]>
git.ipfire.org Git - thirdparty/pdns.git/log
Remi Gacogne [Fri, 9 Nov 2018 16:52:56 +0000 (17:52 +0100)]
rec: Skip NS for the exact zone in CNAME answers
These NS can't be authoritative since we have a CNAME answer for
which only the record describing that alias is necessarily
authoritative.
But if we allow the current auth, which might be serving the child
zone, to raise the TTL of non-authoritative NS in the cache, they
might be able to keep a "ghost" zone alive forever, even after the
delegation is gone from the parent.
So let's just do nothing with them, we can fetch them directly if
we need them.
Remi Gacogne [Fri, 9 Nov 2018 15:44:06 +0000 (16:44 +0100)]
Merge pull request #7161 from rgacogne/rec-revert-6979
Revert "rec: Authority records in AA=1 CNAME answer are authoritative"
Richard Gibson [Fri, 9 Nov 2018 14:54:19 +0000 (09:54 -0500)]
Correct versionadded for getEDNSOptions and EDNSOptionView
Ref
ef8640ddc0fcff7c84b955f2ec2110939140ca2e
Remi Gacogne [Fri, 9 Nov 2018 13:48:24 +0000 (14:48 +0100)]
Merge pull request #7167 from AdamMajer/garbage_return
Fix compiler warning about returning garbage
Pieter Lexis [Fri, 9 Nov 2018 12:53:04 +0000 (13:53 +0100)]
Merge pull request #7173 from Habbie/rec-4.1.7-docs
recursor 4.1.7: changelog and secpoll
Peter van Dijk [Fri, 9 Nov 2018 10:28:13 +0000 (11:28 +0100)]
recursor 4.1.7: changelog and secpoll
Pieter Lexis [Fri, 9 Nov 2018 10:26:30 +0000 (11:26 +0100)]
ixfrdist: fix building in travis
Remi Gacogne [Fri, 9 Nov 2018 10:18:35 +0000 (11:18 +0100)]
rec: Refuse queries for all meta-types
Pieter Lexis [Thu, 8 Nov 2018 16:16:37 +0000 (17:16 +0100)]
webserver: Refactor apikey into a class var
Pieter Lexis [Wed, 7 Nov 2018 10:55:08 +0000 (11:55 +0100)]
ixfrdist: add webserver for stats
Adam Majer [Thu, 8 Nov 2018 15:33:27 +0000 (16:33 +0100)]
Fix compiler warning about returning garbage
Pieter Lexis [Thu, 8 Nov 2018 14:18:36 +0000 (15:18 +0100)]
Fix some links in the dnsdist install docs
Remi Gacogne [Thu, 8 Nov 2018 14:07:00 +0000 (15:07 +0100)]
Merge pull request #7080 from rgacogne/dnsdist-docs-pgp
dnsdist: Add my key to the list of those authorized to sign releases
Remi Gacogne [Thu, 8 Nov 2018 13:30:19 +0000 (14:30 +0100)]
dnsdist: Fix warnings, mostly unused parameters, reported by -Wextra
Remi Gacogne [Thu, 8 Nov 2018 10:13:12 +0000 (11:13 +0100)]
Merge pull request #7165 from rgacogne/dnsdist-fix-trailing-bis
dnsdist: Add 1.3.3 ChangeLog, update the secpoll zone
Remi Gacogne [Thu, 8 Nov 2018 10:12:22 +0000 (11:12 +0100)]
dnsdist: Upate a missing PR number in the changelog
Remi Gacogne [Thu, 8 Nov 2018 09:19:39 +0000 (10:19 +0100)]
dnsdist: Add a regression test for caching with the DO bit set
Pieter Lexis [Thu, 8 Nov 2018 07:57:48 +0000 (08:57 +0100)]
Merge branch 'master' into auth-rm-out-of-zone-processing
Remi Gacogne [Mon, 5 Nov 2018 17:02:33 +0000 (18:02 +0100)]
dnsdist: Prevent unlikely DO collisions in the packet cache
Remi Gacogne [Mon, 5 Nov 2018 14:59:55 +0000 (15:59 +0100)]
Add PowerDNS Advisory 2018-08 for DNSDist
Remi Gacogne [Mon, 5 Nov 2018 14:55:30 +0000 (15:55 +0100)]
dnsdist: Add 1.3.3 ChangeLog, update the secpoll zone
Remi Gacogne [Fri, 21 Sep 2018 18:06:06 +0000 (20:06 +0200)]
dnsdist: Handle trailing data correctly when adding OPT or ECS info
Remi Gacogne [Wed, 7 Nov 2018 17:48:13 +0000 (18:48 +0100)]
rec: Fix an out-of-bounds read in the packet cache
Remi Gacogne [Wed, 7 Nov 2018 14:41:17 +0000 (15:41 +0100)]
Revert "rec: Authority records in AA=1 CNAME answer are authoritative"
This reverts commit
cdc5d0c09ac148c805e91411d863b04b144ebbf9 .
