Commit Graph

686 Commits

Author SHA1 Message Date
wouter
8c62cad20d - Fix #677 Fix DNAME responses from cache that failed internal chain
test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3435 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-06-26 07:27:32 +00:00
wouter
a2f75d6c35 - caps-whitelist in unbound.conf allows whitelist of loadbalancers
that cannot work with caps-for-id or its fallback.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3420 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-05-01 12:36:16 +00:00
wouter
00288bc5e8 please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3411 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-23 14:04:46 +00:00
wouter
9763997a7c - Synthesize ANY responses from cache. Does not search exhaustively,
but MX,A,AAAA,SOA,NS also CNAME.
- Fix leaked dns64prefix configuration string.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3405 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-17 14:58:07 +00:00
wouter
31a8018d22 - Add local-zone type inform_deny, that logs query and drops answer.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3398 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-16 08:23:06 +00:00
wouter
3971970fa9 fixes for undeclared function.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3394 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 12:19:30 +00:00
wouter
79c9a936cb - unbound-control ratelimit_list lists high rate domains.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3393 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 12:13:59 +00:00
wouter
d5e5296e40 Fixes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3392 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 10:57:25 +00:00
wouter
7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be
used to turn it on.  It ratelimits recursion effort per zone.
  For particular names you can configure exceptions in unbound.conf.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3391 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-10 09:59:57 +00:00
wouter
5b8cd39902 - Fix crash in dnstap: Do not try to log TCP responses after timeout.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3390 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-04-08 19:58:06 +00:00
wouter
3bf5307254 Fixup rrset unlock in case of allocation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3381 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-26 13:15:55 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-26 10:21:38 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-20 15:36:25 +00:00
wouter
257bd1e4e6 fixup compiler warning on OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3371 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-19 14:47:42 +00:00
wouter
6478a1cbfd - Add ip-transparent config option for bind to non-local addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3369 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-03-19 09:50:35 +00:00
wouter
a4674309ba - Portability to Solaris 10, use AF_LOCAL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3339 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-02-20 13:55:09 +00:00
wouter
10e38ef90d - Portability fix for Solaris ('sun' is not usable for a variable).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3326 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-30 15:32:59 +00:00
wouter
3e99e99773 Fixup control socket test for OSX.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3320 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-23 16:00:33 +00:00
wouter
5154b3406d - windows port fixes, no AF_LOCAL, no chown, no chmod(grp).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3319 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-23 15:23:58 +00:00
wouter
a5bed77fec - Cast sun_len sizeof to socklen_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3312 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-12 08:20:43 +00:00
wouter
2fa6bb55ef please lint on FreeBSD
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3308 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:49:34 +00:00
wouter
5387d573cf please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3305 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:18:03 +00:00
wouter
9537cdfccf - patch for remote control over local sockets, from Dag-Erling
Smorgrav, Ilya Bakulin.  Use control-interface: /path/sock and
  control-use-cert: no.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3304 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-06 14:12:59 +00:00
wouter
a1a735dcde - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores missing
IP_MTU_DISCOVER OMIT option.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3298 be551aaa-1e26-0410-a405-d3ace91eadb9
2015-01-05 13:51:22 +00:00
wouter
b1061c10c8 - local-zone: example.com inform makes unbound log a message with
client IP for queries in that zone.  Eg. for finding infected hosts.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3292 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-12-09 11:29:17 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-19 08:43:08 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-11-18 15:15:57 +00:00
wouter
275b0360d4 More casts.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3244 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-13 09:23:12 +00:00
wouter
def3dfd114 More unsigned chasts for toupper/tolower/ctype
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3242 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-10-13 08:35:00 +00:00
wouter
7383fe8a62 - Updated the TCP_BACLOG from 5 to 256, so that the tcp accept queue
is longer and more tcp connections can be handled.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3224 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-16 13:49:21 +00:00
wouter
7352e5d7cc - Fix tcp timer waiting list removal code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3222 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-09-16 13:08:27 +00:00
wouter
06a86a6126 remove warning.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3213 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-22 13:38:30 +00:00
wouter
d74c01b712 - dnstap support, with a patch from Farsight Security, written by
Robert Edmonds. The --enable-dnstap needs libfstrm and protobuf-c.
  It is BSD licensed (see dnstap/dnstap.c).
  Building with --enable-dnstap needs pkg-config with this patch.
- Noted dnstap in doc/README and doc/CREDITS.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3206 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-08-05 07:57:52 +00:00
wouter
f8f0117ea9 - DNS64 from Viagenie (BSD Licensed), written by Simon Perrault.
Initial commit of the patch from the FreeBSD base (with its fixes).
