notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
I started running short on disk space for the non-production FreshPorts hosts. This time, I have decided to ask for donations. See my recent blog post which points to my Patreon account.
Port details on branch 2025Q2
bind920 BIND DNS suite with updated DNSSEC and DNS64
9.20.10 dns on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 9.20.13Version of this port present on the latest quarterly branch.
Maintainer: mat@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-04-16 19:54:37
Last Update: 2025-06-20 05:31:40
Commit Hash: 0702156
Also Listed In: net
License: MPL20
WWW:
https://www.isc.org/bind/
Description:
BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are: DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support See the CHANGES file for more information on new features.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
pkg-plist: as obtained via: make generate-plist
Expand this list (302 items)
Collapse this list.
  1. /usr/local/share/licenses/bind920-9.20.10/catalog.mk
  2. /usr/local/share/licenses/bind920-9.20.10/LICENSE
  3. /usr/local/share/licenses/bind920-9.20.10/MPL20
  4. bin/named-checkconf
  5. bin/named-checkzone
  6. bin/named-compilezone
  7. bin/named-journalprint
  8. bin/named-nzd2nzf
  9. @sample etc/mtree/BIND.chroot.dist.sample
  10. @sample etc/mtree/BIND.chroot.local.dist.sample
  11. @sample etc/namedb/named.conf.sample
  12. etc/namedb/named.root
  13. etc/namedb/primary/empty.db
  14. etc/namedb/primary/localhost-forward.db
  15. etc/namedb/primary/localhost-reverse.db
  16. include/dns/acl.h
  17. include/dns/adb.h
  18. include/dns/badcache.h
  19. include/dns/bit.h
  20. include/dns/byaddr.h
  21. include/dns/cache.h
  22. include/dns/callbacks.h
  23. include/dns/catz.h
  24. include/dns/cert.h
  25. include/dns/client.h
  26. include/dns/clientinfo.h
  27. include/dns/compress.h
  28. include/dns/db.h
  29. include/dns/dbiterator.h
  30. include/dns/diff.h
  31. include/dns/dispatch.h
  32. include/dns/dlz.h
  33. include/dns/dlz_dlopen.h
  34. include/dns/dns64.h
  35. include/dns/dnsrps.h
  36. include/dns/dnssec.h
  37. include/dns/dnstap.h
  38. include/dns/ds.h
  39. include/dns/dsdigest.h
  40. include/dns/dyndb.h
  41. include/dns/ecs.h
  42. include/dns/ede.h
  43. include/dns/edns.h
  44. include/dns/enumclass.h
  45. include/dns/enumtype.h
  46. include/dns/fixedname.h
  47. include/dns/forward.h
  48. include/dns/geoip.h
  49. include/dns/ipkeylist.h
  50. include/dns/iptable.h
  51. include/dns/journal.h
  52. include/dns/kasp.h
  53. include/dns/keydata.h
  54. include/dns/keyflags.h
  55. include/dns/keymgr.h
  56. include/dns/keystore.h
  57. include/dns/keytable.h
  58. include/dns/keyvalues.h
  59. include/dns/librpz.h
  60. include/dns/log.h
  61. include/dns/master.h
  62. include/dns/masterdump.h
  63. include/dns/message.h
  64. include/dns/name.h
  65. include/dns/nametree.h
  66. include/dns/ncache.h
  67. include/dns/nsec.h
  68. include/dns/nsec3.h
  69. include/dns/nta.h
  70. include/dns/opcode.h
  71. include/dns/order.h
  72. include/dns/peer.h
  73. include/dns/private.h
  74. include/dns/qp.h
  75. include/dns/rbt.h
  76. include/dns/rcode.h
  77. include/dns/rdata.h
  78. include/dns/rdataclass.h
  79. include/dns/rdatalist.h
  80. include/dns/rdataset.h
  81. include/dns/rdatasetiter.h
