![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / net / nsd
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.125 / (download) - annotate - [select for diffs], Mon Apr 15 14:12:39 2024 UTC (3 days, 15 hours ago) by ryoon
Branch: MAIN
CVS Tags: HEAD
Changes since 1.124: +2 -2
lines
Diff to previous 1.124 (colored) to selected 1.66 (colored)
net/nsd: Update to 4.9.1 Changelog: 4 April 2024: Jeroen - Use rooted temporary path in makedist.sh. - Tag for 4.9.1. 3 April 2024: Jeroen - Replace multiple strcat and strcpy by snprintf. - Tag for 4.9.0. 26 March 2024: Jeroen - Test if debug is available in do-tests. - Enforce timeout from NSD in ixfr_gone test. - Update expressions in ixfr_and_restart test. - Make algorithm explicit in control-repattern test. - Switch algorithm to hmac-256 for testplan_mess test. - Tag for 4.9.0rc1. 25 March 2024: Jeroen - Fix timing sensitivity in ixfr_outsync test. 22 March 2024: Jeroen - Set up doc/RELNOTES for upcoming release. 26 February 2024: Willem - Merge #316: Fix to reap defunct children by the reload process that emerged when some serve child processes were still serving TCP request while the others had already quit, while the reload process was waiting for the signal from the backup/old main process that all children exited. - Fix (also from Merge #316) to reap exited children more frequently from server main loop for processes that exited during reload, but missed the initial reaping at start of the main loop because they took somewhat longer to exit. 16 February 2024: Wouter - Fix compile with memclean for xfrd nsd.db close. - In xfrd del secondary zone, the timer could perhaps have event_added, and if so, it would not be event_del if a tcp connection is active at the time. This could cause the libevent event lists to fail. Also fix to make sure to set event_added for the nsd-control ssl nonblocking handshake and check event_added there too, for extra certainty. 15 February 2024: Willem - Merge #304: Support for Catalog zones version "2" as specified in RFC 9432. Both the consumer as well as the producer role are implemented, but only a single catalog consumer zone is allowed. The "coo" property, only relevant with multiple catalog consumer, is therefore not supported. The "group" property is supported. Have a look at the nsd.conf man page for details on how to configure and use catalog zones. 12 February 2024: Willem - Allow SOA apex queries to otherwise with allow-query protected zones for clients matching a provide-xfr rule, because clients that are allowed to transfer the zone need to be able to query SOA at the apex preceding the actual transfer. 6 February 2024: Wouter - Fix #313: nsd 4.8 stats with implausible spikes. 16 January 2024: Wouter - Move acx_nlnetlabs.m4 to version 48, with ssp and getaddrinfo include check. 14 January 2024: Wouter - Move acx_nlnetlabs.m4 to version 47, with crypt32 check. 8 December 2023: Wouter - Merge #309: More RFC 8499 compliance. - Fix #310: NSD stats contain the terms "master" and "slave". - Fix control-reconfig-xfrd test for zonestatus primary that is printed by nsd-control zonestatus. 7 December 2023: Wouter - Merge #307 from anandb-ripencc: Many improvements to the nsd.conf man page. - Fix #308: Deprecate "multi-master-check" in favour of "multi-primary-check". 6 December 2023: Wouter - Fix to sync the tests script file common.sh. - Update test script file common.sh. - Fix #306: Missing AC_SUBST(dbdir) breaks installation with 4.8.0. - Fix for #306: Create directory for xfrd.state and zone.list files in make install.
Revision 1.124 / (download) - annotate - [select for diffs], Sat Dec 9 06:50:28 2023 UTC (4 months, 1 week ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2024Q1-base,
pkgsrc-2024Q1,
pkgsrc-2023Q4-base,
pkgsrc-2023Q4
Changes since 1.123: +2 -3
lines
Diff to previous 1.123 (colored) to selected 1.66 (colored)
nsd: Update to 4.8.0 Changelog: 29 November 2023: Wouter - Tag for 4.8.0rc1. 28 November 2023: Wouter - Set up doc/RELNOTES for upcoming release. - Fix unit test kill_from_pidfile function for nonexistent files because the argument is evaluated before the test expression. - Fix rr-test to also convert the contents of the just written output file. - Fix test set to remove -f nsd.db and rm nsd.db commands. - Fix test set to remove difffile option. 27 November 2023: Jeroen - Fix #14: Set timeout to 3s when servicing remaining TCP connections. - Fix: Always instate write handler after reading queries from TCP. - Answer first query on connections accepted just before reload. 27 November 2023: Wouter - Merge #305: faster stats. Statistics can be gathered while a reload is in progress. 27 November 2023: Willem - Merge #302: Test package fixes. Correct Auxfiles, kill_from_pidfile function and fix drop_updates, rr-test and xfr_update tests. 1 November 2023: Jeroen - Remove on-disk database. 31 October 2023: Wouter - Merge #301: improve the logging of ixfr fallbacks to axfr. 30 October 2023: Jeroen - Fix processing of consolidated IXFRs. 30 October 2023: Wouter - Fix for interprocess communication to set quit sync command from main process explicitly. 3 October 2023: Wouter - Merge #281: Proxy protocol. An implementation of PROXYv2 for NSD. It can be configured with proxy-protocol-port: portnum with the port number of the interface on which proxy traffic is handled. The interface can support proxy traffic for UDP, TCP and TLS. 21 September 2023: Wouter - Merge #295: Update e-mail addresses, add ref to support contracts 31 August 2023: Wouter - Fix autoconf 2.69 warnings in configure. 14 July 2023: Wouter - Merge #287: Update nsd.conf.5.in. 11 July 2023: Wouter - Fix unused variable warning in unit test of udb. 22 June 2023: Wouter - Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available on Mac/Darwin. 7 June 2023: Wouter - Merge #282: Improve nsd.conf man page. - Fix unused but set variable warning. - Fix #283: Compile failure in remote.c when --disable-bind8-stats and --without-ssl are specified.
Revision 1.123 / (download) - annotate - [select for diffs], Tue Oct 24 22:10:27 2023 UTC (5 months, 3 weeks ago) by wiz
Branch: MAIN
Changes since 1.122: +2 -1
lines
Diff to previous 1.122 (colored) to selected 1.66 (colored)
*: bump for openssl 3
Revision 1.122 / (download) - annotate - [select for diffs], Fri Jul 7 10:37:53 2023 UTC (9 months, 1 week ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2023Q3-base,
pkgsrc-2023Q3
Changes since 1.121: +2 -2
lines
Diff to previous 1.121 (colored) to selected 1.66 (colored)
nsd: Update to 4.7.0
Changelog:
This release adds a script for bash autocompletion for nsd-control. Also
nsd-control can be configured to use unencrypted operation also when
compiled without openssl. There is also a systemd service unit example
file contributed. The dnstap log service can be contacted over TCP, with
the dnstap-ip: ip option. It is also possible to use TLS, with
dnstap-tls, it is enabled by default, and can be configured with the
dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
dnstap-client-cert-file options. The configure option
--enable-root-server is obsolete, it is no longer used and defaults to
on. In addition, the build file should support multicore build with
flex and bison more easily.
FEATURES:
Merge #263: Add bash autocompletion script for nsd-control.
Fix #267: Allow unencrypted local operation of nsd-control.
Merge #269 from Fale: Add systemd service unit.
Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
dnstap over TLS, default enabled. Configured with the
options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
BUG FIXES:
Fix #239: -Wincompatible-pointer-types warning in remote.c.
Fix configure for -Wstrict-prototypes.
Fix #262: Zone(s) not synchronizing properly via TLS.
Fix for #262: More error logging for SSL read failures for zone
transfers.
Merge #265: Fix C99 compatibility issue.
Fix #266: Fix build with --without-ssl.
Fix for #267: neater variable definitions.
Fix #270: reserved identifier violation.
Fix to clean more memory on exit of dnstap collector.
Fix dnstap to not check socket path when using IP address.
Fix to compile without ssl with dnstap-tls code.
Dnstap tls code fixes.
Fix include brackets for ssl.h include statements, instead of quotes.
Fix static analyzer warning about nsd_event_method initialization.
Fix #273: Large TXT record breaks AXFR.
Fix ixfr create from adding too many record types.
Fix cirrus script for submit to coverity scan to libtoolize
the configure script components config.guess and config.sub.
Fix readme status badge links.
make depend.
Fix for build to run flex and bison before compiling code that needs
the headers.
Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h.
For #279: Note that autoreconf -fi creates the configure script
and also the needed auxiliary files, for autoconf 2.69 and 2.71.
Fix unused variable warning in unit test, from clang compile.
Fix #240: Prefix messages originating from verifier.
Fix #275: Drop unnecessary root server checks.
Revision 1.121 / (download) - annotate - [select for diffs], Sun Jan 8 19:34:29 2023 UTC (15 months, 1 week ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2023Q2-base,
pkgsrc-2023Q2,
pkgsrc-2023Q1-base,
pkgsrc-2023Q1
Changes since 1.120: +2 -2
lines
Diff to previous 1.120 (colored) to selected 1.66 (colored)
nsd: Update to 4.6.1 CHangelog: 4.6.1 ================ FEATURES: - Set ALPN "dot" token during connection establishment as per RFC9103 section 7.1 (Thanks Cesar Kuroiwa). - Add SVCB dohpath support BUG FIXES: - Fix static analyzer reports, fix wrong log print when skipping xfr, fix to print error on pipe read fail, and assert an xfr is in progress during packet checks. - Use AC_PROG_CC_STDC with autoconf versions prior to 2.70. - Add missing documentation for zone verification. - Fix #212: Change commandline control actions to always log. - Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work on OpenBSD. - Change zone parsing to accept non-trailing newline.
Revision 1.120 / (download) - annotate - [select for diffs], Wed Aug 3 17:14:10 2022 UTC (20 months, 2 weeks ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2022Q4-base,
pkgsrc-2022Q4,
pkgsrc-2022Q3-base,
pkgsrc-2022Q3
Changes since 1.119: +2 -2
lines
Diff to previous 1.119 (colored) to selected 1.66 (colored)
nsd: Update to 4.6.0
Changelog:
This release adds the zone verification support from the CreDNS code.
There are also some bug fixes in the ixfr out code.
Zone verification can start a verifier program that reads the new zone
data. It can reject the update. Or process the new zone data. The intent
is for a DNSSEC verifier to inspect the zone before it is passed on with
zone transfer or served to clients.
The zone verification can be enabled with enable: yes in the verify
section in nsd.conf. You can then list the interfaces the NSD listens on
while the verifier is active, so it can send queries for the new zone
contents. With verify-zones: yes zones are verified by default. The
command that is executed can be set with the verifier: ldns-verify-zone
option. With verifier-count the max number of concurrent verifiers can
be set. With the verifier-feed-zone: yes option the zone can be input
on stdin to the verifier program. A timeout to stop the verifier can be
set with the verifier-timeout option.
Per zone options can also be set for a pattern or for a zone, for zone
verification. With verify-zone the zone verification can be enabled
per zone. The verifier can be set per zone. And the verifier-feed-zone
and verifier-timeout options can be controlled per zone.
FEATURES:
Port zone-verification from CreDNS to NSD4.
BUG FIXES:
Fix static analyzer reports on ixfrcreate temp file.
Fixup wrong ixfrcreate fread return check.
Revision 1.119 / (download) - annotate - [select for diffs], Thu Jun 16 16:23:01 2022 UTC (22 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2022Q2-base,
pkgsrc-2022Q2
Changes since 1.118: +2 -2
lines
Diff to previous 1.118 (colored) to selected 1.66 (colored)
nsd: Update to 4.5.0 Changelog: 6 May 2022: Wouter - Merge #209: IXFR out This adds IXFR out functionality to NSD. NSD can copy IXFRs from upstream to downstream clients, or create IXFRs from zonefiles. The options store-ixfr: yes and create-ixfr: yes can be used to turn this on. Default is turned off. The options ixfr-number and ixfr-size can be used to tune the number of IXFR transfers and total data size stored. This is configured per zone, the IXFRs are served to the hosts that are allowed to perform zone transfers. And if TSIG is configured, signed with the same key. The content is stored to file if a zonefile is configured for the zone, in the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain readable text format. The number of IXFRs is num.rixfr in statistics output, also per zone if per zone statistics are enabled. If offline, nsd-checkzone -i can create ixfr files. NSD already supports requesting IXFRs, this addition allows NSD to serve IXFR transfers to clients. NSD stops responding with NOTIMPL to IXFR requests, also for zones that do not have IXFR enabled. The clients gets a full zone reply or a status reply if the serial is up to date. - set version to 4.5.0 for feature change. - Tag for 4.5.0rc1 release. It became the 4.5.0 release on 13 May 2022. 14 April 2022: Wouter - Update cirrus script FreeBSD version. 25 March 2022: Wouter - Fix spelling error in comment in svcbparam_lookup_key. 2 March 2022: Wouter - Fix code analyzer zero divide warning. - Fix code analyzer large value with assertion. - Fix another code analyzer zero divide warning. - Fix code analyzer warning about uninitialized temp storage in loop. 10 February 2022: Wouter - Tag for 4.4.0rc1 release. This became 4.4.0 release on 17 Feb 2022, the code repository continues with version 4.4.1. 9 February 2022: Wouter - Fix unit tests for nds-control-setup exit code and the xfrd-tcp-max default. 7 February 2022: Wouter - Merge #207 Sync nsd-control-setup with unbound-control-setup to generate certificates with SANs. 28 January 2022: Wouter - Fix #206: build with --without-ssl fails. 27 January 2022: Wouter - current code branch continues as version 4.4.0, because of added feature. 26 January 2022: Wouter - Merge #193: Lower memory usage of the XFRD process by default. Instead of preallocating all elements, they are allocated when used. There are options for managing the memory usage, defaults are the same as before. xfrd-tcp-max sets the number of sockets for tcp connections that xfrd can make to download zone contents. And xfrd-tcp-pipeline the number of simultaneous transfers over the same connection. 12 January 2022: Wouter - Fix to document nsd-checkzone -p in the man page for nsd-checkzone. 7 January 2022: Wouter - Fix to change file mode before changing file owner for the nsd-control unix socket file. 3 January 2022: Wouter - Merge #204 from jonathangray: correct some spelling mistakes. 15 December 2021: Wouter - Fix #200: nsd-checkzone succeeds even with incorrect serial in SOA record. 2 December 2021: Wouter - Fix socket_partitioning unit test for FreeBSD. - Fix SVCB test to work around older dig with drill. - Fix unit test to not syslog setlogin failures.