  This adds a module (for module-config in unbound.conf) dns64 that
  performs DNS64 processing, see README.DNS64.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3198 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-07-31 07:15:33 +00:00
wouter
b3c4bac3da - so-reuseport is available on BSDs(such as FreeBSD 10) and OS/X.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3153 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-27 14:11:57 +00:00
wouter
c9c7f29161 - Fix caps-for-id fallback, and added fallback attempt when servers
drop 0x20 perturbed queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3146 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-06-24 08:24:28 +00:00
wouter
8d9d4eea91 - Feature, unblock-lan-zones: yesno that you can use to make unbound
perform 10.0.0.0/8 and other reverse lookups normally, for use if
  unbound is running service for localhost on localhost.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3133 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-20 10:38:32 +00:00
wouter
af4857922e - Implement draft-ietf-dnsop-rfc6598-rfc6303-01.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3129 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-05-09 14:33:10 +00:00
wouter
7de5b0ec61 - Fix #545: improved logging, the ip address of the error is printed
on the same log-line as the error.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3112 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 14:40:20 +00:00
wouter
0b1ed0233c - Fix #558: failed prefetch lookup does not remove cached response
but delays next prefetch (in lieu of caching a SERVFAIL).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3111 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 13:56:16 +00:00
wouter
7a5bad49e3 - unbound-control stats prints num.query.tcpout with number of TCP
outgoing queries made in the previous statistics interval.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3108 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 09:13:58 +00:00
wouter
e17025eee3 - Patch from Hannes Frederic Sowa for Linux 3.15 fragmentation
option for DNS fragmentation defense.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3107 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-04-10 08:35:45 +00:00
matje
7b88f8ede8 only whitespace changes
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3088 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-18 13:54:19 +00:00
wouter
9e39b4d2ff And starts service on Minix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3084 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-14 09:50:25 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-02-07 13:28:39 +00:00
wouter
5ad20035bd - delay-close does not act if there are udp-wait queries, so that
it does not make a socketdrain DoS easier.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3059 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-30 09:27:00 +00:00
wouter
d1cb31280e - delay-close: msec option that delays closing ports for which
the UDP reply has timed out.  Keeps the port open, only accepts
  the correct reply.  This correct reply is not used, but the port
  is open so that no port-denied ICMPs are generated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3058 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-28 14:35:55 +00:00
wouter
1315093384 - reuseport is attempted, then fallback to without on failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3054 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-27 10:27:19 +00:00
wouter
f8b0477cce Remove warnings on BSD systems.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3053 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 15:15:37 +00:00
wouter
03da1e8f35 - made lint clean.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3050 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 13:23:45 +00:00
wouter
36afba318e - so-reuseport: yesno option to distribute queries evenly over
threads on Linux (Thanks Robert Edmonds).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3049 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 11:43:38 +00:00
wouter
2920d0fa82 - speed up unbound (reports say it could be up to 10%), by reducing
lock contention on localzones.lock.  It is changed to an rwlock.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3048 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-24 11:21:15 +00:00
wouter
511cfd92df - Windows port, adjust %lld to %I64d, and warning in win_event.c.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3040 be551aaa-1e26-0410-a405-d3ace91eadb9
2014-01-16 16:01:37 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-12-03 09:11:16 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
61ef2ac265 - Set SO_REUSEADDR so that the wildcard interface and a more specific
interface port 53 can be used at the same time, and one of the
  daemons is unbound.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2996 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:06:11 +00:00
wouter
658bd3bcf8 - review fixes from Willem.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2945 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-22 14:10:29 +00:00
wouter
b492e89a4d - more fixes that I overlooked.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2944 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-22 07:33:51 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-20 12:23:42 +00:00
wouter
ef7be2ae15 - Fix#516 dnssec lameness detection for answers that are improper.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2933 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-08-08 09:29:33 +00:00
wouter
05e58e752c - Fix#500 use of non-initialised values on socket bind failures.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2901 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-05-16 08:14:03 +00:00
wouter
afab0bf6b0 ifs for portability with NSS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2853 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-02-22 15:16:27 +00:00
wouter
01aedc3205 fix potential uninit variables.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2829 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-29 12:58:50 +00:00
matje
f9aea48aa7 review, found nothing, except for layout and typo
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2785 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-12-03 14:28:06 +00:00
wouter
62c729d59e - Fallback to 1472 and 1232, one fragment size without headers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2746 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-22 08:46:30 +00:00
wouter
8f83f70712 - Fix timeouts so that when a server has been offline for a while
and is probed to see it works, it becomes fully available for
  server selection again.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2745 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-08-21 07:17:48 +00:00
wouter
a77e89f1d0 - Fix that enables modules to register twice for the same
serviced_query, without race conditions or administration issues.
  This should not happen with the current codebase, but it is robust.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2730 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-31 11:33:06 +00:00
wouter
4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes
assertions in mesh.c resist duplicates.  Fixes DS NS search to
  not generate duplicate sub queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2718 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-07-20 13:08:19 +00:00
wouter
e3f937a68c Fix compilation without SSL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2698 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-22 09:11:41 +00:00
wouter
ec417b19da code review.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2688 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-18 14:22:29 +00:00
wouter
9c0e95b8a2 - bug #452: fix crash on assert in mesh_state_attachment.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2683 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-06-11 12:04:58 +00:00
wouter
225b292ce7 - Fix for accept spinning reported by OpenBSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2663 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-05-08 12:08:55 +00:00
wouter
c730f8194f - Fix to squelch 'network unreachable' errors from tcp connect in
logs, high verbosity will show them.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2634 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-23 09:01:46 +00:00
wouter
5a7af9871a Fix prefetch and stickyness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-16 11:04:53 +00:00
wouter
f467fc9b41 lint and doxygen fixes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2631 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-16 10:08:07 +00:00
wouter
4c9275628a - Fix sticky NS (ghost domain problem) if prefetch is yes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2619 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-14 11:06:44 +00:00
wouter
257ec6f755 debug infra lines for infa timeout counters.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2616 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 14:48:09 +00:00
wouter
c8396f3878 - Fix timeouts to keep track of query type, A, AAAA and other, if
another has caused timeout blacklist, different type can still probe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2613 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 12:17:25 +00:00
wouter
575e9face7 - Slightly smaller critical region in one case in infra cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2611 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-10 09:21:06 +00:00
wouter
23acd425f0 - Fix validation failures (like: validation failure xx: no NSEC3
closest encloser from yy for DS zz. while building chain of trust,
         because of a bug in the TTL-fix in 1.4.15, it picked the wrong rdata
         for an NSEC3.  Now it does not change rdata, and fixes TTL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2599 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-02-01 11:18:07 +00:00
wouter
63cfba3607 - uninitialised variable in reprobe for rtt blocked domains fixed.
