Commit graph

5988 commits

Author SHA1 Message Date
Mark Andrews
2b703026f3 check isc_mutext_init and destoy mutex when done 2014-09-07 08:24:36 +10:00
Mark Andrews
8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Evan Hunt
f687e639f0 [master] [rt36786] use INSTALL_PROGRAM for shared libs
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]
2014-09-05 10:24:20 -07:00
Mark Andrews
2fa1fc5332 3945. [bug] Invalid wildcard expansions could be incorrectly
accepted by the validator. [RT #37093]
2014-09-05 12:10:55 +10:00
Mark Andrews
06dbd20c66 move declaration to start of block 2014-09-05 11:39:42 +10:00
Tinderbox User
948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981 [master] servfail cache
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
2014-09-03 23:28:14 -07:00
Mark Andrews
3560b7d66c move declaration to start of block 2014-09-04 14:20:25 +10:00
Mark Andrews
fec7998314 3942. [bug] Wildcard responses from a optout range should be
marked as insecure. [RT #37072]
2014-09-04 13:57:50 +10:00
Mark Andrews
74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP
connections to be shared. [RT #37039]
2014-09-04 10:37:45 +10:00
Mark Andrews
92a649d814 complete conversion to FCTXTRACE3 2014-08-30 20:37:20 +10:00
Mark Andrews
1a63fb1d14 update copyrights 2014-08-30 12:27:49 +10:00
Tinderbox User
3278ff814d update copyright notice 2014-08-29 23:45:22 +00:00
Evan Hunt
f5c24a7f48 [master] add better servfail logging
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]
2014-08-28 22:37:55 -07:00
Evan Hunt
d46855caed [master] ECS authoritative support
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
2014-08-28 21:40:32 -07:00
Evan Hunt
0c2313eb36 [master] fixes to checkconf test, HIP casecompare
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]
2014-08-27 21:36:13 -07:00
Evan Hunt
27d6642e8b [master] complete change #3925
- don't use fwdname in dns_view_findzonecut()
2014-08-22 14:57:30 -07:00
Mark Andrews
840d6a4614 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917 2014-08-22 16:32:19 +10:00
Mark Andrews
291c0dfbc9 remove redundant isc_sockaddr_format call 2014-08-08 21:27:35 +10:00
Evan Hunt
cfe32752a6 [master] [36737] allow zero-length URI and CAA fields
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]
2014-08-06 17:40:42 -07:00
Mark Andrews
493f3eb297 3913. [bug] Address race issue in dispatch. [RT #36731] 2014-08-06 18:49:53 +10:00
Mark Andrews
c5734964e6 3912. [bug] Address some unrecoverable lookup failures. [RT #36330] 2014-08-06 14:18:04 +10:00
Mark Andrews
43b9737b11 3911. [func] Implement EDNS EXPIRE option client side. [RT #35925] 2014-08-06 11:50:40 +10:00
Mukund Sivaraman
a338c2d947 [36720] Free event early (fixes race to free)
Patch contributed by yhu2 <yadi.hu@windriver.com>.
2014-08-05 17:08:14 +05:30
Mark Andrews
3e90f6c373 3910. [bug] When computing the number of elements required for a
acl count_acl_elements could have a short count leading
                        to a assertion failure.  Also zero out new acl elements
                        in dns_acl_merge.  [RT #36675]
2014-08-03 10:05:02 +10:00
Mark Andrews
c38341ec43 3908. [bug] rndc now differentiates between a zone in multiple
views and a zone that doesn't exist at all. [RT #36691]
2014-08-02 14:43:26 +10:00
Evan Hunt
7712d1660a [master] [rt36642] fix URI RR format
3906.	[protocol]	Update URI record format to comply with
			draft-faltstrom-uri-08. [RT #36642]
2014-07-30 20:41:59 -07:00
Mark Andrews
b04839cfe2 [rt36341]
3905.   [bug]           Address deadlock between view.c and adb.c. [RT #36341]
2014-07-31 11:38:11 +10:00
Mark Andrews
3a55d43527 3904. [func] Add the RPZ SOA to the additional section. [RT36507] 2014-07-31 10:51:48 +10:00
Tinderbox User
d1b499c827 update copyright notice 2014-07-29 23:45:20 +00:00
Evan Hunt
c1e42fa06d [master] use correct length 2014-07-29 15:24:39 -07:00
Evan Hunt
2383eb5272 [master] add CAA rdata support
3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]
2014-07-29 08:40:35 -07:00
Mark Andrews
6a6838f973 3898. [bug] To small a buffer in tohexstr() calls in test code.
[RT #36598]
2014-07-22 11:26:28 +10:00
Mark Andrews
ac5ed74860 3897. [bug] RPZ summary information was not properly being updated
after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]
2014-07-22 10:57:58 +10:00
Mark Andrews
044c780437 silence coverity, explicitly ignore dns_peer_gettransferdscp result 2014-07-18 12:55:04 +10:00
Mark Andrews
a920fb9dc2 3893. [bug] Peer DSCP values could be returned without being set.
[RT #36538]
2014-07-15 22:40:39 +10:00
Tinderbox User
8a9485517e update copyright notice 2014-07-10 23:45:19 +00:00
Mark Andrews
dcc7a2738f hold a nta reference while fetching 2014-07-10 10:24:47 +10:00
Mark Andrews
63e1ac1e09 3890. [bug] RRSIG sets that were not loaded in a single transaction
at start up where not being correctly added to
                        re-signing heaps.  [RT #36302]
2014-07-07 12:05:01 +10:00
Mark Andrews
769224a8dc state fw_copy is never used; n only needs to be set for fw_ordinary;
(cherry picked from commit d956d9689c13b093fff5faf6b10f06338354dcfc)
2014-07-04 08:51:26 +10:00
Mark Andrews
e58154a6ec silence coverity warnings 2014-07-02 15:28:02 +10:00
Mark Andrews
7dbd309799 be consistent about expire time 2014-07-02 14:12:46 +10:00
Mark Andrews
5d63868ad0 DNS_VALIDATOR_NONTA needs passed to sub validator 2014-07-02 14:12:15 +10:00
Mark Andrews
33399d6a14 3888. [func] 'rndc status' now reports the number of automatic
zones. [RT #36015]
2014-06-25 13:17:03 +10:00
Mark Andrews
65eba0a5a8 add init_count 2014-06-25 12:40:28 +10:00
Mark Andrews
777ea03a92 move definition of FILE_VERSION to after #define of FILE_VERSION 2014-06-25 12:29:15 +10:00
Mark Andrews
c312172e13 more statics that were optimised out 2014-06-25 11:10:25 +10:00
Mark Andrews
c21e9f1a92 add and deserialize are structure element names 2014-06-25 09:45:53 +10:00
Mark Andrews
ef117da205 3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
they are easier to use in a debugger. [RT #36373]
2014-06-25 08:33:37 +10:00