aboutsummaryrefslogtreecommitdiff
path: root/dns
diff options
context:
space:
mode:
authorRene Ladan <rene@FreeBSD.org>2019-05-31 18:42:07 +0000
committerRene Ladan <rene@FreeBSD.org>2019-05-31 18:42:07 +0000
commit104763fcf0a5d09f9ee3ce31a67e68182039df9a (patch)
tree01c1bfaca72ba14ffcf57c53d8e6efae3f93c55c /dns
parent3f4ab0dfb1abc20aa45ca0db028ce2a2affde812 (diff)
downloadports-104763fcf0a5d09f9ee3ce31a67e68182039df9a.tar.gz
ports-104763fcf0a5d09f9ee3ce31a67e68182039df9a.zip
Notes
Diffstat (limited to 'dns')
-rw-r--r--dns/Makefile1
-rw-r--r--dns/bind912/Makefile246
-rw-r--r--dns/bind912/distinfo3
-rw-r--r--dns/bind912/files/BIND.chroot.dist26
-rw-r--r--dns/bind912/files/BIND.chroot.local.dist20
-rw-r--r--dns/bind912/files/empty.db11
-rw-r--r--dns/bind912/files/extrapatch-bind-min-override-ttl79
-rw-r--r--dns/bind912/files/localhost-forward.db11
-rw-r--r--dns/bind912/files/localhost-reverse.db13
-rw-r--r--dns/bind912/files/named.conf.in380
-rw-r--r--dns/bind912/files/named.in451
-rw-r--r--dns/bind912/files/named.root96
-rw-r--r--dns/bind912/files/patch-bin_named_include_named_globals.h13
-rw-r--r--dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in11
-rw-r--r--dns/bind912/files/patch-configure90
-rw-r--r--dns/bind912/files/patch-no-bind-tools52
-rw-r--r--dns/bind912/files/pkg-message.in23
-rw-r--r--dns/bind912/pkg-descr15
-rw-r--r--dns/bind912/pkg-help38
-rw-r--r--dns/bind912/pkg-plist314
20 files changed, 0 insertions, 1893 deletions
diff --git a/dns/Makefile b/dns/Makefile
index 16a82d476f61..96270101610d 100644
--- a/dns/Makefile
+++ b/dns/Makefile
@@ -12,7 +12,6 @@
SUBDIR += bind-tools
SUBDIR += bind9-devel
SUBDIR += bind911
- SUBDIR += bind912
SUBDIR += bind914
SUBDIR += bindgraph
SUBDIR += bundy
diff --git a/dns/bind912/Makefile b/dns/bind912/Makefile
deleted file mode 100644
index 16410a2b7b34..000000000000
--- a/dns/bind912/Makefile
+++ /dev/null
@@ -1,246 +0,0 @@
-# $FreeBSD$
-# pkg-help formatted with fmt 59 63
-
-PORTNAME= bind
-PORTVERSION= ${ISCVERSION:S/-P/P/:S/b/.b/:S/a/.a/:S/rc/.rc/}
-CATEGORIES= dns net ipv6
-MASTER_SITES= ISC/bind9/${ISCVERSION}
-PKGNAMESUFFIX= 912
-DISTNAME= ${PORTNAME}-${ISCVERSION}
-
-MAINTAINER= mat@FreeBSD.org
-COMMENT= BIND DNS suite with updated DNSSEC and DNS64
-
-LICENSE= MPL20
-LICENSE_FILE= ${WRKSRC}/COPYRIGHT
-
-DEPRECATED= Support ends, please move to dns/bind914.
-EXPIRATION_DATE= 2019-05-31
-
-LIB_DEPENDS= libxml2.so:textproc/libxml2
-RUN_DEPENDS= bind-tools>0:dns/bind-tools
-
-USES= compiler:c11 cpe libedit
-# ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION= 9.12.4-P1
-
-CPE_VENDOR= isc
-CPE_VERSION= ${ISCVERSION:C/-.*//}
-.if ${ISCVERSION:M*-*}
-CPE_UPDATE= ${ISCVERSION:C/.*-//:tl}
-.endif
-
-GNU_CONFIGURE= yes
-CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
- --with-randomdev=/dev/random \
- --with-libxml2=${LOCALBASE} \
- --with-readline="-L${LOCALBASE}/lib -ledit" \
- --with-dlopen=yes \
- --with-gost=no \
- --without-python \
- --sysconfdir=${ETCDIR}
-ETCDIR= ${PREFIX}/etc/namedb
-
-CONFLICTS= bind911 bind913 bind914 bind9-devel
-
-USE_RC_SUBR= named
-SUB_FILES= pkg-message named.conf
-
-PORTDOCS= *
-
-MAKE_JOBS_UNSAFE= yes
-
-OPTIONS_DEFAULT= SSL THREADS SIGCHASE IDN GSSAPI_NONE JSON \
- DLZ_FILESYSTEM LMDB RPZ_NSDNAME RPZ_NSIP TCP_FASTOPEN
-OPTIONS_DEFINE= IDN LARGE_FILE JSON \
- FIXED_RRSET SIGCHASE IPV6 THREADS \
- RPZ_NSIP RPZ_NSDNAME DOCS \
- MINCACHE PORTREVISION QUERYTRACE LMDB DNSTAP \
- START_LATE TUNING_LARGE TCP_FASTOPEN
-
-OPTIONS_RADIO= CRYPTO
-OPTIONS_RADIO_CRYPTO= SSL NATIVE_PKCS11
-
-OPTIONS_GROUP= DLZ
-OPTIONS_GROUP_DLZ= DLZ_POSTGRESQL DLZ_MYSQL DLZ_BDB \
- DLZ_LDAP DLZ_FILESYSTEM DLZ_STUB
-OPTIONS_SINGLE= GSSAPI
-OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
-
-OPTIONS_SUB= yes
-
-CRYPTO_DESC= Choose which crypto engine to use
-DLZ_BDB_DESC= DLZ BDB driver
-DLZ_DESC= Dynamically Loadable Zones
-DLZ_FILESYSTEM_DESC= DLZ filesystem driver
-DLZ_LDAP_DESC= DLZ LDAP driver
-DLZ_MYSQL_DESC= DLZ MySQL driver (no threading)
-DLZ_POSTGRESQL_DESC= DLZ Postgres driver
-DLZ_STUB_DESC= DLZ stub driver
-DNSTAP_DESC= Provides fast passive logging of DNS messages
-FIXED_RRSET_DESC= Enable fixed rrset ordering
-GSSAPI_BASE_DESC= Using Heimdal in base
-GSSAPI_HEIMDAL_DESC= Using security/heimdal
-GSSAPI_MIT_DESC= Using security/krb5
-GSSAPI_NONE_DESC= Disable
-LARGE_FILE_DESC= 64-bit file support
-LMDB_DESC= Use LMDB for zone management
-MINCACHE_DESC= Use the mincachettl patch
-NATIVE_PKCS11_DESC= Use PKCS\#11 native API (**READ HELP**)
-PORTREVISION_DESC= Show PORTREVISION in the version string
-QUERYTRACE_DESC= Enable the very verbose query tracelogging
-RPZ_NSDNAME_DESC= Enable RPZ NSDNAME policy records
-RPZ_NSIP_DESC= Enable RPZ NSIP trigger rules
-SIGCHASE_DESC= dig/host/nslookup will do DNSSEC validation
-SSL_DESC= Build with OpenSSL (Required for DNSSEC)
-START_LATE_DESC= Start BIND late in the boot process (see help)
-TCP_FASTOPEN_DESC= RFC 7413 support
-TUNING_LARGE_DESC= Tune named for large systems (**READ HELP**)
-
-DLZ_BDB_CONFIGURE_ON= --with-dlz-bdb=yes
-DLZ_BDB_USES= bdb
-
-DLZ_FILESYSTEM_CONFIGURE_ON= --with-dlz-filesystem=yes
-
-DLZ_LDAP_CONFIGURE_ON= --with-dlz-ldap=yes
-DLZ_LDAP_USE= openldap=yes
-
-DLZ_MYSQL_CONFIGURE_ON= --with-dlz-mysql=yes
-DLZ_MYSQL_PREVENTS= THREADS
-DLZ_MYSQL_USES= mysql
-
-DLZ_POSTGRESQL_CONFIGURE_ON= --with-dlz-postgres=yes
-DLZ_POSTGRESQL_USES= pgsql
-
-DLZ_STUB_CONFIGURE_ON= --with-dlz-stub=yes
-
-DNSTAP_CONFIGURE_ENABLE= dnstap
-DNSTAP_IMPLIES= THREADS
-DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \
- libprotobuf-c.so:devel/protobuf-c
-
-FIXED_RRSET_CONFIGURE_ENABLE= fixed-rrset
-
-GSSAPI_BASE_CONFIGURE_ON=\
- --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}"
-GSSAPI_BASE_USES= gssapi
-
-GSSAPI_HEIMDAL_CONFIGURE_ON=\
- --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}"
-GSSAPI_HEIMDAL_USES= gssapi:heimdal
-
-GSSAPI_MIT_CONFIGURE_ON=\
- --with-gssapi=${GSSAPIBASEDIR} KRB5CONFIG="${KRB5CONFIG}"
-GSSAPI_MIT_USES= gssapi:mit
-
-GSSAPI_NONE_CONFIGURE_ON= --without-gssapi
-
-IDN_CONFIGURE_OFF= --without-libidn2
-IDN_CONFIGURE_ON= --with-libidn2=${LOCALBASE} ${ICONV_CONFIGURE_BASE}
-IDN_LIB_DEPENDS= libidn2.so:dns/libidn2
-IDN_USES= iconv
-
-IPV6_CONFIGURE_ENABLE= ipv6
-
-JSON_CONFIGURE_WITH= libjson=${LOCALBASE}
-JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
-
-LARGE_FILE_CONFIGURE_ENABLE= largefile
-
-LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
-LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb
-
-MINCACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl
-
-NATIVE_PKCS11_CONFIGURE_ENABLE= native-pkcs11
-NATIVE_PKCS11_IMPLIES= THREADS
-
-QUERYTRACE_CONFIGURE_ENABLE= querytrace
-
-RPZ_NSDNAME_CONFIGURE_ENABLE= rpz-nsdname
-
-RPZ_NSIP_CONFIGURE_ENABLE= rpz-nsip