- lintfix and new flex output.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2583 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 15:07:16 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
2012-01-10 09:42:32 +00:00
wouter
40900e9e41 - Fix for memory leak (about 20 bytes when a tcp or udp send
operation towards authority servers failed, takes about 50.000
such failures to leak one Mb, such failures are also
usually logged), reported by Robert Fleischmann.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2578 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-24 11:27:53 +00:00
wouter
035362e901 fix infra cache comparison.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2570 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-12-13 12:14:40 +00:00
wouter
6e6171f9ae - Fix for tcp-upstream and ssl-upstream for if a laptop sleeps,
causes SERVFAILs.  Also fixed for UDP (but less likely).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2559 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-30 13:39:11 +00:00
wouter
a1f677fcac - Makefile changed for BSD make compatibility.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2544 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-10 18:44:06 +00:00
wouter
1b8de9916c ssl_port setting, so that the dnssec-trigger server can be on one host machine.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2539 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-08 10:56:42 +00:00
wouter
2fb3a6c04f fix tests, the ssl upstream setting is per-query (inside outside_network.c).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2535 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 10:18:56 +00:00
wouter
a7ef3f7bc4 support for ssl-upstream (works from unbound-control).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2532 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-11-01 09:26:58 +00:00
wouter
1f9e9b78fe - dns over ssl support, ssl-service-pem and ssl-service-key files
can be given and then TCP queries are serviced wrapped in SSL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2530 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-31 14:48:48 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-26 15:46:23 +00:00
wouter
f33c5178d7 - Fix make_new_space function so that the incoming query is not
overwritten if a jostled out query causes a waiting query to be
  resumed that then fails and sends an error message.  (Thanks to
  Matthew Lee).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2523 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-24 13:49:59 +00:00
wouter
5e9f5cad61 - better documentation for inform_super (Thanks Yang Zhe).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2512 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-10-17 13:11:58 +00:00
wouter
446aecff27 - TCP-upstream calculates tcp-ping so server selection works if there
are alternatives.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2502 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-23 12:56:28 +00:00
wouter
fe21693eb9 - max sent count. EDNS1480 only for rtt < 5000. No promiscuous
fetch if sentcount > 3, stop query if sentcount > 16.  Count is
reset when referral or CNAME happens.  This makes unbound better
at managing large NS sets, they are explored when there is continued
interest (in the form of queries).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2499 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 14:11:12 +00:00
wouter
4297794a18 fixup compilation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2498 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 12:43:07 +00:00
wouter
fac34aa3d7 - fix various compiler warnings (reported by Paul Wouters).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2497 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 11:35:01 +00:00
wouter
07375399e5 fix EDNS1480.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2496 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-16 10:04:08 +00:00
wouter
10bc80283d fix memleak and add edns section when 1480 probe.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2493 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-15 15:35:04 +00:00
wouter
22e627c381 After UDP timeout EDNS1480 probe, stop fragmentation caused trouble.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2492 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-15 14:32:17 +00:00
wouter
950c3c067c revert earlier commit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2488 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-09-12 11:28:14 +00:00
wouter
97a89720c9 - Fix validation failures due to EDNS backoff retries, the retry
for fetch of data has want_dnssec because the iter_indicate_dnssec
         function returns true when validation failure retry happens, and
         then the serviced query code does not fallback to noEDNS, even if
         the cache says it has this.  This helps for DLV deployment when
         the DNSSEC status is not known for sure before the lookup concludes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2483 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-26 09:00:43 +00:00
wouter
a28362a7fc tcp upstream option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2480 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-08-22 13:58:40 +00:00
wouter
9dd4ca67ba - Unbound implements RFC6303 (since version 1.4.7).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2463 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-14 08:17:11 +00:00
wouter
9461231d6b - fix replyaddr count wrong after jostled queries, which leads to
eventual starvation where the daemon has no replyaddrs left to use.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2445 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-06-30 11:01:44 +00:00
wouter
923921f02d - feature, ignore-cd-flag: yesno to provide dnssec to legacy servers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2414 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-05-10 11:20:14 +00:00
wouter
b25dcb3a41 - iana portlist updated.
