1 27 November 2025: Jannik 2 - Merge #444: Refactor RDATA storage to reduce memory footprint 3 4 12 November 2025: Willem 5 - Merge #466: Do not delete nodes from non-existent zone's NSEC3 hash 6 trees 7 8 6 November 2025: Wouter 9 - Update acx_nlnetlabs.m4 to version 51, with nonstring unknown 10 attribute warning fix. 11 12 3 November 2025: Wouter 13 - For #137: Change default for the listen TCP backlog to -1 on 14 BSDs and Linux. 15 16 2 October 2025: Wouter 17 - Fix #137: Adds tcp-listen-queue: number config option to set 18 the TCP backlog. 19 20 29 September 2025: Wouter 21 - Update in acx_nlnetlabs.m4 to version 49. 22 - Update in acx_nlnetlabs.m4 to version 50, with cache value for 23 malloc function check. 24 25 17 September 2025: Wouter 26 - Fix to log more details when send-buffer-size or receive-buffer-size 27 is not granted, on verbosity level 2. 28 29 15 September 2025: Jannik 30 - Fix confusing report for default send and receive buffer-size by 31 nsd-checkconf 32 33 11 September 2025: Jannik 34 - Merge #460: Add XDP_OBJ fixing link errors for XDP. 35 - Fix XDP build error with --enable-checking 36 - Resolve warnings about mixed declaration and code and unused variable 37 38 11 September 2025: Wouter 39 - Merge #459: Check for libfstrm version >= 0.4. 40 - For #459: Add configure check for fstrm_tcp_writer_options_init 41 in addition to the check for fstrm_iothr_init. 42 43 8 September 2025: Wouter 44 - Fix empty debug statement body in catalog consumer zone process. 45 46 03 September 2025: Jannik 47 - Fix zonestatfd check 48 - The main branch continues with version 4.13.1 in development. 49 50 3 September 2025: Wouter 51 - Set code repository configure for version 4.13.1 in development. 52 53 18 August 2025: Willem 54 - Merge #455: --with-dbdir option for configure to set the base 55 directory for the xfrd zone timer state file, the zone list file 56 and the cookie secrets file. Thanks Simon Josefsson. 57 58 18 August 2025: Willem 59 - Merge #456: Spelling fixes in metrics.c. Thanks Simon Josefsson. 60 61 05 August 2025: Jannik 62 - Merge #425: Add experimental XDP (AF_XDP) support for UDP traffic 63 64 5 August 2025: Wouter 65 - Merge #454 from jaredmauch: handle rare case but seen in 66 production where data->query is NULL. 67 - Fix code analyzer warning, and bail out of handle_tcp_writing 68 and handle_tls_writing early when data->query is NULL. 69 70 18 July 2025: Wouter 71 - Merge #449: Add useful logging for XoT transfers. 72 73 17 July 2025: Wouter 74 - Disable TLSv1.2 if TLSv1.3 is available. 75 76 9 July 2025: Wouter 77 - Update simdzone with support for --enable-pie. 78 79 8 July 2025: Wouter 80 - Merge #447: Minimize disruptions on reconfig. 81 - For #447: Updated simdzone to latest commit. With the padding 82 test changes. 83 - For #447: use need_to_send_reload to detect if a reload is issued. 84 - For #447: acl_list_equal already tests for TSIG key changes, so 85 removed the duplicate checks. 86 - For #447: log crypto error with the SSL_write error. 87 88 7 July 2025: Willem 89 - Merge #448: Report larger transfer sizes correctly, also on 32bit 90 systems. Thanks to Niek Willems for reporting. 91 92 4 July 2025: Wouter 93 - Fix #446 nsd_size_db_in_mem_bytes (size.db.mem) metric not 94 updated on reload. 95 - For #446, remove unused edit. 96 97 13 June 2025: Wouter 98 - Merge #445: contrib/nsd.openrc.in: use supervise-daemon and 99 add `need net`. 100 101 11 June 2025: Wouter 102 - Fix bitwise operators in conditional expressions with parentheses. 103 - Fix conditional expressions with parentheses for bitwise and. 104 105 22 May 2025: Wouter 106 - make depend. 107 108 19 May 2025: Wouter 109 - Fix to remove shell assignment operator from Makefile for DATE. 110 111 13 May 2025: Wouter 112 - Change default for send-buffer-size to 4m, to mitigate a 113 cross-layer issue where the UDP socket send buffers are 114 exhausted waiting for ARP/NDP resolution. Thanks to Reflyable 115 for the report. 116 117 6 May 2025: Wouter 118 - Fix #441: SystemD script for NSD prevents using chroot. 119 - Fix to add checks for compression pointers and too long dnames in 120 internal dname routines, dname_make and ixfr dname_length. 121 122 30 April 2025: Wouter 123 - Fix to provide doc for --enable-systemd. 124 - Fix to remove debug printout for configure dnstap header. 125 126 29 April 2025: Wouter 127 - The --enable-bind8-stats feature, was already enabled by default, 128 is described as enabled by default in usage. 129 - Fix contrib/nsd.spec to omit configure flags that are default or 130 that do not exist. 131 - The --enable-zone-stats feature is enabled by default. It can be 132 turned on with config like `zonestats: "%s"`. 133 - Fix to remove mention of obsolete root-server option. 134 - The --enable-ratelimit feature is enabled by default. The 135 ratelimit value is off by default. It can be turned on with 136 config like `rrl-ratelimit: 200`. 137 - Fix mention of draft-rrtypes and root-server configure options. 138 - The --enable-dnstap feature is enabled by default. If fstrm-devel 139 or protobuf-c are not found by configure it prints an error. 140 It can be turned on with config like `dnstap-enable: yes`. 141 - Fix ci workflow for enable dnstap. 142 - Fix to remove use of sprintf from metrics. 143 - Fix for fstrm and protobuf-c for ci workflow coverity-scan. 144 - Fix for parallel build of dnstap protoc-c output. 145 - Fix to remove unneeded mkdir from Makefile. 146 - Fix dnstap to use protoc and keep dnstap_config.h unchanged if 147 possible. 148 149 25 April 2025: Yorgos 150 - Prometheus metrics tests require --enable-zone-stats. 151 - Use '(all)' and '(none)' for the socket server affinity 152 log output instead of '*' and '-'. 153 - Add unit test for socket server affinity log output. 154 - Move xfrd-tcp unit test to its own file. 155 156 25 April 2025: Wouter 157 - Fix punctuation of nsd -h output for the -a option. 158 - Fix checkconf unit test for when metrics are not enabled. 159 - make depend 160 161 24 April 2025: Jannik 162 - The main branch continues with version 4.12.1 in development. 163 164 17 April 2025: Wouter 165 - Add autoconf files to gitignore. 166 167 8 April 2025: Wouter 168 - Fix nsd-checkzone ixfr create cleanup on exit. 169 170 4 April 2025: Wouter 171 - Fix to update common.sh for speed of kill_pid. 172 173 1 April 2025: Wouter 174 - Fix escape more characters when printing an RR type with an 175 unquoted string. 176 - Fix memory leak in the process of addzone. 177 178 27 March 2025: Wouter 179 - Fix test checkconf for metrics options. 180 - Updated simdzone to include fixes for NSAP-PTR, LOC, 181 uninitialized reads, and comment nit. 182 - Fix #436: Fix print of RR type NSAP-PTR. 183 - Fix unit test call to zone_parse_string and initialize padding. 184 185 26 March 2025: Wouter 186 - Fix multiple zone transfers in one reload so that xfrd does not 187 check the update as failed and restart the transfer. 188 - Test for the multiple transfer failure, xfr_over_notify. 189 - Fix read of ixfr file with rdata subdomain. 190 - Test for the ixfr rdata subdomain, ixfrout_deldomain. 191 - Fix note in ixfrout_deldomain test. 192 193 25 March 2025: Wouter 194 - Fix to please sanitizer for ixfr store of data in cancelled state. 195 196 24 March 2025: Jannik 197 - Merge #429: Add prometheus metrics 198 199 14 March 2025: Wouter 200 - Fix log print assert in server sockets for printing '-' empty. 201 - Fix notify_fmt test for xfrd file location. 202 - Fix sanitizer warnings in read_uint32. 203 - Fix sanitizer warning in tsig write of zero length mac and otherdata. 204 205 13 March 2025: Wouter 206 - Fix ixfr file read to manage numlist in temp domains. 207 - Fix nsd-mem to clean ixfr storage. 208 209 12 March 2025: Wouter 210 - Fix ixfr read routine for use after the temp region is freed of rr. 211 212 11 March 2025: Wouter 213 - Fix in nsd-mem for a zone with ixfr data. 214 215 3 March 2025: Wouter 216 - Fix that nsec3 prehash after a full transfer can create the nsec3 217 zone trees if they are needed. 218 219 19 February 2025: Wouter 220 - Fix for #430: Confusing documentation: word "outgoing". Add wording 221 to tcp-count, xfrd-tcp-max, xfrd-tcp-pipeline options. 222 223 18 February 2025: Wouter 224 - Fix for #430: Confusing documentation: word "outgoing". 225 226 11 February 2025: Willem 227 - Merge #420: Zones get state "old-serial" with 228 `nsd-control zonestatus` when the served serial is older than 229 the one received by the transfer daemon. 230 231 23 January 2025: Willem 232 - Merge #418: Support for DSYNC, EID, NIMLOC, SINK, TALINK, DOA, 233 AMTRELAY and IPN resource record types. 234 235 22 January 2025: Wouter 236 - Fix #426: nsd crashes with patterns in config_apply_pattern. 237 238 20 January 2025: Willem 239 - code repository continues with 4.11.2 under development. 240 - Fix re-enable to configure dns-cookies from config file, which 241 was accidentally removed with the 4.11.1 release. 242 243 19 January 2025: Willem 244 - NSD 4.11.1 emergency quick-fix release 245 246 17 January 2025: Willem 247 - Fix #424: Stalled updates after corrupt transfer. 248 249 15 January 2025: Wouter 250 - Fix whitespace in comment. 251 252 7 January 2025: Willem 253 - Fix #421: old-main can quit before the reload process received 254 from old-main that it is done on the reload_listener pipe. 255 Thanks Otto Retter. 256 257 3 January 2025: Willem 258 - Fix #414: XoT interoperability with BIND and Knot 259 260 23 December 2024: Willem 261 - Fix #415: Fix out of tree builds. Thanks Florian Obser (@fobser). 262 263 5 December 2024: Willem 264 - The tag for the 4.11.0rc1 release became the release 4.11.0, 265 on 12 December 2024, the code repository continues with 4.11.1 under 266 development. 267 268 4 December 2024: Willem 269 - Merge #407: Better balanced verbosity levels for logging. 270 271 26 November 2024: Jeroen 272 - Fix #405: Fix typo in documentation. Thanks to @uplime for reporting. 273 274 19 November 2024: Willem 275 - Merge #409: Writing of NSAP-PTR, GPOS and HIP RR types 276 277 16 November 2024: Willem 278 - Merge #408: NINFO, RKEY, RESINFO, WALLET, CLA and TA RR types 279 280 12 November 2024: Willem 281 - Merge #406: ohttp and tls-supported-groups SvcParam support 282 283 7 November 2024: Willem 284 - Merge #398: RFC 9660 The DNS Zone Version (ZONEVERSION) Option 285 286 4 November 2024: Wouter 287 - Fix Makefile for parallel build failure around bison rule. 288 289 28 October 2024: Jeroen 290 - Merge #404: Introducing Sphinx substitution in code blocks. 291 As well as other fixes with Sphinx build. 292 - Merge #391: Update Copyright lines in help output 293 - Merge #395: Explain zonefile example better 294 - Merge #394: Fix doc path (fixes "Edit on GitHub" button in the docs) 295 - Many thanks to Melroy van den Berg for the documentation improvements 296 and fixes in PRs #391, #394, #395 and #404 297 298 28 October 2024: Jeroen 299 - Fix #396: Treat a mismatch in RRset TTLs as a warning. 300 301 24 October 2024: Wouter 302 - Fix #392: Inconsistent documentation about control-interface. 303 - Merge #395: Explain the zonefile example better. 304 - Merge #394: Fix the path to use doc/manual/. 305 - Fix analyzer issue in do_print_cookie_secrets to check for failure. 306 307 23 October 2024: Willem 308 - Fix #196 and merge #378: Updated cookie secrets management. 309 The default cookie secret file location can be set at compile time 310 with the --with-cookiesecretsfile=path option to configure. The 311 default location is changed to {dbdir}/cookiesecrets.txt. The 312 previous default location will be checked at startup when there is 313 no cookie secrets file at the new default location. 314 A staging cookie can now also be configured in the configuration 315 file and secrets configured in the configuration file now take 316 precedence over those read from file. 317 All DNS related setting in the configuration file will be reevaluated 318 and effectuated after nsd-control reconfig. 319 - Merge #390: Apply non-xfr tasks before xfr tasks. 320 This fixes an issue where non-xfr tasks are lost when they are 321 batch processed together with non-xfr tasks. 322 This merge also changes that notifies are passed on from the serve 323 processes to the xfrd directly instead of via main. This was 324 necessary to allow applying the non-xfr tasks without forking a 325 backup-main for the sole purpose of forwarding notifies. 326 327 23 October 2024: Wouter 328 - Merge #391: Update copyright lines (in version output). 329 330 18 October 2024: Wouter 331 - Fix ci to update macos-12 to the macos-15 runner image. 332 333 25 September 2024: Wouter 334 - Fix #383: log timestamps in ISO8601 format with timezone. 335 This adds the option `log-time-iso: yes` that logs in ISO8601 336 format. 337 - Fix to initialize log_time_iso value in options. 338 339 23 August 2024: Jeroen 340 - Fix #57: Track $INCLUDEs in zone files 341 342 23 August 2024: Wouter 343 - Merge #376: Point the user towards tcpdump for logging individual 344 queries. 345 346 22 August 2024: Wouter 347 - Add cross platform freebsd, openbsd and netbsd to github ci. 348 - Update simdzone to include fix for netbsd double bswap declarations, 349 and also semantic checks for DS and ZONEMD. And CFLAGS has -march 350 prepended to fix detection. 351 352 19 August 2024: Wouter 353 - Fix title underline and declaration after statement warnings. 354 355 15 August 2024: Jeroen 356 - Support reloading configuration on SIGHUP. 357 358 2 August 2024: Jeroen 359 - Update simdzone to fix detection of AVX2 support. 360 361 31 July 2024: Jeroen 362 - Merge #367: Specify protocols used in NOTIFY. 363 - Merge #368: Various manpage fixes. 364 365 30 July 2024: Jeroen 366 - Merge #366: Be consistent in naming primary/secondary zones. 367 368 25 July 2024: Jeroen 369 - Merge #358 from @jas4711: Fix Hurd build error due to log_Err. 370 371 23 July 2024: Jeroen 372 - Update simdzone. 373 - Tag for 4.10.1rc2. 374 375 23 July 2024: Jeroen 376 - Update simdzone. 377 - Tag for 4.10.1rc1. 378 379 22 July 2024: Jeroen 380 - Initialize tls_auth_port and tls_auth_xfr_only options. 381 382 22 July 2024: Wouter 383 - Fix link of xfr-inspect for libssl dependency. 384 385 19 July 2024: Willem 386 - Do not log ACL mismatch on followed CNAMEs. 387 388 18 July 2024: Jeroen 389 - Fix propagation of Makefile targets to simdzone. 390 391 18 July 2024: Wouter 392 - Merge #337 from bilias: Mutual TLS-AUTH. 393 394 16 July 2024: Wouter 395 - Merge #352 from orlitzky: contrib: add OpenRC service script, config 396 file, and tmpfiles entry. 397 398 12 July 2024: Jeroen 399 - Use MAKE variable rather than make command. 400 On platforms where make is not the same make executing the Makefile, 401 build issues might arise. The MAKE variable expands to the command 402 used on the command line. 403 404 11 July 2024: Jeroen 405 - Serialize WKS RRs using numeric values rather than names. 406 simdzone does not use getprotobyname and getservbyname. Secondary 407 zones received via IXFR/AXFR might fail to load because WKS RRs 408 used "unsupported" protocols or services. 409 410 8 July 2024: Wouter 411 - Merge #349: log file name before loading. 412 413 5 July 2024: Wouter 414 - Fix #347: Adjust verbosity for TLS (+TCP) to be 5. 415 - Merge #348: Move TLS logging to verbosity level 5. 416 - For #347: Also adjust verbosity of log message for remaining TCP 417 connections. 418 419 27 June 2024: Wouter 420 - Fix #344: Update simdzone. 421 422 26 June 2024: Wouter 423 - Fix test script from making spurious output. 424 - Fix cpu_affinity and socket_partitioning tests for --enable-log-role. 425 426 24 June 2024: Wouter 427 - Add unit test for #343 relative include in zone file. 428 429 20 June 2024: Wouter 430 - Merge #341: Fix allow-query wording in nsd.conf.5.in. 431 432 17 June 2024: Wouter 433 - Fix for OpenSSL 3.0 deprecated functions. 434 435 11 June 2024: Wouter 436 - Fix #334: RFC8482 behavior documentation. 437 438 23 May 2024: Wouter 439 - Fix for #317, document more text on pidfile permissions. 440 441 29 April 2024: Wouter 442 - Fix incorrect punctuation of log messages. 443 444 25 April 2024: Wouter 445 - The tag for the 4.10.0rc1 release became the release 4.10.0, 446 on 13 June 2024, the code repository continues with 4.10.1 under 447 development. The release contains the additional fix to change 448 simdzone version. 449 - Bump simdzone to include minor fixes. This is included in 4.10.0. 450 451 25 April 2024: Jeroen 452 - Bump simdzone to fix OpenBSD build issues. 453 - Tag for 4.10.0rc1. 454 455 24 April 2024: Wouter 456 - Fix that the reload handler for sigchild uses signal_add, and 457 also that the signal handler is restored when done. 458 - Fix that when server verify is done it resets the sigchild handler. 