non port: dns/nsd/files/nsd.in |
Number of commits found: 20 |
Tuesday, 6 Apr 2021
|
14:31 Mathieu Arnold (mat)
all: Remove all other $FreeBSD keywords.
135fdee |
Wednesday, 18 Mar 2020
|
18:54 pi
dns/nsd: upgrade 4.2.4 -> 4.3.0
This port incorporates also the proposed bug fix at bug #242367
Major changes:
This release adds cpu affinity. By pinning a server process to a
specific cpu, having a separate network card also for that cpu, and
an interface address also for that server process, the throughput is
increased. This increases performance of the nameserver.
Sparse TSIG signing support is removed, to comply with the latest tsig
standard update draft.
There is a feature to drop update queries, with opcode UPDATE,
with nsd.conf option drop-updates.
4.3.0
=========
FEATURES:
- Fix to use getrandom() for randomness, if available.
- Fix #56: Drop sparse TSIG signing support in NSD.
Sign every axfr packet with TSIG, according to the latest
draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1.
- Merge pull request #59 from buddyns: add FreeBSD support
for conf key ip-transparent.
- Add feature to pin server processes to specific cpus.
- Add feature to pin IP addresses to selected server processes.
- Set process title to identify individual processes.
- Merge PR#22: minimise-any: prefer polular and not large RRset,
from Daisuke Higashi.
- Add support for SO_BINDTODEVICE on Linux.
- Add support for SO_SETFIB on FreeBSD.
- Add feature to drop queries with opcode UPDATE.
BUG FIXES:
- Fix fname null check of fname in namedb_read_zonefile.
- Fix implicit cast of size in udb_radnode_array_grow.
- Fix ignore of return value of ssl_printf in remote.c.
- Fix unused check of fd in parent_handle_reload_command.
- Attempt to fix signedness of nscount lookup in ixfr query_process.
- Fix identical branches for ssl_print of errors in remote.c.
- Fix type cast bounds, signedness of opt_rdlen in edns_parse_record.
- Fix to separate header and data lines in parse_zone_list_file.
- Fix to define max number of EDNS records we are willing to
spend time on.
- Fix size of string len and capacity type cast in udbradtree.
- Fix to protect rrcount in tsig_find_rr from overflow.
- Annotate radix_find_prefix_node not reachable trail code.
- Fix to protect rrcount in packet_find_notify_serial from overflow.
- Fix to close socket on error in create_tcp_accept_sock.
- Fix to log on failure to chmod for socket for remote control.
- Fix to remove unneeded if in open of socket for remote control.
- Fix to restore input parameter on call failure in create_dirs.
- Please checker by terminating and initialising string read
by remote control.
- Fix to define upper bounds on rr counts read from untrusted packet
data.
- Separate acl_addr_match_range functions for ip4 and ip6, to
please checkers.
- Avoid unused variable warning in new match_range_v4 function.
- Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters.
- use-systemd is ignored in nsd.conf, when NSD is compiled with
libsystemd it always signals readiness, if possible.
- Note that use-systemd is not necessary and ignored in man page.
- Fix unreachable code in ssl set options code.
- Fix bad shift in assertion code analyzer complaint.
- Fix responses for IXFR so that the authority section is not echoed
in the response.
- Merge PR#60: Minor portability fixes from michaelforney, with
avoid pointer arithmetic on void* and avoid unnecessary VLA.
- Fix that the retry wait does not exceed one day for zone transfers.
CHANGES:
- Set FD_CLOEXEC on opened sockets.
PR: 244886, 242367[2]
Submitted by: Jaap Akkerhuis <jaap@nlnetlabs.nl> (maintainer)
Reported by: Leo Vandewoestijne <freebsd@dns.company> [2]
Relnotes: https://github.com/NLnetLabs/nsd/blob/NSD_4_3_0_REL/doc/ChangeLog
|
Wednesday, 17 Aug 2016
|
13:22 lev
Add profiles to nsd init script.
PR: 211883
Submitted by: lev
Approved by: jaap@NLnetLabs.nl
|
Monday, 18 May 2015
|
17:44 amdmi3
- Add option to install Munun plugin
PR: 199798
Submitted by: tgyurci@gmail.com
Approved by: maintainer timeout
|
Sunday, 8 Feb 2015
|
02:42 erwin
update to 4.1.1
Major Features:
- RFC 7344: CDS and CDNSKEY (read record types).
- per zone statistics with --enable-zone-stats
- Disabled use of SSLv3 in nsd-control.
- Synthesize CNAMEs with same TTL as DNAME.
