Commit Graph

122 Commits

Author SHA1 Message Date
wouter
88070f63e6 - Fix to fetch data as last resort more tenaciously. When cycle
targets cause the server selection to believe there are more options
	  when they really are not there, the server selection is reinitiated.
	- Fix fetch from blacklisted dnssec lame servers as last resort.  The
	  servers IP address is then given in validator errors as well.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2089 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-23 09:07:05 +00:00
wouter
c046d1d839 Fixed random numbers for port, interface and server selection.
Removed very small bias.
Also some lint fixes.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2049 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-18 14:42:22 +00:00
wouter
83d9bdb813 Stops blacklisting because of strange firewalls.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1987 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-18 11:21:11 +00:00
wouter
81d203550b A little more strict DS scrubbing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1986 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-18 09:47:08 +00:00
wouter
daae24a855 Scrub DNSKEY, DLV and DS much more stringently.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1985 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-17 16:50:04 +00:00
wouter
988cdf0808 work on prefetch: store the updated results in the cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1954 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-08 15:59:36 +00:00
wouter
2a29e7923e Doc fix and work on prefetch feature.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1951 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-07 14:38:18 +00:00
wouter
da1df74a83 more verbose output to describe lame addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1949 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-06 13:15:21 +00:00
wouter
02d69146e3 Answer qclass=ANY.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1938 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-15 09:10:04 +00:00
wouter
170bc60cb6 Fix lookup of domains with parent-child zonecut data differences.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-08 13:37:59 +00:00
wouter
404b2e7a85 Retry mode, DS and prime.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1860 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-07 07:52:02 +00:00
wouter
4ba1003f2c Data retry on validation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-06 08:31:47 +00:00
wouter
5d07c6ae3c revocation of trust anchors works.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1846 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-22 14:04:43 +00:00
wouter
b2e277f947 Fix problem with delegation where glue has expired.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1837 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-17 14:36:06 +00:00
wouter
9b56161dd9 Blacklist when 16 queries fail in a row.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1764 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-08-17 12:43:23 +00:00
wouter
344d6b7622 autotrust work
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1760 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-08-13 15:32:04 +00:00
wouter
00971e4abf Fixup lameness handling in server selection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1735 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-07-21 13:52:39 +00:00
wouter
827f9bfef1 forward command for unbound-control.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1482 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-02-13 15:26:37 +00:00
wouter
ee571fb378 more verbose about server selection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1400 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-12-18 11:27:57 +00:00
wouter
a5e0203b2e Fixup when all servers for a zone are offline.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1378 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-26 09:46:31 +00:00
wouter
23e0718a4b Ask more nameservers if choice is limited.
Lowered bogus-ttl to help validation-failure recovery times.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1313 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-20 14:24:35 +00:00
wouter
82587bbd9a Do not query bogus name servers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1312 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-20 13:51:47 +00:00
wouter
a4f3d3f025 Recursion lame is detected and last resort is used to resolve.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1294 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-13 09:11:42 +00:00
wouter
a2c3b61c68 0x20 fallback code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1285 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 14:46:22 +00:00
wouter
c8f39cf0a7 lookup delegation from cache and printout.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1266 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-23 10:55:36 +00:00
wouter
2e6ceb9d98 private address and private domain config option read and store.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1223 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-03 14:40:09 +00:00
wouter
71700f6a04 - Fixup rrset security updates overwriting 2181 trust status.
This makes validated to be insecure data just as worthless as
	  nonvalidated data, and 2181 rules prevent cache overwrites to them.
	- Fix assertion fail on bogus key handling.
	- dnssec lameness detection works on first query at trust apex.
	- NS queries get proper cache and dnssec lameness treatment.
	- fixup compilation without pthreads on linux.
	- NS queries are done after every referral.
	  validator is used on those NS records (if anchors enabled).