- queries with CD flag set cause DNSSEC validation, but the answer is
  not withheld if it is bogus.  Thus, unbound will retry if it is bad
  and curb the TTL if it is bad, thus protecting the cache for use by
  downstream validators.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2409 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-04-08 13:58:41 +00:00
wouter
ca7c48625c - harden-below-nxdomain: changed so that it activates when the
cached nxdomain is dnssec secure.  This avoids backwards
         incompatibility because those old servers do not have dnssec.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2407 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-03-29 09:47:54 +00:00
matje
ae85bac0d9 nicely outlined
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2378 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-17 13:59:07 +00:00
wouter
6bb90cd285 fix
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2376 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-14 15:58:05 +00:00
wouter
6f49bcb6d9 and store bogus ttl (this is not picked out of the cache to send to, so saves work and avoids this target)
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2375 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-14 15:51:11 +00:00
wouter
4a7e7c3a2b store if ttl expired
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2374 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-14 15:23:51 +00:00
wouter
e40c702c96 - Fix so a changed NS RRset does not get moved name stuck on old
server, for type NS the TTL is not increased.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2373 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-01-14 13:56:25 +00:00
wouter
9a2bf1bb83 - Fix in infra cache that could cause rto larger than TOP_TIMEOUT kept.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2361 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-12-23 10:49:47 +00:00
wouter
e38d9b641a Fix compile on WinXP.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2352 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-12-15 14:44:04 +00:00
wouter
6ec3338023 - feature typetransparent localzone, does not block other RR types.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2350 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-12-02 12:39:33 +00:00
wouter
3bc987f0d0 - Fix bug#338: print address when socket creation fails.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2349 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-12-01 09:59:39 +00:00
wouter
72de97c816 Fix storage of noEDNS in the infra cache.
iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2348 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-30 12:55:48 +00:00
wouter
b5252fabaa harden-below-nxdomain option taken from draft-vixie-dnsext-resimprove.
Default off (for now), as some older software that gives nxdomain for ENT
would be incompatible.  But that would only happen in the reverse tree, and
such software (nonDNSSEC) may go out of style, so in the future a default yes
could be possible.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2347 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-18 08:49:15 +00:00
wouter
49067d5c18 - implement draft-vixie-dnsext-resimprove-00, we stop on NXDOMAIN.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2345 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-17 10:02:34 +00:00
wouter
3709f579a0 - so-sndbuf option for very busy servers, a bit like so-rcvbuf.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2344 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-15 14:30:34 +00:00
wouter
fe16a014a3 - do not synthesize a CNAME message from cache for qtype DS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2335 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-05 15:29:50 +00:00
wouter
87de02a9f0 - Change the rtt used to probe EDNS-timeout hosts to 1000 msec.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2329 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-11-03 09:06:49 +00:00
wouter
d71a3cf1ca nicer output from debug commands
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2314 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-27 08:09:22 +00:00
wouter
127bb0f5f7 subtract 1000 so it is more than the RTT_BAND
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2313 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 15:41:23 +00:00
wouter
7b804dfd28 fix for top reuse
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2312 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 15:28:01 +00:00
wouter
682e6f70c0 - Change of timeout code. No more lost and backoff in blockage.
At 12sec timeout (and at least 2x lost before) one probe per IP
  is allowed only.  At 120sec, the IP is blocked.  After 15min, a
  120sec entry has a single retry packet.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2311 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 15:02:08 +00:00
wouter
dcd8a97b63 neater API for unbound-control lookup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2310 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 13:43:28 +00:00
wouter
ef38180e0e remove lost and backoff values.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2309 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 13:30:37 +00:00
wouter
786b9481fa dump_infra and flush_infra commands for unbound-control.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2306 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-26 09:08:33 +00:00
wouter
c126a3de01 - Fix bug where fallback_tcp causes wrong roundtrip and edns
observation to be noted in cache.  Fix bug where EDNSprobe halted
  exponential backoff if EDNS status unknown.
- new unresponsive host method, exponentially increasing block backoff.
- iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2303 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-21 15:11:39 +00:00
wouter
f1229492aa lint
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2302 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-20 10:14:12 +00:00
wouter
aac0ddc27b Jostle time used to estimate roundtrip.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2301 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-20 08:19:05 +00:00
wouter
0a2b76bc0e Enable interface-automatic for people for whom it works.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2300 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-20 05:36:00 +00:00
wouter
b8349423f9 Fix for request list growth.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2298 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-19 14:53:29 +00:00
wouter
4f575ff3dc - Fix TCP so it uses a random outgoing-interface.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2280 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-13 08:52:29 +00:00
wouter
aaefd15a0d addr_is_any
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2279 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-13 07:59:55 +00:00
wouter
18bbcaea97 - compliance with draft-ietf-dnsop-default-local-zones-14, removed
reverse ipv6 orchid prefix from builtin list.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2240 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-22 06:53:32 +00:00
wouter
b9f844650b - increased mesh-max-activation from 1000 to 3000 for crazy domains
like _tcp.slb.com with 262 servers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2229 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-14 08:27:23 +00:00
wouter
911eba0f73 - openbsd-lint fixes: acl_list_get_mem used if debug-alloc enabled.
iterator get_mem includes priv_get_mem.  delegpt nodup removed.
  listen_pushback, query_info_allocqname, write_socket, send_packet,
  comm_point_set_cb_arg and listen_resume removed.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2222 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-20 13:30:41 +00:00
wouter
2bea7f3666 patch for Gunter bug321
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2218 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-18 16:53:56 +00:00
wouter
4454cb499b - Fix integer underflow in prefetch ttl creation from cache. This
fixes a potential negative prefetch ttl.
