summaryrefslogtreecommitdiff
path: root/sbin/unwind
AgeCommit message (Expand)Author
2019-11-03 When we are talking to an upstream nameserver we should not refuse toFlorian Obser
2019-11-03*** empty log message ***Otto Moerbeek
2019-11-02unused globalFlorian Obser
2019-11-02When we are behind a captive portal we very likely need to use the asrFlorian Obser
2019-10-31 With the asr fallback we can skip the service port up & down dance,Florian Obser
2019-10-31Add asr resolver type which completely bypasses libunbound and uses theFlorian Obser
2019-10-21Optionally log blocked queries when using the block list.Florian Obser
2019-10-19Plug mem leak when the list of dhcp resolvers didn't change. ok florian@Otto Moerbeek
2019-10-18Plug mem leak in error path; ok florian@ who also spotted the rad caseOtto Moerbeek
2019-10-18Another case of using yacc effectively to avoid repeating code; ok florian@Otto Moerbeek
2019-10-18Reafctor forwarder clause to avoid having to write out the same codeOtto Moerbeek
2019-10-12handle version.bind / version.serverFlorian Obser
2019-10-12Carry the answer in the pending_query struct. Makes it clearer who isFlorian Obser
2019-10-12Be more strict with which queries to accept. Modeled afterFlorian Obser
2019-10-12Don't hand parse the query, libunbound has query_info_parse() for that.Florian Obser
2019-10-08 Make sure struct pending_query is fully initialized by using calloc.Florian Obser
2019-10-06Eek, check overflow with destination size, not sourceFlorian Obser
2019-10-03Fix CVE-2019-16866Florian Obser
2019-09-30 Introduce defines for DNSSEC validation states.Florian Obser
2019-09-29Fix histogram code to do an inclusive check for the upper bound toOtto Moerbeek
2019-09-29annoying trailing whitespacesFlorian Obser
2019-09-25 Do not leak cur_ns in case of malformed lease file.Florian Obser
2019-09-25Be more robust when dealing with malformed lease files.Florian Obser
2019-09-12 Update to libunbound 1.9.3Florian Obser
2019-07-14Update to libunbound 1.9.2Florian Obser
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.Theo de Raadt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-05-23If we find ourselves behind a captive portal shutdown the service port.Florian Obser
2019-05-23typoFlorian Obser
2019-05-14Move common config passing code into a function.Florian Obser
2019-05-13Remove strict mode for now, it is in the way.Florian Obser
2019-05-10 Implement DNS block lists. If unwind is queried for a domainFlorian Obser
2019-05-08 When starting up use the built-in DNSSEC trust anchor as well as theFlorian Obser
2019-05-06Only try to resolve the DNSSEC trust anchor if we have a validatingFlorian Obser
2019-05-03Revert previous, I got too excited and forgot about the config file :(Florian Obser
2019-04-30Restrict file system access to /var/db for the dhclient lease files.Florian Obser
2019-04-03Default to port 853 if DoT is used; pointed out by teduFlorian Obser
2019-04-02be consistent with "DoT"; from raf czlonkaJason McIntyre
2019-04-02move the captive portal text into the actual block;Jason McIntyre
2019-04-02use a compact list for previous, and tweak a little; ok florianJason McIntyre
2019-04-02the fiendishly that needed some extra space here didn't pan outFlorian Obser
2019-04-02Simplify code; we can loop over our resolvers now.Florian Obser
2019-04-02Add a config option to specify the preference of name servers.Florian Obser
2019-04-02Collapse case statements to a common fall through and use the passedFlorian Obser
2019-04-02Introduce array of resolvers in preparation of custom orderingFlorian Obser
2019-04-01Reduce code duplication and ensure that a type of resolver and it'sFlorian Obser
2019-04-01Implement "Authentication Domain Names" configuration as per RFC 8310Florian Obser
2019-03-31Avoid calling dup2(oldd, newd) when oldd == newd. In that case theYASUOKA Masahiko
2019-03-31we don't need to set openssl lock callbacks. this code is not threaded.Ted Unangst
2019-03-31use AI_NUMERICHOST for ip conversion. ok florianTed Unangst