FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=main 2013-09-30T17:23:45Z 2013-09-30T17:23:45Z Dag-Erling Smørgrav des@FreeBSD.org 2013-09-30T17:23:45Z urn:sha1:56b72efe825d4190e0e2fdbc07ebb295cac299df Approved by: re (gjb) 2013-08-06T06:22:54Z Erwin Lansing erwin@FreeBSD.org 2013-08-06T06:22:54Z urn:sha1:a273027f9224fda6fd8740a05fb25286641770b2 New Features Adds a new configuration option, "check-spf"; valid values are "warn" (default) and "ignore". When set to "warn", checks SPF and TXT records in spf format, warning if either resource record type occurs without a corresponding record of the other resource record type. [RT #33355] Adds support for Uniform Resource Identifier (URI) resource records. [RT #23386] Adds support for the EUI48 and EUI64 RR types. [RT #33082] Adds support for the RFC 6742 ILNP record types (NID, LP, L32, and L64). [RT #31836] Feature Changes Changes timing of when slave zones send NOTIFY messages after loading a new copy of the zone. They now send the NOTIFY before writing the zone data to disk. This will result in quicker propagation of updates in multi-level server structures. [RT #27242] "named -V" can now report a source ID string. (This is will be of most interest to developers and troubleshooters). The source ID for ISC's production versions of BIND is defined in the "srcid" file in the build tree and is normally set to the most recent git hash. [RT #31494] Response Policy Zone performance enhancements. New "response-policy" option "min-ns-dots". "nsip" and "nsdname" now enabled by default with RPZ. [RT #32251] Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S 2012-04-05T04:29:35Z Doug Barton dougb@FreeBSD.org 2012-04-05T04:29:35Z urn:sha1:d0f6280db790de2ad69bd01a1275e350cbd2840d 2011-05-28T00:21:28Z Doug Barton dougb@FreeBSD.org 2011-05-28T00:21:28Z urn:sha1:37bb75f74000255f3ea6c7c2d2e9ddae3075c19f 1. Very large RRSIG RRsets included in a negative cache can trigger an assertion failure that will crash named (BIND 9 DNS) due to an off-by-one error in a buffer size check. This bug affects all resolving name servers, whether DNSSEC validation is enabled or not, on all BIND versions prior to today. There is a possibility of malicious exploitation of this bug by remote users. 2. Named could fail to validate zones listed in a DLV that validated insecure without using DLV and had DS records in the parent zone. Add a patch provided by ru@ and confirmed by ISC to fix a crash at shutdown time when a SIG(0) key is being used. 2009-05-31T05:42:58Z Doug Barton dougb@FreeBSD.org 2009-05-31T05:42:58Z urn:sha1:6318052d9e161cbc69e4085125ef824d94de16ef lots of new features compared to 9.4.x, including: Full NSEC3 support Automatic zone re-signing New update-policy methods tcp-self and 6to4-self DHCID support. More detailed statistics counters including those supported in BIND 8. Faster ACL processing. Efficient LRU cache-cleaning mechanism. NSID support. 2008-07-12T05:00:28Z Peter Wemm peter@FreeBSD.org 2008-07-12T05:00:28Z urn:sha1:a988131922df6e2093bf4391d6b1b021c07d6b3c 2007-06-02T23:21:47Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:21:47Z urn:sha1:141cfa50294bfad08bb6c6419f1dc4fc3165c6ab 2004-09-19T01:30:24Z Tom Rhodes trhodes@FreeBSD.org 2004-09-19T01:30:24Z urn:sha1:b1e4bd53e00e9694dd378a884abd3f2dd790190d