6761 recommendations.
While there:
- Fix invalid syntax in sample slave config.
- Add a message about having syslogd working with BIND9 chroot.
PR: 217915
Reported by: eserte12 yahoo de
Sponsored by: Absolight
This release fixes a spurious assertion failure when unbound receives a
malformed packet with 0x20 enabled.
Bug Fixes
- Fix#1280: Unbound fails assert when response from authoritative
contains malformed qname. When 0x20 caps-for-id is enabled, when
assertions are not enabled the malformed qname is handled correctly.
PR: 219958
Submitted by: maintainer (jaap NLnetLabs nl)
Regression in v2.77 caused by a patch proposed by yours truly.
Reported by: Steven Shiau (via upstream dnsmasq-discuss mailing list)
Obtained from: Chris Novakovich and Simon Kelley
Pointyhat to: mandree@
The latest www/py-requests update [1] unbundled its dependencies, now
requiring chardet, idna, urllib3 and certifi from ports.
www/py3-requests port was not tested during QA, which would have highlighted
the need for many new py3-* ports (and their dependencies).
This change creates one of those ports.
[1] https://svnweb.freebsd.org/changeset/ports/442565
PR: 219833
1.Forwarding queries to customized domains (and their subdomains) to
specified servers over a specified protocol (UDP or TCP).non-standard
ports are supported;
2.DNS cache and its controls(including modifying TTL for different domains);
3.Ignoring DNS responses from upstream servers containing particular IPs;
4.Loading hosts from file (including the support for wildcards, CName
redirections and remote hosts files);
5.Refusing queries to specified domains (for ads blocking);
6.Cross-platform (Windows, Linux);
WWW: https://github.com/holmium/dnsforwarder
PR: 219370
Submitted by: Jov <amutu@amutu.com>
packetq is a command line tool to run SQL queries directly on PCAP
files, the results can be outputted as JSON (default),
formatted/compact CSV and XML. It also contain a very simplistic
web-server in order to inspect PCAP files remotely.
PacketQ was known as DNS2db but renamed in 2011.
WWW: https://www.dns-oarc.net/tools/packetq
PR: 219504
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
Additionally, zero out *addrp in edns0.c, and fix two typoes in
forward.c where && should be &. These fixes have all been reported
upstream.
Note that the build rig is currently not up to using I18N and IDN2, so
we forgo IDN2 for now. Also reported upstream.
Changelog since -test5:
1835343 (tag: v2.77rc4) Update German translation.
2aaea18 Add .gitattributes to substitute VERSION on export.
7ab78b9 (tag: v2.77rc3) Fix c7be0164ce6ae89d6f2f0ffea14e2612418dd5da
c7be016 (tag: v2.77rc2) Suppress DHCP ping checks when allocating on the loopback interface.
d203af4 Add optional support for libidn2 and therefore IDNA2008.
05f76da Don't die() on failing to parse lease-script output.
bf05f8f Fix crash introduced by 09f3b2cd9c7b5b5e0e96ba41f666e69808862620.
09f3b2c (tag: v2.77rc1) Fix case of DS queries to domains marked as not doing DNSSEC.
2282787 Fix botch introduced by 561441320f0cb67ea97f81c59332da5c6d14b494
4583dd9 Replace obsolete utime() usage with utimes().
5614413 Fix a couple of crashes on malformed config files.
b2a9c57 Add "known-othernet" DHCP tag.
standardized way. Lexicon has a CLI but it can also be used as a python library.
Lexicon was designed to be used in automation, specifically letsencrypt.
WWW: https://github.com/AnalogJ/lexicon
PR: 218792
Submitted by: Goran Meki <meka@tilda.center>
Diff from upstream CHANGELOG:
+ Allow use of MAC addresses with --tftp-unique-root. Thanks
+ to Floris Bos for the patch.
+
+ Add --dhcp-reply-delay option. Thanks to Floris Bos
+ for the patch.
+
+ Add mtu setting facility to --ra-param. Thanks to David
+ Flamand for the patch.
+
+ Capture STDOUT and STDERR output from dhcp-script and log
+ it as part of the dnsmasq log stream. Makes life easier
+ for diagnosing unexpected problems in scripts.
+ Thanks to Petr Mensik for the patch.
+
+ Generate fatal errors when failing to parse the output
+ of the dhcp-script in "init" mode. Avoids strange errors
+ when the script accidentally emits error messages.
+ Thanks to Petr Mensik for the patch.
+
+ Make --rev-server for an RFC1918 subnet work even in the
+ presence of the --bogus-priv flag. Thanks to
+ Vladislav Grishenko for the patch.
+
+ Extend --ra-param mtu: field to allow an interface name.
+ This allows the MTU of a WAN interface to be advertised on
+ the internal interfaces of a router. Thanks to
+ Vladislav Grishenko for the patch.
+
+ Do ICMP-ping check for address-in-use for DHCPv4 when
+ the client specifies an address in DHCPDISCOVER, and when
+ an address in configured locally. Thanks to Alin Năstac
+ for spotting the problem.
This change was reverted:
- Implement RFC 6842. Thanks to Reddeiah Raju Konduru for
- pointing out that this was missing.
Reported by: portscout
- OPENDNSSEC-889: MySQL migration script didnt work for all database
and MySQL versions.
- OPENDNSSEC-887: Segfault on extraneous tag.
- OPENDNSSEC-880: Command line parsing for import key command failed.
- OPENDNSSEC-890: Bogus signatures upon wrong zone input when TTLs
for same rrset are mismatching.
PR: 218995
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
- OPENDNSSEC-888: Fix up MySQL<->SQLite3 database conversion script.
- OPENDNSSEC-752: Incorrect calculated number of KSKs needed when
KSK and ZSK have exactly the same parameters. This would prevent
KSK rollovers.
- OPENDNSSEC-890: Bogus signatures on mismatching TTLs within the same RRset.
PR: 218994
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
