Evan Hunt
03ecba2cdc
allow-recursion could incorrectly inherit from the default allow-query
2018-06-14 14:42:50 +02:00
Witold Kręcicki
1c36eed760
qname minimization: ARM entry
2018-06-12 09:20:13 +02:00
Evan Hunt
dde66b8012
nits
...
- capitalize QNAME in the doc
- regenerate options/docbook
- whitespace
2018-06-12 09:20:13 +02:00
Witold Kręcicki
265052df49
qname-minimization: Some post-review style/minor fixes
2018-06-12 09:20:12 +02:00
Mark Andrews
0e10223029
add answer-cookie as a obsolete option
2018-06-08 11:21:43 -07:00
Ondřej Surý
e771326f60
Add note about removing ECC-GOST to release notes
2018-06-05 09:14:14 +02:00
Ondřej Surý
27593e65dc
Remove support for obsoleted ECC-GOST (GOST R 34.11-94) algorithm
2018-06-05 09:14:14 +02:00
Tony Finch
4862d8ffc1
Add CHANGES and release notes entries
...
4957. [func] NSID logging (enabled by the "request-nsid" option)
now has its own "nsid" category, instead of using the
"resolver" category. [GL !331 ]
2018-06-05 12:11:12 +10:00
Tony Finch
abfbedc0b1
Move NSID logging to its own category
...
It is very verbose, so it is useful to be able to filter it out.
2018-06-05 12:10:37 +10:00
Evan Hunt
d91e313337
CHANGES and release note
2018-05-31 18:23:43 +02:00
Evan Hunt
bef18ecac6
Set "dnssec-validation auto" by default
...
- the default setting for dnssec-validation is now "auto", which
activates DNSSEC validation using the IANA root key. The old behavior
can be restored by explicitly setting "dnssec-validation yes", which
"yes", which activates DNSSEC validation only if keys are explicitly
configured in named.conf.
- the ARM has been updated to describe the new behavior
2018-05-31 18:22:32 +02:00
Tony Finch
4b442c309d
Move serve-stale logging to its own category, so that its verbosity can be curtailed.
2018-05-25 22:00:51 -07:00
Evan Hunt
d1ca21d50a
clarify serve-stale documentation, and add a floor for max-stale-ttl
...
- added a 1-second floor to max-stale-ttl similar to stale-answer-ttl;
if set to 0, it will be silently updated to 1.
- fixed the ARM entry on max-stale-ttl, which incorrectly suggested that
the default was 0 instead of 1 week.
- clarified rndc serve-stale documentation.
2018-05-25 22:00:37 -07:00
Evan Hunt
9f8ba2eb82
CHANGES, release note
2018-05-25 08:21:25 -07:00
Evan Hunt
e324449349
remove the experimental authoritative ECS support from named
...
- mark the 'geoip-use-ecs' option obsolete; warn when it is used
in named.conf
- prohibit 'ecs' ACL tags in named.conf; note that this is a fatal error
since simply ignoring the tags could make ACLs behave unpredictably
- re-simplify the radix and iptable code
- clean up dns_acl_match(), dns_aclelement_match(), dns_acl_allowed()
and dns_geoip_match() so they no longer take ecs options
- remove the ECS-specific unit and system test cases
- remove references to ECS from the ARM
2018-05-25 08:21:25 -07:00
Mark Andrews
ab22160a1c
add closing '};'
2018-05-25 12:48:55 +10:00
Evan Hunt
b4d8349237
add new feature list to README
2018-05-24 11:26:12 -07:00
Evan Hunt
7c955e0eb8
use w3m to generate notes.txt as part of the doc build
2018-05-23 12:39:40 -04:00
Mark Andrews
10dd0b3efe
add HOME.ARPA to the list of empty zones
2018-05-23 10:48:30 +10:00
Tinderbox User
9536688b37
regenerate doc
2018-05-21 19:59:45 +00:00
Evan Hunt
df4df8e0d5
begin preparation for 9.13.0
...
