upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-01 21:10:55 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
25079 commits 18 branches 854 tags 440 MiB
Commit graph

7766 commits

Author SHA1 Message Date
Tinderbox User
3241ddcf93 regen master 2016-04-30 01:05:59 +00:00
Tinderbox User
21635968f7 update copyright notice / whitespace 2016-04-29 23:45:42 +00:00
Evan Hunt
470af54b4e [master] more python2/3 compatibility fixes; use setup.py to install 2016-04-29 14:40:45 -07:00
Evan Hunt
304d16f08f [master] address some python2/3 incompatibilities 2016-04-29 10:38:35 -07:00
Tinderbox User
17e9d6023e Add .8 and .html files for dnssec-keymgr 2016-04-29 16:42:23 +00:00
Evan Hunt
90c7806bb6 [master] remove gnu make dependency 2016-04-29 09:36:36 -07:00
Evan Hunt
a27dc50157 [master] copyrights 2016-04-28 22:30:53 -07:00
Mark Andrews
86f221492f alphabetize 2016-04-29 13:10:26 +10:00
Mark Andrews
48bf87ba83 4351. [bug] 'dig +noignore' didn't work. [RT #42273] 2016-04-29 12:41:02 +10:00
Mark Andrews
cf69e3d8b2 alphabetize host options 2016-04-29 11:21:49 +10:00
Tinderbox User
aa70afe5c1 update copyright notice / whitespace 2016-04-28 23:45:37 +00:00
Evan Hunt
f6096b958c [master] dnssec-keymgr 
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
 2016-04-28 00:16:01 -07:00
Evan Hunt
5ecfee97ba [master] copyrights 2016-04-14 19:12:13 -07:00
Evan Hunt
3cd204c4a4 [master] fixed revoked key regression 
4436.	[bug]		Fixed a regression introduced in change #4337 which
			caused signed domains with revoked KSKs to fail
			validation. [RT #42147]
 2016-04-14 18:52:52 -07:00
Mark Andrews
7f79448198 remove unnecessary return 2016-04-08 04:24:47 +10:00
Tinderbox User
a0132868d1 update copyright notice / whitespace 2016-03-25 23:45:16 +00:00
Mark Andrews
42f6b7a890 add mdig.exe; fix typo in isc-hmac-fixup.exe 2016-03-26 09:07:54 +11:00
Evan Hunt
4a5f5c4ce1 [master] install mdig to bin not sbin 2016-03-25 09:52:00 -07:00
Tinderbox User
c19f42a378 update copyright notice / whitespace 2016-03-24 23:45:21 +00:00
Tinderbox User
e285c11870 regen master 2016-03-24 01:05:08 +00:00
Mark Andrews
6214c3c93a 4341. [bug] 'rndc flushtree' could fail to clean the tree if there 
wasn't a node at the specified name. [RT #41846]
 2016-03-24 11:31:25 +11:00
Tinderbox User
a63461cc4b update copyright notice / whitespace 2016-03-23 23:45:22 +00:00
Evan Hunt
7fa4c18451 [master] ECS family 0 handling was still broken 2016-03-23 15:00:30 -07:00
Evan Hunt
05b7b63f17 [master] more ECS handling fixes 2016-03-23 09:59:42 -07:00
Evan Hunt
395e6865d5 [master] fix ECS with family==0 
4341.	[bug]		Correct the handling of ECS options with
			address family 0. [RT #41377]
 2016-03-23 08:54:46 -07:00
Evan Hunt
d82b18a552 [master] fix uiAccess for win64 build 2016-03-22 17:28:12 -07:00
Evan Hunt
ddf3342cca [master] test pipelining with mdig 
4339.	[test]		Use "mdig" to test pipelined queries. [RT #41929]
 2016-03-22 17:26:38 -07:00
Evan Hunt
132a571179 [master] fix mkeys TTL 0 issue 
4337.	[bug]		The previous change exposed a latent flaw in
			key refresh queries for managed-keys when
			a cached DNSKEY had TTL 0. [RT #41986]
 2016-03-22 12:12:32 -07:00
Tinderbox User
27def92931 update copyright notice / whitespace 2016-03-21 23:45:22 +00:00
Mark Andrews
0993cd5f22 4336. [bug] Don't emit records with zero ttl unless the records 
were learnt with a zero ttl. [RT #41687]
 2016-03-21 13:22:21 +11:00
Mark Andrews
b8dcc13bc5 4335. [bug] zone->view could be detached too early. [RT #41942] 2016-03-21 12:02:00 +11:00
Tinderbox User
b1aac28027 update copyright notice / whitespace 2016-03-16 23:45:17 +00:00
Jeremy C. Reed
e12c78ebf6 add comments about why the configuration is bad 
I didn't get review. This is trivial.
 2016-03-16 15:42:56 -04:00
Mark Andrews
756c643330 4334. [func] 'named -V' now reports zlib version. [RT #41913] 2016-03-13 07:48:11 +11:00
Jeremy C. Reed
81780ffd74 use -r $RANDFILE for test using keygen 
stops hang
this is for ticket #41898
 2016-03-11 09:27:15 -05:00
Tinderbox User
4a7004f3ce update copyright notice / whitespace 2016-03-10 23:45:16 +00:00
Mark Andrews
7c52595464 4331. [func] When loading managed signed zones detect if the 
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]
 2016-03-10 17:01:08 +11:00
Tinderbox User
1fb011b1db regen master 2016-03-08 22:35:32 +00:00
Tinderbox User
2cc103828e update copyright notice / whitespace 2016-03-08 22:29:11 +00:00
Mark Andrews
1188aa3010 add automatic-interface-scan to ARM grammar 2016-03-09 09:00:07 +11:00
Mark Andrews
93ca5ee4c4 update copyrights 2016-03-08 16:21:19 +11:00
Mark Andrews
d6357f09aa 4329. [func] Warn about a common misconfiguration when forwarding 
RFC 1918 zones. [RT #41441]
 2016-03-08 10:11:23 +11:00
Tinderbox User
220ba6da87 update copyright notice / whitespace 2016-03-04 23:45:23 +00:00
Mark Andrews
8398f00156 4326. [protocol] Add support for AVC. [RT #41819 2016-03-04 18:11:41 +11:00
Mukund Sivaraman
9da98335c1 Code cleanups (#41656) 2016-03-04 12:18:17 +05:30
Evan Hunt
023ba1e6ef [master] add OS details to rndc status 
4325.	[func]		Add a line to "rndc status" indicating the
			hostname and operating system details. [RT #41610]
 2016-03-03 22:02:52 -08:00
Tinderbox User
f254ab049e update copyright notice / whitespace 2016-03-02 23:45:17 +00:00
Mark Andrews
ce7216c40a 4223. [bug] Improve HTTP header processing on statschannel. 
[RT #41674]
 2016-03-02 11:04:59 +11:00
Mark Andrews
455c0848f8 4322. [security] Duplicate EDNS COOKIE options in a response could 
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]
 2016-02-27 11:23:50 +11:00
Mark Andrews
7f514657e2 update copyrights 2016-02-25 10:55:40 +11:00
Mark Andrews
f9da4a8e54 4321. [bug] Zones using mapped files containing out-of-zone data 
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]
 2016-02-24 11:13:24 +11:00
Tinderbox User
62735fcde3 update copyright notice / whitespace 2016-02-23 23:45:35 +00:00
Mukund Sivaraman
293a9e9978 Fix allocation for "none" ACL that caused assertion failure (#41745) 2016-02-23 12:51:34 +05:30
Mark Andrews
a125381c60 update usage 2016-02-23 16:57:02 +11:00
Tinderbox User
27424c351d update copyright notice / whitespace 2016-02-20 23:45:16 +00:00
