Mark Andrews
74717eef53
3939. [func] Improve UPDATE forwarding performance by allowing TCP
...
connections to be shared. [RT #37039 ]
2014-09-04 10:37:45 +10:00
Mark Andrews
1a63fb1d14
update copyrights
2014-08-30 12:27:49 +10:00
Tinderbox User
3278ff814d
update copyright notice
2014-08-29 23:45:22 +00:00
Evan Hunt
d46855caed
[master] ECS authoritative support
...
3936. [func] Added authoritative support for the EDNS Client
Subnet (ECS) option.
ACLs can now include "ecs" elements which specify
an address or network prefix; if an ECS option is
included in a DNS query, then the address encoded
in the option will be matched against "ecs" ACL
elements.
Also, if an ECS address is included in a query,
then it will be used instead of the client source
address when matching "geoip" ACL elements. This
behavior can be overridden with "geoip-use-ecs no;".
When "ecs" or "geoip" ACL elements are used to
select a view for a query, the response will include
an ECS option to indicate which client network the
answer is valid for.
(Thanks to Vincent Bernat.) [RT #36781 ]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572
[master] fix geoip asnum matching
...
3935. [bug] "geoip asnum" ACL elements would not match unless
the full organization name was specified. They
can now match against the AS number alone (e.g.,
AS1234). [RT #36945 ]
2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13
3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
...
sit-secrets documentation. [RT #36980 ]
2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36
[master] fixes to checkconf test, HIP casecompare
...
3933. [bug] Corrected the implementation of dns_rdata_casecompare()
for the HIP rdata type. [RT #36911 ]
3932. [test] Improved named-checkconf tests. [RT #36911 ]
2014-08-27 21:36:13 -07:00
Evan Hunt
74745c760c
[master] "rndc nta -r" could hang
...
3930. [bug] "rndc nta -r" could cause a server hang if the
NTA was not found. [RT #36909 ]
2014-08-25 18:01:26 -07:00
Tinderbox User
fea81a5e0e
update copyright notice
2014-08-22 23:45:27 +00:00
Evan Hunt
087b3e8d90
[master] add to rndc test
...
3928. [test] Improve rndc system test. [RT #36898 ]
2014-08-22 16:41:57 -07:00
Mark Andrews
840d6a4614
3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917
2014-08-22 16:32:19 +10:00
Mark Andrews
cef76ee5bd
3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833 ]
2014-08-22 15:45:40 +10:00
Tinderbox User
5165c59007
update copyright notice
2014-08-21 23:45:22 +00:00
Mark Andrews
f5695ad0e1
3917. [bug] dig, nslookup and host now continue on names that are
...
too long after applying a search list elements.
[RT #36892 ]
2014-08-21 18:05:55 +10:00
Tinderbox User
aebd0e85bf
update copyright notice
2014-08-15 23:45:20 +00:00
Jeremy C. Reed
821350367e
fix typos or misspellings
2014-08-15 10:35:31 -05:00
Tinderbox User
cd14665cdf
update copyright notice
2014-08-07 23:45:19 +00:00
Evan Hunt
cfe32752a6
[master] [36737] allow zero-length URI and CAA fields
...
3914. [bug] Allow the URI target and CAA value fields to
be zero length. [RT #36737 ]
2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07
update copyright notice
2014-08-06 23:45:23 +00:00
Mark Andrews
43b9737b11
3911. [func] Implement EDNS EXPIRE option client side. [RT #35925 ]
2014-08-06 11:50:40 +10:00
Tinderbox User
79bb509936
update copyright notice
2014-08-02 23:45:21 +00:00
Mark Andrews
c38341ec43
3908. [bug] rndc now differentiates between a zone in multiple
...
views and a zone that doesn't exist at all. [RT #36691 ]
2014-08-02 14:43:26 +10:00
Mark Andrews
f2a91da02e
adjust range
2014-07-31 20:32:50 +10:00
Tinderbox User
d1b499c827
update copyright notice
2014-07-29 23:45:20 +00:00
Evan Hunt
2383eb5272
[master] add CAA rdata support
...
3056. [protocol] Added support for CAA record type (RFC 6844).
