The PowerDNS Recursor is a high-end, high-performance resolving
name server which powers the DNS resolution of at least a hundred
million subscribers. Utilizing multiple processors and supporting
the same powerful scripting ability of the Authoritative Server,
the Recursor delivers top performance while retaining the flexibility
modern DNS deployments require:
* IPv4, UDP/TCP
* IPv6, UDP/TCP, 100% compliant
* Remotely pollable statistics for real time graphing
* Full support for all relevant standards
* Advanced anti-spoofing measures
* Reconfiguration without downtime
* Plain BIND zone files for "resolved hosting"
* Internal Lua-based scripted answer generation
* Question interception, answer reconditioning, NXDOMAIN redirection
- Including 'block lists' and security measures
* API for direct control (rec_control)
- Local and remote access
* DNS Response Policy Zones (RPZ)
* DNS64
===> The following configuration options are available for powerdns-recursor-5.4.9:
DNSTAP=off: dnstap support (see dnstap.info)
GNUTLS=off: SSL/TLS support via GnuTLS
NOD=on: Newly Observed Domain Tracking support
SNMP=off: SNMP network protocol support
====> Options available for the single EXTLUA: you have to select exactly one of them
LUA=on: Use lang/lua
LUAJIT=off: Use luajit
===> Use 'make config' to modify these settings
dns/powerdns-recursor: Update to 4.4.2
- Improvements:
- Use the non-cryptographic variant of the boost::uuid.
- Keep a cached, valid entry over a fresher Bogus one.
- Ensure socket-dir matches runtime directory on old systemd
- Move to several distinct Bogus states, for easier debugging.
- Do not chase CNAME during qname minimization step 4.
- Bug Fixes:
- Untangle the validation/resolving qnames and qtypes.
- APL records: fix endianness problem.
PR: 251923
Submitted by: Ralf van der Enden (maintainer)
Reviewed by: osa (mentor)
Approved by: osa (mentor)
Differential Revision: https://reviews.freebsd.org/D27679
Update to 4.3.2
This update contains a security fix for CVE-2020-14196.
The issue is:
CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL
applied to the internal web server via webserver-allow-from is not properly
enforced, allowing a remote attacker to send HTTP queries to the internal web
server, bypassing the restriction.
In the default configuration the API webserver is not enabled. Only
installations using a non-default value for webserver and webserver-address are
affected.
As usual, there were also other smaller enhancements and bugfixes. In
particular, the 4.3.2 release contains fixes that allow long CNAME chains to
resolve properly, where previously they could fail if qname minimization is
enabled.
PR: 247707
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
MFH: 2020Q3
Security: 641cd669-bc37-11ea-babf-6805ca2fa271
Sponsored by: Netzkommune GmbH
Do not set directory mode/ownership. Values are already default.
No PORTREVISION bump required since this is a no-op.
Notified by: mat
Approved by: ehaupt (mentor)
- Update to 4.3.0
- Add LICENSE_FILE
- Create directory for sockets and pidfile
- Update pkg-descr with a more descriptive text from website
PR: 244657
Submitted by: yds <yds@Necessitu.de>
Approved by: tremere@cainites.net (maintainer), ehaupt (mentor)
Changelog: https://blog.powerdns.com/2020/03/03/powerdns-recursor-4-3-0-released/
Drop C++11 workaround for GCC < 6 after r449590
lang/gcc5 will expire in ~1 month. If someone still uses lang/gcc48
they should backport C++11 fix instead. QA on GCC architecuters is
currently limited to powerpc64 which uses GCC_DEFAULT.
PR: 193528
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
dns/powerdns-recursor: fix build and update
Don't add -L/usr/lib unconditionally, it makes gcc8 (used on gcc architectures)
link to base libstdc++.
Update to 4.1.13.
PR: 237947
Approved by: tcberner (mentor), tremere@cainites.net (maintainer)
Differential Revision: https://reviews.freebsd.org/D20423
Update to 4.1.11 and add buffer fix for rec_control
The changelog:
#7434: Add an option to export only responses over protobuf #7430:
Reduce systemcall usage in protobuf logging
Also add a fix (pulled in from OpenBSD) for rec_control's buffer
being too small to handle output of some commands. This could be
remedied by setting net.local.dgram.maxdgram=131072 in
/etc/sysctl.conf, but this patch omits that requirement.
PR: 235392
Submitted by: maintainer
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
security/botan2: update to 2.7.0
While here, bump PORTREVISION on dependent ports
PR: 230666
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer
MFH: 2018Q3
Security: 7762d7ad-2e38-41d2-9785-c51f653ba8bd
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
Update to 4.1.3
This release improves the stability and resiliency of the RPZ
implementation, prevents metrics gathering from slowing down the
processing of DNS queries and fixes an issue related to the cleaning
of EDNS Client Subnet entries from the cache.
