Commit graph

205 commits

Author SHA1 Message Date
Mark Andrews
25a60b1d80 sync with HEAD 2003-10-15 05:32:25 +00:00
Mark Andrews
19548853e9 1432. [func] The advertised EDNS UDP buffer size can now be set
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
c6d78fc563 1422. [func] Log name/type/class when denying a query. [RT #4663] 2003-08-26 05:14:25 +00:00
Mark Andrews
6627b5242f pullup:
u_int32_t -> isc_uint32_t
2003-08-22 06:10:23 +00:00
Mark Andrews
370732d189 1391. [func] Add support for IPv6 scoped addresses in named. 2003-08-22 05:17:15 +00:00
Mark Andrews
c28e1b5678 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2003-08-21 06:17:57 +00:00
Mark Andrews
0671618280 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2003-08-14 07:00:33 +00:00
Mark Andrews
721cf64313 1271. [bug] "recursion available: {denied,approved}" was too
confusing.
2003-08-14 06:17:23 +00:00
Mark Andrews
45c5fb1fcd 1267. [func] isc_file_openunique() now creates file using mode
0666 rather than 0600.
2003-08-14 06:14:23 +00:00
Mark Andrews
59771f18b8 1254. [func] preferred-glue option from BIND 8.3. 2003-08-14 05:56:10 +00:00
Mark Andrews
229b4ea973 1219. [func] Named now reports the TSIG extended error code when
signature verification fails. [RT #1651]
2003-08-14 00:46:22 +00:00
Mark Andrews
820d86cbe6 1187. [bug] named was incorrectly returning DNSSEC records
in negative responses when the DO bit was not set.
2003-08-13 02:18:19 +00:00
Mark Andrews
33b82c3a70 1158. [func] Report the client's address when logging notify
messages.
2003-08-12 04:54:59 +00:00
Mark Andrews
79e2dd3eb8 1157. [func] match-clients and match-destinations now accept
keys. [RT #2045]
2003-08-11 05:58:18 +00:00
Mark Andrews
9052beb238 pullup
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews
022541a067 1036. [func] Silently drop requests received via multicast as
long as there is no final multicast DNS standard.

1035.   [bug]           If we respond to multicast queries (which we
                        currently do not), respond from a unicast address
                        as specified in RFC 1123. [RT #137]