It turns out that authority records in AA=1 CNAME answer may, or may
not, be authoritative, and that in some cases considering them as
authoritative causes DNSSEC validation failures.
Pieter Lexis [Wed, 7 Nov 2018 12:46:55 +0000 (13:46 +0100)]
Merge pull request #7160 from pieterlexis/rec-4.1.6-docs
Add recursor 4.1.6 changelog and secpoll
Pieter Lexis [Wed, 7 Nov 2018 11:04:46 +0000 (12:04 +0100)]
Add recursor 4.1.6 changelog and secpoll
Remi Gacogne [Wed, 7 Nov 2018 08:40:44 +0000 (09:40 +0100)]
dnsdist: Add my key to the list of those authorized to sign releases
Spirillen [Wed, 7 Nov 2018 01:14:11 +0000 (02:14 +0100)]
Update rpz.rst
Trying again as miss Travis didn't like i was home early ....
This time I've moved the new options into the codeblock hoing thiscan satisfy Miss Travis
Kees Monshouwer [Wed, 7 Nov 2018 00:18:11 +0000 (01:18 +0100)]
auth: rename the schema update files due to a new milestone
Kees Monshouwer [Tue, 7 Aug 2018 10:20:39 +0000 (12:20 +0200)]
auth: remove autoserial
Peter van Dijk [Tue, 6 Nov 2018 22:48:26 +0000 (23:48 +0100)]
Merge pull request #7140 from RobinGeuze/addPoolAvailableRule
Add a PoolAvailableRule to easily add backup pools
Peter van Dijk [Tue, 6 Nov 2018 22:47:32 +0000 (23:47 +0100)]
Merge pull request #7081 from mind04/offset
rec: extend the validity period of signatures by a number of seconds
Peter van Dijk [Tue, 6 Nov 2018 22:45:53 +0000 (23:45 +0100)]
Merge pull request #7134 from pieterlexis/issue-7065
Fix up the BIND config files on upgrade
Peter van Dijk [Tue, 6 Nov 2018 22:45:05 +0000 (23:45 +0100)]
Merge pull request #7126 from Habbie/update-requests
api tests: update requests to 2.20.0
aerique [Tue, 6 Nov 2018 22:18:19 +0000 (23:18 +0100)]
Merge pull request #7153 from aerique/sec-
20181106
Secpol, advisories, updated changelogs and fixes for auth-4.1.5, auth-4.0.6, rec-4.1.5 and rec-4.0.9.
Erik Winkels [Tue, 6 Nov 2018 14:01:35 +0000 (15:01 +0100)]
Replace XXXX with (now known) PRs.
Erik Winkels [Mon, 5 Nov 2018 14:17:39 +0000 (15:17 +0100)]
Update changelog, secpoll and advisories.
