Andreas Gustafsson
e3e94dd137
1118. [bug] On multithreaded servers, a race condition
...
could cause an assertion failure in resolver.c
during resolver shutdown. [RT #2029 ]
2001-11-12 18:48:50 +00:00
Andreas Gustafsson
0902c53969
typo in debug message [RT #1989 ]
2001-11-04 19:20:39 +00:00
Andreas Gustafsson
b352902413
1077. [func] Do not accept further recursive clients when
...
the total number of of recursive lookups being
processed exceeds max-recursive-clients, even
if some of the lookups are internally generated.
[RT #1915 , #1938 ]
2001-10-29 19:02:48 +00:00
Mark Andrews
13f2c161db
1039. [bug] We cached an incorrect negative response if there were
...
CNAMES in the answer section. [RT#1862]
2001-10-10 04:11:32 +00:00
Mark Andrews
3fc4c1434d
1037. [bug] We failed to reject some self inconsistant answers.
...
[RT #1862 ]
2001-10-09 08:03:32 +00:00
Mark Andrews
b09f4e054c
1025. [bug] Don't use multicast addresses to resolve iterative
...
queries. [RT #101 ]
2001-10-03 07:43:03 +00:00
Mark Andrews
595a14576e
1013. [bug] It was possible to cancel a query twice when marking
...
a server as bogus or by having a blackhole acl.
[RT #1776 ]
2001-09-21 13:31:55 +00:00
Andreas Gustafsson
67298a4b2f
"data" is plural
2001-09-17 20:24:13 +00:00
Andreas Gustafsson
4a20a92f4f
replaced 994. with alternative fix:
...
994. [func] Treat non-authoritative responses to queries for type
NS as referrals even if the NS records are in the
answer section, because BIND 8 servers incorrectly
send them that way. This is necessary for DNSSEC
validation of the NS records of a secure zone to
succeed when the parent is a BIND 8 server. [RT #1706 ]
2001-09-14 21:04:35 +00:00
Andreas Gustafsson
34aa790937
reverted 994.
2001-09-14 20:53:33 +00:00
Mark Andrews
56d69016f4
994. [bug] If the unsecure proof fails for unsigned NS records
...
attempt a secure proof using the NS records found as
glue to find the NS records from the zone's servers
along with associated glue rather than from parent
servers. [RT #1706 ]
2001-09-13 07:23:39 +00:00
Bob Halley
c54210716e
avoid deadlock with the ADB when shutting down [RT #1324 ]
2001-07-11 01:19:56 +00:00
David Lawrence
92ef1a9b9d
use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land
2001-06-04 19:33:39 +00:00
Brian Wellington
a78196366c
move variable initialization
2001-05-29 23:07:28 +00:00
Brian Wellington
c20ffa38de
808. [func] Add 'rndc flush' to flush the server's cache.
2001-04-11 20:37:50 +00:00
Brian Wellington
6eccf5bd07
788. [feature] Add the "match-mapped-addresses" options, which
...
causes IPv6 v4mapped addresses to be treated as
IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson
b879ed05f4
785. [bug] A race condition in the resolver could cause
...
an assertion failure. [RT #673 , #872 , #1048 ]
2001-03-20 22:13:00 +00:00
Brian Wellington
0d19c777ae
Use a counter instead of a flag to indicate if the resolver is in the
...
process of connecting. There's a possibility that a connect might not
have sent a completion event when another one starts, and this could cause
bad things to happen since the query would only know about one connect.
2001-03-16 21:50:59 +00:00
Brian Wellington
2048bb8c0c
dns_message_parse() cannot return DNS_R_MOREDATA.
2001-03-15 02:00:15 +00:00
Mark Andrews
b01cd0d5c7
Use dns_dispatch_getlocaladdress() to retrieve the local address to bind too.
2001-03-13 05:49:58 +00:00
Andreas Gustafsson
fc04bb9d98
lame server on ... -> lame server resolving ... [RT #641 ]
2001-03-07 18:03:07 +00:00
Brian Wellington
d25dd5b056
770. [func] Add the "edns yes_or_no" statement to the server
...
clause. [RT #524 ]
2001-03-06 23:54:37 +00:00
Brian Wellington
e43b9a2005
move compression context create/delete into the caller of the message
...
rendering functions. This reduces the size of the message object.
2001-03-05 21:15:47 +00:00
Brian Wellington
a0b4d6cf8a
comment style
2001-02-28 21:19:53 +00:00
Andreas Gustafsson
d1cc210d20
RT #927 fix from Bob:
...
759. [bug] The resolver didn't turn off "avoid fetches" mode
when restarting, possibly causing resolution
to fail when it should not. This bug only affected
platforms which support both IPv4 and IPv6. [RT #927 ]
758. [bug] The "avoid fetches" code did not treat negative
cache entries correctly, causing fetches that would
be useful to be avoided. This bug only affected
platforms which support both IPv4 and IPv6. [RT #927 ]
2001-02-28 20:51:22 +00:00
Brian Wellington
36608f2052
When returning from validation, make sure to handle chaiing correctly.
