]>
granicus.if.org Git - pdns/log
phonedph1 [Tue, 25 Oct 2016 01:52:13 +0000 (01:52 +0000)]
Document the -pub- variants
Pieter Lexis [Mon, 24 Oct 2016 22:21:49 +0000 (00:21 +0200)]
Merge pull request #4411 from pieterlexis/github-templates
To discuss: GitHub Issue and PR templates
Pieter Lexis [Fri, 2 Sep 2016 13:14:44 +0000 (15:14 +0200)]
Add initial GH templates
Peter van Dijk [Mon, 24 Oct 2016 18:06:02 +0000 (20:06 +0200)]
Merge pull request #4533 from rgacogne/dnsdist-clang-bsd
dnsdist: Fix building with clang on OS X and FreeBSD
Pieter Lexis [Mon, 24 Oct 2016 14:53:26 +0000 (16:53 +0200)]
Merge pull request #4608 from ton31337/feature/mydns_backend_rpm
Make MyDNS backend rpm
Donatas Abraitis [Mon, 24 Oct 2016 13:39:42 +0000 (16:39 +0300)]
Make MyDNS backend rpm
Peter van Dijk [Mon, 24 Oct 2016 11:40:17 +0000 (13:40 +0200)]
Merge pull request #4603 from nivex/patch-1
g.root-servers.net added IPv6
Peter van Dijk [Mon, 24 Oct 2016 11:39:35 +0000 (13:39 +0200)]
Merge pull request #4604 from apfohl/patch-1
Fixed a typo in settings.md in the docs
Pieter Lexis [Mon, 24 Oct 2016 06:48:45 +0000 (08:48 +0200)]
Merge pull request #4602 from pieterlexis/DNSSEC-forwards-NSEC3-optout
NSEC3 optout and Bogus insecure forward fixes
Andreas Pfohl [Fri, 21 Oct 2016 23:00:20 +0000 (01:00 +0200)]
Fixed a typo in settings.md in the docs
This adds a missing 'query' in the settings.md documentation for the 'launch' option of the authoritative server.
Kevin Otte [Fri, 21 Oct 2016 12:41:11 +0000 (08:41 -0400)]
g.root-servers.net added IPv6
http://www.internic.net/domain/db.cache
last update: October 20, 2016
Pieter Lexis [Fri, 21 Oct 2016 10:48:24 +0000 (12:48 +0200)]
Fix comment indent
Pieter Lexis [Fri, 21 Oct 2016 10:48:10 +0000 (12:48 +0200)]
Add an RFC quote in the right place
Pieter Lexis [Fri, 21 Oct 2016 10:33:41 +0000 (12:33 +0200)]
NSEC3 optout and Bogus insecure forward fixes
After the change to zonecuts to find key material, the NSEC3 checking
returned an (incorrect) 'covering nxdomain' for a forwarded subzone with
no DS record in its parent. After fixing this, the NSEC3 optout test
failed as Bogus (instead of insecure). This was fixed by actually
checking the optout flag on a delegation NSEC3 record.
