Automatic Updater
fe2b9bf570
update copyright notice
2009-11-18 23:48:07 +00:00
Mark Andrews
a39a5f4d81
2772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-17 23:55:18 +00:00
Automatic Updater
e34e9a8d68
update copyright notice
2009-11-17 23:48:13 +00:00
Evan Hunt
44a3999cf4
2770. [cleanup] Add log messages to resolver.c to indicate events
...
causing FORMERR responses. [RT #20526 ]
2009-11-17 02:23:15 +00:00
Mark Andrews
0a30185f80
2748. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-11-04 02:15:30 +00:00
Evan Hunt
5cb44a38d9
back out change 2740
2009-10-28 18:04:29 +00:00
Mark Andrews
e9d45c0a04
2740. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-10-27 23:05:53 +00:00
Evan Hunt
95f2377b4f
2739. [cleanup] Clean up API for initializing and clearing trust
...
anchors for a view. [RT #20211 ]
2009-10-27 22:46:13 +00:00
Tatuya JINMEI 神明達哉
307d208450
2660. [func] Add a new set of DNS libraries for non-BIND9
...
applications. See README.libdns. [RT #19369 ]
2009-09-01 00:22:28 +00:00
Mark Andrews
bcd0cbfdae
2649. [bug] Set the domain for forward only zones. [RT #19944 ]
2009-08-13 04:33:51 +00:00
Mark Andrews
6d5852f318
2623. [bug] Named started seaches for DS non-optimally. [RT #19915 ]
2009-07-13 06:24:27 +00:00
Automatic Updater
dc0c165ce3
update copyright notice
2009-06-02 23:47:50 +00:00
Mark Andrews
5422cf284f
2605. [bug] Accept DS responses from delegation only zones.
...
[RT # 19296]
2009-06-02 05:51:44 +00:00
Automatic Updater
e6ada020f5
update copyright notice
2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6
2604. [func] Add support for DNS rebinding attack prevention through
...
new options, deny-answer-addresses and
deny-answer-aliases. Based on contributed code from
JD Nurmi, Google. [RT #18192 ]
2009-05-29 22:22:37 +00:00
Automatic Updater
cc5f9fe224
update copyright notice
2009-05-11 02:38:35 +00:00
Mark Andrews
8a805c9f41
spelling
2009-05-11 02:30:07 +00:00
Mark Andrews
4c2ed3d141
2599. [bug] Address rapid memory growth when validation fails.
...
[RT #19654 ]
2009-05-11 02:22:03 +00:00
Francis Dupont
ff380b05fe
comment fixes (rt19624)
2009-05-07 09:41:23 +00:00
Evan Hunt
bfe0517fdc
Clarify logged message when an insecure DNSSEC response arrives from a zone
...
thought to be secure: "insecurity proof failed" instead of "not insecure".
[RT #19400 ]
2009-03-01 02:45:38 +00:00
Mark Andrews
549e34bbf4
2564. [bug] Only take EDNS fallback steps when processing timeouts.
...
[RT #19405 ]
2009-02-27 23:01:48 +00:00
Mark Andrews
499fa72075
2564. [bug] 'named' was treating a TCP retry as a timeout when
...
deciding whether to perform a EDNS fallback step.
[RT #19393 ]
2009-02-25 22:46:05 +00:00
Mark Andrews
45c3c12ed3
2552. [bug] zero-no-soa-ttl-cache was not being honoured.
...
[RT #19340 ]
2009-02-15 23:13:32 +00:00
Tatuya JINMEI 神明達哉
d9059b0c38
2537. [func] Added more statistics counters including those on socket
...
