1. 07 Jul, 2015 1 commit
    • Evan Hunt's avatar
      [master] traffic size stats · 70d987de
      Evan Hunt authored
      4156.	[func]		Added statistics counters to track the sizes
      			of incoming queries and outgoing responses in
      			histogram buckets, as specified in RSSAC002.
      			[RT #39049]
      70d987de
  2. 05 Jul, 2015 1 commit
    • Mark Andrews's avatar
      4152. [func] Implement DNS COOKIE option. This replaces the · ce67023a
      Mark Andrews authored
                              experimental SIT option of BIND 9.10.  The following
                              named.conf directives are avaliable: send-cookie,
                              cookie-secret, cookie-algorithm and nocookie-udp-size.
                              The following dig options are available:
                              +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
      ce67023a
  3. 29 Jun, 2015 1 commit
  4. 25 Jun, 2015 2 commits
  5. 05 Jun, 2015 1 commit
  6. 17 Mar, 2015 1 commit
  7. 26 Feb, 2015 3 commits
  8. 29 Aug, 2014 1 commit
    • Evan Hunt's avatar
      [master] ECS authoritative support · d46855ca
      Evan Hunt authored
      3936.	[func]		Added authoritative support for the EDNS Client
      			Subnet (ECS) option.
      
      			ACLs can now include "ecs" elements which specify
      			an address or network prefix; if an ECS option is
      			included in a DNS query, then the address encoded
      			in the option will be matched against "ecs" ACL
      			elements.
      
      			Also, if an ECS address is included in a query,
      			then it will be used instead of the client source
      			address when matching "geoip" ACL elements.  This
      			behavior can be overridden with "geoip-use-ecs no;".
      
      			When "ecs" or "geoip" ACL elements are used to
      			select a view for a query, the response will include
      			an ECS option to indicate which client network the
      			answer is valid for.
      
      			(Thanks to Vincent Bernat.) [RT #36781]
      d46855ca
  9. 21 May, 2014 1 commit
  10. 15 May, 2014 1 commit
  11. 19 Mar, 2014 1 commit
  12. 23 Feb, 2014 1 commit
  13. 19 Feb, 2014 2 commits
    • Tinderbox User's avatar
      update copyright notice · 1361e038
      Tinderbox User authored
      1361e038
    • Mark Andrews's avatar
      3744. [experimental] SIT: send and process Source Identity Tokens · b5f6271f
      Mark Andrews authored
                              (which are similar to DNS Cookies by Donald Eastlake)
                              and are designed to help clients detect off path
                              spoofed responses and for servers to detect legitimate
                              clients.
      
                              SIT use a experimental EDNS option code (65001).
      
                              SIT can be enabled via --enable-developer or
                              --enable-sit.  It is on by default in Windows.
      
                              RRL processing as been updated to know about SIT with
                              legitimate clients not being rate limited. [RT #35389]
      b5f6271f
  14. 16 Feb, 2014 1 commit
  15. 07 Feb, 2014 1 commit
  16. 10 Jan, 2014 3 commits
    • Mark Andrews's avatar
      update copyrights · a7c412f3
      Mark Andrews authored
      a7c412f3
    • Evan Hunt's avatar
      [master] fix win32 build problems · 1bb2f53b
      Evan Hunt authored
      1bb2f53b
    • Evan Hunt's avatar
      [master] stats improvements · 789252d5
      Evan Hunt authored
      3700.	[func]		Allow access to subgroups of XML statistics via
      			special URLs http://<server>:<port>/xml/v3/server,
      			/zones, /net, /tasks, /mem, and /status.  [RT #35115]
      
      3699.	[bug]		Improvements to statistics channel XSL stylesheet:
      			the stylesheet can now be cached by the browser;
      			section headers are omitted from the stats display
      			when there is no data in those sections to be
      			displayed; counters are now right-justified for
      			easier readability. [RT #35117]
      789252d5
  17. 06 Jun, 2013 1 commit
  18. 19 Mar, 2013 1 commit
    • Evan Hunt's avatar
      [master] add xml/v2 and xml/v3 URIs · a13aa526
      Evan Hunt authored
      3527.	[compat]	Add a URI to allow applications to explicitly
      			request a particular XML schema from the statistics
      			channel, returning 404 if not supported. [RT #32481]
      a13aa526
  19. 14 Mar, 2013 1 commit
  20. 13 Mar, 2013 1 commit
    • Evan Hunt's avatar
      [master] add JSON statistics channel · feb067b2
      Evan Hunt authored
      3524.	[func]		Added an alternate statistics channel in JSON format,
      			when the server is built with the json-c library:
      			http://[address]:[port]/json.  [RT #32630]
      feb067b2
  21. 04 Mar, 2013 1 commit
  22. 01 Mar, 2013 1 commit
  23. 28 Feb, 2013 1 commit
  24. 27 Feb, 2013 1 commit
    • Evan Hunt's avatar
      [master] better zone-statistics syntax · 40a7e85f
      Evan Hunt authored
      3501.	[func]		zone-statistics now takes three options: full,
      			terse, and none. "yes" and "no" are retained as
      			synonyms for full and terse, respectively. [RT #29165]
      40a7e85f
  25. 25 Feb, 2013 2 commits
    • Evan Hunt's avatar
      [master] RPZ speedup (phase 2, multiple RPZ's) · 94315060
      Evan Hunt authored
      3495.	[func]		Support multiple response-policy zones, while
      			improving RPZ performance. [RT #32476]
      94315060
    • Evan Hunt's avatar
      [master] DNS RRL · 55e5c51e
      Evan Hunt authored
      3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
      			amplification attacks by rate-limiting substantially-
      			identical responses. [RT #28130]
      55e5c51e
  26. 12 Feb, 2013 1 commit
  27. 08 Feb, 2013 3 commits
  28. 14 Nov, 2012 1 commit
    • Curtis Blackburn's avatar
      3418. [func] New XML schema (version 3.0) for the statistics channel · aecadaf3
      Curtis Blackburn authored
      			adds query type statistics at the zone level, and
      			flattens the XML tree and uses compressed format to
      			optimize parsing. Includes new XSL that permits
      			charting via the Google Charts API on browsers that
      			support javascript in XSL.  The old XML schema has been
      			deprecated. [RT #30023]
      
      3417.	[placeholder]
      aecadaf3
  29. 01 Nov, 2012 1 commit
  30. 31 Oct, 2012 1 commit
    • Mark Andrews's avatar
      More coverity fixes: · bbf31e6b
      Mark Andrews authored
      3410.   [bug]           Addressed Coverity warnings. [RT #31626]
      Squashed commit of the following:
      
      commit 6fec07bbb69ead784063052f2099674f8b52c6b3
      Author: Mark Andrews <marka@isc.org>
      Date:   Tue Oct 30 18:14:35 2012 +1100
      
          use strl{cat,cpy}
      
      commit 19a5d3766f3dbc8a2944b21640a8226a89aae7ba
      Author: Mark Andrews <marka@isc.org>
      Date:   Tue Oct 30 14:38:55 2012 +1100
      
          address unchecked xmlTextWriter* calls
      bbf31e6b
  31. 15 Oct, 2012 1 commit