upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-01-06 23:09:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
2572 commits 23 branches 209 tags 126 MiB
Commit graph

1769 commits

Author SHA1 Message Date
Wouter Wijngaards
92e1ec3444 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2422 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-30 12:04:31 +00:00
Wouter Wijngaards
62eea87455 - Fix Makefile for U in environment, since wrong U is more common than 
deansification necessity.


git-svn-id: file:///svn/unbound/trunk@2421 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-30 11:52:14 +00:00
Wouter Wijngaards
30602d5d59 - defense in depth against the above bug, an error is printed to log 
instead of an assertion failure.


git-svn-id: file:///svn/unbound/trunk@2420 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-25 11:32:05 +00:00
Wouter Wijngaards
b23ed42b55 1.4.10 tag created. 
git-svn-id: file:///svn/unbound/trunk@2419 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-25 06:09:01 +00:00
Wouter Wijngaards
784d659e91 - Fix TTL of SOA so negative TTL is separately cached from normal TTL. 
git-svn-id: file:///svn/unbound/trunk@2416 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 12:34:47 +00:00
Wouter Wijngaards
4df60a1343 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2415 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 11:22:32 +00:00
Wouter Wijngaards
ca38a8bd55 - feature, ignore-cd-flag: yesno to provide dnssec to legacy servers. 
git-svn-id: file:///svn/unbound/trunk@2414 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 11:20:14 +00:00
Wouter Wijngaards
6e9d8fb22c - bug#386: --enable-allsymbols option links all binaries to libunbound 
and reduces install size significantly.


git-svn-id: file:///svn/unbound/trunk@2413 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 10:57:42 +00:00
Wouter Wijngaards
35140bb612 - configure created with newer autoconf 2.66. 
git-svn-id: file:///svn/unbound/trunk@2412 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-14 10:59:57 +00:00
Wouter Wijngaards
de82245d3e - bug#378: Fix that configure checks for ldns_get_random presence. 
git-svn-id: file:///svn/unbound/trunk@2411 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-12 07:01:18 +00:00
Wouter Wijngaards
3922eed584 val-override-date: -1 ignores dates entirely, for NTP usage. 
git-svn-id: file:///svn/unbound/trunk@2410 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-08 14:06:46 +00:00
Wouter Wijngaards
efb9c02d54 - iana portlist updated. 
- queries with CD flag set cause DNSSEC validation, but the answer is
  not withheld if it is bogus.  Thus, unbound will retry if it is bad
  and curb the TTL if it is bad, thus protecting the cache for use by
  downstream validators.


git-svn-id: file:///svn/unbound/trunk@2409 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-08 13:58:41 +00:00
Wouter Wijngaards
3c87eb6c49 - harden-below-nxdomain: changed so that it activates when the 
cached nxdomain is dnssec secure.  This avoids backwards
         incompatibility because those old servers do not have dnssec.


git-svn-id: file:///svn/unbound/trunk@2407 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-29 09:47:54 +00:00
Wouter Wijngaards
fcc7f9dae0 trunk to 1.5.0 
git-svn-id: file:///svn/unbound/trunk@2406 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-24 10:35:17 +00:00
Wouter Wijngaards
654a9160f5 iana portlist updated. 
1.4.9 release.


git-svn-id: file:///svn/unbound/trunk@2404 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-24 10:08:43 +00:00
Wouter Wijngaards
682ad09bc4 -#370 new unbound.spec for CentOS 5.x from Harold Jones. 
git-svn-id: file:///svn/unbound/trunk@2403 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-17 08:18:00 +00:00
Wouter Wijngaards
ffb54322cb tag 1.4.9rc1 created. svn:NO TEST 
git-svn-id: file:///svn/unbound/trunk@2402 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-14 09:38:42 +00:00
Wouter Wijngaards
cc763c103b updated ldns tarball to 1.6.9rc1. 
git-svn-id: file:///svn/unbound/trunk@2400 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-03 08:57:17 +00:00
Wouter Wijngaards
9053ee101d updated ldns tarball to 1.6.9. 
git-svn-id: file:///svn/unbound/trunk@2399 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 13:06:38 +00:00
Wouter Wijngaards
0b0a580422 - give config parse error for multiple names on a stub or forward zone. 
git-svn-id: file:///svn/unbound/trunk@2398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 12:59:27 +00:00
Wouter Wijngaards
b4a089ff0d - Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout. 
git-svn-id: file:///svn/unbound/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 12:48:45 +00:00
Wouter Wijngaards
ee6f5c5b51 - bug #361: Fix, time.elapsed variable not reset with stats_noreset. 
git-svn-id: file:///svn/unbound/trunk@2396 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-24 12:16:12 +00:00
Wouter Wijngaards
c2299a3c5f version 3 for common.sh 
git-svn-id: file:///svn/unbound/trunk@2395 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-23 15:17:49 +00:00
Wouter Wijngaards
255d669e58 iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2394 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-23 10:27:53 +00:00
Wouter Wijngaards
d8928e1b19 common.sh to version 2. 
git-svn-id: file:///svn/unbound/trunk@2392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-18 16:11:21 +00:00
Wouter Wijngaards
01dd4a3568 - Added explicit note on unbound-anchor usage: 
Please note usage of unbound-anchor root anchor is at your own risk
  and under the terms of our LICENSE (see that file in the source).