459 - Fix makedist.sh for simdzone inclusion. 460 - Fix makedist.sh to remove simdzone git tracking information and 461 scripting temporaries from tarball. 462 - Fix error output of makedist.sh. 463 464 23 April 2024: Wouter 465 - Fix #329: TCP accept queues number. 466 467 22 April 2024: Jeroen 468 - Use simdzone version with name parser fix. 469 470 16 April 2024: Jeroen 471 - Replace Flex+Bison based zone parser with simdzone. 472 473 15 April 2024: Wouter 474 - Unit test for dname subdomain test used by xfrd-tcp.c. 475 476 9 April 2024: Wouter 477 - Fix IXFR requests upstream for zones with a long name. Thanks for 478 the report to Yuuki Wakisaka from Internet Initiative Japan Inc. 479 480 8 April 2024: Wouter 481 - For #317: Modify nsd service script to stop NSD from creating a 482 pid file that systemd is not using. 483 - Fix #324: Clarify the purpose of contrib/bug390.patch. 484 485 4 April 2024: Jeroen 486 - Use rooted temporary path in makedist.sh. 487 - Tag for 4.9.1. 488 489 3 April 2024: Jeroen 490 - Replace multiple strcat and strcpy by snprintf. 491 - Tag for 4.9.0. 492 493 27 March 2024: Wouter 494 - Fix that when the server truncates the pidfile, it does not follow 495 symbolic links. 496 - Fix #317: nsd should not chown its PID file. 497 498 26 March 2024: Jeroen 499 - Test if debug is available in do-tests. 500 - Enforce timeout from NSD in ixfr_gone test. 501 - Update expressions in ixfr_and_restart test. 502 - Make algorithm explicit in control-repattern test. 503 - Switch algorithm to hmac-256 for testplan_mess test. 504 - Tag for 4.9.0rc1. 505 506 25 March 2024: Jeroen 507 - Fix timing sensitivity in ixfr_outsync test. 508 509 22 March 2024: Jeroen 510 - Set up doc/RELNOTES for upcoming release. 511 512 26 February 2024: Willem 513 - Merge #316: Fix to reap defunct children by the reload process that 514 emerged when some serve child processes were still serving TCP 515 request while the others had already quit, while the reload process 516 was waiting for the signal from the backup/old main process that all 517 children exited. 518 - Fix (also from Merge #316) to reap exited children more frequently 519 from server main loop for processes that exited during reload, but 520 missed the initial reaping at start of the main loop because they 521 took somewhat longer to exit. 522 523 16 February 2024: Wouter 524 - Fix compile with memclean for xfrd nsd.db close. 525 - In xfrd del secondary zone, the timer could perhaps have 526 event_added, and if so, it would not be event_del if a tcp connection 527 is active at the time. This could cause the libevent event lists 528 to fail. Also fix to make sure to set event_added for the 529 nsd-control ssl nonblocking handshake and check event_added there 530 too, for extra certainty. 531 532 15 February 2024: Willem 533 - Merge #304: Support for Catalog zones version "2" as specified in 534 RFC 9432. Both the consumer as well as the producer role are 535 implemented, but only a single catalog consumer zone is allowed. 536 The "coo" property, only relevant with multiple catalog consumer, 537 is therefore not supported. The "group" property is supported. 538 Have a look at the nsd.conf man page for details on how to 539 configure and use catalog zones. 540 541 12 February 2024: Willem 542 - Allow SOA apex queries to otherwise with allow-query protected zones 543 for clients matching a provide-xfr rule, because clients that are 544 allowed to transfer the zone need to be able to query SOA at the 545 apex preceding the actual transfer. 546 547 6 February 2024: Wouter 548 - Fix #313: nsd 4.8 stats with implausible spikes. 549 550 16 January 2024: Wouter 551 - Move acx_nlnetlabs.m4 to version 48, with ssp and getaddrinfo 552 include check. 553 554 14 January 2024: Wouter 555 - Move acx_nlnetlabs.m4 to version 47, with crypt32 check. 556 557 8 December 2023: Wouter 558 - Merge #309: More RFC 8499 compliance. 559 - Fix #310: NSD stats contain the terms "master" and "slave". 560 - Fix control-reconfig-xfrd test for zonestatus primary that is 561 printed by nsd-control zonestatus. 562 563 7 December 2023: Wouter 564 - Merge #307 from anandb-ripencc: Many improvements to the nsd.conf 565 man page. 566 - Fix #308: Deprecate "multi-master-check" in favour of 567 "multi-primary-check". 568 569 6 December 2023: Wouter 570 - Fix to sync the tests script file common.sh. 571 - Update test script file common.sh. 572 - Fix #306: Missing AC_SUBST(dbdir) breaks installation with 4.8.0. 573 - Fix for #306: Create directory for xfrd.state and zone.list files 574 in make install. 575 576 29 November 2023: Wouter 577 - Tag for 4.8.0rc1. This became 4.8.0 release on 6 December 2023. 578 The repository continues with version 4.8.1 under development. 579 580 28 November 2023: Wouter 581 - Set up doc/RELNOTES for upcoming release. 582 - Fix unit test kill_from_pidfile function for nonexistent files 583 because the argument is evaluated before the test expression. 584 - Fix rr-test to also convert the contents of the just written output 585 file. 586 - Fix test set to remove -f nsd.db and rm nsd.db commands. 587 - Fix test set to remove difffile option. 588 589 27 November 2023: Jeroen 590 - Fix #14: Set timeout to 3s when servicing remaining TCP connections. 591 - Fix: Always instate write handler after reading queries from TCP. 592 - Answer first query on connections accepted just before reload. 593 594 27 November 2023: Wouter 595 - Merge #305: faster stats. Statistics can be gathered while a reload 596 is in progress. 597 598 27 November 2023: Willem 599 - Merge #302: Test package fixes. Correct Auxfiles, kill_from_pidfile 600 function and fix drop_updates, rr-test and xfr_update tests. 601 602 1 November 2023: Jeroen 603 - Remove on-disk database. 604 605 31 October 2023: Wouter 606 - Merge #301: improve the logging of ixfr fallbacks to axfr. 607 608 30 October 2023: Jeroen 609 - Fix processing of consolidated IXFRs. 610 611 30 October 2023: Wouter 612 - Fix for interprocess communication to set quit sync command from 613 main process explicitly. 614 615 3 October 2023: Wouter 616 - Merge #281: Proxy protocol. An implementation of PROXYv2 for NSD. 617 It can be configured with proxy-protocol-port: portnum with the 618 port number of the interface on which proxy traffic is handled. 619 The interface can support proxy traffic for UDP, TCP and TLS. 620 621 21 September 2023: Wouter 622 - Merge #295: Update e-mail addresses, add ref to support contracts 623 624 31 August 2023: Wouter 625 - Fix autoconf 2.69 warnings in configure. 626 627 14 July 2023: Wouter 628 - Merge #287: Update nsd.conf.5.in. 629 630 11 July 2023: Wouter 631 - Fix unused variable warning in unit test of udb. 632 633 22 June 2023: Wouter 634 - Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available on 635 Mac/Darwin. 636 637 7 June 2023: Wouter 638 - Merge #282: Improve nsd.conf man page. 639 - Fix unused but set variable warning. 640 - Fix #283: Compile failure in remote.c when --disable-bind8-stats 641 and --without-ssl are specified. 642 643 31 May 2023: Wouter 644 - Add missing items to doc/RELNOTES. 645 - Tag for 4.7.0rc1. It became release 4.7.0 on 7 june 2023. The code 646 repository continues with 4.7.1. 647 648 30 May 2023: Jeroen 649 - Fix #240: Prefix messages originating from verifier. 650 - Fix #275: Drop unnecessary root server checks. 651 652 30 May 2023: Wouter 653 - Next version is 4.7.0, instead of 4.6.2, because of the added 654 features, like TLS for DNSTAP. 655 - Fix unused variable warning in unit test, from clang compile. 656 657 24 May 2023: Wouter 658 - For #279: Note that autoreconf -fi creates the configure script 659 and also the needed auxiliary files, for autoconf 2.69 and 2.71. 660 661 4 May 2023: Wouter 662 - Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h. 663 664 1 May 2023: Wouter 665 - make depend. 666 - Fix for build to run flex and bison before compiling code that needs 667 the headers. 668 669 13 April 2023: Wouter 670 - Fix cirrus script for submit to coverity scan to libtoolize 671 the configure script components config.guess and config.sub. 672 - Fix readme status badge links. 673 674 28 March 2023: Wouter 675 - Fix #273: Large TXT record breaks AXFR. 676 - Fix ixfr create from adding too many record types. 677 678 16 March 2023: Wouter 679 - Fix include brackets for ssl.h include statements, instead of quotes. 680 - Fix static analyzer warning about nsd_event_method initialization. 681 682 15 March 2023: Wouter 683 - Dnstap tls code fixes. 684 685 14 March 2023: Wouter 686 - Fix dnstap to not check socket path when using IP address. 687 - dnstap over TLS, default enabled. Configured with the 688 options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle, 689 dnstap-tls-client-key-file and dnstap-tls-client-cert-file. 690 - Fix to compile without ssl with dnstap-tls code. 691 692 9 March 2023: Wouter 693 - Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333". 694 - Fix to clean more memory on exit of dnstap collector. 695 696 23 February 2023: Wouter 697 - Fix #270: reserved identifier violation. 698 699 20 February 2023: Wouter 700 - Merge #269 from Fale: Add systemd service unit. 701 702 16 February 2023: Wouter 703 - Fix #266: Fix build with --without-ssl. 704 - Fix #267: Allow unencrypted local operation of nsd-control. 705 - Fix for #267: neater variable definitions. 706 707 2 February 2023: Wouter 708 - Merge #265: Fix C99 compatibility issue. 709 710 30 January 2023: Wouter 711 - Merge #263: Add bash autocompletion script for nsd-control. 712 - Fix for #262: More error logging for SSL read failures for zone 713 transfers. 714 715 27 January 2023: Wouter 716 - Fix #262: Zone(s) not synchronizing properly via TLS. 717 - Fix ixfr_and_restart test to wait for processes to come to a stop. 718 719 26 January 2023: Wouter 720 - Fix configure for -Wstrict-prototypes. 721 722 10 November 2022: Wouter 723 - Tag for NSD 4.6.1, the repository continues with version 4.6.2. 724 - Fix #239: -Wincompatible-pointer-types warning in remote.c. 725 - Fix unit tests to succeed with --disable-bind8-stats. 726 727 1 November 2022: Wouter 728 - Fixup for non-trailing newline lexer change warnings. 729 - Update doc/RELNOTES for changes. 730 - Fix ixfr_gone unit test to not use system default zone list file. 731 - Fix credns tests for vm usage, and not use system default zone 732 list file. 733 - Fix verify tests to use more portable bash location in script. 734 - Fix verify_again test to use ipv4 address for test. 735 736 1 November 2022: Tom 737 - Add SVCB dohpath support 738 739 28 September 2022: Jeroen 740 - Set ALPN "dot" token during connection establishment as per RFC9103 741 section 7.1 (Thanks Cesar Kuroiwa). 742 743 21 September 2022: Tom 744 - Change zone parsing to accept non-trailing newline. 745 746 1 September 2022: Wouter 747 - Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work 748 on OpenBSD. 749 750 19 August 2022: Wouter 751 - Update cirrus build script for newer Ubuntu image, and FreeBSD 752 build with libtoolize to install auxiliary files. 753 - Update to clang 14 in cirrus build test on Ubuntu Jammy 22.04. 754 755 7 July 2022: Tom 756 - Fix #212: Change commandline control actions to always log. 757 758 1 July 2022: Wouter 759 - Fix static analyzer reports, fix wrong log print when skipping xfr, 760 fix to print error on pipe read fail, and assert an xfr is in 761 progress during packet checks. 762 763 23 June 2022: Wouter 764 - Tag for 4.6.0rc1. It became 4.6.0 on 30 June 2022, and it continues 765 with version 4.6.1. 766 767 17 June 2022: Wouter 768 - Fix compilation with libev, without event_base_loopbreak. 769 770 16 June 2022: Wouter 771 - Fix that the unit test verify_repat cleans up nsd on exit. 772 - Fix to remove ixfrcreate.c asserts about uint16 within limits 773 because of warnings from analyzers. 774 775 14 June 2022: Wouter 776 - Fix compilation without libevent and compilation of nsd-mem. 777 - Fix verify handler add of sigchld event for compilation without 778 libevent. 779 780 3 June 2022: Wouter 781 - Fix static analyzer reports on ixfrcreate temp file. 782 - Fixup wrong ixfrcreate fread return check. 783 784 13 May 2022: Wouter 785 - The code repo continues with version 4.5.1. 786 787 6 May 2022: Wouter 788 - Merge PR #209: IXFR out 789 This adds IXFR out functionality to NSD. NSD can copy IXFRs from 790 upstream to downstream clients, or create IXFRs from zonefiles. 791 The options store-ixfr: yes and create-ixfr: yes can be used to 792 turn this on. Default is turned off. The options ixfr-number and 793 ixfr-size can be used to tune the number of IXFR transfers and 794 total data size stored. This is configured per zone, the IXFRs 795 are served to the hosts that are allowed to perform zone transfers. 796 And if TSIG is configured, signed with the same key. The content 797 is stored to file if a zonefile is configured for the zone, in 798 the zonefile.ixfr and zonefile.ixfr.2, .. files. They contain 799 readable text format. The number of IXFRs is num.rixfr in 800 statistics output, also per zone if per zone statistics are enabled. 801 If offline, nsd-checkzone -i can create ixfr files. 802 NSD already supports requesting IXFRs, this addition allows NSD 803 to serve IXFR transfers to clients. 804 NSD stops responding with NOTIMPL to IXFR requests, also for zones 805 that do not have IXFR enabled. The clients gets a full zone reply 806 or a status reply if the serial is up to date. 807 - set version to 4.5.0 for feature change. 808 - Tag for 4.5.0rc1 release. It became the 4.5.0 release on 13 May 2022. 809 810 14 April 2022: Wouter 811 - Update cirrus script FreeBSD version. 812 813 25 March 2022: Wouter 814 - Fix spelling error in comment in svcbparam_lookup_key. 815 816 2 March 2022: Wouter 817 - Fix code analyzer zero divide warning. 818 - Fix code analyzer large value with assertion. 819 - Fix another code analyzer zero divide warning. 820 - Fix code analyzer warning about uninitialized temp storage in loop. 821 822 10 February 2022: Wouter 823 - Tag for 4.4.0rc1 release. This became 4.4.0 release on 17 Feb 2022, 824 the code repository continues with version 4.4.1. 825 826 9 February 2022: Wouter 827 - Fix unit tests for nds-control-setup exit code and the 828 xfrd-tcp-max default. 829 830 7 February 2022: Wouter 831 - Merge #207 Sync nsd-control-setup with unbound-control-setup to 832 generate certificates with SANs. 833 834 28 January 2022: Wouter 835 - Fix #206: build with --without-ssl fails. 836 837 27 January 2022: Wouter 838 - current code branch continues as version 4.4.0, because of added 839 feature. 840 841 26 January 2022: Wouter 842 - Merge #193: Lower memory usage of the XFRD process by default. 843 Instead of preallocating all elements, they are allocated when used. 844 There are options for managing the memory usage, defaults are the 845 same as before. xfrd-tcp-max sets the number of sockets for tcp 846 connections that xfrd can make to download zone contents. And 847 xfrd-tcp-pipeline the number of simultaneous transfers over the 848 same connection. 849 850 12 January 2022: Wouter 851 - Fix to document nsd-checkzone -p in the man page for nsd-checkzone. 852 853 7 January 2022: Wouter 854 - Fix to change file mode before changing file owner for the 855 nsd-control unix socket file. 856 857 3 January 2022: Wouter 858 - Merge #204 from jonathangray: correct some spelling mistakes. 859 860 15 December 2021: Wouter 861 - Fix #200: nsd-checkzone succeeds even with incorrect serial in SOA 862 record. 863 864 2 December 2021: Wouter 865 - Fix socket_partitioning unit test for FreeBSD. 866 - Fix SVCB test to work around older dig with drill. 867 - Fix unit test to not syslog setlogin failures. 868 869 1 December 2021: Wouter 870 - Set up for branch for 4.3.9 release. 871 This became release 4.3.9 on 9 Dec 2021 and included the changes 872 until the SVCB fix on 2 dec 2021, but not the setlogin fix. 873 The main branch continues as 4.3.10. 874 - Fix unit tests for new answer-cookie default. 875 876 30 November 2021: Wouter 877 - Fix to remove git tracking and ci information from release tarballs. 878 879 3 November 2021: Wouter 880 - Fix #198: nsd-control reconfig core dump. 881 882 12 October 2021: Wouter 883 - Tag for 4.3.8 release, from 4.3.8rc2. The main branch continues 884 with version 4.3.9 in development. 885 886 7 October 2021: Wouter 887 - Set default for answer-cookie to no. Because in server deployments 888 with mixed server software, a default of yes causes issues. 889 - Tag for 4.3.8rc2, includes the new answer-cookie default. 890 891 4 October 2021: Wouter 892 - Tag for 4.3.8rc1. 893 894 29 September 2021: Wouter 895 - Fix unit tests for svcb and xot to not touch the default 896 zonelistfile. 897 - Fix unit test for xot tertiary config for zonelistfile default. 