Commit Graph
53 Commits
Author SHA1 Message Date
Automatic Updater 99b63ca8e5 update copyright notice 2009-01-18 23:47:41 +00:00
Mark Andrews d7900926bf spelling 2009-01-18 23:25:18 +00:00
Mark Andrews 82a9f3af05 2502. [cleanup] isc_radix: Improve compliance with coding style,
document function in <isc/radix.h>. [RT #18534]
2008-12-24 00:17:12 +00:00
Automatic Updater cdbb3d2774 update copyright notice 2008-09-26 23:47:06 +00:00
Evan Hunt b0bf1ad5b0 2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
address, regardless of family.  They now correctly
			distinguish IPv4 from IPv6.  [RT #18559]
2008-09-26 21:12:02 +00:00
Evan Hunt 106360491a address review comment 2008-09-26 16:44:49 +00:00
Evan Hunt e80f661db8 possible null dereference in dns_acl_isanyornone() [rt18559] 2008-09-12 04:54:39 +00:00
Evan Hunt aeadcd6319 pull up windows acl leak fix from 9.5.0-P2-W1 2008-09-10 21:52:49 +00:00
Evan Hunt 28ad0be64e Fix a bug causing dns_acl_isany() to return spurious results [rt18000] 2008-04-29 01:01:42 +00:00
Mark Andrews 1fa2ce7eae 2324. [bug] Fix IPv6 matching against "any;" [RT #17533] 2008-01-27 02:13:34 +00:00
Evan Hunt fc7043d7d1 Used incorrect address family for mapped IPv4 addresses in acl.c. [RT #17519] 2008-01-22 05:37:49 +00:00
Automatic Updater 140a27777d update copyright notice 2008-01-21 23:46:56 +00:00
Evan Hunt 262c39b236 IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462] 2008-01-21 20:38:54 +00:00
Automatic Updater 2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Automatic Updater 2f99b54e8e update copyright notice 2008-01-17 23:47:00 +00:00
Evan Hunt 1aba9fe678 Fix coverity warnings in acl.c and iptable.c [rt17455] 2008-01-17 08:08:08 +00:00
Mark Andrews 114c14f8ad 2282. [bug] Acl code fixups. [RT #17346] [RT #17374] 2007-12-21 06:46:47 +00:00
Mark Andrews 604419a812 2282. [bug] Acl code fixups. [RT #17346] 2007-12-20 01:48:29 +00:00
Mark Andrews 69f3cb5abc Part 3 of:
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
2007-09-19 03:03:29 +00:00
Mark Andrews 12e0477d4e Part 2 of:
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
2007-09-14 01:46:06 +00:00
Evan Hunt c7e266b7e5 Add support for O(1) ACL processing, based on radix tree code originally
written by kevin brintnall. [RT #16288]
2007-09-12 01:09:08 +00:00
Automatic Updater 70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews 641f68d427 update copyright notice 2006-03-02 00:37:23 +00:00
Mark Andrews 45e1bd6358 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
Mark Andrews 18d0b5e54b 1900. [port] freebsd: pthread_mutex_init can fail if it runs out
of memory. [RT #14995]
2005-07-12 01:00:20 +00:00
Mark Andrews 69fe9aaafd update copyright notice 2005-04-29 00:24:12 +00:00
Rob Austein ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews aa39170da8 1394. [func] It is now possible to check if a particular element is
in a acl.  Remove duplicate entries from the localnets
                        acl.

1393.   [port]          Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
                        is not available in the kernel to prevent accidently
                        listening on IPv4 interfaces.
developer: jinmei
reviewer: marka
2002-10-29 04:40:26 +00:00
David Lawrence fe2d25382f don't define INADDR_LOOPBACK; isc/net.h should be ensuring it exists 2001-05-31 10:43:37 +00:00
Brian Wellington 6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson aa23a35d81 733. [bug] Reference counts of dns_acl_t objects need to be
locked but were not. [RT #801]
2001-02-08 23:30:32 +00:00
Andreas Gustafsson 8bb77cd31b fix RT #660 differently 2001-01-17 17:44:49 +00:00
Brian Wellington 39bb14491f Negating an unsigned int is a bad idea. Make it an int instead. [RT #660] 2001-01-17 02:58:28 +00:00
Brian Wellington 499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Andreas Gustafsson 9c566a852f 587. [func] A warning is now printed if the "allow-update"
option allows updates based on the source IP
                        address, to alert users to the fact that this
                        is insecure and becoming increasingly so as
                        servers capable of update forwarding are being
                        deployed.
2000-12-01 18:22:17 +00:00
David Lawrence ba7ea2326d dns_aclelement_match() returns an isc_boolean_t, but if dns_acl_match()
within it returned a result that was not ISC_R_SUCCESS, then that result
code was being returned.  Since dns_acl_match() always returns ISC_R_SUCCESS,
the erroneous return was converted into an INSIST().
2000-11-15 22:59:55 +00:00
Andreas Gustafsson febaa09184 551. [func] Implemented the 'sortlist' option. 2000-11-10 03:16:26 +00:00
Andreas Gustafsson ea419adc4e 386. [bug] Missing strdup() of ACL name caused random
ACL matching failures.
2000-08-11 01:53:47 +00:00
David Lawrence 40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence 15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
David Lawrence 9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00
David Lawrence 1a69a1a78c Megacommit of dozens of files.
Cleanup of redundant/useless header file inclusion.

ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
   /*
    * This is a comment.
    */
2000-05-08 14:38:29 +00:00
Bob Halley 364a82f7c2 include isc/util.h 2000-04-28 01:12:23 +00:00
David Lawrence d8d0c5b1bc explitictly REQUIRE that reqaddr is non-null in dns_acl_match 2000-03-14 04:01:52 +00:00
Andreas Gustafsson 3eef7eaba0 renamed dns_acl_checkrequest() to ns_client_checkacl()
and moved it to bin/named/client.c to reflect the fact that it
implemented BIND ACL policy more than general-purpose library
functionality; resolve ACL defaults at configuration time
rather than when the ACL is evaluated
2000-02-22 21:24:24 +00:00
Andreas Gustafsson fd0bc40a25 IP addresses in ACLs are now represented as
isc_netaddr_t, not isc_sockaddr_t
2000-02-15 19:53:05 +00:00
Andreas Gustafsson a174757026 implemented the 'localhost' and 'localnets' ACLs 2000-02-09 22:59:40 +00:00
Bob Halley 7d32c065c7 update copyright 2000-02-03 23:50:32 +00:00