Mark Andrews
c968a257c1 fix subnet prefix 2016-02-20 12:01:30 +11:00
Tinderbox User
53ba272721 update copyright notice / whitespace 2016-02-18 23:45:32 +00:00
Mark Andrews
a2b15b3305 4318. [security] Malformed control messages can trigger assertions 
in named and rndc. (CVE-2016-1285) [RT #41666]
 2016-02-18 12:11:27 +11:00
Mark Andrews
37176663e0 don't used class in grep e.g. [:space:] 2016-02-17 13:17:40 +11:00
Evan Hunt
93c211afc9 [master] fixed a regression in dyndb due to change #4277 2016-02-12 00:22:45 -08:00
Tinderbox User
6632721990 regen master 2016-02-12 01:04:18 +00:00
Tinderbox User
ee2e5fec65 regen master 2016-02-11 01:04:20 +00:00
Mark Andrews
b91d11bfcc copyrights / whitespace 2016-02-11 10:44:21 +11:00
Evan Hunt
23733a9412 [master] misplaced <varlistentry> 2016-02-09 17:11:26 -08:00
Mukund Sivaraman
79a55d4f4d Add option to tools to print RRs in unknown presentation format (#41595) 2016-02-09 15:39:02 +05:30
Mukund Sivaraman
0c29904b27 Check that configured view class isn't a meta class (#41572) 2016-02-08 13:58:01 +05:30
Mark Andrews
08913705e9 specify what to copy 
(cherry picked from commit 88624c9c32)
 2016-02-05 13:54:47 +11:00
Mark Andrews
68ecf1c9a5 add missing line break 2016-02-04 11:51:44 +11:00
Mark Andrews
d88ba93712 4313. [bug] Handle ns_client_replace failures in test mode. 
[RT #41190]
 2016-02-03 14:59:19 +11:00
Tinderbox User
d83a9a980a update copyright notice / whitespace 2016-02-02 23:45:23 +00:00
Mukund Sivaraman
f9b167290a Remove 45 second sleeps from notify system test (#41248) 
No CHANGES entry required.
 2016-02-02 09:46:57 +05:30
Mark Andrews
8d00c5ab2c 4312. [bug] dig's unknown dns and edns flags (MBZ value) logging 
was not consistent. [RT #41600]
 2016-02-02 14:19:22 +11:00
Mark Andrews
e370cdf4ba capture rndc output 
(cherry picked from commit 2d58f4aee2)
 2016-02-02 12:26:23 +11:00
Tinderbox User
8b074bef0c update copyright notice / whitespace 2016-02-01 23:45:25 +00:00
Evan Hunt
ec450fde7c [master] disallow delzone on policiy zones 
4311.	[bug]		Prevent "rndc delzone" from being used on
			response-policy zones. [RT #41593]
 2016-02-01 09:49:49 -08:00
Tinderbox User
3947e3625a update copyright notice / whitespace 2016-01-31 23:45:23 +00:00
Evan Hunt
1d36ed108a [master] spelling 2016-01-31 09:54:13 -08:00
Tinderbox User
5f4f7c688e update copyright notice / whitespace 2016-01-30 23:45:23 +00:00
Evan Hunt
f02c22d58a [master] add uname data to named -V 
4308.	[func]		Added operating system details to "named -V"
			output. [RT #41452]
 2016-01-30 11:06:58 -08:00
Evan Hunt
df9a49ee07 [master] dig/mdig could send misformatted ECS options 
4307.	[bug]		"dig +subnet" and "mdig +subnet" could send
			incorrectly-formatted Client Subnet options
			if the prefix length was not divisble by 8.
			Also fixed a memory leak in "mdig". [RT #45178]
 2016-01-29 17:41:29 -08:00
Tinderbox User
6825f304c5 regen master 2016-01-29 01:04:18 +00:00
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Evan Hunt
e073205a88 [master] openssl 1.0.2f patch 
4306.	[maint]		Added a PKCS#11 openssl patch supporting
			version 1.0.2f [RT #38312]
 2016-01-28 13:27:29 -08:00
Mark Andrews
832ab79d1f 4305. [bug] dnssec-signzone was not removing unnecessary rrsigs 
from the zone's apex. [RT #41483]
 2016-01-28 15:42:34 +11:00
Mark Andrews
9d85a77382 4304. [port] xfer system test failed as 'tail -n +value' is not 
portable. [RT #41315]
 2016-01-28 15:38:06 +11:00
Evan Hunt
8ede7a974b [master] fix dig=+subnet zero-length prefix 
4303.	[bug]		"dig +subnet" was unable to send a prefix length of
			zero, as it was incorrectly changed to 32 for v4
			prefixes or 128 for v6 prefixes. In addition to
			fixing this, "dig +subnet=0" has been added as a
			short form for 0.0.0.0/0. The same changes have
			also been made in "mdig". [RT #41553]
 2016-01-27 19:03:54 -08:00
Evan Hunt
30370d905e [master] removed /Gy- from VS project files 
4302.	[port]		win32: fixed a build error in VS 2015. [RT #41426]
 2016-01-27 15:27:57 -08:00
Tinderbox User
4df65ccfec update copyright notice / whitespace 2016-01-25 23:45:24 +00:00
Mark Andrews
9478de25bb 4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534] 2016-01-26 00:27:44 +11:00
Mark Andrews
f8432e3f24 4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534] 2016-01-26 00:09:03 +11:00
Mark Andrews
1fe6b74b9c use 0 not ISC_FALSE for dns_name_fromtext 2016-01-25 16:55:02 +11:00
Tinderbox User
c46ac73c8f update copyright notice / whitespace 2016-01-22 23:45:23 +00:00
Evan Hunt
630b2d0c5a [master] NOSETFC incorrectly applied 
4300.	[bug]		A flag could be set in the wrong field when setting
			up nonrecursive queries; this could cause the
			SERVFAIL cache to cache responses it shouldn't.
			New querytrace logging has been added which
			identified this error. [RT #41155]
 2016-01-22 13:58:11 -08:00
Tinderbox User
7d4f45f6bd update copyright notice / whitespace 2016-01-21 23:45:23 +00:00
Evan Hunt
9b789c54f8 [master] add regression test for RT #41518 
4297.	[test]		Ensure delegations in RPZ zones fail robustly.
			[RT #41518]
 2016-01-20 17:44:11 -08:00
Evan Hunt
d40154cab7 [master] cacluate TCP packet sizes correctly 
4296.	[bug]		TCP packet sizes were calculated incorrectly in the
			stats channel; they could be counted in the wrong
			histogram bucket. [RT #40587]
 2016-01-20 17:30:27 -08:00
Tinderbox User
b3378292d0 update copyright notice / whitespace 2016-01-20 23:45:22 +00:00
Evan Hunt
6bd794171f [master] fixed rndc stop -p 
4294.	[bug]		Fixed a regression in which "rndc stop -p" failed
			to print the PID. [RT #41513]
 2016-01-20 09:53:26 -08:00
Tinderbox User
16201b15a6 update copyright notice / whitespace 2016-01-17 23:45:21 +00:00
Curtis Blackburn
3948d9c7c6 rrl test was failing on some systems because not all versions of perl understand '-E'. changed to '-e' 2016-01-15 14:35:12 -08:00
Curtis Blackburn
a66619fe32 [rt39196] Added a new nameserver to test rrl "log-only yes". 
Added test for RT #39197. Made the rrl test more
              tolerant of minor differences in results due to
              timing. Removed the failure override for the rrl
              test.

