upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-26 19:41:04 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
26645 commits 18 branches 854 tags 440 MiB
Commit graph

5556 commits

Author SHA1 Message Date
Tinderbox User
7e4b5437f1 regen master 2016-06-14 01:05:13 +00:00
Francis Dupont
e9d097511e AEP keyper PKCS#11 provider is available in 64 bits 2016-06-13 15:43:57 +02:00
Mukund Sivaraman
f163503bce Use absolute names in catalog zone examples 2016-06-13 16:09:34 +05:30
Tinderbox User
e76f113739 regen master 2016-06-02 01:05:09 +00:00
Tinderbox User
408e9e235a regen master 2016-06-01 01:04:18 +00:00
Tinderbox User
77393407fd regenerate 2016-05-31 22:49:06 +00:00
Tinderbox User
1e126d80e1 regen master 2016-05-31 22:47:07 +00:00
Evan Hunt
3d0b7d5cc3 [master] zone-directory option for catalog zones 
4380.	[experimental]	Added a "zone-directory" option to "catalog-zones"
			syntax, allowing local masterfiles for slaves
			that are provisioned by catalog zones to be stored
			in a directory other than the server's working
			directory. [RT #42527]
 2016-05-31 10:36:27 -07:00
Mark Andrews
44fa277367 7873:Domain Name System (DNS) Cookies 2016-05-30 13:38:46 +10:00
Tinderbox User
f1f5f896c1 regen master 2016-05-28 01:05:40 +00:00
Jeremy C. Reed
ecf8e705e6 fix a few typos in doc 2016-05-27 15:22:54 -04:00
Tinderbox User
7898bf1fbc regenerate 2016-05-27 15:45:47 +00:00
Tinderbox User
260e8e04b0 regen master 2016-05-27 01:05:21 +00:00
Evan Hunt
6c2a76b3e2 [master] copyrights, win32 definitions 2016-05-26 12:36:17 -07:00
Witold Krecicki
7a00d69909 4376. [experimental] Added support for Catalog Zones, a new method for 
provisioning secondary servers in which a list of
                        zones to be served is stored in a DNS zone and can
                        be propagated to slaves via AXFR/IXFR. [RT #41581]

4375.   [func]          Add support for automatic reallocation of isc_buffer
                        to isc_buffer_put* functions. [RT #42394]
 2016-05-26 21:23:19 +02:00
Evan Hunt
5c5dcf34c3 [master] spelling 2016-05-25 18:44:59 -07:00
Evan Hunt
8e4d28d018 [master] extend release notes 2016-05-25 18:40:47 -07:00
Evan Hunt
9211688e88 [master] fix tag mismatch 2016-05-25 18:32:38 -07:00
Evan Hunt
0cbe448914 [master] minimal-any 
4371.	[func]		New "minimal-any" option reduces the size of UDP
			responses for qtype ANY by returning a single
			arbitrarily selected RRset instead of all RRsets.
			Thanks to Tony Finch. [RT #41615]
 2016-05-25 13:54:34 -07:00
Tinderbox User
3ba1f79ade regen master 2016-05-24 01:04:01 +00:00
Mark Andrews
47d19078de note RNDC module 2016-05-24 10:47:58 +10:00
Tinderbox User
22e21a4213 regen master 2016-05-17 05:39:19 +00:00
Tinderbox User
221870ba7b regen master 2016-05-17 04:27:10 +00:00
Mark Andrews
259107718f update for 9.11.0a2 2016-05-17 14:08:30 +10:00
Tinderbox User
9b3ef7211c regen master 2016-05-17 04:03:51 +00:00
Mark Andrews
bf8d171a66 add RFC7793 2016-05-13 17:00:17 +10:00
Tinderbox User
05cf9e3285 update copyright notice / whitespace 2016-05-11 23:45:23 +00:00
Mark Andrews
bf4fe7ca1b 7830: The EDNS(0) Padding Option 2016-05-11 12:08:20 +10:00
Tinderbox User
56bd026e6c regen master 2016-05-10 01:05:28 +00:00
Mark Andrews
2fef945936 remove repeated like 2016-05-10 07:22:59 +10:00
Tinderbox User
f33abec8a6 regen master 2016-05-06 01:05:45 +00:00
Witold Krecicki
e846f127d6 4362. [func] Changed rndc reconfig behaviour so that newly added 
zones are loaded asynchronously and the loading does
			not block the server. [RT #41934]
 2016-05-05 21:41:12 +02:00
Evan Hunt
370c6e0ac1 [master] add nsip-wait-recurse release note 2016-05-05 09:33:28 -07:00
Mark Andrews
08e36aa5a5 4356. [func] Add the ability to specify whether to wait for 
nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]
 2016-05-05 16:29:05 +10:00
Tinderbox User
006283c423 regen master 2016-05-05 01:05:35 +00:00
Evan Hunt
66074f152f [master] log message when using ISC DLV 
4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]
 2016-05-04 14:37:25 -07:00
Tinderbox User
3241ddcf93 regen master 2016-04-30 01:05:59 +00:00
Mark Andrews
1bebd86e9f fix tag mis-match 2016-04-29 11:10:21 +10:00
Evan Hunt
f6096b958c [master] dnssec-keymgr 
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
 2016-04-28 00:16:01 -07:00
Tinderbox User
6b7cba2b10 regen master 2016-03-25 01:05:22 +00:00
Evan Hunt
4d3f9f216a [master] better relnote for read-only controls option 2016-03-24 16:52:17 -07:00
Evan Hunt
1831596a79 [master] fixes for release notes 2016-03-24 14:40:44 -07:00
Evan Hunt
936bfae6d5 [master] remove pre-9.11.0a1 security fixes from 9.11 release notes 2016-03-24 12:11:53 -07:00
Tinderbox User
e285c11870 regen master 2016-03-24 01:05:08 +00:00
Tinderbox User
6e3f736f73 regenerate 2016-03-23 06:50:54 +00:00
Tinderbox User
46472a450e regen master 2016-03-23 06:45:14 +00:00
Evan Hunt
bee8d5b202 [master] fix broken tag 2016-03-22 21:38:25 -07:00
Evan Hunt
4488842485 [master] prep 9.11.0a1 2016-03-22 20:00:47 -07:00
Tinderbox User
6a178481cf regen master 2016-03-17 01:05:26 +00:00
Jeremy C. Reed
6693c9a2f0 fix spelling 2016-03-16 15:41:18 -04:00
Tinderbox User
832fa787d4 regen master 2016-03-11 01:05:28 +00:00
Jeremy C. Reed
10b7784c59 minor grammar fix 2016-03-10 16:51:40 -05:00
Mark Andrews
98c5690bd9 note rrsig regeneration 2016-03-10 17:05:49 +11:00
Tinderbox User
54599d0e4f update copyright notice / whitespace 2016-03-09 00:56:17 +00:00
Tinderbox User
f9ce6280ce regen master 2016-03-09 00:39:40 +00:00
Mark Andrews
f2eed65224 use xmlint to process include 
(cherry picked from commit 71e9df17b671f7ef5742967b25a1ab36ec3dd91b)
 2016-03-09 11:35:13 +11:00
Tinderbox User
1fb011b1db regen master 2016-03-08 22:35:32 +00:00
Mark Andrews
3cf2fb29ac add automatic-interface-scan to ARM grammar 
(cherry picked from commit 90499817bf)
 2016-03-09 08:57:32 +11:00
Tinderbox User
7f9f0b9755 regen master 2016-03-06 01:04:34 +00:00
Mark Andrews
e011df2927 add AVC 2016-03-05 17:56:49 +11:00
Tinderbox User
820739d918 regen master 2016-03-05 01:13:25 +00:00
Mark Andrews
7a3a30e296 add AVC 2016-03-04 18:18:04 +11:00
Evan Hunt
44c86318ed [master] recursively clean empty interior nodes when deleting database records 
4324.	[bug]		When deleting records from a zone database, interior
			nodes could be left empty but not deleted, damaging
			search performance afterward. [RT #40997]
 2016-03-03 21:13:42 -08:00
Tinderbox User
df3d1c56e4 regen master 2016-02-27 01:04:26 +00:00
Mark Andrews
455c0848f8 4322. [security] Duplicate EDNS COOKIE options in a response could 
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]
 2016-02-27 11:23:50 +11:00
Tinderbox User
ba38c6b4bc regen master 2016-02-23 01:04:33 +00:00
Mukund Sivaraman
5995fec51c Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753) 2016-02-22 12:22:43 +05:30
Tinderbox User
1609eab3ca regen master 2016-02-19 01:04:16 +00:00
Mark Andrews
a2b15b3305 4318. [security] Malformed control messages can trigger assertions 
in named and rndc. (CVE-2016-1285) [RT #41666]
 2016-02-18 12:11:27 +11:00
Tinderbox User
ee2e5fec65 regen master 2016-02-11 01:04:20 +00:00
Tinderbox User
7e5658b04f regen master 2016-01-30 01:04:18 +00:00
Evan Hunt
b5c22260e5 [master] remove reporter's name per his request 2016-01-29 10:35:14 -08:00
Tinderbox User
6825f304c5 regen master 2016-01-29 01:04:18 +00:00
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Evan Hunt
e073205a88 [master] openssl 1.0.2f patch 
4306.	[maint]		Added a PKCS#11 openssl patch supporting
			version 1.0.2f [RT #38312]
 2016-01-28 13:27:29 -08:00
Evan Hunt
e79e346bf2 [master] correct also-notify grammar 2016-01-27 19:07:31 -08:00
Tinderbox User
1bb7846d29 regen master 2016-01-23 01:04:14 +00:00
Evan Hunt
630b2d0c5a [master] NOSETFC incorrectly applied 
4300.	[bug]		A flag could be set in the wrong field when setting
			up nonrecursive queries; this could cause the
			SERVFAIL cache to cache responses it shouldn't.
			New querytrace logging has been added which
			identified this error. [RT #41155]
 2016-01-22 13:58:11 -08:00
Tinderbox User
6758b59e57 regen master 2016-01-13 01:04:19 +00:00
Evan Hunt
bb5d14d724 [master] millisecond granularity for statschannel timers 
4290.	[func]		The timers returned by the statistics channel
			(indicating current time, server boot time, and
			most recent reconfiguration time) are now reported
			with millisecond accuracy. [RT #40082]
 2016-01-07 15:34:58 -08:00
Tinderbox User
742cb92338 regen master 2016-01-06 01:04:26 +00:00
Evan Hunt
455b99ed92 [master] fix ticket number 2016-01-05 09:08:49 -08:00
Evan Hunt
c8b968f414 [master] fix use after free on xfr timeout 
4289.	[bug]		The server could crash due to memory being used
			after it was freed if a zone transfer timed out.
			[RT #41297]
 2016-01-04 22:05:23 -08:00
Tinderbox User
4206bb139c regen master 2016-01-05 01:04:24 +00:00
Evan Hunt
aadca3f7d0 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2016-01-04 16:09:40 -08:00
Evan Hunt
41494939b6 [master] fixed bogus server regression 
4288.	[bug]		Fixed a regression in resolver.c:possibly_mark()
			which caused known-bogus servers to be queried
			anyway. [RT #41321]
 2016-01-04 15:47:16 -08:00
Tinderbox User
e1836d1fe4 update copyright notice / whitespace 2016-01-04 23:45:26 +00:00
Evan Hunt
43176d82c8 [master] clean up notes 2016-01-03 21:22:00 -08:00
Tinderbox User
58d970a2b4 regen master 2016-01-01 01:04:21 +00:00
Mark Andrews
292eb9c4e4 4286. [security] render_ecs errors were mishandled when printing out 
a OPT record resulting in a assertion failure.
                        (CVE-2015-8705) [RT #41397]

