aboutsummaryrefslogtreecommitdiff
path: root/dns/nsd
Commit message (Collapse)AuthorAgeFilesLines
* dns/nsd: Update to 4.3.6Kevin Bowling2021-04-082-9/+6
| | | | | | | | Changelog https://nlnetlabs.nl/news/2021/Apr/06/nsd-4.3.6-released/ PR: 254850 Reviewed by: daniel.engberg.lists@pyret.net Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
* all: Remove all other $FreeBSD keywords.Mathieu Arnold2021-04-061-3/+1
|
* Remove # $FreeBSD$ from Makefiles.Mathieu Arnold2021-04-061-1/+0
|
* dns/nsd: Update 4.3.4 -> 4.3.5Yuri Victorovich2021-01-313-5/+5
| | | | | | | | | | | | This release fixes a number of bugs. It fixes a number of corner case differences for the output more similar to Bind. The configure sources are compatible with the new autoconf 2.70. PR: 253026 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=563458
* dns/nsd: Security update to 4.3.4Bernard Spil2020-12-122-4/+4
| | | | | | | | | | | PR: 251530 Submitted by: Jaap Akkerhuis <jaap nlnetlabs nl> (maintainer) Approved by: maintainer (implicit) MFH: 2020Q4 Security: 388ebb5b-3c95-11eb-929d-d4c9ef517024 Notes: svn path=/head/; revision=557838
* dns/nsd: update 4.3.2 -> 4.3.3Kurt Jaeger2020-10-082-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release contains the DNS Flag Day 2020 fixes. This sets the default EDNS buffer size to 1232, that should reduce fragmentation. https://dnsflagday.net/2020/ There is a new feature where it is possible to list an interface by name. This pulls in the IP addresses associated with the interface at server start. FEATURES: - Follow DNS flag day 2020 advice and set default EDNS message size to 1232. - Merged PR #113 with fixes. Instead of listing an IP-address to listen on, an interface name can be specified in nsd.conf, with ip-address: eth0. The IP-addresses for that interface are then used. - Port TSIG code for openssl 3.0.0-alpha6. BUG FIXES: - Fix make install with --with-pidfile="". - Merge #115 from millert: Fix strlcpy() usage. From OpenBSD. - Merge #117: mini_event.h (4.3.2 and 4.3.1) on OpenBSD cannot find fd_set - patch. - Fix that configure checks for EVP_sha256 to detect openssl, because HMAC_CTX_new is deprecated in 3.0.0. - Fix #119: fix compile warnings from new gcc. - Fix #119: warn when trying to parse a directory. - Merge PR #121: Increase log level of recreated database from WARNING to ERR. - Remove unused space from LIBS on link line. - Updated date in nsd -v output. PR: 250203 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Relnotes: https://www.nlnetlabs.nl/news/2020/Oct/08/nsd-4.3.3-released/ Notes: svn path=/head/; revision=551720
* dns/nsd: Upgrade to version 4.3.2Steve Wills2020-07-182-4/+4
| | | | | | | | PR: 247973 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=542472
* dns/nsd: update 4.3.0 -> 4.3.1Kurt Jaeger2020-04-193-16/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | BUG FIXES: - Fix #70: error: 'fd_set' undeclared. - Fix #71: error: 'for' loop initial declaration used outside C99 mode. - Fix to move declarations out of for loops in event test too. - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile. - Fix #75: configure test for sched_setaffinity, and use cpuset_setaffinity otherwise. Also test for presence of sysconf. - Fix #74: GNU Hurd fix cast from pointer to integer of different size. - Fix for #74, #75: cpuset test for header contents and provide code. - Fix #78: Fix SO_SETFIB error on FreeBSD. - Merge PR #83 from noloader: Fix GNU HURD sched_setaffinity compile. - Fix #80: NetBSD and implicit declaration of reallocarray. - Fix unknown u_long in util.c for Issue #80 . - Merge PR #86 from noloader: Use precious variables for GREP, EGREP, SED, AWK, LEX and YACC. - For PR #86: Fix that programs loaded after CFLAGS and stuff is set, specifically the compiler, so that it can work if it needs special flags from that. Fix that lex only needs to support -i if actually defined, otherwise the output included in the source tarball can be used. - Merge PR #90 by phicoh: O_CLOEXEC should be FD_CLOEXEC. - Merge PR #92 by tonysgi: Fix typo. - Merge PR #91 by gearnode: nsd-control-setup recreate certificates. The '-r' option recreates certificates. Without it it creates them if they do not exist, and does not modify them otherwise. PR: 245666 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=532072