-
-SIGCHASE_CONFIGURE_ON= STD_CDEFINES="-DDIG_SIGCHASE=1"
-
-SSL_CONFIGURE_OFF= --disable-openssl-version-check --without-openssl
-SSL_CONFIGURE_ON= --with-openssl=${OPENSSLBASE}
-SSL_USES= ssl
-
-START_LATE_SUB_LIST= NAMED_REQUIRE="SERVERS cleanvar" \
- NAMED_BEFORE="LOGIN"
-START_LATE_SUB_LIST_OFF=NAMED_REQUIRE="NETWORKING ldconfig syslogd" \
- NAMED_BEFORE="SERVERS"
-
-TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen
-
-THREADS_CONFIGURE_ENABLE= threads
-
-TUNING_LARGE_IMPLIES= THREADS
-TUNING_LARGE_CONFIGURE_ON= --with-tuning=large
-TUNING_LARGE_CONFIGURE_OFF= --with-tuning=default
-
-.include <bsd.port.options.mk>
-
-.if defined(WITH_DEBUG)
-CONFIGURE_ARGS+= --enable-symtable \
- --enable-developer
-USES+= perl5 pkgconfig
-USE_PERL5= build
-BUILD_DEPENDS+= cmocka>0:sysutils/cmocka
-# Developer mode needs ssl, always
-.if !${PORT_OPTIONS:MSSL}
-CONFIGURE_ARGS+= --with-openssl=${OPENSSLBASE}
-USES+= ssl
-.endif
-.else
-CONFIGURE_ARGS+= --disable-symtable
-.endif
-
-.include <bsd.port.pre.mk>
-
-.if ${SSL_DEFAULT} == base
-SUB_LIST+= ENGINES=/usr/lib/engines
-.else
-SUB_LIST+= ENGINES=${LOCALBASE}/lib/engines
-.endif
-
-post-patch:
-. for FILE in check/named-checkconf.8 named/named.8 nsupdate/nsupdate.1 \
- rndc/rndc.8
- @${REINPLACE_CMD} -e 's#/etc/named.conf#${ETCDIR}/named.conf#g' \
- -e 's#/etc/rndc.conf#${ETCDIR}/rndc.conf#g' \
- -e "s#/var\/run\/named\/named.pid#/var/run/named/pid#" \
- ${WRKSRC}/bin/${FILE}
-. endfor
-
-. if ${PORTREVISION:N0}
-post-patch-PORTREVISION-on:
- @${REINPLACE_CMD} -e '/EXTENSIONS/s#=$$#=_${PORTREVISION}#' \
- ${WRKSRC}/version
-. endif
-
-post-install:
- ${MKDIR} ${STAGEDIR}${PREFIX}/etc/mtree
- ${MKDIR} ${STAGEDIR}${ETCDIR}
-. for i in dynamic master slave working
- @${MKDIR} ${STAGEDIR}${ETCDIR}/$i
-. endfor
- ${INSTALL_DATA} ${WRKDIR}/named.conf ${STAGEDIR}${ETCDIR}/named.conf.sample
- ${INSTALL_DATA} ${FILESDIR}/named.root ${STAGEDIR}${ETCDIR}
- ${INSTALL_DATA} ${FILESDIR}/empty.db ${STAGEDIR}${ETCDIR}/master
- ${INSTALL_DATA} ${FILESDIR}/localhost-forward.db ${STAGEDIR}${ETCDIR}/master
- ${INSTALL_DATA} ${FILESDIR}/localhost-reverse.db ${STAGEDIR}${ETCDIR}/master
- ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.dist.sample
- ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.local.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.local.dist.sample
- ${INSTALL_DATA} ${WRKSRC}/bin/rndc/rndc.conf \
- ${STAGEDIR}${ETCDIR}/rndc.conf.sample
-
-post-install-DOCS-on:
- ${MKDIR} ${STAGEDIR}${DOCSDIR}/arm
- ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${STAGEDIR}${DOCSDIR}/arm
- ${INSTALL_DATA} ${WRKSRC}/doc/arm/Bv9ARM.pdf ${STAGEDIR}${DOCSDIR}
- ${INSTALL_DATA} ${WRKSRC}/CHANGES* ${WRKSRC}/HISTORY.md \
- ${WRKSRC}/README.md ${STAGEDIR}${DOCSDIR}
-
-.include <bsd.port.post.mk>
diff --git a/dns/bind912/distinfo b/dns/bind912/distinfo
deleted file mode 100644
index b11020272a09..000000000000
--- a/dns/bind912/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1556117908
-SHA256 (bind-9.12.4-P1.tar.gz) = e27a5aee2b0c1a925001dda71eea7e19b0cce54a7b18a61912cde5ff0afbc7c5
-SIZE (bind-9.12.4-P1.tar.gz) = 7914907
diff --git a/dns/bind912/files/BIND.chroot.dist b/dns/bind912/files/BIND.chroot.dist
deleted file mode 100644
index 08378e7e1057..000000000000
--- a/dns/bind912/files/BIND.chroot.dist
+++ /dev/null
@@ -1,26 +0,0 @@
-# $FreeBSD$
-#
-# mtree -deU -f files/BIND.chroot.dist -p tmp
-# mtree -cjnb -k uname,gname,mode -p tmp
-
-/set type=file uname=root gname=wheel mode=0755
-. type=dir
- dev type=dir mode=0555
- ..
- etc type=dir
- ..
- tmp type=dir mode=01777
- ..
-/set type=file uname=bind gname=bind mode=0755
- var type=dir uname=root gname=wheel
- dump type=dir
- ..
- log type=dir
- ..
- run type=dir
- named type=dir
- ..
- ..
- stats type=dir
- ..
- ..
diff --git a/dns/bind912/files/BIND.chroot.local.dist b/dns/bind912/files/BIND.chroot.local.dist
deleted file mode 100644
index 53b36a87c082..000000000000
--- a/dns/bind912/files/BIND.chroot.local.dist
+++ /dev/null
@@ -1,20 +0,0 @@
-# $FreeBSD$
-#
-# mtree -deU -f files/BIND.etc.dist -p tmp
-# mtree -cjnb -k uname,gname,mode -p tmp
-
-/set type=file uname=root gname=wheel mode=0755
-. type=dir
- etc type=dir
-/set type=file uname=bind gname=wheel mode=0755
- namedb type=dir uname=root
- dynamic type=dir
- ..
- master type=dir uname=root
- ..
- slave type=dir
- ..
- working type=dir
- ..
- ..
- ..
diff --git a/dns/bind912/files/empty.db b/dns/bind912/files/empty.db
deleted file mode 100644
index 070f6634825a..000000000000
--- a/dns/bind912/files/empty.db
+++ /dev/null
@@ -1,11 +0,0 @@
-
-; $FreeBSD$
-
-$TTL 3h
-@ SOA @ nobody.localhost. 42 1d 12h 1w 3h
- ; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
-@ NS @
-
-; Silence a BIND warning
-@ A 127.0.0.1
diff --git a/dns/bind912/files/extrapatch-bind-min-override-ttl b/dns/bind912/files/extrapatch-bind-min-override-ttl
deleted file mode 100644
index f0be2d0257f3..000000000000
--- a/dns/bind912/files/extrapatch-bind-min-override-ttl
+++ /dev/null
@@ -1,79 +0,0 @@
---- bin/named/config.c.orig 2019-02-27 23:42:04 UTC
-+++ bin/named/config.c
-@@ -183,12 +183,14 @@ options {\n\
- max-recursion-queries 75;\n\
- max-stale-ttl 604800; /* 1 week */\n\
- message-compression yes;\n\
-+ min-cache-ttl 0; /* no minimal, zero is allowed */\n\
- # min-roots <obsolete>;\n\
- minimal-any false;\n\
- minimal-responses no-auth-recursive;\n\
- notify-source *;\n\
- notify-source-v6 *;\n\
- nsec3-test-zone no;\n\
-+ override-cache-ttl 0; /* do not override */\n\
- provide-ixfr true;\n\
- query-source address *;\n\
- query-source-v6 address *;\n\
---- bin/named/server.c.orig 2019-02-27 23:42:04 UTC
-+++ bin/named/server.c
-@@ -4098,6 +4098,16 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
- }
-
- obj = NULL;
-+ result = named_config_get(maps, "override-cache-ttl", &obj);
-+ INSIST(result == ISC_R_SUCCESS);
-+ view->overridecachettl = cfg_obj_asuint32(obj);
-+
-+ obj = NULL;
-+ result = named_config_get(maps, "min-cache-ttl", &obj);
-+ INSIST(result == ISC_R_SUCCESS);
-+ view->mincachettl = cfg_obj_asuint32(obj);
-+
-+ obj = NULL;
- result = named_config_get(maps, "max-cache-ttl", &obj);
- INSIST(result == ISC_R_SUCCESS);
- view->maxcachettl = cfg_obj_asuint32(obj);
---- lib/dns/include/dns/view.h.orig 2019-02-27 23:42:04 UTC
-+++ lib/dns/include/dns/view.h
-@@ -151,6 +151,8 @@ struct dns_view {
- bool requestnsid;
- bool sendcookie;
- dns_ttl_t maxcachettl;
-+ dns_ttl_t mincachettl;
-+ dns_ttl_t overridecachettl;
- dns_ttl_t maxncachettl;
- uint32_t nta_lifetime;
- uint32_t nta_recheck;
---- lib/dns/resolver.c.orig 2019-02-27 23:42:04 UTC
-+++ lib/dns/resolver.c
-@@ -5797,6 +5797,18 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adb
- }
-
- /*
-+ * Enforce the configure cache TTL override.
