ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
19,662 Commits 589 Branches 805 Tags
v9.4-ESV-R2
Commit Graph

82 Commits

Author SHA1 Message Date
Mark Andrews
a8240cd7d5 2398. [bug] Improve file descriptor management. New, 
temporary, named.conf option reserved-sockets,
                        default 512. [RT #18344]
 2008-09-04 08:03:08 +00:00
Automatic Updater
296dbf9b17 update copyright notice 2008-07-20 23:46:12 +00:00
Francis Dupont
ccd7f16a98 "files unlimited" in code [rt18331] 2008-07-20 10:27:20 +00:00
Evan Hunt
5ad994e8dc Fix compiler warnings on SCO OSr5 2007-09-13 05:04:52 +00:00
Automatic Updater
beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Automatic Updater
e8ac0336eb update copyright notice 2007-06-18 23:46:33 +00:00
Mark Andrews
d41f33d826 spelling s/is/in/ 2007-06-17 23:48:27 +00:00
Mark Andrews
b209b57067 2015. [cleanup] use-additional-cache is now acache-enable for 
consistancy.  Default acache-enable off in BIND 9.4
                        as it requires memory usage to be configured.
                        It may be enabled by default in BIND 9.5 once we
                        have more experience with it.
 2006-05-03 01:46:40 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC 
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
 2006-03-09 23:38:21 +00:00
Mark Andrews
1ba9283d78 2006. [security] Allow-query-cache and allow-recursion now default 
to the builtin acls "localnets" and "localhost".

                        This is being done to make caching servers less
                        attractive as reflective amplifying targets for
                        spoofed traffic.  This still leave authoritative
                        servers exposed.

                        The best fix is for full BCP 38 deployment to
                        remove spoofed traffic.
 2006-03-09 03:40:33 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone. 
New zone option "update-check-ksk yes;".  [RT #15817]
 2006-03-06 01:38:01 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
ea407e7082 1991. [cleanup] The configuration data, once read, should be treated 
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
 2006-02-28 03:10:49 +00:00
Mark Andrews
65fdd79a50 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and 
HMACSHA512 support. [RT #13606]
 2006-01-27 02:50:51 +00:00
Mark Andrews
76f6d0382a 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-06 00:10:00 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to 
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
 2006-01-05 02:24:27 +00:00
Mark Andrews
48d9f5bdaa inclu1954. [func] Named now falls back to advertising EDNS with a 
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1953.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
 2006-01-05 00:10:44 +00:00
Mark Andrews
e770e36d60 update copyright notice 2006-01-04 23:50:23 +00:00
Mark Andrews
f53e702b25 1947. [func] It is now possible to configure named to accept 
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
 2006-01-04 02:58:42 +00:00
Mark Andrews
3c8367a203 1940. [bug] Fixed a number of error conditions reported by 
Coverity.
 2005-11-30 03:44:39 +00:00
Mark Andrews
4813aa536f win32: silence compiler warnings 2005-09-05 02:30:52 +00:00
Mark Andrews
daead3cfd5 silence compiler error 2005-09-05 02:07:45 +00:00
Mark Andrews
59606dc362 seperate out sibling glue checks 2005-08-25 00:05:47 +00:00
Mark Andrews
35dfb27614 1914. [bug] Strings returned from cfg_obj_asstring() should be 
treated as read-only.  The prototype for
                        cfg_obj_asstring() has been updated to reflect this.
                        [RT #15256]
 2005-08-23 02:31:40 +00:00
Mark Andrews
e021d8eff8 1891. [func] Limit the number of recursive clients that can be 
waiting for a single query (<qname,qtype,qclass>) to
                        resolve.  New options clients-per-query and
                        max-clients-per-query.
 2005-06-27 00:20:04 +00:00
Mark Andrews
066f566317 1862. [func] Add additional zone data constancy checks. 
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
 2005-05-19 04:59:57 +00:00
Rob Austein
372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews
5daded5446 1792. [func] New zone option "notify-delay". Specify a minimum 
delay between sets of NOTIFY messages.
 2005-01-11 23:10:40 +00:00
Mark Andrews
7150e2289b update copyright 2005-01-11 01:39:40 +00:00
Mark Andrews
4238db360a 1794. [func] Named and named-checkzone can now both check for 
non-terminal wildcard records.
 2005-01-10 00:05:32 +00:00
Tatuya JINMEI 神明達哉
7a79852eb2 1526. [func] Implemented "additional section caching (or acache)", 
an internal cache framework for additional section
			content to improve response performance.  Several
			configuration options were provided to control the
			behavior.

