Lines Matching full:for
6 - Tag for 4.9.0.
13 - Switch algorithm to hmac-256 for testplan_mess test.
14 - Tag for 4.9.0rc1.
20 - Set up doc/RELNOTES for upcoming release.
26 was waiting for the signal from the backup/old main process that all
29 from server main loop for processes that exited during reload, but
34 - Fix compile with memclean for xfrd nsd.db close.
38 to fail. Also fix to make sure to set event_added for the
40 too, for extra certainty.
43 - Merge #304: Support for Catalog zones version "2" as specified in
48 Have a look at the nsd.conf man page for details on how to
53 for clients matching a provide-xfr rule, because clients that are
70 - Fix control-reconfig-xfrd test for zonestatus primary that is
83 - Fix for #306: Create directory for xfrd.state and zone.list files
87 - Tag for 4.8.0rc1. This became 4.8.0 release on 6 December 2023.
91 - Set up doc/RELNOTES for upcoming release.
92 - Fix unit test kill_from_pidfile function for nonexistent files
122 - Fix for interprocess communication to set quit sync command from
126 - Merge #281: Proxy protocol. An implementation of PROXYv2 for NSD.
129 The interface can support proxy traffic for UDP, TCP and TLS.
155 - Tag for 4.7.0rc1. It became release 4.7.0 on 7 june 2023. The code
164 features, like TLS for DNSTAP.
168 - For #279: Note that autoreconf -fi creates the configure script
169 and also the needed auxiliary files, for autoconf 2.69 and 2.71.
176 - Fix for build to run flex and bison before compiling code that needs
180 - Fix cirrus script for submit to coverity scan to libtoolize
189 - Fix include brackets for ssl.h include statements, instead of quotes.
215 - Fix for #267: neater variable definitions.
221 - Merge #263: Add bash autocompletion script for nsd-control.
222 - Fix for #262: More error logging for SSL read failures for zone
227 - Fix ixfr_and_restart test to wait for processes to come to a stop.
230 - Fix configure for -Wstrict-prototypes.
233 - Tag for NSD 4.6.1, the repository continues with version 4.6.2.
238 - Fixup for non-trailing newline lexer change warnings.
239 - Update doc/RELNOTES for changes.
241 - Fix credns tests for vm usage, and not use system default zone
244 - Fix verify_again test to use ipv4 address for test.
261 - Update cirrus build script for newer Ubuntu image, and FreeBSD
274 - Tag for 4.6.0rc1. It became 4.6.0 on 30 June 2022, and it continues
287 - Fix verify handler add of sigchld event for compilation without
307 is stored to file if a zonefile is configured for the zone, in
314 NSD stops responding with NOTIMPL to IXFR requests, also for zones
317 - set version to 4.5.0 for feature change.
318 - Tag for 4.5.0rc1 release. It became the 4.5.0 release on 13 May 2022.
333 - Tag for 4.4.0rc1 release. This became 4.4.0 release on 17 Feb 2022,
337 - Fix unit tests for nds-control-setup exit code and the
354 There are options for managing the memory usage, defaults are the
355 same as before. xfrd-tcp-max sets the number of sockets for tcp
361 - Fix to document nsd-checkzone -p in the man page for nsd-checkzone.
364 - Fix to change file mode before changing file owner for the
375 - Fix socket_partitioning unit test for FreeBSD.
380 - Set up for branch for 4.3.9 release.
384 - Fix unit tests for new answer-cookie default.
393 - Tag for 4.3.8 release, from 4.3.8rc2. The main branch continues
397 - Set default for answer-cookie to no. Because in server deployments
399 - Tag for 4.3.8rc2, includes the new answer-cookie default.
402 - Tag for 4.3.8rc1.
405 - Fix unit tests for svcb and xot to not touch the default
407 - Fix unit test for xot tertiary config for zonelistfile default.
408 - Fix unit test for dns-cookies for no unshare, and allow-query
409 for no IPv6 loopback.
410 - Fix unit test allow query to check for IPv6.
413 - Fix #194: Incorrect NSEC3 response for SOA query below delegation
426 - Fix #190: NSD returns 3 NSEC3 records for NODATA response.
441 - Fixes for #185: Document client-cert, client-key and client-key-pw
448 - For #184: Note that all zones can be targeted by some nsd-control
462 - main branch continues for 4.3.8.
468 - tag for 4.3.7rc1.
470 - Fix for loop initial declaration for nonc99 compiler.
473 - Fix truncate test for EDNS COOKIE making one less RR is added.
477 - Fixes for child server processes getting out of sync with the
497 - Test code has -q option for quiet output.
500 - Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure
517 - Fix for #128: Skip over sendmmsg invalid argument when port is zero.
523 - Fix for #170: Fix build warnings when IPv6 is disabled.
527 - Fix configure failure for enable systemd because of autoconf.
528 - This became release 4.3.6, the repository continues for 4.3.7
532 - Note unlisted changes in RELNOTES and prepare for 4.3.6rc1 tag.
535 - Per zone Access Control List for queries
559 - Fix unit test for wildcard printout change.
568 - Fix segfault on high verbosity for TLS channels with dnstap log
576 - Man page documentation for dnstap options.
579 - Fix AF_LOCAL compile error for Solaris.
580 - Fix ifaddrs compile error for Solaris.
581 - Fix ifaddrs.h compile error for Solaris.
592 - Set branch ready for 4.3.5 release. Tag for 4.3.5rc1.
599 - Add config.guess and config.sub to .gitignore for autoconf 2.70.
601 - Fixup TXT record validation fix for escaped quotes.
602 - Fixup TXT record validation fix for escaped backslashes.
603 - Fixup escape character parse for quoted strings.
607 - Fix dname test for #148.
608 - For #151: fix to not produce loops in output.
611 - Fix configure.ac for autoconf 2.70.
615 for a CNAME query.
