townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

292 Commits

Author SHA1 Message Date
wouter
ac4562081c - disable-dnssec-lame-check config option from Charles Walker. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3725 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-24 12:17:42 +00:00
ralph
c33ba2b2c4 - No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3722 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-20 14:04:27 +00:00
wouter
e99c41d4b6 - Fix #761: DNSSEC LAME false positive resolving nic.club. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3720 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-18 14:09:12 +00:00
ralph
dfff30e7ee - Validate QNAME minimised NXDOMAIN responses. 
- If QNAME minimisation is enabled, do cache lookup for QTYPE NS in
   harden-below-nxdomain.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3682 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-18 15:44:41 +00:00
ralph
8061e51f9b - Limit number of QNAME minimisation iterations. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3681 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-17 14:44:41 +00:00
wouter
4ecf673365 - Fix #746: Fix unbound sets CD bit on all forwards. 
If no trust anchors, it'll not set CD bit when forwarding to another
  server.  If a trust anchor, no CD bit on the first attempt to a
  forwarder, but CD bit thereafter on repeated attempts to get DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3679 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-17 14:01:59 +00:00
ralph
bc65e486f3 Don't minimise forwarded requests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3575 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-07 15:56:47 +00:00
ralph
a0364790ff Stop minimising after receiving rcode!=NOERROR 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3573 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-03 15:45:52 +00:00
ralph
a152692279 Keep incrementing QNAME after receiving throwaway answer. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3568 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-03 12:09:45 +00:00
ralph
d19a47950a Qname minimisation review fixes 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3561 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 13:14:00 +00:00
wouter
728daa8ef4 yacced,lexed, include for undeclared function and make depend. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3555 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-12-01 08:11:48 +00:00
ralph
481e89ca4c Implemented qname minimisation 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3554 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-30 16:10:26 +00:00
wouter
33c3822724 - spelling fixes from Igor Sobrado Delgado. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-18 14:11:46 +00:00
wouter
a2f75d6c35 - caps-whitelist in unbound.conf allows whitelist of loadbalancers 
that cannot work with caps-for-id or its fallback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-01 12:36:16 +00:00
wouter
f77c2a06f1 - Ratelimit does not apply to prefetched queries, and ratelimit-factor 
is default 10.  Repeated normal queries get resolved and with
  prefetch stay in the cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3399 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-16 14:18:50 +00:00
wouter
d5e5296e40 Fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 10:57:25 +00:00
wouter
7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be 
used to turn it on.  It ratelimits recursion effort per zone.
  For particular names you can configure exceptions in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-10 09:59:57 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 10:21:38 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-20 15:36:25 +00:00
wouter
e578b9a03d And use best response in case 0x20 fallback done. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3349 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:35:06 +00:00
wouter
798e778410 - store caps_response with best response in case downgrade response 
happens to be the last one.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:31:26 +00:00
wouter
a0c81b8339 - many nameservers does not try to compare more than max-sent-count, 
parse failures start 0x20 fallback procedure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 09:06:05 +00:00
wouter
2c4190b319 - 0x20 fallback improved, better handling of servfail responses, 
they do not count as missing comparisons (except if all are failed),
  and better handling of inability to find nameservers, no more
  nameservers can be found results in fallback acceptance.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3346 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-04 08:30:17 +00:00
wouter
674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional 
section changes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-30 09:35:38 +00:00
wouter
ad9a0833fe - print query name when max target count is exceeded. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3296 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-05 13:12:42 +00:00
wouter
c89cf11661 - Fix CVE-2014-8602: denial of service by making resolver chase 
endless series of delegations.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3289 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-12-08 15:09:18 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-19 08:43:08 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC 
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:15:57 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers 
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-06-24 08:24:28 +00:00
wouter
0b1ed0233c - Fix #558: failed prefetch lookup does not remove cached response 
but delays next prefetch (in lieu of caching a SERVFAIL).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3111 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-04-10 13:56:16 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 09:11:16 +00:00
wouter
884b06df55 Fix linking of sldns and ldns, unique identifiers for global variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3021 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-30 11:03:55 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more 
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:09:26 +00:00
wouter
e37c8fa8e9 - Fix #528: if very high logging (4 or more) segfault on allow_snoop. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2994 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-22 12:01:51 +00:00
wouter
ef7be2ae15 - Fix#516 dnssec lameness detection for answers that are improper. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2933 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-08 09:29:33 +00:00
wouter
bcb1b4b1da - Fix#501: forward-first does not recurse, when forward name is ".". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2907 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-06-10 12:25:10 +00:00
wouter
b838694589 - Fix queries leaking up for stubs and forwards, if the configured 
nameservers all fail to answer.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2882 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-11 10:08:34 +00:00
wouter
800da7f0fd - Fix forward-first option where it sets the RD flag wrongly. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2731 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-31 12:53:53 +00:00
wouter
f29947421f - implemented forward_first for the root. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2722 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-23 13:42:07 +00:00
wouter
4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes 
assertions in mesh.c resist duplicates.  Fixes DS NS search to
  not generate duplicate sub queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2718 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-20 13:08:19 +00:00
wouter
2a46be9b00 - code review: return value of cache_store can be ignored for better 
performance in out of memory conditions.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2704 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 14:18:41 +00:00
wouter
28727b8b02 - new approach to NS fetches for DS lookup that works with 
cornercases, and is more robust and considers forwarders.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2646 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-21 15:01:01 +00:00
wouter
e5d9f18a1c - fix to locate nameservers for DS lookup with NS fetches. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2645 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-19 15:44:21 +00:00
wouter
276300a61a - forward-first option. Tries without forward if a query fails. 
