Commit graph

4175 commits

Author SHA1 Message Date
Mark Andrews
1f5b23079e pullup:
Generating a response when the qname matches a wildcard and the type
doesn't exist didn't work; the NXT name was improperly expanded and the
wildcard proof was omitted.
2003-08-21 07:05:12 +00:00
Mark Andrews
7521079979 pullup:
Don't call adjust_interfaces unless IPv6 support is enabled. [RT #3593]
2003-08-21 06:57:14 +00:00
Mark Andrews
c28e1b5678 1380. [func] 'rndc recursing' dump recursing queries to
'recursing-file = "named.recursing";'.
2003-08-21 06:17:57 +00:00
Mark Andrews
f0d2117bcc 1379. [func] 'rndc stats' now reports tcp and recursion quota
states.

1378.   [func]          Improved positive feedback for 'rndc {reload|refresh}.

1377.   [func]          dns_zone_load{new}() now reports if the zone was
                        loaded, queued for loading to up to date.

1376.   [func]          New function dns_zone_logc() to log to specified
                        category.
2003-08-21 05:19:21 +00:00
Mark Andrews
9098582352 1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
data cache.
2003-08-21 05:10:53 +00:00
Mark Andrews
f9192a3940 1374. [func] dns_adb_dump() now logs the lame zones associated
with each server.
2003-08-21 04:47:43 +00:00
Mark Andrews
30296ba800 pullup:
detach from quota in an error case.  I don't know if this is strictly needed,
but it makes sense.  It is probably done later as well, but all places
check for the pointer != NULL, so we'll be ok.
2003-08-21 03:22:48 +00:00
Mark Andrews
7437b1e21b pullup:
DNSSEC wildcard negative proof responses were longer than necessary in
some cases; the existence of a node for which the qname is a subdomain
obscures all shallower wildcards.

