Commit graph

7173 commits

Author SHA1 Message Date
Mark Andrews
151f1bcd5e 4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
[RT #40265]
2015-08-12 19:06:00 +10:00
Mark Andrews
b8a04d50a3 Change 3813 broke dig/host -4/-6. No CHANGES as this is has not been released 2015-08-12 12:50:15 +10:00
Mark Andrews
157bc46d2e add '=' to +opcode description 2015-08-12 07:04:08 +10:00
Evan Hunt
2a49f6bbfe [master] use dns_message_totext() in wire_data 2015-08-10 20:51:22 -07:00
Evan Hunt
f93884fcb7 [master] use libdns functions to convert rcode and opcode to text 2015-08-10 20:27:35 -07:00
Mark Andrews
f260e3a188 address len being shadowed 2015-08-11 12:59:34 +10:00
Tinderbox User
7e80eac638 update copyright notice / whitespace 2015-08-10 23:45:23 +00:00
Evan Hunt
3812202124 [master] add a "wire_test -d" option to read raw binary data
4169.	[test]		Added a 'wire_test -d' option to read input as
			raw binary data, for use as a fuzzing harness.
			[RT #40312]
2015-08-10 14:44:02 -07:00
Evan Hunt
05b1684791 [master] fix an awk portability issue 2015-08-03 14:21:16 -07:00
Tinderbox User
f3cbd0e029 update copyright notice / whitespace 2015-08-02 23:45:22 +00:00
Evan Hunt
68116c5a5f [master] add +nocookie options where needed 2015-08-02 11:18:12 -07:00
Mark Andrews
b485d0a67f if UDP and we have a bad cookie send a immediate badcookie response 2015-07-27 15:42:03 +10:00
Mark Andrews
58eb2006a4 return notimp for qcount=0 unimplemeneted opcodes
(cherry picked from commit 7c10dc502a34f88f11c6b6469bb234c72e61fec8)
2015-07-24 13:37:12 +10:00
Evan Hunt
a3b21effd7 [master] missing 'use' caused test failure 2015-07-21 13:49:54 -07:00
Mukund Sivaraman
fc39b6a961 Update rndc usage output (#40010)
Squashed commit of the following:

commit 73f0bba7d8d4763763ff88731c739ac646714ac8
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jul 13 05:40:35 2015 +0530

    Update rndc usage output

    This is based on a patch sent by Tony Finch.
2015-07-21 12:24:27 +05:30
Mukund Sivaraman
2cc21870b0 Make rndc showzone print a message when allow-new-zones is not configured (#40009)
Squashed commit of the following:

commit 77f12b02cf4e81f13e10db3cfac90e9de0b53928
Author: Mukund Sivaraman <muks@isc.org>
Date:   Mon Jul 13 05:28:13 2015 +0530

    Some tweaks

commit 9c521020b03c2fe7293ec4c970225fff479efd40
Author: Tony Finch <dot@dotat.at>
Date:   Thu Jul 9 15:36:15 2015 +0100

    rndc addzone error reporting improvements

    Clearer error messages from rndc addzone and modzone when the view is not
    known or when allow-new-zones is off.

    Also, remove a spurious newline from the delzone response.
2015-07-21 12:19:24 +05:30
Mark Andrews
80a51d24ea set badcookie not besteffort 2015-07-21 15:15:40 +10:00
Evan Hunt
a32ca13d12 [master] statschannel test failed when only JSON was available 2015-07-20 19:09:22 -07:00
Evan Hunt
9501aa9d5a [master] portability 2015-07-20 19:01:29 -07:00
Mark Andrews
3a49d0ff10 4164. [bug] Don't rename slave files and journals on out of memory.
[RT #40033]

4163.   [bug]           Address compiler warnings. [RT #40024]
2015-07-13 09:46:59 +10:00
Tinderbox User
b3338fc248 regen master 2015-07-11 01:05:48 +00:00
Tinderbox User
35af5049f8 update copyright notice / whitespace 2015-07-10 23:45:23 +00:00
Evan Hunt
629a015940 [master] correct the maximum NTA lifetime in rndc's help output 2015-07-10 09:07:23 -07:00
Mark Andrews
539c3f73b7 zone is not optional for zonestatus [RT #40012] 2015-07-10 15:28:11 +10:00
Evan Hunt
b716b9cddc [master] add JSON and more XML tests
4161.	[test]		Add JSON test for traffic size stats; also test
			for consistency between "rndc stats" and the XML
			and JSON statistics channel contents. [RT #38700]
2015-07-09 21:18:42 -07:00
Tinderbox User
c0cbdeedb5 regen master 2015-07-10 01:05:03 +00:00
Tinderbox User
f16a6bfb6c update copyright notice / whitespace 2015-07-09 23:45:22 +00:00
Evan Hunt
e38a7d749b [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2015-07-08 22:56:32 -07:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:53:39 -07:00
Mark Andrews
2561b2dd84 add comment about +trace and @server 2015-07-09 12:11:46 +10:00
Tinderbox User
f66d0e646f regen 2015-07-08 23:30:01 +00:00
Mark Andrews
e8f98ec8d4 future cookie code 2015-07-08 12:57:29 +10:00
Mark Andrews
4968e1de7e allow named to build w/o openssl 2015-07-08 11:54:25 +10:00
Tinderbox User
9ab5a7d83c update copyright notice / whitespace 2015-07-07 23:45:22 +00:00
Mark Andrews
6e7f5e8ad5 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:20:49 +10:00
Mark Andrews
b399f4e568 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 08:49:24 +10:00
Evan Hunt
70d987def5 [master] traffic size stats
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Mark Andrews
3e33f4198d 4154. [bug] A OPT record should be included with the FORMERR
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Dig should zero non significant +subnet bits.  Check
                        that non significant ECS bits are zero on receipt.
                        [RT #39647]
2015-07-06 12:52:37 +10:00
Tinderbox User
1879ff4932 regen master 2015-07-06 01:04:49 +00:00
Tinderbox User
8f0b326d9a update copyright notice / whitespace 2015-07-05 23:45:22 +00:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
2015-07-06 09:44:24 +10:00
Tinderbox User
d6b82bc2ae update copyright notice / whitespace 2015-06-30 23:45:23 +00:00
Tinderbox User
6cd01c0a96 regen master 2015-06-30 01:04:57 +00:00
Tinderbox User
337d408adb update copyright notice / whitespace 2015-06-29 23:45:23 +00:00
Jeremy C. Reed
001b06f0ab remove some duplicate "the" words. 2015-06-29 13:40:06 -04:00
Mukund Sivaraman
08f0129732 Fix a bug printing zone names with '/' character in XML and JSON stats (#39873) 2015-06-29 18:33:18 +05:30
Mark Andrews
4a61eae651 4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
was returning referrals rather than nodata responses
                        when the AAAA records were filtered.  [RT #39843]
2015-06-29 15:48:41 +10:00
Tinderbox User
8e50c69783 update copyright notice / whitespace 2015-06-25 23:45:22 +00:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00