Gitiles
Code Review Sign In
gerrit.nordix.org / thekelleys / dnsmasq / 585840b03365372679907f175b07a01c9d621ae0 / src / forward.c
  1. 86fa104 Tweak EDNS timeout code. by Simon Kelley · 10 years ago
  2. a77cec8 Handle UDP packet loss when fragmentation of large packets is broken. by Simon Kelley · 10 years ago
  3. e66b4df Fix argument-order botch which broke DNSSEC for TCP queries. by Simon Kelley · 10 years ago
  4. 554b580 Log domain when reporting DNSSEC validation failure. by Simon Kelley · 10 years ago
  5. 982faf4 Fix compiler warning when not including DNSSEC. by Simon Kelley · 10 years ago
  6. fe3992f Return INSECURE, rather than BOGUS when DS proved not to exist. by Simon Kelley · 10 years ago
  7. 150162b Return SERVFAIL when validation abandoned. by Simon Kelley · 10 years ago
  8. ff841eb Fix boilerplate code for re-running system calls on EINTR and EAGAIN etc. by Simon Kelley · 10 years ago
  9. aff3396 Update copyrights for dawn of 2015. by Simon Kelley · 10 years ago
  10. 2ae195f Don't treat SERVFAIL as a recoverable error..... by Simon Kelley · 10 years ago
  11. 25cf5e3 Add --log-queries=extra option for more complete logging. by Simon Kelley · 10 years ago
  12. 424c4a8 Merge branch 'unsigned' by Simon Kelley · 10 years ago
  13. 97e618a DNSSEC: do top-down search for limit of secure delegation. by Simon Kelley · 10 years ago
  14. 32fc6db Add --ignore-address option. by Glen Huang · 10 years ago
  15. 9890627 Fix conntrack with --bind-interfaces by Hans Dedecker · 10 years ago
  16. e9828b6 Set conntrack mark before connect() call. by Karl Vogel · 10 years ago
  17. 15b1b7e Fix endian bug in --local-service code. by Richard Genoud · 10 years ago
  18. b5ea1cc Add --dns-loop-detect feature. by Simon Kelley · 10 years ago
  19. 47a9516 Use event system to re-send query on new route. Tidies module boundaries. by Simon Kelley · 10 years ago
  20. 8938ae0 Get packet size right when removing pseudoheader. by Simon Kelley · 11 years ago
  21. 1fc0268 Do SERVFAIL, therefore continue when searching for DS in TCP path too. by Simon Kelley · 11 years ago
  22. 4872aa7 Handle SERVFAIL replies when looking for proven-nonexistence of DS. by Simon Kelley · 11 years ago
  23. 6375838 Fix crash on TCP DNS request when DNSSEC not enabled. by Simon Kelley · 11 years ago
  24. 82a14af Ensure request name in buffer for ipset lookup. by Simon Kelley · 11 years ago
  25. 8a8bbad Ensure ->sentto is valid for DNSSEC forwards. Otherwise retries SEGV. by Simon Kelley · 11 years ago
  26. 4e1fe44 Terminate DS-search when reaching the root via cache entries. by Simon Kelley · 11 years ago
  27. 51967f9 SERVFAIL is an expected error return, don't try all servers. by Simon Kelley · 11 years ago
  28. b37f8b9 Handle failure of hash_questions() by Tomas Hozza · 11 years ago
  29. fc2833f Memory leak in error path. by Tomas Hozza · 11 years ago
  30. 490f907 Reorder sanity checks on UDP packet reception, to cope with failed recvfrom() by Simon Kelley · 11 years ago
  31. 2a7a2b8 Ignore DNS queries from port 0: http://www.ietf.org/mail-archive/web/dnsop/current/msg11441.html by Simon Kelley · 11 years ago
  32. 2b29191 Fix DNSSEC crash retrying to IPv6 server. by Simon Kelley · 11 years ago
  33. 0c8584e Warn about non-local queries once only for UDP. by Simon Kelley · 11 years ago
  34. c8a8048 --local-service. Default protection from DNS amplification attacks. by Simon Kelley · 11 years ago
  35. 00a5b5d Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set. by Simon Kelley · 11 years ago
  36. 613ad15 Strip DNSSEC RRs when query doesn't have DO bit set. by Simon Kelley · 11 years ago
  37. dac7431 TYpo. by Simon Kelley · 11 years ago
  38. 2ecd9bd No CD in forwarded queries unless dnssec-debug for TCP too. by Simon Kelley · 11 years ago
  39. 83349b8 Further tidying of AD and DO bit handling. by Simon Kelley · 11 years ago
  40. 7fa836e Handle validation when more one key is needed. by Simon Kelley · 11 years ago
  41. e243c07 AD bit in queries handled as RFC6840 p5.7 by Simon Kelley · 11 years ago
  42. 610e782 Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch. by Simon Kelley · 11 years ago
  43. 81a883f Format tweak. by Simon Kelley · 11 years ago
  44. 8d718cb Nasty cache failure and memory leak with DNSSEC. by Simon Kelley · 11 years ago
  45. 97bc798 Init ->dependent field in frec allocation. by Simon Kelley · 11 years ago
  46. 6938f34 Don't mark answers as DNSEC validated if DNS-doctored. by Simon Kelley · 11 years ago
  47. 7d23a66 Remove --dnssec-permissive, pointless if we don't set CD upstream. by Simon Kelley · 11 years ago
