- Update to 2.2.0
With this release nsd no longer requires named-xfer to be
present on the system.
I also changed the options to a configure script.
Added file(s):
- scripts/configure.nsd
PR: ports/76412
Submitted by: Olafur Osvaldsson <oli@isnic.is>
All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.
PR: 75344
Approved by: portmgr@ (kris), ade & sean (mentors)
allows for per record configuration. It also includes a wizard for generation
of configuration files.
PR: ports/76614
Submitted by: Dan Smith <dan@algenta.com>
Name: BIND: Self Check Failing [Added 2005.25.01]
Versions affected: BIND 9.3.0
Severity: LOW
Exploitable: Remotely
Type: Denial of Service
Description:
An incorrect assumption in the validator (authvalidated) can result in a
REQUIRE (internal consistancy) test failing and named exiting.
Workarounds:
Turn off dnssec validation (off by default) at the options/view level.
dnssec-enable no;
Active Exploits: None known
Bump PORTREVISION accordingly.
It should be noted that the vast majority of users would not have
DNSSEC enabled, and therefore are not vulnerable to this bug.
BIND 8.4.6-REL is a security release of BIND 8.4.
It is possible to remotely trigger a overrun causing a
denial of service. If you are running BIND 8.4.4 or
BIND 8.4.5 you should upgrade.
Also:
1. Add ipv6 as a virtual category, since a key reason for the
BIND 8.4.x branch is IPv6 transport.
2. Download the PGP .asc files for the src and doc tarballs.
3. Add a new example file to PORTDOCS.
Version bump. This release fixes segfault in argument
parsing. Cleaned -h output (remved longopts when they are
unavailable) Improved signal handling and blacklist feature
added. Proper handling of paths in documentation.
I implemeted a pselect in lib.c for BSD 4.x support. Please
let me know if this could be handeled in a better way.
PR: ports/76060
Submitted by: Natanael Copa <ncopa@users.sourceforge.net>
Drill is a tool ala dig from BIND. It was designed with
DNSSEC in mind and should be a useful debugging/query tool
for DNSSEC.
PR: ports/75882
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
missing a couple of dependencies on the uint32.h header, so make(1) was
postponing its creation.
Bump PORTREVISION, since it is the same for the IPv6 and !IPv6 cases,
although this particular change does not affect the !IPv6 case at all.
PR: 75564
Submitted by: oHmEr <ohmer@epita.info>
o Move databases/sqlite to databases/sqlite2.
o Fix dependency on databases/sqlite.
o Update sqlite2 to 2.8.15.
o Bump PORTREVISION, accordingly.
Approved by: portmgr, maintainers of sqlite and related ports
Sqldjbdns is an authoritative DNS server that pulls its
data directly from a set of SQL tables. It supports fully
dynamic A, MX, TXT, and PTR records, and run-time configurable
static NS and SOA records. It also supports schedule expiry
and introduction of records.
This package also includes dnscache with PostgreSQL backend
PR: ports/71345
Submitted by: Radim Kolar <hsn@netmag.cz>
And while I'm here:
1. Download the PGP .sig file, in case the user wants to verify the package
2. Switch to PLIST_FILES for the one file this port installs
3. Replace the lone patch file with a ${SED} command
For those keeping score at home, that's 3 inodes gone with one commit! :)
Approved by: edwin (maintainer)
dns/walker is the same ports. And name 'walker' was
recognized as a better name. So we move dns/dnssecwalker
to dns/walker port and remove the first one.
Submitted by: Johan van Selst <johans(at)stack.nl>
- Depends on Net::DNS::SEC as well as Net::DNS
- Recent versions include a PGP signature
- MASTER_SITES changed
- Grant a port maintainership to submitter
PR: ports/74995
Submitted by: Johan van Selst <johans(at)stack.nl>
BUG FIXES:
- Bug #90: handle \000 in TXT records correctly
- Fixed undefined behavior in the use of vsnprintf when
logging messages.
PR: ports/74517
Submitted by: maintainer
I committed pre-improved version's PR. This is my mistake.
Pointed out by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Pointy hat to: myself
PR: ports/73862
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
types (including the DNSSEC types), and unknown types. It can be used for
queries, zone transfers, and dynamic updates. It includes a cache which can be
used by clients, and a minimal implementation of a server. It supports TSIG
authenticated messages, partial DNSSEC verification, and EDNS0.
dnsjava provides functionality above and beyond that of the InetAddress class.