git-svn-id: file:///svn/unbound/trunk@2391 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-15 12:58:37 +00:00
Wouter Wijngaards
1550bc65f3 use common functionality file. 
git-svn-id: file:///svn/unbound/trunk@2390 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-11 12:30:42 +00:00
Wouter Wijngaards
4011c3861b iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2389 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-11 12:28:30 +00:00
Wouter Wijngaards
58c2cc2740 iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2388 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-07 13:24:50 +00:00
Wouter Wijngaards
87296966ae - Added regression test for addition of a .net DS to the root, and 
cache effects with different TTL for glue and DNSKEY.


git-svn-id: file:///svn/unbound/trunk@2387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-07 12:07:46 +00:00
Wouter Wijngaards
eed924d7be - Fix remove private address does not throw away entire response. 
git-svn-id: file:///svn/unbound/trunk@2386 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-28 16:11:49 +00:00
Wouter Wijngaards
5996f3b2a9 Note release point. 
git-svn-id: file:///svn/unbound/trunk@2383 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-21 08:53:14 +00:00
Wouter Wijngaards
5e2a137562 fix bug 349 
git-svn-id: file:///svn/unbound/trunk@2381 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-19 06:59:24 +00:00
Wouter Wijngaards
5a154aeb78 ldns tarball updated 
git-svn-id: file:///svn/unbound/trunk@2380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-18 08:35:20 +00:00
Wouter Wijngaards
5ecf75d623 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2379 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-17 14:49:09 +00:00
Wouter Wijngaards
f7b911b120 - add get and set option for harden-below-nxdomain feature. 
git-svn-id: file:///svn/unbound/trunk@2377 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-17 12:31:28 +00:00
Wouter Wijngaards
f5a97a3e8f - Fix so a changed NS RRset does not get moved name stuck on old 
server, for type NS the TTL is not increased.


git-svn-id: file:///svn/unbound/trunk@2373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-14 13:56:25 +00:00
Wouter Wijngaards
790cb51775 - Fix prefetch so it does not get stuck on old server for moved names. 
git-svn-id: file:///svn/unbound/trunk@2372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-13 10:13:01 +00:00
Wouter Wijngaards
583eabb13e iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2370 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-12 08:55:27 +00:00
Wouter Wijngaards
4a746142cf - Fix insecure CNAME sequence marked as secure, reported by Bert Hubert. 
git-svn-id: file:///svn/unbound/trunk@2369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-11 12:32:29 +00:00
Wouter Wijngaards
35c3a25896 - faster lruhash get_mem routine. 
git-svn-id: file:///svn/unbound/trunk@2366 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-10 13:28:48 +00:00
Wouter Wijngaards
05e9f914c5 iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2364 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-04 07:28:36 +00:00
Wouter Wijngaards
046143af20 Fix bug #346: itar is discontinued. 
git-svn-id: file:///svn/unbound/trunk@2363 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-04 06:53:57 +00:00
Wouter Wijngaards
0bc54677db - Fix in infra cache that could cause rto larger than TOP_TIMEOUT kept. 
git-svn-id: file:///svn/unbound/trunk@2361 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-23 10:49:47 +00:00
Wouter Wijngaards
15b14306ed iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2359 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-21 14:43:29 +00:00
Wouter Wijngaards
daab92e954 - algorithm compromise protection using the algorithms signalled in 
the DS record.  Also, trust anchors, DLV, and RFC5011 receive this,
         and thus, if you have multiple algorithms in your trust-anchor-file
         then it will now behave different than before.  Also, 5011 rollover
         for algorithms needs to be double-signature until the old algorithm
         is revoked.


git-svn-id: file:///svn/unbound/trunk@2358 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-21 14:19:55 +00:00
Wouter Wijngaards
c4c8a65ff2 - fix validation in this case: CNAME to nodata for co-hosted opt-in 
NSEC3 insecure delegation, was bogus, fixed to be insecure.


git-svn-id: file:///svn/unbound/trunk@2355 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-17 10:05:56 +00:00
Wouter Wijngaards
f8796f94f4 squelch 'tcp connect: bla' errors in logfile. 
git-svn-id: file:///svn/unbound/trunk@2354 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-17 09:10:46 +00:00
Wouter Wijngaards
ecb9db442d - Fix our 'BDS' license (typo reported by Xavier Belanger). 
git-svn-id: file:///svn/unbound/trunk@2353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-16 16:18:30 +00:00
Wouter Wijngaards
57f309ab1d - iana portlist updated. 
- review changes for unbound-anchor.


git-svn-id: file:///svn/unbound/trunk@2351 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-10 15:01:39 +00:00
Wouter Wijngaards
dd8e44ac37 - feature typetransparent localzone, does not block other RR types. 
git-svn-id: file:///svn/unbound/trunk@2350 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-02 12:39:33 +00:00
Wouter Wijngaards
9997255caa - Fix bug#338: print address when socket creation fails. 
git-svn-id: file:///svn/unbound/trunk@2349 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-01 09:59:39 +00:00
Wouter Wijngaards
79f4ca6a28 Fix storage of noEDNS in the infra cache. 
iana portlist updated.


