Evan Hunt
bf05e66bb3
[master] prevent reload failure due to LMDB database perms
...
4638. [bug] Reloading or reconfiguring named could fail on
some platforms when LMDB was in use. [RT #45203 ]
2017-06-13 10:15:34 -07:00
Evan Hunt
0471530aae
[master] nsec3hash -r
...
4637. [func] "nsec3hash -r" option ("rdata order") takes arguments
in the same order as they appear in NSEC3 or
NSEC3PARAM records, so that NSEC3 parameters can
be cut and pasted from an existing record. Thanks
to Tony Finch for the contribution. [RT #45183 ]
2017-06-13 00:39:10 -07:00
Tinderbox User
d37d9a6873
regen master
2017-05-31 01:08:13 +00:00
Evan Hunt
967a3b9419
[master] quote service registry paths
...
4532. [security] The BIND installer on Windows used an unquoted
service path, which can enable privilege escalation.
(CVE-2017-3141) [RT #45229 ]
2017-05-30 13:35:59 -07:00
Evan Hunt
2648c49be7
[master] fix rpz formerr loop
...
4531. [security] Some RPZ configurations could go into an infinite
query loop when encountering responses with TTL=0.
(CVE-2017-3140) [RT #45181 ]
2017-05-30 12:30:28 -07:00
Tinderbox User
a014b329f2
regen master
2017-05-19 01:09:39 +00:00
Evan Hunt
ef9ab10ce0
[master] remove outdated reference to libbind
2017-05-18 15:35:06 -07:00
Tinderbox User
bdf087ba00
regen master
2017-05-12 01:09:53 +00:00
Mark Andrews
d4d73bca79
add warning about semicolon no longer being escaped
2017-05-11 11:02:35 +10:00
Tinderbox User
f9d602f35c
regen master
2017-05-05 01:08:31 +00:00
Evan Hunt
3a554a444c
[master] fix lmdb delzone
...
4616. [bug] When using LMDB, zones deleted using "rndc delzone"
were not correctly removed from the new-zone
database. [RT #45185 ]
2017-05-04 12:32:32 -07:00
Tinderbox User
51da560543
regen master
2017-05-04 01:08:23 +00:00
Mark Andrews
071fe723a1
fix tag mismatch
2017-05-03 11:15:14 +10:00
Evan Hunt
d39ab7440e
[master] automatically tune max-journal-size
...
4613. [func] By default, the maximum size of a zone journal file
is now twice the size of the zone's contents (there
is little benefit to a journal larger than this).
This can be overridden by setting "max-journal-size"
to "unlimited" or to an explicit value up to 2G.
Thanks to Tony Finch. [RT #38324 ]
2017-05-02 13:23:08 -07:00
Evan Hunt
a7dc84cd4b
[master] change markdown comment style for pandoc
2017-04-27 23:43:44 -07:00
Tinderbox User
57994a07f7
regen master
2017-04-27 00:43:03 +00:00
Mukund Sivaraman
241b49e611
Set a LMDB mapsize and also provide a config option to control it ( #44954 )
2017-04-26 23:51:26 +05:30
Tinderbox User
c118d16a1c
regen master
2017-04-25 01:06:00 +00:00
Tinderbox User
18b7760b29
update copyright notice / whitespace
2017-04-24 23:45:33 +00:00
Evan Hunt
2dfb992349
[master] new-zones-directory option
...
4610. [func] The "new-zones-directory" option specifies the
location of NZF or NZD files for storing
configuration of zones added by "rndc addzone".
Thanks to Petr Menšík. [RT #44853 ]
2017-04-23 23:16:53 -07:00
Evan Hunt
6ce8a05f6c
[master] update copyrights that had been missed recently
2017-04-23 17:06:00 -07:00
Tinderbox User
f5fa655319
regen master
2017-04-23 01:06:11 +00:00
Tinderbox User
1f6505a424
update copyright notice / whitespace
2017-04-22 23:45:41 +00:00
Evan Hunt
3a10cf1f07
[master] add a release note for performance improvements
2017-04-21 21:48:50 -07:00
Mukund Sivaraman
03be5a6b4e
Improve performance for delegation heavy answers and also general query performance ( #44029 )
2017-04-22 09:22:44 +05:30
Evan Hunt
8a28d9f1d4
[master] auto-generate named.conf.docbook
...
