Gitiles
Code Review
Sign In
gerrit.nordix.org
/
thekelleys
/
dnsmasq
/
403de05925b8883a44f080fee50c0938bd57fb09
/
src
/
forward.c
86fa104
Tweak EDNS timeout code.
by Simon Kelley
· 10 years ago
a77cec8
Handle UDP packet loss when fragmentation of large packets is broken.
by Simon Kelley
· 10 years ago
e66b4df
Fix argument-order botch which broke DNSSEC for TCP queries.
by Simon Kelley
· 10 years ago
554b580
Log domain when reporting DNSSEC validation failure.
by Simon Kelley
· 10 years ago
982faf4
Fix compiler warning when not including DNSSEC.
by Simon Kelley
· 10 years ago
fe3992f
Return INSECURE, rather than BOGUS when DS proved not to exist.
by Simon Kelley
· 10 years ago
150162b
Return SERVFAIL when validation abandoned.
by Simon Kelley
· 10 years ago
ff841eb
Fix boilerplate code for re-running system calls on EINTR and EAGAIN etc.
by Simon Kelley
· 10 years ago
aff3396
Update copyrights for dawn of 2015.
by Simon Kelley
· 10 years ago
2ae195f
Don't treat SERVFAIL as a recoverable error.....
by Simon Kelley
· 10 years ago
25cf5e3
Add --log-queries=extra option for more complete logging.
by Simon Kelley
· 10 years ago
424c4a8
Merge branch 'unsigned'
by Simon Kelley
· 10 years ago
97e618a
DNSSEC: do top-down search for limit of secure delegation.
by Simon Kelley
· 10 years ago
32fc6db
Add --ignore-address option.
by Glen Huang
· 10 years ago
9890627
Fix conntrack with --bind-interfaces
by Hans Dedecker
· 10 years ago
e9828b6
Set conntrack mark before connect() call.
by Karl Vogel
· 10 years ago
15b1b7e
Fix endian bug in --local-service code.
by Richard Genoud
· 10 years ago
b5ea1cc
Add --dns-loop-detect feature.
by Simon Kelley
· 10 years ago
47a9516
Use event system to re-send query on new route. Tidies module boundaries.
by Simon Kelley
· 10 years ago
8938ae0
Get packet size right when removing pseudoheader.
by Simon Kelley
· 11 years ago
1fc0268
Do SERVFAIL, therefore continue when searching for DS in TCP path too.
by Simon Kelley
· 11 years ago
4872aa7
Handle SERVFAIL replies when looking for proven-nonexistence of DS.
by Simon Kelley
· 11 years ago
6375838
Fix crash on TCP DNS request when DNSSEC not enabled.
by Simon Kelley
· 11 years ago
82a14af
Ensure request name in buffer for ipset lookup.
by Simon Kelley
· 11 years ago
8a8bbad
Ensure ->sentto is valid for DNSSEC forwards. Otherwise retries SEGV.
by Simon Kelley
· 11 years ago
4e1fe44
Terminate DS-search when reaching the root via cache entries.
by Simon Kelley
· 11 years ago
51967f9
SERVFAIL is an expected error return, don't try all servers.
by Simon Kelley
· 11 years ago
b37f8b9
Handle failure of hash_questions()
by Tomas Hozza
· 11 years ago
fc2833f
Memory leak in error path.
by Tomas Hozza
· 11 years ago
490f907
Reorder sanity checks on UDP packet reception, to cope with failed recvfrom()
by Simon Kelley
· 11 years ago
2a7a2b8
Ignore DNS queries from port 0: http://www.ietf.org/mail-archive/web/dnsop/current/msg11441.html
by Simon Kelley
· 11 years ago
2b29191
Fix DNSSEC crash retrying to IPv6 server.
by Simon Kelley
· 11 years ago
0c8584e
Warn about non-local queries once only for UDP.
by Simon Kelley
· 11 years ago
c8a8048
--local-service. Default protection from DNS amplification attacks.
by Simon Kelley
· 11 years ago
00a5b5d
Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set.
by Simon Kelley
· 11 years ago
613ad15
Strip DNSSEC RRs when query doesn't have DO bit set.
by Simon Kelley
· 11 years ago
dac7431
TYpo.
by Simon Kelley
· 11 years ago
2ecd9bd
No CD in forwarded queries unless dnssec-debug for TCP too.
by Simon Kelley
· 11 years ago
83349b8
Further tidying of AD and DO bit handling.
by Simon Kelley
· 11 years ago
7fa836e
Handle validation when more one key is needed.
by Simon Kelley
· 11 years ago
e243c07
AD bit in queries handled as RFC6840 p5.7
by Simon Kelley
· 11 years ago
610e782
Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch.
by Simon Kelley
· 11 years ago
81a883f
Format tweak.
by Simon Kelley
· 11 years ago
8d718cb
Nasty cache failure and memory leak with DNSSEC.
by Simon Kelley
· 11 years ago
97bc798
Init ->dependent field in frec allocation.
by Simon Kelley
· 11 years ago
6938f34
Don't mark answers as DNSEC validated if DNS-doctored.
by Simon Kelley
· 11 years ago
7d23a66
Remove --dnssec-permissive, pointless if we don't set CD upstream.
by Simon Kelley
· 11 years ago
703c7ff
Fix to last commit.
