adjust max-recursion-queries
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]

(cherry picked from commit be7fba8019)
2014-12-15 22:28:26 -08:00
Tinderbox User
67e9f1fd66 regen v9_10 2014-12-06 01:09:03 +00:00
Mark Andrews
cb41aeedd9 4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
resulting in updates being sent to the wrong server.
                        [RT #37925]

(cherry picked from commit 03fd9cb81c)
2014-12-05 18:26:57 +11:00
Mark Andrews
ac9781c7cd 4019. [func] If named is not configured to validate the answer
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
2014-12-05 18:04:26 +11:00
Tinderbox User
029dd16a4d regen v9_10 2014-12-04 01:08:41 +00:00
Mark Andrews
e5d902504f 4017. [testing] Add system test to check lookups to legacy servers
with broken DNS behaviour. [RT #37965]
2014-12-04 07:05:18 +11:00
Tinderbox User
e5703b5dc2 regen v9_10 2014-12-03 01:08:46 +00:00
Mark Andrews
b99cdea866 4015. [bug] Nameservers that are skipped due to them being
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]

(cherry picked from commit ea3aa401bc)
2014-12-03 11:42:16 +11:00
Tinderbox User
9d91651e5d regen v9_10 2014-11-22 01:09:05 +00:00
Mark Andrews
b233d5585d 4007. [doc] Remove acl forward reference restriction. [RT #37772]
(cherry picked from commit 64d715c22a)
2014-11-21 15:27:28 +11:00
Tinderbox User
df020004b5 regen v9_10 2014-11-21 01:08:20 +00:00
Evan Hunt
af63f90b99 [v9_10] add missing grammar 2014-11-20 15:36:48 -08:00
Evan Hunt
0af284b18b [v9_10] add notes 2014-11-20 13:17:47 -08:00
Tinderbox User
a50124fe98 regen v9_10 2014-11-20 01:08:49 +00:00
Evan Hunt
b3aa528d7e [v9_10] add max-recursion-queries
also fixes and documentation for max-recursion-depth

(cherry picked from commit c4f54e5bd1)
2014-11-18 22:13:13 -08:00
Tinderbox User
f9650eedfc regen v9_10 2014-11-19 01:09:14 +00:00
Evan Hunt
6fd51d5088 [v9_10] limit recursion depth and iterative queries
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
2014-11-17 23:48:20 -08:00
Tinderbox User
07af5d14d6 regen v9_10 2014-11-15 01:10:27 +00:00
Evan Hunt
96b6923a25 [v9_10] reference leak with AAAA glue but not A
4004.	[bug]		When delegations had AAAA glue but not A, a
			reference could be leaked causing an assertion
			failure on shutdown. [RT #37796]

(cherry picked from commit c4abb19716)
2014-11-14 09:04:44 -08:00
Tinderbox User
6c4b321c85 regen v9_10 2014-11-06 01:09:09 +00:00
Evan Hunt
56293cd148 [v9_10] fix nxrrset in nxdomain redirection
4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
			from the redirect zone. [RT #37722]

(cherry picked from commit 3cc8c7d630)
2014-11-04 23:53:54 -08:00
Tinderbox User
e88b7475bc regen v9_10 2014-11-05 01:09:02 +00:00
Mark Andrews
04f10def58 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:29:28 +11:00
Tinderbox User
28eae93d32 regen v9_10 2014-11-01 01:09:11 +00:00
Mark Andrews
d74c345b26 add end of life statement 2014-10-31 13:03:38 +11:00
Tinderbox User
9276bd6fb8 regen v9_10 2014-10-31 01:09:00 +00:00
Evan Hunt
197c3286f8 [v9_10] document that serial-query-rate has a floor of 1/second 2014-10-30 14:33:56 -07:00
Tinderbox User
f3ddf32fcc regen v9_10 2014-10-23 01:09:00 +00:00
Evan Hunt
be8193f39c [v9_10] missed a ticket number 2014-10-22 11:05:27 -07:00
Evan Hunt
8a1a960fdb [v9_10] [rt36945] relnote 2014-10-22 10:45:37 -07:00
Evan Hunt
f027e29758 [v9_10] [rt36892] relnote 2014-10-22 10:41:01 -07:00
Evan Hunt
d7a7ca72ec [v9_10] [rt37138] relnote 2014-10-22 10:33:49 -07:00