2016-03-05 12:29:49 by Jonathan Perkin | Files touched by this commit (1813) |
Log message:
Bump PKGREVISION for security/openssl ABI bump.
|
2015-12-13 00:57:09 by Fredrik Pettai | Files touched by this commit (2) | |
Log message:
NSD 4.1.7
=========
FEATURES:
- support configure --with-dbfile="" for nodb mode by default, where
there is no binary database, but nsd reads and writes zonefiles.
- reuseport: no is the default, because the feature is not troublefree.
- configure --enable-ratelimit-default-is-off with --enable-ratelimit
to set the default ratelimit to disabled but available in nsd.conf.
- version: "string" option to set chaos version query reply string.
BUG FIXES:
- Fix zones updates from nsd parent event loop when there are a lot
of interfaces.
- portability fixes.
- patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new
defaults in the ssl libraries.
- updated contrib/nsd.spec, with new configure options.
- Allocate less memory for TSIG digest.
- Fix #721: Fix wrong error code (FORMERR) returned for unknown
opcode. NOTIMP expected.
- Fix zonec ttl mismatch printout to include more information.
- Fix TCP responses when REUSEPORT is in use by turning it off.
- Document default in manpage for rrl-slip, ip4 and 6 prefixlength.
- Explain rrl-slip better in documentation.
- Document that ratelimit qps and slip are updated in reconfig.
- Fix up defaults in manpage.
|
2015-10-22 19:32:29 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.6
=========
BUG FIXES:
- Fix #701: Fix that AD=1 set in a BADVERS response.
- Fix typo in zonec.c inside error message.
- Fix #711: Document that debug-mode yes is used for staying
attached to the supervisor console.
- Document verbosity 3 prints more information.
- nsd-checkconf warns for master zones with no zonefile statement.
- Fix start failure when many file descriptors are in use.
- The servfail rcode is not printed with a space in the middle.
- print failed token for config syntax error or parse error.
|
2015-09-21 15:38:52 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.5
=========
BUG FIXES:
- Fix #706: default port 53 not opened on ip4 because of getaddrinfo
hints initialisation failure.
|
2015-09-19 05:58:50 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.4
=========
FEATURES:
- RFC7553 RR Type URI support.
- removed hardcoded interface limit, --with-max-ips removed.
- SO_REUSEPORT support, by default on Linux, or with reuseport: yes.
- Admitted axfrs are logged at verbosity 1. Refused at verbosity 2.
- --enable-pie and --enable-relro-now options for a safer executable.
BUG FIXES:
- Fix NSID response for short edns sizes.
- Fix that for expired zones NSD performs an AXFR and accepts newer
and older serial numbers.
- Document that minimal responses only minimizes responses to fit
in one datagram. It does not minimize smaller responses.
- Fix #618: documented need to list ip-addresses seperately in
nsd.conf if there are multiple, because the source address of
replies can otherwise go wrong.
- Fix that notify from nsd-control contains soa serial.
- Fix #698 formatting errors and typos in nsd.8.in.
|
2015-06-24 14:18:03 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.3
=========
FEATURES:
- nsd-control addzones and delzones read list of zones from stdin.
- hmac sha224, sha384 and sha512 support.
- max-interfaces raised to 32.
BUG FIXES:
- Fix #665: when removing subdomain, nsd does not reparse parent zone.
- Fix task and zonestat files to be stored in a subdirectory in tmp
to stop privilege elevation.
- Fix crash in zone parser for relative dname after error in origin.
- Fix that formerrors are ratelimited.
|
2015-06-08 17:42:07 by Sebastian Wiedenroth | Files touched by this commit (2) |
Log message:
add SMF manifest
|
2015-05-03 22:57:49 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
NSD 4.1.2
=========
FEATURES:
- Incoming notifies have serial number logged (at verbosity 1).
BUG FIXES:
- Remove some duplicate header includes.
- Fix tcp waiting list for zone transfers where the bind and connect
calls fail.
- Fix segfault in zone reader on invalid input.
- Fix segfault on double origin in zone reader.
- Fix b64pton out of bounds error on invalid zonefile input.
- Fix origin directive from unused old value and subdomain parser
failure.
- Fix use after free after zonefile syntax error followed by ttl
or origin directive.
- Fix syntax error followed by too many TXT elements parse crash.
- Fix buffer overflow in config parse of domain name.
- Use reallocarray for integer overflow protection.
- Fix allocation integer overflow checks.
- Fix #654: Fix contradiction in notify logging verbosity level.
- Fix #655: Fix contradiction in verbosity for zone transfers.
- Made log message more consistent, changed 'axfr refused' log message
to be more consistent with other messages. Also notify refused.
- verbosity 2 logs axfr refused and notify refused.
verbosity 1 contains less log messages.
|
2015-03-09 12:34:26 by Fredrik Pettai | Files touched by this commit (2) | |
Log message:
update the rc-script so it works correctly for the nsd user
|
2015-02-05 08:06:04 by Fredrik Pettai | Files touched by this commit (2) |
Log message:
4.1.1
================
FEATURES:
- RFC 7344: CDS and CDNSKEY (read record types).
- per zone statistics with --enable-zone-stats, config zone with
zonestats: "name", zones configured with the same string are \
added.
- Disabled use of SSLv3 in nsd-control.
- nsd-checkconf -f prints out full name of pidfile (with dir).
- Synthesize CNAMEs with same TTL as DNAME.
BUG FIXES:
- Fix that expired zones stay expired after a server restart.
- Fix "xfrd_handle_ipc: bad mode" log errors when compiled
with --disable-bind8-stats.
- Fix #616: retry xfer for zones with no content after command.
- Fix char used as array index warnings on NetBSD.
- Fix that queries for noname CH TXT are REFUSED instead of nodata.
- Fixes for wildcard addition and deletion, speedup for some cases.
- Fix that failure to add tcp to tcp base does not leak the socket.
- Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE.
- Fix spinning NSD with lots of failing transfers, due to pointer
comparison using void pointer subtraction.
- Fix bug#637: fix that nsd.db grows limitlessly, an off by one
on one megabyte free chunks, created during AXFRs of large zones,
that caused the one megabyte chunk to be leaked.
- Fix casts for ctype functions.
- correct some hyphen-used-as-minus-sign (from Andreas Schulze) in
man pages.
- Fix zonesdir chroot error message.
|