| Commit History - (may be incomplete: see CVSWeb link above for full details) |
| Date | By | Description |
09 Aug 2008 08:23:35
  9.5.0.2
|
dougb  |
All -P2 versions now have PGP signatures with ISC's standard
signing key.
PR: ports/126389 (for bind9)
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> |
02 Aug 2008 08:01:21
9.5.0.2
|
dougb |
Update to patchlevel 2 for all versions:
- performance improvement over the P1 releases, namely
+ significantly remedying the port allocation issues
+ allowing TCP queries and zone transfers while issuing as many
outstanding UDP queries as possible
+ additional security of port randomization at the same level as P1
- also includes fixes for several bugs in the 9.5.0 base code |
16 Jul 2008 21:39:24
9.5.0.1
|
dougb |
Add an OPTION to turn on the ability of dns/host/nslookup to do
DNSSEC validation.
This is off by default, so no PORTREVISION bump.
Submitted by: Andrei V. Lavreniyuk <andy.lavr@reactor-xg.kiev.ua> |
11 Jul 2008 20:02:37
9.5.0.1
|
dougb |
Strengthen the wording regarding the THREADS OPTION for <FreeBSD-7 |
09 Jul 2008 20:02:01
9.5.0.1
|
dougb |
Upgrade to the -P1 versions of each port, which add stronger randomization
of the UDP query-source ports. The server will still use the same query
port for the life of the process, so users for whom the issue of cache
poisoning is highly significant may wish to periodically restart their
server using /etc/rc.d/named restart, or other suitable method.
In order to take advantage of this randomization users MUST have an
appropriate firewall configuration to allow UDP queries to be sent and
answers to be received on random ports; and users MUST NOT specify a
port number using the query-source[-v6] option.
The avoid-v[46]-udp-ports options exist for users who wish to eliminate
certain port numbers from being chosen by named for this purpose. See
the ARM Chatper 6 for more information.
(Only the first 15 lines of the commit message are shown above  ) |
04 Jul 2008 16:41:15
9.5.0
|
dougb |
Make CONFLICTS a little cleaner
Add README.idnkit to PORTDOCS |
03 Jul 2008 08:26:14
9.5.0
|
dougb |
Update for 9.5.0
Some of the important features of BIND 9 are:
DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
Experimental IPv6 Resolver Library
DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
Improved standards conformance
Views: One server process can provide multiple "views" of the DNS namespace,
e.g. an "inside" view to certain clients, and an "outside" view to others.
Multiprocessor Support, including working threads in this version
BIND 9.5 has a number of new features over previous versions, including:
GSS-TSIG support (RFC 3645), DHCID support
Experimental http server and statistics support for named via xml
More detailed statistics counters, compatible with the ones supported in BIND 8
Faster ACL processing
Efficient LRU cache cleaning mechanism.
NSID support (RFC 5001). |
03 Jul 2008 07:12:05
9.4.2_1
|
dougb |
Forced commit to note that these files were repo-copied from dns/bind94 |
