Number of commits found: 90

- New port: dns/unbound

Unbound is designed as a set of modular components, so that also
DNSSEC (secure DNS) validation and stub-resolvers (that do not run as
a server, but are linked into an application) are easily possible.

Goals:
    * A validating recursive DNS resolver.
    * Code diversity in the DNS resolver monoculture.
    * Drop-in replacement for BIND apart from config.
    * DNSSEC support.
    * Fully RFC compliant.
    * High performance
          o even with validation.
    * Used as

(Only the first 15 lines of the commit message are shown above )

- New port openresolv-1.1

A resolvconf compatible framework for managing /etc/resolv.conf.

PR:             ports/119171
Submitted by:   Roy Marples <roy@marples.name> (maintainer)

Add dnswall 0.1.4, a daemon that filters out private IP addresses in DNS
responses.

It is designed to be used in conjunction with an existing recursive DNS resolver
in order to protect networks against DNS rebinding attacks.

Net::DNSBL::Statistics is the Perl module that collects statistics on the
interrogation success for a list of IP addresses against a list of DNSBL's.
The module is used to implement the reproting script dnsblstat.

WWW:    http://search.cpan.org/dist/Net-DNSBL-Statistics/

PR:             ports/119424
Submitted by:   Jin-Shan Tseng <tjs at cdpa.nsysu.edu.tw>

Bindgraph makes pretty query statistics about BIND servers. It was derived
from well-known mailgraph package.

WWW: http://www.linux.it/~md/software/

ISC recently announced that BIND 8 has been End-of-Life'd:
http://www.isc.org/index.pl?/sw/bind/bind8-eol.php

Therefore, per the previous announcement, remove the ports for BIND 8.
This includes the chinese/bind8 slave port, and mail/smc-milter which
has a dependency on libbind_r.a from BIND 8.x. The latter has been
unmaintained since 2005, and is 3 versions behind.

Approved by:    portmgr (linimon)

- Sort category Makefiles

Inspired by:    Jason Harris <jharris@widomaker.com>
Howto:          http://twiki.cenkes.org/Cenkes/SortingCategoryMakefiles

Net::DNSBL::MultiDaemon is the Perl module that implements the multi_dnsbl
daemon.

multi_dnsbl is a DNS emulator daemon that increases the efficacy of DNSBL
look-ups in a mail system. multi_dnsbl may be used as a stand-alone DNSBL or as
a plug-in for a standard BIND 9 installation. multi_dnsbl shares a common
configuration file format with the Mail::SpamCannibal sc_BLcheck.pl script so
that DNSBL's can be maintained in a common configuration file for an entire
mail installation.

Because DNSBL usefulness is dependent on the nature and source of spam sent to
a specific site and because sometimes DNSBL's may provide intermittant service,
multi_dnsbl interrogates them sorted in the order of greatest successful hits.
DNSBL's that do not respond within the configured timeout period are not
interrogated at all after 6 consecutive failures, and thereafter will be
retried not more often than once every hour until they come back online. This
eliminates the need to place DNSBL's in a particular order in your MTA's config
file or periodically monitor the DNSBL statistics and/or update the MTA config
file.

WWW: http://search.cpan.org/~miker/Net-DNSBL-MultiDaemon-0.18/MultiDaemon.pm

PR:             ports/115639
Submitted by:   Andrew Greenwood <greenwood.andy at gmail.com>

Add vizone, a script that updates the serialnumber in one or more dns zonefiles.

The File_DNS class provides a way to read,
edit and write RFC1033 style DNS Zones.

PR:             ports/114271
Submitted by:   Chris St Denis (<chris at ctgameinfo.com>)

Manages LDAP entries for the BIND9 SDB LDAP patch.

Supports adding, removing, and modifying enteries.

The attributes it can handle are TTL, A record, C name, AAAA
record, and MX record. Outside of TTL, multiple attributes
for each type record.

