FreshPorts -- dns/bind9-devel: BIND DNS suite with updated DNSSEC and DNS64

BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are: DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support See the CHANGES file for more information on new features. WWW: https://www.isc.org/downloads/bind/

pkg-plist

make generate-plist

Expand this list (309 items)

/usr/local/share/licenses/bind9-devel-9.15.0.a0.2019.06.25/catalog.mk

/usr/local/share/licenses/bind9-devel-9.15.0.a0.2019.06.25/LICENSE

/usr/local/share/licenses/bind9-devel-9.15.0.a0.2019.06.25/MPL20

bin/bind9-config

@comment bin/dnstap-read

bin/isc-config.sh

@sample etc/mtree/BIND.chroot.dist.sample

@sample etc/mtree/BIND.chroot.local.dist.sample

etc/namedb/bind.keys

etc/namedb/master/empty.db

etc/namedb/master/localhost-forward.db

etc/namedb/master/localhost-reverse.db

@sample etc/namedb/named.conf.sample

etc/namedb/named.root

etc/namedb/rndc.conf.sample

include/bind9/check.h

include/bind9/getaddresses.h

include/bind9/version.h

include/dns/acl.h

include/dns/adb.h

include/dns/badcache.h

include/dns/bit.h

include/dns/byaddr.h

include/dns/cache.h

include/dns/callbacks.h

include/dns/catz.h

include/dns/cert.h

include/dns/client.h

include/dns/clientinfo.h

include/dns/compress.h

include/dns/db.h

include/dns/dbiterator.h

include/dns/dbtable.h

include/dns/diff.h

include/dns/dispatch.h

include/dns/dlz.h

include/dns/dlz_dlopen.h

include/dns/dns64.h

include/dns/dnsrps.h

include/dns/dnssec.h

include/dns/dnstap.h

include/dns/ds.h

include/dns/dsdigest.h

include/dns/dyndb.h

include/dns/ecdb.h

include/dns/ecs.h

include/dns/edns.h

include/dns/enumclass.h

include/dns/enumtype.h

include/dns/events.h

include/dns/fixedname.h

include/dns/forward.h

include/dns/geoip.h

include/dns/ipkeylist.h

include/dns/iptable.h

include/dns/journal.h

include/dns/keydata.h

include/dns/keyflags.h

include/dns/keytable.h

include/dns/keyvalues.h

include/dns/lib.h

include/dns/librpz.h

include/dns/log.h

include/dns/lookup.h

include/dns/master.h

include/dns/masterdump.h

include/dns/message.h

include/dns/name.h

include/dns/ncache.h

include/dns/nsec.h

include/dns/nsec3.h

include/dns/nta.h

include/dns/opcode.h

include/dns/order.h

include/dns/peer.h

include/dns/portlist.h

include/dns/private.h

include/dns/rbt.h

include/dns/rcode.h

include/dns/rdata.h

include/dns/rdataclass.h

include/dns/rdatalist.h

include/dns/rdataset.h

include/dns/rdatasetiter.h

include/dns/rdataslab.h

include/dns/rdatastruct.h

include/dns/rdatatype.h

include/dns/request.h

include/dns/resolver.h

include/dns/result.h

include/dns/rootns.h

include/dns/rpz.h

include/dns/rriterator.h

include/dns/rrl.h

include/dns/sdb.h

include/dns/sdlz.h

include/dns/secalg.h

include/dns/secproto.h

include/dns/soa.h

include/dns/ssu.h

include/dns/stats.h

include/dns/tcpmsg.h

include/dns/time.h

include/dns/timer.h

include/dns/tkey.h

include/dns/tsec.h

include/dns/tsig.h

include/dns/ttl.h

include/dns/types.h

include/dns/update.h

include/dns/validator.h

include/dns/version.h

include/dns/view.h

include/dns/xfrin.h

include/dns/zone.h

include/dns/zonekey.h

include/dns/zoneverify.h

include/dns/zt.h

include/dst/dst.h

include/dst/gssapi.h

include/dst/result.h

include/irs/context.h

include/irs/dnsconf.h

include/irs/netdb.h

include/irs/platform.h

include/irs/resconf.h

include/irs/types.h

include/irs/version.h

include/isc/aes.h

include/isc/app.h

include/isc/assertions.h

include/isc/atomic.h

include/isc/backtrace.h

include/isc/base32.h

include/isc/base64.h

include/isc/bind9.h

include/isc/buffer.h

include/isc/bufferlist.h

include/isc/commandline.h

include/isc/condition.h

include/isc/counter.h

include/isc/crc64.h

include/isc/deprecated.h

include/isc/dir.h

include/isc/endian.h