git-svn-id: file:///svn/unbound/trunk@2348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-30 12:55:48 +00:00
Wouter Wijngaards
78cc3d8ae1 harden-below-nxdomain option taken from draft-vixie-dnsext-resimprove. 
Default off (for now), as some older software that gives nxdomain for ENT
would be incompatible.  But that would only happen in the reverse tree, and
such software (nonDNSSEC) may go out of style, so in the future a default yes
could be possible.



git-svn-id: file:///svn/unbound/trunk@2347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-18 08:49:15 +00:00
Wouter Wijngaards
5e62750fcd - make test output nicer. 
git-svn-id: file:///svn/unbound/trunk@2346 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-17 15:50:52 +00:00
Wouter Wijngaards
289f13bc25 - implement draft-vixie-dnsext-resimprove-00, we stop on NXDOMAIN. 
git-svn-id: file:///svn/unbound/trunk@2345 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-17 10:02:34 +00:00
Wouter Wijngaards
8c5b3d3c8f - so-sndbuf option for very busy servers, a bit like so-rcvbuf. 
git-svn-id: file:///svn/unbound/trunk@2344 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 14:30:34 +00:00
Wouter Wijngaards
e430e8cef8 errno filtering better: sendto and sendmsg filtered in the same way. Also 
ENETDOWN and ENETUNREACH for tcp (already had EHOSTDOWN and EHOSTUNREACH).


git-svn-id: file:///svn/unbound/trunk@2343 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 14:00:20 +00:00
Wouter Wijngaards
95da05c4bc iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2342 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 13:16:09 +00:00
Wouter Wijngaards
c9dbc9907a - silence 'tcp connect: broken pipe' at low verbosity. 
git-svn-id: file:///svn/unbound/trunk@2341 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-15 13:15:23 +00:00
Wouter Wijngaards
6976832ffe unbound-anchor portable with openssl 0.9.7. 
git-svn-id: file:///svn/unbound/trunk@2340 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-09 16:05:02 +00:00
Wouter Wijngaards
2fe65ab2b5 - Be lenient and accept imgw.pl malformed packet (like BIND). 
git-svn-id: file:///svn/unbound/trunk@2339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-08 18:32:55 +00:00
Wouter Wijngaards
4e8ae039fa move to version 1.4.8 
git-svn-id: file:///svn/unbound/trunk@2338 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-08 13:22:54 +00:00
Wouter Wijngaards
0b30fca935 - do not synthesize a CNAME message from cache for qtype DS. 
git-svn-id: file:///svn/unbound/trunk@2335 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-05 15:29:50 +00:00
Wouter Wijngaards
d748bca7de use central entropy to seed threads. 
git-svn-id: file:///svn/unbound/trunk@2330 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-04 11:38:23 +00:00
Wouter Wijngaards
a3a1119f54 - Change the rtt used to probe EDNS-timeout hosts to 1000 msec. 
git-svn-id: file:///svn/unbound/trunk@2329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-03 09:06:49 +00:00
Wouter Wijngaards
98c4161631 code review. 
git-svn-id: file:///svn/unbound/trunk@2327 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-02 10:03:18 +00:00
Wouter Wijngaards
93ffd44608 GOST code enabled by default (RFC 5933) 
git-svn-id: file:///svn/unbound/trunk@2323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-01 11:24:07 +00:00
Wouter Wijngaards
fcf1157fa4 - Configure detects libev-4.00. 
git-svn-id: file:///svn/unbound/trunk@2322 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 15:03:20 +00:00
Wouter Wijngaards
488aee467a - Fix validation failure for parent and child on same server with an 
insecure childzone and a CNAME from parent to child.


git-svn-id: file:///svn/unbound/trunk@2321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 13:10:26 +00:00
Wouter Wijngaards
ba340cd07a - Fix uninit value in dump_infra print. 
git-svn-id: file:///svn/unbound/trunk@2320 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 10:20:40 +00:00
Wouter Wijngaards
498cc8ab88 - Change of timeout code. No more lost and backoff in blockage. 
At 12sec timeout (and at least 2x lost before) one probe per IP
  is allowed only.  At 120sec, the IP is blocked.  After 15min, a
  120sec entry has a single retry packet.


git-svn-id: file:///svn/unbound/trunk@2311 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 15:02:08 +00:00
Wouter Wijngaards
573ce5a4de - no timeout backoff if meanwhile a query succeeded. 
git-svn-id: file:///svn/unbound/trunk@2308 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 12:15:00 +00:00
Wouter Wijngaards
f2ae3e8167 dump_infra and flush_infra commands for unbound-control. 
git-svn-id: file:///svn/unbound/trunk@2306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-26 09:08:33 +00:00
Wouter Wijngaards
d0f2287d44 + - Configure errors if ldns is not found. 
git-svn-id: file:///svn/unbound/trunk@2305 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-25 07:44:33 +00:00
Wouter Wijngaards
5533861c28 - Windows 7 fix for installer. 
git-svn-id: file:///svn/unbound/trunk@2304 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-22 07:34:28 +00:00
Wouter Wijngaards
2bdb094f7b - Fix bug where fallback_tcp causes wrong roundtrip and edns 
observation to be noted in cache.  Fix bug where EDNSprobe halted
  exponential backoff if EDNS status unknown.
- new unresponsive host method, exponentially increasing block backoff.
- iana portlist updated.


