Mark Andrews
ffeaac1d82
3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
...
BADSIG. [RT #37216 ]
2014-10-01 07:24:16 +10:00
Mark Andrews
fa827173df
3959. [bug] Updates could be lost if they arrived immediately
...
after a rndc thaw. [RT #37233 ]
2014-10-01 06:59:19 +10:00
Tinderbox User
2fb35a6d59
update copyright notice
2014-09-29 23:45:24 +00:00
Mark Andrews
1c5990c2f9
3958. [bug] Detect when writeable files have multiple references
...
in named.conf. [RT #37172 ]
2014-09-29 12:10:10 +10:00
Mark Andrews
80169c379d
3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
...
and ECDSAP384SHA384. [RT #37183 ]
2014-09-29 10:18:54 +10:00
Mark Andrews
10c12aa549
3956. [func] Notify messages are now rate limited by notify-rate and
...
startup-notify-rate instead of serial-query-rate.
[RT #24454 ]
3955. [bug] Notify messages due to changes are no longer queued
behind startup notify messages. [RT #24454 ]
2014-09-29 10:01:08 +10:00
Mark Andrews
4b92bc0022
don't redefine GEOIP_DATA
2014-09-29 09:33:24 +10:00
Tinderbox User
e64f32cd04
update copyright notice
2014-09-27 23:45:22 +00:00
Mark Andrews
9a36fb86f5
3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159 ]
2014-09-27 12:14:20 +10:00
Mark Andrews
a266ab205b
3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
...
two name pointers were the same. [RT #37176 ]
2014-09-27 11:41:44 +10:00
Evan Hunt
6896fdd3b2
[master] spelling
2014-09-15 18:18:12 -07:00
Mark Andrews
48b093c864
update named-checkzone manpage for SPF changes
2014-09-13 07:55:57 +10:00
Mark Andrews
1bf72e5325
silence compiler warning
2014-09-11 13:34:17 +10:00
Mark Andrews
947cf282a7
3949. [experimental] Experimental support for draft-andrews-edns1 by sending
...
EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
building). Add support for limiting the EDNS version
advertised to servers: server { edns-version 0; };
Log the EDNS version received in the query log.
[RT #35864 ]
2014-09-10 15:31:40 +10:00
Mark Andrews
52131a8351
3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
...
--with-tuning=large. [RT #37059 ]
2014-09-09 09:41:55 +10:00
Mark Andrews
2b703026f3
check isc_mutext_init and destoy mutex when done
2014-09-07 08:24:36 +10:00
Mark Andrews
8aa098c633
update copyrights
2014-09-06 09:38:48 +10:00
Tinderbox User
5fa6a064b8
regen master
2014-09-05 19:26:47 +00:00
Evan Hunt
f687e639f0
[master] [rt36786] use INSTALL_PROGRAM for shared libs
...
3947. [cleanup] Set the executable bit on libraries when using
libtool. [RT #36786 ]
2014-09-05 10:24:20 -07:00
Mark Andrews
2fa1fc5332
3945. [bug] Invalid wildcard expansions could be incorrectly
...
accepted by the validator. [RT #37093 ]
2014-09-05 12:10:55 +10:00
Mark Andrews
06dbd20c66
move declaration to start of block
2014-09-05 11:39:42 +10:00
Tinderbox User
948c80ffa8
update copyright notice
2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981
[master] servfail cache
...
3943. [func] SERVFAIL responses can now be cached for a
limited time (configured by "servfail-ttl",
default 10 seconds, limit 30). This can reduce
the frequency of retries when an authoritative
server is known to be failing, e.g., due to
ongoing DNSSEC validation problems. [RT #21347 ]
2014-09-03 23:28:14 -07:00
Mark Andrews
3560b7d66c
move declaration to start of block
2014-09-04 14:20:25 +10:00
Mark Andrews
fec7998314
3942. [bug] Wildcard responses from a optout range should be
...
marked as insecure. [RT #37072 ]
2014-09-04 13:57:50 +10:00
Mark Andrews
74717eef53
3939. [func] Improve UPDATE forwarding performance by allowing TCP
...
connections to be shared. [RT #37039 ]
2014-09-04 10:37:45 +10:00
Mark Andrews
92a649d814
complete conversion to FCTXTRACE3
2014-08-30 20:37:20 +10:00
Mark Andrews
1a63fb1d14
update copyrights
2014-08-30 12:27:49 +10:00
Tinderbox User
3278ff814d
update copyright notice
2014-08-29 23:45:22 +00:00
Evan Hunt
f5c24a7f48
[master] add better servfail logging
...
