summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* DNSSEC: do top-down search for limit of secure delegation.unsignedSimon Kelley2015-01-074-178/+260
|
* Fix build failure in new inotify code on BSD.Matthias Andree2014-12-271-2/+2
|
* Bad packet protection.Simon Kelley2014-12-271-1/+1
|
* Add --ignore-address option.Glen Huang2014-12-276-4/+72
|
* Initialise return value.Simon Kelley2014-12-231-2/+5
|
* Fix problems validating NSEC3 and wildcards.v2.73test2Simon Kelley2014-12-231-125/+128
|
* Make caching work for CNAMEs pointing to A/AAAA records shadowed in /etc/hostsSimon Kelley2014-12-211-9/+25
| | | | | | | | If the answer to an upstream query is a CNAME which points to an A/AAAA record which also exists in /etc/hosts and friends, then caching is suppressed, to avoid inconsistent answers. This is now modified to allow caching when the upstream and local A/AAAA records have the same value.
* Fix crash in DNSSEC code when attempting to verify large RRs.Simon Kelley2014-12-212-8/+22
|
* Tweak field width in cache dump to avoid truncating IPv6 addresses.v2.73test1Simon Kelley2014-12-172-2/+4
|
* Eliminate IPv6 privacy addresses from --interface-name answers.Simon Kelley2014-12-175-11/+28
|
* Remove redundant IN6_IS_ADDR_ULA(a) macro defn.Simon Kelley2014-12-161-4/+0
|
* Fix breakage of --domain=<domain>,<subnet>,localSimon Kelley2014-12-162-2/+20
|
* CHANGELOG re. inotify.Simon Kelley2014-12-151-0/+4
|
* Remove floor on EDNS0 packet size with DNSSEC.Simon Kelley2014-12-152-6/+5
|
* Teach the new inotify code about symlinks.Simon Kelley2014-12-151-16/+27
|
* Merge branch 'inotify'Simon Kelley2014-12-105-5/+137
|\
| * Use inotify instead of polling on Linux.Simon Kelley2014-12-105-5/+137
| | | | | | | | | | This should solve problems people are seeing when a file changes twice within a second and thus is missed for polling.
* | Fix conntrack with --bind-interfacesHans Dedecker2014-12-091-2/+2
|/ | | | | | | | Make sure dst_addr is assigned the correct address in receive_query when OPTNOWILD is enabled so the assigned mark can be correctly retrieved and set in forward_query when conntrack is enabled. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* Improve RFC-compliance when unable to supply addresses in DHCPv6Vladislav Grishenko2014-10-061-2/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While testing https://github.com/sbyx/odhcp6c client I have noticed it permanently crashes after startup. The reason was it (odhcp6c) doesn't expect empty IA options in ADVERTISE message without any suboptions. Despite this validation bug of odhcp6c, dnsmasq should not generate ADVERTISE messages with IA if there's nothing to advert per RFC 3315 17.2.2: If the server will not assign any addresses to any IAs in a subsequent Request from the client, the server MUST send an Advertise message to the client that includes only a Status Code option with code NoAddrsAvail and a status message for the user, a Server Identifier option with the server's DUID, and a Client Identifier option with the client's DUID. Meanwhile it's need to add status code for every IA in REPLY message per RFC3315 18.2.1: If the server cannot assign any addresses to an IA in the message from the client, the server MUST include the IA in the Reply message with no addresses in the IA and a Status Code option in the IA containing status code NoAddrsAvail. So, I've changed the logic to skip IA completely from ADVERTISE messages and to add NoAddrsAvail subcode into IA of REPLY messages. As for overhead, yes, I believe it's ok to return NoAddrsAvail twice in IA and in global section for compatibility with all old and new clients.
* Fit example conf file typo.Tomas Hozza2014-10-061-1/+1
|
* Fix typo in new Dbus code.Daniel Collins2014-10-031-1/+1
| | | | Simon's fault.
* Set conntrack mark before connect() call.Karl Vogel2014-10-031-18/+18
| | | | | SO_MARK has to be done before issuing the connect() call on the TCP socket.
* Bump Debian version.Simon Kelley2014-10-031-0/+6
|
* Debian build fixes for kFreeBSDSimon Kelley2014-10-034-5/+20
|
* crash at startup when an empty suffix is supplied to --conf-dirSimon Kelley2014-10-022-15/+29
|
* Add newline at the end of example config file.Simon Kelley2014-09-251-1/+1
|
* Update Polish translation.v2.72Jan Psota2014-09-231-53/+46
|
* Fix CHANGELOG entry under wrong version.v2.72rc2Simon Kelley2014-09-181-4/+4
|
* Fix bug which caused dnsmasq to become unresponsive when an interface goes.Simon Kelley2014-09-182-3/+17
|
* Fix bug when resulted in NXDOMAIN answers instead of NODATA.Simon Kelley2014-09-184-3/+12
| | | | | | | | | | check_for_local_domain() was broken due to new code matching F_* bits in cache entries for DNSSEC. Because F_DNSKEY | F_DS is used to match RRSIG entries, cache_find_by_name() insists on an exact match of those bits. So adding F_DS to the bits that check_for_local_domain() sends to cache_find_by_name() won't result in DS records as well as the others, it results in only DS records. Add a new bit, F_NSIGMATCH which suitably changes the behaviour of cache_find_by_name().
* Fix length->netmask conversions to avoid undefined behaviour.Richard Genoud2014-09-172-2/+3
|
* Fix endian bug in --local-service code.Richard Genoud2014-09-172-2/+5
|
* Debian bug closure.Simon Kelley2014-09-161-0/+1
|
* Supply "Success" status code in reply to DHCPDECLINE.Ilya Ponetaev2014-09-131-0/+6
|
* Don't reply to DHCPCONFIRM messages with no addresses in them.Ilya Ponetaev2014-09-131-0/+7
|
* Set DHCPv6 message type when returning "use multicast".Ilya Ponetaev2014-09-131-0/+1
|
* DHCPv6 REBIND messages don't need a server-id.Ilya Ponetaev2014-09-131-2/+2
|
* Revert route-information option in RA. There are problems with some clients.Simon Kelley2014-09-132-30/+0
| | | | http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2014q3/008796.html
* Update *.po files for new release.Simon Kelley2014-09-1310-3928/+5480
|
* Extend --conf-dir to allow filtering on file suffixes.v2.72rc1Simon Kelley2014-09-094-8/+46
|
* Bump Debian standards version.Simon Kelley2014-09-091-1/+1
|
* Remove paypal links and icond refs from Debian package.Simon Kelley2014-09-092-3/+4
|
* Fix debian changelog date snafu.Simon Kelley2014-09-091-1/+1
|
* RFC4191 route information option.Ilya Ponetaev2014-09-093-12/+44
|
* Debian package: use dns-root-data.Simon Kelley2014-09-073-0/+13
|
* Mention name in systemd.Simon Danner2014-08-182-2/+2
|
* Merge branch 'loop'Simon Kelley2014-08-1214-19/+277
|\
| * GetLoopServers Dbus method.loopSimon Kelley2014-08-122-0/+43
| |
| * Check all servers loopiness, when any subset is changed.Simon Kelley2014-07-291-5/+5
| |
| * Add --dns-loop-detect feature.Simon Kelley2014-07-2912-18/+233
| |