upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-27 03:51:16 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
26645 commits 18 branches 854 tags 440 MiB
Commit graph

5556 commits

Author SHA1 Message Date
Mark Andrews
98869e60fa whitespace 2015-07-23 17:56:03 +10:00
Tinderbox User
bd84b04e4f regen master 2015-07-21 01:05:05 +00:00
Evan Hunt
8a205b4534 [master] remove accidentally duplicated section on clients-per-query 2015-07-20 15:25:28 -07:00
Tinderbox User
bd9a66d553 regen master 2015-07-15 01:04:58 +00:00
Mark Andrews
84114ec4c7 request-nsid -> request-sit 2015-07-15 08:38:08 +10:00
Mark Andrews
c5eb9add52 add CVE-2015-5477 2015-07-15 07:51:06 +10:00
Tinderbox User
b3338fc248 regen master 2015-07-11 01:05:48 +00:00
Tinderbox User
c0cbdeedb5 regen master 2015-07-10 01:05:03 +00:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 22:53:39 -07:00
Tinderbox User
40f508f08b regen master 2015-07-08 01:04:56 +00:00
Evan Hunt
70d987def5 [master] traffic size stats 
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
 2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Tinderbox User
1879ff4932 regen master 2015-07-06 01:04:49 +00:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the 
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
 2015-07-06 09:44:24 +10:00
Mark Andrews
aa3bffca69 whitespace 2015-07-04 12:50:29 +10:00
Tinderbox User
6cd01c0a96 regen master 2015-06-30 01:04:57 +00:00
Tinderbox User
0a4f0f6ab6 regen master 2015-06-26 01:05:04 +00:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00
Tinderbox User
0da3028ccf regen master 2015-06-20 01:05:58 +00:00
Witold Krecicki
6a3249533a fix rpz-client-ip documentation [RT #39783] 2015-06-19 10:23:53 +02:00
Tinderbox User
b708ffc480 regen master 2015-06-19 01:05:11 +00:00
Mukund Sivaraman
f4d1c19691 Add comma 2015-06-17 12:23:44 +05:30
Mark Andrews
572e95f52a add release notes for CVE-2015-4620 2015-06-17 11:19:53 +10:00
Tinderbox User
871ab4edd8 regen master 2015-06-06 01:06:45 +00:00
Mark Andrews
94f7158d44 update rpz doc as per rt39703 2015-06-05 11:13:02 +10:00
Tinderbox User
335c82aebd regen master 2015-06-05 01:05:03 +00:00
Evan Hunt
8c9fba44a4 [master] further RPZ fixes 
4131.	[bug]		Addressed further problems with reloading RPZ
			zones. [RT #39649]
 2015-06-03 18:18:55 -07:00
Tinderbox User
22be030b50 regen master 2015-05-29 01:04:57 +00:00
Tinderbox User
431e5c81db update copyright notice / whitespace 2015-05-28 23:45:24 +00:00
Tinderbox User
481870b95f regen master 2015-05-28 01:04:54 +00:00
Mark Andrews
598b502695 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing 
key as per RFC 7344, Section 4.1. [RT #37215]
 2015-05-27 15:25:45 +10:00
Tinderbox User
661e7fbf77 regen master 2015-05-22 01:04:47 +00:00
Evan Hunt
f5c20627f4 [master] fix tags 2015-05-21 14:29:22 -07:00
Mukund Sivaraman
72a1c3f1a7 Update notes.xml and CHANGES for #39567 2015-05-21 21:45:47 +05:30
Mukund Sivaraman
705cea35a8 Fix RPZ radix tree search() for CLIENT-IP triggers (#39481) 2015-05-21 11:10:49 +05:30
Tinderbox User
b9a0676eec regen master 2015-05-21 01:04:46 +00:00
Evan Hunt
19365b43e9 [master] ensure rpz summary consistence during AXFR updates 
4121.	[bug]		When updating a response-policy zone via AXFR,
			summary data about other policy zones could fall
			out of sync. Ultimately this could trigger an
			assertion failure in rpz.c. [RT #39567]
 2015-05-20 15:00:50 -07:00
Tinderbox User
e9ed929fd1 regen master 2015-05-20 01:04:55 +00:00
Evan Hunt
7e6cf6fc6e [master] address a possible policy update race 
4120.	[bug]		A bug in RPZ could cause the server to crash if
			policy zones were updated while recursion was
			pending for RPZ processing of an active query.
			[RT #39415]
 2015-05-19 15:47:42 -07:00
Mark Andrews
8f20f6c9d7 4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534. 2015-05-15 08:22:25 +10:00
Tinderbox User
7f18387d4b regen master 2015-05-08 01:05:05 +00:00
Mukund Sivaraman
b947e1a521 Fix a bug in RPZ that could cause unwanted recursion (#39229) 
Conflicts:
	doc/arm/notes.xml
 2015-05-07 08:29:36 +05:30
Tinderbox User
6d45011a65 regen master 2015-05-06 01:05:06 +00:00
Tinderbox User
395c952141 regen master 2015-05-05 01:05:07 +00:00
Tinderbox User
e668599e6a regen master 2015-04-25 01:05:56 +00:00
Mark Andrews
e77e449549 4109. [port] linux: support reading the local port range from 
net.ipv4.ip_local_port_range. [RT # 39379]
 2015-04-25 08:25:42 +10:00
Tinderbox User
8168c28739 regen master 2015-04-24 01:05:03 +00:00
Evan Hunt
ef1aaab9ed [master] more verbose CHANGES note, added release note 
4108.	[func]		An additional NXDOMAIN redirect method (option
			"nxdomain-redirect") has been added, allowing
			redirection to a specified DNS namespace instead
			of a single redirect zone. [RT #37989]
 2015-04-23 09:40:07 -07:00
Mark Andrews
c82b378115 4108. [func] A additional nxdomain redirect (nxdomain-redirect) 
method is now supported. [RT #37989]
 2015-04-23 16:57:15 +10:00
Tinderbox User
645a03d61e regen master 2015-04-16 01:04:55 +00:00
Evan Hunt
fc3ed1dbda [master] fix +split and +rrcomments with dig +short 
4101.	[bug]		dig: the +split and +rrcomments options didn't
			work with +short. [RT #39291]
 2015-04-15 09:50:07 -07:00
Tinderbox User
24abfe433e regen master 2015-04-14 01:05:08 +00:00
Tinderbox User
6a6ceba6fe update copyright notice / whitespace 2015-04-13 23:45:23 +00:00
Jeremy C. Reed
2637d30fbd docbook <command> tags around named server references 2015-04-13 11:46:35 -05:00
Jeremy C. Reed
2b66b8b6fb fix mismatched docbook tag 2015-04-13 11:38:40 -05:00
Evan Hunt
d9b37259f3 [master] hold a reference on fetch context during query 
4094.	[bug]		A race during shutdown or reconfiguration could
			cause an assertion in mem.c. [RT #38979]
 2015-04-08 14:33:45 -07:00
Tinderbox User
0d00a726fe regen master 2015-04-08 01:05:07 +00:00
Evan Hunt
f28e5058c3 [master] dig can now learn the SIT value when retrying 
4093.	[func]		Dig now learns the SIT value from truncated
			responses when it retries over TCP. [RT #39047]
 2015-04-06 23:16:54 -07:00
Mark Andrews
febb020dce 4092. [bug] 'in-view' didn't work for zones beneath a empty zone. 
[RT #39173]
 2015-04-07 13:21:33 +10:00
Tinderbox User
ed38240f42 regen master 2015-04-07 01:05:01 +00:00
Evan Hunt
1e15a048c0 [master] minor doc fixes 2015-04-06 13:48:29 -07:00
Mark Andrews
362a13ce42 add missing entries 2015-04-02 17:10:27 +11:00
Tinderbox User
b4556ecdbc regen master 2015-03-11 01:04:49 +00:00
Mark Andrews
7b52254bf3 Add warning about configuration inheritence with in-view 2015-03-11 10:42:34 +11:00
Tinderbox User
53e1e7cec5 regen master 2015-03-10 01:04:50 +00:00
Mark Andrews
4ae7a31251 document the EDNS version is logged 2015-03-10 07:27:10 +11:00
Mark Andrews
1b05d22789 4082. [bug] Incrementally sign large inline zone deltas. 
[RT #37927]
 2015-03-05 09:59:29 +11:00
Evan Hunt
ff295743c2 [master] release note for change #4013 2015-03-04 09:06:03 -08:00
Tinderbox User
947d37484e regen master 2015-03-04 01:04:48 +00:00
Evan Hunt
7ae96d8823 [master] add "lock-file" and fix up singleton code 
4080.	[func]		Completed change #4022, adding a "lock-file" option
			to named.conf to override the default lock file,
			in addition to the "named -X <filename>" command
			line option.  Setting the lock file to "none"
			using either method disables the check completely.
			[RT #37908]
 2015-03-02 19:27:54 -08:00
Tinderbox User
603de7394f regen master 2015-03-03 01:04:47 +00:00
Mukund Sivaraman
84f95ddb25 Update win32 configure for --enable-querytrace (#37520) 
Also enable querytrace when --enable-developer is specified.
 2015-03-02 12:57:50 +05:30
Tinderbox User
548a24c3d3 regen master 2015-02-28 01:05:06 +00:00
Tinderbox User
0eea9763d8 regen master 2015-02-26 01:04:45 +00:00
Tinderbox User
d06befed22 regen master 2015-02-24 01:04:44 +00:00
Evan Hunt
7acc2f2156 [master] fix LOADPENDING issues 
4063.	[bug]		Asynchronous zone loads were not handled
			correctly when the zone load was already in
			progress; this could trigger a crash in zt.c.
			[RT #37573]
 2015-02-22 20:43:39 -08:00
Tinderbox User
659d063f23 regen master 2015-02-08 01:05:11 +00:00
Evan Hunt
591389c7d4 [master] 5011 tests and fixes 
4056.	[bug]		Expanded automatic testing of trust anchor
			management and fixed several small bugs including
			a memory leak and a possible loss of key state
			information. [RT #38458]

4055.	[func]		"rndc managed-keys" can be used to check status
			of trust anchors or to force keys to be refreshed,
			Also, the managed keys data file has easier-to-read
			comments.  [RT #38458]
 2015-02-05 17:18:15 -08:00
Tinderbox User
de283bda6a regen master 2015-02-06 01:04:48 +00:00
Francis Dupont
1059bc2e42 added mdig tool 2015-02-04 14:22:32 +01:00
Evan Hunt
801fb8b894 [master] avoid crash due to managed-key rollover 
4053.	[security]	Revoking a managed trust anchor and supplying
			an untrusted replacement could cause named
			to crash with an assertion failure.
