f1e3dd087b7ce34382df8354efddaae79caa11b7 |
|
26-Dec-2016 |
Mark Andrews <marka@isc.org> |
4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
[RT #43601]
(cherry picked from commit 8e333f42ef5938dd39ea57296a3109ff1bb79e1a) |
b7ae121eff99c4bd51af6b7fc7883a35014eadcb |
|
02-Nov-2016 |
Evan Hunt <each@isc.org> |
[v9_11] typo |
2ea4ed172682d16d1e3d0a2a9e9b3bff8deae3b0 |
|
02-Nov-2016 |
Mark Andrews <marka@isc.org> |
remove review fprintf
(cherry picked from commit a0caf66c97193f827169ce647da29b332c93ddc6) |
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04 |
|
02-Nov-2016 |
Mark Andrews <marka@isc.org> |
4507. [bug] Name could incorrectly log 'allows updates by IP
address, which is insecure' [RT #43432]
(cherry picked from commit 2b2b85c8970983a77d478efed0a50e5b57d53ce4) |
0c27b3fe77ac1d5094ba3521e8142d9e7973133f |
|
27-Jun-2016 |
Mark Andrews <marka@isc.org> |
4401. [misc] Change LICENSE to MPL 2.0. |
6c2a76b3e2ccd32c35814b6e0f54da00190749d7 |
|
26-May-2016 |
Evan Hunt <each@isc.org> |
[master] copyrights, win32 definitions |
7a00d69909ace5dc11bcff9c1e07c311f92a7f8e |
|
26-May-2016 |
Witold Krecicki <wpk@isc.org> |
4376. [experimental] Added support for Catalog Zones, a new method for
provisioning secondary servers in which a list of
zones to be served is stored in a DNS zone and can
be propagated to slaves via AXFR/IXFR. [RT #41581]
4375. [func] Add support for automatic reallocation of isc_buffer
to isc_buffer_put* functions. [RT #42394] |
3278ff814d2babe5ba1aa61e7995cfddb1895b4f |
|
30-Aug-2014 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
d46855caedd5cb101795707f6f467fa363ef1448 |
|
29-Aug-2014 |
Evan Hunt <each@isc.org> |
[master] ECS authoritative support
3936. [func] Added authoritative support for the EDNS Client
Subnet (ECS) option.
ACLs can now include "ecs" elements which specify
an address or network prefix; if an ECS option is
included in a DNS query, then the address encoded
in the option will be matched against "ecs" ACL
elements.
Also, if an ECS address is included in a query,
then it will be used instead of the client source
address when matching "geoip" ACL elements. This
behavior can be overridden with "geoip-use-ecs no;".
When "ecs" or "geoip" ACL elements are used to
select a view for a query, the response will include
an ECS option to indicate which client network the
answer is valid for.
(Thanks to Vincent Bernat.) [RT #36781] |
3e90f6c373d2e6c9c9909b112468975c4c86544e |
|
03-Aug-2014 |
Mark Andrews <marka@isc.org> |
3910. [bug] When computing the number of elements required for a
acl count_acl_elements could have a short count leading
to a assertion failure. Also zero out new acl elements
in dns_acl_merge. [RT #36675] |
c2638d3d5ab1fa10fde4026e92c5ffff23b77bdf |
|
01-May-2014 |
Mark Andrews <marka@isc.org> |
protect geoip_elem use with HAVE_GEOIP |
c0c4512020c0a4a9e5b087cb8cad1cd68fb3f52e |
|
01-May-2014 |
Evan Hunt <each@isc.org> |
[master] fixed geoip elements in named ACLs
3835. [bug] Geoip ACL elements didn't work correctly when
referenced via named or nested ACLs. [RT #35879] |
0666e6db543cda2de2b8472ba49ed9b53c836326 |
|
01-Feb-2014 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
d0803df3310ad09447c34b972e7594d576f5cbb5 |
|
31-Jan-2014 |
Evan Hunt <each@isc.org> |
[master] fixed geoip in blackhole ACLs
3722. [bug] Using geoip ACLs in a blackhole statement
could cause a segfault. [RT #35272] |
431a83fb29482c5170b3e4026e59bb14849a6707 |
|
10-Jan-2014 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
e851ea826066ac5a5b01c2c23218faa0273a12e8 |
|
09-Jan-2014 |
Evan Hunt <each@isc.org> |
[master] replace memcpy() with memmove().
