Simon Kelley
8eb36844a0
Log SERVFAIL from usptream servers.
...
If we're doing DNSSEC validation and fail because the upstream
reply to our query is SERVFAIL, log this as the reason in
validation result line.
This will make maintainers lives easier when they get reports
of "wrong" validation failure, which is sometimes an upstream problem.
2026-01-18 12:50:57 +00:00
Simon Kelley
6e6a45a7d9
Bump copyrights to 2025.
2025-01-23 17:08:39 +00:00
Simon Kelley
e5e8c14d87
Large refactor of EDNS0 UDP packet size handling.
...
This was kinda strange before, with a lot of cargo-cult copied code,
and no clear strategy.
Now it works like this:
When talking upstream we always add a pseudoheader, and set the
UDP packet size to --edns-packet-max unless we've had problems
talking to a server, when it's reduced to 1280 if that fixes things.
Answering queries from downstream, we get the answer (either from
upstream or local data) If local data won't fit the advertised size
(or 512 if there's not pseudoheader) return truncated. If upstream
returns truncated, do likewise. If upstream is OK, but the answer is
too big for downstream, truncate the answer.
2024-11-23 22:38:41 +00:00
Simon Kelley
be73efc020
Update header with new EDE values.
2024-02-12 23:11:34 +00:00
Simon Kelley
b5820d1fd8
Bump copyright to 2024.
2024-01-13 22:20:04 +00:00
Simon Kelley
df242de5c6
Bump copyrights to 2023.
2023-04-05 12:34:34 +01:00
Simon Kelley
c6d4c33d61
Bump copyright to 2022.
2022-01-24 15:19:00 +00:00
Dominik DL6ER
e7ccd95c04
Add EDE return when no matching key found.
2021-07-09 22:12:42 +01:00
Simon Kelley
6261aba026
Initial implementation of RFC-8914 extended DNS errors.
2021-06-26 00:38:01 +01:00
Simon Kelley
11c52d032b
Initial changes for extended DNS error codes.
2021-06-21 17:37:46 +01:00
Brian Hartvigsen
d942aa9321
Support Cisco Umbrella/OpenDNS Device ID & Remote IP
...
This is based on the information at
https://docs.umbrella.com/umbrella-api/docs/identifying-dns-traffic and
https://docs.umbrella.com/umbrella-api/docs/identifying-dns-traffic2 .
Using --umbrella by itself will enable Remote IP reporting. This can not
be used for any policy filtering in Cisco Umbrella/OpenDNS. Additional
information can be supplied using specific option specifications,
multiple can be separated by a comma:
--umbrella=orgid:1234,deviceid=0123456789abcdef
Specifies that you want to report organization 1234 using device
0123456789abcdef. For Cisco Umbrella Enterprise, see "Register (Create)
a device" (https://docs.umbrella.com/umbrella-api/docs/create-a-device )
for how to get a Device ID and "Organization ID endpoint"
(https://docs.umbrella.com/umbrella-api/docs/organization-endpoint ) to
get organizations ID. For OpenDNS Home Users, there is no organization,
see Registration API endpoint
(https://docs.umbrella.com/umbrella-api/docs/registration-api-endpoint2 )
for how to get a Device ID. Asset ID should be ignored unless
specifically instructed to use by support.
Signed-off-by: Brian Hartvigsen <brian.andrew@brianandjenny.com >
2021-04-14 00:16:14 +01:00
Simon Kelley
c8e8f5c204
Bump copyright notices for 2021. Happy New Year!
2021-01-24 21:59:37 +00:00
Simon Kelley
2a8710ac2f
Update copyrights to 2020.
2020-01-05 16:40:06 +00:00
Simon Kelley
974a6d087a
Add --caa-record
2018-08-23 23:01:16 +01:00
Simon Kelley
baf553db0c
Default min-port to 1024 to avoid reserved ports.
2018-01-29 23:04:06 +00:00
Simon Kelley
d1ced3ae38
Update copyrights to 2018.
2018-01-01 22:18:03 +00:00
Simon Kelley
50ca85504c
Bump year in copyrights.
2017-06-24 22:43:18 +01:00
Hans Dedecker
926332a764
Add --max-port config option.
2016-01-23 10:48:12 +00:00
Simon Kelley
c49778df4a
Update copyright notices. Happy new year!
2016-01-06 18:52:33 +00:00
Simon Kelley
33702ab1f8
First complete version of DNS-client-id EDNS0 and ARP tracking code.
2015-12-28 23:17:15 +00:00
swigger
bd7bfa21c4
Correctly sanitise DNS header bits in answer when recreating query for retry.
2015-06-01 20:54:59 +01:00
Simon Kelley
b8f16556d3
Tweaks to previous, DNS label charset commit.
2015-04-22 21:14:31 +01:00
Simon Kelley
cbe379ad6b
Handle domain names with '.' or /000 within labels.
...
Only in DNSSEC mode, where we might need to validate or store
such names. In none-DNSSEC mode, simply don't cache these, as before.
2015-04-21 22:57:06 +01:00
Simon Kelley
aff3396280
Update copyrights for dawn of 2015.
2015-01-31 20:13:40 +00:00
Simon Kelley
5107ace14a
NSEC3 validation. First pass.
2014-02-23 10:48:32 +00:00
Simon Kelley
cbf13a2a6d
Class specifier in --dnskey, instead of hardwiring C_IN.
2014-01-25 17:59:14 +00:00
Simon Kelley
51ea3ca254
Caching of DNSSEC records.
2014-01-22 19:31:38 +00:00
Simon Kelley
86bec2d399
Swap crypto library from openSSL to nettle.
2014-01-13 21:31:20 +00:00
Simon Kelley
5f8e58f49b
DNSSEC consolidation.
2014-01-09 17:31:19 +00:00
Simon Kelley
c47e3ba446
Update copyright for 2014.
2014-01-08 17:07:54 +00:00
Simon Kelley
c3e0b9b6e7
backup
2013-12-31 13:50:39 +00:00
Simon Kelley
9d633048fe
Saving progress
2013-12-13 15:36:55 +00:00
Simon Kelley
5a4120dbfb
Merge branch 'master' into dnssec
...
Conflicts:
src/dnsmasq.h
src/forward.c
src/option.c
2013-10-25 13:16:27 +01:00
Simon Kelley
c3edf383ff
Correct client subnet EDNS0 option number.
2013-10-10 21:09:15 +01:00
Simon Kelley
ed4c0767b1
--add-subnet option.
2013-10-08 20:46:34 +01:00
Giovanni Bajo
4c70046d93
Move helper functions to common header file.
2013-08-20 15:41:21 +01:00
Giovanni Bajo
a669f012dd
Add dnssec RR types
2013-08-20 15:39:44 +01:00
Simon Kelley
61744359de
Change copyright messages to include 2013.
2013-01-31 14:34:40 +00:00
Simon Kelley
b75e936372
First cut at zone transfer.
2012-12-07 11:50:41 +00:00
Simon Kelley
c239f7de25
rename header files.
2012-02-27 10:56:18 +00:00
Simon Kelley