Commit graph

2049 commits

Author SHA1 Message Date
Mark Andrews
18114698b4 2654. [bug] Improve error reporting on duplicated names for
deny-answer-xxx. [RT #20164]
2009-08-25 02:42:46 +00:00
Mark Andrews
88471538d6 2652. [func] Provide more detail about what record is being
deleted. [RT #20061]
2009-08-17 07:18:41 +00:00
Mark Andrews
de3200acf4 silence format warnings: treat uid/gid as longs when printing 2009-08-13 07:04:38 +00:00
Automatic Updater
0a7e3c7d09 update copyright notice 2009-08-05 23:47:43 +00:00
Evan Hunt
2ac8f58412 needed fixes for windows build 2009-08-05 18:43:37 +00:00
Evan Hunt
3a87540047 2644. [bug] Change #2628 caused a regression on some systems;
named was unable to write the PID file and would
                        fail on startup. [RT #20001]
2009-08-05 17:35:33 +00:00
Mark Andrews
6beee732e4 2643. [bug] Stub zones interacted badly with NSEC3 support.
[RT #19777]
2009-08-05 02:09:04 +00:00
Mark Andrews
bd190a40a8 2640. [security] A specially crafted update packet will cause named
to exit. [RT #20000]
2009-07-28 15:45:43 +00:00
Evan Hunt
aeff7de836 2634. [port] win32: Add support for libxml2, enable
statschannel. [RT #19773]
2009-07-17 06:25:45 +00:00
Mark Andrews
fb8db7fc3f 2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
[RT #19926 ]
2009-07-15 00:36:37 +00:00
Automatic Updater
3e12c54de2 update copyright notice 2009-07-14 23:47:54 +00:00
Evan Hunt
08f860f800 2630. [func] Improved syntax for DDNS autoconfiguration: use
"update-policy local;" to switch on local DDNS in a
			zone.  [RT #19875]
2009-07-14 22:54:57 +00:00
Evan Hunt
38cd4d14cc 2629. [port] Check for seteuid()/setegid(), use setresuid()/
setresgid() if not present. [RT #19932]
2009-07-14 22:39:30 +00:00
Mark Andrews
a4463732ad 2628. [port] linux: Allow /var/run/named/named.pid to be opened
at startup with reduced capabilities in operation.
                        [RT #19884]
2009-07-14 05:15:00 +00:00
Automatic Updater
4a14ce5ba0 regen 2009-07-11 01:12:47 +00:00
Automatic Updater
c8da39c6c7 update copyright notice 2009-07-02 23:47:26 +00:00
Mark Andrews
109580e7e5 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-02 07:39:03 +00:00
Automatic Updater
f66c8eed51 update copyright notice 2009-06-30 23:48:01 +00:00
Evan Hunt
cfb1587eb9 2619. [func] Add support for RFC 5011, automatic trust anchor
maintenance.  The new "managed-keys" statement can
			be used in place of "trusted-keys" for zones which
			support this protocol.  (Note: this syntax is
			expected to change prior to 9.7.0 final.) [RT #19248]
2009-06-30 02:53:46 +00:00
Tatuya JINMEI 神明達哉
e47809ad55 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:02:57 +00:00
Automatic Updater
0382130cdc update copyright notice 2009-06-23 23:47:44 +00:00
Mark Andrews
0f00ee4327 2615. [port] win32: 'named -v' should automatically be executed
in the foreground. [RT #19844]
2009-06-23 07:43:48 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build
- began versioning for 9.7.0a1
2009-06-12 02:33:21 +00:00
Automatic Updater
754cb8a2b3 update copyright notice 2009-06-11 23:47:56 +00:00
Automatic Updater
b6306ef56e update copyright notice 2009-06-10 23:47:47 +00:00
Evan Hunt
351b62535d 2609. [func] Simplify the configuration of dynamic zones:
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
2009-06-10 00:27:22 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater
a9a054302d regen 2009-05-22 01:14:49 +00:00
Automatic Updater
bbe20aa62c update copyright notice 2009-05-21 23:47:28 +00:00
Jeremy Reed
5d924e398e 2601. [doc] Mention file creation mode mask in the
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
2009-05-21 19:54:28 +00:00
Francis Dupont
ff380b05fe comment fixes (rt19624) 2009-05-07 09:41:23 +00:00
Francis Dupont
ddac1a2b98 reserve -F 2009-05-07 09:33:52 +00:00
Francis Dupont
cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews
47323be2af 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 06:59:11 +00:00
Mark Andrews
b9636a8e43 2583. [port] netbsd: provide a control to not add the compile
date to the version string, -DNO_VERSION_DATE.
2009-04-03 19:55:59 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661 2580. [bug] UpdateRej statistics counter could be incremented twice
for one rejection. [RT #19476]
2009-03-18 22:17:24 +00:00
Evan Hunt
ca23cf7e28 2578. [bug] Changed default sig-signing-type to 65534, because
65535 turns out to be reserved.  [RT #19477]
2009-03-16 23:41:21 +00:00
Mark Andrews
56708c6fb4 2576. [bug] NSEC record were not being correctly signed when
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RET #19114]
2009-03-13 01:35:18 +00:00
Automatic Updater
2464bd58eb update copyright notice 2009-03-05 23:47:36 +00:00
Mark Andrews
f605647060 Undocumented firewall test hook. [RT #19398] 2009-03-05 03:13:55 +00:00
Automatic Updater
e61db954bf update copyright notice 2009-03-04 23:48:02 +00:00
Mark Andrews
1559511ada don't use a implied source in a direct rule 2009-03-04 05:48:32 +00:00
Evan Hunt
3a30493983 2572. [func] Simplify DLV configuration, with a new option
"dnssec-lookaside auto;"  This is the equivalent
			of "dnssec-lookaside . trust-anchor dlv.isc.org;"
			plus setting a trusted-key for dlv.isc.org.

			Note: The trusted key is hard-coded into named,
			but is also stored in (and can be overridden
			by) $sysconfdir/bind.keys.  As the ISC DLV key
			rolls over it can be kept up to date by replacing
			the bind.keys file with a key downloaded from
			https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
Automatic Updater
cd83ba4484 update copyright notice 2009-03-03 23:48:02 +00:00
Mark Andrews
d36ba0f0ca 2570. [func] Log the destination address the query was sent to.
[RT #19209]
2009-03-03 01:36:17 +00:00
Mark Andrews
dfa3ca995c 2568. [bug] Report when the write to indicate a otherwise
successful start fails. [RT #19360]
2009-03-02 03:08:22 +00:00
Evan Hunt
bfe0517fdc Clarify logged message when an insecure DNSSEC response arrives from a zone
thought to be secure: "insecurity proof failed" instead of "not insecure".
[RT #19400]
2009-03-01 02:45:38 +00:00
Automatic Updater
87a58323be update copyright notice 2009-02-18 23:47:48 +00:00
Jeremy Reed
f8aafe8286 Add myself to builtin authors. Hope my middle initial is okay. 2009-02-18 22:41:57 +00:00