summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Replace dead link in dnsmasq.conf.example.v2.89Simon Kelley2023-02-021-1/+1
| | | | Thanks to Timo van Roermund for spotting this.
* Add --no-ident option.v2.89test1Dominik Derigs2023-01-233-25/+38
|
* Add acknowledgements to CHANGELOG for the 2.88 AWS efforts.Simon Kelley2023-01-141-4/+10
|
* Fix Changelog typos.Simon Kelley2023-01-141-2/+2
|
* Bump version in Debian changelog.Simon Kelley2023-01-131-0/+6
|
* Fix bug which can break the invariants on the order of a hash chain.Simon Kelley2023-01-132-6/+24
| | | | | | | | | | | | | | | If there are multiple cache records with the same name but different F_REVERSE and/or F_IMMORTAL flags, the code added in fe9a134b could concievable break the REVERSE-FORWARD-IMMORTAL order invariant. Reproducing this is damn near impossible, but it is responsible for rare and otherwise inexplicable reversion between 2.87 and 2.88 which manifests itself as a cache internal error. All observed cases have depended on DNSSEC being enabled, but the bug could in theory manifest itself without DNSSEC Thanks to Timo van Roermund for reporting the bug and huge efforts to isolate it.
* Fix cosmetic big in dump_cache_entry()Simon Kelley2023-01-041-2/+1
|
* Log all cache internal errors.Simon Kelley2023-01-021-8/+3
|
* If we hit a cache internal error, log the entry we failed to remove.Simon Kelley2022-12-221-82/+97
| | | | | This is code which should never run, but if it does, we now log information useful for debugging.
* Add posix-timezone and tzdb-timezone DHCPv6 options.v2.88Simon Kelley2022-12-041-0/+2
| | | | They are already in place for DHCPv4.
* Handle malformed DNS replies better.v2.88rc5Simon Kelley2022-11-263-17/+32
| | | | | | If we detect that that reply from usptream is malformed, transform it into a SERVFAIL reply before sending to the original requestor.
* Fix warning in cache.cBrad Smith2022-11-261-1/+3
|
* Make max staleness of stale cache entries configurable and default to one day.Dominik Derigs2022-11-265-11/+39
|
* Fix use-after-free in mark_servers()Petr Menšík2022-11-261-3/+5
|
* fixup! Handle DS records for unsupported crypto algorithms.Petr Menšík2022-11-221-1/+1
|
* Merge i18n strings.v2.88rc4Simon Kelley2022-11-2111-5870/+7559
|
* Add /etc/hosts gotcha to man page section for --dhcp-hosts.Simon Kelley2022-11-211-1/+2
|
* Optimise readng large number --server options at start up.Simon Kelley2022-11-213-21/+49
| | | | | | | | | | | When re-reading upstream servers from /etc/resolv.conf or other sources that can change dnsmasq tries to avoid memory fragmentation by re-using existing records that are being re-read unchanged. This involves seaching all the server records for each new one installed. During startup this search is pointless, and can cause long start times with thousands of --server options because the work needed is O(n^2). Handle this case more intelligently. Thanks to Ye Zhou for spotting the problem and an initial patch.
* Fix CHANGELOG typos.Matthias Andree2022-11-181-8/+8
|
* Update german translation for release 2.88.Conrad Kostecki2022-11-171-4/+4
|
* Fix SEGV on --local= added by immediately previous commit.v2.88rc3Simon Kelley2022-11-171-6/+8
|
* Fix struct hostinfo free code and BSD compile.v2.88rc2Simon Kelley2022-11-173-22/+27
| | | | | | | | | | The code added in6 c596f1cc1d92b2b90ef5ce043ace314eefa868b fails to free the returned datastructures from gethostinfo() because sdetails.hostinfo is used to loop through the addresses and ends up NULL. In some libc implementations this results in a SEGV when freeaddrinfo() is called. Also fix FTBFS under BSD. Thanks to Johnny S. Lee for the bug report.
* Handle DS records for unsupported crypto algorithms correctly.v2.88rc1Simon Kelley2022-11-163-24/+44
| | | | | | Such a DS, as long as it is validated, should allow answers in the domain is attests to be returned as unvalidated, and not as a validation error.
* Fix GOST signature algorithms for DNSSEC validation.Simon Kelley2022-11-161-7/+9
| | | | | | | | Use CryptoPro version of the hash function. Handle the little-endian wire format of key data. Get the wire order of S and R correct. Note that Nettle version 3.6 or later is required for GOST support.