* dns/nsd: fix startupKurt Jaeger2020-03-192-0/+12
| | | | | | | | | | | - see also: https://github.com/NLnetLabs/nsd/issues/78 PR: 244904 Submitted by: ume Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=528710
* dns/nsd: upgrade 4.2.4 -> 4.3.0Kurt Jaeger2020-03-183-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This port incorporates also the proposed bug fix at bug #242367 Major changes: This release adds cpu affinity. By pinning a server process to a specific cpu, having a separate network card also for that cpu, and an interface address also for that server process, the throughput is increased. This increases performance of the nameserver. Sparse TSIG signing support is removed, to comply with the latest tsig standard update draft. There is a feature to drop update queries, with opcode UPDATE, with nsd.conf option drop-updates. 4.3.0 ========= FEATURES: - Fix to use getrandom() for randomness, if available. - Fix #56: Drop sparse TSIG signing support in NSD. Sign every axfr packet with TSIG, according to the latest draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1. - Merge pull request #59 from buddyns: add FreeBSD support for conf key ip-transparent. - Add feature to pin server processes to specific cpus. - Add feature to pin IP addresses to selected server processes. - Set process title to identify individual processes. - Merge PR#22: minimise-any: prefer polular and not large RRset, from Daisuke Higashi. - Add support for SO_BINDTODEVICE on Linux. - Add support for SO_SETFIB on FreeBSD. - Add feature to drop queries with opcode UPDATE. BUG FIXES: - Fix fname null check of fname in namedb_read_zonefile. - Fix implicit cast of size in udb_radnode_array_grow. - Fix ignore of return value of ssl_printf in remote.c. - Fix unused check of fd in parent_handle_reload_command. - Attempt to fix signedness of nscount lookup in ixfr query_process. - Fix identical branches for ssl_print of errors in remote.c. - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record. - Fix to separate header and data lines in parse_zone_list_file. - Fix to define max number of EDNS records we are willing to spend time on. - Fix size of string len and capacity type cast in udbradtree. - Fix to protect rrcount in tsig_find_rr from overflow. - Annotate radix_find_prefix_node not reachable trail code. - Fix to protect rrcount in packet_find_notify_serial from overflow. - Fix to close socket on error in create_tcp_accept_sock. - Fix to log on failure to chmod for socket for remote control. - Fix to remove unneeded if in open of socket for remote control. - Fix to restore input parameter on call failure in create_dirs. - Please checker by terminating and initialising string read by remote control. - Fix to define upper bounds on rr counts read from untrusted packet data. - Separate acl_addr_match_range functions for ip4 and ip6, to please checkers. - Avoid unused variable warning in new match_range_v4 function. - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters. - use-systemd is ignored in nsd.conf, when NSD is compiled with libsystemd it always signals readiness, if possible. - Note that use-systemd is not necessary and ignored in man page. - Fix unreachable code in ssl set options code. - Fix bad shift in assertion code analyzer complaint. - Fix responses for IXFR so that the authority section is not echoed in the response. - Merge PR#60: Minor portability fixes from michaelforney, with avoid pointer arithmetic on void* and avoid unnecessary VLA. - Fix that the retry wait does not exceed one day for zone transfers. CHANGES: - Set FD_CLOEXEC on opened sockets. PR: 244886, 242367[2] Submitted by: Jaap Akkerhuis <jaap@nlnetlabs.nl> (maintainer) Reported by: Leo Vandewoestijne <freebsd@dns.company> [2] Relnotes: https://github.com/NLnetLabs/nsd/blob/NSD_4_3_0_REL/doc/ChangeLog Notes: svn path=/head/; revision=528662