WWW: http://vvelox.net/projects/ldnsm/

PR:             ports/112191
Submitted by:   Zane C. Bowers

Removed on authors request until the program has reached maturity.

DNSCAP - DNS traffic capture utility

    cap is a network capture utility designed specifically for DNS
    traffic. It produces binary data in pcap(3) format, either on
    standard output (by default) or in successive dump files (if the d
    command line option is given.) This utility is similar to tcpdump(1),
    but has finer grained packet recognition tailored to DNS transactions
    and protocol options. dnscap is expected to be used for gathering
    continuous research or audit traces.

    SYNOPSIS
     dnscap [-avf6] [-i if ...] [-l vlan ...] [-p port] [-m [quire]] [-h [ir]]
            [-q host ...] [-r host ...] [-d base [-k cmd]] [-t lim] [-c lim]

    WWW: http://public.oarci.net/tools/dnscap

POE::Component::Server::DNS is a POE component that implements a DNS server.

It uses POE::Component::Client::DNS to handle resolving when configured as
'forward_only' and Net::DNS::Resolver::Recurse wrapped by
POE::Component::Generic to perform recursion.

One may add handlers to massage and manipulate responses to particular queries
which is vaguely modelled after Net::DNS::Nameserver.

WWW:    http://search.cpan.org/dist/POE-Component-Server-DNS/

PR:             ports/109449
Submitted by:   Jin-Shan Tseng <tjs at cdpa.nsysu.edu.tw>
Approved by:    erwin (mentor, implicit)

Net::DNS::Resolver::Programmable is a Net::DNS::Resolver
descendant class that allows a virtual DNS to be emulated
instead of querying the real DNS.  A set of static DNS
records may be supplied, or arbitrary code may be specified
as a means for retrieving DNS records, or even generating
them on the fly.

WWW: http://search.cpan.org/dist/Net-DNS-Resolver-Programmable/

- Koen Martens
gmc@sonologic.nl

PR:             ports/108997
Submitted by:   Koen Martens <gmc at sonologic.nl>

Complete the update for bind94 after the repocopy, and hook it up.

Add new port nss_mdns, a libc name service switch module for resolving
hostnames via Avahi's implementation of Multicast DNS.

With help from: flameeyes at gentoo dot org

The Four Calorie DNS Server is a very simple dns server that can power a
single one-ip-address domain.  It can handle SOA, NS, MX, A, and PTR
requests.  The 1.1.0 version includes a nice X windows GUI for management.

WWW: http://www.fourcalorieservers.com/

PR:             ports/107624
Submitted by:   Ron Scheckelhoff <rscheckelhoff at fourcalorieservers.com>

Add pear-Net_DNS 1.0.0, resolver library used to communicate with a DNS
server.

PR:             ports/107028
Submitted by:   chinsan

Add powerdns-recursor 3.1.4, an advanced DNS recursor.

PR:             105526
Submitted by:   sten at blinkenlights.nl

OpenDD is a DynDNS client, written in C, and especially designed
for small gateway machines, like a Soekris box. Its main feature
is that it does not require any Perl or Python interpreter.
It supports HTTPS, can send a mail report, and can run as daemon.
It is also very easy to deploy.

WWW: http://www.bsdmon.com/wakka/OpenDD

PR:             ports/105434
Submitted by:   Alexander Logvinov <ports at logvinov.com>

Improved version of dns/rbllookup

Remove dns/queryperf in favour of dns/dnsperf

[new port] dns/queryperf net/dhcperf replacement for dns/queryperf

PR:             ports/104663
Submitted by:   Edwin Groothuis <edwin@mavetju.org>

NSD (Name Server Daemon) is a complete implementation of an
authoritative DNS nameserver.

WWW:    http://www.nlnetlabs.nl/nsd

PR:             ports/104469
Submitted by:   oli at isnic.is

Add sshfp, generate SSHFP DNS records from knownhosts files or ssh-keyscan

Add p5-Net-DNS-ToolKit 0.29, tools for working with DNS packets.

