Mark Andrews
ab0bf49203
Adjust default value of "max-recursion-queries"
...
Since the queries sent towards root and TLD servers are now included in
the count (as a result of the fix for CVE-2020-8616),
"max-recursion-queries" has a higher chance of being exceeded by
non-attack queries. Increase its default value from 75 to 100.
2020-12-01 23:47:23 +11:00
Mark Andrews
356243aaec
Add release note for [GL #2315 ]
2020-12-01 10:52:41 +01:00
Mark Andrews
d0dd71380b
Add release note for [GL #2275 ]
2020-11-26 20:48:46 +00:00
Michał Kępień
2011a86881
Set up release notes for BIND 9.17.8
2020-11-26 12:16:49 +01:00
Michał Kępień
3a447d02b4
Prepare release notes for BIND 9.17.7
2020-11-26 12:12:17 +01:00
Michał Kępień
42cf594b37
Add release note for GL #2244
2020-11-26 12:12:17 +01:00
Michał Kępień
563f8a78e9
Add release note for GL #2236
2020-11-26 12:12:17 +01:00
Michał Kępień
572bc05aca
Add release note for GL #1736
2020-11-26 12:12:17 +01:00
Michał Kępień
a4dea3c70c
Reorder release notes
2020-11-26 12:12:17 +01:00
Michał Kępień
59221c4b3b
Tweak and reword release notes
2020-11-26 12:12:17 +01:00
Matthijs Mekking
6b5d7357df
Detect NSEC3 salt collisions
...
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.
This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.
Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.
2020-11-26 10:43:59 +01:00
Matthijs Mekking
9adad77ac3
Add changes and notes for kasp NSEC3 support
...
This feature is news worthy.
2020-11-26 10:43:58 +01:00
Mark Andrews
fbad04a51a
Add release note
2020-11-25 08:25:29 +11:00
Mark Andrews
e980affba0
Fix DNAME when QTYPE is CNAME or ANY
...
The synthesised CNAME is not supposed to be followed when the
QTYPE is CNAME or ANY as the lookup is satisfied by the CNAME
record.
2020-11-19 10:18:01 +11:00
Diego Fronza
b4c997537b
Add CHANGES and release notes entry
2020-11-11 12:53:24 -03:00
Witold Kręcicki
bc19dc84ba
CHANGES note
2020-11-10 14:20:31 +01:00
Evan Hunt
42d94614e4
CHANGES and release notes
2020-11-09 14:50:48 +01:00
Evan Hunt
3ff0ee568d
CHANGES and release note
2020-11-08 13:36:12 -08:00
Witold Kręcicki
cd3117b747
Add CHANGES and release note for GL #2227
2020-10-29 12:34:00 +01:00
Michał Kępień
3e007be912
Set up release notes for BIND 9.17.7
2020-10-22 08:58:55 +02:00
Michał Kępień
2291356b08
Prepare release notes for BIND 9.17.6
2020-10-22 08:54:32 +02:00
Michał Kępień
ef3bd208aa
Reorder release notes
2020-10-22 08:54:32 +02:00
Michał Kępień
65f88149de
Tweak and reword release notes
2020-10-22 08:54:32 +02:00
Michał Kępień
88cb988cc3
Restore release note for GL #2146
2020-10-22 08:54:32 +02:00
Matthijs Mekking
6c5ff94218
Don't increment network error stats on UV_EOF
...
When networking statistics was added to the netmgr (in commit
5234a8e00a6ae1df738020f27544594ccb8d5215), two lines were added that
increment the 'STATID_RECVFAIL' statistic: One if 'uv_read_start'
fails and one at the end of the 'read_cb'. The latter happens
if 'nread < 0'.
According to the libuv documentation, I/O read callbacks (such as for
files and sockets) are passed a parameter 'nread'. If 'nread' is less
than 0, there was an error and 'UV_EOF' is the end of file error, which
you may want to handle differently.
In other words, we should not treat EOF as a RECVFAIL error.
2020-10-20 10:57:16 +02:00
Ondřej Surý
096d41b4e2
Add text describing the changes done in the MR in more detail
2020-10-05 16:21:21 +02:00
Matthijs Mekking
e826facadb
Add rndc dnssec -rollover command
...
This command is similar in arguments as -checkds so refactor the
'named_server_dnssec' function accordingly. The only difference
are that:
- It does not take a "publish" or "withdrawn" argument.
- It requires the key id to be set (add a check to make sure).
Add tests that will trigger rollover immediately and one that
schedules a test in the future.
2020-10-05 10:53:45 +02:00
Matthijs Mekking
d6d41e96a3
Add change and note for #2171
...
This is a bug that needs to be noted.
2020-10-02 09:20:39 +02:00
Ondřej Surý
6179a38810
Add CHANGES and release note for GL #2124
2020-09-29 08:22:09 +02:00
Matthijs Mekking
1728599684
Add notes and CHANGES for #1870
...
This is a new features so it requires a CHANGE and release notes entry.
2020-09-23 16:09:24 +02:00
Ondřej Surý
2869ca1401
Add CHANGES and release note for GL #2166
2020-09-21 10:55:00 +02:00
Michał Kępień
853a51d4a9
Add release note
2020-09-21 09:28:36 +02:00
Michał Kępień
9040f9d63a
Set up release notes for BIND 9.17.6
2020-09-16 22:41:35 +02:00
Michał Kępień
74ac8bf33a
Prepare release notes for BIND 9.17.5
2020-09-16 22:34:05 +02:00
Michał Kępień
c3685f5351
Add release note for OSS-Fuzz fixes
2020-09-16 22:34:05 +02:00
Michał Kępień
b989be60bf
Add release note for GL #2074
2020-09-16 22:34:05 +02:00
Michał Kępień
dbe63c7ae7
Tweak and reword release notes
2020-09-16 22:34:05 +02:00
Michał Kępień
e56e3aeb6a
Add release note for #2146
2020-09-16 11:18:07 +02:00
Evan Hunt
dcee985b7f
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
Mark Andrews
1134f077fd
Add CHANGES and release note for GL #2054
2020-09-02 16:59:10 +02:00
Matthijs Mekking
ff006a1730
Add change entry and release note for #1748
2020-09-02 12:01:22 +02:00
Michal Nowak
10dd78126a
Add CHANGES and release note for GL !4045
2020-09-02 11:08:40 +02:00
Diego Fronza
044a72cca9
Add CHANGES and release note for GL #1847
2020-09-01 15:47:00 -03:00
Ondřej Surý
4722196b13
Add CHANGES and release note for GL #1928
2020-08-28 20:46:34 +02:00
Ondřej Surý
d47d2b3fe0
Add CHANGES and release notes for GL #2104
2020-08-28 16:21:56 +02:00
Evan Hunt
d7362ff16d
BIND 9.17.4
...
-----BEGIN PGP SIGNATURE-----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=JqeM
-----END PGP SIGNATURE-----
Merge tag 'v9_17_4' into main
BIND 9.17.4
2020-08-20 12:05:01 -07:00
Matthijs Mekking
e4c82fc7ae
Add notes for #1613 (rndc dnssec -checkds)
...
This is a new feature that should be mentioned in the notes.
2020-08-07 11:26:09 +02:00
Michał Kępień
e0f394bbc4
Prepare release notes for BIND 9.17.4
2020-08-05 16:02:38 +02:00
Michał Kępień
9d932c6ddc
Add release note for #1976
2020-08-05 16:02:38 +02:00
Michał Kępień
23a60ecd15
Add release note for #1619
2020-08-05 16:02:38 +02:00