  82. include/dns/rdataslab.h
  83. include/dns/rdatastruct.h
  84. include/dns/rdatatype.h
  85. include/dns/remote.h
  86. include/dns/request.h
  87. include/dns/resolver.h
  88. include/dns/result.h
  89. include/dns/rootns.h
  90. include/dns/rpz.h
  91. include/dns/rriterator.h
  92. include/dns/rrl.h
  93. include/dns/sdlz.h
  94. include/dns/secalg.h
  95. include/dns/secproto.h
  96. include/dns/skr.h
  97. include/dns/soa.h
  98. include/dns/ssu.h
  99. include/dns/stats.h
  100. include/dns/time.h
  101. include/dns/tkey.h
  102. include/dns/trace.h
  103. include/dns/transport.h
  104. include/dns/tsig.h
  105. include/dns/ttl.h
  106. include/dns/types.h
  107. include/dns/update.h
  108. include/dns/validator.h
  109. include/dns/view.h
  110. include/dns/xfrin.h
  111. include/dns/zone.h
  112. include/dns/zonekey.h
  113. include/dns/zoneverify.h
  114. include/dns/zt.h
  115. include/dst/dst.h
  116. include/dst/gssapi.h
  117. include/irs/resconf.h
  118. include/isc/ascii.h
  119. include/isc/assertions.h
  120. include/isc/async.h
  121. include/isc/atomic.h
  122. include/isc/attributes.h
  123. include/isc/backtrace.h
  124. include/isc/barrier.h
  125. include/isc/base32.h
  126. include/isc/base64.h
  127. include/isc/buffer.h
  128. include/isc/commandline.h
  129. include/isc/condition.h
  130. include/isc/counter.h
  131. include/isc/crc64.h
  132. include/isc/dir.h
  133. include/isc/dnsstream.h
  134. include/isc/endian.h
  135. include/isc/entropy.h
  136. include/isc/errno.h
  137. include/isc/error.h
  138. include/isc/file.h
  139. include/isc/fips.h
  140. include/isc/formatcheck.h
  141. include/isc/fuzz.h
  142. include/isc/getaddresses.h
  143. include/isc/hash.h
  144. include/isc/hashmap.h
  145. include/isc/heap.h
  146. include/isc/helper.h
  147. include/isc/hex.h
  148. include/isc/histo.h
  149. include/isc/hmac.h
  150. include/isc/ht.h
  151. include/isc/httpd.h
  152. include/isc/interfaceiter.h
  153. include/isc/iterated_hash.h
  154. include/isc/job.h
  155. include/isc/lang.h
  156. include/isc/lex.h
  157. include/isc/list.h
  158. include/isc/log.h
  159. include/isc/loop.h
  160. include/isc/magic.h
  161. include/isc/managers.h
  162. include/isc/md.h
  163. include/isc/mem.h
  164. include/isc/meminfo.h
  165. include/isc/mutex.h
  166. include/isc/mutexblock.h
  167. include/isc/net.h
  168. include/isc/netaddr.h
  169. include/isc/netmgr.h
  170. include/isc/netscope.h
  171. include/isc/nonce.h
  172. include/isc/once.h
  173. include/isc/os.h
  174. include/isc/overflow.h
  175. include/isc/parseint.h
  176. include/isc/pause.h
  177. include/isc/portset.h
  178. include/isc/proxy2.h
  179. include/isc/queue.h
  180. include/isc/quota.h
  181. include/isc/radix.h
  182. include/isc/random.h
  183. include/isc/ratelimiter.h
  184. include/isc/refcount.h
  185. include/isc/regex.h
  186. include/isc/region.h
  187. include/isc/result.h
  188. include/isc/rwlock.h
  189. include/isc/safe.h
  190. include/isc/serial.h
  191. include/isc/signal.h
  192. include/isc/siphash.h
  193. include/isc/sockaddr.h
  194. include/isc/spinlock.h
  195. include/isc/stats.h
  196. include/isc/stdio.h
  197. include/isc/stdtime.h
  198. include/isc/strerr.h
  199. include/isc/string.h
  200. include/isc/symtab.h
  201. include/isc/syslog.h
  202. include/isc/thread.h