-+ */
-+ if (res->view->overridecachettl)
-+ rdataset->ttl = res->view->overridecachettl;
-+
-+ /*
-+ * Enforce the configure minimum cache TTL.
-+ */
-+ if (rdataset->ttl < res->view->mincachettl)
-+ rdataset->ttl = res->view->mincachettl;
-+
-+ /*
- * Enforce the configure maximum cache TTL.
- */
- if (rdataset->ttl > res->view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig 2019-02-27 23:42:04 UTC
-+++ lib/isccfg/namedconf.c
-@@ -1917,6 +1917,8 @@ view_clauses[] = {
- { "max-acache-size", &cfg_type_sizenodefault,
- CFG_CLAUSEFLAG_OBSOLETE },
- { "max-cache-size", &cfg_type_sizeorpercent, 0 },
-+ { "override-cache-ttl", &cfg_type_uint32, 0 },
-+ { "min-cache-ttl", &cfg_type_uint32, 0 },
- { "max-cache-ttl", &cfg_type_uint32, 0 },
- { "max-clients-per-query", &cfg_type_uint32, 0 },
- { "max-ncache-ttl", &cfg_type_uint32, 0 },
diff --git a/dns/bind912/files/localhost-forward.db b/dns/bind912/files/localhost-forward.db
deleted file mode 100644
index 9156d2f09978..000000000000
--- a/dns/bind912/files/localhost-forward.db
+++ /dev/null
@@ -1,11 +0,0 @@
-
-; $FreeBSD$
-
-$TTL 3h
-localhost. SOA localhost. nobody.localhost. 42 1d 12h 1w 3h
- ; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
- NS localhost.
-
- A 127.0.0.1
- AAAA ::1
diff --git a/dns/bind912/files/localhost-reverse.db b/dns/bind912/files/localhost-reverse.db
deleted file mode 100644
index ceabe059ba77..000000000000
--- a/dns/bind912/files/localhost-reverse.db
+++ /dev/null
@@ -1,13 +0,0 @@
-
-; $FreeBSD$
-
-$TTL 3h
-@ SOA localhost. nobody.localhost. 42 1d 12h 1w 3h
- ; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
- NS localhost.
-
-1.0.0 PTR localhost.
-
-1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost.
-
diff --git a/dns/bind912/files/named.conf.in b/dns/bind912/files/named.conf.in
deleted file mode 100644
index 2d23a6592fae..000000000000
--- a/dns/bind912/files/named.conf.in
+++ /dev/null
@@ -1,380 +0,0 @@
-// $FreeBSD$
-//
-// Refer to the named.conf(5) and named(8) man pages, and the documentation
-// in /usr/local/share/doc/bind for more details.
-//
-// If you are going to set up an authoritative server, make sure you
-// understand the hairy details of how DNS works. Even with
-// simple mistakes, you can break connectivity for affected parties,
-// or cause huge amounts of useless Internet traffic.
-
-options {
- // All file and path names are relative to the chroot directory,
- // if any, and should be fully qualified.
- directory "%%ETCDIR%%/working";
- pid-file "/var/run/named/pid";
- dump-file "/var/dump/named_dump.db";
- statistics-file "/var/stats/named.stats";
-
-// If named is being used only as a local resolver, this is a safe default.
-// For named to be accessible to the network, comment this option, specify
-// the proper IP address, or delete this option.
- listen-on { 127.0.0.1; };
-
-// If you have IPv6 enabled on this system, uncomment this option for
-// use as a local resolver. To give access to the network, specify
-// an IPv6 address, or the keyword "any".
-// listen-on-v6 { ::1; };
-
-// These zones are already covered by the empty zones listed below.
-// If you remove the related empty zones below, comment these lines out.
- disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";
- disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
- disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
-
-// If you've got a DNS server around at your upstream provider, enter
-// its IP address here, and enable the line below. This will make you
-// benefit from its cache, thus reduce overall DNS traffic in the Internet.
-/*
- forwarders {
- 127.0.0.1;
- };
-*/
-
-// If the 'forwarders' clause is not empty the default is to 'forward first'
-// which will fall back to sending a query from your local server if the name
-// servers in 'forwarders' do not have the answer. Alternatively you can
-// force your name server to never initiate queries of its own by enabling the
-// following line:
-// forward only;
-
-// If you wish to have forwarding configured automatically based on
-// the entries in /etc/resolv.conf, uncomment the following line and
-// set named_auto_forward=yes in /etc/rc.conf. You can also enable
-// named_auto_forward_only (the effect of which is described above).
-// include "%%ETCDIR%%/auto_forward.conf";
-
- /*
- Modern versions of BIND use a random UDP port for each outgoing
- query by default in order to dramatically reduce the possibility
- of cache poisoning. All users are strongly encouraged to utilize
- this feature, and to configure their firewalls to accommodate it.
-
- AS A LAST RESORT in order to get around a restrictive firewall
- policy you can try enabling the option below. Use of this option
- will significantly reduce your ability to withstand cache poisoning
- attacks, and should be avoided if at all possible.
-
- Replace NNNNN in the example with a number between 49160 and 65530.
- */
- // query-source address * port NNNNN;
-};
-
-// If you enable a local name server, don't forget to enter 127.0.0.1
-// first in your /etc/resolv.conf so this server will be queried.
-// Also, make sure to enable it in /etc/rc.conf.
-
-// The traditional root hints mechanism. Use this, OR the slave zones below.
-zone "." { type hint; file "%%ETCDIR%%/named.root"; };
-
-/* Slaving the following zones from the root name servers has some
- significant advantages:
- 1. Faster local resolution for your users
- 2. No spurious traffic will be sent from your network to the roots
- 3. Greater resilience to any potential root server failure/DDoS
-
- On the other hand, this method requires more monitoring than the
- hints file to be sure that an unexpected failure mode has not
- incapacitated your server. Name servers that are serving a lot
- of clients will benefit more from this approach than individual
- hosts. Use with caution.
-
- To use this mechanism, uncomment the entries below, and comment
- the hint zone above.
