upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-26 16:47:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
25079 commits 18 branches 854 tags 440 MiB
Commit graph

263 commits

Author SHA1 Message Date
Evan Hunt
e94261f0bc [master] add text clarifying native-pkcs11 2014-02-28 08:10:44 -08:00
Evan Hunt
f6f8819806 [master] clarified "no-case-compress" 2014-02-25 09:55:48 -08:00
Evan Hunt
1736709296 [master] whitespace 2014-02-23 23:22:15 -08:00
Evan Hunt
fdca88d789 [master] update README 2014-02-23 23:21:50 -08:00
Evan Hunt
7adf0928b9 [master] revised previous 2014-02-19 21:13:39 -08:00
Evan Hunt
fc73ba3528 [master] update README 2014-02-19 21:04:28 -08:00
Evan Hunt
d7b9756a21 [master] ENDS client-subnet in dig 
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
 2014-02-19 15:51:02 -08:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Evan Hunt
db955e6f01 [master] add SIT and the new stats counters to README 2014-02-18 22:52:06 -08:00
Evan Hunt
6a3fa181d1 [master] add "--with-tuning=large" option 
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
 2014-02-18 22:36:14 -08:00
Evan Hunt
83d59691e3 [master] update README 2014-02-16 14:34:11 -08:00
Evan Hunt
c922131320 [master] update README 2014-02-06 22:54:38 -08:00
Evan Hunt
09158ff8e4 [master] add description of [contrib] 2014-02-05 14:54:46 -08:00
Evan Hunt
ff0b3538a4 [master] explain [placeholder] 2014-02-05 09:25:19 -08:00
Evan Hunt
9d1f3953d3 [master] clarify some items 2014-01-31 15:32:46 -08:00
Jeremy C. Reed
daa098822e fix misspelling / typos 2014-01-31 10:30:04 -06:00
Evan Hunt
45e74d65bd [master] some items were missing from README 2014-01-30 11:51:53 -08:00
Evan Hunt
ba41a19666 [master] reformat acknowledgements 2014-01-24 09:58:38 -08:00
Evan Hunt
bff64bf12b [master] correct copyrights and attributions 
see RT #35423 for details; highlights:
    - remove license clauses 3 and 4 from NetBSD code
    - remove advertising clause from historical BSD code
    - add openssl advertising attributions
 2014-01-24 09:46:00 -08:00
Evan Hunt
ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Evan Hunt
b751788932 [master] improve prefetch doc 2014-01-13 21:08:20 -08:00
Evan Hunt
3b1b34f762 README formatting 2013-12-11 20:07:25 -08:00
Evan Hunt
f1b1a07eca [master] typo 2013-11-21 18:14:02 -08:00
Evan Hunt
15eb0cb8e1 [master] bump release tag 2013-11-18 16:03:50 -08:00
Evan Hunt
aa4cd84a72 [master] added reference to new RPZ features 2013-09-24 11:04:26 -07:00
Evan Hunt
dc3ac7e79a [master] clarify case preservation feature 2013-09-04 19:30:41 -07:00
Mark Andrews
ca9bf8644a document case sensitive responses 2013-09-05 12:25:59 +10:00
Evan Hunt
0d18225b5e [master] enable threads by default 
3572.	[func]		Threads are now enabled by default on most
			operating systems. [RT #25483]
 2013-05-08 15:57:47 -07:00
Evan Hunt
b99bfa184b [master] unify internal and export libraries 
3550.	[func]		Unified the internal and export versions of the
			BIND libraries, allowing external clients to use
			the same libraries as BIND. [RT #33131]
 2013-04-10 13:49:57 -07:00
Evan Hunt
e08d5f3e3b [master] update README feature list for 9.10.0 2013-03-20 16:44:55 -07:00
Mark Andrews
06a05efc07 3529. [func] Named now listens on both IPv4 and IPv6 interfaces 
by default.  Named previously only listened on IPv4
                        interfaces by default unless named was running in
                        IPv6 only mode.  [RT #32945]
 2013-03-21 10:16:12 +11:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Mark Andrews
c5e2e93f62 add linux kernel version note 2012-05-25 14:47:38 +10:00
Evan Hunt
3e366d0beb nicer release notes URL 2012-02-23 03:53:38 +00:00
Evan Hunt
62714accee add pointer to release notes (ugly URL; should be updated to a pretty one) 2012-02-22 00:55:46 +00:00
Evan Hunt
949eefdda4 prep for 9.9.0rc1 release 2011-12-22 17:49:49 +00:00
Evan Hunt
b375b22fb0 Added documentation of change types. 2011-11-04 22:27:09 +00:00
Evan Hunt
151bab9195 removed the list of new features and known issues from 9.7.0 from 
the 9.9.0 README (one release back seems sufficient).
