]> git.ipfire.org Git - thirdparty/bind9.git/commit
[master] ECS authoritative support
authorEvan Hunt <each@isc.org>
Fri, 29 Aug 2014 05:05:57 +0000 (22:05 -0700)
committerEvan Hunt <each@isc.org>
Fri, 29 Aug 2014 05:05:57 +0000 (22:05 -0700)
commitd46855caedd5cb101795707f6f467fa363ef1448
tree7da22984c65c363ff904f352c2febbe874d2c299
parent180319f572fb6c1ca7000d22ea79a8dd77ae3f91
[master] ECS authoritative support

3936. [func] Added authoritative support for the EDNS Client
Subnet (ECS) option.

ACLs can now include "ecs" elements which specify
an address or network prefix; if an ECS option is
included in a DNS query, then the address encoded
in the option will be matched against "ecs" ACL
elements.

Also, if an ECS address is included in a query,
then it will be used instead of the client source
address when matching "geoip" ACL elements.  This
behavior can be overridden with "geoip-use-ecs no;".

When "ecs" or "geoip" ACL elements are used to
select a view for a query, the response will include
an ECS option to indicate which client network the
answer is valid for.

(Thanks to Vincent Bernat.) [RT #36781]
35 files changed:
CHANGES
README
bin/named/client.c
bin/named/config.c
bin/named/include/named/client.h
bin/named/include/named/server.h
bin/named/server.c
bin/named/statschannel.c
bin/tests/system/acl/ns2/named6.conf [new file with mode: 0644]
bin/tests/system/acl/ns2/named7.conf [new file with mode: 0644]
bin/tests/system/acl/tests.sh
bin/tests/system/geoip/clean.sh
bin/tests/system/geoip/data/GeoIP.csv
bin/tests/system/geoip/data/GeoIP.dat
bin/tests/system/geoip/data/README
bin/tests/system/geoip/ns2/named1.conf
bin/tests/system/geoip/ns2/named14.conf
bin/tests/system/geoip/setup.sh
bin/tests/system/geoip/tests.sh
doc/arm/Bv9ARM-book.xml
lib/dns/acl.c
lib/dns/geoip.c
lib/dns/include/dns/acl.h
lib/dns/include/dns/geoip.h
lib/dns/include/dns/iptable.h
lib/dns/include/dns/message.h
lib/dns/iptable.c
lib/dns/message.c
lib/dns/tests/geoip_test.c
lib/dns/win32/libdns.def.in
lib/isc/include/isc/radix.h
lib/isc/radix.c
lib/isccfg/aclconf.c
lib/isccfg/include/isccfg/namedconf.h
lib/isccfg/namedconf.c