-
- As documented at http://dns.icann.org/services/axfr/ these zones:
- "." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and a few others
- are available for AXFR from these servers on IPv4 and IPv6:
- xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org
-*/
-/*
-zone "." {
- type slave;
- file "%%ETCDIR%%/slave/root.slave";
- masters {
- 192.0.32.132; // lax.xfr.dns.icann.org
- 2620:0:2d0:202::132; // lax.xfr.dns.icann.org
- 192.0.47.132; // iad.xfr.dns.icann.org
- 2620:0:2830:202::132; // iad.xfr.dns.icann.org
- };
- notify no;
-};
-zone "arpa" {
- type slave;
- file "%%ETCDIR%%/slave/arpa.slave";
- masters {
- 192.0.32.132; // lax.xfr.dns.icann.org
- 2620:0:2d0:202::132; // lax.xfr.dns.icann.org
- 192.0.47.132; // iad.xfr.dns.icann.org
- 2620:0:2830:202::132; // iad.xfr.dns.icann.org
- };
- notify no;
-};
-zone "in-addr.arpa" {
- type slave;
- file "%%ETCDIR%%/slave/in-addr.arpa.slave";
- masters {
- 192.0.32.132; // lax.xfr.dns.icann.org
- 2620:0:2d0:202::132; // lax.xfr.dns.icann.org
- 192.0.47.132; // iad.xfr.dns.icann.org
- 2620:0:2830:202::132; // iad.xfr.dns.icann.org
- };
- notify no;
-};
-zone "ip6.arpa" {
- type slave;
- file "%%ETCDIR%%/slave/ip6.arpa.slave";
- masters {
- 192.0.32.132; // lax.xfr.dns.icann.org
- 2620:0:2d0:202::132; // lax.xfr.dns.icann.org
- 192.0.47.132; // iad.xfr.dns.icann.org
- 2620:0:2830:202::132; // iad.xfr.dns.icann.org
- };
- notify no;
-};
-*/
-
-/* Serving the following zones locally will prevent any queries
- for these zones leaving your network and going to the root
- name servers. This has two significant advantages:
- 1. Faster local resolution for your users
- 2. No spurious traffic will be sent from your network to the roots
-*/
-// RFCs 1912, 5735 and 6303 (and BCP 32 for localhost)
-zone "localhost" { type master; file "%%ETCDIR%%/master/localhost-forward.db"; };
-zone "127.in-addr.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; };
-zone "255.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// RFC 1912-style zone for IPv6 localhost address (RFC 6303)
-zone "0.ip6.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; };
-
-// "This" Network (RFCs 1912, 5735 and 6303)
-zone "0.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// Private Use Networks (RFCs 1918, 5735 and 6303)
-zone "10.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "16.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "17.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "18.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "19.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "20.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "21.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "22.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "23.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "24.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "25.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "26.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "27.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "28.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "29.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "30.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "31.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "168.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// Shared Address Space (RFC 6598)
-zone "64.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "65.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "66.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "67.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "68.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "69.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "70.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "71.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "72.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "73.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "74.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "75.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "76.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "77.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "78.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "79.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "80.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "81.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "82.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "83.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "84.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "85.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "86.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "87.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "88.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "89.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "90.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "91.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "92.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "93.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "94.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "95.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "96.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "97.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "98.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "99.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "100.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "101.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "102.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "103.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "104.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "105.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "106.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "107.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "108.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "109.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "110.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "111.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "112.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "113.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "114.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "115.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "116.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "117.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "118.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "119.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "120.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "121.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "122.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "123.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "124.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "125.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "126.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "127.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// Link-local/APIPA (RFCs 3927, 5735 and 6303)
-zone "254.169.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IETF protocol assignments (RFCs 5735 and 5736)
-zone "0.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303)
-zone "2.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "100.51.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "113.0.203.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IPv6 Example Range for Documentation (RFCs 3849 and 6303)
-zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// Router Benchmark Testing (RFCs 2544 and 5735)
-zone "18.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "19.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IANA Reserved - Old Class E Space (RFC 5735)
-zone "240.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "241.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "242.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "243.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "244.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "245.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "246.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "247.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "248.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "249.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "250.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "251.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "252.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "253.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "254.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IPv6 Unassigned Addresses (RFC 4291)
-zone "1.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "3.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "4.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "5.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "6.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "7.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "8.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "9.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "a.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "b.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "c.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "d.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "e.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "0.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "1.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "2.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "3.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "4.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "5.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "6.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "7.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "8.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "9.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "a.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "b.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "0.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "1.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "2.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "3.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "4.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "5.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "6.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "7.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IPv6 ULA (RFCs 4193 and 6303)
-zone "c.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "d.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IPv6 Link Local (RFCs 4291 and 6303)
-zone "8.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "9.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "a.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "b.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303)
-zone "c.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "d.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "e.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-zone "f.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// IP6.INT is Deprecated (RFC 4159)
-zone "ip6.int" { type master; file "%%ETCDIR%%/master/empty.db"; };
-
-// NB: Do not use the IP addresses below, they are faked, and only
-// serve demonstration/documentation purposes!
-//
-// Example slave zone config entries. It can be convenient to become
-// a slave at least for the zone your own domain is in. Ask
-// your network administrator for the IP address of the responsible
-// master name server.
-//
-// Do not forget to include the reverse lookup zone!
-// This is named after the first bytes of the IP address, in reverse
-// order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6.
-//
-// Before starting to set up a master zone, make sure you fully
-// understand how DNS and BIND work. There are sometimes
-// non-obvious pitfalls. Setting up a slave zone is usually simpler.
-//
-// NB: Don't blindly enable the examples below. :-) Use actual names
-// and addresses instead.
-
-/* An example dynamic zone
-key "exampleorgkey" {
- algorithm hmac-md5;
- secret "sf87HJqjkqh8ac87a02lla==";
-};
-zone "example.org" {
- type master;
- allow-update {
- key "exampleorgkey";
- };
- file "%%ETCDIR%%/dynamic/example.org";
-};
-*/
-
-/* Example of a slave reverse zone
-zone "1.168.192.in-addr.arpa" {
- type slave;
- file "%%ETCDIR%%/slave/1.168.192.in-addr.arpa";
- masters {
- 192.168.1.1;
- };
-};
-*/
diff --git a/dns/bind912/files/named.in b/dns/bind912/files/named.in
deleted file mode 100644
index a5a18660ac8c..000000000000
--- a/dns/bind912/files/named.in
+++ /dev/null
@@ -1,451 +0,0 @@
-#!/bin/sh
-#
-# $FreeBSD$
-#
-
-# PROVIDE: named
-# REQUIRE: %%NAMED_REQUIRE%%
-# BEFORE: %%NAMED_BEFORE%%
-# KEYWORD: shutdown
-
-#
-# Add the following lines to /etc/rc.conf to enable BIND:
-# named_enable (bool): Run named, the DNS server (or NO).
-# named_program (str): Path to named, if you want a different one.
-# named_conf (str): Path to the configuration file
-# named_flags (str): Use this for flags OTHER than -u and -c
-# named_uid (str): User to run named as
-# named_chrootdir (str): Chroot directory (or "" not to auto-chroot it)
-# Historically, was /var/named
-# named_chroot_autoupdate (bool): Automatically install/update chrooted
-# components of named.
-# named_symlink_enable (bool): Symlink the chrooted pid file
-# named_wait (bool): Wait for working name service before exiting
-# named_wait_host (str): Hostname to check if named_wait is enabled
-# named_auto_forward (str): Set up forwarders from /etc/resolv.conf
-# named_auto_forward_only (str): Do "forward only" instead of "forward first"
-%%NATIVE_PKCS11%%# named_pkcs11_engine (str): Path to the PKCS#11 library to use.
-#
-
-. /etc/rc.subr
-
-name=named
-desc="named BIND startup script"
-rcvar=named_enable
-
-load_rc_config ${name}
-
-extra_commands=reload
-
-start_precmd=named_prestart
-start_postcmd=named_poststart
-reload_cmd=named_reload
-stop_cmd=named_stop
-stop_postcmd=named_poststop
-
-named_enable=${named_enable:-"NO"}
-named_program=${named_program:-"%%PREFIX%%/sbin/named"}
-named_conf=${named_conf:-"%%ETCDIR%%/named.conf"}
-named_flags=${named_flags:-""}
-named_uid=${named_uid:-"bind"}
-named_chrootdir=${named_chrootdir:-""}
-named_chroot_autoupdate=${named_chroot_autoupdate:-"YES"}
-named_symlink_enable=${named_symlink_enable:-"YES"}
-named_wait=${named_wait:-"NO"}
-named_wait_host=${named_wait_host:-"localhost"}
-named_auto_forward=${named_auto_forward:-"NO"}
-named_auto_forward_only=${named_auto_forward_only:-"NO"}
-%%NATIVE_PKCS11%%named_pkcs11_engine=${named_pkcs11_engine:-""}
-
-# Not configuration variables but having them here keeps rclint happy
-required_dirs="${named_chrootdir}"
-_named_confdirroot="${named_conf%/*}"
-_named_confdir="${named_chrootdir}${_named_confdirroot}"
-_named_program_root="${named_program%/sbin/named}"
-_openssl_engines="%%ENGINES%%"
-
-# Needed if named.conf and rndc.conf are moved or if rndc.conf is used
-rndc_conf=${rndc_conf:-"$_named_confdir/rndc.conf"}
-rndc_key=${rndc_key:-"$_named_confdir/rndc.key"}
-
-# If running in a chroot cage, ensure that the appropriate files
-# exist inside the cage, as well as helper symlinks into the cage
-# from outside.
-#
-# As this is called after the is_running and required_dir checks
-# are made in run_rc_command(), we can safely assume ${named_chrootdir}
-# exists and named isn't running at this point (unless forcestart
-# is used).
-#
-chroot_autoupdate()
-{
- local file
-
- # If it's the first time around, fiddle with things and move the
- # current configuration to the chroot.
- if [ -d ${_named_confdirroot} -a ! -d ${_named_confdir} ]; then
- warn "named chroot: Moving current configuration in the chroot!"
- install -d ${_named_confdir%/*}
- mv ${_named_confdirroot} ${_named_confdir}
- fi
-
- # Create (or update) the chroot directory structure
- #
- if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.dist ]; then
- mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.dist \
- -p ${named_chrootdir}
- else
- warn "%%PREFIX%%/etc/mtree/BIND.chroot.dist missing,"
- warn "${named_chrootdir} directory structure not updated"
- fi
- if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.local.dist ]; then
- mkdir -p ${named_chrootdir}%%PREFIX%%
- mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.local.dist \
- -p ${named_chrootdir}%%PREFIX%%
- else
- warn "%%PREFIX%%/etc/mtree/BIND.chroot.local.dist missing,"
- warn "${named_chrootdir}%%PREFIX%% directory structure not updated"
- fi
-
- # Create (or update) the configuration directory symlink
- #
- if [ ! -L "${_named_confdirroot}" ]; then
- if [ -d "${_named_confdirroot}" ]; then
- warn "named chroot: ${_named_confdirroot} is a directory!"
- elif [ -e "${_named_confdirroot}" ]; then
- warn "named chroot: ${_named_confdirroot} exists!"
- else
- ln -s ${_named_confdir} ${_named_confdirroot}
- fi
- else
- # Make sure it points to the right place.