commit 01a15bc80ef4c20171ddfe9b5ceb2ebe008c8e0d
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Dec 15 15:08:03 2015 -0800

    added a new nameserver to the rrl test
 2016-01-11 19:37:17 -08:00
Evan Hunt
bb5d14d724 [master] millisecond granularity for statschannel timers 
4290.	[func]		The timers returned by the statistics channel
			(indicating current time, server boot time, and
			most recent reconfiguration time) are now reported
			with millisecond accuracy. [RT #40082]
 2016-01-07 15:34:58 -08:00
Tinderbox User
742cb92338 regen master 2016-01-06 01:04:26 +00:00
Tinderbox User
feb1ccdaf1 update copyright notice / whitespace 2016-01-05 23:45:26 +00:00
Tinderbox User
d7dbbf9b7e regen 2016-01-05 23:30:01 +00:00
Tinderbox User
4206bb139c regen master 2016-01-05 01:04:24 +00:00
Tinderbox User
e1836d1fe4 update copyright notice / whitespace 2016-01-04 23:45:26 +00:00
Evan Hunt
8454718b87 [master] document return values from nslookup 2016-01-04 15:38:06 -08:00
Evan Hunt
3bcd09b416 [master] silence noisy logging 
4287.	[bug]		Silence an overly noisy log message when message
			parsing fails. [RT #41374]
 2016-01-04 13:05:23 -08:00
Francis Dupont
343aeac717 Updated WIN32 files (rt40877) 2016-01-04 17:27:31 +01:00
Evan Hunt
de4c1814dd [master] update stats version number for rssac counters 2016-01-03 22:31:56 -08:00
Tinderbox User
7321d8df7b update copyright notice / whitespace 2015-12-27 23:45:24 +00:00
Evan Hunt
fbed5f0f44 [master] fix geoip options 
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
 2015-12-26 10:50:32 -08:00
Francis Dupont
66d73c3611 Cleaned up OpenSSL patches 2015-12-23 21:14:36 +01:00
Francis Dupont
2f2dd34a93 Updated OpenSSL 1.0.1 patch 2015-12-23 19:33:31 +01:00
Francis Dupont
5c19058b0a Updated OpenSSL 1.0.0 patch 2015-12-23 18:48:50 +01:00
Francis Dupont
059904647d Updated OpenSSL 0.9.8 patch 2015-12-23 17:53:40 +01:00
Curtis Blackburn
df59681bd2 [rt40109] added a test for +dscp to the digdelv tests 2015-12-21 14:13:03 -08:00
Tinderbox User
0226754d9e regen master 2015-12-19 01:04:14 +00:00
Mark Andrews
49762dffc4 4282. [func] 'dig +[no]mapped' determine whether the use of mapped 
IPv4 addresses over IPv6 is permitted or not.  The
                        default is +mapped.  [RT #41307]
 2015-12-19 09:47:11 +11:00
Tinderbox User
4688741c5c update copyright notice / whitespace 2015-12-16 23:45:26 +00:00
Mark Andrews
f1fcadccc4 remove named.conf 2015-12-16 21:37:21 +11:00
Mark Andrews
1583a214cd check for non removed files 2015-12-16 21:25:04 +11:00
Tinderbox User
a179cbdf65 regen master 2015-12-16 01:04:13 +00:00
Mark Andrews
ecfedec0e0 perform a more complete cleanup after running system tests [rt41255] 2015-12-16 11:29:18 +11:00
Tinderbox User
ea2ea0914c update copyright notice / whitespace 2015-12-15 23:45:23 +00:00
Evan Hunt
0321aa184e [master] reclimit test was broken with v6 2015-12-15 15:01:58 -08:00
Curtis Blackburn
9effea437d [rt41269] additional tests for dig and delv, 
fix for --disable-ipv6 on osx,
              fixes for tests with --disable-ipv6
 2015-12-15 11:58:28 -08:00
Mark Andrews
f647c0df9f 4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257] 2015-12-15 19:49:40 +11:00
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Evan Hunt
b96366252b [master] add +nocookie and use perl for query burst 2015-12-14 21:27:49 -08:00
Evan Hunt
362d2d46aa [master] fixed an incorrect test case in rpzrecurse 2015-12-13 14:15:47 -08:00
Evan Hunt
e0638007c8 [master] clarify in the help message that delv -c is a noop 2015-12-10 16:10:19 -08:00
Curtis Blackburn
21c6e49a77 [rt40106] add tests for dig +[no]ttlunits 2015-12-10 12:08:57 -08:00
Mark Andrews
505d311709 4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected. 
[RT #41238]
 2015-12-10 12:43:50 +11:00
Curtis Blackburn
6fe5cc5aea [rt41263] add a system test for dig +qr +ednsopt<invalid> 2015-12-09 16:21:02 -08:00
Tinderbox User
2a37470065 update copyright notice / whitespace 2015-12-09 23:45:23 +00:00
Mukund Sivaraman
5d79b60fc5 Improve performance of RBT (#41165) 2015-12-09 19:10:55 +05:30
Curtis Blackburn
aeb7b6e145 [rt40105] add a system test for dig +zflag 2015-12-08 16:06:39 -08:00
Curtis Blackburn