			(CVE-2015-1349) [RT #38344]
 2015-02-03 18:25:28 -08:00
Tinderbox User
9c716f839c regen master 2015-02-04 01:04:44 +00:00
Evan Hunt
7267d1f335 [master] clarify edns-udp-size doc 2015-02-03 13:35:34 -08:00
Mukund Sivaraman
e3e783a0e9 Update notes.xml for #38454 2015-02-03 12:07:28 +05:30
Tinderbox User
73a1443878 regen master 2015-01-23 01:04:53 +00:00
Francis Dupont
0ee7e491d4 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2015-01-22 09:25:18 +01:00
Tinderbox User
3e240d6559 regen master 2015-01-22 01:04:47 +00:00
Evan Hunt
0936da207d [master] oops, semicolons were still wrong 2015-01-21 11:41:18 -08:00
Francis Dupont
050846b17b Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2015-01-21 20:36:24 +01:00
Francis Dupont
6089bce129 missing '-' in keep-response-order 2015-01-21 20:34:19 +01:00
Evan Hunt
b892b31f75 [master] reformat response-policy grammar 
There was an overly long line that ran off the end of the
page in the PDF; also missing semicolons and close brace.
 2015-01-21 11:19:58 -08:00
Evan Hunt
2817aa56ca [master] "rndc modzone" 
4043.	[func]		"rndc modzone" can be used to modify the
			configuration of an existing zone, using similar
			syntax to "rndc addzone". [RT #37895]
 2015-01-20 22:34:16 -08:00
Evan Hunt
b88b75c2b8 [master] correct CHANGES note 2015-01-20 18:33:53 -08:00
Tinderbox User
d9184858dd regen master 2015-01-21 01:04:51 +00:00
Evan Hunt
761d135ed6 [master] add TCP pipelining support 
4040.	[func]		Added server-side support for pipelined TCP
			queries. TCP connections are no longer closed after
			the first query received from a client. (The new
			"keep-response-order" option allows clients to be
			specified for which the old behavior will still be
			used.) [RT #37821]
 2015-01-20 16:14:09 -08:00
Tinderbox User
dddceb7732 update copyright notice / whitespace 2015-01-14 23:45:22 +00:00
Tony Finch
eb4221895f doc: ignore and clean up isc-notes-html.xsl 2015-01-14 17:25:05 +05:30
Tinderbox User
ef8014e56f regen master 2015-01-14 01:04:44 +00:00
Tinderbox User
a6ca100924 update copyright notice / whitespace 2015-01-13 23:45:21 +00:00
Evan Hunt
03f979494f [master] document default DNSKEY TTL 
- see RT #38268
 2015-01-13 09:54:57 -08:00
Evan Hunt
82cf456943 [master] document dscp option 2015-01-13 09:15:51 -08:00
Tinderbox User
8402f7bfea regen master 2015-01-13 01:04:50 +00:00
Mukund Sivaraman
a6f0e9c985 Add NTA persistence (#37087) 
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
 2015-01-12 09:07:48 +05:30
Tinderbox User
fae13836a3 regen master 2015-01-12 03:30:27 +00:00
Tinderbox User
2f161339d2 regen master 2015-01-11 01:05:05 +00:00
Tinderbox User
f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Evan Hunt
6124e803cf [master] revise pkcs11 doc 2015-01-10 11:40:01 -08:00
Mark Andrews
7952156995 4032. [bug] Built-in "empty" zones did not correctly inherit the 
"allow-transfer" ACL from the options or view.
                        [RT #38310]
 2015-01-10 22:01:42 +11:00
Evan Hunt
e5073ab47c [master] improve pkcs11.xml documentation 
see RT #37801
 2015-01-10 00:36:18 -08:00
Tinderbox User
cd32f419a8 regen master 2015-01-09 01:05:02 +00:00
Tinderbox User
63b0524b96 update copyright notice / whitespace 2015-01-08 23:45:22 +00:00
Evan Hunt
fce754ac0b [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2015-01-07 17:26:42 -08:00
Evan Hunt
d6850bee24 [master] clean up release note stylesheets 2015-01-07 17:26:03 -08:00
Tinderbox User
11e9368a22 regen master 2015-01-08 01:04:51 +00:00
Tinderbox User
b129f72d95 update copyright notice / whitespace 2015-01-07 23:45:22 +00:00
Mukund Sivaraman
47ba2677db Update ARM for the named -L option, etc. [RT #38057] 2015-01-08 04:49:17 +05:30
Evan Hunt
74eb2f5cbc [master] rndc showzone / rndc delzone of non-added zones 
4030.	[func]		"rndc delzone" is now applicable to zones that were
			configured in named.conf, as well as zones that
			were added via "rndc addzone". (Note, however, that
			if named.conf is not also modified, the deleted zone
			will return when named is reloaded.) [RT #37887]

4029.	[func]		"rndc showzone" displays the current configuration
			of a specified zone. [RT #37887]
 2015-01-06 22:57:57 -08:00
Tinderbox User
8f09f14275 regen master 2015-01-06 01:04:38 +00:00
Tinderbox User
225908aece update copyright notice / whitespace 2015-01-05 23:45:23 +00:00
Evan Hunt
43d798dea3 [master] suppress table of contents in notes.html and notes.pdf 2015-01-05 14:31:23 -08:00
Evan Hunt
6306dd073e [master] add style and developer guide source 2014-12-31 12:50:19 -08:00
Tinderbox User
d5ece58e3b regen master 2014-12-19 01:04:53 +00:00
Mukund Sivaraman
47d837a499 Make named a singleton process [RT#37908] 
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
 2014-12-18 12:31:25 +05:30
Tinderbox User
c60ee6edf1 regen master 2014-12-17 01:04:43 +00:00
Evan Hunt
be7fba8019 [master] adjust max-recursion-queries 
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]
 2014-12-15 22:28:06 -08:00
Tinderbox User
25ae0fd27c regen master 2014-12-06 01:05:00 +00:00
Mark Andrews
03fd9cb81c 4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery 
resulting in updates being sent to the wrong server.
                        [RT #37925]
 2014-12-05 18:26:38 +11:00
Mark Andrews
017aa9aef6 4019. [func] If named is not configured to validate the answer 
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
 2014-12-05 17:47:26 +11:00
Tinderbox User
ab3bdbd2ee regen master 2014-12-04 01:04:55 +00:00
Mark Andrews
693d70f96f 4017. [testing] Add system test to check lookups to legacy servers 
with broken DNS behaviour. [RT #37965]
 2014-12-04 07:01:52 +11:00
Tinderbox User
88a2182a1a regen master 2014-12-03 01:04:59 +00:00
Mark Andrews
ea3aa401bc 4015. [bug] Nameservers that are skipped due to them being 
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]
 2014-12-03 11:34:07 +11:00
Francis Dupont
5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Tinderbox User
ddbd14ec13 regen master 2014-11-22 01:05:01 +00:00
Evan Hunt
92384667ff [master] delv +tcp 
4009.	[func]		delv: added a +tcp option. [RT #37855]
 2014-11-21 09:42:04 -08:00
Mark Andrews
64d715c22a 4007. [doc] Remove acl forward reference restriction. [RT #37772] 2014-11-21 15:26:37 +11:00
Tinderbox User
a17033f2c4 regen master 2014-11-21 01:04:39 +00:00
Evan Hunt
0d569f0e27 [master] add missing grammar 2014-11-20 15:36:22 -08:00
Evan Hunt
166a7500be [master] add notes 2014-11-20 13:16:09 -08:00
Tinderbox User
795beed720 regen master 2014-11-20 01:04:52 +00:00
Evan Hunt
c4f54e5bd1 [master] add max-recursion-queries 
also fixes and documentation for max-recursion-depth
 2014-11-18 22:02:02 -08:00
Tinderbox User
d6984fd680 regen master 2014-11-19 01:05:15 +00:00
Evan Hunt
3230429e17 [master] limit recursion depth and iterative queries 
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
 2014-11-17 23:24:44 -08:00
Tinderbox User
ebca35d493 regen master 2014-11-15 01:06:26 +00:00
Evan Hunt
e32d354f75 [master] allow arbitrary-size rndc output 
4005.	[func]		The buffer used for returning text from rndc
			commands is now dynamically resizable, allowing
			arbitrarily large amounts of text to be sent back
			to the client. (Prior to this change, it was
			possible for the output of "rndc tsig-list" to be
			truncated.) [RT #37731]
 2014-11-14 15:58:54 -08:00
Mukund Sivaraman
16c86a4980 Update .gitgnore files (ISC-Bugs #37773) 2014-11-11 11:47:02 +05:30
Tinderbox User
369963ad26 regen master 2014-11-06 01:05:06 +00:00
Evan Hunt
3cc8c7d630 [master] fix nxrrset in nxdomain redirection 
4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
			from the redirect zone. [RT #37722]
 2014-11-04 23:49:56 -08:00
Evan Hunt
ce96d4326c [master] new mkeys and nzf naming format 
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
 2014-11-04 19:43:27 -08:00
Tinderbox User
daf4204f82 regen master 2014-11-05 01:04:56 +00:00
Mark Andrews
257d7508c8 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:29:36 +11:00
Tinderbox User
6469eef791 regen master 2014-11-01 01:05:08 +00:00
Mark Andrews
d68f8db3ee add end of life statement 2014-10-31 13:08:42 +11:00
Tinderbox User
def82e8de9 regen master 2014-10-31 01:04:53 +00:00
Mark Andrews
f0a54842b1 3994. [func] Dig now supports setting the last unassigned DNS 
header flag bit (dig +zflag). [RT #37421]
 2014-10-31 10:16:00 +11:00
Evan Hunt
0c9b9b5e92 [master] document that zone rate-limiters have a floor of 1/second 2014-10-30 14:31:00 -07:00
Mark Andrews
0f5144163c 3993. [func] Dig now supports EDNS negotiation by default. 