Revision 1.118 / (download) - annotate - [select for diffs], Wed Dec 15 14:50:58 2021 UTC (2 years, 4 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2022Q1-base,
pkgsrc-2022Q1,
pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.117: +2 -2
lines
Diff to previous 1.117 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.9 The most important update, which caused crashes in previous version: 23 August 2021: Wouter - Fix #189: nsd 4.3.7 crash answer_delegation: Assertion `query->delegation_rrset' failed. Rest of the (long) Changelog here: https://github.com/NLnetLabs/nsd/blob/NSD_4_3_9_REL/doc/ChangeLog
Revision 1.117 / (download) - annotate - [select for diffs], Sat Aug 7 16:25:08 2021 UTC (2 years, 8 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3
Changes since 1.116: +2 -2
lines
Diff to previous 1.116 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.7 Changelog: 22 July 2021: Wouter - tag 4.3.7 release, with the fixes between rc1 and this release. 20 July 2021: Wouter - Fix typo in xfrd-tcp.c. 15 July 2021: Wouter - tag for 4.3.7rc1. - Fix compile of cookies on FreeBSD without IPv6. - Fix for loop initial declaration for nonc99 compiler. 14 July 2021: Wouter - Fix truncate test for EDNS COOKIE making one less RR is added. - Attempt to fix gcc11 warning. 13 July 2021: Willem - Fixes for child server processes getting out of sync with the dnstap-collector process 13 July 2021: Willem - Interoperable DNS Cookies support as per RFC7873 and RFC9018 9 July 2021: Willem - Client side DNS Zone Transfer-over-TLS (XoT) support as per draft-ietf-dprive-xfr-over-tls 29 June 2021: Willem - Fix #168: Buffer overflow in the dname_to_string() function 14 June 2021: Wouter - Update configure nonblocking test to use host. 25 May 2021: Wouter - Fix #179: log notice and server-count. 21 May 2021: Wouter - Test code has -q option for quiet output. 17 May 2021: Wouter - Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure script. 7 May 2021: Wouter - Fix #176: please review Loglevel on missing zonefile. 6 May 2021: Wouter - Fix #174: NS Records below delegation are not ignored (nsd-checkzone also does not raise any issue). 4 May 2021: Wouter - Fix SVCB sort call sizeof to be the size of the elements sorted. 29 April 2021: Tom - Implement Syntax of SVCB and HTTPS RR type as per draft-ietf-dnsop-svcb-https 13 April 2021: Wouter - Fix for #128: Skip over sendmmsg invalid argument when port is zero. - Fix #171: Invalid negative response (NSEC3) after IXFR. - Fix to make nsec3_chain_find_prev return NULL if one nsec3 left. - remove debug settings from unit test. 9 April 2021: Wouter - Fix for #170: Fix build warnings when IPv6 is disabled. - Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error. 30 March 2021: Wouter - Fix configure failure for enable systemd because of autoconf. - This became release 4.3.6, the repository continues for 4.3.7 in development. 29 March 2021: Wouter - Note unlisted changes in RELNOTES and prepare for 4.3.6rc1 tag. 29 March 2021: Willem - Per zone Access Control List for queries with an allow-query: option. 24 March 2021: Wouter - Update acx_nlnetlabs.m4 to version 38, fix deprecation test. - Fix configure to use header checks with compile. - Fix warning about unused function log_addr. 18 March 2021: Tom - Add Extended DNS Errors RFC8914 15 March 2021: Wouter - Fix double config.h include in configlexer.c - Fix to remove configyyrename from makedist.sh and also update the flex and bison rules there to add the "c_" prefix. 13 March 2021: Willem - Fix #154: TXT with parentheses fails in 4.3.5. - Align parsing of TXT elements with how bind does it. - A -p option to nsd-checkzone to print a successfully read zone. 12 March 2021: Wouter - Fix that wildcard is printed as a star instead of escaped, in logs and in written zone files. - Fix unit test for wildcard printout change. 11 March 2021: Wouter - Fix #163: A TSIG noncompliance with RFC 2845. 9 March 2021: Willem - Enable configuring a control-interface by interface name. 19 February 2021: Wouter - Fix segfault on high verbosity for TLS channels with dnstap log local address. 18 February 2021: Wouter - Fix #146 with #147: DNSTAP log the local address of the server with the dnstap logs. 16 February 2021: Wouter - Man page documentation for dnstap options. 8 February 2021: Wouter - Fix AF_LOCAL compile error for Solaris. - Fix ifaddrs compile error for Solaris. - Fix ifaddrs.h compile error for Solaris. 4 February 2021: Wouter - Merge PR #153 from fobser: Repair -fno-common linker errors automatically. - Fix uninitialized access of log_buf in error printout on apply ixfr. 26 January 2021: Wouter - Prevent a few more yacc clashes.
Revision 1.116 / (download) - annotate - [select for diffs], Sat Feb 27 18:54:27 2021 UTC (3 years, 1 month ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2021Q2-base,
pkgsrc-2021Q2,
pkgsrc-2021Q1-base,
pkgsrc-2021Q1
Changes since 1.115: +2 -2
lines
Diff to previous 1.115 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.5 Changelog: 19 January 2021: Wouter - Set branch ready for 4.3.5 release. 15 January 2021: Wouter - Fix #152: '*' in Rdata causes the return code to be NOERROR instead of NX. - Add config.guess and config.sub to .gitignore for autoconf 2.70. - Fix #150: TXT record validation difference with BIND. - Fixup TXT record validation fix for escaped quotes. - Fixup TXT record validation fix for escaped backslashes. - Fixup escape character parse for quoted strings. 11 January 2021: Wouter - Fix #151: DNAME not applied more than once to resolve the query. - Fix dname test for #148. - For #151: fix to not produce loops in output. 5 January 2021: Wouter - Fix configure.ac for autoconf 2.70. 4 January 2021: Wouter - Fix #148: CNAME need not be followed after a synthesized CNAME for a CNAME query. 11 December 2020: Wouter - Fix that nsd-control has timeout when connection is down. - remove windows socket ifdefs from nsd-control. 3 December 2020: Wouter - For #145: Fix that service of remaining TCP and TLS connections does not allow new queries to be made, the connection is closed. Only existing queries and zone transfers are answered, new ones are rejected by a close of the channel. 30 November 2020: Wouter - Fix #144: fix better. 27 November 2020: Wouter - Fix #144: Typo fix in nsd.conf.5.in. 26 November 2020: Wouter - Fix #143: xfrd no hysteresis with NOT IMPLEMENTED rcode.
Revision 1.115 / (download) - annotate - [select for diffs], Fri Dec 18 08:47:48 2020 UTC (3 years, 4 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2020Q4-base,
pkgsrc-2020Q4
Changes since 1.114: +2 -2
lines
Diff to previous 1.114 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.4 24 November 2020: Wouter - Merge PR #141: ZONEMD RR type. - tag for 4.3.4rc1. 23 November 2020: Wouter - Fix #142: NODATA answers missin SOA in authority section after CNAME chain. - Fix for CVE-2020-28935 : Fix that symlink does not interfere with chown of pidfile. - fix writepid for retvalue 0. 9 November 2020: Wouter - Fix #138: NSD returns non-EDNS answer when QUESTION is empty. - Fix to check nscount in previous fix for EDNS in formerr response when there is no question. 28 October 2020: Wouter - Remove unused init_cfg_parse routine from configlexer. 20 October 2020: Wouter - Fix to add missing closest encloser NSEC3 for wildcard nodata type DS answer. 14 October 2020: Wouter - Fix #134: IPV4_MINIMAL_RESPONSE_SIZE vs EDNS_MAX_MESSAGE_LEN. 13 October 2020: Wouter - Fix missing parenthesis on size of fix to init buffer. 12 October 2020: Wouter - Fix #127: two minor `-Wcast-qual` cleanups - Fix #126: minor header hygiene - Fix #125: include config.h in compat/setproctitle.c and fix prototype of `setproctitle` - Fix #133: fix 0-init of local ( stack ) buffer.
Revision 1.114 / (download) - annotate - [select for diffs], Sun Oct 25 11:07:48 2020 UTC (3 years, 5 months ago) by ryoon
Branch: MAIN
Changes since 1.113: +2 -2
lines
Diff to previous 1.113 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.3
Changelog:
4.3.3
================
FEATURES:
- Follow DNS flag day 2020 advice and
set default EDNS message size to 1232.
- Merged PR #113 with fixes. Instead of listing an IP-address to
listen on, an interface name can be specified in nsd.conf, with
ip-address: eth0. The IP-addresses for that interface are then used.
- Port TSIG code for openssl 3.0.0-alpha6.
BUG FIXES:
- Fix make install with --with-pidfile="".
- Merge #115 from millert: Fix strlcpy() usage. From OpenBSD.
- Merge #117: mini_event.h (4.3.2 and 4.3.1) on OpenBSD cannot find
fd_set - patch.
- Fix that configure checks for EVP_sha256 to detect openssl, because
HMAC_CTX_new is deprecated in 3.0.0.
- Fix #119: fix compile warnings from new gcc.
- Fix #119: warn when trying to parse a directory.
- Merge PR #121: Increase log level of recreated database from
WARNING to ERR.
- Remove unused space from LIBS on link line.
- Updated date in nsd -v output.
Revision 1.113 / (download) - annotate - [select for diffs], Wed Aug 12 16:14:36 2020 UTC (3 years, 8 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Changes since 1.112: +2 -2
lines
Diff to previous 1.112 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.2 Changelog: 7 July 2020: Wouter - Tag for 4.3.2rc1. 6 July 2020: Wouter - Fix compile includes for xfr-inspect tool on FreeBSD. - Add tpkg/run_vm.sh that runs test when in a virtual machine. - Merge #112 from jaredmauch: log old and new serials when NSD rejects an IXFR due to an old serial number. - Fix bug034 test for vm test changes. 22 June 2020: Wouter - Remove errno reset behaviour from sendmmsg and recvmmsg replacement functions. - Fix unit test for different nsd-control-setup -h exit code. 19 June 2020: Wouter - Merge #108 from Nomis: Make the max-retry-time description clearer. - Retry when udp send buffer is full to wait until buffer space is available. 18 June 2020: Wouter - Do not log EAGAIN errors for sendmmsg, to stop log spam on OpenBSD. 17 June 2020: Wouter - Fix #107: nsd -v shows configure line, openssl version and libevent version. 27 May 2020: Wouter - Fix unlink of pidfile warning if not possible due to permissions, nsd can display the message at high verbosity levels. - Update contrib/nsd.service for chown of nsd.log and /var/log in ReadWritePaths. - Removed contrib/nsd.service, example is too complicated and not useful. 15 May 2020: Wouter - Merge PR#102 from and0x000: add missing default in documentation for drop-updates. - Fix checkconf test for log-only-syslog option. 14 May 2020: Wouter - Document default value for tcp-timeout. 13 May 2020: Jeroen - Fix #99: Fix copying of socket properties with reuseport enabled. 24 April 2020: Wouter - Fix #97: EDNS unknown version: query not in response. 21 April 2020: Wouter - Fix #96: log-only-syslog: yes sets to only use syslog, fixes that the default configuration and systemd results in duplicate log messages. 20 April 2020: Wouter - Fix #95: Removed make test check because tpkg not included in release tarballs. - Fix unused parameter compile warnings.
Revision 1.112 / (download) - annotate - [select for diffs], Sat May 30 08:45:58 2020 UTC (3 years, 10 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2
Changes since 1.111: +3 -3
lines
Diff to previous 1.111 (colored) to selected 1.66 (colored)
nsd: Some library functions require _NETBSD_SOURCE on NetBSD
Revision 1.111 / (download) - annotate - [select for diffs], Thu Apr 30 07:42:13 2020 UTC (3 years, 11 months ago) by ryoon
Branch: MAIN
Changes since 1.110: +2 -2
lines
Diff to previous 1.110 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.1 Changelog: 8 April 2020: Wouter - Tag for 4.3.1rc2. 7 April 2020: Wouter - Merge #91 by gearnode: nsd-control-setup recreate certificates. The '-r' option recreates certificates. Without it it creates them if they do not exist, and does not modify them otherwise. 6 April 2020: Wouter - Merge #90 by phicoh: O_CLOEXEC should be FD_CLOEXEC. - Merge #92 by tonysgi: Fix typo. 2 April 2020: Wouter - Tag for 4.3.1rc1. 1 April 2020: Wouter - Fix for whitespace in minimal responses test for FreeBSD. 25 March 2020: Wouter - Merge #86 from noloader: Use precious variables for GREP, EGREP, SED, AWK, LEX and YACC. - For #86: Fix that programs loaded after CFLAGS and stuff is set, specifically the compiler, so that it can work if it needs special flags from that. Fix that lex only needs to support -i if actually defined, otherwise the output included in the source tarball can be used. - Merge #72 from noloader: Increase Travis testing coverage 23 March 2020: Wouter - Fix unterminated ifdef in nsd.h. - Fix unknown u_long in util.c for Issue #80 . 20 March 2020: Wouter - Merge #83 from noloader: Fix GNU HURD sched_setaffinity compile. - Fix #82: print error when system does not have setaffinity. - Fix #80: NetBSD and implicit declaration of reallocarray. - Fix for #80: Fix reallocarray test to define before include. - Fix for #80: Define alternatives for IFNAMSIZ if it does not exist. 19 March 2020: Wouter - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile. - Fix #75: configure test for sched_setaffinity, and use cpuset_setaffinity otherwise. Also test for presence of sysconf. - Fix #74: GNU Hurd fix cast from pointer to integer of different size. - Fix for #74, #75: cpuset test for header contents and provide code. - Fix #78: Fix SO_SETFIB error on FreeBSD. 18 March 2020: Wouter - Fix #70: error: 'fd_set' undeclared. - Fix #71: error: 'for' loop initial declaration used outside C99 mode. - Fix to move declarations out of for loops in event test too. - Fix to move declarations out of for loops in popen3 test too. - Another fix to move declaration out of for loop for event test. - Fix to move declarations out of for loops in cutest regex display.
