]>
granicus.if.org Git - pdns/log
Pieter Lexis [Tue, 12 Apr 2016 10:08:09 +0000 (12:08 +0200)]
dnsdist: Import systemd autoconf macros
Imported
https://github.com/mcgrof/funk-systemd/blob/
b17396e7b1f5e93db74cae0e9123f39cf27a8339 /src/m4/systemd.m4
as m4/systemd.m4
Imported
https://github.com/mcgrof/funk-systemd/blob/
b17396e7b1f5e93db74cae0e9123f39cf27a8339 /src/m4/features.m4
as m4/ax_arg_default_enable_disable.m4
Peter van Dijk [Mon, 11 Apr 2016 20:59:29 +0000 (22:59 +0200)]
Merge pull request #3694 from Habbie/protobuf-old-autoconf
avoid generating empty if/else blocks on autoconf 2.63, fixes #3684
Peter van Dijk [Mon, 11 Apr 2016 18:23:41 +0000 (20:23 +0200)]
avoid generating empty if/else blocks on autoconf 2.63, fixes #3684
Remi Gacogne [Mon, 11 Apr 2016 14:53:53 +0000 (16:53 +0200)]
Merge pull request #3691 from rgacogne/dnsdist-ecs-dnsname-crash
Throw if DNSName would overflow when asked to read type/class
Remi Gacogne [Mon, 11 Apr 2016 12:53:32 +0000 (14:53 +0200)]
Merge pull request #3692 from pieterlexis/dnsdist-makefile
dnsdist: do not install the testrunner
Remi Gacogne [Mon, 11 Apr 2016 12:47:53 +0000 (14:47 +0200)]
Merge pull request #3690 from rgacogne/dnsdist-doc-ecs-fixes
dnsdist: Doc: Clarify ECS a bit, fix the source address list
Pieter Lexis [Mon, 11 Apr 2016 10:52:22 +0000 (12:52 +0200)]
dnsdist: do not install the testrunner
Remi Gacogne [Mon, 11 Apr 2016 09:14:41 +0000 (11:14 +0200)]
Throw if DNSName would overflow when asked to read type/class
Otherwise, the caller has to check the consumed size to know
if the type and class he asked for have been read, while it
clearly expected them to be present.
Fix a crash in dnsdist ECS parsing found by american fuzzy lop.
bert hubert [Mon, 11 Apr 2016 08:53:26 +0000 (10:53 +0200)]
Merge pull request #3689 from Habbie/nocomment
this comment makes no sense after
e377f86
Peter van Dijk [Sun, 10 Apr 2016 13:16:20 +0000 (15:16 +0200)]
this comment makes no sense after
e377f86
Remi Gacogne [Sun, 10 Apr 2016 11:26:34 +0000 (13:26 +0200)]
dnsdist: Doc: Clarify ECS a bit, fix the source address list
Peter van Dijk [Fri, 8 Apr 2016 14:14:31 +0000 (16:14 +0200)]
temporarily reduce travis runtime, revert me later
Peter van Dijk [Fri, 8 Apr 2016 11:01:14 +0000 (13:01 +0200)]
Merge pull request #3642 from pieterlexis/protobuf-cleanups
Protobuf cleanups
Peter van Dijk [Fri, 8 Apr 2016 11:00:05 +0000 (13:00 +0200)]
Merge pull request #3640 from rgacogne/rec-protobuf-wake-worker
rec: Extract ECS even w/o gettag. Wake worker when exiting.