PR:             ports/103107
Submitted by:   Gea-Suan Lin <gslin at gslin.org>

Add p5-Net-DNS-Codes 0.08, collection of C library DNS codes.

PR:             ports/103106
Submitted by:   Gea-Suan Lin <gslin at gslin.org>

Oops.  Actually connect the dns/c-ares port to the build.

Reported by:    linimon, kris

Add p5-Net-RBLClient 0.5, queries multiple Realtime Blackhole Lists in
parallel.

PR:             ports/100187
Submitted by:   Gea-Suan Lin <gslin at gslin.org>

Adding port dns/p5-DNS-EasyDNS, Update your EasyDNS dynamic DNS entries.

Approved by:    tobez (implicit)

Add new port -- Resolver re-initialization NSS module.

Add dns/p5-Data-Validate-Domain 0.03, a Perl module that provides domain
validation methods.

Add dns/p5-Net-Domain-TLD 1.62, a Perl module to look up and validate
TLDs.

[NEW PORT] dns/ldns: A library for programs conforming to DNS RFCs and drafts

        Ldns is a library to simplify implementaition of recent DNS
        RFCs. The goal is to allow depelopers to easily create
        software conforming to current RFCs and experimental software
        for current Internet drafts.  Because ldns is written in C
        it should be a lot faster than Perl or other scripting
        languages.

        WWW: http://www.nlnetlabs.nl/ldns/

PR:             ports/91042
Submitted by:   Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
<saurbier@math.uni-bielefeld.de>

Add dualserver 1.0 to ports/dns.

It is a combined DHCP/DNS server for small LANs.

PR:             ports/90216
Submitted by:   Gabor Kovesdan

- Move net/doc to dns/doc, which is a more suitable category for it

Approved by:    maintainer timeout (sanpei; 1 month)
Repocopy by:    marcus

Move IDN related ports from devel to dns category:

  devel/libidn -> dns/libidn
  devel/p5-Net-LibIDN -> dns/p5-Net-LibIDN

Approved by:    both maintainers
Repocopy by:    marcus

Remove deprecated port: Project no longer exists

New port

dnscheck is a simple to use DNS zone sanity checker, comparing name server
records and serial numbers with both the parent zone and the zone itself.
It allows you to find lame, leaked or stale name servers which have the
potential to cause disruption.

PR:             86542
Submitted by:   arrod Sayers <jarrod@netleader.com.au>
Approved by:    pav (mentor)

Add inadyn 1.96, INADYN - Simple DYNAMIC DNS client.

PR:             ports/86350
Submitted by:   Alex Samorukov <samm@os2.kiev.ua>

[new port] dns/queryperf

    This is queryperf, a DNS server query performance testing tool.

    It is primarily intended for measuring the performance of
    authoritative DNS servers, but it has also been used for measuring
    caching server performance.

    See /usr/local/share/docs/queryperf//queryperf.txt for more
    information on the command line option and the required
    configuration files.  ND-of-queryperf/pkg-descr

PR:             ports/85179
Submitted by:   Edwin Groothuis <edwin@mavetju.org>

- Add bin9-sdb-ldap, a patched bind9 version to use with an LDAP based backend.

PR:             ports/62840
Submitted by:   Hugo Meiland <hugo@meiland.nl>

Add tinystats.

tinystats is a statistic generator for DJB's tinydns.
It can be easily integrated with rrdtool to generate
nice graphical DNS stats.

WWW: http://www.morettoni.net/tinystats.html

PR:             ports/83167
Submitted by:   Filippo Natali <filippo.natali@gmail.com>

This program is a domain name server analysis and reporting tool.
It checks and reports whether a domain name, hosted by your organization,
is still in use, and if so, reports whether your name servers are
still the delegated name servers of the domain name in question.

PR:             ports/80834
Submitted by:   Ozkan KIRIK <ozkan@enderunix.org>

zonenotify is useful to send a NS_NOTIFY packet to BIND slave server.
When you update a zone in your djbdns DNS you must notify the slaves
about your change.

