diff options
author | Rene Ladan <rene@FreeBSD.org> | 2024-04-30 20:24:52 +0000 |
---|---|---|
committer | Rene Ladan <rene@FreeBSD.org> | 2024-04-30 20:24:52 +0000 |
commit | 3a4d8de87ce0160ab4bfe85f60c6d1922d9fa3c4 (patch) | |
tree | 49e17077cc947013d923325fe4dc074e57a049a4 /dns | |
parent | 9c9e98cdb668f76a435c869371c74ace027d2b5e (diff) | |
download | ports-3a4d8de87ce0160ab4bfe85f60c6d1922d9fa3c4.tar.gz ports-3a4d8de87ce0160ab4bfe85f60c6d1922d9fa3c4.zip |
dns/bind916: Remove expired port
2024-04-30 dns/bind916: End of life, please migrate to a newer version of BIND9
Diffstat (limited to 'dns')
-rw-r--r-- | dns/Makefile | 1 | ||||
-rw-r--r-- | dns/bind916/Makefile | 227 | ||||
-rw-r--r-- | dns/bind916/distinfo | 3 | ||||
-rw-r--r-- | dns/bind916/files/BIND.chroot.dist | 24 | ||||
-rw-r--r-- | dns/bind916/files/BIND.chroot.local.dist | 18 | ||||
-rw-r--r-- | dns/bind916/files/bind-v9.16.0-tcp_quota_fix.patch | 341 | ||||
-rw-r--r-- | dns/bind916/files/empty.db | 8 | ||||
-rw-r--r-- | dns/bind916/files/extrapatch-bind-min-override-ttl | 61 | ||||
-rw-r--r-- | dns/bind916/files/localhost-forward.db | 8 | ||||
-rw-r--r-- | dns/bind916/files/localhost-reverse.db | 10 | ||||
-rw-r--r-- | dns/bind916/files/named.conf.in | 378 | ||||
-rw-r--r-- | dns/bind916/files/named.in | 464 | ||||
-rw-r--r-- | dns/bind916/files/named.root | 92 | ||||
-rw-r--r-- | dns/bind916/files/patch-bin_named_include_named_globals.h | 13 | ||||
-rw-r--r-- | dns/bind916/files/patch-bin_tests_system_dlzexternal_Makefile.in | 13 | ||||
-rw-r--r-- | dns/bind916/files/patch-configure | 92 | ||||
-rw-r--r-- | dns/bind916/files/patch-no-bind-tools | 46 | ||||
-rw-r--r-- | dns/bind916/files/pkg-message.in | 22 | ||||
-rw-r--r-- | dns/bind916/pkg-descr | 13 | ||||
-rw-r--r-- | dns/bind916/pkg-help | 30 | ||||
-rw-r--r-- | dns/bind916/pkg-plist | 331 |
21 files changed, 0 insertions, 2195 deletions
diff --git a/dns/Makefile b/dns/Makefile index 3717716f6067..587157026a25 100644 --- a/dns/Makefile +++ b/dns/Makefile @@ -7,7 +7,6 @@ SUBDIR += axfr2acl SUBDIR += bind-tools SUBDIR += bind9-devel - SUBDIR += bind916 SUBDIR += bind918 SUBDIR += bindgraph SUBDIR += blocky diff --git a/dns/bind916/Makefile b/dns/bind916/Makefile deleted file mode 100644 index 89e72f532b6b..000000000000 --- a/dns/bind916/Makefile +++ /dev/null @@ -1,227 +0,0 @@ -# pkg-help formatted with fmt 59 63 - -PORTNAME= bind -DISTVERSION= 9.16.50 -PORTREVISION= 1 -CATEGORIES= dns net -MASTER_SITES= ISC/bind9/${DISTVERSION} -PKGNAMESUFFIX= 916 -DISTNAME= ${PORTNAME}-${DISTVERSION} - -MAINTAINER= mat@FreeBSD.org -COMMENT= BIND DNS suite with updated DNSSEC and DNS64 -WWW= https://www.isc.org/bind/ - -DEPRECATED= End of life, please migrate to a newer version of BIND9 -EXPIRATION_DATE= 2024-04-30 - -LICENSE= MPL20 -LICENSE_FILE= ${WRKSRC}/LICENSE - -LIB_DEPENDS= libuv.so:devel/libuv \ - libxml2.so:textproc/libxml2 -RUN_DEPENDS= bind-tools>0:dns/bind-tools - -USES= compiler:c11 cpe libedit pkgconfig ssl tar:xz - -CPE_VENDOR= isc -CPE_VERSION= ${DISTVERSION:C/-.*//} -.if ${DISTVERSION:M*-*} -CPE_UPDATE= ${DISTVERSION:C/.*-//:tl} -.endif - -GNU_CONFIGURE= yes -GNU_CONFIGURE_MANPREFIX= ${PREFIX}/share -CONFIGURE_ARGS= --disable-linux-caps \ - --localstatedir=/var \ - --sysconfdir=${ETCDIR} \ - --with-dlopen=yes \ - --without-python \ - --with-libxml2 \ - --with-openssl=${OPENSSLBASE} \ - --with-readline="-L${LOCALBASE}/lib -ledit" -ETCDIR= ${PREFIX}/etc/namedb - -USE_RC_SUBR= named -SUB_FILES= named.conf pkg-message - -PORTDOCS= * - -CONFLICTS= bind9[0-9][0-9] bind9-devel - -MAKE_JOBS_UNSAFE= yes - -OPTIONS_DEFAULT= DLZ_FILESYSTEM GSSAPI_NONE IDN JSON LMDB \ - TCP_FASTOPEN DNSTAP -OPTIONS_DEFINE= DNSTAP DOCS FIXED_RRSET GEOIP IDN JSON LARGE_FILE LMDB \ - OVERRIDECACHE PORTREVISION QUERYTRACE \ - START_LATE TCP_FASTOPEN - -OPTIONS_RADIO= CRYPTO -OPTIONS_RADIO_CRYPTO= NATIVE_PKCS11 - -OPTIONS_GROUP= DLZ -OPTIONS_GROUP_DLZ= DLZ_BDB DLZ_FILESYSTEM DLZ_LDAP DLZ_MYSQL \ - DLZ_POSTGRESQL DLZ_STUB - -OPTIONS_SINGLE= GSSAPI -OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE - -OPTIONS_SUB= yes - -CRYPTO_DESC= Choose which crypto engine to use -DLZ_BDB_DESC= DLZ BDB driver -DLZ_DESC= Dynamically Loadable Zones -DLZ_FILESYSTEM_DESC= DLZ filesystem driver -DLZ_LDAP_DESC= DLZ LDAP driver -DLZ_MYSQL_DESC= DLZ MySQL driver (no threading) -DLZ_POSTGRESQL_DESC= DLZ Postgres driver -DLZ_STUB_DESC= DLZ stub driver -DNSTAP_DESC= Provides fast passive logging of DNS messages -FIXED_RRSET_DESC= Enable fixed rrset ordering -GSSAPI_BASE_DESC= Using Heimdal in base (nsupdate is broken) -GSSAPI_HEIMDAL_DESC= Using security/heimdal (nsupdate is broken) -GSSAPI_MIT_DESC= Using security/krb5 -GSSAPI_NONE_DESC= Disable -LARGE_FILE_DESC= 64-bit file support -LMDB_DESC= Use LMDB for zone management -OVERRIDECACHE_DESC= Use the override-cache patch -NATIVE_PKCS11_DESC= Use PKCS\#11 native API (**READ HELP**) -PORTREVISION_DESC= Show PORTREVISION in the version string -QUERYTRACE_DESC= Enable the very verbose query tracelogging -START_LATE_DESC= Start BIND late in the boot process (see help) -TCP_FASTOPEN_DESC= RFC 7413 support - -DLZ_BDB_CONFIGURE_ON= --with-dlz-bdb=yes -DLZ_BDB_USES= bdb - -DLZ_FILESYSTEM_CONFIGURE_ON= --with-dlz-filesystem=yes - -DLZ_LDAP_CONFIGURE_ON= --with-dlz-ldap=yes -DLZ_LDAP_USES= ldap - -DLZ_MYSQL_CONFIGURE_ON= --with-dlz-mysql=yes -DLZ_MYSQL_USES= mysql - -DLZ_POSTGRESQL_CONFIGURE_ON= --with-dlz-postgres=yes -DLZ_POSTGRESQL_USES= pgsql - -DLZ_STUB_CONFIGURE_ON= --with-dlz-stub=yes - -DOCS_BUILD_DEPENDS= sphinx-build:textproc/py-sphinx \ - ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR} -DOCS_USES= python:env - -DNSTAP_CONFIGURE_ENABLE= dnstap -DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \ - libprotobuf-c.so:devel/protobuf-c - -FIXED_RRSET_CONFIGURE_ENABLE= fixed-rrset - -GEOIP_CONFIGURE_ENABLE= geoip -GEOIP_CONFIGURE_WITH= maxminddb -GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb - -GSSAPI_BASE_CONFIGURE_ON= --with-gssapi=${GSSAPIBASEDIR} \ - ${GSSAPI_CONFIGURE_ARGS} -GSSAPI_BASE_USES= gssapi - -GSSAPI_HEIMDAL_CONFIGURE_ON= --with-gssapi=${GSSAPIBASEDIR} \ - ${GSSAPI_CONFIGURE_ARGS} -GSSAPI_HEIMDAL_USES= gssapi:heimdal - -GSSAPI_MIT_CONFIGURE_ON= --with-gssapi=${GSSAPIBASEDIR} \ - ${GSSAPI_CONFIGURE_ARGS} -GSSAPI_MIT_USES= gssapi:mit - -GSSAPI_NONE_CONFIGURE_ON= --without-gssapi - -IDN_CONFIGURE_OFF= --without-libidn2 -IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \ - --with-libidn2=${LOCALBASE} -IDN_LIB_DEPENDS= libidn2.so:dns/libidn2 -IDN_USES= iconv - -JSON_CONFIGURE_WITH= json-c -JSON_LIB_DEPENDS= libjson-c.so:devel/json-c -JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c - -LARGE_FILE_CONFIGURE_ENABLE= largefile - -LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE} -LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb - -OVERRIDECACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl - -NATIVE_PKCS11_CONFIGURE_ENABLE= native-pkcs11 - -QUERYTRACE_CONFIGURE_ENABLE= querytrace - -START_LATE_SUB_LIST= NAMED_BEFORE="LOGIN" \ - NAMED_REQUIRE="SERVERS cleanvar" -START_LATE_SUB_LIST_OFF= NAMED_BEFORE="SERVERS" \ - NAMED_REQUIRE="NETWORKING ldconfig syslogd" - -TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen - -.include <bsd.port.options.mk> - -.if defined(WITH_DEBUG) -CONFIGURE_ARGS+= --enable-developer \ - --enable-symtable -USES+= perl5 -USE_PERL5= build -BUILD_DEPENDS+= cmocka>0:sysutils/cmocka -.else -CONFIGURE_ARGS+= --disable-symtable -.endif - -.include <bsd.port.pre.mk> - -.if ${SSL_DEFAULT} == base -SUB_LIST+= ENGINES=/usr/lib/engines -.else -SUB_LIST+= ENGINES=${LOCALBASE}/lib/engines -.endif - -post-patch: -.for FILE in named-checkconf.8 named.8 named.conf.5 nsupdate.1 \ - rndc.8 - @${REINPLACE_CMD} -e 's#/etc/named.conf#${ETCDIR}/named.conf#g' \ - -e 's#/etc/rndc.conf#${ETCDIR}/rndc.conf#g' \ - -e "s#/var\/run\/named\/named.pid#/var/run/named/pid#" \ - ${WRKSRC}/doc/man/${FILE}in -.endfor - -. if ${PORTREVISION:N0} -post-patch-PORTREVISION-on: - @${REINPLACE_CMD} -e '/EXTENSIONS/s#=$$#=_${PORTREVISION}#' \ - ${WRKSRC}/version -. endif - -post-build-DOCS-on: - cd ${WRKSRC}/doc/arm && ${MAKE} html - -post-install: - ${MKDIR} ${STAGEDIR}${PREFIX}/etc/mtree - ${MKDIR} ${STAGEDIR}${ETCDIR} -. for i in dynamic master slave working - @${MKDIR} ${STAGEDIR}${ETCDIR}/$i -. endfor - ${INSTALL_DATA} ${WRKDIR}/named.conf ${STAGEDIR}${ETCDIR}/named.conf.sample - ${INSTALL_DATA} ${FILESDIR}/named.root ${STAGEDIR}${ETCDIR} - ${INSTALL_DATA} ${FILESDIR}/empty.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/localhost-forward.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/localhost-reverse.db ${STAGEDIR}${ETCDIR}/master - ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.dist.sample - ${INSTALL_DATA} ${FILESDIR}/BIND.chroot.local.