Revision 1.110 / (download) - annotate - [select for diffs], Mon Mar 30 12:29:05 2020 UTC (4 years ago) by ryoon
Branch: MAIN
Changes since 1.109: +2 -2
lines
Diff to previous 1.109 (colored) to selected 1.66 (colored)
nsd: Update to 4.3.0 Changelog: 10 March 2020: Wouter - repository has version number 4.3.0. Tag for 4.3.0rc1. 3 March 2020: Wouter - Fix that the retry wait does not exceed one day for zone transfers. 27 February 2020: Wouter - Fix warning on FreeBSD about pointer size cast. 26 February 2020: Wouter - Fixup fix of reuseport TCP for server close of sockets not used by it. And the unit test skips when the necessary debug output is not enabled. 25 February 2020: Wouter - Fix event unit test, signal has to be registered with signal_add, event_add not for every backend for signals. The event_initialized is not possible for every backend, so event_added variable. The agent write event fires after a timeout, instead of on event write so that it does not trigger a sigpipe event when the handlers stop. Timeout shorted to 0.1 second. event_get_fd was not implemented, so used ev_fd. Debug output printfs added to see what happens. - Fix checkconf test for new drop-updates config option. - Fix errors with reuseport and TCP file descriptors, it was closing them for server-1 in server-2 and server-3.. 7 February 2020: Jeroen - Add feature to drop queries with opcode UPDATE. 6 February 2020: Jeroen - Support SO_BINDTODEVICE on Linux. Specify bindtodevice: yes to bind sockets directly to the network interface. - Support SO_SETFIB on FreeBSD. Add setfib=<FIB> after an ip-address option to use the specified FIB for that socket. - Require user to add servers=<range> after an ip-address option to specify the servers that must listen on that socket. 6 February 2020: Wouter - Merge PR#60: Minor portability fixes from michaelforney, with avoid pointer arithmetic on void* and avoid unnecessary VLA. 4 February 2020: Wouter - Merge PR#22: minimise-any: prefer polular and not large RRset, from Daisuke Higashi. - Fix responses for IXFR so that the authority section is not echoed in the response. 21 January 2020: Wouter - Fix leak in server bitset setup. 16 January 2020: Jeroen - Add zone resource record iterator for future zone-verification port. - Set FD_CLOEXEC on opened sockets. - Add popen3 implementation for future zone-verification port. - Add -r option to cutest so that a subset of tests can be run. 15 January 2020: Jeroen - Add feature to pin server proccesses to specific cpus. - Add feature to pin IP addresses to selected server processes. - Set process title to identify individual processes. 13 January 2020: Wouter - Merge pull request #59 from buddyns: add FreeBSD support for conf key ip-transparent. 10 January 2020: Wouter - Fix unreachable code in ssl set options code. - Fix bad shift in assertion code analyzer complaint. 6 January 2020: Wouter - Fix #56: Drop sparse TSIG signing support in NSD. Sign every axfr packet with TSIG, according to the latest draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1. 12 December 2019: Wouter - Note that use-systemd is not necessary and ignored in man page. 11 December 2019: Wouter - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters. - use-systemd is ignored in nsd.conf, when NSD is compiled with libsystemd it always signals readiness, if possible. 9 December 2019: Wouter - Fix to define upper bounds on rr counts read from untrusted packet data. - Try different annotation for radix_find_prefix_node not reachable. - Separate acl_addr_match_range functions for ip4 and ip6, to please checkers. - Avoid unused variable warning in new match_range_v4 function. 6 December 2019: Wouter - Fix to define max number of EDNS records we are willing to spend time on. - Fix size of string len and capacity type cast in udbradtree. - Fix to protect rrcount in tsig_find_rr from overflow. - Annotate radix_find_prefix_node not reachable trail code. - Fix to protect rrcount in packet_find_notify_serial from overflow. - Fix to close socket on error in create_tcp_accept_sock. - Fix to log on failure to chmod for socket for remote control. - Fix to remove unneeded if in open of socket for remote control. - Fix to restore input parameter on call failure in create_dirs. - Please checker by terminating and initialising string read by remote control. - Fixup of random_generate negative modulo, from previous commit, and return srandom when random is used if no getrandom. 5 December 2019: Wouter - Fix fname null check of fname in namedb_read_zonefile. - Fix implicit cast of size in udb_radnode_array_grow. - Fix ignore of return value of ssl_printf in remote.c. - Fix unused check of fd in parent_handle_reload_command. - Fix to use getrandom() for randomness, if available. - Attempt to fix signedness of nscount lookup in ixfr query_process. - Fix identical branches for ssl_print of errors in remote.c. - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record. - Fix to separate header and data lines in parse_zone_list_file.
Revision 1.109 / (download) - annotate - [select for diffs], Thu Feb 20 12:35:55 2020 UTC (4 years, 1 month ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.108: +2 -3
lines
Diff to previous 1.108 (colored) to selected 1.66 (colored)
nsd: Update to 4.2.4 Changelog: 3 December 2019: Wouter - Fix #52: do not log transient network full errors unless higher verbosity is set. - Fix checkconf test for new error output string. - tag for 4.2.4rc1 release. 27 November 2017 Jeroen - Fix regressions in configparser.y 22 November 2019: Wouter - Fix #48: Add make distclean that removes config.h made by configure. And add maintainer-clean that removes bison and flex output. 18 November 2019: Wouter - Detect fixed time memcmp for openssl 0.9.8 compatibility. - Detect EC_KEY_new_by_curve_name for openssl 0.9.8. - include limits.h for UINT_MAX. - If no recvmmsg, dont use msg_flags member, but errno for error, where our fallback function left it, msg_flags also does not exist on some systems. - Remove unused variable warning for portability. 14 November 2019: Wouter - Fix checkconf test with filenames that sort in the same order. - Tag for 4.2.3rc1. Branch master is 4.2.4 in development. 11 November 2019: Wouter - Fix #44: document that remote-control is a top-level nsd.conf attribute. - Fix compile on OSX. - Fix for #44: nicer top-level clause documentation. 22 October 2019: Jeroen - Number of different UDP handlers has been reduced to one. recvmmsg and sendmmsg implementations are now used on all platforms. Compatible implementations are in place for systems that lack the system calls. - Socket options are now set in designated functions for easy reuse. - Socket setup has been simplified for easy reuse. - Configuration parser is now aware of the context in which an option was specified. 21 October 2019: Wouter - For #21 add contrib/patch_for_s6_startup_and_other_service_supervisors.diff that adds support for readiness notification with READY_FD from Cameron Nemo. 17 October 2019: Jeroen - Fix #40: Merge small fixes for confine-to-zone by Greg Bock. 15 October 2019: Jeroen - For #39: Merge confine-to-zone feature contributes by Greg Bock. 26 September 2019: Wouter - Fix #38: log address and failure reason with tls handshake errors, squelches (the same as unbound) some unless high verbosity is used. - Fixup clang analysis warning in xfrd_parse_received_xfr_packet master dereference. 25 September 2019: Wouter - The nsd.conf includes are sorted ascending, for include statements with a '*' from glob. 16 September 2019: Wouter - Fixup warnings during --disable-ipv6 compile. - Fixup unit test executable to run without IPv6. 4 September 2019: Wouter - Fix #35: excessive logging of ixfr failures, it stops the log when fallback to axfr is possible. log is enabled at high verbosity. 2 September 2019: Wouter - For #21: pidfile "" allows to run NSD without a pidfile, for startup management tools like daemontools. 28 August 2019: Wouter - In tests check for tls test tool availability.
Revision 1.108 / (download) - annotate - [select for diffs], Sat Jan 25 10:45:10 2020 UTC (4 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.107: +1 -3
lines
Diff to previous 1.107 (colored) to selected 1.66 (colored)
*: Remove obsolete BUILDLINK_API_DEPENDS.openssl.
Revision 1.107 / (download) - annotate - [select for diffs], Sat Jan 18 21:50:21 2020 UTC (4 years, 3 months ago) by jperkin
Branch: MAIN
Changes since 1.106: +2 -1
lines
Diff to previous 1.106 (colored) to selected 1.66 (colored)
*: Recursive revision bump for openssl 1.1.1.
Revision 1.106 / (download) - annotate - [select for diffs], Sun Nov 3 11:45:45 2019 UTC (4 years, 5 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4
Changes since 1.105: +17 -17
lines
Diff to previous 1.105 (colored) to selected 1.66 (colored)
net: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
Revision 1.105 / (download) - annotate - [select for diffs], Wed Aug 21 14:16:40 2019 UTC (4 years, 7 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.104: +7 -2
lines
Diff to previous 1.104 (colored) to selected 1.66 (colored)
Update to 4.2.2 * Readd _OPENBSD_SOURCE explicitly to fix build on NetBSD 9 Changelog: 13 August 2019: Wouter - Fix error message for out of zone data to have more information. 12 August 2019: Wouter - Fix #33: Fix segfault in service of remaining streams on exit. 6 August 2019: Wouter - Tag for 4.2.2rc1. 5 August 2019: Wouter - PR #31: nsd-control: Add missing stdio header. - PR #32: tsig: Fix compilation without HAVE_SSL. - Cleanup tls context on xfrd exit. 31 July 2019: Wouter - Fix #29: SSHFP check NULL pointer dereference. - Fix #30: SSHFP check failure due to missing domain name. - Fix to timeval_add in minievent for remaining second in microseconds. 22 July 2019: Wouter - Set timeout for refetch immediately, only spread load when there are retries. 19 July 2019: Wouter - Set no renegotiation on the SSL context to stop client session renegotiation. 18 July 2019: Wouter - Fix #25: NSD doesn't refresh zones after extended downtime, it refreshes the old zones, with a random delay of a couple of seconds to spread the load. - Fix so that expired zones stay expired when server is down a long time. 17 July 2019: Wouter - Fix that NSD warns for wrong length of the hash in SSHFP records. 15 July 2019: Wouter - PR #23: Fix typo in nsd.conf man-page. 4 July 2019: Wouter - Set version to 4.2.2 in development. - clean memory on exit of nsd-checkzone for memory debug. - Fix #20: CVE-2019-13207 Stack-based Buffer Overflow in the dname_concatenate() function. Reported by Frederic Cambus. It causes the zone parser to crash on a malformed zone file, with assertions enabled, an assertion catches it. - Fix #19: Out-of-bounds read caused by improper validation of array index. Reported by Frederic Cambus. The zone parser fails on type SIG because of mismatched definition with RRSIG. 2 July 2019: Wouter - Tag for 4.2.1rc1 27 June 2019: Wouter - Fix unit test for added options and no dot after zone updated log message. - Fix compile without accept4. 21 June 2019: Wouter - Omit remaining tcp processing if the list is empty. - Fix output of nsd-checkconf -h. 20 June 2019: Wouter - Initialize event structures before event_set, to stop uninitialized values from setting event library lists and assertions, that would sometimes also show after event_del. - Added num.tls and num.tls6 stat counters. - PR #12: send-buffer-size, receive-buffer-size, tcp-reject-overflow options for nsd.conf, from Jeroen Koekkoek. - Do not use symbol from libc, instead use own replacement, if not available, for accept4. - Fix #14, tcp connections have 1/10 to be active and have to work every second, and then they get time to complete during a reload, this is a process that lingers with the old version during a version update. 19 June 2019: Wouter - Fix tls handshake event callback function mistake, reported by Mykhailo Danylenko. 18 June 2019: Wouter - Fix #15: crash in SSL library, initialize variables for TCP access when TLS is configured. 14 June 2019: Wouter - Fix to init event not pointer, in reassignment. 12 June 2019: Wouter - Fix to init event structure for reassignment.
Revision 1.104 / (download) - annotate - [select for diffs], Tue Jul 16 11:38:27 2019 UTC (4 years, 9 months ago) by ryoon
Branch: MAIN
Changes since 1.103: +1 -6
lines
Diff to previous 1.103 (colored) to selected 1.66 (colored)
Remove _OPENBSD_SOURCE for NetBSD from Makefile * Upstream includes _OPENBSD_SOURCE for NetBSD. Noticed by gdt@. Thank you.
Revision 1.103 / (download) - annotate - [select for diffs], Fri Jul 5 07:53:10 2019 UTC (4 years, 9 months ago) by bsiegert
Branch: MAIN
Changes since 1.102: +2 -2
lines
Diff to previous 1.102 (colored) to selected 1.66 (colored)
nsd: update HOMEPAGE The previous one 404s.
Revision 1.102 / (download) - annotate - [select for diffs], Thu Jun 13 13:21:40 2019 UTC (4 years, 10 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2
Changes since 1.101: +2 -3
lines
Diff to previous 1.101 (colored) to selected 1.66 (colored)
Update to 4.2.0
Changelog:
4.2.0
================
FEATURES:
- Print IP address when bind socket fails with error.
- Fix #4249: The option hide-identity: yes stops NSD from responding
with the hostname for chaos class queries. Implements the RFC4829
security considerations.
- Patch to add support for TCP Fast Open, from Sara
Dickinson (Sinodun).
- Patch to add support for tls service on a specified tls port,
from Sara Dickinson (Sinodun).
- Use travis for build check, initial unit test and clang analysis.
BUG FIXES:
- Fix to delete unused zparser.default_apex member.
- Fix that the TLS handshake routine sets the correct event to
continue when done.
- Fix that TLS renegotiation calls the read and write routines again
with the same parameters when the desired event has been satisfied.
- Fix that TCP Fastopen has better error message and supports OSX.
- Fix to avoid buffer alloc with global buffer in tls write handler.
- Fix to initialize event structure when accepting TCP connection.
- Disable TLS1.0, TLS1.1 and weak ciphers, enable
CIPHER_SERVER_PREFERENCE, patch from Andreas Schulze.
- further setup ssl ctx after the keys are loaded, for ECDH.
- TLS OCSP stapling support, enabled with tls-service-ocsp: filename,
patch from Andreas Schulze.
- Fix #10: Fix memory leaks caused by duplicate rr and include
instructions.
- Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.
4.1.27
================
FEATURES:
- Deny ANY with only one RR in response, by default. Patch from
Daisuke Higashi. The deny-any statement in nsd.conf sets ANY
queries over UDP to be further moved to TCP as well.
Also no additional section processing for type ANY, reducing
the response size.
- Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds
nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig
and del_tsig. These changes are gone after reload, edit the
config file (or a file included from it) to make changes that
last after restart.
BUG FIXES:
- Fix #4213: disable-ipv6 and dnstap compile error.
- Fix to reduce region_log_stats if condition, this removes a
debug statement.
- Fix for FreeBSD port with dnstap enabled.
- Fix to remove unused code.
- Fix #6: nsd-control-setup: Change validity time to a shorter
period (<2038).
- Fix unused definition in header remote.h.
- Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big.
- Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets.
- Fixed radtree_insert memory leak.
- Fixed access recycled variable.
Revision 1.101 / (download) - annotate - [select for diffs], Tue Jan 29 14:54:03 2019 UTC (5 years, 2 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base,
pkgsrc-2019Q1
Changes since 1.100: +3 -2
lines
Diff to previous 1.100 (colored) to selected 1.66 (colored)
Do not conflict with nsd in NetBSD base. Rename rc.d script to nlsnd Bump PKGREVISION.
Revision 1.100 / (download) - annotate - [select for diffs], Thu Jan 17 13:59:37 2019 UTC (5 years, 3 months ago) by prlw1
Branch: MAIN
Changes since 1.99: +4 -2
lines
Diff to previous 1.99 (colored) to selected 1.66 (colored)
Update nsd to 4.1.26
XXX Remove MESSAGE as nsd 4.0.0 came out in October 2013?
XXX Did not add dnstap support to pkg.
29 November 2018: Wouter
- Tag for 4.1.26rc1.
27 November 2018: Wouter
- Fix parsezone failure in 4194 fix.
26 November 2018: Wouter
- Fix to not set GLOB_NOSORT so the nsd.conf include: files are
sorted and in a predictable order.
- Added nsd-control changezone. nsd-control changezone name pattern
allows the change of a zone pattern option without downtime for
the zone, in one operation.
- Fix #3433: document that reconfig does not change per-zone stats.
20 November 2018: Wouter
- Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails.
This sets the msg_hdr.msg_namelen correctly after receipt.
19 November 2018: Wouter
- Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes
option in nsd.conf.
- Fix #4202: nsd-control delzone incorrect exit code on error.
- Tab style fix to use tab for 8 spaces, from Xiaobo Liu.
25 October 2018: Wouter
- Adjust dnstap socket path for chroot.
22 October 2018: Wouter
- Fix #4194: Zone file parser derailed by non-FQDN names in RHS of
DNSSEC RRs.
- Fix some more, neater code and checks for domain length limit.
- check that the dnstap socket file can be opened and exists, print
error if not.
4 October 2018: Wouter
- dnstap work, the dnstap.proto is a copy of the file from Unbound,
also dnstap.m4 configure include file.
- dnstap collector: free eventbase and memclean nicer.
- dnstap collector: send data and read it in collector.
- dnstap/dnstap.c and .h from Unbound's contribution from
Farsight Security, added to then adapt it for dnstap logging in NSD.
- dnstap.c with auth query and auth response, and called from
the collector.
- dnstap work, config nsd.conf parse.
- dnstap example config.
25 September 2018: Wouter
- NSD 4.1.25 released, trunk has 4.1.26 in development.
