Evan Hunt
2648c49be7
[master] fix rpz formerr loop
...
4531. [security] Some RPZ configurations could go into an infinite
query loop when encountering responses with TTL=0.
(CVE-2017-3140) [RT #45181 ]
2017-05-30 12:30:28 -07:00
Tinderbox User
a014b329f2
regen master
2017-05-19 01:09:39 +00:00
Evan Hunt
ef9ab10ce0
[master] remove outdated reference to libbind
2017-05-18 15:35:06 -07:00
Tinderbox User
bdf087ba00
regen master
2017-05-12 01:09:53 +00:00
Mark Andrews
d4d73bca79
add warning about semicolon no longer being escaped
2017-05-11 11:02:35 +10:00
Tinderbox User
f9d602f35c
regen master
2017-05-05 01:08:31 +00:00
Evan Hunt
3a554a444c
[master] fix lmdb delzone
...
4616. [bug] When using LMDB, zones deleted using "rndc delzone"
were not correctly removed from the new-zone
database. [RT #45185 ]
2017-05-04 12:32:32 -07:00
Tinderbox User
51da560543
regen master
2017-05-04 01:08:23 +00:00
Mark Andrews
071fe723a1
fix tag mismatch
2017-05-03 11:15:14 +10:00
Evan Hunt
d39ab7440e
[master] automatically tune max-journal-size
...
4613. [func] By default, the maximum size of a zone journal file
is now twice the size of the zone's contents (there
is little benefit to a journal larger than this).
This can be overridden by setting "max-journal-size"
to "unlimited" or to an explicit value up to 2G.
Thanks to Tony Finch. [RT #38324 ]
2017-05-02 13:23:08 -07:00
Tinderbox User
57994a07f7
regen master
2017-04-27 00:43:03 +00:00
Mukund Sivaraman
241b49e611
Set a LMDB mapsize and also provide a config option to control it ( #44954 )
2017-04-26 23:51:26 +05:30
Tinderbox User
c118d16a1c
regen master
2017-04-25 01:06:00 +00:00
Tinderbox User
18b7760b29
update copyright notice / whitespace
2017-04-24 23:45:33 +00:00
Evan Hunt
2dfb992349
[master] new-zones-directory option
...
4610. [func] The "new-zones-directory" option specifies the
location of NZF or NZD files for storing
configuration of zones added by "rndc addzone".
Thanks to Petr Menšík. [RT #44853 ]
2017-04-23 23:16:53 -07:00
Tinderbox User
f5fa655319
regen master
2017-04-23 01:06:11 +00:00
Evan Hunt
3a10cf1f07
[master] add a release note for performance improvements
2017-04-21 21:48:50 -07:00
Mukund Sivaraman
03be5a6b4e
Improve performance for delegation heavy answers and also general query performance ( #44029 )
2017-04-22 09:22:44 +05:30
Evan Hunt
d26ae7fc08
[master] give threads unique names to assist debugging
...
4602. [func] Threads are now set to human-readable
names to assist debugging, when supported by
the OS. [RT #43234 ]
2017-04-21 13:59:40 -07:00
Evan Hunt
f5c39b072c
[master] hex output mode for dnstap-read
...
4594. [func] "dnstap-read -x" prints a hex dump of the wire
format of each logged DNS message. [RT #44816 ]
2017-04-20 20:22:19 -07:00
Tinderbox User
2d863323b6
regen master
2017-04-21 01:05:18 +00:00
Tinderbox User
19643a1ded
regen master
2017-04-13 01:05:08 +00:00
Evan Hunt
52e398c0af
[master] formatting
2017-04-12 14:05:54 -07:00
Tinderbox User
e67fe90a1f
regen master
2017-04-12 01:05:15 +00:00
Tinderbox User
0a1d79ed8f
regen master
2017-03-30 01:05:19 +00:00
Mark Andrews
fe1ad70e51
add CVE-2017-3138
2017-03-30 02:56:33 +11:00
Tinderbox User
38704ecee9
regen master
2017-03-26 01:05:14 +00:00
Evan Hunt
39eb1d0353
[master] host -A
...
4593. [func] "host -A" returns most records for a name but
omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
[RT #43032 ]
2017-03-25 12:49:25 -07:00
Tinderbox User
ecbef65ae5
regen master
2017-03-13 01:05:40 +00:00
Evan Hunt
d2650297ca
[master] tag mismatch
2017-03-10 17:34:01 -08:00
Mark Andrews
786402ec12
fix tag mismatch
2017-03-10 13:05:59 +11:00
Tinderbox User
d2f2db283b
update copyright notice / whitespace
2017-03-09 23:46:23 +00:00
Evan Hunt
612b2e2c0d
[master] timestamp suffixes for log files
...
4579. [func] Logging channels and dnstap output files can now
be configured with a "suffix" option, set to
either "increment" or "timestamp", indicating
whether to use incrementing numbers or timestamps
as the file suffix when rolling over a log file.
[RT #42838 ]
2017-03-08 23:20:40 -08:00
Evan Hunt
aa00b31b17
[master] fix ARM merge error
2017-03-08 22:51:26 -08:00
Tinderbox User
02716f97c1
regen master
2017-03-02 01:05:06 +00:00
Tinderbox User
a06081491c
regen master
2017-02-24 01:04:54 +00:00
Evan Hunt
a1365a0042
[master] remove unnecessary INSIST
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
2017-02-23 14:34:33 -08:00
Tinderbox User
c4dbad7b36
regen master
2017-02-21 01:04:58 +00:00
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Tinderbox User
a32fa1246e
regen master
2017-02-16 01:05:00 +00:00
Mark Andrews
009c98a1be
add CVE-2017-3136 note
...
(cherry picked from commit d77eadc261
2017-02-15 12:45:38 +11:00
Tinderbox User
a95dc83de5
regen master
2017-02-09 01:04:58 +00:00
wpk
96912e44b0
4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability
2017-02-08 22:15:01 +01:00
Evan Hunt
7fcd72f574
[master] mismatched tag
2017-02-07 18:28:40 -08:00
Evan Hunt
ef0ddc8ba3
[master] doc style
2017-02-07 08:18:15 -08:00
Mark Andrews
009aabd2e5
fix tag mismatch
2017-02-07 12:11:45 +11:00
Evan Hunt
c4e4bd6a09
[master] dnstap size and versions options
...
4572. [func] The "dnstap-output" option can now take "size" and
"versions" parameters to indicate the maximum size
a dnstap log file can grow before rolling to a new
file, and how many old files to retain. [RT #44502 ]
2017-02-06 16:34:58 -08:00
Evan Hunt
5b4d6d2ff8
[master] removed extra note about bind.keys update
2017-02-06 14:19:53 -08:00
Tinderbox User
513cec7786
regen master
2017-02-05 01:04:55 +00:00
Evan Hunt
650b5e7592
[master] store local and remote addresses in dnstap
...
4569. [func] Store both local and remote addresses in dnstap
logging, and modify dnstap-read output format to
print them. [RT #43595 ]
2017-02-03 17:05:58 -08:00
