Mark Andrews
93d6dfaf66
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2003-09-30 06:00:40 +00:00
Tatuya JINMEI 神明達哉
1e271ac738
typo: s/baliwick/bailiwick/
...
(I hope it is okay to commit this since it is so trivial)
2003-07-29 22:05:01 +00:00
Mark Andrews
b0c2141b23
1464. [bug] Preserve "out of zone" data for outgoing zone
...
transfers. [RT #5192 ]
2003-04-17 05:40:45 +00:00
Mark Andrews
0c2509b0b9
1449. [bug] query_addbestns() didn't handle running out of memory
...
gracefully.
developer: marka
reviewer: explorer
2003-02-27 02:11:16 +00:00
Mark Andrews
8b5de97014
1448. [bug] Handle empty wildcards labels.
...
developer: marka
reviewer: explorer
2003-02-27 00:19:04 +00:00
Mark Andrews
308094e467
arguements reversed
2003-01-31 12:07:56 +00:00
Mark Andrews
838d608e6f
1422. [func] Log name/type/class when denying a query. [RT #4663 ]
2003-01-21 06:11:46 +00:00
Mark Andrews
421e4cf66e
1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
...
[RT #4715 ]
developer: marka
reviewer: explorer
2003-01-18 03:18:31 +00:00
Mark Andrews
c86eed4bde
1410. [func] handle records that live in the parent zone, e.g. DS.
...
developer: marka
reviewer: explorer
2003-01-14 00:28:50 +00:00
Mark Andrews
49a940dc68
1402. [cleanup] A6 has been moved to experimental and is no longer
...
fully supported.
developer: jinmei
reviewer: marka
2002-11-27 09:52:58 +00:00
Mark Andrews
02b772da47
developer: bwelling
...
reviewed: marka
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2002-09-11 06:36:17 +00:00
Michael Graff
ab7ce5eb6e
detach from quota in an error case. I don't know if this is strictly needed,
...
but it makes sense. It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2002-09-08 18:40:58 +00:00
Mark Andrews
9130ab90fe
developer: bwelling
...
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.
That is, query for y.x.foo.com. If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews
b6309ed962
developer: jinmei
...
reviewer: marka
1368. [func] remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
a2239239cf
reviewed: marka
...
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews
95d24aa0d0
prevent assertion failure
2002-08-07 02:03:49 +00:00
Mark Andrews
4c342614f8
1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
2002-08-06 01:50:28 +00:00
Mark Andrews
f462e2f372
remove unused label
2002-07-25 05:16:10 +00:00
Mark Andrews
b972ff033b
1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
...
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801
1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
...
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
34c1d0e1b6
For some zones, querying for a non-DS record, then a DS record would
...
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166
Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak.
2002-07-23 03:33:12 +00:00
Mark Andrews
c54c1eaf26
1251. [func] Generate DNSSEC wildcard proofs.
2002-07-19 03:50:42 +00:00
Mark Andrews
240a5d160a
When returning a delegation from the cache and the DO bit is set, always
...
try to add a DS. The test for the existence of the sigrdataset was bogus
and crashed the server.
to reproduce:
- create a signed parent & child zone
- query a recursive server for the ns record of the child
- query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
8e5017af68
Recursive quota should apply to tcp queries when the tcp quota is reached.
2002-07-11 05:45:33 +00:00
Mark Andrews
475fe52dc3
1345. [bug] If the tcpquota was exhausted it was possible to
...
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews
ac65e45126
1333. [func] Query log now says if the query was signed (S) or
...
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews
0b09763c35
1328. [func] DS (delegation signer) support.
2002-06-17 04:01:37 +00:00
Mark Andrews
7c441b7f4a
1239. [bug] Under certain circumstances named could continue to
...
use a name after it had been freed triggering
INSIST() failures. [RT #2614 ]
2002-03-28 04:03:50 +00:00
Mark Andrews
2dd99c098c
1234. [bug] 'rrset-order' and 'sortlist' should be additive
...
not exclusive.
1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
are supported.
2002-03-07 13:46:41 +00:00
Mark Andrews
a7038d1a05
copyrights
2002-02-20 03:35:59 +00:00
Brian Wellington
b2ca6fd3a8
#1187 was both unclean and broken. Fix it and clean it up.
2002-01-23 08:46:40 +00:00
Mark Andrews
9ab461a6ff
1169. [func] Identify recursive queries in the query log.
2001-12-29 05:31:26 +00:00
Andreas Gustafsson
1f1d36a87b
Check return values or cast them to (void), as required by the coding
...
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Andreas Gustafsson
6b31d9c568
1136. [bug] CNAME records synthesized from DNAMEs did not
...
have a TTL of zero as required by RFC2672
[RT #2129 ]
2001-11-26 22:54:16 +00:00
Andreas Gustafsson
cde2f4dabe
style
2001-11-16 23:58:39 +00:00
Mark Andrews
773e64ec15
try-edns is no more
2001-11-07 04:25:19 +00:00
Andreas Gustafsson
b352902413
1077. [func] Do not accept further recursive clients when
...
the total number of of recursive lookups being
processed exceeds max-recursive-clients, even
if some of the lookups are internally generated.
[RT #1915 , #1938 ]
2001-10-29 19:02:48 +00:00
Andreas Gustafsson
2562a84dc5
make error message issued when exceeding the recursive client
...
quota more meaningful to users
2001-10-25 01:50:15 +00:00
Andreas Gustafsson
d352f188cb
1072. [bug] The TCP client quota could be exceeded when
...
recursion occurred. [RT #1937 ]
2001-10-25 00:13:37 +00:00
Andreas Gustafsson
5b4f07a4f3
redid 1.204 using a subroutine to reduce code duplication and
...
to eliminate a rather confusing for loop
2001-10-24 18:55:04 +00:00
Mark Andrews
b19619260f
1069. [func] Kill oldest recursive query when recursive query
...
quota is exhausted.
2001-10-24 03:10:18 +00:00
Mark Andrews
5d4bffa427
cancelled fetches wern't being detected.
2001-10-23 06:04:37 +00:00
Mark Andrews
f0a464d58a
memory leak on error.
2001-10-23 06:01:14 +00:00
Andreas Gustafsson
9066d09c3e
Removed all code within #ifdef DNS_OPT_NEWCODES*.
...
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-10-01 18:54:05 +00:00
Andreas Gustafsson
808b909f27
1014. [bug] Some queries would cause statistics counters to
...
increment more than once or not at all. [RT #1321 ]
2001-09-21 19:08:06 +00:00
Andreas Gustafsson
2f734e0a7e
sizeof style
2001-09-19 23:08:24 +00:00
Andreas Gustafsson
1e9efeeb22
986. [bug] 'additional-from-auth no;' did not work reliably
...
in the case of queries answered from the cache.
[RT #1436 ]
2001-09-11 01:21:39 +00:00
Mark Andrews
06a960c681
971. [func] 'try-edns' can be use to disable edns on all queries.
2001-08-30 05:52:18 +00:00
Andreas Gustafsson
135c1c53b8
don't INSIST() that calling dns_db_find() on the root hints
...
only binds the rdataset when returning ISC_R_SUCCESS, because that's not the case -
for example, if the root hints are '. 300 IN CNAME .', DNS_R_CNAME is returned and
the rdataset is bound
2001-08-27 17:20:10 +00:00