18 September 2018: Wouter
- tag for NSD 4.1.25rc1.
17 September 2018: Wouter
- Fix #4156: Fix systemd service manager state change notification
14 September 2018: Wouter
- Remove unused if clause during server service startup.
13 September 2018: Wouter
- Fix typo in clang analysis test.
- Annotate exit functions with noreturn.
- nsd-control prints neater errors for file failures.
12 September 2018: Wouter
- clang analysis test.
11 September 2018: Wouter
- Fix to combine the same error function into one, from Xiaobo Liu.
- Fix initialisation in remote.c.
- please clang analyzer and fix parse of IPSECKEY with bad gateway.
- Fix unit test code for clang analyzer.
- Fix nsd-checkconf fail on bad zone name.
10 September 2018: Wouter
- Fix coding style in nsd.c
7 September 2018: Wouter
- append_trailing_slash has one implementation and is not repeated
differently.
4 September 2018: Wouter
- Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu.
15 August 2018: Wouter
- Fix use_systemd typo/leftover in remote.c.
13 August 2018: Wouter
- tag for 4.1.24 release.
- trunk is 4.1.25 in development.
- Fix that nsec3 precompile deletion happens before the RRs of
the zone are deleted.
- Fix printout of accepted remote control connection for unix sockets.
6 August 2018: Wouter
- tag for 4.1.24rc1 release.
Revision 1.99 / (download) - annotate - [select for diffs], Tue Sep 4 11:24:34 2018 UTC (5 years, 7 months ago) by prlw1
Branch: MAIN
CVS Tags: pkgsrc-2018Q4-base,
pkgsrc-2018Q4,
pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.98: +2 -2
lines
Diff to previous 1.98 (colored) to selected 1.66 (colored)
Update nsd to 4.1.24
4.1.24
================
FEATURES:
- #4102: control interface via local socket.
configure it with control-interface: "/path/nsd.ctl" The path
has to start with a / to separate it from an IP address.
The local socket does not use SSL, but unencrypted traffic, use
file and containing directory permissions to restrict access.
- configure --enable-systemd (needs pkg-config and libsystemd) can
be used to then use-systemd: yes in nsd.conf and have readiness
signalling with systemd.
- RFC8162 support, for record type SMIMEA.
BUG FIXES:
- Patch to fix openwrt for mac os build darwin detection in configure.
- Fix that first control-interface determines if TLS is used. Warn
when IP address interfaces are used without TLS.
- #4106: Fix that stats printed from nsd-control are recast from
unsigned long to unsigned (remote.c).
- Fix that type CAA (and URI) in the zone file can contain
dots when not in quotes.
- #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM
chain, NSD leniently attempts to find a working NSEC3PARAM.
4.1.23
================
BUG FIXES:
- Fix NSD time sensitive TSIG compare vulnerability.
4.1.22
================
FEATURES:
- refuse-any sends truncation (+TC) in reply to ANY queries over UDP,
and allows TCP queries like normal.
- Use accept4 to speed up answer of TCP queries, on Linux, FreeBSD
and OpenBSD.
BUG FIXES:
- Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
- Fix to use same condition for nsec3 hash allocation and free.
Revision 1.98 / (download) - annotate - [select for diffs], Sun Jun 10 04:27:03 2018 UTC (5 years, 10 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2
Changes since 1.97: +2 -2
lines
Diff to previous 1.97 (colored) to selected 1.66 (colored)
Update to 4.1.21
Changelog:
Features
--enable-memclean cleans up memory for use with memory checkers,
eg. valgrind.
refuse-any nsd.conf option that refuses queries of type ANY.
lower memory usage for tcp connections, so tcp-count can be higher.
Bug Fixes
Fix unused variable warnings and uninit variable in statistics printout
from clang analyzer.
Fix spelling error in xfr-inspect.
Fix #3562: explain build error when flex missing.
Fix buffer size warnings from compiler on filename lengths.
Fix #4093: Release notes not using 2018.
Revision 1.97 / (download) - annotate - [select for diffs], Sun Feb 25 04:47:53 2018 UTC (6 years, 1 month ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base,
pkgsrc-2018Q1
Changes since 1.96: +2 -2
lines
Diff to previous 1.96 (colored) to selected 1.66 (colored)
Update to 4.1.20
Changelog:
4.1.20
================
BUG FIXES:
- Fix memory leak in zone file read of unknown rr formatted RRs.
- Fix memory leak when rehashing nsec3 after axfr or zonefile read,
in the selectively allocated precompiled nsec3 hashes.
Revision 1.96 / (download) - annotate - [select for diffs], Mon Jan 1 07:31:54 2018 UTC (6 years, 3 months ago) by ryoon
Branch: MAIN
Changes since 1.95: +2 -3
lines
Diff to previous 1.95 (colored) to selected 1.66 (colored)
Update to 4.1.19
Changelog:
NSD 4.1.19
Dec 11, 2017
Bugfixes
* ignore fallthrough compiler warning in flex EOF rule.
* Fix warnings emitted by clang for --enable-packed. Alignment is
not a problem for x86_64, don't enable packed when the platform
requires aligned access.
* Fix spelling error in xfr-inspect.
* Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 and ip6
targets.
* Add test for support of -Wno-address-of-packed-member for --enable-packed.
NSD 4.1.18
Nov 30, 2017
Features
* xfr-inspect, it is not installed, it prints xfr files from /tmp made
with 'make xfr-inspect' in the source dir.
* retry timeout between sending notifies dropped from 15 to 3 sec.
* NSD sends 16 notifies simultaneously.
* configure --enable-packed reduces memory usage, at expense of unaligned
reads. Saves about 17%.
* Save memory by selectively allocate precompiled nsec3 hashes, saves
about 16% memory.
* make ip-transparent option work on OpenBSD.
* Save about 2% memory by changing usage count size in name tree.
* Fix #2871: Increase number of sockets for xfrd transfers.
Bugfixes
* Fix gcc 7.1.1 warnings.
* Fix writev compile warning on FreeBSD.
* Fix #1446: A corrupted zone file "propagates" to good ones.
* nsd-control zonestatus prints wait time between attempts, for zones
that are in that waiting time.
* Fix collision printout of nsec3 to print name, hash and reverse.
* Fix #1567: Change crit to err log level for gettimeofday failure.
Add defines for compile without syslog.
* Fix crash for DS query when parent and child zones both configured
in nsd.conf and parent zone has not loaded properly.
Revision 1.95 / (download) - annotate - [select for diffs], Tue Aug 22 00:32:18 2017 UTC (6 years, 7 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3
Changes since 1.94: +4 -5
lines
Diff to previous 1.94 (colored) to selected 1.66 (colored)
Define _OPENBSD_SOURCE to build sane binary on NetBSD suggested from joerg@. Thank you. * Bump PKGREVISION
Revision 1.94 / (download) - annotate - [select for diffs], Mon Aug 21 23:25:23 2017 UTC (6 years, 7 months ago) by ryoon
Branch: MAIN
Changes since 1.93: +8 -1
lines
Diff to previous 1.93 (colored) to selected 1.66 (colored)
On NetBSD/amd64 8.0_BETA and 8.99.1 at least, reallocarray(3) in base causes runtime error and it does not boot at all * Pass reallocarray as no for NetBSD * Bump PKGREVISION
Revision 1.93 / (download) - annotate - [select for diffs], Sun Aug 13 11:11:42 2017 UTC (6 years, 8 months ago) by nros
Branch: MAIN
Changes since 1.92: +2 -2
lines
Diff to previous 1.92 (colored) to selected 1.66 (colored)
Update nsd to version 4.1.17. Changes from release notes. Features * zone parser parses type AVC (it has TXT format). * Fix #1272: use writev to put tcp length field with data for outgoing zone transfer requests. Bugfixes * Fix potential null pointer in nsec3 adjustment tree. * Fix text format of deletes for CDS and CDNSKEY, single 0 to represent empty base64 or hex string.
Revision 1.92 / (download) - annotate - [select for diffs], Tue Aug 8 16:39:11 2017 UTC (6 years, 8 months ago) by jlam
Branch: MAIN
Changes since 1.91: +1 -2
lines
Diff to previous 1.91 (colored) to selected 1.66 (colored)
Don't use INSTALLATION_DIRS where MAKE_DIRS or OWN_DIRS is correct. Bump the PKGREVISION where the package install script has changed due to changes in MAKE_DIRS or OWN_DIRS.
Revision 1.91 / (download) - annotate - [select for diffs], Tue May 2 14:44:38 2017 UTC (6 years, 11 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base,
pkgsrc-2017Q2
Changes since 1.90: +2 -2
lines
Diff to previous 1.90 (colored) to selected 1.66 (colored)
Update to 4.1.16
Changelog:
Apr 25, 2017
Features
zone parser can parse acronyms for algorithms ED25519 and ED448.
Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf.
Bugfixes
Calculate new udb index after growing the array, fix from Chaofeng Liu.
Fix missing _t to _type conversion for disable-radix-tree option.
Printout serial error with hint it may be too big.
Fix 1228: OpenSSL include is not guarded with HAVE_SSL
Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda.
minor manpage fix.
Revision 1.90 / (download) - annotate - [select for diffs], Wed Mar 1 11:45:03 2017 UTC (7 years, 1 month ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base,
pkgsrc-2017Q1
Changes since 1.89: +2 -2
lines
Diff to previous 1.89 (colored) to selected 1.66 (colored)
Update to 4.1.15
Changelog:
NSD 4.1.15
Feb 16, 2017
Bugfixes
Fix nsd-control and ipv6 only.
Squelch zone transfer error address family not supported by protocol at low verbosity levels.
Fix #1195: Fix so that NSD fails on non-compliant values for Serial.
Fix to rename _t typedefs because POSIX reserves them.
Fix that nsec3 hash collisions only reported on verbosity level 3.
Revision 1.89 / (download) - annotate - [select for diffs], Thu Dec 8 23:19:53 2016 UTC (7 years, 4 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base,
pkgsrc-2016Q4
Changes since 1.88: +2 -2
lines
Diff to previous 1.88 (colored) to selected 1.66 (colored)
NSD 4.1.14 ========== FEATURES: - Fix #1132 for SERVFAIL zones perform backoff, and remembers the timeout on next startup. BUG FIXES: - Fix null memcpy for radixtree with single link element. - Robust fix against missing master in tcp_open for xfrd. - Fix wildcards in include: config statements with chroot enabled. - suppress compile warning in lex files. - Fix to try every master once, then wait for timeout or notify. - Save backoff timeout into xfrd.state file, this file has a higher version number now. Old files are skipped silently (causes refresh) and created as new files upon exit. - Fix restart of zone transfers when new config becomes available.
Revision 1.88 / (download) - annotate - [select for diffs], Wed Oct 26 23:40:35 2016 UTC (7 years, 5 months ago) by ryoon
Branch: MAIN
Changes since 1.87: +2 -4
lines
Diff to previous 1.87 (colored) to selected 1.66 (colored)
Update to 4.1.13
* Remove an useless patch
Changelog:
NSD 4.1.13
Sep 27, 2016
Features
multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters, from Manabu Sonoda.
Support RR type OPENPGPKEY from RFC 7929.
Can config key algorithms with the digest name, eg. 'sha256'.
configure --disable-radix-tree for about 15% lower memory usage.
for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX.
more extensible edns option handling.
Bugfixes
Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime.
Fix #812: fix that make depend fails after distribution.
Fix #817: xfrd update failed loop.
Add robustness against unallocated data in nsec3 trees.
Fix README spelling error of BSD license (reported by Joerg Jung).
Fix multimaster for not tried full zone transfer for a expired zone.
Fix #827: fix compile with openssl 1.1.0 with api=1.1.0.
Revision 1.87 / (download) - annotate - [select for diffs], Wed Sep 14 12:51:41 2016 UTC (7 years, 7 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2016Q3-base,
pkgsrc-2016Q3
Changes since 1.86: +2 -2
lines
Diff to previous 1.86 (colored) to selected 1.66 (colored)
Update to 4.1.12 Changelog: Bugfixes Fix malformed edns query assertion failure, reported by Michal Kepien (NASK).
Revision 1.86 / (download) - annotate - [select for diffs], Thu Aug 18 13:02:52 2016 UTC (7 years, 8 months ago) by ryoon
Branch: MAIN
Changes since 1.85: +2 -2
lines
Diff to previous 1.85 (colored) to selected 1.66 (colored)
Update to 4.1.11
Changelog:
1 August 2016: Wouter
- Tag 4.1.11rc1.
- Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
- Tag 4.1.11rc2.
8 July 2016: Wouter
- Note down tracking numbers for issue JVN#63359718 JPCERT#91251865.
5 July 2016: Wouter
- Fix #790: size-limit-xfr can stop NSD from downloading infinite zone
transfer data size, from Toshifumi Sakaguchi.
27 June 2016: Wouter
- Set default for min-refresh-time and min-retry-time to 0. Behaves
just like before, but has a configurable option in nsd.conf.
- Fix #783: Trying to run a root server without having configured it
silently gives wrong answers.
16 June 2016: Wouter
- When tcp is more than half full, use short timeout for tcp session.
- Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
- man page entries for max-refresh-time patch.
15 June 2016: Wouter
- Fix build without IPv6, patch from Zdenek Kaspar.
Revision 1.85 / (download) - annotate - [select for diffs], Thu Jun 16 15:25:44 2016 UTC (7 years, 10 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base,
pkgsrc-2016Q2
Changes since 1.84: +2 -2
lines
Diff to previous 1.84 (colored) to selected 1.66 (colored)
NSD 4.1.10
==========
FEATURES:
- ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option
for Linux, binds to interfaces and addresses that are down.
- NSD includes AAAA before A for queries over IPV6 (in delegations).
And TC is set if no glue can be provided with a delegation because
of packet size.
- print notice that nsd is starting before taking off.
BUG FIXES:
- Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
- Fix #751: NSD fails to occlude names below a DNAME.
- If set without nsd.db print "" as the default in the man pages.
- Fix #755: NSD spins after a zone update and a lot of TCP queries.
- Fix for NSEC3 with zone signed without exact match for empty
nonterminals, the answer for that domain gets closest encloser.
- #772 Document that recvmmsg has IPv6 problems on some linux kernels.
Revision 1.84 / (download) - annotate - [select for diffs], Tue Mar 15 13:48:35 2016 UTC (8 years, 1 month ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2016Q1-base,
pkgsrc-2016Q1
Changes since 1.83: +2 -2
lines
Diff to previous 1.83 (colored) to selected 1.66 (colored)
NSD 4.1.9
=========
BUG FIXES:
- Change the nsd.db file version because of nanosecond precision fix.
Revision 1.83 / (download) - annotate - [select for diffs], Fri Mar 11 21:53:07 2016 UTC (8 years, 1 month ago) by pettai
Branch: MAIN
Changes since 1.82: +2 -3
lines
Diff to previous 1.82 (colored) to selected 1.66 (colored)
4.1.8
================
FEATURES:
- #732: tcp-mss, outgoing-tcp-mss options for nsd.conf.
- #739: zonefile changes when mtime is small are detected on reload,
if filesystem supports precision mtime values.
- RR type CSYNC (RFC7477) syntax is supported.
BUG FIXES:
- take advantage of arc4random_uniform if available.
- Fix flto check for OSX clang.
- Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux.