Pieter Lexis [Thu, 20 Oct 2016 11:58:14 +0000 (13:58 +0200)]
Merge pull request #4489 from pieterlexis/issue-4483-caching-on-forward-zones
Cache records for zones that were delegated to from a forwarded zone
Pieter Lexis [Thu, 20 Oct 2016 11:58:01 +0000 (13:58 +0200)]
Merge pull request #4377 from pieterlexis/issue-4369-DNSSEC-forwards-cache
Rec: make the record cache forward-aware
Pieter Lexis [Thu, 20 Oct 2016 08:46:03 +0000 (10:46 +0200)]
Merge pull request #4516 from pieterlexis/RPZ-chase-custompolicy-cname
On RPZ customPolicy, follow the resulting CNAME
Pieter Lexis [Thu, 20 Oct 2016 07:47:16 +0000 (09:47 +0200)]
Merge pull request #4389 from pieterlexis/DNSSEC-zone-cut
Switch DNSSEC to using zone-cuts to find key material
Pieter Lexis [Tue, 18 Oct 2016 09:39:52 +0000 (11:39 +0200)]
Merge pull request #4398 from pieterlexis/warn-on-addDS-without-DNSSEC
Warn the user when DNSSEC related things are attempted when DNSSEC is disabled
Pieter Lexis [Tue, 18 Oct 2016 09:39:39 +0000 (11:39 +0200)]
Merge pull request #4465 from giganteous/patch-1
[recursor] Update docs
Pieter Lexis [Tue, 18 Oct 2016 09:38:57 +0000 (11:38 +0200)]
Merge pull request #4500 from pieterlexis/cleanups
Silence a GCC 6.2 compiler warning
Pieter Lexis [Tue, 18 Oct 2016 09:37:51 +0000 (11:37 +0200)]
Merge pull request #4526 from zeha/api-qualified
API: url in zone info should be absolute
Pieter Lexis [Tue, 18 Oct 2016 09:37:23 +0000 (11:37 +0200)]
Merge pull request #4537 from rgacogne/luawrapper-forward-as-tuple
Replace luawrapper's std::forward/std::make_tuple combo with std::forward_as_tuple
Pieter Lexis [Tue, 18 Oct 2016 09:36:25 +0000 (11:36 +0200)]
Merge pull request #4544 from rgacogne/auth-off-by-one-http-remote
auth: Fix a stack-based off-by-one write in the HTTP remote backend
Pieter Lexis [Tue, 18 Oct 2016 09:36:07 +0000 (11:36 +0200)]
Merge pull request #4548 from zeha/shadow
Avoid shadowing variables
Pieter Lexis [Tue, 18 Oct 2016 09:35:48 +0000 (11:35 +0200)]
Merge pull request #4560 from mind04/packethandler
remove the suggestion of variable hiding being a problem
Pieter Lexis [Tue, 18 Oct 2016 09:35:29 +0000 (11:35 +0200)]
Merge pull request #4580 from percipient/remote-tsig-docs
[Documentation] Update some auth remove backend examples to add trailing '.'s
Pieter Lexis [Tue, 18 Oct 2016 09:35:11 +0000 (11:35 +0200)]
Merge pull request #4570 from Habbie/recname
fix filename, thanks Cody Robertson
Pieter Lexis [Tue, 18 Oct 2016 09:35:00 +0000 (11:35 +0200)]
Merge pull request #4567 from pieterlexis/yakkety
Fix build dependencies for Ubuntu Yakkety
Pieter Lexis [Tue, 18 Oct 2016 09:34:50 +0000 (11:34 +0200)]
Merge pull request #4561 from paddg/patch-4
Update rec_control.1.md
Pieter Lexis [Wed, 31 Aug 2016 12:05:20 +0000 (14:05 +0200)]
DNSSEC: generalize getDenial() function
* Add qname denial check for NSEC
* Add qtype denial checks
* Hook up to getKeysFor()
Pieter Lexis [Wed, 31 Aug 2016 12:11:27 +0000 (14:11 +0200)]
DNSSEC: Implement keysearch based on zone-cuts
This prevents us sending out useless queries for DS records and doesn't
confuse us anymore when the delegation jumps over several labels.
Pieter Lexis [Wed, 31 Aug 2016 12:11:15 +0000 (14:11 +0200)]
Add getZoneCuts() function
Patrick Cloke [Mon, 17 Oct 2016 21:14:57 +0000 (17:14 -0400)]
Add some missing dots at the end of 'names'.