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.local.dist.sample - ${INSTALL_DATA} ${WRKSRC}/bin/rndc/rndc.conf \ - ${STAGEDIR}${ETCDIR}/rndc.conf.sample - -post-install-DOCS-on: - ${MKDIR} ${STAGEDIR}${DOCSDIR}/arm - ${INSTALL_DATA} ${WRKSRC}/CHANGES* ${WRKSRC}/HISTORY.md \ - ${WRKSRC}/README.md ${STAGEDIR}${DOCSDIR} - cd ${WRKSRC}/doc/arm/_build/html && ${COPYTREE_SHARE} . ${STAGEDIR}${DOCSDIR}/arm - -.include <bsd.port.post.mk> diff --git a/dns/bind916/distinfo b/dns/bind916/distinfo deleted file mode 100644 index fa4268e146f3..000000000000 --- a/dns/bind916/distinfo +++ /dev/null @@ -1,3 +0,0 @@ -TIMESTAMP = 1713682578 -SHA256 (bind-9.16.50.tar.xz) = 816dbaa3c115019f30fcebd9e8ef8f7637f4adde91c79daa099b035255a15795 -SIZE (bind-9.16.50.tar.xz) = 5134620 diff --git a/dns/bind916/files/BIND.chroot.dist b/dns/bind916/files/BIND.chroot.dist deleted file mode 100644 index 5616dd712f6b..000000000000 --- a/dns/bind916/files/BIND.chroot.dist +++ /dev/null @@ -1,24 +0,0 @@ -# mtree -deU -f files/BIND.chroot.dist -p tmp -# mtree -cjnb -k uname,gname,mode -p tmp - -/set type=file uname=root gname=wheel mode=0755 -. type=dir - dev type=dir mode=0555 - .. - etc type=dir - .. - tmp type=dir mode=01777 - .. -/set type=file uname=bind gname=bind mode=0755 - var type=dir uname=root gname=wheel - dump type=dir - .. - log type=dir - .. - run type=dir - named type=dir - .. - .. - stats type=dir - .. - .. diff --git a/dns/bind916/files/BIND.chroot.local.dist b/dns/bind916/files/BIND.chroot.local.dist deleted file mode 100644 index 81fca3df322c..000000000000 --- a/dns/bind916/files/BIND.chroot.local.dist +++ /dev/null @@ -1,18 +0,0 @@ -# mtree -deU -f files/BIND.etc.dist -p tmp -# mtree -cjnb -k uname,gname,mode -p tmp - -/set type=file uname=root gname=wheel mode=0755 -. type=dir - etc type=dir -/set type=file uname=bind gname=wheel mode=0755 - namedb type=dir uname=root - dynamic type=dir - .. - master type=dir uname=root - .. - slave type=dir - .. - working type=dir - .. - .. - .. diff --git a/dns/bind916/files/bind-v9.16.0-tcp_quota_fix.patch b/dns/bind916/files/bind-v9.16.0-tcp_quota_fix.patch deleted file mode 100644 index bad95dddc192..000000000000 --- a/dns/bind916/files/bind-v9.16.0-tcp_quota_fix.patch +++ /dev/null @@ -1,341 +0,0 @@ -diff --git a/lib/isc/netmgr/netmgr-int.h b/lib/isc/netmgr/netmgr-int.h -index ae83f943d3..c85065f39d 100644 ---- a/lib/isc/netmgr/netmgr-int.h -+++ b/lib/isc/netmgr/netmgr-int.h -@@ -356,7 +356,16 @@ struct isc_nmsocket { - */ - isc_quota_t *quota; - isc_quota_t *pquota; -- bool overquota; -+ -+ /*% -+ * How many connections we have not accepted due to quota? -+ * When we close a connection we need to accept a new one. -+ */ -+ int overquota; -+ /*% -+ * How many active connections we have? -+ */ -+ int conns; - - /*% - * Socket statistics -diff --git a/lib/isc/netmgr/netmgr.c b/lib/isc/netmgr/netmgr.c -index f4361575cc..26728c1ba6 100644 ---- a/lib/isc/netmgr/netmgr.c -+++ b/lib/isc/netmgr/netmgr.c -@@ -727,6 +727,11 @@ nmsocket_cleanup(isc_nmsocket_t *sock, bool dofree) - for (int i = 0; i < sock->nchildren; i++) { - if (!atomic_load(&sock->children[i].destroying)) { - nmsocket_cleanup(&sock->children[i], false); -+ if (sock->statsindex != NULL) { -+ isc__nm_decstats( -+ sock->mgr, -+ sock->statsindex[STATID_ACTIVE]); -+ } - } - } - -@@ -738,6 +743,9 @@ nmsocket_cleanup(isc_nmsocket_t *sock, bool dofree) - sock->children = NULL; - sock->nchildren = 0; - } -+ if (sock->statsindex != NULL) { -+ isc__nm_decstats(sock->mgr, sock->statsindex[STATID_ACTIVE]); -+ } - - if (sock->tcphandle != NULL) { - isc_nmhandle_unref(sock->tcphandle); -@@ -854,8 +862,6 @@ isc__nmsocket_prep_destroy(isc_nmsocket_t *sock) - if (sock->children != NULL) { - for (int i = 0; i < sock->nchildren; i++) { - atomic_store(&sock->children[i].active, false); -- isc__nm_decstats(sock->mgr, -- sock->statsindex[STATID_ACTIVE]); - } - } - -diff --git a/lib/isc/netmgr/tcp.c b/lib/isc/netmgr/tcp.c -index a83fede0d2..58ffd3c404 100644 ---- a/lib/isc/netmgr/tcp.c -+++ b/lib/isc/netmgr/tcp.c -@@ -26,12 +26,28 @@ - #include <isc/region.h> - #include <isc/result.h> - #include <isc/sockaddr.h> -+#include <isc/stdtime.h> - #include <isc/thread.h> - #include <isc/util.h> - - #include "netmgr-int.h" - #include "uv-compat.h" - -+static atomic_uint_fast32_t last_tcpquota_log = ATOMIC_VAR_INIT(0); -+ -+static bool -+can_log_tcp_quota() { -+ isc_stdtime_t now, last; -+ -+ isc_stdtime_get(&now); -+ last = atomic_exchange_relaxed(&last_tcpquota_log, now); -+ if (now != last) { -+ return (true); -+ } -+ -+ return (false); -+} -+ - static int - tcp_connect_direct(isc_nmsocket_t *sock, isc__nm_uvreq_t *req); - -@@ -668,9 +684,6 @@ read_cb(uv_stream_t *stream, ssize_t nread, const uv_buf_t *buf) - } - - isc__nm_free_uvbuf(sock, buf); -- if (sock->quota) { -- isc_quota_detach(&sock->quota); -- } - - /* - * This might happen if the inner socket is closing. It means that -@@ -699,6 +712,7 @@ accept_connection(isc_nmsocket_t *ssock) - struct sockaddr_storage ss; - isc_sockaddr_t local; - int r; -+ bool overquota = false; - - REQUIRE(VALID_NMSOCK(ssock)); - REQUIRE(ssock->tid == isc_nm_tid()); -@@ -711,10 +725,25 @@ accept_connection(isc_nmsocket_t *ssock) - - if (ssock->pquota != NULL) { - result = isc_quota_attach(ssock->pquota, "a); -+ -+ /* -+ * We share the quota between all TCP sockets. Others -+ * may have used up all the quota slots, in which case -+ * this socket could starve. So we only fail here if we -+ * already had at least one active connection on this -+ * socket. This guarantees that we'll maintain some level -+ * of service while over quota, and will resume normal -+ * service when the quota comes back down. -+ */ - if (result != ISC_R_SUCCESS) { -- isc__nm_incstats(ssock->mgr, -- ssock->statsindex[STATID_ACCEPTFAIL]); -- return (result); -+ ssock->overquota++; -+ overquota = true; -+ if (ssock->conns > 0) { -+ isc__nm_incstats( -+ ssock->mgr, -+ ssock->statsindex[STATID_ACCEPTFAIL]); -+ return (result); -+ } - } - } - -@@ -761,6 +790,7 @@ accept_connection(isc_nmsocket_t *ssock) - } - - isc_nmsocket_attach(ssock, &csock->server); -+ ssock->conns++; - - handle = isc__nmhandle_get(csock, NULL, &local); - -@@ -779,6 +809,9 @@ error: - if (csock->quota != NULL) { - isc_quota_detach(&csock->quota); - } -+ if (overquota) { -+ ssock->overquota--; -+ } - /* We need to detach it properly to make sure uv_close is called. */ - isc_nmsocket_detach(&csock); - return (result); -@@ -793,14 +826,14 @@ tcp_connection_cb(uv_stream_t *server, int status) - UNUSED(status); - - result = accept_connection(ssock); -- if (result != ISC_R_SUCCESS) { -- if (result == ISC_R_QUOTA || result == ISC_R_SOFTQUOTA) { -- ssock->overquota = true; -+ if (result != ISC_R_SUCCESS && result != ISC_R_NOCONN) { -+ if ((result != ISC_R_QUOTA && result != ISC_R_SOFTQUOTA) || -+ can_log_tcp_quota()) { -+ isc_log_write(isc_lctx, ISC_LOGCATEGORY_GENERAL, -+ ISC_LOGMODULE_NETMGR, ISC_LOG_ERROR, -+ "TCP connection failed: %s", -+ isc_result_totext(result)); - } -- isc_log_write(isc_lctx, ISC_LOGCATEGORY_GENERAL, -- ISC_LOGMODULE_NETMGR, ISC_LOG_ERROR, -- "TCP connection failed: %s", -- isc_result_totext(result)); - } - } - -@@ -936,17 +969,27 @@ tcp_close_direct(isc_nmsocket_t *sock) - REQUIRE(VALID_NMSOCK(sock)); - REQUIRE(sock->tid == isc_nm_tid()); - REQUIRE(sock->type == isc_nm_tcpsocket); -+ isc_nmsocket_t *ssock = sock->server; - - if (sock->quota != NULL) { -- isc_nmsocket_t *ssock = sock->server; -- - isc_quota_detach(&sock->quota); -- -- if (ssock->overquota) { -+ } -+ if (ssock != NULL) { -+ ssock->conns--; -+ while (ssock->conns == 0 && ssock->overquota > 0) { -+ ssock->overquota--; - isc_result_t result = accept_connection(ssock); -- if (result != ISC_R_QUOTA && -- result != ISC_R_SOFTQUOTA) { -- ssock->overquota = false; -+ if (result == ISC_R_SUCCESS || result == ISC_R_NOCONN) { -+ continue; -+ } -+ if ((result != ISC_R_QUOTA && -+ result != ISC_R_SOFTQUOTA) || -+ can_log_tcp_quota()) { -+ isc_log_write(isc_lctx, ISC_LOGCATEGORY_GENERAL, -+ ISC_LOGMODULE_NETMGR, -+ ISC_LOG_ERROR, -+ "TCP connection failed: %s", -+ isc_result_totext(result)); - } - } - } -diff --git a/lib/isc/netmgr/tcpdns.c b/lib/isc/netmgr/tcpdns.c -index e384b73be9..f89eb359af 100644 ---- a/lib/isc/netmgr/tcpdns.c -+++ b/lib/isc/netmgr/tcpdns.c -@@ -43,6 +43,9 @@ dnslisten_readcb(isc_nmhandle_t *handle, isc_region_t *region, void *arg); - static void - resume_processing(void *arg); - -+static void -+tcpdns_close_direct(isc_nmsocket_t *sock); -+ - static inline size_t - dnslen(unsigned char *base) - { -@@ -82,7 +85,6 @@ timer_close_cb(uv_handle_t *handle) - { - isc_nmsocket_t *sock = (isc_nmsocket_t *)uv_handle_get_data(handle); - INSIST(VALID_NMSOCK(sock)); -- atomic_store(&sock->closed, true); - isc_nmsocket_detach(&sock); - } - -@@ -94,9 +96,7 @@ dnstcp_readtimeout(uv_timer_t *timer) - - REQUIRE(VALID_NMSOCK(sock)); - REQUIRE(sock->tid == isc_nm_tid()); -- -- isc_nmsocket_detach(&sock->outer); -- uv_close((uv_handle_t *)&sock->timer, timer_close_cb); -+ tcpdns_close_direct(sock); - } - - /* -@@ -252,7 +252,9 @@ dnslisten_readcb(isc_nmhandle_t *handle, isc_region_t *region, void *arg) - * We have a packet: stop timeout timers - */ - atomic_store(&dnssock->outer->processing, true); -- uv_timer_stop(&dnssock->timer); -+ if (dnssock->timer_initialized) { -+ uv_timer_stop(&dnssock->timer); -+ } - - if (atomic_load(&dnssock->sequential)) { - /* -@@ -399,8 +401,10 @@ resume_processing(void *arg) - if (atomic_load(&sock->ah) == 0) { - /* Nothing is active; sockets can timeout now */ - atomic_store(&sock->outer->processing, false); -- uv_timer_start(&sock->timer, dnstcp_readtimeout, -- sock->read_timeout, 