Danny Mayer
8ef03ac274
Port needed cast to isc_uint16_t as it is a 16 bit quantity
2002-08-01 03:28:01 +00:00
Danny Mayer
977265bc5d
Fixed fclose to close the lockfile and not fd
2002-08-01 03:25:34 +00:00
Danny Mayer
6f1437add9
Fixed missing newline and continuation character (\n\)
2002-08-01 03:23:36 +00:00
Mark Andrews
1a9c000f54
placeholder for CERT Advisory CA-2002-23
2002-07-31 07:19:37 +00:00
Danny Mayer
3cea35d915
Fix for Win32 High CPU Load
2002-07-31 05:23:44 +00:00
Mark Andrews
31fd8a17fb
missing %s in format
2002-07-31 02:22:15 +00:00
Mark Andrews
53f1312c61
1345. [port] Use a explicit -Wformat with gcc. Not all versions
...
include it in -Wall.
2002-07-31 02:19:07 +00:00
Mark Andrews
7d011946d2
layout (too wide)
2002-07-31 02:10:58 +00:00
Mark Andrews
9344f103f2
8.2.4 has been released
2002-07-30 23:42:31 +00:00
Mark Andrews
e334a3d152
refresh timeouts
2002-07-29 22:47:05 +00:00
Mark Andrews
87f4715d6c
1344. [func] Log if the serial number on the master has gone backwards.
...
If you have multiple machines specified in the masters
clause you may want to set 'multi-master yes;' to suppress
this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
1431917c7c
1343. [func] Log successful notifies received (info). Adjust log level
...
for failed notifies to notice.
2002-07-29 05:15:32 +00:00
Mark Andrews
e809f3fb3f
,->.
2002-07-29 01:37:22 +00:00
Mark Andrews
3733c24efa
1342, [func] Log remote address with TCP dispatch failures.
2002-07-29 01:03:24 +00:00
Mark Andrews
c8b06dc2f9
"make install" failed to install grammar.h and namedconf.h
2002-07-29 00:43:40 +00:00
Mark Andrews
2ee2c1be18
EAI_NODATA is platform dependent.
2002-07-29 00:35:17 +00:00
Mark Andrews
f48695f549
new draft
2002-07-26 21:59:18 +00:00
Mark Andrews
012a2b979e
1341. [func] Allow a rate limiter to be stalled.
2002-07-26 06:42:02 +00:00
Mark Andrews
f6ff008101
1340. [bug] Delay and spread out the startup refresh load.
2002-07-26 06:27:31 +00:00
Mark Andrews
ea6695989c
new draft
2002-07-25 14:45:16 +00:00
Mark Andrews
ec3984e9df
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
...
lookups. Bit string lookups are no longer attempted.
2002-07-25 05:46:07 +00:00
Mark Andrews
f462e2f372
remove unused label
2002-07-25 05:16:10 +00:00
Mark Andrews
9443226853
new draft
2002-07-24 22:38:16 +00:00
Mark Andrews
b972ff033b
1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
...
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801
1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
...
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
f0471ca4b7
1336. [func] Nibble lookups under IP6.ARPA are now supported by
...
dns_byaddr_create(). dns_byaddr_createptrname() is
deprecated, use dns_byaddr_createptrname2() instead.
2002-07-24 06:42:32 +00:00
Michael Graff
3ff40fd173
remove my REALLY old todo list
2002-07-23 22:42:55 +00:00
Mark Andrews
03d337f54a
For some zones, querying for a DS record before anything else would SERVFAIL.
2002-07-23 03:41:44 +00:00
Mark Andrews
34c1d0e1b6
For some zones, querying for a non-DS record, then a DS record would
...
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166
Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak.
2002-07-23 03:33:12 +00:00
Mark Andrews
b907c35b33
still missing changes
2002-07-23 02:04:40 +00:00
Mark Andrews
94323de041
change numbers out of order
2002-07-23 01:27:42 +00:00
Mark Andrews
e412f05a4e
spelling
2002-07-22 03:23:11 +00:00
Mark Andrews
638fe804a5
1255. [bug] When performing a nonexistence proof, the validator
...
should discard parent NXTs from higher in the DNS.
2002-07-22 03:00:49 +00:00
Mark Andrews
9db3d9d14e
1254. [bug] When signing/verifying rdatasets, duplicate rdatas
...
need to be suppressed.
2002-07-22 02:49:14 +00:00
Mark Andrews
e2cf0e8ff9
1253. [contrib] queryperf now reports a summary of returned
...
rcodes (-c), rcodes are printed in neumonic form (-v).
2002-07-22 02:47:24 +00:00
Mark Andrews
0b75a2dd3b
1252. [func] Report the current serial with periodic commits when
...
rolling forward the journal.
2002-07-22 02:06:04 +00:00
Mark Andrews
0f042c7c44
- improves tests of negative insecurity proofs, including tests for the
...
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
not important.
- removes the bogus first half of the dynamic zone test, which didn't
do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
delegated.
bwelling
2002-07-19 06:20:24 +00:00
Mark Andrews
c54c1eaf26
1251. [func] Generate DNSSEC wildcard proofs.
2002-07-19 03:50:42 +00:00
Mark Andrews
0d993c02ba
1250. [bug] When processing events (non-threaded) only allow
...
the task one chance to use to use its quantum.
2002-07-19 03:39:44 +00:00
Mark Andrews
ff30cdeb78
The validator didn't handle missing DS records correctly.
2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9
1249. [func] named-checkzone will now check if nameservers that
...
appear to be IP addresses. Available modes "fail",
"warn" (default) and "ignore" the results of the
check.
2002-07-19 02:34:58 +00:00
Mark Andrews
0d2dcaf4a5
replaced
2002-07-19 02:26:26 +00:00
Mark Andrews
240a5d160a
When returning a delegation from the cache and the DO bit is set, always
...
try to add a DS. The test for the existence of the sigrdataset was bogus
and crashed the server.
to reproduce:
- create a signed parent & child zone
- query a recursive server for the ns record of the child
- query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
d196b45738
1248. [bug] The validator could incorrectly verify an invalid
...
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35
1248. [bug] The validator could incorrectly verify an invalid
...
negative proof.
When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin. The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key. This
doesn't work, because the first SIG could have been spoofed. It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec
1247. [bug] The validator would incorrectly mark data as insecure
...
when seeing a bogus signature before a correct
signature.
2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e
1246. [bug] DNAME/CNAME signatures were not being cached when
...
validation was not being performed. [RT #3284 ]
2002-07-15 02:23:58 +00:00
Mark Andrews
981e5046e0
max-journal-size is a zone option
2002-07-13 00:53:34 +00:00
Mark Andrews
0996973920
distclean
2002-07-12 01:42:22 +00:00