Commit Graph

496 Commits

Author SHA1 Message Date
Mark Andrews
fc8d06c624 regen 2006-09-11 02:32:38 +00:00
Mark Andrews
285254345c regen 2006-08-31 00:19:52 +00:00
Mark Andrews
b98c5adf3e minor wording change 2006-08-30 23:40:50 +00:00
Mark Andrews
c48c7872a0 regen 2006-07-20 02:33:53 +00:00
Mark Andrews
d827ada5a9 grammer 2006-07-20 00:15:03 +00:00
Mark Andrews
71c66a876e regen 2006-06-29 13:03:32 +00:00
Mark Andrews
b05bdb520d regen 2006-06-08 02:44:05 +00:00
Mark Andrews
49810c555f spelling / grammer 2006-06-08 01:41:21 +00:00
Mark Andrews
6bf6622b7b regen 2006-06-04 23:38:17 +00:00
Mark Andrews
a45a6ea2b0 2035. [func] Make falling back to TCP on UDP refresh failure
optional. Default "try-tcp-refresh yes;" for BIND 8
                        compatibility. [RT #16123]
2006-06-04 23:17:07 +00:00
Mark Andrews
47012ae6db regen 2006-05-17 02:39:16 +00:00
Mark Andrews
bf4538f2c7 grammer, spelling and clarity 2006-05-17 02:00:15 +00:00
Mark Andrews
1d49f4d5ec grammer, spelling and clarity 2006-05-17 01:31:50 +00:00
Mark Andrews
43dbc3935e grammer, spelling and clarity 2006-05-16 06:42:09 +00:00
Mark Andrews
b15d6bddeb regen 2006-05-08 15:46:27 +00:00
Mark Andrews
df6faef671 regen 2006-05-03 02:27:23 +00:00
Mark Andrews
6412902ffc 2015. [cleanup] use-additional-cache is now acache-enable for
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
2006-05-03 01:54:54 +00:00
Mark Andrews
52ece689e0 regen 2006-04-23 10:14:12 +00:00
Mark Andrews
f051d76c87 regen 2006-03-11 02:07:53 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:21:54 +00:00
Mark Andrews
035992291c regen 2006-03-09 05:04:38 +00:00
Mark Andrews
fe6f384b2e 2006. [security] Allow-query-cache and allow-recursion now default
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
2006-03-09 03:30:18 +00:00
Mark Andrews
083a5588a3 regen 2006-03-06 02:23:19 +00:00
Mark Andrews
59d84d1b07 2001. [func] Check the KSK flag when updating a secure dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:27:52 +00:00
Mark Andrews
20cacd1459 regen 2006-02-27 02:18:24 +00:00
Mark Andrews
95b484c958 fix minor typos 2006-02-26 22:57:18 +00:00
Mark Andrews
dca44b90c9 regen 2006-02-17 02:06:13 +00:00
Mark Andrews
7d4a465de0 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
2006-02-17 00:24:21 +00:00
Mark Andrews
7f723eabc5 regen 2006-02-16 04:58:21 +00:00
Mark Andrews
6e373c5025 1983. [func] Two new update policies. "selfsub" and "selfwild".
[RT #12895]
2006-02-16 01:34:24 +00:00
Mark Andrews
60ce71d2a5 regen 2006-02-07 05:52:46 +00:00
Mark Andrews
041bc4716f regen 2006-02-06 05:28:48 +00:00
Mark Andrews
fef3f65e38 regen 2006-02-06 03:36:54 +00:00
Mark Andrews
885c1096e0 regen 2006-01-30 02:27:04 +00:00
Mark Andrews
4e7d13747a delegation-only is valid for type forward 2006-01-30 00:38:14 +00:00
Mark Andrews
cf029c9369 1974. [doc] List each of the zone types and associated zone
options seperately in the ARM.
2006-01-30 00:26:37 +00:00
Mark Andrews
605b07cadd regen 2006-01-29 22:57:16 +00:00
Mark Andrews
726b472292 regen 2006-01-28 02:15:53 +00:00
Mark Andrews
7329012471 regen 2006-01-27 05:17:12 +00:00
Mark Andrews
c6d4f78152 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
Mark Andrews
557a0ad515 regen 2006-01-07 03:34:55 +00:00
Mark Andrews
3b4098640d regen 2006-01-06 01:55:39 +00:00
Mark Andrews
dc6da18ccb 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-05 23:45:34 +00:00
Mark Andrews
3e3eae9127 unbalanced <term>'s 2006-01-05 11:52:32 +00:00
Mark Andrews
a1bc941093 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:19:02 +00:00
Mark Andrews
08c9026166 1953. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1952.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:01:46 +00:00
Mark Andrews
acb4f52369 update copyright notice 2006-01-04 23:50:24 +00:00
Mark Andrews
2b66a51a7d 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:15:55 +00:00
Mark Andrews
fabf2ee6b0 1947. [func] It is now possible to configure named to accept
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
2006-01-04 02:35:49 +00:00
Mark Andrews
6101b9f0d9 regen 2005-12-05 02:08:05 +00:00