That is, query for y.x.foo.com.  If the response contains an NXT
at x.foo.com, it's not necessary to prove that there's no wildcard at
*.foo.com, since it wouldn't be matched anyway.
2003-08-20 06:36:06 +00:00
Mark Andrews
0544c8411d 1371 [bug] notify-source-v6, transfer-source-v6 and
query-source-v6 with explict addresses and using the
                        same ports as named was listening on could interfere
                        with nameds ability to answer queries sent to those
                        addresses.
2003-08-20 06:05:48 +00:00
Mark Andrews
984d0d58e9 1368. [func] remove support for bitstring labels. 2003-08-20 05:33:18 +00:00
Mark Andrews
3d1d30c8bf pullup:
don't attempt to generate a wildcard proof unless the zone is secure.
2003-08-20 03:29:44 +00:00
Mark Andrews
4efb6955c0 1365. [func] "localhost" and "localnet" acls now include IPv6
addresses / prefixes.
2003-08-20 03:23:12 +00:00
Mark Andrews
67cc3e009b 1364. [func] Log file name when unable to open memory statistics
and dump database files. [RT# 3437]
2003-08-20 03:01:09 +00:00
Mark Andrews
2f6af651ac 1363. [func] Listen-on-v6 now supports specific addresses. 2003-08-20 02:59:06 +00:00
Mark Andrews
e6bb021434 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2003-08-19 04:11:24 +00:00
Mark Andrews
c7c25e99aa 1344. [func] Log if the serial number on the master has gone
backwards.
                        If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to
                        suppress this warning.
2003-08-19 03:11:19 +00:00
Mark Andrews
536f46e845 1343. [func] Log successful notifies received (info). Adjust log
level for failed notifies to notice.
2003-08-19 02:58:19 +00:00
Mark Andrews
d930eaf77b 1331. [func] Generate DNSSEC wildcard proofs. 2003-08-18 07:35:54 +00:00
Mark Andrews
eb35881767 1329. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2003-08-18 05:56:58 +00:00
Mark Andrews
f0d1adcdd2 pullup:
don't apply cache-filename to "_bind" view.
2003-08-15 04:14:31 +00:00
Mark Andrews
9bc39842bb 1313. [func] Query log now says if the query was signed (S) or
if EDNS was used (E).
2003-08-15 03:22:42 +00:00
Mark Andrews
be1078018a 1312. [func] Log TSIG key used w/ outgoing zone transfers. 2003-08-15 03:18:47 +00:00
Mark Andrews
5d0f5f98e8 pullup:
null pointer dereference
2003-08-15 03:10:04 +00:00
Mark Andrews
c107aac084 1304. [func] New function: dns_zone_name().
1303.   [func]          Option 'flush-zones-on-shutdown <boolean>;'.
2003-08-15 02:49:35 +00:00
Mark Andrews
d58a15deb2 1302. [func] Extended rndc dumpdb to support dumping of zones and
view selection: 'dumpdb [-all|-zones|-cache] [view]'.
2003-08-15 02:24:28 +00:00
Mark Andrews
4dde5e1d1f 1301. [func] New category 'update-security'. 2003-08-15 02:21:03 +00:00
Mark Andrews
ff0b6d9f9f 1290. [func] "dig axfr" now reports the number of messages
as well as the number of records.
2003-08-15 02:00:33 +00:00
Mark Andrews
b4a3336bb2 1283. [func] Use "dataready" accept filter if available. 2003-08-15 01:16:06 +00:00
Mark Andrews
67b45f602c 1281. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2003-08-15 01:08:33 +00:00
Mark Andrews
0671618280 1213. [func] Report view associated with client if it is not a
standard view (_default or _bind).
2003-08-14 07:00:33 +00:00
Mark Andrews
4b2653119b 1278. [func] dig: now supports +[no]cl +[no]ttlid. 2003-08-14 06:40:30 +00:00
Mark Andrews
721cf64313 1271. [bug] "recursion available: {denied,approved}" was too
confusing.
2003-08-14 06:17:23 +00:00
Mark Andrews
45c5fb1fcd 1267. [func] isc_file_openunique() now creates file using mode
0666 rather than 0600.
2003-08-14 06:14:23 +00:00
Mark Andrews
59771f18b8 1254. [func] preferred-glue option from BIND 8.3. 2003-08-14 05:56:10 +00:00
Mark Andrews
d7030b0d7c 1250. [func] Nsupdate will report the address the update was
sent to.
2003-08-14 04:48:58 +00:00
Mark Andrews
e2ac00112c misc cleanups 2003-08-14 03:22:38 +00:00
Mark Andrews
45d8fa0d1a 1224. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2003-08-14 02:34:18 +00:00
Mark Andrews
520d66473a 1220. [func] Support for APL rdata type. 2003-08-14 00:52:56 +00:00
Mark Andrews
229b4ea973 1219. [func] Named now reports the TSIG extended error code when
signature verification fails. [RT #1651]
2003-08-14 00:46:22 +00:00
Mark Andrews
60c8cebb10 pullup: misc cleanups 2003-08-13 04:55:28 +00:00
Mark Andrews
48c4c3d66b 1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
[RT #2394]
2003-08-13 04:35:06 +00:00
Mark Andrews
10e99ae4b5 document the key-directory option
document SIG(0) support.
2003-08-13 04:30:15 +00:00
Mark Andrews
53fcc33633 pullup:
Reimplemented the built-in CHAOS zones using sdb.
2003-08-13 03:58:12 +00:00
Mark Andrews
4cedbe5d3b 1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
[RT #2394]
2003-08-13 02:22:12 +00:00
Mark Andrews
820d86cbe6 1187. [bug] named was incorrectly returning DNSSEC records
in negative responses when the DO bit was not set.
2003-08-13 02:18:19 +00:00
Mark Andrews
f09db09817 1190. [func] Add the "rndc freeze" and"rndc unfreeze" commands.
[RT #2394]
2003-08-13 02:08:46 +00:00
Mark Andrews
16f1baf43f pullup:
missing format string argument; add format checking
2003-08-13 02:00:19 +00:00
Mark Andrews
f260e463c6 pullup
make a few dynamic update log messages more informative
2003-08-13 01:58:07 +00:00
Mark Andrews
fbfcbe90e2 1181. [func] Add the "key-directory" configuration statement,
which allows the server to look for online signing
                        keys in alternate directories.
2003-08-13 01:41:34 +00:00
Mark Andrews
7fc641e8f2 1180. [func] dnssec-keygen should always generate keys with
protocol 3 (DNSSEC), since it's less confusing
                        that way.
2003-08-13 00:53:02 +00:00
Mark Andrews
1fa20ecda2 1179. [func] Add SIG(0) support to nsupdate. 2003-08-13 00:47:33 +00:00
Mark Andrews
fe73090122 pullup:
Split off the named.conf grammar into a source module separate
from the configuration parser, to facilitate reuse of the latter for
parsing non-BIND configuration files
2003-08-12 07:10:32 +00:00
Mark Andrews
fc12c58264 1169. [func] Identify recursive queries in the query log. 2003-08-12 05:36:03 +00:00
Mark Andrews
6397057426 1159. [bug] MD and MF are not permitted to be loaded by RFC1123. 2003-08-12 05:21:11 +00:00
Mark Andrews
33b82c3a70 1158. [func] Report the client's address when logging notify
messages.
2003-08-12 04:54:59 +00:00
Mark Andrews
79e2dd3eb8 1157. [func] match-clients and match-destinations now accept
keys. [RT #2045]
2003-08-11 05:58:18 +00:00
Mark Andrews
3da9ba9a4c 1153. [func] 'rndc {stop|halt} -p' now reports the process id
of the instance of named being shutdown.
2003-08-11 05:42:52 +00:00
Mark Andrews
9052beb238 pullup
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews
2e7d97c5ba 1151. [bug] nslookup failed to check that the arguments to
the port, timeout, and retry options were
                        valid integers and in range. [RT #2099]