0); -+ if (sock->timer_initialized) { -+ uv_timer_start(&sock->timer, dnstcp_readtimeout, -+ sock->read_timeout, 0); -+ } - } - - /* -@@ -413,7 +417,9 @@ resume_processing(void *arg) - result = processbuffer(sock, &handle); - if (result == ISC_R_SUCCESS) { - atomic_store(&sock->outer->processing, true); -- uv_timer_stop(&sock->timer); -+ if (sock->timer_initialized) { -+ uv_timer_stop(&sock->timer); -+ } - isc_nmhandle_unref(handle); - } else if (sock->outer != NULL) { - isc_nm_resumeread(sock->outer); -@@ -441,7 +447,9 @@ resume_processing(void *arg) - break; - } - -- uv_timer_stop(&sock->timer); -+ if (sock->timer_initialized) { -+ uv_timer_stop(&sock->timer); -+ } - atomic_store(&sock->outer->processing, true); - isc_nmhandle_unref(dnshandle); - } while (atomic_load(&sock->ah) < TCPDNS_CLIENTS_PER_CONN); -@@ -507,18 +515,29 @@ static void - tcpdns_close_direct(isc_nmsocket_t *sock) - { - REQUIRE(sock->tid == isc_nm_tid()); -- if (sock->outer != NULL) { -- sock->outer->rcb.recv = NULL; -- isc_nmsocket_detach(&sock->outer); -- } -- if (sock->listener != NULL) { -- isc_nmsocket_detach(&sock->listener); -- } - /* We don't need atomics here, it's all in single network thread */ - if (sock->timer_initialized) { -+ /* -+ * We need to fire the timer callback to clean it up, -+ * it will then call us again (via detach) so that we -+ * can finally close the socket. -+ */ - sock->timer_initialized = false; - uv_timer_stop(&sock->timer); - uv_close((uv_handle_t *)&sock->timer, timer_close_cb); -+ } else { -+ /* -+ * At this point we're certain that there are no external -+ * references, we can close everything. -+ */ -+ if (sock->outer != NULL) { -+ sock->outer->rcb.recv = NULL; -+ isc_nmsocket_detach(&sock->outer); -+ } -+ if (sock->listener != NULL) { -+ isc_nmsocket_detach(&sock->listener); -+ } -+ atomic_store(&sock->closed, true); - } - } - -diff --git a/lib/isc/netmgr/uverr2result.c b/lib/isc/netmgr/uverr2result.c -index b6a8065e3e..9781454ca6 100644 ---- a/lib/isc/netmgr/uverr2result.c -+++ b/lib/isc/netmgr/uverr2result.c -@@ -38,6 +38,8 @@ isc___nm_uverr2result(int uverr, bool dolog, const char *file, - return (ISC_R_INVALIDFILE); - case UV_ENOENT: - return (ISC_R_FILENOTFOUND); -+ case UV_EAGAIN: -+ return (ISC_R_NOCONN); - case UV_EACCES: - case UV_EPERM: - return (ISC_R_NOPERM); diff --git a/dns/bind916/files/empty.db b/dns/bind916/files/empty.db deleted file mode 100644 index 30870e74342f..000000000000 --- a/dns/bind916/files/empty.db +++ /dev/null @@ -1,8 +0,0 @@ -$TTL 3h -@ SOA @ nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - -@ NS @ - -; Silence a BIND warning -@ A 127.0.0.1 diff --git a/dns/bind916/files/extrapatch-bind-min-override-ttl b/dns/bind916/files/extrapatch-bind-min-override-ttl deleted file mode 100644 index f6f2dc707250..000000000000 --- a/dns/bind916/files/extrapatch-bind-min-override-ttl +++ /dev/null @@ -1,61 +0,0 @@ -Add the override-cache-ttl feature. - ---- bin/named/config.c.orig 2024-04-03 12:48:29 UTC -+++ bin/named/config.c -@@ -177,6 +177,7 @@ options {\n\ - notify-source *;\n\ - notify-source-v6 *;\n\ - nsec3-test-zone no;\n\ -+ override-cache-ttl 0; /* do not override */\n\ - parental-source *;\n\ - parental-source-v6 *;\n\ - provide-ixfr true;\n\ ---- bin/named/server.c.orig 2024-04-03 12:48:29 UTC -+++ bin/named/server.c -@@ -4449,6 +4449,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl - } - - obj = NULL; -+ result = named_config_get(maps, "override-cache-ttl", &obj); -+ INSIST(result == ISC_R_SUCCESS); -+ view->overridecachettl = cfg_obj_asduration(obj); -+ -+ obj = NULL; - result = named_config_get(maps, "max-cache-ttl", &obj); - INSIST(result == ISC_R_SUCCESS); - view->maxcachettl = cfg_obj_asduration(obj); ---- lib/dns/include/dns/view.h.orig 2024-04-03 12:48:29 UTC -+++ lib/dns/include/dns/view.h -@@ -154,6 +154,7 @@ struct dns_view { - bool requestnsid; - bool sendcookie; - dns_ttl_t maxcachettl; -+ dns_ttl_t overridecachettl; - dns_ttl_t maxncachettl; - dns_ttl_t mincachettl; - dns_ttl_t minncachettl; ---- lib/dns/resolver.c.orig 2024-04-03 12:48:29 UTC -+++ lib/dns/resolver.c -@@ -6494,6 +6494,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes - } - - /* -+ * Enforce the configure cache TTL override. -+ */ -+ if (res->view->overridecachettl) -+ rdataset->ttl = res->view->overridecachettl; -+ -+ /* - * Enforce the configure maximum cache TTL. - */ - if (rdataset->ttl > res->view->maxcachettl) { ---- lib/isccfg/namedconf.c.orig 2024-04-03 12:48:29 UTC -+++ lib/isccfg/namedconf.c -@@ -2054,6 +2054,7 @@ static cfg_clausedef_t view_clauses[] = { - #endif /* ifdef HAVE_LMDB */ - { "max-acache-size", &cfg_type_sizenodefault, CFG_CLAUSEFLAG_OBSOLETE }, - { "max-cache-size", &cfg_type_sizeorpercent, 0 }, -+ { "override-cache-ttl", &cfg_type_duration, 0 }, - { "max-cache-ttl", &cfg_type_duration, 0 }, - { "max-clients-per-query", &cfg_type_uint32, 0 }, - { "max-ncache-ttl", &cfg_type_duration, 0 }, diff --git a/dns/bind916/files/localhost-forward.db b/dns/bind916/files/localhost-forward.db deleted file mode 100644 index fdd2e9ce4bee..000000000000 --- a/dns/bind916/files/localhost-forward.db +++ /dev/null @@ -1,8 +0,0 @@ -$TTL 3h -localhost. SOA localhost. nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - - NS localhost. - - A 127.0.0.1 - AAAA ::1 diff --git a/dns/bind916/files/localhost-reverse.db b/dns/bind916/files/localhost-reverse.db deleted file mode 100644 index 376e94fa94a8..000000000000 --- a/dns/bind916/files/localhost-reverse.db +++ /dev/null @@ -1,10 +0,0 @@ -$TTL 3h -@ SOA localhost. nobody.localhost. 42 1d 12h 1w 3h - ; Serial, Refresh, Retry, Expire, Neg. cache TTL - - NS localhost. - -1.0.0 PTR localhost. - -1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost. - diff --git a/dns/bind916/files/named.conf.in b/dns/bind916/files/named.conf.in deleted file mode 100644 index c3a367fd23ee..000000000000 --- a/dns/bind916/files/named.conf.in +++ /dev/null @@ -1,378 +0,0 @@ -// Refer to the named.conf(5) and named(8) man pages, and the documentation -// in /usr/local/share/doc/bind for more details. -// -// If you are going to set up an authoritative server, make sure you -// understand the hairy details of how DNS works. Even with -// simple mistakes, you can break connectivity for affected parties, -// or cause huge amounts of useless Internet traffic. - -options { - // All file and path names are relative to the chroot directory, - // if any, and should be fully qualified. - directory "%%ETCDIR%%/working"; - pid-file "/var/run/named/pid"; - dump-file "/var/dump/named_dump.db"; - statistics-file "/var/stats/named.stats"; - -// If named is being used only as a local resolver, this is a safe default. -// For named to be accessible to the network, comment this option, specify -// the proper IP address, or delete this option. - listen-on { 127.0.0.1; }; - -// If you have IPv6 enabled on this system, uncomment this option for -// use as a local resolver. To give access to the network, specify -// an IPv6 address, or the keyword "any". -// listen-on-v6 { ::1; }; - -// These zones are already covered by the empty zones listed below. -// If you remove the related empty zones below, comment these lines out. - disable-empty-zone "255.255.255.255.IN-ADDR.ARPA"; - disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA"; - disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA"; - -// If you've got a DNS server around at your upstream provider, enter -// its IP address here, and enable the line below. This will make you -// benefit from its cache, thus reduce overall DNS traffic in the Internet. -/* - forwarders { - 127.0.0.1; - }; -*/ - -// If the 'forwarders' clause is not empty the default is to 'forward first' -// which will fall back to sending a query from your local server if the name -// servers in 'forwarders' do not have the answer. Alternatively you can -// force your name server to never initiate queries of its own by enabling the -// following line: -// forward only; - -// If you wish to have forwarding configured automatically based on -// the entries in /etc/resolv.conf, uncomment the following line and -// set named_auto_forward=yes in /etc/rc.conf. You can also enable -// named_auto_forward_only (the effect of which is described above). -// include "%%ETCDIR%%/auto_forward.conf"; - - /* - Modern versions of BIND use a random UDP port for each outgoing - query by default in order to dramatically reduce the possibility - of cache poisoning. All users are strongly encouraged to utilize - this feature, and to configure their firewalls to accommodate it. - - AS A LAST RESORT in order to get around a restrictive firewall - policy you can try enabling the option below. Use of this option - will significantly reduce your ability to withstand cache poisoning - attacks, and should be avoided if at all possible. - - Replace NNNNN in the example with a number between 49160 and 65530. - */ - // query-source address * port NNNNN; -}; - -// If you enable a local name server, don't forget to enter 127.0.0.1 -// first in your /etc/resolv.conf so this server will be queried. -// Also, make sure to enable it in /etc/rc.conf. - -// The traditional root hints mechanism. Use this, OR the slave zones below. -zone "." { type hint; file "%%ETCDIR%%/named.root"; }; - -/* Slaving the following zones from the root name servers has some - significant advantages: - 1. Faster local resolution for your users - 2. No spurious traffic will be sent from your network to the roots - 3. Greater resilience to any potential root server failure/DDoS - - On the other hand, this method requires more monitoring than the - hints file to be sure that an unexpected failure mode has not - incapacitated your server. Name servers that are serving a lot - of clients will benefit more from this approach than individual - hosts. Use with caution. - - To use this mechanism, uncomment the entries below, and comment - the hint zone above. - - As documented at http://dns.icann.org/services/axfr/ these zones: - "." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and a few others - are available for AXFR from these servers on IPv4 and IPv6: - xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org -*/ -/* -zone "." { - type slave; - file "%%ETCDIR%%/slave/root.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "arpa" { - type slave; - file "%%ETCDIR%%/slave/arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "in-addr.arpa" { - type slave; - file "%%ETCDIR%%/slave/in-addr.arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -zone "ip6.arpa" { - type slave; - file "%%ETCDIR%%/slave/ip6.arpa.slave"; - masters { - 192.0.32.132; // lax.xfr.dns.icann.org - 2620:0:2d0:202::132; // lax.xfr.dns.icann.org - 192.0.47.132; // iad.xfr.dns.icann.org - 2620:0:2830:202::132; // iad.xfr.dns.icann.org - }; - notify no; -}; -*/ - -/* Serving the following zones locally will prevent any queries - for these zones leaving your network and going to the root - name servers. This has two significant advantages: - 1. Faster local resolution for your users - 2. No spurious traffic will be sent from your network to the roots -*/ -// RFCs 1912, 5735 and 6303 (and BCP 32 for localhost) -zone "localhost" { type master; file "%%ETCDIR%%/master/localhost-forward.db"; }; -zone "127.in-addr.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; }; -zone "255.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// RFC 1912-style zone for IPv6 localhost address (RFC 6303) -zone "0.ip6.arpa" { type master; file "%%ETCDIR%%/master/localhost-reverse.db"; }; - -// "This" Network (RFCs 1912, 5735 and 6303) -zone "0.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Private Use Networks (RFCs 1918, 5735 and 6303) -zone "10.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "16.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "17.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "18.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "19.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "20.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "21.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "22.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "23.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "24.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "25.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "26.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "27.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "28.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "29.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "30.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "31.172.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "168.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Shared Address Space (RFC 6598) -zone "64.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "65.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "66.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "67.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "68.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "69.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "70.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "71.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "72.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "73.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "74.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "75.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "76.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "77.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "78.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "79.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "80.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "81.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "82.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "83.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "84.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "85.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "86.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "87.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "88.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "89.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "90.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "91.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "92.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "93.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "94.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "95.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "96.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "97.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "98.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "99.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "100.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "101.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "102.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "103.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "104.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "105.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "106.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "107.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "108.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "109.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "110.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "111.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "112.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "113.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "114.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "115.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "116.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "117.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "118.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "119.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "120.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "121.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "122.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "123.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "124.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "125.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "126.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "127.100.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Link-local/APIPA (RFCs 3927, 5735 and 6303) -zone "254.169.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IETF protocol assignments (RFCs 5735 and 5736) -zone "0.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303) -zone "2.0.192.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "100.51.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "113.0.203.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Example Range for Documentation (RFCs 3849 and 6303) -zone "8.b.d.0.1.0.0.2.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// Router Benchmark Testing (RFCs 2544 and 5735) -zone "18.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "19.198.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IANA Reserved - Old Class E Space (RFC 5735) -zone "240.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "241.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "242.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "243.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "244.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "245.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "246.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "247.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "248.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "249.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "250.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "251.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "252.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "253.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "254.in-addr.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Unassigned Addresses (RFC 4291) -zone "1.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "8.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "c.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "e.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "0.