1034.   [bug]           Ignore the RD bit on multicast queries as specified
                        in RFC 1123. [RT #137]
2003-08-06 04:30:53 +00:00
Mark Andrews
6d5f0c1947 1490. [bug] Accept reading state as well as working state in
ns_client_next(). [RT #6813]
2003-07-18 06:14:30 +00:00
Mark Andrews
a7efbe70e7 merge 9.2.2 back into v9_2 2003-03-06 04:38:29 +00:00
Mark Andrews
09fb82a40d Reviewed by: gson@nominum.com
1244.   [bug]           Receiving a TCP message from a blackhole address would
                        prevent further messages being received over that
                        interface.
2002-04-23 01:53:53 +00:00
Mark Andrews
73d7583d98 update copyrights 2002-02-08 03:57:47 +00:00
Andreas Gustafsson
3f25cb17e3 pullup:
1070.  [bug]           Copy DNSSEC OK (DO) to response as specified by
                       draft-ietf-dnsext-dnssec-okbit-03.txt.
2002-01-24 19:00:27 +00:00
Brian Wellington
04999a9c03 pullup:
1131.   [bug]           The match-destinations view option did not work with
                        IPv6 destinations. [RT #2073, #2074]
2001-11-16 21:21:42 +00:00
Mark Andrews
5b477dd3b9 1126. [bug] The server could access a freed event if shut
down while a client start event was pending
                        delivery. [RT #2061]
2001-11-15 02:51:46 +00:00
Mark Andrews
309979a136 pullup:
Removed all code within #ifdef DNS_OPT_NEWCODES*.
It was the last thing being sanitized out of releases; removing
it makes it possible to eliminate the sanitation process.
2001-11-15 01:24:21 +00:00
Mark Andrews
58fbc62a4a pullup:
running out of memory during ns_client_t construction could crash server
[RT #409]
2001-10-30 01:12:34 +00:00
Andreas Gustafsson
31da643c6a pullup:
1033.   [bug]           Always respond to requests with an unsupported opcode
                        with NOTIMP, even if we don't have a matching view
                        or cannot determine the class.
2001-10-12 19:14:47 +00:00
Andreas Gustafsson
dd0319d149 1047. [bug] named was incorrectly refusing all requests signed
with a TSIG key derived from an unsigned TKEY
                        negotiation with a NOERROR response. [RT #1886]
2001-10-12 18:20:14 +00:00
Mark Andrews
a3ed377607 pullup:
1047.   [bug]           When a request was refused due to being signed with
                        a TSIG key derived from an unsigned TKEY negotiation,
                        the response could have an rcode of SUCCESS rather
                        than REFUSED. [RT #1886]
2001-10-12 01:05:51 +00:00
Mark Andrews
99a0822e3c pullup:
1005.   [bug]           Don't copy nonzero RCODEs from request to response.
                        [RT #1765]
2001-09-19 02:44:00 +00:00
Andreas Gustafsson
76c8294c81 format string bugs and improved format string checking [RT #1578] 2001-08-08 22:54:55 +00:00
Brian Wellington
ee3ab6063d 945. [func] Add the new view-specific options
"match-destinations" and "match-recursive-only".
2001-07-26 20:42:46 +00:00
Mark Andrews
b52c49c6e1 lower unknown class/view to DEBUG(1) 2001-06-28 02:39:46 +00:00
Andreas Gustafsson
5465e5f7dd query_getzonedb() formatted the domain name and class being queried
for at least once for every query to authoritative data, whether or not a log
message was actually printed, which adversely affected query performance
2001-06-15 23:28:29 +00:00
Andreas Gustafsson
27ee1d06e9 typo 2001-06-15 22:35:42 +00:00
Mark Andrews
03f91269f5 856. [func] Allow partial rdatasets to be returned in answer and
authority sections to help non-TCP capable clients
                        recover from truncation.  [RT #1301]
2001-06-05 09:02:16 +00:00
David Lawrence
92ef1a9b9d use ISC_MAGIC for all magic numbers, for our friends in EBCDIC land 2001-06-04 19:33:39 +00:00
Mark Andrews
89d03d4715 Redo:
839.   [func]          Dump packets for which there was no view or that the
                        class could not be determined to category "unmatched".
2001-05-28 05:17:05 +00:00
Mark Andrews
2ae4dd0dbd 839. [func] Dump packets for which there was no view or that the
class could not be determined to file, (-e filename).
2001-05-25 07:39:48 +00:00
Andreas Gustafsson
82df406152 don't log ISC_R_CANCEL as a 'fatal error' 2001-05-14 21:33:45 +00:00
Andreas Gustafsson
70fcb78509 client->peeraddr_valid could be set even if the peer
address was not valid; socket errors were logged as requests; when a client shut down
due to a fatal I/O error, it failed to log a message to that effect
2001-05-14 21:12:32 +00:00
Andreas Gustafsson
8ea814ce5f If a response was received on port 53 and failed to parse, the server
would respond to the response, potentially causing packet storms.
This bug was introduced on the mainline by the dispatch-bypass changes and
does not affect any released version.
2001-05-09 23:13:03 +00:00
Brian Wellington
92da55299b If a client requests a UDP buffer of less than 512, ignore it. [RT #1197] 2001-04-19 18:29:53 +00:00
Andreas Gustafsson
10a06917a5 not all blackholed UDP datagrams are queries 2001-04-16 22:10:44 +00:00
Brian Wellington
d8ffaef5c2 The blackhole ACL was not properly applied to UDP queries. Also,
blackholing of TCP connections was done later than it should have been.
2001-04-16 21:18:10 +00:00
Brian Wellington
6eccf5bd07 788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
Andreas Gustafsson
4c03e69ab8 781. [func] Avoid error packet loops by dropping duplicate FORMERR
responses. [RT #1006]
2001-03-19 20:52:21 +00:00
Brian Wellington
461260ac15 add casts [RT #1017] 2001-03-12 22:27:15 +00:00
Mark Andrews
55b6243923 776. [func] Improved error reporting in denied messages. [RT #252] 2001-03-11 06:19:39 +00:00
Mark Andrews
0c13f7af64 Document under what conditions client_allocsendbuf() is allowed to return
ISC_R_NOSPACE.  Add an INSIST to catch changes to callers.
2001-03-06 04:18:42 +00:00
Brian Wellington
952a55000a Remove the 4k UDP send buffer from the client object; use an array on the
stack instead.
2001-03-06 01:24:40 +00:00