5826N/A 553. [bug] Incoming zone transfers deferred due to quota
5826N/A were not started when quota was increased but
5826N/A only when a transfer in progress finished. [RT #456]
5826N/A 552. [bug] We were not correctly detecting the end of all c-style
5826N/A 551. [func] Implemented the 'sortlist' option.
5826N/A 550. [func] Support unknown rdata types and classes.
5826N/A 549. [bug] "make" did not immediately abort the build when a
5826N/A subdirectory make failed [RT #450].
5826N/A 548. [func] The lexer now ungets tokens more correctly.
5826N/A 546. [func] Option 'lame-ttl' is now implemented.
5826N/A 545. [func] Name limit and counting options removed from dig;
5826N/A they didn't work properly, and cannot be correctly
5826N/A implemented without significant changes.
5826N/A 544. [func] Add statistics option, enable statistics-file option,
5826N/A add RNDC option "dump-statistics" to write out a
6211N/A 543. [doc] The 'port' option is now documented.
5826N/A 542. [func] Add allow-update-forwarding support.
5826N/A 541. [func] Add bogus server support.
5826N/A 540. [func] Add dialup support.
5826N/A 539. [func] Support the blackhole option.
5826N/A 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
5826N/A 537. [func] Use transfer-source{-v6} when notify messages.
5826N/A 536. [func] Use transfer-source{-v6} when sending refresh queries.
5826N/A Transfer-source{-v6} now take a optional port
5826N/A parameter for setting the UDP source port. The port
5826N/A parameter is ignored for TCP.
5826N/A 535. [func] Use transfer-source{-v6} when forwarding update
5826N/A 534. [func] Ancestors have been removed from RBT chains. Ancestor
5826N/A information can be discerned via node parent pointers.
5826N/A 533. [func] Incorporated name hashing into the RBT database to
5826N/A 532. [func] Implement DNS UPDATE pseudo records using
5826N/A 531. [func] Rdata really should be initalized before being assigned
5826N/A to (dns_rdata_fromwire(), dns_rdata_fromtext(),
5826N/A dns_rdata_clone(), dns_rdata_fromregion()),
5826N/A 530. [func] New function dns_rdata_invalidate().
5826N/A 529. [bug] 521 contained a bug which caused zones to always
5826N/A 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
5826N/A on their arguements. ISC_LIST_XXXXUNSAFE can be use
5826N/A to skip the checks however use with caution.
5826N/A 527. [func] New function dns_rdata_clone().
5826N/A 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
5826N/A 525. [func] New arguement 'exact' for dns_db_subtractrdataset(),
5826N/A and dns_rdataslab_subtract() requesting that the RR's
5826N/A must exist prior to deletion. DNS_R_NOTEXACT is
5826N/A returned if the condition is not met.
5826N/A 524. [func] The 'forward' and 'forwarders' statement in
5826N/A non-forward zones should work now.
5826N/A 523. [doc] The source to the Administrator Reference Manual is
5826N/A now an XML file using the DocBook DTD, and is included
5826N/A in the distribution. The plain text version of the
5826N/A ARM is temporarily unavailable while we figure out
5826N/A how to generate readable plain text from the XML.
5826N/A 522. [func] The lightweight resolver daemon can now use
5826N/A a real configuration file, and its functionality
5826N/A can be provided by a name server. Also, the -p and -P
5826N/A options to lwresd have been reversed.
5826N/A 521. [bug] Detect master files which contain $INCLUDE and always
5826N/A 520. [bug] Upgraded libtool to 1.3.5, which makes shared
5826N/A library builds almost work on AIX (and possibly
5826N/A 519. [bug] dns_name_split() would improperly split some bitstring
5826N/A labels, zeroing a few of the least signficant bits in
5826N/A the prefix part. When such an improperly created
6278N/A prefix was returned to the RBT database, the bogus
6297N/A label was dutifully stored, corrupting the tree.
6278N/A 518. [bug] The resolver did not realize that a DNAME which was
6278N/A "the answer" to the client's query was "the answer",
6297N/A and such queries would fail. [RT #399]
6326N/A 517. [bug] The resolver's DNAME code would trigger an assertion
6278N/A if there was more than one DNAME in the chain.
5826N/A 516. [bug] Cache lookups which had a NULL node pointer,
e.g. 5826N/A those by dns_view_find(), and which would match a
5826N/A 515. [bug] The ssu table was not being attached / detached
5826N/A by dns_zone_[sg]etssutable. [RT#397]
5826N/A 514. [func] Retry refresh and notify queries if they timeout.
5826N/A 513. [func] New functionality added to rdnc and server to allow
5826N/A individual zones to be refreshed ore reloaded.
5826N/A 512. [bug] The zone tranfer code could throw an execption with
5826N/A 511. [bug] The message code could throw an assertion on an
6326N/A out of memory failure. [RT #392]
6326N/A 510. [bug] Remove spurious view notify warning. [RT #376]
6326N/A 509. [func] Add support for write of zone files on shutdown.
6326N/A 508. [func] dns_message_parse() can now do a best-effort
6326N/A attempt, which should allow dig to print more invalid
6326N/A 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
6326N/A and dns_view_flushanddetach().
6326N/A 506. [func] Do not fail to start on errors in zone files.
6326N/A 505. [bug] nsupdate was printing "unknown result code". [RT #373]
5826N/A 504. [bug] The zone was not being marked as dirty when updated via
5826N/A 503. [bug] dumptime was not being set along with
5826N/A 502. [func] On a SERVFAIL reply, DiG will now try the next server
5826N/A in the list, unless the +fail option is specified.
5826N/A 501. [bug] Incorrect port numbers were being displayed by
5826N/A 500. [func] Nearly useless +details option removed from DiG.
5826N/A 499. [func] In DiG, specifying a class with -c or type with -t
5826N/A changes command-line parsing so that classes and
5826N/A types are only recognized if following -c or -t.
5826N/A This allows hosts with the same name as a class or
5826N/A 498. [doc] There is now a man page for "dig"
5826N/A 497. [bug] The error messages printed when an IP match list
5826N/A contained a network address with a nonzero host
5826N/A part where not sufficiently detailed. [RT #365]
5826N/A 496. [bug] named didn't sanity check numeric parameters. [RT #361]
5826N/A 495. [bug] nsupdate was unable to handle large records. [RT #368]
5826N/A 494. [func] Do not cache NXDOMAIN responses for SOA queries.
5826N/A 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
5826N/A for SOA queries. This makes it easier to locate
5826N/A the containing zone without polluting intermediate
5826N/A 492. [bug] attempting to reload a zone caused the server fail
5826N/A to shutdown cleanly. [RT #360]
5826N/A 491. [bug] nsupdate would segfault when sending certain
5826N/A prerequisites with empty RDATA. [RT #356]
5826N/A obtained an SOA containing the zone's configured
5826N/A retry time, perform the SOA query retries using
5826N/A exponential backoff. [RT #337]
5826N/A 489. [func] The zone manager now has a "i/o" queue.
5826N/A 488. [bug] Locks weren't properly destroyed in some cases.
5826N/A 487. [port] flockfile() is not defined on all systems.