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "1.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "2.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "8.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "0.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "1.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "2.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "3.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "4.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "5.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "6.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "7.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 ULA (RFCs 4193 and 6303) -zone "c.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Link Local (RFCs 4291 and 6303) -zone "8.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "9.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "a.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "b.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303) -zone "c.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "d.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "e.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; -zone "f.e.f.ip6.arpa" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// IP6.INT is Deprecated (RFC 4159) -zone "ip6.int" { type master; file "%%ETCDIR%%/master/empty.db"; }; - -// NB: Do not use the IP addresses below, they are faked, and only -// serve demonstration/documentation purposes! -// -// Example slave zone config entries. It can be convenient to become -// a slave at least for the zone your own domain is in. Ask -// your network administrator for the IP address of the responsible -// master name server. -// -// Do not forget to include the reverse lookup zone! -// This is named after the first bytes of the IP address, in reverse -// order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6. -// -// Before starting to set up a master zone, make sure you fully -// understand how DNS and BIND work. There are sometimes -// non-obvious pitfalls. Setting up a slave zone is usually simpler. -// -// NB: Don't blindly enable the examples below. :-) Use actual names -// and addresses instead. - -/* An example dynamic zone -key "exampleorgkey" { - algorithm hmac-md5; - secret "sf87HJqjkqh8ac87a02lla=="; -}; -zone "example.org" { - type master; - allow-update { - key "exampleorgkey"; - }; - file "%%ETCDIR%%/dynamic/example.org"; -}; -*/ - -/* Example of a slave reverse zone -zone "1.168.192.in-addr.arpa" { - type slave; - file "%%ETCDIR%%/slave/1.168.192.in-addr.arpa"; - masters { - 192.168.1.1; - }; -}; -*/ diff --git a/dns/bind916/files/named.in b/dns/bind916/files/named.in deleted file mode 100644 index 6e225efe0733..000000000000 --- a/dns/bind916/files/named.in +++ /dev/null @@ -1,464 +0,0 @@ -#!/bin/sh - -# PROVIDE: named -# REQUIRE: %%NAMED_REQUIRE%% -# BEFORE: %%NAMED_BEFORE%% -# KEYWORD: shutdown - -# -# Add the following lines to /etc/rc.conf to enable BIND: -# named_enable (bool): Run named, the DNS server (or NO). -# named_program (str): Path to named, if you want a different one. -# named_conf (str): Path to the configuration file -# named_flags (str): Use this for flags OTHER than -u and -c -# named_uid (str): User to run named as -# named_chrootdir (str): Chroot directory (or "" not to auto-chroot it) -# Historically, was /var/named -# named_chroot_autoupdate (bool): Automatically install/update chrooted -# components of named. -# named_symlink_enable (bool): Symlink the chrooted pid file -# named_wait (bool): Wait for working name service before exiting -# named_wait_host (str): Hostname to check if named_wait is enabled -# named_auto_forward (str): Set up forwarders from /etc/resolv.conf -# named_auto_forward_only (str): Do "forward only" instead of "forward first" -%%NATIVE_PKCS11%%# named_pkcs11_engine (str): Path to the PKCS#11 library to use. -# - -. /etc/rc.subr - -name=named -desc="named BIND startup script" -rcvar=named_enable - -load_rc_config ${name} - -extra_commands=reload - -start_precmd=named_prestart -start_postcmd=named_poststart -reload_cmd=named_reload -stop_cmd=named_stop -stop_postcmd=named_poststop - -named_enable=${named_enable:-"NO"} -named_program=${named_program:-"%%PREFIX%%/sbin/named"} -named_conf=${named_conf:-"%%ETCDIR%%/named.conf"} -named_flags=${named_flags:-""} -named_uid=${named_uid:-"bind"} -named_chrootdir=${named_chrootdir:-""} -named_chroot_autoupdate=${named_chroot_autoupdate:-"YES"} -named_symlink_enable=${named_symlink_enable:-"YES"} -named_wait=${named_wait:-"NO"} -named_wait_host=${named_wait_host:-"localhost"} -named_auto_forward=${named_auto_forward:-"NO"} -named_auto_forward_only=${named_auto_forward_only:-"NO"} -%%NATIVE_PKCS11%%named_pkcs11_engine=${named_pkcs11_engine:-""} - -# Not configuration variables but having them here keeps rclint happy -required_dirs="${named_chrootdir}" -_named_confdirroot="${named_conf%/*}" -_named_confdir="${named_chrootdir}${_named_confdirroot}" -_named_program_root="${named_program%/sbin/named}" -_openssl_engines="%%ENGINES%%" - -# Needed if named.conf and rndc.conf are moved or if rndc.conf is used -rndc_conf=${rndc_conf:-"$_named_confdir/rndc.conf"} -rndc_key=${rndc_key:-"$_named_confdir/rndc.key"} - -# If running in a chroot cage, ensure that the appropriate files -# exist inside the cage, as well as helper symlinks into the cage -# from outside. -# -# As this is called after the is_running and required_dir checks -# are made in run_rc_command(), we can safely assume ${named_chrootdir} -# exists and named isn't running at this point (unless forcestart -# is used). -# -chroot_autoupdate() -{ - local file - - # If it's the first time around, fiddle with things and move the - # current configuration to the chroot. - if [ -d ${_named_confdirroot} -a ! -d ${_named_confdir} ]; then - warn "named chroot: Moving current configuration in the chroot!" - install -d ${_named_confdir%/*} - mv ${_named_confdirroot} ${_named_confdir} - fi - - # Create (or update) the chroot directory structure - # - if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.dist ]; then - mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.dist \ - -p ${named_chrootdir} - else - warn "%%PREFIX%%/etc/mtree/BIND.chroot.dist missing," - warn "${named_chrootdir} directory structure not updated" - fi - if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.local.dist ]; then - mkdir -p ${named_chrootdir}%%PREFIX%% - mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.local.dist \ - -p ${named_chrootdir}%%PREFIX%% - else - warn "%%PREFIX%%/etc/mtree/BIND.chroot.local.dist missing," - warn "${named_chrootdir}%%PREFIX%% directory structure not updated" - fi - - # Create (or update) the configuration directory symlink - # - if [ ! -L "${_named_confdirroot}" ]; then - if [ -d "${_named_confdirroot}" ]; then - warn "named chroot: ${_named_confdirroot} is a directory!" - elif [ -e "${_named_confdirroot}" ]; then - warn "named chroot: ${_named_confdirroot} exists!" - else - ln -s ${_named_confdir} ${_named_confdirroot} - fi - else - # Make sure it points to the right place. - ln -shf ${_named_confdir} ${_named_confdirroot} - fi - - # Mount a devfs in the chroot directory if needed - # - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then - umount ${named_chrootdir}/dev 2>/dev/null - devfs_domount ${named_chrootdir}/dev devfsrules_hide_all - devfs -m ${named_chrootdir}/dev rule apply path null unhide - devfs -m ${named_chrootdir}/dev rule apply path random unhide - else - if [ -c ${named_chrootdir}/dev/null -a \ - -c ${named_chrootdir}/dev/random ]; then - info "named chroot: using pre-mounted devfs." - else - err 1 "named chroot: devfs cannot be mounted from " \ - "within a jail. Thus a chrooted named cannot " \ - "be run from within a jail. Either mount the " \ - "devfs with null and random from the host, or " \ - "run named without chrooting it, set " \ - "named_chrootdir=\"\" in /etc/rc.conf." - fi - fi - - # The OpenSSL engines and BIND9 plugins should be present in the - # chroot, named loads them after chrooting. - null_mount_or_copy ${_openssl_engines} - null_mount_or_copy %%PREFIX%%/lib/named - - # Copy and/or update key files to the chroot /etc - # - for file in localtime protocols services; do - if [ -r /etc/${file} ] && \ - ! cmp -s /etc/${file} "${named_chrootdir}/etc/${file}"; then - cp -p /etc/${file} "${named_chrootdir}/etc/${file}" - fi - done -} - -# Make symlinks to the correct pid file -# -make_symlinks() -{ - checkyesno named_symlink_enable && - ln -fs "${named_chrootdir}${pidfile}" ${pidfile} && - ln -fs "${named_chrootdir}${sessionkeyfile}" ${sessionkeyfile} -} - -named_poststart() -{ - make_symlinks - - if checkyesno named_wait; then - until ${_named_program_root}/bin/host ${named_wait_host} >/dev/null 2>&1; do - echo " Waiting for nameserver to resolve ${named_wait_host}" - sleep 1 - done - fi -} - -named_reload() -{ - # This is a one line function, but ${named_program} is not defined early - # enough to be there when the reload_cmd variable is defined up there. - rndc reload -} - -find_pidfile() -{ - if get_pidfile_from_conf pid-file ${named_conf}; then - pidfile="${_pidfile_from_conf}" - else - pidfile="/var/run/named/pid" - fi -} - -find_sessionkeyfile() -{ - if get_pidfile_from_conf session-keyfile ${named_conf}; then - sessionkeyfile="${_pidfile_from_conf}" - else - sessionkeyfile="/var/run/named/session.key" - fi -} - -named_stop() -{ - find_pidfile - - # This duplicates an undesirably large amount of code from the stop - # routine in rc.subr in order to use rndc to shut down the process, - # and to give it a second chance in case rndc fails. - rc_pid=$(check_pidfile ${pidfile} ${command}) - if [ -z "${rc_pid}" ]; then - [ -n "${rc_fast}" ] && return 0 - _run_rc_notrunning - return 1 - fi - echo 'Stopping named.' - if rndc stop; then - wait_for_pids ${rc_pid} - else - echo -n 'rndc failed, trying kill: ' - kill -TERM ${rc_pid} - wait_for_pids ${rc_pid} - fi -} - -named_poststop() -{ - if [ -n "${named_chrootdir}" ]; then - null_umount %%PREFIX%%/lib/named - null_umount ${_openssl_engines} - if [ -c ${named_chrootdir}/dev/null ]; then - # unmount /dev - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then - umount ${named_chrootdir}/dev 2>/dev/null || true - else - warn "named chroot:" \ - "cannot unmount devfs from inside jail!" - fi - fi - fi -} - -can_mount() -{ - local kld - kld=$1 - if ! load_kld $kld; then - return 1 - fi - if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ] || - [ `${SYSCTL_N} security.jail.mount_allowed` -eq 1 ] || - [ `${SYSCTL_N} security.jail.mount_${kld}_allowed` -eq 1 ] ; then - return 0 - fi - return 1 -} - -null_mount_or_copy() -{ - local dir - dir=$1 - - if [ -d ${dir} ]; then - mkdir -p ${named_chrootdir}${dir} - if can_mount nullfs ; then - mount -t nullfs ${dir} ${named_chrootdir}${dir} - else - warn "named chroot: cannot nullfs mount OpenSSL" \ - "engines into the chroot, will copy the shared" \ - "libraries instead." - cp -f ${dir}/*.so ${named_chrootdir}${dir} - fi - fi -} - -null_umount() -{ - local dir - dir=$1 - - if [ -d ${dir} ]; then - if can_mount nullfs; then - umount ${named_chrootdir}${dir} - fi - fi -} - -create_file() -{ - if [ -e "$1" ]; then - unlink $1 - fi - install -o root -g wheel -m 0644 /dev/null $1 -} - -rndc() -{ - if [ -z "${rndc_flags}" ]; then - if [ -s "${rndc_conf}" ] ; then - rndc_flags="-c ${rndc_conf}" - elif [ -s "${rndc_key}" ] ; then - rndc_flags="-k ${rndc_key}" - else - rndc_flags="" - fi - fi - - ${_named_program_root}/sbin/rndc ${rndc_flags} "$@" -} - -named_prestart() -{ - # Is the user using a sandbox? - # - if [ -n "${named_chrootdir}" ]; then - rc_flags="${rc_flags} -t ${named_chrootdir}" - checkyesno named_chroot_autoupdate && chroot_autoupdate - - case "${altlog_proglist}" in - *named*) - ;; - *) - warn 'Using chroot without setting altlog_proglist, logging may not' - warn 'work correctly. Run sysrc altlog_proglist+=named' - ;; - esac - else - named_symlink_enable=NO - fi - - find_pidfile - find_sessionkeyfile - - if [ -n "${named_pidfile}" ]; then - warn 'named_pidfile: now determined from the conf file' - fi - - if [ -n "${named_sessionkeyfile}" ]; then - warn 'named_sessionkeyfile: now determined from the conf file' - fi - - piddir=`/usr/bin/dirname ${pidfile}` - if [ ! -d ${piddir} ]; then - install -d -o ${named_uid} -g ${named_uid} ${piddir} - fi - - sessionkeydir=`/usr/bin/dirname ${sessionkeyfile}` - if [ ! -d ${sessionkeydir} ]; then - install -d -o ${named_uid} -g ${named_uid} ${sessionkeydir} - fi - - command_args="-u ${named_uid:=root} -c ${named_conf} ${command_args}" - -%%NATIVE_PKCS11%% if [ -z "${named_pkcs11_engine}"]; then -%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine has to be set to the PKCS#11 engine's library you want to use" -%%NATIVE_PKCS11%% elif [ ! -f ${named_pkcs11_engine} ]; then -%%NATIVE_PKCS11%% err 3 "named_pkcs11_engine the PKCS#11 engine's library you want to use doesn't exist" -%%NATIVE_PKCS11%% else -%%NATIVE_PKCS11%% mkdir -p ${named_chrootdir}${named_pkcs11_engine%/*} -%%NATIVE_PKCS11%% cp -p ${named_pkcs11_engine} ${named_chrootdir}${named_pkcs11_engine} -%%NATIVE_PKCS11%% command_args="-E ${named_pkcs11_engine} ${command_args}" -%%NATIVE_PKCS11%% fi - - local line nsip firstns - - # Create an rndc.key file for the user if none exists - # - confgen_command="${_named_program_root}/sbin/rndc-confgen -a -b256 -u ${named_uid} \ - -c ${_named_confdir}/rndc.key" - if [ -s "${_named_confdir}/rndc.conf" ]; then - unset confgen_command - fi - if [ -s "${_named_confdir}/rndc.key" ]; then - case `stat -f%Su ${_named_confdir}/rndc.key` in - root|${named_uid}) ;; - *) ${confgen_command} ;; - esac - else - ${confgen_command} - fi - - local checkconf - - checkconf="${_named_program_root}/sbin/named-checkconf" - if ! checkyesno named_chroot_autoupdate && [ -n "${named_chrootdir}" ]; then - checkconf="${checkconf} -t ${named_chrootdir}" - fi - - # Create a forwarder configuration based on /etc/resolv.conf - if checkyesno named_auto_forward; then - if [ ! -s /etc/resolv.conf ]; then - warn "named_auto_forward enabled, but no /etc/resolv.conf" - - # Empty the file in case it is included in named.conf - [ -s "${_named_confdir}/auto_forward.conf" ] && - create_file ${_named_confdir}/auto_forward.conf - - ${checkconf} ${named_conf} || - err 3 'named-checkconf for ${named_conf} failed' - return - fi - - create_file /var/run/naf-resolv.conf - create_file /var/run/auto_forward.conf - - echo ' forwarders {' > /var/run/auto_forward.conf - - while read line; do - case "${line}" in - 'nameserver '*|'nameserver '*) - nsip=${line##nameserver[ ]} - - if [ -z "${firstns}" ]; then - if [ ! "${nsip}" = '127.0.0.1' ]; then - echo 'nameserver 127.0.0.1' - echo " ${nsip};" >> /var/run/auto_forward.conf - fi - - firstns=1 - else - [ "${nsip}" = '127.0.0.1' ] && continue - echo " ${nsip};" >> /var/run/auto_forward.conf - fi - ;; - esac - - echo ${line} - done < /etc/resolv.conf > /var/run/naf-resolv.conf - - echo ' };' >> /var/run/auto_forward.conf - echo '' >> /var/run/auto_forward.conf - if checkyesno named_auto_forward_only; then - echo " forward only;" >> /var/run/auto_forward.conf - else - echo " forward first;" >> /var/run/auto_forward.conf - fi - - if cmp -s /etc/resolv.conf /var/run/naf-resolv.conf; then - unlink /var/run/naf-resolv.conf - else - [ -e /etc/resolv.conf ] && unlink /etc/resolv.conf - mv /var/run/naf-resolv.conf /etc/resolv.conf - fi - - if cmp -s ${_named_confdir}/auto_forward.conf \ - /var/run/auto_forward.conf; then - unlink /var/run/auto_forward.conf - else - [ -e "${_named_confdir}/auto_forward.conf" ] && - unlink ${_named_confdir}/auto_forward.conf - mv /var/run/auto_forward.conf \ - ${_named_confdir}/auto_forward.conf - fi - else - # Empty the file in case it is included in named.conf - [ -s "${_named_confdir}/auto_forward.conf" ] && - create_file ${_named_confdir}/auto_forward.conf - fi - - ${checkconf} ${named_conf} || err 3 "named-checkconf for ${named_conf} failed" -} - -run_rc_command "$1" diff --git a/dns/bind916/files/named.root b/dns/bind916/files/named.root deleted file mode 100644 index 77cf1e35c5bb..000000000000 --- a/dns/bind916/files/named.root +++ /dev/null @@ -1,92 +0,0 @@ -; This file holds the information on root name servers needed to -; initialize cache of Internet domain name servers -; (e.g. reference this file in the "cache . <file>" -; configuration file of BIND domain name servers). -; -; This file is made available by InterNIC -; under anonymous FTP as -; file /domain/named.cache -; on server FTP.INTERNIC.NET -; -OR- RS.INTERNIC.NET -; -; last update: January 24, 2024 -; related version of root zone: 2024012401 -; -; FORMERLY NS.INTERNIC.NET -; -. 3600000 NS A.ROOT-SERVERS.NET. -A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4 -A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30 -; -; FORMERLY NS1.ISI.EDU -; -. 3600000 NS B.ROOT-SERVERS.NET. -B.ROOT-SERVERS.NET. 3600000 A 170.247.170.2 -B.ROOT-SERVERS.NET. 3600000 AAAA 2801:1b8:10::b -; -; FORMERLY C.PSI.NET -; -. 3600000 NS C.ROOT-SERVERS.NET. -C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12 -C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c -; -; FORMERLY TERP.UMD.EDU -; -. 3600000 NS D.ROOT-SERVERS.NET. -D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13 -D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d -; -; FORMERLY NS.NASA.GOV -; -. 3600000 NS E.ROOT-SERVERS.NET. -E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10 -E.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:a8::e -; -; FORMERLY NS.ISC.ORG -; -. 3600000 NS F.ROOT-SERVERS.NET. -F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241 -F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f -; -; FORMERLY NS.NIC.DDN.MIL -; -. 3600000 NS G.ROOT-SERVERS.NET. -G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4 -G.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:12::d0d -; -; FORMERLY AOS.ARL.ARMY.MIL -; -. 3600000 NS H.ROOT-SERVERS.NET. -H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53 -H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53 -; -; FORMERLY NIC.NORDU.NET -; -. 3600000 NS I.ROOT-SERVERS.NET. -I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17 -I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53 -; -; OPERATED BY VERISIGN, INC. -; -. 