PR:             ports/80091
Submitted by:   Emanuel Haupt <ehaupt@critical.ch>

scavenge is a utility to audit DNS records within an IP address range.
It scans the range and classifies its findings into 4 categories:

    - Missing A records
    - Missing PTR records
    - Mismatched A/PTR records
    - Stale PTR records

PR:             ports/80119
Submitted by:   Mark Foster <mark@foster.cc>
Approved by:    adamw (mentor)

- Add py-twistedNames, a DNS protocol implementation with client and server.

PR:             ports/79929
Submitted by:   Neal Nelson <neal@nelson.name>

- obtain expiration date of domain names
e.g.

    use Net::Domain::ExpireDate;

    $expiration_obj = expire_date( 'microsoft.com' );

DNSMax's perl update client.  It manages DNS records, update history, and
allows for per record configuration.  It also includes a wizard for generation
of configuration files.

PR:             ports/76614
Submitted by:   Dan Smith <dan@algenta.com>

This project is a web-based front-end for the PowerDNS DNS server.

PR:             ports/76480
Submitted by:   Geoffroy RIVAT <grivat@sicfa.net>

New port: A dnssec aware dns debugging tool

        Drill is a tool ala dig from BIND. It was designed with
        DNSSEC in mind and should be a useful debugging/query tool
        for DNSSEC.

PR:             ports/75882
Submitted by:   Jaap Akkerhuis <jaap@NLnetLabs.nl>

New port py-dnspython version 1.3.2: A DNS toolkit for Python

[NEW PORT] dns/sqldjbdns: DJB dns server with PostgreSQL backend

        Sqldjbdns is an authoritative DNS server that pulls its
        data directly from a set of SQL tables.  It supports fully
        dynamic A, MX, TXT, and PTR records, and run-time configurable
        static NS and SOA records.  It also supports schedule expiry
        and introduction of records.

        This package also includes dnscache with PostgreSQL backend

PR:             ports/71345
Submitted by:   Radim Kolar <hsn@netmag.cz>

How was discovered by dns/dnssecwalker port maintainer,
dns/walker is the same ports. And name 'walker' was
recognized as a better name. So we move dns/dnssecwalker
to dns/walker port and remove the first one.

Submitted by:   Johan van Selst <johans(at)stack.nl>

dnsjava is an implementation of DNS in Java. It supports all defined record
types (including the DNSSEC types), and unknown types. It can be used for
queries, zone transfers, and dynamic updates. It includes a cache which can be
used by clients, and a minimal implementation of a server. It supports TSIG
authenticated messages, partial DNSSEC verification, and EDNS0.

dnsjava provides functionality above and beyond that of the InetAddress class.
Since it is written in pure Java, dnsjava is fully threadable, and in many
cases is faster than using InetAddress.

dnsjava provides both high and low level access to DNS. The high level
functions perform queries for records of a given name, type, and class, and
return an array of records. There is also a clone of InetAddress, which is even
simpler. A cache is used to reduce the number of DNS queries sent. The low
level functions allow direct manipulation of DNS messages and records, as well
as allowing additional resolver properties to be set.

WWW:    http://www.xbill.org/dnsjava/

Add dns/dnshijacker:

dnshijacker is a libnet/libpcap based packet sniffer & spoofer. a
versatile tool, dnshijacker supports tcpdump style filters that allow
you to specifically target victims. dns answers are forged based on
entries in a "fabrication table" or by simply forging one answer to all
requests. a print only mode is also supported, allowing one to simply
monitor dns traffic. dns hijacker is an excellent tool for network level
ad blocking / removal.

