upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-28 01:28:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
30021 commits 18 branches 854 tags 440 MiB
Commit graph

365 commits

Author SHA1 Message Date
Mark Andrews
af2b20ee3f 4574. [bug] Dig leaked memory with multiple +subnet options. 
[RT #44683]
 2017-02-14 15:52:40 +11:00
Tinderbox User
f557aeef7c update copyright notice / whitespace 2017-01-05 23:45:24 +00:00
Evan Hunt
5804332588 [master] EDNS padding and keepalive support 
4549.	[func]		Added support for the EDNS TCP Keepalive option
			(RFC 7828). [RT #42126]

4548.	[func]		Added support for the EDNS Padding option (RFC 7830).
			[RT #42094]
 2017-01-04 09:16:30 -08:00
Mark Andrews
42470b0b87 4496. [func] dig: add +idnout to control whether labels are 
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]
 2016-10-28 12:05:19 +11:00
Mark Andrews
3b6aba8dcb 4481. [func] dig: make +class, +crypto, +multiline, +rrcomments, 
+onesoa, +qr, +ttlid, +ttlunits and -u per lookup
                        rather than global. [RT #42450]
 2016-10-10 11:55:59 +11:00
Mark Andrews
8ee6f289d8 4450. [port] Provide more nuanced HSM support which better matches 
the specific PKCS11 providers capabilities. [RT #42458]
 2016-08-19 08:02:51 +10:00
Evan Hunt
d20f0472df [master] silence clang warnings 
4422.	[port]		Silence clang warnings in dig.c and dighost.c.
			[RT #42451]
 2016-07-21 15:53:43 -07:00
Mark Andrews
0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews
48bf87ba83 4351. [bug] 'dig +noignore' didn't work. [RT #42273] 2016-04-29 12:41:02 +10:00
Mukund Sivaraman
79a55d4f4d Add option to tools to print RRs in unknown presentation format (#41595) 2016-02-09 15:39:02 +05:30
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Evan Hunt
8ede7a974b [master] fix dig=+subnet zero-length prefix 
4303.	[bug]		"dig +subnet" was unable to send a prefix length of
			zero, as it was incorrectly changed to 32 for v4
			prefixes or 128 for v6 prefixes. In addition to
			fixing this, "dig +subnet=0" has been added as a
			short form for 0.0.0.0/0. The same changes have
			also been made in "mdig". [RT #41553]
 2016-01-27 19:03:54 -08:00
Mark Andrews
49762dffc4 4282. [func] 'dig +[no]mapped' determine whether the use of mapped 
IPv4 addresses over IPv6 is permitted or not.  The
                        default is +mapped.  [RT #41307]
 2015-12-19 09:47:11 +11:00
Evan Hunt
464c2c673b [master] fix dig +norrcomments 
4272.	[bug]		dig: the +norrcomments option didn't work with +multi.
			[RT #41234]
 2015-12-04 16:16:59 -08:00
Mark Andrews
5b1c7ef35b 4264. [bug] Check const of strchr/strrchr assignments match 
argument's const status. [RT #41150]
 2015-11-20 18:38:24 +11:00
Mark Andrews
48bbe9c7f2 fix opcode usage 2015-09-16 21:17:49 +10:00
Mark Andrews
b8a04d50a3 Change 3813 broke dig/host -4/-6. No CHANGES as this is has not been released 2015-08-12 12:50:15 +10:00
Mark Andrews
157bc46d2e add '=' to +opcode description 2015-08-12 07:04:08 +10:00
Mark Andrews
80a51d24ea set badcookie not besteffort 2015-07-21 15:15:40 +10:00
Mark Andrews
6e7f5e8ad5 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 09:20:49 +10:00
Mark Andrews
b399f4e568 4159. [cleanup] Alphabetize dig's help output. [RT #39966] 2015-07-08 08:49:24 +10:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the 
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
 2015-07-06 09:44:24 +10:00
Evan Hunt
eb447eca88 [master] dig option cleanups 
4132.	[cleanup]	dig: added +rd as a synonym for +recurse,
			added +class as an unabbreviated alternative
			to +cl. [RT #39686]
 2015-06-04 08:55:32 -07:00
Mark Andrews
c7463967db 4119. [func] Allow dig to set the message opcode. [RT #39550] 2015-05-19 12:46:06 +10:00
Evan Hunt
fc3ed1dbda [master] fix +split and +rrcomments with dig +short 
4101.	[bug]		dig: the +split and +rrcomments options didn't
			work with +short. [RT #39291]
 2015-04-15 09:50:07 -07:00
Tinderbox User
724df78acd update copyright notice / whitespace 2015-02-04 23:45:21 +00:00
Francis Dupont
1059bc2e42 added mdig tool 2015-02-04 14:22:32 +01:00
Mark Andrews
f0a54842b1 3994. [func] Dig now supports setting the last unassigned DNS 
header flag bit (dig +zflag). [RT #37421]
 2014-10-31 10:16:00 +11:00
Mark Andrews
0f5144163c 3993. [func] Dig now supports EDNS negotiation by default. 