622 - For #145: Fix that service of remaining TCP and TLS connections
638 - tag for 4.3.4rc1. This became 4.3.4 release on 1 dec 2020.
639 The code repo continues for 4.3.5 in development.
644 - Fix for CVE-2020-28935 : Fix that symlink does not interfere
646 - fix writepid for retvalue 0.
650 - Fix to check nscount in previous fix for EDNS in formerr response
657 - Fix to add missing closest encloser NSEC3 for wildcard nodata type
673 - tag for 4.3.3 release
676 - Fix #128: Fix that the invalid port number is logged for sendmmsg
680 - tag for 4.3.3rc1 release.
684 - Fixup bug013_truncate, checkconf and cutest_qroot tests for new
705 ip-address: eth0. The IP-addresses for that interface are then used.
708 - Add xstrdup for PR #113.
711 - Fix for unknown EVP_MAC_CTX_free function in openssl 3.0.0 tsig code.
714 - Fix that configure checks for EVP_sha256 to detect openssl, because
716 - Port TSIG code for openssl 3.0.0-alpha6.
718 - Review fixes for tsig, defensive free and zero.
731 - Tag for 4.3.2 release. Master branch contains the next version
735 - Tag for 4.3.2rc1.
738 - Fix compile includes for xfr-inspect tool on FreeBSD.
742 - Fix bug034 test for vm test changes.
747 - Fix unit test for different nsd-control-setup -h exit code.
755 - Do not log EAGAIN errors for sendmmsg, to stop log spam on OpenBSD.
763 - Update contrib/nsd.service for chown of nsd.log and /var/log in
770 for drop-updates.
771 - Fix checkconf test for log-only-syslog option.
774 - Document default value for tcp-timeout.
793 - Tag for 4.3.1 release and track 4.3.2 release in code repository.
795 - Fix for posix shell syntax for trap in nsd-control-setup.
797 - Fix uninitialised values for bindtodevice option at startup with
801 - Tag for 4.3.1rc2.
813 - Tag for 4.3.1rc1.
816 - Fix for whitespace in minimal responses test for FreeBSD.
819 - Merge PR #86 from noloader: Use precious variables for GREP, EGREP,
821 - For PR #86: Fix that programs loaded after CFLAGS and stuff is
830 - Fix unknown u_long in util.c for Issue #80 .
836 - Fix for #80: Fix reallocarray test to define before include.
837 - Fix for #80: Define alternatives for IFNAMSIZ if it does not exist.
840 - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile.
841 - Fix #75: configure test for sched_setaffinity, and use
842 cpuset_setaffinity otherwise. Also test for presence of sysconf.
844 - Fix for #74, #75: cpuset test for header contents and provide code.
849 - Fix #71: error: 'for' loop initial declaration used outside C99
851 - Fix to move declarations out of for loops in event test too.
852 - Fix to move declarations out of for loops in popen3 test too.
853 - Another fix to move declaration out of for loop for event test.
854 - Fix to move declarations out of for loops in cutest regex display.
857 - tag for 4.3.0 release and master branch has version 4.3.1.
860 - repository has version number 4.3.0. Tag for 4.3.0rc1.
863 - Fix that the retry wait does not exceed one day for zone transfers.
869 - Fixup fix of reuseport TCP for server close of sockets not used
875 event_add not for every backend for signals. The event_initialized
876 is not possible for every backend, so event_added variable. The
881 - Fix checkconf test for new drop-updates config option.
883 closing them for server-1 in server-2 and server-3..
892 option to use the specified FIB for that socket.
903 - Fix responses for IXFR so that the authority section is not echoed
910 - Add zone resource record iterator for future zone-verification port.
912 - Add popen3 implementation for future zone-verification port.
922 for conf key ip-transparent.
944 - Try different annotation for radix_find_prefix_node not reachable.
945 - Separate acl_addr_match_range functions for ip4 and ip6, to
957 - Fix to log on failure to chmod for socket for remote control.
958 - Fix to remove unneeded if in open of socket for remote control.
970 - Fix to use getrandom() for randomness, if available.
972 - Fix identical branches for ssl_print of errors in remote.c.
979 - Fix checkconf test for new error output string.
980 - tag for 4.2.4rc1 release. This became the 4.2.4 release,
991 - Detect fixed time memcmp for openssl 0.9.8 compatibility.
992 - Detect EC_KEY_new_by_curve_name for openssl 0.9.8.
993 - include limits.h for UINT_MAX.
994 - If no recvmmsg, dont use msg_flags member, but errno for error,
997 - Remove unused variable warning for portability.
1001 - Tag for 4.2.3rc1. Branch master is 4.2.4 in development.
1007 - Fix for #44: nicer top-level clause documentation.
1012 Compatible implementations are in place for systems that lack the
1014 - Socket options are now set in designated functions for easy reuse.
1015 - Socket setup has been simplified for easy reuse.
1020 - For #21 add
1022 that adds support for readiness notification with READY_FD from
1026 - Fix #40: Merge small fixes for confine-to-zone by Greg Bock.
1029 - For #39: Merge confine-to-zone feature contributes by Greg Bock.
1038 - The nsd.conf includes are sorted ascending, for include statements
1050 - For #21: pidfile "" allows to run NSD without a pidfile, for
1054 - In tests check for tls test tool availability.
1057 - Tag for 4.2.2 release. Git master contains 4.2.3 in development.
1060 - Fix error message for out of zone data to have more information.
1061 - Tag for 4.2.2rc2.
1067 - Tag for 4.2.2rc1.
1077 - Fix to timeval_add in minievent for remaining second in microseconds.
1080 - Set timeout for refetch immediately, only spread load when there
1095 - Fix that NSD warns for wrong length of the hash in SSHFP records.
1102 - clean memory on exit of nsd-checkzone for memory debug.
1112 - Tag for 4.2.1rc1
1115 - Fix unit test for added options and no dot after zone updated
1129 tcp-reject-overflow options for nsd.conf, from Jeroen Koekkoek.
