1. 25 Apr, 2017 1 commit
  2. 24 Apr, 2017 1 commit
  3. 23 Apr, 2017 1 commit
  4. 21 Apr, 2017 2 commits
  5. 25 Mar, 2017 1 commit
  6. 29 Dec, 2016 1 commit
  7. 30 Oct, 2016 1 commit
  8. 09 Sep, 2016 1 commit
  9. 24 Aug, 2016 1 commit
  10. 11 Jul, 2016 1 commit
  11. 31 May, 2016 1 commit
  12. 26 May, 2016 1 commit
  13. 24 May, 2016 2 commits
  14. 28 Apr, 2016 1 commit
  15. 15 Mar, 2016 3 commits
  16. 10 Mar, 2016 1 commit
  17. 27 Feb, 2016 1 commit
  18. 01 Feb, 2016 1 commit
  19. 17 Nov, 2015 1 commit
  20. 02 Oct, 2015 1 commit
    • Evan Hunt's avatar
      [master] dnstap · b66b333f
      Evan Hunt authored
      4235.	[func]		Added support in named for "dnstap", a fast method of
      			capturing and logging DNS traffic, and a new command
      			"dnstap-read" to read a dnstap log file.  Use
      			"configure --enable-dnstap" to enable this
      			feature (note that this requires libprotobuf-c
      			and libfstrm). See the ARM for configuration details.
      
      			Thanks to Robert Edmonds of Farsight Security.
      			[RT #40211]
      b66b333f
  21. 13 Aug, 2015 1 commit
  22. 07 Aug, 2015 1 commit
    • Evan Hunt's avatar
      [master] address buffer accounting error · ce9f893e
      Evan Hunt authored
      4168.	[security]	A buffer accounting error could trigger an
      			assertion failure when parsing certain malformed
      			DNSSEC keys. (CVE-2015-5722) [RT #40212]
      ce9f893e
  23. 03 Aug, 2015 1 commit
  24. 14 Jul, 2015 1 commit
  25. 11 Feb, 2015 1 commit
  26. 21 Oct, 2014 2 commits
  27. 01 Oct, 2014 2 commits
  28. 29 Sep, 2014 1 commit
  29. 16 Sep, 2014 1 commit
  30. 15 Sep, 2014 1 commit
  31. 11 Sep, 2014 2 commits
  32. 29 Aug, 2014 1 commit
    • Evan Hunt's avatar
      [master] ECS authoritative support · d46855ca
      Evan Hunt authored
      3936.	[func]		Added authoritative support for the EDNS Client
      			Subnet (ECS) option.
      
      			ACLs can now include "ecs" elements which specify
      			an address or network prefix; if an ECS option is
      			included in a DNS query, then the address encoded
      			in the option will be matched against "ecs" ACL
      			elements.
      
      			Also, if an ECS address is included in a query,
      			then it will be used instead of the client source
      			address when matching "geoip" ACL elements.  This
      			behavior can be overridden with "geoip-use-ecs no;".
      
      			When "ecs" or "geoip" ACL elements are used to
      			select a view for a query, the response will include
      			an ECS option to indicate which client network the
      			answer is valid for.
      
      			(Thanks to Vincent Bernat.) [RT #36781]
      d46855ca
  33. 15 Aug, 2014 1 commit