Peter van Dijk [Sat, 15 Oct 2016 19:02:47 +0000 (21:02 +0200)]
fix filename, thanks Cody Robertson
Pieter Lexis [Fri, 14 Oct 2016 05:42:39 +0000 (07:42 +0200)]
Fix build dependencies for Ubuntu Yakkety
libzmq-dev has been renamed to libzmq3-dev
Winfried Angele [Wed, 12 Oct 2016 12:08:02 +0000 (14:08 +0200)]
Update rec_control.1.md
Pieter Lexis [Fri, 23 Sep 2016 15:09:11 +0000 (17:09 +0200)]
Silence a GCC 6.2 compiler warning
Kees Monshouwer [Tue, 11 Oct 2016 21:31:40 +0000 (23:31 +0200)]
remove the suggestion of variable hiding being a problem
Peter van Dijk [Tue, 11 Oct 2016 20:30:03 +0000 (22:30 +0200)]
Merge pull request #4550 from rgacogne/auth-web-rings-leak
auth: Fix a possible memory leak in the webserver
Peter van Dijk [Tue, 11 Oct 2016 20:28:33 +0000 (22:28 +0200)]
Merge pull request #4559 from mind04/warning
Fix a few warnings on rawhide
Peter van Dijk [Tue, 11 Oct 2016 19:53:56 +0000 (21:53 +0200)]
Merge pull request #4538 from pieterlexis/secpoll-v3-docs
Send secpoll users of 3.X to the 3.X docs
Peter van Dijk [Tue, 11 Oct 2016 19:52:58 +0000 (21:52 +0200)]
Merge pull request #4542 from zeha/api-search-no-ents
API: search should not return ENTs
Peter van Dijk [Tue, 11 Oct 2016 19:51:55 +0000 (21:51 +0200)]
Merge pull request #4554 from rgacogne/protobuf-comments
Add requestorId and some comments to the protobuf definition file
Peter van Dijk [Tue, 11 Oct 2016 19:51:02 +0000 (21:51 +0200)]
Merge pull request #4557 from Habbie/safesearch
encrypted.google.com is supported as SNI on the forcesafesearch VIP; …
Peter van Dijk [Tue, 11 Oct 2016 11:23:10 +0000 (13:23 +0200)]
encrypted.google.com is supported as SNI on the forcesafesearch VIP; so is ipv6.google.com
Remi Gacogne [Mon, 10 Oct 2016 13:08:24 +0000 (15:08 +0200)]
Add requestorId and some comments to the protobuf definition file
Remi Gacogne [Mon, 10 Oct 2016 12:05:46 +0000 (14:05 +0200)]
Merge pull request #4553 from rgacogne/dnsdist-client-redirection
dnsdist: Flush output in single command client mode
Remi Gacogne [Mon, 10 Oct 2016 11:12:21 +0000 (13:12 +0200)]
dnsdist: Flush output in single command client mode
Otherwise redirection to a pipe or a file doesn't work, as
reported on IRC by tmus (thanks!).
Remi Gacogne [Fri, 7 Oct 2016 13:04:12 +0000 (15:04 +0200)]
auth: Fix a possible memory leak in the webserver
Also state clearly that we advise against running the webserver
without password protection.
Reported by mongo (thanks!).
Christian Hofstaedtler [Fri, 7 Oct 2016 00:44:10 +0000 (02:44 +0200)]
apiServerSearchData simplify == false
Christian Hofstaedtler [Fri, 7 Oct 2016 00:42:56 +0000 (02:42 +0200)]
Replace setRcode(int) with setRcode(RCode::...) enum
Christian Hofstaedtler [Fri, 7 Oct 2016 00:42:29 +0000 (02:42 +0200)]
tcpreceiver: fix easy cases of var shadowing
Christian Hofstaedtler [Fri, 7 Oct 2016 00:42:05 +0000 (02:42 +0200)]
packethandler: fix easy cases of var shadowing
Christian Hofstaedtler [Fri, 7 Oct 2016 00:41:47 +0000 (02:41 +0200)]
nsecrecords: fix var shadowing
Christian Hofstaedtler [Fri, 7 Oct 2016 00:41:34 +0000 (02:41 +0200)]
dnsname: fix var shadowing
Christian Hofstaedtler [Fri, 7 Oct 2016 00:41:13 +0000 (02:41 +0200)]
pipebackend: fix var shadowing
Christian Hofstaedtler [Fri, 7 Oct 2016 00:40:54 +0000 (02:40 +0200)]
Remove unused vars/members
Christian Hofstaedtler [Thu, 6 Oct 2016 14:18:09 +0000 (16:18 +0200)]
API: search should not return ENTs
This should also fix #4534, when backported.