- ln -shf ${_named_confdir} ${_named_confdirroot}
- fi
-
- # Mount a devfs in the chroot directory if needed
- #
- if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then
- umount ${named_chrootdir}/dev 2>/dev/null
- devfs_domount ${named_chrootdir}/dev devfsrules_hide_all
- devfs -m ${named_chrootdir}/dev rule apply path null unhide
- devfs -m ${named_chrootdir}/dev rule apply path random unhide
- else
- if [ -c ${named_chrootdir}/dev/null -a \
- -c ${named_chrootdir}/dev/random ]; then
- info "named chroot: using pre-mounted devfs."
- else
- err 1 "named chroot: devfs cannot be mounted from " \
- "within a jail. Thus a chrooted named cannot " \
- "be run from within a jail. Either mount the " \
- "devfs with null and random from the host, or " \
- "run named without chrooting it, set " \
- "named_chrootdir=\"\" in /etc/rc.conf."
- fi
- fi
-
- # The OpenSSL engines should be present in the chroot, named loads them
- # after chrooting.
- if [ -d ${_openssl_engines} ]; then
- mkdir -p ${named_chrootdir}${_openssl_engines}
- if can_mount nullfs ; then
- mount -t nullfs ${_openssl_engines} ${named_chrootdir}${_openssl_engines}
- else
- warn "named chroot: cannot nullfs mount OpenSSL" \
- "engines into the chroot, will copy the shared" \
- "libraries instead."
- cp -f ${_openssl_engines}/*.so ${named_chrootdir}${_openssl_engines}
- fi
- fi
-
- # Copy and/or update key files to the chroot /etc
- #
- for file in localtime protocols services; do
- if [ -r /etc/${file} ] && \
- ! cmp -s /etc/${file} "${named_chrootdir}/etc/${file}"; then
- cp -p /etc/${file} "${named_chrootdir}/etc/${file}"
- fi
- done
-}
-
-# Make symlinks to the correct pid file
-#
-make_symlinks()
-{
- checkyesno named_symlink_enable &&
- ln -fs "${named_chrootdir}${pidfile}" ${pidfile} &&
- ln -fs "${named_chrootdir}${sessionkeyfile}" ${sessionkeyfile}
-}
-
-named_poststart()
-{
- make_symlinks
-
- if checkyesno named_wait; then
- until ${_named_program_root}/bin/host ${named_wait_host} >/dev/null 2>&1; do
- echo " Waiting for nameserver to resolve ${named_wait_host}"
- sleep 1
- done
- fi
-}
-
-named_reload()
-{
- # This is a one line function, but ${named_program} is not defined early
- # enough to be there when the reload_cmd variable is defined up there.
- rndc reload
-}
-
-find_pidfile()
-{
- if get_pidfile_from_conf pid-file ${named_conf}; then
- pidfile="${_pidfile_from_conf}"
- else
- pidfile="/var/run/named/pid"
- fi
-}
-
-find_sessionkeyfile()
-{
- if get_pidfile_from_conf session-keyfile ${named_conf}; then
- sessionkeyfile="${_pidfile_from_conf}"
- else
- sessionkeyfile="/var/run/named/session.key"
- fi
-}
-
-named_stop()
-{
- find_pidfile
-
- # This duplicates an undesirably large amount of code from the stop
- # routine in rc.subr in order to use rndc to shut down the process,
- # and to give it a second chance in case rndc fails.
- rc_pid=$(check_pidfile ${pidfile} ${command})
- if [ -z "${rc_pid}" ]; then
- [ -n "${rc_fast}" ] && return 0
- _run_rc_notrunning
- return 1
- fi
- echo 'Stopping named.'
- if rndc stop; then
- wait_for_pids ${rc_pid}
- else
- echo -n 'rndc failed, trying kill: '
- kill -TERM ${rc_pid}
- wait_for_pids ${rc_pid}
- fi
-}
-
-named_poststop()
-{
- if [ -n "${named_chrootdir}" ]; then
- # if using OpenSSL from ports, unmount OpenSSL engines, if they
- # were not mounted but only copied, do nothing.
- if [ -d ${_openssl_engines} ]; then
- if can_mount nullfs; then
- umount ${named_chrootdir}${_openssl_engines}
- fi
- fi
- if [ -c ${named_chrootdir}/dev/null ]; then
- # unmount /dev
- if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then
- umount ${named_chrootdir}/dev 2>/dev/null || true
- else
- warn "named chroot:" \
- "cannot unmount devfs from inside jail!"
- fi
- fi
- fi
-}
-
-can_mount()
-{
- local kld
- kld=$1
- if ! load_kld $kld; then
- return 1
- fi
- if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ] ||
- [ `${SYSCTL_N} security.jail.mount_allowed` -eq 1 ] ||
- [ `${SYSCTL_N} security.jail.mount_${kld}_allowed` -eq 1 ] ; then
- return 0
- fi
- return 1
-}
-
-create_file()
-{
- if [ -e "$1" ]; then
- unlink $1
- fi
- install -o root -g wheel -m 0644 /dev/null $1
-}
-
-rndc()
-{
- if [ -z "${rndc_flags}" ]; then
- if [ -s "${rndc_conf}" ] ; then
- rndc_flags="-c ${rndc_conf}"
- elif [ -s "${rndc_key}" ] ; then
- rndc_flags="-k ${rndc_key}"
- else
- rndc_flags=""
- fi
- fi
-
- ${_named_program_root}/sbin/rndc ${rndc_flags} "$@"
-}
-
-named_prestart()
-{
- find_pidfile
- find_sessionkeyfile
-
- if [ -n "${named_pidfile}" ]; then
- warn 'named_pidfile: now determined from the conf file'
- fi
-
- if [ -n "${named_sessionkeyfile}" ]; then
- warn 'named_sessionkeyfile: now determined from the conf file'
- fi
-
- piddir=`/usr/bin/dirname ${pidfile}`
- if [ ! -d ${piddir} ]; then
- install -d -o ${named_uid} -g ${named_uid} ${piddir}
- fi
-
- sessionkeydir=`/usr/bin/dirname ${sessionkeyfile}`
- if [ ! -d ${sessionkeydir} ]; then
- install -d -o ${named_uid} -g ${named_uid} ${sessionkeydir}
- fi
-
- command_args="-u ${named_uid:=root} -c ${named_conf} ${command_args}"
-
-%%NATIVE_PKCS11%% if [ -z "${named_pkcs11_engine}"]; then
-%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine has to be set to the PKCS#11 engine's library you want to use"
-%%NATIVE_PKCS11%% elif [ ! -f ${named_pkcs11_engine} ]; then
-%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine the PKCS#11 engine's library you want to use doesn't exist"
-%%NATIVE_PKCS11%% else
-%%NATIVE_PKCS11%% mkdir -p ${named_chrootdir}${named_pkcs11_engine%/*}
-%%NATIVE_PKCS11%% cp -p ${named_pkcs11_engine} ${named_chrootdir}${named_pkcs11_engine}
-%%NATIVE_PKCS11%% command_args="-E ${named_pkcs11_engine} ${command_args}"
-%%NATIVE_PKCS11%% fi
-
- local line nsip firstns
-
- # Is the user using a sandbox?
- #
- if [ -n "${named_chrootdir}" ]; then
- rc_flags="${rc_flags} -t ${named_chrootdir}"
- checkyesno named_chroot_autoupdate && chroot_autoupdate
-
- case "${altlog_proglist}" in
- *named*)
- ;;
- *)
- warn 'Using chroot without setting altlog_proglist, logging may not'
- warn 'work correctly. Run sysrc altlog_proglist+=named'
- ;;
- esac
- else
- named_symlink_enable=NO
- fi
-
- # Create an rndc.key file for the user if none exists
- #
- confgen_command="${_named_program_root}/sbin/rndc-confgen -a -b256 -u ${named_uid} \
- -c ${_named_confdir}/rndc.key"
- if [ -s "${_named_confdir}/rndc.conf" ]; then
- unset confgen_command
- fi
- if [ -s "${_named_confdir}/rndc.key" ]; then
- case `stat -f%Su ${_named_confdir}/rndc.key` in
- root|${named_uid}) ;;
- *) ${confgen_command} ;;
- esac
- else
- ${confgen_command}
- fi
-
- local checkconf
-
- checkconf="${_named_program_root}/sbin/named-checkconf"
- if ! checkyesno named_chroot_autoupdate && [ -n "${named_chrootdir}" ]; then
- checkconf="${checkconf} -t ${named_chrootdir}"
- fi
-
- # Create a forwarder configuration based on /etc/resolv.conf
- if checkyesno named_auto_forward; then
- if [ ! -s /etc/resolv.conf ]; then
- warn "named_auto_forward enabled, but no /etc/resolv.conf"
-
- # Empty the file in case it is included in named.conf
- [ -s "${_named_confdir}/auto_forward.conf" ] &&
- create_file ${_named_confdir}/auto_forward.conf
-
- ${checkconf} ${named_conf} ||
- err 3 'named-checkconf for ${named_conf} failed'
- return
- fi
-
- create_file /var/run/naf-resolv.conf
- create_file /var/run/auto_forward.conf
-
- echo ' forwarders {' > /var/run/auto_forward.conf
-
- while read line; do
- case "${line}" in
- 'nameserver '*|'nameserver '*)
- nsip=${line##nameserver[ ]}
-
- if [ -z "${firstns}" ]; then
- if [ ! "${nsip}" = '127.0.0.1' ]; then
- echo 'nameserver 127.0.0.1'
- echo " ${nsip};" >> /var/run/auto_forward.conf
- fi
-
- firstns=1
- else
- [ "${nsip}" = '127.0.0.1' ] && continue
- echo " ${nsip};" >> /var/run/auto_forward.conf
- fi
- ;;
- esac
-
- echo ${line}
- done < /etc/resolv.conf > /var/run/naf-resolv.conf
-
- echo ' };' >> /var/run/auto_forward.conf
- echo '' >> /var/run/auto_forward.conf
- if checkyesno named_auto_forward_only; then
- echo " forward only;" >> /var/run/auto_forward.conf
- else
- echo " forward first;" >> /var/run/auto_forward.conf
- fi
-
- if cmp -s /etc/resolv.conf /var/run/naf-resolv.conf; then
- unlink /var/run/naf-resolv.conf
- else
- [ -e /etc/resolv.conf ] && unlink /etc/resolv.conf
- mv /var/run/naf-resolv.conf /etc/resolv.conf
- fi
-
- if cmp -s ${_named_confdir}/auto_forward.conf \
- /var/run/auto_forward.conf; then
- unlink /var/run/auto_forward.conf
- else
- [ -e "${_named_confdir}/auto_forward.conf" ] &&
- unlink ${_named_confdir}/auto_forward.conf
- mv /var/run/auto_forward.conf \
- ${_named_confdir}/auto_forward.conf
- fi
- else
- # Empty the file in case it is included in named.conf
- [ -s "${_named_confdir}/auto_forward.conf" ] &&
- create_file ${_named_confdir}/auto_forward.conf
- fi
-
- ${checkconf} ${named_conf} || err 3 "named-checkconf for ${named_conf} failed"
-}
-
-run_rc_command "$1"
diff --git a/dns/bind912/files/named.root b/dns/bind912/files/named.root
deleted file mode 100644
index 8e3bac373eb8..000000000000
--- a/dns/bind912/files/named.root
+++ /dev/null
@@ -1,96 +0,0 @@
-;
-; $FreeBSD$
-;
-
-; This file holds the information on root name servers needed to
-; initialize cache of Internet domain name servers
-; (e.g. reference this file in the "cache . <file>"
-; configuration file of BIND domain name servers).
