Witold Kręcicki
44cec639c4
CHANGES/notes/docs
2018-08-16 19:46:10 +02:00
Evan Hunt
4eb0897c90
CHANGES, release notes, README
2018-08-14 13:28:02 -07:00
Evan Hunt
eaac2057c7
option to disable validation under specified names
...
- added new 'validate-except' option, which configures an NTA with
expiry of 0xffffffff. NTAs with that value in the expiry field do not
expire, are are not written out when saving the NTA table and are not
dumped by rndc secroots
2018-08-14 13:28:02 -07:00
Evan Hunt
b4b4277f5a
CHANGES, release note
2018-08-08 14:33:19 -07:00
Ondřej Surý
9e11b54bbc
Update ARM on the default ordering
2018-08-06 11:24:14 +02:00
Mark Andrews
329a0e7812
Remove support for silently ignoring 'no-change' deltas from BIND 8 when processing an IXFR stream. 'no-change' deltas will now trigger a fallback to AXFR as the recovery mechanism.
2018-07-10 19:20:09 -07:00
Tinderbox User
b65d19f9fd
prep 9.13.2
2018-07-03 07:40:29 +00:00
Evan Hunt
3245eb98f4
clarify documentation of the 'mirror' option
2018-07-03 09:10:11 +02:00
Evan Hunt
6993d9131e
update new features list; also fix the "mirror" release note
2018-07-02 19:09:32 -07:00
Ondřej Surý
b5ea00158d
Improve documentation and error messages when libcap is not available
2018-07-02 08:47:32 +02:00
Michał Kępień
92ae05e1bc
Add a release note
2018-06-28 13:38:39 +02:00
Michał Kępień
dbe6a1a05f
Add documentation for mirror zones
...
Update the ARM and various option lists with information about the
"mirror" option for slave zones.
2018-06-28 13:38:39 +02:00
Evan Hunt
2aee33f412
CHANGES, release note
2018-06-27 17:37:29 -07:00
Ondřej Surý
cc5c3b5948
Update CHANGES and doc to reflect changes in master
2018-06-26 15:11:16 -07:00
Mark Andrews
379d407773
add CHANGES and release notes
...
(cherry picked from commit 5f7a6232d6
)
2018-06-26 15:10:34 -07:00
Mukund Sivaraman
8c98e7abfe
Update ARM documentation
...
(cherry picked from commit b5265a8cfa
)
2018-06-26 15:10:34 -07:00
Evan Hunt
ad94787cca
prepare 9.13.1 release
2018-06-21 12:31:33 +02:00
Evan Hunt
03ecba2cdc
allow-recursion could incorrectly inherit from the default allow-query
2018-06-14 14:42:50 +02:00
Witold Kręcicki
1c36eed760
qname minimization: ARM entry
2018-06-12 09:20:13 +02:00
Evan Hunt
dde66b8012
nits
...
- capitalize QNAME in the doc
- regenerate options/docbook
- whitespace
2018-06-12 09:20:13 +02:00
Witold Kręcicki
265052df49
qname-minimization: Some post-review style/minor fixes
2018-06-12 09:20:12 +02:00
Mark Andrews
0e10223029
add answer-cookie as a obsolete option
2018-06-08 11:21:43 -07:00
Ondřej Surý
e771326f60
Add note about removing ECC-GOST to release notes
2018-06-05 09:14:14 +02:00
Ondřej Surý
27593e65dc
Remove support for obsoleted ECC-GOST (GOST R 34.11-94) algorithm
2018-06-05 09:14:14 +02:00
Tony Finch
4862d8ffc1
Add CHANGES and release notes entries
...
4957. [func] NSID logging (enabled by the "request-nsid" option)
now has its own "nsid" category, instead of using the
"resolver" category. [GL !331 ]
2018-06-05 12:11:12 +10:00
Tony Finch
abfbedc0b1
Move NSID logging to its own category
...
It is very verbose, so it is useful to be able to filter it out.
2018-06-05 12:10:37 +10:00
Evan Hunt
d91e313337
CHANGES and release note
2018-05-31 18:23:43 +02:00
Evan Hunt
bef18ecac6
Set "dnssec-validation auto" by default
...