Peter van Dijk [Fri, 8 Apr 2016 10:58:18 +0000 (12:58 +0200)]
Merge pull request #3633 from rgacogne/dnsdist-cache-short-ttl
dnsdist: Count "TTL too short" events, default min TTL to 0
Peter van Dijk [Fri, 8 Apr 2016 10:55:43 +0000 (12:55 +0200)]
Merge pull request #3632 from saltsa/master
fix exit statuses to constants and return 0 when success
Peter van Dijk [Fri, 8 Apr 2016 10:52:29 +0000 (12:52 +0200)]
Merge pull request #3619 from pieterlexis/issue-2072-rec_control-reload-zones
Don't replace forwards with broken config file
Peter van Dijk [Fri, 8 Apr 2016 10:51:50 +0000 (12:51 +0200)]
Merge pull request #3618 from pieterlexis/issue-3430-scoped-syntax-docs
Document v6 scoped syntax
Peter van Dijk [Fri, 8 Apr 2016 10:51:07 +0000 (12:51 +0200)]
Merge pull request #3614 from hlindqvist/policy-lua-fixes
Policy lua script null handling fixes
Peter van Dijk [Fri, 8 Apr 2016 10:42:24 +0000 (12:42 +0200)]
Merge pull request #3656 from zeha/api-cryptokey-cleanup
API: clean up cryptokeys resource
Peter van Dijk [Fri, 8 Apr 2016 10:41:46 +0000 (12:41 +0200)]
Merge pull request #3658 from rgacogne/dnsdist-maxqpsiprule-crash
dnsdist: Add a lock to MaxQPSIPRule
Peter van Dijk [Fri, 8 Apr 2016 10:40:39 +0000 (12:40 +0200)]
Merge pull request #3667 from mind04/default
fix default algorithms in pdnsutil
Peter van Dijk [Fri, 8 Apr 2016 10:38:45 +0000 (12:38 +0200)]
Merge pull request #3678 from mind04/bindroot
root zone fixes in bind backend
Kees Monshouwer [Thu, 7 Apr 2016 18:12:14 +0000 (20:12 +0200)]
enable all bind root zone tests in travis
Kees Monshouwer [Wed, 6 Apr 2016 07:25:19 +0000 (09:25 +0200)]
redo NSEC3 in bind backend
Pieter Lexis [Thu, 31 Mar 2016 13:29:24 +0000 (15:29 +0200)]
recursor: ignore generated files
Pieter Lexis [Thu, 31 Mar 2016 13:09:48 +0000 (15:09 +0200)]
recursor: Protobuf auto* cleanup
Pieter Lexis [Thu, 31 Mar 2016 09:17:59 +0000 (11:17 +0200)]
dnsdist: allow building with `make dnsdist`
Pieter Lexis [Thu, 31 Mar 2016 09:17:33 +0000 (11:17 +0200)]
dnsdist: Protobuf automake fixes
Pieter Lexis [Thu, 31 Mar 2016 09:07:22 +0000 (11:07 +0200)]
dnsdist: ignore generated files
Pieter Lexis [Thu, 31 Mar 2016 09:02:32 +0000 (11:02 +0200)]
dnsdist: automatically detect protobuf
Pieter Lexis [Thu, 31 Mar 2016 06:13:13 +0000 (08:13 +0200)]
make dnspcap2protobuf buildable without `make all`
Pieter Lexis [Thu, 31 Mar 2016 06:54:20 +0000 (08:54 +0200)]
Automatically detect protobuf (similar to Lua)
No need to `--enable-protobuf`. If you want to skip protobuf detection,
`--without-protobuf` is your friend. We also fail configure if
`--with-protobuf=yes` and protobuf is not found.
Pieter Lexis [Sat, 26 Mar 2016 11:21:56 +0000 (12:21 +0100)]
Ignore built files
Pieter Lexis [Thu, 7 Apr 2016 14:46:27 +0000 (16:46 +0200)]
Update auth docs
Pieter Lexis [Thu, 7 Apr 2016 14:39:56 +0000 (16:39 +0200)]
Merge pull request #3612 from pieterlexis/issue-3480-pgsql-segfault
pdnsutil: Fix segfault in the gpgsql backend
Pieter Lexis [Thu, 7 Apr 2016 14:39:29 +0000 (16:39 +0200)]
Merge pull request #3676 from pieterlexis/docupdates
Documentation updates
Pieter Lexis [Thu, 7 Apr 2016 11:55:19 +0000 (13:55 +0200)]
Merge branch 'mind04-root'
Pieter Lexis [Thu, 7 Apr 2016 11:43:39 +0000 (13:43 +0200)]
Merge branch 'root' of https://github.com/mind04/pdns into mind04-root
Pieter Lexis [Thu, 7 Apr 2016 11:33:46 +0000 (13:33 +0200)]
Merge pull request #3671 from pieterlexis/relative-paths
recursor: use relative paths for recuweb
Peter van Dijk [Thu, 7 Apr 2016 11:30:16 +0000 (13:30 +0200)]
Merge pull request #3625 from cyclops1982/3362
Suggested fix for #3362 and #2911
Peter van Dijk [Thu, 7 Apr 2016 11:30:02 +0000 (13:30 +0200)]
Merge pull request #3666 from mind04/backend
Restore old gsql backend behaviour
Pieter Lexis [Thu, 7 Apr 2016 09:10:10 +0000 (11:10 +0200)]
docs: Update the authoritative mainpage
Pieter Lexis [Thu, 7 Apr 2016 09:08:17 +0000 (11:08 +0200)]
Merge remote-tracking branch 'habbie/ldapdocs' into docupdates
Pieter Lexis [Thu, 7 Apr 2016 08:24:16 +0000 (10:24 +0200)]
dnsdist: update last addLuaAction parameter reference
Pieter Lexis [Thu, 7 Apr 2016 08:19:27 +0000 (10:19 +0200)]
Merge pull request #3563 from GaveUp/master
Clarify ALLOW-AXFR-FROM.
