Colin Vidal 1bedd7f244 Limit the number of addresses returned per ADB find ... Add a hard limit on the number of addresses that ADB returns from a single NS lookup (dns_adbfind_t). This mitigates a flood attack where an attacker controls a zone with many addresses for a nameserver, each returning an invalid response. The global max-query count (default 50) also limits this, but significant harm can be done before that limit is reached. The default limit is now 6 (v4 and/or v6) addresses for an ADB find (so, ADB looking up for A/AAAA addresses of a name server name). It can be overridden for testing via 'named -T adbaddrslimit=N'. (cherry picked from commit 3ec37fc69356ee682bee7f67940613ac31d93d7b)		2026-05-07 13:09:18 +02:00
..
check	Resolve ERR_MISSING_GLUE / ERR_EXTRA_AAAA value collision	2026-04-29 15:31:58 +00:00
confgen	Size HMAC key generation buffers to the maximum block size	2026-04-30 06:00:07 +02:00
delv	Skip detach when delv's client never created	2026-04-30 12:07:49 +02:00
dig	Add examples to the dig man page	2026-02-22 16:21:13 +00:00
dnssec	Fix off by one error in dnssec-ksr sign	2026-04-07 08:32:58 +00:00
named	Limit the number of addresses returned per ADB find	2026-05-07 13:09:18 +02:00
nsupdate	nsupdate does not handle zero length RDATA well	2026-04-09 00:34:15 +00:00
plugins	standardize CHECK and RETERR macros	2025-12-03 19:17:20 -08:00
rndc	List 'rndc dnssec' arguments in alphabetic order	2026-02-18 14:20:53 +00:00
tests	Add reproducer for BADCOOKIE resend loop	2026-05-07 13:09:18 +02:00
tools	Rename isc_net_getudpportrange() to isc_net_getportrange()	2026-02-20 17:02:45 +01:00
Makefile.am	Remove native PKCS#11 support	2021-09-09 15:35:39 +02:00