765 Commits

Author	SHA1	Message	Date
Automatic Updater	a30c7003af	update copyright notice	2010-01-07 23:48:54 +00:00
Evan Hunt	597642c0ba	2831. [security] Do not attempt to validate or cache ... out-of-bailiwick data returned with a secure answer; it must be re-fetched from its original source and validated in that context. [RT #20819]	2010-01-07 16:48:23 +00:00
Automatic Updater	fe2b9bf570	update copyright notice	2009-11-18 23:48:07 +00:00
Mark Andrews	a39a5f4d81	2772. [security] When validating, track whether pending data was from ... the additional section or not and only return it if validates as secure. [RT #20438]	2009-11-17 23:55:18 +00:00
Automatic Updater	e34e9a8d68	update copyright notice	2009-11-17 23:48:13 +00:00
Evan Hunt	44a3999cf4	2770. [cleanup] Add log messages to resolver.c to indicate events ... causing FORMERR responses. [RT #20526]	2009-11-17 02:23:15 +00:00
Mark Andrews	0a30185f80	2748. [func] Identify bad answers from GTLD servers and treat them ... as referrals. [RT #18884]	2009-11-04 02:15:30 +00:00
Evan Hunt	5cb44a38d9	back out change 2740	2009-10-28 18:04:29 +00:00
Mark Andrews	e9d45c0a04	2740. [func] Identify bad answers from GTLD servers and treat them ... as referrals. [RT #18884]	2009-10-27 23:05:53 +00:00
Evan Hunt	95f2377b4f	2739. [cleanup] Clean up API for initializing and clearing trust ... anchors for a view. [RT #20211]	2009-10-27 22:46:13 +00:00
Tatuya JINMEI 神明達哉	307d208450	2660. [func] Add a new set of DNS libraries for non-BIND9 ... applications. See README.libdns. [RT #19369]	2009-09-01 00:22:28 +00:00
Mark Andrews	bcd0cbfdae	2649. [bug] Set the domain for forward only zones. [RT #19944]	2009-08-13 04:33:51 +00:00
Mark Andrews	6d5852f318	2623. [bug] Named started seaches for DS non-optimally. [RT #19915]	2009-07-13 06:24:27 +00:00
Automatic Updater	dc0c165ce3	update copyright notice	2009-06-02 23:47:50 +00:00
Mark Andrews	5422cf284f	2605. [bug] Accept DS responses from delegation only zones. ... [RT # 19296]	2009-06-02 05:51:44 +00:00
Automatic Updater	e6ada020f5	update copyright notice	2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉	40d0f115a6	2604. [func] Add support for DNS rebinding attack prevention through ... new options, deny-answer-addresses and deny-answer-aliases. Based on contributed code from JD Nurmi, Google. [RT #18192]	2009-05-29 22:22:37 +00:00
Automatic Updater	cc5f9fe224	update copyright notice	2009-05-11 02:38:35 +00:00
Mark Andrews	8a805c9f41	spelling	2009-05-11 02:30:07 +00:00
Mark Andrews	4c2ed3d141	2599. [bug] Address rapid memory growth when validation fails. ... [RT #19654]	2009-05-11 02:22:03 +00:00
Francis Dupont	ff380b05fe	comment fixes (rt19624)	2009-05-07 09:41:23 +00:00
Evan Hunt	bfe0517fdc	Clarify logged message when an insecure DNSSEC response arrives from a zone ... thought to be secure: "insecurity proof failed" instead of "not insecure". [RT #19400]	2009-03-01 02:45:38 +00:00
Mark Andrews	549e34bbf4	2564. [bug] Only take EDNS fallback steps when processing timeouts. ... [RT #19405]	2009-02-27 23:01:48 +00:00