Pieter Lexis [Thu, 7 Apr 2016 08:19:14 +0000 (10:19 +0200)]
Merge pull request #3603 from rubenk/m4-libedit
M4 libedit
Pieter Lexis [Thu, 7 Apr 2016 08:19:02 +0000 (10:19 +0200)]
Merge pull request #3617 from pieterlexis/issue-3441-lowercase-outgoing-to-40
Add `lowercase-outgoing` to Recursor 4.0
Pieter Lexis [Thu, 7 Apr 2016 08:18:10 +0000 (10:18 +0200)]
Merge pull request #3628 from rubenk/remove-semistatic-stuff
Remove semistatic stuff
Pieter Lexis [Thu, 7 Apr 2016 08:17:54 +0000 (10:17 +0200)]
Merge pull request #3635 from pieterlexis/sync-dnsdist-debian
dnsdist: Sync debian dir with downstream
Pieter Lexis [Thu, 7 Apr 2016 08:17:40 +0000 (10:17 +0200)]
Merge pull request #3651 from zeha/dashconsistency
Rename PUBLISH_* to PUBLISH-* domainmetadata
Pieter Lexis [Thu, 7 Apr 2016 08:17:24 +0000 (10:17 +0200)]
Merge pull request #3657 from rgacogne/dnsdist-qps-doc
dnsdist: Clarify the doc for QPS-related rules and actions
Pieter Lexis [Thu, 7 Apr 2016 08:17:15 +0000 (10:17 +0200)]
Merge pull request #3659 from rgacogne/static-analysis-fixes
Various fixes from clang static analyzer, coverity and cppcheck
Pieter Lexis [Thu, 7 Apr 2016 08:16:59 +0000 (10:16 +0200)]
Merge pull request #3664 from pieterlexis/secpoll4a2
Secpoll additions for 4.0.0 alpha2
Pieter Lexis [Thu, 7 Apr 2016 08:16:54 +0000 (10:16 +0200)]
Merge pull request #3670 from Habbie/sedperl
replace non-portable sed usage with more portable perl usage
Pieter Lexis [Thu, 7 Apr 2016 08:16:43 +0000 (10:16 +0200)]
Merge pull request #3674 from mmckinst/tinydns_wildcards
remove experimental status of tinydns and add note about wildcards
Mark McKinstry [Wed, 6 Apr 2016 18:51:13 +0000 (14:51 -0400)]
tinydns no longer experimental
Mark McKinstry [Wed, 6 Apr 2016 18:49:25 +0000 (14:49 -0400)]
document differences in handling wildcards
Pieter Lexis [Wed, 6 Apr 2016 18:20:35 +0000 (20:20 +0200)]
Fix HTML output tinydns backend
Peter van Dijk [Wed, 6 Apr 2016 18:17:35 +0000 (20:17 +0200)]
Merge pull request #3661 from mmckinst/locations
make documentation align with code
Peter van Dijk [Tue, 5 Apr 2016 17:26:32 +0000 (19:26 +0200)]
replace non-portable sed usage with more portable perl usage
Peter van Dijk [Tue, 5 Apr 2016 15:03:02 +0000 (17:03 +0200)]
Merge pull request #3668 from gryphius/tll-typo
typo: TLL -> TTL (dnssec documentation)
Oli [Tue, 5 Apr 2016 15:00:16 +0000 (17:00 +0200)]
typo: TLL -> TTL
Pieter Lexis [Tue, 5 Apr 2016 13:44:47 +0000 (15:44 +0200)]
recursor: use relative paths for recuweb
This allows proxying multiple recursors on a single hostname, e.g. using
http://example.com/recursor1 and http://example.com/recursor2.
