./net/maradns, Secure DNS server for *NIX systems

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 2.0.13, Package name: maradns-2.0.13, Maintainer: ddeus.pkgsrc

MaraDNS is a package that implements the Domain Name Service (DNS), an
essential internet service. MaraDNS is intended for environments where a DNS
server must be secure and where the server must use the absolute minimum
number of resources possible. MaraDNS was created in response to issues
people had with the DNS servers available in early 2001; and has the
following design goals:

Security-aware programming. A DNS server needs to be secure. It has a number
of security features in the code, including:

1. The code uses a special string library which is resistant to buffer
overflows.

2. The code, if started as root, mandates running as an unpriviledged user
in a chroot() jail.

Open-Source. The 1.0 release of the DNS server is public-domain code;
the 1.2 release will be released under a very liberal BSD-style license.

Simplicity. This DNS server has the minimum number of features needed to
correctly act as an authoritative and/or recursive name server.


Required to build:
[pkgtools/cwrappers]

Package options: inet6

Master sites:

SHA1: 3fde455f7a3fa4242680840509e12e9cb790acde
RMD160: a0c5a1ac3f5bbd2b6aa277613007d91fef4f637a
Filesize: 1121.576 KB

Version history: (Expand)


CVS history: (Expand)


   2015-11-04 01:35:47 by Alistair G. Crooks | Files touched by this commit (748)
Log message:
Add SHA512 digests for distfiles for net category

Problems found with existing digests:
	Package haproxy distfile haproxy-1.5.14.tar.gz
	159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded]
	da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated]

Problems found locating distfiles:
	Package bsddip: missing distfile bsddip-1.02.tar.Z
	Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz
	Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2
	Package djbdns: missing distfile djbdns-cachestats.patch
	Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch
	Package gated: missing distfile gated-3-5-11.tar.gz
	Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz
	Package poink: missing distfile poink-1.6.tar.gz
	Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz
	Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch
	Package waste: missing distfile waste-source.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
   2015-09-26 09:40:25 by Wen Heping | Files touched by this commit (3) | Package updated
Log message:
Update to 2.0.13
Add LICENSE

Upstream changes:
maradns-2.0.13:
This is the stable release of MaraDNS.

        Two non-critical buffer overflows from ParseMaraRc fixed. One can never \ 
be exploited; the other one can only be exploted by the (usually) root user by \ 
writing to the system mararc file.
        Deadwood updated to 3.2.09

    (2015-09-25)

maradns-2.0.12:
This is the stable release of MaraDNS.

        Security fix for improper free() in zoneserver
        Deadwood updated to 3.2.08
        Zone transfers now work with newer versions of dig
        Documentation updates

    (2015.08.19)

maradns-2.0.11:
This is the stable release of MaraDNS.

        Deadwood updated to 3.2.07

    (2015.01.30)
maradns-2.0.10:
This is the stable release of MaraDNS.

        Deadwood updated to 3.2.06
        Zoneserver now compiles and runs in Cygwin (so Windows users can have \ 
DNS-over-TCP support).

    (2015.01.24)
maradns-2.0.09:
This is the stable release of MaraDNS.

        Deadwood updated to 3.2.05
        Startup scripts are now chkconfig-compatible

    (2014.02.12)

maradns-2.0.08:
This is the stable release of MaraDNS.

        Deadwood updated to 3.2.04
        Make DNS packet compression case-insensitive
        Attach IPv6 glue to NS and MX records when MaraDNS is compiled for IPv6
        Remove warning when MaraDNS is compiled for IPv6
        Remove warning when compiling getzone.c

    (2014.01.14)

maradns-2.0.07d:
This is the stable release of MaraDNS.

        Deadwood updated to 3.2.03d to patch security hole discussed at \ 
samiam.org/blog/20131202.html

    (2013.12.02)
maradns-2.0.07c:
This is the stable release of MaraDNS.

        Seven-line fix to Deadwood to fix resolution problem; more details in blog

    (2013.07.20; declared stable 2013.09.20)

maradns-2.0.07b:
This is the stable release of MaraDNS.