I/O events and query RTT histograms. [RT #18802 ]
2009-01-27 22:30:00 +00:00
Francis Dupont
bdfaef63f5
spelling
2009-01-17 14:59:03 +00:00
Automatic Updater
d7845fc5ba
update copyright notice
2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉
609f86163a
2525. [func] New logging category "query-errors" to provide detailed
...
internal information about query failures, especially
about server failures. [RT #19027 ]
2009-01-07 01:46:40 +00:00
Automatic Updater
5569e7de51
update copyright notice
2009-01-05 23:47:54 +00:00
Tatuya JINMEI 神明達哉
3fb1637c92
trivial comment cleanups (RT#19118)
2009-01-05 23:20:22 +00:00
Mark Andrews
09b45f7b58
2487. [bug] Give TCP connections longer to complete. [RT #18675 ]
2008-11-07 00:52:34 +00:00
Mark Andrews
2cada19312
align comment w/ code [RT #18833 ]
2008-11-06 02:20:14 +00:00
Tatuya JINMEI 神明達哉
35378bcc6a
2468. [bug] Resolver could try unreachable servers multiple times.
...
[RT #18739 ]
2008-10-17 21:58:09 +00:00
Mark Andrews
6098d364b6
2448. [func] Add NSEC3 support. [RT #15452 ]
2008-09-24 02:46:23 +00:00
Mark Andrews
f5662f41e7
2433. [tuning] Set initial timeout to 800ms.
2008-09-04 04:23:43 +00:00
Automatic Updater
e6a6d0778c
update copyright notice
2008-08-22 23:47:17 +00:00
Mark Andrews
a0fb749d0b
adjust log message added by change 2409. [RT #18497 ]
2008-08-22 05:00:29 +00:00
Evan Hunt
a45f57a2d5
RTT banding. [rt18441]
2008-08-22 04:16:17 +00:00
Mark Andrews
4db36a15c5
2409. [func] Only log that we disabled EDNS processing if we were
...
subsequently successful. [RT #18029 ]
2008-08-06 06:11:15 +00:00
Tatuya JINMEI 神明達哉
72e52e1a03
comment wording
2008-07-24 04:54:44 +00:00
Mark Andrews
9de0f9b0ae
2396. [bug] Don't set SO_REUSEADDR for randomized ports.
...
[RT #18336 ]
2008-07-22 03:43:04 +00:00
Tatuya JINMEI 神明達哉
386d3a99c1
2375. [security] Fully randomize UDP query ports to improve
...
forgery resilience. [RT #17949 , #18098 ]
2008-06-23 19:41:20 +00:00
Tatuya JINMEI 神明達哉
0f39ff74a8
2383. [bug] named could double queries when they resulted in
...
SERVFAIL due to overkilling EDNS0 failure detection.
2008-06-17 22:35:08 +00:00
Mark Andrews
58253bddc4
2375. [bug] Change #2144 was not complete.
2008-05-29 04:46:32 +00:00
Evan Hunt
69ec1b7eb3
Improve counting of dns_resstatscounter_retry [rt18030]
2008-05-06 01:12:55 +00:00
Tatuya JINMEI 神明達哉
5c024f7877
cleanups for LRU-caching code [RT #18018 ]
2008-05-01 18:23:07 +00:00
Mark Andrews
ba5af4569a
fix bad NSID/EDNS interaction [RT #17952 ]
2008-04-10 07:20:11 +00:00
Mark Andrews
375e2c913a
2359. [bug] Fix NSID bug. [RT #17942 ]
2008-04-07 05:32:52 +00:00
Tatuya JINMEI 神明達哉
eeb8892daa
Global memory context had the wrong name (RT #17932 )
2008-04-03 23:14:52 +00:00
Mark Andrews
8907d8fa04
2355. [func] Extend the number statistics counters available.
...
[RT #17590 ]
2008-04-03 05:55:52 +00:00
Mark Andrews
db30f4bdcb
2353. [func] Add support for Name Server ID (RFC 5001).
...
'dig +nsid' requests NSID from server.
'request-nsid yes;' causes recursive server to send
NSID requests to upstream servers. Server responds
to NSID requests with the string configured by
'server-id' option. [RT #17091 ]
2008-04-03 02:01:08 +00:00