(dig +[no]ednsnegotiation). [RT #37604]
 2014-10-30 23:13:12 +11:00
Tinderbox User
a3ff24aaa5 regen master 2014-10-30 01:05:12 +00:00
Mark Andrews
f274cbeaed 3992. [func] DiG can now send queries without questions 
(dig +header-only). [RT #37599]
 2014-10-30 11:42:02 +11:00
Mark Andrews
00fb0253c9 3991. [func] Add the ability to buffer logging output by specifying 
"buffered yes;" when defining a channel. [RT #26561]
 2014-10-30 11:37:05 +11:00
Tinderbox User
eaaf00efc0 regen master 2014-10-23 01:04:55 +00:00
Evan Hunt
de41f327d9 [master] missed a ticket number 2014-10-22 11:05:19 -07:00
Evan Hunt
e179fcd4dc [master] [rt35857] relnote 2014-10-22 10:53:43 -07:00
Evan Hunt
512e41f44d [master] [rt36945] relnote 2014-10-22 10:45:27 -07:00
Evan Hunt
c69e3a95f0 [master] [rt36892] relnote 2014-10-22 10:40:53 -07:00
Evan Hunt
a80fc8467d [master] [rt37138] relnote 2014-10-22 10:33:41 -07:00
Evan Hunt
8f2a79879e [master] [rt37159] relnote 2014-10-22 10:24:20 -07:00
Evan Hunt
6e23e76b5d [master] [rt37172] relnote 2014-10-22 10:20:27 -07:00
Evan Hunt
9d49dba3b7 [master] [rt37197] relnote 2014-10-22 10:12:30 -07:00
Evan Hunt
44f1102bfb [master] [rt37410] relnote 2014-10-22 10:05:46 -07:00
Evan Hunt
42fa62dd31 [master] [rt37506] relnote 2014-10-22 10:01:35 -07:00
Evan Hunt
7be3c12291 [master] more relnotes backfill 2014-10-21 22:58:26 -07:00
Tinderbox User
6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Evan Hunt
67c6b5edd0 [master] backfill release notes 2014-10-21 16:42:23 -07:00
Mark Andrews
4140a96f22 3987. [func] Allow the zone serial of a dynamically updatable 
zone to be updated via rndc. [RT #37404]
 2014-10-21 18:15:42 +11:00
Tinderbox User
c20d6e4542 regenerate 2014-10-21 06:52:24 +00:00
Tinderbox User
30c0c7470d regen master 2014-10-21 06:42:51 +00:00
Evan Hunt
dd66b77417 [master] [rt37398] version string in ARM page footers 
3986.	[doc]		Add the BIND version number to page footers
			in the ARM. [RT #37398]
 2014-10-20 23:34:21 -07:00
Tinderbox User
78ec962d98 regen master 2014-10-21 01:04:47 +00:00
Evan Hunt
498b061031 [master] allow 1-week nta-lifetime/nta-recheck 
3983.	[bug]		Change #3940 was incomplete: negative trust anchors
			could be set to last up to a week, but the
			"nta-lifetime" and "nta-recheck" options were
			still limted to one day. [RT #37522]
 2014-10-20 13:40:17 -07:00
Tinderbox User
45a48ac5e2 regenerate 2014-10-20 20:01:30 +00:00
Tinderbox User
1c57c3f79d [master] Add generated notes.html and notes.pdf to git repository 2014-10-20 20:00:05 +00:00
Tinderbox User
2fa992d017 regen master 2014-10-20 19:55:39 +00:00
Evan Hunt
90e0af6bc6 [master] include relnotes in doc 
3982.	[doc]		Include release notes in product documentation.
			[RT #37272]
 2014-10-20 12:49:14 -07:00
Tinderbox User
6478b87fd2 regen master 2014-10-17 01:04:36 +00:00
Tinderbox User
28b2fddfd4 update copyright notice 2014-10-16 23:45:23 +00:00
Jeremy C. Reed
7615f6954f Fix grammar in ARM suh as was fixed in rndc manual. 
This is prompted by ticket #37505 from chucka.
 2014-10-16 11:58:48 -05:00
Jeremy C. Reed
edad003e63 Remove the apostrophe 's from plural acronyms 
This is to be consistent with our common usage of just using a
plural "s" without apostrophe.

This was brought up via discussion in ticket 37505.

I didn't have this reviewed.
 2014-10-16 11:55:51 -05:00
Tinderbox User
b68a2d272b regen master 2014-10-02 01:05:48 +00:00
Jeremy C. Reed
0b25d4d86a Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-10-01 11:28:53 -05:00
Jeremy C. Reed
35bd3dff86 add missing space and fix typo 2014-10-01 11:28:33 -05:00
Tinderbox User
60c29cf21a regen master 2014-09-29 01:05:38 +00:00
Mark Andrews
10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Tinderbox User
a8a5c3eb62 regen master 2014-09-28 01:05:36 +00:00
Mark Andrews
531d6f6bc3 fix response-policy synopsis 2014-09-27 11:23:05 +10:00
Tinderbox User
4fe1df3962 regen master 2014-09-14 01:05:19 +00:00
Tinderbox User
c25602ed66 regen master 2014-09-13 01:05:26 +00:00
Tinderbox User
95d0bdf2b4 regen master 2014-09-12 01:05:28 +00:00
Evan Hunt
0c9c74d9f9 [master] remove RRL classifier doc (feature not committed here yet) 2014-09-11 10:15:38 -07:00
Jeremy C. Reed
c8757da885 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-09-11 07:18:57 -07:00
Jeremy C. Reed
add5273040 [master] minor grammar change 2014-09-11 07:18:24 -07:00
Tinderbox User
8908291ce5 regen master 2014-09-11 01:05:15 +00:00
Jeremy C. Reed
87f234b1d4 [master] add servfail-ttl to options grammar 2014-09-10 13:15:05 -07:00
Mark Andrews
947cf282a7 3949. [experimental] Experimental support for draft-andrews-edns1 by sending 
EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
                        building).  Add support for limiting the EDNS version
                        advertised to servers: server { edns-version 0; };
                        Log the EDNS version received in the query log.
                        [RT #35864]
 2014-09-10 15:31:40 +10:00
Mark Andrews
8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Tinderbox User
5fa6a064b8 regen master 2014-09-05 19:26:47 +00:00
Evan Hunt
a3f3f73efb [master] add package version to scope statement 2014-09-05 12:18:14 -07:00
Evan Hunt
cf47fe2ddc [master] retain release info when updating copyright 2014-09-05 11:28:32 -07:00
Evan Hunt
1aa8b80767 [master] fix warnings/doc errors 
- possible use before assignment in query.c
- missing <varlistentry> in ARM
 2014-09-04 18:35:30 -07:00
Tinderbox User
948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981 [master] servfail cache 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
 2014-09-03 23:28:14 -07:00
Evan Hunt
7ae9399897 [master] add version number to ARM 
3941.	[doc]		Include the BIND version number in the ARM. [RT #37067]
 2014-09-03 20:29:24 -07:00
Evan Hunt
3d066288ad [master] [rt37069] update NTA limit to a week 
3940.	[func]		"rndc nta" now allows negative trust anchors to be
			set for up to one week. [RT #37069]
 2014-09-03 19:00:03 -07:00
Tinderbox User
aa1905addf regen master 2014-08-31 01:47:15 +00:00
Tinderbox User
c8d27399fb remove embrionic paragraph 2014-08-31 01:40:55 +00:00
Tinderbox User
59564e2b1f Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2014-08-31 01:32:27 +00:00
Evan Hunt
f4aaffb53c [master] fix xml error 2014-08-29 18:16:57 -07:00
Tinderbox User
2272d9a445 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2014-08-30 01:01:25 +00:00
Evan Hunt
d46855caed [master] ECS authoritative support 
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
 2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching 
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
 2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve 
sit-secrets documentation. [RT #36980]
 2014-08-29 14:35:21 +10:00
Tinderbox User
78c3882f77 regen master 2014-08-26 01:05:40 +00:00
Tinderbox User
cefd74ae81 regen master 2014-08-23 01:06:12 +00:00
Jeremy C. Reed
a0707b6acf [36877] added doc about geoip-directory 2014-08-22 08:36:33 -05:00
Jeremy C. Reed
beb7389b41 remove period punctuation at end of title in <title> tags 
This was in the bibliography <biblioentry> entries which
already generates the desired punctuation.
Most was already correct, but some had junk periods.
 2014-08-22 08:20:44 -05:00
Jeremy C. Reed
bd8f309144 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-08-22 08:18:16 -05:00
Evan Hunt
e0421bf2c5 [master] doc masterfile-style 
3919.	[doc]		Added doc for masterfile-style. [RT #36823]
 2014-08-21 22:15:36 -07:00
Mark Andrews
d90344224a 3918. [doc] Update check-spf documentation. [RT #36910] 2014-08-22 11:49:58 +10:00
Jeremy C. Reed
9e7c5f15ca miscellaneous minor fixes 
Say named instead of Named (be consistent).

add sit-secret, automatic-interface-scan, policy tcp-only to grammar

lowercase All-per-second to all-per-second

fix typo cn to can

Note this was not reviewed.