Remi Gacogne [Mon, 29 Aug 2016 13:50:44 +0000 (15:50 +0200)]
auth: Fix a stack-based off-by-one write in the HTTP remote backend
Reported by mongo (thanks!).
Peter van Dijk [Thu, 6 Oct 2016 13:38:13 +0000 (15:38 +0200)]
Merge pull request #4508 from Habbie/wrong
Revert "Merge pull request #947 from mind04/right"
Pieter Lexis [Wed, 5 Oct 2016 14:36:43 +0000 (16:36 +0200)]
Send secpoll users of 3.X to the 3.X docs
Closes #4521
Remi Gacogne [Wed, 5 Oct 2016 13:28:00 +0000 (15:28 +0200)]
Merge pull request #4530 from paddg/patch-3
Update README-dnsdist.md
Remi Gacogne [Wed, 5 Oct 2016 08:38:04 +0000 (10:38 +0200)]
dnsdist: Use portable IPPROTO_TCP instead of SOL_TCP for TCP_FASTOPEN
This fixes the compilation on FreeBSD, where IPPROTO_TCP and
TCP_FASTOPEN are defined but SOL_TCP isn't.
Remi Gacogne [Wed, 5 Oct 2016 08:13:24 +0000 (10:13 +0200)]
dnsdist: Fix compilation on OS X and FreeBSD
Sangwhan Moon [Tue, 4 Oct 2016 06:06:40 +0000 (15:06 +0900)]
Replace std::forward/std::make_tuple combo with std::forward_as_tuple
Quick and dirty fix for #3552. May not work or break compatibility
with other compilers.
Winfried Angele [Wed, 5 Oct 2016 06:57:29 +0000 (08:57 +0200)]
Update README-dnsdist.md
bert hubert [Tue, 4 Oct 2016 07:05:34 +0000 (09:05 +0200)]
Merge pull request #4519 from rgacogne/dnsdist-ecs-rule
dnsdist: Allow altering the ECS behavior via rules and Lua
Christian Hofstaedtler [Mon, 3 Oct 2016 14:12:48 +0000 (16:12 +0200)]
API: url in zone info should be absolute
Fixes #4524.
Kees Monshouwer [Fri, 30 Sep 2016 20:53:05 +0000 (22:53 +0200)]
add gcc 6.2 to boost.m4
Kees Monshouwer [Fri, 30 Sep 2016 20:50:57 +0000 (22:50 +0200)]
fix a few 'types may not be defined in a for-range-declaration' warnings
Pieter Lexis [Fri, 30 Sep 2016 11:21:01 +0000 (13:21 +0200)]
Add tests for #4483
Pieter Lexis [Fri, 30 Sep 2016 11:20:15 +0000 (13:20 +0200)]
rec tests: create controlsocket dirs idempotently
Pieter Lexis [Fri, 30 Sep 2016 11:19:18 +0000 (13:19 +0200)]
Fix the fields in two debug lines
Pieter Lexis [Fri, 30 Sep 2016 11:18:43 +0000 (13:18 +0200)]
Cache records for zones that were delegated to from a forwarded zone
Fixes #4483
Pieter Lexis [Fri, 30 Sep 2016 11:15:53 +0000 (13:15 +0200)]
ignore a generated file
Pieter Lexis [Thu, 29 Sep 2016 16:22:39 +0000 (18:22 +0200)]
On RPZ customPolicy, follow the resulting CNAME
Closes #4188
bert hubert [Thu, 29 Sep 2016 18:05:31 +0000 (20:05 +0200)]
Merge pull request #4485 from mind04/cache-soa
soa and caching
bert hubert [Thu, 29 Sep 2016 17:51:34 +0000 (19:51 +0200)]
fix up packetcache not to use constexpr which upset clang (perhaps it is right)
bert hubert [Thu, 29 Sep 2016 15:23:42 +0000 (17:23 +0200)]
document cache cleaning rate adjustment, plus switch to symbolic names for limits
bert hubert [Thu, 29 Sep 2016 14:45:45 +0000 (16:45 +0200)]
Merge pull request #4504 from mind04/pcsize