5826N/A 486. [bug] nslookup: "set all" and "server" commands showed
5826N/A the incorrect port number if a port other than 53
5826N/A 485. [func] When dig had more than one server to query, it would
5826N/A send all of the messages at the same time. Add
5826N/A rate limiting of the transmitted messages.
5826N/A 484. [bug] When the server was reloaded after removing addresses
5826N/A were still listening on the removed addresses due
5826N/A to reference count loops. [RT #325]
5826N/A 483. [bug] nslookup: "set all" showed a "search" option but it
5826N/A 482. [bug] nslookup: a plain "server" or "lserver" should be
5826N/A 481. [bug] nslookup:get_next_command() stack size could exceed
5826N/A 480. [bug] strtok() is not thread safe. [RT #349]
5826N/A 479. [func] The test suite can now be run by typing "make check"
5826N/A or "make test" at the top level.
5826N/A 478. [bug] "make install" failed if the directory specified with
5826N/A --prefix did not already exist.
5826N/A its directory was created. [RT #324]
5826N/A 476. [bug] A zone could expire while a zone transfer was in
5826N/A progress triggering a INSIST failure. [RT #329]
5826N/A 475. [bug] query_getzonedb() sometimes returned a non-null version
5826N/A on failure. This caused assertion failures when
5826N/A generating query responses where names subject to
5826N/A additional section processing pointed to a zone
5826N/A to which access had been denied by means of the
5826N/A allow-query option. [RT #336]
5826N/A 474. [bug] The mnemonic of the CHAOS class is CH according to
5826N/A RFC1035, but it was printed and read only as CHAOS.
5826N/A We now accept both forms as input, and print it
5826N/A 473. [bug] nsupdate overran the end of the list of name servers
5826N/A when no servers could be reached, typically causing
5826N/A it to print the error message "dns_request_create:
5826N/A 472. [bug] Off-by-one error caused isc_time_add() to sometimes
5826N/A produce invalid time values.
5826N/A 470. [feature] $GENERATE is now supported. See also
5826N/A 469. [bug] "query-source address * port 53;" now works.
5826N/A 468. [bug] dns_master_load*() failed to report file and line
5826N/A number in certain error conditions.
5826N/A 467. [bug] dns_master_load*() failed to log an error if
5826N/A 466. [bug] dns_master_load*() could return success when it failed.
5826N/A 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
5826N/A 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
5826N/A 463. [bug] nsupdate sent malformed SOA queries to the second
5826N/A query sent to the first one failed.
5826N/A 462. [bug] --disable-ipv6 should work now.
5826N/A 461. [bug] Specifying an unknown key in the "keys" clause of the
5826N/A "controls" statement caused a NULL pointer dereference.
6278N/A 460. [bug] Much of the DNSSEC code only worked with class IN.
6278N/A 459. [bug] Nslookup processed the "set" command incorrectly.
6278N/A 458. [bug] Nslookup didn't properly check class and type values.
6297N/A timeouts in certain situations, causing an
6278N/A unnecessary warning message to be printed.
6278N/A 456. [bug] Stub zones were not resetting the refresh and expire
5826N/A counters, loadtime or clearing the DNS_ZONE_REFRESH
5826N/A (refresh in progress) flag upon successful update.
6278N/A This disabled further refreshing of the stub zone,
5826N/A causing it to eventually expire. [RT #300]
5826N/A 455. [doc] Document IPv4 prefix notation does not require a
5826N/A dotted decimal quad but may be just dotted decimal.
5826N/A 454. [bug] Enforce dotted decimal and dotted decimal quad where
5826N/A 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
5826N/A 452. [bug] Warn if the unimplemented option "statistics-file"
5826N/A 451. [func] Update forwarding implememted.
5826N/A 450. [func] New function ns_client_sendraw().
5826N/A 449. [bug] isc_bitstring_copy() only works correctly if the
5826N/A two bitstrings have the same lsb0 value, but this
5826N/A requirement was not documented, nor was there a
5826N/A 448. [bug] Host output formatting change, to match v8. [RT #255]
5826N/A 447. [bug] Dig didn't properly retry in TCP mode after
5826N/A a truncated reply. [RT #277]
5826N/A 446. [bug] Confusing notify log message. [RT #298]
5826N/A 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
5826N/A bitstring triggered a REQUIRE statement. The REQUIRE
5826N/A statement was incorrect. [RT #297]
5826N/A 444. [func] "recursion denied" messages are always logged at
5826N/A debug level 1, now, rather than sometimes at ERROR.
5826N/A This silences these warnings in the usual case, where
5826N/A some clients set the RD bit in all queries.
5826N/A 443. [bug] When loading a master file failed because of an
5826N/A unrecognized RR type name, the error message
5826N/A did not include the file name and line number.
5826N/A 442. [bug] TSIG signed messages that did not match any view
5826N/A crashed the server. [RT #290]
5826N/A 441. [bug] Nodes obscured by a DNAME were inaccessible even
5826N/A when DNS_DBFIND_GLUEOK was set.
5826N/A 440. [func] New function dns_zone_forwardupdate().
5826N/A 439. [func] New function dns_request_createraw().
5826N/A 438. [func] New function dns_message_getrawmessage().
5826N/A 437. [func] Log NOTIFY activity to the notify channel.
5826N/A 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
5826N/A which sometimes happens on Linux, named would enter
5826N/A a busy loop. Also, unexpected socket errors were
5826N/A not logged at a high enough logging level to be
5826N/A useful in diagnosing this situation. [RT #275]
5826N/A 435. [bug] dns_zone_dump() overwrote existing zone files
5826N/A rather than writing to a temporary file and
5826N/A renaming. This could lead to empty or partial
5826N/A zone files being left around in certain error
5826N/A conditions involving the initial transfer of a
5826N/A slave zone, interfering with subsequent server
5826N/A 434. [func] New function isc_file_isabsolute().
5826N/A 433. [func] isc_base64_decodestring() now accepts newlines
5826N/A within the base64 data. This makes it possible
5826N/A to break up the key data in a "trusted-keys"
5826N/A statement into multiple lines. [RT #284]
5826N/A retry time is now a random value between 75% and
5826N/A 100% of the configured value.
5826N/A 431. [func] Log at ISC_LOG_INFO when a zone is successfully
5826N/A 430. [bug] Rewrote the lightweight resolver client management
5826N/A code to handle shutdown correctly and general
5826N/A 429. [bug] The space reserved for a TSIG record in a response
5826N/A was 2 bytes too short, leading to message
5826N/A DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
5826N/A generating negative responses in a secure zone.
5826N/A 427. [bug] Avoid going into an infinite loop when the validator
5826N/A gets a negative response to a key query where the
5826N/A records are signed by the missing key.
5826N/A 426. [bug] Attempting to generate an oversized RSA key could
5826N/A cause dnssec-keygen to dump core.
5826N/A 425. [bug] Warn about the auth-nxdomain default value change
5826N/A if there is no auth-nxdomain statement in the
5826N/A 424. [bug] notify_createmessage() could trigger an assertion
5826N/A failure when creating the notify message failed,
5826N/A e.g. due to corrupt zones with multiple SOA records.