  48. 703c7ff Fix to last commit. by Simon Kelley · 11 years ago
  49. 8a9be9e Replace CRC32 with SHA1 for spoof detection in DNSSEC builds. by Simon Kelley · 11 years ago
  50. 5b3bf92 --dnssec-debug by Simon Kelley · 11 years ago
  51. 0744ca6 More DNSSEC caching logic, and avoid repeated validation of DS/DNSKEY by Simon Kelley · 11 years ago
  52. 39048ad bug fix, avoids infinite loop in forwarding code. by Simon Kelley · 11 years ago
  53. 5d3b87a Better handling of truncated DNSSEC replies. by Simon Kelley · 11 years ago
  54. 6c0cb85 Trivial format fix by Simon Kelley · 11 years ago
  55. e0c0ad3 UDP retries for DNSSEC by Simon Kelley · 11 years ago
  56. 4619d94 Fix SEGV and failure to validate on x86_64. by Simon Kelley · 11 years ago
  57. a25720a protocol handling for DNSSEC by Simon Kelley · 11 years ago
  58. 795501b AD bit handling when doing validation. by Simon Kelley · 11 years ago
  59. c47e3ba Update copyright for 2014. by Simon Kelley · 11 years ago
  60. f1668d2 New source port for DNSSEC-originated queries. by Simon Kelley · 11 years ago
  61. 7d7b7b3 DNSSEC for TCP queries. by Simon Kelley · 11 years ago
  62. 60b6806 Rationalise DNS packet-buffer size calculations. by Simon Kelley · 11 years ago
  63. 871417d Handle truncated replies in DNSSEC validation. by Simon Kelley · 11 years ago
  64. 0fc2f31 First functional DNSSEC - highly alpha. by Simon Kelley · 11 years ago
  65. c3e0b9b backup by Simon Kelley · 11 years ago
  66. 9d63304 Saving progress by Simon Kelley · 11 years ago
  67. c352dd8 Merge branch 'master' into dnssec by Simon Kelley · 11 years ago
  68. 3a23715 Commit to allow master merge. by Simon Kelley · 11 years ago
  69. 2329bef Check arrival interface of IPv6 requests, even in --bind-interfaces. by Simon Kelley · 11 years ago
  70. 3b19596 Fix compiler warnings. by Vladislav Grishenko · 11 years ago
  71. 5a4120d Merge branch 'master' into dnssec by Simon Kelley · 11 years ago
  72. 6008bdb Fix botch in determining if auth query is local. by Simon Kelley · 11 years ago
  73. 19b1689 Don't filter by subnet when handling local queries for auth-zones. by Simon Kelley · 11 years ago
  74. b485ed9 Always answer queries for authoritative zones locally, never forward. by Simon Kelley · 11 years ago
  75. ed4c076 --add-subnet option. by Simon Kelley · 11 years ago
  76. e292e93 Initial dnssec structure. by Giovanni Bajo · 13 years ago
  77. 237724c Rename existing DNSSEC macros into DNSSEC_PROXY. by Giovanni Bajo · 13 years ago
  78. 0da5e89 Log forwarding table overflows. by Marcelo Salhab Brogliato · 12 years ago
  79. 115ac3e Generalise --interface-name to cope with IPv6 addresses. by Simon Kelley · 12 years ago
  80. 3f2873d Handle IPv4 interface-address labels in Linux. by Simon Kelley · 12 years ago
  81. 797a7af Fix crash on SERVFAIL when --conntrack in use. by Giacomo Tazzari · 12 years ago
  82. 4b5ea12 Send TCP DNS messages in one write() call. Stops TCP stream fragmenting. by Simon Kelley · 12 years ago
  83. 7e5664b Fix trivial access of un-initialised memory. by Simon Kelley · 12 years ago
  84. 13d86c7 Add --ipset option. by Jason A. Donenfeld · 12 years ago
  85. 6174435 Change copyright messages to include 2013. by Simon Kelley · 12 years ago
  86. e25db1f Handle wrong interface for locally-routed packets. by Simon Kelley · 12 years ago
  87. 4820dce Make authoritative stuff a compile-time option. by Simon Kelley · 12 years ago
  88. 4967876 Zone-transfer peer restriction option. by Simon Kelley · 12 years ago
  89. ee86ce6 Fix TCP query forwarding to non-default servers. by Simon Kelley · 12 years ago
  90. 36bec08 Merge branch 'auth' by Simon Kelley · 12 years ago
  91. 29d28dd Don't send RAs to the wrong place when DAD in progress. by Simon Kelley · 12 years ago
  92. 4f7b304 Initial code to do authoritative DNS. by Simon Kelley · 12 years ago
  93. 54dd393 Add --bind-dynamic by Simon Kelley · 12 years ago
  94. 50303b1 Remove redundant send_from logging code. by Simon Kelley · 13 years ago
  95. 4b028ad Merge branch 'bind' by Simon Kelley · 13 years ago
  96. 29689cf Handle errors when sending ICMP6 pings better. by Simon Kelley · 13 years ago
  97. 52d4abf Make --listen-address work for all 127.0.0.0/8 addresses. by Simon Kelley · 13 years ago
  98. 552af8b Fix --localise-queries via interface lo bug. by Simon Kelley · 13 years ago
  99. 22d904d Fix RA on *BSD (missing sa_len) by Simon Kelley · 13 years ago
  100. 5954608 Updated copyright notices. Happy new year! by Simon Kelley · 13 years ago