TCY16
320aa64d18
add QDCOUNT=0 to CHAOS query in ACL
2021-09-29 12:54:41 +02:00
TCY16
3ba8ea321a
fix CH class response
2021-09-28 16:35:50 +02:00
TCY16
42ba5ae4a2
process @wcawijngaards' comments v2
2021-09-28 13:48:36 +02:00
TCY16
732ad94729
process @wcawijngaards' comments
2021-09-28 13:28:25 +02:00
Tom Carpay
0b376cc42f
add routine to add EDE to ACL:refused at correct location
2021-09-27 14:17:21 +00:00
TCY16
4df2965459
add forgotten compile error fixes from previous commit
2021-09-20 11:42:39 +02:00
TCY16
4d15603a8c
add routine to do EDE on ACL blocked messages
2021-09-20 11:35:00 +02:00
TCY16
9df75a842b
add DNSSEC indeterminate EDE and DNAME expansion test
2021-09-08 16:38:33 +02:00
tcarpay
d9a947f267
Merge branch 'master' into features/rfc8914-ede
2021-08-20 16:28:27 +02:00
Tom Carpay
5fff0f7e30
Fix dont echo edns0 option list ...
...
when refusing to answer authoritatively.
Also remove TODO comments that were already done
2021-08-19 14:28:26 +00:00
Tom Carpay
935634dcae
Revert "add local anwser blocked"
...
This reverts commit b3f60db184 .
2021-08-19 14:21:10 +00:00
tcarpay
b3f60db184
add local anwser blocked
2021-08-19 14:01:14 +02:00
Tom Carpay
eac4eb3a9e
Return EDE_DNSSEC_BOGUS when returning bogus answers
2021-08-16 12:46:24 +00:00
Tom Carpay
0703a38243
Fix: use EDE codes with EDNS_OPT_APPEND_EDE
...
+ complete EDE codes
2021-08-16 09:59:13 +00:00
tcarpay
4049885da2
add locations for EDE errors
2021-08-13 12:01:28 +02:00
Tomasz Ziolkowski
ae45f46b9e
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
W.C.A. Wijngaards
c639dc956a
- Fix sign comparison warning on FreeBSD.
2021-08-03 14:13:37 +02:00
W.C.A. Wijngaards
b6abcb1508
- For #515 : Fix compilation with openssl 3.0.0 beta2, lib64 dir and
...
SSL_get_peer_certificate.
- Move acx_nlnetlabs.m4 to version 41, with lib64 openssl dir check.
2021-07-30 13:54:43 +02:00
W.C.A. Wijngaards
f693cbc90b
Revert "- With hide-version unbound also omits the version from http headers."
...
This reverts commit 9d4644b125 .
2021-07-16 14:02:55 +02:00
W.C.A. Wijngaards
9d4644b125
- With hide-version unbound also omits the version from http headers.
2021-07-16 13:45:41 +02:00
W.C.A. Wijngaards
2a8d1a6d10
- review fix to remove duplicate error printout.
2021-07-16 10:53:53 +02:00
W.C.A. Wijngaards
9e712e8a0b
- Fix unbound-control local_data and local_datas to print detailed
...
syntax errors.
2021-07-16 10:51:27 +02:00
Willem Toorop
a8d78b2083
Simple EDE example
2021-06-24 12:55:46 +02:00
Stuart Henderson and GitHub
cde6284a03
ifdef RLIMIT_AS in recently added check
...
Some OS still don't have RLIMIT_AS
2021-05-08 15:12:39 +00:00
W.C.A. Wijngaards
07fda669e4
- Fix #485 : Unbound occasionally reports broken stats.
2021-05-07 11:13:44 +02:00
George Thessalonikefs
e9a5f5ab3f
- Add more logging for out-of-memory cases.
2021-05-04 15:39:06 +02:00
André Cruz
e07f973938
Allow configuration of TCP timeout while waiting for response
...
