Commits · 89b12ed35bd13a5ed70c9940208d87660cdedd15 · nanahira / Dnsmasq

06 Mar, 2014 1 commit
- OPT_LOCAL_SERVICE needs up-to-date interface list too. · 89b12ed3
  Simon Kelley authored Mar 06, 2014
  
  89b12ed3
05 Mar, 2014 3 commits
- Set --local-service in Debian package startup. · 1a9a3489
  Simon Kelley authored Mar 05, 2014
  
  1a9a3489
- --local-service. Default protection from DNS amplification attacks. · c8a80487
  Simon Kelley authored Mar 05, 2014
  
  c8a80487
- Add --static to pkg-config command when appropriate. · 4ea8e80d
  Simon Kelley authored Mar 05, 2014
  
  4ea8e80d
03 Mar, 2014 1 commit
- Compiler warning. · c07d30dc
  Simon Kelley authored Mar 03, 2014
  
  c07d30dc
02 Mar, 2014 9 commits
- Man page updates for DNSSEC. · d588ab54
  Simon Kelley authored Mar 02, 2014
  
  d588ab54
- KEYBLOCK LEN better as a multiple of 8. · f8b422a7
  Simon Kelley authored Mar 02, 2014
  
  f8b422a7
- Can have local DS records (trust anchors). · 29fe922b
  Simon Kelley authored Mar 01, 2014
  
  29fe922b
- Mass edit of INSECURE->BOGUS returns for server failure/bad input. · 87070192
  Simon Kelley authored Mar 01, 2014
  
  87070192
- Don't cache secure replies which we've messsed with. · d1fbb77e
  Simon Kelley authored Mar 01, 2014
  
  d1fbb77e
- Tweak tuning params. · 1fbe4d2f
  Simon Kelley authored Mar 01, 2014
  
  1fbe4d2f
- Handle replies with no answers and no NS in validate_reply. · 0575610f
  Simon Kelley authored Mar 01, 2014
  
  0575610f
- Don't free blockdata for negative DS cache entries. · e3f14558
  Simon Kelley authored Mar 01, 2014
  
  e3f14558
- Fix off-by-one overwrite. · bd9b3cf5
  Simon Kelley authored Mar 01, 2014
  
  bd9b3cf5
01 Mar, 2014 2 commits
- Tidy. · 14db4212
  Simon Kelley authored Mar 01, 2014
  
  14db4212
- Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set. · 00a5b5d4
  Simon Kelley authored Feb 28, 2014
  
  00a5b5d4
27 Feb, 2014 1 commit
- Negative caching for DS records. · b8eac191
  Simon Kelley authored Feb 27, 2014
  
  b8eac191
26 Feb, 2014 2 commits
- Return INSECURE when validation fails with proved non-existent DS. · b47b04c8
  Simon Kelley authored Feb 25, 2014
  
  b47b04c8
- Strip DNSSEC RRs when query doesn't have DO bit set. · 613ad15d
  Simon Kelley authored Feb 25, 2014
  
  613ad15d
25 Feb, 2014 3 commits
- Speeling. · 24187530
  Simon Kelley authored Feb 24, 2014
  
  24187530
- Code cleanup. · a857daa3
  Simon Kelley authored Feb 24, 2014
  
  a857daa3
- An NSEC record cannot attest to its own non-existance! · f01d7be6
  Simon Kelley authored Feb 24, 2014
  
  f01d7be6
24 Feb, 2014 1 commit
- Check signer name in RRSIGs. · d387380a
  Simon Kelley authored Feb 23, 2014
  
  d387380a
23 Feb, 2014 2 commits
- Bugfix for last commit. · f2e4c277
  Simon Kelley authored Feb 23, 2014
  
  f2e4c277
- NSEC3 validation. First pass. · 5107ace1
  Simon Kelley authored Feb 23, 2014
  
  5107ace1
20 Feb, 2014 3 commits
- Add --servers-file option. · 7b1eae4f
  Simon Kelley authored Feb 20, 2014
  
  7b1eae4f
- Omit ECC from DNSSEC if nettle library is old. · c152dc84
  Simon Kelley authored Feb 19, 2014
  
  c152dc84
- More server cleanup. · 7bcca006
  Simon Kelley authored Feb 19, 2014
  
  7bcca006
19 Feb, 2014 1 commit
- Cleanup of server reading code, preparation, for dynamic reading from files. · d68c2ca2
  Simon Kelley authored Feb 18, 2014
  
  d68c2ca2
18 Feb, 2014 1 commit
- --rev-server option. Syntactic sugar for PTR queries. · de73a497
  Simon Kelley authored Feb 17, 2014
  
  de73a497
14 Feb, 2014 4 commits
- Log BOGUS validation result when upstream sends SERVFAIL. · e3ec15af
  Simon Kelley authored Feb 13, 2014
  
  e3ec15af
- TYpo. · dac74312
  Simon Kelley authored Feb 13, 2014
  
  dac74312
- No CD in forwarded queries unless dnssec-debug for TCP too. · 2ecd9bd5
  Simon Kelley authored Feb 13, 2014
  
  2ecd9bd5
- Don't mess with the TTL of DNSSEC RRs. · a0ab18f6
  Simon Kelley authored Feb 13, 2014
  
  a0ab18f6
13 Feb, 2014 1 commit
- Add RFC-6605 ECDSA DNSSEC verification. · ebe95a83
  Simon Kelley authored Feb 13, 2014
  
  ebe95a83
11 Feb, 2014 4 commits
- Use DS records as trust anchors, not DNSKEYs. · ee415867
  Simon Kelley authored Feb 11, 2014
```
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
```
  ee415867
- Further tidying of AD and DO bit handling. · 83349b8a
  Simon Kelley authored Feb 10, 2014
  
  83349b8a
- Handle validation when more one key is needed. · 7fa836e1
  Simon Kelley authored Feb 10, 2014
  
  7fa836e1
- Fix Byte-order botch: broke DNSSEC on big-endian platforms. · 1633e308
  Simon Kelley authored Feb 10, 2014
  
  1633e308
10 Feb, 2014 1 commit
- Fix DNSSEC caching problems: incomplete RRSIG RRsets. · c8ca33f8
  Simon Kelley authored Feb 10, 2014
  
  c8ca33f8