Simon Kelley 087eb76140 Always return a SERVFAIL response to DNS queries with RD=0. ...

Unless we are acting in authoritative mode, obviously.

To do otherwise may allows cache snooping, see.
http://cs.unc.edu/~fabian/course_papers/cache_snooping.pdf

2017-10-30 23:16:54 +00:00

..

arp.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

auth.c

Fix CVE-2017-13704, which resulted in a crash on a large DNS query.

2017-09-06 22:34:21 +01:00

blockdata.c

Add support for Ed25519 DNSSEC signature algorithm.

2017-10-27 22:13:49 +01:00

bpf.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

cache.c

Add a few DNS RRs to the table.

2017-10-27 22:52:26 +01:00

config.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

conntrack.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

crypto.c

Remove RSA/MD5 DNSSEC algorithm.

2017-10-27 23:26:51 +01:00

dbus.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dhcp6-protocol.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dhcp6.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dhcp-common.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dhcp-protocol.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dhcp.c

Fix DHCP relay, broken by ff325644c7

2017-06-25 21:19:30 +01:00

dns-protocol.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

dnsmasq.c

Fix caching logic for validated answers.

2017-10-25 17:48:19 +01:00

dnsmasq.h

Always return a SERVFAIL response to DNS queries with RD=0.

2017-10-30 23:16:54 +00:00

dnssec.c

Tidy DNSSEC algorithm table use.

2017-10-27 23:23:53 +01:00

domain.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

edns0.c

Misc code cleanups arising from Google analysis.

2017-09-25 20:19:55 +01:00

forward.c

Typo in printf format string added in 22dee512f3

2017-10-29 20:54:17 +00:00

helper.c

Do not include stdio.h before dnsmasq.h

2017-09-25 17:36:24 +01:00

inotify.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

ip6addr.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

ipset.c

Log ipset errors.

2016-08-28 21:26:42 +01:00

lease.c

Fix function declarations.

2017-06-27 22:27:02 +01:00

log.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

loop.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

netlink.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

network.c

Use IP[V6]_UNICAST_IF socket option instead of SO_BINDTODEVICE for DNS.

2017-10-13 17:55:09 +01:00

option.c

Spaces in CNAME options break parsing.

2017-10-09 22:36:11 +01:00

outpacket.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

poll.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

radv-protocol.h

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

radv.c

Security fix, CVE-2017-14492, DHCPv6 RA heap overflow.

2017-09-25 19:59:27 +01:00

rfc1035.c

Always return a SERVFAIL response to DNS queries with RD=0.

2017-10-30 23:16:54 +00:00

rfc2131.c

Misc code cleanups arising from Google analysis.

2017-09-25 20:19:55 +01:00

rfc3315.c

Security fix, CVE-2017-14494, Infoleak handling DHCPv6 forwarded requests.

2017-09-25 20:05:11 +01:00

rrfilter.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

slaac.c

Bump year in copyrights.

2017-06-24 22:43:18 +01:00

tables.c

FreeBSD compilation tweak.

2017-04-11 18:49:27 +01:00

tftp.c

Printf related fixes.

2017-06-27 22:29:51 +01:00

util.c

Tidy up add_resource_record() buffer size checks.

2017-10-13 23:26:29 +01:00