Commit Graph
127 Commits
Author SHA1 Message Date
Automatic Updater b67c0e9a49 update copyright notice 2010-02-25 10:56:41 +00:00
Mark Andrews b8c2fd6c72 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:35:11 +00:00
Automatic Updater 3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Automatic Updater 70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews 9b80f3a7c7 1887. [func] Detect duplicates of UDP queries we are recursing on
and drop them.  New stats category "duplicates".
                        [RT #14892]
2005-06-17 01:58:23 +00:00
Mark Andrews c5223c9cb7 1862. [func] Add additional zone data constancy checks.
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
2005-05-19 04:59:05 +00:00
Mark Andrews 69fe9aaafd update copyright notice 2005-04-29 00:24:12 +00:00
Rob Austein ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews 6fac7ff1f9 1606. [bug] DVL insecurity proof was failing.
1605.   [func]          New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 04:45:58 +00:00
Mark Andrews 8d414d1559 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:40:27 +00:00
Mark Andrews c5cde9d5a7 1593. [bug] rndc should return "unknown command" to unknown
commands. [RT# 10642]
2004-03-22 01:46:01 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews d5ad558234 1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
[RT #8934]
2004-03-02 02:37:11 +00:00
Mark Andrews 2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews 35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews fcb54ce0a4 whitespace / layout 2003-10-17 03:46:46 +00:00
Mark Andrews 93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews 182a34004c 1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
NXT bit maps. [RT #5577]
2003-04-17 03:43:35 +00:00
Mark Andrews 8b5de97014 1448. [bug] Handle empty wildcards labels.
developer: marka
reviewer: explorer
2003-02-27 00:19:04 +00:00
Mark Andrews 421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
developer: marka
reviewer: explorer
2003-01-18 03:18:31 +00:00
Mark Andrews c86eed4bde 1410. [func] handle records that live in the parent zone, e.g. DS.
developer: marka
reviewer: explorer
2003-01-14 00:28:50 +00:00
Mark Andrews b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews 5bd76af084 1358. [func] log the reason for rejecting a server when resolving
queries.
2002-08-09 06:12:50 +00:00
Mark Andrews 4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews 4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews 0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Brian Wellington 4b171ebd70 1229. [bug] named would crash if it received a TSIG signed
query as part of an AXFR response. [RT #2570]
2002-03-14 18:34:48 +00:00
Brian Wellington 231ffa6c85 add a new result code so that parsing a bad KEY record doesn't result in
"unknown class/type".
2002-03-08 01:38:57 +00:00
Mark Andrews 95b604c5e9 1218. [bug] Named incorrectlty SERVFAIL rather than NOTAUTH on
when there was a BADTIME error. [RT #2519]
2002-03-05 00:06:02 +00:00
Mark Andrews a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington b6279d0b4b Don't freeze an already frozen zone. 2002-01-24 09:58:42 +00:00
Mark Andrews ff1b064f5e 1159. [bug] MD and MF are not permitted to be loaded by RFC1123. 2001-12-11 20:37:16 +00:00
Andreas Gustafsson 01446841be 1006. [bug] If a KEY RR was found missing during DNSSEC validation,
an assertion failure could subsequently be triggered
                        in the resolver. [RT #1763]
2001-09-19 21:25:46 +00:00
Mark Andrews 2c64908ae0 DNS_R_NOTAUTHORITATIVE 2001-08-30 05:10:55 +00:00
Brian Wellington 3b6bcedffe 891. [bug] Return an error when a SIG(0) signed response to
an unsigned query is seen.  This should actually
			do the verification, but it's not currently
			possible. [RT #1391]
2001-06-08 19:37:29 +00:00
Andreas Gustafsson a9ef485446 If IXFR fails, fall back to AXFR 2001-05-10 17:51:49 +00:00
Brian Wellington 5ea0d11ca4 771. [cleanup] TSIG errors related to unsynchronized clocks
are logged better.
2001-03-07 20:53:32 +00:00
Mark Andrews 9ac7076eba 769. [func] Improved error reporting when parsing rdata. [RT #740]
Two new error codes.  Also push back the last token, if it makes
sense to do so, so that it gets printed in the error message using
RETTOK macro, rather than straight return or RETERR.
2001-03-06 22:11:18 +00:00
Mark Andrews a93cf7e83b 756. [bug] dns_zone_load() could "return" success when no master
file was configured.

 755.   [bug]           Fix format bugs in zone.c (non-exploitable).
2001-02-26 01:45:57 +00:00
Brian Wellington 499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington 58cbc05eb0 Fix memory leak in dns_view_find; return DNS_R_HINTNXRRSET instead of
DNS_R_NOTFOUND when correct to do so.
2000-12-20 23:31:11 +00:00
David Lawrence 10e6498d6d * Removed max-names (as well as DNS_R_ZONETOOLARGE, which was
never returned by any function and was presumably cruft
        related to max-names).
  * Made allow-notify part of the public source and documented it.
  * Made master server TSIG keys part of the public source and documented it.
  * Removed a define of DNS_OPT_NEWCODES supposedly used by GNS, with
        the approval of Mike.
  * Made DNS_ZONE_FORCELOAD flag, used by rndc reload, work in the
        public source.  After the NOMINUM_PUBLIC cleanup, I'll
        fix the rndc reload issues we've been discussing here at IETF.

I left in NOMIMUM_PUBLIC around the forward-notify stuff, with the
expectation that Michael will give the go-ahead next week to remove it.
2000-12-13 00:15:39 +00:00
Brian Wellington 78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
David Lawrence 01a37f376f changed "in" to "of" in DNS_R_SINGLETON, "multiple RRs of singleton type" 2000-11-29 05:59:33 +00:00
Bob Halley 15af30dfc1 add DNS_R_CNAMEANDOTHER and DNS_R_SINGLETON 2000-11-22 00:16:41 +00:00
Brian Wellington 1275a72e8d Don't allow metatypes to be loaded using the \# format. 2000-11-19 22:12:42 +00:00
Andreas Gustafsson 6a56be50dd new result code DNS_R_BADALG 2000-11-15 00:51:17 +00:00