a8a47f27dd#664: Fix issue with Python 3 mapping of FILE* using file_py3.i from ldns.
wouter
2015-04-16 14:41:14 +0000
18a2a40a6b#664: libunbound-Python: libldns is not used anymore.
wouter
2015-04-16 14:38:38 +0000
093ff749cc#664: libunbound examples: produce sorted output.
wouter
2015-04-16 14:37:12 +0000
32aa5c4d0b- Fix bug#664: libunbound python3 related fixes (from Tomas Hozza) Use print_function also for Python2.
wouter
2015-04-16 14:35:55 +0000
f77c2a06f1- Ratelimit does not apply to prefetched queries, and ratelimit-factor is default 10. Repeated normal queries get resolved and with prefetch stay in the cache.
wouter
2015-04-16 14:18:50 +0000
31a8018d22- Add local-zone type inform_deny, that logs query and drops answer.
wouter
2015-04-16 08:23:06 +0000
33a25461famanpage for ratelimit_list
wouter
2015-04-10 14:07:25 +0000
7f56755943- Fix#663: ssl handshake fails when using unix socket because dh size is too small.
wouter
2015-04-10 13:56:12 +0000
15ef4ccca1- Fix that get_option for cache-sizes does not print double newline.
wouter
2015-04-10 13:43:44 +0000
3971970fa9fixes for undeclared function.
wouter
2015-04-10 12:19:30 +0000
7062b00d0b- ratelimit feature, ratelimit: 100, or some sensible qps, can be used to turn it on. It ratelimits recursion effort per zone. For particular names you can configure exceptions in unbound.conf.
wouter
2015-04-10 09:59:57 +0000
5b8cd39902- Fix crash in dnstap: Do not try to log TCP responses after timeout.
wouter
2015-04-08 19:58:06 +0000
0557760286- unbound-control list_insecure command shows the negative trust anchors currently configured, patch from Jelte Jansen.
wouter
2015-04-07 13:50:09 +0000
ba41e16d3c- Unbound exits with a fatal error when the auto-trust-anchor-file fails to be writable. This is seconds after startup. You can load a readonly auto-trust-anchor-file with trust-anchor-file. The file has to be writable to notice the trust anchor change, without it, a trust anchor change will be unnoticed and the system will then become unoperable.
wouter
2015-04-07 12:03:05 +0000
804b049afcFixup test; icann root cert has not changed.
wouter
2015-04-07 08:01:22 +0000
c0a74addd8And skip dos-newlines for only addrs on line.
wouter
2015-04-07 07:54:30 +0000
73c16202a0- Libunbound skips dos-line-endings from etc/hosts.
wouter
2015-04-07 07:51:43 +0000
edc6c2102e- Fix#660: Fix interface-automatic broken in the presence of asymmetric routing.
wouter
2015-04-02 10:02:01 +0000
3bf5307254Fixup rrset unlock in case of allocation failure.
wouter
2015-03-26 13:15:55 +0000
410ac6cd67- rename ldns subdirectory to sldns to avoid name collision.
wouter
2015-03-26 10:21:38 +0000
2672fe9ea9- remote.c probedelay line is easier to read.
wouter
2015-03-26 09:46:06 +0000
6d0f96673d- If unknown trust anchor algorithm, and libressl is used, error message encourages upgrade of the libressl package.
wouter
2015-03-25 16:04:05 +0000
5a4a7863b6- Fix#644: harden-algo-downgrade option, if turned off, fixes the reported excessive validation failure when multiple algorithms are present. It allows the weakest algorithm to validate the zone.
wouter
2015-03-09 13:30:37 +0000
78eba96a8b- Document that incoming-num-tcp increase is good for large servers.
wouter
2015-03-05 11:41:29 +0000
d8b346e409- contrib/unbound_smf22.tar.gz: Solaris SMF installation/removal scripts. Contributed by Yuri Voinov.
wouter
2015-03-05 08:18:59 +0000
1024b260d8- Document windows 8 tests.
wouter
2015-03-04 13:24:27 +0000
e578b9a03dAnd use best response in case 0x20 fallback done.
wouter
2015-03-04 09:35:06 +0000
798e778410- store caps_response with best response in case downgrade response happens to be the last one.
wouter
2015-03-04 09:31:26 +0000
a0c81b8339- many nameservers does not try to compare more than max-sent-count, parse failures start 0x20 fallback procedure.
wouter
2015-03-04 09:06:05 +0000
2c4190b319- 0x20 fallback improved, better handling of servfail responses, they do not count as missing comparisons (except if all are failed), and better handling of inability to find nameservers, no more nameservers can be found results in fallback acceptance.
wouter
2015-03-04 08:30:17 +0000
279f75db29- Patch from Brad Smith that syncs compat/getentropy_linux with OpenBSD's version (2015-03-04).
wouter
2015-03-04 07:18:09 +0000
00e9db6ccf- tag 1.5.3rc1
wouter
2015-03-03 13:37:53 +0000
62bd0e84f6- Fix scrubber with harden-glue turned off to reject NS (and other not-address) records.
wouter
2015-02-10 14:01:45 +0000
16b3909f91- Fix validation failure in case upstream forwarder (ISC BIND) does not have the same trust anchors and decides to insert unsigned NS record in authority section.
wouter
2015-02-09 11:44:46 +0000
6856b6a202- infra-cache-min-rtt patch from Florian Riehm, for expected long uplink roundtrip times.
wouter
2015-02-02 08:46:22 +0000
f8c9f95aa9- Fix unintended use of gcc extension for incomplete enum types, compile with pedantic c99 compliance (from Daniel Dickman).
wouter
2015-01-26 08:46:40 +0000
3e99e99773Fixup control socket test for OSX.
wouter
2015-01-23 16:00:33 +0000
5154b3406d- windows port fixes, no AF_LOCAL, no chown, no chmod(grp).
wouter
2015-01-23 15:23:58 +0000
33ccef06b7remove unused files from testcode
wouter
2015-01-22 15:53:31 +0000
7023f67fdacomment fixup. svn:NO TEST
wouter
2015-01-22 15:10:17 +0000
14416f4ca0- unbound-checkconf -f prints chroot with pidfile path.
wouter
2015-01-16 14:31:02 +0000
de842e85fe- unit test for local unix connection. Documentation and log_addr does not inspect port for AF_LOCAL.
wouter
2015-01-16 13:11:07 +0000
9537cdfccf- patch for remote control over local sockets, from Dag-Erling Smorgrav, Ilya Bakulin. Use control-interface: /path/sock and control-use-cert: no.
wouter
2015-01-06 14:12:59 +0000
9d84c30040- Patch from Philip Paeps to contrib/unbound_munin_ that uses type ABSOLUTE. Allows munin.conf: [idleserver.example.net] unbound_munin_hits.graph_period minute
wouter
2015-01-05 14:47:52 +0000