(cherry picked from commit 3e0c1603a8)
 2015-12-31 22:19:46 +11:00
Mark Andrews
9c52f43036 remove period 2015-12-31 14:35:06 +11:00
Mark Andrews
1b3d211802 4285. [security] Specific APL data could trigger a INSIST. 
(CVE-2015-8704) [RT #41396]
 2015-12-31 13:43:21 +11:00
Tinderbox User
428a763a70 regen master 2015-12-27 01:04:16 +00:00
Evan Hunt
fbed5f0f44 [master] fix geoip options 
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
 2015-12-26 10:50:32 -08:00
Tinderbox User
0226754d9e regen master 2015-12-19 01:04:14 +00:00
Mark Andrews
8beb9bf514 add dig +mapped 2015-12-19 09:51:53 +11:00
Tinderbox User
a179cbdf65 regen master 2015-12-16 01:04:13 +00:00
Mukund Sivaraman
6960e7fd12 Update notes.xml for #40996 2015-12-15 18:06:13 +05:30
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Tinderbox User
a35017e06e regen master 2015-12-08 01:04:12 +00:00
Mark Andrews
322e6b5be7 4276. [protocol] Add support for SMIMEA. [RT #40513] 2015-12-08 08:16:41 +11:00
Tinderbox User
2ba8603ca9 regen master 2015-12-04 01:04:14 +00:00
Evan Hunt
4071efbec0 [master] disallow map zones in response-policy 
4269.	[bug]		Zones using "map" format master files currently
			don't work as policy zones.  This limitation has
			now been documented; attempting to use such zones
			in "response-policy" statements is now a
			configuration error.  [RT #38321]
 2015-12-02 21:10:09 -08:00
Mark Andrews
7bde79b32a update description 2015-12-03 15:42:58 +11:00
Mark Andrews
ff2f98076c Add CVE-2015-8461 2015-12-03 15:31:28 +11:00
Tinderbox User
89c5c74c96 update copyright notice / whitespace 2015-11-24 23:45:23 +00:00
Evan Hunt
bdc60a0bde [master] update developer guide, expanding on comments and unit tests 2015-11-24 14:43:02 -08:00
Tinderbox User
909a8e59a4 regen master 2015-11-21 01:04:11 +00:00
Mark Andrews
cbc660172d spelling 2015-11-20 14:55:20 +11:00
Tinderbox User
dec590a3de regen master 2015-11-18 01:04:11 +00:00
Mark Andrews
b57276f89e note the address changes for H.ROOT-SERVERS.NET 2015-11-18 11:08:50 +11:00
Jeremy C. Reed
22b006e0df Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-17 10:22:41 -05:00
Evan Hunt
63042d5b57 [master] typo 2015-11-16 18:21:17 -08:00
Tinderbox User
c42708dcc8 regen master 2015-11-17 01:04:47 +00:00
Jeremy C. Reed
414678df72 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-16 12:53:55 -05:00
Mark Andrews
c8821d124c 4260. [security] Insufficient testing when parsing a message allowed 
records with an incorrect class to be be accepted,
                        triggering a REQUIRE failure when those records
                        were subsequently cached. (CVE-2015-8000) [RT #4098]
 2015-11-16 13:12:20 +11:00
Tinderbox User
d7a61cfbe5 regen master 2015-11-12 01:04:13 +00:00
Mukund Sivaraman
8012e06abf Update notes.xml for #40498 2015-11-11 13:51:55 +05:30
Mukund Sivaraman
58f7af60e7 Allow non-destructive control channel access using a "read-only" clause (#40498) 2015-11-11 13:46:57 +05:30
Tinderbox User
d9613f4c73 regen master 2015-11-11 01:04:12 +00:00
Mark Andrews
1d83f85752 don't run {doc,man}clean for releaseinfo.xml and friend 2015-11-10 14:39:41 +11:00
Jeremy C. Reed
e08c32f45f add simpara to some note tags 
So generated "Note" header isn't on same line as content.