(dig +[no]ednsnegotiation). [RT #37604]
 2014-10-30 23:13:12 +11:00
Mark Andrews
f274cbeaed 3992. [func] DiG can now send queries without questions 
(dig +header-only). [RT #37599]
 2014-10-30 11:42:02 +11:00
Mark Andrews
3867312e4c 3951. [func] Add the ability to set yet-to-be-defined EDNS flags 
to dig (+ednsflags=#). [RT #37142]
 2014-09-13 19:13:59 +10:00
Tinderbox User
fea81a5e0e update copyright notice 2014-08-22 23:45:27 +00:00
Mark Andrews
3d66a979b5 3919. [bug] dig: continue to next line if a address lookup fails 
in batch mode. [RT #36755]
 2014-08-22 15:40:43 +10:00
Mark Andrews
bc5db10d72 [rt36611] 
3903.   [bug]           Improve the accuracy of DiG's reported round trip
                        time. [RT 36611]
 2014-07-31 07:39:59 +10:00
Mark Andrews
2064e46209 3895. [func] Add the ability to set the DSCP code point to dig. 
[RT #36546]
 2014-07-15 23:27:14 +10:00
Mark Andrews
ccaee7760f add +ednsopt to -h output 2014-07-10 16:19:33 +10:00
Tinderbox User
1cd80e4825 update copyright notice 2014-07-07 23:45:21 +00:00
Mark Andrews
3c13af3759 3892. [bug] Setting '-t aaaa' in .digrc had unintended side 
effects. [RT #36452]
 2014-07-08 02:00:28 +10:00
Mark Andrews
bd7996b047 remove redundent nul setting 2014-06-17 10:26:57 +10:00
Evan Hunt
56510cd031 [master] null terminate strings for coverity 2014-06-16 15:30:11 -07:00
Mark Andrews
b836de821a fail if SIT data is too large 2014-06-12 07:57:19 +10:00
Mark Andrews
05816676bb 3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP 
ixfr query. [RT #35980]
 2014-05-14 09:59:02 +10:00
Mark Andrews
23c7871cc7 don't read past end of command line argument 2014-04-30 16:09:16 +10:00
Mark Andrews
b75c645026 have +[no]ttl as a alias for +[no]ttlid 2014-04-30 16:05:18 +10:00
Mark Andrews
3057498bda add missing default action for +[no]ttl* 2014-04-30 15:59:15 +10:00
Evan Hunt
cd750f6e74 [master] dig +ttlunits 
3829.	[func]		"dig +ttlunits" causes dig to print TTL values
			with time-unit suffixes: w, d, h, m, s for
			weeks, days, hours, minutes, and seconds. (Thanks
			to Tony Finch.) [RT #35823]
 2014-04-29 16:58:36 -07:00
Evan Hunt
1a9932dde1 [master] dig +qr now shows query size 
3816.	[func]		"dig +qr" now reports query size. (Thanks to
			Tony Finch.) [RT #35822]
 2014-04-22 12:38:53 -07:00
Evan Hunt
58e291cb8d [master] setup tsig in dig/host/nslookup 
(Change #3813 had broken some system tests.)
 2014-04-18 07:27:50 -07:00
Evan Hunt
4e7973990c [master] host recognizes /etc/resolv.conf options 
3813.	[func]		"host" now recognizes the "timeout", "attempts" and
			"debug" options when set in /etc/resolv.conf.