git-svn-id: file:///svn/unbound/trunk@2303 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-21 15:11:39 +00:00
Wouter Wijngaards
c5fe4a8bf3 Enable interface-automatic for people for whom it works. 
git-svn-id: file:///svn/unbound/trunk@2300 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-20 05:36:00 +00:00
Wouter Wijngaards
e238b47b0a Fix for request list growth. 
git-svn-id: file:///svn/unbound/trunk@2298 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-19 14:53:29 +00:00
Wouter Wijngaards
2645b3e634 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2296 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-18 08:45:46 +00:00
Wouter Wijngaards
5d2ef1f925 - unbound-anchor handles ADDPEND keystate. 
git-svn-id: file:///svn/unbound/trunk@2281 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-13 12:04:37 +00:00
Wouter Wijngaards
1b773f682f - Fix TCP so it uses a random outgoing-interface. 
git-svn-id: file:///svn/unbound/trunk@2280 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-13 08:52:29 +00:00
Wouter Wijngaards
cf72b1a55d ldns tarball updated. 
git-svn-id: file:///svn/unbound/trunk@2277 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 13:07:44 +00:00
Wouter Wijngaards
64fba64826 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2276 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:30:57 +00:00
Wouter Wijngaards
46345c0809 - Fix bug when DLV below a trust-anchor that uses NSEC3 optout where 
the zone has a secure delegation hosted on the same server did not
         verify as secure (it was insecure by mistake).


git-svn-id: file:///svn/unbound/trunk@2275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:21:19 +00:00
Wouter Wijngaards
a2e4d07a4b - Fix alloc_reg_release for longer uptime in out of memory conditions. 
git-svn-id: file:///svn/unbound/trunk@2270 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 12:04:12 +00:00
Wouter Wijngaards
b3e4186cf2 Test for unbound-anchor. 
git-svn-id: file:///svn/unbound/trunk@2268 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 11:31:35 +00:00
Wouter Wijngaards
f64d9d0e43 Build documentation in the file. 
git-svn-id: file:///svn/unbound/trunk@2256 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 09:46:08 +00:00
Wouter Wijngaards
c007b34cc1 unbound-anchor work 
git-svn-id: file:///svn/unbound/trunk@2251 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-27 14:54:22 +00:00
Wouter Wijngaards
9f44640fa7 - bug#329: in example.conf show correct ipv4 link-local 169.254/16. 
git-svn-id: file:///svn/unbound/trunk@2244 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-24 07:04:37 +00:00
Wouter Wijngaards
1c2a8d977c unbound-anchor work 
git-svn-id: file:///svn/unbound/trunk@2242 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-23 13:51:29 +00:00
Wouter Wijngaards
1797024a4e iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2241 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-22 07:01:20 +00:00
Wouter Wijngaards
d75bca38f9 - compliance with draft-ietf-dnsop-default-local-zones-14, removed 
reverse ipv6 orchid prefix from builtin list.


git-svn-id: file:///svn/unbound/trunk@2240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-22 06:53:32 +00:00
Wouter Wijngaards
18523f7620 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-17 12:43:49 +00:00
Wouter Wijngaards
e399b79baa - DLV has downgrade protection again, because the RFC says so. 
git-svn-id: file:///svn/unbound/trunk@2238 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-17 08:54:16 +00:00
Wouter Wijngaards
aac3c03f72 - Fix reported validation error in out of memory condition. 
git-svn-id: file:///svn/unbound/trunk@2237 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:57:22 +00:00
Wouter Wijngaards
3b8cc374e7 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2236 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:47:51 +00:00
Wouter Wijngaards
8b274b92aa - Algorithm rollover operational reality intrudes, for trust-anchor, 
5011-store, and DLV-anchor if one key matches it's good enough.


git-svn-id: file:///svn/unbound/trunk@2235 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:40:26 +00:00
Wouter Wijngaards
c3f180eebb - Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout. 
git-svn-id: file:///svn/unbound/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-15 07:08:09 +00:00
Wouter Wijngaards
bf3c0e07d6 comment for iana portlist update 
git-svn-id: file:///svn/unbound/trunk@2232 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-14 09:31:20 +00:00
Wouter Wijngaards
2a6a51c465 - increased mesh-max-activation from 1000 to 3000 for crazy domains 
like _tcp.slb.com with 262 servers.


git-svn-id: file:///svn/unbound/trunk@2229 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-14 08:27:23 +00:00
Wouter Wijngaards
95db04a64c - bug#327: Fix for cannot access stub zones until the root is primed. 
git-svn-id: file:///svn/unbound/trunk@2228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-13 09:25:52 +00:00
Wouter Wijngaards
01c1bd13db iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2226 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-09 15:07:47 +00:00
Wouter Wijngaards
8ec31ebbcc - unresponsive servers are not completely blacklisted (because of 
firewalls), but also not probed all the time (because of the request
            list size it generates).  The probe rate is 1%.


