src-test2/contrib/bind9/doc, branch stable/6 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F6 2009-01-10T04:30:27Z Merge from vendor/bind9/dist-9.3 as of the 9.3.6-P1 import 2009-01-10T04:30:27Z Doug Barton dougb@FreeBSD.org 2009-01-10T04:30:27Z urn:sha1:c26f2738807f29834e091b2fb13a229011884161 Merge from vendor/bind9/dist-9.3 as of the 9.3.5-P2 import 2008-09-01T22:56:10Z Doug Barton dougb@FreeBSD.org 2008-09-01T22:56:10Z urn:sha1:27b2fc1e8e6df707cc7cf815b0aa9eb0cd79700d Merge from vendor/bind9/dist-9.3 as of the 9.3.5-P1 import. 2008-07-12T10:07:33Z Doug Barton dougb@FreeBSD.org 2008-07-12T10:07:33Z urn:sha1:cdab7b52f72ad118224fcf37167d386c9e1a6b63 This version will by default randomize the UDP query source port (and sequence number of course) for every query. In order to take advantage of this randomization users MUST have an appropriate firewall configuration to allow UDP queries to be sent and answers to be received on random ports; and users MUST NOT specify a port number using the query-source[-v6] options. The avoid-v[46]-udp-ports options exist for users who wish to eliminate certain port numbers from being chosen by named for this purpose. See the ARM Chatper 6 for more information. Also please note, this issue applies only to UDP query ports. A random ephemeral port is always chosen for TCP queries. This issue applies primarily to name servers whose main purpose is to resolve random queries (sometimes referred to as "caching" servers, or more properly as "resolving" servers), although even an "authoritative" name server will make some queries, primarily at startup time. All users of BIND are strongly encouraged to upgrade to the latest version, and to utilize the source port randomization feature. This update addresses issues raised in: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447 http://www.kb.cert.org/vuls/id/800113 http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience Update to version 9.3.5. It contains the latest bug fixes, updates 2008-06-03T05:38:10Z Doug Barton dougb@FreeBSD.org 2008-06-03T05:38:10Z urn:sha1:10e8d52e884dd8d7592baddbb08a4cf7547d5c1e to root server addresses, and a fix for the vulnerability mentioned here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122 Users of BIND 9.3.x are strongly encouraged to upgrade to this version. Also, the 9.3.x branch is now in maintenance-only mode. Users are encouraged to investigate BIND 9.4.x or perhaps 9.5.x. http://www.isc.org/index.pl?/sw/bind/versions_and_support.php This udpate is being done by updating the files directly in this branch rather than an import + MFC because BIND in HEAD is 9.4.x. Add proper mime-types for files that they are relevant for. 2008-06-02T20:54:45Z Doug Barton dougb@FreeBSD.org 2008-06-02T20:54:45Z urn:sha1:f670e7cc73e3e8fa7761191e60c0bf56a31090c9 This is useful for things like *.pdf files that svn needs to know about, and will probably be useful down the road for other things. MFC upgrade to version 9.3.3 2006-12-13T09:47:02Z Doug Barton dougb@FreeBSD.org 2006-12-13T09:47:02Z urn:sha1:74fd60d0b2333c395281acd70ef19a37a95dc2b1 Approved by: re (kensmith) MFC import of BIND 9.3.2 2006-01-14T10:13:50Z Doug Barton dougb@FreeBSD.org 2006-01-14T10:13:50Z urn:sha1:41ecb87b06112f5c5ec1c81deb735501a6e8133e This commit was manufactured by cvs2svn to create branch 'RELENG_6'. 2005-12-30T16:45:32Z cvs2svn cvs2svn@FreeBSD.org 2005-12-30T16:45:32Z urn:sha1:2154ae8a7d25efff824bec3961677b36b5454996 Vendor import of BIND 9.3.1 2005-03-17T08:04:02Z Doug Barton dougb@FreeBSD.org 2005-03-17T08:04:02Z urn:sha1:6bc6438a36e1c5d65a4752b125d5fb5cf8015879 Vender import of BIND 9.3.0rc4. 2004-09-19T01:30:24Z Tom Rhodes trhodes@FreeBSD.org 2004-09-19T01:30:24Z urn:sha1:b1e4bd53e00e9694dd378a884abd3f2dd790190d