2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

400 Commits

Author SHA1 Message Date
Automatic Updater
1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews
f5d0f49584 2285. [func] Test framework for client memory context management.
[RT #17377]
2008-01-02 05:03:07 +00:00
Evan Hunt
05d2776f6f Only set Authentic Data bit if client wants DNSSEC, per RFC 3655. [RT #17175] 2007-09-26 03:04:45 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
f3139b9d76 2187. [bug] query_addds(), query_addwildcardproof() and
query_addnxrrsetnsec() should take a version
                        arguement. [RT #16368]
2007-05-18 06:53:01 +00:00
Mark Andrews
cd1e58c339 2172. [bug] query_addsoa() was being called with a non zone db.
[RT #16834]
2007-04-30 01:02:53 +00:00
Mark Andrews
819b98479e 2165. [func] Allow the destination address of a query to determine
if we will answer the query or recurse.
                        allow-query-on, allow-recursion-on and
                        allow-query-cache-on. [RT #16291]
2007-03-29 06:36:31 +00:00
Mark Andrews
8943ff626f 2130. [func] Log if CD or DO were set. [RT #16640] 2007-02-06 04:00:21 +00:00
Mark Andrews
f36c85c3ce update copyright notice 2007-01-08 02:45:04 +00:00
Mark Andrews
e7d32e57a5 2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
was defined. [RT #16574]
2007-01-08 00:54:15 +00:00
Mark Andrews
1a8efeab76 2110. [bug] "minimal-response yes;" interacted badly with BIND 8
priming queries. [RT #16491]
2006-12-07 04:38:56 +00:00
Mark Andrews
f34249bb28 2066. [security] Handle SIG queries gracefully. [RT #16300] 2006-08-31 03:56:36 +00:00
Mark Andrews
5d51f53483 2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
[RT #16075]
2006-06-04 23:59:33 +00:00
Mark Andrews
9a1e8f1baf 2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074] 2006-05-26 02:44:02 +00:00
Mark Andrews
444bbadb54 2026. [bug] Rate limit the two recursive client exceeded messages.
[RT #16044]
2006-05-18 03:12:36 +00:00
Mark Andrews
82ecc9cd96 2016. [bug] Return a partial answer if recursion is not
allowed but requested and we had the answer
                        to the original qname. [RT #15945]
2006-05-16 03:10:23 +00:00
Mark Andrews
d2ef84e07b 2008. [func] It is now posssible to enable/disable DNSSEC
validation from rndc.  This is useful for the
                        mobile hosts where the current connection point
                        breaks DNSSEC (firewall/proxy).  [RT #15592]

                                rndc validation newstate [view]
2006-03-09 23:39:00 +00:00
Mark Andrews
cfe92110ce 2007. [func] It is now possible to explicitly enable DNSSEC
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
2006-03-09 23:21:54 +00:00
Mark Andrews
d76ed813a5 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:43:35 +00:00
Mark Andrews
45e1bd6358 1991. [cleanup] The configuration data, once read, should be treated
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
Mark Andrews
c2b2bd69fa 1977. [bug] Silence noisy log message. [RT #15704] 2006-02-02 22:48:58 +00:00
Mark Andrews
a1bc941093 1959. [func] Control the zeroing of the negative response TTL to
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
2006-01-05 02:19:02 +00:00
Mark Andrews
acb4f52369 update copyright notice 2006-01-04 23:50:24 +00:00
Mark Andrews
fabf2ee6b0 1947. [func] It is now possible to configure named to accept
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
2006-01-04 02:35:49 +00:00
Mark Andrews
2674e1a455 1940. [bug] Fixed a number of error conditions reported by
Coverity.
2005-11-30 03:33:49 +00:00
Mark Andrews
faa4af28cf 1935. [bug] 'acache' was DO sensitive. [RT #15430]
1934.   [func]          Validate pending NS RRsets, in the authority section,
                        prior to returning them if it can be done without
                        requiring DNSKEYs to be fetched.  [RT #15430]
2005-11-02 01:28:45 +00:00
Mark Andrews
982e072a50 1927. [bug] Access to soanode or nsnode in rbtdb violated the
lock order rule and could cause a dead lock.
                        [RT# 15518]
2005-10-13 01:58:32 +00:00
Mark Andrews
03e200df5d 1913. [func] Integrate contibuted DLZ code into named. [RT #11382] 2005-09-05 00:12:29 +00:00
Mark Andrews
6b79e960e6 1913. [func] Automatic empty zone creation for D.F.IP6.ARPA and
friends.  Note: RFC 1918 zones are not yet covered by
                        this but are likely to be in a future release.

                        New options: empty-server, empty-contact,
                        empty-zones-enable and disable-empty-zone.
2005-08-18 00:57:31 +00:00
Mark Andrews
7c678cfe0b 1910. [cleanup] Don't add DNSKEY records to the additional section. 2005-08-11 04:45:38 +00:00
Mark Andrews
7a80d6d5ba result was not being assigned. 2005-07-28 05:46:12 +00:00
Mark Andrews
8abe06b25d 1905. [bug] Recursive clients soft quota support wasn't working
as expected. [RT #15103]
2005-07-27 02:29:01 +00:00
Mark Andrews
fd780f3d47 1891. [func] Limit the number of recursive clients that can be
waiting for a single query (<qname,qtype,qclass>) to
                        resolve.  New options clients-per-query and
                        max-clients-per-query.
2005-06-27 00:15:45 +00:00
Mark Andrews
9b80f3a7c7 1887. [func] Detect duplicates of UDP queries we are recursing on
and drop them.  New stats category "duplicates".
                        [RT #14892]
2005-06-17 01:58:23 +00:00
Mark Andrews
361a71b7e6 typo in comment 2005-05-16 05:33:42 +00:00
Rob Austein
ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews
b7b6b01a0d update copyright 2005-03-16 00:55:19 +00:00
Mark Andrews
e50b75e36c 1804. [bug] Ensure that if we are queried for glue that it fits
in the additional section or TC is set to tell the
                        client to retry using TCP. [RT #10114]
2005-03-15 01:29:10 +00:00
Tatuya JINMEI 神明達哉
d0eb2cc33c 1526. [func] Implemented "additional section caching (or acache)",
an internal cache framework for additional section
			content to improve response performance.  Several
			configuration options were provided to control the
			behavior.
2004-12-21 10:45:20 +00:00
Mark Andrews
85609ef4d7 order should be signed. 2004-06-30 14:16:06 +00:00
Mark Andrews
5b4a9ac6bf 1675. [bug] named would sometimes add extra NSEC records to
the authority section.
2004-06-29 00:51:50 +00:00
Mark Andrews
4499c6cd5e 1635. [bug] Memory leak on error in query_addds(). 2004-05-14 00:10:52 +00:00
Mark Andrews
42b48d11ca hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 01:58:25 +00:00
Mark Andrews
50105afc55 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:19:58 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews
89783da064 1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
2004-02-17 03:40:23 +00:00
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
73f5c1ff00 stop listening to AD 2004-01-27 05:01:12 +00:00
Mark Andrews
2f35edba9c AD is independent of DO/AD 2004-01-21 15:47:22 +00:00