* dns/nsd: Update to 4.2.4Tobias C. Berner2020-01-072-4/+4
| | | | | | | | PR: 242545 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=522353
* Update to 4.2.3Jochen Neumeister2019-11-232-4/+4
| | | | | | | | | PR: 242102 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Sponsored by: Netzkommune GmbH Notes: svn path=/head/; revision=518232
* Drop the ipv6 virtual category for d* category as it is not relevant anymoreBaptiste Daroussin2019-10-091-1/+1
| | | | Notes: svn path=/head/; revision=514130
* Update to 4.2.2Jochen Neumeister2019-08-192-5/+4
| | | | | | | | | | | | | Changelog: https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_2_2_REL PR: 239964 Reported by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) MFH: 2019Q3 Security: 56778a31-c2a1-11e9-9051-4c72b94353b5 Sponsored by: Netzkommune GmbH Notes: svn path=/head/; revision=509298
* Convert to UCL & cleanup pkg-message (categories d)Mathieu Arnold2019-08-131-12/+14
| | | | Notes: svn path=/head/; revision=508835
* devel/libevent2: update to 2.1.11Jan Beich2019-08-021-0/+1
| | | | | | | | | | | | | Changes: https://github.com/libevent/libevent/releases/tag/release-2.1.11-stable ABI: https://abi-laboratory.pro/tracker/timeline/libevent/ PR: 239599 Reported by: GitHub (watch releases) Approved by: zeising (maintainer) MFH: 2019Q3 (maybe security, partially restores 2.1.8 ABI) Differential Revision: https://reviews.freebsd.org/D21133 Notes: svn path=/head/; revision=507877
* dns/nsd: Upgrade to version 4.2.1Steve Wills2019-07-152-4/+4
| | | | | | | | PR: 239069 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=506701
* dns/nsd: update to 4.2.0Steve Wills2019-06-182-4/+4
| | | | | | | | PR: 238498 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Notes: svn path=/head/; revision=504465
* dns/nsd: Update to 4.1.27Steve Wills2019-04-133-16/+4
| | | | | | | | | PR: 236785 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> MFH: 2019Q2 Notes: svn path=/head/; revision=498788
* dns/nsd: Fix build with DNSTAP option enabledSteve Wills2018-12-102-0/+12
| | | | | | | | | PR: 233890 Submitted by: jaap@NLnetLabs.nl (maintainer) Reported by: r00t@kaba1ah.org Notes: svn path=/head/; revision=487182
* dns/nsd: Update to 4.1.26Steve Wills2018-12-092-9/+15
| | | | | | | | | | While here, pet portlint PR: 233797 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=487004
* - Update to 4.1.25Wen Heping2018-10-022-4/+4
| | | | | | | | PR: 231878 Submitted by: jaap@NLnetLabs.nl(maintainer) Notes: svn path=/head/; revision=481116
* dns/nsd: Update to 4.1.24Danilo G. Baio2018-08-152-4/+4
| | | | | | | | PR: 230591 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=477296
* dns/nsd upgrade to version 4.1.23Steve Wills2018-07-302-4/+4
| | | | | | | | PR: 230182 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=475892
* dns/nsd: upgrade to version 4.1.22Steve Wills2018-06-142-4/+4
| | | | | | | | PR: 228883 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=472409
* Update to 4.1.21Kirill Ponomarev2018-05-152-5/+5
| | | | | | | | PR: 228272 Submitted by: maintainer Notes: svn path=/head/; revision=470049
* dns/nsd: Update to 4.1.20Yuri Victorovich2018-02-202-5/+4
