Commit Graph

  • 053df1d65b and rerun autoconf. wouter 2015-04-16 14:41:55 +0000
  • a8a47f27dd #664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns. wouter 2015-04-16 14:41:14 +0000
  • 18a2a40a6b #664: libunbound-Python: libldns is not used anymore. wouter 2015-04-16 14:38:38 +0000
  • 093ff749cc #664: libunbound examples: produce sorted output. wouter 2015-04-16 14:37:12 +0000
  • 32aa5c4d0b - Fix bug#664: libunbound python3 related fixes (from Tomas Hozza) Use print_function also for Python2. wouter 2015-04-16 14:35:55 +0000
  • f77c2a06f1 - Ratelimit does not apply to prefetched queries, and ratelimit-factor is default 10. Repeated normal queries get resolved and with prefetch stay in the cache. wouter 2015-04-16 14:18:50 +0000
  • 31a8018d22 - Add local-zone type inform_deny, that logs query and drops answer. wouter 2015-04-16 08:23:06 +0000
  • 33a25461fa manpage for ratelimit_list wouter 2015-04-10 14:07:25 +0000
  • 7f56755943 - Fix#663: ssl handshake fails when using unix socket because dh size is too small. wouter 2015-04-10 13:56:12 +0000
  • 15ef4ccca1 - Fix that get_option for cache-sizes does not print double newline. wouter 2015-04-10 13:43:44 +0000
  • 3971970fa9 fixes for undeclared function. wouter 2015-04-10 12:19:30 +0000
  • 79c9a936cb - unbound-control ratelimit_list lists high rate domains. wouter 2015-04-10 12:13:59 +0000
  • d5e5296e40 Fixes. wouter 2015-04-10 10:57:25 +0000
  • 7062b00d0b - ratelimit feature, ratelimit: 100, or some sensible qps, can be used to turn it on. It ratelimits recursion effort per zone. For particular names you can configure exceptions in unbound.conf. wouter 2015-04-10 09:59:57 +0000
  • 5b8cd39902 - Fix crash in dnstap: Do not try to log TCP responses after timeout. wouter 2015-04-08 19:58:06 +0000
  • 0557760286 - unbound-control list_insecure command shows the negative trust anchors currently configured, patch from Jelte Jansen. wouter 2015-04-07 13:50:09 +0000
  • f420142028 typo fix. (svn:NO TEST) wouter 2015-04-07 12:10:37 +0000
  • ba41e16d3c - Unbound exits with a fatal error when the auto-trust-anchor-file fails to be writable. This is seconds after startup. You can load a readonly auto-trust-anchor-file with trust-anchor-file. The file has to be writable to notice the trust anchor change, without it, a trust anchor change will be unnoticed and the system will then become unoperable. wouter 2015-04-07 12:03:05 +0000
  • 804b049afc Fixup test; icann root cert has not changed. wouter 2015-04-07 08:01:22 +0000
  • c0a74addd8 And skip dos-newlines for only addrs on line. wouter 2015-04-07 07:54:30 +0000
  • 73c16202a0 - Libunbound skips dos-line-endings from etc/hosts. wouter 2015-04-07 07:51:43 +0000
  • edc6c2102e - Fix #660: Fix interface-automatic broken in the presence of asymmetric routing. wouter 2015-04-02 10:02:01 +0000
  • e2f681da59 Fix pythonmod. wouter 2015-04-01 08:40:52 +0000
  • 3bf5307254 Fixup rrset unlock in case of allocation failure. wouter 2015-03-26 13:15:55 +0000
  • 410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision. wouter 2015-03-26 10:21:38 +0000
  • 2672fe9ea9 - remote.c probedelay line is easier to read. wouter 2015-03-26 09:46:06 +0000
  • 6d0f96673d - If unknown trust anchor algorithm, and libressl is used, error message encourages upgrade of the libressl package. wouter 2015-03-25 16:04:05 +0000
  • ca0b049109 - Fix #657: libunbound(3) recommends deprecated CRYPTO_set_id_callback. wouter 2015-03-25 08:06:35 +0000
  • ddf95d10ed Fixed like Maciej did. wouter 2015-03-23 20:42:47 +0000
  • d8e38074d4 - Fix segfault on user not found at startup (from Maciej Soltysiak). wouter 2015-03-23 20:20:15 +0000
