summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix wrong reply to simple name when --domain-needed set and no servers config...v2.76test7Simon Kelley2016-01-193-9/+17
* Fix problems in last commit when DNSSEC not enabled.Simon Kelley2016-01-191-9/+2
* Complete DNSSEC server-selection code and set conntrack on DNSSEC queries.Simon Kelley2016-01-181-27/+121
* Fix sporadic crash in find_mac() - hwlen must be zero for empty entries.v2.76test6Simon Kelley2016-01-181-1/+2
* Fix botch in forward.c flags code.Simon Kelley2016-01-171-2/+2
* Complete work to allow DNSSEC validation with private DNS servers.Simon Kelley2016-01-163-18/+54
* arp.c tidy up.v2.76test5Simon Kelley2016-01-141-2/+2
* Disable DNSSEC for server=/domain/.. servers unless trust-anchor provided.Simon Kelley2016-01-124-13/+58
* Fix bad cache-size calculation when hosts-file read fails.André Glüpker2016-01-122-1/+5
* DNSSEC: Handle non-root trust anchors, and check we have a root trust anchor.Simon Kelley2016-01-122-3/+28
* Inhibit DNSSEC validation when forwarding to private servers for a domain.Simon Kelley2016-01-111-2/+3
* Fix FTBFS when scripts excluded at compilation time.Simon Kelley2016-01-061-1/+1
* Update copyright notices. Happy new year!Simon Kelley2016-01-0642-43/+43
* Handle building with script support enabled and DHCP disabled.Simon Kelley2016-01-061-1/+7
* Fix botch in new arp-cache linked-list code resulting in 100% CPU spin.v2.76test4Simon Kelley2016-01-041-10/+14
* Fix datatype-sixe botch which broke DNSSEC sig timestamps when far in the fut...v2.76test3v2.76test2Simon Kelley2016-01-041-5/+5
* Trivial code tweak.Simon Kelley2015-12-311-4/+4
* Correct logic for when to start helper.Simon Kelley2015-12-311-2/+2
* First complete version of DNS-client-id EDNS0 and ARP tracking code.Simon Kelley2015-12-2812-161/+308
* Cache access to the kernel's ARP table.Simon Kelley2015-12-236-77/+223
* More EDNS0 packet-size tweaks.Simon Kelley2015-12-233-16/+21
* Log signature algo with DNSKEY and DS, also digest with DS.Simon Kelley2015-12-213-9/+14
* Fix build failure when DNSSEC code omitted.Simon Kelley2015-12-212-9/+5
* Truncate DNS replies >512 bytes that the client isn't expecting.Simon Kelley2015-12-212-5/+17
* Handle extending EDNS0 OPT RR.Simon Kelley2015-12-214-55/+80
* Split EDNS0 stuff into its own source file.Simon Kelley2015-12-215-344/+362
* NSEC3 check: RFC5155 para 8.2Simon Kelley2015-12-201-2/+6
* Minor tweak to previous commit.Simon Kelley2015-12-201-4/+2
* Nasty, rare and obscure off-by-one in DNSSEC hostname_cmp().Simon Kelley2015-12-201-2/+2
* More tweaks in handling unknown DNSSEC algorithms.Simon Kelley2015-12-201-65/+63
* Major tidy up of EDNS0 handling and computation/use of udp packet size.Simon Kelley2015-12-207-118/+168
* Do a better job of determining which DNSSEC sig algos are supported.Simon Kelley2015-12-171-15/+37
* Fix brace botch in dnssec_validate_ds()Simon Kelley2015-12-171-17/+17
* Tidy up DNSSEC non-existence code. Check zone status is NSEC proof bad.Simon Kelley2015-12-171-117/+90
* Tweaks to EDNS0 handling in DNS replies.Simon Kelley2015-12-172-35/+42
* DNSSEC validation tweak.Simon Kelley2015-12-161-28/+54
* Generalise RR-filtering code, for use with EDNS0.Simon Kelley2015-12-156-309/+349
* Move code which caches DS records to a more logical place.Simon Kelley2015-12-151-89/+90
* Abandon caching RRSIGs and returning them from cache.Simon Kelley2015-12-154-297/+42
* Major rationalisation of DNSSEC validation.Simon Kelley2015-12-153-1033/+653
* Fix crash at start up with conf-dir=/path,*Simon Kelley2015-11-211-4/+10
* Handle unknown DS hash algos correctly.Simon Kelley2015-11-201-0/+13
* Fix crash when empty address from DNS overlays A record from hosts.Edwin Török2015-11-142-1/+6
* Update list of subnet for --bogus-privSimon Kelley2015-10-201-2/+6
* Catch errors from sendmsg in DHCP code.Simon Kelley2015-10-131-1/+6
* Use /run/dnsmasq instead of /var/run/dnsmasq in Debian package.Simon Kelley2015-09-298-27/+28
* Rationalise 5e3e464ac4022ee0b3794513abe510817e2cf3caSimon Kelley2015-09-261-2/+1
* Respect the --no-resolv flag in inotify code.Simon Kelley2015-09-103-1/+15
* DHCPv6 option 56 does not hold an address list. (RFC 5908).Simon Kelley2015-09-101-1/+1
* Handle signed dangling CNAME replies to DS queries.Simon Kelley2015-09-091-5/+2