| | | | | | | | | | | | | | | | | | | | This release fixes memory leaks when reading zonefiles and processing zone transfers. 4.1.20 ================ BUG FIXES: - Fix memory leak in zone file read of unknown rr formatted RRs. - Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes. Also changed to DISTVERSION Submitted by: jaap@NLnetLabs.nl (maintainer) Approved by: tcberner (mentor, implicit) Notes: svn path=/head/; revision=462420
* dns/nsd: Update to 4.1.19Steve Wills2017-12-112-4/+4
| | | | | | | | PR: 224243 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=456031
* dns/nsd: update 4.1.17 -> 4.1.18Kurt Jaeger2017-12-022-5/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release has features for saving memory and faster notification. With --enable-packed, 33% memory savings could be had, or something along that size. Notification of secondary servers happens in parallel, and has faster timeouts. More sockets are used for zone transfers. This speeds up communication with a larger set of servers. Additionally a bug is fixed for dual-loaded parent-and-child zone configured at the same time, when one of the zones has not loaded properly. FEATURES: - xfr-inspect, it is not installed, it prints xfr files from /tmp made with 'make xfr-inspect' in the source dir. - retry timeout between sending notifies dropped from 15 to 3 sec. - NSD sends 16 notifies simultaneously. - configure --enable-packed reduces memory usage, at expense of unaligned reads. Saves about 17%. - Save memory by selectively allocate precompiled nsec3 hashes, saves about 16% memory. - make ip-transparent option work on OpenBSD. - Save about 2% memory by changing usage count size in name tree. - Fix #2871: Increase number of sockets for xfrd transfers. BUG FIXES: - Fix gcc 7.1.1 warnings. - Fix writev compile warning on FreeBSD. - Fix #1446: A corrupted zone file "propagates" to good ones. - nsd-control zonestatus prints wait time between attempts, for zones that are in that waiting time. - Fix collision printout of nsec3 to print name, hash and reverse. - Fix #1567: Change crit to err log level for gettimeofday failure. Add defines for compile without syslog. - Fix crash for DS query when parent and child zones both configured in nsd.conf and parent zone has not loaded properly. PR: 224025 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=455359
* dns/nsd: Update to 4.1.17Danilo G. Baio2017-07-282-4/+4
| | | | | | | | | | | | | | | | | | Features: - zone parser parses type AVC (it has TXT format). - Fix #1272: use writev to put tcp length field with data for outgoing zone transfer requests. Bugfixes: - Fix potential null pointer in nsec3 adjustment tree. - Fix text format of deletes for CDS and CDNSKEY, single 0 to represent empty base64 or hex string. PR: 220939 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=446785
* dns/nsd: update 4.1.15 -> 4.1.16Kurt Jaeger2017-04-293-24/+4
| | | | | | | | | | | | | | | | | | | | | | | features: - zone parser can parse acronyms for algorithms ED25519 and ED448. - Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf. bug fixes: - Calculate new udb index after growing the array, fix from Chaofeng Liu. - Fix missing _t to _type conversion for disable-radix-tree option. - Printout serial error with hint it may be too big. - Fix 1228: OpenSSL include is not guarded with HAVE_SSL - Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda. - minor manpage fix. PR: 218873 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=439774
* dns/nsd: Fix missing _t to _type conversion for disable-radix-tree optionJason Unovitch2017-03-171-0/+20
| | | | | | | | | | | | | | | - Noting NSD changelog, recent update renamed _t typedefs because POSIX reserves them. The 4.1.15 update missed a few conversion. - Unbreak RADIXTREE. No PORTREVISION change as port would not have built. PR: 217640 Reported by: Max Kostikov <max@kostikov.co> Submitted by: w.schwarzenfeld@utanet.at (the suggested diff) jaap@NLnetLabs.nl (maintainer - the port patch) Obtained from: nsd svn r4741 Notes: svn path=/head/; revision=436315
