Simon Kelley
b5ea1cc255
Add --dns-loop-detect feature.
2014-07-29 16:34:14 +01:00
Simon Kelley
7ea3d3fdca
ra-advrouter mode for RFC-3775 mobile IPv6 support.
2014-04-25 22:04:05 +01:00
Simon Kelley
e98bd52e25
Add --dnssec-no-timecheck
2014-03-28 20:41:23 +00:00
Simon Kelley
fec216df32
Cache stats availble in CHAOS .bind domain.
2014-03-27 20:54:34 +00:00
Simon Kelley
19c51cfa49
Tidy and fix cache->uid handling.
...
Some CNAMES left the value of ->uid undefined.
Since there are now special values if this, for CNAMES
to interface names, that could cause a crash
if the undefined value hit the special value.
Also ensure that the special value can't arise
when the uid is encoding the source of an F_CONFIG
record, in case there's a CNAME to it.
2014-03-18 22:38:30 +00:00
Simon Kelley
c8a80487cd
--local-service. Default protection from DNS amplification attacks.
2014-03-05 14:29:54 +00:00
Simon Kelley
00a5b5d477
Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set.
2014-02-28 18:10:55 +00:00
Simon Kelley
7b1eae4f50
Add --servers-file option.
2014-02-20 13:43:28 +00:00
Simon Kelley
d68c2ca2b7
Cleanup of server reading code, preparation, for dynamic reading from files.
2014-02-18 22:30:30 +00:00
Simon Kelley
de73a497ca
--rev-server option. Syntactic sugar for PTR queries.
2014-02-17 21:43:27 +00:00
Simon Kelley
ee4158678a
Use DS records as trust anchors, not DNSKEYs.
...
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
2014-02-11 11:07:22 +00:00
Simon Kelley
edc231bc58
Compiler warning.
2014-01-31 09:52:50 +00:00
Simon Kelley
7d23a66ff0
Remove --dnssec-permissive, pointless if we don't set CD upstream.
2014-01-26 09:33:21 +00:00
Simon Kelley
cbf13a2a6d
Class specifier in --dnskey, instead of hardwiring C_IN.
2014-01-25 17:59:14 +00:00
Simon Kelley
5b3bf92101
--dnssec-debug
2014-01-25 17:03:07 +00:00
Simon Kelley
a25720a34a
protocol handling for DNSSEC
2014-01-14 23:13:55 +00:00
Simon Kelley
86bec2d399
Swap crypto library from openSSL to nettle.
2014-01-13 21:31:20 +00:00
Simon Kelley
c47e3ba446
Update copyright for 2014.
2014-01-08 17:07:54 +00:00
Simon Kelley
0fc2f31368
First functional DNSSEC - highly alpha.
2014-01-08 10:26:58 +00:00
Simon Kelley
963c380d13
Merge branch 'master' into dnssec
2013-12-18 17:45:31 +00:00
Simon Kelley
76ff440ebe
Ignore ",," in dhcp-host, rather than treating it as ",0,"
2013-12-17 16:29:14 +00:00
Simon Kelley
c352dd8f1a
Merge branch 'master' into dnssec
2013-12-12 12:16:17 +00:00
Simon Kelley
3a2371527f
Commit to allow master merge.
2013-12-12 12:15:50 +00:00
Vladislav Grishenko
d082faf3e4
Fix compiler warning.
2013-11-26 11:04:24 +00:00
Simon Kelley
f7029f5c08
Extend /4 and /6 syntax to --interface-name
2013-11-21 15:10:02 +00:00
Simon Kelley
65c9b48921
Merge branch 'master' into dnssec
2013-11-17 12:34:04 +00:00
Simon Kelley
f25e6c6d33
Support /4 and /6 suffixes in interface names in --auth-server
2013-11-17 12:23:42 +00:00
Simon Kelley
06e54b823e
Merge branch 'master' into dnssec
2013-11-14 10:39:40 +00:00
Simon Kelley
376d48c7f1
Allow interface name to specify subnets in --auth-zone.
2013-11-13 13:04:30 +00:00
Simon Kelley
5a4120dbfb
Merge branch 'master' into dnssec
...
Conflicts:
src/dnsmasq.h
src/forward.c
src/option.c
2013-10-25 13:16:27 +01:00
Simon Kelley
eec5c1e21c
Fix parsing of synth-domain=domain,addr,addr,prefix
2013-10-25 10:37:30 +01:00
Gildas
a9bf81ad91
Message typo.
2013-10-24 13:31:40 +01:00
Kevin Darbyshire-Bryant
8c0b73d3a8
Add --quiet-* options.
2013-10-11 11:56:33 +01:00
Simon Kelley
6bd3a09fb8
Merge branch 'edns0'
...
Conflicts:
CHANGELOG
src/dnsmasq.h
src/option.c
2013-10-11 10:25:56 +01:00
Simon Kelley
c4cd95df68
Add --ra-param and remove --force-fast-ra
2013-10-10 20:58:11 +01:00
Simon Kelley
ed4c0767b1
--add-subnet option.
2013-10-08 20:46:34 +01:00
Simon Kelley
f373a15b62
Ommit option-parsing code with NO_AUTH.
2013-09-23 12:47:47 +01:00
Simon Kelley
89500e31f1
Support MAC addresses in dhcp-host and dhcp-mac for DHCPv6.
2013-09-20 16:29:20 +01:00
Simon Kelley
0c38719fe0
Don't crash with empty tag: in dhcp-range.
2013-09-05 10:21:12 +01:00
Simon Kelley
ff7eea27e7
Add --dhcp-relay config option.
2013-09-04 18:01:38 +01:00
Simon Kelley
687bac22db
Tidy rebase
2013-08-20 15:41:26 +01:00
Giovanni Bajo
7dbe193bee
Add run-time options to activate dnssec validation.
2013-08-20 15:41:17 +01:00
Giovanni Bajo
237724c0c7
Rename existing DNSSEC macros into DNSSEC_PROXY.
2013-08-20 15:39:44 +01:00
Simon Kelley
6692a1a53f
Fix dhcp-range sanity checking.
2013-08-20 14:41:31 +01:00
Simon Kelley
5c72bb9e33
Silence compiler warning.
2013-08-19 14:12:59 +01:00
Simon Kelley
66409193dc
Sanity check for dhcp-range template.
2013-08-01 20:19:32 +01:00
Simon Kelley
2937f8a040
Provide independent control over which interfaces get TFTP.
2013-07-29 19:49:07 +01:00
Simon Kelley
8d03046269
Add --force-fast-ra option.
2013-07-29 15:41:26 +01:00
Simon Kelley
921360ce62
Add constructor-noauth: keyword
2013-05-31 14:07:22 +01:00
Simon Kelley
baa80ae512
Remove limit in prefix length in --auth-zone.
2013-05-29 16:32:07 +01:00