diff options
author | Rene Ladan <rene@FreeBSD.org> | 2019-05-31 18:42:07 +0000 |
---|---|---|
committer | Rene Ladan <rene@FreeBSD.org> | 2019-05-31 18:42:07 +0000 |
commit | 104763fcf0a5d09f9ee3ce31a67e68182039df9a (patch) | |
tree | 01c1bfaca72ba14ffcf57c53d8e6efae3f93c55c /dns | |
parent | 3f4ab0dfb1abc20aa45ca0db028ce2a2affde812 (diff) |
Notes
Diffstat (limited to 'dns')
-rw-r--r-- | dns/Makefile | 1 | ||||
-rw-r--r-- | dns/bind912/Makefile | 246 | ||||
-rw-r--r-- | dns/bind912/distinfo | 3 | ||||
-rw-r--r-- | dns/bind912/files/BIND.chroot.dist | 26 | ||||
-rw-r--r-- | dns/bind912/files/BIND.chroot.local.dist | 20 | ||||
-rw-r--r-- | dns/bind912/files/empty.db | 11 | ||||
-rw-r--r-- | dns/bind912/files/extrapatch-bind-min-override-ttl | 79 | ||||
-rw-r--r-- | dns/bind912/files/localhost-forward.db | 11 | ||||
-rw-r--r-- | dns/bind912/files/localhost-reverse.db | 13 | ||||
-rw-r--r-- | dns/bind912/files/named.conf.in | 380 | ||||
-rw-r--r-- | dns/bind912/files/named.in | 451 | ||||
-rw-r--r-- | dns/bind912/files/named.root | 96 | ||||
-rw-r--r-- | dns/bind912/files/patch-bin_named_include_named_globals.h | 13 | ||||
-rw-r--r-- | dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in | 11 | ||||
-rw-r--r-- | dns/bind912/files/patch-configure | 90 | ||||
-rw-r--r-- | dns/bind912/files/patch-no-bind-tools | 52 | ||||
-rw-r--r-- | dns/bind912/files/pkg-message.in | 23 | ||||
-rw-r--r-- | dns/bind912/pkg-descr | 15 | ||||
-rw-r--r-- | dns/bind912/pkg-help | 38 | ||||
-rw-r--r-- | dns/bind912/pkg-plist | 314 |
20 files changed, 0 insertions, 1893 deletions
diff --git a/dns/Makefile b/dns/Makefile index 16a82d476f61..96270101610d 100644 --- a/dns/Makefile +++ b/dns/Makefile @@ -12,7 +12,6 @@ SUBDIR += bind-tools SUBDIR += bind9-devel SUBDIR += bind911 - SUBDIR += bind912 SUBDIR += bind914 SUBDIR += bindgraph SUBDIR += bundy diff --git a/dns/bind912/Makefile b/dns/bind912/Makefile deleted file mode 100644 index 16410a2b7b34..000000000000 --- a/dns/bind912/Makefile +++ /dev/null @@ -1,246 +0,0 @@ -# $FreeBSD$ -# pkg-help formatted with fmt 59 63 - -PORTNAME= bind -PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc/.rc/} -CATEGORIES= dns net ipv6 -MASTER_SITES= ISC/bind9/${ISCVERSION} -PKGNAMESUFFIX= 912 -DISTNAME= ${PORTNAME}-${ISCVERSION} - -MAINTAINER= mat@FreeBSD.org -COMMENT= BIND DNS suite with updated DNSSEC and DNS64 - -LICENSE= MPL20 -LICENSE_FILE= ${WRKSRC}/COPYRIGHT - -DEPRECATED= Support ends, please move to dns/bind914. -EXPIRATION_DATE= 2019-05-31 - -LIB_DEPENDS= libxml2.so:textproc/libxml2 -RUN_DEPENDS= bind-tools>0:dns/bind-tools - -USES= compiler:c11 cpe libedit -# ISC releases things like 9.8.0-P1, which our versioning doesn't like -ISCVERSION= 9.12.4-P1 - -CPE_VENDOR= isc -CPE_VERSION= ${ISCVERSION:C/-.*//} -.if ${ISCVERSION:M*-*} -CPE_UPDATE= ${ISCVERSION:C/.*-//:tl} -.endif - -GNU_CONFIGURE= yes -CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \ - --with-randomdev=/dev/random \ - --with-libxml2=${LOCALBASE} \ - --with-readline="-L${LOCALBASE}/lib -ledit" \ - --with-dlopen=yes \ - --with-gost=no \ - --without-python \ - --sysconfdir=${ETCDIR} -ETCDIR= ${PREFIX}/etc/namedb - -CONFLICTS= bind911 bind913 bind914 bind9-devel - -USE_RC_SUBR= named -SUB_FILES= pkg-message named.conf - -PORTDOCS= * - -MAKE_JOBS_UNSAFE= yes - -OPTIONS_DEFAULT= SSL THREADS SIGCHASE IDN GSSAPI_NONE JSON \ - DLZ_FILESYSTEM LMDB RPZ_NSDNAME RPZ_NSIP TCP_FASTOPEN -OPTIONS_DEFINE= IDN LARGE_FILE JSON \ - FIXED_RRSET SIGCHASE IPV6 THREADS \ - RPZ_NSIP RPZ_NSDNAME DOCS \ - MINCACHE PORTREVISION QUERYTRACE LMDB DNSTAP \ - START_LATE TUNING_LARGE TCP_FASTOPEN - -OPTIONS_RADIO= CRYPTO -OPTIONS_RADIO_CRYPTO= SSL NATIVE_PKCS11 - -OPTIONS_GROUP= DLZ -OPTIONS_GROUP_DLZ= DLZ_POSTGRESQL DLZ_MYSQL DLZ_BDB \ - DLZ_LDAP DLZ_FILESYSTEM DLZ_STUB -OPTIONS_SINGLE= GSSAPI -OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE - -OPTIONS_SUB= yes - -CRYPTO_DESC= Choose which crypto engine to use -DLZ_BDB_DESC= DLZ BDB driver -DLZ_DESC= Dynamically Loadable Zones -DLZ_FILESYSTEM_DESC= DLZ filesystem driver -DLZ_LDAP_DESC= DLZ LDAP driver -DLZ_MYSQL_DESC= DLZ MySQL driver (no threading) -DLZ_POSTGRESQL_DESC= DLZ Postgres driver -DLZ_STUB_DESC= DLZ stub driver -DNSTAP_DESC= Provides fast passive logging of DNS messages -FIXED_RRSET_DESC= Enable fixed rrset ordering -GSSAPI_BASE_DESC= Using Heimdal in base -GSSAPI_HEIMDAL_DESC= Using security/heimdal -GSSAPI_MIT_DESC= Using security/krb5 -GSSAPI_NONE_DESC= Disable -LARGE_FILE_DESC= 64-bit file support -LMDB_DESC= Use LMDB for zone management -MINCACHE_DESC= Use the mincachettl patch -NATIVE_PKCS11_DESC= Use PKCS\#11 native API (**READ HELP**) -PORTREVISION_DESC= Show PORTREVISION in the version string -QUERYTRACE_DESC= Enable the very verbose query tracelogging -RPZ_NSDNAME_DESC= Enable RPZ NSDNAME policy records -RPZ_NSIP_DESC= Enable RPZ NSIP trigger rules -SIGCHASE_DESC= dig/host/nslookup will do DNSSEC validation -SSL_DESC= Build with OpenSSL (Required for DNSSEC) -START_LATE_DESC= Start BIND late in the boot process (see help) -TCP_FASTOPEN_DESC= RFC 7413 support -TUNING_LARGE_DESC= Tune named for large systems (**READ HELP**) - -DLZ_BDB_CONFIGURE_ON= --with-dlz-bdb=yes -DLZ_BDB_USES= bdb - -DLZ_FILESYSTEM_CONFIGURE_ON= --with-dlz-filesystem=yes - -DLZ_LDAP_CONFIGURE_ON= --with-dlz-ldap=yes -DLZ_LDAP_USE= openldap=yes - -DLZ_MYSQL_CONFIGURE_ON= --with-dlz-mysql=yes -DLZ_MYSQL_PREVENTS= THREADS -DLZ_MYSQL_USES= mysql - -DLZ_POSTGRESQL_CONFIGURE_ON= --with-dlz-postgres=yes -DLZ_POSTGRESQL_USES= pgsql - -DLZ_STUB_CONFIGURE_ON= --with-dlz-stub=yes - -DNSTAP_CONFIGURE_ENABLE= dnstap -DNSTAP_IMPLIES= THREADS -DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \ - libprotobuf-c.so:devel/protobuf-c - -FIXED_RRSET_CONFIGURE_ENABLE= fixed-rrset - -GSSAPI_BASE_CONFIGURE_ON=\ - --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}" -GSSAPI_BASE_USES= gssapi - -GSSAPI_HEIMDAL_CONFIGURE_ON=\ - --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}" -GSSAPI_HEIMDAL_USES= gssapi:heimdal - -GSSAPI_MIT_CONFIGURE_ON=\ - --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}" -GSSAPI_MIT_USES= gssapi:mit - -GSSAPI_NONE_CONFIGURE_ON= --without-gssapi - -IDN_CONFIGURE_OFF= --without-libidn2 -IDN_CONFIGURE_ON= --with-libidn2=${LOCALBASE} ${ICONV_CONFIGURE_BASE} -IDN_LIB_DEPENDS= libidn2.so:dns/libidn2 -IDN_USES= iconv - -IPV6_CONFIGURE_ENABLE= ipv6 - -JSON_CONFIGURE_WITH= libjson=${LOCALBASE} -JSON_LIB_DEPENDS= libjson-c.so:devel/json-c - -LARGE_FILE_CONFIGURE_ENABLE= largefile - -LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE} -LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb - -MINCACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl - -NATIVE_PKCS11_CONFIGURE_ENABLE= native-pkcs11 -NATIVE_PKCS11_IMPLIES= THREADS - -QUERYTRACE_CONFIGURE_ENABLE= querytrace - -RPZ_NSDNAME_CONFIGURE_ENABLE= rpz-nsdname - -RPZ_NSIP_CONFIGURE_ENABLE= rpz-nsip - -SIGCHASE_CONFIGURE_ON= STD_CDEFINES="-DDIG_SIGCHASE=1" - -SSL_CONFIGURE_OFF= --disable-openssl-version-check --without-openssl -SSL_CONFIGURE_ON= --with-openssl=${OPENSSLBASE} -SSL_USES= ssl - -START_LATE_SUB_LIST= NAMED_REQUIRE="SERVERS cleanvar" \ - NAMED_BEFORE="LOGIN" -START_LATE_SUB_LIST_OFF=NAMED_REQUIRE="NETWORKING ldconfig syslogd" \ - NAMED_BEFORE="SERVERS" - -TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen - -THREADS_CONFIGURE_ENABLE= threads - -TUNING_LARGE_IMPLIES= THREADS -TUNING_LARGE_CONFIGURE_ON= --with-tuning=large -TUNING_LARGE_CONFIGURE_OFF= --with-tuning=default - -.include <bsd.port.options.mk> - -.if defined(WITH_DEBUG) -CONFIGURE_ARGS+= --enable-symtable \ - --enable-developer -USES+= perl5 pkgconfig -USE_PERL5= build -BUILD_DEPENDS+= cmocka>0:sysutils/cmocka -# Developer mode needs ssl, always -.if !