summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix previous commit.v2.76test10Simon Kelley2016-02-171-2/+3
* Add --add-mac=text option.v2.76test9Simon Kelley2016-02-174-11/+18
* Avoid divide-by-zero when dhcp-range is a whole /64Simon Kelley2016-02-132-5/+17
* Avoid losing timer when deleting a RA context.S L2016-02-121-5/+14
* Fix breakage in ARP code when IPV6 support not compiled in.Simon Kelley2016-02-052-1/+6
* Make names of ARP script actions consistent.Simon Kelley2016-02-014-9/+9
* Fix FTBFS on illumosAndy Stormont2016-02-011-0/+2
* Treat REFUSED (not SERVFAIL) as an unsuccessful upstream responsev2.76test8Chris Novakovic2016-01-251-1/+1
* Final form of configuration for EDNS0 MAC-address code.Simon Kelley2016-01-257-48/+108
* Add --max-port config option.Hans Dedecker2016-01-237-5/+31
* Fix wrong reply to simple name when --domain-needed set and no servers config...v2.76test7Simon Kelley2016-01-193-9/+17
* Fix problems in last commit when DNSSEC not enabled.Simon Kelley2016-01-191-9/+2
* Complete DNSSEC server-selection code and set conntrack on DNSSEC queries.Simon Kelley2016-01-181-27/+121
* Fix sporadic crash in find_mac() - hwlen must be zero for empty entries.v2.76test6Simon Kelley2016-01-181-1/+2
* Fix botch in forward.c flags code.Simon Kelley2016-01-171-2/+2
* Complete work to allow DNSSEC validation with private DNS servers.Simon Kelley2016-01-163-18/+54
* arp.c tidy up.v2.76test5Simon Kelley2016-01-141-2/+2
* Disable DNSSEC for server=/domain/.. servers unless trust-anchor provided.Simon Kelley2016-01-124-13/+58
* Fix bad cache-size calculation when hosts-file read fails.André Glüpker2016-01-122-1/+5
* DNSSEC: Handle non-root trust anchors, and check we have a root trust anchor.Simon Kelley2016-01-122-3/+28
* Inhibit DNSSEC validation when forwarding to private servers for a domain.Simon Kelley2016-01-111-2/+3
* Fix FTBFS when scripts excluded at compilation time.Simon Kelley2016-01-061-1/+1
* Update copyright notices. Happy new year!Simon Kelley2016-01-0642-43/+43
* Handle building with script support enabled and DHCP disabled.Simon Kelley2016-01-061-1/+7
* Fix botch in new arp-cache linked-list code resulting in 100% CPU spin.v2.76test4Simon Kelley2016-01-041-10/+14
* Fix datatype-sixe botch which broke DNSSEC sig timestamps when far in the fut...v2.76test3v2.76test2Simon Kelley2016-01-041-5/+5
* Trivial code tweak.Simon Kelley2015-12-311-4/+4
* Correct logic for when to start helper.Simon Kelley2015-12-311-2/+2
* First complete version of DNS-client-id EDNS0 and ARP tracking code.Simon Kelley2015-12-2812-161/+308
* Cache access to the kernel's ARP table.Simon Kelley2015-12-236-77/+223
* More EDNS0 packet-size tweaks.Simon Kelley2015-12-233-16/+21
* Log signature algo with DNSKEY and DS, also digest with DS.Simon Kelley2015-12-213-9/+14
* Fix build failure when DNSSEC code omitted.Simon Kelley2015-12-212-9/+5
* Truncate DNS replies >512 bytes that the client isn't expecting.Simon Kelley2015-12-212-5/+17
* Handle extending EDNS0 OPT RR.Simon Kelley2015-12-214-55/+80
* Split EDNS0 stuff into its own source file.Simon Kelley2015-12-215-344/+362
* NSEC3 check: RFC5155 para 8.2Simon Kelley2015-12-201-2/+6
* Minor tweak to previous commit.Simon Kelley2015-12-201-4/+2
* Nasty, rare and obscure off-by-one in DNSSEC hostname_cmp().Simon Kelley2015-12-201-2/+2
* More tweaks in handling unknown DNSSEC algorithms.Simon Kelley2015-12-201-65/+63
* Major tidy up of EDNS0 handling and computation/use of udp packet size.Simon Kelley2015-12-207-118/+168
* Do a better job of determining which DNSSEC sig algos are supported.Simon Kelley2015-12-171-15/+37
* Fix brace botch in dnssec_validate_ds()Simon Kelley2015-12-171-17/+17
* Tidy up DNSSEC non-existence code. Check zone status is NSEC proof bad.Simon Kelley2015-12-171-117/+90
* Tweaks to EDNS0 handling in DNS replies.Simon Kelley2015-12-172-35/+42
* DNSSEC validation tweak.Simon Kelley2015-12-161-28/+54
* Generalise RR-filtering code, for use with EDNS0.Simon Kelley2015-12-156-309/+349
* Move code which caches DS records to a more logical place.Simon Kelley2015-12-151-89/+90
* Abandon caching RRSIGs and returning them from cache.Simon Kelley2015-12-154-297/+42
* Major rationalisation of DNSSEC validation.Simon Kelley2015-12-153-1033/+653