1131 available, for accept4.
1142 - Fix #15: crash in SSL library, initialize variables for TCP access
1149 - Fix to init event structure for reassignment.
1153 - Fixup of RELNOTES, corrected RFC reference for 4892.
1159 create, with hardening for the remote control tls context too.
1165 - Fix unit test for outgoing interface to use random port numbers for
1179 - Note CII best practices badge for NSD on the README.md.
1182 - Fix .gitignore for unit test generated files.
1183 - Fix checkconf unit test for hide-identity and tls.
1186 - Fix makedist.sh for use with git.
1187 - Nicer output on travis for clang analysis.
1190 - Fix .gitignore for dnstap files and aclocal temp.
1191 - Add aclocal to README.md for pkgconfig for some configure options.
1194 - Add tls.tpkg unit test for DNS over TLS functionality.
1199 - Use travis for build check, initial unit test and clang analysis.
1202 - further setup ssl ctx after the keys are loaded, for ECDH.
1210 - Patch to add support for TCP Fast Open
1211 - Patch to add support for tls service on a specified tls port
1215 with the hostname for chaos class queries. Implements the RFC4829
1223 - Fix documentation for DNS over TLS, and set default port 853.
1230 - Fix log for fastopen with verbosity.
1232 - Add per-zone statistics for TLS queries, and dnstap for TLS queries,
1233 and rcode and TCflag statistics for TCP and TLS queries.
1247 - Fix unit test bug013_truncate for new truncation with EDNS size,
1248 it is one RR smaller for the truncated response in the test.
1270 - Fix #4215: fixup for state update for TSIG information in server
1271 processes, nicer printout for tsig_print, tsig_print without
1273 - nicer logging for update_tsig.
1276 - Fix for tsig assoc_tsig command on acl with nokey elements.
1284 - documentation for tsig nsd-control options.
1290 Also no additional section processig for type ANY, reducing
1292 - assertions for clang analysis.
1295 - Fix for FreeBSD port with dnstap enabled.
1308 - Revert that, it looks wrong, AQ and AR are for the authoritative.
1311 - Tag for 4.1.26rc1. Which became 4.1.26 on 4 dec 2018.
1313 - Fix clang analysis warning on null in closest encloser for wildcard
1324 allows the change of a zone pattern option without downtime for
1336 - Tab style fix to use tab for 8 spaces, from Xiaobo Liu.
1339 - Adjust dnstap socket path for chroot.
1344 - Fix some more, neater code and checks for domain length limit.
1354 Farsight Security, added to then adapt it for dnstap logging in NSD.
1364 - tag for NSD 4.1.25rc1.
1375 - nsd-control prints neater errors for file failures.
1384 - Fix unit test code for clang analyzer.
1401 - tag for 4.1.24 release.
1405 - Fix printout of accepted remote control connection for unix sockets.
1408 - tag for 4.1.24rc1 release.
1411 - Tag for NSD 4.1.23 release, trunk is 4.1.24, includes
1413 - Fix checkconf test for use-systemd option.
1426 - RFC8162 support, for record type SMIMEA.
1451 - Patch to fix openwrt for mac os build darwin detection in configure.
1454 - tag for 4.1.22rc1. Became 4.1.22 on 11 June, trunk is 4.1.23 in
1458 - Fix to use same condition for nsec3 hash allocation and free.
1471 - Tag for 4.1.21 release.
1477 - Tag for 4.1.21rc1 release.
1486 - lower memory usage for tcp connections, so tcp-count can be higher.
1487 - Fix checkconf test for refuse-any option.
1496 - For more clang warnings
1500 - Fix for clang analysis complaints.
1503 - --enable-memclean cleans up memory for use with memory checkers,
1508 - updated RELNOTES for upcoming release.
1523 - Add test for support of -Wno-address-of-packed-member for
1525 - tag for release 4.1.19
1529 - tag for 4.1.19rc1
1532 - Fixup lexer warning for gcc 4.2.
1535 - Fix 3392: Fix regression in 4.1.18 for notify lists with ip4
1542 - Fix warnings emitted by clang for --enable-packed. Alignment is not
1543 a problem for x86_64, don't enable packed when the platform
1547 - tag for 4.1.18 release.
1552 - Fix crash for DS query when parent and child zones both configured
1554 - tag for 4.1.18rc2.
1557 - tag for 4.1.18rc1.
1560 - Fix #2871: Increase number of sockets for xfrd transfers.
1570 - Fix #1567: Change crit to err log level for gettimeofday failure.
1571 Add defines for compile without syslog.
1577 - nsd-control zonestatus prints wait time between attempts, for zones
1597 - NSD sends up to 16 notifies simultaneously for up to 64 zones,
1598 to increase rate of notification for large master configurations.
1616 - Fix text format of deletes for CDS and CDNSKEY, single 0 to represent
1626 - Fix #1272: use writev to put tcp length field with data for outgoing
1637 - 4.1.16 rc1 tag for release.
1641 - Patch for expire state in multi-master when masters includes
1647 - but they give additional information for priming queries (type NS).
1656 - Fix missing _t to _type conversion for disable-radix-tree option.
1659 - zone parser can parse acronyms for algorithms ED25519 and ED448.
1666 - tag for 4.1.15 rc1. Which became 4.1.15 on 16 Feb. Trunk 4.1.16.
1672 - Fix #1195: Fix so that NSD fails on non-compliant values for Serial.
1690 - Fix #1132 for SERVFAIL zones perform backoff, and remembers the
1696 wait for timeout or notify.
1697 - Fix axfr fallback for rounds to 1.
1703 - Robust fix against missing master in tcp_open for xfrd.
1704 - More in depth fix for the previous.
1710 - Fix null memcpy for radixtree with single link element.
1719 - Test for openssl init_crypto and init_ssl functions.