ce0d8b1c0e [rt40104] changed one occurrence of +noednsneg to +noednsnegotiation 2015-12-08 16:03:01 -08:00
Curtis Blackburn
4d1ea2336c [rt40107] add system tests for dig +header-only 2015-12-08 15:57:53 -08:00
Curtis Blackburn
ab94dd50e8 [rt40181] added tests for dig +short +nosplit/+rrcomments (see rt39291) 2015-12-08 15:13:52 -08:00
Mark Andrews
322e6b5be7 4276. [protocol] Add support for SMIMEA. [RT #40513] 2015-12-08 08:16:41 +11:00
Evan Hunt
464c2c673b [master] fix dig +norrcomments 
4272.	[bug]		dig: the +norrcomments option didn't work with +multi.
			[RT #41234]
 2015-12-04 16:16:59 -08:00
Tinderbox User
8c20f8635a update copyright notice / whitespace 2015-12-03 23:45:24 +00:00
Evan Hunt
8f918a34d1 [master] update to previous commit: also list chrootdir if applicable 2015-12-02 19:05:46 -08:00
Evan Hunt
b6214feb63 [master] add conf file to rndc status 
4268.	[func]		"rndc status" now reports the path to the
			configuration file. [RT #36470]
 2015-12-02 18:54:46 -08:00
Mark Andrews
26177be294 4267. [test] Check sdlz error handling. [RT #41142] 2015-12-02 13:00:42 +11:00
Mark Andrews
447591a49c use isc_buffer_constinit 2015-11-23 07:26:46 +11:00
Tinderbox User
af0bea7aa7 update copyright notice / whitespace 2015-11-20 23:45:23 +00:00
Mark Andrews
5b1c7ef35b 4264. [bug] Check const of strchr/strrchr assignments match 
argument's const status. [RT #41150]
 2015-11-20 18:38:24 +11:00
Tinderbox User
dec590a3de regen master 2015-11-18 01:04:11 +00:00
Jeremy C. Reed
22b006e0df Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-17 10:22:41 -05:00
Tinderbox User
c203aa153c update copyright notice / whitespace 2015-11-16 23:45:24 +00:00
Mark Andrews
a248b59381 use *newrdatas rather than *oldrdatas in sizeof for consistency [RT #41131] 2015-11-17 06:24:32 +11:00
Jeremy C. Reed
414678df72 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-16 12:53:55 -05:00
Francis Dupont
dd784c18ef Merged VS 2015 64 bit warnings (#40373) 2015-11-16 17:47:10 +01:00
Mark Andrews
c8821d124c 4260. [security] Insufficient testing when parsing a message allowed 
records with an incorrect class to be be accepted,
                        triggering a REQUIRE failure when those records
                        were subsequently cached. (CVE-2015-8000) [RT #4098]
 2015-11-16 13:12:20 +11:00
Tinderbox User
3ebda3f46b update copyright notice / whitespace 2015-11-12 23:45:23 +00:00
Mark Andrews
d0afc2d1c4 use a test key 2015-11-12 10:54:59 +11:00
Tinderbox User
4949f39716 update copyright notice / whitespace 2015-11-11 23:45:23 +00:00
Mark Andrews
946e2cd351 check ptr is not NULL 2015-11-11 22:33:57 +11:00
Mukund Sivaraman
53cf70ef7d Cleanup *.nta files after rndc system test 2015-11-11 13:49:21 +05:30
Mukund Sivaraman
58f7af60e7 Allow non-destructive control channel access using a "read-only" clause (#40498) 2015-11-11 13:46:57 +05:30
Mukund Sivaraman
9b17fd447c Limit rndc query message sizes to 32 KiB (#41073) 2015-11-11 09:56:13 +05:30
Jeremy C. Reed
cca02d061f Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-09 22:07:27 -05:00
Tinderbox User
3865e18d3d update copyright notice / whitespace 2015-11-09 23:45:22 +00:00
Jeremy C. Reed
dde7a7d357 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-09 11:25:01 -05:00
Evan Hunt
e13d04fda9 [master] fix python script versions 
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
 2015-11-08 21:34:24 -08:00
Tinderbox User
dae43e88b7 update copyright notice / whitespace 2015-11-06 23:45:24 +00:00
Evan Hunt
b513918481 [master] allow spaces in rndc arguments 
4256.	[bug]		Allow rndc command arguments to be quoted so as
			to allow spaces. [RT #36665]
 2015-11-05 19:51:54 -08:00
Tinderbox User
e62b9c9ce6 regen master 2015-11-06 01:04:13 +00:00
Tinderbox User
4ba2689c1f update copyright notice / whitespace 2015-11-05 23:45:25 +00:00
Jeremy C. Reed
f02194c053 clean up refpurpose contents to be consistent 
This is to be consistent with other manuals:
 - no period punctuation at end
 - no capitalization at beginning unless acronym or proper noun
 - and no simple article (like "A") to start sentence.

While the docbook specification says refpurpose is a "one sentence",
its examples show it with the rules shown above.