Also removed one place that said "Note" (so doesn't say
"Note Note").
 2015-11-09 22:10:01 -05:00
Jeremy C. Reed
cca02d061f Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-09 22:07:27 -05:00
Tinderbox User
3865e18d3d update copyright notice / whitespace 2015-11-09 23:45:22 +00:00
Jeremy C. Reed
dde7a7d357 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-11-09 11:25:01 -05:00
Mukund Sivaraman
517b58429c Fix typo 2015-11-09 15:17:44 +05:30
Evan Hunt
e13d04fda9 [master] fix python script versions 
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
 2015-11-08 21:34:24 -08:00
Tinderbox User
58021df889 regen master 2015-11-07 01:04:14 +00:00
Evan Hunt
17834caa6c [master] clarify message-compression doc 
- mention TCP and RFC compliance issues
 2015-11-06 13:44:28 -08:00
Tinderbox User
e62b9c9ce6 regen master 2015-11-06 01:04:13 +00:00
Witold Krecicki
bfd4b9e11a 4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726] 2015-11-05 12:19:04 +01:00
Mark Andrews
e939674d53 4252. [func] Add support for automating the generation CDS and 
CDNSKEY rrsets to named and dnssec-signzone.
                        [RT #40424]
 2015-11-05 12:09:48 +11:00
Tinderbox User
2b39e7bde9 regen master 2015-11-05 01:04:10 +00:00
Evan Hunt
6b8519147a [master] NTAs did not survive reoad/reconfig 
4251.	[bug]		NTAs were deleted when the server was reconfigured
			or reloaded. [RT #41058]
 2015-11-04 10:34:28 -08:00
Evan Hunt
ffb47c916a [master] update README-SGML 2015-10-28 21:38:55 -07:00
Tinderbox User
eadee66609 regen master 2015-10-29 02:56:15 +00:00
Jeremy C. Reed
fe12c35c3e fix some spelling typos and standardize some English spellings 
(to be consistent)
 2015-10-23 13:04:09 -04:00
Jeremy C. Reed
a8ce30c861 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-10-23 08:14:48 -04:00
Tinderbox User
9d557856c2 regen master 2015-10-22 05:53:09 +00:00
Mark Andrews
79f0eedd65 cleanup trailing whitespace 2015-10-22 16:24:03 +11:00
Mark Andrews
30eec077db cleanup trailing white space in SGML like files 2015-10-22 16:09:46 +11:00
Jeremy C. Reed
fcb755212b make sure there is a simpara for missing context for note tag 2015-10-21 15:03:25 -04:00
Jeremy C. Reed
134788b041 remove errant word 
a word is repeated in a sentence and didn't make sense as-is
so removed it
 2015-10-20 14:56:46 -04:00
Jeremy C. Reed
bb2e9569fe get rid of the "See also fetch-glue" since is obsolete 
This doesn't remove the description but don't have other
options refer to obsolete option.

No CHANGES entry since very minor.
 2015-10-20 10:45:49 -04:00
Tinderbox User
2b4d1b54f6 regen master 2015-10-20 01:04:48 +00:00
Evan Hunt
932715fbbe [master] update TSIG, TKEY, SIG(0) documentation 
4241.	[doc]		Improved the TSIG, TKEY, and SIG(0) sections in
			the ARM. [RT #40955]
 2015-10-19 08:48:18 -07:00
Tinderbox User
e2b184f84e regen master 2015-10-18 01:07:32 +00:00
Evan Hunt
90174e64f4 [master] shorten default servfail-ttl 
4239.	[func]		Changed default servfail-ttl value to 1 second from 10.
			Also, the maximum value is now 30 instead of 300. [RT #37556]
 2015-10-17 13:44:01 -07:00
Tinderbox User
b96b01ed26 regen master 2015-10-15 01:06:35 +00:00
Evan Hunt
c3cb3953b6 [master] remove unneeded xsl code, fix a link in ARM 2015-10-14 14:57:54 -07:00
Tinderbox User
af40ebed62 regen master 2015-10-13 01:04:41 +00:00
Evan Hunt
b2171b164c [master] add link achors to to <section> tags 2015-10-12 13:01:13 -07:00
Tinderbox User
fd2597f756 regen master 2015-10-07 04:11:09 +00:00
Tinderbox User
010a51c427 regen master 2015-10-07 01:06:58 +00:00
Tinderbox User
19c7b1a029 update copyright notice / whitespace 2015-10-06 23:45:23 +00:00
Tinderbox User
2eeb74d1cf regen master 2015-10-06 05:45:21 +00:00
Evan Hunt
14a656f94b [master] upgrade doc toolchain 
4237.	[doc]		Upgraded documentation toolchain to use DocBook 5
			and dblatex. [RT #40766]
 2015-10-05 21:59:35 -07:00
Mukund Sivaraman
56ebb560a1 Fix notes and CHANGES for #40761 2015-10-06 05:44:53 +05:30
Jeremy C. Reed
dfd19d9ff6 add missing <listitem> tags 
because require-server-cookie and request-sit explanations were
missing.
 2015-10-05 11:53:13 -04:00
Evan Hunt
9044f878d7 [master] wrong category name 2015-10-04 18:42:47 -07:00
Tinderbox User
90d087cf9c regen master 2015-10-04 01:09:39 +00:00
Mukund Sivaraman
9260c1157d Update CHANGES and notes.xml for #40761 2015-10-03 07:11:12 +05:30
Mukund Sivaraman
930719e876 Update the default value for number of UDP listeners (#40761) 2015-10-03 07:08:55 +05:30
Evan Hunt
3ce7ddcc01 [master] add "dnstap" to categories 2015-10-02 18:31:12 -07:00
Tinderbox User
10b865e918 regen master 2015-10-03 01:07:28 +00:00
Evan Hunt
b66b333f59 [master] dnstap 
4235.	[func]		Added support in named for "dnstap", a fast method of
			capturing and logging DNS traffic, and a new command
			"dnstap-read" to read a dnstap log file.  Use
			"configure --enable-dnstap" to enable this
			feature (note that this requires libprotobuf-c
			and libfstrm). See the ARM for configuration details.

			Thanks to Robert Edmonds of Farsight Security.
			[RT #40211]
 2015-10-02 12:32:42 -07:00
Tinderbox User
41f0b3e098 regen master 2015-10-01 01:06:45 +00:00
Tinderbox User
551e0d486d update copyright notice / whitespace 2015-09-30 23:45:36 +00:00
Evan Hunt
3739c1beae [master] document the spill category 2015-09-29 21:21:44 -07:00
Tinderbox User
fa535fa05f regen master 2015-09-30 03:48:43 +00:00
Mark Andrews
6c4f9b5cf6 split out logging-categories [RT #40844] 2015-09-30 12:56:31 +10:00
Tinderbox User
983df82baf regen master 2015-09-30 01:06:20 +00:00
Evan Hunt
a00f9e2f50 [master] merge dyndb 
4224.	[func]		Added support for "dyndb", a new interface for loading
			zone data from an external database, developed by
			Red Hat for the FreeIPA project.

			DynDB drivers fully implement the BIND database
			API, and are capable of significantly better
			performance and functionality than DLZ drivers,
			while taking advantage of advanced database
			features not available in BIND such as multi-master
			replication.

