mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-28 13:08:06 +00:00
Code Issues Releases Wiki Activity
14,847 Commits 660 Branches 820 Tags
Commit Graph

44 Commits

Author SHA1 Message Date
Mark Andrews
1fa2ce7eae 2324. [bug] Fix IPv6 matching against "any;" [RT #17533] 2008-01-27 02:13:34 +00:00
Evan Hunt
fc7043d7d1 Used incorrect address family for mapped IPv4 addresses in acl.c. [RT #17519] 2008-01-22 05:37:49 +00:00
Automatic Updater
140a27777d update copyright notice 2008-01-21 23:46:56 +00:00
Evan Hunt
262c39b236 IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462] 2008-01-21 20:38:54 +00:00
Automatic Updater
2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Automatic Updater
2f99b54e8e update copyright notice 2008-01-17 23:47:00 +00:00
Evan Hunt
1aba9fe678 Fix coverity warnings in acl.c and iptable.c [rt17455] 2008-01-17 08:08:08 +00:00
Mark Andrews
114c14f8ad 2282. [bug] Acl code fixups. [RT #17346] [RT #17374] 2007-12-21 06:46:47 +00:00
Mark Andrews
604419a812 2282. [bug] Acl code fixups. [RT #17346] 2007-12-20 01:48:29 +00:00
Mark Andrews
69f3cb5abc Part 3 of: 
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
 2007-09-19 03:03:29 +00:00
Mark Andrews
12e0477d4e Part 2 of: 
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
 2007-09-14 01:46:06 +00:00
Evan Hunt
c7e266b7e5 Add support for O(1) ACL processing, based on radix tree code originally 
written by kevin brintnall. [RT #16288]
 2007-09-12 01:09:08 +00:00
Automatic Updater
70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
641f68d427 update copyright notice 2006-03-02 00:37:23 +00:00
Mark Andrews
45e1bd6358 1991. [cleanup] The configuration data, once read, should be treated 
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
 2006-02-28 02:39:52 +00:00
Mark Andrews
18d0b5e54b 1900. [port] freebsd: pthread_mutex_init can fail if it runs out 
of memory. [RT #14995]
 2005-07-12 01:00:20 +00:00
Mark Andrews
69fe9aaafd update copyright notice 2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 04:57:32 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
aa39170da8 1394. [func] It is now possible to check if a particular element is 
in a acl.  Remove duplicate entries from the localnets
                        acl.

1393.   [port]          Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
                        is not available in the kernel to prevent accidently
                        listening on IPv4 interfaces.
developer: jinmei
reviewer: marka
 2002-10-29 04:40:26 +00:00
David Lawrence
fe2d25382f don't define INADDR_LOOPBACK; isc/net.h should be ensuring it exists 2001-05-31 10:43:37 +00:00
Brian Wellington
6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which 
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
 2001-03-26 21:33:07 +00:00
Andreas Gustafsson
aa23a35d81 733. [bug] Reference counts of dns_acl_t objects need to be 
locked but were not. [RT #801]
 2001-02-08 23:30:32 +00:00
Andreas Gustafsson
8bb77cd31b fix RT #660 differently 2001-01-17 17:44:49 +00:00
Brian Wellington
39bb14491f Negating an unsigned int is a bad idea. Make it an int instead. [RT #660] 2001-01-17 02:58:28 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Andreas Gustafsson
9c566a852f 587. [func] A warning is now printed if the "allow-update" 
option allows updates based on the source IP
                        address, to alert users to the fact that this
                        is insecure and becoming increasingly so as
                        servers capable of update forwarding are being
                        deployed.
 2000-12-01 18:22:17 +00:00
David Lawrence
ba7ea2326d dns_aclelement_match() returns an isc_boolean_t, but if dns_acl_match() 
within it returned a result that was not ISC_R_SUCCESS, then that result
code was being returned.  Since dns_acl_match() always returns ISC_R_SUCCESS,
the erroneous return was converted into an INSIST().
 2000-11-15 22:59:55 +00:00
Andreas Gustafsson
febaa09184 551. [func] Implemented the 'sortlist' option. 2000-11-10 03:16:26 +00:00
Andreas Gustafsson
ea419adc4e 386. [bug] Missing strdup() of ACL name caused random 
ACL matching failures.
 2000-08-11 01:53:47 +00:00
David Lawrence
40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your 
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
 2000-08-01 01:33:37 +00:00
David Lawrence
15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
David Lawrence
9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00
David Lawrence
1a69a1a78c Megacommit of dozens of files. 
Cleanup of redundant/useless header file inclusion.

ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
   /*
    * This is a comment.
    */
 2000-05-08 14:38:29 +00:00
Bob Halley
364a82f7c2 include isc/util.h 2000-04-28 01:12:23 +00:00
David Lawrence
d8d0c5b1bc explitictly REQUIRE that reqaddr is non-null in dns_acl_match 2000-03-14 04:01:52 +00:00
Andreas Gustafsson
3eef7eaba0 renamed dns_acl_checkrequest() to ns_client_checkacl() 
and moved it to bin/named/client.c to reflect the fact that it
implemented BIND ACL policy more than general-purpose library
functionality; resolve ACL defaults at configuration time
rather than when the ACL is evaluated
 2000-02-22 21:24:24 +00:00
Andreas Gustafsson
fd0bc40a25 IP addresses in ACLs are now represented as 
isc_netaddr_t, not isc_sockaddr_t
 2000-02-15 19:53:05 +00:00
Andreas Gustafsson
a174757026 implemented the 'localhost' and 'localnets' ACLs 2000-02-09 22:59:40 +00:00
Bob Halley
7d32c065c7 update copyright 2000-02-03 23:50:32 +00:00
Mark Andrews
dd796c4d62 memset() not declared 2000-01-26 23:45:13 +00:00
Andreas Gustafsson
7693d4de8f added dns_acl_any(), dns_acl_none() 2000-01-13 23:38:55 +00:00
Andreas Gustafsson
6017f424ee introducing dns_acl_t; other restructuring of server 
configuration process aiming to reduce the degree of mutual dependency
between lib/dns/config and the rest of libdns
 1999-12-16 23:11:07 +00:00