 2011-11-04 18:16:25 +00:00
Evan Hunt
8496c276b0 update "known good OS's" list based on recent reports 2011-11-03 21:30:34 +00:00
Evan Hunt
923ba8158a add note about 'dig +rrcomments' 2011-10-31 18:03:50 +00:00
Evan Hunt
cb143a725f added a note about locking fixes 2011-10-28 16:54:55 +00:00
Evan Hunt
5f6b9acfe9 imported the list of 9.8.0 new features from the 9.8 README file 2011-10-28 16:37:20 +00:00
Evan Hunt
96b1a311fc updated README with a more complete list of new features (it 
hadn't been touched since 9.9.0a1)
 2011-10-28 16:30:44 +00:00
Evan Hunt
e4c4cf5177 Prepare for release of 9.9.0a1 2011-08-23 02:06:46 +00:00
Mark Andrews
73dbd4e933 9.8.0a1 2010-12-09 04:39:10 +00:00
Evan Hunt
b497531c76 Added HISTORY, put a pointer to it in README. (text changes reviewed by 
Larissa.)
 2010-02-04 23:34:04 +00:00
Evan Hunt
9d86a2e1c1 one more compatibility note 2010-01-21 21:24:03 +00:00
Evan Hunt
77fdd17568 Added new compatibility notes and information about key ID collisions. 2010-01-21 21:11:17 +00:00
Evan Hunt
306b36adb6 - moved NSEC3-NOTES to README.dnssec 
- moved README.idnkit to contrib/idn
 2009-12-04 20:14:28 +00:00
Evan Hunt
af104911b7 missing period in a sentence 2009-11-02 20:04:39 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-08 23:13:07 +00:00
Evan Hunt
a88f8c2dd1 update README for 9.7.0b1 release 2009-10-05 22:02:44 +00:00
Evan Hunt
0e4fda8862 typo fix 2009-09-15 19:30:28 +00:00
Evan Hunt
523598fafa - update README for a3 release 
- update README.rfc5011 to remove info now in the ARM, and to add
  smart-signing info
 2009-09-08 16:33:01 +00:00
Evan Hunt
d699672160 Initial prep for 9.7.0a3 release. 2009-09-02 06:41:31 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the 
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
 2009-07-19 04:18:05 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to 
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
 2009-06-17 06:51:44 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build 
- began versioning for 9.7.0a1
 2009-06-12 02:33:21 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Mark Andrews
e80b693272 2539. [security] Update the interaction between recursion, allow-query, 
allow-query-cache and allow-recursion.  [RT #19198]
 2009-01-30 03:48:54 +00:00
Tatuya JINMEI 神明達哉
492df05874 added new features for 9.7.0 so that they won't be forgotten (we can remove 
them later if they are considered minor details).
 2009-01-10 03:02:37 +00:00
Jeremy Reed
df6663c900 Add another NetBSD version. (I use that.) 
These lists of operating systems and versions need to be updated
-- working on that in bugs ticket 16378.
 2008-12-19 18:22:37 +00:00
Tatuya JINMEI 神明達哉
35726c4745 wording consistency 2008-11-08 22:44:10 +00:00
Tatuya JINMEI 神明達哉
f99fd90097 2489. [port] solaris: Workaround Solaris's kernel bug about 
/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]
 2008-11-08 22:35:12 +00:00
Mark Andrews
f6f1672b4e 2486. [func] The default locations for named.pid and lwresd.pid 
are now /var/run/named/named.pid and
                        /var/run/lwresd/lwresd.pid respectively.