${PORT_OPTIONS:MSSL} -CONFIGURE_ARGS+= --with-openssl=${OPENSSLBASE} -USES+= ssl -.endif -.else -CONFIGURE_ARGS+= --disable-symtable -.endif - -.include <bsd.port.pre.mk> - -.if ${SSL_DEFAULT} == base -SUB_LIST+= ENGINES=/usr/lib/engines -.else -SUB_LIST+= ENGINES=${LOCALBASE}/lib/engines -.endif - -post-patch: -. for FILE in check/named-checkconf.8 named/named.8 nsupdate/nsupdate.1 \ - rndc/rndc.8 - @${REINPLACE_CMD} -e 's#/etc/named.conf#${ETCDIR}/named.conf#g' \ - -e 's#/etc/rndc.conf#${ETCDIR}/rndc.conf#g' \ - -e "s#/var\/run\/named\/named.pid#/var/run/named/pid#" \ - ${WRKSRC}/bin/${FILE} -. endfor - -. if ${PORTREVISION:N0} -post-patch-PORTREVISION-on: - @${REINPLACE_CMD} -e '/EXTENSIONS/s#=$$#=_${PORTREVISION}#' \ - ${WRKSRC}/version -. endif - -post-install: - ${MKDIR} ${STAGEDIR}${PREFIX}/etc/mtree - ${MKDIR} ${STAGEDIR}${ETCDIR} -. for i in dynamic master slave working - @${MKDIR} ${STAGEDIR}${ETCDIR}/$i -. endfor - ${INSTALL_DATA} ${WRKDIR}/named.conf ${STAGEDIR}${ETCDIR}/named.conf.sample - ${INSTALL_DATA} ${FILESDIR}/named.root ${STAGEDIR}${ETCDIR} - ${INSTALL_DATA} ${FILESDIR}/empty.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/localhost-forward.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/localhost-reverse.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.dist.sample - ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.local.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.local.dist.sample - ${INSTALL_DATA} ${WRKSRC}/bin/rndc/rndc.conf \ - ${STAGEDIR}${ETCDIR}/rndc.conf.sample - -post-install-DOCS-on: - ${MKDIR} ${STAGEDIR}${DOCSDIR}/arm - ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${STAGEDIR}${DOCSDIR}/arm - ${INSTALL_DATA} ${WRKSRC}/doc/arm/Bv9ARM.pdf ${STAGEDIR}${DOCSDIR} - ${INSTALL_DATA} ${WRKSRC}/CHANGES* ${WRKSRC}/HISTORY.md \ - ${WRKSRC}/README.md ${STAGEDIR}${DOCSDIR} - -.include <bsd.port.post.mk> diff --git a/dns/bind912/distinfo b/dns/bind912/distinfo deleted file mode 100644 index b11020272a09..000000000000 --- a/dns/bind912/distinfo +++ /dev/null @@ -1,3 +0,0 @@ -TIMESTAMP = 1556117908 -SHA256 (bind-9.12.4-P1.tar.gz) = e27a5aee2b0c1a925001dda71eea7e19b0cce54a7b18a61912cde5ff0afbc7c5 -SIZE (bind-9.12.4-P1.tar.gz) = 7914907 diff --git a/dns/bind912/files/BIND.chroot.dist b/dns/bind912/files/BIND.chroot.dist deleted file mode 100644 index 08378e7e1057..000000000000 --- a/dns/bind912/files/BIND.chroot.dist +++ /dev/null @@ -1,26 +0,0 @@ -# $FreeBSD$ -# -# mtree -deU -f files/BIND.chroot.dist -p tmp -# mtree -cjnb -k uname,gname,mode -p tmp - -/set type=file uname=root gname=wheel mode=0755 -. type=dir - dev type=dir mode=0555 - .. - etc type=dir - .. - tmp type=dir mode=01777 - .. -/set type=file uname=bind gname=bind mode=0755 - var type=dir uname=root gname=wheel - dump type=dir - .. - log type=dir - .. - run type=dir - named type=dir - .. - .. - stats type=dir - .. - .. diff --git a/dns/bind912/files/BIND.chroot.local.dist b/dns/bind912/files/BIND.chroot.local.dist deleted file mode 100644 index 53b36a87c082..000000000000 --- a/dns/bind912/files/BIND.chroot.local.dist +++ /dev/null @@ -1,20 +0,0 @@ -# $FreeBSD$ -# -# mtree -deU -f files/BIND.etc.dist -p tmp -# mtree -cjnb -k uname,gname,mode -p tmp - -/set type=file uname=root gname=wheel mode=0755 -. type=dir - etc type=dir -/set type=file uname=bind gname=wheel mode=0755 - namedb type=dir uname=root - dynamic type=dir - .. - master type=dir uname=root - .. - slave type=dir - .. - working type=dir - .. - .. - .. diff --git a/dns/bind912/files/empty.db b/dns/bind912/files/empty.db deleted file mode 100644 index 070f6634825a..000000000000 --- a/dns/bind912/files/empty.db +++ /dev/null @@ -1,11 +0,0 @@ - -; $FreeBSD$ - -$TTL 3h -@ SOA @ nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - -@ NS @ - -; Silence a BIND warning -@ A 127.0.0.1 diff --git a/dns/bind912/files/extrapatch-bind-min-override-ttl b/dns/bind912/files/extrapatch-bind-min-override-ttl deleted file mode 100644 index f0be2d0257f3..000000000000 --- a/dns/bind912/files/extrapatch-bind-min-override-ttl +++ /dev/null @@ -1,79 +0,0 @@ ---- bin/named/config.c.orig 2019-02-27 23:42:04 UTC -+++ bin/named/config.c -@@ -183,12 +183,14 @@ options {\n\ - max-recursion-queries 75;\n\ - max-stale-ttl 604800; /* 1 week */\n\ - message-compression yes;\n\ -+ min-cache-ttl 0; /* no minimal, zero is allowed */\n\ - # min-roots <obsolete>;\n\ - minimal-any false;\n\ - minimal-responses no-auth-recursive;\n\ - notify-source *;\n\ - notify-source-v6 *;\n\ - nsec3-test-zone no;\n\ -+ override-cache-ttl 0; /* do not override */\n\ - provide-ixfr true;\n\ - query-source address *;\n\ - query-source-v6 address *;\n\ ---- bin/named/server.c.orig 2019-02-27 23:42:04 UTC -+++ bin/named/server.c -@@ -4098,6 +4098,16 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl - } - - obj = NULL; -+ result = named_config_get(maps, "override-cache-ttl", &obj); -+ INSIST(result == ISC_R_SUCCESS); -+ view->overridecachettl = cfg_obj_asuint32(obj); -+ -+ obj = NULL; -+ result = named_config_get(maps, "min-cache-ttl", &obj); -+ INSIST(result == ISC_R_SUCCESS); -+ view->mincachettl = cfg_obj_asuint32(obj); -+ -+ obj = NULL; - result = named_config_get(maps, "max-cache-ttl", &obj); - INSIST(result == ISC_R_SUCCESS); - view->maxcachettl = cfg_obj_asuint32(obj); ---- lib/dns/include/dns/view.h.orig 2019-02-27 23:42:04 UTC -+++ lib/dns/include/dns/view.h -@@ -151,6 +151,8 @@ struct dns_view { - bool requestnsid; - bool sendcookie; - dns_ttl_t maxcachettl; -+ dns_ttl_t mincachettl; -+ dns_ttl_t overridecachettl; - dns_ttl_t maxncachettl; - uint32_t nta_lifetime; - uint32_t nta_recheck; ---- lib/dns/resolver.c.orig 2019-02-27 23:42:04 UTC -+++ lib/dns/resolver.c -@@ -5797,6 +5797,18 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adb - } - - /* -+ * Enforce the configure cache TTL override. -+ */ -+ if (res->view->overridecachettl) -+ rdataset->ttl = res->view->overridecachettl; -+ -+ /* -+ * Enforce the configure minimum cache TTL. -+ */ -+ if (rdataset->ttl < res->view->mincachettl) -+ rdataset->ttl = res->view->mincachettl; -+ -+ /* - * Enforce the configure maximum cache TTL. - */ - if (rdataset->ttl > res->view->maxcachettl) { ---- lib/isccfg/namedconf.c.orig 2019-02-27 23:42:04 UTC -+++ lib/isccfg/namedconf.c -@@ -1917,6 +1917,8 @@ view_clauses[] = { - { "max-acache-size", &cfg_type_sizenodefault, - CFG_CLAUSEFLAG_OBSOLETE }, - { "max-cache-size", &cfg_type_sizeorpercent, 0 }, -+ { "override-cache-ttl", &cfg_type_uint32, 0 }, -+ { "min-cache-ttl", &cfg_type_uint32, 0 }, - { "max-cache-ttl", &cfg_type_uint32, 0 }, - { "max-clients-per-query", &cfg_type_uint32, 0 }, - { "max-ncache-ttl", &cfg_type_uint32, 0 }, diff --git a/dns/bind912/files/localhost-forward.db b/dns/bind912/files/localhost-forward.db deleted file mode 100644 index 9156d2f09978..000000000000 --- a/dns/bind912/files/localhost-forward.db +++ /dev/null @@ -1,11 +0,0 @@ - -; $FreeBSD$ - -$TTL 3h -localhost. SOA localhost. nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - - NS localhost. - - A 127.0.0.1 - AAAA ::1 diff --git a/dns/bind912/files/localhost-reverse.db b/dns/bind912/files/localhost-reverse.db deleted file mode 100644 index ceabe059ba77..000000000000 --- a/dns/bind912/files/localhost-reverse.db +++ /dev/null @@ -1,13 +0,0 @@ - -; $FreeBSD$ - -$TTL 3h -@ SOA localhost. nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - - NS localhost. - -1.0.0 PTR localhost. - -1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost. - diff --git a/dns/bind912/files/named.conf.in b/dns/bind912/files/named.conf.in deleted file mode 100644 index 2d23a6592fae..000000000000 --- a/dns/bind912/files/named.conf.in +++ /dev/null @@ -1,380 +0,0 @@ -// $FreeBSD$ -// -// Refer to the named.conf(5) and named(8) man pages, and the documentation -// in /usr/local/share/doc/bind for more details. -// -// If you are going to set up an authoritative server, make sure you -// understand the hairy details of how DNS works. Even with -// simple mistakes, you can break connectivity for affected parties, -// or cause huge amounts of useless Internet traffic. - -options { - // All file and path names are relative to the chroot directory, - // if any, and should be fully qualified. - directory "%%ETCDIR%%/working"; - pid-file "/var/run/named/pid"; - dump-file "/var/dump/named_dump.db"; - statistics-file "/var/stats/named.stats"; - -// If named is being used only as a local resolver, this is a safe default. -// For named to be accessible to the network, comment this option, specify -// the proper IP address, or delete this option. - listen-on { 127.0.0.1; }; - -// If you have IPv6 enabled on this system, uncomment this option for -// use as a local resolver. To give access to the network, specify -// an IPv6 address, or the keyword "any". -// listen-on-v6 { ::1; }; - -// These zones are already covered by the empty zones listed below. -// If you remove the related empty zones below, comment these lines out. - disable-empty-zone "255.255.255.255.IN-ADDR.ARPA"; - disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA"; - disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA"; - -// If you've got a DNS server around at your upstream provider, enter -// its IP address here, and enable the line below. This will make you -// benefit from its cache, thus reduce overall DNS traffic in the Internet. -/* - forwarders { - 127.0.0.1; - }; -*/ - -// If the 'forwarders' clause is not empty the default is to 'forward first' -// which will fall back to sending a query from your local server if the name -// servers in 'forwarders' do not have the answer. Alternatively you can -// force your name server to never initiate queries of its own by enabling the -// following line: -// forward only; - -// If you wish to have forwarding configured automatically based on -// the entries in /etc/resolv.conf, uncomment the following line and -// set named_auto_forward=yes in /etc/rc.conf. You can also enable -// named_auto_forward_only (the effect of which is described above). -// include "%%ETCDIR%%/auto_forward.conf"; - - /* - Modern versions of BIND use a random UDP port for each outgoing - query by default in order to dramatically reduce the possibility - of cache poisoning. All users are strongly encouraged to utilize - this feature, and to configure their firewalls to accommodate it. - - AS A LAST RESORT in order to get around a restrictive firewall - policy you can try enabling the option below. Use of this option - will significantly reduce your ability to withstand cache poisoning - attacks, and should be avoided if at all possible. - - Replace NNNNN in the example with a number between 49160 and 65530. - */ - // query-source address * port NNNNN; -}; - -// If you enable a local name server, don't forget to enter 127.0.0.1 -// first in your /etc/resolv.conf so this server will be queried. -// Also, make sure to enable it in /etc/rc.conf. - -// The traditional root hints mechanism. Use this, OR the slave zones below. -zone "." { type hint; file "%%ETCDIR%%/named.root"; }; - -/* Slaving the following zones from the root name servers has some - significant advantages: - 1. Faster local resolution for your users - 2. No spurious traffic will be sent from your network to the roots - 3. Greater resilience to any potential root server failure/DDoS - - On the other hand, this method requires more monitoring than the - hints file to be sure that an unexpected failure mode has not - incapacitated your server. Name servers that are serving a lot - of clients will benefit more from this approach than individual - hosts. Use with caution. - - To use this mechanism, uncomment the entries below, and comment - the hint zone above. - - As documented at http://dns.icann.org/services/axfr/ these zones: - "." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and a few others - are available for AXFR from these servers on IPv4 and IPv6: - xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org -*/ -/* -zone "." { - type slave; - file "%%ETCDIR%%/slave/root.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "arpa" { - type slave; - file "%%ETCDIR%%/slave/arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "in-addr.arpa" { - type slave; - file "%%ETCDIR%%/slave/in-addr.arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "ip6.arpa" { - type slave; - file "%%ETCDIR%%/slave/ip6.arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -*/ - -/* Serving the following zones locally will prevent any queries - for these zones leaving your network and going to the root - name servers. This has two significant advantages: - 1. Faster local resolution for your users - 2. No spurious traffic will be sent from your network to the roots -*/ -// RFCs 1912, 5735 and 6303 (and BCP 32 for localhost) -zone "localhost" { type master; file "%%ETCDIR%%/master/localhost-forward.db"; }; -zone "127.in-addr.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; }; -zone "255.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// RFC 1912-style zone for IPv6 localhost address (RFC 6303) -zone "0.ip6.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; }; - -// "This" Network (RFCs 1912, 5735 and 6303) -zone "0.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Private Use Networks (RFCs 1918, 5735 and 6303) -zone "10.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "16.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "17.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "18.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "19.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "20.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "21.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "22.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "23.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "24.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "25.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "26.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "27.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "28.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "29.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "30.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "31.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "168.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Shared Address Space (RFC 6598) -zone "64.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "65.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "66.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "67.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "68.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "69.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "70.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "71.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "72.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "73.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "74.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "75.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "76.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "77.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "78.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "79.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "80.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "81.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "82.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "83.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "84.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "85.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "86.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "87.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "88.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "89.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "90.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "91.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "92.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "93.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "94.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "95.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "96.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "97.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "98.