Petr Mensik
c7f44b99e3
Change file mode before changing file owner
...
Change mode first when configuring remote control unix socket. Some
security systems might strip capability of changing other user's system
even to process with effective uid 0. That is done on Fedora by SELinux
policy and systemd for example. SELinux audit then shows errors, because
unbound tries modifying permissions of not own file. Fix just by mode
change as first step, make it owned by unbound:unbound user as the last
step only.
Related: rhbz#1905441
2022-01-07 12:08:32 +01:00
Tom Carpay
e899b4cefe
Make explicit whether edns options are parsed from queries or responses
2021-11-15 13:40:51 +00:00
TCY16
8205c87a96
complete renaming of the modules edns list
2021-11-08 11:50:29 +01:00
fa73142b79
Apply suggestions from code review
...
Co-authored-by: Willem Toorop <willem@nlnetlabs.nl >
2021-11-08 11:02:54 +01:00
Tom Carpay
cb48d9e4a1
Fix keepalive logic
2021-11-01 15:01:07 +00:00
Tom Carpay
5f8447830a
Move option handling to parse-time
2021-11-01 13:48:31 +00:00
Tom Carpay
89d7476539
split edns_data.opt_list in opt_list_in and opt_list_out
...
opt_list_in for parsed (incoming) edns options, and
opt_list_out for outgoing (to be encoded) edns options
2021-11-01 12:48:40 +00:00
Tom Carpay
3925297d07
Remove apply_edns_options from worker and mesh...
...
to be returned in message encoding later...
2021-11-01 10:44:55 +00:00
Tom Carpay
3ebfa9fc97
Outgoing module options go to opt_list_modules_out
...
And opt_list_modules_out is reset in case of failure
BEWARE! No options from modules will be encoded in the responses now!
2021-10-27 14:01:56 +00:00
Tom Carpay
3e6eeb504d
Modules have their own outgoing ends options list
...
But nothing happens with it yet
2021-10-27 13:48:49 +00:00
W.C.A. Wijngaards
09afdb7669
- Fix chaos replies to have truncation for short message lengths,
...
or long reply strings.
2021-10-11 17:00:20 +02:00
W.C.A. Wijngaards
a64cbe958d
- Fix lock debug code for gcc sanitizer reports.
2021-09-10 15:11:30 +02:00
Thomas du Boÿs
ebb4987146
Fix subnetcache statistics
2021-09-03 10:37:07 +02:00
W.C.A. Wijngaards
c93a7fb38a
- Fix the stream wait stream_wait_count_lock and http2 buffer locks
...
setup and desetup from race condition.
2021-08-25 13:37:50 +02:00
W.C.A. Wijngaards
a9de6879b8
Merge branch 'master' into rpz-triggers
2021-08-18 09:53:35 +02:00
W.C.A. Wijngaards
f232562430
Merge branch 'master' into rpz-triggers
2021-08-05 13:37:22 +02:00
Tomasz Ziolkowski
ae45f46b9e
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
W.C.A. Wijngaards
c639dc956a
- Fix sign comparison warning on FreeBSD.
2021-08-03 14:13:37 +02:00
W.C.A. Wijngaards
b6abcb1508
- For #515 : Fix compilation with openssl 3.0.0 beta2, lib64 dir and
...
SSL_get_peer_certificate.
- Move acx_nlnetlabs.m4 to version 41, with lib64 openssl dir check.
2021-07-30 13:54:43 +02:00
W.C.A. Wijngaards
f693cbc90b
Revert "- With hide-version unbound also omits the version from http headers."
...
This reverts commit 9d4644b125
2021-07-16 14:02:55 +02:00
W.C.A. Wijngaards
9d4644b125
- With hide-version unbound also omits the version from http headers.
2021-07-16 13:45:41 +02:00
W.C.A. Wijngaards
2a8d1a6d10
- review fix to remove duplicate error printout.
2021-07-16 10:53:53 +02:00
W.C.A. Wijngaards
9e712e8a0b
- Fix unbound-control local_data and local_datas to print detailed
...
syntax errors.
2021-07-16 10:51:27 +02:00
W.C.A. Wijngaards
355526da7d
- rpz-triggers, the added soa for client ip modified answers is affected
...
by the minimal-responses config option.
2021-05-14 16:34:38 +02:00
W.C.A. Wijngaards
50dcadd495
- rpz-triggers, for clientip modified answers the rpz SOA is added to the
...
additional section with the serial number and name of the rpz zone that
was applied.