-;
-; This file is made available by InterNIC
-; under anonymous FTP as
-; file /domain/named.cache
-; on server FTP.INTERNIC.NET
-; -OR- RS.INTERNIC.NET
-;
-; last update: November 16, 2017
-; related version of root zone: 2017111601
-;
-; FORMERLY NS.INTERNIC.NET
-;
-. 3600000 NS A.ROOT-SERVERS.NET.
-A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
-A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30
-;
-; FORMERLY NS1.ISI.EDU
-;
-. 3600000 NS B.ROOT-SERVERS.NET.
-B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201
-B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b
-;
-; FORMERLY C.PSI.NET
-;
-. 3600000 NS C.ROOT-SERVERS.NET.
-C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
-C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c
-;
-; FORMERLY TERP.UMD.EDU
-;
-. 3600000 NS D.ROOT-SERVERS.NET.
-D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13
-D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d
-;
-; FORMERLY NS.NASA.GOV
-;
-. 3600000 NS E.ROOT-SERVERS.NET.
-E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
-E.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:a8::e
-;
-; FORMERLY NS.ISC.ORG
-;
-. 3600000 NS F.ROOT-SERVERS.NET.
-F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
-F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f
-;
-; FORMERLY NS.NIC.DDN.MIL
-;
-. 3600000 NS G.ROOT-SERVERS.NET.
-G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
-G.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:12::d0d
-;
-; FORMERLY AOS.ARL.ARMY.MIL
-;
-. 3600000 NS H.ROOT-SERVERS.NET.
-H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53
-H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53
-;
-; FORMERLY NIC.NORDU.NET
-;
-. 3600000 NS I.ROOT-SERVERS.NET.
-I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
-I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53
-;
-; OPERATED BY VERISIGN, INC.
-;
-. 3600000 NS J.ROOT-SERVERS.NET.
-J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30
-J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30
-;
-; OPERATED BY RIPE NCC
-;
-. 3600000 NS K.ROOT-SERVERS.NET.
-K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
-K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1
-;
-; OPERATED BY ICANN
-;
-. 3600000 NS L.ROOT-SERVERS.NET.
-L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42
-L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:9f::42
-;
-; OPERATED BY WIDE
-;
-. 3600000 NS M.ROOT-SERVERS.NET.
-M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
-M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35
-; End of file
diff --git a/dns/bind912/files/patch-bin_named_include_named_globals.h b/dns/bind912/files/patch-bin_named_include_named_globals.h
deleted file mode 100644
index 0c527a6604b9..000000000000
--- a/dns/bind912/files/patch-bin_named_include_named_globals.h
+++ /dev/null
@@ -1,13 +0,0 @@
-We reference the pid file as being run/named/pid everywere else.
-
---- bin/named/include/named/globals.h.orig 2019-02-05 00:00:59 UTC
-+++ bin/named/include/named/globals.h
-@@ -129,7 +129,7 @@ EXTERN bool named_g_forcelock INIT(false);
- #if NAMED_RUN_PID_DIR
- EXTERN const char * named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR
- "/run/named/"
-- "named.pid");
-+ "pid");
- #else
- EXTERN const char * named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR
- "/run/named.pid");
diff --git a/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in b/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in
deleted file mode 100644
index c59309bc2393..000000000000
--- a/dns/bind912/files/patch-bin_tests_system_dlzexternal_Makefile.in
+++ /dev/null
@@ -1,11 +0,0 @@
---- bin/tests/system/dlzexternal/Makefile.in.orig 2018-06-10 06:06:19 UTC
-+++ bin/tests/system/dlzexternal/Makefile.in
-@@ -34,7 +34,7 @@ OBJS =
- @BIND9_MAKE_RULES@
-
- CFLAGS = @CFLAGS@ @SO_CFLAGS@
--SO_LDFLAGS = @LDFLAGS@ @SO_LDFLAGS@
-+SO_LDFLAGS = @SO_LDFLAGS@
-
- driver.@SO@: ${SO_OBJS}
- ${LIBTOOL_MODE_LINK} @SO_LD@ ${SO_LDFLAGS} -o $@ driver.@O@
diff --git a/dns/bind912/files/patch-configure b/dns/bind912/files/patch-configure
deleted file mode 100644
index ef42a944c8e2..000000000000
--- a/dns/bind912/files/patch-configure
+++ /dev/null
@@ -1,90 +0,0 @@
---- configure.orig 2019-02-27 23:42:04 UTC
-+++ configure
-@@ -15138,27 +15138,9 @@ done
- # problems start to show up.
- saved_libs="$LIBS"
- for TRY_LIBS in \
-- "-lgssapi_krb5" \
-- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err" \
-- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv" \
-- "-lgssapi" \
-- "-lgssapi -lkrb5 -ldes -lcrypt -lasn1 -lroken -lcom_err" \
-- "-lgssapi -lkrb5 -lcrypt -lasn1 -lroken -lcom_err" \
-- "-lgssapi -lkrb5 -lgssapi_krb5 -lcrypt -lasn1 -lroken -lcom_err" \
-- "-lgssapi -lkrb5 -lhx509 -lcrypt -lasn1 -lroken -lcom_err" \
-- "-lgss -lkrb5"
-+ "$($KRB5CONFIG gssapi --libs)"; \
- do
-- # Note that this does not include $saved_libs, because
-- # on FreeBSD machines this configure script has added
-- # -L/usr/local/lib to LIBS, which can make the
-- # -lgssapi_krb5 test succeed with shared libraries even
-- # when you are trying to build with KTH in /usr/lib.
-- if test "/usr" = "$use_gssapi"
-- then
-- LIBS="$TRY_LIBS $ISC_OPENSSL_LIBS"
-- else
-- LIBS="-L$use_gssapi/lib $TRY_LIBS $ISC_OPENSSL_LIBS"
-- fi
-+ LIBS="$TRY_LIBS"
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking linking as $TRY_LIBS" >&5
- $as_echo_n "checking linking as $TRY_LIBS... " >&6; }
- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-@@ -15201,47 +15183,7 @@ $as_echo "no" >&6; } ;;
- no) as_fn_error $? "could not determine proper GSSAPI linkage" "$LINENO" 5 ;;
- esac
-
-- #
-- # XXXDCL Major kludge. Tries to cope with KTH in /usr/lib
-- # but MIT in /usr/local/lib and trying to build with KTH.
-- # /usr/local/lib can end up earlier on the link lines.
-- # Like most kludges, this one is not only inelegant it
-- # is also likely to be the wrong thing to do at least as
-- # many times as it is the right thing. Something better
-- # needs to be done.