Since it is written in pure Java, dnsjava is fully threadable, and in many
cases is faster than using InetAddress.
dnsjava provides both high and low level access to DNS. The high level
functions perform queries for records of a given name, type, and class, and
return an array of records. There is also a clone of InetAddress, which is even
simpler. A cache is used to reduce the number of DNS queries sent. The low
level functions allow direct manipulation of DNS messages and records, as well
as allowing additional resolver properties to be set.
WWW: http://www.xbill.org/dnsjava/
dnshijacker is a libnet/libpcap based packet sniffer & spoofer. a
versatile tool, dnshijacker supports tcpdump style filters that allow
you to specifically target victims. dns answers are forged based on
entries in a "fabrication table" or by simply forging one answer to all
requests. a print only mode is also supported, allowing one to simply
monitor dns traffic. dns hijacker is an excellent tool for network level
ad blocking / removal.
WWW: http://pedram.redhive.com/projects.php
PR: ports/72898
Submitted by: David Thiel <lx@redundancy.redundancy.org>
This version introduce random source ports to
reduce the risk of getting the cache poisoned.
Assign maintainership to submitter/author.
PR: ports/73420
Submitted by: Natanael Copa
DNSdoctor is intended to help solving misconfigurations or inconsistencies
of DNS zone files.
Features
* Powerful configuration file
* Does not depend on policies
* Fine grained test selection (by test, by categories, by zones)
* Full IPv6 support (connectivity and AAAA records)
* Supports several input/output interfaces such as CLI, GUI, CGI
* Dedicated mode for use inside shell scripts
* Batch mode available (ideal when dealing with several domains)
* Multi-threaded application in order to cut down checking time
* Extensible: new tests, new interfaces, new reports, ...
* Exception and cache mechanisms to simplify test writting
WWW: http://www.dnsdoctor.org/
PR: ports/71819
Submitted by: Janos Mohacsi <janos.mohacsi@niif.hu>
rbllookup is a small perl script which allow you to check given IP/host
name.
In this version you have statically inserted RBL servers, but code is based
on GPL source, so you can easy add more/replace/delete RBL servers by
editing rbllookup.pl file.
Also, author looking for support from programmers for ideas, codefix, new
features, switch to c/c++, gui version?
Author: Marcin Gondek <drixter@e-utp.net>
WWW: http://rbllookup.sourceforge.net
PR: ports/69160
Submitted by: Marcin Gondek <drixter@e-utp.net>
If you know new email addresses for the people involved, please send-pr it!
<mcsi@agava.com>: host relay.agava.net.ru[195.161.118.3] said: 550
<mcsi@agava.com>: User unknown in local recipient table (in reply to RCPT
TO command)
<woju@bbsmail.ntu.edu.tw> (expanded from <woju@bbsmail>): Host or domain name
not found. Name service error for name=bbsmail.ntu.edu.tw type=A: Host not
found
<esoha@attbi.com>: host gateway.attbi.com[204.127.198.6] said: 551 not our
customer (in reply to RCPT TO command)
<crow@nektor.hu>: host mail.kapu.hu[195.70.32.236] said: 550 unknown user (in
reply to RCPT TO command)
<cyrilm@tower.pp.ru>: host mail.tower.pp.ru[213.85.109.133] said: 550 unknown
user (in reply to RCPT TO command)
<ports@henrik-motakef.de>: Host or domain name not found. Name service error
for name=henrik-motakef.de type=A: Host not found
<jj@nttmcl.com>: host mx1.nttmcl.com[216.69.64.132] said: 550 5.2.1
<jj@nttmcl.com>... Mailbox disabled for this recipient (in reply to RCPT TO
command)
<koji@jet.es>: host mx.wanadoo.es[62.81.235.75] said: 550 Relay not permitted /
No such user (in reply to RCPT TO command)
<proot@iaces.com>: host horton.iaces.com[204.147.87.98] said: 550 5.1.1
<proot@iaces.com>... User unknown (in reply to RCPT TO command)
<roland.jesse@gmx.net>: host mx0.gmx.net[213.165.64.100] said: 550 5.1.1
{mx034} <roland.jesse@gmx.net>... User is unknown (in reply to RCPT TO
command)
<vess@slavof.net>: host mail.slavof.net[213.130.68.146] said: 550 5.7.1 Access
denied (in reply to MAIL FROM command)
<tuxsuximus@hotmail.com>: host mx3.hotmail.com[65.54.253.99] said: 550
Requested action not taken: mailbox unavailable (in reply to RCPT TO
command)
<zenin@archive.rhps.org>: host mail.rhps.org[66.250.128.137] said: 550 5.7.1
<zenin@archive.rhps.org>... Relaying denied (in reply to RCPT TO command)
administrators to quickly and easily make the most common DNS queries
without constructing lengthy dig commands.