2021-05-14 15:34:48 +02:00
W.C.A. Wijngaards
32d82fac9b
Merge branch 'master' into rpz-triggers
2021-05-14 08:47:56 +02:00
Stuart Henderson and GitHub
cde6284a03
ifdef RLIMIT_AS in recently added check
...
Some OS still don't have RLIMIT_AS
2021-05-08 15:12:39 +00:00
W.C.A. Wijngaards
07fda669e4
- Fix #485 : Unbound occasionally reports broken stats.
2021-05-07 11:13:44 +02:00
George Thessalonikefs
e9a5f5ab3f
- Add more logging for out-of-memory cases.
2021-05-04 15:39:06 +02:00
André Cruz
e07f973938
Allow configuration of TCP timeout while waiting for response
...
This allows us to configure how long Unbound will wait for a response
on a TCP connection.
2021-04-28 16:20:46 +01:00
André Cruz
75875d4d1c
Allow configuration of persistent TCP connections
...
Added 2 new options to configure previously hardcoded
values: max-reuse-tcp-queries and tcp-reuse-timeout. These
allow fine-grained control over how unbound uses persistent
TCP connections to authority servers.
2021-04-21 13:50:45 +01:00
W.C.A. Wijngaards
b366441157
Merge branch 'master' into rpz-triggers
2021-04-14 09:39:41 +02:00
George Thessalonikefs
13e445d50b
- Remove unused functions worker_handle_reply and
...
libworker_handle_reply.
2021-04-13 14:54:26 +02:00
W.C.A. Wijngaards
6f507eb036
Merge branch 'master' into rpz-triggers
2021-03-12 09:04:54 +01:00
W.C.A. Wijngaards
6cd77933a3
- Fix: Resolve interface names on control-interface too.
2021-02-26 13:54:10 +01:00
Wouter Wijngaards and GitHub
209dc32624
Merge pull request #367 from NLnetLabs/dnstap-log-local-addr
...
DNSTAP log local address
2021-02-25 11:58:36 +01:00
W.C.A. Wijngaards
d3497f6bd1
- On startup of unbound it checks if rlimits on memory size look
...
sufficient for the configured cache size, and logs warning if not.
2021-02-24 14:14:33 +01:00
W.C.A. Wijngaards
f5339ec7e5
Merge branch 'master' into dnstap-log-local-addr
2021-02-18 13:12:09 +01:00
W.C.A. Wijngaards
2d27203718
Merge branch 'master' into zonemd
2021-02-18 11:11:50 +01:00
W.C.A. Wijngaards
74e06cc4b3
- Fix #422 : IPv6 fallback issues when IPv6 is not properly
...
enabled/configured.
2021-02-15 14:40:48 +01:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
W.C.A. Wijngaards
cdb60adcdc
Merge branch 'rpz' of https://github.com/magenbluten/unbound into magenbluten-rpz
...
Conflict fixed for rpz.disabled check added.
2021-01-14 12:11:29 +01:00
W.C.A. Wijngaards
ee2545d939
- For #391 : fix indentation.
2021-01-08 09:53:52 +01:00
W.C.A. Wijngaards
3e03e2c26d
- For #391 : use struct timeval* start_time for callback information.
2021-01-08 09:47:46 +01:00
Wouter Wijngaards and GitHub
48724de155
Merge pull request #391 from fhriley/reply_cb_start_time
...
Add start_time to reply callbacks so modules can compute the response…
2021-01-08 09:35:07 +01:00
Frank Riley
e3abd772f7
Add start_time to reply callbacks so modules can compute the response time.
2021-01-01 15:44:21 -07:00
Frank Riley
42d764eeda
Add rpz_enable and rpz_disable commands to unbound-control.
2020-12-13 12:35:11 -07:00
W.C.A. Wijngaards
6bf1293bcd
No need for mk_local_addr, can pass the sockaddr structure.
2020-12-09 11:56:35 +01:00
W.C.A. Wijngaards
bdfa65c6ab
Import the patches from the files in the tarball in
...
issue #365 https://github.com/NLnetLabs/unbound/files/5659923/patches.tar.gz
from iruzanov. The merge conflicts are fixed, but no changes are made
to the patched code.
2020-12-09 11:00:51 +01:00
Petr Mensik