Mark Andrews
fc8d06c624
regen
2006-09-11 02:32:38 +00:00
Mark Andrews
285254345c
regen
2006-08-31 00:19:52 +00:00
Mark Andrews
b98c5adf3e
minor wording change
2006-08-30 23:40:50 +00:00
Mark Andrews
c48c7872a0
regen
2006-07-20 02:33:53 +00:00
Mark Andrews
d827ada5a9
grammer
2006-07-20 00:15:03 +00:00
Mark Andrews
71c66a876e
regen
2006-06-29 13:03:32 +00:00
Mark Andrews
b05bdb520d
regen
2006-06-08 02:44:05 +00:00
Mark Andrews
49810c555f
spelling / grammer
2006-06-08 01:41:21 +00:00
Mark Andrews
6bf6622b7b
regen
2006-06-04 23:38:17 +00:00
Mark Andrews
a45a6ea2b0
2035. [func] Make falling back to TCP on UDP refresh failure
...
optional. Default "try-tcp-refresh yes;" for BIND 8
compatibility. [RT #16123 ]
2006-06-04 23:17:07 +00:00
Mark Andrews
47012ae6db
regen
2006-05-17 02:39:16 +00:00
Mark Andrews
bf4538f2c7
grammer, spelling and clarity
2006-05-17 02:00:15 +00:00
Mark Andrews
1d49f4d5ec
grammer, spelling and clarity
2006-05-17 01:31:50 +00:00
Mark Andrews
43dbc3935e
grammer, spelling and clarity
2006-05-16 06:42:09 +00:00
Mark Andrews
b15d6bddeb
regen
2006-05-08 15:46:27 +00:00
Mark Andrews
df6faef671
regen
2006-05-03 02:27:23 +00:00
Mark Andrews
6412902ffc
2015. [cleanup] use-additional-cache is now acache-enable for
...
consistancy. Default acache-enable off in BIND 9.4
as it requires memory usage to be configured.
It may be enabled by default in BIND 9.5 once we
have more experience with it.
2006-05-03 01:54:54 +00:00
Mark Andrews
52ece689e0
regen
2006-04-23 10:14:12 +00:00
Mark Andrews
f051d76c87
regen
2006-03-11 02:07:53 +00:00
Mark Andrews
cfe92110ce
2007. [func] It is now possible to explicitly enable DNSSEC
...
validation. default dnssec-validation no; to
be changed to yes in 9.5.0. [RT #15674 ]
2006-03-09 23:21:54 +00:00
Mark Andrews
035992291c
regen
2006-03-09 05:04:38 +00:00
Mark Andrews
fe6f384b2e
2006. [security] Allow-query-cache and allow-recursion now default
...
to the builtin acls "localnets" and "localhost".
This is being done to make caching servers less
attractive as reflective amplifying targets for
spoofed traffic. This still leave authoritative
servers exposed.
The best fix is for full BCP 38 deployment to
remove spoofed traffic.
2006-03-09 03:30:18 +00:00
Mark Andrews
083a5588a3
regen
2006-03-06 02:23:19 +00:00
Mark Andrews
59d84d1b07
2001. [func] Check the KSK flag when updating a secure dynamic zone.
...
New zone option "update-check-ksk yes;". [RT #15817 ]
2006-03-06 01:27:52 +00:00
Mark Andrews
20cacd1459
regen
2006-02-27 02:18:24 +00:00
Mark Andrews
95b484c958
fix minor typos
2006-02-26 22:57:18 +00:00
Mark Andrews
dca44b90c9
regen
2006-02-17 02:06:13 +00:00
Mark Andrews
7d4a465de0
1597. [func] Allow notify-source and query-source to be specified
...
on a per server basis similar to transfer-source.
2006-02-17 00:24:21 +00:00
Mark Andrews
7f723eabc5
regen
2006-02-16 04:58:21 +00:00
Mark Andrews
6e373c5025
1983. [func] Two new update policies. "selfsub" and "selfwild".
...
[RT #12895 ]
2006-02-16 01:34:24 +00:00
Mark Andrews
60ce71d2a5
regen
2006-02-07 05:52:46 +00:00
Mark Andrews
041bc4716f
regen
2006-02-06 05:28:48 +00:00
Mark Andrews
fef3f65e38
regen
2006-02-06 03:36:54 +00:00
Mark Andrews
885c1096e0
regen
2006-01-30 02:27:04 +00:00
Mark Andrews
4e7d13747a
delegation-only is valid for type forward
2006-01-30 00:38:14 +00:00
Mark Andrews
cf029c9369
1974. [doc] List each of the zone types and associated zone
...
options seperately in the ARM.
2006-01-30 00:26:37 +00:00
Mark Andrews
605b07cadd
regen
2006-01-29 22:57:16 +00:00
Mark Andrews
726b472292
regen
2006-01-28 02:15:53 +00:00
Mark Andrews
7329012471
regen
2006-01-27 05:17:12 +00:00
Mark Andrews
c6d4f78152
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
...
HMACSHA512 support. [RT #13606 ]
2006-01-27 02:35:15 +00:00
Mark Andrews
557a0ad515
regen
2006-01-07 03:34:55 +00:00
Mark Andrews
3b4098640d
regen
2006-01-06 01:55:39 +00:00
Mark Andrews
dc6da18ccb
1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723 ]
2006-01-05 23:45:34 +00:00
Mark Andrews
3e3eae9127
unbalanced <term>'s
2006-01-05 11:52:32 +00:00
Mark Andrews
a1bc941093
1959. [func] Control the zeroing of the negative response TTL to
...
a soa query. Defaults "zero-no-soa-ttl yes;" and
"zero-no-soa-ttl-cache no;". [RT #15460 ]
2006-01-05 02:19:02 +00:00
Mark Andrews
08c9026166
1953. [func] Named now falls back to advertising EDNS with a
...
512 byte receive buffer if the initial EDNS queries
fail. [RT #14852 ]
1952. [func] The maximum EDNS UDP response named will send can
now be set in named.conf (max-udp-size). This is
independent of the advertised receive buffer
(edns-udp-size). [RT #14852 ]
2006-01-05 00:01:46 +00:00
Mark Andrews
acb4f52369
update copyright notice
2006-01-04 23:50:24 +00:00
Mark Andrews
2b66a51a7d
1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
...
a TCP socket. This prevents the source address being
set for TCP connections. [RT #15628 ]
2006-01-04 04:15:55 +00:00
Mark Andrews
fabf2ee6b0
1947. [func] It is now possible to configure named to accept
...
expired RRSIGs. Default "dnssec-accept-expired no;".
Setting "dnssec-accept-expired yes;" leaves named
vulnerable to replay attacks. [RT #14685 ]
2006-01-04 02:35:49 +00:00
Mark Andrews
6101b9f0d9
regen
2005-12-05 02:08:05 +00:00