97a89720c9- Fix validation failures due to EDNS backoff retries, the retry for fetch of data has want_dnssec because the iter_indicate_dnssec function returns true when validation failure retry happens, and then the serviced query code does not fallback to noEDNS, even if the cache says it has this. This helps for DLV deployment when the DNSSEC status is not known for sure before the lookup concludes.
wouter
2011-08-26 09:00:43 +0000
b35812d486Fix numthreads 0 handling.
wouter
2011-08-26 06:50:23 +0000
24291e9e6c- Applied patch from Karel Slany that fixes a memory leak in the unbound python module, in string conversions.
wouter
2011-08-24 11:03:29 +0000
ee3c3d5724- Quick fix for contrib/unbound.spec example, no ldns-builtin any more.
wouter
2011-07-13 12:17:13 +0000
b05d47d4a5- Fix wildcard expansion no-data reply under an optout NSEC3 zone is validated as insecure, reported by Jia Li (lijia@cnnic.cn).
wouter
2011-07-11 09:03:18 +0000
8b34270a58- fix comment about rndc port, that referred to the old port number. - fix that the listening socket is not closed when too many remote control connections are made at the same time.
wouter
2011-06-30 12:13:55 +0000
9461231d6b- fix replyaddr count wrong after jostled queries, which leads to eventual starvation where the daemon has no replyaddrs left to use.
wouter
2011-06-30 11:01:44 +0000
4386a794ebfix bug#395: id bits of other query may leak out under conditions
wouter
2011-06-30 09:42:20 +0000
444efde101- Use -flto compiler flag for link time optimization, if supported.
wouter
2011-06-14 08:39:53 +0000
97ed63e801IPv6 service address for d.root-servers.net (2001:500:2D::D)
wouter
2011-06-12 09:51:00 +0000
d86e061287- statistics-interval prints the number of jostled queries to log.
wouter
2011-06-10 10:41:40 +0000
fc57d8487c- unbound-control has version number in the header, UBCT[version]_space_ is the header sent by the client now. - Unbound control port number is registered with IANA: ub-dns-control 8953/tcp unbound dns nameserver control This is the new default for the control-port config setting.
wouter
2011-06-10 10:11:38 +0000
b25dcb3a41- iana portlist updated. - queries with CD flag set cause DNSSEC validation, but the answer is not withheld if it is bogus. Thus, unbound will retry if it is bad and curb the TTL if it is bad, thus protecting the cache for use by downstream validators.
wouter
2011-04-08 13:58:41 +0000
a7e8b9b507fix test
wouter
2011-03-29 10:38:59 +0000
ca7c48625c- harden-below-nxdomain: changed so that it activates when the cached nxdomain is dnssec secure. This avoids backwards incompatibility because those old servers do not have dnssec.
wouter
2011-03-29 09:47:54 +0000
f5fd7fe46ftrunk to 1.5.0
wouter
2011-03-24 10:35:17 +0000
6024c40fe3Compat with tpkg timing code.
wouter
2011-02-23 09:56:13 +0000
cc0601deb5common.sh to version 2.
wouter
2011-02-18 16:11:21 +0000
931a77af17- Added explicit note on unbound-anchor usage: Please note usage of unbound-anchor root anchor is at your own risk and under the terms of our LICENSE (see that file in the source).
wouter
2011-02-15 12:58:37 +0000
e82024f8d0use common functionality file.
wouter
2011-02-11 12:30:42 +0000
51bdc5a082- Added regression test for addition of a .net DS to the root, and cache effects with different TTL for glue and DNSKEY.
wouter
2011-02-07 12:07:46 +0000
58774c8fad- Fix remove private address does not throw away entire response.
wouter
2011-01-28 16:11:49 +0000
wouter