Mark Andrews
a821d5fa3d
DNSSEC bis merge from HEAD:
...
1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
1565. [bug] CD flag should be copied to outgoing queries unless
the query is under a secure entry point in which case
CD should be set.
1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
algorithm. Such child zones are treated as unsigned.
1557. [func] Implement missing DNSSEC tests for
* NOQNAME proof with wildcard answers.
* NOWILDARD proof with NXDOMAIN.
Cache and return NOQNAME with wildcard answers.
1541. [func] NSEC now uses new bitmap format.
1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
4521523108
unbalanced tag
2004-03-04 21:05:27 +00:00
Mark Andrews
5bc136b1a1
1537. [func] New option "querylog". If set specify whether query
...
logging is to be enabled or disabled at startup.
2004-03-02 01:11:46 +00:00
Mark Andrews
602558cbe3
sync w/ HEAD
2003-10-21 06:17:00 +00:00
Mark Andrews
df11930cd6
1517. [port] Support for IPv6 interface scanning on HP/UX and
...
TrueUNIX 5.1.
2003-10-07 04:27:43 +00:00
Mark Andrews
a3bda87b91
remove ORG
2003-09-23 07:16:42 +00:00
Mark Andrews
0f6098954d
1513. [doc] Add "US" and "ORG" to root-delgation-only exclude list.
2003-09-23 06:03:11 +00:00
Mark Andrews
069d5cb493
1510. [func] New view option "root-delegation-only". Apply
...
delegation-only check to all TLDs and root.
Note there are some TLDs that are NOT delegation
only (e.g. DE and MUSEUM) these can be excluded
from the checks buy using exclude.
root-delegation-only exclude { "DE"; "MUSEUM"; };
2003-09-19 12:44:39 +00:00
Mark Andrews
d6d893e17b
1509. [bug] Hint zones should accept delegation-only. Forward
...
zone should not accept delegation-only.
1508. [bug] Don't apply delegation-only checks to answers from
forwarders.
1507. [bug] Handle BIND 8 style returns to NS queries to parents
when making delegation-only checks.
1506. [bug] Wrong return type for dns_view_isdelegationonly().
1505. [bug] Uninitialised rdataset in sdb. [RT #8750 ]
1504. [func] New zone type "delegation-only".
2003-09-19 06:20:55 +00:00
Mark Andrews
d6bdfb9aef
1467. [func] $GENERATES now supports optional class and ttl.
2003-09-02 01:11:37 +00:00
Mark Andrews
af1b2d4abb
misc. pullups
2003-08-27 02:33:42 +00:00
Mark Andrews
e0d0647c9d
pullup:
...
alt-transfer-source-v4 -> alt-transfer-source
2003-08-27 02:23:39 +00:00
Mark Andrews
1c2bf5f1cb
1446. [func] Implemented undocumented alternate transfer sources
...
from BIND 8. See use-alt-transfer-source,
alt-transfer-source-v4 and alt-transfer-source-v6.
2003-08-27 02:13:50 +00:00
Mark Andrews
7cf2a51f0c
1443. [func] Masters lists can now be specified and referenced
...
in zone masters clauses and other masters lists.
2003-08-27 01:53:06 +00:00
Mark Andrews
2d7ca109c5
1442. [func] New fuctions for manipulating port lists:
...
dns_portlist_create(), dns_portlist_add(),
dns_portlist_remove(), dns_portlist_match(),
dns_portlist_attach() and dns_portlist_detach().
1441. [func] It is now possible to tell dig to bind to a specific
source port.
1440. [func] It is now possible to tell named to avoid using
certian source ports (avoid-v4-udp-ports,
avoid-v6-udp-ports).
2003-08-27 01:39:27 +00:00
Mark Andrews
19548853e9
1432. [func] The advertised EDNS UDP buffer size can now be set
...
via named.conf (edns-udp-size).
2003-08-26 05:56:18 +00:00
Mark Andrews
c4dc4fd856
1417. [func] ID.SERVER/CHAOS is now a built in zone.
...
See "server-id" for how to configure.
2003-08-26 04:34:17 +00:00
Mark Andrews
4154634631
1412. [func] You can now specify servers to be tried if a nameserver
...
has IPv6 address and you only support IPv4 or the
reverse. See dual-stack-servers.
2003-08-26 03:24:14 +00:00
Mark Andrews
388672fb80
pullup misc. changes
2003-08-25 05:49:57 +00:00
Mark Andrews
c3fedc9282
1402. [cleanup] A6 has been moved to experimental and is no longer
...
fully supported.
2003-08-25 04:16:27 +00:00
Mark Andrews
0146abd893
1501. [func] Allow TCP queue length to be specified via
...
named.conf, tcp-listen-queue.
2003-08-25 02:33:14 +00:00
Mark Andrews
fb118b8418
1394. [func] It is now possible to check if a particular element is
...
in a acl. Remove duplicate entries from the localnets
acl.