Update changelog, secpoll and advisories for auth-4.0.6, auth-4.1.5,
rec-4.0.9 and rec-4.1.5 releases
(cherry picked from commit
8b749001f6962f2d3efcfaa74624b6df2385085f )
Peter van Dijk [Tue, 2 Oct 2018 19:00:27 +0000 (21:00 +0200)]
gather a few more stats
Peter van Dijk [Tue, 2 Oct 2018 14:44:59 +0000 (16:44 +0200)]
gather some stats; emit them to stdout periodically
Peter van Dijk [Tue, 2 Oct 2018 13:01:11 +0000 (15:01 +0200)]
fix typos
Peter van Dijk [Tue, 6 Nov 2018 11:44:25 +0000 (12:44 +0100)]
sdig: only fancy-print IN class records; make an exception for OPT
Peter van Dijk [Tue, 6 Nov 2018 11:27:55 +0000 (12:27 +0100)]
sdig: correctly report class
Spirillen [Tue, 6 Nov 2018 11:12:06 +0000 (12:12 +0100)]
Added a quick example of a ip block on rpzMaster
Ass seen on irc guessing the right format of how to add multiply ip's to block I've added and example to reflect the right way...
Aki Tuomi [Tue, 6 Nov 2018 07:23:48 +0000 (09:23 +0200)]
m4: Fix lua.hpp check to actually work
tcely [Mon, 5 Nov 2018 16:54:34 +0000 (11:54 -0500)]
Pre-resolve file conflict
1848 [Mon, 5 Nov 2018 14:18:39 +0000 (15:18 +0100)]
Add option to set interval between health checks
Add option 'checkInterval' for newServer() to set the interval between
health checks.
Robin Geuze [Mon, 5 Nov 2018 12:12:47 +0000 (13:12 +0100)]
No longer keep a local copy of pools, and remove unneeded lua side effect
Robin Geuze [Sat, 3 Nov 2018 14:23:39 +0000 (15:23 +0100)]
Add some documentation
Robin Geuze [Sat, 3 Nov 2018 14:08:13 +0000 (15:08 +0100)]
Add a PoolAvailableRule to easily add backup pools
Remi Gacogne [Wed, 31 Oct 2018 13:26:47 +0000 (14:26 +0100)]
auth: Add missing ednscookies.hh dependency to the Makefile
(cherry picked from commit
edb705fbe5476617b524fe05e98ee8d41485c07c )
Remi Gacogne [Thu, 20 Sep 2018 12:46:11 +0000 (14:46 +0200)]
rec: Keep the EDNS status of a server on FormErr with EDNS
Note that the choice of DNAME in the unit test is an arbitrary
choice, we could even have used A here.
(cherry picked from commit
ff45e509a92b6f22ff8b61d15731b26235523350 )
Remi Gacogne [Wed, 12 Sep 2018 14:12:46 +0000 (16:12 +0200)]
rec: Refuse queries for rfc6895 section 3.1 meta types
(cherry picked from commit
a10ff05255106b8ce8755013fd07077b45ea65e2 )
Remi Gacogne [Tue, 7 Aug 2018 12:23:43 +0000 (14:23 +0200)]
rec: Move the protobuf message as well when inserting the cache
(cherry picked from commit
3853eaa72aeb8a14ebfd303a229b738c2d891b5a )
Remi Gacogne [Tue, 7 Aug 2018 10:02:21 +0000 (12:02 +0200)]
rec: Copy the cached protobuf message instead of creating a new one
(cherry picked from commit
80b94844f488b5acfc41a4aaf33640d63d076b11 )
Remi Gacogne [Mon, 6 Aug 2018 16:54:31 +0000 (18:54 +0200)]
rec: Replace the cached qname at once instead of label by label
(cherry picked from commit
119f9dc913c1c088a8323cd1345744a7a91c89f9 )
Remi Gacogne [Mon, 6 Aug 2018 16:53:11 +0000 (18:53 +0200)]