3600000 NS J.ROOT-SERVERS.NET. -J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30 -J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30 -; -; OPERATED BY RIPE NCC -; -. 3600000 NS K.ROOT-SERVERS.NET. -K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129 -K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1 -; -; OPERATED BY ICANN -; -. 3600000 NS L.ROOT-SERVERS.NET. -L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42 -L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:9f::42 -; -; OPERATED BY WIDE -; -. 3600000 NS M.ROOT-SERVERS.NET. -M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33 -M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35 -; End of file diff --git a/dns/bind916/files/patch-bin_named_include_named_globals.h b/dns/bind916/files/patch-bin_named_include_named_globals.h deleted file mode 100644 index 69cafb3c70fa..000000000000 --- a/dns/bind916/files/patch-bin_named_include_named_globals.h +++ /dev/null @@ -1,13 +0,0 @@ -We reference the pid file as being run/named/pid everywere else. - ---- bin/named/include/named/globals.h.orig 2022-01-12 13:50:10 UTC -+++ bin/named/include/named/globals.h -@@ -129,7 +129,7 @@ EXTERN bool named_g_forcelock INIT(false); - - #if NAMED_RUN_PID_DIR - EXTERN const char *named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR "/run/named/" -- "named.pid"); -+ "pid"); - #else /* if NAMED_RUN_PID_DIR */ - EXTERN const char *named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR "/run/" - "named.pid"); diff --git a/dns/bind916/files/patch-bin_tests_system_dlzexternal_Makefile.in b/dns/bind916/files/patch-bin_tests_system_dlzexternal_Makefile.in deleted file mode 100644 index 0a6aaf7927cf..000000000000 --- a/dns/bind916/files/patch-bin_tests_system_dlzexternal_Makefile.in +++ /dev/null @@ -1,13 +0,0 @@ -BIND9 seems to be abusing LDFLAGS here, and it breaks our linker. - ---- bin/tests/system/dlzexternal/Makefile.in.orig 2022-01-12 13:50:10 UTC -+++ bin/tests/system/dlzexternal/Makefile.in -@@ -37,7 +37,7 @@ OBJS = - @BIND9_MAKE_RULES@ - - CFLAGS = @CFLAGS@ @SO_CFLAGS@ --SO_LDFLAGS = @LDFLAGS@ @SO_LDFLAGS@ -+SO_LDFLAGS = @SO_LDFLAGS@ - - driver.@SO@: ${SO_OBJS} - ${LIBTOOL_MODE_LINK} @SO_LD@ ${SO_LDFLAGS} -o $@ driver.@O@ diff --git a/dns/bind916/files/patch-configure b/dns/bind916/files/patch-configure deleted file mode 100644 index e65c7ecaff08..000000000000 --- a/dns/bind916/files/patch-configure +++ /dev/null @@ -1,92 +0,0 @@ -Fixup gssapi and db detection. - ---- configure.orig 2023-03-06 13:03:49 UTC -+++ configure -@@ -18104,27 +18104,9 @@ done - # problems start to show up. - saved_libs="$LIBS" - for TRY_LIBS in \ -- "-lgssapi_krb5" \ -- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err" \ -- "-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv" \ -- "-lgssapi" \ -- "-lgssapi -lkrb5 -ldes -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lgssapi_krb5 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgssapi -lkrb5 -lhx509 -lcrypt -lasn1 -lroken -lcom_err" \ -- "-lgss -lkrb5" -+ "$($KRB5CONFIG gssapi --libs)"; \ - do -- # Note that this does not include $saved_libs, because -- # on FreeBSD machines this configure script has added -- # -L/usr/local/lib to LIBS, which can make the -- # -lgssapi_krb5 test succeed with shared libraries even -- # when you are trying to build with KTH in /usr/lib. -- if test "/usr" = "$use_gssapi" -- then -- LIBS="$TRY_LIBS $ISC_OPENSSL_LIBS" -- else -- LIBS="-L$use_gssapi/lib $TRY_LIBS $ISC_OPENSSL_LIBS" -- fi -+ LIBS="$TRY_LIBS" - { $as_echo "$as_me:${as_lineno-$LINENO}: checking linking as $TRY_LIBS" >&5 - $as_echo_n "checking linking as $TRY_LIBS... " >&6; } - cat confdefs.h - <<_ACEOF >conftest.$ac_ext -@@ -18167,47 +18149,7 @@ $as_echo "no" >&6; } ;; - no) as_fn_error $? "could not determine proper GSSAPI linkage" "$LINENO" 5 ;; - esac - -- # -- # XXXDCL Major kludge. Tries to cope with KTH in /usr/lib -- # but MIT in /usr/local/lib and trying to build with KTH. -- # /usr/local/lib can end up earlier on the link lines. -- # Like most kludges, this one is not only inelegant it -- # is also likely to be the wrong thing to do at least as -- # many times as it is the right thing. Something better -- # needs to be done. -- # -- if test "/usr" = "$use_gssapi" -a \ -- -f /usr/local/lib/libkrb5.a; then -- FIX_KTH_VS_MIT=yes -- fi -- -- case "$FIX_KTH_VS_MIT" in -- yes) -- case "$enable_static_linking" in -- yes) gssapi_lib_suffix=".a" ;; -- *) gssapi_lib_suffix=".so" ;; -- esac -- -- for lib in $LIBS; do -- case $lib in -- -L*) -- ;; -- -l*) -- new_lib=`echo $lib | -- sed -e s%^-l%$use_gssapi/lib/lib% \ -- -e s%$%$gssapi_lib_suffix%` -- NEW_LIBS="$NEW_LIBS $new_lib" -- ;; -- *) -- as_fn_error $? "KTH vs MIT Kerberos confusion!" "$LINENO" 5 -- ;; -- esac -- done -- LIBS="$NEW_LIBS" -- ;; -- esac -- -- DST_GSSAPI_INC="-I$use_gssapi/include" -+ DST_GSSAPI_INC="$($KRB5CONFIG gssapi --cflags)" - DNS_GSSAPI_LIBS="$LIBS" - - { $as_echo "$as_me:${as_lineno-$LINENO}: result: using GSSAPI from $use_gssapi/lib and $use_gssapi/include" >&5 -@@ -23668,7 +23610,7 @@ $as_echo "" >&6; } - # Check other locations for includes. - # Order is important (sigh). - -- bdb_incdirs="/db53 /db51 /db48 /db47 /db46 /db45 /db44 /db43 /db42 /db41 /db4 /db" -+ bdb_incdirs="/db6 /db5 /db48" - # include a blank element first - for d in "" $bdb_incdirs - do diff --git a/dns/bind916/files/patch-no-bind-tools b/dns/bind916/files/patch-no-bind-tools deleted file mode 100644 index 76bfcc3d0385..000000000000 --- a/dns/bind916/files/patch-no-bind-tools +++ /dev/null @@ -1,46 +0,0 @@ -Exclude the "tools" from building and installing. - ---- bin/Makefile.in.orig 2022-01-12 13:50:10 UTC -+++ bin/Makefile.in -@@ -13,8 +13,8 @@ srcdir = @srcdir@ - VPATH = @srcdir@ - top_srcdir = @top_srcdir@ - --SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \ -- @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ plugins tests -+SUBDIRS = named rndc tools check confgen \ -+ @NZD_TOOLS@ @PKCS11_TOOLS@ plugins tests - TARGETS = - - @BIND9_MAKE_RULES@ ---- bin/tools/Makefile.in.orig 2022-01-12 13:50:10 UTC -+++ bin/tools/Makefile.in -@@ -45,10 +45,7 @@ SUBDIRS = - - DNSTAPTARGETS = dnstap-read@EXEEXT@ - NZDTARGETS = named-nzd2nzf@EXEEXT@ --TARGETS = arpaname@EXEEXT@ named-journalprint@EXEEXT@ \ -- named-rrchecker@EXEEXT@ nsec3hash@EXEEXT@ \ -- mdig@EXEEXT@ \ -- @DNSTAPTARGETS@ @NZDTARGETS@ -+TARGETS = @DNSTAPTARGETS@ @NZDTARGETS@ - - DNSTAPSRCS = dnstap-read.c - NZDSRCS = named-nzd2nzf.c -@@ -105,16 +102,6 @@ dnstap: - ${DESTDIR}${bindir} - - install:: ${TARGETS} installdirs @DNSTAP@ @NZD_TOOLS@ -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} arpaname@EXEEXT@ \ -- ${DESTDIR}${bindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-journalprint@EXEEXT@ \ -- ${DESTDIR}${sbindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} named-rrchecker@EXEEXT@ \ -- ${DESTDIR}${bindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} nsec3hash@EXEEXT@ \ -- ${DESTDIR}${sbindir} -- ${LIBTOOL_MODE_INSTALL} ${INSTALL_PROGRAM} mdig@EXEEXT@ \ -- ${DESTDIR}${bindir} - - uninstall:: - ${LIBTOOL_MODE_UNINSTALL} rm -f \ diff --git a/dns/bind916/files/pkg-message.in b/dns/bind916/files/pkg-message.in deleted file mode 100644 index 1150a96522ff..000000000000 --- a/dns/bind916/files/pkg-message.in +++ /dev/null @@ -1,22 +0,0 @@ -[ -{ -# %!fmt 59 63 - message: <<EOT -BIND requires configuration of rndc, including a "secret" -key. The easiest, and most secure way to configure rndc is -to run 'rndc-confgen -a' to generate the proper conf file, -with a new random key, and appropriate file permissions. - -The %%PREFIX%%/etc/rc.d/named script will do that for you. - -If using syslog to log the BIND9 activity, and using a -chroot'ed installation, you will need to tell syslog to install -a log socket in the BIND9 chroot by running: - - # sysrc altlog_proglist+=named - -And then restarting syslogd with: service syslogd restart -EOT - type: install -} -] diff --git a/dns/bind916/pkg-descr b/dns/bind916/pkg-descr deleted file mode 100644 index 0563e65ca320..000000000000 --- a/dns/bind916/pkg-descr +++ /dev/null @@ -1,13 +0,0 @@ -BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND -architecture. Some of the important features of BIND 9 are: - -DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) -IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) - Experimental IPv6 Resolver Library -DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 - Improved standards conformance -Views: One server process can provide multiple "views" of the DNS namespace, - e.g. an "inside" view to certain clients, and an "outside" view to others. -Multiprocessor Support - -See the CHANGES file for more information on new features. diff --git a/dns/bind916/pkg-help b/dns/bind916/pkg-help deleted file mode 100644 index aa85330b21d7..000000000000 --- a/dns/bind916/pkg-help +++ /dev/null @@ -1,30 +0,0 @@ - NATIVE_PKCS11 -When using the NATIVE_PKCS11 option, BIND will use the PKCS#11 -engine specified by the named_pkcss11_engine variable in -/etc/rc.conf for *all* crypto operations. - -This is primarily intended to be used in an authoritative -case. - -If BIND is also operating as a validating resolver, -NATIVE_PKCS11 should not be used, because