* Handle known DNSSEC signature algorithms which are not supported.Simon Kelley2022-11-131-1/+12
| | | | | | | | | | This fixes a confusion if certain algorithms are not supported because the version is the crypto library is too old. The validation should be treated the same as for a completely unknown algorithm, (ie return unverified answer) and not as a validation failure (ie return SERVFAIL). The algorithems affected are GOST and ED448.
* Fix --server=/domain/#v2.88test3Simon Kelley2022-11-071-2/+4
|
* Fix --server with multiple domains.Simon Kelley2022-11-071-17/+20
|
* Make specifying nameservers by name work for DBus API.Simon Kelley2022-11-073-19/+59
|
* Call freeaddrinfo() in domain_rev[46]()Simon Kelley2022-11-071-0/+6
|
* Extend specifying DNS servers by domain-name to --rev-serverv2.88test2Simon Kelley2022-11-064-31/+56
| | | | | | | | Also Dbus SetDomainServers method. Revert getaddrinfo hints.ai_socktype to SOCK_DGRAM to eliminate duplicating every address three times for DGRAM, STREAM and RAW in the results.
* Fix breakage of --local=/domain.name/1.2.3.4 in immediately previous commit.Simon Kelley2022-11-061-4/+8
|
* Allow domain names as well is IP addresses in --server options.Dominik Derigs2022-11-055-86/+267
|
* Bump Debian version and close bug.Simon Kelley2022-11-021-0/+8
|
* Reconcile "names" and "address" counts when reading hostfiles.Simon Kelley2022-10-302-6/+6
|
* Inotify: make "flushed" log message more understandable.Simon Kelley2022-10-271-4/+4
| | | | | | | | | | | | | | | | Saying we've "flushed x outdated entries" is confusing, since the count is the total number of entries in the modified file, most of which are going to get added straight back when the file is re-read. The log now looks like dnsmasq: inotify: /tmp/dir/1 (new or modified) dnsmasq: inotify: flushed 1 addresses read from /tmp/dir/1 dnsmasq: read /tmp/dir/1 - 2 addresses which hopefully make it more obvious that /tmp/dir/1 contained one address before, and now contains two.
* Do not (try to) re-read deleted files inside a --hostsdir.Dominik Derigs2022-10-271-3/+9
|
* Fix in dhcpv4 rapid-commit code.Simon Kelley2022-10-271-1/+8
| | | | | | | | | | 1) Cosmetic: don't log the tags twice. 2) Functional. If a host has an old lease for a different address, the rapid-commit will appear to work, but the old lease will not be removed and the new lease will not be recorded, so the client and server will have conflicting state, leading to problems later.
* Add --no-round-robin option.Simon Kelley2022-10-185-4/+22
|
* Fix loss of DNS servers on config reload.Simon Kelley2022-10-172-2/+14
| | | | | | | | | A bug, introduced in 2.87, which could result in DNS servers being removed from the configuration when reloading server configuration from DBus, or re-reading /etc/resolv.conf Only servers from the same source should be replaced, but some servers from other sources (ie hard coded or another dynamic source) could mysteriously disappear.
* Handle multiple addresses when removing duplicates in host files.Dominik Derigs2022-10-161-6/+7
|
* Enhance --hostdir so that records are automatically removed when re-reading.Dominik Derigs2022-10-165-2/+33
| | | | Initial patch from Dominik Derigs, re-written by Simon Kelley.
* Improve logging of DNS record source from --hostsdir files.Dominik Derigs2022-10-164-65/+119
| | | | | Patch author Dominik Derigs <dl6er@dl6er.de> with subsequent bugfixes and tweaks from Simon Kelley.
* Move fast-dns-retry and use-stale-cache writeups in the CHANGELOG.v2.88test1Simon Kelley2022-10-141-16/+16
| | | | These are 2.88 changes, but the branch merge put them unde 2.87.
* Merge branch 'aws'Simon Kelley2022-10-1315-162/+758
|\
| * Add ClearMetrics Dbus method.awsSimon Kelley2022-09-164-3/+34
| |
| * Optimise cache code when stale caching in use.Simon Kelley2022-09-161-4/+9
| | | | | | | | Exclude DNSSEC entries from stale caching.
| * Don't exclude stale-cache answers from "local answered" metric.Simon Kelley2022-09-161-1/+3
| |
| * Initialise modified-moving-average latency calc better.Simon Kelley2022-09-161-1/+4
| | | | | | | | | | Use the first value, rather than initialising at zero, which takes many queries to converge.
| * Split failed queries in retries in stat counting.Simon Kelley2022-09-164-6/+11
| |
| * Tweak server-selection logic in the fast-retry case.Simon Kelley2022-09-151-7/+8
| |
View Lorry Controller Status