include/isc/errno.h

include/isc/error.h

include/isc/event.h

include/isc/eventclass.h

include/isc/file.h

include/isc/formatcheck.h

include/isc/fsaccess.h

include/isc/fuzz.h

include/isc/hash.h

include/isc/heap.h

include/isc/hex.h

include/isc/hmac.h

include/isc/ht.h

include/isc/httpd.h

include/isc/interfaceiter.h

include/isc/iterated_hash.h

include/isc/lang.h

include/isc/lex.h

include/isc/lfsr.h

include/isc/lib.h

include/isc/likely.h

include/isc/list.h

include/isc/log.h

include/isc/magic.h

include/isc/md.h

include/isc/mem.h

include/isc/meminfo.h

include/isc/mutex.h

include/isc/mutexblock.h

include/isc/net.h

include/isc/netaddr.h

include/isc/netdb.h

include/isc/netscope.h

include/isc/nonce.h

include/isc/offset.h

include/isc/once.h

include/isc/os.h

include/isc/parseint.h

include/isc/platform.h

include/isc/pool.h

include/isc/portset.h

include/isc/print.h

include/isc/queue.h

include/isc/quota.h

include/isc/radix.h

include/isc/random.h

include/isc/ratelimiter.h

include/isc/refcount.h

include/isc/regex.h

include/isc/region.h

include/isc/resource.h

include/isc/result.h

include/isc/resultclass.h

include/isc/rwlock.h

include/isc/safe.h

include/isc/serial.h

include/isc/siphash.h

include/isc/sockaddr.h

include/isc/socket.h

include/isc/stat.h

include/isc/stats.h

include/isc/stdatomic.h

include/isc/stdio.h

include/isc/stdtime.h

include/isc/strerr.h

include/isc/string.h

include/isc/symtab.h

include/isc/syslog.h

include/isc/task.h

include/isc/taskpool.h

include/isc/thread.h

include/isc/time.h

include/isc/timer.h

include/isc/tm.h

include/isc/types.h

include/isc/util.h

include/isc/version.h

include/isccc/alist.h

include/isccc/base64.h

include/isccc/cc.h

include/isccc/ccmsg.h

include/isccc/events.h

include/isccc/result.h

include/isccc/sexpr.h

include/isccc/symtab.h

include/isccc/symtype.h

include/isccc/types.h

include/isccc/util.h

include/isccc/version.h

include/isccfg/aclconf.h

include/isccfg/cfg.h

include/isccfg/dnsconf.h

include/isccfg/grammar.h

include/isccfg/log.h

include/isccfg/namedconf.h

include/isccfg/version.h

include/ns/client.h

include/ns/hooks.h

include/ns/interfacemgr.h

include/ns/lib.h

include/ns/listenlist.h

include/ns/log.h

include/ns/notify.h

include/ns/query.h

include/ns/server.h

include/ns/sortlist.h

include/ns/stats.h

include/ns/types.h

include/ns/update.h

include/ns/version.h

include/ns/xfrout.h

include/pk11/constants.h

include/pk11/internal.h

include/pk11/pk11.h

include/pk11/result.h

include/pk11/site.h

include/pkcs11/cryptoki.h

include/pkcs11/eddsa.h

include/pkcs11/pkcs11.h

include/pkcs11/pkcs11f.h

include/pkcs11/pkcs11t.h

lib/libbind9.a

lib/libdns.a

lib/libirs.a

lib/libisc.a

lib/libisccc.a

lib/libisccfg.a

lib/libns.a

lib/named/filter-aaaa.so

man/man1/bind9-config.1.gz

@comment man/man1/dnstap-read.1.gz

man/man1/isc-config.sh.1.gz

man/man5/named.conf.5.gz

man/man5/rndc.conf.5.gz

man/man8/ddns-confgen.8.gz

man/man8/filter-aaaa.8.gz

man/man8/named-checkconf.8.gz

man/man8/named-checkzone.8.gz

man/man8/named-compilezone.8.gz

man/man8/named-nzd2nzf.8.gz

man/man8/named.8.gz

@comment man/man8/pkcs11-destroy.8.gz

@comment man/man8/pkcs11-keygen.8.gz

@comment man/man8/pkcs11-list.8.gz

@comment man/man8/pkcs11-tokens.8.gz

man/man8/rndc-confgen.8.gz

man/man8/rndc.8.gz

man/man8/tsig-keygen.8.gz

sbin/ddns-confgen

sbin/named

sbin/named-checkconf

sbin/named-checkzone

sbin/named-compilezone

sbin/named-nzd2nzf

@comment sbin/pkcs11-destroy

@comment sbin/pkcs11-keygen

@comment sbin/pkcs11-list

@comment sbin/pkcs11-tokens

sbin/rndc

sbin/rndc-confgen

sbin/tsig-keygen

@dir(bind,bind,) etc/namedb/dynamic

@dir(bind,bind,) etc/namedb/slave

@dir(bind,bind,) etc/namedb/working

Collapse this list.