the HSM will be -used for all crypto, including DNSSEC validations, and the -HSM is likely to be slower than the CPU for this purpose. -Additionally, the HSM might not support all of the PKCS#11 -API functions needed for signature verification. - - - GOST -If using a chrooted instance of BIND on FreeBSD 8.x and 9.x, -the OpenSSL engines MUST be accessible from within the chroot. -If BIND is chrooted in /var/named, this can be achieved by -either copying content of /usr/local/lib/engines into -/var/named/usr/local/lib/engines, or by creating that directory -and adding this line to /etc/fstab: -/usr/local/lib/engines /var/named/usr/local/lib/engines nullfs ro 0 0 - - - START_LATE -Most of the time, BIND needs to start early in the boot -process. Enable this if BIND starts too early for you and -you need it to start later. diff --git a/dns/bind916/pkg-plist b/dns/bind916/pkg-plist deleted file mode 100644 index 441fe6862ec7..000000000000 --- a/dns/bind916/pkg-plist +++ /dev/null @@ -1,331 +0,0 @@ -%%DNSTAP%%bin/dnstap-read -@sample etc/mtree/BIND.chroot.dist.sample -@sample etc/mtree/BIND.chroot.local.dist.sample -%%ETCDIR%%/bind.keys -%%ETCDIR%%/master/empty.db -%%ETCDIR%%/master/localhost-forward.db -%%ETCDIR%%/master/localhost-reverse.db -@sample %%ETCDIR%%/named.conf.sample -%%ETCDIR%%/named.root -%%ETCDIR%%/rndc.conf.sample -include/bind9/check.h -include/bind9/getaddresses.h -include/bind9/version.h -include/dns/acl.h -include/dns/adb.h -include/dns/badcache.h -include/dns/bit.h -include/dns/byaddr.h -include/dns/cache.h -include/dns/callbacks.h -include/dns/catz.h -include/dns/cert.h -include/dns/client.h -include/dns/clientinfo.h -include/dns/compress.h -include/dns/db.h -include/dns/dbiterator.h -include/dns/dbtable.h -include/dns/diff.h -include/dns/dispatch.h -include/dns/dlz.h -include/dns/dlz_dlopen.h -include/dns/dns64.h -include/dns/dnsrps.h -include/dns/dnssec.h -include/dns/dnstap.h -include/dns/ds.h -include/dns/dsdigest.h -include/dns/dyndb.h -include/dns/ecdb.h -include/dns/ecs.h -include/dns/edns.h -include/dns/enumclass.h -include/dns/enumtype.h -include/dns/events.h -include/dns/fixedname.h -include/dns/forward.h -include/dns/geoip.h -include/dns/ipkeylist.h -include/dns/iptable.h -include/dns/journal.h -include/dns/kasp.h -include/dns/keydata.h -include/dns/keyflags.h -include/dns/keymgr.h -include/dns/keytable.h -include/dns/keyvalues.h -include/dns/lib.h -include/dns/librpz.h -%%LMDB%%include/dns/lmdb.h -include/dns/log.h -include/dns/lookup.h -include/dns/master.h -include/dns/masterdump.h -include/dns/message.h -include/dns/name.h -include/dns/ncache.h -include/dns/nsec.h -include/dns/nsec3.h -include/dns/nta.h -include/dns/opcode.h -include/dns/order.h -include/dns/peer.h -include/dns/portlist.h -include/dns/private.h -include/dns/rbt.h -include/dns/rcode.h -include/dns/rdata.h -include/dns/rdataclass.h -include/dns/rdatalist.h -include/dns/rdataset.h -include/dns/rdatasetiter.h -include/dns/rdataslab.h -include/dns/rdatastruct.h -include/dns/rdatatype.h -include/dns/request.h -include/dns/resolver.h -include/dns/result.h -include/dns/rootns.h -include/dns/rpz.h -include/dns/rriterator.h -include/dns/rrl.h -include/dns/sdb.h -include/dns/sdlz.h -include/dns/secalg.h -include/dns/secproto.h -include/dns/soa.h -include/dns/ssu.h -include/dns/stats.h -include/dns/tcpmsg.h -include/dns/time.h -include/dns/timer.h -include/dns/tkey.h -include/dns/tsec.h -include/dns/tsig.h -include/dns/ttl.h -include/dns/types.h -include/dns/update.h -include/dns/validator.h -include/dns/version.h -include/dns/view.h -include/dns/xfrin.h -include/dns/zone.h -include/dns/zonekey.h -include/dns/zoneverify.h -include/dns/zt.h -include/dst/dst.h -include/dst/gssapi.h -include/dst/result.h -include/irs/context.h -include/irs/dnsconf.h -include/irs/netdb.h -include/irs/platform.h -include/irs/resconf.h -include/irs/types.h -include/irs/version.h -include/isc/aes.h -include/isc/align.h -include/isc/app.h -include/isc/assertions.h -include/isc/astack.h -include/isc/atomic.h -include/isc/backtrace.h -include/isc/barrier.h -include/isc/base32.h -include/isc/base64.h -include/isc/bind9.h -include/isc/buffer.h -include/isc/bufferlist.h -include/isc/cmocka.h -include/isc/commandline.h -include/isc/condition.h -include/isc/counter.h -include/isc/crc64.h -include/isc/deprecated.h -include/isc/dir.h -include/isc/endian.h -include/isc/errno.h -include/isc/error.h -include/isc/event.h -include/isc/eventclass.h -include/isc/file.h -include/isc/formatcheck.h -include/isc/fsaccess.h -include/isc/fuzz.h -include/isc/hash.h -include/isc/heap.h -include/isc/hex.h -include/isc/hmac.h -include/isc/ht.h -include/isc/httpd.h -include/isc/interfaceiter.h -include/isc/iterated_hash.h -include/isc/lang.h -include/isc/lex.h -include/isc/lfsr.h -include/isc/lib.h -include/isc/likely.h -include/isc/list.h -include/isc/log.h -include/isc/magic.h -include/isc/managers.h -include/isc/md.h -include/isc/mem.h -include/isc/meminfo.h -include/isc/mutex.h -include/isc/mutexblock.h -include/isc/net.h -include/isc/netaddr.h -include/isc/netdb.h -include/isc/netmgr.h -include/isc/netscope.h -include/isc/nonce.h -include/isc/offset.h -include/isc/once.h -include/isc/os.h -include/isc/parseint.h -include/isc/platform.h -include/isc/pool.h -include/isc/portset.h -include/isc/print.h -include/isc/quota.h -include/isc/radix.h -include/isc/random.h -include/isc/ratelimiter.h -include/isc/refcount.h -include/isc/regex.h -include/isc/region.h -include/isc/resource.h -include/isc/result.h -include/isc/resultclass.h -include/isc/rwlock.h -include/isc/safe.h -include/isc/serial.h -include/isc/siphash.h -include/isc/sockaddr.h -include/isc/socket.h -include/isc/stat.h -include/isc/stats.h -include/isc/stdatomic.h -include/isc/stdio.h -include/isc/stdtime.h -include/isc/strerr.h -include/isc/string.h -include/isc/symtab.h -include/isc/syslog.h -include/isc/task.h -include/isc/taskpool.h -include/isc/thread.h -include/isc/time.h -include/isc/timer.h -include/isc/tm.h -include/isc/types.h -include/isc/url.h -include/isc/utf8.h -include/isc/util.h -include/isc/version.h -include/isccc/alist.h -include/isccc/base64.h -include/isccc/cc.h -include/isccc/ccmsg.h -include/isccc/events.h -include/isccc/result.h -include/isccc/sexpr.h -include/isccc/symtab.h -include/isccc/symtype.h -include/isccc/types.h -include/isccc/util.h -include/isccc/version.h -include/isccfg/aclconf.h -include/isccfg/cfg.h -include/isccfg/dnsconf.h -include/isccfg/grammar.h -include/isccfg/kaspconf.h -include/isccfg/log.h -include/isccfg/namedconf.h -include/isccfg/version.h -include/ns/client.h -include/ns/hooks.h -include/ns/interfacemgr.h -include/ns/lib.h -include/ns/listenlist.h -include/ns/log.h -include/ns/notify.h -include/ns/query.h -include/ns/server.h -include/ns/sortlist.h -include/ns/stats.h -include/ns/types.h -include/ns/update.h -include/ns/version.h -include/ns/xfrout.h -include/pk11/constants.h -include/pk11/internal.h -include/pk11/pk11.h -include/pk11/result.h -include/pk11/site.h -include/pkcs11/pkcs11.h -lib/libbind9.a -lib/libdns.a -lib/libirs.a -lib/libisc.a -lib/libisccc.a -lib/libisccfg.a -lib/libns.a -lib/named/filter-aaaa.so -@comment share/man/man1/arpaname.1.gz -@comment share/man/man1/delv.1.gz -@comment share/man/man1/dig.1.gz -%%DNSTAP%%share/man/man1/dnstap-read.1.gz -@comment share/man/man1/host.1.gz -@comment share/man/man1/mdig.1.gz -@comment share/man/man1/named-rrchecker.1.gz -@comment share/man/man1/nslookup.1.gz -@comment share/man/man1/nsupdate.1.gz -share/man/man5/named.conf.5.gz -share/man/man5/rndc.conf.5.gz -share/man/man8/ddns-confgen.8.gz -@comment share/man/man8/dnssec-cds.8.gz -@comment share/man/man8/dnssec-checkds.8.gz -@comment share/man/man8/dnssec-coverage.8.gz -@comment share/man/man8/dnssec-dsfromkey.8.gz -@comment share/man/man8/dnssec-importkey.8.gz -@comment share/man/man8/dnssec-keyfromlabel.8.gz -@comment share/man/man8/dnssec-keygen.8.gz -@comment share/man/man8/dnssec-keymgr.8.gz -@comment share/man/man8/dnssec-revoke.8.gz -@comment share/man/man8/dnssec-settime.8.gz -@comment share/man/man8/dnssec-signzone.8.gz -@comment share/man/man8/dnssec-verify.8.gz -share/man/man8/filter-aaaa.8.gz -share/man/man8/named-checkconf.8.gz -share/man/man8/named-checkzone.8.gz -share/man/man8/named-compilezone.8.gz -@comment share/man/man8/named-journalprint.8.gz -%%LMDB%%share/man/man8/named-nzd2nzf.8.gz -share/man/man8/named.8.gz -@comment share/man/man8/nsec3hash.8.gz -%%NATIVE_PKCS11%%share/man/man8/pkcs11-destroy.8.gz -%%NATIVE_PKCS11%%share/man/man8/pkcs11-keygen.8.gz -%%NATIVE_PKCS11%%share/man/man8/pkcs11-list.8.gz -%%NATIVE_PKCS11%%share/man/man8/pkcs11-tokens.8.gz -share/man/man8/rndc-confgen.8.gz -share/man/man8/rndc.8.gz -share/man/man8/tsig-keygen.8.gz -sbin/ddns-confgen -sbin/named -sbin/named-checkconf -sbin/named-checkzone -sbin/named-compilezone -%%LMDB%%sbin/named-nzd2nzf -%%NATIVE_PKCS11%%sbin/pkcs11-destroy -%%NATIVE_PKCS11%%sbin/pkcs11-keygen -%%NATIVE_PKCS11%%sbin/pkcs11-list -%%NATIVE_PKCS11%%sbin/pkcs11-tokens -sbin/rndc -sbin/rndc-confgen -sbin/tsig-keygen -@dir(bind,bind,) %%ETCDIR%%/dynamic -@dir(bind,bind,) %%ETCDIR%%/slave -@dir(bind,bind,) %%ETCDIR%%/working |