W.C.A. Wijngaards
3dd804755b
- rpz-triggers, function documentation comments for iterator callback
...
functions.
2021-03-22 09:49:22 +01:00
W.C.A. Wijngaards
8e7ced72e5
- rpz-triggers, fix that after cname an nsdname or nsip trigger has cname
...
rrsets prepended by the iterator.
2021-03-22 09:42:04 +01:00
W.C.A. Wijngaards
81cd0d76c8
- rpz-triggers, call rpz callback only if there are auth zones configured.
2021-03-22 09:39:12 +01:00
W.C.A. Wijngaards
5a23c84951
- rpz triggers, fix query name on trigger after cname.
2021-03-19 17:36:09 +01:00
W.C.A. Wijngaards
7f39003c04
- rpz triggers, implement qname trigger after cname.
2021-03-19 17:31:44 +01:00
W.C.A. Wijngaards
1a528238e2
- rpz triggers, use tld name for tld pointer in suffix removal.
2021-03-12 16:07:37 +01:00
W.C.A. Wijngaards
e7afe0b153
- rpz triggers, rpz_insert_rr nicer.
2021-03-12 14:35:34 +01:00
W.C.A. Wijngaards
2d4523d946
- rpz triggers, fix that nsdname suffix removal returns allocated memory
...
of the correct length and the correct dnamelen.
2021-03-12 14:32:10 +01:00
W.C.A. Wijngaards
5ea042c863
- rpz triggers, document statistics and fix comment about statistics.
2021-03-12 13:24:17 +01:00
W.C.A. Wijngaards
62674aaff8
- rpz triggers, fix to put braces around operator.
2021-03-12 13:13:17 +01:00
W.C.A. Wijngaards
263f974120
rpz triggers, man page fix end label
2021-03-12 10:23:20 +01:00
W.C.A. Wijngaards
da0bbcec48
- rpz triggers, man page explanation of rpz zone contents.
2021-03-12 10:21:48 +01:00
W.C.A. Wijngaards
4f892a37bd
- rpz triggers, spelling fix.
2021-03-12 10:21:29 +01:00
W.C.A. Wijngaards
c7bb118a88
- rpz trigger, fix tcp only action after merge
2021-03-12 09:18:38 +01:00
W.C.A. Wijngaards
7a5d82dd48
- rpz trigger, fix merge for unsupported ipaddr based trigger action.
2021-03-12 09:10:11 +01:00
W.C.A. Wijngaards
6f507eb036
Merge branch 'master' into rpz-triggers
2021-03-12 09:04:54 +01:00
W.C.A. Wijngaards
eb82c368e0
- man page contents, list new triggers and actions.
2021-03-12 08:54:00 +01:00
W.C.A. Wijngaards
0927fe6fc4
- Fix parse of LOC RR type for decimetres.
2021-03-11 13:22:05 +01:00
Willem Toorop
6c5e67a5a2
put tls-use-sni: on a line of its own
...
Sorry about this, this must have happened when I added the entries for padding queries and responses.
2021-03-10 15:14:45 +01:00
W.C.A. Wijngaards
269c168f7e
- Debug output for #411 and #439 : printout internal error and details.
2021-03-05 13:54:26 +01:00
W.C.A. Wijngaards
1bdae426ee
- Workaround for #439 : prevent loops in the reuse rbtree.
2021-03-05 13:46:36 +01:00
W.C.A. Wijngaards
6e4ecf7bc1
- Fix spurious errors about "Could not generate request: out of
...
memory". The mesh detect cycle routine no longer wrongly stops
the check when the calling mesh state is unique.
2021-03-04 14:13:44 +01:00
W.C.A. Wijngaards
9753f36463
- iana portlist update.
2021-03-04 10:14:32 +01:00
W.C.A. Wijngaards
6cd77933a3
- Fix: Resolve interface names on control-interface too.
2021-02-26 13:54:10 +01:00
George Thessalonikefs
826828673a
- Fix for #367 : rc_ports don't have ub_sock; skip cleaning up.
2021-02-26 13:13:55 +01:00
W.C.A. Wijngaards
a06d761f74
- Fix to allow rpz with wildcard that applies to all TLDs at once.
2021-02-25 16:54:32 +01:00
W.C.A. Wijngaards
6c464386c6
Changelog note for #365 , #367 and #368 .
...