1733 - Release of 4.1.12; trunk is 4.1.13 and the patch for 4.1.12 (that
1739 - Fix multimaster for not tried full zone transfer for a expired zone.
1746 - for type SRV add A/AAAA to the additional section (if possible),
1747 just like we already do for type MX.
1753 - configure --disable-radix-tree for about 15% lower memory usage.
1768 - multi-master-check: yes can be used to check all masters for the
1779 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
1784 - Note down tracking numbers for issue JVN#63359718 JPCERT#91251865.
1791 - Set default for min-refresh-time and min-retry-time to 0. Behaves
1797 - When tcp is more than half full, use short timeout for tcp session.
1798 - Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori.
1799 - man page entries for max-refresh-time patch.
1805 - release 4.1.10 and tag for that.
1812 - Fix for NSEC3 with zone signed without exact match for empty
1813 nonterminals, the answer for that domain gets wildcard denial.
1815 - tag for 4.1.10rc1.
1821 - Updated fix for nonterminal nsec3 answers.
1827 - NSD includes AAAA before A for queries over IPV6 (in delegations).
1841 - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
1845 - acx_nlnetlabs.m4 to v34, with -ldl -pthread test for libcrypto.
1849 for Linux, binds to interfaces and addresses that are down.
1862 - #744: Fix that NSD replies for configured but unloaded zone
1876 - Define _DEFAULT_SOURCE with _BSD_SOURCE for recent Linuxes.
1879 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch
1886 - Fix flto check for OSX clang.
1895 - tag for 4.1.7rc1 prerelease.
1910 - Document default in manpage for rrl-slip, ip4 and 6 prefixlength.
1921 - Fix #721: Fix wrong error code (FORMERR) returned for unknown
1925 - Allocate less memory for TSIG digest.
1928 - Fixup for newer acx_nlnetlabs.m4, test for openssl version after
1929 testing for libdl need.
1935 - Fix tpkg tests for portability.
1938 - patch from Doug Hogan for SSL_OP_NO_SSLvx options.
1940 - support configure --with-dbfile="" for nodb mode by default, where
1947 - Init pfd for handlers added during handler-event-walk.
1966 - nsd-checkconf warns for master zones with no zonefile statement.
1970 - print failed token for config syntax error or parse error.
1973 - Fix #711: Document that debug-mode yes is used for staying
2007 - Fixed checkconf test for reuseport setting.
2029 - Fix that for expired zones NSD performs an AXFR and accepts newer
2035 - Fix NSID response for short edns sizes.
2046 - Fix redefined macro lex warning for freebsd flex.
2055 - removed unused defines for unofficial tsig-hmac algorithm codes.
2062 - Fix crash in zone parser for relative dname after error in origin.
2063 - Test for zone parser failures
2069 - printout names for successful addition and removal with bulk command.
2092 - Fix #655: Fix contradiction in verbosity for zone transfers.
2095 - Use reallocarray for integer overflow protection, patch submitted
2137 - Fix tcp waiting list for zone transfers where the bind and connect
2154 - Fix casts for ctype functions (from Todd Miller).
2161 - Fix udb-inspect for one megabyte chunks, counts and statistics.
2181 - Test for wildcard fix (from 3.2).
2184 - Fixes for wildcard addition and deletion, speedup for some cases.
2187 - Fix that queries for noname CH TXT are REFUSED instead of nodata.
2194 - Fix #616: retry xfer for zones with no content after command.
2210 - fix manpage for nsd-checkzone to have version and date.
2226 - Fix for process swap of main and reload, reload failure from the
2237 for them. Fix makes it so there is no very deep string of
2240 makes signals for children arrive at the reload, and servermain
2248 - Fix endian.h include for OpenBSD.
2272 (If that does not work for everyone, we need rrl-log: yesno option).
2278 - Fix #587: Default value for statistics is 0.
2282 - Fix roundrobin cornercase for truncated packets.
2287 - Fix #583: Round-robin for records in the Answer section.
2307 - Fix progress printout for very large zones (numeric overflow).
2324 delete, rename and AXFR for zones. Defer emptynonterminal checks.
2330 - shorter logging for zone transfer fail rcodes.
2339 - Changed maxbackoff for no-content secondary zones from 4h to 24h.
2344 - made database: "" set the 3600 default for zonefileswrite only
2346 - Unit test for zonefiles-write.
2347 - Write xfrd.state for nodb mode again. Disable xfrd.state with
2357 - unit test for nodb mode.
2360 - (from 3.2), fix for #553 and for other TXT string syntax.
2380 - Adds nsd.db larger than 400Tb check for sanity. Also test if
2382 - nsd waits for tasks to complete on stop, prevents nsd.db corruption.
2406 - configure change for easier compile on Minix.
2414 to match the definition on opensource.org for the BSD License.
2429 - rcode REFUSED for queries to non-hosted zones.
2446 - Unit test for WKS failure.
2455 - Fix that chroot is removed from zonefile names (for absolute names).
2467 - Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3,
2471 - Log ip address for sendto and sendmmsg failures.
2474 - Support for CAA RRtype (RFC 6844).
2478 - Seed PRNG for openssl at start of daemon, fixes SSL connection issue.
2484 - Fix bug#534: IXFR query loop over UDP for zones that are unchanged.
2490 - Accept interface: as an alternative for ip-address: for
2494 - tag for 4.0.0 release.
2495 - trunk has 4.0.1 in development, for bug fixes.
2513 - Fix for zone transfer that has different-cased RRSIG signer names
2520 - Update documentation for nsd -d option.
2543 - configure --disable-recvmmsg for compat with older Linux kernels,
2550 - Fix use of 32bit time, for 2038, thanks to Theo de Raadt for patch.
2579 For remote control keep it at 16, it has less TCP load.
2586 and after 5 seconds. For big zones.
2590 - recursive readroutine for speedup of nsd.db reads (30%).
