Simon Kelley
aa300f7167
Fix typo in last commit.
2016-03-01 15:19:13 +00:00
Simon Kelley
c7f3bd2ac8
Replace incoming EDNS0_OPTION_NOMDEVICEID and EDNS0_OPTION_NOMCPEID options.
2016-02-28 21:48:34 +00:00
Simon Kelley
22fe2fd038
Fix --add-subnet when returning empty or default subnet.
2016-02-28 17:07:10 +00:00
Simon Kelley
7480aeffc8
Apply ceiling of lease length to TTL when --dhcp-ttl in use.
2016-02-26 21:58:20 +00:00
Simon Kelley
bec366b404
Add --tftp-mtu option.
2016-02-24 22:03:26 +00:00
Simon Kelley
e06e6e34bf
Update CHANGELOG.
2016-02-24 21:26:16 +00:00
Simon Kelley
832e47beab
Add --dhcp-ttl option.
2016-02-24 21:24:45 +00:00
Simon Kelley
df3d54f776
Add TTL parameter to --host-record and --cname.
2016-02-24 21:03:38 +00:00
Simon Kelley
22c0f4fe87
Fix previous commit.
2016-02-17 22:12:31 +00:00
Simon Kelley
9e4cf47ee8
Add --add-mac=text option.
2016-02-17 20:26:32 +00:00
Simon Kelley
fdc97e1383
Avoid divide-by-zero when dhcp-range is a whole /64
2016-02-13 17:47:17 +00:00
S L
a18bf3149a
Avoid losing timer when deleting a RA context.
2016-02-12 17:36:20 +00:00
Simon Kelley
1566bacb2c
Fix breakage in ARP code when IPV6 support not compiled in.
2016-02-05 14:48:25 +00:00
Simon Kelley
e6e751b066
Make names of ARP script actions consistent.
2016-02-01 17:59:07 +00:00
Andy Stormont
8de875f0fb
Fix FTBFS on illumos
2016-02-01 12:07:57 +00:00
Chris Novakovic
4ace25c5d6
Treat REFUSED (not SERVFAIL) as an unsuccessful upstream response
...
Commit 51967f9807 began treating SERVFAIL
as a successful response from an upstream server (thus ignoring future
responses to the query from other upstream servers), but a typo in that
commit means that REFUSED responses are accidentally being treated as
successful instead of SERVFAIL responses.
This commit corrects this typo and provides the behaviour intended by
commit 51967f9 : SERVFAIL responses are considered successful (and will
be sent back to the requester), while REFUSED responses are considered
unsuccessful (and dnsmasq will wait for responses from other upstream
servers that haven't responded yet).
2016-01-25 21:54:35 +00:00
Simon Kelley
1e5051228d
Final form of configuration for EDNS0 MAC-address code.
2016-01-25 21:29:23 +00:00
Hans Dedecker
926332a764
Add --max-port config option.
2016-01-23 10:48:12 +00:00
Simon Kelley
d05dd58de1
Fix wrong reply to simple name when --domain-needed set and no servers configured.
...
Also return REFUSED and not SERVFAIL when out of memory.
Thanks to Allain Legacy for problem report.
2016-01-19 21:23:30 +00:00
Simon Kelley
f7443d76f7
Fix problems in last commit when DNSSEC not enabled.
2016-01-19 20:29:57 +00:00
Simon Kelley
f344dbc622
Complete DNSSEC server-selection code and set conntrack on DNSSEC queries.
2016-01-18 18:11:54 +00:00
Simon Kelley
f4d0c660ca
Fix sporadic crash in find_mac() - hwlen must be zero for empty entries.
2016-01-18 12:51:08 +00:00
Simon Kelley
1801a29226
Fix botch in forward.c flags code.
...
Thanks to Matthias Anfree for spotting this.
2016-01-17 21:53:57 +00:00
Simon Kelley
92be34a407
Complete work to allow DNSSEC validation with private DNS servers.
