1. 20 Feb, 2014 1 commit
  2. 19 Feb, 2014 2 commits
    • Evan Hunt's avatar
      [master] add "--with-tuning=large" option · 6a3fa181
      Evan Hunt authored
      3745.	[func]		"configure --with-tuning=large" adjusts various
      			compiled-in constants and default settings to
      			values suited to large servers with abundant
      			memory. [RT #29538]
      6a3fa181
    • Mark Andrews's avatar
      3744. [experimental] SIT: send and process Source Identity Tokens · b5f6271f
      Mark Andrews authored
                              (which are similar to DNS Cookies by Donald Eastlake)
                              and are designed to help clients detect off path
                              spoofed responses and for servers to detect legitimate
                              clients.
      
                              SIT use a experimental EDNS option code (65001).
      
                              SIT can be enabled via --enable-developer or
                              --enable-sit.  It is on by default in Windows.
      
                              RRL processing as been updated to know about SIT with
                              legitimate clients not being rate limited. [RT #35389]
      b5f6271f
  3. 09 Feb, 2014 1 commit
    • Mark Andrews's avatar
      Add Linux support to: · 850b5e80
      Mark Andrews authored
      3733.   [func]          Improve interface scanning support.  Interface
                              information will be automatically updated if the
                              OS supports routing sockets (MacOS, *BSD, Linux).
                              Use "automatic-interface-scan no;" to disable.
      
                              Add "rndc scan" to trigger a scan. [RT #23027]
      850b5e80
  4. 07 Feb, 2014 1 commit
  5. 18 Jan, 2014 1 commit
  6. 14 Jan, 2014 1 commit
    • Evan Hunt's avatar
      [master] native PKCS#11 support · ba751492
      Evan Hunt authored
      3705.	[func]		"configure --enable-native-pkcs11" enables BIND
      			to use the PKCS#11 API for all cryptographic
      			functions, so that it can drive a hardware service
      			module directly without the need to use a modified
      			OpenSSL as intermediary (so long as the HSM's vendor
      			provides a complete-enough implementation of the
      			PKCS#11 interface). This has been tested successfully
      			with the Thales nShield HSM and with SoftHSMv2 from
      			the OpenDNSSEC project. [RT #29031]
      ba751492
  7. 08 Oct, 2013 1 commit
  8. 11 Jul, 2013 1 commit
  9. 13 Mar, 2013 1 commit
    • Evan Hunt's avatar
      [master] add JSON statistics channel · feb067b2
      Evan Hunt authored
      3524.	[func]		Added an alternate statistics channel in JSON format,
      			when the server is built with the json-c library:
      			http://[address]:[port]/json.  [RT #32630]
      feb067b2
  10. 28 Feb, 2013 1 commit
    • Evan Hunt's avatar
      [master] add geoip support · 501941f0
      Evan Hunt authored
      3504.	[func]		Add support for ACLs based on geographic location,
      			using MaxMind GeoIP databases. Based on code
      			contributed by Ken Brownfield <kb@slide.com>.
      			[RT #30681]
      501941f0
  11. 07 Dec, 2012 1 commit
  12. 28 Nov, 2012 1 commit
  13. 21 Jun, 2012 1 commit
    • Evan Hunt's avatar
      Merge rt28412b · 5506903c
      Evan Hunt authored
      - check for mmap() in configure
      - implement isc_file_mmap() and isc_file_munmap() to do
        malloc()/read() and free() when run on systems that do not
        support mmap().
      5506903c
  14. 14 May, 2012 1 commit
    • Evan Hunt's avatar
      merged filter-aaaa-on-v6 (ATT SoW) · d878b8d8
      Evan Hunt authored
      3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
      			to 'filter-aaaa-on-v4' but applies to IPv6
      			connections.  (Use "configure --enable-filter-aaaa"
      			to enable this option.)  [RT #27308]
      d878b8d8
  15. 02 May, 2012 1 commit
  16. 20 Dec, 2011 1 commit
  17. 16 Dec, 2011 1 commit
  18. 14 Oct, 2011 1 commit
  19. 28 Jul, 2011 1 commit
  20. 10 Mar, 2011 1 commit
  21. 27 Feb, 2011 1 commit
  22. 13 Jan, 2011 2 commits
  23. 23 Dec, 2010 1 commit
  24. 18 Dec, 2010 2 commits
    • Mark Andrews's avatar
      regen · aa5b9779
      Mark Andrews authored
      aa5b9779
    • Evan Hunt's avatar
      2989. [func] Added support for writable DLZ zones. (Contributed · 71bd858d
      Evan Hunt authored
      			by Andrew Tridgell of the Samba project.) [RT #22629]
      
      2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
      			of external DLZ drivers that can be loaded as
      			shared objects at runtime rather than linked with
      			named.  Currently this is switched on via a
      			compile-time option, "configure --with-dlz-dlopen".
      			Note: the syntax for configuring DLZ zones
      			is likely to be refined in future releases.
      			(Contributed by Andrew Tridgell of the Samba
      			project.) [RT #22629]
      
      2987.	[func]		Improve ease of configuring TKEY/GSS updates by
      			adding a "tkey-gssapi-keytab" option.  If set,
      			updates will be allowed with any key matching
      			a principal in the specified keytab file.
      			"tkey-gssapi-credential" is no longer required
      			and is expected to be deprecated.  (Contributed
      			by Andrew Tridgell of the Samba project.)
      			[RT #22629]
      71bd858d
  25. 03 Dec, 2010 1 commit
  26. 03 Jun, 2010 2 commits
  27. 19 May, 2010 1 commit
  28. 12 May, 2010 1 commit
  29. 18 Mar, 2010 1 commit
  30. 27 Oct, 2009 1 commit
  31. 26 Oct, 2009 1 commit
  32. 01 Sep, 2009 3 commits
  33. 14 Jul, 2009 1 commit
  34. 10 Jun, 2009 1 commit