			Thanks to Adam Tkac and Petr Spacek of Red Hat.
			[RT #35271]
 2015-09-28 23:12:35 -07:00
Tinderbox User
8f70b6b483 regen master 2015-09-29 01:10:32 +00:00
Mark Andrews
8fc1b0bf4d add closing tag 2015-09-29 08:36:05 +10:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage 
of available physical memory, set default to 90%.
			[RT #38442]
 2015-09-28 11:08:50 +02:00
Mark Andrews
98a7f8c7ae 4222. [func] Bias IPv6 servers when selecting the next server to 
query. [RT #40836]
 2015-09-28 18:57:19 +10:00
Tinderbox User
9a5087bf58 regen master 2015-09-23 01:05:36 +00:00
Tinderbox User
ad8f23aed6 regen master 2015-09-22 01:06:07 +00:00
Evan Hunt
72c2a84e77 [master] comment no longer needed 2015-09-21 13:17:20 -07:00
Evan Hunt
00b4840c36 [master] named.conf and lwresd man pages missing from ARM 2015-09-21 13:15:07 -07:00
Jeremy C. Reed
5c41d47227 Improve docs for zone-statistics 
This is for ticket #36955.
Improve grammar for zone-statistics to list new arguments.
Refer to the docs in the options section.
Clarify about stats may not show view name.
 2015-09-21 10:06:15 -05:00
Jeremy C. Reed
f48280a996 Merge branch 'rt39570' 
Note I didn't add a changelog entry. The documentation was already
there and only modified a little.
 2015-09-21 08:56:07 -05:00
Tinderbox User
09d72af3e9 regen master 2015-09-19 01:08:38 +00:00
Mark Andrews
f6e45a5c54 4217. [protocol] Add support for CSYNC. [RT #40532] 2015-09-18 23:45:12 +10:00
Tinderbox User
d758d223c9 regen master 2015-09-18 01:07:23 +00:00
Tinderbox User
7dbeeeaa1e update copyright notice / whitespace 2015-09-17 23:45:24 +00:00
Mark Andrews
e0a30050c8 4214. [protocol] Add support for TALINK. [RT #40544] 2015-09-18 07:43:43 +10:00
Evan Hunt
9e86fc48e0 [master] some options were in the wrong section of the ARM 2015-09-17 09:33:52 -07:00
Tinderbox User
dc9edc1332 regen master 2015-09-17 01:06:03 +00:00
Mark Andrews
3b3178ba7a fix company name 
(cherry picked from commit eb4de5324b)
 2015-09-17 10:17:49 +10:00
Jeremy C. Reed
f07aac8639 fix docbook tag mistake 
Fix my mistake in my new branch that I just introduced.
 2015-09-16 10:40:02 -05:00
Jeremy C. Reed
205c17fd0d improve the nocookie-udp-size documentation 2015-09-16 11:34:56 -04:00
Jeremy C. Reed
ed15792642 move the nocookie-udp-size from server statement to options 2015-09-16 11:25:21 -04:00
Jeremy C. Reed
7d2c4d1c9f document zone "type" in the ARM 
This is for ticket #39577
It only added two sentences so didn't update changelog.
 2015-09-16 09:50:29 -05:00
Jeremy C. Reed
456ef30acb remove the only section in the history appendix to workaround dblatex issue 
dblatex generated LaTeX that failed with the "id" for link reference
in the sect1 when itr had no <title> to reference.
(A workaround is to set a <title>.)
But since this appendix only had one section
and looked off to have B1 with no title and no B2, just remove the
sect1 tags.
I added the id to the first <para> tag just in case someone uses
it to link.
Note I didn't reformat the content there.

