ports/dns/bind9, branch release/8.0.0

The new LINKS OPTION is not only useless it's harmful when combined

2009-09-01T01:31:43Z

with the REPLACE_BASE option so if the latter is defined don't try to make the LINKS. Problem pointed out by: Chris Wopat

For all:

2009-08-29T23:15:57Z

Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout [1]

Apply the patch derived from version 9.6.1-P1 which addresses a remote

2009-07-29T00:22:52Z

DoS vulnerability: Receipt of a specially-crafted dynamic update message may cause BIND 9 servers to exit. This vulnerability affects all servers -- it is not limited to those that are configured to allow dynamic updates. Access controls will not provide an effective workaround. More details can be found here: https://www.isc.org/node/474 All BIND users are encouraged to update to a patched version ASAP.

- Flip from MAKE_JOBS_SAFE to MAKE_JOBS_UNSAFE, fails both on pointyhat and on

2009-04-12T21:33:23Z

my local machine

Fix CONFLICTS (again). The previous example didn't work at all for ports

2009-03-24T20:00:21Z

other than plain bind9 since the real PORTNAMEs for the other ports are bind9[456]. This fix has the added advantage of covering REPLACE_BASE.

Where it matters, update regarding MAKE_JOBS_{UN}SAFE for my ports

2009-03-24T19:51:28Z

Update to the -P1 versions of the current BIND ports which contain

2009-01-08T08:18:45Z

the fix for the following vulnerability: https://www.isc.org/node/373 Description: Return values from OpenSSL library functions EVP_VerifyFinal() and DSA_do_verify() were not checked properly. Impact: It is theoretically possible to spoof answers returned from zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6). In short, if you're not using DNSSEC to verify signatures you have nothing to worry about. While I'm here, address the issues raised in the PR by adding a knob to disable building with OpenSSL altogether (which eliminates DNSSEC capability), and fix the configure arguments to better deal with the situation where the user has ssl bits in both the base and LOCALBASE. PR: ports/126297 Submitted by: Ronald F.Guilmette

Update CONFLICTS to reflect the addition of the bind96 port,

2009-01-04T07:26:28Z

the demise of bind9-dlz, and updates to the bind9-sdb-* ports.

Upgrade to version 9.3.6.

2008-12-19T22:30:01Z

Add a note to pkg-message indicating that ISC declared this version EOL as of 1 December, but that we will support the port through the RELENG_6 lifetime.

Adjust WWWs for new ISC website

2008-12-19T21:18:27Z