  • 01bed76a9b Do not divide by zero. wouter 2015-03-20 16:03:14 +0000
  • 6fe0e22fa0 Check before storing value. wouter 2015-03-20 15:58:55 +0000
  • d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth). wouter 2015-03-20 15:36:25 +0000
  • 257bd1e4e6 fixup compiler warning on OpenBSD. wouter 2015-03-19 14:47:42 +0000
  • 42dbe2014c comment spelling improvement. wouter 2015-03-19 09:58:49 +0000
  • 6478a1cbfd - Add ip-transparent config option for bind to non-local addresses. wouter 2015-03-19 09:50:35 +0000
  • 8315192878 extra sanity check for integer overflow. wouter 2015-03-17 16:22:04 +0000
  • 5479ce5b4c please lint. wouter 2015-03-17 09:44:57 +0000
  • b79e506dff please lint. wouter 2015-03-17 09:38:47 +0000
  • 9f56dc9102 - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. wouter 2015-03-17 08:24:24 +0000
  • 5aa2715eda Reallocarray compat source from OpenBSD. wouter 2015-03-17 08:20:25 +0000
  • 5edccddab6 please lint. wouter 2015-03-16 11:51:30 +0000
  • 653053c1f9 - Fixup compile on cygwin, more portable openssl thread id. wouter 2015-03-16 10:51:32 +0000
  • 2fae92734c - Updated default keylength in unbound-control-setup to 3k. wouter 2015-03-12 15:34:03 +0000
  • 9f96c2b6be - Fix warning on sign compare in getentropy_linux. wouter 2015-03-10 10:29:55 +0000
  • 2e18cfb209 - iana portlist update. wouter 2015-03-10 10:17:45 +0000
  • 8df8b4f32e print svnroot for windows makedist. 1.5.4 in configure.ac wouter 2015-03-10 10:03:45 +0000
  • 8fbbf04b40 - Fix lintian warning in unbound-checkconf man page (from Andreas Schulze). wouter 2015-03-10 08:00:40 +0000
  • d6893f2e8c - iana portlist update. wouter 2015-03-09 13:39:27 +0000
  • 5a4a7863b6 - Fix #644: harden-algo-downgrade option, if turned off, fixes the reported excessive validation failure when multiple algorithms are present. It allows the weakest algorithm to validate the zone. wouter 2015-03-09 13:30:37 +0000
  • 4d50899043 - stats reports tcp usage, of incoming-num-tcp buffers. wouter 2015-03-05 15:23:14 +0000
  • 78eba96a8b - Document that incoming-num-tcp increase is good for large servers. wouter 2015-03-05 11:41:29 +0000
  • d8b346e409 - contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal scripts. Contributed by Yuri Voinov. wouter 2015-03-05 08:18:59 +0000
  • 1024b260d8 - Document windows 8 tests. wouter 2015-03-04 13:24:27 +0000
  • e578b9a03d And use best response in case 0x20 fallback done. wouter 2015-03-04 09:35:06 +0000
  • 798e778410 - store caps_response with best response in case downgrade response happens to be the last one. wouter 2015-03-04 09:31:26 +0000
  • a0c81b8339 - many nameservers does not try to compare more than max-sent-count, parse failures start 0x20 fallback procedure. wouter 2015-03-04 09:06:05 +0000
  • 2c4190b319 - 0x20 fallback improved, better handling of servfail responses, they do not count as missing comparisons (except if all are failed), and better handling of inability to find nameservers, no more nameservers can be found results in fallback acceptance. wouter 2015-03-04 08:30:17 +0000
  • 279f75db29 - Patch from Brad Smith that syncs compat/getentropy_linux with OpenBSD's version (2015-03-04). wouter 2015-03-04 07:18:09 +0000
  • 00e9db6ccf - tag 1.5.3rc1 wouter 2015-03-03 13:37:53 +0000
  • aa16f669d5 iana portlist update wouter 2015-03-02 11:03:14 +0000
  • 3233c052fe - Fix #647 crash in 1.5.2 because pwd.db no longer accessible after reload. wouter 2015-02-20 14:48:04 +0000
  • d42f4ad137 - Fix #646 Portability to Solaris, -lrt for getentropy_solaris. wouter 2015-02-20 14:03:41 +0000
  • a4674309ba - Portability to Solaris 10, use AF_LOCAL. wouter 2015-02-20 13:55:09 +0000