5826N/A 423. [bug] When responding to a recusive query, errors that occur
5826N/A after following a CNAME should cause the query to fail.
5826N/A 422. [func] get rid of isc_random_t, and make isc_random_get()
5826N/A and isc_random_jitter() use rand() internally
5826N/A instead of local state. Note that isc_random_*()
5826N/A functions are only for weak, non-critical "randomness"
5826N/A such as timing jitter and such.
5826N/A 421. [bug] nslookup would exit when given a blank line as input.
5826N/A 420. [bug] nslookup failed to implement the "exit" command.
5826N/A 419. [bug] The certificate type PKIX was misspelled as SKIX.
5826N/A 418. [bug] At debug levels >= 10, getting an unexpected
5826N/A socket receive error would crash the server
5826N/A while trying to log the error message.
5826N/A 417. [func] Add isc_app_block() and isc_app_unblock(), which
5826N/A allow an application to handle signals while
5826N/A 416. [bug] Slave zones with no master file tried to use a
5826N/A NULL pointer for a journal file name when they
5826N/A received an IXFR. [RT #273]
5826N/A 415. [bug] The logging code leaked file descriptors.
5826N/A 414. [bug] Server did not shut down until all incoming zone
5826N/A 413. [bug] Notify could attempt to use the zone database after
5826N/A it had been unloaded. [RT#267]
6278N/A 412. [bug] named -v didn't print the version.
6278N/A 411. [bug] A typo in the HS A code caused an assertion failure.
6278N/A 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
6278N/A to a random value on success.
6278N/A 409. [bug] If named was shut down early in the startup
6297N/A process, ns_omapi_shutdown() would attempt to lock
6278N/A an unintialized mutex. [RT #262]
6278N/A 408. [bug] stub zones could leak memory and reference counts if
5826N/A all the masters were unreachable.
6278N/A 407. [bug] isc_rwlock_lock() would needlessly block
5826N/A readers when it reached the read quota even
5826N/A if no writers were waiting.
5826N/A 406. [bug] Log messages were occasionally lost or corrupted
5826N/A due to a race condition in isc_log_doit().
5826N/A 405. [func] Add support for selective forwarding (forward zones)
5826N/A 404. [bug] The request library didn't completely work with IPv6.
5826N/A 403. [bug] "host" did not use the search list.
5826N/A 402. [bug] Treat undefined acls as errors, rather than
5826N/A warning and then later throwing an assertion.
5826N/A 400. [bug] SIG(0) signing and verifying was done incorrectly.
5826N/A 399. [bug] When reloading the server with a config file
5826N/A containing a syntax error, it could catch an
5826N/A assertion failure trying to perform zone
5826N/A maintenance on, or sending notifies from,
5826N/A tentatively created zones whose views were
5826N/A never fully configured and lacked an address
5826N/A database and request manager.
5826N/A 398. [bug] "dig" sometimes caught an assertion failure when
5826N/A using TSIG, depending on the key length.
5826N/A 397. [func] Added utility functions dns_view_gettsig() and
5826N/A 396. [doc] There is now a man page for "nsupdate"
5826N/A 395. [bug] nslookup printed incorrect RR type mnemonics
5826N/A for RRs of type >= 21 [RT #237].
5826N/A 394. [bug] Current name was not propagated via $INCLUDE.
5826N/A 393. [func] Initial answer while loading (awl) support.
5826N/A Entry points: dns_master_loadfileinc(),
5826N/A dns_master_loadstreaminc(), dns_master_loadbufferinc().
5826N/A Note: calls to dns_master_load*inc() should be rate
5826N/A be rate limited so as to not use up all file
5826N/A 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
5826N/A not support the given address family requested.
5826N/A 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
5826N/A 390. [func] The function dns_zone_setdbtype() now takes
5826N/A both the zone database type and its arguments,
5826N/A making the functions dns_zone_adddbarg()
5826N/A and dns_zone_cleardbargs() unnecessary.
5826N/A 389. [bug] Attempting to send a reqeust over IPv6 using
5826N/A dns_request_create() on a system without IPv6
5826N/A support caused an assertion failure [RT #235].
5826N/A 388. [func] dig and host can now do reverse ipv6 lookups.
5826N/A 387. [func] Add dns_byaddr_createptrname(), which converts
5826N/A an address into the name used by a PTR query.
5826N/A 386. [bug] Missing strdup() of ACL name caused random
5826N/A ACL matching failures [RT #228].
5826N/A 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
5826N/A 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
5826N/A 383. [func] When writing a master file, print the SOA and NS
6278N/A records (and their SIGs) before other records.
6278N/A 382. [bug] named -u failed on many Linux systems where the
6278N/A libc provided kernel headers do not match
6297N/A 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
6278N/A IPV6_PKTINFO if found. [RT #229]
6278N/A 380. [bug] nsupdate didn't work with IPv6.
6278N/A 379. [func] New library function isc_sockaddr_anyofpf().
5826N/A 378. [func] named and lwresd will log the command line arguments
6278N/A they were started with in the "starting ..." message.
5826N/A 377. [bug] When additional data lookups were refused due to
5826N/A "allow-query", the databases were still being
5826N/A attached causing reference leaks.
5826N/A 376. [bug] The server should always use good entropy when
5826N/A performing cryptographic functions needing entropy.
5826N/A 375. [bug] Per-zone "allow-query" did not properly override the
5826N/A 374. [bug] SOA in authoritative negative responses had wrong TTL.
5826N/A 373. [func] nslookup is now installed by "make install".
5826N/A 372. [bug] Deal with Microsoft DNS servers appending two bytes of
5826N/A garbage to zone transfer requests.
5826N/A 371. [bug] At high debug levels, doing an outgoing zone transfer
5826N/A of a very large RRset could cause an assertion failure
5826N/A 370. [bug] The error messages for rollforward failures were
5826N/A max-retry-time, min-retry-time,
5826N/A max-refresh-time, min-refresh-time.
5826N/A 368. [func] Restructure the internal ".bind" view so that more
5826N/A 367. [bug] Allow proper selection of server on nslookup command
5826N/A 366. [func] Allow use of '-' batch file in dig for stdin.
5826N/A 365. [bug] nsupdate -k leaked memory.
5826N/A 364. [func] Added additional-from-{cache,auth}
5826N/A 362. [bug] rndc no longer aborts if the configuration file is
5826N/A missing an options statement. [RT #209]
5826N/A 361. [func] When the RBT find or chain functions set the name and
5826N/A origin for a node that stores the root label
5826N/A the name is now set to an empty name, instead of ".",
5826N/A to simplify later use of the name and origin by
5826N/A dns_name_concatenate(), dns_name_totext() or
5826N/A 360. [func] dns_name_totext() and dns_name_format() now allow
5826N/A an empty name to be passed, which is formatted as "@".
5826N/A 359. [bug] dnssec-signzone occasionally signed glue records.
5826N/A 358. [cleanup] Rename the intermediate files used by the dnssec
5826N/A 357. [bug] The zone file parser crashed if the argument
5826N/A to $INCLUDE was a quoted string.
