]>
git.ipfire.org Git - thirdparty/pdns.git/log
Remi Gacogne [Thu, 9 Feb 2017 14:01:41 +0000 (15:01 +0100)]
rec: Add `use-incoming-edns-subnet` to process and pass along ECS
If set, the recusor will process and pass along a received EDNS
Client Subnet to authoritative servers.
The ECS information will only be sent for netmasks and domains listed
in `edns-subnet-whitelist`, and will be truncated if the received scope
exceeds `ecs-ipv4-bits` for IPv4 or `ecs-ipv6-bits` for IPv6.
An incoming ECS source prefix-length of 0 can also be used to
request that no ECS value be sent to the authoritative servers,
in accordance with RFC7871.
Remi Gacogne [Thu, 9 Feb 2017 13:50:11 +0000 (14:50 +0100)]
Correctly parse ECS with a source prefix-length value of 0
It means there is no address there, but the family and source
prefix-length values are still relevant. rfc7871 explicitly says
that the family SHOULD be set to the transport over which the query
is sent if source prefix-length is 0.
It also states that a source prefix-length means the client is
asking that no ECS value be sent.
bert hubert [Mon, 20 Feb 2017 14:52:10 +0000 (15:52 +0100)]
Merge pull request #5042 from rgacogne/state-holder-allocate-and-copy-before-lock
StateHolder: Allocate (and copy if needed) before taking the lock
Pieter Lexis [Mon, 20 Feb 2017 12:31:04 +0000 (13:31 +0100)]
Merge pull request #4982 from rgacogne/rec-gettag-data
rec: Allow returning the `DNSQuestion`'s `data` table from `gettag()`
Pieter Lexis [Mon, 20 Feb 2017 12:30:39 +0000 (13:30 +0100)]
Merge pull request #4997 from cmouse/fix-remotebackend-params
Fix remotebackend params
Pieter Lexis [Mon, 20 Feb 2017 12:29:56 +0000 (13:29 +0100)]
Merge pull request #5006 from peterthomassen/master
docs: improve documentation of MySQL foreign keys
Pieter Lexis [Mon, 20 Feb 2017 12:29:46 +0000 (13:29 +0100)]
Merge pull request #5038 from pieterlexis/API-allow-X-metadata
API: Allow setting extra domain metadata
Pieter Lexis [Mon, 20 Feb 2017 12:29:32 +0000 (13:29 +0100)]
Merge pull request #5041 from pieterlexis/boost-m4-update
Add GCC 6.3 to boost.m4
Pieter Lexis [Mon, 20 Feb 2017 12:29:13 +0000 (13:29 +0100)]
Merge pull request #5049 from rgacogne/ox-coverity-fixes
Minor fixes based on Coverity's report
Pieter Lexis [Mon, 20 Feb 2017 12:28:46 +0000 (13:28 +0100)]
Merge pull request #5051 from Habbie/odbc-query-logging
fix godbc query logging
Peter Thomassen [Mon, 20 Feb 2017 10:26:05 +0000 (11:26 +0100)]
docs: improve documentation of MySQL foreign keys
So far, the docs mentioned the foreign key for the records table only.
However, if foreign keys are used, they also make sense for the
domainmetadata, cryptokeys, and comments tables.
Corresponding SQL is already in an .sql file in the repository. This
commit replaces the incomplete information with these statements.
Peter van Dijk [Fri, 17 Feb 2017 15:36:25 +0000 (16:36 +0100)]
fix godbc query logging
Pieter Lexis [Fri, 17 Feb 2017 14:35:07 +0000 (15:35 +0100)]
Merge pull request #5050 from pieterlexis/update-copyright-year
Update copyright for several files
Pieter Lexis [Fri, 17 Feb 2017 14:34:41 +0000 (15:34 +0100)]
Merge pull request #4798 from pieterlexis/limit-max-cache-ttl-minimum
rec: put 15 seconds lower bound on max-cache-ttl
Pieter Lexis [Wed, 15 Feb 2017 09:40:23 +0000 (10:40 +0100)]
API: Allow setting extra domain metadata
This allows setting domain metadata starting with "X-".