898 - Fix unit test for dns-cookies for no unshare, and allow-query 899 for no IPv6 loopback. 900 - Fix unit test allow query to check for IPv6. 901 902 22 September 2021: Wouter 903 - Fix #194: Incorrect NSEC3 response for SOA query below delegation 904 point. 905 906 13 September 2021: Wouter 907 - Fix compile failure with openssl 1.0.2. 908 909 3 September 2021: Wouter 910 - Fix not reachable annotation in radix_find_prefix_node. 911 912 31 August 2021: Willem 913 - Fix #191: dname_parse_wire() returns fqdn wireformat length. 914 915 26 August 2021: Wouter 916 - Fix #190: NSD returns 3 NSEC3 records for NODATA response. 917 918 23 August 2021: Wouter 919 - Fix #189: nsd 4.3.7 crash answer_delegation: Assertion 920 `query->delegation_rrset' failed. 921 922 17 August 2021: Wouter 923 - Fix #188: NSD fails to build against openssl 1.1 on CentOS 7. 924 - Fix sed script in ssldir split handling. 925 926 13 August 2021: Wouter 927 - Merge #187: Support using system-wide crypto policies. 928 929 10 August 2021: Wouter 930 - Merge #185 by cesarkuroiwa: Mutual TLS. 931 - Fixes for #185: Document client-cert, client-key and client-key-pw 932 in the man page. Fix yacc semicolon. Fix unused variable warning. 933 Use strlcpy instead of strncpy. Fix spelling error in error 934 printout. 935 936 2 August 2021: Wouter 937 - Quieter tpkg/do-tests shell script with -q flag. 938 - For #184: Note that all zones can be targeted by some nsd-control 939 commands in the man page. 940 941 30 July 2021: Wouter 942 - Move acx_nlnetlabs.m4 to version 41, with lib64 openssl dir check. 943 - Fix to compile with OpenSSL 3.0.0beta2. 944 - Fix configure detection of SSL_CTX_set_security_level. 945 - Fix deprecated functions use from openssl 3.0.0beta2. 946 947 23 July 2021: Wouter 948 - Fix free on shutdown of XoT SSL context. 949 950 22 July 2021: Wouter 951 - tag 4.3.7 release, with the fixes between rc1 and this release. 952 - main branch continues for 4.3.8. 953 954 20 July 2021: Wouter 955 - Fix typo in xfrd-tcp.c. 956 957 15 July 2021: Wouter 958 - tag for 4.3.7rc1. 959 - Fix compile of cookies on FreeBSD without IPv6. 960 - Fix for loop initial declaration for nonc99 compiler. 961 962 14 July 2021: Wouter 963 - Fix truncate test for EDNS COOKIE making one less RR is added. 964 - Attempt to fix gcc11 warning. 965 966 13 July 2021: Willem 967 - Fixes for child server processes getting out of sync with the 968 dnstap-collector process 969 970 13 July 2021: Willem 971 - Interoperable DNS Cookies support as per RFC7873 and RFC9018 972 973 9 July 2021: Willem 974 - Client side DNS Zone Transfer-over-TLS (XoT) support as per 975 draft-ietf-dprive-xfr-over-tls 976 977 29 June 2021: Willem 978 - Fix #168: Buffer overflow in the dname_to_string() function 979 980 14 June 2021: Wouter 981 - Update configure nonblocking test to use host. 982 983 25 May 2021: Wouter 984 - Fix #179: log notice and server-count. 985 986 21 May 2021: Wouter 987 - Test code has -q option for quiet output. 988 989 17 May 2021: Wouter 990 - Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure 991 script. 992 993 7 May 2021: Wouter 994 - Fix #176: please review Loglevel on missing zonefile. 995 996 6 May 2021: Wouter 997 - Fix #174: NS Records below delegation are not ignored (nsd-checkzone 998 also does not raise any issue). 999 1000 4 May 2021: Wouter 1001 - Fix SVCB sort call sizeof to be the size of the elements sorted. 1002 1003 29 April 2021: Tom 1004 - Implement Syntax of SVCB and HTTPS RR type as per draft-ietf-dnsop-svcb-https 1005 1006 13 April 2021: Wouter 1007 - Fix for #128: Skip over sendmmsg invalid argument when port is zero. 1008 - Fix #171: Invalid negative response (NSEC3) after IXFR. 1009 - Fix to make nsec3_chain_find_prev return NULL if one nsec3 left. 1010 - remove debug settings from unit test. 1011 1012 9 April 2021: Wouter 1013 - Fix for #170: Fix build warnings when IPv6 is disabled. 1014 - Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error. 1015 1016 30 March 2021: Wouter 1017 - Fix configure failure for enable systemd because of autoconf. 1018 - This became release 4.3.6, the repository continues for 4.3.7 1019 in development. 1020 1021 29 March 2021: Wouter 1022 - Note unlisted changes in RELNOTES and prepare for 4.3.6rc1 tag. 1023 1024 29 March 2021: Willem 1025 - Per zone Access Control List for queries 1026 with an allow-query: option. 1027 1028 24 March 2021: Wouter 1029 - Update acx_nlnetlabs.m4 to version 38, fix deprecation test. 1030 - Fix configure to use header checks with compile. 1031 - Fix warning about unused function log_addr. 1032 1033 18 March 2021: Tom 1034 - Add Extended DNS Errors RFC8914 1035 1036 15 March 2021: Wouter 1037 - Fix double config.h include in configlexer.c 1038 - Fix to remove configyyrename from makedist.sh and also 1039 update the flex and bison rules there to add the "c_" prefix. 1040 1041 13 March 2021: Willem 1042 - Fix #154: TXT with parentheses fails in 4.3.5. 1043 - Align parsing of TXT elements with how bind does it. 1044 - A -p option to nsd-checkzone to print a successfully read zone. 1045 1046 12 March 2021: Wouter 1047 - Fix that wildcard is printed as a star instead of escaped, in 1048 logs and in written zone files. 1049 - Fix unit test for wildcard printout change. 1050 1051 11 March 2021: Wouter 1052 - Fix #163: A TSIG noncompliance with RFC 2845. 1053 1054 9 March 2021: Willem 1055 - Enable configuring a control-interface by interface name. 1056 1057 19 February 2021: Wouter 1058 - Fix segfault on high verbosity for TLS channels with dnstap log 1059 local address. 1060 1061 18 February 2021: Wouter 1062 - Fix #146 with #147: DNSTAP log the local address of the server 1063 with the dnstap logs. 1064 1065 16 February 2021: Wouter 1066 - Man page documentation for dnstap options. 1067 1068 8 February 2021: Wouter 1069 - Fix AF_LOCAL compile error for Solaris. 1070 - Fix ifaddrs compile error for Solaris. 1071 - Fix ifaddrs.h compile error for Solaris. 1072 1073 4 February 2021: Wouter 1074 - Merge PR #153 from fobser: Repair -fno-common linker errors 1075 automatically. 1076 - Fix uninitialized access of log_buf in error printout on apply ixfr. 1077 1078 26 January 2021: Wouter 1079 - Prevent a few more yacc clashes. 1080 1081 19 January 2021: Wouter 1082 - Set branch ready for 4.3.5 release. Tag for 4.3.5rc1. 1083 Became the 4.3.5 release on 26 january 2021. This branch continues 1084 with 4.3.6 in development. 1085 1086 15 January 2021: Wouter 1087 - Fix #152: '*' in Rdata causes the return code to be NOERROR instead 1088 of NX. 1089 - Add config.guess and config.sub to .gitignore for autoconf 2.70. 1090 - Fix #150: TXT record validation difference with BIND. 1091 - Fixup TXT record validation fix for escaped quotes. 1092 - Fixup TXT record validation fix for escaped backslashes. 1093 - Fixup escape character parse for quoted strings. 1094 1095 11 January 2021: Wouter 1096 - Fix #151: DNAME not applied more than once to resolve the query. 1097 - Fix dname test for #148. 1098 - For #151: fix to not produce loops in output. 1099 1100 5 January 2021: Wouter 1101 - Fix configure.ac for autoconf 2.70. 1102 1103 4 January 2021: Wouter 1104 - Fix #148: CNAME need not be followed after a synthesized CNAME 1105 for a CNAME query. 1106 1107 11 December 2020: Wouter 1108 - Fix that nsd-control has timeout when connection is down. 1109 - remove windows socket ifdefs from nsd-control. 1110 1111 3 December 2020: Wouter 1112 - For #145: Fix that service of remaining TCP and TLS connections 1113 does not allow new queries to be made, the connection is closed. 1114 Only existing queries and zone transfers are answered, new ones 1115 are rejected by a close of the channel. 1116 1117 30 November 2020: Wouter 1118 - Fix #144: fix better. 1119 1120 27 November 2020: Wouter 1121 - Fix #144: Typo fix in nsd.conf.5.in. 1122 1123 26 November 2020: Wouter 1124 - Fix #143: xfrd no hysteresis with NOT IMPLEMENTED rcode. 1125 1126 24 November 2020: Wouter 1127 - Merge PR #141: ZONEMD RR type. 1128 - tag for 4.3.4rc1. This became 4.3.4 release on 1 dec 2020. 1129 The code repo continues for 4.3.5 in development. 1130 1131 23 November 2020: Wouter 1132 - Fix #142: NODATA answers missin SOA in authority section after 1133 CNAME chain. 1134 - Fix for CVE-2020-28935 : Fix that symlink does not interfere 1135 with chown of pidfile. 1136 - fix writepid for retvalue 0. 1137 1138 9 November 2020: Wouter 1139 - Fix #138: NSD returns non-EDNS answer when QUESTION is empty. 1140 - Fix to check nscount in previous fix for EDNS in formerr response 1141 when there is no question. 1142 1143 28 October 2020: Wouter 1144 - Remove unused init_cfg_parse routine from configlexer. 1145 1146 20 October 2020: Wouter 1147 - Fix to add missing closest encloser NSEC3 for wildcard nodata type 1148 DS answer. 1149 1150 14 October 2020: Wouter 1151 - Fix #134: IPV4_MINIMAL_RESPONSE_SIZE vs EDNS_MAX_MESSAGE_LEN. 1152 1153 13 October 2020: Wouter 1154 - Fix missing parenthesis on size of fix to init buffer. 1155 1156 12 October 2020: Wouter 1157 - Fix #127: two minor `-Wcast-qual` cleanups 1158 - Fix #126: minor header hygiene 1159 - Fix #125: include config.h in compat/setproctitle.c and fix prototype of `setproctitle` 1160 - Fix #133: fix 0-init of local ( stack ) buffer. 1161 1162 8 October 2020: Wouter 1163 - tag for 4.3.3 release 1164 - current repository contains 4.3.4 in development. 1165 - Fix #129: ambiguous use of errno, in log message if sendmmsg fails. 1166 - Fix #128: Fix that the invalid port number is logged for sendmmsg 1167 failed: Invalid argument. 1168 1169 1 October 2020: Wouter 1170 - tag for 4.3.3rc1 release. 1171 1172 30 September 2020: Wouter 1173 - Updated date in nsd -v output. 1174 - Fixup bug013_truncate, checkconf and cutest_qroot tests for new 1175 default EDNS size. 1176 1177 29 September 2020: Willem 1178 - Follow DNS flag day 2020 advice and 1179 set default EDNS message size to 1232. 1180 1181 4 September 2020: Wouter 1182 - Remove unused space from LIBS on link line. 1183 1184 3 September 2020: Wouter 1185 - Merge PR #121: Increase log level of recreated database from 1186 WARNING to ERR. 1187 1188 1 September 2020: Wouter 1189 - Fix #119: fix compile warnings from new gcc. 1190 - Fix #119: warn when trying to parse a directory. 1191 1192 27 August 2020: Wouter 1193 - Merged PR #113 with fixes. Instead of listing an IP-address to 1194 listen on, an interface name can be specified in nsd.conf, with 1195 ip-address: eth0. The IP-addresses for that interface are then used. 1196 1197 26 August 2020: Wouter 1198 - Add xstrdup for PR #113. 1199 - Tidy up code like in PR #113. 1200 - Import code from PR #113. 1201 - Fix for unknown EVP_MAC_CTX_free function in openssl 3.0.0 tsig code. 1202 1203 24 August 2020: Wouter 1204 - Fix that configure checks for EVP_sha256 to detect openssl, because 1205 HMAC_CTX_new is deprecated in 3.0.0. 1206 - Port TSIG code for openssl 3.0.0-alpha6. 1207 - Sync acx_nlnetlabs.m4 with the unbound repo. 1208 - Review fixes for tsig, defensive free and zero. 1209 1210 4 August 2020: Wouter 1211 - Merge #117: mini_event.h (4.3.2 and 4.3.1) on OpenBSD cannot find 1212 fd_set - patch. 1213 1214 23 July 2020: Wouter 1215 - Merge #115 from millert: Fix strlcpy() usage. From OpenBSD. 1216 1217 15 July 2020: Wouter 1218 - Fix make install with --with-pidfile="". 1219 1220 14 July 2020: Wouter 1221 - Tag for 4.3.2 release. Master branch contains the next version 1222 in development, 4.3.3. 1223 1224 7 July 2020: Wouter 1225 - Tag for 4.3.2rc1. 1226 1227 6 July 2020: Wouter 1228 - Fix compile includes for xfr-inspect tool on FreeBSD. 1229 - Add tpkg/run_vm.sh that runs test when in a virtual machine. 1230 - Merge #112 from jaredmauch: log old and new serials when NSD 1231 rejects an IXFR due to an old serial number. 1232 - Fix bug034 test for vm test changes. 1233 1234 22 June 2020: Wouter 1235 - Remove errno reset behaviour from sendmmsg and recvmmsg 1236 replacement functions. 1237 - Fix unit test for different nsd-control-setup -h exit code. 1238 1239 19 June 2020: Wouter 1240 - Merge #108 from Nomis: Make the max-retry-time description clearer. 1241 - Retry when udp send buffer is full to wait until buffer space is 1242 available. 1243 1244 18 June 2020: Wouter 1245 - Do not log EAGAIN errors for sendmmsg, to stop log spam on OpenBSD. 1246 1247 17 June 2020: Wouter 1248 - Fix #107: nsd -v shows configure line, openssl version and libevent version. 1249 1250 27 May 2020: Wouter 1251 - Fix unlink of pidfile warning if not possible due to permissions, 1252 nsd can display the message at high verbosity levels. 1253 - Update contrib/nsd.service for chown of nsd.log and /var/log in 1254 ReadWritePaths. 1255 - Removed contrib/nsd.service, example is too complicated and not 1256 useful. 1257 1258 15 May 2020: Wouter 1259 - Merge PR#102 from and0x000: add missing default in documentation 1260 for drop-updates. 1261 - Fix checkconf test for log-only-syslog option. 1262 1263 14 May 2020: Wouter 1264 - Document default value for tcp-timeout. 1265 1266 13 May 2020: Jeroen 1267 - Fix #99: Fix copying of socket properties with reuseport enabled. 1268 1269 24 April 2020: Wouter 1270 - Fix #97: EDNS unknown version: query not in response. 1271 1272 21 April 2020: Wouter 1273 - Fix #96: log-only-syslog: yes sets to only use syslog, fixes 1274 that the default configuration and systemd results in duplicate 1275 log messages. 1276 1277 20 April 2020: Wouter 1278 - Fix #95: Removed make test check because tpkg not included in 1279 release tarballs. 1280 - Fix unused parameter compile warnings. 1281 1282 16 April 2020: Wouter 1283 - Tag for 4.3.1 release and track 4.3.2 release in code repository. 1284 - note sha256 digest algo use in makedist.sh. 1285 - Fix for posix shell syntax for trap in nsd-control-setup. 1286 - Fix to omit the listen-on lines from log at startup, unless verbose. 1287 - Fix uninitialised values for bindtodevice option at startup with 1288 reuseport and multiple interfaces. 1289 1290 8 April 2020: Wouter 1291 - Tag for 4.3.1rc2. 1292 1293 7 April 2020: Wouter 1294 - Merge PR #91 by gearnode: nsd-control-setup recreate certificates. 1295 The '-r' option recreates certificates. Without it it creates them 1296 if they do not exist, and does not modify them otherwise. 1297 1298 6 April 2020: Wouter 1299 - Merge PR #90 by phicoh: O_CLOEXEC should be FD_CLOEXEC. 1300 - Merge PR #92 by tonysgi: Fix typo. 1301 1302 2 April 2020: Wouter 1303 - Tag for 4.3.1rc1. 1304 1305 1 April 2020: Wouter 1306 - Fix for whitespace in minimal responses test for FreeBSD. 1307 1308 25 March 2020: Wouter 1309 - Merge PR #86 from noloader: Use precious variables for GREP, EGREP, 1310 SED, AWK, LEX and YACC. 1311 - For PR #86: Fix that programs loaded after CFLAGS and stuff is 1312 set, specifically the compiler, so that it can work if it needs 1313 special flags from that. Fix that lex only needs to support -i 1314 if actually defined, otherwise the output included in the source 1315 tarball can be used. 1316 - Merge PR #72 from noloader: Increase Travis testing coverage 1317 1318 23 March 2020: Wouter 1319 - Fix unterminated ifdef in nsd.h. 1320 - Fix unknown u_long in util.c for Issue #80 . 1321 1322 20 March 2020: Wouter 1323 - Merge PR #83 from noloader: Fix GNU HURD sched_setaffinity compile. 1324 - Fix #82: print error when system does not have setaffinity. 1325 - Fix #80: NetBSD and implicit declaration of reallocarray. 1326 - Fix for #80: Fix reallocarray test to define before include. 1327 - Fix for #80: Define alternatives for IFNAMSIZ if it does not exist. 1328 1329 19 March 2020: Wouter 1330 - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile. 1331 - Fix #75: configure test for sched_setaffinity, and use 1332 cpuset_setaffinity otherwise. Also test for presence of sysconf. 1333 - Fix #74: GNU Hurd fix cast from pointer to integer of different size. 1334 - Fix for #74, #75: cpuset test for header contents and provide code. 1335 - Fix #78: Fix SO_SETFIB error on FreeBSD. 1336 1337 18 March 2020: Wouter 1338 - Fix #70: error: 'fd_set' undeclared. 1339 - Fix #71: error: 'for' loop initial declaration used outside C99 1340 mode. 1341 - Fix to move declarations out of for loops in event test too. 1342 - Fix to move declarations out of for loops in popen3 test too. 1343 - Another fix to move declaration out of for loop for event test. 1344 - Fix to move declarations out of for loops in cutest regex display. 1345 1346 17 March 2020: Wouter 1347 - tag for 4.3.0 release and master branch has version 4.3.1. 1348 1349 10 March 2020: Wouter 1350 - repository has version number 4.3.0. Tag for 4.3.0rc1. 1351 1352 3 March 2020: Wouter 1353 - Fix that the retry wait does not exceed one day for zone transfers. 