This allows us to configure how long Unbound will wait for a response
on a TCP connection.
2021-04-28 16:20:46 +01:00
André Cruz
75875d4d1c
Allow configuration of persistent TCP connections
...
Added 2 new options to configure previously hardcoded
values: max-reuse-tcp-queries and tcp-reuse-timeout. These
allow fine-grained control over how unbound uses persistent
TCP connections to authority servers.
2021-04-21 13:50:45 +01:00
George Thessalonikefs
13e445d50b
- Remove unused functions worker_handle_reply and
...
libworker_handle_reply.
2021-04-13 14:54:26 +02:00
W.C.A. Wijngaards
6cd77933a3
- Fix: Resolve interface names on control-interface too.
2021-02-26 13:54:10 +01:00
Wouter Wijngaards and GitHub
209dc32624
Merge pull request #367 from NLnetLabs/dnstap-log-local-addr
...
DNSTAP log local address
2021-02-25 11:58:36 +01:00
W.C.A. Wijngaards
d3497f6bd1
- On startup of unbound it checks if rlimits on memory size look
...
sufficient for the configured cache size, and logs warning if not.
2021-02-24 14:14:33 +01:00
W.C.A. Wijngaards
f5339ec7e5
Merge branch 'master' into dnstap-log-local-addr
2021-02-18 13:12:09 +01:00
W.C.A. Wijngaards
2d27203718
Merge branch 'master' into zonemd
2021-02-18 11:11:50 +01:00
W.C.A. Wijngaards
74e06cc4b3
- Fix #422 : IPv6 fallback issues when IPv6 is not properly
...
enabled/configured.
2021-02-15 14:40:48 +01:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
W.C.A. Wijngaards
ee2545d939
- For #391 : fix indentation.
2021-01-08 09:53:52 +01:00
W.C.A. Wijngaards
3e03e2c26d
- For #391 : use struct timeval* start_time for callback information.
2021-01-08 09:47:46 +01:00
Wouter Wijngaards and GitHub
48724de155
Merge pull request #391 from fhriley/reply_cb_start_time
...
Add start_time to reply callbacks so modules can compute the response…
2021-01-08 09:35:07 +01:00
Frank Riley
e3abd772f7
Add start_time to reply callbacks so modules can compute the response time.
2021-01-01 15:44:21 -07:00
Frank Riley
42d764eeda
Add rpz_enable and rpz_disable commands to unbound-control.
2020-12-13 12:35:11 -07:00
W.C.A. Wijngaards
6bf1293bcd
No need for mk_local_addr, can pass the sockaddr structure.
2020-12-09 11:56:35 +01:00
W.C.A. Wijngaards
bdfa65c6ab
Import the patches from the files in the tarball in
...
issue #365 https://github.com/NLnetLabs/unbound/files/5659923/patches.tar.gz
from iruzanov. The merge conflicts are fixed, but no changes are made
to the patched code.
2020-12-09 11:00:51 +01:00
W.C.A. Wijngaards
b2894e23a9
- Fix compile warnings in rpz initialization.
2020-11-27 10:11:14 +01:00
George Thessalonikefs
b0247b6e93
Merge branch 'master' into edns-string
2020-11-23 16:58:30 +01:00
W.C.A. Wijngaards
62152e0493
Fix writepid for retvalue 0.
2020-11-23 14:17:58 +01:00
W.C.A. Wijngaards
19f8f4d9f9
Further fix for CVE-2020-28935, so the chown is omitted when the pidfile
...
fails due to a symlink.
2020-11-23 13:48:04 +01:00
W.C.A. Wijngaards
ad38783297
- Fix for #303 CVE-2020-28935 : Fix that symlink does not interfere
...
with chown of pidfile.
2020-11-23 13:42:11 +01:00
W.C.A. Wijngaards
9cc8aa1ddf
- Option to toggle udp-connect, default is enabled.
2020-11-23 11:06:53 +01:00