Tinderbox User
0666e6db54
update copyright notice
2014-01-31 23:46:22 +00:00
Evan Hunt
d0803df331
[master] fixed geoip in blackhole ACLs
...
3722. [bug] Using geoip ACLs in a blackhole statement
could cause a segfault. [RT #35272 ]
2014-01-30 17:03:32 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Evan Hunt
501941f0b6
[master] add geoip support
...
3504. [func] Add support for ACLs based on geographic location,
using MaxMind GeoIP databases. Based on code
contributed by Ken Brownfield <kb@slide.com>.
[RT #30681 ]
2013-02-27 17:19:39 -08:00
Tinderbox User
573d78f3d5
update copyright notice
2013-02-21 23:45:56 +00:00
Evan Hunt
df925e6c66
[master] add zone memory context pools
...
3492. [bug] Fixed a regression in zone loading performance
due to lock contention. [RT #30399 ]
2013-02-20 21:39:05 -08:00
Automatic Updater
313b4dc3b2
update copyright notice
2011-06-17 23:47:49 +00:00
Evan Hunt
e7220c9b84
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:05:02 +00:00
Automatic Updater
d362465c77
update copyright notice
2009-01-17 23:47:43 +00:00
Francis Dupont
584848087f
spelling
2009-01-17 14:18:27 +00:00
Mark Andrews
175a8bd2b7
2502. [cleanup] isc_radix: Improve compliance with coding style,
...
document function in <isc/radix.h>. [RT #18534 ]
2008-12-01 00:04:21 +00:00
Automatic Updater
cdbb3d2774
update copyright notice
2008-09-26 23:47:06 +00:00
Evan Hunt
b0bf1ad5b0
2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
...
address, regardless of family. They now correctly
distinguish IPv4 from IPv6. [RT #18559 ]
2008-09-26 21:12:02 +00:00
Evan Hunt
106360491a
address review comment
2008-09-26 16:44:49 +00:00
Evan Hunt
e80f661db8
possible null dereference in dns_acl_isanyornone() [rt18559]
2008-09-12 04:54:39 +00:00
Evan Hunt
aeadcd6319
pull up windows acl leak fix from 9.5.0-P2-W1
2008-09-10 21:52:49 +00:00
Evan Hunt
28ad0be64e
Fix a bug causing dns_acl_isany() to return spurious results [rt18000]
2008-04-29 01:01:42 +00:00
Mark Andrews
1fa2ce7eae
2324. [bug] Fix IPv6 matching against "any;" [RT #17533 ]
2008-01-27 02:13:34 +00:00
Evan Hunt
fc7043d7d1
Used incorrect address family for mapped IPv4 addresses in acl.c. [RT #17519 ]
2008-01-22 05:37:49 +00:00
Automatic Updater
140a27777d
update copyright notice
2008-01-21 23:46:56 +00:00
Evan Hunt
262c39b236
IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462 ]
2008-01-21 20:38:54 +00:00
Automatic Updater
2f012d936b
update copyright notice
2008-01-18 23:46:58 +00:00
Automatic Updater
2f99b54e8e
update copyright notice
2008-01-17 23:47:00 +00:00
Evan Hunt
1aba9fe678
Fix coverity warnings in acl.c and iptable.c [rt17455]
2008-01-17 08:08:08 +00:00
Mark Andrews
114c14f8ad
2282. [bug] Acl code fixups. [RT #17346 ] [RT #17374 ]
2007-12-21 06:46:47 +00:00
Mark Andrews
604419a812
2282. [bug] Acl code fixups. [RT #17346 ]
2007-12-20 01:48:29 +00:00
Mark Andrews
69f3cb5abc
Part 3 of:
...
2233. [func] Add support for O(1) ACL processing, based on
radix tree code originally written by kevin
brintnall. [RT #16288 ]
2007-09-19 03:03:29 +00:00
Mark Andrews
12e0477d4e
Part 2 of:
...
2233. [func] Add support for O(1) ACL processing, based on
radix tree code originally written by kevin
brintnall. [RT #16288 ]
2007-09-14 01:46:06 +00:00
Evan Hunt
c7e266b7e5
Add support for O(1) ACL processing, based on radix tree code originally
...
written by kevin brintnall. [RT #16288 ]
2007-09-12 01:09:08 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
641f68d427
update copyright notice
2006-03-02 00:37:23 +00:00
Mark Andrews
45e1bd6358
1991. [cleanup] The configuration data, once read, should be treated
...
as readonly. Expand the use of const to enforce this
at compile time. [RT #15813 ]
2006-02-28 02:39:52 +00:00
Mark Andrews
18d0b5e54b
1900. [port] freebsd: pthread_mutex_init can fail if it runs out
...
of memory. [RT #14995 ]
2005-07-12 01:00:20 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
dafcb997e3
update copyright notice
2004-03-05 05:14:21 +00:00
Mark Andrews
aa39170da8
1394. [func] It is now possible to check if a particular element is
...
in a acl. Remove duplicate entries from the localnets
acl.
1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
is not available in the kernel to prevent accidently
listening on IPv4 interfaces.
developer: jinmei
reviewer: marka
2002-10-29 04:40:26 +00:00
David Lawrence
fe2d25382f
don't define INADDR_LOOPBACK; isc/net.h should be ensuring it exists
2001-05-31 10:43:37 +00:00
Brian Wellington
6eccf5bd07
788. [feature] Add the "match-mapped-addresses" options, which
...
causes IPv6 v4mapped addresses to be treated as
IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson
aa23a35d81
733. [bug] Reference counts of dns_acl_t objects need to be
...
locked but were not. [RT #801 ]
2001-02-08 23:30:32 +00:00
Andreas Gustafsson
8bb77cd31b
fix RT #660 differently
2001-01-17 17:44:49 +00:00
Brian Wellington
39bb14491f
Negating an unsigned int is a bad idea. Make it an int instead. [RT #660 ]
2001-01-17 02:58:28 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Andreas Gustafsson
9c566a852f
587. [func] A warning is now printed if the "allow-update"
...
option allows updates based on the source IP
address, to alert users to the fact that this
is insecure and becoming increasingly so as
servers capable of update forwarding are being
deployed.
2000-12-01 18:22:17 +00:00
David Lawrence
ba7ea2326d
dns_aclelement_match() returns an isc_boolean_t, but if dns_acl_match()
...
within it returned a result that was not ISC_R_SUCCESS, then that result
code was being returned. Since dns_acl_match() always returns ISC_R_SUCCESS,
the erroneous return was converted into an INSIST().
2000-11-15 22:59:55 +00:00
Andreas Gustafsson
febaa09184
551. [func] Implemented the 'sortlist' option.
2000-11-10 03:16:26 +00:00
Andreas Gustafsson
ea419adc4e
386. [bug] Missing strdup() of ACL name caused random
...
ACL matching failures.
2000-08-11 01:53:47 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00