- nsd-checkconf -f prints out full name of pidfile (with dir). [1]
PR: 197291,
196449 [1]
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>,
Adam Zaleski <adam@zaleski.org> [1]
|
Monday, 24 Mar 2014
|
12:55 madpilot
- Update to 4.0.3
PR: ports/187596
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Wednesday, 12 Feb 2014
|
10:46 erwin
There was a wrong rc script in the port preventing the daemon to run.
Added STAGING support
Added LICENSE (NSD3CLAUSE) statement
Other small changes to make portlint more happy
PR: 186631
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Friday, 7 Feb 2014
|
14:44 decke
- Update to 4.0.1
- Cleanup rc script
FEATURES:
- recognizes ip-address and interface as synonyms for convenience.
- Support for EUI48 and EUI64 RR types enabled by default (RFC 7043).
- Support for CAA RRtype (RFC 6844).
- NSID can be set with "ascii_somestring" in ascii.
BUG FIXES:
- Fix xfrd when zone transfer TCP contains zero length packets.
- Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3,
because AXFRs overwrote nsec3 administration in the child zone.
- Fix that bad IXFR updates do not result in double SOA records,
and that an AXFR is started (attempted) when the zone state seems
to be inconsistent with the master's zone state.
- Log ip address for sendto and sendmmsg failures.
- Fix segfaults after read of zones with rr type WKS from zonefile.
- Seed PRNG for openssl at start of daemon, fixes SSL connection issue.
- Bugfix #534: IXFR query loop over UDP for zones that are unchanged.
- (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset.
- (same as in 3.2.16): Bugfix #542: Match RRSIG TTL with SOA TTL in
negative response.
- Check if configure in srcdir collides with outofdir build.
- Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx).
- Fix printout of high-chars in TXT on NetBSD.
PR: ports/186308
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Tuesday, 12 Nov 2013
|
13:24 erwin
Please welcome NSD 4.0.0
For all new features, see
http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_0_0_REL/doc/NSD-4-features
This version replaces the nsdc control program with nsd-control.
This requires some manual setup with nsd-control-setup and editing
of the config files. nsd-control is incompatible with nsdc so when
that is used in scripts, these should be adapted.
NSD 3 is still supported as dns/nsd3.
PR: 183888
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
|
Monday, 25 Feb 2013
|
21:59 beech
- Add multi-instance support
PR: ports/176156
Submitted by: Darren Pilgrim <darren.pilgrim@gmail.com>
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Saturday, 14 Jan 2012
|
08:57 dougb
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
|
Monday, 28 Nov 2011
|
11:36 miwi
- Update to 3.2.9
PR: 162782
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Feature safe: yes
|
Thursday, 25 Nov 2010
|
16:04 bapt
- fix status command in rc file
- while here remove MD5 entry
bump port revision
PR: ports/152565
Submitted by: eli <elij.mx _at_ gmail.com>
Approved by: Jaap Akkerhuis <jaap _at_ nlnetlabs.nl>
|
Wednesday, 24 Nov 2010
|
15:44 bapt
improvements on rc script:
- support reload command
- use nsdc cli has command and let it perform the actual start,stop,... of the
daemon
- at start check if the database exists if not built it (this prevent the
daemon to fail at starting)
- remove the now userless sleep in stop command
bump portrevision
PR: ports/152331
Submitted by: Philippe Pepiot <phil _at_ philpep.org>
Approved by: Jaap Akkerhuis <jaap _at_ NLnetLabs.nl> (maintainer)
|
Saturday, 27 Mar 2010
|
00:15 dougb
Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#
|
Thursday, 11 Feb 2010
|
19:37 pgollucci
- Fix permission issues
PR: ports/143550
Submitted by: Marko Njezic <mrmax063@maxempire.com>
Approved by: Olafur Osvaldsson <osvaldsson@icelandic.net> (maintainer)
|
Friday, 16 Jan 2009
|
00:30 miwi
- Add missing openssl dependency [1]
- Fix race when stopping nsd [2]
PR: ports/130263 [1]
ports/130294 [2]
Submitted by: Artis Caune <Artis.Caune@gmail.com> [1] [2]
Approved by: maintainer
|
Friday, 21 Nov 2008
|
20:34 miwi
- Update to 3.2.0
PR: 128818
Submitted by: Olafur Osvaldsson <osvaldsson@icelandic.net> (maintainer)
|
Tuesday, 29 Jul 2008
|
17:23 pgollucci
Cosmetic changes to the rc.d file
Submitted by: dougb
Approved by: araujo (mentor), maintainer implicit
|
Monday, 28 Jul 2008
|
22:25 pgollucci
- Update to 3.1.1
- Respect NOPORTDOCS
- Add option NSDMAX_INT
- rename rc.d script nsd.sh -> nsd
PR: ports/125898
Approved by: Olafur Osvaldsson <osvaldsson@icelandic.net> (maintainer),
araujo (mentor)
|
Number of commits found: 20 |