PR: 73030
Submitted by: Jean-Yves Lefort <jylefort@brutele.be>
This port contains a subset of the DJBDNS package.
It includes several useful Domain Name System (DNS) tools:
- dnsfilter: a parallel IP-address-to-host-name converter
- dnsip, dnsipq, dnsname, dnstxt, and dnsmx: simple
command-line interfaces to DNS
- dnsq, dnstrace, dnstracesort: DNS debugging tools
Author: Daniel J. Bernstein <djb@cr.yp.to>
WWW: http://cr.yp.to/djbdns.html
to prevent cache poisoning.
PR: ports/72522
Submitted by: Natanael Copa <ncopa@users.sourceforge.net>
While I'm here:
- Rework installation mechanism - use do-install target
- Respect NOPORTDOCS
- Install samples into EXAMPLESDIR
- Use DOCSDIR and EXAMPLESDIR macros in pkg-plist
Update of dnrd. The TCP support is totally broken in previous
versions. Even if it should work in this verion it is
disabled by default. (The code was so ugly). It can be
enabled with WITH_TCP.
In this version it is also possible to disable the MASTER
file support. So dnrd can be a compiled as proxy only.
WITHOUT_MASTER.
PR: ports/71770
Submitted by: Natanael Copa <ncopa@users.sourceforge.net>
with the new PTHREAD_LIBS in 5.x and -CURRENT by
changing USE_INC_LIBTOOL_VER to USE_LIBTOOL_VER
(this also removes .la files)
- Bump PORTREVISION due to changed packages
Suggested by: marcus
Approved by: portmgr (marcus)
by upgrading to the latest version (0.60.5)
- Update its dependency devel/poslib to 1.0.5 (prerequisite)
PR: ports/72308
Submitted by: sergei
Approved by: portsmgr (will)
provide anything useful for newer systems, so remove them.
PR: ports/72118
Submitted by: Michel Lavondes <fox@vader.aacc.cc.md.us>
Approved by: portmgr (eik)
significant updates, not the least of which is the new and improved
DNSSEC code based on the latest standards (including DS).
Various updates to the port, including:
1. Download the PGP signature
2. If running on ${OSVERSION} >= 503000, configure with threads
3. Update pkg-descr re IPv6 RRs
4. Update pkg-message to reflect a world with 6-current
There is also a patch to correct a man page installation error.
This problem should be fixed in the next release.
Approved by: portmgr (marcus)
9.2.x in several important ways, including new DNSSEC support
and reportedly better performance.
It is anticipated that when this code base settles down that the
bind9 port could be removed.
NSD 2.1.2 release notes:
FEATURES:
- NSD now fully supports unknown record types using the notation
specified in RFC3597.
- Support for the following RR types has been added: WKS, X25, ISDN,
RT, NSAP, PX, NAPTR, KX, CERT, DNAME, and APL. DNAME special
processing is not supported.
BUG FIXES:
- Bug #84: NSD now uses SIGUSR1 instead of SIGILL to report stats.
- Bug #85: Support for WKS records.
- Bug #86: The characters "#%&^[]?" can now be used without backslash
in zone file domain names.
- Plugin callback return type fixed.
- The maximum message length for IPv6 UDP packets is now limited to
the IPv6 minimum MTU (1280) unless the IPV6_USE_MIN_MTU socket
option is supported.
PR: ports/69914
Submitted by: Olafur Osvaldsson <oli@isnic.is> (maintainer)
the libtoolX ports instead of the one included with each port. Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version. To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER. Both macros accept the same argument: a libtool version.
For example, to use the ports version of libtool-1.5, add the following to
your Makefile:
USE_LIBTOOL_VER= 15
To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:
USE_INC_LIBTOOL_VER= 15
With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).
PR: 63944
Based on work by:eik and marcus
Approved by: ade (autotools maintainer)
Tested by: kris on pointyhat
Bound to be hidden problems: You bet
- Better handling of timeout (instead of a static value,
start with five seconds and double it each retry)
- Warnings are printed if you receive a different RR type
than the one you asked for (for example when you ask for
an A record and receive a CNAME)
- Fixed problems when records received in the authority
field are shorter than the domain the nameserver is
authoritative for.
- When compiled without IPv6 support on an IPv6 capable
machine the machine tried to query the IPv6 translated
IPv5 address anyway.
- -C caches hosts which haven't answered too.
One-Record-Per-File bases. Because of this, sheerdns is the simplest of any DNS
to configure, the easiest to update, and the most efficient for networks that
experience a lot of updates (for example master servers for dynamic IP address
ranges).
PR: ports/67241
Submitted by: <bkhl@elektrubadur.se>