-- #
-- if test "/usr" = "$use_gssapi" -a \
-- -f /usr/local/lib/libkrb5.a; then
-- FIX_KTH_VS_MIT=yes
-- fi
--
-- case "$FIX_KTH_VS_MIT" in
-- yes)
-- case "$enable_static_linking" in
-- yes) gssapi_lib_suffix=".a" ;;
-- *) gssapi_lib_suffix=".so" ;;
-- esac
--
-- for lib in $LIBS; do
-- case $lib in
-- -L*)
-- ;;
-- -l*)
-- new_lib=`echo $lib |
-- sed -e s%^-l%$use_gssapi/lib/lib% \
-- -e s%$%$gssapi_lib_suffix%`
-- NEW_LIBS="$NEW_LIBS $new_lib"
-- ;;
-- *)
-- as_fn_error $? "KTH vs MIT Kerberos confusion!" "$LINENO" 5
-- ;;
-- esac
-- done
-- LIBS="$NEW_LIBS"
-- ;;
-- esac
--
-- DST_GSSAPI_INC="-I$use_gssapi/include"
-+ DST_GSSAPI_INC="$($KRB5CONFIG gssapi --cflags)"
- DNS_GSSAPI_LIBS="$LIBS"
-
- { $as_echo "$as_me:${as_lineno-$LINENO}: result: using GSSAPI from $use_gssapi/lib and $use_gssapi/include" >&5
-@@ -24225,7 +24167,7 @@ $as_echo "" >&6; }
- # Check other locations for includes.
- # Order is important (sigh).
-
-- bdb_incdirs="/db53 /db51 /db48 /db47 /db46 /db45 /db44 /db43 /db42 /db41 /db4 /db"
-+ bdb_incdirs="/db6 /db5 /db48"
- # include a blank element first
- for d in "" $bdb_incdirs
- do
diff --git a/dns/bind912/files/patch-no-bind-tools b/dns/bind912/files/patch-no-bind-tools
deleted file mode 100644
index f3c5f7fce0c0..000000000000
--- a/dns/bind912/files/patch-no-bind-tools
+++ /dev/null
@@ -1,52 +0,0 @@
-Exclude the "tools" from building and installing.
-
---- bin/Makefile.in.orig 2019-02-27 23:28:15 UTC
-+++ bin/Makefile.in
-@@ -11,7 +11,7 @@ srcdir = @srcdir@
- VPATH = @srcdir@
- top_srcdir = @top_srcdir@
-
--SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \
-+SUBDIRS = named rndc tools check confgen \
- @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests
- TARGETS =
-
---- bin/tools/Makefile.in.orig 2019-02-27 23:42:04 UTC
-+++ bin/tools/Makefile.in
-@@ -39,10 +39,7 @@ SUBDIRS =
-
- DNSTAPTARGETS = dnstap-read@EXEEXT@
- NZDTARGETS = named-nzd2nzf@EXEEXT@
--TARGETS = arpaname@EXEEXT@ named-journalprint@EXEEXT@ \
-- named-rrchecker@EXEEXT@ nsec3hash@EXEEXT@ \
-- genrandom@EXEEXT@ mdig@EXEEXT@ \
-- @DNSTAPTARGETS@ @NZDTARGETS@
-+TARGETS = @DNSTAPTARGETS@ @NZDTARGETS@
-
- DNSTAPSRCS = dnstap-read.c
- NZDSRCS = named-nzd2nzf.c
-@@ -122,24 +119,6 @@ dnstap:
- ${INSTALL_DATA} ${srcdir}/dnstap-read.1 ${DESTDIR}${mandir}/man1
-
- install:: ${TARGETS} installdirs @DNSTAP@ @NZD_TOOLS@
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} arpaname@EXEEXT@ \
-- ${DESTDIR}${bindir}
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-journalprint@EXEEXT@ \
-- ${DESTDIR}${sbindir}
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-rrchecker@EXEEXT@ \
-- ${DESTDIR}${bindir}
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} nsec3hash@EXEEXT@ \
-- ${DESTDIR}${sbindir}
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} genrandom@EXEEXT@ \
-- ${DESTDIR}${sbindir}
-- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} mdig@EXEEXT@ \
-- ${DESTDIR}${bindir}
-- ${INSTALL_DATA} ${srcdir}/arpaname.1 ${DESTDIR}${mandir}/man1
-- ${INSTALL_DATA} ${srcdir}/named-journalprint.8 ${DESTDIR}${mandir}/man8
-- ${INSTALL_DATA} ${srcdir}/named-rrchecker.1 ${DESTDIR}${mandir}/man1
-- ${INSTALL_DATA} ${srcdir}/nsec3hash.8 ${DESTDIR}${mandir}/man8
-- ${INSTALL_DATA} ${srcdir}/genrandom.8 ${DESTDIR}${mandir}/man8
-- ${INSTALL_DATA} ${srcdir}/mdig.1 ${DESTDIR}${mandir}/man1
-
- uninstall::
- rm -f ${DESTDIR}${mandir}/man1/mdig.1
diff --git a/dns/bind912/files/pkg-message.in b/dns/bind912/files/pkg-message.in
deleted file mode 100644
index a1bfad91fb81..000000000000
--- a/dns/bind912/files/pkg-message.in
+++ /dev/null
@@ -1,23 +0,0 @@
-**********************************************************************
-* _ _____ _____ _____ _ _ _____ ___ ___ _ _ *
-* / \|_ _|_ _| ____| \ | |_ _|_ _/ _ \| \ | | *
-* / _ \ | | | | | _| | \| | | | | | | | | \| | *
-* / ___ \| | | | | |___| |\ | | | | | |_| | |\ | *
-* /_/ \_\_| |_| |_____|_| \_| |_| |___\___/|_| \_| *
-* *
-* BIND requires configuration of rndc, including a "secret" key. *
-* The easiest, and most secure way to configure rndc is to run *
-* 'rndc-confgen -a' to generate the proper conf file, with a new *
-* random key, and appropriate file permissions. *
-* *
-* The %%PREFIX%%/etc/rc.d/named script will do that for you. *
-* *
-* If using syslog to log the BIND9 activity, and using a *
-* chroot'ed installation, you will need to tell syslog to *
-* install a log socket in the BIND9 chroot by running: *
-* *
-* # sysrc altlog_proglist+=named *
-* *
-* And then restarting syslogd with: service syslogd restart *
-* *
-**********************************************************************
diff --git a/dns/bind912/pkg-descr b/dns/bind912/pkg-descr
deleted file mode 100644
index 4696a179097d..000000000000
--- a/dns/bind912/pkg-descr
+++ /dev/null
@@ -1,15 +0,0 @@
-BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
-architecture. Some of the important features of BIND 9 are:
-
-DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
-IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
- Experimental IPv6 Resolver Library
-DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
- Improved standards conformance
-Views: One server process can provide multiple "views" of the DNS namespace,
- e.g. an "inside" view to certain clients, and an "outside" view to others.
-Multiprocessor Support
-
-See the CHANGES file for more information on new features.
-
-WWW: https://www.isc.org/downloads/bind/
diff --git a/dns/bind912/pkg-help b/dns/bind912/pkg-help
deleted file mode 100644
index c303766037cb..000000000000
--- a/dns/bind912/pkg-help
+++ /dev/null
@@ -1,38 +0,0 @@
- NATIVE_PKCS11
-When using the NATIVE_PKCS11 option, BIND will use the PKCS#11
-engine specified by the named_pkcss11_engine variable in
-/etc/rc.conf for *all* crypto operations.
-
-This is primarily intended to be used in an authoritative
-case.
-
-If BIND is also operating as a validating resolver,
-NATIVE_PKCS11 should not be used, because the HSM will be
-used for all crypto, including DNSSEC validations, and the
-HSM is likely to be slower than the CPU for this purpose.
-Additionally, the HSM might not support all of the PKCS#11
-API functions needed for signature verification.
-
-
- GOST
-If using a chrooted instance of BIND on FreeBSD 8.x and 9.x,
-the OpenSSL engines MUST be accessible from within the chroot.
-If BIND is chrooted in /var/named, this can be achieved by
-either copying content of /usr/local/lib/engines into
-/var/named/usr/local/lib/engines, or by creating that directory
-and adding this line to /etc/fstab:
-/usr/local/lib/engines /var/named/usr/local/lib/engines nullfs ro 0 0
-
-
- START_LATE
-Most of the time, BIND needs to start early in the boot
-process. Enable this if BIND starts too early for you and
-you need it to start later.
-
-
- TUNING_LARGE
- https://kb.isc.org/article/AA-01314/0
-Tunes certain compiled-in constants and default settings to
-values better suited to large servers with 12/16GB+ of memory.