Kees Monshouwer [Fri, 18 Mar 2016 15:36:58 +0000 (16:36 +0100)]
expose CSK flags in secure zone output
#Please enter the commit message for your changes. Lines star
Kees Monshouwer [Fri, 18 Mar 2016 15:20:24 +0000 (16:20 +0100)]
set default ksk instead of zsk algorithm
Kees Monshouwer [Fri, 18 Mar 2016 15:19:48 +0000 (16:19 +0100)]
remove sep 'magic' in pdnsutil secure-zone
Kees Monshouwer [Fri, 18 Mar 2016 15:11:38 +0000 (16:11 +0100)]
adapt secure delegation test to new default signing algorithm
Kees Monshouwer [Fri, 18 Mar 2016 12:58:03 +0000 (13:58 +0100)]
pdnsutil: make ecdsa256 the default algorithm for add-zone-key and generate-zone-key
Pieter Lexis [Tue, 5 Apr 2016 08:03:21 +0000 (10:03 +0200)]
Add auth+rec 4 alpha2 secpoll data for pdns pkgs
Pieter Lexis [Tue, 5 Apr 2016 07:51:40 +0000 (09:51 +0200)]
Add / move existing alpha2 releases
Mark McKinstry [Mon, 4 Apr 2016 18:36:55 +0000 (14:36 -0400)]
make documentation align with code
The documentation says 'locations' is disabled by default but the [code enables it by default](https://github.com/PowerDNS/pdns/blob/
bb310f41bef9bbbfab2337c15e5ea280322acbae /modules/tinydnsbackend/tinydnsbackend.cc#L314)
The 'locations' option in tinydns does split horizon. If someone has location
records, they probably want them to be used by default and not have all records
returned.
Peter van Dijk [Mon, 4 Apr 2016 18:34:38 +0000 (20:34 +0200)]
Merge pull request #3660 from mmckinst/typo
typo/grammar
Mark McKinstry [Mon, 4 Apr 2016 18:23:43 +0000 (14:23 -0400)]
typo/grammar
bert hubert [Mon, 4 Apr 2016 18:13:21 +0000 (20:13 +0200)]
Merge pull request #3653 from ahupowerdns/tab-are-ws-too
tabs are whitespace too!
Remi Gacogne [Mon, 4 Apr 2016 12:35:07 +0000 (14:35 +0200)]
Various fixes from clang static analyzer, coverity and cppcheck
Most of them are simply about making sure that members are
properly initialized by all constructors, especially if there is a
default one. The initialization cost should be fairly small, and I
expect that turning a random failure into a deterministic one is
worth it.
Remi Gacogne [Mon, 4 Apr 2016 10:02:53 +0000 (12:02 +0200)]
dnsdist: Add a lock to MaxQPSIPRule
Otherwise we might crash when one thread inserts into the internal
map while another one is accessing it.
Reported by @rygl.
Remi Gacogne [Mon, 4 Apr 2016 10:01:21 +0000 (12:01 +0200)]
dnsdist: Clarify the doc for QPS-related rules and actions
Christian Hofstaedtler [Tue, 29 Dec 2015 13:17:32 +0000 (14:17 +0100)]
API: clean up cryptokeys resource
Treat domain not found as a normal not found; treat all keys
absent for single resource request as a normal not found;
return an object instead of a single-valued list for single
resource requests and rename "content" to "privatekey"
and don't re-read the key from the backend.
Also share UeberBackend with DNSSECKeeper to avoid extra
backend connection.