1150.   [bug]           named incorrectly accepted TTL values
                        containing plus or minus signs, such as
                        1d+1h-1s.

1149.   [func]          New function isc_parse_uint32().
2003-08-11 04:48:07 +00:00
Mark Andrews
c4f37c7aa8 1148. [func] 'rndc-confgen -a' now provides positive feedback. 2003-08-11 03:57:34 +00:00
Mark Andrews
27e6e3708d 1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
the OS.  listen-on-v6 { any; }; should no longer
                        result in IPv4 queries be accepted.  Similarly
                        control { inet :: ... }; should no longer result
                        in IPv4 connections being accepted.  This can be
                        overridden at compile time by defining
                        ISC_ALLOW_MAPPED=1.
2003-08-08 07:12:27 +00:00
Mark Andrews
806df27930 1145. [func] "host" no longer reports a NOERROR/NODATA response
by printing nothing. [RT #2065]
2003-08-08 06:20:20 +00:00
Mark Andrews
62acdc453a 1139. [func] It is now possible to flush a given name from the
cache(s) via 'rndc flushname name [view]'. [RT #2051]
2003-08-08 05:32:36 +00:00
Mark Andrews
2bb8b924b9 1135. [func] You can now override the default syslog() facility for
named/lwresd at compile time. [RT #1982]
2003-08-08 04:24:41 +00:00
Mark Andrews
48abf5d772 1132. [func] Improve UPDATE prerequisite failure diagnotic messages. 2003-08-08 04:09:35 +00:00
Mark Andrews
6166435738 1127. [func] rndc: If the server to contact has multiple addresses,
try all of them.
2003-08-08 03:53:53 +00:00
Mark Andrews
72ceb8a6cc pullup:
@Add bind9_getaddresses(), a consistent version of the get_address function
from dig/host/nslookup, nsupdate, and rndc.  This should make it
easier to have the various programs support multiple addresses for a hostname.
2003-08-08 03:40:09 +00:00
Mark Andrews
83db215ce0 1110. [bug] dig should only accept valid abbreviations of +options.
[RT #2003]
2003-08-07 05:55:08 +00:00
Mark Andrews
dcdd24698e 1080. [bug] BIND 8 compatibility: accept bare IP prefixes
as the second element of a two-element top level
                        sort list statement. [RT #1964]
2003-08-07 05:34:35 +00:00
Mark Andrews
0ab730a224 1079. [bug] BIND 8 compatibility: accept bare elements at top
level of sort list treating them as if they were
                        a single element list. [RT #1963]
2003-08-07 05:29:46 +00:00
Mark Andrews
9cadfb2c17 1077. [func] Do not accept further recursive clients when
the total number of of recursive lookups being
                        processed exceeds max-recursive-clients, even
                        if some of the lookups are internally generated.
                        [RT #1915, #1938]
2003-08-07 05:14:01 +00:00
Mark Andrews
9c9e5c572b 1073. [bug] The ADB cache cleaning should also be space driven.
[RT #1915, #1938]
2003-08-07 04:47:36 +00:00
Mark Andrews
946a81d121 1055. [func] Version and hostname queries can now be disabled
using "version none;" and "hostname none;",
                        respectively.

1049.   [func]          "pid-file none;" will disable writing a pid file.
                        [RT #1848]
2003-08-06 06:03:24 +00:00
Mark Andrews
022541a067 1036. [func] Silently drop requests received via multicast as
long as there is no final multicast DNS standard.