 2014-08-20 15:45:57 -05:00
Tinderbox User
a24330c480 regen master 2014-08-16 01:06:20 +00:00
Tinderbox User
aebd0e85bf update copyright notice 2014-08-15 23:45:20 +00:00
Mark Andrews
15a885dfc6 remove duplicate request-ixfr rt36878 
(cherry picked from commit 0a484c39fc)
 2014-08-16 08:51:20 +10:00
Jeremy C. Reed
821350367e fix typos or misspellings 2014-08-15 10:35:31 -05:00
Tinderbox User
3e80f25d33 regen master 2014-08-06 05:17:24 +00:00
Evan Hunt
d0ffef73fd [35925] add more EDNS EXPIRE doc, clarify CHANGES note 3911 2014-08-05 19:32:46 -07:00
Mark Andrews
43b9737b11 3911. [func] Implement EDNS EXPIRE option client side. [RT #35925] 2014-08-06 11:50:40 +10:00
Evan Hunt
2383eb5272 [master] add CAA rdata support 
3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]
 2014-07-29 08:40:35 -07:00
Mark Andrews
bc98d5a4c6 7314:Extension Mechanisms for DNS (EDNS) EXPIRE Option 2014-07-18 10:25:35 +10:00
Tinderbox User
d9f0b06dc2 regen master 2014-07-16 01:05:40 +00:00
Tinderbox User
61ab11c0ec regen master 2014-06-19 01:05:10 +00:00
Evan Hunt
b8a9632333 [master] complete NTA work 
3882.	[func]		By default, negative trust anchors will be tested
			periodically to see whether data below them can be
			validated, and if so, they will be allowed to
			expire early. The "rndc nta -force" option
			overrides this behvaior.  The default NTA lifetime
			and the recheck frequency can be configured by the
			"nta-lifetime" and "nta-recheck" options. [RT #36146]
 2014-06-18 16:50:38 -07:00
Tinderbox User
6f12058975 regen master 2014-06-17 01:05:10 +00:00
Tinderbox User
70b01b2d03 regen master 2014-06-04 01:05:06 +00:00
Mark Andrews
93d4128dcd 3869. [doc] Document that in-view zones cannot be used for 
response policy zones. [RT #35941]
 2014-06-03 13:37:21 +10:00
Tinderbox User
f5c27ecceb regen master 2014-05-31 01:05:50 +00:00
Evan Hunt
0cfb247368 [master] rndc nta 
3867.	[func]		"rndc nta" can now be used to set a temporary
			negative trust anchor, which disables DNSSEC
			validation below a specified name for a specified
			period of time (not exceeding 24 hours).  This
			can be used when validation for a domain is known
			to be failing due to a configuration error on
			the part of the domain owner rather than a
			spoofing attack. [RT #29358]
 2014-05-29 22:22:53 -07:00
Tinderbox User
f5ae3cca1d regen master 2014-05-24 01:05:32 +00:00
Tinderbox User
fc74b733bf regen master 2014-05-17 01:05:14 +00:00
Evan Hunt
896f49f8bd [master] increase and allow configuration of lwresd tasks/clients 
3852.	[func]		Increase the default number of clients available
			for servicing lightweight resolver queries, and
			make them configurable via the "lwres-tasks" and
			"lwres-clients" options.  (Thanks to Tomas Hozza.)
			[RT #35857]
 2014-05-15 22:01:19 -07:00
Tinderbox User
b90c4f0646 regen master 2014-05-15 05:05:58 +00:00
Tinderbox User
6bcac4b58d regen master 2014-05-15 04:46:54 +00:00
Tinderbox User
8e16b30787 regen master 2014-05-15 03:57:31 +00:00
Tinderbox User
297342940e regen master 2014-05-14 01:05:10 +00:00
Tinderbox User
e68c527dff regen master 2014-04-30 01:05:11 +00:00
Tinderbox User
9e52eec793 regenerate 2014-04-23 18:35:38 +00:00
Tinderbox User
e108f2ec64 regen master 2014-04-23 18:28:07 +00:00
Evan Hunt
2ae159b376 [master] globally rename "delve" to "delv" 
3817.	[func]		The "delve" command is now spelled "delv" to avoid
			a namespace collision with the Xapian project.
			[RT #35801]
 2014-04-23 11:14:12 -07:00
Tinderbox User
f39512a917 regen master 2014-04-20 01:05:19 +00:00
Evan Hunt
7318bbc262 [master] serial-update-method date; 
3811.	[func]		"serial-update-method date;" sets serial number
			on dynamic update to today's date in YYYYMMDDNN
			format. (Thanks to Bradley Forschinger.) [RT #24903]
 2014-04-17 16:05:50 -07:00
Evan Hunt
baa4c2f101 [master] remove outdated files from doc directory 2014-04-16 22:57:54 -07:00
Tinderbox User
bcd092ea1e regenerate 2014-04-17 05:49:55 +00:00
Tinderbox User
27963ad220 regen master 2014-04-17 01:05:20 +00:00
Mark Andrews
993cde8f0f 3809. [doc] Fix SIT and NSID documentation. 2014-04-16 15:53:30 +10:00
Tinderbox User
1f30da8ae0 regen master 2014-04-15 01:05:23 +00:00
Evan Hunt
efa4dcc9da [master] more prefetch doc improvement 2014-04-14 16:36:06 -07:00
Jeremy C. Reed
4bda053938 Fix typo: word was repeated 2014-04-14 09:50:22 -05:00
Evan Hunt
2dc978b8a1 [master] fix "prefetch" doc 
3808.	[doc]		Clean up "prefetch" documentation. [RT #35751]
 2014-04-13 18:50:34 -07:00
Tinderbox User
1d94248a12 update copyright notice 2014-04-12 23:46:08 +00:00
Evan Hunt
682d0209e8 [master] customize configure --help 2014-04-11 17:35:54 -07:00
Tinderbox User
a87f0e88e2 regen master 2014-04-11 01:05:14 +00:00
Jeremy C. Reed
d06f13912c Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-04-10 17:16:23 -05:00
Jeremy C. Reed
7ee973f74c fix typo 2014-04-10 17:13:46 -05:00
Tinderbox User
cd441cd51f regenerate 2014-04-10 04:04:52 +00:00
Tinderbox User
47db6d1f64 regenerate 2014-04-04 03:38:28 +00:00
Tinderbox User
2f103f5493 regen master 2014-03-29 01:05:21 +00:00
Jeremy C. Reed
02363b42ae This version of the manual corresponds to BIND version 9.10. 
Not 9.9
 2014-03-28 08:23:20 -05:00
Tinderbox User
a87790b9d8 regen master 2014-03-27 01:05:17 +00:00
Evan Hunt
5aae99fb1b [master] document behavior of localhost/localnets when interface changes 2014-03-25 20:08:04 -07:00
Tinderbox User
ba713ac34a regen master 2014-03-16 01:05:09 +00:00
Evan Hunt
06236ea367 [master] work around db2latex bug by removing literal tag 2014-03-15 15:22:47 -07:00
Tinderbox User
0c3a248de9 regenerate 2014-03-13 07:46:00 +00:00
Tinderbox User
ec899c963c regen master 2014-03-13 06:24:13 +00:00
Tinderbox User
3c7b4ac451 regen master 2014-03-12 01:05:39 +00:00
Tinderbox User
e4a70b8fdf regen master 2014-03-11 01:05:19 +00:00
Evan Hunt
997f513065 [master] whitespace 2014-03-10 11:57:02 -07:00
Evan Hunt
7b46a4aa41 [master] fix negative numbers in $GENERATE 
3780.	[bug]		$GENERATE handled negative numbers incorrectly.
			[RT #25528]
 2014-03-10 11:55:32 -07:00
Tinderbox User
0efe2893b6 regen master 2014-03-08 01:05:33 +00:00
Evan Hunt
78f79084fc [master] warn when wrong address family used in listen-on/-v6 
3778.	[bug]		Log a warning when the wrong address family is
			used in "listen-on" or "listen-on-v6". [RT #17848]
 2014-03-07 11:31:51 -08:00
Tinderbox User
0f52ea95d8 regen master 2014-03-06 01:05:38 +00:00
Tinderbox User
d3ddafd746 regen master 2014-03-05 01:06:28 +00:00
Tinderbox User
b46346eb30 regen master 2014-03-04 01:05:04 +00:00
Tinderbox User
74ae031d9d regen master 2014-03-02 01:05:20 +00:00
Evan Hunt
3ef4b7383a [master] improved doc for "rndc signing -list" 
3769.   [doc]           Improved documentation of "rndc signing -list".
                        [RT #30652]
 2014-02-28 21:29:19 -08:00
Tinderbox User
794b79e6bb regen master 2014-02-28 01:07:06 +00:00
Evan Hunt
71072248de [master] fix 'rndc freeze' doc, and mention 'rndc sync' 2014-02-26 23:03:54 -08:00
Tinderbox User
42be858f85 regen master 2014-02-27 01:06:20 +00:00
Mark Andrews
f4193c2021 update copyrights 2014-02-25 12:07:41 +11:00
Tinderbox User
bfceb3a1ed update copyright notice 2014-02-24 23:46:25 +00:00
Francis Dupont
1b0d803a75 hmac(key, message) 2014-02-25 00:35:31 +01:00
Mark Andrews
d3d9c0c8f6 add a brief description of SIT 2014-02-25 09:50:17 +11:00
Tinderbox User
13d525b8e2 regenerate 2014-02-21 17:47:10 +00:00
Tinderbox User
892503bd48 regen master 2014-02-21 17:38:07 +00:00
Evan Hunt
f0f5f71274 [master] grammar 2014-02-21 08:28:25 -08:00
Tinderbox User
e85b04ae75 regenerate 2014-02-21 05:05:01 +00:00
Tinderbox User
5006667081 regen master 2014-02-21 05:04:18 +00:00
Tinderbox User
b6b8f8a036 regen master 2014-02-21 04:51:27 +00:00
Evan Hunt
2059d7950b [master] missing man pages, named-rrchecker had wrong name 2014-02-20 20:46:25 -08:00
Evan Hunt
64584aa098 [master] fix typos 2014-02-20 19:57:03 -08:00
Mark Andrews
5e45c8aabf add CFG_CLAUSEFLAG_NOTCONFIGURED flag 2014-02-21 12:48:39 +11:00
Tinderbox User
90861521a7 regenerate 2014-02-20 19:19:51 +00:00
Tinderbox User
0e1dece22e regen master 2014-02-20 19:19:27 +00:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Tinderbox User
c96e7744e0 regen master 2014-02-18 01:05:03 +00:00
Mark Andrews
38eabfcee7 3743. [bug] delegation-only flag wasn't working in forward zone 
declarations despite being documented.  This is
                        needed to support turning off forwarding and turning
                        on delegation only at the same name.  [RT #35392]
 2014-02-18 10:09:07 +11:00
Evan Hunt
88af212a4d [master] correct delegation-only doc 2014-02-17 14:22:53 -08:00
Tinderbox User
c3c1aec44c regenerate 2014-02-16 21:09:10 +00:00
Tinderbox User
6d382c9fce regen master 2014-02-16 21:08:15 +00:00
Evan Hunt
1d761cb453 [master] delve 
3741.	[func]		"delve" (domain entity lookup and validation engine):
			A new tool with dig-like semantics for performing DNS
			lookups, with internal DNSSEC validation, using the
			same resolver and validator logic as named. This
			allows easy validation of DNSSEC data in environments
			with untrustworthy resolvers, and assists with
			troubleshooting of DNSSEC problems. (Note: not yet
			available on win32.) [RT #32406]
 2014-02-16 13:03:17 -08:00
Evan Hunt
f2ea8c2f96 [master] updated published drafts 2014-02-14 08:53:06 -08:00
Tinderbox User
665a24faf6 regen master 2014-02-13 01:05:15 +00:00
Tinderbox User
f2016fcecf regen master 2014-02-08 01:05:40 +00:00
Mark Andrews
62ec9fd168 3733. [func] Improve interface scanning support. Interface 
information will be automatically updated if the
                        OS supports routing sockets.  Use
                        "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-07 17:16:37 +11:00
Evan Hunt
7983f6f77a [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-02-06 19:41:48 -08:00
Evan Hunt
166341d554 [master] add no-case-compress 
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]
 2014-02-06 19:37:26 -08:00
Tinderbox User
bbbf2e27d3 regen master 2014-02-07 02:03:45 +00:00
Mark Andrews
6b0dee6cd7 fix tag 2014-02-07 12:36:16 +11:00
Mark Andrews
9c8126d0c7 fix tag 2014-02-07 12:34:35 +11:00
Evan Hunt
08c67b5b7a [master] improved native-pkcs11 doc 
3728.	[doc]		Expanded native-PKCS#11 documentation,
			specifically pkcs11: URI labels. [RT #35287]
 2014-02-06 15:40:00 -08:00
Evan Hunt
62cce60a15 [master] better error message when exceeding RPZ zone limit 
3726.	[cleanup]	Clarified the error message when attempting
			to configure more than 32 response-policy zones.