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120] |
501941f0b6cce74c2ff75b10aff3f230d5d37e4c |
|
28-Feb-2013 |
Evan Hunt <each@isc.org> |
[master] add geoip support
3504. [func] Add support for ACLs based on geographic location,
using MaxMind GeoIP databases. Based on code
contributed by Ken Brownfield <kb@slide.com>.
[RT #30681] |
573d78f3d53859bc01ce5d5cebbaac9b8b90bfba |
|
22-Feb-2013 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
df925e6c66d45d960fbac0383169763967d2111c |
|
21-Feb-2013 |
Evan Hunt <each@isc.org> |
[master] add zone memory context pools
3492. [bug] Fixed a regression in zone loading performance
due to lock contention. [RT #30399] |
313b4dc3b2e2be29994ce030c42c39c9eef9c46b |
|
18-Jun-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
e7220c9b841bbd3d16736726f786a86fec3c0e18 |
|
17-Jun-2011 |
Evan Hunt <each@isc.org> |
3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
were used, [RT #22739] |
d362465c77b375be2707bc83cebc731d0645d12d |
|
18-Jan-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
584848087f7463c1f659ce4712dc047d8e7f2b07 |
|
17-Jan-2009 |
Francis Dupont <fdupont@isc.org> |
spelling |
175a8bd2b798bbc568cd912b72c8a026cfca8527 |
|
01-Dec-2008 |
Mark Andrews <marka@isc.org> |
2502. [cleanup] isc_radix: Improve compliance with coding style,
document function in <isc/radix.h>. [RT #18534] |
cdbb3d27740fd052f18067b937097ebf35df356b |
|
27-Sep-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844c |
|
26-Sep-2008 |
Evan Hunt <each@isc.org> |
2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
address, regardless of family. They now correctly
distinguish IPv4 from IPv6. [RT #18559] |
106360491ad40eef9669fd792c35710d6af1dab0 |
|
26-Sep-2008 |
Evan Hunt <each@isc.org> |
address review comment |
e80f661db8ec9596eb977d6fc537484aa3662e22 |
|
12-Sep-2008 |
Evan Hunt <each@isc.org> |
possible null dereference in dns_acl_isanyornone() [rt18559] |
aeadcd63196f164b219629a53c0e0925519288f3 |
|
10-Sep-2008 |
Evan Hunt <each@isc.org> |
pull up windows acl leak fix from 9.5.0-P2-W1 |
28ad0be64ee756013c0f6a474fc447ee613ee0d1 |
|
29-Apr-2008 |
Evan Hunt <each@isc.org> |
Fix a bug causing dns_acl_isany() to return spurious results [rt18000] |
1fa2ce7eaef0c17d554495220565b681639b2ce5 |
|
27-Jan-2008 |
Mark Andrews <marka@isc.org> |
2324. [bug] Fix IPv6 matching against "any;" [RT #17533] |
fc7043d7d1294478c9988c10af9a7fb8fd810338 |
|
22-Jan-2008 |
Evan Hunt <each@isc.org> |
Used incorrect address family for mapped IPv4 addresses in acl.c. [RT #17519] |
140a27777d6fba397720770b101967d5cf73f42b |
|
22-Jan-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
262c39b2366bf79062f7f86b218947523dd1cbac |
|
21-Jan-2008 |
Evan Hunt <each@isc.org> |
IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462] |
2f012d936b5ccdf6520c96a4de23721dc58a2221 |
|
19-Jan-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
2f99b54e8ec8e908ea894bc808d1c18a5f51a850 |
|
18-Jan-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
1aba9fe67899522364a9dbc3ee5a14da081f0314 |
|
17-Jan-2008 |
Evan Hunt <each@isc.org> |
Fix coverity warnings in acl.c and iptable.c [rt17455] |
114c14f8adfc249cf2e5cdcb9007af46fed257e3 |
|
21-Dec-2007 |
Mark Andrews <marka@isc.org> |
2282. [bug] Acl code fixups. [RT #17346] [RT #17374] |
604419a812b491cd35fb6fad129c3c39da7200a1 |