4603. [doc] Automatically generate named.conf(5) man page
from doc/misc/options. Thanks to Tony Finch.
[RT #43525 ]
2017-04-21 16:27:56 -07:00
Evan Hunt
d26ae7fc08
[master] give threads unique names to assist debugging
...
4602. [func] Threads are now set to human-readable
names to assist debugging, when supported by
the OS. [RT #43234 ]
2017-04-21 13:59:40 -07:00
Evan Hunt
f5c39b072c
[master] hex output mode for dnstap-read
...
4594. [func] "dnstap-read -x" prints a hex dump of the wire
format of each logged DNS message. [RT #44816 ]
2017-04-20 20:22:19 -07:00
Evan Hunt
95f7e98da0
[master] update README, remove FAQ
...
4593. [doc] Update README using markdown, remove outdated FAQ
file in favor of the knowledge base.
2017-04-20 19:21:54 -07:00
Tinderbox User
2d863323b6
regen master
2017-04-21 01:05:18 +00:00
Tinderbox User
19643a1ded
regen master
2017-04-13 01:05:08 +00:00
Evan Hunt
52e398c0af
[master] formatting
2017-04-12 14:05:54 -07:00
Tinderbox User
e67fe90a1f
regen master
2017-04-12 01:05:15 +00:00
Tinderbox User
0a1d79ed8f
regen master
2017-03-30 01:05:19 +00:00
Mark Andrews
fe1ad70e51
add CVE-2017-3138
2017-03-30 02:56:33 +11:00
Tinderbox User
38704ecee9
regen master
2017-03-26 01:05:14 +00:00
Evan Hunt
39eb1d0353
[master] host -A
...
4593. [func] "host -A" returns most records for a name but
omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
[RT #43032 ]
2017-03-25 12:49:25 -07:00
Tinderbox User
ecbef65ae5
regen master
2017-03-13 01:05:40 +00:00
Evan Hunt
d2650297ca
[master] tag mismatch
2017-03-10 17:34:01 -08:00
Mark Andrews
786402ec12
fix tag mismatch
2017-03-10 13:05:59 +11:00
Tinderbox User
d2f2db283b
update copyright notice / whitespace
2017-03-09 23:46:23 +00:00
Evan Hunt
612b2e2c0d
[master] timestamp suffixes for log files
...
4579. [func] Logging channels and dnstap output files can now
be configured with a "suffix" option, set to
either "increment" or "timestamp", indicating
whether to use incrementing numbers or timestamps
as the file suffix when rolling over a log file.
[RT #42838 ]
2017-03-08 23:20:40 -08:00
Evan Hunt
aa00b31b17
[master] fix ARM merge error
2017-03-08 22:51:26 -08:00
Tinderbox User
02716f97c1
regen master
2017-03-02 01:05:06 +00:00
Tinderbox User
a06081491c
regen master
2017-02-24 01:04:54 +00:00
Evan Hunt
a1365a0042
[master] remove unnecessary INSIST
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
2017-02-23 14:34:33 -08:00
Tinderbox User
c4dbad7b36
regen master
2017-02-21 01:04:58 +00:00
Witold Krecicki
fa9b4de716
4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449 ]
2017-02-20 11:57:28 +01:00
Tinderbox User
a32fa1246e
regen master
2017-02-16 01:05:00 +00:00
Mark Andrews
009c98a1be
add CVE-2017-3136 note
...
(cherry picked from commit d77eadc26113486f32fea25320ae4c6f1f2e7fb2)
2017-02-15 12:45:38 +11:00