1354 1355 27 February 2020: Wouter 1356 - Fix warning on FreeBSD about pointer size cast. 1357 1358 26 February 2020: Wouter 1359 - Fixup fix of reuseport TCP for server close of sockets not used 1360 by it. And the unit test skips when the necessary debug output 1361 is not enabled. 1362 1363 25 February 2020: Wouter 1364 - Fix event unit test, signal has to be registered with signal_add, 1365 event_add not for every backend for signals. The event_initialized 1366 is not possible for every backend, so event_added variable. The 1367 agent write event fires after a timeout, instead of on event write 1368 so that it does not trigger a sigpipe event when the handlers stop. 1369 Timeout shorted to 0.1 second. event_get_fd was not implemented, 1370 so used ev_fd. Debug output printfs added to see what happens. 1371 - Fix checkconf test for new drop-updates config option. 1372 - Fix errors with reuseport and TCP file descriptors, it was 1373 closing them for server-1 in server-2 and server-3.. 1374 1375 7 February 2020: Jeroen 1376 - Add feature to drop queries with opcode UPDATE. 1377 1378 6 February 2020: Jeroen 1379 - Support SO_BINDTODEVICE on Linux. Specify bindtodevice: yes 1380 to bind sockets directly to the network interface. 1381 - Support SO_SETFIB on FreeBSD. Add setfib=<FIB> after an ip-address 1382 option to use the specified FIB for that socket. 1383 - Require user to add servers=<range> after an ip-address option to 1384 specify the servers that must listen on that socket. 1385 1386 6 February 2020: Wouter 1387 - Merge PR#60: Minor portability fixes from michaelforney, with 1388 avoid pointer arithmetic on void* and avoid unnecessary VLA. 1389 1390 4 February 2020: Wouter 1391 - Merge PR#22: minimise-any: prefer polular and not large RRset, 1392 from Daisuke Higashi. 1393 - Fix responses for IXFR so that the authority section is not echoed 1394 in the response. 1395 1396 21 January 2020: Wouter 1397 - Fix leak in server bitset setup. 1398 1399 16 January 2020: Jeroen 1400 - Add zone resource record iterator for future zone-verification port. 1401 - Set FD_CLOEXEC on opened sockets. 1402 - Add popen3 implementation for future zone-verification port. 1403 - Add -r option to cutest so that a subset of tests can be run. 1404 1405 15 January 2020: Jeroen 1406 - Add feature to pin server proccesses to specific cpus. 1407 - Add feature to pin IP addresses to selected server processes. 1408 - Set process title to identify individual processes. 1409 1410 13 January 2020: Wouter 1411 - Merge pull request #59 from buddyns: add FreeBSD support 1412 for conf key ip-transparent. 1413 1414 10 January 2020: Wouter 1415 - Fix unreachable code in ssl set options code. 1416 - Fix bad shift in assertion code analyzer complaint. 1417 1418 6 January 2020: Wouter 1419 - Fix #56: Drop sparse TSIG signing support in NSD. 1420 Sign every axfr packet with TSIG, according to the latest 1421 draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1. 1422 1423 12 December 2019: Wouter 1424 - Note that use-systemd is not necessary and ignored in man page. 1425 1426 11 December 2019: Wouter 1427 - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters. 1428 - use-systemd is ignored in nsd.conf, when NSD is compiled with 1429 libsystemd it always signals readiness, if possible. 1430 1431 9 December 2019: Wouter 1432 - Fix to define upper bounds on rr counts read from untrusted packet 1433 data. 1434 - Try different annotation for radix_find_prefix_node not reachable. 1435 - Separate acl_addr_match_range functions for ip4 and ip6, to 1436 please checkers. 1437 - Avoid unused variable warning in new match_range_v4 function. 1438 1439 6 December 2019: Wouter 1440 - Fix to define max number of EDNS records we are willing to 1441 spend time on. 1442 - Fix size of string len and capacity type cast in udbradtree. 1443 - Fix to protect rrcount in tsig_find_rr from overflow. 1444 - Annotate radix_find_prefix_node not reachable trail code. 1445 - Fix to protect rrcount in packet_find_notify_serial from overflow. 1446 - Fix to close socket on error in create_tcp_accept_sock. 1447 - Fix to log on failure to chmod for socket for remote control. 1448 - Fix to remove unneeded if in open of socket for remote control. 1449 - Fix to restore input parameter on call failure in create_dirs. 1450 - Please checker by terminating and initialising string read 1451 by remote control. 1452 - Fixup of random_generate negative modulo, from previous commit, 1453 and return srandom when random is used if no getrandom. 1454 1455 5 December 2019: Wouter 1456 - Fix fname null check of fname in namedb_read_zonefile. 1457 - Fix implicit cast of size in udb_radnode_array_grow. 1458 - Fix ignore of return value of ssl_printf in remote.c. 1459 - Fix unused check of fd in parent_handle_reload_command. 1460 - Fix to use getrandom() for randomness, if available. 1461 - Attempt to fix signedness of nscount lookup in ixfr query_process. 1462 - Fix identical branches for ssl_print of errors in remote.c. 1463 - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record. 1464 - Fix to separate header and data lines in parse_zone_list_file. 1465 1466 3 December 2019: Wouter 1467 - Fix #52: do not log transient network full errors unless higher 1468 verbosity is set. 1469 - Fix checkconf test for new error output string. 1470 - tag for 4.2.4rc1 release. This became the 4.2.4 release, 1471 and the master branch continues with 4.2.5 in development. 1472 1473 27 November 2017 Jeroen 1474 - Fix regressions in configparser.y 1475 1476 22 November 2019: Wouter 1477 - Fix #48: Add make distclean that removes config.h made by configure. 1478 And add maintainer-clean that removes bison and flex output. 1479 1480 18 November 2019: Wouter 1481 - Detect fixed time memcmp for openssl 0.9.8 compatibility. 1482 - Detect EC_KEY_new_by_curve_name for openssl 0.9.8. 1483 - include limits.h for UINT_MAX. 1484 - If no recvmmsg, dont use msg_flags member, but errno for error, 1485 where our fallback function left it, msg_flags also does not exist 1486 on some systems. 1487 - Remove unused variable warning for portability. 1488 1489 14 November 2019: Wouter 1490 - Fix checkconf test with filenames that sort in the same order. 1491 - Tag for 4.2.3rc1. Branch master is 4.2.4 in development. 1492 1493 11 November 2019: Wouter 1494 - Fix #44: document that remote-control is a top-level nsd.conf 1495 attribute. 1496 - Fix compile on OSX. 1497 - Fix for #44: nicer top-level clause documentation. 1498 1499 22 October 2019: Jeroen 1500 - Number of different UDP handlers has been reduced to one. recvmmsg 1501 and sendmmsg implementations are now used on all platforms. 1502 Compatible implementations are in place for systems that lack the 1503 system calls. 1504 - Socket options are now set in designated functions for easy reuse. 1505 - Socket setup has been simplified for easy reuse. 1506 - Configuration parser is now aware of the context in which an option 1507 was specified. 1508 1509 21 October 2019: Wouter 1510 - For #21 add 1511 contrib/patch_for_s6_startup_and_other_service_supervisors.diff 1512 that adds support for readiness notification with READY_FD from 1513 Cameron Nemo. 1514 1515 17 October 2019: Jeroen 1516 - Fix #40: Merge small fixes for confine-to-zone by Greg Bock. 1517 1518 15 October 2019: Jeroen 1519 - For #39: Merge confine-to-zone feature contributes by Greg Bock. 1520 1521 26 September 2019: Wouter 1522 - Fix #38: log address and failure reason with tls handshake errors, 1523 squelches (the same as unbound) some unless high verbosity is used. 1524 - Fixup clang analysis warning in xfrd_parse_received_xfr_packet 1525 master dereference. 1526 1527 25 September 2019: Wouter 1528 - The nsd.conf includes are sorted ascending, for include statements 1529 with a '*' from glob. 1530 1531 16 September 2019: Wouter 1532 - Fixup warnings during --disable-ipv6 compile. 1533 - Fixup unit test executable to run without IPv6. 1534 1535 4 September 2019: Wouter 1536 - Fix #35: excessive logging of ixfr failures, it stops the log when 1537 fallback to axfr is possible. log is enabled at high verbosity. 1538 1539 2 September 2019: Wouter 1540 - For #21: pidfile "" allows to run NSD without a pidfile, for 1541 startup management tools like daemontools. 1542 1543 28 August 2019: Wouter 1544 - In tests check for tls test tool availability. 1545 1546 19 August 2019: Wouter 1547 - Tag for 4.2.2 release. Git master contains 4.2.3 in development. 1548 1549 13 August 2019: Wouter 1550 - Fix error message for out of zone data to have more information. 1551 - Tag for 4.2.2rc2. 1552 1553 12 August 2019: Wouter 1554 - Fix #33: Fix segfault in service of remaining streams on exit. 1555 1556 6 August 2019: Wouter 1557 - Tag for 4.2.2rc1. 1558 1559 5 August 2019: Wouter 1560 - PR #31: nsd-control: Add missing stdio header. 1561 - PR #32: tsig: Fix compilation without HAVE_SSL. 1562 - Cleanup tls context on xfrd exit. 1563 1564 31 July 2019: Wouter 1565 - Fix #29: SSHFP check NULL pointer dereference. 1566 - Fix #30: SSHFP check failure due to missing domain name. 1567 - Fix to timeval_add in minievent for remaining second in microseconds. 1568 1569 22 July 2019: Wouter 1570 - Set timeout for refetch immediately, only spread load when there 1571 are retries. 1572 1573 19 July 2019: Wouter 1574 - Set no renegotiation on the SSL context to stop client 1575 session renegotiation. 1576 1577 18 July 2019: Wouter 1578 - Fix #25: NSD doesn't refresh zones after extended downtime, 1579 it refreshes the old zones, with a random delay of a couple of 1580 seconds to spread the load. 1581 - Fix so that expired zones stay expired when server is down a 1582 long time. 1583 1584 17 July 2019: Wouter 1585 - Fix that NSD warns for wrong length of the hash in SSHFP records. 1586 1587 15 July 2019: Wouter 1588 - PR #23: Fix typo in nsd.conf man-page. 1589 1590 4 July 2019: Wouter 1591 - Set version to 4.2.2 in development. 1592 - clean memory on exit of nsd-checkzone for memory debug. 1593 - Fix #20: CVE-2019-13207 Stack-based Buffer Overflow in the 1594 dname_concatenate() function. Reported by Frederic Cambus. 1595 It causes the zone parser to crash on a malformed zone file, 1596 with assertions enabled, an assertion catches it. 1597 - Fix #19: Out-of-bounds read caused by improper validation of 1598 array index. Reported by Frederic Cambus. The zone parser 1599 fails on type SIG because of mismatched definition with RRSIG. 1600 1601 2 July 2019: Wouter 1602 - Tag for 4.2.1rc1 1603 1604 27 June 2019: Wouter 1605 - Fix unit test for added options and no dot after zone updated 1606 log message. 1607 - Fix compile without accept4. 1608 1609 21 June 2019: Wouter 1610 - Omit remaining tcp processing if the list is empty. 1611 - Fix output of nsd-checkconf -h. 1612 1613 20 June 2019: Wouter 1614 - Initialize event structures before event_set, to stop uninitialized 1615 values from setting event library lists and assertions, that would 1616 sometimes also show after event_del. 1617 - Added num.tls and num.tls6 stat counters. 1618 - PR #12: send-buffer-size, receive-buffer-size, 1619 tcp-reject-overflow options for nsd.conf, from Jeroen Koekkoek. 1620 - Do not use symbol from libc, instead use own replacement, if not 1621 available, for accept4. 1622 - Fix #14, tcp connections have 1/10 to be active and have to work 1623 every second, and then they get time to complete during a reload, 1624 this is a process that lingers with the old version during a version 1625 update. 1626 1627 19 June 2019: Wouter 1628 - Fix tls handshake event callback function mistake, reported 1629 by Mykhailo Danylenko. 1630 1631 18 June 2019: Wouter 1632 - Fix #15: crash in SSL library, initialize variables for TCP access 1633 when TLS is configured. 1634 1635 14 June 2019: Wouter 1636 - Fix to init event not pointer, in reassignment. 1637 1638 12 June 2019: Wouter 1639 - Fix to init event structure for reassignment. 1640 1641 11 June 2019: Wouter 1642 - NSD 4.2.0 release. Current development is 4.2.1. 1643 - Fixup of RELNOTES, corrected RFC reference for 4892. 1644 - Fix #13: Stray dot at the end of some log entries, removes dot 1645 after updated serial number in log entry. 1646 - Fix TLS cipher selection, the previous was redundant, prefers 1647 CHACHA20-POLY1305 over AESGCM and was not as readable as it could be. 1648 - Consolidate server tls context create and remote control context 1649 create, with hardening for the remote control tls context too. 1650 1651 6 June 2019: Wouter 1652 - NSD 4.2.0rc1 tag. 1653 1654 4 June 2019: Wouter 1655 - Fix unit test for outgoing interface to use random port numbers for 1656 the outgoing interface config. 1657 1658 29 May 2019: Wouter 1659 - Fix to guard _OPENBSD_SOURCE from redefinition. 1660 1661 28 May 2019: Wouter 1662 - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD. 1663 1664 16 May 2019: Wouter 1665 - Fix #10: Fix memory leaks caused by duplicate rr and include 1666 instructions. 1667 1668 6 May 2019: Wouter 1669 - Note CII best practices badge for NSD on the README.md. 1670 1671 2 May 2019: Wouter 1672 - Fix .gitignore for unit test generated files. 1673 - Fix checkconf unit test for hide-identity and tls. 1674 1675 1 May 2019: Wouter 1676 - Fix makedist.sh for use with git. 1677 - Nicer output on travis for clang analysis. 1678 - Add .gitignore file to exclude built files from version tracking. 1679 - Add README.md file in repository with compile instructions. 1680 - Fix .gitignore for dnstap files and aclocal temp. 1681 - Add aclocal to README.md for pkgconfig for some configure options. 1682 1683 25 April 2019: Wouter 1684 - Add tls.tpkg unit test for DNS over TLS functionality. 1685 1686 18 April 2019: Wouter 1687 - Fix to avoid buffer alloc with global buffer in tls write handler. 1688 - Fix to initialize event structure when accepting TCP connection. 1689 - Use travis for build check, initial unit test and clang analysis. 1690 - Disable SSLv2,3,TLSv1.0,1.1 if TLS1.2 is available in libssl. 1691 - Disable weak ciphers, enable CIPHER_SERVER_PREFERENCE. 1692 - further setup ssl ctx after the keys are loaded, for ECDH. 1693 - TLS OCSP stapling support, enabled with tls-service-ocsp: filename, 1694 patch from Andreas Schulze. 1695 1696 17 April 2019: Wouter 1697 - Fix to share openssl init code, and perform it once. 1698 1699 16 April 2019: Andreas via Sara 1700 - Patch to add support for TCP Fast Open 1701 - Patch to add support for tls service on a specified tls port 1702 1703 16 April 2019: Wouter 1704 - Fix #4249: The option hide-identity: yes stops NSD from responding 1705 with the hostname for chaos class queries. Implements the RFC4829 1706 security considerations. 1707 - Remove starttls, this signalling method was not standardized. 1708 - Remove TO bit, this signalling method was not standardized. 1709 - Remove unused first_query and tls_ok states. 1710 - Remove sign-compare warning in tls packet send code. 1711 - Fix spelling in comment and log printout. 1712 - Fix potential uninitialized variable. 1713 - Fix documentation for DNS over TLS, and set default port 853. 1714 - Fix to add missing comment. 1715 - Fix that the TLS handshake routine sets the correct event to 1716 continue when done. 1717 - Fix that TLS renegotiation calls the read and write routines again 1718 with the same parameters when the desired event has been satisfied. 1719 - Fix that TCP Fastopen has better error message and supports OSX. 1720 - Fix log for fastopen with verbosity. 1721 - Squelch TLS handshake failure log until verbosity 3. 1722 - Add per-zone statistics for TLS queries, and dnstap for TLS queries, 1723 and rcode and TCflag statistics for TCP and TLS queries. 1724 1725 25 March 2019: Wouter 1726 - Print IP address when bind socket fails with error. 1727 1728 21 March 2019: Wouter 1729 - Fix spelling error in release notes. 1730 - Fix to delete unused zparser.default_apex member. 1731 1732 19 March 2019: Wouter 1733 - tag 4.1.27rc1. This became 4.1.27 on 25 March 2019 and trunk has 1734 4.1.28 in development. 1735 1736 18 March 2019: Wouter 1737 - Fix unit test bug013_truncate for new truncation with EDNS size, 1738 it is one RR smaller for the truncated response in the test. 1739 1740 14 March 2019: Wouter 1741 - Fixed radtree_insert memory leak. 1742 - Fixed access recycled variable. 1743 1744 11 March 2019: Wouter 1745 - Fix #6: nsd-control-setup: Change validity time to a shorter 1746 period (<2038). 1747 - Fix unused definition in header remote.h. 1748 - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big. 1749 - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets. 1750 1751 18 February 2019: Wouter 1752 - Fix to remove unused code. 1753 1754 15 February 2019: Wouter 1755 - tentative robustness, delete stats items from list twice if needed. 