  203. include/isc/tid.h
  204. include/isc/time.h
  205. include/isc/timer.h
  206. include/isc/tls.h
  207. include/isc/tm.h
  208. include/isc/types.h
  209. include/isc/urcu.h
  210. include/isc/url.h
  211. include/isc/utf8.h
  212. include/isc/util.h
  213. include/isc/uv.h
  214. include/isc/work.h
  215. include/isc/xml.h
  216. include/isccc/alist.h
  217. include/isccc/base64.h
  218. include/isccc/cc.h
  219. include/isccc/ccmsg.h
  220. include/isccc/sexpr.h
  221. include/isccc/symtab.h
  222. include/isccc/symtype.h
  223. include/isccc/types.h
  224. include/isccc/util.h
  225. include/isccfg/aclconf.h
  226. include/isccfg/cfg.h
  227. include/isccfg/check.h
  228. include/isccfg/duration.h
  229. include/isccfg/grammar.h
  230. include/isccfg/kaspconf.h
  231. include/isccfg/log.h
  232. include/isccfg/namedconf.h
  233. include/ns/client.h
  234. include/ns/hooks.h
  235. include/ns/interfacemgr.h
  236. include/ns/listenlist.h
  237. include/ns/log.h
  238. include/ns/notify.h
  239. include/ns/query.h
  240. include/ns/server.h
  241. include/ns/sortlist.h
  242. include/ns/stats.h
  243. include/ns/types.h
  244. include/ns/update.h
  245. include/ns/xfrout.h
  246. lib/bind/filter-a.so
  247. lib/bind/filter-aaaa.so
  248. lib/libdns-9.20.10.so
  249. lib/libdns.so
  250. lib/libisc-9.20.10.so
  251. lib/libisc.so
  252. lib/libisccc-9.20.10.so
  253. lib/libisccc.so
  254. lib/libisccfg-9.20.10.so
  255. lib/libisccfg.so
  256. lib/libns-9.20.10.so
  257. lib/libns.so
  258. @comment share/man/man1/arpaname.1.gz
  259. @comment share/man/man1/delv.1.gz
  260. @comment share/man/man1/dig.1.gz
  261. @comment share/man/man1/dnssec-cds.1.gz
  262. @comment share/man/man1/dnssec-dsfromkey.1.gz
  263. @comment share/man/man1/dnssec-importkey.1.gz
  264. @comment share/man/man1/dnssec-keyfromlabel.1.gz
  265. @comment share/man/man1/dnssec-keygen.1.gz
  266. @comment share/man/man1/dnssec-ksr.1.gz
  267. @comment share/man/man1/dnssec-revoke.1.gz
  268. @comment share/man/man1/dnssec-settime.1.gz
  269. @comment share/man/man1/dnssec-signzone.1.gz
  270. @comment share/man/man1/dnssec-verify.1.gz
  271. @comment share/man/man1/dnstap-read.1.gz
  272. @comment share/man/man1/host.1.gz
  273. @comment share/man/man1/mdig.1.gz
  274. share/man/man1/named-checkconf.1.gz
  275. share/man/man1/named-checkzone.1.gz
  276. share/man/man1/named-compilezone.1.gz
  277. share/man/man1/named-journalprint.1.gz
  278. share/man/man1/named-nzd2nzf.1.gz
  279. @comment share/man/man1/named-rrchecker.1.gz
  280. @comment share/man/man1/nsec3hash.1.gz
  281. @comment share/man/man1/nslookup.1.gz
  282. @comment share/man/man1/nsupdate.1.gz
  283. share/man/man5/named.conf.5.gz
  284. share/man/man5/rndc.conf.5.gz
  285. share/man/man8/ddns-confgen.8.gz
  286. share/man/man8/filter-a.8.gz
  287. share/man/man8/filter-aaaa.8.gz
  288. share/man/man8/named.8.gz
  289. share/man/man8/rndc-confgen.8.gz
  290. share/man/man8/rndc.8.gz
  291. share/man/man8/tsig-keygen.8.gz
  292. sbin/ddns-confgen
  293. sbin/named
  294. sbin/rndc
  295. sbin/rndc-confgen
  296. sbin/tsig-keygen
  297. @dir(bind,bind,) etc/namedb/dynamic
  298. @dir(bind,bind,) etc/namedb/secondary
  299. @dir(bind,bind,) etc/namedb/working
  300. @owner
  301. @group
  302. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • bind920>0:dns/bind920
Conflicts:
