summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Log IPSET actions.v2.69rc2Wang Jian2014-03-283-1/+12
|
* Add --dnssec-no-timecheckSimon Kelley2014-03-285-83/+116
|
* Ensure ->sentto is valid for DNSSEC forwards. Otherwise retries SEGV.Simon Kelley2014-03-271-0/+1
|
* Cache stats availble in CHAOS .bind domain.Simon Kelley2014-03-275-15/+155
|
* Terminate DS-search when reaching the root via cache entries.Simon Kelley2014-03-261-0/+11
|
* SERVFAIL is an expected error return, don't try all servers.Simon Kelley2014-03-251-4/+3
|
* Handle failure of hash_questions()Tomas Hozza2014-03-251-29/+33
|
* Memory leak in error path.Tomas Hozza2014-03-251-2/+5
|
* Reorder sanity checks on UDP packet reception, to cope with failed recvfrom()Simon Kelley2014-03-241-7/+11
|
* Add dnssec-check-unsigned to example config file.Simon Kelley2014-03-241-0/+8
|
* CHANGELOG update.v2.69rc1Simon Kelley2014-03-221-0/+4
|
* Ignore DNS queries from port 0: ↵Simon Kelley2014-03-221-3/+16
| | | | http://www.ietf.org/mail-archive/web/dnsop/current/msg11441.html
* Tidy uid defines.Andy2014-03-222-2/+2
|
* Fix DNSSEC crash retrying to IPv6 server.Simon Kelley2014-03-211-2/+2
|
* Initialise uid when creating CNAME cache record.Simon Kelley2014-03-201-0/+2
|
* Make --quiet-dhcp apply to DHCPDISCOVER when client ignored.Simon Kelley2014-03-201-0/+2
|
* Manpage typos.Moritz Warning2014-03-201-2/+2
|
* Tidy and fix cache->uid handling.Simon Kelley2014-03-183-15/+27
| | | | | | | | | | | | Some CNAMES left the value of ->uid undefined. Since there are now special values if this, for CNAMES to interface names, that could cause a crash if the undefined value hit the special value. Also ensure that the special value can't arise when the uid is encoding the source of an F_CONFIG record, in case there's a CNAME to it.
* Ensure next_uid() can never return 0.Andy2014-03-171-2/+4
|
* Handle integer overflow in uid counter. Fixes rare crashes in cache code.Simon Kelley2014-03-164-16/+23
|
* Warn about non-local queries once only for UDP.Simon Kelley2014-03-121-1/+6
|
* TypoSimon Kelley2014-03-121-1/+1
|
* OPT_LOCAL_SERVICE needs up-to-date interface list too.Simon Kelley2014-03-061-1/+2
|
* Set --local-service in Debian package startup.Simon Kelley2014-03-053-0/+17
|
* --local-service. Default protection from DNS amplification attacks.Simon Kelley2014-03-056-2/+133
|
* Add --static to pkg-config command when appropriate.Simon Kelley2014-03-051-1/+4
|
* Compiler warning.Simon Kelley2014-03-031-2/+2
|
* Man page updates for DNSSEC.Simon Kelley2014-03-021-2/+13
|
* KEYBLOCK LEN better as a multiple of 8.Simon Kelley2014-03-021-1/+1
|
* Can have local DS records (trust anchors).v2.69test11Simon Kelley2014-03-011-1/+1
|
* Mass edit of INSECURE->BOGUS returns for server failure/bad input.v2.69test10Simon Kelley2014-03-011-84/+73
|
* Don't cache secure replies which we've messsed with.Simon Kelley2014-03-011-5/+4
|
* Tweak tuning params.Simon Kelley2014-03-013-4/+5
|
* Handle replies with no answers and no NS in validate_reply.Simon Kelley2014-03-011-0/+4
|
* Don't free blockdata for negative DS cache entries.Simon Kelley2014-03-012-2/+2
|
* Fix off-by-one overwrite.Simon Kelley2014-03-011-1/+2
|
* Tidy.Simon Kelley2014-03-011-4/+3
|
* Check that unsigned replies come from unsigned zones if ↵Simon Kelley2014-02-286-110/+469
| | | | --dnssec-check-unsigned set.
* Negative caching for DS records.Simon Kelley2014-02-273-48/+104
|
* Return INSECURE when validation fails with proved non-existent DS.Simon Kelley2014-02-251-5/+9
|
* Strip DNSSEC RRs when query doesn't have DO bit set.Simon Kelley2014-02-254-94/+327
|
* Speeling.Simon Kelley2014-02-241-7/+7
|
* Code cleanup.v2.69test9Simon Kelley2014-02-241-47/+34
|
* An NSEC record cannot attest to its own non-existance!Simon Kelley2014-02-241-4/+8
|
* Check signer name in RRSIGs.Simon Kelley2014-02-231-6/+32
|
* Bugfix for last commit.Simon Kelley2014-02-231-4/+4
|
* NSEC3 validation. First pass.Simon Kelley2014-02-235-113/+505
|
* Add --servers-file option.Simon Kelley2014-02-208-27/+92
|
* Omit ECC from DNSSEC if nettle library is old.Simon Kelley2014-02-192-6/+17
|
* More server cleanup.Simon Kelley2014-02-191-29/+24
|