- Fix #736: segfault during zone transfer.
- Fix #744: Fix that NSD replies for configured but unloaded zone
with SERVFAIL, not REFUSED.
Revision 1.82 / (download) - annotate - [select for diffs], Sat Mar 5 11:29:09 2016 UTC (8 years, 1 month ago) by jperkin
Branch: MAIN
Changes since 1.81: +2 -1
lines
Diff to previous 1.81 (colored) to selected 1.66 (colored)
Bump PKGREVISION for security/openssl ABI bump.
Revision 1.81 / (download) - annotate - [select for diffs], Sat Dec 12 23:57:09 2015 UTC (8 years, 4 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base,
pkgsrc-2015Q4
Changes since 1.80: +2 -2
lines
Diff to previous 1.80 (colored) to selected 1.66 (colored)
NSD 4.1.7 ========= FEATURES: - support configure --with-dbfile="" for nodb mode by default, where there is no binary database, but nsd reads and writes zonefiles. - reuseport: no is the default, because the feature is not troublefree. - configure --enable-ratelimit-default-is-off with --enable-ratelimit to set the default ratelimit to disabled but available in nsd.conf. - version: "string" option to set chaos version query reply string. BUG FIXES: - Fix zones updates from nsd parent event loop when there are a lot of interfaces. - portability fixes. - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new defaults in the ssl libraries. - updated contrib/nsd.spec, with new configure options. - Allocate less memory for TSIG digest. - Fix #721: Fix wrong error code (FORMERR) returned for unknown opcode. NOTIMP expected. - Fix zonec ttl mismatch printout to include more information. - Fix TCP responses when REUSEPORT is in use by turning it off. - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. - Explain rrl-slip better in documentation. - Document that ratelimit qps and slip are updated in reconfig. - Fix up defaults in manpage.
Revision 1.80 / (download) - annotate - [select for diffs], Thu Oct 22 17:32:29 2015 UTC (8 years, 5 months ago) by pettai
Branch: MAIN
Changes since 1.79: +2 -2
lines
Diff to previous 1.79 (colored) to selected 1.66 (colored)
NSD 4.1.6
=========
BUG FIXES:
- Fix #701: Fix that AD=1 set in a BADVERS response.
- Fix typo in zonec.c inside error message.
- Fix #711: Document that debug-mode yes is used for staying
attached to the supervisor console.
- Document verbosity 3 prints more information.
- nsd-checkconf warns for master zones with no zonefile statement.
- Fix start failure when many file descriptors are in use.
- The servfail rcode is not printed with a space in the middle.
- print failed token for config syntax error or parse error.
Revision 1.79 / (download) - annotate - [select for diffs], Mon Sep 21 13:38:52 2015 UTC (8 years, 6 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2015Q3-base,
pkgsrc-2015Q3
Changes since 1.78: +2 -2
lines
Diff to previous 1.78 (colored) to selected 1.66 (colored)
NSD 4.1.5
=========
BUG FIXES:
- Fix #706: default port 53 not opened on ip4 because of getaddrinfo
hints initialisation failure.
Revision 1.78 / (download) - annotate - [select for diffs], Sat Sep 19 03:58:50 2015 UTC (8 years, 7 months ago) by pettai
Branch: MAIN
Changes since 1.77: +2 -2
lines
Diff to previous 1.77 (colored) to selected 1.66 (colored)
NSD 4.1.4 ========= FEATURES: - RFC7553 RR Type URI support. - removed hardcoded interface limit, --with-max-ips removed. - SO_REUSEPORT support, by default on Linux, or with reuseport: yes. - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. - --enable-pie and --enable-relro-now options for a safer executable. BUG FIXES: - Fix NSID response for short edns sizes. - Fix that for expired zones NSD performs an AXFR and accepts newer and older serial numbers. - Document that minimal responses only minimizes responses to fit in one datagram. It does not minimize smaller responses. - Fix #618: documented need to list ip-addresses seperately in nsd.conf if there are multiple, because the source address of replies can otherwise go wrong. - Fix that notify from nsd-control contains soa serial. - Fix #698 formatting errors and typos in nsd.8.in.
Revision 1.77 / (download) - annotate - [select for diffs], Wed Jun 24 12:18:03 2015 UTC (8 years, 9 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2015Q2-base,
pkgsrc-2015Q2
Changes since 1.76: +2 -3
lines
Diff to previous 1.76 (colored) to selected 1.66 (colored)
NSD 4.1.3 ========= FEATURES: - nsd-control addzones and delzones read list of zones from stdin. - hmac sha224, sha384 and sha512 support. - max-interfaces raised to 32. BUG FIXES: - Fix #665: when removing subdomain, nsd does not reparse parent zone. - Fix task and zonestat files to be stored in a subdirectory in tmp to stop privilege elevation. - Fix crash in zone parser for relative dname after error in origin. - Fix that formerrors are ratelimited.
Revision 1.76 / (download) - annotate - [select for diffs], Mon Jun 8 15:42:07 2015 UTC (8 years, 10 months ago) by wiedi
Branch: MAIN
Changes since 1.75: +2 -1
lines
Diff to previous 1.75 (colored) to selected 1.66 (colored)
add SMF manifest
Revision 1.75 / (download) - annotate - [select for diffs], Sun May 3 20:57:49 2015 UTC (8 years, 11 months ago) by pettai
Branch: MAIN
Changes since 1.74: +2 -2
lines
Diff to previous 1.74 (colored) to selected 1.66 (colored)
NSD 4.1.2 ========= FEATURES: - Incoming notifies have serial number logged (at verbosity 1). BUG FIXES: - Remove some duplicate header includes. - Fix tcp waiting list for zone transfers where the bind and connect calls fail. - Fix segfault in zone reader on invalid input. - Fix segfault on double origin in zone reader. - Fix b64pton out of bounds error on invalid zonefile input. - Fix origin directive from unused old value and subdomain parser failure. - Fix use after free after zonefile syntax error followed by ttl or origin directive. - Fix syntax error followed by too many TXT elements parse crash. - Fix buffer overflow in config parse of domain name. - Use reallocarray for integer overflow protection. - Fix allocation integer overflow checks. - Fix #654: Fix contradiction in notify logging verbosity level. - Fix #655: Fix contradiction in verbosity for zone transfers. - Made log message more consistent, changed 'axfr refused' log message to be more consistent with other messages. Also notify refused. - verbosity 2 logs axfr refused and notify refused. verbosity 1 contains less log messages.
Revision 1.74 / (download) - annotate - [select for diffs], Mon Mar 9 11:34:26 2015 UTC (9 years, 1 month ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base,
pkgsrc-2015Q1
Changes since 1.73: +6 -3
lines
Diff to previous 1.73 (colored) to selected 1.66 (colored)
update the rc-script so it works correctly for the nsd user
Revision 1.73 / (download) - annotate - [select for diffs], Thu Feb 5 07:06:04 2015 UTC (9 years, 2 months ago) by pettai
Branch: MAIN
Changes since 1.72: +2 -2
lines
Diff to previous 1.72 (colored) to selected 1.66 (colored)
4.1.1
================
FEATURES:
- RFC 7344: CDS and CDNSKEY (read record types).
- per zone statistics with --enable-zone-stats, config zone with
zonestats: "name", zones configured with the same string are added.
- Disabled use of SSLv3 in nsd-control.
- nsd-checkconf -f prints out full name of pidfile (with dir).
- Synthesize CNAMEs with same TTL as DNAME.
BUG FIXES:
- Fix that expired zones stay expired after a server restart.
- Fix "xfrd_handle_ipc: bad mode" log errors when compiled
with --disable-bind8-stats.
- Fix #616: retry xfer for zones with no content after command.
- Fix char used as array index warnings on NetBSD.
- Fix that queries for noname CH TXT are REFUSED instead of nodata.
- Fixes for wildcard addition and deletion, speedup for some cases.
- Fix that failure to add tcp to tcp base does not leak the socket.
- Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE.
- Fix spinning NSD with lots of failing transfers, due to pointer
comparison using void pointer subtraction.
- Fix bug#637: fix that nsd.db grows limitlessly, an off by one
on one megabyte free chunks, created during AXFRs of large zones,
that caused the one megabyte chunk to be leaked.
- Fix casts for ctype functions.
- correct some hyphen-used-as-minus-sign (from Andreas Schulze) in
man pages.
- Fix zonesdir chroot error message.
Revision 1.72 / (download) - annotate - [select for diffs], Sat Sep 27 20:11:38 2014 UTC (9 years, 6 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2014Q4-base,
pkgsrc-2014Q4,
pkgsrc-2014Q3-base,
pkgsrc-2014Q3
Changes since 1.71: +2 -2
lines
Diff to previous 1.71 (colored) to selected 1.66 (colored)
4.1.0
================
FEATURES:
- database: "" starts without mmap of database. Less memory is used,
zones are read from text zonefile.
- optimised zonefile parse code and zonefile write code.
- zonefiles-write option in nsd.conf, enabled when database is "".
The server writes changed zonefiles to disk every hour.
- xfrdfile: "" disables xfrd.state. If enabled, zones that are
same as before are not checked for a serial update at server start.
- include: "foo/nsd.d/*.conf" works, wildcard glob on includes.
- nsd shuts down during init process if given signal.
- log-time-ascii option, default yes, with readable timestamp in log.
- nsd-control addzone reports if zone already exists.
- Fix #564: add nsd-checkzone tool to check zonefile correctness.
- Increased default --with-max-ips from 8 to 16, this increases the
number of interfaces you can specify in nsd.conf to listen to.
BUG FIXES:
- Fixed shutdown message sporadically not printed on exit.
- Documented zonefile %s syntax in nsd.conf man page.
- Fix manpage to put colon after zonefiles check and write.
- Change from 'Zone" to "zone" with ".. serial .. is updated" log
message.
- Changed maxbackoff for no-content secondary zones from 4h to 24h.
- Fix print filename of encompassing config file on read failure.
- Fix delete or rename of a lot of zones and make it take a
non-enormous time.
- Speed up deletion of zone contents a lot, (56s to 1s), speeds up
delete, rename and AXFR for zones.
- Fix #571: unused variable and incompatible pointer warnings when
compiled on a system without INET6.
- Fix write_socket return value check in server.c
- Fix that xfrd reaps children also if the signal is lost.
- Fix #577: makefile incorrectly installed manpages from srcdir.
- Fix #587: Default value for statistics is 0.
- Fix #553: Improve TXT parsing.
- Fix #590: rrl log does not print wildcard as a star but escaped.
- Fix #591: rrl log messages at verbosity level 1.
- fix strptime implicit declaration error on OpenBSD.
- Fix -O3 compile flag to -O2 to avoid miscompilations.
- Allow user to override the -g -O2 CFLAGS in ./configure.
- Fix endian.h include for OpenBSD.
- Fix #600: document that provide-xfr provides AXFR and not IXFR.
- Fix rising-load-average or memory-leaks in OSes (Linux since 2.6),
that keep track of all past process parents, or leak memory
for them. Fix makes it so there is no very deep string of
process parents.
- Remove .LP after .SH in man pages.
Revision 1.71 / (download) - annotate - [select for diffs], Fri Mar 14 10:02:53 2014 UTC (10 years, 1 month ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2014Q2-base,
pkgsrc-2014Q2,
pkgsrc-2014Q1-base,
pkgsrc-2014Q1
Changes since 1.70: +2 -2
lines
Diff to previous 1.70 (colored) to selected 1.66 (colored)
NSD 4.0.3 Bug Fixes: - Fix nsd.db unclean close check. Previous databases are considered unclean by the code and are created anew. - Adds nsd.db larger than 400Tb check for sanity. Also test if filesize as documented in the file is correct. - nsd waits for tasks to complete on stop, prevents nsd.db corruption. - fix to not delete tmpdir too early in shutdown process. - disabled udb checking functionality that made it very slow, this was enabled when enable-checking was turned on.
Revision 1.70 / (download) - annotate - [select for diffs], Wed Mar 12 14:47:13 2014 UTC (10 years, 1 month ago) by pettai
Branch: MAIN
Changes since 1.69: +2 -3
lines
Diff to previous 1.69 (colored) to selected 1.66 (colored)
NSD 4.0.2 Features: * Return REFUSED for queries to non-hosted zones. Bug Fixes: * Fix expired zones to give SERVFAIL, also when parent zone loaded. * documented nsd-control zonestatus output in nsd-control manpage. * remove mention of nsdc from nsd-checkconf manpage. * Disabled recvmmsg and sendmmsg usage by default because kernel versions have implementation issues: ipv6 ignored, security issues. * Detect libevent2 install automatically by configure, and use event2 header files if necessary. * Fix #551: change Regent to Copyright holder in the LICENSE, to match the definition on opensource.org for the BSD License. * Fix #552: zonefile loads on nsd-control reconfig when the name of the file has changed. * Fix leak of zone name after zonefile read and fix malloc too large that would be leaked in the radix tree. * Fix from 3.2: make SOA RDATA comparisons in XFR more lenient (only check serial). * Fix that NSD will delete and recreate not-clean-closed databases.
Revision 1.69 / (download) - annotate - [select for diffs], Wed Feb 12 23:18:24 2014 UTC (10 years, 2 months ago) by tron
Branch: MAIN
Changes since 1.68: +2 -1
lines
Diff to previous 1.68 (colored) to selected 1.66 (colored)
Recursive PKGREVISION bump for OpenSSL API version bump.
Revision 1.68 / (download) - annotate - [select for diffs], Mon Jan 27 12:50:56 2014 UTC (10 years, 2 months ago) by pettai
Branch: MAIN
Changes since 1.67: +2 -2
lines
Diff to previous 1.67 (colored) to selected 1.66 (colored)
4.0.1 Features: * recognizes ip-address and interface as synonyms for convenience. * Support for EUI48 and EUI64 RR types enabled by default (RFC 7043). * Support for CAA RRtype (RFC 6844). * NSID can be set with "ascii_somestring" in ascii. Bug fixes: * Fix xfrd when zone transfer TCP contains zero length packets. * Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3, because AXFRs overwrote nsec3 administration in the child zone. * Fix that bad IXFR updates do not result in double SOA records, and that an AXFR is started (attempted) when the zone state seems to be inconsistent with the master's zone state. * Log ip address for sendto and sendmmsg failures. * Fix segfaults after read of zones with rr type WKS from zonefile. * Seed PRNG for openssl at start of daemon, fixes SSL connection issue. * Bugfix #534: IXFR query loop over UDP for zones that are unchanged. * (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset. * (same as in 3.2.16): Bugfix #542: Match RRSIG TTL with SOA TTL in negative response. * Check if configure in srcdir collides with outofdir build. * Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx). * Fix printout of high-chars in TXT on NetBSD.