- Merge PR #367 : DNSTAP log local address. With code from PR #365
and fixes #368 : dnstap does not log the DNS message ID for
FORWARDER_QUERY.
2021-02-25 12:00:28 +01:00
Wouter Wijngaards
209dc32624
Merge pull request #367 from NLnetLabs/dnstap-log-local-addr
...
DNSTAP log local address
2021-02-25 11:58:36 +01:00
W.C.A. Wijngaards
04b4f515a7
Fix comment item.
2021-02-25 08:50:02 +01:00
W.C.A. Wijngaards
6cda81b7e4
Fix to use a simple pointer in the call of make_sock and make_sock_port.
2021-02-24 17:36:22 +01:00
W.C.A. Wijngaards
6612974d12
- spelling fix in header.
2021-02-24 16:56:57 +01:00
W.C.A. Wijngaards
a9e15f36d8
- Fix unit test for added ulimit checks.
2021-02-24 15:30:12 +01:00
W.C.A. Wijngaards
e6ffacc16a
- Fix function documentation.
2021-02-24 15:25:12 +01:00
W.C.A. Wijngaards
d3497f6bd1
- On startup of unbound it checks if rlimits on memory size look
...
sufficient for the configured cache size, and logs warning if not.
2021-02-24 14:14:33 +01:00
George Thessalonikefs
7f25bb4730
- ipsecmod: Better logging for detecting a cycle when attaching the
...
A/AAAA subquery.
2021-02-24 13:59:31 +01:00
George Thessalonikefs
d69132b921
- Fix #384 : (1) A minor request to improve the log (2) A minor bug in
...
one log message.
2021-02-24 12:00:11 +01:00
W.C.A. Wijngaards
39a557833d
- Fix for zonemd, do not reject insecure result from trust anchor
...
validation step in dnssec chain of trust.
2021-02-23 17:09:40 +01:00
W.C.A. Wijngaards
c802298fca
- Fix for zonemd, that domain-insecure zones work without dnssec.
2021-02-23 17:03:23 +01:00
W.C.A. Wijngaards
7ec290255d
Spelling fix.
2021-02-22 17:34:02 +01:00
W.C.A. Wijngaards
131d38f8f2
- Fix for zonemd, that nxdomain for the chain of trust is allowed
...
for island zones, it is treates as an insecure zone for verification.
2021-02-22 17:32:40 +01:00
W.C.A. Wijngaards
40fbc3fa8a
- Fix #431 : Squelch permission denied errors for tcp connect
2021-02-22 08:24:04 +01:00
W.C.A. Wijngaards
aa53b933cc
- rpz skip nsec3param records, and nicer log for unsupported actions.
2021-02-19 15:00:39 +01:00
W.C.A. Wijngaards
bc4bdbabea
- Fix #429 : rpz: url: with https: broken (regression in 1.13.1).
2021-02-19 14:42:02 +01:00
W.C.A. Wijngaards
f5339ec7e5
Merge branch 'master' into dnstap-log-local-addr
2021-02-18 13:12:09 +01:00
W.C.A. Wijngaards
3b24d845ff
- Fix doxygen and pydoc warnings.
2021-02-18 11:39:06 +01:00
Wouter Wijngaards
bf0a91aa41
Merge pull request #317 from NLnetLabs/zonemd
...
ZONEMD Zone Verification
2021-02-18 11:17:04 +01:00
W.C.A. Wijngaards
d6e55a586c
Changelog note for #317
...
- Merge PR #317 : ZONEMD Zone Verification, with RFC 8976 support.
ZONEMD records are checked for zones loaded as auth-zone,
with DNSSEC if available. There is an added option
zonemd-permissive-mode that makes it log but not fail wrong zones.
With zonemd-reject-absence for an auth-zone the presence of a
zonemd can be mandated for specific zones.
2021-02-18 11:16:19 +01:00
W.C.A. Wijngaards
2d27203718
Merge branch 'master' into zonemd
2021-02-18 11:11:50 +01:00
Wouter Wijngaards
490d4c26cf
Merge pull request #427 from vstinner/fopen
...
Fix #426 : Replace _Py_fopen() with fopen() in pythonmod.c
2021-02-16 11:58:56 +01:00
Victor Stinner
92d01d8265
Fix #426 : Replace _Py_fopen() with fopen() in pythonmod.c
...
The private _Py_fopen() function has been removed in Python 3.10.
Fix build on Python 3.10.
2021-02-16 11:27:52 +01:00