2598 because of the format change. printout udb write complete for
2624 - Bug #496: Support for EUI48 and EUI64 RR types.
2632 - Fix memory leak in zone parser for txt record (since the large
2644 - Fix nsd-mem for printout of values above 4G.
2652 - Fix race on exit of nsd, for restarts, so that the pidfile-pid
2657 - Remove unused pointer and fixup chroot include for trail slash.
2684 - Fixup contrib/bug390.patch for 4.0.0b4.
2686 - allocate radixtree in region for small (5%) total savings and
2691 - use less memory for non-nsec3, nsec3tree.
2714 - Fixup tests for older dig (check if +noedns option is supported)
2722 - remove compiler warning for memset from tsig read.
2730 - Fix that old zonefile does not override newer AXFR for slave zones.
2743 - Fix is_apex flag for zones read from udb.
2750 - remove printout of "bad transfer" to the log for notimpl.
2751 - fixup tests for new netstat and new netcat.
2754 - fix gcc warning, do not use uninit value for rng init.
2767 - Improve tabs in sample nsd.conf for different tabsizes.
2774 - fixed testset for dig9 default with edns.
2777 - Fix configure for gentoo gcc and headers.
2780 - Fix spurious assertion failure for some rrl blocks.
2793 picked up, except for superuser options (chroot, logfile, port)).
2815 - fixed uninit variable for empty zone axfr request
2816 - fixed alloc of acl options for config zones so they can be deleted.
2826 - Fixup for libevent-2.1.2.
2829 - makedist makes sha256 for tarballs.
2833 - Fix for use with libev (no use of event.ev_flags).
2844 - contrib/nsd_munin_ updated with memory lookup for BSD.
2850 - Bug #483: Better error messages for TSIG errors.
2872 - Fix to make udb mmap work for FreeBSD8 when it grows significantly.
2879 - Implement rrl log of unblock for collision.
2892 - Fix bug 478: declaration after statement (for gcc 2.95).
2895 - Fix default settings for RRL.
2911 - Log of connection failure for zone transfer is neater.
2914 - Fix invalid time argument in nsd control (for OpenBSD).
2918 - tpkg for RRL.
2925 it logs what is ratelimited for operational inspection.
2926 - unit test for rrl.
2946 - tzset before chroot for correct timezone (from Camiel Dobbelaar).
2947 - pipeline support for AXFR and IXFR tcp queries.
2950 - writev support for TCP.
2964 - optimized socket counts for zone transfer speed.
2973 - Prioritize notify sender for requesting XFR.
2977 - Fix for VU#624931 CVE-2012-2978: NSD denial of service
2994 The nsd.task files and a subdirectory for zone transfers are
2998 - fix checkconf unit test and add test for backwards compatibility
2999 for difffile: "x" statement.
3006 - Fix tpkg test cutest_qroot and rr-test for printout of algorithms
3014 - Fix for qtype ANY for a wildcard domain in NSEC signed zone.
3024 - Fix configure for OpenIndiana sunos 5.11, acx_nlnetlabs.m4 update.
3039 - Fix -flto detection for llvm compiler on Lion.
3062 - fix makedist.sh for removal of patch, notify, xfer. new nsd-control.
3065 - added nsd_munin_ script for statistics monitoring to contrib.
3071 - fix checkconf test for remote control options.
3076 get AXFR and IXFR for the contents). They are stored in nsd.db.
3077 - test for repattern.
3083 - fixed tests for removed tools from nsd, with replacements.
3086 - fix for xfrd restart if crashed. xfrd knows if a reload is
3088 time. New shortsoa track for start that does not use taskdb
3097 for rc.d: contrib/nsd.init, or platform specific init script.
3104 - fix for bug in write and reload zone option.
3118 - ignore notify and soainfo for deleted zone, if due to race they
3120 - tpkg test for nsd-control, addzone and delzone
3132 - print more memory statistics, for xfrd and config.
3151 - Fix to have no authority NS set processing for CNAMEs.
3171 - fix unit tests for mmap with TODO and removal of -f in nsd-patch.
3177 - mmap used for parent-xfrd communication of tasks and task results.
3182 - nsd.db and tmp mmaps are created with mode 0600 for safety.
3187 - Fix Makefile for U in environment, since wrong U is more common than
3204 - from NSD_3_2 branch the fix: bug if the zonefile is changed for a
3207 for NSD4.
3210 - unit test for code coverage on nsec3 ixfr.
3218 - Unit test nsec3 salt change and fix for sanity check of nsec3 chain.
3222 - more unit test for nsec3 precompile changes.
3223 - unit test for salt change, rehash in udb fix, remove last NSEC3
3229 - fixes for nsec3 precompile code: precompile for empty nonterminals
3244 - Fix is_existing flag for ENT when domain that has a shared ENT
3247 - unit test for namedb.
3263 by peer in 1000-zones transfer on an ultra10, thus for many-zones.
3268 - Unit test for update of the nsd.db with new contents.
3277 - nsd edits nsd.db for IXFR and AXFR messages. since xfrd already
3278 checks zone transfers completely for syntax those errors cannot
3297 for slave zones (as if option is always to binary, this capability
3302 - compile fixes for BSD. preserve RRset order.
3315 - unit test for radix tree in cutest.
3316 - unit test for udb in cutest.
3318 for debug, not installed or built by default.
3327 - nsec3 and wildcard code. No additional section for wildcards.
3334 like BIND (9.6) and it simplifies processing for NSD.
3347 - added make devclean for cleaning up autoconf and automake stuff
3355 - cutest for speed of answer encoding, and format of answers for root.
3372 - fix for bug#357, make xfrd quit with many zones.
3394 - Bug #348: no -I/usr and -L/usr for libcrypto in /usr.
3410 - fix bug#253: now also for QTYPE=DS.
3416 - Support for huge TXT records.
3470 - Backwards compatibility for MAP_ANONYMOUS
3494 - compat code for memcmp unsigned comparisons.