Also compared with many manpages as this is common format for the
.Nd macro's one line description.
 2015-11-05 13:01:07 -05:00
Witold Krecicki
bfd4b9e11a 4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726] 2015-11-05 12:19:04 +01:00
Mark Andrews
e939674d53 4252. [func] Add support for automating the generation CDS and 
CDNSKEY rrsets to named and dnssec-signzone.
                        [RT #40424]
 2015-11-05 12:09:48 +11:00
Evan Hunt
6b8519147a [master] NTAs did not survive reoad/reconfig 
4251.	[bug]		NTAs were deleted when the server was reconfigured
			or reloaded. [RT #41058]
 2015-11-04 10:34:28 -08:00
Tinderbox User
d4a69308f5 update copyright notice / whitespace 2015-10-29 23:45:34 +00:00
Mark Andrews
f02e14c74f #ifdef ISC_PLATFORM_HAVEATOMICSTORE 
(cherry picked from commit f75f9e1b62)
 2015-10-30 07:06:42 +11:00
Evan Hunt
821ff5e8fa [master] isc_atomic_storeq()/stats improvements 
4248.	[func]		Add an isc_atomic_storeq() function, use it in
			stats counters to improve performance.
			[RT #39972] [RT #39979]
 2015-10-28 22:19:18 -07:00
Mark Andrews
1ff2118d6c return dns_dbtable_add result on error [RT #40653] 2015-10-29 15:48:01 +11:00
Mark Andrews
f06b6a9b14 4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be 
defined to report json library version. [RT #41045]
 2015-10-29 15:22:41 +11:00
Evan Hunt
aa9b64060f [master] fix statschannel with no libjson 
4246.	[test]		Ensure the statschannel system test runs when BIND
			is not built with libjson. [RT #40944]
 2015-10-28 20:19:31 -07:00
Tinderbox User
eadee66609 regen master 2015-10-29 02:56:15 +00:00
Mark Andrews
72ac929f2b 4244. [bug] The parser was not reporting that use-ixfr is obsolete. 
[RT #41010]
 2015-10-29 12:51:17 +11:00
Tinderbox User
1b6e38d7b8 regen 2015-10-28 23:30:01 +00:00
Tinderbox User
13908e7551 update copyright notice / whitespace 2015-10-27 23:45:22 +00:00
Tinderbox User
7b26f8d8b9 regen 2015-10-27 23:30:01 +00:00
Mark Andrews
a70fc47e9d 4243. [func] Improved stats reporting from Timothe Litt. [RT #38941] 2015-10-28 09:45:46 +11:00
Jeremy C. Reed
fe12c35c3e fix some spelling typos and standardize some English spellings 
(to be consistent)
 2015-10-23 13:04:09 -04:00
Tinderbox User
9d557856c2 regen master 2015-10-22 05:53:09 +00:00
Mark Andrews
79f0eedd65 cleanup trailing whitespace 2015-10-22 16:24:03 +11:00
Mark Andrews
30eec077db cleanup trailing white space in SGML like files 2015-10-22 16:09:46 +11:00
Mark Andrews
04893d38e0 add blank line 2015-10-22 12:15:02 +11:00
Mark Andrews
0526268c2b 4242. [bug] Replace the client if not already replaced when 
prefetching. [RT #41001]
 2015-10-22 10:58:25 +11:00
Evan Hunt
90174e64f4 [master] shorten default servfail-ttl 
4239.	[func]		Changed default servfail-ttl value to 1 second from 10.
			Also, the maximum value is now 30 instead of 300. [RT #37556]
 2015-10-17 13:44:01 -07:00
Francis Dupont
638e82b134 spelling 2015-10-07 14:49:51 +02:00
Tinderbox User
fd2597f756 regen master 2015-10-07 04:11:09 +00:00
Tinderbox User
010a51c427 regen master 2015-10-07 01:06:58 +00:00
Tinderbox User
19c7b1a029 update copyright notice / whitespace 2015-10-06 23:45:23 +00:00
Evan Hunt
6715db6593 [master] fix copyright warnings 2015-10-05 23:14:11 -07:00
Tinderbox User
2eeb74d1cf regen master 2015-10-06 05:45:21 +00:00
Evan Hunt
14a656f94b [master] upgrade doc toolchain 
4237.	[doc]		Upgraded documentation toolchain to use DocBook 5
			and dblatex. [RT #40766]
 2015-10-05 21:59:35 -07:00
Mukund Sivaraman
31cca00bba Add note about Windows (#40761) 2015-10-06 05:57:26 +05:30
Mukund Sivaraman
1a989c4322 Update named manual page (#40761) 2015-10-06 05:52:02 +05:30
Tinderbox User
244d11a227 update copyright notice / whitespace 2015-10-03 23:45:23 +00:00
Mukund Sivaraman
930719e876 Update the default value for number of UDP listeners (#40761) 2015-10-03 07:08:55 +05:30
Tinderbox User
10b865e918 regen master 2015-10-03 01:07:28 +00:00
Evan Hunt
b66b333f59 [master] dnstap 
4235.	[func]		Added support in named for "dnstap", a fast method of
			capturing and logging DNS traffic, and a new command
			"dnstap-read" to read a dnstap log file.  Use
			"configure --enable-dnstap" to enable this
			feature (note that this requires libprotobuf-c
			and libfstrm). See the ARM for configuration details.

			Thanks to Robert Edmonds of Farsight Security.
			[RT #40211]
 2015-10-02 12:32:42 -07:00
Witold Krecicki
a239044323 4234. [func] Add deflate compression in statistics channel HTTP 
server. [RT #40861]
 2015-10-02 10:45:10 +02:00
Tinderbox User
e13c3286a5 update copyright notice / whitespace 2015-10-01 23:45:31 +00:00
Mark Andrews
3ed714b961 emit "E:TESTNAME:DATE" when we can't start a server 2015-10-01 16:01:34 +10:00
Mark Andrews
d76496a62a handle ISC_R_FILENOTFOUND 2015-10-01 15:47:39 +10:00
Tinderbox User
551e0d486d update copyright notice / whitespace 2015-09-30 23:45:36 +00:00
Mark Andrews
65d59a4307 4232. [test] Add tests for CDS and CDNSKEY with delegation-only. 
[RT #40597]
 2015-09-30 15:55:14 +10:00
Mark Andrews
2a12984ce6 4227. [bug] Silence static analysis warnings. [RT #40828 2015-09-30 14:14:47 +10:00
Mark Andrews
0d990f57ae silence compiler warnings 2015-09-30 14:04:28 +10:00
Mark Andrews
1a0e5b0504 address linking issues 2015-09-30 12:38:07 +10:00
Tinderbox User
55cfbf322d update copyright notice / whitespace 2015-09-29 23:45:32 +00:00
Mark Andrews
ab8b419a79 #include <isc/string.h> for memset 2015-09-30 00:46:33 +10:00
Mark Andrews
ac6bb3dd36 add missing libraries 2015-09-30 00:44:49 +10:00
Evan Hunt
a00f9e2f50 [master] merge dyndb 
4224.	[func]		Added support for "dyndb", a new interface for loading
			zone data from an external database, developed by
			Red Hat for the FreeIPA project.

