Automatic Updater
2a6997e72c
update copyright notice
2009-01-19 23:46:17 +00:00
Mark Andrews
0f4ec602dd
spelling
2009-01-19 00:36:29 +00:00
Automatic Updater
f32008623e
update copyright notice
2009-01-06 23:45:57 +00:00
Automatic Updater
9a2ebc4415
update copyright notice
2009-01-05 23:46:21 +00:00
Tatuya JINMEI 神明達哉
42c20e9207
trivial comment cleanups (RT#19118)
2009-01-05 23:22:26 +00:00
Automatic Updater
f947582727
update copyright notice
2008-12-12 23:46:04 +00:00
Mark Andrews
e6e8f672c1
2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
...
[RT #18885 ]
2008-12-12 04:53:17 +00:00
Automatic Updater
d53d756c84
update copyright notice
2008-11-20 23:46:03 +00:00
Mark Andrews
46bcf31c17
2494. [bug] dns/sdlz.h and dns/dlz.h were not being installed.
...
[RT #18826 ]
2008-11-20 01:49:22 +00:00
Automatic Updater
bd5ddeb924
update copyright notice
2008-06-24 23:45:56 +00:00
Tatuya JINMEI 神明達哉
0edc9d2bf7
2384. [security] Additional support for query port randomization (change
...
#2375 ) including performance improvement and port range
specification. [RT #17949 , #18098 ]
2008-06-24 02:02:51 +00:00
Automatic Updater
a764b8dcc9
update copyright notice
2008-05-22 23:46:03 +00:00
Evan Hunt
906685e44d
Fully randomize UDP query ports to improve forgery resilience. [rt17949]
2008-05-22 21:16:05 +00:00
Evan Hunt
47e37d8ebd
Validating lack of DS records at trust anchors wasn't working. [RT #17151 ]
2007-09-26 04:39:45 +00:00
Automatic Updater
beb9fabda3
update copyright notice
2007-08-28 07:20:06 +00:00
Automatic Updater
2859f78491
update copyright notice
2007-06-26 23:46:21 +00:00
Mark Andrews
833c6d566b
2203. [security] Query id generation was cryptographically weak.
...
[RT # 16915]
2007-06-26 02:56:59 +00:00
Automatic Updater
43af05a84f
update copyright notice
2007-03-06 02:12:08 +00:00
Mark Andrews
154e92a9e6
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
...
resolver.c:validated() and resolver.c:cache_name().
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
event leaks. [RT #16685 ]
2007-03-06 00:50:11 +00:00
Mark Andrews
64d5cc809c
update copyright notice
2007-01-08 02:42:00 +00:00
Mark Andrews
9aefa7e508
2126. [bug] Serialise validation of type ANY responses. [RT #16555 ]
2007-01-08 01:37:53 +00:00
Mark Andrews
44a5930e91
spelling
2006-08-01 03:45:21 +00:00
Mark Andrews
41f4a6a513
update copyright notice
2006-07-20 01:10:30 +00:00
Mark Andrews
28d310d40a
of -> or
2006-07-19 01:03:51 +00:00
Mark Andrews
fbcf5c31ae
2049. [bug] Restore SOA before AXFR when falling back from
...
a attempted IXFR when transfering in a zone.
Allow a initial SOA query before attempting
a AXFR to be requested. [RT #16156 ]
2006-07-19 00:58:01 +00:00
Mark Andrews
0211c78765
update copyright notice
2006-05-03 00:07:49 +00:00
Shane Kerr
a80207d2a3
Stats for acache. Currently running on senna (ns-ext).
2006-05-02 12:55:31 +00:00
Mark Andrews
f560a1877b
2007. [func] It is now possible to explicitly enable DNSSEC
...
validation. default dnssec-validation no; to
be changed to yes in 9.5.0. [RT #15674 ]
2006-03-09 23:38:21 +00:00
Mark Andrews
cb6bc372d8
2001. [func] Check the KSK flag when updating a dynamic zone.