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "99.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "100.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "101.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "102.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "103.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "104.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "105.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "106.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "107.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "108.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "109.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "110.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "111.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "112.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "113.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "114.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "115.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "116.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "117.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "118.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "119.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "120.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "121.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "122.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "123.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "124.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "125.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "126.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "127.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Link-local/APIPA (RFCs 3927, 5735 and 6303) -zone "254.169.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IETF protocol assignments (RFCs 5735 and 5736) -zone "0.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303) -zone "2.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "100.51.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "113.0.203.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Example Range for Documentation (RFCs 3849 and 6303) -zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Router Benchmark Testing (RFCs 2544 and 5735) -zone "18.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "19.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IANA Reserved - Old Class E Space (RFC 5735) -zone "240.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "241.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "242.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "243.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "244.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "245.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "246.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "247.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "248.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "249.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "250.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "251.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "252.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "253.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "254.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Unassigned Addresses (RFC 4291) -zone "1.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "8.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "c.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "e.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "0.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "1.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "2.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "8.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "0.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "1.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "2.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 ULA (RFCs 4193 and 6303) -zone "c.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Link Local (RFCs 4291 and 6303) -zone "8.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303) -zone "c.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "e.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "f.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IP6.INT is Deprecated (RFC 4159) -zone "ip6.int" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// NB: Do not use the IP addresses below, they are faked, and only -// serve demonstration/documentation purposes! -// -// Example slave zone config entries. It can be convenient to become -// a slave at least for the zone your own domain is in. Ask -// your network administrator for the IP address of the responsible -// master name server. -// -// Do not forget to include the reverse lookup zone! -// This is named after the first bytes of the IP address, in reverse -// order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6. -// -// Before starting to set up a master zone, make sure you fully -// understand how DNS and BIND work. There are sometimes -// non-obvious pitfalls. Setting up a slave zone is usually simpler. -// -// NB: Don't blindly enable the examples below. :-) Use actual names -// and addresses instead. - -/* An example dynamic zone -key "exampleorgkey" { - algorithm hmac-md5; - secret "sf87HJqjkqh8ac87a02lla=="; -}; -zone "example.org" { - type master; - allow-update { - key "exampleorgkey"; - }; - file "%%ETCDIR%%/dynamic/example.org"; -}; -*/ - -/* Example of a slave reverse zone -zone "1.168.192.in-addr.arpa" { - type slave; - file "%%ETCDIR%%/slave/1.168.192.in-addr.arpa"; - masters { - 192.168.1.1; - }; -}; -*/ diff --git a/dns/bind912/files/named.in b/dns/bind912/files/named.in deleted file mode 100644 index a5a18660ac8c..000000000000 --- a/dns/bind912/files/named.in +++ /dev/null @@ -1,451 +0,0 @@ -#!/bin/sh -# -# $FreeBSD$ -# - -# PROVIDE: named -# REQUIRE: %%NAMED_REQUIRE%% -# BEFORE: %%NAMED_BEFORE%% -# KEYWORD: shutdown - -# -# Add the following lines to /etc/rc.conf to enable BIND: -# named_enable (bool): Run named, the DNS server (or NO). -# named_program (str): Path to named, if you want a different one. -# named_conf (str): Path to the configuration file -# named_flags (str): Use this for flags OTHER than -u and -c -# named_uid (str): User to run named as -# named_chrootdir (str): Chroot directory (or "" not to auto-chroot it) -# Historically, was /var/named -# named_chroot_autoupdate (bool): Automatically install/update chrooted -# components of named. -# named_symlink_enable (bool): Symlink the chrooted pid file -# named_wait (bool): Wait for working name service before exiting -# named_wait_host (str): Hostname to check if named_wait is enabled -# named_auto_forward (str): Set up forwarders from /etc/resolv.conf -# named_auto_forward_only (str): Do "forward only" instead of "forward first" -%%NATIVE_PKCS11%%# named_pkcs11_engine (str): Path to the PKCS#11 library to use. -# - -. /etc/rc.subr - -name=named -desc="named BIND startup script" -rcvar=named_enable - -load_rc_config ${name} - -extra_commands=reload - -start_precmd=named_prestart -start_postcmd=named_poststart -reload_cmd=named_reload -stop_cmd=named_stop -stop_postcmd=named_poststop - -named_enable=${named_enable:-"NO"} -named_program=${named_program:-"%%PREFIX%%/sbin/named"} -named_conf=${named_conf:-"%%ETCDIR%%/named.conf"} -named_flags=${named_flags:-""} -named_uid=${named_uid:-"bind"} -named_chrootdir=${named_chrootdir:-""} -named_chroot_autoupdate=${named_chroot_autoupdate:-"YES"} -named_symlink_enable=${named_symlink_enable:-"YES"} -named_wait=${named_wait:-"NO"} -named_wait_host=${named_wait_host:-"localhost"} -named_auto_forward=${named_auto_forward:-"NO"} -named_auto_forward_only=${named_auto_forward_only:-"NO"} -%%NATIVE_PKCS11%%named_pkcs11_engine=${named_pkcs11_engine:-""} - -# Not configuration variables but having them here keeps rclint happy -required_dirs="${named_chrootdir}" -_named_confdirroot="${named_conf%/*}" -_named_confdir="${named_chrootdir}${_named_confdirroot}" -_named_program_root="${named_program%/sbin/named}" -_openssl_engines="%%ENGINES%%" - -# Needed if named.conf and rndc.conf are moved or if rndc.conf is used -rndc_conf=${rndc_conf:-"$_named_confdir/rndc.conf"} -rndc_key=${rndc_key:-"$_named_confdir/rndc.key"} - -# If running in a chroot cage, ensure that the appropriate files -# exist inside the cage, as well as helper symlinks into the cage -# from outside. -# -# As this is called after the is_running and required_dir checks -# are made in run_rc_command(), we can safely assume ${named_chrootdir} -# exists and named isn't running at this point (unless forcestart -# is used). -# -chroot_autoupdate() -{ - local file - - # If it's the first time around, fiddle with things and move the - # current configuration to the chroot. - if [ -d ${_named_confdirroot} -a ! -d ${_named_confdir} ]; then - warn "named chroot: Moving current configuration in the chroot!" - install -d ${_named_confdir%/*} - mv ${_named_confdirroot} ${_named_confdir} - fi - - # Create (or update) the chroot directory structure - # - if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.dist ]; then - mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.dist \ - -p ${named_chrootdir} - else - warn "%%PREFIX%%/etc/mtree/BIND.chroot.dist missing," - warn "${named_chrootdir} directory structure not updated" - fi - if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.local.dist ]; then - mkdir -p ${named_chrootdir}%%PREFIX%% - mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.local.dist \ - -p ${named_chrootdir}%%PREFIX%% - else - warn "%%PREFIX%%/etc/mtree/BIND.chroot.local.dist missing," - warn "${named_chrootdir}%%PREFIX%% directory structure not updated" - fi - - # Create (or update) the configuration directory symlink - # - if [ ! -L "${_named_confdirroot}" ]; then - if [ -d "${_named_confdirroot}" ]; then - warn "named chroot: ${_named_confdirroot} is a directory!" - elif [ -e "${_named_confdirroot}" ]; then - warn "named chroot: ${_named_confdirroot} exists!" - else - ln -s ${_named_confdir} ${_named_confdirroot} - fi - else - # Make sure it points to the right place. - ln -shf ${_named_confdir} ${_named_confdirroot} - fi - - # Mount a devfs in the chroot directory if needed - # - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then - umount ${named_chrootdir}/dev 2>/dev/null - devfs_domount ${named_chrootdir}/dev devfsrules_hide_all - devfs -m ${named_chrootdir}/dev rule apply path null unhide - devfs -m ${named_chrootdir}/dev rule apply path random unhide - else - if [ -c ${named_chrootdir}/dev/null -a \ - -c ${named_chrootdir}/dev/random ]; then - info "named chroot: using pre-mounted devfs." - else - err 1 "named chroot: devfs cannot be mounted from " \ - "within a jail. Thus a chrooted named cannot " \ - "be run from within a jail. Either mount the " \ - "devfs with null and random from the host, or " \ - "run named without chrooting it, set " \ - "named_chrootdir=\"\" in /etc/rc.conf." - fi - fi - - # The OpenSSL engines should be present in the chroot, named loads them - # after chrooting. - if [ -d ${_openssl_engines} ]; then - mkdir -p ${named_chrootdir}${_openssl_engines} - if can_mount nullfs ; then - mount -t nullfs ${_openssl_engines} ${named_chrootdir}${_openssl_engines} - else - warn "named chroot: cannot nullfs mount OpenSSL" \ - "engines into the chroot, will copy the shared" \ - "libraries instead." - cp -f ${_openssl_engines}/*.so ${named_chrootdir}${_openssl_engines} - fi - fi - - # Copy and/or update key files to the chroot /etc - # - for file in localtime protocols services; do - if [ -r /etc/${file} ] && \ - ! cmp -s /etc/${file} "${named_chrootdir}/etc/${file}"; then - cp -p /etc/${file} "${named_chrootdir}/etc/${file}" - fi - done -} - -# Make symlinks to the correct pid file -# -make_symlinks() -{ - checkyesno named_symlink_enable && - ln -fs "${named_chrootdir}${pidfile}" ${pidfile} && - ln -fs "${named_chrootdir}${sessionkeyfile}" ${sessionkeyfile} -} - -named_poststart() -{ - make_symlinks - - if checkyesno named_wait; then - until ${_named_program_root}/bin/host ${named_wait_host} >/dev/null 2>&1; do - echo " Waiting for nameserver to resolve ${named_wait_host}" - sleep 1 - done - fi -} - -named_reload() -{ - # This is a one line function, but ${named_program} is not defined early - # enough to be there when the reload_cmd variable is defined up there. - rndc reload -} - -find_pidfile() -{ - if get_pidfile_from_conf pid-file ${named_conf}; then - pidfile="${_pidfile_from_conf}" - else - pidfile="/var/run/named/pid" - fi -} - -find_sessionkeyfile() -{ - if get_pidfile_from_conf session-keyfile ${named_conf}; then - sessionkeyfile="${_pidfile_from_conf}" - else - sessionkeyfile="/var/run/named/session.key" - fi -} - -named_stop() -{ - find_pidfile - - # This duplicates an undesirably large amount of code from the stop - # routine in rc.subr in order to use rndc to shut down the process, - # and to give it a second chance in case rndc fails. - rc_pid=$(check_pidfile ${pidfile} ${command}) - if [ -z "${rc_pid}" ]; then - [ -n "${rc_fast}" ] && return 0 - _run_rc_notrunning - return 1 - fi - echo 'Stopping named.' - if rndc stop; then - wait_for_pids ${rc_pid} - else - echo -n 'rndc failed, trying kill: ' - kill -TERM ${rc_pid} - wait_for_pids ${rc_pid} - fi -} - -named_poststop() -{ - if [ -n "${named_chrootdir}" ]; then - # if using OpenSSL from ports, unmount OpenSSL engines, if they - # were not mounted but only copied, do nothing. - if [ -d ${_openssl_engines} ]; then - if can_mount nullfs; then - umount ${named_chrootdir}${_openssl_engines} - fi - fi - if [ -c ${named_chrootdir}/dev/null ]; then - # unmount /dev - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then - umount ${named_chrootdir}/dev 2>/dev/null || true - else - warn "named chroot:" \ - "cannot unmount devfs from inside jail!" - fi - fi - fi -} - -can_mount() -{ - local kld - kld=$1 - if ! load_kld $kld; then - return 1 - fi - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ] || - [ `${SYSCTL_N} security.jail.mount_allowed` -eq 1 ] || - [ `${SYSCTL_N} security.jail.mount_${kld}_allowed` -eq 1 ] ; then - return 0 - fi - return 1 -} - -create_file() -{ - if [ -e "$1" ]; then - unlink $1 - fi - install -o root -g wheel -m 0644 /dev/null $1 -} - -rndc() -{ - if [ -z "${rndc_flags}" ]; then - if [ -s "${rndc_conf}" ] ; then - rndc_flags="-c ${rndc_conf}" - elif [ -s "${rndc_key}" ] ; then - rndc_flags="-k ${rndc_key}" - else - rndc_flags="" - fi - fi - - ${_named_program_root}/sbin/rndc ${rndc_flags} "$@" -} - -named_prestart() -{ - find_pidfile - find_sessionkeyfile - - if [ -n "${named_pidfile}" ]; then - warn 'named_pidfile: now determined from the conf file' - fi - - if [ -n "${named_sessionkeyfile}" ]; then - warn 'named_sessionkeyfile: now determined from the conf file' - fi - - piddir=`/usr/bin/dirname ${pidfile}` - if [ ! -d ${piddir} ]; then - install -d -o ${named_uid} -g ${named_uid} ${piddir} - fi - - sessionkeydir=`/usr/bin/dirname ${sessionkeyfile}` - if [ ! -d ${sessionkeydir} ]; then - install -d -o ${named_uid} -g ${named_uid} ${sessionkeydir} - fi - - command_args="-u ${named_uid:=root} -c ${named_conf} ${command_args}" - -%%NATIVE_PKCS11%% if [ -z "${named_pkcs11_engine}"]; then -%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine has to be set to the PKCS#11 engine's library you want to use" -%%NATIVE_PKCS11%% elif [ ! -f ${named_pkcs11_engine} ]; then -%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine the PKCS#11 engine's library you want to use doesn't exist" -%%NATIVE_PKCS11%% else -%%NATIVE_PKCS11%% mkdir -p ${named_chrootdir}${named_pkcs11_engine%/*} -%%NATIVE_PKCS11%% cp -p ${named_pkcs11_engine} ${named_chrootdir}${named_pkcs11_engine} -%%NATIVE_PKCS11%% command_args="-E ${named_pkcs11_engine} ${command_args}" -%%NATIVE_PKCS11%% fi - - local line nsip firstns - - # Is the user using a sandbox? - # - if [ -n "${named_chrootdir}" ]; then - rc_flags="${rc_flags} -t ${named_chrootdir}" - checkyesno named_chroot_autoupdate && chroot_autoupdate - - case "${altlog_proglist}" in - *named*) - ;; - *) - warn 'Using chroot without setting altlog_proglist, logging may not' - warn 'work correctly. Run sysrc altlog_proglist+=named' - ;; - esac - else - named_symlink_enable=NO - fi - - # Create an rndc.key file for the user if none exists - # - confgen_command="${_named_program_root}/sbin/rndc-confgen -a -b256 -u ${named_uid} \ - -c ${_named_confdir}/rndc.key" - if [ -s "${_named_confdir}/rndc.conf" ]; then - unset confgen_command - fi - if [ -s "${_named_confdir}/rndc.key" ]; then - case `stat -f%Su ${_named_confdir}/rndc.key` in - root|${named_uid}) ;; - *) ${confgen_command} ;; - esac - else - ${confgen_command} - fi - - local checkconf - - checkconf="${_named_program_root}/sbin/named-checkconf" - if ! checkyesno named_chroot_autoupdate && [ -n "${named_chrootdir}" ]; then - checkconf="${checkconf} -t ${named_chrootdir}" - fi - - # Create a forwarder configuration based on /etc/resolv.conf - if checkyesno named_auto_forward; then - if [ ! -s /etc/resolv.conf ]; then - warn "named_auto_forward enabled, but no /etc/resolv.conf" - - # Empty the file in case it is included in named.conf - [ -s "${_named_confdir}/auto_forward.conf" ] && - create_file ${_named_confdir}/auto_forward.conf - - ${checkconf} ${named_conf} || - err 3 'named-checkconf for ${named_conf} failed' - return - fi - - create_file /var/run/naf-resolv.conf - create_file /var/run/auto_forward.conf - - echo ' forwarders {' > /var/run/auto_forward.conf - - while read line; do - case "${line}" in - 'nameserver '*|'nameserver '*) - nsip=${line##nameserver[ ]} - - if [ -z "${firstns}" ]; then - if [ ! "${nsip}" = '127.0.0.1' ]; then - echo 'nameserver 127.0.0.1' - echo " ${nsip};" >> /var/run/auto_forward.conf - fi - - firstns=1 - else - [ "${nsip}" = '127.0.0.1' ] && continue - echo " ${nsip};" >> /var/run/auto_forward.conf - fi - ;; - esac - - echo ${line} - done < /etc/resolv.conf > /var/run/naf-resolv.conf - - echo ' };' >> /var/run/auto_forward.conf - echo '' >> /var/run/auto_forward.conf - if checkyesno named_auto_forward_only; then - echo " forward only;" >> /var/run/auto_forward.conf - else - echo " forward first;" >> /var/run/auto_forward.conf - fi - - if cmp -s /etc/resolv.conf /var/run/naf-resolv.conf; then - unlink /var/run/naf-resolv.conf - else - [ -e /etc/resolv.conf ] && unlink /etc/resolv.conf - mv /var/run/naf-resolv.conf /etc/resolv.conf - fi - - if cmp -s ${_named_confdir}/auto_forward.conf \ - /var/run/auto_forward.conf; then - unlink /var/run/auto_forward.conf - else - [ -e "${_named_confdir}/auto_forward.conf" ] && - unlink ${_named_confdir}/auto_forward.conf - mv /var/run/auto_forward.conf \ - ${_named_confdir}/auto_forward.conf - fi - else - # Empty the file in case it is included in named.conf - [ -s "${_named_confdir}/auto_forward.conf" ] && - create_file ${_named_confdir}/auto_forward.conf - fi - - ${checkconf} ${named_conf} || err 3 "named-checkconf for ${named_conf} failed" -} - -run_rc_command "$1" diff --git a/dns/bind912/files/named.root b/dns/bind912/files/named.root deleted file mode 100644 index 8e3bac373eb8..000000000000 --- a/dns/bind912/files/named.root +++ /dev/null @@ -1,96 +0,0 @@ -; -; $FreeBSD$ -; - -; This file holds the information on root name servers needed to -; initialize cache of Internet domain name servers -; (e.g. reference this file in the "cache . <file>" -; configuration file of BIND domain name servers). -; -; This file is made available by InterNIC -; under anonymous FTP as -; file /domain/named.cache -; on server FTP.INTERNIC.NET -; -OR- RS.INTERNIC.NET -; -; last update: November 16, 2017 -; related version of root zone: 2017111601 -; -; FORMERLY NS.INTERNIC.NET -; -. 3600000 NS A.ROOT-SERVERS.NET. -A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4 -A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30 -; -; FORMERLY NS1.ISI.EDU -; -. 3600000 NS B.ROOT-SERVERS.NET. -B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201 -B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b -; -; FORMERLY C.PSI.NET -; -. 3600000 NS C.ROOT-SERVERS.NET. -C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12 -C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c -; -; FORMERLY TERP.UMD.EDU -; -. 3600000 NS D.ROOT-SERVERS.NET. -D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13 -D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d -; -; FORMERLY NS.NASA.GOV -; -. 3600000 NS E.ROOT-SERVERS.NET. -E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10 -E.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:a8::e -; -; FORMERLY NS.ISC.ORG -; -. 3600000 NS F.ROOT-SERVERS.NET. -F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241 -F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f -; -; FORMERLY NS.NIC.DDN.MIL -; -. 3600000 NS G.ROOT-SERVERS.NET. -G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4 -G.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:12::d0d -; -; FORMERLY AOS.ARL.ARMY.MIL -; -. 3600000 NS H.ROOT-SERVERS.NET. -H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53 -H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53 -; -; FORMERLY NIC.NORDU.NET -; -. 3600000 NS I.ROOT-SERVERS.NET. -I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17 -I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53 -; -; OPERATED BY VERISIGN, INC. -; -. 3600000 NS J.ROOT-SERVERS.NET. -J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30 -J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30 -; -; OPERATED BY RIPE NCC -; -. 3600000 NS K.ROOT-SERVERS.NET. -K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129 -K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1 -; -; OPERATED BY ICANN -; -. 3600000 NS L.ROOT-SERVERS.NET. -L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42 -L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:9f::42 -; -; OPERATED BY WIDE -; -. 3600000 NS M.ROOT-SERVERS.NET. -M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33 -M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35 -; End of file diff --git a/dns/bind912/files/patch-bin_named_include_named_globals.h b/dns/bind912/files/patch-bin_named_include_named_globals.h deleted file mode 100644 index 0c527a6604b9..000000000000 --- a/dns/bind912/files/patch-bin_named_include_named_globals.h +++ /dev/null @@ -1,13 +0,0 @@ -We reference the pid file as being run/named/pid everywere else. - ---- bin/named/include/named/globals.h.orig 2019-02-05 00:00:59 UTC -+++ bin/named/include/named/globals.h -@@ -129,7 +129,7 @@ EXTERN bool named_g_forcelock INIT(false); - #if NAMED_RUN_PID_DIR - EXTERN const char * named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR - "/run/named/" -- "named.pid"); -+ "pid"); - #else - EXTERN const char * named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR - "/run/named.pid"); diff --git a/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in b/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in deleted file mode 100644 index c59309bc2393..000000000000 --- a/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in +++ /dev/null @@ -1,11 +0,0 @@ ---- bin/tests/system/dlzexternal/Makefile.in.orig 2018-06-10 06:06:19 UTC -+++ bin/tests/system/dlzexternal/Makefile.in -@@ -34,7 +34,7 @@ OBJS = - @BIND9_MAKE_RULES@ - - CFLAGS = @CFLAGS@ @SO_CFLAGS@ --SO_LDFLAGS = @LDFLAGS@ @SO_LDFLAGS@ -+SO_LDFLAGS = @SO_LDFLAGS@ - - driver.@SO@: ${SO_OBJS} - ${LIBTOOL_MODE_LINK} @SO_LD@ ${SO_LDFLAGS} -o $@ driver.