I didn't get this reviewed as was trivial change.
 2015-09-16 09:42:08 -05:00
Tinderbox User
5091a6fed9 regen master 2015-09-12 01:08:08 +00:00
Jeremy C. Reed
6db5cee19c add docbook tag for dns64 suffix value 
add missing docbook formatting.
Note the element is standard, but that can be fixed in bulk later.
 2015-09-11 13:33:55 -05:00
Jeremy C. Reed
a9695fcdcb add nxdomain-redirect to options grammar 
I just used "string" as the value type.
There is no real order here so just put by another "nxdomain" option.
This was not reviewed.
This is for ticket #39384 which also considers other work.
 2015-09-11 13:04:06 -05:00
Mark Andrews
5a49f61ca9 4199. [protocol] Add support for NINFO, RKEY, SINK, TA. 
[RT #40545] [RT #40547] [RT #40561] [RT #40563]
 2015-09-11 17:35:01 +10:00
Mark Andrews
a0ef8211d3 4201. [func] The default preferred-glue is now the address record 
type of the transport the query was received
                        over.  [RT #40468]
 2015-09-11 13:27:58 +10:00
Mark Andrews
3fa134363f 4200. [cleanup] win32: update BINDinstall to be BIND release 
independent. [RT #38915]
 2015-09-11 12:25:39 +10:00
Mark Andrews
329073f6b8 add NINFO and RKEY 2015-09-11 11:40:44 +10:00
Tinderbox User
199045f81d regen master 2015-09-11 01:06:12 +00:00
Jeremy C. Reed
4eb29d8984 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2015-09-10 09:34:37 -05:00
Jeremy C. Reed
c0fc4a1abd add missing space 
noticed in manual review of the PDF
minor so wasn't reviewed
 2015-09-10 09:32:29 -05:00
Mark Andrews
3dd63ba00f 4199. [protocol] Add support for NINFO, RKEY, TA. 
[RT #40545] [RT #40547] [RT #40563]
 2015-09-10 17:58:29 +10:00
Mark Andrews
63874956de 4199. [protocol] Add support for NINFO, RKEY. [RT #40547] [RT #40563] 2015-09-10 17:07:05 +10:00
Mark Andrews
8b29fc0b7a 4199. [protocol] Add support for RKEY. [RT #40563] 2015-09-10 14:50:20 +10:00
Tinderbox User
81199ce5ba regen master 2015-09-10 01:06:15 +00:00
Mark Andrews
4ca7391e64 4196. [doc] Improve how "enum + other" types are documented. 
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]
 2015-09-09 17:02:11 +10:00
Tinderbox User
f6e04b5923 regen master 2015-09-09 01:06:29 +00:00
Jeremy C. Reed
176b2c47db fix grammar for keys to use key_id 
This is for ticket #23009.
Remove statement about grammar too.
No CHANGES entry done.
 2015-09-08 15:15:42 -05:00
Jeremy C. Reed
4de43d2854 improve dnssec-enable and dnssec-validation documentation 
This is for #37362
Okayed via jabber
No CHANGES entry
 2015-09-08 15:53:58 -04:00
Tinderbox User
1acae3ea5e regen master 2015-09-05 01:07:14 +00:00
Jeremy C. Reed
1a2469058c mention seconds for max-zone-ttl, max-cache-ttl, min-refresh-time, max-policy-ttl in ARM 
This is for ticket 38106.
The initial patch was okayed, but then another commenter mentioned
that max-zone-ttl also allows TTL units so I mention that also
without review.
Note for the ticket, resolver-query-timeout change was
already handled last month in my commit 8789f39b
 2015-09-04 14:30:48 -04:00
Jeremy C. Reed
1c2152e58f fix missing space (noticed in April, bug 39228) and fix grammar 2015-09-04 13:59:35 -04:00
Tinderbox User
a8fa482d0c regen master 2015-09-01 01:05:53 +00:00
Jeremy C. Reed
0d0e6f70ba grammar 2015-08-31 10:21:35 -05:00
Mark Andrews
483f1611fc update list of supported types in the ARM 2015-08-31 15:15:55 +10:00
Tinderbox User
f7eed06a3c regen master 2015-08-28 01:06:29 +00:00
Evan Hunt
4c9ead8b9f [master] fix incorrect bug ID 2015-08-27 10:22:46 -07:00
Tinderbox User
7e3f5fbcf8 regen master 2015-08-21 01:04:49 +00:00
Jeremy C. Reed
8789f39b12 mention resolver-query-timeout is in "seconds" 
I didn't get this reviewed but looked at source where
dns_resolver_settimeout value is called "seconds"
and the comments for the maximum and default macros say "seconds".
 2015-08-20 15:36:27 -05:00
Tinderbox User
95273fcb70 regen master 2015-08-16 01:05:36 +00:00
Evan Hunt
c40d8676c2 [master] fix copyright 2015-08-14 19:57:22 -07:00
Tinderbox User
310f88d008 [master] fix the o umlaut for HTML and TXT too 2015-08-15 02:55:15 +00:00
Tinderbox User
c266f8b440 regen master 2015-08-14 01:04:59 +00:00
Tinderbox User
ca5b644b9e update copyright notice / whitespace 2015-08-13 23:45:25 +00:00
Evan Hunt
afc3103851 [master] add CVE number 2015-08-13 15:30:49 -07:00
Tinderbox User
f619a2035b document omlaut 2015-08-13 20:43:29 +00:00
Tinderbox User
a73d9c0b4d support umlaut 'o' 2015-08-13 19:42:19 +00:00
Tinderbox User
aa6c5a3e33 regen master 2015-08-13 01:26:22 +00:00
Evan Hunt
9716b6a5d6 [master] xml doesn't define &ouml; 2015-08-12 18:16:04 -07:00
Mark Andrews
c631ff56bf Updated CHANGES note to include require-server-cookie: 
4152.   [func]          Implement DNS COOKIE option.  This replaces the
                        experimental SIT option of BIND 9.10.  The following
                        named.conf directives are available: send-cookie,
                        cookie-secret, cookie-algorithm, nocookie-udp-size
                        and require-server-cookie.  The following dig options
                        are available: +[no]cookie[=value] and +[no]badcookie.
                        [RT #39928]
 2015-08-13 08:26:23 +10:00
Mark Andrews
b63a83eea8 update 2015-08-12 22:58:07 +10:00
Evan Hunt
c707e2b986 [master] fix length check in OPENPGPKEY 
4170.	[security]	An incorrect boundary check in the OPENPGPKEY
			rdatatype could trigger an assertion failure.
			[RT #40286]
 2015-08-11 20:01:44 -07:00
Tinderbox User
5002bd49e8 regen master 2015-08-08 01:06:01 +00:00
Evan Hunt
ce9f893e21 [master] address buffer accounting error 
4168.	[security]	A buffer accounting error could trigger an
			assertion failure when parsing certain malformed
			DNSSEC keys. (CVE-2015-5722) [RT #40212]
 2015-08-07 13:16:10 -07:00
Jeremy C. Reed
658b0ec21c fix spelling typo 2015-08-07 12:31:55 -04:00
Tinderbox User
964783e7e8 regen master 2015-08-07 01:06:05 +00:00
Evan Hunt
d2f45d7ffd [master] revert incorrect 'correction' 2015-08-05 12:15:25 -07:00
Tinderbox User
233da44607 regen master 2015-08-01 01:05:43 +00:00
Evan Hunt
7ed374872f [master] corrected relnotes -- assertion in name.c not message.c 2015-07-31 12:03:29 -07:00
Mark Andrews
090ba6ff30 update 2015-07-26 06:45:53 +10:00
Tinderbox User
98e1584b29 update copyright notice / whitespace 2015-07-24 23:45:21 +00:00
Mark Andrews
b2b408e4ed update 2015-07-24 23:39:58 +10:00
Mark Andrews
364162f4ae update 2015-07-24 15:05:20 +10:00
Mark Andrews
230f8da57c update 2015-07-24 14:58:21 +10:00
Tinderbox User
5d564da348 regen master 2015-07-24 01:04:59 +00:00
Mark Andrews
98869e60fa whitespace 2015-07-23 17:56:03 +10:00
Tinderbox User
bd84b04e4f regen master 2015-07-21 01:05:05 +00:00
Evan Hunt
8a205b4534 [master] remove accidentally duplicated section on clients-per-query 2015-07-20 15:25:28 -07:00
Tinderbox User
bd9a66d553 regen master 2015-07-15 01:04:58 +00:00
Mark Andrews
84114ec4c7 request-nsid -> request-sit 2015-07-15 08:38:08 +10:00
Mark Andrews
c5eb9add52 add CVE-2015-5477 2015-07-15 07:51:06 +10:00
Tinderbox User
b3338fc248 regen master 2015-07-11 01:05:48 +00:00
Tinderbox User
c0cbdeedb5 regen master 2015-07-10 01:05:03 +00:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features 
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
 2015-07-08 22:53:39 -07:00
Tinderbox User
40f508f08b regen master 2015-07-08 01:04:56 +00:00
Evan Hunt
70d987def5 [master] traffic size stats 
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
 2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Tinderbox User
1879ff4932 regen master 2015-07-06 01:04:49 +00:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the 
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
 2015-07-06 09:44:24 +10:00
Mark Andrews
aa3bffca69 whitespace 2015-07-04 12:50:29 +10:00
Tinderbox User
6cd01c0a96 regen master 2015-06-30 01:04:57 +00:00
Tinderbox User
0a4f0f6ab6 regen master 2015-06-26 01:05:04 +00:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00
Tinderbox User
0da3028ccf regen master 2015-06-20 01:05:58 +00:00
Witold Krecicki
6a3249533a fix rpz-client-ip documentation [RT #39783] 2015-06-19 10:23:53 +02:00
Tinderbox User
b708ffc480 regen master 2015-06-19 01:05:11 +00:00
Mukund Sivaraman
f4d1c19691 Add comma 2015-06-17 12:23:44 +05:30
Mark Andrews
572e95f52a add release notes for CVE-2015-4620 2015-06-17 11:19:53 +10:00
Tinderbox User
871ab4edd8 regen master 2015-06-06 01:06:45 +00:00
Mark Andrews
94f7158d44 update rpz doc as per rt39703 2015-06-05 11:13:02 +10:00
Tinderbox User
335c82aebd regen master 2015-06-05 01:05:03 +00:00
Evan Hunt
8c9fba44a4 [master] further RPZ fixes 
4131.	[bug]		Addressed further problems with reloading RPZ
			zones. [RT #39649]
 2015-06-03 18:18:55 -07:00
Tinderbox User
22be030b50 regen master 2015-05-29 01:04:57 +00:00
Tinderbox User
431e5c81db update copyright notice / whitespace 2015-05-28 23:45:24 +00:00
Tinderbox User
481870b95f regen master 2015-05-28 01:04:54 +00:00
Mark Andrews
598b502695 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing 
key as per RFC 7344, Section 4.1. [RT #37215]
 2015-05-27 15:25:45 +10:00
Tinderbox User
661e7fbf77 regen master 2015-05-22 01:04:47 +00:00
Evan Hunt
f5c20627f4 [master] fix tags 2015-05-21 14:29:22 -07:00
Mukund Sivaraman
72a1c3f1a7 Update notes.xml and CHANGES for #39567 2015-05-21 21:45:47 +05:30
Mukund Sivaraman
705cea35a8 Fix RPZ radix tree search() for CLIENT-IP triggers (#39481) 2015-05-21 11:10:49 +05:30
Tinderbox User
b9a0676eec regen master 2015-05-21 01:04:46 +00:00
Evan Hunt
19365b43e9 [master] ensure rpz summary consistence during AXFR updates 
4121.	[bug]		When updating a response-policy zone via AXFR,
			summary data about other policy zones could fall
			out of sync. Ultimately this could trigger an
			assertion failure in rpz.c. [RT #39567]
 2015-05-20 15:00:50 -07:00
Tinderbox User
e9ed929fd1 regen master 2015-05-20 01:04:55 +00:00
Evan Hunt
7e6cf6fc6e [master] address a possible policy update race 
4120.	[bug]		A bug in RPZ could cause the server to crash if
			policy zones were updated while recursion was
			pending for RPZ processing of an active query.
			[RT #39415]
 2015-05-19 15:47:42 -07:00
Mark Andrews
8f20f6c9d7 4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534. 2015-05-15 08:22:25 +10:00
Tinderbox User
7f18387d4b regen master 2015-05-08 01:05:05 +00:00
Mukund Sivaraman
b947e1a521 Fix a bug in RPZ that could cause unwanted recursion (#39229) 
Conflicts:
	doc/arm/notes.xml
 2015-05-07 08:29:36 +05:30
Tinderbox User
6d45011a65 regen master 2015-05-06 01:05:06 +00:00
Tinderbox User
395c952141 regen master 2015-05-05 01:05:07 +00:00
Tinderbox User
e668599e6a regen master 2015-04-25 01:05:56 +00:00
Mark Andrews
e77e449549 4109. [port] linux: support reading the local port range from 
net.ipv4.ip_local_port_range. [RT # 39379]
 2015-04-25 08:25:42 +10:00
Tinderbox User
8168c28739 regen master 2015-04-24 01:05:03 +00:00
Evan Hunt
ef1aaab9ed [master] more verbose CHANGES note, added release note 
4108.	[func]		An additional NXDOMAIN redirect method (option
			"nxdomain-redirect") has been added, allowing
			redirection to a specified DNS namespace instead
			of a single redirect zone. [RT #37989]
 2015-04-23 09:40:07 -07:00
Mark Andrews
c82b378115 4108. [func] A additional nxdomain redirect (nxdomain-redirect) 
method is now supported. [RT #37989]
 2015-04-23 16:57:15 +10:00
Tinderbox User
645a03d61e regen master 2015-04-16 01:04:55 +00:00
Evan Hunt
fc3ed1dbda [master] fix +split and +rrcomments with dig +short 
4101.	[bug]		dig: the +split and +rrcomments options didn't
			work with +short. [RT #39291]
 2015-04-15 09:50:07 -07:00
Tinderbox User
24abfe433e regen master 2015-04-14 01:05:08 +00:00
Tinderbox User
6a6ceba6fe update copyright notice / whitespace 2015-04-13 23:45:23 +00:00
Jeremy C. Reed
2637d30fbd docbook <command> tags around named server references 2015-04-13 11:46:35 -05:00
Jeremy C. Reed
2b66b8b6fb fix mismatched docbook tag 2015-04-13 11:38:40 -05:00
Evan Hunt
d9b37259f3 [master] hold a reference on fetch context during query 
4094.	[bug]		A race during shutdown or reconfiguration could
			cause an assertion in mem.c. [RT #38979]
 2015-04-08 14:33:45 -07:00
Tinderbox User
0d00a726fe regen master 2015-04-08 01:05:07 +00:00
Evan Hunt
f28e5058c3 [master] dig can now learn the SIT value when retrying 
4093.	[func]		Dig now learns the SIT value from truncated
			responses when it retries over TCP. [RT #39047]
 2015-04-06 23:16:54 -07:00
Mark Andrews
febb020dce 4092. [bug] 'in-view' didn't work for zones beneath a empty zone. 
[RT #39173]
 2015-04-07 13:21:33 +10:00
Tinderbox User
ed38240f42 regen master 2015-04-07 01:05:01 +00:00
Evan Hunt
1e15a048c0 [master] minor doc fixes 2015-04-06 13:48:29 -07:00
Mark Andrews
362a13ce42 add missing entries 2015-04-02 17:10:27 +11:00
Tinderbox User
b4556ecdbc regen master 2015-03-11 01:04:49 +00:00
Mark Andrews
7b52254bf3 Add warning about configuration inheritence with in-view 2015-03-11 10:42:34 +11:00
Tinderbox User
53e1e7cec5 regen master 2015-03-10 01:04:50 +00:00
Mark Andrews
4ae7a31251 document the EDNS version is logged 2015-03-10 07:27:10 +11:00
Mark Andrews
1b05d22789 4082. [bug] Incrementally sign large inline zone deltas. 
[RT #37927]
 2015-03-05 09:59:29 +11:00
Evan Hunt
ff295743c2 [master] release note for change #4013 2015-03-04 09:06:03 -08:00
Tinderbox User
947d37484e regen master 2015-03-04 01:04:48 +00:00
Evan Hunt
7ae96d8823 [master] add "lock-file" and fix up singleton code 
4080.	[func]		Completed change #4022, adding a "lock-file" option
			to named.conf to override the default lock file,
			in addition to the "named -X <filename>" command
			line option.  Setting the lock file to "none"
			using either method disables the check completely.
			[RT #37908]
 2015-03-02 19:27:54 -08:00
Tinderbox User
603de7394f regen master 2015-03-03 01:04:47 +00:00
Mukund Sivaraman
84f95ddb25 Update win32 configure for --enable-querytrace (#37520) 
Also enable querytrace when --enable-developer is specified.
 2015-03-02 12:57:50 +05:30
Tinderbox User
548a24c3d3 regen master 2015-02-28 01:05:06 +00:00
Tinderbox User
0eea9763d8 regen master 2015-02-26 01:04:45 +00:00
Tinderbox User
d06befed22 regen master 2015-02-24 01:04:44 +00:00
Evan Hunt
7acc2f2156 [master] fix LOADPENDING issues 
4063.	[bug]		Asynchronous zone loads were not handled
			correctly when the zone load was already in
			progress; this could trigger a crash in zt.c.
			[RT #37573]
 2015-02-22 20:43:39 -08:00
Tinderbox User
659d063f23 regen master 2015-02-08 01:05:11 +00:00
Evan Hunt
591389c7d4 [master] 5011 tests and fixes 
4056.	[bug]		Expanded automatic testing of trust anchor
			management and fixed several small bugs including
			a memory leak and a possible loss of key state
			information. [RT #38458]

