2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 05:57:52 +00:00

11513 Commits

Author SHA1 Message Date
Danny Mayer
8ef03ac274 Port needed cast to isc_uint16_t as it is a 16 bit quantity 2002-08-01 03:28:01 +00:00
Danny Mayer
977265bc5d Fixed fclose to close the lockfile and not fd 2002-08-01 03:25:34 +00:00
Danny Mayer
6f1437add9 Fixed missing newline and continuation character (\n\) 2002-08-01 03:23:36 +00:00
Mark Andrews
1a9c000f54 placeholder for CERT Advisory CA-2002-23 2002-07-31 07:19:37 +00:00
Danny Mayer
3cea35d915 Fix for Win32 High CPU Load 2002-07-31 05:23:44 +00:00
Mark Andrews
31fd8a17fb missing %s in format 2002-07-31 02:22:15 +00:00
Mark Andrews
53f1312c61 1345. [port] Use a explicit -Wformat with gcc. Not all versions
include it in -Wall.
2002-07-31 02:19:07 +00:00
Mark Andrews
7d011946d2 layout (too wide) 2002-07-31 02:10:58 +00:00
Mark Andrews
9344f103f2 8.2.4 has been released 2002-07-30 23:42:31 +00:00
Mark Andrews
e334a3d152 refresh timeouts 2002-07-29 22:47:05 +00:00
Mark Andrews
87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews
1431917c7c 1343. [func] Log successful notifies received (info). Adjust log level
for failed notifies to notice.
2002-07-29 05:15:32 +00:00
Mark Andrews
e809f3fb3f ,->. 2002-07-29 01:37:22 +00:00
Mark Andrews
3733c24efa 1342, [func] Log remote address with TCP dispatch failures. 2002-07-29 01:03:24 +00:00
Mark Andrews
c8b06dc2f9 "make install" failed to install grammar.h and namedconf.h 2002-07-29 00:43:40 +00:00
Mark Andrews
2ee2c1be18 EAI_NODATA is platform dependent. 2002-07-29 00:35:17 +00:00
Mark Andrews
f48695f549 new draft 2002-07-26 21:59:18 +00:00
Mark Andrews
012a2b979e 1341. [func] Allow a rate limiter to be stalled. 2002-07-26 06:42:02 +00:00
Mark Andrews
f6ff008101 1340. [bug] Delay and spread out the startup refresh load. 2002-07-26 06:27:31 +00:00
Mark Andrews
ea6695989c new draft 2002-07-25 14:45:16 +00:00
Mark Andrews
ec3984e9df 1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
lookups.  Bit string lookups are no longer attempted.
2002-07-25 05:46:07 +00:00
Mark Andrews
f462e2f372 remove unused label 2002-07-25 05:16:10 +00:00
Mark Andrews
9443226853 new draft 2002-07-24 22:38:16 +00:00
Mark Andrews
b972ff033b 1338. [func] IPv6 synthesis is now performed for IP6.ARPA bit
string queries.
2002-07-24 11:53:52 +00:00
Mark Andrews
fa4e143801 1337. [func] IPv6 synthesis is now performed for both IP6.ARPA
and IP6.INT nibble queries.
2002-07-24 07:02:50 +00:00
Mark Andrews
f0471ca4b7 1336. [func] Nibble lookups under IP6.ARPA are now supported by
dns_byaddr_create().  dns_byaddr_createptrname() is
                        deprecated, use dns_byaddr_createptrname2() instead.
2002-07-24 06:42:32 +00:00
Michael Graff
3ff40fd173 remove my REALLY old todo list 2002-07-23 22:42:55 +00:00
Mark Andrews
03d337f54a For some zones, querying for a DS record before anything else would SERVFAIL. 2002-07-23 03:41:44 +00:00
Mark Andrews
34c1d0e1b6 For some zones, querying for a non-DS record, then a DS record would
time out and SERVFAIL.
2002-07-23 03:40:19 +00:00
Mark Andrews
edc944d166 Change #1331 (Generate DNSSEC wildcard proofs) contained a memory leak. 2002-07-23 03:33:12 +00:00
Mark Andrews
b907c35b33 still missing changes 2002-07-23 02:04:40 +00:00
Mark Andrews
94323de041 change numbers out of order 2002-07-23 01:27:42 +00:00
Mark Andrews
e412f05a4e spelling 2002-07-22 03:23:11 +00:00
Mark Andrews
638fe804a5 1255. [bug] When performing a nonexistence proof, the validator
should discard parent NXTs from higher in the DNS.
2002-07-22 03:00:49 +00:00
Mark Andrews
9db3d9d14e 1254. [bug] When signing/verifying rdatasets, duplicate rdatas
need to be suppressed.
2002-07-22 02:49:14 +00:00
Mark Andrews
e2cf0e8ff9 1253. [contrib] queryperf now reports a summary of returned
rcodes (-c), rcodes are printed in neumonic form (-v).
2002-07-22 02:47:24 +00:00
Mark Andrews
0b75a2dd3b 1252. [func] Report the current serial with periodic commits when
rolling forward the journal.
2002-07-22 02:06:04 +00:00
Mark Andrews
0f042c7c44 - improves tests of negative insecurity proofs, including tests for the
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
  not important.
- removes the bogus first half of the dynamic zone test, which didn't
  do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
  delegated.
bwelling
2002-07-19 06:20:24 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
0d993c02ba 1250. [bug] When processing events (non-threaded) only allow
the task one chance to use to use its quantum.
2002-07-19 03:39:44 +00:00
Mark Andrews
ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews
0d2dcaf4a5 replaced 2002-07-19 02:26:26 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
2002-07-17 06:09:41 +00:00
Mark Andrews
d196b45738 1248. [bug] The validator could incorrectly verify an invalid
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure
when seeing a bogus signature before a correct
                        signature.
2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews
981e5046e0 max-journal-size is a zone option 2002-07-13 00:53:34 +00:00
Mark Andrews
0996973920 distclean 2002-07-12 01:42:22 +00:00