by Simon Kelley
· 11 years ago
8a9be9e
Replace CRC32 with SHA1 for spoof detection in DNSSEC builds.
by Simon Kelley
· 11 years ago
5b3bf92
--dnssec-debug
by Simon Kelley
· 11 years ago
0744ca6
More DNSSEC caching logic, and avoid repeated validation of DS/DNSKEY
by Simon Kelley
· 11 years ago
39048ad
bug fix, avoids infinite loop in forwarding code.
by Simon Kelley
· 11 years ago
5d3b87a
Better handling of truncated DNSSEC replies.
by Simon Kelley
· 11 years ago
6c0cb85
Trivial format fix
by Simon Kelley
· 11 years ago
e0c0ad3
UDP retries for DNSSEC
by Simon Kelley
· 11 years ago
4619d94
Fix SEGV and failure to validate on x86_64.
by Simon Kelley
· 11 years ago
a25720a
protocol handling for DNSSEC
by Simon Kelley
· 11 years ago
795501b
AD bit handling when doing validation.
by Simon Kelley
· 11 years ago
c47e3ba
Update copyright for 2014.
by Simon Kelley
· 11 years ago
f1668d2
New source port for DNSSEC-originated queries.
by Simon Kelley
· 11 years ago
7d7b7b3
DNSSEC for TCP queries.
by Simon Kelley
· 11 years ago
60b6806
Rationalise DNS packet-buffer size calculations.
by Simon Kelley
· 11 years ago
871417d
Handle truncated replies in DNSSEC validation.
by Simon Kelley
· 11 years ago
0fc2f31
First functional DNSSEC - highly alpha.
by Simon Kelley
· 11 years ago
c3e0b9b
backup
by Simon Kelley
· 11 years ago
9d63304
Saving progress
by Simon Kelley
· 11 years ago
c352dd8
Merge branch 'master' into dnssec
by Simon Kelley
· 11 years ago
3a23715
Commit to allow master merge.
by Simon Kelley
· 11 years ago
2329bef
Check arrival interface of IPv6 requests, even in --bind-interfaces.
by Simon Kelley
· 11 years ago
3b19596
Fix compiler warnings.
by Vladislav Grishenko
· 11 years ago
5a4120d
Merge branch 'master' into dnssec
by Simon Kelley
· 11 years ago
6008bdb
Fix botch in determining if auth query is local.
by Simon Kelley
· 11 years ago
19b1689
Don't filter by subnet when handling local queries for auth-zones.
by Simon Kelley
· 11 years ago
b485ed9
Always answer queries for authoritative zones locally, never forward.
by Simon Kelley
· 11 years ago
ed4c076
--add-subnet option.
by Simon Kelley
· 11 years ago
e292e93
Initial dnssec structure.
by Giovanni Bajo
· 13 years ago
237724c
Rename existing DNSSEC macros into DNSSEC_PROXY.
by Giovanni Bajo
· 13 years ago
0da5e89
Log forwarding table overflows.
by Marcelo Salhab Brogliato
· 12 years ago
115ac3e
Generalise --interface-name to cope with IPv6 addresses.
by Simon Kelley
· 12 years ago
3f2873d
Handle IPv4 interface-address labels in Linux.
by Simon Kelley
· 12 years ago
797a7af
Fix crash on SERVFAIL when --conntrack in use.
by Giacomo Tazzari
· 12 years ago
4b5ea12
Send TCP DNS messages in one write() call. Stops TCP stream fragmenting.
by Simon Kelley
· 12 years ago
7e5664b
Fix trivial access of un-initialised memory.
by Simon Kelley
· 12 years ago
13d86c7
Add --ipset option.
by Jason A. Donenfeld
· 12 years ago
6174435
Change copyright messages to include 2013.
by Simon Kelley
· 12 years ago
e25db1f
Handle wrong interface for locally-routed packets.
by Simon Kelley
· 12 years ago
4820dce
Make authoritative stuff a compile-time option.
by Simon Kelley
· 12 years ago
4967876
Zone-transfer peer restriction option.
by Simon Kelley
· 12 years ago
ee86ce6
Fix TCP query forwarding to non-default servers.
by Simon Kelley
· 12 years ago
36bec08
Merge branch 'auth'
by Simon Kelley
· 12 years ago
29d28dd
Don't send RAs to the wrong place when DAD in progress.
by Simon Kelley
· 12 years ago
4f7b304
Initial code to do authoritative DNS.
by Simon Kelley
· 12 years ago
54dd393
Add --bind-dynamic
by Simon Kelley
· 12 years ago
50303b1
Remove redundant send_from logging code.
by Simon Kelley
· 13 years ago
4b028ad
Merge branch 'bind'
by Simon Kelley
· 13 years ago
29689cf
Handle errors when sending ICMP6 pings better.
by Simon Kelley
· 13 years ago
52d4abf
Make --listen-address work for all 127.0.0.0/8 addresses.
by Simon Kelley
· 13 years ago
552af8b
Fix --localise-queries via interface lo bug.
by Simon Kelley
· 13 years ago
22d904d
Fix RA on *BSD (missing sa_len)
by Simon Kelley
· 13 years ago
5954608
Updated copyright notices. Happy new year!
by Simon Kelley
· 13 years ago
Next »