[RT #36625 ]
2014-07-29 08:40:35 -07:00
Mark Andrews
275a8affe7
3899. [bug] "request-ixfr" is only applicable to slave and redirect
...
zones. [RT #36608 ]
2014-07-25 14:23:14 +10:00
Mark Andrews
ac5ed74860
3897. [bug] RPZ summary information was not properly being updated
...
after a AXFR resulting in changes sometimes being
ignored. [RT #35885 ]
2014-07-22 10:57:58 +10:00
Mark Andrews
39cad8fb7d
update copyrights
2014-07-08 12:40:40 +10:00
Mark Andrews
fce704e751
rename dnssec/ns7/split-rrsig.in
2014-07-08 11:12:32 +10:00
Mark Andrews
3c13af3759
3892. [bug] Setting '-t aaaa' in .digrc had unintended side
...
effects. [RT #36452 ]
2014-07-08 02:00:28 +10:00
Mark Andrews
63e1ac1e09
3890. [bug] RRSIG sets that were not loaded in a single transaction
...
at start up where not being correctly added to
re-signing heaps. [RT #36302 ]
2014-07-07 12:05:01 +10:00
Mark Andrews
6f6b7781d5
save the output of rndc nta so that it can be analysed if there is a failure; more cleanups
2014-06-30 11:41:09 +10:00
Mark Andrews
62275d5306
make test for nsec3param more robust
2014-06-27 15:50:51 +10:00
Mark Andrews
b05ef7092f
update nta failure messages
2014-06-27 11:53:39 +10:00
Mark Andrews
284f6435c2
adjust NTA test timing windows to support slower machines; self tune sleeps bases of actual elapsed time;
2014-06-26 13:37:50 +10:00
Tinderbox User
9f8df2d75c
update copyright notice
2014-06-25 23:45:21 +00:00
Mark Andrews
7205cd2db7
cleanup nsupdate.out
2014-06-25 16:16:34 +10:00
Mark Andrews
eca15167ac
dump unexpected update failures
2014-06-25 16:12:25 +10:00
Mark Andrews
33399d6a14
3888. [func] 'rndc status' now reports the number of automatic
...
zones. [RT #36015 ]
2014-06-25 13:17:03 +10:00
Mark Andrews
70ee770c69
Net::DNS 0.78 should work when it is released as it contains:
...
Fix rt.cpan.org #96439
Uninitialised decoding object when printing packet
2014-06-25 01:01:50 +10:00
Mark Andrews
1c95f67232
use $PERL
2014-06-24 13:50:14 +10:00
Tinderbox User
5a31767b09
update copyright notice
2014-06-19 23:45:23 +00:00
Evan Hunt
cac2181160
[master] CDS/CDNSKEY rrtypes
...
3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333 ]
2014-06-19 00:35:11 -07:00
Evan Hunt
b8a9632333
[master] complete NTA work
...
3882. [func] By default, negative trust anchors will be tested
periodically to see whether data below them can be
validated, and if so, they will be allowed to
expire early. The "rndc nta -force" option
overrides this behvaior. The default NTA lifetime
and the recheck frequency can be configured by the
"nta-lifetime" and "nta-recheck" options. [RT #36146 ]
2014-06-18 16:50:38 -07:00
Tinderbox User
636aadbfe4
update copyright notice
2014-06-17 23:45:20 +00:00
Evan Hunt
a4e76a630e
[master] update gitignore files; use rev-parse to get srcid
2014-06-17 13:49:30 -07:00
Mark Andrews
a0d411c05f
3880. [test] Update ans.pl to work with new TSIG support in
...
Net::DNS; add additional Net::DNS version prerequisite
checks. [RT #36327 ]
2014-06-17 10:35:46 +10:00
Evan Hunt
56510cd031
[master] null terminate strings for coverity
2014-06-16 15:30:11 -07:00
Mark Andrews
48789995c1
use $NSUPDATE
2014-06-15 18:35:19 +10:00
Mark Andrews
f9e47cfe4f
Net::DNS 0.76 broke the handling of some packets
2014-06-14 10:11:06 +10:00