2001-02-21 05:16:44 +00:00
Bob Halley
1e50dad10d
When returning DNS_R_CNAME or DNS_R_DNAME as the result of an ANY or SIG
...
query, the resolver failed to setup the return event's rdatasets, causing an
assertion failure in the query code. [RT #881 ]
The fix includes the addition of the DNS_NAMEATTR_CHAINING attribute,
and the removal of the DNS_NAMEATTR_CNAME and DNS_NAMEATTR_DNAME attributes,
because they were not used anywhere in the current source.
2001-02-19 08:54:54 +00:00
Brian Wellington
3f07549972
comment fix
2001-02-18 21:19:43 +00:00
Andreas Gustafsson
19eee89387
if dns_message_gettempname() failed, we would try to call
...
dns_message_putemprdataset() on an uninitialized pointer
2001-02-17 02:16:14 +00:00
Andreas Gustafsson
97f26b88f6
removed more needless attaching and detaching of the blackhole ACL
2001-02-09 00:23:16 +00:00
Andreas Gustafsson
a349fd680c
removed all code for maintaining a 'goodness' value in the adb,
...
since it was never used and Michael thinks 'it should probably be removed'.
2001-02-09 00:13:55 +00:00
Bob Halley
22457624d3
deal with 0 TTL glue
2001-02-08 19:14:58 +00:00
Bob Halley
d6b3d06db7
Referrals whose NS RRs had a 0 TTL caused the resolver to return
...
DNS_R_SERVFAIL. [RT #783 ]
2001-02-02 00:10:26 +00:00
Brian Wellington
6e8b041d9c
blackholed addresses were mishandled in the resolver.
2001-01-19 22:22:17 +00:00
Andreas Gustafsson
ff7f1dc039
676. [bug] Log messages about lame servers to category
...
'lame-servers' rather than 'resolver', so as not
to be gratuitously incompatible with BIND 8.
2001-01-11 19:38:11 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Bob Halley
75768d5fa2
It was possible to join to an already running fctx
...
after it had "cloned" its events, but before it sent
them. In this case, the event of the newly joined
fetch would not contain the answer, and would
trigger the INSIST() in fctx_sendevents().
[RT #597 , #605 , #607 ]
2001-01-03 20:31:34 +00:00
Brian Wellington
6d5032f9a2
Micro-optimizations:
...
- use the DNS_NAME_INIT macro in name.c
- create dns_name_copy() and use it instead of dns_name_concatenate()
when doing a copy.
2001-01-03 00:05:15 +00:00
Andreas Gustafsson
22dbaf9ad8
647. [bug] Resolver queries sent after following multiple
...
referrals had excessively long retransmission
timeouts due to incorrectly counting the referrals
as "restarts".
2001-01-02 20:46:07 +00:00
Andreas Gustafsson
21931e9334
cleanup of logging code
2001-01-02 18:51:07 +00:00
Andreas Gustafsson
6af9849f74
log message about disabling EDNS0 only once per lookup
2001-01-02 17:59:13 +00:00
Brian Wellington
65a275fb3d
The resolver doesn't need to manually dissect a TSIG and look at the error
...
field, since dns_message_checksig returns an error in that case.
2000-12-29 23:24:32 +00:00
Andreas Gustafsson
7d33e89969
627. [bug] The EDNS0 blackhole detection code of 327. waited
...
for three retransmissions to each server, which
takes much too long when a domain has many name
and all of them drop EDNS0 queries. Now we retry
without EDNS0 after three consecutive timeouts,
even if they are all from different servers.
2000-12-20 23:18:37 +00:00
Brian Wellington
78838d3e0c
8 space -> tab conversion
2000-12-11 19:24:30 +00:00
Mark Andrews
6fda157766
ISC_LINK_*UNSAFE -> ISC_LINK_INITAND*
2000-12-07 20:15:58 +00:00
Bob Halley
59e1a928bc
do not INSIST when restarting with returnlame
2000-11-27 19:56:16 +00:00
Brian Wellington
ef6a36d944
tsig signed queries by the resolver both didn't always work and leaked memory.
2000-11-22 23:16:04 +00:00
Mark Andrews
3fdad8e3bb
adjust is_lame test for same level.
2000-11-15 04:53:06 +00:00
Brian Wellington
78d78f05d9
556. [func] The DNSSEC OK bit in the EDNS extended flags
...
is now implemented. Responses to queries without
this bit set will not contain any DNSSEC records.
2000-11-13 21:34:03 +00:00
Andreas Gustafsson
ae7e8784aa
log messages should not be capitalized
2000-11-11 02:14:50 +00:00