4055.	[func]		"rndc managed-keys" can be used to check status
			of trust anchors or to force keys to be refreshed,
			Also, the managed keys data file has easier-to-read
			comments.  [RT #38458]
 2015-02-05 17:18:15 -08:00
Tinderbox User
de283bda6a regen master 2015-02-06 01:04:48 +00:00
Francis Dupont
1059bc2e42 added mdig tool 2015-02-04 14:22:32 +01:00
Evan Hunt
801fb8b894 [master] avoid crash due to managed-key rollover 
4053.	[security]	Revoking a managed trust anchor and supplying
			an untrusted replacement could cause named
			to crash with an assertion failure.
			(CVE-2015-1349) [RT #38344]
 2015-02-03 18:25:28 -08:00
Tinderbox User
9c716f839c regen master 2015-02-04 01:04:44 +00:00
Evan Hunt
7267d1f335 [master] clarify edns-udp-size doc 2015-02-03 13:35:34 -08:00
Mukund Sivaraman
e3e783a0e9 Update notes.xml for #38454 2015-02-03 12:07:28 +05:30
Tinderbox User
73a1443878 regen master 2015-01-23 01:04:53 +00:00
Francis Dupont
0ee7e491d4 Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2015-01-22 09:25:18 +01:00
Tinderbox User
3e240d6559 regen master 2015-01-22 01:04:47 +00:00
Evan Hunt
0936da207d [master] oops, semicolons were still wrong 2015-01-21 11:41:18 -08:00
Francis Dupont
050846b17b Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2015-01-21 20:36:24 +01:00
Francis Dupont
6089bce129 missing '-' in keep-response-order 2015-01-21 20:34:19 +01:00
Evan Hunt
b892b31f75 [master] reformat response-policy grammar 
There was an overly long line that ran off the end of the
page in the PDF; also missing semicolons and close brace.
 2015-01-21 11:19:58 -08:00
Evan Hunt
2817aa56ca [master] "rndc modzone" 
4043.	[func]		"rndc modzone" can be used to modify the
			configuration of an existing zone, using similar
			syntax to "rndc addzone". [RT #37895]
 2015-01-20 22:34:16 -08:00
Evan Hunt
b88b75c2b8 [master] correct CHANGES note 2015-01-20 18:33:53 -08:00
Tinderbox User
d9184858dd regen master 2015-01-21 01:04:51 +00:00
Evan Hunt
761d135ed6 [master] add TCP pipelining support 
4040.	[func]		Added server-side support for pipelined TCP
			queries. TCP connections are no longer closed after
			the first query received from a client. (The new
			"keep-response-order" option allows clients to be
			specified for which the old behavior will still be
			used.) [RT #37821]
 2015-01-20 16:14:09 -08:00
Tinderbox User
dddceb7732 update copyright notice / whitespace 2015-01-14 23:45:22 +00:00
Tony Finch
eb4221895f doc: ignore and clean up isc-notes-html.xsl 2015-01-14 17:25:05 +05:30
Tinderbox User
ef8014e56f regen master 2015-01-14 01:04:44 +00:00
Tinderbox User
a6ca100924 update copyright notice / whitespace 2015-01-13 23:45:21 +00:00
Evan Hunt
03f979494f [master] document default DNSKEY TTL 
- see RT #38268
 2015-01-13 09:54:57 -08:00
Evan Hunt
82cf456943 [master] document dscp option 2015-01-13 09:15:51 -08:00
Tinderbox User
8402f7bfea regen master 2015-01-13 01:04:50 +00:00
Mukund Sivaraman
a6f0e9c985 Add NTA persistence (#37087) 
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
 2015-01-12 09:07:48 +05:30
Tinderbox User
fae13836a3 regen master 2015-01-12 03:30:27 +00:00
Tinderbox User
2f161339d2 regen master 2015-01-11 01:05:05 +00:00
Tinderbox User
f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Evan Hunt
6124e803cf [master] revise pkcs11 doc 2015-01-10 11:40:01 -08:00
Mark Andrews
7952156995 4032. [bug] Built-in "empty" zones did not correctly inherit the 
"allow-transfer" ACL from the options or view.
                        [RT #38310]
 2015-01-10 22:01:42 +11:00
Evan Hunt
e5073ab47c [master] improve pkcs11.xml documentation 
see RT #37801
 2015-01-10 00:36:18 -08:00
Tinderbox User
cd32f419a8 regen master 2015-01-09 01:05:02 +00:00
Tinderbox User
63b0524b96 update copyright notice / whitespace 2015-01-08 23:45:22 +00:00
Evan Hunt
fce754ac0b [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2015-01-07 17:26:42 -08:00
Evan Hunt
d6850bee24 [master] clean up release note stylesheets 2015-01-07 17:26:03 -08:00
Tinderbox User
11e9368a22 regen master 2015-01-08 01:04:51 +00:00
Tinderbox User
b129f72d95 update copyright notice / whitespace 2015-01-07 23:45:22 +00:00
Mukund Sivaraman
47ba2677db Update ARM for the named -L option, etc. [RT #38057] 2015-01-08 04:49:17 +05:30
Evan Hunt
74eb2f5cbc [master] rndc showzone / rndc delzone of non-added zones 
4030.	[func]		"rndc delzone" is now applicable to zones that were
			configured in named.conf, as well as zones that
			were added via "rndc addzone". (Note, however, that
			if named.conf is not also modified, the deleted zone
			will return when named is reloaded.) [RT #37887]

