upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-22 02:20:48 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
17038 commits 18 branches 854 tags 440 MiB
Commit graph

1434 commits

Author SHA1 Message Date
Automatic Updater
bd5ddeb924 update copyright notice 2008-06-24 23:45:56 +00:00
Tatuya JINMEI 神明達哉
0edc9d2bf7 2384. [security] Additional support for query port randomization (change 
#2375) including performance improvement and port range
			specification.  [RT #17949, #18098]
 2008-06-24 02:02:51 +00:00
Automatic Updater
a764b8dcc9 update copyright notice 2008-05-22 23:46:03 +00:00
Evan Hunt
906685e44d Fully randomize UDP query ports to improve forgery resilience. [rt17949] 2008-05-22 21:16:05 +00:00
Evan Hunt
47e37d8ebd Validating lack of DS records at trust anchors wasn't working. [RT #17151] 2007-09-26 04:39:45 +00:00
Automatic Updater
beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Automatic Updater
2859f78491 update copyright notice 2007-06-26 23:46:21 +00:00
Mark Andrews
833c6d566b 2203. [security] Query id generation was cryptographically weak. 
[RT # 16915]
 2007-06-26 02:56:59 +00:00
Automatic Updater
43af05a84f update copyright notice 2007-03-06 02:12:08 +00:00
Mark Andrews
154e92a9e6 2156. [bug] Fix node reference leaks in lookup.c:lookup_find(), 
resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
 2007-03-06 00:50:11 +00:00
Mark Andrews
64d5cc809c update copyright notice 2007-01-08 02:42:00 +00:00
Mark Andrews
9aefa7e508 2126. [bug] Serialise validation of type ANY responses. [RT #16555] 2007-01-08 01:37:53 +00:00
Mark Andrews
44a5930e91 spelling 2006-08-01 03:45:21 +00:00
Mark Andrews
41f4a6a513 update copyright notice 2006-07-20 01:10:30 +00:00
Mark Andrews
28d310d40a of -> or 2006-07-19 01:03:51 +00:00
Mark Andrews
fbcf5c31ae 2049. [bug] Restore SOA before AXFR when falling back from 
a attempted IXFR when transfering in a zone.
                        Allow a initial SOA query before attempting
                        a AXFR to be requested. [RT #16156]
 2006-07-19 00:58:01 +00:00
Mark Andrews
0211c78765 update copyright notice 2006-05-03 00:07:49 +00:00
Shane Kerr
a80207d2a3 Stats for acache. Currently running on senna (ns-ext). 2006-05-02 12:55:31 +00:00
Mark Andrews
f560a1877b 2007. [func] It is now possible to explicitly enable DNSSEC 
validation.  default dnssec-validation no; to
                        be changed to yes in 9.5.0.  [RT #15674]
 2006-03-09 23:38:21 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone. 
New zone option "update-check-ksk yes;".  [RT #15817]
 2006-03-06 01:38:01 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
3497fc3b77 1997. [bug] Named was failing to replace negative cache entries 
when a positive one for the type was learnt.
                        [RT #15818]
 2006-03-02 23:19:20 +00:00
Mark Andrews
1f8449c606 update copyright notice 2006-03-02 00:37:22 +00:00
Mark Andrews
ea407e7082 1991. [cleanup] The configuration data, once read, should be treated 
as readonly.  Expand the use of const to enforce this
                        at compile time. [RT #15813]
 2006-02-28 03:10:49 +00:00
Mark Andrews
ae3a8d847a update copyright notice 2006-02-22 23:50:09 +00:00
Mark Andrews
c017465e4a 1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608] 2006-02-21 23:53:35 +00:00
Mark Andrews
77c5b1c067 1986. [func] Report when a zone is removed. [RT #15849] 2006-02-21 23:17:32 +00:00
Mark Andrews
8fc5e43bd9 1597. [func] Allow notify-source and query-source to be specified 
on a per server basis similar to transfer-source.
                        [RT #6496]
 2006-02-17 00:42:10 +00:00
Mark Andrews
e77385c265 update copyright notice 2006-02-16 23:51:32 +00:00
Mark Andrews
dfb3eacdfb 1983. [func] Two new update policies. "selfsub" and "selfwild". 
[RT #12895]
 2006-02-16 01:38:49 +00:00
Mark Andrews
4dd7e34f48 comment typo 2006-02-01 22:39:17 +00:00
Mark Andrews
deaa25fd63 update copyright notice 2006-01-27 23:57:45 +00:00
Mark Andrews
65fdd79a50 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and 
HMACSHA512 support. [RT #13606]
 2006-01-27 02:50:51 +00:00
Mark Andrews
76f6d0382a 1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] 2006-01-06 00:10:00 +00:00
Mark Andrews
586f82c999 update copyright notice 2006-01-06 00:01:43 +00:00
Mark Andrews
ff3b707f8a 1959. [func] Control the zeroing of the negative response TTL to 
a soa query.  Defaults "zero-no-soa-ttl yes;" and
                        "zero-no-soa-ttl-cache no;". [RT #15460]
 2006-01-05 02:24:27 +00:00
Mark Andrews
1e53d23ec4 1957. [bug] Dig mishandled responses to class ANY queries. 
[RT #15402]
 2006-01-05 01:04:28 +00:00
Mark Andrews
48d9f5bdaa inclu1954. [func] Named now falls back to advertising EDNS with a 
512 byte receive buffer if the initial EDNS queries
                        fail.  [RT #14852]