update packetcache size in insert(), remove unnecessary locking, change cache cleaning strategy
Kees Monshouwer [Sat, 17 Sep 2016 21:04:01 +0000 (23:04 +0200)]
s/soa-minimum-default/soa-minimum-ttl/
Remi Gacogne [Thu, 29 Sep 2016 09:21:47 +0000 (11:21 +0200)]
Merge pull request #4432 from rgacogne/dnsdist-protobuf-regression-tests
dnsdist: Add regression tests for protobuf export and DNSResponse bindings
Remi Gacogne [Thu, 29 Sep 2016 08:48:04 +0000 (10:48 +0200)]
dnsdist: Allow altering the ECS behavior via rules and Lua
Kees Monshouwer [Wed, 28 Sep 2016 13:21:45 +0000 (15:21 +0200)]
remove debug output and correct iterator increase
Kees Monshouwer [Tue, 27 Sep 2016 08:55:47 +0000 (10:55 +0200)]
adaptive packetcache cleaning interval
Pieter Lexis [Wed, 28 Sep 2016 11:43:20 +0000 (13:43 +0200)]
Merge pull request #4431 from pieterlexis/issue-4430-bogus-on-no-DS
Rec: don't go bogus on zero configured DSs
Pieter Lexis [Wed, 28 Sep 2016 11:40:44 +0000 (13:40 +0200)]
Merge pull request #4473 from rgacogne/coverity-fixes-
20160915
auth: Fix returned id from `Bind2Backend::addDomainKey()`, use a unique_ptr for AuthLua4 object
Pieter Lexis [Wed, 28 Sep 2016 11:39:36 +0000 (13:39 +0200)]
Merge pull request #4513 from martinkouba/patch-1
Updated description of allow-unsigned-notify
Kees Monshouwer [Sat, 17 Sep 2016 22:28:41 +0000 (00:28 +0200)]
disable negative getSOA caching if the negcache_ttl is 0
Martin Kouba [Tue, 27 Sep 2016 17:49:21 +0000 (19:49 +0200)]
Updated description of allow-unsigned-notify
Changed default of allow-unsigned-notify according to https://doc.powerdns.com/md/authoritative/settings/
Kees Monshouwer [Mon, 26 Sep 2016 19:04:24 +0000 (21:04 +0200)]
cleanup packetcache cleanup()
bert hubert [Mon, 26 Sep 2016 10:12:59 +0000 (12:12 +0200)]
make sure we clean based on sequence index and not on hash index. This bug potentially repeats for all users of PruneCollection.
Kees Monshouwer [Mon, 26 Sep 2016 18:31:22 +0000 (20:31 +0200)]
remove some outdated comments in packetcache.cc
Kees Monshouwer [Mon, 26 Sep 2016 18:30:20 +0000 (20:30 +0200)]
remove unnecessary locking in packetcache
Kees Monshouwer [Mon, 26 Sep 2016 18:28:27 +0000 (20:28 +0200)]
update packetcache size in insert()
Peter van Dijk [Mon, 26 Sep 2016 12:52:10 +0000 (14:52 +0200)]
Revert "Merge pull request #947 from mind04/right"
This code only served to fix a combination of system misconfiguration and a
bug in glibc. Meanwhile it turns out this code is incorrect. Removing it.
bert hubert [Mon, 26 Sep 2016 09:40:02 +0000 (11:40 +0200)]
make sure we log the [id] as well for DNSSEC trace
Pieter Lexis [Sun, 25 Sep 2016 19:49:15 +0000 (21:49 +0200)]
Merge pull request #4506 from HLFH/patch-1
Removal of pipebackend-abi-version setting
Pieter Lexis [Sun, 25 Sep 2016 19:48:51 +0000 (21:48 +0200)]
Merge pull request #4507 from HLFH/patch-2
Give tarball link