4029.	[func]		"rndc showzone" displays the current configuration
			of a specified zone. [RT #37887]
 2015-01-06 22:57:57 -08:00
Tinderbox User
8f09f14275 regen master 2015-01-06 01:04:38 +00:00
Tinderbox User
225908aece update copyright notice / whitespace 2015-01-05 23:45:23 +00:00
Evan Hunt
43d798dea3 [master] suppress table of contents in notes.html and notes.pdf 2015-01-05 14:31:23 -08:00
Evan Hunt
6306dd073e [master] add style and developer guide source 2014-12-31 12:50:19 -08:00
Tinderbox User
d5ece58e3b regen master 2014-12-19 01:04:53 +00:00
Mukund Sivaraman
47d837a499 Make named a singleton process [RT#37908] 
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
 2014-12-18 12:31:25 +05:30
Tinderbox User
c60ee6edf1 regen master 2014-12-17 01:04:43 +00:00
Evan Hunt
be7fba8019 [master] adjust max-recursion-queries 
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]
 2014-12-15 22:28:06 -08:00
Tinderbox User
25ae0fd27c regen master 2014-12-06 01:05:00 +00:00
Mark Andrews
03fd9cb81c 4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery 
resulting in updates being sent to the wrong server.
                        [RT #37925]
 2014-12-05 18:26:38 +11:00
Mark Andrews
017aa9aef6 4019. [func] If named is not configured to validate the answer 
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
 2014-12-05 17:47:26 +11:00
Tinderbox User
ab3bdbd2ee regen master 2014-12-04 01:04:55 +00:00
Mark Andrews
693d70f96f 4017. [testing] Add system test to check lookups to legacy servers 
with broken DNS behaviour. [RT #37965]
 2014-12-04 07:01:52 +11:00
Tinderbox User
88a2182a1a regen master 2014-12-03 01:04:59 +00:00
Mark Andrews
ea3aa401bc 4015. [bug] Nameservers that are skipped due to them being 
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]
 2014-12-03 11:34:07 +11:00
Francis Dupont
5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Tinderbox User
ddbd14ec13 regen master 2014-11-22 01:05:01 +00:00
Evan Hunt
92384667ff [master] delv +tcp 
4009.	[func]		delv: added a +tcp option. [RT #37855]
 2014-11-21 09:42:04 -08:00
Mark Andrews
64d715c22a 4007. [doc] Remove acl forward reference restriction. [RT #37772] 2014-11-21 15:26:37 +11:00
Tinderbox User
a17033f2c4 regen master 2014-11-21 01:04:39 +00:00
Evan Hunt
0d569f0e27 [master] add missing grammar 2014-11-20 15:36:22 -08:00
Evan Hunt
166a7500be [master] add notes 2014-11-20 13:16:09 -08:00
Tinderbox User
795beed720 regen master 2014-11-20 01:04:52 +00:00
Evan Hunt
c4f54e5bd1 [master] add max-recursion-queries 
also fixes and documentation for max-recursion-depth
 2014-11-18 22:02:02 -08:00
Tinderbox User
d6984fd680 regen master 2014-11-19 01:05:15 +00:00
Evan Hunt
3230429e17 [master] limit recursion depth and iterative queries 
4006.	[security]	A flaw in delegation handling could be exploited
			to put named into an infinite loop.  This has
			been addressed by placing limits on the number
			of levels of recursion named will allow (default 7),
			and the number of iterative queries that it will
			send (default 50) before terminating a recursive
			query (CVE-2014-8500).

