* Remove an useless patch
Changelog:
NSD 4.1.13
Sep 27, 2016
Features
multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters, from Manabu Sonoda.
Support RR type OPENPGPKEY from RFC 7929.
Can config key algorithms with the digest name, eg. 'sha256'.
configure --disable-radix-tree for about 15% lower memory usage.
for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX.
more extensible edns option handling.
Bugfixes
Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime.
Fix#812: fix that make depend fails after distribution.
Fix#817: xfrd update failed loop.
Add robustness against unallocated data in nsec3 trees.
Fix README spelling error of BSD license (reported by Joerg Jung).
Fix multimaster for not tried full zone transfer for a expired zone.
Fix#827: fix compile with openssl 1.1.0 with api=1.1.0.
================
FEATURES:
- database: "" starts without mmap of database. Less memory is used,
zones are read from text zonefile.
- optimised zonefile parse code and zonefile write code.
- zonefiles-write option in nsd.conf, enabled when database is "".
The server writes changed zonefiles to disk every hour.
- xfrdfile: "" disables xfrd.state. If enabled, zones that are
same as before are not checked for a serial update at server start.
- include: "foo/nsd.d/*.conf" works, wildcard glob on includes.
- nsd shuts down during init process if given signal.
- log-time-ascii option, default yes, with readable timestamp in log.
- nsd-control addzone reports if zone already exists.
- Fix#564: add nsd-checkzone tool to check zonefile correctness.
- Increased default --with-max-ips from 8 to 16, this increases the
number of interfaces you can specify in nsd.conf to listen to.
BUG FIXES:
- Fixed shutdown message sporadically not printed on exit.
- Documented zonefile %s syntax in nsd.conf man page.
- Fix manpage to put colon after zonefiles check and write.
- Change from 'Zone" to "zone" with ".. serial .. is updated" log
message.
- Changed maxbackoff for no-content secondary zones from 4h to 24h.
- Fix print filename of encompassing config file on read failure.
- Fix delete or rename of a lot of zones and make it take a
non-enormous time.
- Speed up deletion of zone contents a lot, (56s to 1s), speeds up
delete, rename and AXFR for zones.
- Fix#571: unused variable and incompatible pointer warnings when
compiled on a system without INET6.
- Fix write_socket return value check in server.c
- Fix that xfrd reaps children also if the signal is lost.
- Fix#577: makefile incorrectly installed manpages from srcdir.
- Fix#587: Default value for statistics is 0.
- Fix#553: Improve TXT parsing.
- Fix#590: rrl log does not print wildcard as a star but escaped.
- Fix#591: rrl log messages at verbosity level 1.
- fix strptime implicit declaration error on OpenBSD.
- Fix -O3 compile flag to -O2 to avoid miscompilations.
- Allow user to override the -g -O2 CFLAGS in ./configure.
- Fix endian.h include for OpenBSD.
- Fix#600: document that provide-xfr provides AXFR and not IXFR.
- Fix rising-load-average or memory-leaks in OSes (Linux since 2.6),
that keep track of all past process parents, or leak memory
for them. Fix makes it so there is no very deep string of
process parents.
- Remove .LP after .SH in man pages.
Features:
* documented in doc/NSD-4-features. Change configuration without restart,
direct nameserver control with nsd-control, support a higher number of zones.
Higher performance (compared to NSD3).
* nsdc is gone. Use kill -HUP for reload (also checks if zonefiles have
changed and rereads them), and kill -TERM for quit. Or use nsd-control
for detailed control.
* cron job for nsdc patch is gone. nsd-control write creates zonefiles.
* nsd.db has a new format that compacts itself when it is changed,
thus nsdc patch is no longer necessary.
* nsd.db is memory mapped, NSD needs (part of) that mmap in ram.
* tcp-count can go above 1000; epoll/kqueue support with libevent.
* nsd-control reconfig for updates with no restart (zones, keys, ..)
* nsd-control-setup to create keys for nsd-control (enable nsd-control
with remote-control: yes in nsd.conf).
Features:
* Support for ILNP RR types: NID, L32, L64, LP (RFC6742).
* RRL, --enable-ratelimit at configure time and config options.
* TSIG initialization only fails when there is no digest found at all.