			DynDB drivers fully implement the BIND database
			API, and are capable of significantly better
			performance and functionality than DLZ drivers,
			while taking advantage of advanced database
			features not available in BIND such as multi-master
			replication.

			Thanks to Adam Tkac and Petr Spacek of Red Hat.
			[RT #35271]
 2015-09-28 23:12:35 -07:00
Mark Andrews
4d085258cc make macro name match category name 2015-09-29 15:02:49 +10:00
Tinderbox User
6648adb2e1 update copyright notice / whitespace 2015-09-28 23:45:23 +00:00
Mark Andrews
7867d18ce0 Introduce end-of-line normalization 2015-09-29 08:25:35 +10:00
Mark Andrews
540f03ae74 use %zu 2015-09-29 07:31:15 +10:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage 
of available physical memory, set default to 90%.
			[RT #38442]
 2015-09-28 11:08:50 +02:00
Mark Andrews
98a7f8c7ae 4222. [func] Bias IPv6 servers when selecting the next server to 
query. [RT #40836]
 2015-09-28 18:57:19 +10:00
Tinderbox User
9a5087bf58 regen master 2015-09-23 01:05:36 +00:00
Tinderbox User
0e9b328d62 update copyright notice / whitespace 2015-09-22 23:45:22 +00:00
Evan Hunt
09ceaefb0a [master] need id tag on refentry 2015-09-21 21:36:26 -07:00
Evan Hunt
cc52a16096 [master] fix wire_test so it can read files with comment lines 2015-09-18 11:39:31 -07:00
Mark Andrews
f6e45a5c54 4217. [protocol] Add support for CSYNC. [RT #40532] 2015-09-18 23:45:12 +10:00
Mark Andrews
ff55c577ba 4215. [bug] nsupdate: skip to next request on GSSTKEY create 
failure. [RT #40685]
 2015-09-18 09:52:27 +10:00
Tinderbox User
7dbeeeaa1e update copyright notice / whitespace 2015-09-17 23:45:24 +00:00
Mark Andrews
e0a30050c8 4214. [protocol] Add support for TALINK. [RT #40544] 2015-09-18 07:43:43 +10:00
Mark Andrews
dd1bcab25c 4213. [bug] Don't reuse a cache across multiple classes. 
[RT #40205]
 2015-09-17 14:51:21 +10:00
Mark Andrews
1d5ebfc05f address race condition in ecdsa system test leading to differing authority sections. [RT #40283]; no CHANGES entry. 2015-09-17 14:23:44 +10:00
Mark Andrews
09177840c7 4211. [bug] Ensure that lwresd gets at least one task to work 
with if enabled. [RT #40652]
 2015-09-17 14:11:49 +10:00
Mark Andrews
fe51e068f0 4208. [bug] Address null pointer dereferences on out of memory. 
[RT #40764]
 2015-09-17 08:51:25 +10:00
Mark Andrews
48bbe9c7f2 fix opcode usage 2015-09-16 21:17:49 +10:00
Mark Andrews
0f2ecf4b5c 4207. [bug] Handle class mismatches with raw zone files. 
[RT #40746]
 2015-09-16 10:43:22 +10:00
Evan Hunt
226339ed43 [master] spurious spaces in named-checkconf -p 
4205.	[bug]		'named-checkconf -p' could include unwanted spaces
			when printing tuples with unset optional fields.
			[RT #40731]
 2015-09-14 08:50:17 -07:00
Tinderbox User
96f6f5dfc2 update copyright notice / whitespace 2015-09-11 23:45:36 +00:00
Mark Andrews
295a711b72 4204. [bug] 'dig +trace' failed to lookup the correct type if 
the initial root ns query was retried. [RT #40296]
`
 2015-09-12 09:04:37 +10:00
Mark Andrews
5a49f61ca9 4199. [protocol] Add support for NINFO, RKEY, SINK, TA. 
[RT #40545] [RT #40547] [RT #40561] [RT #40563]
 2015-09-11 17:35:01 +10:00
Evan Hunt
aec8a3b7cf [master] improve rrchecker test 
4203.	[test]		The rrchecker system test now tests conversion
			to and from unkonwn-type format. [RT #40584]
 2015-09-11 00:24:47 -07:00
Mark Andrews
a0ef8211d3 4201. [func] The default preferred-glue is now the address record 
type of the transport the query was received
                        over.  [RT #40468]
 2015-09-11 13:27:58 +10:00
Mark Andrews
3fa134363f 4200. [cleanup] win32: update BINDinstall to be BIND release 
independent. [RT #38915]
 2015-09-11 12:25:39 +10:00
Tinderbox User
f28c6dc514 update copyright notice / whitespace 2015-09-10 23:46:28 +00:00
Mark Andrews
3dd63ba00f 4199. [protocol] Add support for NINFO, RKEY, TA. 
[RT #40545] [RT #40547] [RT #40563]
 2015-09-10 17:58:29 +10:00
Mark Andrews
63874956de 4199. [protocol] Add support for NINFO, RKEY. [RT #40547] [RT #40563] 2015-09-10 17:07:05 +10:00
Mark Andrews
8b29fc0b7a 4199. [protocol] Add support for RKEY. [RT #40563] 2015-09-10 14:50:20 +10:00
Mark Andrews
5be3128599 address race condition rt40242 2015-09-09 18:12:05 +10:00
Mark Andrews
075a3d60c2 4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses. 
[RT #40603]
 2015-09-09 17:56:23 +10:00
Mark Andrews
4ca7391e64 4196. [doc] Improve how "enum + other" types are documented. 
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]
 2015-09-09 17:02:11 +10:00
Mark Andrews
fbd9aaa58c 4194. [bug] named-checkconf -p failed to properly print a port 
range.  [RT #40634]
 2015-09-09 16:49:11 +10:00
Mark Andrews
3b83676e07 *.vcxproj.in should use CRLF as EOL 2015-08-27 21:57:18 +00:00
Evan Hunt
bcae9a15c1 [master] s/the the/the/ 2015-08-27 14:11:27 -07:00
Tinderbox User
0d5b7ed79d update copyright notice / whitespace 2015-08-25 23:45:27 +00:00
Mark Andrews
9b956d342e 4192. [bug] The default rrset-order of random was not always being 
applied. [RT #40456]
 2015-08-25 14:52:27 +10:00
Mark Andrews
5855fd79e3 4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones 
as per RFC 6763. [RT #37889]
 2015-08-25 14:46:06 +10:00
Mark Andrews
3979031a06 check isc_buffer_allocate result 2015-08-23 19:29:40 +10:00
Tinderbox User
5d68969ab3 update copyright notice / whitespace 2015-08-22 23:45:23 +00:00
Mark Andrews
dc3912f3ca 4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as 
valid with check-names.  <forest> still needs to be
                        LDH. [RT #40399]
 2015-08-22 15:27:33 +10:00
Mark Andrews