CONFLICTS:
  • bind918
  • bind9-devel
To install the port:
cd /usr/ports/dns/bind920/ && make install clean
To add the package, run one of these commands:
  • pkg install dns/bind920
  • pkg install bind920
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: bind920
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1750354633 SHA256 (bind-9.20.10.tar.xz) = 0fb3ba2c337bb488ca68f5df296c435cd255058fb63d0822e91db0235c905716 SIZE (bind-9.20.10.tar.xz) = 5677276

Packages (timestamps in pop-ups are UTC):
bind920
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest9.20.129.20.13-9.20.129.20.13---
FreeBSD:13:quarterly9.20.129.20.13-9.20.129.20.13---
FreeBSD:14:latest9.20.129.20.13-9.20.129.20.13---
FreeBSD:14:quarterly9.20.129.20.13-9.20.129.20.13---
FreeBSD:15:latest9.20.119.20.13n/a9.20.11n/a---
FreeBSD:15:quarterly--n/a-n/a---
FreeBSD:16:latest-9.20.12n/a-n/a---
Slave ports:
  1. dns/bind-tools
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. sphinx-build : textproc/py-sphinx
  2. py311-sphinx_rtd_theme>0 : textproc/py-sphinx_rtd_theme@py311
  3. pkgconf>=1.3.0_1 : devel/pkgconf
  4. gmake>=4.4.1 : devel/gmake
  5. autoconf>=2.72 : devel/autoconf
  6. automake>=1.17 : devel/automake
  7. libtoolize : devel/libtool
Runtime dependencies:
  1. bind-tools>0 : dns/bind-tools
Library dependencies:
  1. libuv.so : devel/libuv
  2. libnghttp2.so : www/libnghttp2
  3. liburcu.so : sysutils/liburcu
  4. libxml2.so : textproc/libxml2
  5. libfstrm.so : devel/fstrm
  6. libprotobuf-c.so : devel/protobuf-c
  7. libidn2.so : dns/libidn2
  8. libjson-c.so : devel/json-c
  9. liblmdb.so : databases/lmdb
  10. libxml2.so : textproc/libxml2
  11. libedit.so.0 : devel/libedit
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for bind920-9.20.10: DNSTAP=on: Provides fast passive logging of DNS messages DOCS=on: Build and/or install documentation FIXED_RRSET=off: Enable fixed rrset ordering GEOIP=off: GeoIP IP location support IDN=on: International Domain Names support JSON=on: JSON file/format/parser support LARGE_FILE=off: 64-bit file support LMDB=on: Use LMDB for zone management OVERRIDECACHE=off: Use the override-cache patch QUERYTRACE=off: Enable the very verbose query tracelogging START_LATE=off: Start BIND late in the boot process (see help) TCP_FASTOPEN=on: RFC 7413 support ====> GSSAPI Security API support: you have to select exactly one of them GSSAPI_BASE=off: Using Heimdal in base (nsupdate is broken) GSSAPI_HEIMDAL=off: Using security/heimdal (nsupdate is broken) GSSAPI_MIT=off: Using security/krb5 GSSAPI_NONE=on: Disable ===> Use 'make config' to modify these settings
Options name:
dns_bind920
USES:
autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl tar:xz gmake python:env iconv
pkg-message:
For install:
BIND requires configuration of rndc, including a "secret" key. The easiest, and most secure way to configure rndc is to run 'rndc-confgen -a' to generate the proper conf file, with a new random key, and appropriate file permissions. The /usr/local/etc/rc.d/named script will do that for you. If using syslog to log the BIND9 activity, and using a chroot'ed installation, you will need to tell syslog to install a log socket in the BIND9 chroot by running: # sysrc altlog_proglist+=named And then restarting syslogd with: service syslogd restart
Master Sites:
Expand this list (12 items)
Collapse this list.