rec: Move the query and response packets on packet cache insertion
(cherry picked from commit
e3c863a94e01b8144c4ad72a6b1699cecd3d22b8 )
Remi Gacogne [Thu, 19 Jul 2018 13:52:40 +0000 (15:52 +0200)]
Do full packet comparison in the packet caches in addition to the hash
(cherry picked from commit
aab08a02344a66e14572cf63129d157d6e7ba8c9 )
Remi Gacogne [Mon, 28 May 2018 13:40:37 +0000 (15:40 +0200)]
Add PoCs for the previous memory leak issue
(cherry picked from commit
05d5d55c2035d1845e7d3b0d62273e8a4177b358 )
Remi Gacogne [Wed, 23 May 2018 08:35:17 +0000 (10:35 +0200)]
Allocate DNSRecord objects as smart pointers right away
(cherry picked from commit
1339125af5afe6d6ecfe0a500c5fdc76d790459d )
Pieter Lexis [Fri, 2 Nov 2018 15:09:11 +0000 (16:09 +0100)]
Merge pull request #7129 from Habbie/dnsdist-el6
dnsdist: fix rhel6 stop-on-upgrade issue
Pieter Lexis [Fri, 2 Nov 2018 15:08:25 +0000 (16:08 +0100)]
Merge pull request #7130 from Habbie/recursor-el6-no-protobuf
fix el6 recursor build by disabling protobuf support
Pieter Lexis [Fri, 2 Nov 2018 08:06:55 +0000 (09:06 +0100)]
Fix up the BIND config files on upgrade
Fixes #7065
Peter van Dijk [Thu, 1 Nov 2018 20:10:03 +0000 (21:10 +0100)]
Merge pull request #7133 from spirillen/patch-2
added the s to http to avoid redirect line 10
spirillen [Thu, 1 Nov 2018 20:07:14 +0000 (21:07 +0100)]
added the s to http to avoid redirect line 10
see subject
Peter van Dijk [Thu, 1 Nov 2018 19:53:58 +0000 (20:53 +0100)]
Merge pull request #7132 from spirillen/patch-1
Line #84 old link to doc
spirillen [Thu, 1 Nov 2018 19:45:35 +0000 (20:45 +0100)]
Line #84 old link to doc
as submitted in the issue #7131 the link for current documentation is outdated, this commit will update this issue
Peter van Dijk [Thu, 1 Nov 2018 19:21:23 +0000 (20:21 +0100)]
Merge pull request #7106 from dwfreed/fix-travis-python
Make travis use a modern python
Peter van Dijk [Thu, 1 Nov 2018 16:37:52 +0000 (17:37 +0100)]
fix el6 recursor build by disabling protobuf support
Richard Gibson [Thu, 1 Nov 2018 16:28:41 +0000 (12:28 -0400)]
Add docblock for skipDomainName
Peter van Dijk [Thu, 1 Nov 2018 14:07:33 +0000 (15:07 +0100)]
document el6 dnsdist restart bug
Peter van Dijk [Thu, 1 Nov 2018 14:05:03 +0000 (15:05 +0100)]
remove (broken) centos6 dnsdist init script
Peter van Dijk [Thu, 1 Nov 2018 14:04:45 +0000 (15:04 +0100)]
el6 dnsdist: on upgrade, restart instead of stop
Kees Monshouwer [Thu, 1 Nov 2018 13:38:10 +0000 (14:38 +0100)]
rec: docs, add versionchanged for signature-inception-skew and typo fix
Pieter Lexis [Thu, 1 Nov 2018 13:36:21 +0000 (14:36 +0100)]
Merge pull request #7127 from pieterlexis/pkg-fixes
Several packaging fixes
Peter van Dijk [Thu, 1 Nov 2018 09:50:21 +0000 (10:50 +0100)]
api tests: update requests to 2.20.0
Kees Monshouwer [Wed, 31 Oct 2018 20:43:00 +0000 (21:43 +0100)]
rec: docs, add versionadded for signature-inception-skew
Charles-Henri Bruyand [Fri, 10 Aug 2018 13:00:00 +0000 (15:00 +0200)]
