update copyright notice / whitespace

[v9_11] normalize rndc on/off commands 4867. [cleanup] Normalize rndc on/off commands (validation and querylog) so they accept the same synonyms for on/off (yes/no, true/false, enable/disable). Thanks to Tony Finch. [RT #47022] (cherry picked from commit cf8f4241e7826a6deb605d0b65ba625414805642)

[v9_11] update copyrights that had been missed recently

[v9_11] typo in rndc doc (cherry picked from commit b9e736f4f6a33131ccd883410ee46a5afa6ff1fd)

4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831] (cherry picked from commit 1b8ce3b3302f0afe682d04df8a1f20b4ac346fb2)

[v9_11] minor cleanup/clarification in dnstap documentation Patch submitted by Tony Finch (dot@dotat.at). (cherry picked from commit e9917a51d321c8ecf3b12491884bcb5114569f03)

copyright (cherry picked from commit 813e9f7ee291c611828041727c21a9f225fe1bcb)

[v9_11] rndc dnstap -roll 4411. [func] "rndc dnstap -roll" automatically rolls the dnstap output file; the previous version is saved with ".0" suffix, and earlier versions with ".1" and so on. An optional numeric argument indicates how many prior files to save. [RT #42830]

4401. [misc] Change LICENSE to MPL 2.0.

update copyrights / whitespace

update copyright notice / whitespace

4394. [func] Add rndc command "dnstap-reopen" to close and reopen dnstap output filed. [RT #41803]

cleanup trailing white space in SGML like files

regen master

[master] upgrade doc toolchain 4237. [doc] Upgraded documentation toolchain to use DocBook 5 and dblatex. [RT #40766]

zone is not optional for zonestatus [RT #40012]

[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]

[master] add "rndc -r" to print result code 4115. [func] "rndc -r" now prints the result code (e.g., ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after running the requested command. [RT #38913]

fix tag

fix tag

4111. [doc] Alphabetize rndc man page. [RT #39360]

docbook <command> tags around named server references

use docbook tag for option

[master] fix tag mismatch

[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]

[master] "rndc modzone" 4043. [func] "rndc modzone" can be used to modify the configuration of an existing zone, using similar syntax to "rndc addzone". [RT #37895]

Add NTA persistence (#37087) 4034. [func] When added, negative trust anchors (NTA) are now saved to files (viewname.nta), in order to persist across restarts of the named server. [RT #37087]

update copyright notice / whitespace

[master] rndc showzone / rndc delzone of non-added zones 4030. [func] "rndc delzone" is now applicable to zones that were configured in named.conf, as well as zones that were added via "rndc addzone". (Note, however, that if named.conf is not also modified, the deleted zone will return when named is reloaded.) [RT #37887] 4029. [func] "rndc showzone" displays the current configuration of a specified zone. [RT #37887]

[master] new mkeys and nzf naming format 3999. [func] "mkeys" and "nzf" files are now named after their corresponding views, unless the view name contains characters that would be incompatible with use in a filename (i.e., slash, backslash, or capital letters). If a view name does contain these characters, the files will still be named using a cryptographic hash of the view name. Regardless of this, if a file using the old name format is found to exist, it will continue to be used. [RT #37704]

fix tag mis-match

3987. [func] Allow the zone serial of a dynamically updatable zone to be updated via rndc. [RT #37404]

Remove the apostrophe 's from plural acronyms This is to be consistent with our common usage of just using a plural "s" without apostrophe. This was brought up via discussion in ticket 37505. I didn't have this reviewed.

fixes to manual from chucka See ticket #37505

[master] servfail cache 3943. [func] SERVFAIL responses can now be cached for a limited time (configured by "servfail-ttl", default 10 seconds, limit 30). This can reduce the frequency of retries when an authoritative server is known to be failing, e.g., due to ongoing DNSSEC validation problems. [RT #21347]

[master] [rt37069] update NTA limit to a week 3940. [func] "rndc nta" now allows negative trust anchors to be set for up to one week. [RT #37069]

remove the now gone -all switch from flushtree This is for RT ticket #36832. While here update manual page date.

[master] complete NTA work 3882. [func] By default, negative trust anchors will be tested periodically to see whether data below them can be validated, and if so, they will be allowed to expire early. The "rndc nta -force" option overrides this behvaior. The default NTA lifetime and the recheck frequency can be configured by the "nta-lifetime" and "nta-recheck" options. [RT #36146]

[master] rndc nta 3867. [func] "rndc nta" can now be used to set a temporary negative trust anchor, which disables DNSSEC validation below a specified name for a specified period of time (not exceeding 24 hours). This can be used when validation for a domain is known to be failing due to a configuration error on the part of the domain owner rather than a spoofing attack. [RT #29358]

[master] auto-generate salt 3781. [func] Specifying "auto" as the salt when using "rndc signing -nsec3param" causes named to generate a 64-bit salt at random. [RT #35322]

[master] typo

[master] rndc -q 3776. [bug] "rndc -q" suppresses output from successful rndc commands. Errors are printed on stderr. [RT #21393]

[master] improved doc for "rndc signing -list" 3769. [doc] Improved documentation of "rndc signing -list". [RT #30652]

[master] correct dates in man pages

update copyright notice

3733. [func] Improve interface scanning support. Interface information will be automatically updated if the OS supports routing sockets. Use "automatic-interface-scan no;" to disable. Add "rndc scan" to trigger a scan. [RT #23027]

3682. [bug] Correct the behavior of rndc retransfer to allow inline-signing slave zones to retain NSEC3 parameters instead of reverting to NSEC [RT #34745]

Fix misspelling (at least use common spelling).

[master] "flushtree -all" no longer optional Updated CHANGES note: 3606. [func] "rndc flushtree" now flushes matching records in the address database and bad cache as well as the DNS cache. (Previously only the DNS cache was flushed.) [RT #33970]

[master] "rndc flushtree -all <name>" 3606. [func] "rndc flushtree -all" flushes matching records in the ADB and bad cache as well as the DNS cache. (Without the "-all" option, flushtree will still only flush records from the DNS cache.) [RT #33970]

[master] corrected closing tag

[master] move rndc command documentation to "man rndc" 3592. [doc] Moved documentation of rndc command options to the rndc man page. [RT #33506]

update copyright notice

regen master

[master] algorithm flexibility for rndc 3525. [func] Support for additional signing algorithms in rndc: hmac-sha1, -sha224, -sha256, -sha384, and -sha512. The -A option to rndc-confgen can be used to select the algorithm for the generated key. (The default is still hmac-md5; this may change in a future release.) [RT #20363]

reference rndc-confgen

documentation updates from Jeremy

update copyright notice

update from jeremy

minor man page updated from Jeremy [RT #16859]

update copyright notice

2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]

1903. [doc] Review ARM for BIND 9.4.

update copyright notice

1856. [doc] Switch Docbook toolchain from DSSSL to XSL.

1849. [doc] All forms of the man pages (docbook, man, html) should have consistant copyright dates.

1680. [func] rndc: the source address can now be specified.

update corpauthor

update copyright notice

cleanup document "rndc -k"

copyright updates (note - this doesn't touch lib/bind at all. Mark, whenever you're done with lib/bind, make sure to do the copyright magic)

correctly document the -V (verbose) argument.

'command' is a required argument.

rndc only takes one command. make the documentation say this.

rndc docbook conversion