|
20-Dec-2007 |
Mark Andrews <marka@isc.org> |
2282. [bug] Acl code fixups. [RT #17346] |
69f3cb5abcb38f105c653c7b3df7cec33b87b292 |
|
19-Sep-2007 |
Mark Andrews <marka@isc.org> |
Part 3 of:
2233. [func] Add support for O(1) ACL processing, based on
radix tree code originally written by kevin
brintnall. [RT #16288] |
12e0477d4e132c9122312246ed60aaa646f819b2 |
|
14-Sep-2007 |
Mark Andrews <marka@isc.org> |
Part 2 of:
2233. [func] Add support for O(1) ACL processing, based on
radix tree code originally written by kevin
brintnall. [RT #16288] |
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8e |
|
12-Sep-2007 |
Evan Hunt <each@isc.org> |
Add support for O(1) ACL processing, based on radix tree code originally
written by kevin brintnall. [RT #16288] |
70e5a7403f0e0a3bd292b8287c5fed5772c15270 |
|
20-Jun-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
ec5347e2c775f027573ce5648b910361aa926c01 |
|
19-Jun-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
641f68d427629200c29aa62c95e18d46fce434ab |
|
02-Mar-2006 |
Mark Andrews <marka@isc.org> |
update copyright notice |
45e1bd63587102c3bb361eaca42ee7b714fb3542 |
|
28-Feb-2006 |
Mark Andrews <marka@isc.org> |
1991. [cleanup] The configuration data, once read, should be treated
as readonly. Expand the use of const to enforce this
at compile time. [RT #15813] |
18d0b5e54be891a1aa938c165b6d439859121ec8 |
|
12-Jul-2005 |
Mark Andrews <marka@isc.org> |
1900. [port] freebsd: pthread_mutex_init can fail if it runs out
of memory. [RT #14995] |
69fe9aaafdd6a141610e86a777d325db75422070 |
|
29-Apr-2005 |
Mark Andrews <marka@isc.org> |
update copyright notice |
ab023a65562e62b85a824509d829b6fad87e00b1 |
|
27-Apr-2005 |
Rob Austein <sra@isc.org> |
1851. [doc] Doxygen comment markup. [RT #11398] |
dafcb997e390efa4423883dafd100c975c4095d6 |
|
05-Mar-2004 |
Mark Andrews <marka@isc.org> |
update copyright notice |
aa39170da817cae7b4c6c735cc832e05ec3d2351 |
|
29-Oct-2002 |
Mark Andrews <marka@isc.org> |
1394. [func] It is now possible to check if a particular element is
in a acl. Remove duplicate entries from the localnets
acl.
1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
is not available in the kernel to prevent accidently
listening on IPv4 interfaces.
developer: jinmei
reviewer: marka |
fe2d25382fc1dd099e6a8a3c0b78c3a6dcba544b |
|
31-May-2001 |
David Lawrence <source@isc.org> |
don't define INADDR_LOOPBACK; isc/net.h should be ensuring it exists |
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1b |
|
26-Mar-2001 |
Brian Wellington <source@isc.org> |
788. [feature] Add the "match-mapped-addresses" options, which
causes IPv6 v4mapped addresses to be treated as
IPv4 addresses for the purpose of acl matching. |
aa23a35d81a9618a40c4a9b44be48009553e4777 |
|
09-Feb-2001 |
Andreas Gustafsson <source@isc.org> |
733. [bug] Reference counts of dns_acl_t objects need to be
locked but were not. [RT #801] |
8bb77cd31b7518fb5d2a6a9d75e16e4abd59df61 |
|
17-Jan-2001 |
Andreas Gustafsson <source@isc.org> |
fix RT #660 differently |
39bb14491fa6d55c83b0a61dc07bf7864a726323 |
|
17-Jan-2001 |
Brian Wellington <source@isc.org> |
Negating an unsigned int is a bad idea. Make it an int instead. [RT #660] |
499b34cea04a46823d003d4c0520c8b03e8513cb |
|
09-Jan-2001 |
Brian Wellington <source@isc.org> |