restore deleted file
Charles-Henri Bruyand [Wed, 25 Jul 2018 15:31:56 +0000 (17:31 +0200)]
auth: lua records: document DNSRecord objects, and other functions and constants
Charles-Henri Bruyand [Thu, 21 Jun 2018 12:16:53 +0000 (14:16 +0200)]
auth: lua records: document DNSName, DNSHeader, DNSResourceRecord API
Charles-Henri Bruyand [Tue, 12 Jun 2018 14:50:34 +0000 (16:50 +0200)]
expose DNSName::getRawLabels
Charles-Henri Bruyand [Tue, 12 Jun 2018 14:33:44 +0000 (16:33 +0200)]
report execution failure in wildcard LUA records
Charles-Henri Bruyand [Fri, 8 Jun 2018 14:34:26 +0000 (16:34 +0200)]
check argument lists emptyness
Charles-Henri Bruyand [Fri, 8 Jun 2018 08:40:45 +0000 (10:40 +0200)]
nit style
Remi Gacogne [Wed, 31 Oct 2018 13:58:16 +0000 (14:58 +0100)]
Merge pull request #7115 from rgacogne/dnsdist-secpoll
dnsdist: Add security polling
Charles-Henri Bruyand [Wed, 31 Oct 2018 09:13:34 +0000 (10:13 +0100)]
auth: api - wrap hostname check in a single function
Remi Gacogne [Wed, 31 Oct 2018 10:54:45 +0000 (11:54 +0100)]
Merge pull request #7078 from rgacogne/dnsdist-creation-order
dnsdist: Add a 'creationOrder' field to rules
Remi Gacogne [Wed, 31 Oct 2018 09:50:09 +0000 (10:50 +0100)]
dnsdist: Remove useless call to gettimeofday() in the security poll
Remi Gacogne [Wed, 31 Oct 2018 09:39:45 +0000 (10:39 +0100)]
Merge pull request #7117 from chbruyand/dnsdist-webserver-creds
dnsdist: add ability to update webserver credentials
Remi Gacogne [Mon, 29 Oct 2018 10:15:09 +0000 (11:15 +0100)]
rec: Use unique instead of shared pointers for the RemoteLoggers
Remi Gacogne [Mon, 22 Oct 2018 07:53:27 +0000 (09:53 +0200)]
rec: Add support for more than one protobuf server
Remi Gacogne [Wed, 31 Oct 2018 09:21:54 +0000 (10:21 +0100)]
dnsdist: Correctly handle PACKAGEVERSION, check name in secpoll reply
Charles-Henri Bruyand [Wed, 31 Oct 2018 08:36:38 +0000 (09:36 +0100)]
Update dnsdist-lua.cc
Charles-Henri Bruyand [Thu, 23 Aug 2018 09:11:10 +0000 (11:11 +0200)]
auth: api - Check if the DNSNames that should be hostnames, are hostnames
Charles-Henri Bruyand [Tue, 30 Oct 2018 16:33:39 +0000 (17:33 +0100)]
dnsdist: refactor webserver config in a single table
Charles-Henri Bruyand [Tue, 30 Oct 2018 13:33:54 +0000 (14:33 +0100)]
Update test_API.py
Charles-Henri Bruyand [Tue, 30 Oct 2018 13:29:51 +0000 (14:29 +0100)]
dnsdist: add ability to update webserver credentials
Remi Gacogne [Tue, 30 Oct 2018 10:11:49 +0000 (11:11 +0100)]
dnsdist: Add security polling
Remi Gacogne [Tue, 30 Oct 2018 09:14:46 +0000 (10:14 +0100)]
Merge pull request #7094 from neilcook/udr
Unique DNS Responses
Pieter Lexis [Mon, 29 Oct 2018 15:51:22 +0000 (16:51 +0100)]
pkgs: prevent dpkg warnings
This removes several files that _might_ be on-disk from an older
package to prevent dpkg to stumble over them.
Closes #7066
Pieter Lexis [Mon, 29 Oct 2018 13:38:11 +0000 (14:38 +0100)]
Remove all Jenkins related stuff