5826N/A 356. [cleanup] isc_task_send no longer requires event->sender to
5826N/A 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
5826N/A 354. [doc] Man pages for the dnssec tools are now included in
5826N/A 352. [bug] Race condition in dns_client_t startup could cause
5826N/A 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
5826N/A signed query could crash the server.
5826N/A 350. [bug] Also-notify lists specified in the global options
5826N/A block were not correctly reference counted, causing
5826N/A 349. [bug] Processing a query with the CD bit set now works
5826N/A and 'additional-from-cache' now supported in view and
5826N/A 347. [bug] Don't crash if an argument is left off options in dig.
5826N/A 346. [func] Add support for .digrc config file, in the
5826N/A * Significantly improve structure handling
5826N/A * Don't pre-load entire batch files
5826N/A * Shorten timeouts to match v8's behavior
5826N/A 344. [bug] When shutting down, lwresd sometimes tried
5826N/A to shut down its client tasks twice,
5826N/A 343. [bug] Although zone maintenance SOA queries and
5826N/A notify requests were signed with TSIG keys
5826N/A when configured for the server in case,
5826N/A the TSIG was not verified on the response.
5826N/A 342. [bug] The wrong name was being passed to
5826N/A dns_name_dup() when generating a TSIG
5826N/A 340. [bug] The top-level COPYRIGHT file was missing from
5826N/A 339. [bug] DNSSEC validation of the response to an ANY
5826N/A query at a name with a CNAME RR in a secure
5826N/A zone triggered an assertion failure.
5826N/A 338. [bug] lwresd logged to syslog as named, not lwresd.
5826N/A 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
5826N/A 336. [bug] "dig -f" used 64 k of memory for each line in
5826N/A the file. It now uses much less, though still
5826N/A proportionally to the file size.
5826N/A 335. [bug] named would occasionally attempt recursion when
5826N/A it was disallowed or undesired.
5826N/A 334. [func] Added hmac-md5 to libisc.
5826N/A 333. [bug] The resolver incorrectly accepted referrals to
5826N/A domains that were not parents of the query name,
5826N/A causing assertion failures.
5826N/A 332. [func] New function dns_name_reset().
5826N/A 331. [bug] Only log "recursion denied" if RD is set. (RT #178)
5826N/A 330. [bug] Many debugging messages were partially formatted
5826N/A even when debugging was turned off, causing a
5826N/A significant decrease in query performance.
5826N/A 329. [func] omapi_auth_register() now takes a size_t argument for
5826N/A the length of a key's secret data. Previously
5826N/A OMAPI only stored secrets up to the first NUL byte.
5826N/A 328. [func] Added isc_base64_decodestring().
5826N/A address where a host specification was required.
5826N/A 326. [func] 'keys' in an 'inet' control statement is now
5826N/A required and must have at least one item in it.
5826N/A A "not supported" warning is now issued if a 'unix'
5826N/A control channel is defined.
5826N/A 325. [bug] isc_lex_gettoken was processing octal strings when
5826N/A ISC_LEXOPT_CNUMBER was not set.
5826N/A 324. [func] In the resolver, turn EDNS0 off if there is no
5826N/A response after a number of retransmissions.
5826N/A This is to allow queries some chance of succeeding
5826N/A even if all the authoritative servers of a zone
5826N/A silently discard EDNS0 requests instead of
5826N/A sending an error response like they ought to.
5826N/A 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
5826N/A Because of this, servers authoritative for a parent
5826N/A and grandchild zone but not authoritative for the
5826N/A intervening child zone did not correctly issue
5826N/A referrals to the servers of the child zone.
5826N/A 322. [bug] Queries for KEY RRs are now sent to the parent
5826N/A server before the authoritative one, making
5826N/A DNSSEC insecurity proofs work in many cases
5826N/A where they previously didn't.
5826N/A 321. [bug] When synthesizing a CNAME RR for a DNAME
5826N/A response, query_addcname() failed to intitialize
5826N/A the type and class of the CNAME dns_rdata_t,
5826N/A uses authentication to talk to named, command
5826N/A line syntax changed. This will all be described
5826N/A to configure the OMAPI command channel.
5826N/A 318. [func] dns_c_ndcctx_destroy() could never return anything
5826N/A except ISC_R_SUCCESS; made it have void return instead.
5826N/A 317. [func] Use callbacks from libomapi to determine if a
5826N/A new connection is valid, and if a key requested
5826N/A to be used with that connection is valid.
5826N/A 316. [bug] Generate a warning if we detect an unexpected <eof>
5826N/A 315. [bug] Handle non-empty blanks lines. (RT #163)
5826N/A more than one key specified for the inet clause.
5826N/A error. Instead, parse as much as possible, but
5826N/A still return an error if one was found.
5826N/A 312. [bug] Increase the number of allowed elements in the
5826N/A are more than this, ignore the remainder rather
5826N/A than returning a failure in lwres_conf_parse.
5826N/A 311. [bug] lwres_conf_parse failed when the first line of
5826N/A allow { any; } keys { "foo"; }
5826N/A - allow "port xxx" to be left out of statement,
5826N/A in which case it defaults to omapi's default port
5826N/A 309. [bug] When sending a referral, the server did not look
5826N/A for name server addresses as glue in the zone
5826N/A holding the NS RRset in the case where this zone
5826N/A was not the same as the one where it looked for
5826N/A name server addresses as authoritative data.
5826N/A 308. [bug] Treat a SOA record not at top of zone as an error
5826N/A when loading a zone. (RT #154)
5826N/A 307. [bug] When canceling a query, the resolver didn't check for
5826N/A isc_socket_sendto() calls that did not yet have their
5826N/A completion events posted, so it could (rarely) end up
5826N/A destroying the query context and then want to use
5826N/A it again when the send event posted, triggering an
5826N/A assertion as it tried to cancel an already-canceled
5826N/A 306. [bug] Reading HMAC-MD5 private key files didn't work.
5826N/A 305. [bug] When reloading the server with a config file
5826N/A containing a syntax error, it could catch an
5826N/A assertion failure trying to perform zone
5826N/A maintenance on tentatively created zones whose
5826N/A views were never fully configured and lacked
5826N/A 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
5826N/A instead of returning failure.
5826N/A 303. [bug] Add additional sanity checks to differentiate a AXFR
5826N/A response vs a IXFR response. (RT #157)
5826N/A 302. [bug] In dig, host, and nslookup, MXNAME should be large
5826N/A enough to hold any legal domain name in presentation
6278N/A 301. [bug] Uninitalised pointer in host:printmessage(). (RT #159)
6278N/A on platforms lacking IPv6 because each included their
6278N/A own ipv6 header file for the missing definitions. Now
6297N/A the other (ISC_IPV6_H and LWRES_IPV6_H).
6297N/A 299. [cleanup] Get the user and group information before changing the
6278N/A root directory, so the administrator does not need to
6278N/A keep a copy of the user and group databases in the
6278N/A chroot'ed environment. Suggested by Hakan Olsson.
5826N/A 298. [bug] A mutex deadlock occurred during shutdown of the
6278N/A interface manager under certain conditions.