@O@ diff --git a/dns/bind912/files/patch-configure b/dns/bind912/files/patch-configure deleted file mode 100644 index ef42a944c8e2..000000000000 --- a/dns/bind912/files/patch-configure +++ /dev/null @@ -1,90 +0,0 @@ ---- configure.orig 2019-02-27 23:42:04 UTC -+++ configure -@@ -15138,27 +15138,9 @@ done - # problems start to show up. - saved_libs="$LIBS" - for TRY_LIBS in \ -- "-lgssapi_krb5" \ -- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err" \ -- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv" \ -- "-lgssapi" \ -- "-lgssapi -lkrb5 -ldes -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lgssapi_krb5 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lhx509 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgss -lkrb5" -+ "$($KRB5CONFIG gssapi --libs)"; \ - do -- # Note that this does not include $saved_libs, because -- # on FreeBSD machines this configure script has added -- # -L/usr/local/lib to LIBS, which can make the -- # -lgssapi_krb5 test succeed with shared libraries even -- # when you are trying to build with KTH in /usr/lib. -- if test "/usr" = "$use_gssapi" -- then -- LIBS="$TRY_LIBS $ISC_OPENSSL_LIBS" -- else -- LIBS="-L$use_gssapi/lib $TRY_LIBS $ISC_OPENSSL_LIBS" -- fi -+ LIBS="$TRY_LIBS" - { $as_echo "$as_me:${as_lineno-$LINENO}: checking linking as $TRY_LIBS" >&5 - $as_echo_n "checking linking as $TRY_LIBS... " >&6; } - cat confdefs.h - <<_ACEOF >conftest.$ac_ext -@@ -15201,47 +15183,7 @@ $as_echo "no" >&6; } ;; - no) as_fn_error $? "could not determine proper GSSAPI linkage" "$LINENO" 5 ;; - esac - -- # -- # XXXDCL Major kludge. Tries to cope with KTH in /usr/lib -- # but MIT in /usr/local/lib and trying to build with KTH. -- # /usr/local/lib can end up earlier on the link lines. -- # Like most kludges, this one is not only inelegant it -- # is also likely to be the wrong thing to do at least as -- # many times as it is the right thing. Something better -- # needs to be done. -- # -- if test "/usr" = "$use_gssapi" -a \ -- -f /usr/local/lib/libkrb5.a; then -- FIX_KTH_VS_MIT=yes -- fi -- -- case "$FIX_KTH_VS_MIT" in -- yes) -- case "$enable_static_linking" in -- yes) gssapi_lib_suffix=".a" ;; -- *) gssapi_lib_suffix=".so" ;; -- esac -- -- for lib in $LIBS; do -- case $lib in -- -L*) -- ;; -- -l*) -- new_lib=`echo $lib | -- sed -e s%^-l%$use_gssapi/lib/lib% \ -- -e s%$%$gssapi_lib_suffix%` -- NEW_LIBS="$NEW_LIBS $new_lib" -- ;; -- *) -- as_fn_error $? "KTH vs MIT Kerberos confusion!" "$LINENO" 5 -- ;; -- esac -- done -- LIBS="$NEW_LIBS" -- ;; -- esac -- -- DST_GSSAPI_INC="-I$use_gssapi/include" -+ DST_GSSAPI_INC="$($KRB5CONFIG gssapi --cflags)" - DNS_GSSAPI_LIBS="$LIBS" - - { $as_echo "$as_me:${as_lineno-$LINENO}: result: using GSSAPI from $use_gssapi/lib and $use_gssapi/include" >&5 -@@ -24225,7 +24167,7 @@ $as_echo "" >&6; } - # Check other locations for includes. - # Order is important (sigh). - -- bdb_incdirs="/db53 /db51 /db48 /db47 /db46 /db45 /db44 /db43 /db42 /db41 /db4 /db" -+ bdb_incdirs="/db6 /db5 /db48" - # include a blank element first - for d in "" $bdb_incdirs - do diff --git a/dns/bind912/files/patch-no-bind-tools b/dns/bind912/files/patch-no-bind-tools deleted file mode 100644 index f3c5f7fce0c0..000000000000 --- a/dns/bind912/files/patch-no-bind-tools +++ /dev/null @@ -1,52 +0,0 @@ -Exclude the "tools" from building and installing. - ---- bin/Makefile.in.orig 2019-02-27 23:28:15 UTC -+++ bin/Makefile.in -@@ -11,7 +11,7 @@ srcdir = @srcdir@ - VPATH = @srcdir@ - top_srcdir = @top_srcdir@ - --SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \ -+SUBDIRS = named rndc tools check confgen \ - @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests - TARGETS = - ---- bin/tools/Makefile.in.orig 2019-02-27 23:42:04 UTC -+++ bin/tools/Makefile.in -@@ -39,10 +39,7 @@ SUBDIRS = - - DNSTAPTARGETS = dnstap-read@EXEEXT@ - NZDTARGETS = named-nzd2nzf@EXEEXT@ --TARGETS = arpaname@EXEEXT@ named-journalprint@EXEEXT@ \ -- named-rrchecker@EXEEXT@ nsec3hash@EXEEXT@ \ -- genrandom@EXEEXT@ mdig@EXEEXT@ \ -- @DNSTAPTARGETS@ @NZDTARGETS@ -+TARGETS = @DNSTAPTARGETS@ @NZDTARGETS@ - - DNSTAPSRCS = dnstap-read.c - NZDSRCS = named-nzd2nzf.c -@@ -122,24 +119,6 @@ dnstap: - ${INSTALL_DATA} ${srcdir}/dnstap-read.1 ${DESTDIR}${mandir}/man1 - - install:: ${TARGETS} installdirs @DNSTAP@ @NZD_TOOLS@ -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} arpaname@EXEEXT@ \ -- ${DESTDIR}${bindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-journalprint@EXEEXT@ \ -- ${DESTDIR}${sbindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-rrchecker@EXEEXT@ \ -- ${DESTDIR}${bindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} nsec3hash@EXEEXT@ \ -- ${DESTDIR}${sbindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} genrandom@EXEEXT@ \ -- ${DESTDIR}${sbindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} mdig@EXEEXT@ \ -- ${DESTDIR}${bindir} -- ${INSTALL_DATA} ${srcdir}/arpaname.1 ${DESTDIR}${mandir}/man1 -- ${INSTALL_DATA} ${srcdir}/named-journalprint.8 ${DESTDIR}${mandir}/man8 -- ${INSTALL_DATA} ${srcdir}/named-rrchecker.1 ${DESTDIR}${mandir}/man1 -- ${INSTALL_DATA} ${srcdir}/nsec3hash.8 ${DESTDIR}${mandir}/man8 -- ${INSTALL_DATA} ${srcdir}/genrandom.8 ${DESTDIR}${mandir}/man8 -- ${INSTALL_DATA} ${srcdir}/mdig.1 ${DESTDIR}${mandir}/man1 - - uninstall:: - rm -f ${DESTDIR}${mandir}/man1/mdig.1 diff --git a/dns/bind912/files/pkg-message.in b/dns/bind912/files/pkg-message.in deleted file mode 100644 index a1bfad91fb81..000000000000 --- a/dns/bind912/files/pkg-message.in +++ /dev/null @@ -1,23 +0,0 @@ -********************************************************************** -* _ _____ _____ _____ _ _ _____ ___ ___ _ _ * -* / \|_ _|_ _| ____| \ | |_ _|_ _/ _ \| \ | | * -* / _ \ | | | | | _| | \| | | | | | | | | \| | * -* / ___ \| | | | | |___| |\ | | | | | |_| | |\ | * -* /_/ \_\_| |_| |_____|_| \_| |_| |___\___/|_| \_| * -* * -* BIND requires configuration of rndc, including a "secret" key. * -* The easiest, and most secure way to configure rndc is to run * -* 'rndc-confgen -a' to generate the proper conf file, with a new * -* random key, and appropriate file permissions. * -* * -* The %%PREFIX%%/etc/rc.d/named script will do that for you. * -* * -* If using syslog to log the BIND9 activity, and using a * -* chroot'ed installation, you will need to tell syslog to * -* install a log socket in the BIND9 chroot by running: * -* * -* # sysrc altlog_proglist+=named * -* * -* And then restarting syslogd with: service syslogd restart * -* * -********************************************************************** diff --git a/dns/bind912/pkg-descr b/dns/bind912/pkg-descr deleted file mode 100644 index 4696a179097d..000000000000 --- a/dns/bind912/pkg-descr +++ /dev/null @@ -1,15 +0,0 @@ -BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND -architecture. Some of the important features of BIND 9 are: - -DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) -IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) - Experimental IPv6 Resolver Library -DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 - Improved standards conformance -Views: One server process can provide multiple "views" of the DNS namespace, - e.g. an "inside" view to certain clients, and an "outside" view to others. -Multiprocessor Support - -See the CHANGES file for more information on new features. - -WWW: https://www.isc.org/downloads/bind/ diff --git a/dns/bind912/pkg-help b/dns/bind912/pkg-help deleted file mode 100644 index c303766037cb..000000000000 --- a/dns/bind912/pkg-help +++ /dev/null @@ -1,38 +0,0 @@ - NATIVE_PKCS11 -When using the NATIVE_PKCS11 option, BIND will use the PKCS#11 -engine specified by the named_pkcss11_engine variable in -/etc/rc.conf for *all* crypto operations. - -This is primarily intended to be used in an authoritative -case. - -If BIND is also operating as a validating resolver, -NATIVE_PKCS11 should not be used, because the HSM will be -used for all crypto, including DNSSEC validations, and the -HSM is likely to be slower than the CPU for this purpose. -Additionally, the HSM might not support all of the PKCS#11 -API functions needed for signature verification. - - - GOST -If using a chrooted instance of BIND on FreeBSD 8.x and 9.x, -the OpenSSL engines MUST be accessible from within the chroot. -If BIND is chrooted in /var/named, this can be achieved by -either copying content of /usr/local/lib/engines into -/var/named/usr/local/lib/engines, or by creating that directory -and adding this line to /etc/fstab: -/usr/local/lib/engines /var/named/usr/local/lib/engines nullfs ro 0 0 - - - START_LATE -Most of the time, BIND needs to start early in the boot -process. Enable this if BIND starts too early for you and -you need it to start later. - - - TUNING_LARGE - https://kb.isc.org/article/AA-01314/0 -Tunes certain compiled-in constants and default settings to -values better suited to large servers with 12/16GB+ of memory. -This can improve performance on such servers, but will consume -more memory and may degrade performance on smaller systems. diff --git a/dns/bind912/pkg-plist b/dns/bind912/pkg-plist deleted file mode 100644 index fc17a016d5b7..000000000000 --- a/dns/bind912/pkg-plist +++ /dev/null @@ -1,314 +0,0 @@ -bin/bind9-config -%%DNSTAP%%bin/dnstap-read -bin/isc-config.sh -@sample etc/mtree/BIND.chroot.dist.sample -@sample etc/mtree/BIND.chroot.local.dist.sample -%%ETCDIR%%/bind.keys -%%ETCDIR%%/master/empty.db -%%ETCDIR%%/master/localhost-forward.db -%%ETCDIR%%/master/localhost-reverse.db -@sample %%ETCDIR%%/named.conf.sample -%%ETCDIR%%/named.root -%%ETCDIR%%/rndc.conf.sample -include/bind9/check.h -include/bind9/getaddresses.h -include/bind9/version.h -include/dns/acl.h -include/dns/adb.h -include/dns/badcache.h -include/dns/bit.h -include/dns/byaddr.h -include/dns/cache.h -include/dns/callbacks.h -include/dns/catz.h -include/dns/cert.h -include/dns/client.h -include/dns/clientinfo.h -include/dns/compress.h -include/dns/db.h -include/dns/dbiterator.h -include/dns/dbtable.h -include/dns/diff.h -include/dns/dispatch.h -include/dns/dlz.h -include/dns/dlz_dlopen.h -include/dns/dns64.h -include/dns/dnsrps.h -include/dns/dnssec.h -include/dns/dnstap.h -%%DNSTAP%%include/dns/dnstap.pb-c.h -include/dns/ds.h -include/dns/dsdigest.h -include/dns/dyndb.h -include/dns/ecdb.h -include/dns/ecs.h -include/dns/edns.h -include/dns/enumclass.h -include/dns/enumtype.h -include/dns/events.h -include/dns/fixedname.h -include/dns/forward.h -include/dns/geoip.h -include/dns/ipkeylist.h -include/dns/iptable.h -include/dns/journal.h -include/dns/keydata.h -include/dns/keyflags.h -include/dns/keytable.h -include/dns/keyvalues.h -include/dns/lib.h -include/dns/librpz.h -include/dns/log.h -include/dns/lookup.h -include/dns/master.h -include/dns/masterdump.h -include/dns/message.h -include/dns/name.h -include/dns/ncache.h -include/dns/nsec.h -include/dns/nsec3.h -include/dns/nta.h -include/dns/opcode.h -include/dns/order.h -include/dns/peer.h -include/dns/portlist.h -include/dns/private.h -include/dns/rbt.h -include/dns/rcode.h -include/dns/rdata.h -include/dns/rdataclass.h -include/dns/rdatalist.h -include/dns/rdataset.h -include/dns/rdatasetiter.h -include/dns/rdataslab.h -include/dns/rdatastruct.h -include/dns/rdatatype.h -include/dns/request.h -include/dns/resolver.h -include/dns/result.h -include/dns/rootns.h -include/dns/rpz.h -include/dns/rriterator.h -include/dns/rrl.h -include/dns/sdb.h -include/dns/sdlz.h -include/dns/secalg.h -include/dns/secproto.h -include/dns/soa.h -include/dns/ssu.h -include/dns/stats.h -include/dns/tcpmsg.h -include/dns/time.h -include/dns/timer.h -include/dns/tkey.h -include/dns/tsec.h -include/dns/tsig.h -include/dns/ttl.h -include/dns/types.h -include/dns/update.h -include/dns/validator.h -include/dns/version.h -include/dns/view.h -include/dns/xfrin.h -include/dns/zone.h -include/dns/zonekey.h -include/dns/zt.h -include/dst/dst.h -include/dst/gssapi.h -include/dst/lib.h -include/dst/result.h -include/irs/context.h -include/irs/dnsconf.h -include/irs/netdb.h -include/irs/platform.h -include/irs/resconf.h -include/irs/types.h -include/irs/version.h -include/isc/aes.h -include/isc/app.h -include/isc/assertions.h -include/isc/atomic.h -include/isc/backtrace.h -include/isc/base32.h -include/isc/base64.h -include/isc/bind9.h -include/isc/boolean.h -include/isc/buffer.h -include/isc/bufferlist.h -include/isc/commandline.h -include/isc/condition.h -include/isc/counter.h -include/isc/crc64.h -include/isc/deprecated.h -include/isc/dir.h -include/isc/entropy.h -include/isc/errno.h -include/isc/error.h -include/isc/event.h -include/isc/eventclass.h -include/isc/file.h -include/isc/formatcheck.h -include/isc/fsaccess.h -include/isc/fuzz.h -include/isc/hash.h -include/isc/heap.h -include/isc/hex.h -include/isc/hmacmd5.h -include/isc/hmacsha.h -include/isc/ht.h -include/isc/httpd.h -include/isc/int.h -include/isc/interfaceiter.h -include/isc/iterated_hash.h -include/isc/json.h -include/isc/keyboard.h -include/isc/lang.h -include/isc/lex.h -include/isc/lfsr.h -include/isc/lib.h -include/isc/likely.h -include/isc/list.h -include/isc/log.h -include/isc/magic.h -include/isc/md5.h -include/isc/mem.h -include/isc/meminfo.h -include/isc/msgcat.h -include/isc/msgs.h -include/isc/mutex.h -include/isc/mutexblock.h -include/isc/net.h -include/isc/netaddr.h -include/isc/netdb.h -include/isc/netscope.h -include/isc/offset.h -include/isc/once.h -include/isc/ondestroy.h -include/isc/os.h -include/isc/parseint.h -include/isc/platform.h -include/isc/pool.h -include/isc/portset.h -include/isc/print.h -include/isc/queue.h -include/isc/quota.h -include/isc/radix.h -include/isc/random.h -include/isc/ratelimiter.h -include/isc/refcount.h -include/isc/regex.h -include/isc/region.h -include/isc/resource.h -include/isc/result.h -include/isc/resultclass.h -include/isc/rwlock.h -include/isc/safe.h -include/isc/serial.h -include/isc/sha1.h -include/isc/sha2.h -include/isc/sockaddr.h -include/isc/socket.h -include/isc/stat.h -include/isc/stats.h -include/isc/stdio.h -include/isc/stdlib.h -include/isc/stdtime.h -include/isc/strerror.h -include/isc/string.h -include/isc/symtab.h -include/isc/syslog.h -include/isc/task.h -include/isc/taskpool.h -include/isc/thread.h -include/isc/time.h -include/isc/timer.h -include/isc/tm.h -include/isc/types.h -include/isc/util.h -include/isc/version.h -include/isc/xml.h -include/isccc/alist.h -include/isccc/base64.h -include/isccc/cc.h -include/isccc/ccmsg.h -include/isccc/events.h -include/isccc/lib.h -include/isccc/result.h -include/isccc/sexpr.h -include/isccc/symtab.h -include/isccc/symtype.h -include/isccc/types.h -include/isccc/util.h -include/isccc/version.h -include/isccfg/aclconf.h -include/isccfg/cfg.h -include/isccfg/dnsconf.h -include/isccfg/grammar.h -include/isccfg/log.h -include/isccfg/namedconf.h -include/isccfg/version.h -include/ns/client.h -include/ns/interfacemgr.h -include/ns/lib.h -include/ns/listenlist.h -include/ns/log.h -include/ns/notify.h -include/ns/query.h -include/ns/server.h -include/ns/sortlist.h -include/ns/stats.h -include/ns/types.h -include/ns/update.h -include/ns/version.h -include/ns/xfrout.h -include/pk11/constants.h -include/pk11/internal.h -include/pk11/pk11.h -include/pk11/result.h -include/pk11/site.h -include/pkcs11/cryptoki.h -include/pkcs11/eddsa.h -include/pkcs11/pkcs11.h -include/pkcs11/pkcs11f.h -include/pkcs11/pkcs11t.h -lib/libbind9.a -lib/libdns.a -lib/libirs.a -lib/libisc.a -lib/libisccc.a -lib/libisccfg.a -lib/libns.a -man/man1/bind9-config.1.gz -%%DNSTAP%%man/man1/dnstap-read.1.gz -man/man1/isc-config.sh.1.gz -man/man5/named.conf.5.gz -man/man5/rndc.conf.5.gz -man/man8/ddns-confgen.8.gz -man/man8/named-checkconf.8.gz -man/man8/named-checkzone.8.gz -man/man8/named-compilezone.8.gz -%%LMDB%%man/man8/named-nzd2nzf.8.gz -man/man8/named.8.gz -%%NATIVE_PKCS11%%man/man8/pkcs11-destroy.8.gz -%%NATIVE_PKCS11%%man/man8/pkcs11-keygen.8.gz -%%NATIVE_PKCS11%%man/man8/pkcs11-list.8.gz -%%NATIVE_PKCS11%%man/man8/pkcs11-tokens.8.gz -man/man8/rndc-confgen.8.gz -man/man8/rndc.8.gz -man/man8/tsig-keygen.8.gz -sbin/ddns-confgen -sbin/named -sbin/named-checkconf -sbin/named-checkzone -sbin/named-compilezone -%%LMDB%%sbin/named-nzd2nzf -%%NATIVE_PKCS11%%sbin/pkcs11-destroy -%%NATIVE_PKCS11%%sbin/pkcs11-keygen -%%NATIVE_PKCS11%%sbin/pkcs11-list -%%NATIVE_PKCS11%%sbin/pkcs11-tokens -sbin/rndc -sbin/rndc-confgen -sbin/tsig-keygen -@dir(bind,bind,) %%ETCDIR%%/dynamic -@dir(bind,bind,) %%ETCDIR%%/slave -@dir(bind,bind,) %%ETCDIR%%/working |