Pieter Lexis [Fri, 17 Feb 2017 11:41:30 +0000 (12:41 +0100)]
Update copyright statements missed in #4163
Pieter Lexis [Fri, 17 Feb 2017 10:00:38 +0000 (11:00 +0100)]
Merge pull request #4912 from pieterlexis/issue-4848-chroot-systemd
Refuse to start with chroot set in a systemd env
Pieter Lexis [Fri, 17 Feb 2017 09:58:13 +0000 (10:58 +0100)]
Merge pull request #4960 from zeha/default-settings
recursor: use explicit yes for default-enabled settings
Remi Gacogne [Thu, 16 Feb 2017 12:59:54 +0000 (13:59 +0100)]
Fix coverity nits
Remi Gacogne [Thu, 16 Feb 2017 12:59:28 +0000 (13:59 +0100)]
Catch exceptions in destructors
Peter van Dijk [Thu, 16 Feb 2017 14:52:01 +0000 (15:52 +0100)]
Merge pull request #4873 from mind04/
ed25519
update
Ed25519 algorithm number and mnemonic and hook up algorithm 15 in the recursor
Pieter Lexis [Thu, 16 Feb 2017 13:08:40 +0000 (14:08 +0100)]
Update copyright year in publicly visible output and files
Remi Gacogne [Tue, 14 Feb 2017 17:46:38 +0000 (18:46 +0100)]
StateHolder: Allocate (and copy if needed) before taking the lock
Pieter Lexis [Thu, 16 Feb 2017 08:56:42 +0000 (09:56 +0100)]
Add GCC 6.3 to boost.m4
bert hubert [Wed, 15 Feb 2017 13:00:00 +0000 (14:00 +0100)]
Merge pull request #4998 from cmouse/patch-2
Update PULL_REQUEST_TEMPLATE.md
bert hubert [Wed, 15 Feb 2017 12:58:48 +0000 (13:58 +0100)]
Merge pull request #5004 from rgacogne/rec-lowercase-qname-nit
rec: Use `DNSName::makeLowerCase()` instead of converting to string and back
Pieter Lexis [Mon, 16 Jan 2017 11:37:13 +0000 (12:37 +0100)]
Refuse to start with chroot set in a systemd env
Closes #4848
Aki Tuomi [Sun, 12 Feb 2017 14:21:33 +0000 (16:21 +0200)]
Update PULL_REQUEST_TEMPLATE.md
Clarify test change wording
Aki Tuomi [Sun, 12 Feb 2017 09:19:52 +0000 (11:19 +0200)]
remotebackend: Update regression test to notice domain id on do_list
Aki Tuomi [Sun, 12 Feb 2017 08:33:19 +0000 (10:33 +0200)]
remotebackend: Update unit test to notice domain id on do_list
Aki Tuomi [Sun, 12 Feb 2017 08:32:55 +0000 (10:32 +0200)]
remotebackend: Treat NULL as empty string in POST parameters
asString() cannot convert NULL to ""
Aki Tuomi [Sun, 12 Feb 2017 08:32:27 +0000 (10:32 +0200)]
remotebackend: Fix incorrect parameter name
bert hubert [Fri, 10 Feb 2017 16:50:43 +0000 (17:50 +0100)]
Merge pull request #4985 from rgacogne/write-single-syscall
Add `sendSizeAndMsgWithTimeout` to send size and data in a single call
bert hubert [Fri, 10 Feb 2017 12:11:31 +0000 (13:11 +0100)]
Merge pull request #4986 from rgacogne/travis-build-dir
Use `${TRAVIS_BUILD_DIR}` instead of assuming the repo is in `pdns`
bert hubert [Fri, 10 Feb 2017 12:08:43 +0000 (13:08 +0100)]
Merge pull request #4944 from wojas/one-dnsseckeeper-per-request
Fix API performance: one DNSSECKeeper per request
bert hubert [Fri, 10 Feb 2017 12:08:00 +0000 (13:08 +0100)]
Merge pull request #4977 from rgacogne/more-nmg-unit-tests
Add more NetmaskGroup unit tests
bert hubert [Thu, 9 Feb 2017 15:13:53 +0000 (16:13 +0100)]
Merge pull request #4963 from Habbie/dnsdist-doc-nit
fix some typos; improve argument references
bert hubert [Thu, 9 Feb 2017 15:12:44 +0000 (16:12 +0100)]
Merge pull request #4972 from pieterlexis/root-dnssec
Add the 2017 root key
bert hubert [Thu, 9 Feb 2017 15:11:24 +0000 (16:11 +0100)]
Merge pull request #4980 from Habbie/clarify
clarify checkbox comment
bert hubert [Thu, 9 Feb 2017 15:10:27 +0000 (16:10 +0100)]
Merge pull request #4984 from rgacogne/rec-preout-remote
rec: Fix `remote`/`local` inversion in `preoutquery`
bert hubert [Thu, 9 Feb 2017 15:09:43 +0000 (16:09 +0100)]
Merge pull request #4987 from rgacogne/dnsdist-prevent-caching-no-ttl
dnsdist: Don't cache answers without any TTL
Remi Gacogne [Thu, 9 Feb 2017 14:30:30 +0000 (15:30 +0100)]
rec: Use `DNSName::makeLowerCase()` instead of converting to string and back
Remi Gacogne [Wed, 8 Feb 2017 16:19:18 +0000 (17:19 +0100)]
dnsdist: Don't cache answers without any TTL
`RFC2308` states that "negative responses without SOA records SHOULD
NOT be cached as there is no way to prevent the negative responses
looping forever between a pair of servers even with a short TTL".