Bugfixes:
* Bugfix #478: Declaration after statement (for gcc 2.95).
* Bugfix #483: Better error message in case of TSIG error.
* Bugfix #485: TTL should not be greater than 2^31 - 1.
* Fix RCODE when CNAME loop final answer does not exist, should
return NXDOMAIN as stated by RFC 6604.
* Fix --disable-full-prehash bug, where after multiple incoming
IXFRs, NSEC3 can be removed unjustified.
* Bug #236: Allow RRs before the SOA in a zonefile.
* Bug #229: Remove the C99 code.
* Bug #253: Don't put NS RRs in a response with QTYPE=DNSKEY.
* Bug #263: Make TSIG algorithm comparison case insensitive.
* Bug #266: Build failed on systems without strptime.
* Fix install hickup.
* Fix to use 4096 EDNS limit for IPv6 on Linux.
NOTE: the configuration file format has changed. Don't update blindly.
Major changes:
- integrated AXFR/IXFR support for zone transfer. IXFR is not supported
when acting as master.
- TSIG authentication support for queries, notifies and zone transfers.
- full NOTIFY support
- DNAME type is supported
- experimental support for NSEC3 and NSID, not enabled in pkgsrc
- various bug fixes.
${VARBASE}/db/nsd.db on all platforms and use user/group nsd for the
daemon to run as. Install sample configuration without .sample
extension. Take maintainership. Bump revision.
=============
BUG FIXES:
- Bug #59: NSD returns FORMERR when the query name is >= 246
bytes.
- Bug #60: Zonec runs out of file descriptors with many zones.
- Bug #61: nsdc uses /bin/sh hardwired (and should not).
- Bug #62: NSD is not able to log to a file.
- Bug #63: nsdc update and zonec are too tallkative.
- Bug #64: Answer for request of a host resolved by a
wildcard-resource-record is not understandable by dig.
1.1
=============
FEATURES:
- ANSI C
- autoconf/configure
- new parser
- support for various RR types in zonec
- support for UNKN RR types
BUG FIXES:
- lots of zone parsing errors eliminated
- empty node matching bug gives NXDOMAIN
1.0.3
=============
This release is a bug fix release and does not add any new features.
BUG FIXES:
- Ignore SIGPIPE errors (bug #43).
- Keep track of TCP child servers and restart if necessary.
(bug #55)
- Handle database reload failures correctly.
- Close UDP sockets in TCP child servers.
- Handle escaped characters (besides \.) in labels.
- Preserve the query's RD flag in the answer.
1.0.2
=============
FEATURES:
- -DBIND8_STATS to enable bind8 like [NX]STATS
- -t flag to make nsd chroot to a certain directory
- -s flag to make nsd produce statistics every s seconds
- /etc/nsd/nsdc.conf to overwrite default variables
for nsdc.sh
- less loggin and more radical tcp connection (mis)handling
- prefork -n processes to handle tcp connections
- multiple -a flags
CHANGES:
- named.stats file functionality is removed
BUG FIXES:
- couple of pedantic fixes in C code
- last zone in database axfr bug fixed
- nsdc update wont update bug fixed
1.0.1
=============
FEATURES:
- NSD drops permissions after binding the sockets
- ``cache'' zones are no longer allowed
- ID.Server & Version.Server compile time options
- AXFR implemented (with tcpwrapper for access control)
- nsdc update and nsdc notify functinality
- using named-xfer with TSIG for inbound axfr
CHANGES:
- the order of records in the database is from now
on significant
- since Berkeley DB doesnt define order for sequential
access it is no longer supported
BUG FIXES:
- white space problem in zonec is fixed
number rollbacks)
- wildcards bug fixed
- AA bit for class ANY bug fixed
- minor coredumps with really broken zones in zonec fixed
- linux & SunOS port
- IPv6 transport support added by Jun-ichiro itojun Hagino (Use -DINET6)
- Makefile modified for easier compile time configuration
- EDNS(0) bug fixed
- Default database changed to all lowercase, red-black tree to make nsd
DNSSEC ready
- REQUIREMENTS are cleaned up and updated
- Signal names changed in nsdc.sh.in
- Default compile options dont include -DMIMIC_BIND8
