Commit Graph
124 Commits
Author SHA1 Message Date
Automatic Updater e95ab03354 update copyright notice 2010-02-26 23:46:37 +00:00
Mark Andrews b6a3b10da7 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-26 01:03:56 +00:00
Mark Andrews 9ac4b79fc1 1887. [func] Detect duplicates of UDP queries we are recursing on
and drop them.  New stats category "duplicates".
                        [RT #2471]
2005-06-17 02:04:33 +00:00
Mark Andrews b538f5c027 sync with head 2005-05-19 05:21:11 +00:00
Mark Andrews 066f566317 1862. [func] Add additional zone data constancy checks.
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
2005-05-19 04:59:57 +00:00
Mark Andrews e8f92bfe9c update copyright notice 2005-04-29 00:17:24 +00:00
Rob Austein 372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews aa1a497079 1606. [bug] DVL insecurity proof was failing.
1605.   [func]          New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 05:07:12 +00:00
Mark Andrews c1425cc1d5 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-16 00:01:45 +00:00
Mark Andrews c5cde9d5a7 1593. [bug] rndc should return "unknown command" to unknown
commands. [RT# 10642]
2004-03-22 01:46:01 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews d5ad558234 1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
[RT #8934]
2004-03-02 02:37:11 +00:00
Mark Andrews 2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews 35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews fcb54ce0a4 whitespace / layout 2003-10-17 03:46:46 +00:00
Mark Andrews 93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews 182a34004c 1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
NXT bit maps. [RT #5577]
2003-04-17 03:43:35 +00:00
Mark Andrews 8b5de97014 1448. [bug] Handle empty wildcards labels.
developer: marka
reviewer: explorer
2003-02-27 00:19:04 +00:00
Mark Andrews 421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
developer: marka
reviewer: explorer
2003-01-18 03:18:31 +00:00
Mark Andrews c86eed4bde 1410. [func] handle records that live in the parent zone, e.g. DS.
developer: marka
reviewer: explorer
2003-01-14 00:28:50 +00:00
Mark Andrews b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews 5bd76af084 1358. [func] log the reason for rejecting a server when resolving
queries.
2002-08-09 06:12:50 +00:00
Mark Andrews 4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews 4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews 0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Brian Wellington 4b171ebd70 1229. [bug] named would crash if it received a TSIG signed
query as part of an AXFR response. [RT #2570]
2002-03-14 18:34:48 +00:00
Brian Wellington 231ffa6c85 add a new result code so that parsing a bad KEY record doesn't result in
"unknown class/type".
2002-03-08 01:38:57 +00:00
Mark Andrews 95b604c5e9 1218. [bug] Named incorrectlty SERVFAIL rather than NOTAUTH on
when there was a BADTIME error. [RT #2519]
2002-03-05 00:06:02 +00:00
Mark Andrews a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington b6279d0b4b Don't freeze an already frozen zone. 2002-01-24 09:58:42 +00:00
Mark Andrews ff1b064f5e 1159. [bug] MD and MF are not permitted to be loaded by RFC1123. 2001-12-11 20:37:16 +00:00
Andreas Gustafsson 01446841be 1006. [bug] If a KEY RR was found missing during DNSSEC validation,
an assertion failure could subsequently be triggered
                        in the resolver. [RT #1763]
2001-09-19 21:25:46 +00:00
Mark Andrews 2c64908ae0 DNS_R_NOTAUTHORITATIVE 2001-08-30 05:10:55 +00:00
Brian Wellington 3b6bcedffe 891. [bug] Return an error when a SIG(0) signed response to
an unsigned query is seen.  This should actually
			do the verification, but it's not currently
			possible. [RT #1391]
2001-06-08 19:37:29 +00:00
Andreas Gustafsson a9ef485446 If IXFR fails, fall back to AXFR 2001-05-10 17:51:49 +00:00
Brian Wellington 5ea0d11ca4 771. [cleanup] TSIG errors related to unsynchronized clocks
are logged better.
2001-03-07 20:53:32 +00:00
Mark Andrews 9ac7076eba 769. [func] Improved error reporting when parsing rdata. [RT #740]
Two new error codes.  Also push back the last token, if it makes
sense to do so, so that it gets printed in the error message using
RETTOK macro, rather than straight return or RETERR.
2001-03-06 22:11:18 +00:00
Mark Andrews a93cf7e83b 756. [bug] dns_zone_load() could "return" success when no master
file was configured.

 755.   [bug]           Fix format bugs in zone.c (non-exploitable).
2001-02-26 01:45:57 +00:00
Brian Wellington 499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington 58cbc05eb0 Fix memory leak in dns_view_find; return DNS_R_HINTNXRRSET instead of
DNS_R_NOTFOUND when correct to do so.
2000-12-20 23:31:11 +00:00
David Lawrence 10e6498d6d * Removed max-names (as well as DNS_R_ZONETOOLARGE, which was
never returned by any function and was presumably cruft
        related to max-names).
  * Made allow-notify part of the public source and documented it.
  * Made master server TSIG keys part of the public source and documented it.
  * Removed a define of DNS_OPT_NEWCODES supposedly used by GNS, with
        the approval of Mike.
  * Made DNS_ZONE_FORCELOAD flag, used by rndc reload, work in the
        public source.  After the NOMINUM_PUBLIC cleanup, I'll
        fix the rndc reload issues we've been discussing here at IETF.

I left in NOMIMUM_PUBLIC around the forward-notify stuff, with the
expectation that Michael will give the go-ahead next week to remove it.
2000-12-13 00:15:39 +00:00
Brian Wellington 78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
David Lawrence 01a37f376f changed "in" to "of" in DNS_R_SINGLETON, "multiple RRs of singleton type" 2000-11-29 05:59:33 +00:00
Bob Halley 15af30dfc1 add DNS_R_CNAMEANDOTHER and DNS_R_SINGLETON 2000-11-22 00:16:41 +00:00
Brian Wellington 1275a72e8d Don't allow metatypes to be loaded using the \# format. 2000-11-19 22:12:42 +00:00
Andreas Gustafsson 6a56be50dd new result code DNS_R_BADALG 2000-11-15 00:51:17 +00:00
Brian Wellington e21d199dca 539. [func] Support the blackhole option. 2000-11-03 02:45:55 +00:00
Mark Andrews b55c30f2de 525. [func] New arguement 'exact' for dns_db_subtractrdataset(),
and dns_rdataslab_subtract() requesting that the RR's
                        must exist prior to deletion.  DNS_R_NOTEXACT is
                        returned if the condition is not met.
2000-10-18 23:53:31 +00:00
Mark Andrews b20ee662a7 521. [bug] Detect master files which contain $INCLUDE and always
reload. [RT #196]

new result code DNS_R_SEENINCLUDE
dns_master_load* can now return DNS_R_SEENINCLUDE
2000-10-17 07:22:39 +00:00