416265e4d4 add / 
(cherry picked from commit 820a9517ad)
 2015-08-20 14:02:08 +10:00
Mark Andrews
b5caf98644 ignore xmlstats 2015-08-20 14:00:23 +10:00
Tinderbox User
161b5249b9 update copyright notice / whitespace 2015-08-19 23:45:23 +00:00
Mark Andrews
5c1c62cd8a awk on solaris doesn't like // as a pattern 2015-08-19 08:35:12 +10:00
Mukund Sivaraman
bf350c9f1a Fix RPZ bugs related to wildcard triggers (#40357) 2015-08-18 19:39:53 +05:30
Mark Andrews
1a38ba7b41 add statistics 2015-08-18 22:31:13 +10:00
Mark Andrews
d9aeaf35ea check for libxml2 2015-08-18 22:29:35 +10:00
Evan Hunt
b750a49f3f [master] fixed memory leak in dns_compress_add() 
4184.	[bug]		Fixed a possible memory leak in name compression
			when rendering long messages. (Also, improved
			wire_test for testing such messages.) [RT #40375]
 2015-08-17 22:41:44 -07:00
Evan Hunt
420a43c8d8 [master] timing safe memory comparisons 
4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
			code. Also, the timing-safe comparison functions have
			been renamed to avoid possible confusion with
			memcmp(). [RT #40148]
 2015-08-17 18:26:44 -07:00
Mark Andrews
486c763015 use grep rather than xmllint 2015-08-18 10:03:58 +10:00
Mark Andrews
bce42685ab add missing echo 2015-08-18 09:37:14 +10:00
Evan Hunt
b2f85a0c8e [master] win32: vs2015 compliance; openssl dependency for check.c 2015-08-17 11:35:10 -07:00
Mark Andrews
55df11d4e1 use sed instead of count 2015-08-18 00:35:06 +10:00
Mark Andrews
5f7540f12f improve failure diagnostics 2015-08-17 17:42:58 +10:00
Mark Andrews
741c65c4d8 ignore leading zeros of revoked keyid 2015-08-17 17:10:46 +10:00
Tinderbox User
b140aa009b update copyright notice / whitespace 2015-08-16 23:45:23 +00:00
Mark Andrews
6458ad3ab2 address use after free error 2015-08-16 20:28:52 +10:00
Tinderbox User
288c18263f update copyright notice / whitespace 2015-08-14 23:45:27 +00:00
Evan Hunt
bf4a7968e8 [master] errors in pipelined queries could assert 
4180.	[bug]		Error responses in pipelined queries could
			cause a crash in client.c. [RT #40289]
 2015-08-14 08:34:54 -07:00
Mukund Sivaraman
984d2bb9e5 Fix assertion failure in parsing UNSPEC(103) RR from text (#40274) 2015-08-14 13:30:52 +05:30
Mukund Sivaraman
474921d733 Fix assertion failure in parsing NSAP records from text 2015-08-14 13:11:26 +05:30
Mark Andrews
563878539a 4176. [bug] Address race issues with lwresd. [RT #40284] 2015-08-14 15:47:53 +10:00
Evan Hunt
bcf76c1fb8 [master] better reporting of xml/json unavailability 
- error if "configure --with-libxml2" but the library isn't available
- log a warning on startup if only JSON or only XML can be served
 2015-08-12 21:58:04 -07:00
Tinderbox User
aa6c5a3e33 regen master 2015-08-13 01:26:22 +00:00
Tinderbox User
ed91aca9e6 update copyright notice / whitespace 2015-08-12 23:45:25 +00:00
Mark Andrews
c631ff56bf Updated CHANGES note to include require-server-cookie: 
4152.   [func]          Implement DNS COOKIE option.  This replaces the
                        experimental SIT option of BIND 9.10.  The following
                        named.conf directives are available: send-cookie,
                        cookie-secret, cookie-algorithm, nocookie-udp-size
                        and require-server-cookie.  The following dig options
                        are available: +[no]cookie[=value] and +[no]badcookie.
                        [RT #39928]
 2015-08-13 08:26:23 +10:00
Evan Hunt
7c0f238c50 [master] handle time units in dnssec-coverage -r 
4174.	[bug]		"dnssec-coverage -r" didn't handle time unit
			suffixes correctly. [RT #38444]
 2015-08-12 12:20:43 -07:00
Mark Andrews
efb028b6c8 4173. [bug] dig +sigchase was not properly matching the trusted 
key. [RT #40188]
 2015-08-12 19:11:49 +10:00
Mark Andrews
151f1bcd5e 4172. [bug] Named / named-checkconf didn't handle a view of CLASS0. 
[RT #40265]
 2015-08-12 19:06:00 +10:00
Mark Andrews
b8a04d50a3 Change 3813 broke dig/host -4/-6. No CHANGES as this is has not been released 2015-08-12 12:50:15 +10:00
Mark Andrews
157bc46d2e add '=' to +opcode description 2015-08-12 07:04:08 +10:00
Evan Hunt
2a49f6bbfe [master] use dns_message_totext() in wire_data 2015-08-10 20:51:22 -07:00
Evan Hunt
f93884fcb7 [master] use libdns functions to convert rcode and opcode to text 2015-08-10 20:27:35 -07:00
Mark Andrews
f260e3a188 address len being shadowed 2015-08-11 12:59:34 +10:00
Tinderbox User
7e80eac638 update copyright notice / whitespace 2015-08-10 23:45:23 +00:00
Evan Hunt
3812202124 [master] add a "wire_test -d" option to read raw binary data 
4169.	[test]		Added a 'wire_test -d' option to read input as
			raw binary data, for use as a fuzzing harness.
			[RT #40312]
 2015-08-10 14:44:02 -07:00
Evan Hunt
05b1684791 [master] fix an awk portability issue 2015-08-03 14:21:16 -07:00
Tinderbox User
f3cbd0e029 update copyright notice / whitespace 2015-08-02 23:45:22 +00:00
Evan Hunt
68116c5a5f [master] add +nocookie options where needed 2015-08-02 11:18:12 -07:00
Mark Andrews
b485d0a67f if UDP and we have a bad cookie send a immediate badcookie response 2015-07-27 15:42:03 +10:00
Mark Andrews
58eb2006a4 return notimp for qcount=0 unimplemeneted opcodes 
(cherry picked from commit 7c10dc502a34f88f11c6b6469bb234c72e61fec8)
 2015-07-24 13:37:12 +10:00
Evan Hunt
a3b21effd7 [master] missing 'use' caused test failure 2015-07-21 13:49:54 -07:00
Mukund Sivaraman
fc39b6a961 Update rndc usage output (#40010) 
Squashed commit of the following:

commit 73f0bba7d8d4763763ff88731c739ac646714ac8
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jul 13 05:40:35 2015 +0530

