17 Commits
Author SHA1 Message Date
Tinderbox User c586565250 regen 2012-03-09 23:30:10 +00:00
Tinderbox User e7c7209af8 regen v9_7 2012-03-07 01:49:52 +00:00
Automatic Updater a1daec7a10 regen 2011-03-25 23:30:52 +00:00
Automatic Updater 448e2663ac regen 2011-02-28 23:30:50 +00:00
Automatic Updater 10684df873 regen 2011-02-18 23:30:29 +00:00
Evan Hunt 7b4467366d 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
2011-02-18 21:29:19 +00:00
Automatic Updater 7ee7aa860b regen 2011-01-04 23:30:32 +00:00
Automatic Updater 5a74ff52c2 regen 2010-06-21 23:30:24 +00:00
Automatic Updater 92a43c0ead regen 2010-06-20 23:30:23 +00:00
Evan Hunt 8f7de3db7e Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.) 2009-10-16 02:59:41 +00:00
Automatic Updater 31f1c9a241 regen 2009-09-09 23:30:30 +00:00
Evan Hunt 85be60e3c8 2665. [func] Clarify syntax for managed-keys {} statement, add
ARM documentation about RFC 5011 support. [RT #19874]
2009-09-01 07:14:26 +00:00
Evan Hunt 351b62535d 2609. [func] Simplify the configuration of dynamic zones:
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
2009-06-10 00:27:22 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater 2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Evan Hunt 3a30493983 2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00