Commit graph

219 commits

Author SHA1 Message Date
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
4521523108 unbalanced tag 2004-03-04 21:05:27 +00:00
Mark Andrews
5bc136b1a1 1537. [func] New option "querylog". If set specify whether query
logging is to be enabled or disabled at startup.
2004-03-02 01:11:46 +00:00
Mark Andrews
602558cbe3 sync w/ HEAD 2003-10-21 06:17:00 +00:00
Mark Andrews
df11930cd6 1517. [port] Support for IPv6 interface scanning on HP/UX and
TrueUNIX 5.1.
2003-10-07 04:27:43 +00:00
Mark Andrews
a3bda87b91 remove ORG 2003-09-23 07:16:42 +00:00
Mark Andrews
0f6098954d 1513. [doc] Add "US" and "ORG" to root-delgation-only exclude list. 2003-09-23 06:03:11 +00:00
Mark Andrews
069d5cb493 1510. [func] New view option "root-delegation-only". Apply
delegation-only check to all TLDs and root.
                        Note there are some TLDs that are NOT delegation
                        only (e.g. DE and MUSEUM) these can be excluded
                        from the checks buy using exclude.

                        root-delegation-only exclude { "DE"; "MUSEUM"; };
2003-09-19 12:44:39 +00:00
Mark Andrews
d6d893e17b 1509. [bug] Hint zones should accept delegation-only. Forward
zone should not accept delegation-only.

1508.   [bug]           Don't apply delegation-only checks to answers from
                        forwarders.

1507.   [bug]           Handle BIND 8 style returns to NS queries to parents
                        when making delegation-only checks.

1506.   [bug]           Wrong return type for dns_view_isdelegationonly().

1505.   [bug]           Uninitialised rdataset in sdb. [RT #8750]

1504.   [func]          New zone type "delegation-only".
2003-09-19 06:20:55 +00:00
Mark Andrews
d6bdfb9aef 1467. [func] $GENERATES now supports optional class and ttl. 2003-09-02 01:11:37 +00:00
Mark Andrews
af1b2d4abb misc. pullups 2003-08-27 02:33:42 +00:00
Mark Andrews
e0d0647c9d pullup:
alt-transfer-source-v4 -> alt-transfer-source
2003-08-27 02:23:39 +00:00
Mark Andrews
1c2bf5f1cb 1446. [func] Implemented undocumented alternate transfer sources
from BIND 8.  See use-alt-transfer-source,
                        alt-transfer-source-v4 and alt-transfer-source-v6.
2003-08-27 02:13:50 +00:00
Mark Andrews
7cf2a51f0c 1443. [func] Masters lists can now be specified and referenced
in zone masters clauses and other masters lists.
2003-08-27 01:53:06 +00:00
Mark Andrews
2d7ca109c5 1442. [func] New fuctions for manipulating port lists:
dns_portlist_create(), dns_portlist_add(),
                        dns_portlist_remove(), dns_portlist_match(),
                        dns_portlist_attach() and dns_portlist_detach().

1441.   [func]          It is now possible to tell dig to bind to a specific
                        source port.

1440.   [func]          It is now possible to tell named to avoid using
                        certian source ports (avoid-v4-udp-ports,
                        avoid-v6-udp-ports).
2003-08-27 01:39:27 +00:00
Mark Andrews
19548853e9 1432. [func] The advertised EDNS UDP buffer size can now be set
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
c4dc4fd856 1417. [func] ID.SERVER/CHAOS is now a built in zone.
See "server-id" for how to configure.
2003-08-26 04:34:17 +00:00
Mark Andrews
4154634631 1412. [func] You can now specify servers to be tried if a nameserver
has IPv6 address and you only support IPv4 or the
                        reverse. See dual-stack-servers.
2003-08-26 03:24:14 +00:00
Mark Andrews
388672fb80 pullup misc. changes 2003-08-25 05:49:57 +00:00
Mark Andrews
c3fedc9282 1402. [cleanup] A6 has been moved to experimental and is no longer
fully supported.
2003-08-25 04:16:27 +00:00
Mark Andrews
0146abd893 1501. [func] Allow TCP queue length to be specified via
named.conf, tcp-listen-queue.
2003-08-25 02:33:14 +00:00
Mark Andrews
fb118b8418 1394. [func] It is now possible to check if a particular element is
in a acl.  Remove duplicate entries from the localnets
                        acl.