Revision 1.67 / (download) - annotate - [select for diffs], Sun Nov 24 09:39:44 2013 UTC (10 years, 4 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base,
pkgsrc-2013Q4
Changes since 1.66: +2 -2
lines
Diff to previous 1.66 (colored)
take over the maintainership
Revision 1.66 / (download) - annotate - [selected], Tue Oct 29 15:13:34 2013 UTC (10 years, 5 months ago) by pettai
Branch: MAIN
Changes since 1.65: +12 -9
lines
Diff to previous 1.65 (colored)
NSD 4.0.0 Features: * documented in doc/NSD-4-features. Change configuration without restart, direct nameserver control with nsd-control, support a higher number of zones. Higher performance (compared to NSD3). * nsdc is gone. Use kill -HUP for reload (also checks if zonefiles have changed and rereads them), and kill -TERM for quit. Or use nsd-control for detailed control. * cron job for nsdc patch is gone. nsd-control write creates zonefiles. * nsd.db has a new format that compacts itself when it is changed, thus nsdc patch is no longer necessary. * nsd.db is memory mapped, NSD needs (part of) that mmap in ram. * tcp-count can go above 1000; epoll/kqueue support with libevent. * nsd-control reconfig for updates with no restart (zones, keys, ..) * nsd-control-setup to create keys for nsd-control (enable nsd-control with remote-control: yes in nsd.conf).
Revision 1.65 / (download) - annotate - [select for diffs], Sat Sep 21 22:37:22 2013 UTC (10 years, 6 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2013Q3-base,
pkgsrc-2013Q3
Changes since 1.64: +2 -3
lines
Diff to previous 1.64 (colored) to selected 1.66 (colored)
NSD 3.2.16 Features: * New config option "ip-transparent:" to allow NSD to bind to non local addresses. Default no. * Use IPV6 minimum MTU settings with TCP to reduce failures that are caused by delays in learning working PMTU when communicating through a tunnel. * Bugfix #496: Support for EUI48 and EUI64 RR types. Experimental, turned off by default. Enable with --enable-draft-rrtypes. * New config option "rrl-slip:" to set the average number of packets discarded before we send back a truncated response. * New config option "rrl-ipv4-prefix-length:" and "rrl-ipv6-prefix-length:" to set the prefix lengths. * Improved RRL logging, also print triggering query src address and QTYPE. * Provide RRL documentation in nsd.conf.sample. Bugfixes: * Bugfix #357: Parent process waits until children closed down sockets, to prevent NSD failing to bind to sockets when restarting. * Bugfix #487: lookup3.c determine endianness for BSD systems. * Bugfix #491: pick program name (0th argument) as syslog identity. * Bugfix #494: Exit with return code 1 if socket code fails. * Bugfix #495: Wrong bufsize in dname_to_string for root. * Fix outgoing-interface: Don't fail if family is IPv6 but only IPv4 outgoing-interface is set, or vice versa. * RRtypes ASFDB, RP, RT should not compress dnames. * Check that zone directory is within chroot directory. * Better XFR checking, fallback to AXFR (if allowed) if three malformed XFR packets have been seen.
Revision 1.64 / (download) - annotate - [select for diffs], Fri Jul 12 10:45:00 2013 UTC (10 years, 9 months ago) by jperkin
Branch: MAIN
Changes since 1.63: +2 -1
lines
Diff to previous 1.63 (colored) to selected 1.66 (colored)
Bump PKGREVISION of all packages which create users, to pick up change of sysutils/user_* packages.
Revision 1.63 / (download) - annotate - [select for diffs], Mon Mar 4 20:33:15 2013 UTC (11 years, 1 month ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2013Q2-base,
pkgsrc-2013Q2,
pkgsrc-2013Q1-base,
pkgsrc-2013Q1
Changes since 1.62: +3 -1
lines
Diff to previous 1.62 (colored) to selected 1.66 (colored)
Fix SunOS build.
Revision 1.62 / (download) - annotate - [select for diffs], Fri Feb 8 23:52:37 2013 UTC (11 years, 2 months ago) by pettai
Branch: MAIN
Changes since 1.61: +1 -2
lines
Diff to previous 1.61 (colored) to selected 1.66 (colored)
Remove PKGREVISION for this new version
Revision 1.61 / (download) - annotate - [select for diffs], Fri Feb 8 23:51:08 2013 UTC (11 years, 2 months ago) by pettai
Branch: MAIN
Changes since 1.60: +11 -3
lines
Diff to previous 1.60 (colored) to selected 1.66 (colored)
NSD 3.2.15 Features: * Support for ILNP RR types: NID, L32, L64, LP (RFC6742). * RRL, --enable-ratelimit at configure time and config options. * TSIG initialization only fails when there is no digest found at all. Bugfixes: * Bugfix #478: Declaration after statement (for gcc 2.95). * Bugfix #483: Better error message in case of TSIG error. * Bugfix #485: TTL should not be greater than 2^31 - 1. * Fix RCODE when CNAME loop final answer does not exist, should return NXDOMAIN as stated by RFC 6604. * Fix --disable-full-prehash bug, where after multiple incoming IXFRs, NSEC3 can be removed unjustified.
Revision 1.60 / (download) - annotate - [select for diffs], Wed Feb 6 23:23:20 2013 UTC (11 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.59: +2 -1
lines
Diff to previous 1.59 (colored) to selected 1.66 (colored)
PKGREVISION bumps for the security/openssl 1.0.1d update.
Revision 1.59 / (download) - annotate - [select for diffs], Sun Nov 4 22:17:41 2012 UTC (11 years, 5 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base,
pkgsrc-2012Q4
Changes since 1.58: +2 -2
lines
Diff to previous 1.58 (colored) to selected 1.66 (colored)
NSD 3.2.14 Features: * TCP writev support. Bugfixes: * Fix build on OpenBSD (thanks Oliver Peter). * Prioritize notify sender for requesting XFR (thanks Ilya dBakulin). * Fix crash in zonec if TXT string too long (thanks Ilya Bakulin). * tzset before chroot for correct timezone (thanks Camiel Dobbelaar). * Fix --disable-full-prehash bug when nsdc patch happens while ixfr too, it did not rehash the new database. * Bugfix #464: Conditionally define MAXHOSTNAMELEN.
Revision 1.58 / (download) - annotate - [select for diffs], Tue Oct 23 17:18:43 2012 UTC (11 years, 5 months ago) by asau
Branch: MAIN
Changes since 1.57: +1 -3
lines
Diff to previous 1.57 (colored) to selected 1.66 (colored)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
Revision 1.57 / (download) - annotate - [select for diffs], Sun Sep 16 22:08:06 2012 UTC (11 years, 7 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base,
pkgsrc-2012Q3
Changes since 1.56: +2 -2
lines
Diff to previous 1.56 (colored) to selected 1.66 (colored)
NSD 3.2.12 Bugfixes: * Bugfix #461 (VU#517036 CVE-2012-2979): NSD denial of service vulnerability from DNS packet when using --enable-zone-stats. * Bugfix #460: man page correction - identity. * Fix for nsd-patch segfault if zone has been removed from nsd.conf
Revision 1.55.2.1 / (download) - annotate - [select for diffs], Sat Jul 21 20:17:15 2012 UTC (11 years, 9 months ago) by tron
Branch: pkgsrc-2012Q2
Changes since 1.55: +2 -2
lines
Diff to previous 1.55 (colored) next main 1.56 (colored) to selected 1.66 (colored)
Pullup ticket #3865 - requested by wiz
net/nsd: security update
Revisions pulled up:
- net/nsd/Makefile 1.56
- net/nsd/distinfo 1.34
---
Module Name: pkgsrc
Committed By: wiz
Date: Fri Jul 20 16:28:49 UTC 2012
Modified Files:
pkgsrc/net/nsd: Makefile distinfo
Log Message:
Update to 3.2.12, prompted by Lloyd Parkes in PR 46727.
NSD 3.2.12
Bugfixes
Fix for VU#624931 CVE-2012-2978: NSD denial of service
vulnerability from non-standard DNS packet from any host on
the internet.
NSD 3.2.11
Features
Fallback to AXFR if IXFR is unknown at the primary. NSD considers
IXFR unknown at the primary if there is a negative response
for the IXFR RRtype. This does not override the value for
'allow-axfr-fallback'.
Allow for reading in new DNSKEY algorithm mnemonics (RFC5155,
RFC5702, RFC5933, and RFC6605 (ECDSA)).
Zone statistics, enable with --enable-zone-stats. This stores
the BIND8 stats per zone in a configurable statistics file.
This option does not scale and should therefore not be enabled
when serving many zones.
Support for TLSA RRtype (DANE).
Bugfixes
Fix for qtype ANY for a wildcard domain in NSEC signed zone:
Don't add the wildcard domain NSEC into the answer section.
Instead, put the wildcard expanded NSEC into the answer section
and keep the wildcard domain NSEC in the authority section.
Fix for accept spinning reported by OpenBSD.
Fix restart failed due to bad ixfr packet because of zone
removed from nsd.conf.
Bugfix #453: typo in nsdc man page.
Operational notes
NSD uses the query name for dname compression again (Fix #235
had as side effect that this didn't happen anymore and is hereby
undone).
Revision 1.56 / (download) - annotate - [select for diffs], Fri Jul 20 16:28:49 2012 UTC (11 years, 9 months ago) by wiz
Branch: MAIN
Changes since 1.55: +2 -2
lines
Diff to previous 1.55 (colored) to selected 1.66 (colored)
Update to 3.2.12, prompted by Lloyd Parkes in PR 46727.
NSD 3.2.12
Bugfixes
Fix for VU#624931 CVE-2012-2978: NSD denial of service
vulnerability from non-standard DNS packet from any host on
the internet.
NSD 3.2.11
Features
Fallback to AXFR if IXFR is unknown at the primary. NSD considers
IXFR unknown at the primary if there is a negative response
for the IXFR RRtype. This does not override the value for
'allow-axfr-fallback'.
Allow for reading in new DNSKEY algorithm mnemonics (RFC5155,
RFC5702, RFC5933, and RFC6605 (ECDSA)).
Zone statistics, enable with --enable-zone-stats. This stores
the BIND8 stats per zone in a configurable statistics file.
This option does not scale and should therefore not be enabled
when serving many zones.
Support for TLSA RRtype (DANE).
Bugfixes
Fix for qtype ANY for a wildcard domain in NSEC signed zone:
Don't add the wildcard domain NSEC into the answer section.
Instead, put the wildcard expanded NSEC into the answer section
and keep the wildcard domain NSEC in the authority section.
Fix for accept spinning reported by OpenBSD.
Fix restart failed due to bad ixfr packet because of zone
removed from nsd.conf.
Bugfix #453: typo in nsdc man page.
Operational notes
NSD uses the query name for dname compression again (Fix #235
had as side effect that this didn't happen anymore and is hereby
undone).
Revision 1.55 / (download) - annotate - [select for diffs], Tue Jun 12 15:46:00 2012 UTC (11 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2012Q2-base
Branch point for: pkgsrc-2012Q2
Changes since 1.54: +2 -1
lines
Diff to previous 1.54 (colored) to selected 1.66 (colored)
Add inet6 to default suggested options. It's 2012.
Revision 1.54 / (download) - annotate - [select for diffs], Wed Apr 18 10:39:43 2012 UTC (12 years ago) by pettai
Branch: MAIN
Changes since 1.53: +2 -4
lines
Diff to previous 1.53 (colored) to selected 1.66 (colored)
NSD 3.2.10 Bugfixes: * Bugfix #421: Truncate pidfile on shutdown, before unlink. * Bugfix #423: Fix slow zone transfer processing due to 'Fix is_existing flag for ENT' bugfix. * Bugfix #430: Fix segfault when MAX_INTERFACES set to more than 65K. * Fix configure.ac strptime check for gcc 4.6.2, acx_nlnetlabs.m4 update NSD 3.2.9 Features: * Minimize responses to reduce truncation: NSD will only add optional records to the authority and additional sections when the response size does not exceed the minimal response size. * The minimal response size is 512 (no-EDNS), 1480 (EDNS/IPv4), 1220 (EDNS/IPv6), or the advertized EDNS buffer size if that is smaller than the EDNS default. * The feature is enabled by default. You can disable it by configuring NSD with --disable-minimal-responses. * Less NSEC3 prehashing. This will make NSD handle zone transfers faster, but will decrease the performance of NXDOMAIN and wildcard NODATA responses. Full prehashing is enabled by default. If you want less NSEC3 prehashing, configure NSD with --disable-full-prehash. Thanks Secure64 for the patch. Bugfixes: * Bugfix #302: nsd accepts XFR but refuses to re-read the slave zone. * Bugfix #365: set patch style and zonec verbose for nsdc. * First step of bug #369: RRSIG DNSKEY sets zone to be treated DNSSEC. * Bugfix #375: typos in nsd.conf.5. * Bugfix #381: Binary escaped and transfers. * Bugfix #397: Don't allow relative domain names as origin in $INCLUDE directives. * Fix printout of IPSECKEY by nsd-patch. * Fix is_existing flag for ENT when domain that has a shared ENT is deleted by IXFR. (ENT == Empty Non-Terminal) * Fix bug if the zonefile is changed for a secondary but stored transfers are applied, and stop it from applying ixfr to empty zone. The zone is flagged with error and AXFR-ed. * Fix to have no authority NS set processing for CNAMEs. * Fix nsd-checkconf to check tsig algorithms properly. * Set the AA bit on responses that have an authoritative CNAME. * Fix denial of existence response for empty non-terminal that looks like a NSEC3-only domain (but has data below it). Operational notes: nsd.db version number increased because NSD 3.2.7 and earlier zonec is not compatible due to the TXT strings change. Please run nsdc rebuild before running NSD 3.2.9 and later versions.
Revision 1.53 / (download) - annotate - [select for diffs], Sun Jun 19 16:25:12 2011 UTC (12 years, 10 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2012Q1-base,
pkgsrc-2012Q1,
pkgsrc-2011Q4-base,
pkgsrc-2011Q4,
pkgsrc-2011Q3-base,
pkgsrc-2011Q3,
pkgsrc-2011Q2-base,
pkgsrc-2011Q2
Changes since 1.52: +2 -2
lines
Diff to previous 1.52 (colored) to selected 1.66 (colored)
NSD 3.2.8: Bugfixes: * Do setusercontext before chroot, otherwise login.conf etc. are required inside chroot. * Bugfix #216: Fix leak of compressiontable when the domain table increases in size. * Bugfix #348: Don't include header/library path if OpenSSL is in /usr. * Bugfix #350: Refused notifies should log client ip. * Bugfix #352: Fix hard coded paths in man pages. * Bugfix #354: The realclean target deletes a bit too much. * Bugfix #357, make xfrd quit with many zones. * Bugfix #362: outgoing-interface and v4 vs. v6 leads to spurious warning messages. * Bugfix #363: nsd-checkconf -v does not print outgoing-interface ok. * Bugfix: nsd-checkconf -o outgoing-interface omits NOKEY. * Undo Bugfix #235: Don't skip dname compression, messes up packets that do need compression. Operational notes: * Use 'make clean' to clean up files that make created. * Use 'make realclean' to also clean up files that were generated by running ./configure. * Use 'make devclean' to also clean up autoconf, autoheader files. NSD 3.2.7: Bugfixes: * Bugfix #253: Don't put NS RRs in a response with QTYPE=DS. * Bugfix #320: use arcrandom(4) for QID generation if available. * Bugfix #328: nsd-checkconf overrun. * Bugfix #343: nsdc update fix. * Bugfix #347: Wrong NSEC3 returned for nodata response QTYPE=DS no delegation. * Bugfix: Allow for huge amount of strings in TXT (and other) records. * Bugfix: nsdc can now deal with tsig algorithms other than hmac-md5. * Fixed several parts in the documentation, including #306, #345.