git-svn-id: file:///svn/unbound/trunk@2225 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-09 14:56:51 +00:00
Wouter Wijngaards
9d66b48885 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled. 
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: file:///svn/unbound/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-20 13:30:41 +00:00
Wouter Wijngaards
38c435e0c2 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2221 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 19:34:43 +00:00
Wouter Wijngaards
7b406bc70a - example.conf notes how to do DNSSEC validation and track the root. 
git-svn-id: file:///svn/unbound/trunk@2220 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 19:16:03 +00:00
Wouter Wijngaards
89845bca03 - Fix bug#321: resolution of rs.ripe.net artifacts with 0x20. 
Delegpt structures checked for duplicates always.
         No more nameserver lookups generated when depth is full anyway.


git-svn-id: file:///svn/unbound/trunk@2219 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 13:00:21 +00:00
Wouter Wijngaards
118c2c60d8 better readme svn:NO TEST 
git-svn-id: file:///svn/unbound/trunk@2217 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-18 10:46:28 +00:00
Wouter Wijngaards
179ec8ad20 Fix bug #322. 
git-svn-id: file:///svn/unbound/trunk@2216 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-18 10:44:27 +00:00
Wouter Wijngaards
a34fe6ea8a - make test more portable (make longtest needs special support programs, 
ldns, wdiff, dig, port-numbers).
  - moved not-always-portable testbound scripts to names .crpl.



git-svn-id: file:///svn/unbound/trunk@2214 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 12:59:37 +00:00
Wouter Wijngaards
6021182b64 - Fix acx_nlnetlabs.m4 configure output for autoconf-2.66 AS_TR_CPP 
changes, uses m4_bpatsubst now.


git-svn-id: file:///svn/unbound/trunk@2213 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 08:59:14 +00:00
Wouter Wijngaards
e0a0eafef0 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2212 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 09:12:02 +00:00
Wouter Wijngaards
40f8fe2815 add and fix doxygen comments for doxygen-1.7.1. (which reports lots of 
spurious items as well, by the way).


git-svn-id: file:///svn/unbound/trunk@2211 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 08:41:49 +00:00
Wouter Wijngaards
71cab42c9b More pleasant remote control command name parsing. 
git-svn-id: file:///svn/unbound/trunk@2210 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 08:14:14 +00:00
Wouter Wijngaards
2e149c4ced Fix name of rrset printed that fails validation. 
git-svn-id: file:///svn/unbound/trunk@2209 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-09 11:58:57 +00:00
Wouter Wijngaards
b701d70147 - Return NXDOMAIN after chain of CNAMEs ends at name-not-found. 
git-svn-id: file:///svn/unbound/trunk@2208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-05 14:31:52 +00:00
Wouter Wijngaards
4c4671a63f - Fix validation in case a trust anchor enters into a zone with 
unsupported algorithms.


git-svn-id: file:///svn/unbound/trunk@2205 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-04 08:36:27 +00:00
Wouter Wijngaards
0db4fd57a7 - release tag 1.4.6. 
- trunk becomes 1.4.7 develop.
       - iana portlist updated.


git-svn-id: file:///svn/unbound/trunk@2204 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-03 12:30:45 +00:00
Wouter Wijngaards
f54f117885 ldns tarball updated. 
git-svn-id: file:///svn/unbound/trunk@2202 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-03 11:11:45 +00:00
Wouter Wijngaards
21477ad68a more error details on failed remote control connection. 
git-svn-id: file:///svn/unbound/trunk@2201 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-22 11:50:28 +00:00
Wouter Wijngaards
dccbb4e518 fix rlimit adjustments. 
git-svn-id: file:///svn/unbound/trunk@2199 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-15 13:08:45 +00:00
Wouter Wijngaards
45f74a1497 - Fix integer underflow in prefetch ttl creation from cache. This 
fixes a potential negative prefetch ttl.
-This line, and those below, will be ignored--

M    trunk/services/cache/dns.c
M    trunk/doc/Changelog


git-svn-id: file:///svn/unbound/trunk@2198 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-14 11:13:30 +00:00
Wouter Wijngaards
1aa6413b32 donation text. 
git-svn-id: file:///svn/unbound/trunk@2196 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-14 07:41:39 +00:00
Wouter Wijngaards
67c16277ee - Changed the defaults for num-queries-per-thread/outgoing-range. 
For builtin-select: 512/960, for libevent 1024/4096 and for
         windows 24/48 (because of win api).  This makes the ratio this way
         to improve resilience under heavy load.  For high performance, use
         libevent and possibly higher numbers.


git-svn-id: file:///svn/unbound/trunk@2191 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-12 13:59:39 +00:00
Wouter Wijngaards
0066333685 - GOST enabled if SSL is recent and ldns has GOST enabled too. 
- ldns tarball updated.


git-svn-id: file:///svn/unbound/trunk@2190 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-10 08:13:19 +00:00
Wouter Wijngaards
6df29c32e4 - iana portlist updated. 
- Fix validation of qtype DNSKEY when a key-cache entry exists but
  no rr-cache entry is used (it expired or prefetch), it then goes
  back up to the DS or trust-anchor to validate the DNSKEY.