3937. [func] Added some debug logging to better indicate the
conditions causing SERVFAILs when resolving.
[RT #35538 ]
2014-08-28 22:37:55 -07:00
Evan Hunt
d46855caed
[master] ECS authoritative support
...
3936. [func] Added authoritative support for the EDNS Client
Subnet (ECS) option.
ACLs can now include "ecs" elements which specify
an address or network prefix; if an ECS option is
included in a DNS query, then the address encoded
in the option will be matched against "ecs" ACL
elements.
Also, if an ECS address is included in a query,
then it will be used instead of the client source
address when matching "geoip" ACL elements. This
behavior can be overridden with "geoip-use-ecs no;".
When "ecs" or "geoip" ACL elements are used to
select a view for a query, the response will include
an ECS option to indicate which client network the
answer is valid for.
(Thanks to Vincent Bernat.) [RT #36781 ]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572
[master] fix geoip asnum matching
...
3935. [bug] "geoip asnum" ACL elements would not match unless
the full organization name was specified. They
can now match against the AS number alone (e.g.,
AS1234). [RT #36945 ]
2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13
3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
...
sit-secrets documentation. [RT #36980 ]
2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36
[master] fixes to checkconf test, HIP casecompare
...
3933. [bug] Corrected the implementation of dns_rdata_casecompare()
for the HIP rdata type. [RT #36911 ]
3932. [test] Improved named-checkconf tests. [RT #36911 ]
2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311
3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879 ]
2014-08-26 15:01:29 +10:00
Mark Andrews
be5d42f255
dlz clauses are not inheritable
2014-08-25 14:52:01 +10:00
Evan Hunt
27d6642e8b
[master] complete change #3925
...
- don't use fwdname in dns_view_findzonecut()
2014-08-22 14:57:30 -07:00
Mark Andrews
840d6a4614
3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917
2014-08-22 16:32:19 +10:00
Tinderbox User
a24330c480
regen master
2014-08-16 01:06:20 +00:00
Mark Andrews
15a885dfc6
remove duplicate request-ixfr rt36878
...
(cherry picked from commit 0a484c39fc )
2014-08-16 08:51:20 +10:00
Jeremy C. Reed
821350367e
fix typos or misspellings
2014-08-15 10:35:31 -05:00
Mark Andrews
291c0dfbc9
remove redundant isc_sockaddr_format call
2014-08-08 21:27:35 +10:00
Tinderbox User
cd14665cdf
update copyright notice
2014-08-07 23:45:19 +00:00
Evan Hunt
91e7faa874
[master] win32 sockets don't support dscp
2014-08-06 21:35:49 -07:00
Evan Hunt
89f3d83d7e
[master] files missing for win32 build
2014-08-06 20:51:04 -07:00
Evan Hunt
ef1ba8ffa7
[master] need local strlcpy() in VS2005
2014-08-06 19:57:04 -07:00
Tinderbox User
6cdcc9df5b
update copyright notice
2014-08-07 01:14:24 +00:00
Evan Hunt
cfe32752a6
[master] [36737] allow zero-length URI and CAA fields
...
3914. [bug] Allow the URI target and CAA value fields to
be zero length. [RT #36737 ]
2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07
update copyright notice
2014-08-06 23:45:23 +00:00
Mark Andrews
493f3eb297
3913. [bug] Address race issue in dispatch. [RT #36731 ]
2014-08-06 18:49:53 +10:00