- the default setting for dnssec-validation is now "auto", which
activates DNSSEC validation using the IANA root key. The old behavior
can be restored by explicitly setting "dnssec-validation yes", which
"yes", which activates DNSSEC validation only if keys are explicitly
configured in named.conf.
- the ARM has been updated to describe the new behavior
2018-05-31 18:22:32 +02:00
Tony Finch
4b442c309d
Move serve-stale logging to its own category, so that its verbosity can be curtailed.
2018-05-25 22:00:51 -07:00
Evan Hunt
d1ca21d50a
clarify serve-stale documentation, and add a floor for max-stale-ttl
...
- added a 1-second floor to max-stale-ttl similar to stale-answer-ttl;
if set to 0, it will be silently updated to 1.
- fixed the ARM entry on max-stale-ttl, which incorrectly suggested that
the default was 0 instead of 1 week.
- clarified rndc serve-stale documentation.
2018-05-25 22:00:37 -07:00
Evan Hunt
9f8ba2eb82
CHANGES, release note
2018-05-25 08:21:25 -07:00
Evan Hunt
e324449349
remove the experimental authoritative ECS support from named
...
- mark the 'geoip-use-ecs' option obsolete; warn when it is used
in named.conf
- prohibit 'ecs' ACL tags in named.conf; note that this is a fatal error
since simply ignoring the tags could make ACLs behave unpredictably
- re-simplify the radix and iptable code
- clean up dns_acl_match(), dns_aclelement_match(), dns_acl_allowed()
and dns_geoip_match() so they no longer take ecs options
- remove the ECS-specific unit and system test cases
- remove references to ECS from the ARM
2018-05-25 08:21:25 -07:00
Mark Andrews
ab22160a1c
add closing '};'
2018-05-25 12:48:55 +10:00
Evan Hunt
b4d8349237
add new feature list to README
2018-05-24 11:26:12 -07:00
Evan Hunt
7c955e0eb8
use w3m to generate notes.txt as part of the doc build
2018-05-23 12:39:40 -04:00
Mark Andrews
10dd0b3efe
add HOME.ARPA to the list of empty zones
2018-05-23 10:48:30 +10:00
Tinderbox User
9536688b37
regenerate doc
2018-05-21 19:59:45 +00:00
Evan Hunt
df4df8e0d5
begin preparation for 9.13.0
...
- tidy up release notes, removing the existing "security fixes" and
"bug fixes" sections
- add a section in the release notes to discuss the new version
numbering
- update version, CHANGES, api, and mapapi files
2018-05-21 11:50:38 -07:00
Mukund Sivaraman
975afc508d
Fix ARM about min-update-interval default for RPZ zones
...
Also, use variable names consistent with catz for rpz configuration functions
2018-05-17 19:02:51 -07:00
Ondřej Surý
087eab022f
Add release notes.
2018-05-16 09:54:35 +02:00
Ondřej Surý
b4d6541fe8
Remove genrandom man page
2018-05-16 09:54:35 +02:00
Evan Hunt
dea89f2a52
rewrite the update-policy documentation
...
- clarify the behavior of the name and identity fields for various
rule types, particularly tcp-self and 6to4-self.
2018-05-15 13:05:05 -07:00
Evan Hunt
ea5626179e
CHANGES and release note
2018-05-13 19:18:56 -07:00
Ondřej Surý
55a10b7acd
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
Ondřej Surý
ea95e83f5c
Add release notes about removed support for OpenSSL 0.9.x
2018-05-03 15:55:45 +02:00
Evan Hunt
0795dceda7
remove dangling references to --enable-crypto-rand in doc and comments
2018-05-03 15:03:46 +02:00
Evan Hunt
784087390a
remove the rbtdb64 database implementation
2018-04-20 16:14:51 -07:00
Evan Hunt
c592655c0f
new option "dnskey-sig-validity"
...
- overrides "sig-validity-interval" for DNSKEY, CDNSKEY and CDS RRSIGs
2018-04-20 12:12:08 -07:00
Mark Andrews
e20790c956
add release note for root-key-sentinel
2018-04-18 08:49:55 -07:00
Mark Andrews
68e9315c7d
add named.conf option root-key-sentinel
2018-04-18 08:49:55 -07:00