1953.   [func]          The maximum EDNS UDP response named will send can
                        now be set in named.conf (max-udp-size).  This is
                        independent of the advertised receive buffer
                        (edns-udp-size). [RT #14852]
 2006-01-05 00:10:44 +00:00
Mark Andrews
e770e36d60 update copyright notice 2006-01-04 23:50:23 +00:00
Mark Andrews
f53e702b25 1947. [func] It is now possible to configure named to accept 
expired RRSIGs.  Default "dnssec-accept-expired no;".
                        Setting "dnssec-accept-expired yes;" leaves named
                        vulnerable to replay attacks.  [RT #14685]
 2006-01-04 02:58:42 +00:00
Mark Andrews
cf4e1143ea 1942. [bug] If the name of a DNSKEY match that of one in 
trusted-keys do not attempt to validate the DNSKEY
                        using the parents DS RRset. [RT #15649]
 2005-12-05 00:00:03 +00:00
Mark Andrews
c7d337e4ff 1939. [bug] The resolver could dereference a null pointer after 
validation if all the queries have timed out.
                        [RT #15528]

1938.   [bug]           The validator was not correctly handling unsecure
                        negative responses at or below a SEP. [RT #15528]
 2005-11-03 00:58:00 +00:00
Mark Andrews
c27790ad8e spelling arguement vs argument 2005-10-26 04:59:20 +00:00
Mark Andrews
369f44092a 1927. [bug] Access to soanode or nsnode in rbtdb violated the 
lock order rule and could cause a dead lock.
                        [RT# 15518]
 2005-10-13 02:12:25 +00:00
Mark Andrews
5def46551b update 
1920.   [bug]           The cache rbtdb lock array was too small to
                        have the desired performance characteristics.
                        [RT #15454]
 2005-10-13 01:26:07 +00:00
Mark Andrews
c113cefb9c damp interations adjustments [RT#15404] 2005-09-20 04:33:48 +00:00
Mark Andrews
876546cb4d finetune isc_thread_key implementation [RT #15408] 2005-09-18 07:58:09 +00:00
Mark Andrews
7d014ff9d7 1916. [func] Integrate contibuted IDN code from JPNIC. [RT #15383] 2005-09-09 06:23:39 +00:00
Mark Andrews
847f1d06ab update copyright notice 2005-09-06 03:47:21 +00:00
Mark Andrews
756c1c98e4 1913. [func] Integrate contibuted DLZ code into named. [RT #11382] 2005-09-05 00:20:08 +00:00