WWW:    http://pedram.redhive.com/projects.php

PR:             ports/72898
Submitted by:   David Thiel <lx@redundancy.redundancy.org>

Add dns/dnsdoctor:

DNSdoctor is intended to help solving misconfigurations or inconsistencies
of DNS zone files.
Features

    * Powerful configuration file
    * Does not depend on policies
    * Fine grained test selection (by test, by categories, by zones)
    * Full IPv6 support (connectivity and AAAA records)
    * Supports several input/output interfaces such as CLI, GUI, CGI
    * Dedicated mode for use inside shell scripts
    * Batch mode available (ideal when dealing with several domains)
    * Multi-threaded application in order to cut down checking time
    * Extensible: new tests, new interfaces, new reports, ...
    * Exception and cache mechanisms to simplify test writting

WWW: http://www.dnsdoctor.org/

PR:             ports/71819
Submitted by:   Janos Mohacsi <janos.mohacsi@niif.hu>

Add rbllookup:

rbllookup is a small perl script which allow you to check given IP/host
name.

In this version you have statically inserted RBL servers, but code is based
on GPL source, so you can easy add more/replace/delete RBL servers by
editing rbllookup.pl file.

Also, author looking for support from programmers for ideas, codefix, new
features, switch to c/c++, gui version?

Author: Marcin Gondek <drixter@e-utp.net>
WWW:    http://rbllookup.sourceforge.net

PR:             ports/69160
Submitted by:   Marcin Gondek <drixter@e-utp.net>

Add p5-Stanford-DNSserver 1.20 - a Perl framework for building a DNS server,
somewhat based on lbnamed.

Add gresolver, a graphical DNS query tool using GTK+.  It allows system
administrators to quickly and easily make the most common DNS queries
without constructing lengthy dig commands.

PR:             73030
Submitted by:   Jean-Yves Lefort <jylefort@brutele.be>

- As planned, retire bind9-sdb-mysql.

Add p5-Net-DNS-ZoneCheck, a perl module to validate a DNS zone composed
of RR records.

Add p5-Net-DNS-ZoneFile-Fast, a perl module to parse BIND8/9 zone files.

Add djbdns-tools-1.05:

This port contains a subset of the DJBDNS package.
It includes several useful Domain Name System (DNS) tools:

- dnsfilter: a parallel IP-address-to-host-name converter
- dnsip, dnsipq, dnsname, dnstxt, and dnsmx: simple
  command-line interfaces to DNS
- dnsq, dnstrace, dnstracesort: DNS debugging tools

Author: Daniel J. Bernstein <djb@cr.yp.to>
WWW:    http://cr.yp.to/djbdns.html

Remove dns/bind93, repocopy should be done first.

Add a port for BIND 9.3.x. This code base is different from BIND
9.2.x in several important ways, including new DNSSEC support
and reportedly better performance.

It is anticipated that when this code base settles down that the
bind9 port could be removed.

- Update of sysutils/fastresolve to support BDB ver. 4.2;
- Move to the dns category.

PR:             ports/70127 & ports/70179
Submitted by:   Michael Edenfield & maintainer
Repocopied by:  marcus.

Add p5-DNS-ZoneParse 0.91, parse and manipulate DNS Zone Files.

fpdns - Fingerprinting DNS servers

        Identify what versions of nameserver software is running.
        WWW: http://www.rfc.se/fpdns/

Add sheerdns, a master DNS server whose zone records are stored on a
One-Record-Per-File bases. Because of this, sheerdns is the simplest of any DNS
to configure, the easiest to update, and the most efficient for networks that
experience a lot of updates (for example master servers for dynamic IP address
ranges).

PR:             ports/67241
Submitted by:   <bkhl@elektrubadur.se>

Finish removing weedns_sc

Pointy hat to:  kris

Remove category pkg/COMMENT files in favour of a COMMENT variable in the
category makefile.

Submitted by:   Matthew Seaman <m.seaman@infracaninophile.co.uk>
PR:             59651

Add crossip, a Cross Platform DNS update client, written in java.  CrossIP uses
the
ThatIP protocol version 1.1 to send DNS update requests.  It manages DNS
records, update history, and allows for per record configuration.  It also
includes a wizard for generation of configuration files.