-This line, and those below, will be ignored--

M    trunk/services/cache/dns.c
M    trunk/doc/Changelog


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2198 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-07-14 11:13:30 +00:00
wouter
34fef67b47 - Neat function prototypes, unshadowed local declarations.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2188 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-07-07 13:13:36 +00:00
wouter
6bcdb68292 - Fix the max number of reply-address count
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2171 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-06-28 12:50:04 +00:00
wouter
0c64df2802 - Fix jostle list bug found by Vince (luoce@cnnic), it caused the qps
in overload situations to be about 5 qps for the class of shortly
  serviced queries.
  The capacity of the resolver is then about (numqueriesperthread / 2)
  / (average time for such long queries) qps for long queries.
  And about (numqueriesperthread / 2)/(jostletimeout in whole seconds)
  qps for short queries, per thread.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2170 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-06-28 11:42:21 +00:00
wouter
53c0abfaef - Fix bug where a long loop could be entered, now cycle detection
has a loop-counter and maximum search amount.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2144 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-06-10 14:10:17 +00:00
wouter
7fe8c97a14 - fix parentside from cache to be marked dispreferred for bad names.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2125 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-31 14:39:45 +00:00
wouter
348f5baad7 parent-child misconfigured data lookup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-28 14:15:29 +00:00
wouter
c5274f7a89 - EDNS timeout code will not fire if EDNS status already known.
- EDNS failure not stored if EDNS status known to work.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2115 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-21 11:00:35 +00:00
wouter
6fde84b695 - Conforms to draft-ietf-dnsop-default-local-zones-13. Added default
reverse lookup blocks for IPv4 test nets 100.51.198.in-addr.arpa,
  113.0.203.in-addr.arpa and Orchid prefix 0.1.1.0.0.2.ip6.arpa.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2108 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-05-04 10:50:27 +00:00
wouter
0d24f0ba28 - infra cache entries that are expired are wiped clean. Previously
it was possible to not expire host data (if accessed often).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2106 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-29 14:12:54 +00:00
wouter
1c1bb2f5b2 - Fix local-zone type redirect that did not use the query name for
the answer rrset.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2092 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-23 14:03:09 +00:00
wouter
9e89643098 Includes for BSD4.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2080 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-15 14:53:55 +00:00
wouter
963cb57146 - Fix EDNS probe for .de DNSSEC testbed failure, where the infra
cache timeout coincided with a server update, the current EDNS 
  backoff is less sensitive, and does not cache the backoff unless 
  the backoff actually works and the domain is not expecting DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2063 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-04-06 08:35:37 +00:00
wouter
c046d1d839 Fixed random numbers for port, interface and server selection.
Removed very small bias.
Also some lint fixes.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2049 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-18 14:42:22 +00:00
wouter
4d7c34aa21 Check for SENDSRCADDR socket option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2041 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-16 15:11:58 +00:00
wouter
5fb04b1a9c Move includes to code files.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2035 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-12 15:17:48 +00:00
wouter
b56108adb3 list_local_zones and list_local_data.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1996 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-26 16:14:00 +00:00
wouter
daae24a855 Scrub DNSKEY, DLV and DS much more stringently.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1985 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-02-17 16:50:04 +00:00
wouter
ec60a8d2a2 fixup lookup trouble for parent-child domains on the first query.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1960 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-20 13:11:11 +00:00
wouter
988cdf0808 work on prefetch: store the updated results in the cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1954 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-08 15:59:36 +00:00
wouter
2a29e7923e Doc fix and work on prefetch feature.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1951 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-01-07 14:38:18 +00:00
wouter
be8e226e7f on IPv4 UDP turn off DF flag.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1937 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-11 16:02:49 +00:00
wouter
896fec5041 Specify port number in interface lines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1930 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-08 16:31:56 +00:00
wouter
170bc60cb6 Fix lookup of domains with parent-child zonecut data differences.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-08 13:37:59 +00:00
wouter
392be2fc9d Fix bug#287.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1926 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-12-07 09:18:38 +00:00
wouter
a122bc0d8b fixup spinning
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1919 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-11-23 12:12:59 +00:00
wouter
4644da1cac please lint on FreeBSD6
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1889 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-11-05 11:12:06 +00:00
wouter
4debdd93e8 lint fixes on FreeBSD 7.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1888 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-11-05 10:39:12 +00:00
wouter
bb78771cf3 please doxygen.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1883 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-29 12:55:26 +00:00
wouter
d55ef3d18c do-udp: no fixed.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1882 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-29 12:11:38 +00:00
wouter
7acf38ac32 - Made new validator error string available from libunbound for
applications.  It is in result->why_bogus, a zero-terminated string.
	  unbound-host prints it by default if a result is bogus.
	  Also the errinf is public in module_qstate (for other modules).