3500 - Secure string functions, including compat code for strlcat.
3502 - Prepare for default chroot
3552 - Patch Paul Wouters for NSD using hardcoded name.
3556 - Bug 253: No need for NS RRset in authority section, when returning
3557 final answer for QTYPE=DNSKEY.
3560 - patch for use of Linux IPV6_MTU option, so that on linux the default
3591 - Bug 230: nsd-*: use stdout for non-error output (instead of stderr).
3619 - File rotation for nsd.log when owned by nsd (+ tpkg test).
3634 - Added tests for case sensitive dns names and "Bug #162"
3645 - setsockopt SO_LINGER, for portability outgoing-interface (BSD/Solaris)
3648 - Configure the source ip-address for notifies by the master and zone
3650 - Previously added source hostname/ip and port configuration for
3652 - Finetuned nsdc for nsdc notify and nsdc update
3662 - Additional arguments for nsd-notify and nsd-xfer: set outgoing
3667 - RFC 4635, bugfix #130: support for hmac-sha1 and hmac-sha256 tsig
3669 - modify and add tpkg tests for hmac-sha1 algorithms.
3722 - Fixed strptime bug (for MacOS Leopard)
3725 - Add configuration for chkconfig to control nsd service (bug 164)
3734 - check for hash(apex)==nsec3 with SOA bit was done in duplicate.
3738 - prints for debugging.
3745 memory (for very large zones). Moved tests to test on commit.
3746 - set RRTYPE numbers for NSEC3=50, NSEC3PARAM=51.
3748 on some garbage instead of parse error. Parselexer is updated for
3750 - removed highrange rrtype code. fixup cutest for that.
3754 - skip glue nameserver domains (for TLD with 2 glue per
3756 - skip the prehash_domain for delegation points, which saves
3770 - Better logging for nsd-notify (show 'broken' zone)
3779 - Fixup for skip after unknown deleted IXFR RR, otherwise processing
3782 - added unit test for this in long (needs ldns-testns, updated it).
3783 - added unit test for rollback of malformed zone transfers.
3784 Fixup for it, and fixup in ldns-testns to be randomport and
3785 copy id for hex packets.
3791 for NSD to try to load again.
3794 - small fix in descriptive text in sample config for debug-mode.
3801 - Fixup manual page entry for allow AXFR to anyone.
3804 - Report source and zone for denied AXFR attempts.
3813 - added contrib for bind2nsd, Al Stone provided an abridged version
3814 that neatly fits for contrib.
3839 ECONNABORTED is checked for. sys/select.h included in nsd-notify.
3853 - (for 3.0.6) -O2 test for Alpha moved to saner position.
3865 - updated tpkg tests to use current dir for testing.
3873 - Check for EPROTO definition to compile on FreeBSD4/Alpha.
3878 - Added verbosity mode (-V <level>) for extra operational logging.
3905 - rr descriptor counts for NSEC3 updated, has an extra field flags.
3913 A zone that uses exclusively unknown hash algorithms for NSEC3
3919 - A query for an NSEC3 ownername will lead to DNAME redirection
3924 - Added jumpstart for nsec3 search, will greatly speed up optout
3938 for the tcp timeout.
3945 - test package for that.
3946 - Fix for reply to notify messages with ANCOUNT wrong. The ack
3949 - test package for notify reply wireformat.
3968 - Fixed --zonesdir=<path> for configure. The value did not get used
3970 default value is set for zonesdir, you can go to a 'no value
3972 - Fixed checkconf.tpkg for this change. nsd-checkconf will
3973 output zonesdir: "" as this is the default for --zonesdir.
3981 fails to start (due to bad config file for example).
3994 - Added test to check for CNAME and other data error by zonec.
4004 - Moved down max XFRD UDP sockets for zone transfer queries to 100
4019 lists for a 10% speedup in xfrd.
4021 a notify comes in for that zone. Added package to test it.
4025 - Test for fallback in getaddrinfo more portable.
4036 - Fallback to ip4 also if getaddrinfo fails for ip6.
4039 - signed/unsigned warning fix for FD_SETSIZE comparison.
4044 - Debugging 10k zones transfer, set so that zones waiting for a
4050 not have problems with stale events (for the fd from the previous
4053 This is easier to understand for the poor hapless developer.
4054 - Need to set notify_current for notify on waiting list. Fixed.
4057 - Debugging 10k zones transfer, noticed that it is possible for
4058 netio to give a callback for an event that you were not listening
4062 - Bug #153: now checks for FD_SETSIZE when adding fd to select fdset.
4063 - Easy overview of socket allocation for xfrd in xfrd.h
4068 - Added test for notify-socketcount, and removed unused files from
4091 - Added pdf for differences.tex for ease of use.
4097 - log message clearer for 'duplicate xfr part' to 'discarding partial
4100 for IXFR queries, xfrd will retry to TCP. This makes the use of
4106 - Added checks for out of memory in reload (diff file). And it exits
4110 - Bug #149: Wrong text for NOTAUTH error code. When notify is not
4114 - More fixes from Koh-ichi Ito (kohi@iri.co.jp now), for bug #146,
4121 - added search path for openssl on Solaris 10 (/usr/sfw).
4125 and routines for it in region-allocator.c and .h.
4129 - added unit test for region recycle.
4135 And also handles chroot case (+=l) for default values.
4136 - Fix for bug #145. The skip file position in the diff file was used
4142 - tpkg test in long dir that tests for the bugfix. Takes a long time
4149 Added a define for _STDC_C99 for that.
4150 - Checked that the patch for solaris for bug 143 indeed fixes the bug.
4155 - no queries for NSEC3, RRSIG, ANY succeed for nsec3 only domains.
4161 You can query for NSEC3PARAM.
4162 - warnings for printf format on maxOS (sizet needs cast to int).
4170 - Bug #144: LOC defaults for unspecified values wrong. Error in zonec.