6278N/A Digital Unix systems were the most affected.
5826N/A 297. [bug] Specifying a key name that wasn't fully qualified
5826N/A in certain parts of the config file could cause
5826N/A 296. [bug] "make install" from a separate build directory
5826N/A failed unless configure had been run in the source
5826N/A 295. [bug] When invoked with type==CNAME and a message
5826N/A not constructed by dns_message_parse(),
5826N/A dns_message_findname() failed to find anything
5826N/A due to checking for attribute bits that are set
5826N/A only in dns_message_parse(). This caused an
5826N/A infinite loop when constructing the response to
5826N/A an ANY query at a CNAME in a secure zone.
5826N/A 294. [bug] If we run out of space in while processing glue
5826N/A when reading a master file and commit "current name"
5826N/A reverts to "name_current" instead of staying as
5826N/A 293. [port] Add support for FreeBSD 4.0 system tests.
5826N/A 292. [bug] Due to problems with the way some operating systems
5826N/A handle simultaneous listening on IPv4 and IPv6
5826N/A addresses, the server no longer listens on IPv6
5826N/A addresses by default. To revert to the previous
5826N/A behavior, specify "listen-on-v6 { any; };" in
5826N/A 291. [func] Caching servers no longer send outgoing queries
5826N/A over TCP just because the incoming recursive query
5826N/A 290. [cleanup] +twiddle option to dig (for testing only) removed.
5826N/A 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
5826N/A host is now installed in $bindir. (Be sure to remove
5826N/A 288. [func] rndc is now installed by "make install" into $sbindir.
5826N/A 287. [bug] rndc now works again as "rndc 127.1 reload" (for
5826N/A only that task). Parsing its configuration file and
5826N/A using digital signatures for authentication has been
5826N/A disabled until named supports the "controls" statement,
5826N/A 286. [bug] On Solaris 2, when named inherited a signal state
5826N/A where SIGHUP had the SIG_IGN action, SIGHUP would
5826N/A be ignored rather than causing the server to reload
5826N/A 285. [bug] A change made to the dst API for beta4 inadvertently
5826N/A broke OMAPI's creation of a dst key from an incoming
5826N/A message, causing an assertion to be triggered. Fixed.
5826N/A 284. [func] The DNSSEC key generation and signing tools now
5826N/A generate randomness from keyboard input on systems
6297N/A 283. [cleanup] The 'lwresd' program is now a link to 'named'.
6278N/A 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
6278N/A too big for an unsigned long.
6297N/A 281. [bug] Fixed list of recognized config file category names.
6278N/A easily build applications that link with
5826N/A 279. [bug] Private omapi function symbols shared between
6278N/A protected using the ISC convention of starting with
6278N/A the library name and two underscores ("omapi__"...)
5826N/A note of when isc_log_categorybyname() wasn't able
5826N/A to find the category name and would then apply the
5826N/A channel list of the unknown category to all categories.
5826N/A 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
5826N/A would fail to find the first member of any category
5826N/A or module array apart from the internal defaults.
5826N/A Thus, for example, the "notify" category was improperly
5826N/A 276. [bug] dig now supports maximum sized TCP messages.
5826N/A 275. [bug] The definition of lwres_gai_strerror() was missing
5826N/A 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
5826N/A 273. [func] The default for the 'transfer-format' option is
5826N/A now 'many-answers'. This will break zone transfers
5826N/A to BIND 4.9.5 and older unless there is an explicit
5826N/A 'one-answer' configuration.
5826N/A 272. [bug] The sending of large TCP responses was canceled
5826N/A in mid-transmission due to a race condition
5826N/A caused by the failure to set the client object's
5826N/A "newstate" variable correctly when transitioning
5826N/A 271. [func] Attempt to probe the number of cpus in named
5826N/A if unspecified rather than defaulting to 1.
5826N/A 270. [func] Allow maximum sized TCP answers.
5826N/A 269. [bug] Failed DNSSEC validations could cause an assertion
5826N/A failure by causing clone_results() to be called with
5826N/A 268. [doc] A plain text version of the Administrator
5826N/A Reference Manual is now included in the distribution,
5826N/A 267. [func] Nsupdate is now provided in the distribution.
5826N/A 266. [bug]
zone.c:save_nsrrset() node was not initalized.
5826N/A 265. [bug] dns_request_create() now works for TCP.
5826N/A 264. [func] Dispatch can not take TCP sockets in connecting
5826N/A state. Set DNS_DISPATCHATTR_CONNECTED when calling
5826N/A dns_dispatch_createtcp() for connected TCP sockets
5826N/A or call dns_dispatch_starttcp() when the socket is
5826N/A 263. [func] New logging channel type 'stderr'
5826N/A 262. [bug] 'master' was not initalized in
zone.c:stub_callback().
5826N/A 261. [func] Add dns_zone_markdirty().
5826N/A 260. [bug] Running named as a non-root user failed on Linux
5826N/A kernels new enough to support retaining capabilities
5826N/A 259. [func] New random-device and random-seed-file statements
5826N/A 257. [bug] The server detached the last zone manager reference
5826N/A too early, while it could still be in use by queries.
5826N/A This manifested itself as assertion failures during the
5826N/A shutdown process for busy name servers (RT #133).
5826N/A isc_ratelimiter_shutdown guarantees that the rate
5826N/A limiter is detached from its task.
5826N/A 255. [func] New function dns_zonemgr_attach().
5826N/A 254. [bug] Suppress "query denied" messages on additional data
5826N/A comments (anywhere in line, not just as the beginning).
5826N/A It also aborted when an unrecognized keyword was seen,
5826N/A now it silently ignores the entire line.
5826N/A 251. [bug] lwresd caught an assertion failure on startup.
5826N/A 250. [bug] fixed handling of size+unit when value would be too
5826N/A large for internal representation.
5826N/A 249. [cleanup] max-cache-size config option now takes a size-spec
5826N/A like 'datasize', except 'default' is not allowed.
5826N/A 248. [bug] global lame-ttl option was not being printed when
5826N/A config structures were written out.
5826N/A 247. [cleanup] Rename cache-size config option to max-cache-size.
5826N/A 246. [func] Rename global option cachesize to cache-size and
5826N/A add corresponding option to view statement.
5826N/A 245. [bug] If an uncompressed name will take more than 255
5826N/A bytes and the buffer is sufficiently long,
5826N/A dns_name_fromwire should return DNS_R_FORMERR,
5826N/A not ISC_R_NOSPACE. This bug caused cause the
5826N/A server to catch an assertion failure when it
5826N/A received a query for a name longer than 255
5826N/A 242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
5826N/A 241. [cleanup] nscount and soacount have been removed from the
5826N/A dns_master_*() arguement lists.
5826N/A 240. [func] databases now come in three flavours: zone, cache
5826N/A 239. [func] If ISC_MEM_DEBUG is enabled, the variable
5826N/A isc_mem_debugging controls whether messages
5826N/A 238. [cleanup] A few more compilation warnings have been quieted:
5826N/A + PTHREAD_ONCE_INIT unbraced initializer warnings on
5826N/A + IN6ADDR_ANY_INIT unbraced initializer warnings on
5826N/A 237. [bug] If connect() returned ENOBUFS when the resolver was
5826N/A initiating a TCP query, the socket didn't get
5826N/A destroyed, and the server did not shut down cleanly.