1756 1757 14 February 2019: Wouter 1758 - Fix #4: setusercontext() is in libutil on NetBSD, and also 1759 include login_cap.h only if it exists. 1760 - Fix #4215: fixup for state update for TSIG information in server 1761 processes, nicer printout for tsig_print, tsig_print without 1762 arguments and no leaks. 1763 - nicer logging for update_tsig. 1764 1765 1 February 2019: Wouter 1766 - Fix for tsig assoc_tsig command on acl with nokey elements. 1767 1768 29 January 2019: Wouter 1769 - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds 1770 nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig 1771 and del_tsig. These changes are gone after reload, edit the 1772 config file (or a file included from it) to make changes that 1773 last after restart. 1774 - documentation for tsig nsd-control options. 1775 1776 24 January 2019: Wouter 1777 - Deny ANY with only one RR in response, by default. Patch from 1778 Daisuke Higashi. The deny-any statement in nsd.conf sets ANY 1779 queries over UDP to be further moved to TCP as well. 1780 Also no additional section processig for type ANY, reducing 1781 the response size. 1782 - assertions for clang analysis. 1783 1784 10 December 2018: Wouter 1785 - Fix for FreeBSD port with dnstap enabled. 1786 1787 6 December 2018: Wouter 1788 - Fix to reduce region_log_stats if condition, this removes a 1789 debug statement. 1790 1791 5 December 2018: Wouter 1792 - Fix #4213: disable-ipv6 and dnstap compile error. 1793 1794 3 December 2018: Wouter 1795 - Note that the content_list member is unused; and could be removed 1796 if the database format is modified or updated. 1797 - Fix that dnstap logs CQ and CR like BIND does. 1798 - Revert that, it looks wrong, AQ and AR are for the authoritative. 1799 1800 29 November 2018: Wouter 1801 - Tag for 4.1.26rc1. Which became 4.1.26 on 4 dec 2018. 1802 Trunk has 4.1.27 in development. 1803 - Fix clang analysis warning on null in closest encloser for wildcard 1804 denial nsec. 1805 - Fix clang analysis warnings. 1806 1807 27 November 2018: Wouter 1808 - Fix parsezone failure in 4194 fix. 1809 1810 26 November 2018: Wouter 1811 - Fix to not set GLOB_NOSORT so the nsd.conf include: files are 1812 sorted and in a predictable order. 1813 - Added nsd-control changezone. nsd-control changezone name pattern 1814 allows the change of a zone pattern option without downtime for 1815 the zone, in one operation. 1816 - Fix #3433: document that reconfig does not change per-zone stats. 1817 1818 20 November 2018: Wouter 1819 - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails. 1820 This sets the msg_hdr.msg_namelen correctly after receipt. 1821 1822 19 November 2018: Wouter 1823 - Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes 1824 option in nsd.conf. 1825 - Fix #4202: nsd-control delzone incorrect exit code on error. 1826 - Tab style fix to use tab for 8 spaces, from Xiaobo Liu. 1827 1828 25 October 2018: Wouter 1829 - Adjust dnstap socket path for chroot. 1830 1831 22 October 2018: Wouter 1832 - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of 1833 DNSSEC RRs. 1834 - Fix some more, neater code and checks for domain length limit. 1835 - check that the dnstap socket file can be opened and exists, print 1836 error if not. 1837 1838 4 October 2018: Wouter 1839 - dnstap work, the dnstap.proto is a copy of the file from Unbound, 1840 also dnstap.m4 configure include file. 1841 - dnstap collector: free eventbase and memclean nicer. 1842 - dnstap collector: send data and read it in collector. 1843 - dnstap/dnstap.c and .h from Unbound's contribution from 1844 Farsight Security, added to then adapt it for dnstap logging in NSD. 1845 - dnstap.c with auth query and auth response, and called from 1846 the collector. 1847 - dnstap work, config nsd.conf parse. 1848 - dnstap example config. 1849 1850 25 September 2018: Wouter 1851 - NSD 4.1.25 released, trunk has 4.1.26 in development. 1852 1853 18 September 2018: Wouter 1854 - tag for NSD 4.1.25rc1. 1855 1856 17 September 2018: Wouter 1857 - Fix #4156: Fix systemd service manager state change notification 1858 1859 14 September 2018: Wouter 1860 - Remove unused if clause during server service startup. 1861 1862 13 September 2018: Wouter 1863 - Fix typo in clang analysis test. 1864 - Annotate exit functions with noreturn. 1865 - nsd-control prints neater errors for file failures. 1866 1867 12 September 2018: Wouter 1868 - clang analysis test. 1869 1870 11 September 2018: Wouter 1871 - Fix to combine the same error function into one, from Xiaobo Liu. 1872 - Fix initialisation in remote.c. 1873 - please clang analyzer and fix parse of IPSECKEY with bad gateway. 1874 - Fix unit test code for clang analyzer. 1875 - Fix nsd-checkconf fail on bad zone name. 1876 1877 10 September 2018: Wouter 1878 - Fix coding style in nsd.c 1879 1880 7 September 2018: Wouter 1881 - append_trailing_slash has one implementation and is not repeated 1882 differently. 1883 1884 4 September 2018: Wouter 1885 - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu. 1886 1887 15 August 2018: Wouter 1888 - Fix use_systemd typo/leftover in remote.c. 1889 1890 13 August 2018: Wouter 1891 - tag for 4.1.24 release. 1892 - trunk is 4.1.25 in development. 1893 - Fix that nsec3 precompile deletion happens before the RRs of 1894 the zone are deleted. 1895 - Fix printout of accepted remote control connection for unix sockets. 1896 1897 6 August 2018: Wouter 1898 - tag for 4.1.24rc1 release. 1899 1900 30 July 2018: Wouter 1901 - Tag for NSD 4.1.23 release, trunk is 4.1.24, includes 1902 fix NSD time sensitive TSIG compare vulnerability. 1903 - Fix checkconf test for use-systemd option. 1904 1905 25 July 2018: Wouter 1906 - #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM 1907 chain, NSD leniently attempts to find a working NSEC3PARAM. 1908 1909 23 July 2018: Wouter 1910 - Remove socket activation from systemd code, it was reported as 1911 not useful to enable. The readiness signalling is still there, 1912 and can be enabled with use-systemd: yes. 1913 - Only call sd_notify from systemd when use-systemd is yes. 1914 1915 6 July 2018: Wouter 1916 - RFC8162 support, for record type SMIMEA. 1917 - Fix that type CAA (and URI) in the zone file can contain 1918 dots when not in quotes. 1919 1920 26 June 2018: Wouter 1921 - configure --enable-systemd (needs pkg-config and libsystemd) can 1922 be used to then use-systemd: yes in nsd.conf and use socket 1923 activation and readiness signalling with systemd. 1924 1925 19 June 2018: Wouter 1926 - #4106: Fix that stats printed from nsd-control are recast from 1927 unsigned long to unsigned (remote.c). 1928 1929 14 June 2018: Wouter 1930 - Fix that first control-interface determines if TLS is used. Warn 1931 when IP address interfaces are used without TLS. 1932 1933 12 June 2018: Wouter 1934 - #4102: control interface via local socket. 1935 configure it with control-interface: "/path/nsd.ctl" The path 1936 has to start with a / to separate it from an IP address. 1937 The local socket does not use SSL, but unencrypted traffic, use 1938 file and containing directory permissions to restrict access. 1939 1940 6 June 2018: Wouter 1941 - Patch to fix openwrt for mac os build darwin detection in configure. 1942 1943 4 June 2018: Wouter 1944 - tag for 4.1.22rc1. Became 4.1.22 on 11 June, trunk is 4.1.23 in 1945 development from this point. 1946 1947 31 May 2018: Wouter 1948 - Fix to use same condition for nsec3 hash allocation and free. 1949 1950 23 May 2018: Wouter 1951 - Use accept4 to speed up answer of TCP queries, on Linux and FreeBSD 1952 and OpenBSD. 1953 1954 22 May 2018: Wouter 1955 - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. 1956 1957 15 May 2018: Wouter 1958 - Fix memory free in unit test. 1959 1960 14 May 2018: Wouter 1961 - Tag for 4.1.21 release. 1962 - trunk has 4.1.22 in development. 1963 - refuse-any sends truncation (+TC) in reply to ANY queries over UDP, 1964 and allows TCP queries like normal. 1965 1966 7 May 2018: Wouter 1967 - Tag for 4.1.21rc1 release. 1968 1969 4 May 2018: Wouter 1970 - Fix #4093: Release notes not using 2018. 1971 1972 3 May 2018: Wouter 1973 - Fix buffer size warnings from compiler on filename lengths. 1974 1975 26 April 2018: Wouter 1976 - lower memory usage for tcp connections, so tcp-count can be higher. 1977 - Fix checkconf test for refuse-any option. 1978 1979 3 April 2018: Wouter 1980 - refuse-any nsd.conf option that refuses queries of type ANY. 1981 1982 5 March 2018: Wouter 1983 - Fix #3562: explain build error when flex missing. 1984 1985 20 February 2018: Wouter 1986 - For more clang warnings 1987 - Fix spelling error in xfr-inspect. 1988 1989 19 February 2018: Wouter 1990 - Fix for clang analysis complaints. 1991 1992 15 February 2018: Wouter 1993 - --enable-memclean cleans up memory for use with memory checkers, 1994 eg. valgrind. 1995 - Fix unused variable warnings from clang analyzer. 1996 1997 14 February 2018: Wouter 1998 - updated RELNOTES for upcoming release. 1999 - tag 4.1.20rc1, became release on 20 feb, trunk has 4.1.21 in 2000 development. 2001 2002 9 February 2018: Wouter 2003 - make depend: updated the make dependencies in the Makefile. 2004 2005 8 February 2018: Wouter 2006 - Fix memory leak when rehashing nsec3 after axfr or zonefile read, 2007 in the selectively allocated precompiled nsec3 hashes. 2008 2009 6 February 2018: Wouter 2010 - Fix memory leak in zone file read of unknown rr formatted RRs. 2011 2012 11 December 2017: Wouter 2013 - Add test for support of -Wno-address-of-packed-member for 2014 --enable-packed. 2015 - tag for release 4.1.19 2016 - trunk has 4.1.20 in development. 2017 2018 8 December 2017: Wouter 2019 - tag for 4.1.19rc1 2020 2021 7 December 2017: Wouter 2022 - Fixup lexer warning for gcc 4.2. 2023 2024 6 December 2017: Wouter 2025 - Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 2026 and ip6 targets. 2027 2028 5 December 2017: Wouter 2029 - Fix spelling error in xfr-inspect. 2030 2031 1 December 2017: Wouter 2032 - Fix warnings emitted by clang for --enable-packed. Alignment is not 2033 a problem for x86_64, don't enable packed when the platform 2034 requires aligned access. 2035 2036 30 November 2017: Wouter 2037 - tag for 4.1.18 release. 2038 - trunk has 4.1.19 in development. 2039 - ignore fallthrough compiler warning in flex EOF rule. 2040 2041 27 November 2017: Wouter 2042 - Fix crash for DS query when parent and child zones both configured 2043 in nsd.conf and parent zone has not loaded properly. 2044 - tag for 4.1.18rc2. 2045 2046 16 November 2017: Wouter 2047 - tag for 4.1.18rc1. 2048 2049 14 November 2017: Wouter 2050 - Fix #2871: Increase number of sockets for xfrd transfers. 2051 2052 6 November 2017: Wouter 2053 - Set usage counts in namedb tree to uint32 to save memory. 2054 - Fix up debug content from nsec3 collision printout work. 2055 2056 2 November 2016: Wouter 2057 - make ip-transparent option work on OpenBSD. 2058 2059 11 October 2016: Wouter 2060 - Fix #1567: Change crit to err log level for gettimeofday failure. 2061 Add defines for compile without syslog. 2062 2063 9 October 2016: Wouter 2064 - Fix collision printout of nsec3 to print name, hash and reverse. 2065 2066 2 October 2016: Wouter 2067 - nsd-control zonestatus prints wait time between attempts, for zones 2068 that are in that waiting time. 2069 2070 19 September 2016: Wouter 2071 - merges feature branch branches/alloced_prehashes into trunk. 2072 2073 18 September 2016: Wouter 2074 - Fix #1446: A corrupted zone file "propagates" to good ones. 2075 2076 14 September 2016: Wouter 2077 - Fix layout in xfrd.c. 2078 2079 6 September 2017: Willem 2080 - Save memory by selectively allocate precompiled nsec3 hashes 2081 2082 29 August 2016: Wouter 2083 - With --enable-packed save memory, at expense of unaligned reads. 2084 - Fix writev compile warning on FreeBSD. 2085 2086 25 July 2016: Wouter 2087 - NSD sends up to 16 notifies simultaneously for up to 64 zones, 2088 to increase rate of notification for large master configurations. 2089 2090 24 July 2016: Wouter 2091 - Fix gcc 7.1.1 warnings. 2092 2093 17 July 2016: Wouter 2094 - Trunk has 4.1.18 2095 - xfr-inspect is part of source dir, but not made or installed by 2096 default. 2097 - retry timeout between sending notifies dropped from 15 to 3 sec. 2098 2099 13 July 2016: Wouter 2100 - tag 4.1.17rc1, and that became the 4.1.17 release on 21 July 2017. 2101 2102 29 June 2016: Wouter 2103 - make depend. 2104 2105 26 June 2016: Wouter 2106 - Fix text format of deletes for CDS and CDNSKEY, single 0 to represent 2107 empty base64 or hex string. 2108 2109 23 June 2016: Wouter 2110 - Fix potential null pointer in nsec3 adjustment tree. 2111 2112 15 June 2016: Wouter 2113 - xfr-inspect debug tool prints out xfr contents of files in tmp. 2114 2115 6 June 2016: Wouter 2116 - Fix #1272: use writev to put tcp length field with data for outgoing 2117 zone transfer requests. 2118 2119 16 May 2016: Wouter 2120 - zone parser parses type AVC (it has TXT format). 2121 2122 25 April 2016: Wouter 2123 - 4.1.16 release tag. 2124 - trunk contains 4.1.17 in development. 2125 2126 11 April 2016: Wouter 2127 - 4.1.16 rc1 tag for release. 2128 - minor manpage fix. 2129 2130 5 April 2016: Wouter 2131 - Patch for expire state in multi-master when masters includes 2132 broken master. 2133 2134 27 March 2016: Wouter 2135 - Fix 1243: Option to make NSD emit really minimal responses, 2136 minimal-responses: yes in nsd.conf. 2137 - but they give additional information for priming queries (type NS). 2138 2139 6 March 2016: Wouter 2140 - Fix 1228: OpenSSL include is not guarded with HAVE_SSL 2141 2142 28 February 2016: Wouter 2143 - Printout serial error with hint it may be too big. 2144 2145 20 February 2016: Wouter 2146 - Fix missing _t to _type conversion for disable-radix-tree option. 2147 2148 15 February 2016: Wouter 2149 - zone parser can parse acronyms for algorithms ED25519 and ED448. 2150 2151 13 February 2016: Wouter 2152 - Calculate new udb index after growing the array, fix from 2153 Chaofeng Liu. 2154 2155 7 February 2016: Wouter 2156 - tag for 4.1.15 rc1. Which became 4.1.15 on 16 Feb. Trunk 4.1.16. 2157 2158 19 January 2016: Wouter 2159 - Fix to rename _t typedefs because POSIX reserves them. 2160 2161 3 January 2016: Wouter 2162 - Fix #1195: Fix so that NSD fails on non-compliant values for Serial. 2163 2164 14 December 2016: Wouter 2165 - Squelch zone transfer error address family not supported by protocol 2166 at low verbosity levels. 2167 2168 13 December 2016: Wouter 2169 - Fix nsd-control and ipv6 only. 2170 2171 8 December 2016: Wouter 2172 - tag 4.1.14 2173 - trunk contains 4.1.15 in development. 2174 2175 1 December 2016: Wouter 2176 - Fix restart of zone transfers when new config becomes available. 2177 - tag 4.1.14rc1 2178 2179 25 October 2016: Wouter 2180 - Fix #1132 for SERVFAIL zones perform backoff, and remembers the 2181 timeout on next startup. 2182 - Save backoff timeout into xfrd.state file, this file has a higher 2183 version number now. Old files are skipped silently (causes 2184 refresh) and created as new files upon exit. 2185 - Set number of rounds to 1; NSD will try every master once, then 2186 wait for timeout or notify. 2187 - Fix axfr fallback for rounds to 1. 2188 2189 20 October 2016: Wouter 2190 - suppress compile warning in lex files. 2191 2192 18 October 2016: Wouter 2193 - Robust fix against missing master in tcp_open for xfrd. 2194 - More in depth fix for the previous. 2195 - Fix wildcards in include: config statements with chroot enabled. 2196 2197 27 September 2016: Wouter 2198 - NSD 4.1.13 tag. 2199 - trunk has 4.1.14 in development. 2200 - Fix null memcpy for radixtree with single link element. 2201 2202 19 September 2016: Wouter 2203 - Review comments Ralph: wrapped long lines and nicer example conf. 2204 2205 16 September 2016: Wouter 2206 - NSD 4.1.13rc1 tag. 2207 2208 15 September 2016: Wouter 2209 - Test for openssl init_crypto and init_ssl functions. 2210 2211 14 September 2016: Ralph 2212 - Fix OPENSSL_INIT_ADD_ALL_DIGESTS compatibility check 2213 2214 13 September 2016: Wouter 2215 - Fix double const in dname_const() function. 2216 - Silenced flex-generated sign-unsigned warning print with gcc 2217 diagnostic pragma. 2218 2219 8 September 2016: Wouter 2220 - more extensible edns option handling. 2221 2222 2 September 2016: Wouter 2223 - Release of 4.1.12; trunk is 4.1.13 and the patch for 4.1.12 (that 2224 does not contain the other changes to the trunk) is folded into 2225 the trunk. 2226 - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. 2227 2228 25 August 2016: Wouter 2229 - Fix multimaster for not tried full zone transfer for a expired zone. 2230 - Explain --disable-radix tree uses some more CPU. 2231 2232 22 August 2016: Wouter 2233 - Fix README spelling error of BSD license (reported by Joerg Jung). 