W.C.A. Wijngaards
04a6322aa4
- Fix ipset module to use larger domain name buffers, and
...
check buffer lengths. Thanks to Qifan Zhang, Palo Alto
Networks for the report.
2026-06-03 14:35:06 +02:00
W.C.A. Wijngaards
0c15ddd133
- Fix ipset module for name too long checks, race conditions
...
on local name buffer, and for socket close race condition.
Thanks to Qifan Zhang, Palo Alto Networks, for the report.
2026-05-27 13:34:32 +02:00
W.C.A. Wijngaards
a335e601e4
ipset-pf-support, move startup and destartup to the front of the module
...
func block functions, modstack call deinit function names, and detect
module change when no startup functions are needed.
2024-07-03 13:53:44 +02:00
a19009df1d
Apply suggestions from code review
...
Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl >
2024-07-03 13:08:51 +02:00
W.C.A. Wijngaards
97ad1df343
ipset-pf-support, fix to log error on failure to open pf.
2024-07-01 17:06:11 +02:00
W.C.A. Wijngaards
2279cde8f7
ipset-pf-support, fix to remove unused include, free at end, adjust
...
qname for comparison.
2024-07-01 17:02:49 +02:00
W.C.A. Wijngaards
ff653a7ef8
Call module init init again, and new function startup and destartup.
...
NULL can be used if the function is not used. Open shared ports during
reload. Deinit is called during reload.
2024-07-01 16:10:07 +02:00
W.C.A. Wijngaards
fd11cd9182
ipset-pf-support, fix compilation, close of pf socket.
2024-07-01 14:54:45 +02:00
W.C.A. Wijngaards
3953f827fb
Merge branch 'master' of https://github.com/madroach/unbound into ipset-pf-support
2024-07-01 14:36:33 +02:00
Alexander V. Buev
23ae0a9838
fix ipset wrong behavior
...
Issue description:
If local zone directive is assigned as following:
"local-zone domain.com ipset"
then any answers for query with names such as
"anytext1domain.com" or "example2domain.com"
will be added to ipset.
This commit fixes this issue.
2023-10-17 18:35:42 +03:00
George Thessalonikefs
b8e7dfa01e
- Various fixes for #632 : variable initialisation, convert the qinfo
...
to str once, accept trailing dot in the local-zone ipset option.
2022-03-02 14:29:56 +01:00
scottrw93
4f3df7ee86
Match cnames in ipset
2022-02-20 22:37:49 +00:00
Christopher Zimmermann
1d23e0c920
Merge remote-tracking branch 'upstream/master'
2021-02-03 13:19:19 +01:00
W.C.A. Wijngaards
291ac59888
- Remove x file mode on ipset/ipset.c and h files.
2020-09-11 14:08:10 +02:00
Christopher Zimmermann
7d76e84953
Port ipset to BSD pf tables
2020-05-10 22:30:25 +02:00
Christopher Zimmermann
c96e4ca121
allow privileged initialisation of modules
2020-05-10 22:30:25 +02:00
W.C.A. Wijngaards
7f9aa6734a
- ipset: refactor long routine into three smaller ones.
2019-09-02 15:17:25 +02:00
W.C.A. Wijngaards
9902a5f81d
- ipset module #28 : log that an address is added, when verbosity high.
2019-09-02 13:50:42 +02:00
W.C.A. Wijngaards
0f3eac4a0e
- Added documentation to the ipset files (for doxygen output).
2019-06-18 16:25:11 +02:00
W.C.A. Wijngaards
c1e75c0369
- Fix to make unbound-control with ipset, remove unused variable,
...
use unsigned type because of comparison, and assign null instead
of compare with it. Remade lex and yacc output.
2019-06-18 15:57:28 +02:00
W.C.A. Wijngaards
b16c872a60
- PR #28 : IPSet module, by Kevin Chou. Created a module to support
...
the ipset that could add the domain's ip to a list easily.
Needs libmnl, and --enable-ipset and config it, doc/README.ipset.md.
- Fix to omit RRSIGs from addition to the ipset.
2019-06-18 15:38:37 +02:00
Kevin Chou
19c2ece763
fix segmentation fault
2019-05-18 13:48:49 +08:00
Kevin Chou
5f4c9b0dfe
rollback the code
2019-05-05 10:47:00 +08:00
Kevin Chou
3280e76527
bugfix
2019-05-04 17:39:27 +08:00
Kevin Chou
46099259be
performance improvement
2019-05-04 12:52:18 +08:00
Kevin Chu
56af87e2f3
edit config parser to support ipset
2019-05-03 17:45:34 +08:00
Kevin Chu
1a48bdebb5
Add support for ipset
2019-05-02 19:43:30 +08:00
W.C.A. Wijngaards