                        This allows the owner of the containing directory
                        to be set, for "named -u" support, and allows there
                        to be a permanent symbolic link in the path, for
                        "named -t" support.  [RT #18306]
 2008-11-06 05:30:24 +00:00
Mark Andrews
831fb092e8 named-checkzone defaults 2008-10-24 00:52:49 +00:00
Mark Andrews
e2a24b6e79 document --enable-largefile 2008-10-14 03:33:01 +00:00
Evan Hunt
711f3ea3e3 remove "NSID support" from 9.6.0 features 2008-09-25 22:12:59 +00:00
Mark Andrews
bcfb2cead5 update 2008-09-25 04:30:42 +00:00
Evan Hunt
6cdaeb94d4 Moved libbind out as a separate product. 2008-09-24 04:16:53 +00:00
Evan Hunt
ce24920229 Further updates to README to clarify the situation with Windows builds. 2008-09-12 06:10:03 +00:00
Mark Andrews
d07e6bc6a6 update libtool and sunos4 2008-07-15 14:44:48 +00:00
Evan Hunt
767c53c304 Document changes to "rrset-order fixed" [rt17977] 2008-05-06 01:09:00 +00:00
Tatuya JINMEI 神明達哉
2fff8b8280 bind8-compat statistics updates 2008-04-09 22:48:17 +00:00
Mark Andrews
0f3264c8d1 2335. [port] sunos: libbind and *printf() support for long long. 
[RT #17513]
 2008-02-18 03:50:46 +00:00
Evan Hunt
9c114f36da Fix typo, "documention"->"documentation" 2008-01-29 19:53:34 +00:00
Jonathan Casey
0bdc099a35 Updating build list of OSes from both staff and recent community reports. 2007-11-14 16:36:56 +00:00
Evan Hunt
ffc65cc90d Updated for 9.5.0a7 2007-10-19 17:52:33 +00:00
Evan Hunt
19bcb91965 Release 9.5.0a7 2007-09-27 02:56:01 +00:00
Mark Andrews
9ab3b369d9 use "if set, otherwise" for allow-query-set 2007-09-06 01:39:05 +00:00
Mark Andrews
772069cf5a update allow-query-cache description 2007-09-06 01:32:41 +00:00
Mark Andrews
65085946d4 2162. [func] Allow "rrset-order fixed" to be disabled at compile 
time. [RT #16665]
: ----------------------------------------------------------------------
 2007-03-14 05:57:10 +00:00
Mark Andrews
5a8bebe00d 9.5.0a1 2006-12-22 03:07:29 +00:00
Mark Andrews
4a5fe00122 sunos 4 and --with-libtool 2006-06-14 04:00:10 +00:00
Mark Andrews
bce4c27420 OpenBSD 2006-06-06 00:17:12 +00:00
Mark Andrews
118394ef2e 1956. [bug] Improve cross compile support, 'gen' is now built 
by native compiler.  See README for additional
                        cross compile support information. [RT #15148]
 2006-01-05 00:30:34 +00:00
Mark Andrews
05d32f6b0f 1951. [security] Drop queries from particular well known ports. 
Don't return FORMERR to queries from particular
                        well known ports.  [RT #15636]
 2006-01-04 05:06:10 +00:00
Mark Andrews
309a3b5808 include 9.4 2005-12-06 02:24:28 +00:00
Mark Andrews
f829b1f42a Mac OS X 10.3.8 2005-04-05 03:04:02 +00:00
Mark Andrews
673b53417f Irix, MipsPRO 7.4.1m not 7.3.1m 2005-03-31 04:22:31 +00:00
Mark Andrews
260be76e8e Irix, MipsPRO 7.3.1m is known to cause problems. 2005-03-30 23:55:52 +00:00
Mark Andrews
cc4eef2a53 gcc-3.3.5 powerpc generates incorrect code at -02 2005-02-02 05:05:16 +00:00
Mark Andrews
3b71206de9 update to reflect current lab platforms 2004-08-20 05:57:05 +00:00
Mark Andrews
9f7d51ee32 1688. [bug] LDFLAGS was not supported. 2004-07-20 07:13:43 +00:00
Mark Andrews
8d0d941054 bind9-users -> bind-users 2004-06-08 00:17:09 +00:00
Mark Andrews
1ae75c1024 1609. [func] dig now has support to chase DNSSEC signature chains. 
Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
 2004-04-13 02:39:35 +00:00
Mark Andrews
1676408640 pullup silence compiler fixes 
ifconfig.sh for Solaris 9
README updates
 2004-03-18 02:58:08 +00:00
Mark Andrews
438e3090de update list archive url 2004-03-09 04:19:16 +00:00
Mark Andrews
4d1ade9343 gcc ultrasparc update 2003-03-25 23:28:13 +00:00