1393.   [port]          Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
                        is not available in the kernel to prevent accidently
                        listening on IPv4 interfaces.
2003-08-22 06:24:24 +00:00
Mark Andrews
370732d189 1391. [func] Add support for IPv6 scoped addresses in named. 2003-08-22 05:17:15 +00:00
Mark Andrews
4efb6955c0 1365. [func] "localhost" and "localnet" acls now include IPv6
addresses / prefixes.
2003-08-20 03:23:12 +00:00
Mark Andrews
c7c25e99aa 1344. [func] Log if the serial number on the master has gone
backwards.
                        If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to
                        suppress this warning.
2003-08-19 03:11:19 +00:00
Mark Andrews
4dde5e1d1f 1301. [func] New category 'update-security'. 2003-08-15 02:21:03 +00:00
Mark Andrews
59771f18b8 1254. [func] preferred-glue option from BIND 8.3. 2003-08-14 05:56:10 +00:00
Mark Andrews
45d8fa0d1a 1224. [bug] 'rrset-order' and 'sortlist' should be additive
not exclusive.

1223.   [func]          'rrset-order' partially works 'cyclic' and 'random'
                        are supported.
2003-08-14 02:34:18 +00:00
Mark Andrews
e35bff5098 pullup various doc changes 2003-08-13 04:37:07 +00:00
Mark Andrews
48c4c3d66b 1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
[RT #2394]
2003-08-13 04:35:06 +00:00
Mark Andrews
10e99ae4b5 document the key-directory option
document SIG(0) support.
2003-08-13 04:30:15 +00:00
Mark Andrews
79e2dd3eb8 1157. [func] match-clients and match-destinations now accept
keys. [RT #2045]
2003-08-11 05:58:18 +00:00
Mark Andrews
8cb3b2fed8 1115. [func] Set maximum values for cleaning-interval,
heartbeat-interval, interface-interval,
                        max-transfer-idle-in, max-transfer-idle-out,
                        max-transfer-time-in, max-transfer-time-out,
                        statistics-interval of 28 days and
                        sig-validity-interval of 3660 days. [RT #2002]
2003-08-07 06:33:30 +00:00
Mark Andrews
9c9e5c572b 1073. [bug] The ADB cache cleaning should also be space driven.
[RT #1915, #1938]
2003-08-07 04:47:36 +00:00
Mark Andrews
946a81d121 1055. [func] Version and hostname queries can now be disabled
using "version none;" and "hostname none;",
                        respectively.

1049.   [func]          "pid-file none;" will disable writing a pid file.
                        [RT #1848]
2003-08-06 06:03:24 +00:00
Mark Andrews
043f46fcde 999. [func] "rndc retransfer zone [class [view]]" added.
[RT #1752]
2003-08-04 02:04:47 +00:00
Mark Andrews
792aa70e13 983. [func] The server now supports generating IXFR difference
sequences for non-dynamic zones by comparing zone
                        versions, when enabled using the new config
                        option "ixfr-from-differences". [RT #1727]
2003-08-02 00:38:59 +00:00
Mark Andrews
412c55cfa5 1493. [doc] A6 and "bitstring" labels are now experimental. 2003-07-24 01:17:54 +00:00
Mark Andrews
734c8697d0 1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298] 2003-05-15 02:47:18 +00:00
Mark Andrews
5361eb812c pullup:
1199.  [doc]           ARM reference to RFC 2157 should have been RFC 1918.
                       [RT #2436]
2003-05-12 02:06:01 +00:00
Mark Andrews
055c2d75dc Statistics counter clarification 2003-04-13 04:34:51 +00:00
Mark Andrews
8e9cc3ced1 spelling 2003-02-07 02:39:06 +00:00
Mark Andrews
b1a7576009 1340. [doc] query-source-v6 was missing from options section.
[RT #3218]
2002-07-02 14:01:45 +00:00
Mark Andrews
b9698bfd48 1325. [bug] Document that internal zones are included in the
rndc status results.
2002-07-02 10:12:30 +00:00
Mark Andrews
eeacf1ef3e remove braces from match-recursive-only definition. 2002-05-17 02:13:56 +00:00
Mark Andrews
477d0d1ff9 enumerate syslog facilities. 2002-05-02 23:31:44 +00:00
Mark Andrews
3855970d74 min-refresh-time et al are not per server but reather globally and not for
master zones.
2002-04-22 04:14:25 +00:00
Mark Andrews
03d58c6ef9 pullup:
allow transfers from all hosts -> allow transfers to all hosts [RT #2723]
2002-04-22 03:43:25 +00:00
Andreas Gustafsson
d8b140ce00 pullup:
1172.   [doc]           Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
                        table of RR types in ARM.
2002-01-23 01:41:17 +00:00
Mark Andrews
a50304c317 pullup:
1176.   [doc]           Document that allow-v6-synthesis is only performed
                        for clients that are supplied recursive service.
                        [RT #2260]
2002-01-22 06:16:25 +00:00