2234 2235 19 August 2016: Wouter 2236 - for type SRV add A/AAAA to the additional section (if possible), 2237 just like we already do for type MX. 2238 2239 17 August 2016: Wouter 2240 - Add robustness against unallocated data in nsec3 trees. 2241 2242 16 August 2016: Wouter 2243 - configure --disable-radix-tree for about 15% lower memory usage. 2244 2245 12 August 2016: Wouter 2246 - Fix #817: xfrd update failed loop. 2247 2248 9 August 2016: Wouter 2249 - Can config key algorithms with the digest name, eg. 'sha256'. 2250 - default tsig algorithm is sha256. 2251 - Fix typo in log output, 'transfered' -> 'transferred'. 2252 - Fix compile warnings about signcompare in minmax retrytime. 2253 2254 8 August 2016: Wouter 2255 - Support syntax of RR type OPENPGPKEY from RFC 7929. 2256 2257 5 August 2016: Wouter 2258 - multi-master-check: yes can be used to check all masters for the 2259 last version, using the higher version from the configured masters, 2260 from Manabu Sonoda. 2261 - small fixups on patch. And fix spacing and remove configure flag. 2262 - Fix #812: make depend fails after distribution. 2263 2264 2 August 2016: Wouter 2265 - Fix unused result warnings from write and strtol. 2266 2267 1 August 2016: Wouter 2268 - Tag 4.1.11rc1. 2269 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. 2270 - Tag 4.1.11rc2. 2271 - trunk is 4.1.12 in development. 2272 2273 8 July 2016: Wouter 2274 - Note down tracking numbers for issue JVN#63359718 JPCERT#91251865. 2275 2276 5 July 2016: Wouter 2277 - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone 2278 transfer data size, from Toshifumi Sakaguchi. 2279 2280 27 June 2016: Wouter 2281 - Set default for min-refresh-time and min-retry-time to 0. Behaves 2282 just like before, but has a configurable option in nsd.conf. 2283 - Fix #783: Trying to run a root server without having configured it 2284 silently gives wrong answers. 2285 2286 16 June 2016: Wouter 2287 - When tcp is more than half full, use short timeout for tcp session. 2288 - Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. 2289 - man page entries for max-refresh-time patch. 2290 2291 15 June 2016: Wouter 2292 - Fix build without IPv6, patch from Zdenek Kaspar. 2293 2294 14 June 2016: Wouter 2295 - release 4.1.10 and tag for that. 2296 - trunk has 4.1.11 in development. 2297 2298 7 June 2016: Wouter 2299 - Fix NSEC3 ent fix to use closest encloser, not wildcard denial. 2300 2301 2 June 2016: Wouter 2302 - Fix for NSEC3 with zone signed without exact match for empty 2303 nonterminals, the answer for that domain gets wildcard denial. 2304 - #772 Document that recvmmsg has IPv6 problems on some linux kernels. 2305 - tag for 4.1.10rc1. 2306 2307 31 May 2016: Wouter 2308 - print notice that nsd is starting before taking off. 2309 2310 20 May 2016: Wouter 2311 - Updated fix for nonterminal nsec3 answers. 2312 2313 19 May 2016: Wouter 2314 - Fix empty nonterminal nsec3 cover answers. 2315 2316 12 May 2016: Wouter 2317 - NSD includes AAAA before A for queries over IPV6 (in delegations). 2318 And TC is set if no glue can be provided with a delegation because 2319 of packet size. 2320 2321 19 April 2016: Wouter 2322 - Fix #755: NSD spins after a zone update and a lot of TCP queries. 2323 2324 7 April 2016: Wouter 2325 - If set without nsd.db print "" as the default in the man pages. 2326 2327 4 April 2016: Wouter 2328 - Fix #751: NSD fails to occlude names below a DNAME. 2329 2330 24 March 2016: Wouter 2331 - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. 2332 2333 21 March 2016: Wouter 2334 - Update acx_nlnetlabs.m4 to version 33 with HMAC_Update test. 2335 - acx_nlnetlabs.m4 to v34, with -ldl -pthread test for libcrypto. 2336 2337 15 March 2016: Wouter 2338 - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option 2339 for Linux, binds to interfaces and addresses that are down. 2340 - Change the nsd.db file version because of nanosecond precision fix. 2341 - 4.1.9 release with the nsd.db file version fix (but not freebind), 2342 trunk contains 4.1.10 in development. 2343 2344 10 March 2016: Wouter 2345 - Tag 4.1.8 2346 - Trunk contains 4.1.9 in development. 2347 2348 2 March 2016: Wouter 2349 - Tag 4.1.8rc1 2350 2351 1 March 2016: Wouter 2352 - #744: Fix that NSD replies for configured but unloaded zone 2353 with SERVFAIL, not REFUSED. 2354 2355 16 February 2016: Wouter 2356 - RR type CSYNC (RFC7477) syntax is supported. 2357 2358 29 January 2016: Wouter 2359 - #739: zonefile changes when mtime is small are detected on reload, 2360 if filesystem supports precision mtime values. 2361 2362 19 January 2016: Wouter 2363 - Fix #736: segfault during zone transfer. 2364 2365 08 January 2016: Wouter 2366 - Define _DEFAULT_SOURCE with _BSD_SOURCE for recent Linuxes. 2367 2368 05 January 2016: Wouter 2369 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch 2370 from Daisuke Higashi. 2371 2372 04 January 2016: Wouter 2373 - Updated acx_nlnetlabs to version 32. 2374 2375 11 December 2015: Wouter 2376 - Fix flto check for OSX clang. 2377 2378 10 December 2015: Wouter 2379 - 4.1.7 release 2380 - trunk has 4.1.8 in development. 2381 - take advantage of arc4random_uniform if available, patch from 2382 Loganaden Velvindron. 2383 2384 3 December 2015: Wouter 2385 - tag for 4.1.7rc1 prerelease. 2386 2387 2 December 2015: Wouter 2388 - configure --enable-ratelimit-default-is-off with --enable-ratelimit 2389 to set the default ratelimit to disabled but available in nsd.conf. 2390 - Document that ratelimit qps and slip are updated in reconfig. 2391 - version: "string" option to set chaos version query reply string. 2392 - Fix up defaults in manpage. 2393 2394 1 December 2015: Wouter 2395 - Explain rrl-slip better in documentation. 2396 2397 30 November 2015: Wouter 2398 - Fix TCP responses when REUSEPORT is in use by turning it off. 2399 - reuseport: no is the default, because the feature is not troublefree. 2400 - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. 2401 2402 24 November 2015: Wouter 2403 - Fix zonec ttl mismatch printout to include more information. 2404 2405 18 November 2015: Wouter 2406 - RELNOTES more descriptive. 2407 - newer acx_nlnetlabs.m4. 2408 - spelling fixes from Igor Sobrado Delgado. 2409 2410 17 November 2015: Wouter 2411 - Fix #721: Fix wrong error code (FORMERR) returned for unknown 2412 opcode. NOTIMP expected. 2413 2414 16 November 2015: Wouter 2415 - Allocate less memory for TSIG digest. 2416 2417 6 November 2015: Wouter 2418 - Fixup for newer acx_nlnetlabs.m4, test for openssl version after 2419 testing for libdl need. 2420 2421 5 November 2015: Wouter 2422 - newer acx_nlnetlabs.m4, does not needlessly link with -ldl. 2423 2424 30 October 2015: Wouter 2425 - Fix tpkg tests for portability. 2426 2427 29 October 2015: Wouter 2428 - patch from Doug Hogan for SSL_OP_NO_SSLvx options. 2429 - updated contrib/nsd.spec, from Blint Szigeti. 2430 - support configure --with-dbfile="" for nodb mode by default, where 2431 there is no binary database, but nsd reads and writes zonefiles. 2432 2433 27 October 2015: Wouter 2434 - portability fixes. 2435 2436 26 October 2015: Wouter 2437 - Init pfd for handlers added during handler-event-walk. 2438 2439 23 October 2015: Wouter 2440 - Fix many interfaces and zones updates from nsd parent event loop. 2441 2442 22 October 2015: Wouter 2443 - 4.1.6 release tag. 2444 - trunk contain 4.1.7 in development. 2445 2446 20 October 2015: Wouter 2447 - 4.1.6rc2 tag created. 2448 2449 19 October 2015: Wouter 2450 - Fix compile of zonec error message on FreeBSD. 2451 2452 15 October 2015: Wouter 2453 - 4.1.6rc1 tag created. 2454 2455 13 October 2015: Wouter 2456 - nsd-checkconf warns for master zones with no zonefile statement. 2457 - Fix start failure when many file descriptors are in use. 2458 - The servfail rcode is not printed with a space in the middle. 2459 - fixup file descriptor fixup nicer. 2460 - print failed token for config syntax error or parse error. 2461 2462 12 October 2015: Wouter 2463 - Fix #711: Document that debug-mode yes is used for staying 2464 attached to the supervisor console. 2465 - Document verbosity 3 prints more information. 2466 2467 30 September 2015: Wouter 2468 - makedist.sh print on pgp signature creation. 2469 2470 28 September 2015: Wouter 2471 - Fix typo in zonec.c inside error message. 2472 2473 24 September 2015: Wouter 2474 - Fix #701: Fix that AD=1 set in a BADVERS response. 2475 2476 21 September 2015: Wouter 2477 - Fix #706: default port 53 not opened on ip4 because of getaddrinfo 2478 hints initialisation failure. 2479 - 4.1.5 release tag 2480 - trunk contains 4.1.6 in development. 2481 2482 9 September 2015: Wouter 2483 - 4.1.4 release tag created. 2484 - trunk contains 4.1.5 in development. 2485 2486 31 August 2015: Wouter 2487 - 4.1.4rc1 tag created. 2488 2489 28 August 2015: Wouter 2490 - Fix #698 formatting errors and typos in nsd.8.in. 2491 - Add --enable-pie and --enable-relro-now options. 2492 2493 18 August 2015: Wouter 2494 - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. 2495 2496 17 August 2015: Wouter 2497 - Fixed checkconf test for reuseport setting. 2498 2499 14 August 2015: Wouter 2500 - SO_REUSEPORT does not work on FreeBSD. Enabled by default on Linux, 2501 not enabled by default on other OSes. 2502 2503 5 August 2015: Wouter 2504 - Fix that notify from nsd-control contains soa serial. 2505 2506 3 August 2015: Wouter 2507 - squelch SO_REUSEPORT failure on verbosity less than 3. 2508 2509 31 July 2015: Wouter 2510 - removed hardcoded interface limit, --with-max-ips removed. 2511 - SO_REUSEPORT support. 2512 2513 16 July 2015: Wouter 2514 - Fix #618: documented need to list ip-addresses separately in 2515 nsd.conf if there are multiple, because the source address of 2516 replies can otherwise go wrong. 2517 2518 10 July 2015: Wouter 2519 - Fix that for expired zones NSD performs an AXFR and accepts newer 2520 and older serial numbers. 2521 - Document that minimal responses only minimizes responses to fit 2522 in one datagram. It does not minimize smaller responses. 2523 2524 2 July 2015: Wouter 2525 - Fix NSID response for short edns sizes. 2526 2527 23 June 2015: Wouter 2528 - Trunk contains 4.1.4 in development. 2529 2530 4 June 2015: Wouter 2531 - Tag 4.1.3rc1 2532 - improve nsd-control usage text. (23 june - added to 4.1.3) 2533 - RFC7553 RR Type URI support. 2534 2535 2 June 2015: Wouter 2536 - Fix redefined macro lex warning for freebsd flex. 2537 2538 29 May 2015: Wouter 2539 - Fix that formerrors are ratelimited. 2540 2541 19 May 2015: Wouter 2542 - max-interfaces raised to 32. 2543 2544 18 May 2015: Wouter 2545 - removed unused defines for unofficial tsig-hmac algorithm codes. 2546 The TSIG algorithm is identified by name in the config file. 2547 2548 14 May 2015: Wouter 2549 - hmac sha224, sha384 and sha512 support, patch from David Gwynne. 2550 2551 23 April 2015: Wouter 2552 - Fix crash in zone parser for relative dname after error in origin. 2553 - Test for zone parser failures 2554 2555 21 April 2015: Wouter 2556 - nsd-control addzones and delzones read list of zones from stdin. 2557 - Fix task and zonestat files to be stored in a subdirectory in tmp 2558 to stop privilege elevation. 2559 - printout names for successful addition and removal with bulk command. 2560 2561 20 April 2015: Wouter 2562 - Fix #665: when removing subdomain, nsd does not reparse parent zone. 2563 2564 14 April 2015: Wouter 2565 - trunk contains 4.1.3(upcoming). 2566 2567 7 April 2015: Wouter 2568 - Tag 4.1.2rc2. 2569 2570 2 April 2015: Wouter 2571 - Made log message more consistent, changed 'axfr refused' log message 2572 to be more consistent with other messages. Also notify refused. 2573 - verbosity 2 logs axfr refused and notify refused. 2574 verbosity 1 contains less log messages. 2575 2576 31 March 2015: Wouter 2577 - Tag 4.1.2rc1. 2578 2579 24 March 2015: Wouter 2580 - Fix #654: Fix contradiction in notify logging verbosity level. 2581 - Incoming notifies have serial number logged (at verbosity 1). 2582 - Fix #655: Fix contradiction in verbosity for zone transfers. 2583 2584 17 March 2015: Wouter 2585 - Use reallocarray for integer overflow protection, patch submitted 2586 by Loganaden Velvindron. 2587 - Fix allocation integer overflow checks. 2588 2589 13 March 2015: Wouter 2590 - Fix buffer overflow in config parse of domain name, 2591 reported by John Van de Meulebrouck Brendgard. 2592 2593 12 March 2015: Wouter 2594 - Updated default keylength in nsd-control-setup to 3k. 2595 2596 10 March 2015: Wouter 2597 - Fix use after free after zonefile syntax error followed by ttl 2598 or origin directive, reported by John Van de Meulebrouck Brendgard. 2599 - Fix syntax error followed by too many TXT elements parse crash 2600 reported by John Van de Meulebrouck Brendgard. 2601 2602 9 March 2015: Wouter 2603 - Fix origin directive from unused old value and subdomain parser 2604 failure, reported by John Van de Meulebrouck Brendgard. 2605 2606 2 March 2015: Wouter 2607 - Fix b64pton out of bounds error on invalid zonefile input 2608 reported by John Van de Meulebrouck Brendgard. 2609 2610 20 February 2015: Wouter 2611 - Fix segfault on double origin in zone reader (thanks John Van de 2612 Meulebrouck Brendgard). 2613 2614 19 February 2015: Wouter 2615 - Remove dead code domain_table_iterate. 2616 - Fix segfault in zone reader on invalid input 2617 reported by John Van de Meulebrouck Brendgard. 2618 2619 5 February 2015: Wouter 2620 - Fix #642: Change 'zone read with no errors' to '.. with success'. 2621 Patch from Benedikt Heine. 2622 2623 3 February 2015: Wouter 2624 - Tag 4.1.1 release 2625 - Trunk is 4.1.2 in development. 2626 - Remove some duplicate header includes (from Brad Smith). 2627 - Fix tcp waiting list for zone transfers where the bind and connect 2628 calls fail. 2629 2630 29 January 2015: Wouter 2631 - Fix zonesdir chroot error message. 2632 2633 28 January 2015: Wouter 2634 - correct some hyphen-used-as-minus-sign (from Andreas Schulze) in 2635 man pages. 2636 2637 27 January 2015: Wouter 2638 - Tag 4.1.1rc1 2639 2640 21 January 2015: Wouter 2641 - Synthesize CNAMEs with same TTL as DNAME. 2642 2643 12 January 2015: Wouter 2644 - Fix casts for ctype functions (from Todd Miller). 2645 - nsd-checkconf -f prints out full name of pidfile (with dir). 2646 2647 9 January 2015: Wouter 2648 - Fix bug#637: fix that nsd.db grows limitlessly, an off by one 2649 on one megabyte free chunks, created during AXFRs of large zones, 2650 that caused the one megabyte chunk to be leaked. 2651 - Fix udb-inspect for one megabyte chunks, counts and statistics. 2652 2653 6 January 2015: Wouter 2654 - Fix spinning NSD with lots of failing transfers, due to pointer 2655 comparison using void pointer subtraction (from Otto Moerbeek). 2656 2657 5 January 2015: Wouter 2658 - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE. 2659 2660 4 Nov 2014: Wouter 2661 - Document zonestat config, and nsd-checkconf access. 2662 2663 3 Nov 2014: Wouter 2664 - Fix that failure to add tcp to tcp base does not leak the socket. 2665 2666 27 Oct 2014: Wouter 2667 - Disabled use of SSLv3 in nsd-control. 2668 - zonestats are cleared (or not, with stats_noreset). 2669 2670 22 Oct 2014: Wouter 2671 - Test for wildcard fix (from 3.2). 2672 2673 16 Oct 2014: Wouter 2674 - Fixes for wildcard addition and deletion, speedup for some cases. 2675 2676 15 Oct 2014: Wouter 2677 - Fix that queries for noname CH TXT are REFUSED instead of nodata. 2678 2679 14 Oct 2014: Wouter 2680 - per zone statistics with --enable-zone-stats, configure with 2681 zonestats: "zonestatidentifier", zones with the same id are added. 2682 2683 10 Oct 2014: Wouter 2684 - Fix #616: retry xfer for zones with no content after command. 2685 - Fix char used as array index warnings on NetBSD. 2686 2687 8 Oct 2014: Wouter 2688 - Fix "xfrd_handle_ipc: bad mode" log errors when compiled 2689 with --disable-bind8-stats. 2690 2691 18 Sep 2014: Wouter 2692 - Fix that expired zones stay expired after a server restart. 2693 2694 15 Sep 2014: Wouter 2695 - RFC 7344: CDS and CDNSKEY (read in). 2696 2697 4 Sep 2014: Wouter 2698 - Tag 4.1.0. 2699 - trunk is 4.1.1 in development. 2700 - fix manpage for nsd-checkzone to have version and date. 2701 2702 29 Aug 2014: Wouter 2703 - Fix install of the nsd-checkconf man page. 2704 2705 28 Aug 2014: Wouter 2706 - Tag 4.1.0rc1 2707 2708 25 Aug 2014: Wouter 2709 - Increased default --with-max-ips from 8 to 16, this increases the 2710 number of interfaces you can specify in nsd.conf to listen to. 2711 2712 19 Aug 2014: Wouter 2713 - Remove .LP after .SH in man pages. 2714 2715 7 Aug 2014: Wouter 2716 - Fix for process swap of main and reload, reload failure from the 2717 pipe is acted on, and reload fail not cause nsd to shutdown, also 2718 ignore sigchlds from the servermain in reload, that would cause 2719 EINTR to break file reads. 