			The recursion depth limit is configured via the
			"max-recursion-depth" option.  [RT #35780]
 2014-11-17 23:24:44 -08:00
Tinderbox User
ebca35d493 regen master 2014-11-15 01:06:26 +00:00
Evan Hunt
e32d354f75 [master] allow arbitrary-size rndc output 
4005.	[func]		The buffer used for returning text from rndc
			commands is now dynamically resizable, allowing
			arbitrarily large amounts of text to be sent back
			to the client. (Prior to this change, it was
			possible for the output of "rndc tsig-list" to be
			truncated.) [RT #37731]
 2014-11-14 15:58:54 -08:00
Mukund Sivaraman
16c86a4980 Update .gitgnore files (ISC-Bugs #37773) 2014-11-11 11:47:02 +05:30
Tinderbox User
369963ad26 regen master 2014-11-06 01:05:06 +00:00
Evan Hunt
3cc8c7d630 [master] fix nxrrset in nxdomain redirection 
4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
			from the redirect zone. [RT #37722]
 2014-11-04 23:49:56 -08:00
Evan Hunt
ce96d4326c [master] new mkeys and nzf naming format 
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
 2014-11-04 19:43:27 -08:00
Tinderbox User
daf4204f82 regen master 2014-11-05 01:04:56 +00:00
Mark Andrews
257d7508c8 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:29:36 +11:00
Tinderbox User
6469eef791 regen master 2014-11-01 01:05:08 +00:00
Mark Andrews
d68f8db3ee add end of life statement 2014-10-31 13:08:42 +11:00
Tinderbox User
def82e8de9 regen master 2014-10-31 01:04:53 +00:00
Mark Andrews
f0a54842b1 3994. [func] Dig now supports setting the last unassigned DNS 
header flag bit (dig +zflag). [RT #37421]
 2014-10-31 10:16:00 +11:00
Evan Hunt
0c9b9b5e92 [master] document that zone rate-limiters have a floor of 1/second 2014-10-30 14:31:00 -07:00
Mark Andrews
0f5144163c 3993. [func] Dig now supports EDNS negotiation by default. 
(dig +[no]ednsnegotiation). [RT #37604]
 2014-10-30 23:13:12 +11:00
Tinderbox User
a3ff24aaa5 regen master 2014-10-30 01:05:12 +00:00
Mark Andrews
f274cbeaed 3992. [func] DiG can now send queries without questions 
(dig +header-only). [RT #37599]
 2014-10-30 11:42:02 +11:00
Mark Andrews
00fb0253c9 3991. [func] Add the ability to buffer logging output by specifying 
"buffered yes;" when defining a channel. [RT #26561]
 2014-10-30 11:37:05 +11:00
Tinderbox User
eaaf00efc0 regen master 2014-10-23 01:04:55 +00:00
Evan Hunt
de41f327d9 [master] missed a ticket number 2014-10-22 11:05:19 -07:00
Evan Hunt
e179fcd4dc [master] [rt35857] relnote 2014-10-22 10:53:43 -07:00
Evan Hunt
512e41f44d [master] [rt36945] relnote 2014-10-22 10:45:27 -07:00
Evan Hunt
c69e3a95f0 [master] [rt36892] relnote 2014-10-22 10:40:53 -07:00
Evan Hunt
a80fc8467d [master] [rt37138] relnote 2014-10-22 10:33:41 -07:00
Evan Hunt
8f2a79879e [master] [rt37159] relnote 2014-10-22 10:24:20 -07:00
Evan Hunt
6e23e76b5d [master] [rt37172] relnote 2014-10-22 10:20:27 -07:00
Evan Hunt
9d49dba3b7 [master] [rt37197] relnote 2014-10-22 10:12:30 -07:00
Evan Hunt
44f1102bfb [master] [rt37410] relnote 2014-10-22 10:05:46 -07:00
Evan Hunt
42fa62dd31 [master] [rt37506] relnote 2014-10-22 10:01:35 -07:00
Evan Hunt
7be3c12291 [master] more relnotes backfill 2014-10-21 22:58:26 -07:00
Tinderbox User
6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Evan Hunt
67c6b5edd0 [master] backfill release notes 2014-10-21 16:42:23 -07:00
Mark Andrews
4140a96f22 3987. [func] Allow the zone serial of a dynamically updatable 
zone to be updated via rndc. [RT #37404]
 2014-10-21 18:15:42 +11:00
Tinderbox User
c20d6e4542 regenerate 2014-10-21 06:52:24 +00:00
Tinderbox User
30c0c7470d regen master 2014-10-21 06:42:51 +00:00
Evan Hunt
dd66b77417 [master] [rt37398] version string in ARM page footers 
3986.	[doc]		Add the BIND version number to page footers
			in the ARM. [RT #37398]
 2014-10-20 23:34:21 -07:00
Tinderbox User
78ec962d98 regen master 2014-10-21 01:04:47 +00:00
Evan Hunt
498b061031 [master] allow 1-week nta-lifetime/nta-recheck 
3983.	[bug]		Change #3940 was incomplete: negative trust anchors
			could be set to last up to a week, but the
			"nta-lifetime" and "nta-recheck" options were
			still limted to one day. [RT #37522]
 2014-10-20 13:40:17 -07:00
Tinderbox User
45a48ac5e2 regenerate 2014-10-20 20:01:30 +00:00
Tinderbox User
1c57c3f79d [master] Add generated notes.html and notes.pdf to git repository 2014-10-20 20:00:05 +00:00
Tinderbox User
2fa992d017 regen master 2014-10-20 19:55:39 +00:00
Evan Hunt
90e0af6bc6 [master] include relnotes in doc 
3982.	[doc]		Include release notes in product documentation.
			[RT #37272]
 2014-10-20 12:49:14 -07:00
Tinderbox User
6478b87fd2 regen master 2014-10-17 01:04:36 +00:00
Tinderbox User
28b2fddfd4 update copyright notice 2014-10-16 23:45:23 +00:00
Jeremy C. Reed
7615f6954f Fix grammar in ARM suh as was fixed in rndc manual. 
This is prompted by ticket #37505 from chucka.
 2014-10-16 11:58:48 -05:00
Jeremy C. Reed
edad003e63 Remove the apostrophe 's from plural acronyms 
This is to be consistent with our common usage of just using a
plural "s" without apostrophe.

This was brought up via discussion in ticket 37505.

I didn't have this reviewed.
 2014-10-16 11:55:51 -05:00
Tinderbox User
b68a2d272b regen master 2014-10-02 01:05:48 +00:00
Jeremy C. Reed
0b25d4d86a Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-10-01 11:28:53 -05:00
Jeremy C. Reed
35bd3dff86 add missing space and fix typo 2014-10-01 11:28:33 -05:00
Tinderbox User
60c29cf21a regen master 2014-09-29 01:05:38 +00:00
Mark Andrews
10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Tinderbox User
a8a5c3eb62 regen master 2014-09-28 01:05:36 +00:00
Mark Andrews
531d6f6bc3 fix response-policy synopsis 2014-09-27 11:23:05 +10:00
Tinderbox User
4fe1df3962 regen master 2014-09-14 01:05:19 +00:00
Tinderbox User
c25602ed66 regen master 2014-09-13 01:05:26 +00:00
Tinderbox User
95d0bdf2b4 regen master 2014-09-12 01:05:28 +00:00
Evan Hunt
0c9c74d9f9 [master] remove RRL classifier doc (feature not committed here yet) 2014-09-11 10:15:38 -07:00
Jeremy C. Reed
c8757da885 Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9 2014-09-11 07:18:57 -07:00