4173 - Test tpkg for bug 144.
4177 Does not only look at exit code but also checks for '^no ' string.
4178 - nsd-patch does a chdir to zonesdir for relative difffile or dbfile
4180 - nsdc handles zonesdir: for relative pidfile, dbfile, difffile
4189 - Credits for prerelease testers; Thanks guys!
4193 - test tpkg that tests for the bug, has multiple rrsets at zone apex
4207 - fixes to man pages, wrong locations for files.
4213 - Fix for tsig size still set when data is null ptr.
4214 - Fix configure for NetBSD (1.6 - 2.0) to find struct timespec.
4222 - wait for select writable before testing for connect error.
4225 - fixed bug where query for CNAME that points to unserved zone caused
4254 - Added a test for bug 141.
4264 - Differences document updates for bind 9.3.2 and nsd 3.
4267 - version number to 3.0.0 in preparation for release.
4271 - check for error in ftruncate call.
4281 - Added test for rollback of an IXFR transfer by xfrd.
4282 - Added test for reload timeout in xfrd, the reload does happen after
4294 - test for tcp underrun and overrun of the buffer.
4305 not in octets, but rfc specifies octets for unknown rrs.
4307 - added type NXT to the rr-test for weird RRs.
4310 - put -x option for nsd-patch in usage().
4319 so that chroot checks work for them.
4320 - updated tpkgs, they need to set relative paths now for difffile.
4325 debug messages. The standard NSD debug util is used, -F -1 -L 2 for
4328 - tpkgs for bug077 and bug107 were silently failing to test properly.
4331 - fixes for checkconf test, more portable.
4333 for multihomed servers you have to bind to each interface
4358 - Jakob Schlyter asked for building nsd3 in an obj dir, i.e.
4359 mkdir obj; cd obj; ../configure && make. Fixed up makefile for that.
4360 - and bug137.tpkg for separate obj dir building.
4369 - Region can be customised for detailed memory handling.
4377 so the regions alloced for tsig take up about 60 + 4*8 bytes.
4378 - new custom region for query region - to make chunksize larger
4379 there. The chunksize for the query region is important, if
4380 all allocations for a query fit in it, no mallocs are needed.
4385 IXFR queries not reach the handler in axfr.c for IXFR queries.
4393 - Test for remove domains with IXFR.
4394 - Fix for empty nonterminals and IXFR deletes.
4395 - Test for timeouts, including expiry, and expiry and zone updates.
4396 - Test for axfr refused authorisation.
4397 - Test for deadlock in ipc.
4404 - tentative change, that preserves ordering of rrtypes for a domain.
4405 - fix for serial rollover (old_serial + 2**31), now works, is seen
4426 - wireformat for IPSECKEY depends on the value of a rdata atom, added
4431 - max number of tries for nsd-notify is 15, so that the
4432 total time for sending is about 75 seconds.
4433 - forward port of fixes for bug 105 and 135 in nsdc.
4434 forward port of test for bug 105.
4448 and Makefile, so it works for users and for svn).
4453 - NSD for BIND users update.
4457 - doc/README updated for 3.0.
4463 - nsdc neater, checks for BLOCKED ips more strictly.
4467 line showing how to allow access for everyone to axfr.
4470 - Fixed read in server.c to be a blocking read for sure,
4476 - nsd-patch uses dnames to compare zone names (for trailing .).
4480 - Nicer check in autoconf for struct timespec type.
4488 - unit test for hex_pton.
4489 - added include stdlib, needed for free() on sunos4.
4492 - yy_set_bol() for old flex compat define.
4493 - compat implementation from openssh4.3p2 for
4514 definitions. Fixed code for some mixups on this.
4515 - Fixup cutest for dec alpha. Code, lowercase filename, %lf->%f.
4516 - cutest fixup uses (size_t) cast and %zx to print ptrs (for debug).
4517 - for SunOS4 configure detects ssize_t and struct timespec.
4518 - removed usage of fpos_t, instead using fseeko/ftello for 64bit.
4520 - added missing include from buffer.c (stdlib for free()).
4521 - defines for snprintf and vsnprintf in config.h if needed.
4523 - missing include from configparser, stdlib for atoi.
4533 - updated the tpkg/manual tests for NSD 3 config files.
4536 - nsec3 code will warn at prehash time for missing exact nsec3
4539 - removed for() look in CNAME processing, only first CNAME is
4541 - zonec will error on a zone with multiple CNAMEs for one name.
4560 - fixed bug where tsig keys are checked for twice, but not error_code.
4562 - added test tpkg for notifies from nsd master to nsd slave.
4570 - created doc subdirectory for documentation.
4575 - moved sizes of zone_name buffers to 3072 - for escaped names.
4587 - zonec will error on multiple DNAMEs for the same name.
4592 - after DNAME the closest_match is set correctly for another DNAME.
4594 - nsec3 checks if it is enabled for the zone for wildcards.
4595 - NSD will give referrals for zone cuts encountered after a CNAME
4601 - zonec checks for data below a DNAME, and will not create the db,
4604 - DNAME synthesis of CNAME records, including compression for cname.
4616 - added tpkg small test for DNAME.
4631 - xfrd check for failed updates. It compares the time it wrote the
4635 is running, or a crashed reload process, for example).
4645 - added tpkg tests for tsig.
4646 - tpkg test for nsd-xfer with TSIG from nsd.
4651 - redid some region work for tsig. Now has another temporary region
4652 for the context data. User is only aware of the region passed at
4653 start that exists for the lifetime of the struct.
4657 - tsig now keeps a max_digest_size for giving reserved space.
4659 - tsig signing works for all queries. SOA queries, ...
4661 that key for any query for any zone.
4662 Except for NOTIFY and AXFR queries; those are only allowed for
4672 - little readme blurb on xfrd state file for the operator.
4673 - put ipc code in its own file for ease of reading.
