mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00
Code Issues Releases Wiki Activity
11,478 Commits 657 Branches 820 Tags
Commit Graph

11478 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Andrews
e2cf0e8ff9 1253. [contrib] queryperf now reports a summary of returned 
rcodes (-c), rcodes are printed in neumonic form (-v).
 2002-07-22 02:47:24 +00:00
Mark Andrews
0b75a2dd3b 1252. [func] Report the current serial with periodic commits when 
rolling forward the journal.
 2002-07-22 02:06:04 +00:00
Mark Andrews
0f042c7c44 - improves tests of negative insecurity proofs, including tests for the 
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
  not important.
- removes the bogus first half of the dynamic zone test, which didn't
  do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
  delegated.
bwelling
 2002-07-19 06:20:24 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
0d993c02ba 1250. [bug] When processing events (non-threaded) only allow 
the task one chance to use to use its quantum.
 2002-07-19 03:39:44 +00:00
Mark Andrews
ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that 
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
 2002-07-19 02:34:58 +00:00
Mark Andrews
0d2dcaf4a5 replaced 2002-07-19 02:26:26 +00:00
Mark Andrews
240a5d160a When returning a delegation from the cache and the DO bit is set, always 
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
 2002-07-17 06:09:41 +00:00
Mark Andrews
d196b45738 1248. [bug] The validator could incorrectly verify an invalid 
negative proof.
 2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid 
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
 2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure 
when seeing a bogus signature before a correct
                        signature.
 2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when 
validation was not being performed. [RT #3284]
 2002-07-15 02:23:58 +00:00
Mark Andrews
981e5046e0 max-journal-size is a zone option 2002-07-13 00:53:34 +00:00
Mark Andrews
0996973920 distclean 2002-07-12 01:42:22 +00:00
Mark Andrews
750a62493d spelling 2002-07-12 00:10:26 +00:00
Mark Andrews
8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
Mark Andrews
bca7f81db5 all references from -m to -j 2002-07-11 05:36:12 +00:00
Mark Andrews
e14e853d86 usage should show -j 2002-07-11 04:50:36 +00:00
Mark Andrews
e9359db5e9 use -j rather than -m to read the journal if it exists. 2002-07-11 04:49:27 +00:00
Mark Andrews
ba06508f01 ISC_MEM_DEBUGRECORD was turned on accidently. 
'm' option was missing from isc_commandline_parse()
 2002-07-11 04:40:07 +00:00
Mark Andrews
614a25ce3c bind9-workers -> bind-workers 2002-07-10 02:47:11 +00:00
Mark Andrews
5d98cf67b3 white space cleanup 2002-07-10 01:13:44 +00:00
Mark Andrews
454c78d02c runt -> short (< header size) 2002-07-10 01:03:14 +00:00
Mark Andrews
358db83645 new draft 2002-07-09 09:47:24 +00:00
Mark Andrews
475fe52dc3 1345. [bug] If the tcpquota was exhausted it was possible to 
to trigger a INSIST() failure.
 2002-07-09 02:41:36 +00:00
Mark Andrews
69ee6250c9 sequence numbers 2002-07-09 01:29:09 +00:00
Mark Andrews
25ae9d2f82 new draft 2002-07-08 01:40:22 +00:00
Mark Andrews
5af560664d 1342. [port] darwin: ifconfig.sh now supports darwin. 2002-07-06 21:54:44 +00:00
Mark Andrews
268c7ef56b don't apply cache-filename to "_bind" view. 2002-07-04 05:03:46 +00:00
Mark Andrews
53f9ddf27c silence pointer mismatch 2002-07-04 04:19:54 +00:00
Mark Andrews
c44a6d2964 regen: 
OSF 5.0: recv/send are only avaliable with -D_POSIX_PII_SOCKET or
-D_XOPEN_SOURCE_EXTENDED.
 2002-07-04 04:06:01 +00:00
Mark Andrews
9fe28a624c OSF 5.0: recv/send are only avaliable with -D_POSIX_PII_SOCKET or 
-D_XOPEN_SOURCE_EXTENDED.
 2002-07-04 04:04:21 +00:00
Mark Andrews
88a44b0542 a tool for fetching new drafts 2002-07-04 00:32:48 +00:00
Mark Andrews
09d3194a7e new draft 2002-07-04 00:30:38 +00:00
Mark Andrews
aa68841bd8 new draft 2002-07-03 14:22:55 +00:00
Mark Andrews
6244f49146 protect clua_context access w/ #ifdef 2002-07-03 06:25:32 +00:00
Mark Andrews
bde4f57271 add RT # 2002-07-03 05:17:51 +00:00
Mark Andrews
0f8f42a09e 1341. [port] linux: Slackware 4.0 needs <asm/unistd.h>. 2002-07-03 05:09:43 +00:00
Mark Andrews
7a2bd9c065 new draft 2002-07-03 03:42:24 +00:00
Mark Andrews
7a1786bec0 new rev 2002-07-03 03:28:10 +00:00
Mark Andrews
6b82bb6ab6 new rev 2002-07-02 23:41:24 +00:00
Mark Andrews
7fd9fd9e4c TRUCLUSTER support: isc_interfaceiter_first() should set clua_context. 2002-07-02 05:51:43 +00:00
Mark Andrews
efc602a78c new rev 2002-07-01 23:45:47 +00:00
Mark Andrews
89251e453b result undeclared, #include <isc/log.h> 2002-07-01 23:00:38 +00:00
Mark Andrews
8d77066ba0 1342. [bug] dnssec-signzone usage message was misleading. 
1341.   [bug]           If the last RRset in a zone is glue, dnssec-signzone
                        would incorrectly duplicate its output and sign it.
 2002-07-01 07:37:38 +00:00
Mark Andrews
3e7b37e01b 1340. [doc] query-source-v6 was missing from options section. 
[RT #3218]
 2002-07-01 02:18:42 +00:00
Mark Andrews
ecf7a18125 isc_modules[2] not isc_modules[3] 2002-07-01 01:39:45 +00:00
Mark Andrews
fe4d3e1992 hpux: ioctl(SIOCGLIFCONF) failure -> debug(1) 2002-07-01 01:08:37 +00:00
Mark Andrews
54532c5413 1339. [func] libbind: log attempts to exploit #1338. 2002-06-28 06:12:42 +00:00