Christian Hofstaedtler [Sat, 2 Apr 2016 19:24:51 +0000 (21:24 +0200)]
Rename PUBLISH_* to PUBLISH-* domainmetadata
For consistency with all other domainmetadata settings names.
bert hubert [Sat, 2 Apr 2016 13:16:45 +0000 (15:16 +0200)]
tabs are whitespace too!
Kees Monshouwer [Fri, 1 Apr 2016 20:06:37 +0000 (22:06 +0200)]
Revert "Make pdns die on fatal error"
This reverts commit
ff1ac70002cc705285a58daf4dcb6ccbb4b7e312 .
Kees Monshouwer [Fri, 1 Apr 2016 20:06:17 +0000 (22:06 +0200)]
Revert "Add remark about not removing the throw"
This reverts commit
7da873e9210bdaff73e9b436a4d1657f19bae600 .
Kees Monshouwer [Fri, 1 Apr 2016 18:54:41 +0000 (20:54 +0200)]
Revert "Throw correct exception on temporary DB issue"
This reverts commit
90843c356a97b002983249a21a7530a091e3ea79 .
Remi Gacogne [Fri, 1 Apr 2016 14:37:18 +0000 (16:37 +0200)]
Merge pull request #3634 from rgacogne/dnsdist-dangling-tcp-fd
dnsdist: Prevent dangling TCP fd in case setupTCPDownstream() fails
Remi Gacogne [Fri, 1 Apr 2016 14:36:55 +0000 (16:36 +0200)]
Merge pull request #3641 from rgacogne/dnsdist-qps-none
dnsdist: Under threshold, QPS action should return None, not Allow
Pieter Lexis [Wed, 23 Mar 2016 15:09:36 +0000 (16:09 +0100)]
Add lowercase-outgoing tests
Pieter Lexis [Thu, 31 Mar 2016 14:20:59 +0000 (16:20 +0200)]
Update link in docs
Remi Gacogne [Wed, 30 Mar 2016 21:48:25 +0000 (23:48 +0200)]
dnsdist: Under threshold, QPS action should return None, not Allow
Closes #3638.
Remi Gacogne [Wed, 30 Mar 2016 16:12:03 +0000 (18:12 +0200)]
rec: Extract ECS even w/o gettag. Wake worker when exiting.
bert hubert [Wed, 30 Mar 2016 15:14:14 +0000 (16:14 +0100)]
Merge pull request #3639 from rgacogne/rec-protobuf
rec: Add protobuf support, add RPZ policy name
Remi Gacogne [Wed, 30 Mar 2016 14:59:51 +0000 (16:59 +0200)]
rec: Remove protobuf debug output
Remi Gacogne [Wed, 30 Mar 2016 14:48:30 +0000 (16:48 +0200)]
protobuf: add an "originalRequestorSubnet" field
Remi Gacogne [Wed, 30 Mar 2016 14:30:13 +0000 (16:30 +0200)]
rec: Add a name to DNSFilterEngine policy
Remi Gacogne [Wed, 30 Mar 2016 11:24:35 +0000 (13:24 +0200)]
rec: Add protobuf support
bert hubert [Wed, 30 Mar 2016 14:17:08 +0000 (16:17 +0200)]
this liberates the rapid ednssubnet parser in pdns_recursor for use for the protobuf emitter
bert hubert [Wed, 30 Mar 2016 13:10:05 +0000 (15:10 +0200)]
slightly improve RPZ documentation
Pieter Lexis [Tue, 29 Mar 2016 12:32:04 +0000 (14:32 +0200)]
dnsdist: Sync debian dir with downstream
This is synced as much as possible. With the exception of the service
file. We use the Type=simple and now disable logging to syslog (this way
all logs end up in the journal).
Closes #3367
Kees Monshouwer [Tue, 29 Mar 2016 12:02:07 +0000 (14:02 +0200)]
AXFR-out rectify: don't set odername for empty non-terminals only derived from glue
Remi Gacogne [Tue, 29 Mar 2016 12:49:50 +0000 (14:49 +0200)]
dnsdist: Prevent dangling TCP fd in case setupTCPDownstream() fails
Remove the closed socket descriptor from the sockets map.
Otherwise, if an exception occurs in setupTCPDownstream(), we might
try to use it and close it again later, not knowing it has been
reassigned to another socket or, worse, to a TCP acceptor pipe.