			[RT #35283]
 2014-02-06 15:26:54 -08:00
Tinderbox User
9253fa8cec regenerate 2014-02-02 20:31:30 +00:00
Tinderbox User
04bbadfbcb regen master 2014-02-01 01:05:42 +00:00
Evan Hunt
bc34c56226 [master] further clarify edns doc 2014-01-31 07:11:38 -08:00
Tinderbox User
65f32cd8bf regen master 2014-01-31 01:07:17 +00:00
Evan Hunt
fe9a1e5bd6 [master] improve RRL documentation 
- wrote better qname classifer doc
- imported response size classifier doc from 9.9 sub
 2014-01-30 15:09:33 -08:00
Evan Hunt
47c847e286 [master] improve EDNS doc 
3721.	[doc]		Improved doucmentation of the EDNS processing
			enhancements introduced in change #3593. [RT #35275]
 2014-01-30 14:52:01 -08:00
Tinderbox User
dd1ce8b524 regen master 2014-01-17 01:05:10 +00:00
Tinderbox User
6ea2385360 regen master 2014-01-16 01:05:38 +00:00
Evan Hunt
693a7bb91a [master] cleanup pcks11 doc 2014-01-15 10:01:44 -08:00
Mark Andrews
7edf48213c balance tags 2014-01-15 14:43:45 +11:00
Evan Hunt
ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Evan Hunt
b751788932 [master] improve prefetch doc 2014-01-13 21:08:20 -08:00
Tinderbox User
a1e81a1c5b regen master 2014-01-13 01:04:54 +00:00
Mark Andrews
fb756ba304 3703. [func] Prefetch about to expire records if they are queried 
for, see prefetch option for details. [RT #35041]
 2014-01-12 21:29:15 +11:00
Tinderbox User
9c8c1a0485 regen master 2014-01-12 01:04:54 +00:00
Tinderbox User
990d0e893f regen master 2014-01-11 01:05:06 +00:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt
789252d55f [master] stats improvements 
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
 2014-01-09 18:46:25 -08:00
Tinderbox User
3f9791eac4 regen master 2013-12-12 01:05:00 +00:00
Tinderbox User
4f9cb7bd58 regen master 2013-12-05 01:04:59 +00:00
Tinderbox User
d7b4cb00e9 regenerate 2013-11-18 23:00:15 +00:00
Tinderbox User
52cc3bd9c1 regen master 2013-11-15 01:05:18 +00:00
Tinderbox User
c8714f6798 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2013-11-15 01:01:24 +00:00
Evan Hunt
434bfc3dfa [master] "in-view" zone option 
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
 2013-11-13 20:35:40 -08:00
Tinderbox User
03c0efc689 regen master 2013-11-13 01:04:50 +00:00
Tinderbox User
3afd0ff662 regen master 2013-11-07 01:04:45 +00:00
Tinderbox User
8a8a1fe98c regen master 2013-10-31 01:04:48 +00:00
Mark Andrews
fafae74b23 mention EventViewer 
(cherry picked from commit 28343c910e549f2159073ffad6b9f15dc80da72b)
 2013-10-31 11:13:49 +11:00
Tinderbox User
77b7c54f1a regen master 2013-10-13 01:04:48 +00:00
Mark Andrews
cbadc440b9 typos 2013-10-13 11:12:43 +11:00
Tinderbox User
9ca53742af regen master 2013-10-12 01:04:47 +00:00
Mark Andrews
b9c95f8211 s/dyanmic/dynamic/ 2013-10-12 08:22:18 +11:00
Tinderbox User
c9378958cf 9.10.0a1 2013-10-08 04:10:40 +00:00
Tinderbox User
e7b15235f1 regenerate 2013-09-04 22:51:55 +00:00
Tinderbox User
c986916269 regen master 2013-09-04 22:49:18 +00:00
Evan Hunt
2bae76022c clarify slip doc 
3643.	[doc]		Clarify RRL "slip" documentation.
 2013-09-03 21:20:47 -07:00
Tinderbox User
9054d0bb03 regen master 2013-08-13 01:04:39 +00:00
Tinderbox User
ed2fefd8d2 regen master 2013-08-02 01:04:38 +00:00
Tinderbox User
c11135d39e regen master 2013-07-14 04:47:51 +00:00
Evan Hunt
425a341250 [master] fix doc errors 2013-07-13 21:43:26 -07:00
Evan Hunt
725fe319ae [master] fix doc build error 2013-07-12 19:06:00 -07:00
Evan Hunt
421d4a0647 [master] rpz work 
3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]
 2013-07-12 14:46:47 -07:00
Tinderbox User
d133989e66 regen master 2013-07-07 01:04:49 +00:00
Evan Hunt
a0997db085 [master] fixed ARM typo in RRL section 2013-07-05 18:14:02 -07:00
Tinderbox User
ccee394812 regen master 2013-07-01 17:56:30 +00:00
Tinderbox User
1ebb25608f regen master 2013-06-29 01:40:28 +00:00
Tinderbox User
94479b3834 regen master 2013-06-27 01:04:50 +00:00
Tinderbox User
91a45a8ad5 regen master 2013-06-13 01:04:55 +00:00
Tinderbox User
0ccb0e98c7 regen master 2013-06-12 01:04:55 +00:00
Evan Hunt
1b2a4ce2b1 [master] move rndc command documentation to "man rndc" 
3592.	[doc]		Moved documentation of rndc command options to the
			rndc man page. [RT #33506]
 2013-06-10 14:23:14 -07:00
Tinderbox User
02bd0d97b8 regen master 2013-06-07 01:04:55 +00:00
Tinderbox User
994172b823 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2013-06-07 01:01:16 +00:00
Mark Andrews
a1dd7ae953 typo 2013-06-06 11:22:51 +10:00
Tinderbox User
4721cf595e regen master 2013-06-06 01:04:49 +00:00
Evan Hunt
5f1dc0d505 [master] add "-clean" option to "rndc delzone" 
3585.	[func]		"rndc delzone -clean" option removes zone files
			when deleting a zone. [RT #33570]
 2013-06-04 21:26:29 -07:00
Tinderbox User
85d259b3cf regen master 2013-06-04 01:04:53 +00:00
Curtis Blackburn
30d6dc14e9 3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029] 2013-06-03 14:00:03 -05:00
Tinderbox User
8dba66450c regen master 2013-05-31 01:04:49 +00:00
Tinderbox User
fba68262db update copyright notice 2013-05-30 23:46:19 +00:00
Mark Andrews
0193e63da9 3579. [maint] Updates to PKCS#11 openssl patches, supporting 
versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
 2013-05-30 12:40:13 +10:00
Tinderbox User
162933bac8 regen master 2013-05-22 01:04:41 +00:00
Evan Hunt
f3c8e48b95 [master] change RRL log category 'query-errors' 
3575.	[func]		Changed the logging category for RRL events from
			'queries' to 'query-errors'. [RT #33540]
 2013-05-21 12:20:54 -07:00
Tinderbox User
299e3f18eb regen master 2013-05-02 01:04:58 +00:00
Mark Andrews
7c0d0a21bb add records starting with "v=spf1" 2013-05-01 15:30:07 +10:00
Tinderbox User
7be2f6d5df regen master 2013-04-30 04:23:14 +00:00
Mark Andrews
26bb3b7a67 3559. [func] Check that both forms of Sender Policy Framework 
records exist or do not exist. [RT #33355]
 2013-04-30 13:49:41 +10:00
Tinderbox User
e658a6635d regen master 2013-04-30 01:04:45 +00:00
Mark Andrews
ec8a802114 3557. [bug] Reloading redirect zones was broken. [RT #33292] 2013-04-29 15:20:09 +10:00
Tinderbox User
7bf14f4945 regen master 2013-04-29 01:04:45 +00:00
Tinderbox User
d0d1dbab0f regen master 2013-04-26 01:04:43 +00:00
Evan Hunt
a6d43d18b1 [master] fixed several RRL issues 
3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]
 2013-04-25 14:42:44 -07:00
Tinderbox User
53f41dd99d regen master 2013-04-09 01:04:36 +00:00
Evan Hunt
c4a453fa5c [master] add request-nsid doc 
3549.	[doc]		Documentation for "request-nsid" was missing.