Revision 1.52 / (download) - annotate - [select for diffs], Mon Aug 30 18:00:17 2010 UTC (13 years, 7 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2011Q1-base,
pkgsrc-2011Q1,
pkgsrc-2010Q4-base,
pkgsrc-2010Q4,
pkgsrc-2010Q3-base,
pkgsrc-2010Q3
Changes since 1.51: +2 -2
lines
Diff to previous 1.51 (colored) to selected 1.66 (colored)
NSD 3.2.6: Features: * Expand command line option '-a' and config option 'ip-address:' with port number. Bugfixes: * Bugfix #314: correctly print NSEC next field, escape spaces and fix label overflows. Operational notes: * Configure options --disable-dnssec, --disable-nsid, --disable-tsig are removed * Configure option --max-interfaces is renamed to --max-ips
Revision 1.51 / (download) - annotate - [select for diffs], Thu May 6 10:37:49 2010 UTC (13 years, 11 months ago) by pettai
Branch: MAIN
CVS Tags: pkgsrc-2010Q2-base,
pkgsrc-2010Q2
Changes since 1.50: +2 -2
lines
Diff to previous 1.50 (colored) to selected 1.66 (colored)
nsd 3.2.5:
Features:
* New option 'nsid:', to specify the NSID (Bugfix #298).
* The default chroot can be set with --with-chroot=dir.
If not set, by default chroot will not be used.
* Optimized zonec and b64_pton compatibility code.
* Optimized memory allocations. Use mmap/munmap instead of malloc/free.
Experimental, by default off. Enable it at build time with --enable-mmap.
Bugfixes:
* NSD will not start if chroot is configured,
but changing root is not possible
* Make use of the more secure strl* functions.
* Bugfix #303: spelling error.
Operational notes:
* NSID support is now enabled by default.
Revision 1.50 / (download) - annotate - [select for diffs], Thu Feb 4 15:06:43 2010 UTC (14 years, 2 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2010Q1-base,
pkgsrc-2010Q1
Changes since 1.49: +2 -3
lines
Diff to previous 1.49 (colored) to selected 1.66 (colored)
nsd 3.2.4:
* Support DLV records.
* New option 'tcp-query-count:', to limit the maximum number of DNS
queries on a single tcp connection.
* New option 'tcp-timeout:', to override the default tcp timeout.
The option can also be set at build time, --with-tcp-timeout.
* New option 'notify-retry:', to configure how many times NSD should
retry a NOTIFY message.
* New options 'ipv4-edns-size:' and 'ipv6-edns-size:', to set your
preferred EDNS buffer size.
* Ignore SIGHUP to child processes.
* UDP/IPv4 sockets have new options set that will disable the DF
flag in IP packets.
Revision 1.49 / (download) - annotate - [select for diffs], Sun Jan 17 12:02:34 2010 UTC (14 years, 3 months ago) by wiz
Branch: MAIN
Changes since 1.48: +2 -1
lines
Diff to previous 1.48 (colored) to selected 1.66 (colored)
Recursive PKGREVISION bump for jpeg update to 8.
Revision 1.48 / (download) - annotate - [select for diffs], Thu Nov 5 18:15:57 2009 UTC (14 years, 5 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base,
pkgsrc-2009Q4
Changes since 1.47: +2 -3
lines
Diff to previous 1.47 (colored) to selected 1.66 (colored)
nsd-3.2.3:
* Bug #236: Allow RRs before the SOA in a zonefile.
* Bug #229: Remove the C99 code.
* Bug #253: Don't put NS RRs in a response with QTYPE=DNSKEY.
* Bug #263: Make TSIG algorithm comparison case insensitive.
* Bug #266: Build failed on systems without strptime.
* Fix install hickup.
* Fix to use 4096 EDNS limit for IPv6 on Linux.
Revision 1.46.2.1 / (download) - annotate - [select for diffs], Sat Jul 25 19:26:40 2009 UTC (14 years, 8 months ago) by tron
Branch: pkgsrc-2009Q2
Changes since 1.46: +2 -1
lines
Diff to previous 1.46 (colored) next main 1.47 (colored) to selected 1.66 (colored)
Pullup ticket #2833 - requested by joerg nsd: portability fix Revisions pulled up: - net/nsd/Makefile 1.47 - net/nsd/distinfo 1.26 - net/nsd/patches/patch-ab 1.3 --- Module Name: pkgsrc Committed By: joerg Date: Fri Jul 24 07:08:10 UTC 2009 Modified Files: pkgsrc/net/nsd: Makefile distinfo Added Files: pkgsrc/net/nsd/patches: patch-ab Log Message: Redirecting stdout and stderr with &> is not portable, fix this. Issue raised by Koh-ichi Ito on nsd-users.
Revision 1.47 / (download) - annotate - [select for diffs], Fri Jul 24 07:08:10 2009 UTC (14 years, 8 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q3-base,
pkgsrc-2009Q3
Changes since 1.46: +2 -1
lines
Diff to previous 1.46 (colored) to selected 1.66 (colored)
Redirecting stdout and stderr with &> is not portable, fix this. Issue raised by Koh-ichi Ito on nsd-users.
Revision 1.45.4.1 / (download) - annotate - [select for diffs], Fri May 22 11:48:39 2009 UTC (14 years, 11 months ago) by tron
Branch: pkgsrc-2009Q1
Changes since 1.45: +2 -2
lines
Diff to previous 1.45 (colored) next main 1.46 (colored) to selected 1.66 (colored)
Pullup ticket #2775 - requested by joerg nsd: security update Revisions pulled up: - net/nsd/Makefile 1.46 - net/nsd/distinfo 1.25 --- Module Name: pkgsrc Committed By: joerg Date: Wed May 20 01:55:55 UTC 2009 Modified Files: pkgsrc/net/nsd: Makefile distinfo Log Message: Update to NSD 3.2.2. Allows nsd-patch to directly work on the database without intermediate zonefile. Allow file rotation for nsd.log. Allow disabling AXFR fallback. Fix off-by-one during query processing.
Revision 1.46 / (download) - annotate - [select for diffs], Wed May 20 01:55:55 2009 UTC (14 years, 11 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q2-base
Branch point for: pkgsrc-2009Q2
Changes since 1.45: +2 -2
lines
Diff to previous 1.45 (colored) to selected 1.66 (colored)
Update to NSD 3.2.2. Allows nsd-patch to directly work on the database without intermediate zonefile. Allow file rotation for nsd.log. Allow disabling AXFR fallback. Fix off-by-one during query processing.
Revision 1.45 / (download) - annotate - [select for diffs], Wed Dec 17 17:22:56 2008 UTC (15 years, 4 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2009Q1-base,
pkgsrc-2008Q4-base,
pkgsrc-2008Q4
Branch point for: pkgsrc-2009Q1
Changes since 1.44: +2 -2
lines
Diff to previous 1.44 (colored) to selected 1.66 (colored)
Update to nsd-3.2.0: - improved IXFR support - support for hmac-sha1 and hmac-sha256 in TSIG - selection of source ip for notifies and zone requests - NSEC3 is enabled by default - option to disable CHAOS version support - bugfixes
Revision 1.44 / (download) - annotate - [select for diffs], Sun Jun 1 19:26:13 2008 UTC (15 years, 10 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2008Q3-base,
pkgsrc-2008Q3,
pkgsrc-2008Q2-base,
pkgsrc-2008Q2,
cwrapper,
cube-native-xorg-base,
cube-native-xorg
Changes since 1.43: +2 -3
lines
Diff to previous 1.43 (colored) to selected 1.66 (colored)
Update to nsd-3.0.8: - better logging for nsd-notify and db creation failures - nsdc start checks if nsd is already running - fix loading data from files with relative names when chrootdir ends with a slash - fix a case when nsd would return FORMERR for edns queries with version 0 and rdlen larger than 0. - don't answer nsec3 wildcard information when DO bit is not set
Revision 1.43 / (download) - annotate - [select for diffs], Thu Apr 24 09:38:30 2008 UTC (15 years, 11 months ago) by joerg
Branch: MAIN
Changes since 1.42: +2 -2
lines
Diff to previous 1.42 (colored) to selected 1.66 (colored)
Don't hard-code /usr/pkg. Bump revision.
Revision 1.42 / (download) - annotate - [select for diffs], Fri Jan 18 05:08:46 2008 UTC (16 years, 3 months ago) by tnn
Branch: MAIN
CVS Tags: pkgsrc-2008Q1-base,
pkgsrc-2008Q1
Changes since 1.41: +2 -1
lines
Diff to previous 1.41 (colored) to selected 1.66 (colored)
Per the process outlined in revbump(1), perform a recursive revbump on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
Revision 1.41 / (download) - annotate - [select for diffs], Fri Nov 30 21:44:29 2007 UTC (16 years, 4 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2007Q4-base,
pkgsrc-2007Q4
Changes since 1.40: +2 -2
lines
Diff to previous 1.40 (colored) to selected 1.66 (colored)
Update to nsd-3.0.7: - fix man pages and improve consistency - improved handling for malformed IXFRs - report source and zone for denied AXFR requests - improved handling of malformed nsec3 records - fix ignored return value in region-allocator.
Revision 1.40 / (download) - annotate - [select for diffs], Fri Sep 7 22:12:18 2007 UTC (16 years, 7 months ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2007Q3-base,
pkgsrc-2007Q3
Changes since 1.39: +8 -4
lines
Diff to previous 1.39 (colored) to selected 1.66 (colored)
Convert packages that test and use USE_INET6 to use the options framework and to support the "inet6" option instead. Remaining usage of USE_INET6 was solely for the benefit of the scripts that generate the README.html files. Replace: BUILD_DEFS+= USE_INET6 with BUILD_DEFS+= IPV6_READY and teach the README-generation tools to look for that instead. This nukes USE_INET6 from pkgsrc proper. We leave a tiny bit of code to continue to support USE_INET6 for pkgsrc-wip until it has been nuked from there as well.
Revision 1.39 / (download) - annotate - [select for diffs], Sat Aug 11 23:48:40 2007 UTC (16 years, 8 months ago) by joerg
Branch: MAIN
Changes since 1.38: +20 -19
lines
Diff to previous 1.38 (colored) to selected 1.66 (colored)
Update nsd to 3.0.5: NOTE: the configuration file format has changed. Don't update blindly. Major changes: - integrated AXFR/IXFR support for zone transfer. IXFR is not supported when acting as master. - TSIG authentication support for queries, notifies and zone transfers. - full NOTIFY support - DNAME type is supported - experimental support for NSEC3 and NSID, not enabled in pkgsrc - various bug fixes.
Revision 1.38 / (download) - annotate - [select for diffs], Mon Jul 3 13:33:59 2006 UTC (17 years, 9 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2007Q2-base,
pkgsrc-2007Q2,
pkgsrc-2007Q1-base,
pkgsrc-2007Q1,
pkgsrc-2006Q4-base,
pkgsrc-2006Q4,
pkgsrc-2006Q3-base,
pkgsrc-2006Q3
Changes since 1.37: +2 -2
lines
Diff to previous 1.37 (colored) to selected 1.66 (colored)
Update to nsd-2.3.5. This fixes a number of minor bugs.
Revision 1.37 / (download) - annotate - [select for diffs], Tue May 2 17:32:05 2006 UTC (17 years, 11 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2006Q2-base,
pkgsrc-2006Q2
Changes since 1.36: +2 -1
lines
Diff to previous 1.36 (colored) to selected 1.66 (colored)
Check the right directory for OpenSSL.
Revision 1.36 / (download) - annotate - [select for diffs], Sun Apr 23 00:12:40 2006 UTC (18 years ago) by jlam
Branch: MAIN
Changes since 1.35: +4 -4
lines
Diff to previous 1.35 (colored) to selected 1.66 (colored)
Modify packages that set PKG_USERS and PKG_GROUPS to follow the new syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
Revision 1.35 / (download) - annotate - [select for diffs], Thu Apr 6 06:22:34 2006 UTC (18 years ago) by reed
Branch: MAIN
Changes since 1.34: +2 -2
lines
Diff to previous 1.34 (colored) to selected 1.66 (colored)
Over 1200 files touched but no revisions bumped :) RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
Revision 1.34 / (download) - annotate - [select for diffs], Thu Dec 29 06:22:00 2005 UTC (18 years, 3 months ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2006Q1-base,
pkgsrc-2006Q1
Changes since 1.33: +1 -2
lines
Diff to previous 1.33 (colored) to selected 1.66 (colored)
Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mk automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
Revision 1.33 / (download) - annotate - [select for diffs], Mon Dec 12 20:34:14 2005 UTC (18 years, 4 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2005Q4-base,
pkgsrc-2005Q4
Changes since 1.32: +2 -3
lines
Diff to previous 1.32 (colored) to selected 1.66 (colored)
Update NSD to 2.3.3. Notable changes: - DNSSEC enabled by default - many bugfixes for edge cases - more portable time handling - some performance improvements
Revision 1.32 / (download) - annotate - [select for diffs], Mon Dec 5 20:50:47 2005 UTC (18 years, 4 months ago) by rillig
Branch: MAIN
Changes since 1.31: +2 -2
lines
Diff to previous 1.31 (colored) to selected 1.66 (colored)
Fixed pkglint warnings. The warnings are mostly quoting issues, for
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some
other changes are outlined in
http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
Revision 1.31 / (download) - annotate - [select for diffs], Sun Nov 6 16:36:48 2005 UTC (18 years, 5 months ago) by joerg
Branch: MAIN
Changes since 1.30: +2 -2
lines
Diff to previous 1.30 (colored) to selected 1.66 (colored)
Don't advertise RC script and forget it in the PLIST. Bump revision.
Revision 1.30 / (download) - annotate - [select for diffs], Sat Nov 5 21:27:53 2005 UTC (18 years, 5 months ago) by joerg
Branch: MAIN
Changes since 1.29: +17 -5
lines
Diff to previous 1.29 (colored) to selected 1.66 (colored)
Add a RC script for NSD. Set default database location to
${VARBASE}/db/nsd.db on all platforms and use user/group nsd for the
daemon to run as. Install sample configuration without .sample
extension. Take maintainership. Bump revision.
Revision 1.29 / (download) - annotate - [select for diffs], Thu Apr 28 15:30:17 2005 UTC (18 years, 11 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2005Q3-base,
pkgsrc-2005Q3,
pkgsrc-2005Q2-base,
pkgsrc-2005Q2
Changes since 1.28: +3 -2
lines
Diff to previous 1.28 (colored) to selected 1.66 (colored)
Apply parts of patch from PR 29983 by ISIHARA Takanori: * OpenSSL 0.9.7 or higher is required for TSIG support. (README) * --with-namedxfer configure option is obsolete option.
Revision 1.28 / (download) - annotate - [select for diffs], Mon Apr 11 21:46:52 2005 UTC (19 years ago) by tv
Branch: MAIN
Changes since 1.27: +1 -2
lines
Diff to previous 1.27 (colored) to selected 1.66 (colored)
Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.
Revision 1.27 / (download) - annotate - [select for diffs], Wed Jan 19 02:11:24 2005 UTC (19 years, 3 months ago) by itojun
Branch: MAIN
CVS Tags: pkgsrc-2005Q1-base,
pkgsrc-2005Q1
Changes since 1.26: +2 -3
lines
Diff to previous 1.26 (colored) to selected 1.66 (colored)
update to 2.2.0. - nsd-xfer is now in package - bug fixes - pidfile can be specified by -P
Revision 1.26 / (download) - annotate - [select for diffs], Wed Dec 29 15:42:38 2004 UTC (19 years, 3 months ago) by minskim
Branch: MAIN
Changes since 1.25: +2 -2
lines
Diff to previous 1.25 (colored) to selected 1.66 (colored)
Use VARBASE.