Also stub-first option that is similar.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2637 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-01 13:16:40 +00:00
wouter
5a7af9871a Fix prefetch and stickyness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-16 11:04:53 +00:00
wouter
6ffbc94b48 - iter_hints is now thread-owned in module env, and thus threadsafe. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2629 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-16 09:55:50 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL 
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-10 09:42:32 +00:00
wouter
a1f677fcac - Makefile changed for BSD make compatibility. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-10 18:44:06 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 15:46:23 +00:00
wouter
fbc5a3bf31 better sent count handling 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2500 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 14:15:13 +00:00
wouter
fe21693eb9 - max sent count. EDNS1480 only for rtt < 5000. No promiscuous 
fetch if sentcount > 3, stop query if sentcount > 16.  Count is
reset when referral or CNAME happens.  This makes unbound better
at managing large NS sets, they are explored when there is continued
interest (in the form of queries).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2499 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-16 14:11:12 +00:00
wouter
950c3c067c revert earlier commit. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2488 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-12 11:28:14 +00:00
wouter
c109a8828f - Fix operation in ipv6 only (do-ip4: no) mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-09-07 14:34:10 +00:00
wouter
97a89720c9 - Fix validation failures due to EDNS backoff retries, the retry 
for fetch of data has want_dnssec because the iter_indicate_dnssec
         function returns true when validation failure retry happens, and
         then the serviced query code does not fallback to noEDNS, even if
         the cache says it has this.  This helps for DLV deployment when
         the DNSSEC status is not known for sure before the lookup concludes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2483 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-26 09:00:43 +00:00
wouter
fb7fa5c347 - Fix prefetch so it does not get stuck on old server for moved names. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-13 10:13:01 +00:00
wouter
3925e949de - Fix insecure CNAME sequence marked as secure, reported by Bert Hubert. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-11 12:32:29 +00:00
wouter
fc57d16d98 - Fix bug when DLV below a trust-anchor that uses NSEC3 optout where 
the zone has a secure delegation hosted on the same server did not
         verify as secure (it was insecure by mistake).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:21:19 +00:00
wouter
66d2b51494 - bug#327: Fix for cannot access stub zones until the root is primed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-13 09:25:52 +00:00
wouter
911eba0f73 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled. 
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-20 13:30:41 +00:00
wouter
8774983f7d - Fix bug#321: resolution of rs.ripe.net artifacts with 0x20. 
Delegpt structures checked for duplicates always.
         No more nameserver lookups generated when depth is full anyway.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2219 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-19 13:00:21 +00:00
wouter
6f7205f522 add and fix doxygen comments for doxygen-1.7.1. (which reports lots of 
spurious items as well, by the way).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2211 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-13 08:41:49 +00:00
wouter
9cfff4e70d - Return NXDOMAIN after chain of CNAMEs ends at name-not-found. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-05 14:31:52 +00:00
wouter
34fef67b47 - Neat function prototypes, unshadowed local declarations. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2188 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-07 13:13:36 +00:00
wouter
bd2b31b430 - Fix to use one pointer less for iterator query state store_parent_NS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2150 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-15 09:47:11 +00:00
wouter
66f6318513 fix 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2146 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-11 14:24:25 +00:00
wouter
0aaf9f53aa - When retry to parent the retrycount is not wiped, so failed 
nameservers are not tried again.
       - iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2145 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-11 14:09:56 +00:00
wouter
53c0abfaef - Fix bug where a long loop could be entered, now cycle detection 
has a loop-counter and maximum search amount.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2144 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-10 14:10:17 +00:00
wouter
fe6503be38 - Fix storage of negative parent glue if that last resort fails. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 09:33:25 +00:00
wouter
1870cfe1d3 - fix parentside and querytargets modulestate, for dump_requestlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2123 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 14:01:32 +00:00
wouter
36c5a3f000 - parentside names are dispreferred but not said to be dnssec-lame. 
- parentside check for cached newname glue.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 13:03:58 +00:00
wouter
348f5baad7 parent-child misconfigured data lookup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-28 14:15:29 +00:00
wouter
f995351d40 - Fix resolution for domains like safesvc.com.cn. If the iterator 
can not recurse further and it finds the delegation in a state
         where it would otherwise have rejected it outhand if so received
         from a cache lookup, then it can try to ask higherup (with loop
         protection).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2113 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-19 12:55:49 +00:00
wouter
9d31e30c81 Fix various compiler warnings from the clang llvm compiler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2111 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-18 12:37:04 +00:00
wouter
f2596d95df - Fix dnssec-missing detection that was turned off by server selection. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2107 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-04 08:39:04 +00:00
wouter
c1dee8ad26 Fix harden-referral-path so it does not generate lookup failures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2101 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 14:15:19 +00:00
wouter
f335d4f2c4 - fix retry sequence if prime hints are recursion-lame. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2099 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 11:10:35 +00:00
wouter
82e5783f72 Fix bug#307: 0x20 fallback outstanding query count, together with rec_lame, 
and canonical rrset comparison.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2097 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 14:59:44 +00:00
wouter
88070f63e6 - Fix to fetch data as last resort more tenaciously. When cycle 
targets cause the server selection to believe there are more options
	  when they really are not there, the server selection is reinitiated.
	- Fix fetch from blacklisted dnssec lame servers as last resort.  The
	  servers IP address is then given in validator errors as well.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2089 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 09:07:05 +00:00
wouter
963cb57146 - Fix EDNS probe for .de DNSSEC testbed failure, where the infra 
cache timeout coincided with a server update, the current EDNS 
  backoff is less sensitive, and does not cache the backoff unless 
  the backoff actually works and the domain is not expecting DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2063 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-06 08:35:37 +00:00
wouter
5fb04b1a9c Move includes to code files. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2035 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-12 15:17:48 +00:00
wouter
519fa3bf67 remove unnecessary if statement 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2009 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-04 15:24:34 +00:00
wouter
2bef43a317 Nicer debug output. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1999 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-01 13:00:00 +00:00
wouter
81d203550b A little more strict DS scrubbing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1986 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-18 09:47:08 +00:00
wouter
daae24a855 Scrub DNSKEY, DLV and DS much more stringently. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1985 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-17 16:50:04 +00:00
wouter
ec60a8d2a2 fixup lookup trouble for parent-child domains on the first query. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1960 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-20 13:11:11 +00:00
wouter
caa4f084e3 prefetch-key feature. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1956 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-13 13:33:18 +00:00
wouter
988cdf0808 work on prefetch: store the updated results in the cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1954 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-08 15:59:36 +00:00
wouter
f8d114b2cc Fix parent child disagreement handling and no-ipv6 present. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1953 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-08 12:47:27 +00:00
wouter
2a29e7923e Doc fix and work on prefetch feature. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1951 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-07 14:38:18 +00:00
wouter
cf25644378 fixes and new ldns tarball. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-15 09:31:39 +00:00
wouter
02d69146e3 Answer qclass=ANY. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1938 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-15 09:10:04 +00:00
wouter
901335beb1 - Fix SOA excluded from negative DS responses. Reported by Hauke 
Lampe.  The negative cache did not include proper SOA records for
	  negative qtype DS responses which makes BIND barf on it, such
	  responses are now only used internally.
	- Fix negative cache lookup of closestencloser check of DS type bit.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1932 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-09 14:55:19 +00:00
wouter
170bc60cb6 Fix lookup of domains with parent-child zonecut data differences. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-08 13:37:59 +00:00
wouter
344beb095b review fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1897 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-10 16:02:05 +00:00
wouter
4ba1003f2c Data retry on validation failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-06 08:31:47 +00:00
wouter
b4a655b16e Failure handling for 5011. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1848 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-23 09:05:44 +00:00
wouter
b2e277f947 Fix problem with delegation where glue has expired. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1837 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-17 14:36:06 +00:00
wouter
911e4c0ce6 debug prints for high verbosity 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1830 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-15 14:03:44 +00:00
wouter
a36d0b554b Fixup for root prime requests sent when not needed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1736 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-07-23 13:21:42 +00:00