* dns/nsd: update 4.1.14 -> 4.1.15Jason Unovitch2017-03-052-5/+4
| | | | | | | | PR: 217537 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=435436
* devel/libevent2: drop historical suffix after r362796Jan Beich2017-02-201-2/+2
| | | | | | | | PR: 216777 Approved by: mm (maintainer) Notes: svn path=/head/; revision=434427
* devel/libevent2: update to 2.1.8 and cleanupJan Beich2017-02-041-0/+1
| | | | | | | | | | | | | | - DEFAULT_VERSIONS += ssl=openssl-devel is now supported - devel/py-event and devel/p5-Event-Lib are marked BROKEN Changes: https://github.com/libevent/libevent/raw/release-2.1.8-stable/whatsnew-2.1.txt Changes: https://github.com/libevent/libevent/raw/release-2.1.8-stable/ChangeLog PR: 216527 Exp-run by: antoine Approved by: mm (maintainer) Notes: svn path=/head/; revision=433286
* Update to 4.1.14Emanuel Haupt2016-12-082-4/+4
| | | | | | | | PR: 215144 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=428137
* Update to version 4.1.13Pawel Pekala2016-10-012-6/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SUMMARY: Some features, such as multi master check option that does not upgrade from the first master that answers, but picks the best one. Additional section handling for type SRV. And bug fixes. FEATURES: - multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters, from Manabu Sonoda. - Support RR type OPENPGPKEY from RFC 7929. - Can config key algorithms with the digest name, eg. 'sha256'. - configure --disable-radix-tree for about 15% lower memory usage. - for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX. - more extensible edns option handling. BUG FIXES: - Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime. - Fix #812: fix that make depend fails after distribution. - Fix #817: xfrd update failed loop. - Add robustness against unallocated data in nsec3 trees. - Fix README spelling error of BSD license (reported by Joerg Jung). - Fix multimaster for not tried full zone transfer for a expired zone. - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. PR: 213021 Submitted by: maintainer Notes: svn path=/head/; revision=423081
* Update to 4.12.Xin LI2016-09-022-4/+4
| | | | | | | | | | | | | Release note: Fix malformed edns query assertion failure, reported by Michal Kepien (NASK) PR: ports/212327 Submitted by: maintainer (jaap NLnetLabs nl) MFH: 2016Q3 Notes: svn path=/head/; revision=421270
* Add profiles to nsd init script.Lev A. Serebryakov2016-08-171-7/+80
| | | | | | | | | PR: 211883 Submitted by: lev Approved by: jaap@NLnetLabs.nl Notes: svn path=/head/; revision=420347
* dns/nsd: update 4.1.10 -> 4.1.11Jason Unovitch2016-08-102-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | - Restore configurable IPV6 option. Upstream integrated fix for issue. - FEATURES: * When tcp is more than half full, use short timeout for tcp session. * Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. * Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865. - BUGFIXES: * Fix build without IPv6, patch from Zdenek Kaspar. * Fix #783: Trying to run a root server without having configured it silently gives wrong answers. * Fix #782: Serve DS record but parent zone has no NS record. * Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. PR: 211693 Submitted by: jaap@NLnetLabs.nl (maintainer) Security: CVE-2016-6173 Security: https://vuxml.FreeBSD.org/freebsd/7d08e608-5e95-11e6-b334-002590263bf5.html MFH: 2016Q3 Notes: svn path=/head/; revision=419980
* dns/nsd: Remove IPv6 option, fixes buildKubilay Kocak2016-07-281-7/+5