			[RT #33153]
 2013-04-08 10:26:50 -07:00
Tinderbox User
313b0ea9f2 update copyright notice 2013-03-23 23:46:06 +00:00
Tinderbox User
3a32ac2a72 regen master 2013-03-23 01:04:36 +00:00
Evan Hunt
67adc03ef8 [master] add DSCP support 
3535.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]
 2013-03-22 14:05:33 -07:00
Tinderbox User
f9aef05653 regen master 2013-03-21 01:04:40 +00:00
Mark Andrews
06a05efc07 3529. [func] Named now listens on both IPv4 and IPv6 interfaces 
by default.  Named previously only listened on IPv4
                        interfaces by default unless named was running in
                        IPv6 only mode.  [RT #32945]
 2013-03-21 10:16:12 +11:00
Evan Hunt
831f59eb43 [master] add dnssec-coverage tool 
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]
 2013-03-20 14:39:13 -07:00
Tinderbox User
9c1210a508 regen master 2013-03-20 01:04:32 +00:00
Evan Hunt
a13aa526be [master] add xml/v2 and xml/v3 URIs 
3527.	[compat]	Add a URI to allow applications to explicitly
			request a particular XML schema from the statistics
			channel, returning 404 if not supported. [RT #32481]
 2013-03-18 20:40:40 -07:00
Tinderbox User
b2f07642fd regen master 2013-03-14 01:04:33 +00:00
Evan Hunt
4eb998928b [master] algorithm flexibility for rndc 
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
 2013-03-13 17:53:11 -07:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Tinderbox User
e3d49a1c84 regen master 2013-03-05 01:04:33 +00:00
Evan Hunt
9ffd0f0270 [master] "rndc validation check" 
3512.	[func]		"rndc validation check" reports the current status
			of DNSSEC validation. [RT #21397]
 2013-03-04 12:00:51 -08:00
Tinderbox User
c387825f77 regen master 2013-03-03 01:04:31 +00:00
Evan Hunt
4bffc83ac2 [master] doc typo (rt #32745) 2013-03-02 14:24:55 -08:00
Evan Hunt
dd42336690 [master] remove programlistings from table entries 2013-03-01 19:20:28 -08:00
Evan Hunt
77845708f7 [master] move redirect info to ARM 
3511.	[doc]		Improve documentation of redirect zones. [RT #32756]
 2013-03-01 15:11:08 -08:00
Tinderbox User
bae169ea64 regen master 2013-03-01 01:04:13 +00:00
Evan Hunt
2a184ff865 [master] accept >4g max-{,a}cache-size 
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]
 2013-02-28 09:29:12 -08:00
Evan Hunt
501941f0b6 [master] add geoip support 
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
 2013-02-27 17:19:39 -08:00
Tinderbox User
dad65f7c93 regen master 2013-02-28 01:04:36 +00:00
Evan Hunt
de1223830f [master] clarify size_spec in ARM 
3503.	[doc]		Clarify size_spec syntax. [RT #32449]
 2013-02-27 14:39:09 -08:00
Evan Hunt
85f89d58a5 [master] zone-statistics no => none 
3502.	[func]		zone-statistics: "no" is now a synonym for "none",
			instead of "terse". [RT #29165]
 2013-02-27 13:37:54 -08:00
Evan Hunt
40a7e85f3e [master] better zone-statistics syntax 
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]
 2013-02-27 11:53:58 -08:00
Tinderbox User
c7f299247c regen master 2013-02-27 01:07:46 +00:00
Evan Hunt
ceb722a422 [master] missing </para> 2013-02-26 16:59:20 -08:00
Evan Hunt
298ca12250 [master] fix built-in zone doc 
3499.	[doc]		Corrected ARM documentation of built-in zones.
			[RT #32694]
 2013-02-26 11:51:16 -08:00
Evan Hunt
94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's) 
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
 2013-02-25 12:46:51 -08:00
Evan Hunt
55e5c51e66 [master] DNS RRL 
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
 2013-02-25 12:45:56 -08:00
Tinderbox User
8bbfb495a2 regen master 2013-01-26 01:04:30 +00:00
Tinderbox User
43b9448395 regen master 2013-01-25 01:04:51 +00:00
Evan Hunt
c9611b4573 [master] change "fast" to "map" 
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
 2013-01-24 14:20:48 -08:00
Tinderbox User
dd59fe01c9 regen master 2013-01-24 01:04:22 +00:00
Tinderbox User
48cbc7cd1e regen master 2013-01-11 01:04:23 +00:00
Tinderbox User
d8620c7234 regen master 2013-01-10 20:19:56 +00:00
Evan Hunt
54ca241334 [master] clarify managed-keys syntax 2013-01-10 11:59:21 -08:00
Mark Andrews
f1c1aab2c9 3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836] 2013-01-10 08:26:31 +11:00
Tinderbox User
bec154197d regen master 2013-01-05 01:04:27 +00:00
Tinderbox User
6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Tinderbox User
21e01d1a46 regen master 2013-01-04 01:04:25 +00:00
Evan Hunt
222d38735f [master] allow-query-on works now 
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]
 2013-01-03 15:13:45 -08:00
Tinderbox User
19e593a7a5 regen master 2013-01-02 01:04:26 +00:00
Tinderbox User
024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Tinderbox User
cafd7a121f regen master 2013-01-01 01:04:27 +00:00
Tinderbox User
bcf15a19ae regen master 2012-12-07 01:11:33 +00:00
Tinderbox User
8783680c7d Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2012-12-07 01:01:22 +00:00
Evan Hunt
3e7aa39577 [master] minor doc fix 2012-12-06 13:59:30 -08:00
Evan Hunt
2b8bed6681 [master] multiple-dlz/dlz-nxdomain 
3432.	[func]		Multiple DLZ databases can now be configured.
			DLZ databases are searched in the order configured,
			unless set to "search no", in which case a
			zone can be configured to be retrieved from a
			particular DLZ database by using a "dlz <name>"
			option in the zone statement.  DLZ databases can
			support type "master" and "redirect" zones.
			[RT #27597]
 2012-12-06 12:39:52 -08:00
Tinderbox User
f470689ec4 regen master 2012-11-30 01:10:27 +00:00
Jeremy C. Reed
6a321060c5 Remove link to AUSCERT article about ACLs. It has been broken 
for at least 6 years.
See ticket #16479 for details.
No CHANGES entry added.
This was not reviewed. It is minor.
 2012-11-29 08:14:10 -06:00
Tinderbox User
9aafbfaefb regen master 2012-11-29 01:04:56 +00:00
Evan Hunt
8970da110a [master] s/size spec/size_spec/ 2012-11-27 22:47:32 -08:00
Tinderbox User
2cc7515f8a regen master 2012-11-07 01:04:33 +00:00
Jeremy C. Reed
b529653d2c [master] uppercase acronym 
be consistent
 2012-11-06 12:39:18 -06:00
Jeremy C. Reed
8dc94438df [master] fix spelling 
Noticed one while reading during Alan's training today.
Fixed two other misspellings while here.
 2012-11-06 11:40:50 -06:00
Tinderbox User
15d29ab5fe regen master 2012-10-27 01:05:22 +00:00
Tinderbox User
c8173d0069 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2012-10-27 01:01:33 +00:00
Evan Hunt
f46168b879 [master] allow dnssec options in inline-signing slaves 
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
 2012-10-26 16:14:59 -07:00
Tinderbox User
e31a258ca6 regen master 2012-10-26 01:09:47 +00:00
Evan Hunt
e23757501f [master] note RPZ performance issues in ARM 2012-10-25 18:04:25 -07:00
Jeremy C. Reed
08e5453379 [master] Fix typo (repeated word) 2012-10-25 11:48:49 -05:00
Evan Hunt
8819f2656f [master] fix ulink typo 2012-10-25 09:21:12 -07:00
Tinderbox User
6698b2f845 update SRCID 2012-10-19 06:16:50 +00:00
Tinderbox User
866fff3607 update SRCID 2012-10-19 00:16:33 +00:00
Tinderbox User
85d38f2d98 update SRCID 2012-10-18 23:16:06 +00:00
Tinderbox User
941bc6907d update SRCID 2012-10-18 03:16:58 +00:00
Tinderbox User
4b93750c5d update SRCID 2012-10-17 02:15:56 +00:00
Tinderbox User
241bbe9dd6 update SRCID 2012-10-17 01:16:00 +00:00
Tinderbox User
e67b52444a regen master 2012-10-17 01:05:34 +00:00
Tinderbox User
0d3f885019 update SRCID 2012-10-17 00:16:23 +00:00
Tinderbox User
f2133335ef update SRCID 2012-10-16 02:15:56 +00:00
Mark Andrews
1c8f2b6dcd 3395. [protocol] Add RFC 6598 reverse zones to built in empty zones 
list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
                        [RT #31336]
 2012-10-16 12:31:28 +11:00
Tinderbox User
3b64a774b0 update SRCID 2012-10-16 01:16:14 +00:00
Tinderbox User
de70e7e302 update SRCID 2012-10-16 00:17:20 +00:00
Tinderbox User
6829b261a5 update SRCID 2012-10-12 11:16:50 +00:00
Tinderbox User
073d072626 update SRCID 2012-10-10 02:16:04 +00:00
Tinderbox User
98d15778c9 update SRCID 2012-10-08 04:16:18 +00:00
Tinderbox User
2230cda938 update SRCID 2012-10-07 01:15:51 +00:00