5826N/A 236. [func] Added new listen-on-v6 config file statement.
5826N/A 235. [func] Consider it a config file error if a listen-on
5826N/A statement has an IPv6 address in it, or a
5826N/A listen-on-v6 statement has an IPv4 address in it.
5826N/A 234. [bug] Allow a trusted-key's first field (domain-name) be
5826N/A either a quoted or an unquoted string, instead of
5826N/A 233. [cleanup] Convert all config structure integer values to unsigned
5826N/A integer (isc_uint32_t) to match grammer.
5826N/A 232. [bug] Allow slave zones to not have a file.
5826N/A 231. [func] Support new 'port' clause in config file options
5826N/A section. Causes 'listen-on', 'masters' and
5826N/A 'also-notify' statements to use its value instead of
5826N/A 229. [func] Support config file sig-validity-interval statement
5826N/A in options, views and zone statements (master
5826N/A 228. [cleanup] Logging messages in config module stripped of
5826N/A 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
5826N/A dns_rcode_*, dns_opcode_*, and dns_trust_* are
5826N/A also now cast to their appropriate types, as with
5826N/A dns_rdatatype_* in item number 225 below.
5826N/A 226. [func] dns_name_totext() now always prints the root name as
5826N/A '.', even when omit_final_dot is true.
5826N/A 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
5826N/A cast to dns_rdatatype_t via macros of their same name
5826N/A so that they are of the proper integral type wherever
5826N/A a dns_rdatatype_t is needed.
5826N/A 224. [cleanup] The entire project builds cleanly with gcc's
5826N/A -Wcast-qual and -Wwrite-strings warnings enabled,
5826N/A which is now the default when using gcc. (Warnings
5826N/A unfortunately to be expected.)
5826N/A 223. [func] Several functions were reprototyped to qualify one
5826N/A or more of their arguments with "const". Similarly,
5826N/A several functions that return pointers now have
5826N/A those pointers qualified with const.
5826N/A 222. [bug] The global 'also-notify' option was ignored.
5826N/A 221. [bug] An uninitialized variable was sometimes passed to
5826N/A dns_rdata_freestruct() when loading a zone, causing
5826N/A 220. [cleanup] Set the default outgoing port in the view, and
5826N/A set it in sockaddrs returned from the ADB.
5826N/A 219. [bug] Signed truncated messages more correctly follow
5826N/A 218. [func] When an rdataset is signed, its ttl is normalized
5826N/A based on the signature validity period.
5826N/A 217. [func] Also-notify and trusted-keys can now be used in
5826N/A 216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
5826N/A 215. [bug] Failures at certain points in request processing
5826N/A could cause the assertion INSIST(client->lockview
5826N/A 214. [func] New public function isc_netaddr_format(), for
5826N/A formatting network addresses in log messages.
5826N/A 213. [bug] Don't leak memory when reloading the zone if
5826N/A an update-policy clause was present in the old zone.
5826N/A 211. [func] The 'key' and 'server' statements can now occur
5826N/A 210. [bug] The 'allow-transfer' option was ignored for slave
5826N/A zones, and the 'transfers-per-ns' option was
5826N/A 209. [cleanup] Upgraded openssl files to new version 0.9.5a
5826N/A 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
5826N/A 207. [func] The dnssec tools properly use the logging subsystem.
5826N/A 206. [cleanup] dst now stores the key name as a dns_name_t, not
5826N/A 205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
5826N/A ("prototyped function redeclared without prototype")
5826N/A and 1552 ("variable ... set but not used") when
5826N/A directories, which contain code imported from outside
5826N/A 204. [cleanup] On
HP/UX, pass +vnocompatwarnings to the linker
5826N/A to quiet the warnings that "The linked output may not
5826N/A 203. [func] notify and zone soa queries are now tsig signed when
6278N/A 202. [func] isc_lex_getsourceline() changed from returning int
6278N/A to returning unsigned long, the type of its underlying
5826N/A 200. [bug] Failures in sending query responses to clients
5826N/A 199. [bug] isc_heap_delete() sometimes violated the heap
5826N/A invariant, causing timer events not to be posted
5826N/A 198. [func] Dispatch managers hold memory pools which
5826N/A any managed dispatcher may use. This allows
5826N/A us to avoid dipping into the memory context for
5826N/A most allocations. [19-May-2000 explorer]
5826N/A 197. [bug] When an incoming AXFR or IXFR completes, the
5826N/A zone's internal state is refreshed from the
5826N/A SOA data. [19-May-2000 explorer]
5826N/A 196. [func] Dispatchers can be shared easily between views
5826N/A 195. [bug] Including the NXT record of the root domain
5826N/A in a negative response caused an assertion
5826N/A 194. [doc] The PDF version of the Administrator's Reference
5826N/A Manual is no longer included in the ISC BIND9
5826N/A 193. [func] changed dst_key_free() prototype.
5826N/A 192. [bug] Zone configuration validation is now done at end
5826N/A of config file parsing, and before loading
5826N/A 191. [func] Patched to compile on UnixWare
7.x. This platform
5826N/A is not directly supported by the ISC.
5826N/A 190. [cleanup] The DNSSEC tools have been moved to a separate
5826N/A directory dnssec/ and given the following new,
5826N/A Their command line arguments have also been changed to
5826N/A be more consistent. dnssec-keygen now prints the
5826N/A name of the generated key files (sans extension)
5826N/A on standard output to simplify its use in automated
5826N/A 189. [func] isc_time_secondsastimet(), a new function, will ensure
5826N/A that the number of seconds in an isc_time_t does not
5826N/A exceed the range of a time_t, or return ISC_R_RANGE.
5826N/A Similarly, isc_time_now(), isc_time_nowplusinterval(),
5826N/A isc_time_add() and isc_time_subtract() now check the
5826N/A isc_time_subtract, this changed a calling requirement
5826N/A (ie, something that could generate an assertion)
5826N/A into merely a condition that returns an error result.
5826N/A isc_time_add() and isc_time_subtract() were void-
5826N/A valued before but now return isc_result_t.
5826N/A 188. [func] Log a warning message when an incoming zone transfer
5826N/A 187. [func] isc_ratelimter_enqueue() has an additional arguement
5826N/A 186. [func] dns_request_getresponse() has an additional arguement
5826N/A 185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
5826N/A public functions did not have an isc__ prefix, and
5826N/A referred to functions that had previously been
5826N/A standard, which says that such names are reserved.
5826N/A 183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
5826N/A for logging the program name or other identifier.
5826N/A 182. [cleanup] New commandline parameters for dnssec tools
5826N/A 181. [func] Added dst_key_buildfilename and dst_key_parsefilename
5826N/A 180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
5826N/A before any zone or view statements.
5826N/A has non-empty list of masters defined.
5826N/A 177. [func] New per-zone boolean:
5826N/A intended to let a zone be disabled without having
5826N/A to comment out the entire zone statement.