Remi Gacogne [Wed, 8 Feb 2017 14:33:57 +0000 (15:33 +0100)]
Use `${TRAVIS_BUILD_DIR}` instead of assuming the repo is in `pdns`
Thus avoiding issues when/if the repository is cloned with a different
name.
Remi Gacogne [Wed, 8 Feb 2017 10:57:41 +0000 (11:57 +0100)]
rec: Fix `remote`/`local` inversion in `preoutquery`
`dq.remoteaddr` should hold the authoritative server address, but
it was stored in `dq.localaddr` instead since
ba21fcfedc103f12b6a8eadc17f2797b6d7ffb7b .
Remi Gacogne [Tue, 7 Feb 2017 14:26:24 +0000 (15:26 +0100)]
rec: Allow returning the `DNSQuestion`'s `data` table from `gettag()`
Allow `gettag()` to optionally return a table whose keys and values
are strings, to fill up the `DNSQuestion`'s `data` table.
Remi Gacogne [Sun, 5 Feb 2017 11:15:37 +0000 (12:15 +0100)]
dnsdist: Use `sendSizeAndMsgWithTimeout()` for TCP, Fast Open toward backends
Remi Gacogne [Sun, 5 Feb 2017 11:13:54 +0000 (12:13 +0100)]
Use `sendSizeAndMsgWithTimeout()` in Remote Logger (protobuf)
Remi Gacogne [Sun, 5 Feb 2017 11:12:33 +0000 (12:12 +0100)]
Add `sendSizeAndMsgWithTimeout()` to send size and data with a single call
Peter van Dijk [Mon, 6 Feb 2017 14:36:15 +0000 (15:36 +0100)]
clarify checkbox comment
Remi Gacogne [Mon, 6 Feb 2017 11:01:57 +0000 (12:01 +0100)]
Add more NetmaskGroup unit tests
* negative entries using the explicit flag
* IPv6 negative entries
* regular and negative entries from Netmask objects instead of strings
Pieter Lexis [Fri, 3 Feb 2017 08:03:35 +0000 (09:03 +0100)]
Add the 2017 root key
Peter van Dijk [Wed, 1 Feb 2017 08:51:12 +0000 (09:51 +0100)]
more assorted doc nits
Peter van Dijk [Tue, 31 Jan 2017 21:35:43 +0000 (22:35 +0100)]
typo
Peter van Dijk [Tue, 31 Jan 2017 20:48:21 +0000 (21:48 +0100)]
fix typo; improve argument references
Pieter Lexis [Thu, 2 Feb 2017 12:18:47 +0000 (13:18 +0100)]
Merge pull request #4967 from jsoref/spelling
Spelling
Pieter Lexis [Thu, 2 Feb 2017 12:18:32 +0000 (13:18 +0100)]
Merge pull request #4961 from rgacogne/tsig-canonical-algo
Lowercase the TSIG algorithm name in hash computation
Josh Soref [Thu, 2 Feb 2017 10:48:18 +0000 (10:48 +0000)]
spelling: without
Josh Soref [Thu, 2 Feb 2017 10:45:59 +0000 (10:45 +0000)]
spelling: unparseable
Josh Soref [Thu, 2 Feb 2017 10:44:05 +0000 (10:44 +0000)]
spelling: trailing
Josh Soref [Thu, 2 Feb 2017 10:40:23 +0000 (10:40 +0000)]
spelling: supports
Josh Soref [Thu, 2 Feb 2017 10:39:57 +0000 (10:39 +0000)]
spelling: still
Josh Soref [Thu, 2 Feb 2017 10:38:32 +0000 (10:38 +0000)]
spelling: specified
Josh Soref [Thu, 2 Feb 2017 10:37:15 +0000 (10:37 +0000)]
spelling: signing
Josh Soref [Thu, 2 Feb 2017 10:37:24 +0000 (10:37 +0000)]
spelling: signify
Josh Soref [Thu, 2 Feb 2017 10:36:10 +0000 (10:36 +0000)]