Tinderbox User
698f23be46 update SRCID 2012-10-07 00:16:33 +00:00
Tinderbox User
f40cf3511b update SRCID 2012-10-06 08:16:10 +00:00
Tinderbox User
731c9638b7 update SRCID 2012-10-06 05:18:54 +00:00
Tinderbox User
b2482d40b0 update SRCID 2012-10-05 05:17:13 +00:00
Tinderbox User
e17ebbea44 update SRCID 2012-10-04 21:18:01 +00:00
Tinderbox User
d4a3f19908 update SRCID 2012-10-04 01:15:48 +00:00
Tinderbox User
aa444144ad regen master 2012-10-04 01:05:27 +00:00
Tinderbox User
e6eb0b8c57 update SRCID 2012-10-04 00:16:36 +00:00
Tinderbox User
dd767428a4 update SRCID 2012-10-03 22:15:45 +00:00
Tinderbox User
af690da8be update SRCID 2012-10-03 15:16:06 +00:00
Tinderbox User
5c67e332ef update SRCID 2012-10-03 07:17:59 +00:00
Tinderbox User
3833457ded update SRCID 2012-10-03 05:18:13 +00:00
Tinderbox User
6b1875fc58 update SRCID 2012-10-03 04:16:04 +00:00
Tinderbox User
492ddb9b44 update SRCID 2012-10-03 03:16:52 +00:00
Mark Andrews
058e44186b 3387. [func] Support for a DS digest can be disabled at 
runtime with disable-ds-digests. [RT #21581]
 2012-10-03 12:38:43 +10:00
Tinderbox User
84c2220360 update SRCID 2012-10-03 00:16:53 +00:00
Tinderbox User
25644fbb2d update SRCID 2012-10-02 07:15:59 +00:00
Tinderbox User
071fa2718f update SRCID 2012-10-02 04:16:20 +00:00
Tinderbox User
74069f294a update SRCID 2012-09-30 00:16:06 +00:00
Tinderbox User
9faafdb466 update SRCID 2012-09-29 03:16:40 +00:00
Tinderbox User
762369bbaa update SRCID 2012-09-29 02:15:51 +00:00
Tinderbox User
5726fb7bc3 update SRCID 2012-09-29 00:16:18 +00:00
Tinderbox User
4a91419046 update SRCID 2012-09-28 21:15:58 +00:00
Tinderbox User
6d69393ea4 update SRCID 2012-09-27 01:16:30 +00:00
Tinderbox User
44f0c1d685 update SRCID 2012-09-27 00:16:32 +00:00
Tinderbox User
8d6dd28881 update SRCID 2012-09-26 21:16:00 +00:00
Tinderbox User
dccd99f383 update SRCID 2012-09-26 06:17:41 +00:00
Tinderbox User
c91b66c6e6 update SRCID 2012-09-26 02:15:53 +00:00
Tinderbox User
ab1312af12 update SRCID 2012-09-26 01:15:51 +00:00
Tinderbox User
b397f92293 regen master 2012-09-26 01:05:34 +00:00
Tinderbox User
e9d812cac0 update SRCID 2012-09-26 00:16:35 +00:00
Evan Hunt
9e8dbb4276 improve managed-keys-directory documentation 2012-09-25 16:33:12 -07:00
Tinderbox User
0942310785 update SRCID 2012-09-20 01:15:58 +00:00
Tinderbox User
fda8617abd update SRCID 2012-09-19 04:16:35 +00:00
Tinderbox User
67993363c2 update SRCID 2012-09-18 22:16:04 +00:00
Tinderbox User
a07d63c799 update SRCID 2012-09-18 05:18:40 +00:00
Tinderbox User
4504367054 update SRCID 2012-09-17 23:16:01 +00:00
Tinderbox User
adbfda8c8a update SRCID 2012-09-15 00:16:22 +00:00
Tinderbox User
742f0a133b update SRCID 2012-09-14 01:16:06 +00:00
Tinderbox User
e3c1dd5b09 update SRCID 2012-09-14 00:16:44 +00:00
Tinderbox User
e272bc7e5b update SRCID 2012-09-13 00:16:54 +00:00
Tinderbox User
5db258cfec update SRCID 2012-09-12 21:16:07 +00:00
Tinderbox User
e94cbbf84a update SRCID 2012-09-12 08:16:16 +00:00
Tinderbox User
732e056267 update SRCID 2012-09-12 06:17:02 +00:00
Tinderbox User
fd8ceb808c update SRCID 2012-09-12 04:16:50 +00:00
Tinderbox User
771e68ab7f update SRCID 2012-09-12 03:17:31 +00:00
Tinderbox User
a3c4fc2db2 update SRCID 2012-09-08 09:16:38 +00:00
Tinderbox User
85137edb47 update SRCID 2012-08-31 02:16:14 +00:00
Tinderbox User
a6d7c5e250 update SRCID 2012-08-30 04:16:50 +00:00
Tinderbox User
3af6cd2426 update SRCID 2012-08-24 01:16:11 +00:00
Tinderbox User
ef7da06514 update SRCID 2012-08-23 23:15:45 +00:00
Tinderbox User
defee474cd update SRCID 2012-08-23 22:15:55 +00:00
Tinderbox User
7056a49488 update SRCID 2012-08-23 14:15:57 +00:00
Tinderbox User
cab8343221 update SRCID 2012-08-23 08:16:58 +00:00
Tinderbox User
6e6f5e3e11 man.dnssec-verify.html 2012-08-23 07:49:17 +00:00
Tinderbox User
3bcaecfeb6 update SRCID 2012-08-23 00:16:50 +00:00
Tinderbox User
eca338fe7f update SRCID 2012-08-22 10:16:19 +00:00
Tinderbox User
26388db87e update SRCID 2012-08-22 04:16:48 +00:00
Tinderbox User
1427cd7373 update SRCID 2012-08-22 00:16:26 +00:00
Tinderbox User
19bf9bb782 update SRCID 2012-08-21 19:16:01 +00:00
Tinderbox User
51463309a6 update SRCID 2012-08-21 07:17:09 +00:00
Tinderbox User
e93fd16e3e update SRCID 2012-08-21 02:16:19 +00:00
Tinderbox User
64a8938b02 update SRCID 2012-08-18 00:16:45 +00:00
Tinderbox User
92dec774bb update SRCID 2012-08-17 18:16:08 +00:00
Tinderbox User
24c7ce73cf update SRCID 2012-08-17 04:16:42 +00:00
Tinderbox User
29d221ab12 update SRCID 2012-08-17 01:15:52 +00:00
Tinderbox User
25fc96a0da update SRCID 2012-08-16 22:15:53 +00:00
Tinderbox User
079cfe3aa1 update SRCID 2012-08-16 19:16:18 +00:00
Tinderbox User
2b24803499 update SRCID 2012-08-16 05:19:00 +00:00
Tinderbox User
4c895f0553 update SRCID 2012-08-16 00:16:39 +00:00
Tinderbox User
4cf212be0f update SRCID 2012-08-15 20:16:03 +00:00
Tinderbox User
2a54e4a9bd update SRCID 2012-08-15 01:16:07 +00:00
Tinderbox User
9941177e7e regen master 2012-08-15 01:05:38 +00:00
Tinderbox User
b85897de31 update SRCID 2012-08-15 00:16:34 +00:00
Tinderbox User
4320c5d20b update SRCID 2012-08-14 06:16:17 +00:00
Evan Hunt
8f6d6d72e8 support '-' salt in rndc signing -nsec3param 
3361.	[bug]		"rndc signing -nsec3param" didn't work correctly
			when salt was set to '-' (no salt). [RT #30099]
 2012-08-13 22:24:36 -07:00
Tinderbox User
55abe8fecb update SRCID 2012-08-14 05:16:20 +00:00
Tinderbox User
aaf3b23666 update SRCID 2012-08-14 01:16:42 +00:00
Tinderbox User
5533509459 update SRCID 2012-08-12 05:17:13 +00:00
Tinderbox User
aedc340501 update SRCID 2012-08-11 04:18:12 +00:00
Tinderbox User
6bbefe5319 update SRCID 2012-08-04 15:16:09 +00:00
Tinderbox User
02806fbf20 update SRCID 2012-08-02 02:16:24 +00:00
Tinderbox User
6ba038db9c update SRCID 2012-07-26 00:16:34 +00:00
Tinderbox User
8e80eb20e9 update SRCID 2012-07-25 22:15:53 +00:00
Tinderbox User
e13ffd32c2 update SRCID 2012-07-25 03:16:40 +00:00
Tinderbox User
e3720da73f update SRCID 2012-07-24 03:16:59 +00:00
Tinderbox User
ec3c6446c2 update SRCID 2012-07-24 00:16:19 +00:00
Tinderbox User
28831a3801 update SRCID 2012-07-23 20:16:08 +00:00
Tinderbox User
1ea788abf8 update SRCID 2012-07-23 07:16:30 +00:00
Tinderbox User
141ae50ab9 update SRCID 2012-07-21 00:16:08 +00:00
Tinderbox User
0af4d55ba0 update SRCID 2012-07-20 08:16:08 +00:00
Tinderbox User
26eff00b07 update SRCID 2012-07-20 00:16:24 +00:00
Tinderbox User
c10140aeda update SRCID 2012-07-19 14:16:04 +00:00
Tinderbox User
77e3e9daf1 update SRCID 2012-07-19 03:16:30 +00:00
Tinderbox User
dee1ad5e4d update SRCID 2012-07-18 05:18:25 +00:00
Tinderbox User
afb6118492 update SRCID 2012-07-18 00:16:31 +00:00
Tinderbox User
b8ba5c8369 update SRCID 2012-07-17 05:17:50 +00:00
Tinderbox User
e8df7f7aef update SRCID 2012-07-14 03:16:32 +00:00
Mark Andrews
a846a36bde make more robust, handle more uri formats used by IETF 2012-07-14 12:18:56 +10:00
Mark Andrews
6809e4defb new draft 2012-07-14 12:16:33 +10:00
Tinderbox User
c4c4d6e6a5 update SRCID 2012-07-10 01:15:44 +00:00
Mark Andrews
63c5727d3e new draft 2012-07-10 10:55:57 +10:00
Tinderbox User
12903ed9e9 update SRCID 2012-07-10 00:16:11 +00:00
Tinderbox User
e46e463192 update SRCID 2012-07-09 23:15:36 +00:00
Tinderbox User
cc078b4527 update SRCID 2012-07-09 20:15:41 +00:00
Tinderbox User
eaca18d408 update SRCID 2012-07-09 19:16:18 +00:00
Tinderbox User
e6e7b050a6 update SRCID 2012-07-09 18:15:39 +00:00
Tinderbox User
e124c83f6b update SRCID 2012-07-06 22:15:39 +00:00
Tinderbox User
2f620fbbf4 update SRCID 2012-07-06 15:15:42 +00:00
Tinderbox User
3ef7e5ecaa update SRCID 2012-07-06 01:16:11 +00:00
Tinderbox User
46115aa375 update SRCID 2012-07-06 00:15:57 +00:00
Tinderbox User
bd6ea51686 update SRCID 2012-07-05 22:03:06 +00:00
Tinderbox User
a6143389f6 update SRCID 2012-07-02 17:16:21 +00:00
Tinderbox User
83919db4e2 update SRCID 2012-06-30 00:16:33 +00:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Tinderbox User
095b0d2baf update SRCID 2012-06-29 07:15:38 +00:00
Tinderbox User
50895f9b64 update SRCID 2012-06-29 02:16:21 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