2016-01-16 18:39:54 +00:00
Simon Kelley
bb58f63ce5
arp.c tidy up.
2016-01-14 19:23:10 +00:00
Simon Kelley
367341f745
Disable DNSSEC for server=/domain/.. servers unless trust-anchor provided.
2016-01-12 15:58:23 +00:00
André Glüpker
eddf365284
Fix bad cache-size calculation when hosts-file read fails.
2016-01-12 12:54:17 +00:00
Simon Kelley
a63b8b89e6
DNSSEC: Handle non-root trust anchors, and check we have a root trust anchor.
2016-01-12 11:28:58 +00:00
Simon Kelley
5757371d43
Inhibit DNSSEC validation when forwarding to private servers for a domain.
...
server=/example.com/<ip-of-server>
The rationale is that the chain-of-trust will not be complete to
private servers. If it was, it would not be necessary to access the
server direct.
2016-01-11 22:50:00 +00:00
Simon Kelley
b633de9413
Fix FTBFS when scripts excluded at compilation time.
2016-01-06 22:51:17 +00:00
Simon Kelley
c49778df4a
Update copyright notices. Happy new year!
2016-01-06 18:52:33 +00:00
Simon Kelley
53a9173fc0
Handle building with script support enabled and DHCP disabled.
2016-01-06 17:59:13 +00:00
Simon Kelley
d917275e48
Fix botch in new arp-cache linked-list code resulting in 100% CPU spin.
2016-01-04 17:17:41 +00:00
Simon Kelley
cc7cb0b893
Fix datatype-sixe botch which broke DNSSEC sig timestamps when far in the future.
2016-01-04 16:04:51 +00:00
Simon Kelley
ec0628c4b2
Trivial code tweak.
2015-12-31 20:55:39 +00:00
Simon Kelley
97b1d25764
Correct logic for when to start helper.
2015-12-31 18:52:38 +00:00
Simon Kelley
33702ab1f8
First complete version of DNS-client-id EDNS0 and ARP tracking code.
2015-12-28 23:17:15 +00:00
Simon Kelley
11867dc28c
Cache access to the kernel's ARP table.
2015-12-23 16:15:58 +00:00
Simon Kelley
d3a8b39c7d
More EDNS0 packet-size tweaks.
2015-12-23 12:27:37 +00:00
Simon Kelley
15379ea1f2
Log signature algo with DNSKEY and DS, also digest with DS.
2015-12-21 18:31:55 +00:00
Simon Kelley
efef497b89
Fix build failure when DNSSEC code omitted.
2015-12-21 17:30:44 +00:00
Simon Kelley
5aa5f0ff2f
Truncate DNS replies >512 bytes that the client isn't expecting.
2015-12-21 17:20:35 +00:00
Simon Kelley
5bb88f0963
Handle extending EDNS0 OPT RR.
2015-12-21 16:23:47 +00:00
Simon Kelley
1d03016bbc
Split EDNS0 stuff into its own source file.
2015-12-21 14:17:06 +00:00
Simon Kelley
ce5732e84f
NSEC3 check: RFC5155 para 8.2
2015-12-20 21:39:19 +00:00
Simon Kelley
a86fdf437e
Minor tweak to previous commit.
2015-12-20 21:19:20 +00:00
Simon Kelley
3e86d316c4
Nasty, rare and obscure off-by-one in DNSSEC hostname_cmp().
2015-12-20 20:50:05 +00:00
Simon Kelley
d67ecac59d
More tweaks in handling unknown DNSSEC algorithms.
2015-12-20 20:44:23 +00:00
Simon Kelley
fa14bec83b
Major tidy up of EDNS0 handling and computation/use of udp packet size.
2015-12-20 17:12:16 +00:00
Simon Kelley
14a4ae883d
Do a better job of determining which DNSSEC sig algos are supported.
2015-12-17 17:29:57 +00:00