...
New zone option "update-check-ksk yes;". [RT #15817 ]
2006-03-06 01:38:01 +00:00
Mark Andrews
bf3bbdc9b6
1999. [func] Implement "rrset-order fixed". [RT #13662 ]
2006-03-03 00:56:53 +00:00
Mark Andrews
3497fc3b77
1997. [bug] Named was failing to replace negative cache entries
...
when a positive one for the type was learnt.
[RT #15818 ]
2006-03-02 23:19:20 +00:00
Mark Andrews
1f8449c606
update copyright notice
2006-03-02 00:37:22 +00:00
Mark Andrews
ea407e7082
1991. [cleanup] The configuration data, once read, should be treated
...
as readonly. Expand the use of const to enforce this
at compile time. [RT #15813 ]
2006-02-28 03:10:49 +00:00
Mark Andrews
ae3a8d847a
update copyright notice
2006-02-22 23:50:09 +00:00
Mark Andrews
c017465e4a
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608 ]
2006-02-21 23:53:35 +00:00
Mark Andrews
77c5b1c067
1986. [func] Report when a zone is removed. [RT #15849 ]
2006-02-21 23:17:32 +00:00
Mark Andrews
8fc5e43bd9
1597. [func] Allow notify-source and query-source to be specified
...
on a per server basis similar to transfer-source.
[RT #6496 ]
2006-02-17 00:42:10 +00:00
Mark Andrews
e77385c265
update copyright notice
2006-02-16 23:51:32 +00:00
Mark Andrews
dfb3eacdfb
1983. [func] Two new update policies. "selfsub" and "selfwild".
...
[RT #12895 ]
2006-02-16 01:38:49 +00:00
Mark Andrews
4dd7e34f48
comment typo
2006-02-01 22:39:17 +00:00
Mark Andrews
deaa25fd63
update copyright notice
2006-01-27 23:57:45 +00:00
Mark Andrews
65fdd79a50
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
...
HMACSHA512 support. [RT #13606 ]
2006-01-27 02:50:51 +00:00
Mark Andrews
76f6d0382a
1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723 ]
2006-01-06 00:10:00 +00:00
Mark Andrews
586f82c999
update copyright notice
2006-01-06 00:01:43 +00:00
Mark Andrews
ff3b707f8a
1959. [func] Control the zeroing of the negative response TTL to
...
a soa query. Defaults "zero-no-soa-ttl yes;" and
"zero-no-soa-ttl-cache no;". [RT #15460 ]
2006-01-05 02:24:27 +00:00
Mark Andrews
1e53d23ec4
1957. [bug] Dig mishandled responses to class ANY queries.
...
[RT #15402 ]
2006-01-05 01:04:28 +00:00
Mark Andrews
48d9f5bdaa
inclu1954. [func] Named now falls back to advertising EDNS with a
...
512 byte receive buffer if the initial EDNS queries
fail. [RT #14852 ]
1953. [func] The maximum EDNS UDP response named will send can
now be set in named.conf (max-udp-size). This is
independent of the advertised receive buffer
(edns-udp-size). [RT #14852 ]
2006-01-05 00:10:44 +00:00
Mark Andrews
e770e36d60
update copyright notice
2006-01-04 23:50:23 +00:00
Mark Andrews
f53e702b25
1947. [func] It is now possible to configure named to accept
...
expired RRSIGs. Default "dnssec-accept-expired no;".
Setting "dnssec-accept-expired yes;" leaves named
vulnerable to replay attacks. [RT #14685 ]
2006-01-04 02:58:42 +00:00
Mark Andrews
cf4e1143ea
1942. [bug] If the name of a DNSKEY match that of one in
...
trusted-keys do not attempt to validate the DNSKEY
using the parents DS RRset. [RT #15649 ]
2005-12-05 00:00:03 +00:00