        One-line fix to Deadwood to fix resolution problem

    (2013.04.23; declared stable 2013.06.22)

maradns-2.0.07:
This is the stable release of MaraDNS.

        MaraDNS updated for CentOS 6
        Deadwood updated to 3.2.03
        GPG key updated
        Installs and tests pass in new CentOS install

    (2013.01.20)
maradns-2.0.06:
This is a stable release of MaraDNS.

        Deadwood updated to 3.2.02

    (2012.03.11)
   2012-10-23 19:19:22 by Aleksej Saushev | Files touched by this commit (671)
Log message:
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
   2012-02-28 22:55:28 by Aleksey Cheusov | Files touched by this commit (15) | Package updated
Log message:
Update to 2.0.05 by package maintainer + my fixes.

   maradns-2.0.05:

     This is a stable release of MaraDNS.

       * Security bugfix for CVE-2011-5056
       * Deadwood updated to Deadwood 3.2.01
       * Nicholas Bamber's Makefile.freebsd file added.

     (2012.02.12)

   maradns-1.4.10:

     The hash compression function has better collision resistance.
     More details at http://bam2.vk.tj

     (2012.01.13)

   maradns-1.4.09:

     Hotfix: The hash randomization now has 31 bits of entropy, and
     the hash does a fairly good job of choosing a random hash
     bucket again. More details at http://al72.vk.tj

     (2011.12.30)

   maradns-1.4.08:

     Security hotfix: Hash randomization added to MaraDNS 1's
     recursive resolver. MaraDNS 2 is not impacted (it's been using
     a randomized hash since 2007). More details at
     http://al62.vk.tj

     (2011.12.29)

   maradns-1.4.07:

   This is a legacy release of MaraDNS. All patches are backports
   of MaraDNS 2.0 bug fixes.

       * A typo fix for fetchzone
       * AXFR-over-UDP packets are now correctly marked "truncated"
       * It is now possible to have the '/' in hostnames
       * Fix for Debian bug #607739: Hostname shown when
         complaining about DDIP issues
       * AngelD's issue with zone transfers when there are a lot of
         FQDN4 records fixed.
       * Karim's issue with '/read' directive fixed

     (2011.11.11)
   2012-02-20 15:08:08 by Aleksey Cheusov | Files touched by this commit (1)
Log message:
Set MAINTAINER (Kozachuk Oleksandr) by request
   2011-05-06 13:36:24 by OBATA Akio | Files touched by this commit (3) | Package updated
Log message:
Update maradns to 1.4.06.

   maradns-1.4.06:

   This is the stable branch of MaraDNS.

       * Fix for CVE-2011-0520
       * Deadwood updated to 3.0.02

     (2011.01.28)

   maradns-1.4.05:

   This is a stable branch of MaraDNS.

       * Deadwood updated to the stable 3.0.01 release.
       * MicroDNS now returns "not implemented" when given an EDNS packet
       * FAQ updated.

     (2010.09.25)

   maradns-1.4.04:

   This is the stable branch of MaraDNS.

       * Bugfix: NAPTR records now work when ~ is used to separate
         records
       * NAPTR records now documented
       * Bugfix: ANY queries now correctly work with NS referrals
       * Example IPv6 addresses now use RFC-4193 compliant IPs
       * Website updated to point out that Deadwood is now feature
         complete and ready for beta-testing
       * Some updates to the SQA regressions
       * Deadwood updated to Deadwood 2.9.02
       * Windows-only mkSecretTxt program added (*NIX users can
         just type in "dd if=/dev/urandom of=secret.txt bs=64
         count=1"; this gives Windows the same ability).

     (2010.07.31)
   2010-06-25 23:40:32 by Joerg Sonnenberger | Files touched by this commit (2)
Log message:
Fix PLIST. Bump revision.
   2010-05-23 19:30:31 by Georg Schwarz | Files touched by this commit (9) | Package updated
Log message:
updated to 1.4.03
patched to support Darwin