1035.   [bug]           If we respond to multicast queries (which we
                        currently do not), respond from a unicast address
                        as specified in RFC 1123. [RT #137]

1034.   [bug]           Ignore the RD bit on multicast queries as specified
                        in RFC 1123. [RT #137]
2003-08-06 04:30:53 +00:00
Mark Andrews
f75356ec50 1032. [func] hostname.bind/txt/chaos now returns the name of
the machine hosting the nameserver.  This is useful
                        in diagnosing problems with anycast servers.
2003-08-04 08:06:49 +00:00
Mark Andrews
ff77225512 pullup:
Move configuration checking to libbind9.
2003-08-04 04:23:56 +00:00
Mark Andrews
8552753ad4 997. [func] Add support for RSA-SHA1 keys (RFC3110). 2003-08-04 02:31:57 +00:00
Mark Andrews
70ad8bd808 1003. [func] Add the +retry option to dig. 2003-08-04 02:19:12 +00:00
Mark Andrews
7242fb3349 workdir was missing 2003-08-04 02:09:04 +00:00
Mark Andrews
043f46fcde 999. [func] "rndc retransfer zone [class [view]]" added.
[RT #1752]
2003-08-04 02:04:47 +00:00
Mark Andrews
3b89807475 997. [func] Add support for RSA-SHA1 keys (RFC3110). 2003-08-04 01:04:44 +00:00
Mark Andrews
96e8abc92a 996. [func] Issue warning if the configuration filename contains
the chroot path.
2003-08-04 00:53:02 +00:00
Mark Andrews
9627b6edd3 993. [func] dig: -v now reports the version. 2003-08-04 00:23:23 +00:00
Mark Andrews
aa46932168 985. [func] Consider network interfaces to be up iff they have
a nonzero IP address rather than based on the
                        IFF_UP flag. [RT #1160]
2003-08-02 01:19:58 +00:00
Mark Andrews
792aa70e13 983. [func] The server now supports generating IXFR difference
sequences for non-dynamic zones by comparing zone
                        versions, when enabled using the new config
                        option "ixfr-from-differences". [RT #1727]
2003-08-02 00:38:59 +00:00
Mark Andrews
9db3cd9779 982. [func] If "memstatistics-file" is set in options the memory
statistics will be written to it.
2003-08-02 00:15:13 +00:00
Mark Andrews
a09a00456c 982. [func] If "memstatistics-file" is set in options the memory
statistics will be written to it.
2003-08-01 23:56:14 +00:00
Mark Andrews
854e4a3bfc 981. [func] The dnssec tools can now take multiple '-r randomfile'
arguments.
2003-08-01 23:50:46 +00:00
Mark Andrews
25368e1a5d 976. [func] named-checkconf will now test load master zone
files (-z).  [RT #1468]
2003-08-01 07:09:50 +00:00
Mark Andrews
2e87e4dc01 add mfc70.dll 2003-08-01 04:52:23 +00:00
Mark Andrews
abd79e7de8 970. [func] 'max-journal-size' can now be used to set a target
size for a journal.
2003-07-31 06:56:51 +00:00
Mark Andrews
2a948b5897 969. [func] dig now supports the undocumented dig 8 feature
of allowing arbitrary labels, not just dotted
                        decimal quads, with the -x option.  This can be
                        used to conveniently look up RFC2317 names as in
                        "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
2003-07-31 04:41:27 +00:00
cvs2git
fb4531edb3 This commit was manufactured by cvs2git to create branch 'v9_3'. 2003-07-30 02:00:55 +00:00
cvs2git
255e133afb This commit was manufactured by cvs2git to create branch 'v9_3'. 2003-07-30 02:00:53 +00:00
Mark Andrews
597e257fdf 1498. [port] bsdos: 5.x support. 2003-07-30 02:00:52 +00:00
Mark Andrews
10f78228b6 remove redundant check [RT #8539] 2003-07-30 00:42:25 +00:00
Mark Andrews
1e2d992eaf hide change #969 till 9.3 2003-07-29 04:50:52 +00:00
cvs2git
bb0807b700 This commit was manufactured by cvs2git to create branch 'v9_3'. 2003-07-25 04:36:47 +00:00
Mark Andrews
da204aa8be 1496. [protocol] dig, nslookup and host now perform nibble lookups
under IP6.ARPA, use -i for IP6.INT (dig and host).
                        lwres now uses IP6.ARPA.
2003-07-25 04:36:46 +00:00
cvs2git
ef1d8051fe This commit was manufactured by cvs2git to create branch 'v9_3'. 2003-07-25 03:31:47 +00:00