Mark Andrews	499fa72075	2564. [bug] 'named' was treating a TCP retry as a timeout when ... deciding whether to perform a EDNS fallback step. [RT #19393]	2009-02-25 22:46:05 +00:00
Mark Andrews	45c3c12ed3	2552. [bug] zero-no-soa-ttl-cache was not being honoured. ... [RT #19340]	2009-02-15 23:13:32 +00:00
Tatuya JINMEI 神明達哉	d9059b0c38	2537. [func] Added more statistics counters including those on socket ... I/O events and query RTT histograms. [RT #18802]	2009-01-27 22:30:00 +00:00
Francis Dupont	bdfaef63f5	spelling	2009-01-17 14:59:03 +00:00
Automatic Updater	d7845fc5ba	update copyright notice	2009-01-07 23:47:47 +00:00
Tatuya JINMEI 神明達哉	609f86163a	2525. [func] New logging category "query-errors" to provide detailed ... internal information about query failures, especially about server failures. [RT #19027]	2009-01-07 01:46:40 +00:00
Automatic Updater	5569e7de51	update copyright notice	2009-01-05 23:47:54 +00:00
Tatuya JINMEI 神明達哉	3fb1637c92	trivial comment cleanups (RT#19118)	2009-01-05 23:20:22 +00:00
Mark Andrews	09b45f7b58	2487. [bug] Give TCP connections longer to complete. [RT #18675]	2008-11-07 00:52:34 +00:00
Mark Andrews	2cada19312	align comment w/ code [RT #18833]	2008-11-06 02:20:14 +00:00
Tatuya JINMEI 神明達哉	35378bcc6a	2468. [bug] Resolver could try unreachable servers multiple times. ... [RT #18739]	2008-10-17 21:58:09 +00:00
Mark Andrews	6098d364b6	2448. [func] Add NSEC3 support. [RT #15452]	2008-09-24 02:46:23 +00:00
Mark Andrews	f5662f41e7	2433. [tuning] Set initial timeout to 800ms.	2008-09-04 04:23:43 +00:00
Automatic Updater	e6a6d0778c	update copyright notice	2008-08-22 23:47:17 +00:00
Mark Andrews	a0fb749d0b	adjust log message added by change 2409. [RT #18497]	2008-08-22 05:00:29 +00:00
Evan Hunt	a45f57a2d5	RTT banding. [rt18441]	2008-08-22 04:16:17 +00:00
Mark Andrews	4db36a15c5	2409. [func] Only log that we disabled EDNS processing if we were ... subsequently successful. [RT #18029]	2008-08-06 06:11:15 +00:00
Tatuya JINMEI 神明達哉	72e52e1a03	comment wording	2008-07-24 04:54:44 +00:00
Mark Andrews	9de0f9b0ae	2396. [bug] Don't set SO_REUSEADDR for randomized ports. ... [RT #18336]	2008-07-22 03:43:04 +00:00
Tatuya JINMEI 神明達哉	386d3a99c1	2375. [security] Fully randomize UDP query ports to improve ... forgery resilience. [RT #17949, #18098]	2008-06-23 19:41:20 +00:00
Tatuya JINMEI 神明達哉	0f39ff74a8	2383. [bug] named could double queries when they resulted in ... SERVFAIL due to overkilling EDNS0 failure detection.	2008-06-17 22:35:08 +00:00
Mark Andrews	58253bddc4	2375. [bug] Change #2144 was not complete.	2008-05-29 04:46:32 +00:00
Evan Hunt	69ec1b7eb3	Improve counting of dns_resstatscounter_retry [rt18030]	2008-05-06 01:12:55 +00:00
Tatuya JINMEI 神明達哉	5c024f7877	cleanups for LRU-caching code [RT #18018]	2008-05-01 18:23:07 +00:00
Mark Andrews	ba5af4569a	fix bad NSID/EDNS interaction [RT #17952]	2008-04-10 07:20:11 +00:00
Mark Andrews	375e2c913a	2359. [bug] Fix NSID bug. [RT #17942]	2008-04-07 05:32:52 +00:00
Tatuya JINMEI 神明達哉	eeb8892daa	Global memory context had the wrong name (RT #17932)	2008-04-03 23:14:52 +00:00