Stefan Tomanek
30d0879ed5
add --tftp-no-fail to ignore missing tftp root
2015-03-31 22:32:11 +01:00
Simon Kelley
794fccca7f
Fix crash in last commit.
2015-03-29 22:35:44 +01:00
Simon Kelley
394ff492da
Allow control characters in names in the cache, handle when logging.
2015-03-29 22:17:14 +01:00
Simon Kelley
1e153945de
DNSSEC fix for non-ascii characters in labels.
2015-03-28 21:34:07 +00:00
Simon Kelley
0b8a5a30a7
Protect against broken DNSSEC upstreams.
2015-03-27 11:44:55 +00:00
Simon Kelley
150162bc37
Return SERVFAIL when validation abandoned.
2015-03-27 09:58:26 +00:00
Simon Kelley
8805283088
Don't fail DNSSEC when a signed CNAME dangles into an unsigned zone.
2015-03-26 21:15:43 +00:00
Lung-Pin Chang
65c7212000
dhcp: set outbound interface via cmsg in unicast reply
...
If multiple routes to the same network exist, Linux blindly picks
the first interface (route) based on destination address, which might not be
the one we're actually offering leases. Rather than relying on this,
always set the interface for outgoing unicast DHCP packets.
2015-03-19 23:22:21 +00:00
Simon Kelley
979fe86bc8
Make --address=/example.com/ equivalent to --server=/example.com/
2015-03-19 22:50:22 +00:00
Simon Kelley
ff841ebf5a
Fix boilerplate code for re-running system calls on EINTR and EAGAIN etc.
...
The nasty code with static variable in retry_send() which
avoids looping forever needs to be called on success of the syscall,
to reset the static variable.
2015-03-11 21:36:30 +00:00
Simon Kelley
360f2513ab
Tweak DNSSEC timestamp code to create file later, removing need to chown it.
2015-03-07 18:28:06 +00:00
Simon Kelley
9003b50b13
Fix last commit to not crash if uid changing not configured.
2015-03-02 22:47:23 +00:00
Simon Kelley
f6e62e2af9
Add --dnssec-timestamp option and facility.
2015-03-01 18:17:54 +00:00
Tomas Hozza
0705a7e2d5
Fix uninitialized value used in get_client_mac()
2015-02-23 21:26:26 +00:00
Chen Wei
28b879ac47
Fix trivial memory leaks to quieten valgrind.
2015-02-17 22:07:35 +00:00
Simon Kelley
caeea190f1
Make dynamic hosts files work when --no-hosts set.
2015-02-14 20:08:56 +00:00
Simon Kelley
8ff70de618
Typos.
2015-02-14 20:02:37 +00:00
Simon Kelley
f9c863708c
Extra logging for inotify code.
2015-02-03 21:52:48 +00:00
Simon Kelley
2941d3ac89
Fixup dhcp-configs after reading extra hostfiles with inotify.
2015-02-02 22:36:42 +00:00
Simon Kelley
8d8a54ec79
Fix build failure on openBSD.
2015-02-01 21:48:46 +00:00
Simon Kelley
6ef15b34ca
Fix broken ECDSA DNSSEC signatures.
2015-01-31 22:44:26 +00:00
Simon Kelley
aff3396280
Update copyrights for dawn of 2015.
2015-01-31 20:13:40 +00:00
Simon Kelley
70d1873dd9
Expand inotify code to dhcp-hostsdir, dhcp-optsdir and hostsdir.
2015-01-31 19:59:29 +00:00
Simon Kelley
0491805d2f
Allow inotify to be disabled at compile time on Linux.
2015-01-26 11:23:43 +00:00
Win King Wan
61b838dd57
Don't reply to DHCPv6 SOLICIT messages when not configured for statefull DHCPv6.
2015-01-21 20:41:48 +00:00
Simon Kelley
5f4dc5c6ca
Add --dhcp-hostsdir config option.
2015-01-20 20:51:02 +00:00
Simon Kelley
2ae195f5a7
Don't treat SERVFAIL as a recoverable error.....
2015-01-18 22:20:48 +00:00
Simon Kelley
393415597c
Cope with multiple interfaces with the same LL address.
2015-01-18 22:11:10 +00:00
Simon Kelley
ae4624bf46
Logs for DS records consistent.
2015-01-12 23:22:08 +00:00
Simon Kelley
5e321739db
Don't answer from cache RRsets from wildcards, as we don't have NSECs.
2015-01-12 23:16:56 +00:00
Simon Kelley
9f79ee4ae3
Log port of requestor when doing extra logging.
2015-01-12 20:18:18 +00:00
RinSatsuki
28de38768e
Add --min-cache-ttl option.
2015-01-10 15:22:21 +00:00
Simon Kelley
25cf5e373e
Add --log-queries=extra option for more complete logging.
2015-01-09 15:53:03 +00:00
Simon Kelley
424c4a8a53
Merge branch 'unsigned'
2015-01-07 22:01:14 +00:00
Simon Kelley
97e618a0e3
DNSSEC: do top-down search for limit of secure delegation.
2015-01-07 21:55:43 +00:00
Matthias Andree
d310ab7ecb
Fix build failure in new inotify code on BSD.
2014-12-27 15:36:38 +00:00
Simon Kelley
0b1008d367
Bad packet protection.
2014-12-27 15:33:32 +00:00
Glen Huang
32fc6dbe03
Add --ignore-address option.
2014-12-27 15:28:12 +00:00
Simon Kelley
83d2ed09fc
Initialise return value.
2014-12-23 18:42:38 +00:00
Simon Kelley
fbc5205702
Fix problems validating NSEC3 and wildcards.
2014-12-23 15:46:08 +00:00
Simon Kelley
cbc6524234
Make caching work for CNAMEs pointing to A/AAAA records shadowed in /etc/hosts
...
If the answer to an upstream query is a CNAME which points to an
A/AAAA record which also exists in /etc/hosts and friends, then
caching is suppressed, to avoid inconsistent answers. This is
now modified to allow caching when the upstream and local A/AAAA
records have the same value.
2014-12-21 21:21:53 +00:00
Simon Kelley
094b5c3d90
Fix crash in DNSSEC code when attempting to verify large RRs.
2014-12-21 16:11:52 +00:00
Simon Kelley
3267804598
Tweak field width in cache dump to avoid truncating IPv6 addresses.
2014-12-17 20:38:20 +00:00
Simon Kelley
476693678e
Eliminate IPv6 privacy addresses from --interface-name answers.
2014-12-17 12:41:56 +00:00
Simon Kelley
bd9520b7ad
Remove redundant IN6_IS_ADDR_ULA(a) macro defn.
2014-12-16 20:41:29 +00:00
Simon Kelley
3ad3f3bbd4
Fix breakage of --domain=<domain>,<subnet>,local
2014-12-16 18:25:17 +00:00
Simon Kelley
800c5cc1e7
Remove floor on EDNS0 packet size with DNSSEC.
2014-12-15 17:50:15 +00:00
Simon Kelley
857973e6f7
Teach the new inotify code about symlinks.
2014-12-15 15:58:13 +00:00
Simon Kelley
9c448c8018
Merge branch 'inotify'
2014-12-10 17:40:03 +00:00
Simon Kelley
193de4abf5
Use inotify instead of polling on Linux.
...
This should solve problems people are seeing when a file changes
twice within a second and thus is missed for polling.
2014-12-10 17:32:16 +00:00
Stefan Tomanek