4678 - fixed reload sending; it checks for EAGAIN and EINTR.
4685 - nonblocking writes for server_main; this solved write-blocking race.
4700 - stack type (for the IPC buffer of zone update dirty). And unit test.
4703 - nonblocking writes for xfrd.
4709 - moved is_ok for zones to the zone_type in namedb, not in
4711 For zones that have no data, parent and children keep no state.
4714 - fixed up usage print for zonec to include -f option.
4716 - server no longer sends SOA INFO for master zones.
4720 - nsd.conf.sample shows defaults for ip4-only, ip6-only and debug-mode.
4728 - support for broken nsec3 chains (if the one with the SOA bit
4729 is complete, it is OK for there to be other nsec3 chains
4733 - Fix for finding bad zone when populating SOA info on start.
4744 for empty nonterminals in NSEC3.
4754 - reload process waits for the old server_main to exit to make
4763 - zone_is_ok kept in config section so that state for zones
4793 - xfrd tries servers 3 rounds, then waits for next retry.
4796 - off_t used for 64bit fileio.
4797 - searches for smallest unused part and sets diff_skip to that.
4798 - doc comment near the region_free_all for every query about
4803 - makedist.sh added manual pages for nsd-xfer nsd-patch.
4813 - Forward port fixes for nsd-xfer and nsd-notify
4818 - diff file format expanded for >64kb transfer support.
4819 - diff reader adjusted for >64kb.
4823 - updated nsd-checkconf for zone parse shell script support.
4830 - For the 05pre2 draft section 5.4.8.1. QTYPE is NSEC3, only NSEC3
4852 affected, and will give activity bursts (on startup for example).
4862 NSEC3 responses only happen for nsd compiled with --enable-nsec3
4863 and for zones where an NSEC3 with the SOA bit set exists.
4864 - added prehash pointer to ds parent side cover for opt out.
4871 - unittest start for iterated hash.
4872 - fixed for ctrlc in debug mode.
4876 - base32 printed in lowercase (canonical format for DNS).
4889 for end of buffer. Also parser checks for '-' salt.
4891 strtol used for iterations is base 10.
4895 - Fixed check for SOA IN, bad ntohs in the check.
4896 - minimum timeout also enforced for very low expire times.
4898 for FreeBSD.
4902 for nsd to make the pid file, and it wait up to 10x5 secs for
4914 - xfrd keeps a next_master for a zone, and sets it after notify.
4919 - default names for diff file and xfrd state nicer.
4921 - fixed up race conditions in test script for kill nsd
4922 wait for pid file creation by nsd, and grep -v grep in check.
4931 - added lowerbound for retry timeout.
4933 for tcp connections must be empty if the counter is below max.
4939 - update zone for NS, RRSIG also if multiple RRs in the rrset.
4943 so no alloc region, destroy region for every deleted RR.
4944 - difffile: for IXFR: do not delete final SOA RR.
4951 xfrd pipe is small, main process closes its end, and hopes for
4955 for the retry after expire until it will detect the expiredness.
4962 interrupt a tcp-timer for a fresh retry with the next master.
4963 - put null in buffer for xfrd read state.
4969 - server_main first checks for terminated children, then select().
4974 - check for serial existence in xfrd_handle_incoming_soa.
4977 - log msg for udp socket() error.
4993 use provide-xfr: statements for your zone in the config file.
4994 updated README for this.
4995 - updated tpkg tests for axfr to use provide-xfr: 127.0.0.1 NOKEY
5001 - nsd checks acl for incoming notifies and replies
5005 - fixed sz for SOA_INFO ipc, which was too small.
5011 - configure checks for strptime in include files.
5014 - added a check for EINVAL in dispatch - will abort
5018 - \r for config lexer. (similar changes to zonelexer).
5021 The same logic for %o, %d %x would hold for %u I think.
5034 - forward port fixes for zone compiler and \r. svn:1926-1927
5047 - redesigned xfrd_tcp_read to use the same code for ipc read.
5078 - bit more verbose in error message for bad diff file.
5094 - sets read/write event flags for tcp fd right.
5108 - Fixed printfs for size_t warnings on Mac OsX.
5114 * Wouter: zonec now takes -C for 'no config file' option.
5115 * Wouter: updated configyyrename.h for bison 1.875d on sparc.
5125 - option for difffile: and xfrdfile: config lines.
5159 - new calling syntax for zonec and nsd, because of new config file.
5161 - added unit test for options.c - for acl tests.
5172 - Will check for blocked addresses in outgoing acls. Also ranges.
5176 - updated nsd.conf.5 manpage for @port syntax.
5179 - put option to configure for CONFIG_FILE nsd.conf location.
5188 - Added compute_crc in util.h and unit tests for it.
5196 - updated tpkg213 which compares md5 on a zonefile for new format.
5203 * Miek: unit test tpkg for cutest.
5214 * Wouter: Fixed server_child would wait for two kill signals before quit.
5215 * Miek: don't check for port==0 pkt, just try to send them.
5220 - Added unit tests for rbtree. Extensive testing of all functions.
5222 - configure tests for CUnit(optional lib for unit tests). Makefile
5228 - Added check in configure for compiler flags. Used for -Wextra.
5229 - Added check in configure for va_list definition conflict between
5249 * Wouter: Checked configure on sparc5(solaris). Added check for
5250 ctime_r in time.h (for tsig.c). This conf also works on freebsd/linux.
5251 * Wouter: Updated dependencies in makefile for plugin headers.
5263 important for nsd. The signals are handled in turn by the run loop.
5276 Also it now defines fallback values for #defines in syslog h.
5286 adjusted to test for this and enable _XOPEN_SOURCE=600 to get it.
5301 * Wouter: fixed configure check for pselect on freebsd.
5309 Also the parent now waits for children. Parent restarts them.
5313 Included timeout to check for terminated processes.
5319 those files don't have any changes, except for dns.{ch} for the
5322 for the database changes.