git-svn-id: file:///svn/unbound/trunk@2189 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-09 15:00:35 +00:00
Wouter Wijngaards
f042f0dd5d - Neat function prototypes, unshadowed local declarations. 
git-svn-id: file:///svn/unbound/trunk@2188 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-07 13:13:36 +00:00
Wouter Wijngaards
391e1912de ldns tarball updated. 
git-svn-id: file:///svn/unbound/trunk@2187 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 11:03:56 +00:00
Wouter Wijngaards
3c79358ff7 testbound uses UTC timezone. 
git-svn-id: file:///svn/unbound/trunk@2186 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 10:44:03 +00:00
Wouter Wijngaards
bfc0ddd0e0 Failure to chown pidfile is not fatal any more. 
git-svn-id: file:///svn/unbound/trunk@2182 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 09:10:12 +00:00
Wouter Wijngaards
a71d4eab36 - wdiff is not actually required by make test, updated requirements. 
git-svn-id: file:///svn/unbound/trunk@2176 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 13:34:01 +00:00
Wouter Wijngaards
885cde085a - added feature to print configure date, target and options with -h. 
- added feature to print event backend system details with -h.


git-svn-id: file:///svn/unbound/trunk@2175 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 13:10:49 +00:00
Wouter Wijngaards
654d66d6a7 - log if a server is skipped because it is on the donotquery list, 
at verbosity 4, to enable diagnosis why no queries to 127.0.0.1.


git-svn-id: file:///svn/unbound/trunk@2174 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-05 07:45:20 +00:00
Wouter Wijngaards
518504ff5c Fix 4035 compliance for algorithms from the DS rrset that MUST sign the DNSKEY. 
git-svn-id: file:///svn/unbound/trunk@2172 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-01 12:08:48 +00:00
Wouter Wijngaards
6351307ab4 - Fix the max number of reply-address count 
git-svn-id: file:///svn/unbound/trunk@2171 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-28 12:50:04 +00:00
Wouter Wijngaards
0a848d686c - Fix jostle list bug found by Vince (luoce@cnnic), it caused the qps 
in overload situations to be about 5 qps for the class of shortly
  serviced queries.
  The capacity of the resolver is then about (numqueriesperthread / 2)
  / (average time for such long queries) qps for long queries.
  And about (numqueriesperthread / 2)/(jostletimeout in whole seconds)
  qps for short queries, per thread.


git-svn-id: file:///svn/unbound/trunk@2170 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-28 11:42:21 +00:00
Wouter Wijngaards
595eab57de - unbound.h has extern "C" statement for easier include in c++. 
git-svn-id: file:///svn/unbound/trunk@2169 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-25 13:23:03 +00:00
Wouter Wijngaards
14f178e486 Fix for lame reply corner case. 
git-svn-id: file:///svn/unbound/trunk@2168 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-25 08:32:51 +00:00
Wouter Wijngaards
3088075574 -wssl feature for makedist. 
git-svn-id: file:///svn/unbound/trunk@2166 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-23 14:01:05 +00:00
Wouter Wijngaards
e76cd88470 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2165 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-23 08:05:41 +00:00
Wouter Wijngaards
4ed18b1108 Fix to unload gost dynamic library module for leak test. 
git-svn-id: file:///svn/unbound/trunk@2161 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-22 12:27:19 +00:00
Wouter Wijngaards
afc09709ad libev vs libevent printout. 
git-svn-id: file:///svn/unbound/trunk@2160 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-22 07:57:52 +00:00
Wouter Wijngaards
c1128af87e iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2159 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-18 07:29:36 +00:00
Wouter Wijngaards
d1a68958a9 - Add AAAA to root hints for I.ROOT-SERVERS.NET. 
git-svn-id: file:///svn/unbound/trunk@2157 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-17 19:17:09 +00:00
Wouter Wijngaards
9d406d199f updated ldns tarball 
git-svn-id: file:///svn/unbound/trunk@2156 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-16 15:26:30 +00:00
Wouter Wijngaards
ecbeaed66c - Fix assertion failure reported by Kai Storbeck from XS4ALL, the 
assertion was wrong.


git-svn-id: file:///svn/unbound/trunk@2155 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-16 15:05:22 +00:00
Wouter Wijngaards
f98a1e2d32 Added documentation for the histogram printout to syslog. 
git-svn-id: file:///svn/unbound/trunk@2153 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 11:35:27 +00:00
Wouter Wijngaards
cb3b649707 - Max referral count from 30 to 130, because 128 one character domains 
is valid DNS.


git-svn-id: file:///svn/unbound/trunk@2152 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 10:50:20 +00:00
Wouter Wijngaards
75c811cc35 - makedist crosscompile to windows uses builtin ldns not host ldns. 
git-svn-id: file:///svn/unbound/trunk@2151 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:57:34 +00:00
Wouter Wijngaards
d7fec82eaa - Fix to use one pointer less for iterator query state store_parent_NS. 
git-svn-id: file:///svn/unbound/trunk@2150 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:47:11 +00:00
Wouter Wijngaards
6070d61076 - Fix TCPreply on systems with no writev, if just 1 byte could be sent. 
git-svn-id: file:///svn/unbound/trunk@2149 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:40:36 +00:00
Wouter Wijngaards
96df860673 version 1.4.6 in trunk. 
git-svn-id: file:///svn/unbound/trunk@2148 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 07:45:55 +00:00
Wouter Wijngaards
2eaed3573b tag 1.4.5 created 
git-svn-id: file:///svn/unbound/trunk@2147 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 07:16:50 +00:00
Wouter Wijngaards
1f0f85b59a - When retry to parent the retrycount is not wiped, so failed 
nameservers are not tried again.
       - iana portlist updated.