Revision 1.25 / (download) - annotate - [select for diffs], Sun Oct 3 00:17:56 2004 UTC (19 years, 6 months ago) by tv
Branch: MAIN
CVS Tags: pkgsrc-2004Q4-base,
pkgsrc-2004Q4
Changes since 1.24: +2 -1
lines
Diff to previous 1.24 (colored) to selected 1.66 (colored)
Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10 in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
Revision 1.24 / (download) - annotate - [select for diffs], Sat Jul 31 17:15:15 2004 UTC (19 years, 8 months ago) by itojun
Branch: MAIN
CVS Tags: pkgsrc-2004Q3-base,
pkgsrc-2004Q3
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored) to selected 1.66 (colored)
nsd 2.1.2.
FEATURES:
- NSD now fully supports unknown record types using the
notation specified in RFC3597.
- Support for the following RR types has been added: WKS, X25,
ISDN, RT, NSAP, PX, NAPTR, KX, CERT, DNAME, and APL. DNAME
special processing is not supported.
and bug fixes.
Revision 1.23 / (download) - annotate - [select for diffs], Sun Apr 25 08:19:40 2004 UTC (19 years, 11 months ago) by snj
Branch: MAIN
CVS Tags: pkgsrc-2004Q2-base,
pkgsrc-2004Q2
Changes since 1.22: +3 -3
lines
Diff to previous 1.22 (colored) to selected 1.66 (colored)
Convert to buildlink3 and correct a typo in DESCR.
Revision 1.22 / (download) - annotate - [select for diffs], Fri Apr 23 18:42:05 2004 UTC (20 years ago) by itojun
Branch: MAIN
Changes since 1.21: +2 -2
lines
Diff to previous 1.21 (colored) to selected 1.66 (colored)
upgrade to 2.0.2. 2.0.2 ============= BUG FIXES: - Allow the use of a mnemonic for the algorithm field of a DNSKEY record. - Behavior of the zonec -v flag has been modified. By default zonec will only print a single line with a summary of the error count. - Bug #75: Fixed typo in previous "fix".
Revision 1.21 / (download) - annotate - [select for diffs], Tue Mar 16 00:03:15 2004 UTC (20 years, 1 month ago) by itojun
Branch: MAIN
CVS Tags: pkgsrc-2004Q1-base,
pkgsrc-2004Q1
Changes since 1.20: +2 -3
lines
Diff to previous 1.20 (colored) to selected 1.66 (colored)
upgrade to 2.0.1. NSD 2.0.1 release notes: BUG FIXES: - Queries for QTYPE DS (DNSSEC) were not handled correctly in certain cases. - Partial support for unknown RRs. Known RR types with unknown RR data format is not yet supported. - Bug #75: Fixed bad error message when nsdc update is run for the first time. - Bug #78: Multiple zones, each with include directives, are now compiled correctly.
Revision 1.20 / (download) - annotate - [select for diffs], Sun Feb 22 03:36:46 2004 UTC (20 years, 2 months ago) by kristerw
Branch: MAIN
Changes since 1.19: +2 -2
lines
Diff to previous 1.19 (colored) to selected 1.66 (colored)
Correct path to files to install.
Revision 1.19 / (download) - annotate - [select for diffs], Mon Feb 16 22:51:23 2004 UTC (20 years, 2 months ago) by wiz
Branch: MAIN
Changes since 1.18: +2 -1
lines
Diff to previous 1.18 (colored) to selected 1.66 (colored)
Bump PKGREVISION for previous (more files installed).
Revision 1.18 / (download) - annotate - [select for diffs], Mon Feb 16 21:55:14 2004 UTC (20 years, 2 months ago) by itojun
Branch: MAIN
Changes since 1.17: +23 -1
lines
Diff to previous 1.17 (colored) to selected 1.66 (colored)
install readme. link w/ libwrap. and other tweaks. PR 24034
Revision 1.17 / (download) - annotate - [select for diffs], Sun Feb 15 18:47:04 2004 UTC (20 years, 2 months ago) by itojun
Branch: MAIN
Changes since 1.16: +6 -2
lines
Diff to previous 1.16 (colored) to selected 1.66 (colored)
update to 2.0.0. IPv6 enabled by default, experimental DNSSEC support (disabled by default).
Revision 1.16 / (download) - annotate - [select for diffs], Mon Jul 28 22:38:26 2003 UTC (20 years, 8 months ago) by itojun
Branch: MAIN
CVS Tags: pkgsrc-2003Q4-base,
pkgsrc-2003Q4
Changes since 1.15: +2 -2
lines
Diff to previous 1.15 (colored) to selected 1.66 (colored)
1.2.2
=============
BUG FIXES:
- Bug #59: NSD returns FORMERR when the query name is >= 246
bytes.
- Bug #60: Zonec runs out of file descriptors with many zones.
- Bug #61: nsdc uses /bin/sh hardwired (and should not).
- Bug #62: NSD is not able to log to a file.
- Bug #63: nsdc update and zonec are too tallkative.
- Bug #64: Answer for request of a host resolved by a
wildcard-resource-record is not understandable by dig.
Revision 1.15 / (download) - annotate - [select for diffs], Mon Jul 21 17:10:57 2003 UTC (20 years, 9 months ago) by martti
Branch: MAIN
Changes since 1.14: +2 -2
lines
Diff to previous 1.14 (colored) to selected 1.66 (colored)
COMMENT should start with a capital letter.
Revision 1.14 / (download) - annotate - [select for diffs], Thu Jul 17 22:51:30 2003 UTC (20 years, 9 months ago) by grant
Branch: MAIN
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored) to selected 1.66 (colored)
s/netbsd.org/NetBSD.org/
Revision 1.13 / (download) - annotate - [select for diffs], Thu Jul 17 08:52:46 2003 UTC (20 years, 9 months ago) by itojun
Branch: MAIN
Changes since 1.12: +2 -2
lines
Diff to previous 1.12 (colored) to selected 1.66 (colored)
1.2.1
=============
BUG FIXES:
- AXFR terminates early if a zone containa a CNAME pointing
the the zone's domain name (SOA record) (bug #56).
- During an AXFR memory above the top of the stack was
accessed. This could lead to occassional AXFR errors (bad
packets).
- NSD now prints its version number and exits when invoked
with the -v flag (bug #57).
- NSD prints help information and exits when invoked with the
-h flag.
Revision 1.12 / (download) - annotate - [select for diffs], Thu Jul 10 08:57:27 2003 UTC (20 years, 9 months ago) by itojun
Branch: MAIN
Changes since 1.11: +2 -3
lines
Diff to previous 1.11 (colored) to selected 1.66 (colored)
upgrade to 1.2.
1.2
=============
FEATURES:
- NSD is now a single parent process (handling child
termination and database reloads) plus multiple UDP and TCP
child processes handling queries. Before the parent process
also handled UDP queries. This change simplifies the parent
and child processes and allows the use of multiple
concurrent UDP servers.
- Experimental plugin support. This required a minor,
incompatible change to the database format. Make sure you
recompile your database. Use --enable-plugins to enable.
- Full IPv6 support (for multi-homing and for Linux, thanks to
Colm MacCárthaigh and Jun-ichiro itojun Hagino). Use
--enable-ipv6 to enable.
- Support for multi-homing with TCP connections.
- Support for SunOS 4.x has been dropped.
CODE CHANGES:
- NSD should now conform to the Single Unix Specification
(http://www.unix.org/).
- Const correctness for strings and some other data types.
- Removed code for Berkeley DB, hash tables, and mmap(2).
- Separate preprocessor flags from code flags (CPPFLAGS and
CFLAGS).
- Use uint8_t instead of u_char, uint{16,32}_t instead of
u_int{16,32}_t.
- Fixed warnings from mixing signed and unsigned types.
- Use sigaction(2) instead of signal(2).
- The query_process function has been split up for clarity.
BUG FIXES:
- CHAOS TXT queries failed on big-endian machines.
- Portability fixes for Tru64 (thanks to Stephane Bortzmeyer),
HP-UX, and MacOS X (thanks to Ronald van der Pol).
- Removed compile time limit on maximum number of TCP child
servers.
- Support for debugging UDP and TCP queries.
- Always ensure there is enough room for the EDNS record when
answering a query with EDNS enabled.
Revision 1.11 / (download) - annotate - [select for diffs], Tue Jun 17 07:50:44 2003 UTC (20 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.10: +6 -4
lines
Diff to previous 1.10 (colored) to selected 1.66 (colored)
upgrade to 1.1
1.1
=============
FEATURES:
- ANSI C
- autoconf/configure
- new parser
- support for various RR types in zonec
- support for UNKN RR types
BUG FIXES:
- lots of zone parsing errors eliminated
- empty node matching bug gives NXDOMAIN
1.0.3
=============
This release is a bug fix release and does not add any new features.
BUG FIXES:
- Ignore SIGPIPE errors (bug #43).
- Keep track of TCP child servers and restart if necessary.
(bug #55)
- Handle database reload failures correctly.
- Close UDP sockets in TCP child servers.
- Handle escaped characters (besides \.) in labels.
- Preserve the query's RD flag in the answer.
1.0.2
=============
FEATURES:
- -DBIND8_STATS to enable bind8 like [NX]STATS
- -t flag to make nsd chroot to a certain directory
- -s flag to make nsd produce statistics every s seconds
- /etc/nsd/nsdc.conf to overwrite default variables
for nsdc.sh
- less loggin and more radical tcp connection (mis)handling
- prefork -n processes to handle tcp connections
- multiple -a flags
CHANGES:
- named.stats file functionality is removed
BUG FIXES:
- couple of pedantic fixes in C code
- last zone in database axfr bug fixed
- nsdc update wont update bug fixed
Revision 1.10 / (download) - annotate - [select for diffs], Wed Jun 11 05:53:06 2003 UTC (20 years, 10 months ago) by simonb
Branch: MAIN
Changes since 1.9: +2 -2
lines
Diff to previous 1.9 (colored) to selected 1.66 (colored)
Update HOMEPAGE.
Revision 1.9 / (download) - annotate - [select for diffs], Mon Jun 2 01:17:51 2003 UTC (20 years, 10 months ago) by jschauma
Branch: MAIN
Changes since 1.8: +2 -2
lines
Diff to previous 1.8 (colored) to selected 1.66 (colored)
Use tech-pkg@ in favor of packages@ as MAINTAINER for orphaned packages. Should anybody feel like they could be the maintainer for any of thewe packages, please adjust.
Revision 1.8 / (download) - annotate - [select for diffs], Tue Sep 3 14:55:05 2002 UTC (21 years, 7 months ago) by itojun
Branch: MAIN
CVS Tags: netbsd-1-6-1-base,
netbsd-1-6-1
Changes since 1.7: +3 -3
lines
Diff to previous 1.7 (colored) to selected 1.66 (colored)
upgrade to 1.0.1. diff from 1.0.1rc2: >Please to announce the final release of NSD-1.0.1 with minor bug fixes >and cosmetic changes, available for download:
Revision 1.7 / (download) - annotate - [select for diffs], Wed Aug 28 16:05:50 2002 UTC (21 years, 7 months ago) by itojun
Branch: MAIN
Changes since 1.6: +5 -5
lines
Diff to previous 1.6 (colored) to selected 1.66 (colored)
upgrade to 1.0.1 release candidate 2.
1.0.1
=============
FEATURES:
- NSD drops permissions after binding the sockets
- ``cache'' zones are no longer allowed
- ID.Server & Version.Server compile time options
- AXFR implemented (with tcpwrapper for access control)
- nsdc update and nsdc notify functinality
- using named-xfer with TSIG for inbound axfr
CHANGES:
- the order of records in the database is from now
on significant
- since Berkeley DB doesnt define order for sequential
access it is no longer supported
BUG FIXES:
- white space problem in zonec is fixed
Revision 1.5.2.1 / (download) - annotate - [select for diffs], Sun Jun 23 18:56:36 2002 UTC (21 years, 10 months ago) by jlam
Branch: buildlink2
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored) next main 1.6 (colored) to selected 1.66 (colored)
Merge from pkgsrc-current to buildlink2 branch.
Revision 1.6 / (download) - annotate - [select for diffs], Wed May 8 08:41:21 2002 UTC (21 years, 11 months ago) by itojun
Branch: MAIN
CVS Tags: pkgviews-base,
pkgviews,
netbsd-1-6-RELEASE-base,
netbsd-1-6,
buildlink2-base
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored) to selected 1.66 (colored)
change version numbering - 1.0.0rc2
Revision 1.5 / (download) - annotate - [select for diffs], Wed May 8 03:08:34 2002 UTC (21 years, 11 months ago) by itojun
Branch: MAIN
Branch point for: buildlink2
Changes since 1.4: +4 -18
lines
Diff to previous 1.4 (colored) to selected 1.66 (colored)
upgrade to 1.0.0-beta2 (pkg version number is 0.9.3 to avoid version number rollbacks) - wildcards bug fixed - AA bit for class ANY bug fixed - minor coredumps with really broken zones in zonec fixed - linux & SunOS port
Revision 1.4 / (download) - annotate - [select for diffs], Tue Apr 9 08:57:42 2002 UTC (22 years ago) by agc
Branch: MAIN
CVS Tags: netbsd-1-5-PATCH003
Changes since 1.3: +4 -1
lines
Diff to previous 1.3 (colored) to selected 1.66 (colored)
Since the distfile requires a password-protected download stage, mark the package as IS_INTERACTIVE. Fix some pkglint errors.
Revision 1.3 / (download) - annotate - [select for diffs], Wed Apr 3 03:44:32 2002 UTC (22 years ago) by itojun
Branch: MAIN
Changes since 1.2: +5 -3
lines
Diff to previous 1.2 (colored) to selected 1.66 (colored)
upgrade to 1.0alpha2 (package versioned 0.9.2) - IPv6 transport support added by Jun-ichiro itojun Hagino (Use -DINET6) - Makefile modified for easier compile time configuration - EDNS(0) bug fixed - Default database changed to all lowercase, red-black tree to make nsd DNSSEC ready - REQUIREMENTS are cleaned up and updated - Signal names changed in nsdc.sh.in - Default compile options dont include -DMIMIC_BIND8
Revision 1.2 / (download) - annotate - [select for diffs], Mon Apr 1 04:19:26 2002 UTC (22 years ago) by jmc
Branch: MAIN
Changes since 1.1: +6 -1
lines
Diff to previous 1.1 (colored) to selected 1.66 (colored)
Add appropriate restrictions since this can't be redistributed right now.
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Thu Mar 28 02:17:18 2002 UTC (22 years ago) by itojun
Branch: TNF
CVS Tags: pkgsrc-base
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored) to selected 1.66 (colored)
nsd, authoritative-only nameserver
Revision 1.1 / (download) - annotate - [select for diffs], Thu Mar 28 02:17:18 2002 UTC (22 years ago) by itojun
Branch: MAIN
Diff to selected 1.66 (colored)
Initial revision