spelling: settings
Josh Soref [Thu, 2 Feb 2017 10:36:32 +0000 (10:36 +0000)]
spelling: setnotified
Josh Soref [Thu, 2 Feb 2017 10:35:43 +0000 (10:35 +0000)]
spelling: servfails
Josh Soref [Thu, 2 Feb 2017 10:32:04 +0000 (10:32 +0000)]
spelling: serial
Josh Soref [Thu, 2 Feb 2017 10:35:07 +0000 (10:35 +0000)]
spelling: separately
Josh Soref [Thu, 2 Feb 2017 10:35:16 +0000 (10:35 +0000)]
spelling: separated
Josh Soref [Thu, 2 Feb 2017 10:34:55 +0000 (10:34 +0000)]
spelling: sensitivity
Josh Soref [Thu, 2 Feb 2017 10:34:38 +0000 (10:34 +0000)]
spelling: selectors
Josh Soref [Thu, 2 Feb 2017 10:32:55 +0000 (10:32 +0000)]
spelling: responsibility
Josh Soref [Thu, 2 Feb 2017 10:30:27 +0000 (10:30 +0000)]
spelling: response
Josh Soref [Thu, 2 Feb 2017 10:31:14 +0000 (10:31 +0000)]
spelling: repositories
Josh Soref [Thu, 2 Feb 2017 10:29:57 +0000 (10:29 +0000)]
spelling: registry
Josh Soref [Thu, 2 Feb 2017 10:29:21 +0000 (10:29 +0000)]
spelling: records
Josh Soref [Thu, 2 Feb 2017 10:27:29 +0000 (10:27 +0000)]
spelling: qclasses
Josh Soref [Thu, 2 Feb 2017 10:27:06 +0000 (10:27 +0000)]
spelling: qclass
Josh Soref [Thu, 2 Feb 2017 10:25:46 +0000 (10:25 +0000)]
spelling: program
Josh Soref [Thu, 2 Feb 2017 10:24:22 +0000 (10:24 +0000)]
spelling: processing
Josh Soref [Thu, 2 Feb 2017 10:25:38 +0000 (10:25 +0000)]
spelling: presignedness
Josh Soref [Thu, 2 Feb 2017 10:24:51 +0000 (10:24 +0000)]
spelling: prerequisites
Josh Soref [Thu, 2 Feb 2017 10:24:34 +0000 (10:24 +0000)]
spelling: preferably
Josh Soref [Thu, 2 Feb 2017 10:23:55 +0000 (10:23 +0000)]
spelling: postgresql
Josh Soref [Thu, 2 Feb 2017 10:23:13 +0000 (10:23 +0000)]
spelling: possible
Josh Soref [Thu, 2 Feb 2017 10:23:21 +0000 (10:23 +0000)]
spelling: positives
Josh Soref [Thu, 2 Feb 2017 10:21:56 +0000 (10:21 +0000)]
spelling: overridden
Josh Soref [Thu, 2 Feb 2017 10:21:30 +0000 (10:21 +0000)]
spelling: outstanding
Josh Soref [Thu, 2 Feb 2017 10:20:25 +0000 (10:20 +0000)]
spelling: operations
Josh Soref [Thu, 2 Feb 2017 10:19:48 +0000 (10:19 +0000)]
spelling: occurring
Josh Soref [Thu, 2 Feb 2017 10:19:39 +0000 (10:19 +0000)]
spelling: occurred
Josh Soref [Thu, 2 Feb 2017 10:19:32 +0000 (10:19 +0000)]
spelling: occasionally
Josh Soref [Thu, 2 Feb 2017 10:18:51 +0000 (10:18 +0000)]
spelling: number
Josh Soref [Thu, 2 Feb 2017 10:17:02 +0000 (10:17 +0000)]
spelling: notifications
Josh Soref [Thu, 2 Feb 2017 10:15:32 +0000 (10:15 +0000)]
spelling: negotiation
Josh Soref [Thu, 2 Feb 2017 10:15:17 +0000 (10:15 +0000)]
spelling: negcache
Josh Soref [Thu, 2 Feb 2017 10:14:51 +0000 (10:14 +0000)]
spelling: necessarily
Josh Soref [Thu, 2 Feb 2017 10:13:46 +0000 (10:13 +0000)]
spelling: modified