| | | | | | | | | | | | | | | | | | | | | | | | Remove the IPv6 option that is causing builds to fail when it is disabled. The issue does not affect package users, as it was a default option. The issue has been fixed upstream [1] and will be included/renabled in the next version update. While I'm here: * Switch to USES=ssl * Add --enable-ipv6 in CONNFIGURE_ARGS to ensure it's explicitly enabled [1] https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=800 PR: 211303 Reported by: <vfx9as gmail com> Approved by: maintainer <jaap NLnetLabs nl> MFH: 2016Q3 Notes: svn path=/head/; revision=419211
* dns/nsd: update to 4.1.10Ruslan Makhmatkhanov2016-06-182-4/+5
| | | | | | | | | | - turn on IPV6 option by default PR: 210276 Submitted by: jaap@NLnetLabs.nl (maintainer) Notes: svn path=/head/; revision=417090
* Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled ↵Dmitry Marakasov2016-05-231-1/+1
| | | | | | | | | by default anyway and don't need to be listed Approved by: portmgr blanket Notes: svn path=/head/; revision=415742
* - Fix trailing whitespace in pkg-messagesDmitry Marakasov2016-05-191-1/+1
| | | | | | | Approved by: portmgr blanket Notes: svn path=/head/; revision=415503
* Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.Mathieu Arnold2016-04-011-1/+1
| | | | | | | | With hat: portmgr Sponsored by: Absolight Notes: svn path=/head/; revision=412346
* - update to 4.1.9Olli Hauer2016-03-152-3/+3
| | | | | | | | | | | | BUG FIXES: - Change the nsd.db file version because of nanosecond precision fix. Approved by: jaap@NLnetLabs.nl (maintainer) PR: 208043 MFH: 2016Q1 Notes: svn path=/head/; revision=411202
* - update to 4.1.8Olli Hauer2016-03-143-6/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add ability to build agains openssl or libressl from ports - add MUNIN_PLUGIN_IMPLIES= BIND8_STATS - use @sample macro in pkg-plist for nsd.conf - s/exec/postexec/ pkg-plist FEATURES: - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch from Daisuke Higashi. - #739: zonefile changes when mtime is small are detected on reload, if filesystem supports precision mtime values. - RR type CSYNC (RFC7477) syntax is supported. BUG FIXES: - take advantage of arc4random_uniform if available, patch from Loganaden Velvindron. - Fix flto check for OSX clang. - Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux. - Fix #736: segfault during zone transfer. - Fix #744: Fix that NSD replies for configured but unloaded zone with SERVFAIL, not REFUSED. PR: 207951 Submitted by: jaap@NLnetLabs.nl (maintainer) MFH: 2016Q1 Notes: svn path=/head/; revision=411048
* - Fix a typoMartin Wilke2015-12-181-1/+1
| | | | | | | | | | PR: 205373 Submitted by: TEUBEL György Approved by: mat (mentor), maintainer Differential Revision: D4604 Notes: svn path=/head/; revision=403954
* - Update to 4.1.7Martin Wilke2015-12-162-13/+11
| | | | | | | | | | | | - Switch to options helper PR: 205292 Submitted by: maintainer Approved by: mat (mentor) Differential Revision: D4579 Notes: svn path=/head/; revision=403836
* Update to 4.1.6Erwin Lansing2015-11-132-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Major Bug Bug Fixes: - This release fixes segfault after start when many interfaces are in use. - This version returns the EDNS bad version response with the AD flag unset for improved conformance. Minor Buf Fixes: - Fix #701: Fix that AD=1 set in a BADVERS response. - Fix typo in zonec.c inside error message. - Fix #711: Document that debug-mode yes is used for staying attached to the supervisor console. - Document verbosity 3 prints more information. - nsd-checkconf warns for master zones with no zonefile statement. - Fix start failure when many file descriptors are in use. - The servfail rcode is not printed with a space in the middle. - print failed token for config syntax error or parse error. PR: 204533 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Sponsored by: DK Hostmaster A/S Notes: svn path=/head/; revision=401554
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-17 00:08:39 +0000