Full changelog:
https://blog.powerdns.com/2018/05/22/powerdns-recursor-4-1-3-released/
PR: 228434
Submitted by: maintainer
dns/powerdns-recursor: unbreak with boost 1.67
In file included from lua-recursor4.cc:26:
In file included from ./syncres.hh:42:
In file included from ./recpacketcache.hh:41:
In file included from ./rec-protobuf.hh:24:
In file included from ./protobuf.hh:34:
In file included from /usr/local/include/boost/uuid/uuid_generators.hpp:17:
In file included from /usr/local/include/boost/uuid/random_generator.hpp:19:
In file included from /usr/local/include/boost/tti/has_member_function.hpp:15:
In file included from /usr/local/include/boost/tti/detail/dmem_fun.hpp:11:
In file included from
/usr/local/include/boost/function_types/is_member_function_pointer.hpp:14:
In file included from /usr/local/include/boost/function_types/components.hpp:61:
/usr/local/include/boost/function_types/detail/class_transform.hpp:26:31: error:
expected a qualified name after 'typename'
template<typename T, typename L>
^
./recursor_cache.hh:45:11: note: expanded from macro 'L'
#define L theL()
^
PR: 227427
Reported by: antoine (via exp-run)
Obtained from: upstream
Update to version 4.1.1
- Fixes "PowerDNS Security Advisory 2018-01: Insufficient validation
of DNSSEC signatures". An issue has been found in the DNSSEC
validation component of PowerDNS Recursor, allowing an ancestor
delegation NSEC or NSEC3 record to be used to wrongfully prove the
non-existence of a RR below the owner name of that record. This
would allow an attacker in position of man-in-the-middle to send a
NXDOMAIN answer for a name that does exist.
The 4.0.x branch is not vulnerable.
- Add support for algo16 and simplify Lua/LuaJIT engine choice.
PR: 225397
Submitted by: maintainer
Security: CVE-2018-1000003
Add libdecaf support
- Mark CONFLICTS_INSTALL with dns/powerdns-recursor40
- Chase shlib change of security/botan2
- Bump PORTREVISION for dependency change
PR: 225177
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Mark IGNORE on FreeBSD < 10.4 due lack of __cxa_thread_atexit()
implementation.
PR: 224298
Submitted by: maintainer
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D13493
Update to 4.0.7
- Drop support for Botan 1.10 in favor of Botan 2.x
- Backported bugfixes/improvements from the 4.1.x branch
- Pet portlint and use DISTVERSION
- Added devel/protobuf as dependency as suggested by upstream
PR: 224027
Submitted by: maintainer
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D13338
For ports that are marked BROKEN on armv6, and also fail to build on
armv7, mark them so.
This is part two of a multipart commit to bring armv7 ports to parity
with armv6.
Approved by: portmgr (tier-2 blanket)
Obtained from: lonesome.com -exp run
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
c++14-lang, c++0x, c11, or gcc-c++11-lib.
PR: 219275
Mark some ports failing on power64. In cases where the error message
was a stub, provide a real one.
While here, pet portlint.
Approved by: portmgr (tier-2 blanket)
Reported by: swills
Bump PORTREVISIONs for ports depending on the canonical version of GCC and
lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some
circumstances such as versions of FreeBSD or platforms).
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using using Mk/bsd.octave.mk which in turn has USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
c++11-lang, c++0x, c11, or gcc-c++11-lib.
PR: 216707
dns/powerdns-recursor: work around crash with boost 1.62
Assertion failed: (this != &x), function operator=, file
/usr/local/include/boost/container/string.hpp, line 830.
PR: 214470
Approved by: Ralf van der Enden <tremere@cainites.net> (maintainer)
dns/powerdns-recursor: unbreak build with boost 1.62
In file included from mtasker_context.cc:27:
./mtasker_fcontext.cc:33:7: error: no member named 'make_fcontext' in namespace
'boost::context'; did you mean 'boost::context::detail::make_fcontext'?
using boost::context::make_fcontext;
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from mtasker_context.cc:27:
./mtasker_fcontext.cc:64:7: error: no member named 'fcontext_t' in namespace
'boost::context'; did you mean 'boost::context::detail::fcontext_t'?
using boost::context::fcontext_t;
^~~~~~~~~~~~~~~~~~~~~~~~~~
[...]
PR: 214470
Submitted by: antoine
Obtained from: upstream
Approved by: portmgr blanket
dns/powerdns: Fix build with LibreSSL
- Add upstream patch 115f658ee2000a4cdcc13e999da50b3634c6a907
- Patch dns/powerdns-recursor as well
PR: 212016
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Reported by: Ralf van der Enden <tremere@cainites.net> (maintainer)
MFH: 2016Q3
- Update dns/powerdns-recursor to 3.7.2
- Remove an extra blankline from dns/powerdns/distinfo
PR: 199720
Submitted by: Ralf van der Enden
Approved by: bdrewery (mentor)
MFH: 2105Q1
Security: 64e6006e-f009-11e4-98c6-000c292ee6b8
Fix build with LUA option enabled [1]; modernize USE_BZIP2.
[1] Recent changes to the Lua ports cause a build failure and have broken
powerdns-recursor when LUA is enabled.
USES+= lua:51 also no longer worked so had to pet the Makefile a little.
[mandree] modernize USE_BZIP2 -> USES=tar:bzip2
PR: 190698
Submitted by: tremere@cainites.net
Approved by: portmgr (blanket)
Replace lang/lua with the new lang/lua51
lang/lua51 is working the same way lang/lua52, chase ports using lua 5.1
Make the default lua lua52
Make all lua ports using USES=lua
Approved by: portmgr (implicit)
Number of commits found: 233 (showing only 100 on this page)
