2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

247 Commits

Author SHA1 Message Date
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Tatuya JINMEI 神明達哉
1e271ac738 typo: s/baliwick/bailiwick/
(I hope it is okay to commit this since it is so trivial)
2003-07-29 22:05:01 +00:00
Mark Andrews
b0c2141b23 1464. [bug] Preserve "out of zone" data for outgoing zone
transfers. [RT #5192]
2003-04-17 05:40:45 +00:00
Mark Andrews
0c2509b0b9 1449. [bug] query_addbestns() didn't handle running out of memory
gracefully.
developer: marka
reviewer: explorer
2003-02-27 02:11:16 +00:00
Mark Andrews
8b5de97014 1448. [bug] Handle empty wildcards labels.
developer: marka
reviewer: explorer
2003-02-27 00:19:04 +00:00
Mark Andrews
308094e467 arguements reversed 2003-01-31 12:07:56 +00:00
Mark Andrews
838d608e6f 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-01-21 06:11:46 +00:00
Mark Andrews
421e4cf66e 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
developer: marka
reviewer: explorer
2003-01-18 03:18:31 +00:00
Mark Andrews
c86eed4bde 1410. [func] handle records that live in the parent zone, e.g. DS.
developer: marka
reviewer: explorer
2003-01-14 00:28:50 +00:00
Mark Andrews
49a940dc68 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
developer: jinmei
reviewer: marka
2002-11-27 09:52:58 +00:00
Mark Andrews
02b772da47 developer: bwelling
reviewed: marka
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2002-09-11 06:36:17 +00:00
Michael Graff
ab7ce5eb6e detach from quota in an error case. I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2002-09-08 18:40:58 +00:00
Mark Andrews
9130ab90fe developer: bwelling
reviewer: marka
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2002-09-06 03:47:56 +00:00
Mark Andrews
b6309ed962 developer: jinmei
reviewer: marka
1368.   [func]          remove support for bitstring labels.
2002-08-27 04:53:43 +00:00
Mark Andrews
a2239239cf reviewed: marka
developer: bwelling
don't attempt to generate a wildcard proof unless the zone is secure.
2002-08-19 21:32:56 +00:00
Mark Andrews
95d24aa0d0 prevent assertion failure 2002-08-07 02:03:49 +00:00
Mark Andrews
4c342614f8 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2002-08-06 01:50:28 +00:00
Mark Andrews
f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews
b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews
475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to
to trigger a INSIST() failure.
2002-07-09 02:41:36 +00:00
Mark Andrews
ac65e45126 1333. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2002-06-25 04:12:51 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
7c441b7f4a 1239. [bug] Under certain circumstances named could continue to
use a name after it had been freed triggering
                        INSIST() failures.  [RT #2614]
2002-03-28 04:03:50 +00:00
Mark Andrews
2dd99c098c 1234. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2002-03-07 13:46:41 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington
b2ca6fd3a8 #1187 was both unclean and broken. Fix it and clean it up. 2002-01-23 08:46:40 +00:00
Mark Andrews
9ab461a6ff 1169. [func] Identify recursive queries in the query log. 2001-12-29 05:31:26 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Andreas Gustafsson
6b31d9c568 1136. [bug] CNAME records synthesized from DNAMEs did not
have a TTL of zero as required by RFC2672
                        [RT #2129]
2001-11-26 22:54:16 +00:00
Andreas Gustafsson
cde2f4dabe style 2001-11-16 23:58:39 +00:00
Mark Andrews
773e64ec15 try-edns is no more 2001-11-07 04:25:19 +00:00
Andreas Gustafsson
b352902413 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2001-10-29 19:02:48 +00:00
Andreas Gustafsson
2562a84dc5 make error message issued when exceeding the recursive client
quota more meaningful to users
2001-10-25 01:50:15 +00:00
Andreas Gustafsson
d352f188cb 1072. [bug] The TCP client quota could be exceeded when
recursion occurred. [RT #1937]
2001-10-25 00:13:37 +00:00
Andreas Gustafsson
5b4f07a4f3 redid 1.204 using a subroutine to reduce code duplication and
to eliminate a rather confusing for loop
2001-10-24 18:55:04 +00:00
Mark Andrews
b19619260f 1069. [func] Kill oldest recursive query when recursive query
quota is exhausted.
2001-10-24 03:10:18 +00:00
Mark Andrews
5d4bffa427 cancelled fetches wern't being detected. 2001-10-23 06:04:37 +00:00
Mark Andrews
f0a464d58a memory leak on error. 2001-10-23 06:01:14 +00:00
Andreas Gustafsson
9066d09c3e Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-10-01 18:54:05 +00:00
Andreas Gustafsson
808b909f27 1014. [bug] Some queries would cause statistics counters to
increment more than once or not at all. [RT #1321]
2001-09-21 19:08:06 +00:00
Andreas Gustafsson
2f734e0a7e sizeof style 2001-09-19 23:08:24 +00:00
Andreas Gustafsson
1e9efeeb22 986. [bug] 'additional-from-auth no;' did not work reliably
in the case of queries answered from the cache.
                        [RT #1436]
2001-09-11 01:21:39 +00:00
Mark Andrews
06a960c681 971. [func] 'try-edns' can be use to disable edns on all queries. 2001-08-30 05:52:18 +00:00
Andreas Gustafsson
135c1c53b8 don't INSIST() that calling dns_db_find() on the root hints
only binds the rdataset when returning ISC_R_SUCCESS, because that's not the case -
for example, if the root hints are '. 300 IN CNAME .', DNS_R_CNAME is returned and
the rdataset is bound
2001-08-27 17:20:10 +00:00