- tidy up release notes, removing the existing "security fixes" and
"bug fixes" sections
- add a section in the release notes to discuss the new version
numbering
- update version, CHANGES, api, and mapapi files
2018-05-21 11:50:38 -07:00
Mukund Sivaraman
975afc508d
Fix ARM about min-update-interval default for RPZ zones
...
Also, use variable names consistent with catz for rpz configuration functions
2018-05-17 19:02:51 -07:00
Ondřej Surý
087eab022f
Add release notes.
2018-05-16 09:54:35 +02:00
Ondřej Surý
b4d6541fe8
Remove genrandom man page
2018-05-16 09:54:35 +02:00
Evan Hunt
dea89f2a52
rewrite the update-policy documentation
...
- clarify the behavior of the name and identity fields for various
rule types, particularly tcp-self and 6to4-self.
2018-05-15 13:05:05 -07:00
Evan Hunt
ea5626179e
CHANGES and release note
2018-05-13 19:18:56 -07:00
Ondřej Surý
55a10b7acd
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
Ondřej Surý
ea95e83f5c
Add release notes about removed support for OpenSSL 0.9.x
2018-05-03 15:55:45 +02:00
Evan Hunt
0795dceda7
remove dangling references to --enable-crypto-rand in doc and comments
2018-05-03 15:03:46 +02:00
Evan Hunt
784087390a
remove the rbtdb64 database implementation
2018-04-20 16:14:51 -07:00
Evan Hunt
c592655c0f
new option "dnskey-sig-validity"
...
- overrides "sig-validity-interval" for DNSKEY, CDNSKEY and CDS RRSIGs
2018-04-20 12:12:08 -07:00
Mark Andrews
e20790c956
add release note for root-key-sentinel
2018-04-18 08:49:55 -07:00
Mark Andrews
68e9315c7d
add named.conf option root-key-sentinel
2018-04-18 08:49:55 -07:00
Tony Finch
286a7b6b9a
Allow TTL values when configuring TTLs and time intervals.
...
Options updated to use ttlvals: max-cache-ttl, max-ncache-ttl,
max-policy-ttl, fstrm-set-reopen-interval, interface-interval, and
min-update-interval.
2018-04-13 11:46:06 -07:00
Evan Hunt
e98b2489f3
Add release note
2018-03-18 10:08:57 +00:00
Mukund Sivaraman
c5e7198006
Update ARM
2018-03-18 10:07:48 +00:00
Ondřej Surý
f4a517e5d7
Add release notes and CHANGES
2018-03-17 13:50:59 +00:00
Ondřej Surý
e7590c7528
Add release notes for IDNA2008
2018-03-17 13:13:47 +00:00
Evan Hunt
0fabe0da83
update file headers
2018-03-15 18:33:13 -07:00
Michał Kępień
2a50fc324b
Add a release note about dropping support for non-dotted-quad IPv4 addresses in master files
...
Support for non-dotted-quad IPv4 addresses in master files was dropped
when the inet_aton() call inside getquad() got replaced with a call to
inet_pton(), so a release note should have been added back then to
inform users that such syntax will no longer work.
2018-03-06 09:49:27 +01:00
Evan Hunt
cc5432cea5
added missing release note
2018-02-25 14:37:37 -08:00
Evan Hunt
05a91e4e4c
list servers that time out in dig +nssearch
2018-02-24 10:56:09 -08:00
Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Evan Hunt
1cb250c37c
Added a release note, plus minor cleanups.
2018-02-22 13:38:51 -08:00
Evan Hunt
2a50992ab3
[master] Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9
2018-02-19 01:25:15 -08:00
Tinderbox User
d7733df695
regen master
2018-02-19 01:09:05 +00:00
Evan Hunt
908b2f4b3b
[master] add missing release notes, update README
2018-02-17 19:56:31 -08:00
Evan Hunt
355c533936
[master] add missing release note
2018-02-15 16:19:25 -08:00
Tinderbox User
74651f35ef
regen master
2018-02-10 01:12:12 +00:00
Tinderbox User
da4e8d88d4
regen master
2018-02-08 01:11:20 +00:00