	Binary API different. bumped library ABI version.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1874 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-08 17:05:53 +00:00
wouter
4ba1003f2c Data retry on validation failure.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-06 08:31:47 +00:00
wouter
e64f6a9b3a so-rcvbuf option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1851 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-25 08:54:50 +00:00
wouter
911e4c0ce6 debug prints for high verbosity
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1830 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-15 14:03:44 +00:00
wouter
8a4b3d5fbe Fixup TTL too large bug for bogus responses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1822 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-09-10 10:01:36 +00:00
wouter
9b56161dd9 Blacklist when 16 queries fail in a row.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1764 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-08-17 12:43:23 +00:00
wouter
d98badb72f Linux IPv6 large response support.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1689 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-29 13:47:48 +00:00
wouter
c905613359 Fixup for EDNS probe (neater than patch on mailing list).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1684 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-26 13:15:06 +00:00
wouter
6d1db4997a check messages taken from cache, also in iterator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1662 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-16 12:03:41 +00:00
wouter
08907d0c37 Check right value.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1655 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-12 14:16:13 +00:00
wouter
e666a96c36 mesh callbacks review, call error if deleted unfulfilled, check fptr wlist.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1652 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-12 07:53:36 +00:00
wouter
cb323a70bd Fixed potential wrong NSEC, but the bug could not be triggered. Unit test
added anyway.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1651 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-12 07:23:04 +00:00
wouter
0c767fe130 review comments Matthijs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1637 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-06-03 08:06:42 +00:00
wouter
ff19dc8550 Removed debug statement.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1627 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-05-27 12:28:23 +00:00
wouter
f658d87d6b change in debug statements.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1625 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-05-27 11:27:41 +00:00
wouter
cfc0a74269 Fix IPv6 detection on XP.
Fix loop to service on quit when there are messages waiting.

git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1624 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-05-27 08:24:19 +00:00
wouter
d24b90660c Windows handle leakage fixes: closesocket or else the networkstack leaks handles (for ever, even after closing the application), and use own mutex implementation (whee!).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1622 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-29 15:23:08 +00:00
wouter
fbe57f54f9 FreeBSD jail detect IPv6 not accessible.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1586 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-06 10:20:08 +00:00
wouter
122d5b762b - Fixed a bug that caused messages to be stored in the cache too
long.  Hard to trigger, but NXDOMAINs for nameservers or CNAME
	  targets have been more vulnerable to the TTL miscalculation bug. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1582 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-03 13:49:40 +00:00
wouter
b81c648acf new libunbound calls documented.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1571 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-01 12:57:13 +00:00
wouter
3fc7e522d9 nicer -h output
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1562 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-03-27 13:09:00 +00:00
wouter
3f805f0c3d python work
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1561 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-03-26 15:47:45 +00:00
wouter
a93beb8c1c python contribution from Zdenek Vasicek and Marek Vavrusa (BSD licensed).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1556 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-03-25 14:47:47 +00:00
wouter
9bd4eaf514 Neater configure and no double config.h includes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1545 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-03-24 10:42:57 +00:00
wouter
0f9150254e Memory leak fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1512 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-03-05 08:19:52 +00:00
wouter
7dfde6d5cb more cycle checks.
fix for reentrant problem.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1485 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-02-18 13:23:17 +00:00
wouter
5e2773f065 flush_requestlist feature for unbound-control.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1479 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-02-12 13:21:19 +00:00
wouter
228033d171 1.2.1 feature: stop AAAA queries that are not needed.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1431 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-13 15:57:42 +00:00
wouter
3f82859368 fix bug
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1426 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-13 10:44:04 +00:00
wouter
bd2885ef6c lameness debugging.
fix for lameness hashing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1425 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-12 09:22:39 +00:00
wouter
9cced4fbe6 fixup transparent zone answers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1409 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-06 13:51:12 +00:00
wouter
db01af85bf Fixup BSD port.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1401 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-12-18 14:11:34 +00:00
wouter
2da85eb762 unbound-control status command.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1395 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-12-17 14:03:49 +00:00
wouter
7899ee9c67 fixup remote control so most commands work in nonthreaded environment.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1382 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-12-03 15:20:56 +00:00
wouter
55b1c9928d Fixup for problems with do-ip6: no and only ipv6 addresses.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1353 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-17 12:47:34 +00:00
wouter
fa8d306386 Elusive bad-file-descriptor error caught.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1333 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-05 14:56:49 +00:00
wouter
ba1299b375 fixup memleaks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1331 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-05 10:38:22 +00:00
wouter
d0b7ea1e50 write-strings warnings fixed.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1330 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-04 14:53:50 +00:00
wouter
04ffe11ee9 unwanted reply threshold like in the draft.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1321 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-22 14:36:46 +00:00
wouter
a3f550e8f6 Fixup negative TTLs Attila Nagy has reported.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1306 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-16 13:12:32 +00:00
wouter
a4f3d3f025 Recursion lame is detected and last resort is used to resolve.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1294 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-13 09:11:42 +00:00
wouter
e4adee6800 nsec negative DS.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1289 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-08 10:04:27 +00:00
wouter
a2c3b61c68 0x20 fallback code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1285 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 14:46:22 +00:00
wouter
bc68dd9029 please_lint
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1284 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 10:38:07 +00:00
wouter
d3c20e3447 please_lint
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1283 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 09:42:31 +00:00
wouter
3e50ffc914 Option for DOS protection on slower links.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1282 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-06 09:28:50 +00:00
wouter
3039466965 EDNS fallback when timeout and multiple query rtt backoff.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1272 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-29 14:50:35 +00:00
wouter
5ab29cef3b remote control tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1270 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-26 13:02:34 +00:00
wouter
3a10f7e4ab flush data from cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1268 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-23 14:07:02 +00:00
wouter
3de2c0e61b load from cache works
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1265 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-23 09:23:38 +00:00
wouter
af05e11f7c add remove local data and local zone with remote control
(ldns-testpkts sync with ldns trunk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1261 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-19 14:49:29 +00:00
wouter
526eed4c74 Fixup error in time calculation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1247 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-18 07:55:01 +00:00
wouter
6791fa38ec extended statistics.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1239 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-16 14:08:38 +00:00
wouter
d0a4ad4331 remote control setup, port binding and service.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1227 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-10 15:23:01 +00:00
wouter
2b0b077fd6 DoS protection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1221 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-02 13:04:47 +00:00
wouter
cf59fb45fb DLV work
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1190 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-14 15:16:50 +00:00
wouter
9316311c7d bug fixes 203, 204, 206.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1186 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-13 07:11:42 +00:00
wouter
71700f6a04 - Fixup rrset security updates overwriting 2181 trust status.