(merged into 9_4)
 2004-12-21 10:59:02 +00:00
Mark Andrews
8ae0b86fca 1737. [bug] named failed if more that 16 masters were specified. 
[RT #12627]
 2004-10-05 02:52:06 +00:00
Mark Andrews
42d6177825 1702. [bug] also-notify should not be applied to builtin zones. 
[RT #12323]
 2004-08-28 05:43:18 +00:00
Mark Andrews
6b7dc303b7 1612. [bug] check-names at the option/view level could trigger 
an INSIST. [RT# 11116]
 2004-04-20 14:12:44 +00:00
Mark Andrews
90c44ce934 1614. [port] win32: silence resource limit messages. [RT# 11101] 2004-04-19 23:15:59 +00:00
Mark Andrews
28b863e609 pullup fixed from 9.3 2004-03-16 05:52:24 +00:00
Mark Andrews
50105afc55 1589. [func] DNSSEC lookaside validation. 
enable-dnssec -> dnssec-enable
 2004-03-10 02:19:58 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews
89783da064 1581. [func] Disable DNSSEC support by default. To enable 
DNSSEC specify "enable-dnssec yes;" in named.conf.
 2004-02-17 03:40:23 +00:00
Mark Andrews
1a4d687359 1468. [func] Internal zones are nolonger for 'rndc status'. 
[RT #4706]
 2003-04-17 12:11:39 +00:00
Mark Andrews
b500de3be9 alt-transfer-source-v4 -> alt-transfer-source 2003-02-27 05:12:47 +00:00
Mark Andrews
476386968b 1446. [func] Implemented undocumented alternate transfer sources 
from BIND 8.  See use-alt-transfer-source,
                        alt-transfer-source-v4 and alt-transfer-source-v6.

                        SECURITY: use-alt-transfer-source is ENABLED unless
                        you are using views.  This may caues a security risk
                        resulting in accidental disclosure of wrong zone
                        content if the master supplying different source
                        content based on IP address.  If you are not certian
                        ISC recommends setting use-alt-transfer-source no;
developer: marka
reviewer: explorer
 2003-02-26 23:29:00 +00:00
Mark Andrews
888bb8bf68 1443. [func] Masters lists can now be specified and referenced 
in zone masters clauses and other masters lists.
developer: marka
reviewer: explorer
 2003-02-26 06:04:03 +00:00
Mark Andrews
e2fb08b85d 1432. [func] The advertised EDNS UDP buffer size can now be set 
via named.conf (edns-udp-size).
developer: marka
reviewer: explorer
 2003-02-26 02:04:00 +00:00
Mark Andrews
a1301ef891 undo (wrong branch) 2003-02-04 06:10:09 +00:00
Mark Andrews
ab4bec8504 checkpoint 2003-02-04 05:44:32 +00:00
Mark Andrews
9bd478a5e6 1417. [func] ID.SERVER/CHAOS is now a built in zone. 
See "server-id" for how to configure.
 2003-01-20 05:46:11 +00:00
Mark Andrews
49a940dc68 1402. [cleanup] A6 has been moved to experimental and is no longer 
fully supported.
developer: jinmei
reviewer: marka
 2002-11-27 09:52:58 +00:00
Michael Graff
43ee20a821 merge rt4112 2002-11-12 23:38:12 +00:00