5826N/A 176. [func] New global and per-view option:
5826N/A 175. [func] New global and per-view option:
5826N/A additional-data internal | minimal | maximal;
5826N/A 174. [func] New public function isc_sockaddr_format(), for
5826N/A formatting socket addresses in log messages.
5826N/A 173. [func] Keep a queue of zones waiting for zone transfer
5826N/A quota so that a new transfer can be dispatched
5826N/A immediately whenever quota becomes available.
5826N/A 172. [bug] $TTL directive was sometimes missing from dumped
5826N/A master files because totext_ctx_init() failed to
5826N/A initialize ctx->current_ttl_valid.
5826N/A 171. [cleanup] On NetBSD systems, the mit-pthreads or
5826N/A unproven-pthreads library is now always used
5826N/A unless --with-ptl2 is explicitly specified on
5826N/A the configure command line. The
5826N/A --with-mit-pthreads option is no longer needed
5826N/A 170. [cleanup] Remove inter server consistancy checks from zone,
5826N/A these should return as a seperate module in 9.1.
5826N/A dns_zone_checkservers(), dns_zone_checkparents(),
5826N/A dns_zone_checkchildren(), dns_zone_checkglue().
5826N/A Remove dns_zone_setadb(), dns_zone_setresolver(),
5826N/A dns_zone_setrequestmgr() these should now be found
5826N/A 169. [func] ratelimiter can now process N events per interval.
5826N/A due to not consuming the semicolon ending the include
5826N/A statement before switching input streams.
5826N/A 167. [bug] Make lack of masters for a slave zone a soft error.
5826N/A 166. [bug] Keygen was overwriting existing keys if key_id
5826N/A conflicted, now it will retry, and non-null keys
5826N/A with key_id == 0 are not generated anymore. Key
5826N/A was not able to generate NOAUTHCONF DSA key,
5826N/A increased RSA key size to 2048 bits.
5826N/A 165. [cleanup] Silence "end-of-loop condition not reached" warnings
5826N/A 164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
5826N/A isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
5826N/A isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
5826N/A to encapsulate nonportable usage of errno and sync.
5826N/A 163. [func] Added result codes ISC_R_FILENOTFOUND and
5826N/A 162. [bug] Ensure proper range for arguments to
ctype.h functions.
5826N/A 161. [cleanup] error in yyparse prototype that only HPUX caught.
5826N/A 160. [cleanup] getnet*() are not going to be implemented at this
5826N/A 159. [func] Redefinition of config file elements is now an
5883N/A error (instead of a warning).
5826N/A 158. [bug] Log channel and category list copy routines
5826N/A weren't assigning properly to output parameter.
5826N/A 157. [port] Fix missing prototype for getopt().
5826N/A 156. [func] Support new 'database' statement in zone.
5826N/A 155. [bug] ns_notify_start() was not detaching the found zone.
5826N/A 154. [func] The signer now logs libdns warnings to stderr even when
5826N/A not verbose, and in a nicer format.
5826N/A 153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
5826N/A is NULL then you need to preserve the 'rdata' until
5826N/A you have finished using the structure as there may be
5826N/A references to the associated memory. If 'mctx' is
5826N/A non-NULL it is guaranteed that there are no references
5826N/A to memory associated with 'rdata'.
5826N/A dns_rdata_freestruct() must be called if 'mctx' was
5826N/A non-NULL and may safely be called if 'mctx' was NULL.
5826N/A 152. [bug] keygen dumped core if domain name argument was omitted
5826N/A 151. [func] Support 'disabled' statement in zone config (causes
5826N/A zone to be parsed and then ignored). Currently must
5826N/A come after the 'type' clause.
5826N/A 150. [func] Support optional ports in masters and also-notify
5826N/A 149. [cleanup] Removed usused argument 'olist' from
5826N/A dns_c_view_unsetordering().
5826N/A 148. [cleanup] Stop issuing some warnings about some configuration
5826N/A file statements that were not implemented, but now are.
5826N/A 147. [bug] Changed yacc union size to be smaller for yaccs that
5826N/A put yacc-stack on the real stack.
5826N/A 146. [cleanup] More general redundant header file cleanup. Rather
5826N/A than continuing to itemize every header which changed,
5826N/A this changelog entry just notes that if a header file
5826N/A did not need another header file that it was including
5826N/A in order to provide its advertized functionality, the
5826N/A inclusion of the other header file was removed. See
5826N/A ISC_LANG_ENDDECLS to header files that had function
5826N/A prototypes, and removed it from those that did not.
5826N/A 144. [cleanup] libdns header files too numerous to name were made
5826N/A to conform to the same style for multiple inclusion
5826N/A 143. [func] Added function dns_rdatatype_isknown().
5826N/A 141. [bug] Corrupt requests with multiple questions could
5826N/A cause an assertion failure.
5826N/A 138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
5826N/A renamed isc_string_touint64. isc_strsep moved from
5826N/A made to conform to the same style for multiple
6297N/A for ISC_R_* codes used in macros.
6278N/A 129. [bug] The 'default_debug' log channel was not set up when
6297N/A 'category default' was present in the config file
6278N/A ISC_LANG_ENDDECLS at end of header.
5826N/A 127. [cleanup] The contracts for the comparision routines
6278N/A dns_name_fullcompare(), dns_name_compare(),
5826N/A dns_name_rdatacompare(), and dns_rdata_compare() now
5826N/A specify that the order value returned is < 0, 0, or > 0
5826N/A 124. [func] signer now imports parent's zone key signature
5826N/A symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
5826N/A 119. [cleanup] structure definitions for generic rdata stuctures do
5826N/A not have _generic_ in their names.
5826N/A 118. [cleanup]
libdns.a is now namespace-clean, on NetBSD, excepting
5826N/A YACC crust (yyparse, etc) [2000-apr-27 explorer]
5826N/A dns_zone_clearnotify() and dns_zone_addnotify()
5826N/A are replaced by dns_zone_setnotifyalso().
5826N/A dns_zone_clearmasters() and dns_zone_addmaster()
5826N/A are replaced by dns_zone_setmasters().
5826N/A 115. [port] Shut up the -Wmissing-declarations warning about
5826N/A 113. [func] Utility programs dig and host added.
5826N/A 109. [bug] "make depend" did nothing for
5826N/A 107. [func] Add keysigner and keysettool.
5826N/A 106. [func] Allow dnssec verifications to ignore the validity
5826N/A period. Used by several of the dnssec tools.
5826N/A implicit conventions the developers have used.
