Commit Graph
144 Commits
Author SHA1 Message Date
Automatic Updater e95ab03354 update copyright notice 2010-02-26 23:46:37 +00:00
Mark Andrews b6a3b10da7 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-26 01:03:56 +00:00
Automatic Updater ff73202c55 update copyright notice 2008-06-17 23:46:03 +00:00
Mark Andrews 5b6715ebbe 2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
proofs which, in turn, caused validation failures
                        for insecure zones immediately below a secure zone
                        the server was authoritative for. [RT #18112]
2008-06-17 03:28:56 +00:00
Automatic Updater beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Automatic Updater 43af05a84f update copyright notice 2007-03-06 02:12:08 +00:00
Mark Andrews 154e92a9e6 2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:50:11 +00:00
Mark Andrews f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:38:21 +00:00
Mark Andrews 48d9f5bdaa inclu1954. [func] Named now falls back to advertising EDNS with a
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1953.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
2006-01-05 00:10:44 +00:00
Mark Andrews e770e36d60 update copyright notice 2006-01-04 23:50:23 +00:00
Mark Andrews f53e702b25 1947. [func] It is now possible to configure named to accept
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
2006-01-04 02:58:42 +00:00
Mark Andrews 756c1c98e4 1913. [func] Integrate contibuted DLZ code into named. [RT #11382] 2005-09-05 00:20:08 +00:00
Mark Andrews 82e2318373 1900. [port] freebsd: pthread_mutex_init can fail if it runs out
of memory. [RT #14995]
2005-07-12 01:22:34 +00:00
Rob Austein 372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews 38636245d1 update copyrights 2005-01-17 04:11:03 +00:00
Mark Andrews f14dd601bb 1796. [func] "rndc freeze/thaw" now freezes/thaws all zones. 2005-01-14 03:28:03 +00:00
Mark Andrews f1d1090930 set the cache DB in the view's additional cache object so that
additional sections for a (DNS) cached response can also be stored
  in the additional cache. [RT #13339]
2004-12-29 23:13:55 +00:00
Tatuya JINMEI 神明達哉 7a79852eb2 1526. [func] Implemented "additional section caching (or acache)",
an internal cache framework for additional section
			content to improve response performance.  Several
			configuration options were provided to control the
			behavior.

(merged into 9_4)
2004-12-21 10:59:02 +00:00
Mark Andrews 50105afc55 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:19:58 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews 89783da064 1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
2004-02-17 03:40:23 +00:00
Mark Andrews 4efe32b8bb 1521. [bug] dns_view_createresolver() failed to check the
result from isc_mem_create(). [RT# 9294]
2003-10-03 02:19:31 +00:00
Mark Andrews 93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews 62091d9b54 wrong element delonly -> rootexclude 2003-09-19 13:27:18 +00:00
Mark Andrews 68a918e038 rootexlude -> rootexclude
free and initialise rootdelonly & rootexclude
buy -> by
2003-09-19 13:17:21 +00:00
Mark Andrews 0b1da8124c 1510. [func] New view option "root-delegation-only". Apply
delegation-only check to all TLDs and root.
                        Note there are some TLDs that are NOT delegation
                        only (e.g. DE and MUSEUM) these can be excluded
                        from the checks buy using exclude.

                        root-delegation-only exclude { "DE"; "MUSEUM"; };
2003-09-19 12:39:49 +00:00
Mark Andrews 20d90a3753 1506. [bug] Wrong return type for dns_view_isdelegationonly(). 2003-09-17 15:01:26 +00:00
Mark Andrews 4607e7a9b8 1504. [func] New zone type "delegation-only". 2003-09-17 05:24:43 +00:00
Mark Andrews 1e107b3d7b 1495. [cleanup] Replace hash functions with universal hash. 2003-07-25 02:22:26 +00:00
Mark Andrews 53cf671865 1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
been replaced with DNS_ADBFIND_STARTATZONE which
                        causes the search to start using the closest zone.

1444.   [func]          dns_view_findzonecut2() allows you to specify if the
                        cache should be searched for zonecuts.
developer: marka
reviewer: explorer
2003-02-26 22:54:29 +00:00
Mark Andrews 49a940dc68 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
developer: jinmei
reviewer: marka
2002-11-27 09:52:58 +00:00
Mark Andrews ba4aec8c18 1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
data cache.
2002-09-10 02:06:49 +00:00
Mark Andrews de49761421 1330. [bug] 'rndc stop' failed to cause zones to be flushed
sometimes. [RT #3157]
2002-06-19 07:14:48 +00:00
Mark Andrews c4a9ce445c 1274. [func] preferred-glue option from BIND 8.3. 2002-04-26 00:40:37 +00:00
Mark Andrews 2dd99c098c 1234. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2002-03-07 13:46:41 +00:00
Andreas Gustafsson 1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Mark Andrews 60213f2815 1139. [func] It is now possible to flush a given name from the
caches via 'rndc flushname name [view]'.  [RT #2051]
2001-11-27 04:06:17 +00:00
Andreas Gustafsson f3ca27e9fe sizeof style 2001-11-12 19:05:39 +00:00
Mark Andrews 773e64ec15 try-edns is no more 2001-11-07 04:25:19 +00:00
Mark Andrews 081cff0c33 1073. [bug] The adb cache should also be space driven,
max-adb-size.  [RT #1915, #1938]
2001-10-25 04:57:46 +00:00
Mark Andrews 06a960c681 971. [func] 'try-edns' can be use to disable edns on all queries. 2001-08-30 05:52:18 +00:00
Andreas Gustafsson 135c1c53b8 don't INSIST() that calling dns_db_find() on the root hints
only binds the rdataset when returning ISC_R_SUCCESS, because that's not the case -
for example, if the root hints are '. 300 IN CNAME .', DNS_R_CNAME is returned and
the rdataset is bound
2001-08-27 17:20:10 +00:00
Mark Andrews 89555ff443 965. [bug] Using non root hints caused a rbtdb node reference
leak.    [RT #1581, RT #1618]
2001-08-27 06:10:17 +00:00
Brian Wellington ee3ab6063d 945. [func] Add the new view-specific options
"match-destinations" and "match-recursive-only".
2001-07-26 20:42:46 +00:00
Andreas Gustafsson 9dafd058e3 implemented 'rndc reconfig' 2001-05-07 23:34:24 +00:00
Brian Wellington c20ffa38de 808. [func] Add 'rndc flush' to flush the server's cache. 2001-04-11 20:37:50 +00:00
Brian Wellington 6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Bob Halley d911284333 add support for minimal-responses 2001-03-14 21:53:29 +00:00
Andreas Gustafsson 65a66336a6 redid configuration locking using isc_task_beginexclusive()
and isc_task_endexclusive() instead of a multitude of separate
configuration rwlocks
2001-02-14 03:54:53 +00:00
Brian Wellington b7cd261f2f dns_name_concatenate(foo, NULL, bar, NULL) -> dns_name_copy(foo, bar, NULL) 2001-02-05 19:47:05 +00:00