Mark Andrews
3d17a3ba61
2801. [func] Detect and report records that are different according
...
to DNSSEC but are sematically equal according to plain
DNS. Apply plain DNS comparisons rather than DNSSEC
comparisons when processing UPDATE requests.
dnssec-signzone now removes such semantically duplicate
records prior to signing the RRset.
named-checkzone -r {ignore|warn|fail} (default warn)
named-compilezone -r {ignore|warn|fail} (default warn)
named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Automatic Updater
089c63b69c
regen
2009-12-04 01:13:45 +00:00
Evan Hunt
8e4f3f1cbc
2799. [cleanup] Changed the "secure-to-insecure" option to
...
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
to "dnssec-dnskey-kskonly", for clarity. [RT #20586 ]
2009-12-03 23:18:17 +00:00
Automatic Updater
996dbb1957
regen
2009-11-29 01:14:51 +00:00
Vernon Schryver
5d9922e86f
Allow the optional filter-aaaa-on-v4 option in view statements to close #20635
2009-11-28 15:57:37 +00:00
Automatic Updater
b7ce89b8ca
regen
2009-11-26 01:15:25 +00:00
Evan Hunt
bccacfdbf0
corrected rndc sign syntax
2009-11-26 00:20:28 +00:00
Automatic Updater
850853340a
regen
2009-11-18 00:38:26 +00:00
Automatic Updater
3a5fe5abf0
regen
2009-11-11 01:14:42 +00:00
Evan Hunt
f82d52e82d
2759. [doc] Add information about .jbk/.jnw files to
...
the ARM. [RT #20303 ]
2009-11-10 19:49:32 +00:00
Automatic Updater
b3c2030de4
regen
2009-11-07 01:14:41 +00:00
Evan Hunt
8433da5e37
fix misspelling of queryport-pool-updateinterval in options list
2009-11-06 18:54:48 +00:00
Automatic Updater
cd0df9459e
regen
2009-11-06 01:14:51 +00:00
Evan Hunt
2a81568d17
filter-aaaa-on-v4 was listed incorrectly in the options summary.
...
also the configure option which enables it was wrong.
2009-11-05 19:12:13 +00:00
Automatic Updater
b55ce50367
regen
2009-11-05 01:15:15 +00:00
Evan Hunt
515cba20eb
fixed typos
2009-11-04 22:35:08 +00:00
Automatic Updater
64affc54f9
regen
2009-11-03 21:59:04 +00:00
Mark Andrews
9d856845d6
2744. [func] Log if a query was over TCP. [RT #19961 ]
2009-11-03 04:39:41 +00:00
Automatic Updater
b37b0818d8
regen
2009-10-28 18:21:26 +00:00
Automatic Updater
575e15fed9
regen
2009-10-28 01:14:38 +00:00
Automatic Updater
e4adb07cc1
regen
2009-10-27 01:14:46 +00:00
Evan Hunt
c8aa7ce70d
2732. [func] Add optional filter-aaaa-on-v4 option, available
...
if built with './configure --enable-filter-aaaa'.
Filters out AAAA answers to clients connecting
via IPv4. (This is NOT recommended for general
use.) [RT #20339 ]
2009-10-26 23:14:54 +00:00
Automatic Updater
8e821eea5f
regen
2009-10-23 01:14:48 +00:00
Evan Hunt
f10a8fa034
2727. [func] The 'key-directory' option can now specify a relative
...
path. [RT #20154 ]
2009-10-22 03:43:16 +00:00
Evan Hunt
8d307467b7
Doc the "managed-keys.bind" and "managed-keys.bind.jnl" file. [rt20235]
2009-10-22 02:04:07 +00:00
Automatic Updater
02b69ec7f2
regen
2009-10-17 01:24:06 +00:00
Automatic Updater
5a24d24c8f
regen
2009-10-17 01:14:35 +00:00
Automatic Updater
d060d8669f
regen
2009-10-16 04:20:49 +00:00
Evan Hunt
8f7de3db7e
Respinning to fix memory leak in dnssec-signzone. (Also adopting doc changes.)
2009-10-16 02:59:41 +00:00
Automatic Updater
102ccdd2c0
regen
2009-10-15 01:15:23 +00:00
Jeremy Reed
da2c52acae
Add a few missing docbook formatting tags.
...
No content changed. No CHANGES entry added.
2009-10-14 12:49:11 +00:00
Automatic Updater
3b2c6af63e
regen
2009-10-12 23:16:15 +00:00
Evan Hunt
c00929ed9f
additional doc improvement
2009-10-12 23:02:32 +00:00
Evan Hunt
69677f863f
improve doc on update-ksk-check and dnskey-ksk-only
2009-10-12 22:54:54 +00:00
Evan Hunt
77b8f88f14
2712. [func] New 'auto-dnssec' zone option allows zone signing
...
to be fully automated in zones configured for
dynamic DNS. 'auto-dnssec allow;' permits a zone
to be signed by creating keys for it in the
key-directory and using 'rndc sign <zone>'.
'auto-dnssec maintain;' allows that too, plus it
also keeps the zone's DNSSEC keys up to date
according to their timing metadata. [RT #19943 ]
2009-10-12 20:48:12 +00:00
Automatic Updater
8de0d8a690
regen
2009-10-11 01:14:49 +00:00
Evan Hunt
3727725bb7
2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
...
zone option cause a zone to be signed with only KSKs
signing the DNSKEY RRset, not ZSKs. This reduces
the size of a DNSKEY answer. [RT #20340 ]
2009-10-10 01:48:00 +00:00
Automatic Updater
b05106c7e6
regen
2009-10-09 01:14:47 +00:00
Mark Andrews
2847930722
2708. [func] Insecure to secure and NSEC3 parameter changes via
...
update are now fully supported and no longer require
defines to enable. We now no longer overload the
NSEC3PARAM flag field, nor the NSEC OPT bit at the
apex. Secure to insecure changes are controlled by
by the named.conf option 'secure-to-insecure'.
Warning: If you had previously enabled support by
adding defines at compile time to BIND 9.6 you should
ensure that all changes that are in progress have
completed prior to upgrading to BIND 9.7. BIND 9.7
is not backwards compatible.
2009-10-08 23:13:07 +00:00
Automatic Updater
2a6d4c9948
regen
2009-10-07 01:14:42 +00:00
Automatic Updater
8ec3c08523
regen
2009-10-06 01:14:42 +00:00
Evan Hunt
48b6d2f585
2701. [doc] Correction to ARM: hmac-md5 is no longer the only
...
supported TSIG key algorithm. [RT #18046 ]
2009-10-05 01:49:59 +00:00
Automatic Updater
04ecc85ca6
regen
2009-10-04 01:14:58 +00:00
Evan Hunt
1a0eecfe69
2700. [doc] The match-mapped-addresses option is discouraged.
...
[RT #12252 ]
2009-10-03 23:35:28 +00:00
Automatic Updater
66fec05962
regen
2009-09-30 01:14:47 +00:00
Automatic Updater
f3d1a0ba52
regen
2009-09-26 01:14:51 +00:00
Automatic Updater
d2ebd5d5fb
regen
2009-09-19 01:14:52 +00:00
Automatic Updater
f8e3e03cac
regen
2009-09-15 01:14:42 +00:00
Automatic Updater
c7d32c0b0f
regen
2009-09-08 01:14:42 +00:00
Automatic Updater
3e1938b728
commit pdf for 9.7.0a3
2009-09-03 01:25:54 +00:00