5826N/A 104. [bug] Made compress_add and compress_find static to
5826N/A isc_buffer_base(b) (pointer)
5826N/A isc_buffer_current(b) (pointer)
5826N/A isc_buffer_active(b) (pointer)
5826N/A isc_buffer_used(b) (pointer)
5826N/A isc_buffer_usedlength(b) (int)
5826N/A isc_buffer_consumedlength(b) (int)
5826N/A isc_buffer_remaininglength(b) (int)
5826N/A isc_buffer_activelength(b) (int)
5826N/A isc_buffer_availablelength(b) (int)
5826N/A ISC_BUFFER_AVAILABLECOUNT(b)
5826N/A isc_buffer_usedregion(b, r)
5826N/A isc_buffer_available(b, r) ->
5826N/A isc_buffer_available_region(b, r)
5826N/A isc_buffer_consumed(b, r) ->
5826N/A isc_buffer_consumedregion(b, r)
5826N/A isc_buffer_activeregion(b, r)
5826N/A isc_buffer_remaining(b, r) ->
5826N/A isc_buffer_remainingregion(b, r)
5826N/A Buffer types were removed, so the ISC_BUFFERTYPE_*
5826N/A macros are no more, and the type argument to
5826N/A isc_buffer_init and isc_buffer_allocate were removed.
5826N/A isc_buffer_putstr is now void (instead of isc_result_t)
5826N/A and requires that the caller ensure that there
5826N/A is enough available buffer space for the string.
5826N/A 102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
5826N/A 99. [cleanup] Rate limiter now has separate shutdown() and
5826N/A destroy() functions, and it guarantees that all
5826N/A queued events are delivered even in the shutdown case.
5826N/A unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
94. [cleanup] Some installed header files did not compile as C++.
<
isc/mem.h>. isc_interface_t and isc_interfaceiter_t
84. [func] allow-query ACL checks now apply to all data
83. [func] If the server is authoritative for both a
delegating zone and its (nonsecure) delegatee, and
a query is made for a KEY RR at the top of the
delegatee, then the server will look for a KEY
in the delegator if it is not found in the delegatee.
78. [cleanup] lwres_conftest renamed to lwresconf_test for
consistency with other *_test programs.
77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
76. [cleanup] Rewrote keygen.
75. [func] Don't load a zone if its database file is older
than the last time the zone was loaded.
73. [func] New "file" API in libisc, including new function
isc_file_getmodtime, isc_mktemplate renamed to
isc_file_mktemplate and isc_ufile renamed to
isc_file_openunique. By no means an exhaustive API,
it is just what's needed for now.
72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
added for dns_rbt_findnode, the former to disable the
setting of the chain to the predecessor, and the
latter to make clear when no options are set.
71. [cleanup] Made explicit the implicit REQUIREs of
isc_time_seconds, isc_time_nanoseconds, and
70. [func] isc_time_set() added.
69. [bug] The zone object's master and also-notify lists grew
longer with each server reload.
68. [func] Partial support for SIG(0) on incoming messages.
67. [performance] Allow use of alternate (compile-time supplied)
66. [func] Data in authoritative zones should have a trust level
65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
64. [func] The RBT, DB, and zone table APIs now allow the
caller find the most-enclosing superdomain of
63 [func] Generate NOTIFY messages.
62. [func] Add UDP refresh support.
61. [cleanup] Use single quotes consistently in log messages.
60. [func] Catch and disallow singleton types on message
59. [bug] Cause
net/host unreachable to be a hard error
when sending and receiving.
== 0 assertion in query_newname().
57. [func] Added dns_nxt_typepresent()
56. [bug] SIG records were not properly returned in cached
55. [bug] Responses containing multiple names in the authority
section were not negatively cached.
54. [bug] If a fetch with sigrdataset==NULL joined one with
sigrdataset!=NULL or vice versa, the resolver
could catch an assertion or lose signature data,
52. [bug] rndc: taskmgr and socketmgr were not initialized
50. [func] RBT deletion no longer requires a valid chain to work,
and dns_rbt_deletenode was added.
49. [func] Each cache now has its own mctx.
48. [func] isc_task_create() no longer takes an mctx.
isc_task_mem() has been eliminated.
47. [func] A number of modules now use memory context reference
46. [func] Memory contexts are now reference counted.
Added isc_mem_inuse() and isc_mem_preallocate().
Renamed isc_mem_destroy_check() to
isc_mem_setdestroycheck().
45. [bug] The trusted-key statement incorrectly loaded keys.
44. [bug] Don't include authority data if it would force us
to unset the AD bit in the message.
43. [bug] DNSSEC verification of cached rdatasets was failing.
42. [cleanup] Simplified logging of messages with embedded domain
names by introducing a new convenience function
41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
to allow 'named' to run as a non-root user while
retaining the ability to bind() to privileged
40. [func] Introduced new logging category "dnssec" and
39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
38. [bug] TSIG signed incoming zone transfers work now.
37. [bug] If the first RR in an incoming zone transfer was
not an SOA, the server died with an assertion failure
instead of just reporting an error.
36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
35. [performance] Log messages which are of a level too high to be
logged by any channel in the logging configuration
will not cause the log mutex to be locked.
34. [bug] Recursion was allowed even with 'recursion no'.
33. [func] The RBT now maintains a parent pointer at each node.
30. [func] config file grammer change to support optional
29. [func] support new config file view options:
auth-nxdomain recursion query-source
query-source-v6 transfer-source
transfer-source-v6 max-transfer-time-out
max-transfer-idle-out transfer-format
request-ixfr provide-ixfr cleaning-interval
fetch-glue notify rfc2308-type1 lame-ttl
28. [func] support lame-ttl, min-roots and serial-queries
Including it on other platforms (eg, NetBSD) can
cause a forced #error from the C preprocessor.
26. [func] new match-clients statement in config file view.
25. [bug] make install failed to install <
isc/log.h> and
24. [cleanup] Eliminate some unnecessary #includes of header
23. [cleanup] Provide more context in log messages about client
requests, using a new function ns_client_log().
22. [bug] SIGs weren't returned in the answer section when
the query resulted in a fetch.
21. [port] Look at STD_CINCLUDES after CINCLUDES during
compilation, so additional system include directories
can be searched but header files in the bind9 source
tree with conflicting names take precedence. This
avoids issues with installed versions of dnssafe and
20. [func] Configuration file post-load validation of zones
failed if there were no zones.
19. [bug] dns_zone_notifyreceive() failed to unlock the zone
lock in certain error cases.
18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
17. [func] Do configuration file post-load validation of zones.
16. [bug] put quotes around key names on config file
output to avoid possible keyword clashes.
15. [func] Add dns_name_dupwithoffsets(). This function is
improves comparison performance for duped names.
14. [bug] free_rbtdb() could have 'put' unallocated memory in
12. [bug] Fixed possible unitialized variable error.
11. [bug] axfr_rrstream_first() didn't check the result code of
db_rr_iterator_first(), possibly causing an assertion
10. [bug] A bug in the code which makes EDNS0 OPT records in
9. [cleanup] replaced bit-setting code in
confctx.c and replaced
repeated code with macro calls.
8. [bug] Shutdown of incoming zone transfer accessed
7. [cleanup] removed 'listen-on' from view statement.
6. [bug] quote RR names when generating config file to
prevent possible clash with config file keywords
statements must now be enclosed by an 'update-policy'
linux 2.3 kernel includes due to conflicts between
C library includes and the kernel includes. We now
avoid pulling in other linux kernel .h files.
3. [bug] TKEYs go in the answer section of responses, not
2. [bug] Generating cryptographic randomness failed on
1. [bug] The installdirs rule in
prevented the isc directory from being created if it
# This tells Emacs to use hard tabs in this file.