Commit Graph

45 Commits

Author SHA1 Message Date
wouter
ed00a97133 - Fix that DS queries with referral replies are answered straight
away, without a repeat query picking the DS from cache.
  The correct reply should have been an answer, the reply is fixed
  by the scrubber to have the answer in the answer section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4430 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-01-02 09:48:22 +00:00
wouter
60a7029fcd - Fix to rename internally used types from _t to _type, because _t
type names are reserved by POSIX.
- iana portlist update


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3989 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-01-19 10:25:41 +00:00
wouter
33c3822724 - spelling fixes from Igor Sobrado Delgado.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3544 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-18 14:11:46 +00:00
wouter
fb0d0537f1 Remove debug print.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3532 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-16 10:01:47 +00:00
wouter
34b59b59f4 - Fix for lenient accept of reverse order DNAME and CNAME.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3530 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-11-16 09:48:51 +00:00
wouter
9ee8380800 - Fix #677 Fix CNAME corresponding to a DNAME was checked incorrectly
and was therefore always synthesized (thanks to Valentin Dietrich).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3434 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-22 09:23:43 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-26 10:21:38 +00:00
wouter
62bd0e84f6 - Fix scrubber with harden-glue turned off to reject NS (and other
not-address) records.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3330 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-10 14:01:45 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 13:28:39 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-03 09:11:16 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-20 12:23:42 +00:00
wouter
e306a8f384 - Fix resolve of names that use a mix of public and private addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2868 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-03-22 09:36:33 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 09:42:32 +00:00
wouter
50a8288ce6 - Fix for VU#209659 CVE-2011-4528: Unbound denial of service
vulnerabilities from nonstandard redirection and denial of existence
http://www.unbound.net/downloads/CVE-2011-4528.txt
- robust checks for next-closer NSEC3s.
- tag 1.4.14 created.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2574 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-19 10:55:32 +00:00
wouter
2eb1b8dc1a - Fix that internally, CNAMEs with NXDOMAIN have that as rcode.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2478 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 12:11:54 +00:00
wouter
44008de0f5 Fix validation of qtype ANY responses with CNAMEs (thanks Cathy Zhang and Luo Ce).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2477 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 12:02:50 +00:00
wouter
58774c8fad - Fix remove private address does not throw away entire response.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2386 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-28 16:11:49 +00:00
wouter
0cfbe2d6e8 Force off bit Z.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2126 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-06-01 06:48:15 +00:00
wouter
1e3e59c54c - Fix AD flag handling, it could in some cases mistakenly copy the AD
flag from upstream servers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2120 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-31 07:36:01 +00:00
wouter
9d31e30c81 Fix various compiler warnings from the clang llvm compiler.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2111 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-18 12:37:04 +00:00
wouter
84a1dcfbd0 - More strict scrubber (Thanks to George Barwood for the idea):
NS set must be pertinent to the query (qname subdomain nsname).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2096 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-26 13:40:37 +00:00
wouter
4f32ae270c - Fix scrubber bug that potentially let NS records through. Reported
by Amanda Constant.
        - Also delete potential poison references from additional.
        - Fix: no classification of a forwarder as lame, throwaway instead.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1993 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-24 13:27:47 +00:00
wouter
eeaddb3e7a sun cc warnings
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1439 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-15 10:34:18 +00:00
wouter
e84409c12f fixes for suncc warnings
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1438 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-15 10:29:17 +00:00
wouter
2c963b173a Fixup decompression for private-name checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1334 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-06 10:59:31 +00:00
wouter
a955472a03 private-addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1224 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-04 12:25:15 +00:00
wouter
93bc414f1d Remove overreaching NSEC rrsets.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1207 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-26 10:32:46 +00:00
wouter
78070f7906 Same scrubber patch to trunk.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1181 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-07 07:31:05 +00:00
wouter
132abb0e9f if multiple CNAME's, use the first.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1109 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-08 09:27:48 +00:00
wouter
ef9fc699a2 Enforce presence of query section in reply.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1018 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-03-25 14:03:31 +00:00
wouter
cf50a0bcb7 Faster due to time-sharing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-19 13:12:23 +00:00
wouter
e2ce21cf4d move around debug levels.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 09:46:49 +00:00
wouter
42d5ed9d5c CNAME chain marked as NXDOMAIN normalized to unbound preferred format.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@783 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-28 09:13:56 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
7d0eebff1d check section.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@485 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 09:16:16 +00:00
wouter
0a3e583270 Fixup scrubber and lameness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@478 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 11:44:17 +00:00
wouter
df236df90b remove warning.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@455 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-26 11:35:38 +00:00
wouter
a161bfbed7 Option to disable sanitize (normalize is still active), speeds up. But
some spoofing scenarios become possible. Default is the safe method.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@443 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-20 09:12:06 +00:00
wouter
ccc40ef7c0 fixup CNAME generated by scrubber.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@403 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-20 08:55:00 +00:00
wouter
777fb87aa5 Tested serval targets, with CNAME's and indirection for recursion and
slumber list.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@374 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-07 13:21:04 +00:00
wouter
b3bf83c415 debug work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@371 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-05 15:04:01 +00:00
wouter
7eeeb162b0 conversion from parsed message to iterator region storage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@357 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 12:52:07 +00:00
wouter
f1dfcd6207 scrubbing routines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@354 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 09:42:31 +00:00
wouter
906449f7de scrubber work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@353 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-31 14:57:24 +00:00