  1. ftp://ftp.ciril.fr/pub/isc/bind9/9.20.10/
  2. ftp://ftp.freenet.de/pub/ftp.isc.org/isc/bind9/9.20.10/
  3. ftp://ftp.funet.fi/pub/mirrors/ftp.isc.org/isc/bind9/9.20.10/
  4. ftp://ftp.iij.ad.jp/pub/network/isc/bind9/9.20.10/
  5. ftp://ftp.isc.org/isc/bind9/9.20.10/
  6. ftp://ftp.mirrorservice.org/sites/ftp.isc.org/isc/bind9/9.20.10/
  7. ftp://ftp.nominum.com/pub/isc/bind9/9.20.10/
  8. ftp://ftp.ntua.gr/pub/net/isc/isc/bind9/9.20.10/
  9. ftp://ftp.ripe.net/mirrors/sites/ftp.isc.org/isc/bind9/9.20.10/
  10. ftp://ftp.task.gda.pl/mirror/ftp.isc.org/isc/bind9/9.20.10/
  11. ftp://ftp.u-aizu.ac.jp/pub/net/isc/bind9/9.20.10/
  12. https://ftp.isc.org/isc/bind9/9.20.10/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
9.20.10
20 Jun 2025 05:31:40
commit hash: 0702156bb2d560f1bd2515f02f08062dafe6e020commit hash: 0702156bb2d560f1bd2515f02f08062dafe6e020commit hash: 0702156bb2d560f1bd2515f02f08062dafe6e020commit hash: 0702156bb2d560f1bd2515f02f08062dafe6e020 files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
dns/bind920: update to 9.20.10

(cherry picked from commit 0710355e0d10d2656b872d46746c7e3fd9ba73a7)
9.20.9
21 May 2025 14:46:29
commit hash: 0701926a613bff118ed83f239d5dfeb1620985b2commit hash: 0701926a613bff118ed83f239d5dfeb1620985b2commit hash: 0701926a613bff118ed83f239d5dfeb1620985b2commit hash: 0701926a613bff118ed83f239d5dfeb1620985b2 files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
dns/bind920: update to 9.20.9

Changes:	https://downloads.isc.org/isc/bind9/9.20.9/doc/arm/html/notes.html#notes-for-bind-9-20-9
Security:	CVE-2025-40775
(cherry picked from commit 07067607aaad3fbb0090255cffce5cafb2f5c13d)
9.20.8
16 Apr 2025 19:51:55
commit hash: 0701624cb84519b2d6b2f098b30500929b63f51dcommit hash: 0701624cb84519b2d6b2f098b30500929b63f51dcommit hash: 0701624cb84519b2d6b2f098b30500929b63f51dcommit hash: 0701624cb84519b2d6b2f098b30500929b63f51d files touched by this commit
Mathieu Arnold (mat) search for other commits by this committer
dns/bind920: upgrade to 9.20.8

Changes:	https://downloads.isc.org/isc/bind9/9.20.8/doc/arm/html/notes.html#notes-for-bind-9-20-8
(cherry picked from commit 0702694600fb9f2f5283dff88afcadd46d7aab2f)

Number of commits found: 3