To install the port: cd /usr/ports/dns/bind9-devel/ && make install clean
To add the package: pkg install bind9-devel

TIMESTAMP = 1561460029 SHA256 (isc-projects-bind9-32fc6c85f403ec26aa71ba403607f0032b373859_GL0.tar.gz) = a77d6b168606b0a01c0e6192f2699a35e425fe9983061680f1af2fc21b71b65a SIZE (isc-projects-bind9-32fc6c85f403ec26aa71ba403607f0032b373859_GL0.tar.gz) = 6325417

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

===> The following configuration options are available for bind9-devel-9.15.0.a0.2019.06.25: DNSTAP=off: Provides fast passive logging of DNS messages DOCS=on: Build and/or install documentation FIXED_RRSET=off: Enable fixed rrset ordering IDN=on: International Domain Names support JSON=on: JSON file/format/parser support LARGE_FILE=off: 64-bit file support LMDB=on: Use LMDB for zone management OVERRIDECACHE=off: Use the override-cache patch PORTREVISION=off: Show PORTREVISION in the version string QUERYTRACE=off: Enable the very verbose query tracelogging SIGCHASE=on: dig/host/nslookup will do DNSSEC validation START_LATE=off: Start BIND late in the boot process (see help) TCP_FASTOPEN=on: RFC 7413 support TUNING_LARGE=off: Tune named for large systems (**READ HELP**) ====> Dynamically Loadable Zones DLZ_POSTGRESQL=off: DLZ Postgres driver DLZ_MYSQL=off: DLZ MySQL driver (no threading) DLZ_BDB=off: DLZ BDB driver DLZ_LDAP=off: DLZ LDAP driver DLZ_FILESYSTEM=on: DLZ filesystem driver DLZ_STUB=off: DLZ stub driver ====> GSSAPI Security API support: you have to select exactly one of them GSSAPI_BASE=off: Using Heimdal in base GSSAPI_HEIMDAL=off: Using security/heimdal GSSAPI_MIT=off: Using security/krb5 GSSAPI_NONE=on: Disable ====> Choose which crypto engine to use: you can only select none or one of them NATIVE_PKCS11=off: Use PKCS#11 native API (**READ HELP**) ===> Use 'make config' to modify these settings

Reason: This is only for FreeBSD 10.0+. BIND auto chroot has been added back to the named rc script. As enabling it by default would most certainly break people's setup, it is not. To enable it, and chroot it in /var/named, add the following line to your rc.conf file: named_chrootdir="/var/named" On first launch, the rc script will move the /usr/local/etc/namedb directory into the chroot, and create a symlink to it. Note that, if you're running from within a jail, you need to have a /var/named/dev devfs created beforehand, with the null and random devices.

Reason: All bind9 ports have been updated to support FreeBSD 10.x after BIND was removed from the base system. It is now self-contained in ${PREFIX}/etc/namedb, and chroot and symlinking options are no longer supported out of the box. For users of FreeBSD 9.x and earlier, the LINKS option is no longer enabled by default, but still supported. No other changes should affect those users, and updating without changing already set options will keep the system in the same state.

Fix named when using plugins and chroot. BIND9 introduced plugins and migrated the filter-aaaa feature to a plugin. As it loads its plugins late in the startup process (read after chroot), the plugins need to be available in the chroot. Also, refactor the code now that a second directory need to be handled. PR: 238011 Reported by: ryan@timewasted.me MFH: 2019Q2

Remove conflicts from bind-tools and the server ports. All servers now depend on the same bind-tools, from the latest BIND9 release. Chase dependencies to make sure they now depend on the correct port. Differential Revision: https://reviews.freebsd.org/D19922

Update to latest commit. While there, rename MINCACHE option, most of its features have been integrated in BIND9, the only remaining bit of the patch is the override cache feature to force all cached TTL to a specific one.

Update to 9.11.5-P1, 9.12.3-P1, 9.13.5. While there: - Don't disable symbol table generation when building WITH_DEBUG. - Try and make sure nullfs can really be used in a more robustt and centralized way. - Make sure all changes are sync'ed among all BIND9 ports.

Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances. This includes ports - with USE_GCC=yes or USE_GCC=any, - with USES=fortran, - using Mk/bsd.octave.mk which in turn features USES=fortran, and - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang, c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib plus, as a double check, everything INDEX-11 showed depending on lang/gcc7. PR: 231590

Update devel/json-c to 0.13.1 - Add my LOCAL to MASTER_SITES - Bump PORTREVISION of dependent ports for shlib change Changes: https://github.com/json-c/json-c/blob/master/ChangeLog PR: 231007 Exp-run by: antoine

Permit using allow-new-zones, LMDB, and a chrooted environment. Fixes this obscure and not at all helpful message: mdb_env_open of '_default.nzd' failed: No such file or directory PR: 229125 Reported by: Tomas Ciernik MFH: 2018Q3

Add BIND9 9.13.0. The ISC changed their release model, they are now doing odd-unstable/even-stable release numbering. This is a development version, consider it alpha/beta quality. The next stable release will be 9.14.0. Changes: https://kb.isc.org/article/AA-01612 Sponsored by: Absolight