git-svn-id: file:///svn/unbound/trunk@2145 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-11 14:09:56 +00:00
Wouter Wijngaards
b9603c178a - Fix bug where a long loop could be entered, now cycle detection 
has a loop-counter and maximum search amount.


git-svn-id: file:///svn/unbound/trunk@2144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-10 14:10:17 +00:00
Wouter Wijngaards
780de8fd15 changelog entry. (svn:NO TEST) 
git-svn-id: file:///svn/unbound/trunk@2143 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-04 07:16:14 +00:00
Wouter Wijngaards
6575585b07 iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2141 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-04 06:47:32 +00:00
Wouter Wijngaards
1f9172697c more last resort lookup options. 
git-svn-id: file:///svn/unbound/trunk@2139 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 15:06:50 +00:00
Wouter Wijngaards
4a38afe99b ldns tarball updated 
git-svn-id: file:///svn/unbound/trunk@2137 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 12:51:16 +00:00
Wouter Wijngaards
dd89196f9b GOST disabled-by-default, also ldns tarball update with same change. 
git-svn-id: file:///svn/unbound/trunk@2131 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-02 08:18:55 +00:00
Wouter Wijngaards
8d71f58837 - Fix compile warning if compiled without threads. 
- updated ldns-tarball with current ldns svn (pre 1.6.5).


git-svn-id: file:///svn/unbound/trunk@2130 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-02 07:36:11 +00:00
Wouter Wijngaards
d57466c316 Autoconf 2.65 
git-svn-id: file:///svn/unbound/trunk@2128 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 13:47:11 +00:00
Wouter Wijngaards
ba4ff40d9d - Fix storage of negative parent glue if that last resort fails. 
git-svn-id: file:///svn/unbound/trunk@2127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 09:33:25 +00:00
Wouter Wijngaards
1bd8583d3f Force off bit Z. 
git-svn-id: file:///svn/unbound/trunk@2126 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 06:48:15 +00:00
Wouter Wijngaards
8360afa15f - fix parentside from cache to be marked dispreferred for bad names. 
git-svn-id: file:///svn/unbound/trunk@2125 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 14:39:45 +00:00
Wouter Wijngaards
da9ddfe2d1 unbound-control-setup more secure on multiuser system. 
git-svn-id: file:///svn/unbound/trunk@2124 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 14:11:51 +00:00
Wouter Wijngaards
d9e6fd3bac - fix parentside and querytargets modulestate, for dump_requestlist. 
git-svn-id: file:///svn/unbound/trunk@2123 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 14:01:32 +00:00
Wouter Wijngaards
153fd4a7f6 - parentside names are dispreferred but not said to be dnssec-lame. 
- parentside check for cached newname glue.


git-svn-id: file:///svn/unbound/trunk@2122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 13:03:58 +00:00
Wouter Wijngaards
66b24c3cb2 fix to run longer in out of memory conditions 
git-svn-id: file:///svn/unbound/trunk@2121 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 12:46:24 +00:00
Wouter Wijngaards
6ef058f9b0 - Fix AD flag handling, it could in some cases mistakenly copy the AD 
flag from upstream servers.


git-svn-id: file:///svn/unbound/trunk@2120 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 07:36:01 +00:00
Wouter Wijngaards
6d77834955 parent-child misconfigured data lookup. 
git-svn-id: file:///svn/unbound/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-28 14:15:29 +00:00
Wouter Wijngaards
233fb4466e iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2118 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-28 13:00:42 +00:00
Wouter Wijngaards
1c49e9ac97 - Contribution from Migiel de Vos (Surfnet): nagios patch for 
unbound-host, in contrib/ (in the source tarball).  Makes
        unbound-host suitable for monitoring dnssec(-chain) status.


git-svn-id: file:///svn/unbound/trunk@2116 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-26 09:17:18 +00:00
Wouter Wijngaards
75bce22b30 - EDNS timeout code will not fire if EDNS status already known. 
- EDNS failure not stored if EDNS status known to work.


git-svn-id: file:///svn/unbound/trunk@2115 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-21 11:00:35 +00:00
Wouter Wijngaards
4cc482e222 - Fix resolution for domains like safesvc.com.cn. If the iterator 
can not recurse further and it finds the delegation in a state
         where it would otherwise have rejected it outhand if so received
         from a cache lookup, then it can try to ask higherup (with loop
         protection).
       - Fix comments in iter_utils:dp_is_useless.