git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-12 10:13:57 +00:00
wouter
4ab789fdcf fixup for newegg lameness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1137 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-25 09:39:57 +00:00
wouter
186620d9cf RTT banding, more spoof resistance randomness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1019 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-03-25 15:33:24 +00:00
wouter
38c018e539 - setup speec_cache for need-ldns-testns in dotests.
- check number of queued replies on incoming queries to avoid overload
         on that account.
       - fptr whitelist checks are not disabled in optimize mode.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@971 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-20 07:18:42 +00:00
wouter
cf50a0bcb7 Faster due to time-sharing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-19 13:12:23 +00:00
wouter
e2ce21cf4d move around debug levels.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 09:46:49 +00:00
wouter
b649a1876b dnssec lame servers are used as last effort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@716 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-23 12:37:18 +00:00
wouter
0da3454c6f dnssec lameness detection improved to disable detection when not sure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@715 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-23 08:30:21 +00:00
wouter
67d2bad8e0 dnssec lame detection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@714 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-22 15:25:37 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
cb8f9eaa68 failover to next server.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@691 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 19:23:01 +00:00
wouter
e6d57f0ea1 resolution fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@682 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 07:34:13 +00:00
wouter
8d21fe77ca fixup addr6 check.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@677 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-15 14:42:37 +00:00
wouter
4d6bd257e2 fixup ip6 tcp.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@675 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-15 09:10:26 +00:00
wouter
a4478ad648 function pointer whitelist for module operations. completing fptr work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@661 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 12:42:25 +00:00
wouter
9b90ab87cd fixup glue timeout problems, and priming with safety belt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@622 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-19 12:17:42 +00:00
wouter
7ce3b06765 nsec3 work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-12 14:16:46 +00:00
wouter
4ee83871c3 Returns and caches validated replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 13:12:10 +00:00
wouter
e611b9335e please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@519 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-14 20:07:35 +00:00
wouter
2966588cd7 cycle detection fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@518 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-14 19:42:36 +00:00
wouter
f5c4688976 prime flag moved.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@470 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 12:59:37 +00:00
wouter
8dfb56272f query flags for detect cycle.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@469 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 11:29:12 +00:00
wouter
7c60b2026e cycle detection test. TODO items
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@454 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-26 10:04:05 +00:00
wouter
d7201ed226 cycle detection
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@452 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-26 09:29:21 +00:00
wouter
d9aac953ba cname chain caching (part).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@440 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-19 15:16:39 +00:00
wouter
ea2e3fdef0 shuffle NS selection randomly for getting addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@436 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-19 09:25:55 +00:00
wouter
00c08bc573 Do not query addresses and configuration.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@434 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-18 08:14:44 +00:00
wouter
418bac1638 Remove old forwarder mode, new @port option and tests ported over.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@432 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-17 15:26:45 +00:00
wouter
7729681ca8 forward zones.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@429 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-07-17 13:45:45 +00:00
wouter
b84cd979aa Do not select servers that are known to not give replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@427 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-27 13:26:32 +00:00
wouter
c61b71c7d2 fixup memory leak.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@426 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-27 11:12:58 +00:00
wouter
bb8770b8eb target fetch policy setting from config structure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@394 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-18 15:24:14 +00:00
wouter
6947de13ee ip6 functionality.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@376 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-07 15:04:27 +00:00
wouter
d7aa2d2d09 RA bit on in cached responses.
caches responses with CNAMEs corrected.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@375 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-07 14:20:23 +00:00
wouter
777fb87aa5 Tested serval targets, with CNAME's and indirection for recursion and
slumber list.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@374 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-07 13:21:04 +00:00
wouter
b3bf83c415 debug work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@371 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-05 15:04:01 +00:00
wouter
6f7a978c78 Prime response state, both root priming and stub priming handling.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@364 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-04 12:22:38 +00:00
wouter
09a50c0c31 Copy replyinfo routine.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@362 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-04 11:34:23 +00:00
wouter
2553be9532 Random nameserver selection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@361 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-04 09:57:02 +00:00
wouter
e7cd30c7d7 process_response, classify response, delegpt_from_message.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@359 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 20:24:33 +00:00
wouter
7eeeb162b0 conversion from parsed message to iterator region storage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@357 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 12:52:07 +00:00
wouter
e77f35a9af cleaner allocation code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@355 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-06-01 12:05:48 +00:00
wouter
ce582a4765 query targets state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@352 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-31 12:51:36 +00:00
wouter
af1c787ab9 iterator and dns cache work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@342 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-25 15:28:20 +00:00
wouter
e8b2e8ded2 root hints.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@335 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-23 14:05:36 +00:00
wouter
00352efb72 setup of state; delegation point setup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@334 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-05-23 09:34:01 +00:00