b927cdb7b8 update SRCID 2012-06-29 01:16:07 +00:00
Tinderbox User
a540e201d5 update SRCID 2012-06-28 13:15:35 +00:00
Tinderbox User
979763415f update SRCID 2012-06-28 08:15:29 +00:00
Tinderbox User
201955f18e update SRCID 2012-06-27 01:15:50 +00:00
Tinderbox User
ae7449c457 regen master 2012-06-27 01:04:21 +00:00
Tinderbox User
b1627690a4 update SRCID 2012-06-27 00:16:10 +00:00
Tinderbox User
da5d53fb14 update copyright notice 2012-06-26 23:45:56 +00:00
Tinderbox User
b9839cc40e update SRCID 2012-06-26 05:15:48 +00:00
Tinderbox User
b6e55db459 update SRCID 2012-06-26 01:15:43 +00:00
Tinderbox User
c3dc968140 regen master 2012-06-26 01:04:21 +00:00
Tinderbox User
7d648d0d3a update SRCID 2012-06-26 00:16:06 +00:00
Tinderbox User
373e4270f4 update SRCID 2012-06-25 05:17:28 +00:00
Tinderbox User
f28fe8958b update SRCID 2012-06-25 04:15:40 +00:00
Mark Andrews
ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
 2012-06-25 13:57:32 +10:00
Tinderbox User
8811ab3ca6 update SRCID 2012-06-25 02:16:05 +00:00
Tinderbox User
1f695ba5d0 update SRCID 2012-06-24 22:15:29 +00:00
Tinderbox User
04aeac93e5 update SRCID 2012-06-23 09:15:27 +00:00
Tinderbox User
fe10cb8b61 update SRCID 2012-06-23 08:15:32 +00:00
Tinderbox User
4dbfd0267b update SRCID 2012-06-23 01:15:36 +00:00
Tinderbox User
dba3c818ae regen master 2012-06-23 01:04:31 +00:00
Tinderbox User
492c93114f update SRCID 2012-06-22 00:17:00 +00:00
Tinderbox User
7061c63bc5 update SRCID 2012-06-21 23:15:28 +00:00
Evan Hunt
6844e3f010 Add documentation for 'fast' format 2012-06-21 15:39:56 -07:00
Tinderbox User
a732033b3b update SRCID 2012-06-21 22:15:32 +00:00
Tinderbox User
a5924ac6f1 update SRCID 2012-06-21 20:15:27 +00:00
Tinderbox User
6451b4d964 update SRCID 2012-06-21 14:15:37 +00:00
Tinderbox User
fe6787253f update SRCID 2012-06-21 06:18:04 +00:00
Tinderbox User
438c3bf22b update SRCID 2012-06-21 05:16:13 +00:00
Tinderbox User
92674db65c update SRCID 2012-06-21 01:15:30 +00:00
Tinderbox User
7831419d1e regen master 2012-06-21 01:05:35 +00:00
Tinderbox User
f8e7bbac1e update SRCID 2012-06-21 00:16:18 +00:00
Tinderbox User
732faac0e7 update SRCID 2012-06-20 22:16:41 +00:00
Tinderbox User
784a036880 update SRCID 2012-06-20 21:15:39 +00:00
Tinderbox User
aa4179a160 update SRCID 2012-06-20 20:15:33 +00:00
Tinderbox User
c04f7a305d update SRCID 2012-06-16 00:15:50 +00:00
Tinderbox User
2b992e7bac update SRCID 2012-06-15 02:15:35 +00:00
Tinderbox User
650068bd42 update SRCID 2012-06-15 01:15:34 +00:00
Tinderbox User
edaa064885 regen master 2012-06-15 01:04:29 +00:00
Tinderbox User
b26c85f239 update SRCID 2012-06-15 00:16:54 +00:00
Tinderbox User
487092f0d4 update SRCID 2012-06-14 10:15:36 +00:00
Tinderbox User
3cd764ff24 update SRCID 2012-06-14 06:17:01 +00:00
Mark Andrews
7865ea9545 3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228] 2012-06-14 15:44:20 +10:00
Tinderbox User
3ffb69c9cf update SRCID 2012-06-14 05:15:58 +00:00
Tinderbox User
ad239cfe67 update SRCID 2012-06-14 01:16:15 +00:00
Tinderbox User
632942ec24 update SRCID 2012-06-13 07:16:10 +00:00
Tinderbox User
ebe662ab63 update SRCID 2012-06-09 01:15:55 +00:00
Tinderbox User
e7ac7921af regen master 2012-06-09 01:04:13 +00:00
Tinderbox User
2919d9872b update SRCID 2012-06-09 00:16:12 +00:00
Tinderbox User
c07b1f154c update SRCID 2012-06-08 07:15:29 +00:00
Mark Andrews
80fa3ef851 3336. [func] Maintain statistics for RRsets tagged as "stale". 
[RT #29514]
 2012-06-08 16:32:44 +10:00
Tinderbox User
74c2115bdf update SRCID 2012-06-08 05:18:13 +00:00
Tinderbox User
090f58f7d1 update SRCID 2012-06-08 04:16:35 +00:00
Tinderbox User
ae48d3a671 update SRCID 2012-06-08 03:16:47 +00:00
Mark Andrews
7310c0b1ee 3333. [bug] Setting resolver-query-timeout too low can cause 
named to not recover if it looses connectivity.
                        [RT #29623]
 2012-06-08 12:34:33 +10:00
Tinderbox User
0ef5a17e84 update SRCID 2012-06-07 05:18:06 +00:00
Tinderbox User
ce84413e55 update SRCID 2012-06-07 03:17:11 +00:00
Tinderbox User
139fc0e144 update SRCID 2012-06-04 07:16:08 +00:00
Tinderbox User
2aa8d7c667 update SRCID 2012-06-02 00:16:31 +00:00
Tinderbox User
46fd149e93 update SRCID 2012-06-01 19:15:55 +00:00
Tinderbox User
701f6dfd1a update SRCID 2012-06-01 17:15:57 +00:00
Tinderbox User
e673aaee23 update SRCID 2012-06-01 14:15:47 +00:00
Tinderbox User
03c491321f update SRCID 2012-06-01 01:16:18 +00:00
Tinderbox User
29651c3a80 regen master 2012-06-01 01:04:18 +00:00
Tinderbox User
03c36d2d74 update SRCID 2012-06-01 00:16:10 +00:00
Mark Andrews
fb672cba5f new draft 2012-06-01 10:07:18 +10:00
Tinderbox User
6b2217150c update SRCID 2012-05-31 02:15:59 +00:00
Vernon Schryver
afaa290bb6 Squashed commit of the following: 
commit aea73609ac5d41ed091360e94370798965f28f05
commit eef7f44c57a060b24a426eb8888e16176a0a69b1
commit a88a26d864ad399fa2d40e3b9659b4d26f454ca1
commit 1b90d59568e7e3b65690c6bd075cf4d60b03e454
Merge: 74d8f73 cd02924
commit 74d8f73ed553bb64a305e284905762f7ff0029aa
commit 9a59ef6bbd4befe91e5691e8b85afe1cb7ab0706
commit c63606a53b4f1bb7066b37d3cfe588e9dc21a119
commit 2c392a840c8838455d144ce163bd873bee400c97
commit 0241f53563e6e7bed462a883d98a8931f01e0980
commit 79fe22b5d6f04bdaa3073cf54d41952194e879e1
commit 351b3049625f2edd39729dd85413e961b97d4b3b
commit 7207674fc77c9a10d84c0cb94e36d1c09bb31459
commit 543ad34cf08f901c20b438c9d2f45482cff13d5e
commit fc45b99ce4438627fdcbeb4365695ba0065fa46f
commit c425207f57e0a5157372aa7edbb79b13170563e5
commit ef8c5e23ca284e0ea02f69ce1f356d537c19d93b
commit ba0d4e3aa51efe412cfa1d031651f949442d1802
commit 41c7969c7cb6884b93011f7ace3fd9522efc021e
  and more from CVS

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
 2012-05-31 02:03:34 +00:00
Tinderbox User
6fcf87505d update SRCID 2012-05-31 01:16:09 +00:00
Tinderbox User
a17029519e regen master 2012-05-31 01:04:22 +00:00
Tinderbox User
1b83f51fb1 update SRCID 2012-05-30 16:16:14 +00:00
Evan Hunt
ba0bded2a3 fixed ARM typo: s/replacable/replaceable/ 2012-05-30 08:15:34 -07:00
Tinderbox User
a42029d636 update SRCID 2012-05-30 02:16:09 +00:00
Tinderbox User
24441d0a93 update SRCID 2012-05-25 05:17:19 +00:00
Tinderbox User
528948816f update SRCID 2012-05-25 04:15:41 +00:00
Tinderbox User
4ea8346284 update SRCID 2012-05-22 00:16:16 +00:00
Tinderbox User
5c4f363ec3 update SRCID 2012-05-21 06:15:56 +00:00
Tinderbox User
987872ed2c update SRCID 2012-05-21 05:42:02 +00:00
Tinderbox User
08e2131f0f update SRCID 2012-05-21 05:17:48 +00:00
Tinderbox User
80f75f8e23 update SRCID 2012-05-21 01:16:01 +00:00
Tinderbox User
693c37cb13 update SRCID 2012-05-21 00:16:27 +00:00
Tinderbox User
162690e563 update SRCID 2012-05-20 00:16:16 +00:00
Tinderbox User
d5368dd8b4 update SRCID 2012-05-19 00:16:32 +00:00
Tinderbox User
c360aac704 update SRCID 2012-05-18 07:15:54 +00:00
Tinderbox User
bcd9c633a6 update SRCID 2012-05-18 06:16:18 +00:00
Tinderbox User
23c1dfbb54 update SRCID 2012-05-18 00:16:43 +00:00
Tinderbox User
873194ab65 update SRCID 2012-05-17 23:15:42 +00:00
Tinderbox User
b49d977034 update SRCID 2012-05-17 18:15:46 +00:00
Tinderbox User
fa943f31e4 update SRCID 2012-05-17 07:15:52 +00:00
Tinderbox User
0175adabdc update SRCID 2012-05-17 00:16:15 +00:00
Tinderbox User
fc19b7ad8e update SRCID 2012-05-16 00:16:38 +00:00
Tinderbox User
01af6602d5 update SRCID 2012-05-15 01:15:46 +00:00
Tinderbox User
4cfb5ea3a5 regen master 2012-05-15 01:06:40 +00:00
Tinderbox User
29bcb2d679 update SRCID 2012-05-15 00:16:29 +00:00
Tinderbox User
0264648b0e update SRCID 2012-05-14 20:15:43 +00:00
Evan Hunt
784ceaa96b Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2012-05-14 12:20:50 -07:00
Evan Hunt
d878b8d87c merged filter-aaaa-on-v6 (ATT SoW) 
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]
 2012-05-14 11:50:00 -07:00
Tinderbox User
0e87b3cb58 update SRCID 2012-05-14 17:15:50 +00:00
Tinderbox User
6f54546812 update SRCID 2012-05-14 00:16:32 +00:00
Tinderbox User
5f5491bcaf update SRCID 2012-05-13 00:16:08 +00:00
Tinderbox User
8eb4df369c update SRCID 2012-05-12 06:17:46 +00:00