    Update rndc usage output

    This is based on a patch sent by Tony Finch.
 2015-07-21 12:24:27 +05:30
Mukund Sivaraman
2cc21870b0 Make rndc showzone print a message when allow-new-zones is not configured (#40009) 
Squashed commit of the following:

commit 77f12b02cf4e81f13e10db3cfac90e9de0b53928
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jul 13 05:28:13 2015 +0530

    Some tweaks

commit 9c521020b03c2fe7293ec4c970225fff479efd40
Author: Tony Finch <dot@dotat.at>
Date:   Thu Jul 9 15:36:15 2015 +0100

    rndc addzone error reporting improvements

    Clearer error messages from rndc addzone and modzone when the view is not
    known or when allow-new-zones is off.

    Also, remove a spurious newline from the delzone response.
 2015-07-21 12:19:24 +05:30
Mark Andrews
80a51d24ea set badcookie not besteffort 2015-07-21 15:15:40 +10:00
Evan Hunt
a32ca13d12 [master] statschannel test failed when only JSON was available 2015-07-20 19:09:22 -07:00
Evan Hunt
9501aa9d5a [master] portability 2015-07-20 19:01:29 -07:00
Mark Andrews
3a49d0ff10 4164. [bug] Don't rename slave files and journals on out of memory. 
[RT #40033]

4163.   [bug]           Address compiler warnings. [RT #40024]
 2015-07-13 09:46:59 +10:00
Tinderbox User
b3338fc248 regen master 2015-07-11 01:05:48 +00:00
Tinderbox User
35af5049f8 update copyright notice / whitespace 2015-07-10 23:45:23 +00:00
Evan Hunt
629a015940 [master] correct the maximum NTA lifetime in rndc's help output 2015-07-10 09:07:23 -07:00
Mark Andrews
539c3f73b7 zone is not optional for zonestatus [RT #40012] 2015-07-10 15:28:11 +10:00
Evan Hunt
b716b9cddc [master] add JSON and more XML tests 
4161.	[test]		Add JSON test for traffic size stats; also test
			for consistency between "rndc stats" and the XML
			and JSON statistics channel contents. [RT #38700]
 2015-07-09 21:18:42 -07:00
Tinderbox User
c0cbdeedb5 regen master 2015-07-10 01:05:03 +00:00
Tinderbox User
f16a6bfb6c update copyright notice / whitespace 2015-07-09 23:45:22 +00:00
Evan Hunt
e38a7d749b [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2015-07-08 22:56:32 -07:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 22:53:39 -07:00
Mark Andrews
2561b2dd84 add comment about +trace and @server 2015-07-09 12:11:46 +10:00
Tinderbox User
f66d0e646f regen 2015-07-08 23:30:01 +00:00
Mark Andrews
e8f98ec8d4 future cookie code 2015-07-08 12:57:29 +10:00
Mark Andrews
4968e1de7e allow named to build w/o openssl 2015-07-08 11:54:25 +10:00
Tinderbox User
9ab5a7d83c update copyright notice / whitespace 2015-07-07 23:45:22 +00:00
Mark Andrews
6e7f5e8ad5 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:20:49 +10:00
Mark Andrews
b399f4e568 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 08:49:24 +10:00
Evan Hunt
70d987def5 [master] traffic size stats 
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
 2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Mark Andrews
3e33f4198d 4154. [bug] A OPT record should be included with the FORMERR 
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Dig should zero non significant +subnet bits.  Check
                        that non significant ECS bits are zero on receipt.
                        [RT #39647]
 2015-07-06 12:52:37 +10:00
Tinderbox User
1879ff4932 regen master 2015-07-06 01:04:49 +00:00
Tinderbox User
8f0b326d9a update copyright notice / whitespace 2015-07-05 23:45:22 +00:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the 
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
 2015-07-06 09:44:24 +10:00
Tinderbox User
d6b82bc2ae update copyright notice / whitespace 2015-06-30 23:45:23 +00:00
Tinderbox User
6cd01c0a96 regen master 2015-06-30 01:04:57 +00:00
Tinderbox User
337d408adb update copyright notice / whitespace 2015-06-29 23:45:23 +00:00
Jeremy C. Reed
001b06f0ab remove some duplicate "the" words. 2015-06-29 13:40:06 -04:00
Mukund Sivaraman
08f0129732 Fix a bug printing zone names with '/' character in XML and JSON stats (#39873) 2015-06-29 18:33:18 +05:30
Mark Andrews
4a61eae651 4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6 
was returning referrals rather than nodata responses
                        when the AAAA records were filtered.  [RT #39843]
 2015-06-29 15:48:41 +10:00
Tinderbox User
8e50c69783 update copyright notice / whitespace 2015-06-25 23:45:22 +00:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00
Tinderbox User
e0ba64bdd2 update copyright notice / whitespace 2015-06-23 23:45:21 +00:00
Mukund Sivaraman
0439bfedd9 Fix parsing of NZFs saved by rndc addzone with view specified (#39845) 2015-06-23 14:19:48 +05:30
Mukund Sivaraman
b4e114e3cd Print unsigned values for serial, etc. in rndc zonestatus output (#39854) 2015-06-23 13:57:33 +05:30
Mukund Sivaraman
d14c268362 Remove redundant nzf_remove() call during delzone (#39844) 2015-06-23 13:41:08 +05:30
Witold Krecicki
af3770ed93 rndc reconfig reports configuration errors the same way rndc reload does [RT #39635] 2015-06-12 10:19:29 +02:00
Evan Hunt
27970e78c6 [master] log outdated rpz settings regardless of enable-querytrace 2015-06-10 10:22:59 -07:00
Evan Hunt
215049febb [master] rpz_ver check was ineffective 2015-06-09 15:05:43 -07:00