git-svn-id: file:///svn/unbound/trunk@2114 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-19 12:59:27 +00:00
Wouter Wijngaards
d9b715bbd7 svn:NO TEST iana portlist updated 
git-svn-id: file:///svn/unbound/trunk@2112 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-18 12:37:38 +00:00
Wouter Wijngaards
b4b641807b Fix various compiler warnings from the clang llvm compiler. 
git-svn-id: file:///svn/unbound/trunk@2111 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-18 12:37:04 +00:00
Wouter Wijngaards
271445fa4d - Fix bug#308: spelling error in variable name in parser and lexer. 
git-svn-id: file:///svn/unbound/trunk@2110 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-06 05:23:49 +00:00
Wouter Wijngaards
816c6a513b - Conforms to draft-ietf-dnsop-default-local-zones-13. Added default 
reverse lookup blocks for IPv4 test nets 100.51.198.in-addr.arpa,
  113.0.203.in-addr.arpa and Orchid prefix 0.1.1.0.0.2.ip6.arpa.


git-svn-id: file:///svn/unbound/trunk@2108 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-04 10:50:27 +00:00
Wouter Wijngaards
7276cf7dd0 - Fix dnssec-missing detection that was turned off by server selection. 
git-svn-id: file:///svn/unbound/trunk@2107 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-04 08:39:04 +00:00
Wouter Wijngaards
8f4957a0e0 - infra cache entries that are expired are wiped clean. Previously 
it was possible to not expire host data (if accessed often).


git-svn-id: file:///svn/unbound/trunk@2106 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-29 14:12:54 +00:00
Wouter Wijngaards
cccba6e2c7 dnssec lameness detection looks in key cache if dnssec is expected. 
git-svn-id: file:///svn/unbound/trunk@2104 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-29 12:36:12 +00:00
Wouter Wijngaards
0a6ad89984 - Fix detection of gost support in ldns (reported by Chris Smith). 
git-svn-id: file:///svn/unbound/trunk@2103 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-28 19:50:34 +00:00
Wouter Wijngaards
2adfe6bdba GOST detect and iana portlist updated. 
git-svn-id: file:///svn/unbound/trunk@2102 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-28 12:52:03 +00:00
Wouter Wijngaards
a29b2ad908 Fix harden-referral-path so it does not generate lookup failures. 
git-svn-id: file:///svn/unbound/trunk@2101 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 14:15:19 +00:00
Wouter Wijngaards
12e20eb5f4 - autotrust anchor file can be initialized with a ZSK key as well. 
git-svn-id: file:///svn/unbound/trunk@2100 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 13:00:48 +00:00
Wouter Wijngaards
339d94b643 - fix retry sequence if prime hints are recursion-lame. 
git-svn-id: file:///svn/unbound/trunk@2099 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 11:10:35 +00:00
Wouter Wijngaards
52894339df unbound-control get_option domain-insecure works. 
git-svn-id: file:///svn/unbound/trunk@2098 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 09:16:23 +00:00
Wouter Wijngaards
3a754ae461 Fix bug#307: 0x20 fallback outstanding query count, together with rec_lame, 
and canonical rrset comparison.


git-svn-id: file:///svn/unbound/trunk@2097 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 14:59:44 +00:00
Wouter Wijngaards
f12b7a8dd9 - More strict scrubber (Thanks to George Barwood for the idea): 
NS set must be pertinent to the query (qname subdomain nsname).


git-svn-id: file:///svn/unbound/trunk@2096 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 13:40:37 +00:00
Wouter Wijngaards
12c9c68dce no double include in lexer 
git-svn-id: file:///svn/unbound/trunk@2095 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 08:53:53 +00:00
Wouter Wijngaards
8ccc01a2f6 Detect libev installed. 
git-svn-id: file:///svn/unbound/trunk@2094 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 08:41:24 +00:00
Wouter Wijngaards
fa3f1a60ec Fix use CPPFLAGS. 
git-svn-id: file:///svn/unbound/trunk@2093 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 08:06:01 +00:00
Wouter Wijngaards
910bad74ea - Fix local-zone type redirect that did not use the query name for 
the answer rrset.


git-svn-id: file:///svn/unbound/trunk@2092 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 14:03:09 +00:00
Wouter Wijngaards
eca8b049ac spelling 
git-svn-id: file:///svn/unbound/trunk@2090 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 09:57:05 +00:00
Wouter Wijngaards
35f3d4ecb1 - Fix to fetch data as last resort more tenaciously. When cycle 
targets cause the server selection to believe there are more options
	  when they really are not there, the server selection is reinitiated.
	- Fix fetch from blacklisted dnssec lame servers as last resort.  The
	  servers IP address is then given in validator errors as well.



git-svn-id: file:///svn/unbound/trunk@2089 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 09:07:05 +00:00
Wouter Wijngaards
109fbe2350 - Squelch log message: sendto failed permission denied for 
255.255.255.255, it is visible in VERB_DETAIL (verbosity 2).


git-svn-id: file:///svn/unbound/trunk@2088 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 06:48:49 +00:00
Wouter Wijngaards
4c7edee5f3 - Fix validation failure for qtype ANY caused by a RRSIG parse failure. 
The validator error message was 'no signatures from ...'.


git-svn-id: file:///svn/unbound/trunk@2087 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-22 15:01:02 +00:00
Wouter Wijngaards
e24f653871 trunk has 1.4.5 
git-svn-id: file:///svn/unbound/trunk@2086 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-22 09:02:30 +00:00