			(Thanks to Adam Tkac at RedHat.) [RT #21885]
 2014-04-17 17:04:51 -07:00
Mark Andrews
e560fbdf77 3812. [func] Dig now supports sending arbitary EDNS options from 
the command line (+ednsopt=code[:value]). [RT #35584]
 2014-04-18 09:52:12 +10:00
Mark Andrews
16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described 
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
 2014-02-20 14:56:20 +11:00
Evan Hunt
d7b9756a21 [master] ENDS client-subnet in dig 
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
 2014-02-19 15:51:02 -08:00
Mark Andrews
ab830e68aa silence unreachable statement by adding #if/#endif 2014-02-20 00:24:56 +11:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Tinderbox User
72141595cf update copyright notice 2014-02-16 23:46:32 +00:00
Evan Hunt
792915beb0 [master] fix accidental dig breakage 2014-02-16 13:42:42 -08:00
Evan Hunt
1d761cb453 [master] delve 
3741.	[func]		"delve" (domain entity lookup and validation engine):
			A new tool with dig-like semantics for performing DNS
			lookups, with internal DNSSEC validation, using the
			same resolver and validator logic as named. This
			allows easy validation of DNSSEC data in environments
			with untrustworthy resolvers, and assists with
			troubleshooting of DNSSEC problems. (Note: not yet
			available on win32.) [RT #32406]
 2014-02-16 13:03:17 -08:00
Francis Dupont
fb3ecd89ca retries -> split in could not parse 2014-02-16 02:08:55 +01:00
Mark Andrews
0b565f6060 adjust EDNS query returned status warning message 2013-11-14 22:38:29 +11:00
Mark Andrews
2048955015 3667. [func] dig: add support to keep the TCP socket open between 
successive queries (+[no]keepopen).  [RT #34918]
 2013-11-07 10:50:01 +11:00
Mark Andrews
75ae74f8fd 3629. [func] Allow the printing of cryptographic fields in DNSSEC 
records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]
 2013-08-12 15:37:51 +10:00
Evan Hunt
31d95f1095 [master] typo in dig 2013-06-19 15:21:20 -07:00
Mark Andrews
93aba6dcec 3561. [bug] dig: issue a warning if an EDNS query returns FORMERR 
or NOTIMP.  Adjust usage message. [RT #33363]
 2013-05-01 14:53:16 +10:00
Mark Andrews
550c92405f 3515. [port] '%T' is not portable in strftime(). [RT #32763] 2013-03-06 15:34:10 +11:00
Tinderbox User
7b5130bd12 update copyright notice 2013-03-04 23:46:20 +00:00
Evan Hunt
19b037bcb9 [master] dig -u: microsecond time output 
3513.	[func]		"dig -u" prints times in microseconds rather than
			milliseconds. [RT #32704]
 2013-03-04 12:09:28 -08:00
Mark Andrews
0524248a3b signed/unsigned comparision 2012-11-30 23:35:34 +11:00
Tinderbox User
600cfd566a update copyright notice 2012-11-29 23:45:50 +00:00
Evan Hunt
706219e547 [master] add timezone to dig 
3428.	[cleanup]	dig: Add timezone to date output. [RT #2269]
 2012-11-29 09:07:28 -08:00
Evan Hunt
2f21adbc6a [master] fix dig +trace output 
3427.	[bug]		dig +trace incorrectly displayed name server
			addresses instead of names. [RT #31641]
 2012-11-28 19:05:50 -08:00
Evan Hunt
28c2bc2026 3237. [bug] dig -6 didn't work with +trace. [RT #26906] 2011-12-07 17:23:28 +00:00
Evan Hunt
59c79d8cc8 shorten an 81-char line in dig -h 2011-11-04 14:19:17 +00:00
Mark Andrews
3fb5bccf59 3205. [func] Upgrade dig's defaults to better reflect modern 
nameserver behaviour.  Enable "dig +adflag" and
                        "dig +edns=0" by default.  Enable "+dnssec" when
                        running "dig +trace". [RT #23497]
 2011-11-04 10:41:38 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis. 