This makes validated to be insecure data just as worthless as
	  nonvalidated data, and 2181 rules prevent cache overwrites to them.
	- Fix assertion fail on bogus key handling.
	- dnssec lameness detection works on first query at trust apex.
	- NS queries get proper cache and dnssec lameness treatment.
	- fixup compilation without pthreads on linux.
	- NS queries are done after every referral.
	  validator is used on those NS records (if anchors enabled).




git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-12 10:13:57 +00:00
wouter
78070f7906 Same scrubber patch to trunk.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1181 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-07 07:31:05 +00:00
wouter
deb68f1708 Fix bug #201
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1173 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-04 12:15:12 +00:00
wouter
65c524f077 default local zones draft 06.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1146 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-07-15 07:46:40 +00:00
wouter
42a969e530 fixup compile.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1140 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-25 15:57:41 +00:00
wouter
a305543834 mingw port continues.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1139 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-25 14:36:10 +00:00
wouter
4ab789fdcf fixup for newegg lameness.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1137 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-25 09:39:57 +00:00
wouter
a0e166c5c7 unit test, testbound, basic udp and tcp tests are working on XP.
ipv6 not supported by OS is a warning (nonfatal).

git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1127 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-18 14:27:30 +00:00
wouter
0b8871e5bd fixup localzone nodefault issue, the trailing dot was used in comparisons.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1106 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-06-03 12:32:08 +00:00
wouter
ec5253b25a - mingw32 porting.
- test for sys/wait.h
          - WSAEWOULDBLOCK test after nonblocking TCP connect.
          - write_iov_buffer removed: unused and no struct iov on windows.
          - signed/unsigned warning fixup mini_event.
          - use ioctlsocket to set nonblocking I/O if fnctl is unavailable.
          - skip signals that are not defined
          - detect pwd.h.
          - detect getpwnam, getrlimit, setsid, sbrk, chroot.
          - default config has no chroot if chroot() unavailable.
          - if no kill() then no pidfile is read or written.
          - gmtime_r is replaced by nonthreadsafe alternative if unavail.
            used in rrsig time validation errors.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1097 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-05-23 14:13:07 +00:00
wouter
e57edfcbd3 mingw port.
relabel replaced functions to avoid conflicts with library.

git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1093 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-05-22 13:30:22 +00:00
wouter
bb1dfd2629 fixup no-ip4 error callback.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1077 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-05-07 07:53:57 +00:00
wouter
5ed2d6c1a6 porting.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1056 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-16 16:09:25 +00:00
wouter
69cc6982a4 Check sig type for DSA.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1043 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-14 15:57:52 +00:00
wouter
7569a38892 Fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1032 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-11 16:05:55 +00:00
wouter
efd453c4cc - removed base_port.
- created 256-port ephemeral space for the OS, 59802 available.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1030 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-11 14:10:16 +00:00
wouter
efa3e15e34 - random port selection out of the configged ports.
- fixup threadsafety for libevent-1.4.3+ (event_base_get_method).



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1029 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-11 13:24:49 +00:00
wouter
79ca9b51dc libev can be used (but not multithreaded) and del fd unused.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1023 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-09 11:58:53 +00:00
wouter
3494e93d6b - unbound tries to set the ulimit fds when started as server.
if that does not work, it will scale back its requirements.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1022 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-08 15:02:52 +00:00
wouter
a792f387a1 can use DNS-0x20 draft casing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@994 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-27 09:21:31 +00:00
wouter
242711485f Answers use same case as query does.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@993 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-26 20:45:20 +00:00
wouter
11b7a51475 avoid reencoding the same reply in mesh reply.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@981 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-22 09:23:42 +00:00
wouter
38c018e539 - setup speec_cache for need-ldns-testns in dotests.
- check number of queued replies on incoming queries to avoid overload
         on that account.