2720 - trunk has version 4.1. 2721 2722 5 Aug 2014: Wouter 2723 - Fix #600: document that provide-xfr provides AXFR and not IXFR. 2724 - remove program group fix, because it is not needed. 2725 - Fix rising-load-average or memory-leaks in OSes (Linux since 2.6), 2726 that keep track of all past process parents, or leak memory 2727 for them. Fix makes it so there is no very deep string of 2728 process parents. 2729 The reload process is now the process parent of servermain. That 2730 makes signals for children arrive at the reload, and servermain 2731 has to use closed pipes to detect that children have exited. 2732 2733 1 Aug 2014: Wouter 2734 - Set program group on main process and its child processes, and 2735 kill them on a reload. 2736 2737 20 July 2014: Wouter 2738 - Fix endian.h include for OpenBSD. 2739 2740 15 July 2014: Wouter 2741 - Fix -O3 compile flag to -O2 to avoid miscompilations. 2742 - Allow user to override the -g -O2 CFLAGS in ./configure. 2743 2744 11 July 2014: Wouter 2745 - fix strptime implicit declaration error on OpenBSD. 2746 2747 9 July 2014: Wouter 2748 - removed unnecessary arc4random_uniform. 2749 2750 8 July 2014: Matthijs 2751 - fake-rfc2553 patch (thanks Benjamin Baier). 2752 2753 8 July 2014: Wouter 2754 - wait and reap processes that are not part of the process group. 2755 2756 7 July 2014: Wouter 2757 - Code review fixup from NSD3. 2758 2759 30 Jun 2014: Wouter 2760 - Fix #590: rrl log does not print wildcard as a star but escaped. 2761 - Fix #591: rrl log messages at verbosity level 1. 2762 (If that does not work for everyone, we need rrl-log: yesno option). 2763 2764 27 Jun 2014: Wouter 2765 - Fixup rr-test test so that it does not fail on the #553 string. 2766 2767 17 Jun 2014: Matthijs 2768 - Fix #587: Default value for statistics is 0. 2769 - Remove the shift-reduce conflicts from the bug#553 fix. 2770 2771 5 Jun 2014: Wouter 2772 - Fix roundrobin cornercase for truncated packets. 2773 - round-robin: yesno in nsd.conf enabled round robin rotation. 2774 2775 28 May 2014: Wouter 2776 - Fix #585: yylex_destroy missing, cannot compile on RHEL 5.x. 2777 - Fix #583: Round-robin for records in the Answer section. 2778 2779 22 May 2014: Wouter 2780 - Fix zonefile parse with no whitespace before semicolon comments. 2781 2782 16 May 2014: Wouter 2783 - xfrd reaps children on a timer as well, similar to server_parent. 2784 2785 8 May 2014: Wouter 2786 - Fix #564: nsd-checkzone tool to check zonefile correctness. 2787 2788 7 May 2014: Wouter 2789 - Fix #577: makefile incorrectly installed manpages from srcdir. 2790 2791 30 April 2014: Wouter 2792 - Fix that xfrd reaps all children on every eventloop, because some 2793 exited reloads may attach here and need reaping, also if the signal 2794 is lost. 2795 2796 23 April 2014: Wouter 2797 - Fix progress printout for very large zones (numeric overflow). 2798 2799 10 April 2014: Wouter 2800 - Fix write_socket return value check in server.c (Thanks Brad Smith, 2801 Mark Kettenis). 2802 2803 8 April 2014: Wouter 2804 - nsd-control addzone reports if zone already exists. 2805 2806 7 April 2014: Wouter 2807 - Fix #571: unused variable and incompatible pointer warnings when 2808 compiled on a system without INET6. 2809 2810 27 March 2014: Wouter 2811 - Fix delete or rename of a lot of zones and make it take a 2812 non-enormous time. Database compaction is deferred. 2813 - Speed up deletion of zone contents a lot, (56s to 1s), speeds up 2814 delete, rename and AXFR for zones. Defer emptynonterminal checks. 2815 - Better example config in nsd.conf manual page. 2816 - log-time-ascii option, default yes, with readable timestamp in log. 2817 2818 25 March 2014: Wouter 2819 - nsd shuts down during init process if given signal. 2820 - shorter logging for zone transfer fail rcodes. 2821 2822 24 March 2014: Wouter 2823 - include: "foo/nsd.d/*.conf" works, wildcard glob on includes. 2824 - Fix print filename of encompassing config file on read failure. 2825 2826 21 March 2014: Wouter 2827 - Fix bug in nodatabase mode with ixfrs that change nsec3param 2828 (Thanks Anand Buddhdev). 2829 - Changed maxbackoff for no-content secondary zones from 4h to 24h. 2830 - nocontent zones are checked on startup, but continue backoff 2831 from stored xfrd.state values. 2832 2833 19 March 2014: Wouter 2834 - made database: "" set the 3600 default for zonefileswrite only 2835 if it is also at its default, so that user settings override. 2836 - Unit test for zonefiles-write. 2837 - Write xfrd.state for nodb mode again. Disable xfrd.state with 2838 xfrdfile: "" in config. Does not check slave zone if state is 2839 same as last time on startup. 2840 - Fixed shutdown message sporadically not printed on exit. 2841 - Documented zonefile %s syntax in nsd.conf man page. 2842 - Fix manpage to put colon after zonefiles check and write. 2843 - Change from 'Zone" to "zone" with ".. serial .. is updated" log 2844 message. 2845 2846 18 March 2014: Wouter 2847 - unit test for nodb mode. 2848 - Speed up zone write (.nl zonefile 30% faster). 2849 The memory alloc-dealloc in print_rr has been moved to print_rrs. 2850 - (from 3.2), fix for #553 and for other TXT string syntax. 2851 - in nodb mode, xfrd.state is not written out, because the zones 2852 are refreshed upon next startup anyway, so keeping timers and state 2853 is unnecessary. 2854 - zonefiles-write option in nsd.conf, enabled when database is "". 2855 The server writes changed zonefiles to disk every hour. 2856 2857 17 March 2014: Wouter 2858 - Speed up zone parsing (.nl reads 40% faster). 2859 The rrtype_from_string routine is called often, optimised it. 2860 2861 14 March 2014: Wouter 2862 - tag 4.0.3 2863 - trunk has 4.0.4 in development. 2864 - database: "" starts without mmap of database. Less memory is used, 2865 zones are read from text zonefile. 2866 2867 13 March 2014: Wouter 2868 - Fix nsd.db unclean close check. Previous databases are considered 2869 unclean by the code and are created anew. 2870 - Adds nsd.db larger than 400Tb check for sanity. Also test if 2871 filesize as documented in the file is correct. 2872 - nsd waits for tasks to complete on stop, prevents nsd.db corruption. 2873 - fix to not delete tmpdir too early in shutdown process. 2874 2875 12 March 2014: Wouter 2876 - tag 4.0.2 2877 - trunk has 4.0.3 in development. 2878 - disabled udb checking functionality that made it very slow, 2879 this was enabled when enable-checking was turned on. 2880 2881 27 February 2014: Wouter 2882 - tag 4.0.2rc1 2883 2884 26 February 2014: Wouter 2885 - Fix that NSD will delete and recreate not-clean-closed databases. 2886 2887 20 February 2014: Wouter 2888 - Fix from 3.2: make SOA RDATA comparisons in XFR more lenient (only 2889 check serial). 2890 2891 18 February 2014: Wouter 2892 - Fix leak of zone name after zonefile read. 2893 - Fix malloc too large that would be leaked in the radix tree. 2894 2895 14 February 2014: Wouter 2896 - configure change for easier compile on Minix. 2897 2898 10 February 2014: Wouter 2899 - Fix #552: zonefile loads on nsd-control reconfig when the name 2900 of the file has changed. 2901 2902 7 February 2014: Wouter 2903 - Fix #551: change Regent to Copyright holder in the LICENSE, 2904 to match the definition on opensource.org for the BSD License. 2905 2906 3 February 2014: Wouter 2907 - Disabled recvmmsg and sendmmsg usage by default because kernel 2908 versions have implementation issues: ipv6 ignored, security issues. 2909 - Detect libevent2 install automatically by configure, and use 2910 event2 header files if necessary. 2911 - Fixup link with lib/event2 subdir. 2912 2913 30 January 2014: Wouter 2914 - Fix expired zones to give SERVFAIL, also when parent zone loaded. 2915 2916 27 January 2014: Wouter 2917 - tag 4.0.1. 2918 - trunk is 4.0.2 in development. 2919 - rcode REFUSED for queries to non-hosted zones. 2920 - documented nsd-control zonestatus output in nsd-control manpage. 2921 - remove mention of nsdc from nsd-checkconf manpage. 2922 2923 21 January 2014: Wouter 2924 - tag 4.0.1rc2 2925 2926 20 January 2014: Wouter 2927 - Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx). 2928 2929 17 January 2014: Wouter 2930 - Fix type CAA. 2931 - Fix type EUI48. 2932 - nsid can be set with "ascii_somestring" in ascii. 2933 - Fix printout of high-chars in TXT on NetBSD. 2934 2935 16 January 2014: Wouter 2936 - Unit test for WKS failure. 2937 2938 15 January 2014: Wouter 2939 - tag 4.0.1rc1 2940 2941 13 January 2014: Wouter 2942 - Check if configure in srcdir collides with outofdir build. 2943 2944 10 January 2014: Wouter 2945 - Fix that chroot is removed from zonefile names (for absolute names). 2946 2947 9 January 2014: Wouter 2948 - Fix that bad IXFR updates do not result in double SOA records, 2949 and that an AXFR is started (attempted) when the zone state seems 2950 to be inconsistent with the master's zone state. 2951 2952 8 January 2014: Matthijs 2953 - Bugfix #542: Match RRSIG TTL with SOA TTL in negative response. 2954 2955 7 January 2014: Wouter 2956 - Fix xfrd when zone transfer TCP contains zero length packets. 2957 - Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3, 2958 because AXFRs overwrote nsec3 administration in the child zone. 2959 2960 2 January 2014: Wouter 2961 - Log ip address for sendto and sendmmsg failures. 2962 2963 4 December 2013: Matthijs 2964 - Support for CAA RRtype (RFC 6844). 2965 2966 26 November 2013: Wouter 2967 - Fix segfaults after read of zones with rr type WKS from zonefile. 2968 - Seed PRNG for openssl at start of daemon, fixes SSL connection issue. 2969 2970 25 November 2013: Wouter 2971 - (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset. 2972 2973 11 November 2013: Wouter 2974 - Fix bug#534: IXFR query loop over UDP for zones that are unchanged. 2975 2976 11 November 2013: Matthijs 2977 - EUI48 and EUI64 is now RFC 7043 2978 2979 5 November 2013: Wouter 2980 - Accept interface: as an alternative for ip-address: for 2981 consistency with unbound.conf syntax. 2982 2983 29 October 2013: Wouter 2984 - tag for 4.0.0 release. 2985 - trunk has 4.0.1 in development, for bug fixes. 2986 2987 24 October 2013: Wouter 2988 - Fixup zone change code. 2989 - tag 4.0.0rc3. 2990 2991 21 October 2013: Matthijs 2992 - Initialize xfrd zone when changing zone from master to slave 2993 and delete xfrd zone when changing zone from slave to master. 2994 2995 14 October 2013: Wouter 2996 - tag 4.0.0rc2. 2997 2998 14 October 2013: Matthijs 2999 - Additional log messages with reason why RR to be deleted cannot be 3000 found. 3001 3002 14 October 2013: Wouter 3003 - Fix for zone transfer that has different-cased RRSIG signer names 3004 or NSEC next-owner names. 3005 3006 9 October 2013: Wouter 3007 - tsig errors on incoming tsig print key name and source IP of query. 3008 3009 8 October 2013: Wouter 3010 - Update documentation for nsd -d option. 3011 3012 7 October 2013: Wouter 3013 - Fix mini_event ev_once flag to be prettier (review comments Yuri). 3014 - tag 4.0.0rc1 recreated. 3015 3016 4 October 2013: Wouter 3017 - Fix bug where if you do not have flex, and then install flex, it 3018 would not make without a re-untar of the source. 3019 3020 3 October 2013: Wouter 3021 - Review changes from Matthijs. 3022 - doc/README updated, 'nsdc' is now removed. 3023 3024 1 October 2013: Wouter 3025 - Review commits from Matthijs. 3026 - doc/UPGRADING updated, review Yuri. 3027 3028 30 September 2013: Wouter 3029 - tag 4.0.0rc1 3030 - updated doc/RELNOTES 3031 3032 19 September 2013: Wouter 3033 - configure --disable-recvmmsg for compat with older Linux kernels, 3034 by default it autodetects support in the kernel on the buildmachine. 3035 3036 20 Aug 2013: Wouter 3037 - Fix time at 2038, uint32s changed to time_t, support 64bit time_t. 3038 3039 19 Aug 2013: Wouter 3040 - Fix use of 32bit time, for 2038, thanks to Theo de Raadt for patch. 3041 3042 13 Aug 2013: Wouter 3043 - Bugfix#518 Incorrect RRL prefix length option names in nsd.conf 3044 man page from Ville Mattila. 3045 3046 9 Aug 2013: Wouter 3047 - Fix that xfrd, and nsd-control, does not stop responding when reload 3048 errors out. The pid is sent like it should by server_main. 3049 - Fix that EOF in quoted string error does not cause reload to exit. 3050 - Fixup errors from the stack code checker. 3051 3052 6 Aug 2013: Wouter 3053 - Removed use of random when arc4random is available. Thus, random 3054 and srandom are then not linked with the executable. 3055 3056 16 Jul 2013: Wouter 3057 - Fix segfault with no logfile and chroot (Thanks Patrik Lundin). 3058 3059 15 Jul 2013: Wouter 3060 - beta 5 tag. 3061 - trunk has beta6 named in configure. 3062 3063 9 Jul 2013: Wouter 3064 - unlink xfr file if transfer is stopped, timeouted or interrupted. 3065 And unlink xfr file in progress when the zone is deleted. 3066 3067 8 Jul 2013: Wouter 3068 - Increase tcpbacklog default to 256 (silently capped to 128 on BSD). 3069 For remote control keep it at 16, it has less TCP load. 3070 It does not actually increase TCP performance (some except), but 3071 reduces connection loss when there is a spike in TCP connections. 3072 3073 5 Jul 2013: Wouter 3074 - nsd-mem stores temp files in current dir because /tmp is too small. 3075 - printout pct parsed, read, nsec3 and written every 100.000 elements 3076 and after 5 seconds. For big zones. 3077 3078 3 Jul 2013: Wouter 3079 - region-allocator has list of large allocations, so delete is in O(1). 3080 - recursive readroutine for speedup of nsd.db reads (30%). 3081 - udb-inspect prints type summary of nodes in nsd.db. 3082 3083 28 Jun 2013: Matthijs 3084 - Update tmp serial in xfr checking. 3085 3086 28 Jun 2013: Wouter 3087 - nsd.db 12% smaller, no nsec3 hash storage. Also ups udb version 3088 because of the format change. printout udb write complete for 3089 debug. 3090 - Fix warning in labellength 0 code. 3091 3092 27 Jun 2013: Matthijs 3093 - Better XFR checking, fallback to AXFR (if allowed) if three 3094 malformed XFR packets have been seen. 3095 - zonec: Don't crash on domain names with label length 0. 3096 3097 25 Jun 2013: Matthijs 3098 - Rename --enable-eui-rrtypes to --enable-draft-rrtypes. 3099 3100 25 Jun 2013: Wouter 3101 - acx_nlnetlabs.m4 update, --disable-flto. 3102 3103 20 Jun 2013: Matthijs 3104 - Use IPV6 minimum MTU settings with TCP to reduce failures that 3105 are caused by delays in learning working PMTU when communicating 3106 through a tunnel. 3107 - Improved RRL logging: also print triggering query src addr and qtype 3108 (thanks Klaus Darilion). 3109 - Merge some minor stuff from NSD3.2 3110 3111 18 Jun 2013: Matthijs 3112 - Add rrl-slip config option (thanks Stephane Bortzmeyer). 3113 - Add rrl-ipv{4,6}-prefix-length config option. 3114 - Bug #496: Support for EUI48 and EUI64 RR types. 3115 3116 14 Jun 2013: Wouter 3117 - Optimizations: -O3 if possible (user can override CFLAGS), udp 3118 buffers are set to 1m by default (if socket options exist), 3119 use recvmmsg and sendmmsg, or only recvmmsg, or recvfrom. 3120 3121 11 Jun 2013: Wouter 3122 - Fix memory leak in zone parser for txt record (since the large 3123 number of txt subsections fix). 3124 - Fix zone parser allocations to be in db region. 3125 - nsd-mem prints advice 3126 3127 5 Jun 2013: Wouter 3128 - Fix segfault on repeated reconfigs, double free of zone apex name. 3129 3130 4 Jun 2013: Wouter 3131 - Remove duplicate zlfile variable from options structure. 3132 3133 30 May 2013: Wouter 3134 - Fix nsd-mem for printout of values above 4G. 3135 3136 16 May 2013: Wouter 3137 - Patch from Lukas Wunner that makes chroot more consistent. 3138 Make all paths absolute with the chrootdir in front, or use 3139 an absolute zonesdir with other patsh relative to that. 3140 3141 3 May 2013: Wouter 3142 - Fix race on exit of nsd, for restarts, so that the pidfile-pid 3143 process waits until port53 has been closed before exiting. 3144 - update acx_nlnetlabs.m4 to v23, sleep w32 fix. 3145 3146 29 April 2013: Wouter 3147 - Remove unused pointer and fixup chroot include for trail slash. 3148 3149 26 April 2013: Wouter 3150 - Patch from Lukas Wunner that makes nsd.conf include files work 3151 inside chroot/etc environments on repattern and reconfig. 3152 3153 25 April 2013: Matthijs 3154 - New config option "ip-transparent:", to bind to non local addresses 3155 (thanks Arjen Zonneveld). 3156 - RRtypes ASFDB, RP, RT should not compress dnames (thanks Peter 3157 van Dijk). 3158 3159 19 April 2013: Wouter 3160 - own snprintf, fix use of snprintf return value (in debug print). 3161 3162 18 April 2013: Wouter 3163 - fix bug #491: pick program name (0th argument) as syslog identity. 