PR:             ports/62760
Submitted by:   Dan Smith <dan@algenta.com>

Add dnsproxy-1.13, a proxy for DNS queries.

The dnsproxy daemon is a proxy for DNS queries. It forwards these
queries to two previously configured nameservers: one for
authoritative queries and another for recursive queries. The
received answers are sent back to the client unchanged. No local
caching is done.

Approved by:        erwin (mentor) (implicitly)

Add ldapdns 2.05, lDAP-backed DNS server.

ldapdns is a lightweight, high performance DNS server
which utilizes LDAP as its backend.
It is originally based on djbdns and strives to maintain
the same goals of performance, security and simplicity.

WWW:    http://www.nimh.org/code/ldapdns/

PR:             60965
Submitted by:   Paul Dlug <paul@aps.org>

Add skadns 0.23:

Skadns is a kind of an Asynchronous DNS client software:
- Kind of: it's small. Really small. But it just works.
- Asynchronous: all DNS operations are non-blocking.
- DNS client software: it's a DNS client, what you may know
  as a "stub resolver". To perform full DNS resolution,
  you will still need a full resolver like dnscache.

The skadns library offers a simple API to make asynchronous DNS queries.
The skadnsip, skadnsmx and skadnsfilter commands are examples
of how to use that API. They are mainly there for their source code.
The skadnsd daemon, usable as a child process or as a separate service,
handles the grunt work of DNS querying and makes the network
completely invisible to the client.

Author: Laurent G. Bercot <ska-skaware@skarnet.org>
WWW:    http://www.skarnet.org/software/skadns/

Add updatedd 1.8,
dynamic DNS Update Client supporting multiple
services.

Updatedd is a client to update dynamic dns settings.
With the use of the pppd ip-up script it can update
these settings automatically for you.
Updatedd does not run as a daemon.

It is divided into one main program and one plugin for each
supported service. The plugins are dynamic libraries which
are loaded by the main program. So it is possible to remove
support for services you don't need.

Supported Services:
ods.org, dyndns.org, ovh.net, no-ip.org, hn.org

Author: Philipp Benner <philipp_benner (at) gmx (dot) de>
WWW:    http://pb.gotdns.org/

PR:             59907
Submitted by:   geniusj@ods.org

move category net->dns

Approved by:    maintainer

Add dnsflood 1.08
DNS Flood Detector was developed to detect abusive usage levels
on high traffic nameservers and to enable quick response in
halting the use of one's nameserver to facilitate spam.

Add p5-Net-Nslookup 1.14
Provides the capabilities of the standard tool nslookup(1).

PR:             57984
Submitted by:   clsung@dragon2.net

Add ares-1.1.1, an asynchronous DNS resolver library.

[new port] dns/bind9-sdb-mysql: BIND 9 patch to supports zones
storage in a MySQL database

        bind9-sdb-mysql is provide a simple support for MySQL
        database in bind version 9.  Currently it supports only
        zones stored in MySQL.

PR:             ports/56565
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Massive repo-copies request: net->dns (partly devel->dns)

PR:             ports/56020
Submitted by:   Kimura Fuyuki <fuyuki@nigredo.org>
Approved by:    portmgr

Maybe that added an empty line to this file will force it to stay
alphabeticly.

New port: net/zonecheck version 2.0.0b5

        New port: zonecheck - check DNS zone files for consistency
        and report it.  It supports IPv6 zones.

PR:             ports/54319
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu>

Sort this file.

Move net/weedns_sc to dns/weedns_sc

New port: net/rbldnsd - small fast DNS server for DNSBL zones

        A very small and fast DNS server made especially for DNSBL
        zones. Inspired by Dan J Bernstein's rbldns from djbdns,
        but entirely original (and faster and more featureful).

PR:             ports/53274
Submitted by:   Paul Chvostek <paul+fbsd@it.ca>

Add empty subdir makefiles for the new dns and polish categories.  These
are not yet hooked up to ports/Makefile because INDEX builds break when
there are empty category subdirectories.

Number of commits found: 90