[RT #20256]
 2011-03-11 06:11:27 +00:00
Automatic Updater
0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7 3062. [func] Made several changes to enhance human readability 
of DNSSEC data in dig output and in generated
			zone files:
			 - DNSKEY record comments are more verbose, no
			   longer used in multiline mode only
			 - multiline RRSIG records reformatted
			 - multiline output mode for NSEC3PARAM records
			 - "dig +norrcomments" suppresses DNSKEY comments
			 - "dig +split=X" breaks hex/base64 records into
			   fields of width X; "dig +nosplit" disables this.
			[RT #22820]
 2011-03-05 19:39:07 +00:00
Automatic Updater
c8175ece69 update copyright notice 2011-03-01 23:48:07 +00:00
Evan Hunt
7cc5632595 3042. [bug] dig +trace could fail attempting to use IPv6 
addresses on systems with only IPv4 connectivity.
			[RT #23797]
 2011-02-25 23:11:13 +00:00
Mark Andrews
e18c62b1da 2888. [bug] Only the first EDNS option was displayed. [RT #21273] 2010-05-13 00:40:46 +00:00
Mark Andrews
108300f7f1 2883. [bug] 'dig +short' failed to handle really large datasets. 
[RT #21113]
 2010-05-12 01:31:37 +00:00
Automatic Updater
4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Mark Andrews
13396661f4 2854. [func] dig: allow the final soa record in a axfr response to 
be suppressed, dig +onesoa. [RT #20929]
 2010-03-04 05:18:04 +00:00
Evan Hunt
1210799345 Add /* NOTREACHED */ comments 2009-10-03 18:03:54 +00:00
Francis Dupont
debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Evan Hunt
8436cc14ba 2684. [cleanup] dig: formalize +ad and +cd as synonyms for 
+adflag and +cdflag.  [RT #19305]
 2009-09-23 06:21:36 +00:00
Evan Hunt
d514c0dc9b 2679. [func] dig -k can now accept TSIG keys in named.conf 
format.  [RT #20031]
 2009-09-15 03:13:44 +00:00
Francis Dupont
d302a620e0 Fix unknown extended rcodes in dig 2009-05-06 10:16:32 +00:00
Mark Andrews
00f8377316 2535. [bug] dig +showsearh and +trace interacted badly. [RT #19091] 2009-01-22 05:06:33 +00:00
Automatic Updater
d362465c77 update copyright notice 2009-01-17 23:47:43 +00:00
Francis Dupont
db874a7b5c spelling 2009-01-17 09:58:29 +00:00
Automatic Updater
14c86fa67a update copyright notice 2008-10-28 23:47:06 +00:00
Mark Andrews
a21884ae7b 2477 [bug] dig: the global option to print the command line is 
+cmd not print_cmd.  Update the output to reflect
                        this. [RT #17008]
 2008-10-28 03:32:59 +00:00
Mark Andrews
7ca1016560 make the arrays rcodetext and opcodetext readonly 2008-10-15 02:16:51 +00:00
Jeremy Reed
0db6bf459f Document -m (enable memory usage debugging) option for dig. [RT #18757] 2008-10-13 21:18:56 +00:00
Mark Andrews
db30f4bdcb 2353. [func] Add support for Name Server ID (RFC 5001). 
'dig +nsid' requests NSID from server.
                        'request-nsid yes;' causes recursive server to send
                        NSID requests to upstream servers.  Server responds
                        to NSID requests with the string configured by
                        'server-id' option.  [RT #17091]
 2008-04-03 02:01:08 +00:00
Automatic Updater
6b3c17b9b0 update copyright notice 2008-02-05 23:47:08 +00:00
Mark Andrews
4a5b30c24c 2329. [bug] Clearer help text for dig's '-x' and '-i' options. 2008-02-05 06:57:52 +00:00
Mark Andrews
9e4b25fc3e 2275. [func] Add support to dig to perform IXFR queries over UDP. 
[RT #17235]
 2007-12-03 00:21:48 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
a9c790c7dd 2166. [bug] When running in batch mode, dig could misinterpret 
a server address as a name to be looked up, causing
                        unexpected output. [RT #16743]
(continued)
 2007-04-03 23:06:39 +00:00