copyright update |
9c566a852f31c3a5d0b9d6eaf11463114339c01d |
|
01-Dec-2000 |
Andreas Gustafsson <source@isc.org> |
587. [func] A warning is now printed if the "allow-update"
option allows updates based on the source IP
address, to alert users to the fact that this
is insecure and becoming increasingly so as
servers capable of update forwarding are being
deployed. |
ba7ea2326d98edb4296098749fc9cf44b5157643 |
|
15-Nov-2000 |
David Lawrence <source@isc.org> |
dns_aclelement_match() returns an isc_boolean_t, but if dns_acl_match()
within it returned a result that was not ISC_R_SUCCESS, then that result
code was being returned. Since dns_acl_match() always returns ISC_R_SUCCESS,
the erroneous return was converted into an INSIST(). |
febaa091847ab004f40500cc475a819f2c73fcdd |
|
10-Nov-2000 |
Andreas Gustafsson <source@isc.org> |
551. [func] Implemented the 'sortlist' option. |
ea419adc4eca4c3e44f2c282035b5dce6b795fe2 |
|
11-Aug-2000 |
Andreas Gustafsson <source@isc.org> |
386. [bug] Missing strdup() of ACL name caused random
ACL matching failures. |
40f53fa8d9c6a4fc38c0014495e7a42b08f52481 |
|
01-Aug-2000 |
David Lawrence <source@isc.org> |
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace. |
15a44745412679c30a6d022733925af70a38b715 |
|
27-Jul-2000 |
David Lawrence <source@isc.org> |
word wrap copyright notice at column 70 |
9c3531d72aeaad6c5f01efe6a1c82023e1379e4d |
|
23-Jun-2000 |
David Lawrence <source@isc.org> |
add RCS id string |
1a69a1a78cfaa86f3b68bbc965232b7876d4da2a |
|
08-May-2000 |
David Lawrence <source@isc.org> |
Megacommit of dozens of files.
Cleanup of redundant/useless header file inclusion.
ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
/*
* This is a comment.
*/ |
364a82f7c25b62967678027043425201a5e5171a |
|
28-Apr-2000 |
Bob Halley <source@isc.org> |
include isc/util.h |
d8d0c5b1bc97ac0f07e35a31b58ced80ce613c55 |
|
14-Mar-2000 |
David Lawrence <source@isc.org> |
explitictly REQUIRE that reqaddr is non-null in dns_acl_match |
3eef7eaba00e9bd468d8036c709a296a0e5b76f1 |
|
22-Feb-2000 |
Andreas Gustafsson <source@isc.org> |
renamed dns_acl_checkrequest() to ns_client_checkacl()
and moved it to bin/named/client.c to reflect the fact that it
implemented BIND ACL policy more than general-purpose library
functionality; resolve ACL defaults at configuration time
rather than when the ACL is evaluated |
fd0bc40a2580299d20ae212d89bda13862d78b3a |
|
15-Feb-2000 |
Andreas Gustafsson <source@isc.org> |
IP addresses in ACLs are now represented as
isc_netaddr_t, not isc_sockaddr_t |
a1747570262ed336c213aaf6bd31bc91993a46de |
|
09-Feb-2000 |
Andreas Gustafsson <source@isc.org> |
implemented the 'localhost' and 'localnets' ACLs |
7d32c065c7bb56f281651ae3dd2888f32ce4f1d9 |
|
04-Feb-2000 |
Bob Halley <source@isc.org> |
update copyright |
dd796c4d62cfd6ad04198537ceaeba385ed3ef4e |
|
27-Jan-2000 |
Mark Andrews <marka@isc.org> |
memset() not declared |
7693d4de8fca501dfe6989a7f30d8d3c86fe096a |
|
14-Jan-2000 |
Andreas Gustafsson <source@isc.org> |
added dns_acl_any(), dns_acl_none() |
6017f424ee3c02d7f22132c77576ea38542fa949 |
|
17-Dec-1999 |
Andreas Gustafsson <source@isc.org> |
introducing dns_acl_t; other restructuring of server
configuration process aiming to reduce the degree of mutual dependency
between lib/dns/config and the rest of libdns |