-This can improve performance on such servers, but will consume
-more memory and may degrade performance on smaller systems.
diff --git a/dns/bind912/pkg-plist b/dns/bind912/pkg-plist
deleted file mode 100644
index fc17a016d5b7..000000000000
--- a/dns/bind912/pkg-plist
+++ /dev/null
@@ -1,314 +0,0 @@
-bin/bind9-config
-%%DNSTAP%%bin/dnstap-read
-bin/isc-config.sh
-@sample etc/mtree/BIND.chroot.dist.sample
-@sample etc/mtree/BIND.chroot.local.dist.sample
-%%ETCDIR%%/bind.keys
-%%ETCDIR%%/master/empty.db
-%%ETCDIR%%/master/localhost-forward.db
-%%ETCDIR%%/master/localhost-reverse.db
-@sample %%ETCDIR%%/named.conf.sample
-%%ETCDIR%%/named.root
-%%ETCDIR%%/rndc.conf.sample
-include/bind9/check.h
-include/bind9/getaddresses.h
-include/bind9/version.h
-include/dns/acl.h
-include/dns/adb.h
-include/dns/badcache.h
-include/dns/bit.h
-include/dns/byaddr.h
-include/dns/cache.h
-include/dns/callbacks.h
-include/dns/catz.h
-include/dns/cert.h
-include/dns/client.h
-include/dns/clientinfo.h
-include/dns/compress.h
-include/dns/db.h
-include/dns/dbiterator.h
-include/dns/dbtable.h
-include/dns/diff.h
-include/dns/dispatch.h
-include/dns/dlz.h
-include/dns/dlz_dlopen.h
-include/dns/dns64.h
-include/dns/dnsrps.h
-include/dns/dnssec.h
-include/dns/dnstap.h
-%%DNSTAP%%include/dns/dnstap.pb-c.h
-include/dns/ds.h
-include/dns/dsdigest.h
-include/dns/dyndb.h
-include/dns/ecdb.h
-include/dns/ecs.h
-include/dns/edns.h
-include/dns/enumclass.h
-include/dns/enumtype.h
-include/dns/events.h
-include/dns/fixedname.h
-include/dns/forward.h
-include/dns/geoip.h
-include/dns/ipkeylist.h
-include/dns/iptable.h
-include/dns/journal.h
-include/dns/keydata.h
-include/dns/keyflags.h
-include/dns/keytable.h
-include/dns/keyvalues.h
-include/dns/lib.h
-include/dns/librpz.h
-include/dns/log.h
-include/dns/lookup.h
-include/dns/master.h
-include/dns/masterdump.h
-include/dns/message.h
-include/dns/name.h
-include/dns/ncache.h
-include/dns/nsec.h
-include/dns/nsec3.h
-include/dns/nta.h
-include/dns/opcode.h
-include/dns/order.h
-include/dns/peer.h
-include/dns/portlist.h
-include/dns/private.h
-include/dns/rbt.h
-include/dns/rcode.h
-include/dns/rdata.h
-include/dns/rdataclass.h
-include/dns/rdatalist.h
-include/dns/rdataset.h
-include/dns/rdatasetiter.h
-include/dns/rdataslab.h
-include/dns/rdatastruct.h
-include/dns/rdatatype.h
-include/dns/request.h
-include/dns/resolver.h
-include/dns/result.h
-include/dns/rootns.h
-include/dns/rpz.h
-include/dns/rriterator.h
-include/dns/rrl.h
-include/dns/sdb.h
-include/dns/sdlz.h
-include/dns/secalg.h
-include/dns/secproto.h
-include/dns/soa.h
-include/dns/ssu.h
-include/dns/stats.h
-include/dns/tcpmsg.h
-include/dns/time.h
-include/dns/timer.h
-include/dns/tkey.h
-include/dns/tsec.h
-include/dns/tsig.h
-include/dns/ttl.h
-include/dns/types.h
-include/dns/update.h
-include/dns/validator.h
-include/dns/version.h
-include/dns/view.h
-include/dns/xfrin.h
-include/dns/zone.h
-include/dns/zonekey.h
-include/dns/zt.h
-include/dst/dst.h
-include/dst/gssapi.h
-include/dst/lib.h
-include/dst/result.h
-include/irs/context.h
-include/irs/dnsconf.h
-include/irs/netdb.h
-include/irs/platform.h
-include/irs/resconf.h
-include/irs/types.h
-include/irs/version.h
-include/isc/aes.h
-include/isc/app.h
-include/isc/assertions.h
-include/isc/atomic.h
-include/isc/backtrace.h
-include/isc/base32.h
-include/isc/base64.h
-include/isc/bind9.h
-include/isc/boolean.h
-include/isc/buffer.h
-include/isc/bufferlist.h
-include/isc/commandline.h
-include/isc/condition.h
-include/isc/counter.h
-include/isc/crc64.h
-include/isc/deprecated.h
-include/isc/dir.h
-include/isc/entropy.h
-include/isc/errno.h
-include/isc/error.h
-include/isc/event.h
-include/isc/eventclass.h
-include/isc/file.h
-include/isc/formatcheck.h
-include/isc/fsaccess.h
-include/isc/fuzz.h
-include/isc/hash.h
-include/isc/heap.h
-include/isc/hex.h
-include/isc/hmacmd5.h
-include/isc/hmacsha.h
-include/isc/ht.h
-include/isc/httpd.h
-include/isc/int.h
-include/isc/interfaceiter.h
-include/isc/iterated_hash.h
-include/isc/json.h
-include/isc/keyboard.h
-include/isc/lang.h
-include/isc/lex.h
-include/isc/lfsr.h
-include/isc/lib.h
-include/isc/likely.h
-include/isc/list.h
-include/isc/log.h
-include/isc/magic.h
-include/isc/md5.h
-include/isc/mem.h
-include/isc/meminfo.h
-include/isc/msgcat.h
-include/isc/msgs.h
-include/isc/mutex.h
-include/isc/mutexblock.h
-include/isc/net.h
-include/isc/netaddr.h
-include/isc/netdb.h
-include/isc/netscope.h
-include/isc/offset.h
-include/isc/once.h
-include/isc/ondestroy.h
-include/isc/os.h
-include/isc/parseint.h
-include/isc/platform.h
-include/isc/pool.h
-include/isc/portset.h
-include/isc/print.h
-include/isc/queue.h
-include/isc/quota.h
-include/isc/radix.h
-include/isc/random.h
-include/isc/ratelimiter.h
-include/isc/refcount.h
-include/isc/regex.h
-include/isc/region.h
-include/isc/resource.h
-include/isc/result.h
-include/isc/resultclass.h
-include/isc/rwlock.h
-include/isc/safe.h
-include/isc/serial.h
-include/isc/sha1.h
-include/isc/sha2.h
-include/isc/sockaddr.h
-include/isc/socket.h
-include/isc/stat.h
-include/isc/stats.h
-include/isc/stdio.h
-include/isc/stdlib.h
-include/isc/stdtime.h
-include/isc/strerror.h
-include/isc/string.h
-include/isc/symtab.h
-include/isc/syslog.h
-include/isc/task.h
-include/isc/taskpool.h
-include/isc/thread.h
-include/isc/time.h
-include/isc/timer.h
-include/isc/tm.h
-include/isc/types.h
-include/isc/util.h
-include/isc/version.h
-include/isc/xml.h
-include/isccc/alist.h
-include/isccc/base64.h
-include/isccc/cc.h
-include/isccc/ccmsg.h
-include/isccc/events.h
-include/isccc/lib.h
-include/isccc/result.h
-include/isccc/sexpr.h
-include/isccc/symtab.h
-include/isccc/symtype.h
-include/isccc/types.h
-include/isccc/util.h
-include/isccc/version.h
-include/isccfg/aclconf.h
-include/isccfg/cfg.h
-include/isccfg/dnsconf.h
-include/isccfg/grammar.h
-include/isccfg/log.h
-include/isccfg/namedconf.h
-include/isccfg/version.h
-include/ns/client.h
-include/ns/interfacemgr.h
-include/ns/lib.h
-include/ns/listenlist.h
-include/ns/log.h
-include/ns/notify.h
-include/ns/query.h
-include/ns/server.h
-include/ns/sortlist.h
-include/ns/stats.h
-include/ns/types.h
-include/ns/update.h
-include/ns/version.h
-include/ns/xfrout.h
-include/pk11/constants.h
-include/pk11/internal.h
-include/pk11/pk11.h
-include/pk11/result.h
-include/pk11/site.h
-include/pkcs11/cryptoki.h
-include/pkcs11/eddsa.h
-include/pkcs11/pkcs11.h
-include/pkcs11/pkcs11f.h
-include/pkcs11/pkcs11t.h
-lib/libbind9.a
-lib/libdns.a
-lib/libirs.a
-lib/libisc.a
-lib/libisccc.a
-lib/libisccfg.a
-lib/libns.a
-man/man1/bind9-config.1.gz
-%%DNSTAP%%man/man1/dnstap-read.1.gz
-man/man1/isc-config.sh.1.gz
-man/man5/named.conf.5.gz
-man/man5/rndc.conf.5.gz
-man/man8/ddns-confgen.8.gz
-man/man8/named-checkconf.8.gz
-man/man8/named-checkzone.8.gz
-man/man8/named-compilezone.8.gz
-%%LMDB%%man/man8/named-nzd2nzf.8.gz
-man/man8/named.8.gz
-%%NATIVE_PKCS11%%man/man8/pkcs11-destroy.8.gz
-%%NATIVE_PKCS11%%man/man8/pkcs11-keygen.8.gz
-%%NATIVE_PKCS11%%man/man8/pkcs11-list.8.gz
-%%NATIVE_PKCS11%%man/man8/pkcs11-tokens.8.gz
-man/man8/rndc-confgen.8.gz
-man/man8/rndc.8.gz
-man/man8/tsig-keygen.8.gz
-sbin/ddns-confgen
-sbin/named
-sbin/named-checkconf
-sbin/named-checkzone
-sbin/named-compilezone
-%%LMDB%%sbin/named-nzd2nzf
-%%NATIVE_PKCS11%%sbin/pkcs11-destroy
-%%NATIVE_PKCS11%%sbin/pkcs11-keygen
-%%NATIVE_PKCS11%%sbin/pkcs11-list
-%%NATIVE_PKCS11%%sbin/pkcs11-tokens
-sbin/rndc
-sbin/rndc-confgen
-sbin/tsig-keygen
-@dir(bind,bind,) %%ETCDIR%%/dynamic
-@dir(bind,bind,) %%ETCDIR%%/slave
-@dir(bind,bind,) %%ETCDIR%%/working