  • 98d9836bb9 - Use the getrandom syscall introduced in Linux 3.17 (from Heiner Kallweit). wouter 2015-02-20 09:19:32 +0000
  • fe7698cc6a - 1.5.2 release tag. - svn trunk contains 1.5.3 under development. wouter 2015-02-19 15:16:40 +0000
  • f37eaf65ad - Fix #643: doc/example.conf.in: unnecessary whitespace. wouter 2015-02-13 11:02:46 +0000
  • f6f1839628 - tag 1.5.2rc1 wouter 2015-02-12 15:33:20 +0000
  • 97b0157f96 Fixup makefile dependencies for outdir compile without dnstap wouter 2015-02-11 14:57:19 +0000
  • 14726c8248 - iana portlist update. wouter 2015-02-11 07:24:57 +0000
  • 62bd0e84f6 - Fix scrubber with harden-glue turned off to reject NS (and other not-address) records. wouter 2015-02-10 14:01:45 +0000
  • 16b3909f91 - Fix validation failure in case upstream forwarder (ISC BIND) does not have the same trust anchors and decides to insert unsigned NS record in authority section. wouter 2015-02-09 11:44:46 +0000
  • 6856b6a202 - infra-cache-min-rtt patch from Florian Riehm, for expected long uplink roundtrip times. wouter 2015-02-02 08:46:22 +0000
  • 0cb32cd3a0 Solaris portability fix. wouter 2015-01-30 15:34:27 +0000
  • 10e38ef90d - Portability fix for Solaris ('sun' is not usable for a variable). wouter 2015-01-30 15:32:59 +0000
  • 5124ace924 Fixup unit test. wouter 2015-01-30 09:57:32 +0000
  • f37e5a64cf And a unit test for the strip operation. wouter 2015-01-30 09:47:03 +0000
  • 674e12318a - Fix 0x20 capsforid fallback to omit gratuitous NS and additional section changes. wouter 2015-01-30 09:35:38 +0000
  • ff2cccec3d - Fix pyunbound byte string representation for python3. wouter 2015-01-29 16:10:51 +0000
  • f8c9f95aa9 - Fix unintended use of gcc extension for incomplete enum types, compile with pedantic c99 compliance (from Daniel Dickman). wouter 2015-01-26 08:46:40 +0000
  • 3e99e99773 Fixup control socket test for OSX. wouter 2015-01-23 16:00:33 +0000
  • 5154b3406d - windows port fixes, no AF_LOCAL, no chown, no chmod(grp). wouter 2015-01-23 15:23:58 +0000
  • 33ccef06b7 remove unused files from testcode wouter 2015-01-22 15:53:31 +0000
  • 7023f67fda comment fixup. svn:NO TEST wouter 2015-01-22 15:10:17 +0000
  • 14416f4ca0 - unbound-checkconf -f prints chroot with pidfile path. wouter 2015-01-16 14:31:02 +0000
  • de842e85fe - unit test for local unix connection. Documentation and log_addr does not inspect port for AF_LOCAL. wouter 2015-01-16 13:11:07 +0000
  • b5373c8c4b iana portlist update. wouter 2015-01-13 13:46:48 +0000
  • 84bdd4e765 - Fix pyunbound ord call, portable for python 2 and 3. wouter 2015-01-12 15:20:20 +0000
  • a5bed77fec - Cast sun_len sizeof to socklen_t. wouter 2015-01-12 08:20:43 +0000
  • cca6635a06 - Fix warnings in pythonmod changes. wouter 2015-01-07 09:29:59 +0000
  • d0b507bcdf fix attribution. wouter 2015-01-07 07:49:46 +0000
  • dd182a058c - coded the default of control-use-cert, to yes. wouter 2015-01-06 14:54:38 +0000
  • 2fa6bb55ef please lint on FreeBSD wouter 2015-01-06 14:49:34 +0000
  • f6924c2943 Fix doc. wouter 2015-01-06 14:41:04 +0000
  • b4fd8fe3d7 - Fixup that patch and uid lookup (only for daemon). wouter 2015-01-06 14:37:45 +0000
  • 5387d573cf please lint. wouter 2015-01-06 14:18:03 +0000
  • 9537cdfccf - patch for remote control over local sockets, from Dag-Erling Smorgrav, Ilya Bakulin. Use control-interface: /path/sock and control-use-cert: no. wouter 2015-01-06 14:12:59 +0000
  • c2b7d31586 iana portlist update. wouter 2015-01-06 08:02:41 +0000
  • b104189bba remove debug print wouter 2015-01-05 14:48:10 +0000
  • 9d84c30040 - Patch from Philip Paeps to contrib/unbound_munin_ that uses type ABSOLUTE. Allows munin.conf: [idleserver.example.net] unbound_munin_hits.graph_period minute wouter 2015-01-05 14:47:52 +0000