       - fptr whitelist checks are not disabled in optimize mode.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@971 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-20 07:18:42 +00:00
wouter
cf50a0bcb7 Faster due to time-sharing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-19 13:12:23 +00:00
wouter
92c6a825ef stats output text nice.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@943 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-11 09:19:32 +00:00
wouter
e2ce21cf4d move around debug levels.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 09:46:49 +00:00
wouter
bf1714e210 fallback EDNS on NOTIMPL.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@928 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-06 15:08:38 +00:00
wouter
d72f75b70f statistics-interval config setting.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@917 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-05 10:23:44 +00:00
wouter
e1174c47ab remove DEBUG
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@912 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-30 16:35:34 +00:00
wouter
d64c4d8e4c logging nicer, removal of reply_iov.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@911 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-30 14:46:01 +00:00
wouter
2908e2a135 manpage fixup, no more 6to4 mapping.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@876 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-18 09:18:12 +00:00
wouter
e37223def0 BSD fix for ip4.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@875 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-18 09:09:55 +00:00
wouter
a117d8651a support for IP_RECVDSTADDR.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@874 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-18 08:51:19 +00:00
wouter
dda09cdbb0 manual and pktinfo.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@873 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-17 15:35:34 +00:00
wouter
a1338470b9 please doxygen.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@870 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-17 08:26:15 +00:00
wouter
fea747f74f fix for MacOS/X.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@864 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 15:13:40 +00:00
wouter
f286dcfc01 better v6only disable code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@860 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 14:07:49 +00:00
wouter
ddc6bc3cbc Remove warnings on Solaris 9.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@858 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 13:10:21 +00:00
wouter
c1c1858b1c fixup test for BSD.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@851 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 11:54:15 +00:00
wouter
bdb854787d interface-automatic (IP6mapped, good for anycast service and so on).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@847 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-15 09:45:30 +00:00
wouter
d1d55313d2 library resolution working.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@809 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-06 15:11:07 +00:00
wouter
d186da5604 fptrwlist and remove oldhack with islocked param.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@805 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-04 21:34:53 +00:00
wouter
6e8107e842 markdelfunc for lock order problem in lruhash reclaim().
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@804 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-04 21:18:25 +00:00
wouter
a1ba0ccb3f coverity run fixes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@803 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-04 17:54:14 +00:00
wouter
3e93ce7cd4 makefile nit and modstack.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@801 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-04 13:23:41 +00:00
wouter
09ae12883c - tests for localdata multiple RR, and implicit zones.
- can specify TXT records for local data.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@780 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-28 08:10:45 +00:00
wouter
ad7b42e5bf memory footprint improvements.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@778 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-27 15:52:41 +00:00
wouter
ba8561ead1 test and fixes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@776 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-22 16:13:16 +00:00
wouter
ce61d0dac6 local zone answers.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@775 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-22 13:48:58 +00:00
wouter
3c2b5e4327 defaults.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@774 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-22 09:30:44 +00:00
wouter
5b799d60ee localzone internal data structures.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@773 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-21 16:19:31 +00:00
wouter
969c6e2ee1 localzon setup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@772 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-20 16:38:41 +00:00
wouter
9ffcf306b9 keep tcp address around for acl.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@770 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-19 16:31:22 +00:00
wouter
57a562b5fd - bugreports to unbound-bugs@nlnetlabs.nl
- fixup testbound so it exits cleanly.
       - cleanup the caches on a reload, so that rrsetID numbers won't clash.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@740 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-12 13:58:34 +00:00
wouter
bc5dd57ea7 safer default interfaces.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@737 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-09 14:15:21 +00:00
wouter
50174c96a0 ttl not greedy.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@720 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-30 21:40:16 +00:00
wouter
b649a1876b dnssec lame servers are used as last effort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@716 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-23 12:37:18 +00:00
wouter
36c9ef2734 nicer error, random() improved.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@707 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-19 12:10:13 +00:00
wouter
b66b29f6da outgoing interfaces setting possible.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@704 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-19 08:32:36 +00:00
wouter
0638f01d0a keep cache of prealloced blocks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@698 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 22:17:02 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
eeaf9dbc97 errors have addresses with them.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@692 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 09:04:55 +00:00
wouter
cb8f9eaa68 failover to next server.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@691 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 19:23:01 +00:00
wouter
0463aa9cb2 buffer overflow code audit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@680 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-16 13:03:57 +00:00
wouter
8b95e7f068 assertions, zero termination for gethostname, log_hex without malloc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@679 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-16 12:26:09 +00:00
wouter
8d21fe77ca fixup addr6 check.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@677 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-15 14:42:37 +00:00
wouter
4d6bd257e2 fixup ip6 tcp.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@675 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-15 09:10:26 +00:00
wouter
a4478ad648 function pointer whitelist for module operations. completing fptr work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@661 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 12:42:25 +00:00
wouter
b5a046ad99 function pointer whitelists on data types.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@660 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 11:41:12 +00:00
wouter
317be8f466 fptr whitelist network code callbacks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@659 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 08:05:06 +00:00
wouter
eb4d666bf5 security audit changes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@657 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-04 15:10:11 +00:00
wouter
55b2d2874a fixup nasty cache overwriting bug.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@656 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-03 19:11:50 +00:00