Commit Graph

368 Commits

Author SHA1 Message Date
Mark Andrews
0f4ec602dd spelling 2009-01-19 00:36:29 +00:00
Automatic Updater
9a2ebc4415 update copyright notice 2009-01-05 23:46:21 +00:00
Tatuya JINMEI 神明達哉
42c20e9207 trivial comment cleanups (RT#19118) 2009-01-05 23:22:26 +00:00
Mark Andrews
fdf3321006 2487. [bug] Give TCP connections longer to complete. [RT #18675] 2008-11-20 01:29:33 +00:00
Mark Andrews
66e991fea9 align comment w/ code [RT #18833] 2008-11-20 01:13:51 +00:00
Tatuya JINMEI 神明達哉
99ee58fd4b 2468. [bug] Resolver could try unreachable servers multiple times.
[RT #18739]
2008-10-17 22:02:13 +00:00
Mark Andrews
570025855c 2433. [tuning] Set initial timeout to 800ms. 2008-09-04 04:56:52 +00:00
Tatuya JINMEI 神明達哉
8bb981783d comment wording 2008-07-24 04:59:00 +00:00
Mark Andrews
462df43837 2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
2008-07-22 03:51:44 +00:00
Tatuya JINMEI 神明達哉
0edc9d2bf7 2384. [security] Additional support for query port randomization (change
#2375) including performance improvement and port range
			specification.  [RT #17949, #18098]
2008-06-24 02:02:51 +00:00
Tatuya JINMEI 神明達哉
014dab1f70 2383. [bug] named could double queries when they resulted in
SERVFAIL due to overkilling EDNS0 failure detection.
2008-06-17 22:39:53 +00:00
Mark Andrews
29b1ebf435 2376. [bug] Change #2144 was not complete. 2008-05-29 05:30:30 +00:00
Evan Hunt
906685e44d Fully randomize UDP query ports to improve forgery resilience. [rt17949] 2008-05-22 21:16:05 +00:00
Mark Andrews
8735a488ef 2350. [port] win32: IPv6 support. [RT #17797] 2008-04-02 03:09:08 +00:00
Automatic Updater
fcef5293d2 update copyright notice 2008-01-17 23:46:05 +00:00
Automatic Updater
fc36e4d54b update copyright notice 2008-01-15 23:46:02 +00:00
Mark Andrews
87877a464c 2306. [bug] Remove potential race from lib/dns/resolver.c.
[RT #17470]
2008-01-15 12:38:20 +00:00
Mark Andrews
69a46dbced 2260. [bug] Reported wrong clients-per-query when increasing the
value. [RT #17236]
2007-12-02 21:16:36 +00:00
Shane Kerr
20e7a0cd43 Backed out until 9.4.2 goes from RC to final. 2007-11-01 13:53:27 +00:00
Shane Kerr
e0bd646ca8 Fix logging when increasing client-per-query, for BIND 9.4.
See RT ticket #17236 for more.
2007-11-01 13:13:24 +00:00
Mark Andrews
afb61d9bb8 remove #define inline. 9.4.2rc1 has been out long enough that we shouldn't need the #define in 9.4.2rc2 2007-10-31 05:14:59 +00:00
Mark Andrews
8a4538cafc 2238. [bug] It was possible to trigger a REQUIRE when a
validation was cancelled. [RT #17106]
2007-09-14 05:52:50 +00:00
Automatic Updater
beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Mark Andrews
b8d26157f7 2221. [bug] Set the event result code to reflect the actual
record returned to caller when a cache update is
                        rejected due to a more credible answer existing.
                        [RT #17017]
2007-08-28 02:24:59 +00:00
Mark Andrews
05abca048c 2197. [bug] Add INSIST to catch negative responses which are
not setting the event result code appropriately.
                        [RT #16909]
2007-06-18 02:43:46 +00:00
Mark Andrews
154e92a9e6 2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:50:11 +00:00
Mark Andrews
475aa1607a 2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
[RT #16619]
2007-02-26 01:14:03 +00:00
Mark Andrews
4772bfcb77 2138. [bug] Lock order reversal in resolver.c. [RT #16653] 2007-02-14 23:41:01 +00:00
Mark Andrews
64d5cc809c update copyright notice 2007-01-08 02:42:00 +00:00
Mark Andrews
9aefa7e508 2126. [bug] Serialise validation of type ANY responses. [RT #16555] 2007-01-08 01:37:53 +00:00
Mark Andrews
2399e06127 2124. [bug] It was possible to dereference a freed fetch
context. [RT #16584]
2007-01-08 00:45:12 +00:00
Mark Andrews
b486456a3d 2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
which could lead to validation failures.  named didn't
                        handle negative DS responses that were in the process
                        of being validated.  Check CNAME bit before accepting
                        NODATA proof. To be able to ignore a child NSEC there
                        must be SOA (and NS) set in the bitmap. [RT #16399]
2006-12-07 06:50:34 +00:00
Mark Andrews
76ef7b4856 2097. [bug] named could reference a destroyed memory context
after being reloaded / reconfigured. [RT #16428]
2006-10-18 04:24:19 +00:00
Mark Andrews
7185e0dc18 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:57:05 +00:00
Mark Andrews
ed810a7416 2079. [bug] The lame cache was not handling multiple types
correctly. [RT #16361]
2006-08-30 23:07:41 +00:00
Mark Andrews
f372bb76a0 2075. [bug] The spillat timer event hander could leak memory.
[RT #16357]
2006-08-22 06:13:42 +00:00
Mark Andrews
b7526ed408 2058. [bug] Adjust how we calculate rtt estimates in the presence
of authoritative servers that drop EDNS and/or CD
                        requests.  Also fallback to EDNS/512 and plain DNS
                        faster for zones with less than 3 servers.  [RT #16187]
2006-07-22 01:20:53 +00:00
Mark Andrews
c3425b89a5 2022. [bug] If dnssec validation is disabled only assert CD if
CD was requested. [RT #16037]

2021.   [bug]           dnssec-enable no; triggered a REQUIRE. [RT #16037]
2006-05-18 00:54:41 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
Mark Andrews
8fc5e43bd9 1597. [func] Allow notify-source and query-source to be specified
on a per server basis similar to transfer-source.
                        [RT #6496]
2006-02-17 00:42:10 +00:00
Mark Andrews
27428ec47a 1968. [bug] Missing lock in resolver.c:validated(). [RT #15739] 2006-01-06 01:13:05 +00:00
Mark Andrews
e23d3f34e6 1966. [bug] Don't set CD when we have fallen back to plain DNS.
[RT #15727]
2006-01-06 00:43:07 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:24:27 +00:00
Mark Andrews
48d9f5bdaa inclu1954. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1953.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:10:44 +00:00
Mark Andrews
e74b6c9c74 1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
a TCP socket. This prevents the source address being
                        set for TCP connections. [RT #15628]
2006-01-04 04:29:18 +00:00
Mark Andrews
062b135630 update copyright notice 2006-01-04 00:37:23 +00:00
Mark Andrews
6201fe7298 1946. [bug] resume_dslookup() could trigger a REQUIRE failure
when using forwarders. [RT #15549]
2006-01-03 07:23:41 +00:00
Mark Andrews
72adedc82e 1941. [bug] ncache_adderesult() should set eresult even if no
rdataset is passed to it. [RT #15642]
2005-11-30 22:56:21 +00:00
Mark Andrews
3c8367a203 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2005-11-30 03:44:39 +00:00
Mark Andrews
c7d337e4ff 1939. [bug] The resolver could dereference a null pointer after
validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
2005-11-03 00:58:00 +00:00