1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
is not available in the kernel to prevent accidently
listening on IPv4 interfaces.
2003-08-22 06:24:24 +00:00
Mark Andrews
370732d189
1391. [func] Add support for IPv6 scoped addresses in named.
2003-08-22 05:17:15 +00:00
Mark Andrews
4efb6955c0
1365. [func] "localhost" and "localnet" acls now include IPv6
...
addresses / prefixes.
2003-08-20 03:23:12 +00:00
Mark Andrews
c7c25e99aa
1344. [func] Log if the serial number on the master has gone
...
backwards.
If you have multiple machines specified in the masters
clause you may want to set 'multi-master yes;' to
suppress this warning.
2003-08-19 03:11:19 +00:00
Mark Andrews
4dde5e1d1f
1301. [func] New category 'update-security'.
2003-08-15 02:21:03 +00:00
Mark Andrews
59771f18b8
1254. [func] preferred-glue option from BIND 8.3.
2003-08-14 05:56:10 +00:00
Mark Andrews
45d8fa0d1a
1224. [bug] 'rrset-order' and 'sortlist' should be additive
...
not exclusive.
1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
are supported.
2003-08-14 02:34:18 +00:00
Mark Andrews
e35bff5098
pullup various doc changes
2003-08-13 04:37:07 +00:00
Mark Andrews
48c4c3d66b
1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
...
[RT #2394 ]
2003-08-13 04:35:06 +00:00
Mark Andrews
10e99ae4b5
document the key-directory option
...
document SIG(0) support.
2003-08-13 04:30:15 +00:00
Mark Andrews
79e2dd3eb8
1157. [func] match-clients and match-destinations now accept
...
keys. [RT #2045 ]
2003-08-11 05:58:18 +00:00
Mark Andrews
8cb3b2fed8
1115. [func] Set maximum values for cleaning-interval,
...
heartbeat-interval, interface-interval,
max-transfer-idle-in, max-transfer-idle-out,
max-transfer-time-in, max-transfer-time-out,
statistics-interval of 28 days and
sig-validity-interval of 3660 days. [RT #2002 ]
2003-08-07 06:33:30 +00:00
Mark Andrews
9c9e5c572b
1073. [bug] The ADB cache cleaning should also be space driven.
...
[RT #1915 , #1938 ]
2003-08-07 04:47:36 +00:00
Mark Andrews
946a81d121
1055. [func] Version and hostname queries can now be disabled
...
using "version none;" and "hostname none;",
respectively.
1049. [func] "pid-file none;" will disable writing a pid file.
[RT #1848 ]
2003-08-06 06:03:24 +00:00
Mark Andrews
043f46fcde
999. [func] "rndc retransfer zone [class [view]]" added.
...
[RT #1752 ]
2003-08-04 02:04:47 +00:00
Mark Andrews
792aa70e13
983. [func] The server now supports generating IXFR difference
...
sequences for non-dynamic zones by comparing zone
versions, when enabled using the new config
option "ixfr-from-differences". [RT #1727 ]
2003-08-02 00:38:59 +00:00
Mark Andrews
412c55cfa5
1493. [doc] A6 and "bitstring" labels are now experimental.
2003-07-24 01:17:54 +00:00
Mark Andrews
734c8697d0
1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298 ]
2003-05-15 02:47:18 +00:00
Mark Andrews
5361eb812c
pullup:
...
1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
[RT #2436 ]
2003-05-12 02:06:01 +00:00
Mark Andrews
055c2d75dc
Statistics counter clarification
2003-04-13 04:34:51 +00:00
Mark Andrews
8e9cc3ced1
spelling
2003-02-07 02:39:06 +00:00
Mark Andrews
b1a7576009
1340. [doc] query-source-v6 was missing from options section.
...
[RT #3218 ]
2002-07-02 14:01:45 +00:00
Mark Andrews
b9698bfd48
1325. [bug] Document that internal zones are included in the
...
rndc status results.
2002-07-02 10:12:30 +00:00
Mark Andrews
eeacf1ef3e
remove braces from match-recursive-only definition.
2002-05-17 02:13:56 +00:00
Mark Andrews
477d0d1ff9
enumerate syslog facilities.
2002-05-02 23:31:44 +00:00
Mark Andrews
3855970d74
min-refresh-time et al are not per server but reather globally and not for
...
master zones.
2002-04-22 04:14:25 +00:00
Mark Andrews
03d58c6ef9
pullup:
...
allow transfers from all hosts -> allow transfers to all hosts [RT #2723 ]
2002-04-22 03:43:25 +00:00
Andreas Gustafsson
d8b140ce00
pullup:
...
1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
table of RR types in ARM.
2002-01-23 01:41:17 +00:00
Mark Andrews
a50304c317
pullup:
...
1176. [doc] Document that allow-v6-synthesis is only performed
for clients that are supplied recursive service.
[RT #2260 ]
2002-01-22 06:16:25 +00:00