2017-03-01 12:45:04 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 4.1.15
Changelog:
NSD 4.1.15
Feb 16, 2017
Bugfixes
Fix nsd-control and ipv6 only.
Squelch zone transfer error address family not supported by protocol at low \
verbosity levels.
Fix #1195: Fix so that NSD fails on non-compliant values for Serial.
Fix to rename _t typedefs because POSIX reserves them.
Fix that nsec3 hash collisions only reported on verbosity level 3.
|
2016-12-09 00:19:53 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.14
==========
FEATURES:
- Fix #1132 for SERVFAIL zones perform backoff, and remembers the
timeout on next startup.
BUG FIXES:
- Fix null memcpy for radixtree with single link element.
- Robust fix against missing master in tcp_open for xfrd.
- Fix wildcards in include: config statements with chroot enabled.
- suppress compile warning in lex files.
- Fix to try every master once, then wait for timeout or notify.
- Save backoff timeout into xfrd.state file, this file has a higher
version number now. Old files are skipped silently (causes
refresh) and created as new files upon exit.
- Fix restart of zone transfers when new config becomes available.
|
2016-10-27 01:40:36 by Ryo ONODERA | Files touched by this commit (3) | |
Log message:
Update to 4.1.13
* Remove an useless patch
Changelog:
NSD 4.1.13
Sep 27, 2016
Features
multi-master-check: yes can be used to check all masters for the last \
version, using the higher version from the configured masters, from Manabu \
Sonoda.
Support RR type OPENPGPKEY from RFC 7929.
Can config key algorithms with the digest name, eg. 'sha256'.
configure --disable-radix-tree for about 15% lower memory usage.
for type SRV add A/AAAA to the additional section (if possible), just like \
we already do for type MX.
more extensible edns option handling.
Bugfixes
Fix compile warnings about unused result from write and strtol. and \
signcompare in minmax retrytime.
Fix #812: fix that make depend fails after distribution.
Fix #817: xfrd update failed loop.
Add robustness against unallocated data in nsec3 trees.
Fix README spelling error of BSD license (reported by Joerg Jung).
Fix multimaster for not tried full zone transfer for a expired zone.
Fix #827: fix compile with openssl 1.1.0 with api=1.1.0.
|
2016-09-14 14:51:42 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 4.1.12
Changelog:
Bugfixes
Fix malformed edns query assertion failure, reported by Michal Kepien (NASK).
|
2016-08-18 15:02:52 by Ryo ONODERA | Files touched by this commit (2) |
Log message:
Update to 4.1.11
Changelog:
1 August 2016: Wouter
- Tag 4.1.11rc1.
- Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
- Tag 4.1.11rc2.
8 July 2016: Wouter
- Note down tracking numbers for issue JVN#63359718 JPCERT#91251865.
5 July 2016: Wouter
- Fix #790: size-limit-xfr can stop NSD from downloading infinite zone
transfer data size, from Toshifumi Sakaguchi.
27 June 2016: Wouter
- Set default for min-refresh-time and min-retry-time to 0. Behaves
just like before, but has a configurable option in nsd.conf.
- Fix #783: Trying to run a root server without having configured it
silently gives wrong answers.
16 June 2016: Wouter
- When tcp is more than half full, use short timeout for tcp session.
- Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
- man page entries for max-refresh-time patch.
15 June 2016: Wouter
- Fix build without IPv6, patch from Zdenek Kaspar.
|
2016-06-16 17:25:44 by Fredrik Pettai | Files touched by this commit (2) | |
Log message:
NSD 4.1.10
==========
FEATURES:
- ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option
for Linux, binds to interfaces and addresses that are down.
- NSD includes AAAA before A for queries over IPV6 (in delegations).
And TC is set if no glue can be provided with a delegation because
of packet size.
- print notice that nsd is starting before taking off.
BUG FIXES:
- Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
- Fix #751: NSD fails to occlude names below a DNAME.
- If set without nsd.db print "" as the default in the man pages.
- Fix #755: NSD spins after a zone update and a lot of TCP queries.
- Fix for NSEC3 with zone signed without exact match for empty
nonterminals, the answer for that domain gets closest encloser.
- #772 Document that recvmmsg has IPv6 problems on some linux kernels.
|
2016-06-08 12:16:57 by Jonathan Perkin | Files touched by this commit (89) |
Log message:
Remove the stability entity, it has no meaning outside of an official context.
|
2016-06-08 11:46:05 by Jonathan Perkin | Files touched by this commit (47) |
Log message:
Change the service_bundle name to "export" to reduce diffs between the
original manifest.xml file and the output from "svccfg export".
|
2016-03-15 14:48:35 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.9
=========
BUG FIXES:
- Change the nsd.db file version because of nanosecond precision fix.
|
2016-03-11 22:53:07 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
4.1.8
================
FEATURES:
- #732: tcp-mss, outgoing-tcp-mss options for nsd.conf.
- #739: zonefile changes when mtime is small are detected on reload,
if filesystem supports precision mtime values.
- RR type CSYNC (RFC7477) syntax is supported.
BUG FIXES:
- take advantage of arc4random_uniform if available.
- Fix flto check for OSX clang.
- Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux.
- Fix #736: segfault during zone transfer.
- Fix #744: Fix that NSD replies for configured but unloaded zone
with SERVFAIL, not REFUSED.
|