3164 3165 9 April 2013: Wouter 3166 - Bug #494: Exit with return code 1 if socket code fails. (from 3.2) 3167 - Fix B64_NTOP replacement definitions in configure.ac. 3168 3169 26 March 2013: Wouter 3170 - update lookup3.c with better endianness detection. 3171 3172 25 March 2013: Wouter 3173 - faster nsec3 updates. 3174 - Fixup contrib/bug390.patch for 4.0.0b4. 3175 - remove leak of nsec3. 3176 - allocate radixtree in region for small (5%) total savings and 3177 about 15% savings in the radixtree itself (due to many small alloc 3178 savings in region). 3179 3180 22 March 2013: Wouter 3181 - use less memory for non-nsec3, nsec3tree. 3182 3183 18 March 2013: Wouter 3184 - update nsd-mem with pretty printout and RRL count. 3185 3186 14 March 2013: Wouter 3187 - Fix memory statistics in nsd_munin_. 3188 3189 8 March 2013: Wouter 3190 - nsd-mem tool initial commit. 3191 3192 7 March 2013: Wouter 3193 - notify information is logged at correct verbosity level, 1. 3194 3195 5 March 2013: Matthijs 3196 - Add hash to rrl bucket 3197 3198 5 March 2013: Wouter 3199 - Fixup the growth and shrinkage of nsd.db. This should use less 3200 calls to remap and change the file and mmap size. 3201 3202 15 February 2013: Wouter 3203 - Fix compile on bigendian netbsd alpha. 3204 - Fixup tests for older dig (check if +noedns option is supported) 3205 3206 11 February 2013: Matthijs 3207 - Fix outgoing-interface: Don't fail if family is IPv6 but 3208 only IPv4 outgoing-interface is set, or vice versa. 3209 3210 11 February 2013: Wouter 3211 - fix tcp zonetransfer pipeline lookup function. 3212 - remove compiler warning for memset from tsig read. 3213 3214 7 February 2013: Wouter 3215 - detect endianness in lookup3 on BSD, patch from Brad Smith. 3216 - nsd-control verbosity prints out verbosity level without argument. 3217 - nsd-control status prints out ratelimit if ratelimit is enabled. 3218 3219 5 February 2013: Wouter 3220 - Fix that old zonefile does not override newer AXFR for slave zones. 3221 - Nicer printout of notify. 3222 - beta4 3223 3224 4 February 2013: Wouter 3225 - Fix AXFR of NSEC3 slave zone. 3226 3227 1 February 2013: Wouter 3228 - Less printout of 'bad transfer'. 3229 3230 31 January 2013: Wouter 3231 - Fix that nsec3 zones are precompiled when read from udb. This 3232 caused assertion failures. 3233 - Fix is_apex flag for zones read from udb. 3234 3235 29 January 2013: Matthijs 3236 - RRL documented in nsd.conf.sample 3237 3238 29 January 2013: Wouter 3239 - printout log less verbosely, not every axfr packet. 3240 - remove printout of "bad transfer" to the log for notimpl. 3241 - fixup tests for new netstat and new netcat. 3242 3243 25 January 2013: Wouter 3244 - fix gcc warning, do not use uninit value for rng init. 3245 - fix zonefiles-check: entry in nsd.conf 3246 - remove -fwhole-program gcc flag usage. We cannot reliably detect 3247 if it works without failure. 3248 3249 23 January 2013: Wouter 3250 - beta3 3251 3252 22 January 2013: Wouter 3253 - Fix time calculation of zone transfer. 3254 - log ip address with tcp failure. 3255 3256 21 January 2013: Wouter 3257 - Improve tabs in sample nsd.conf for different tabsizes. 3258 - Fix segv if xfrdir does not exit. 3259 - create xfrdir on make install (does not remove on make uninstall, 3260 because this could be /tmp). 3261 - do not leave task files in /tmp if nsd fails to startup because 3262 of file permissions. 3263 - do-ip4 and do-ip6 nsd.conf options just like unbound. 3264 - fixed testset for dig9 default with edns. 3265 3266 18 January 2013: Wouter 3267 - Fix configure for gentoo gcc and headers. 3268 - List libevent in README. 3269 - Tabs and spaces nicer in nsd.conf.sample. 3270 - Fix spurious assertion failure for some rrl blocks. 3271 3272 16 January 2013: Wouter 3273 - Added zonefiles-check option, default yes, check mtimes of zone files 3274 on sighup and startup (from Robin Hack). 3275 3276 15 January 2013: Wouter 3277 - documented that the _implicit_ pattern names are used internally. 3278 3279 10 January 2013: Wouter 3280 - updated RELNOTES. 3281 - applied patch from Robin Hack to remove double pid file truncation. 3282 - repattern is called reconfig (because most config options are 3283 picked up, except for superuser options (chroot, logfile, port)). 3284 - document that the zonefile attribute can be empty. 3285 3286 9 January 2013: Wouter 3287 - 4.0.0b2 is beta2 version tag. 3288 3289 8 January 2013: Matthijs 3290 - Merge changes from 3.2.15 with trunk: 3291 * Update docs: CREDITS, NEW-CFG-OPTION, REQUIREMENTS, 3292 RELNOTES, TODO 3293 * Update dname_test.tpkg test. 3294 * TSIG init only fails if no digests at all can be found. 3295 * Remove unused tsig_get_algorithm_by_id code (was used by 3296 nsd-xfer). 3297 * Fix some fd leaks. 3298 * Bug #485: Fallback to DEFAULT_TTL if MSB is set. 3299 * Fix RCODE when xNAME loop final answer not exist to NXDOMAIN. 3300 3301 8 January 2013: Wouter 3302 - Fix make outside of source directory. 3303 3304 7 January 2013: Wouter 3305 - fixed uninit variable for empty zone axfr request 3306 - fixed alloc of acl options for config zones so they can be deleted. 3307 - fixed that pattern name is copied, so that patterns stay the same. 3308 - repattern also rereads the zones in the config file and applies that 3309 to the running server. 3310 3311 21 December 2012: Wouter 3312 - --with-logfile sets the logfile inside the example documentation. 3313 - Fixed addzone and delzone inside chroot (thanks Will Pressly). 3314 3315 19 December 2012: Wouter 3316 - Fixup for libevent-2.1.2. 3317 3318 18 December 2012: Wouter 3319 - makedist makes sha256 for tarballs. 3320 - nsd-control start runs an absolute path to start sbin/nsd. 3321 3322 17 December 2012: Wouter 3323 - Fix for use with libev (no use of event.ev_flags). 3324 3325 12 December 2012: Wouter 3326 - 4.0.0b1 is beta1 version. 3327 3328 11 December 2012: Matthijs 3329 - Better ILNP RR parsing (thanks Stephane Bortzmeyer). 3330 3331 11 December 2012: Wouter 3332 - fix libevent=no signals on Solaris. 3333 - Fix handle of activated zones from timeout event. 3334 - contrib/nsd_munin_ updated with memory lookup for BSD. 3335 3336 10 December 2012: Wouter 3337 - implement --with-libevent=no. 3338 3339 10 December 2012: Matthijs 3340 - Bug #483: Better error messages for TSIG errors. 3341 - RFC 2845: If BADKEY or BADSIG, RCODE should be NOTAUTH. 3342 Also, continue TSIG verification if NOTAUTH. 3343 3344 7 December 2012: Wouter 3345 - stable pidfile, xfrd is process leader and forks server-parent. 3346 3347 5 December 2012: Wouter 3348 - NSD4_imp_6 tag. 3349 - trunk has imp_7 implementation. 3350 3351 4 December 2012: Wouter 3352 - NSD-RRL documented in manpage. 3353 3354 3 December 2012: Wouter 3355 - Fixup exit of server-child while notifies are incoming. 3356 3357 28 November 2012: Wouter 3358 - RRL implements classification type RRSIG. 3359 3360 26 November 2012: Wouter 3361 - Fix to make nsd.udb portable between 32bit and 64bit machines. 3362 - Fix to make udb mmap work for FreeBSD8 when it grows significantly. 3363 3364 23 November 2012: Wouter 3365 - Fix compiler warnings and fix blocking pipes. 3366 - default tcp-count set to 100. 3367 3368 21 November 2012: Wouter 3369 - Implement rrl log of unblock for collision. 3370 - imported TLSA and ILNP support from NSD3. 3371 3372 19 November 2012: Wouter 3373 - Fix bug 480: libevent use when tcp-count is hit caused hang (in NSD4). 3374 3375 9 November 2012: Wouter 3376 - Log when NSD-RRL stops a stream from being blocked. 3377 3378 8 November 2012: Willem 3379 - Fix AXFR. Loop through the zone to transfer only. 3380 3381 2 November 2012: Wouter 3382 - Fix bug 478: declaration after statement (for gcc 2.95). 3383 3384 1 November 2012: Wouter 3385 - Fix default settings for RRL. 3386 3387 30 October 2012: Wouter 3388 - review fixup of RRL SLIP response. 3389 - RRL uses dev/random at start, nonRRL does not. 3390 3391 26 October 2012: Wouter 3392 - nsd-control repattern also changes rrl-ratelimit and whitelist limit. 3393 3394 17 October 2012: Wouter 3395 - Fix alignment problem in zone transfer pipeline code. 3396 - Fix random generator generating negative. 3397 - Fix udb radtree strspace creation bug. 3398 3399 15 October 2012: Wouter 3400 - Fix activated zone does not interrupt transfer. 3401 - Log of connection failure for zone transfer is neater. 3402 3403 12 October 2012: Wouter 3404 - Fix invalid time argument in nsd control (for OpenBSD). 3405 3406 11 October 2012: Wouter 3407 - Fix build on OpenBSD (Thanks Oliver Peter). 3408 - tpkg for RRL. 3409 3410 10 October 2012: Wouter 3411 - implement nsd-checkconf option use of rrl-whitelist. 3412 3413 9 October 2012: Wouter 3414 - with --enable-ratelimit you enable ratelimiting, with verbosity 2 3415 it logs what is ratelimited for operational inspection. 3416 - unit test for rrl. 3417 - rrl uses mmap to save state across reloads. 3418 - rrl enum and u16 flags (dnskey type). 3419 - rrl whitelist and config. 3420 3421 8 October 2012: Wouter 3422 - Sync with unbound lookup3, has raninit value. 3423 3424 5 October 2012: Wouter 3425 - fix bug with event loop in zone transfer pipeline. 3426 - close xfrd_sock_p in server_child because otherwise due to use of 3427 kqueue, it gets a broken pipe when that process exits (on FreeBSD). 3428 3429 4 October 2012: Wouter 3430 - Fixup no use of internals ev_flags of libevent. 3431 3432 1 October 2012: Wouter 3433 - fix xfrd tcp skip. 3434 3435 21 September 2012: Wouter 3436 - tzset before chroot for correct timezone (from Camiel Dobbelaar). 3437 - pipeline support for AXFR and IXFR tcp queries. 3438 3439 11 September 2012: Wouter 3440 - writev support for TCP. 3441 3442 28 August 2012: Wouter 3443 - TXT records with components longer than 255 fail to parse, 3444 but without segfault, it continues processing with non NULL value. 3445 3446 27 August 2012: Wouter 3447 - libevent in server_child. 3448 3449 21 August 2012: Matthijs 3450 - Fix bug#464: Conditionally define MAXHOSTNAMELEN 3451 3452 20 August 2012: Wouter 3453 - Fix hang on exit in xfrd. 3454 - optimized socket counts for zone transfer speed. 3455 3456 13 August 2012: Wouter 3457 - Fix xfrd libevent events. 3458 3459 10 August 2012: Wouter 3460 - libevent in xfrd. 3461 3462 26 July 2012: Yuri 3463 - Prioritize notify sender for requesting XFR. 3464 (thanks Ilya Bakulin) 3465 3466 19 July 2012: Willem 3467 - Fix for VU#624931 CVE-2012-2978: NSD denial of service 3468 vulnerability from non-standard DNS packet from any host 3469 on the internet. 3470 http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt 3471 3472 18 July 2012: Wouter 3473 - Fix bug#460: man page correction - identity. 3474 3475 9 July 2012: Wouter 3476 - delete temporary transfer files on exit of xfrd and reload. 3477 - when tasks are applied, reload checks if it must exit between 3478 tasks, so that it can quickly exit when NSD is told to quit. 3479 - fix bug in apply_xfr that must use an udb_ptr because it shifts 3480 when new allocations are made. 3481 3482 6 July 2012: Wouter 3483 - add xfrdir: "/tmp" option and configure --with-xfrdir="/tmp". 3484 The nsd.task files and a subdirectory for zone transfers are 3485 created there. 3486 3487 2 July 2012: Wouter 3488 - fix checkconf unit test and add test for backwards compatibility 3489 for difffile: "x" statement. 3490 3491 29 June 2012: Wouter 3492 - Implemented /tmp/nsd.xfr.xxx/ to replace ixfr.db. So that nsdc 3493 patch is no longer needed. 3494 3495 8 June 2012: Wouter 3496 - Fix tpkg test cutest_qroot and rr-test for printout of algorithms 3497 as numbers, and copy of DO flag to the answer. 3498 - pick up fd fix from 3_2 branch: Some more fd >= 0 to fd != -1 fixes 3499 3500 31 May 2012: Matthijs 3501 - Sync with 3.2 branch 3502 3503 24 February 2012: Wouter 3504 - Fix for qtype ANY for a wildcard domain in NSEC signed zone. 3505 3506 9 February 2012: Wouter 3507 - Update acxnlnetlabs.m4 version 21, fixed MEMCMP_BROKEN #undef line. 3508 3509 23 January 2012: Wouter 3510 - remove clang security warning about %n in format string. 3511 3512 20 January 2012: Wouter 3513 - Fix bug #430: segfault when MAX_INTERFACES set to more than 65K. 3514 - Fix configure for OpenIndiana sunos 5.11, acx_nlnetlabs.m4 update. 3515 3516 12 January 2012: Matthijs 3517 - Fix bug #421: truncate pidfile on shutdown, before unlink. 3518 3519 10 January 2012: Wouter 3520 - removed unused variables. 3521 3522 10 November 2011: Wouter 3523 - acxnlnetlabs.m4 updated to version 16, better lto check (a.out drop). 3524 3525 3 November 2011: Wouter 3526 - fflush zonelistfile after zone add or delete. 3527 3528 1 November 2011: Wouter 3529 - Fix -flto detection for llvm compiler on Lion. 3530 3531 10 October 2011: Matthijs 3532 - Don't clear the AA bit if there is an authoritative CNAME in the 3533 answer section (as shown in RFC 1034, Section 6.2.7, 2nd example). 3534 3535 10 October 2011: Wouter 3536 - squelch EPIPE when writing AXFR, enable with verbosity 2. 3537 3538 26 September 2011: (Matthijs, from NSD3_2 branch) 3539 - Copy the DO bit to the response. 3540 - Don't return SERVFAIL on a domain that looks like a NSEC3 3541 domain but is actually a empty non-terminal. 3542 3543 19 August 2011: Wouter 3544 - Fix segfault if no logfile is used. 3545 3546 5 August 2011: Wouter 3547 - Fix make from repeating action already taken. 3548 - Fix compile without openssl. 3549 3550 3 August 2011: Wouter 3551 - silence 'Broken pipe' messages in log (visible with verbosity 2). 3552 - fix makedist.sh for removal of patch, notify, xfer. new nsd-control. 3553 - tag 4.0.0-imp-5 created. 3554 - trunk is 4.0.0-imp-6 under development. 3555 - added nsd_munin_ script for statistics monitoring to contrib. 3556 3557 2 August 2011: Wouter 3558 - fix compile on Ubuntu 11.04 systems, detects cc system header issue. 3559 3560 1 August 2011: Wouter 3561 - fix checkconf test for remote control options. 3562 - fix warning on Ubuntu 10.04, fix autoconf 2.68 warning on NetBSD. 3563 3564 29 July 2011: Wouter 3565 - zones with no zonefile are not written to text (assumes you can 3566 get AXFR and IXFR for the contents). They are stored in nsd.db. 3567 - test for repattern. 3568 3569 28 July 2011: Wouter 3570 - nsd-control repattern reads TSIG and pattern configuration. 3571 3572 25 July 2011: Wouter 3573 - fixed tests for removed tools from nsd, with replacements. 3574 replaced nsd-patch with nsd-control write. replaced nsd-notify with 3575 ldns-notify. replaced nsd-xfer with dig -t axfr. 3576 - fix for xfrd restart if crashed. xfrd knows if a reload is 3577 active at that time so it cannot start another one at the same 3578 time. New shortsoa track for start that does not use taskdb 3579 in use by reload. taskdb in use by crashed xfrd is recreated, 3580 in case it is corrupt. This keeps the nsd.db intact, keeps 3581 reload running with its updated and keeps service from the 3582 server processes active. 3583 3584 22 July 2011: Wouter 3585 - added contrib/nsd.init (nsdc.sh that only does start,stop). 3586 - removed nsdc.sh, nsd-xfer, nsd-notify, nsd-patch. 3587 for rc.d: contrib/nsd.init, or platform specific init script. 3588 nsd-xfer: see nsd-control transfer, or force_transfer. 3589 nsd-notify: see nsd-control notify. 3590 nsd-patch: see (cron job to) nsd-control write. 3591 3592 21 July 2011: Wouter 3593 - nsd-control notify, transfer and force_transfer. 3594 - fix for bug in write and reload zone option. 3595 - nsd-control zonestatus command. 3596 3597 20 July 2011: Wouter 3598 - reload can be given optional zone argument. 3599 - nsd-control reopen_logfile. 3600 - nsd-control write changed zonefiles. 3601 3602 18 July 2011: Wouter 3603 - Fix xfrd activation of zones to not break running zone transfers. 3604 3605 13 July 2011: Wouter 3606 - fix that signal causes stats to be printed to log. 3607 - fix stats without remotecontrol. 3608 - ignore notify and soainfo for deleted zone, if due to race they 3609 arrive after the deletion. 3610 - tpkg test for nsd-control, addzone and delzone 3611 3612 5 July 2011: Wouter 3613 - fix link to ssl with FreeBSD make. 3614 3615 1 July 2011: Wouter 3616 - fix optimize compile to link with ssl. 3617 3618 29 June 2011: Wouter 3619 - nsd-control delzone zone. Removes zone from zonelist. 3620 - stats includes number of zones. 3621 - RAXFR stat, which has not worked since NSD 1.2.4, reinstated. 3622 - print more memory statistics, for xfrd and config. 3623 3624 28 June 2011: Wouter 3625 - nsd-control addzone zone pattern. Adds new zone, slave or master. 3626 3627 27 June 2011: Wouter 3628 - nsd-control stats and stats_noreset (if enabled at compile time). 3629 nsd does not print statistics to logfile if period is 0. 3630 3631 23 June 2011: Wouter 3632 - -flto check supports clang compiler. 3633 3634 22 June 2011: Wouter 3635 - remote control, config, client, setup and status command. 3636 - reload nsd-control command. 3637 - stop nsd-control command. 3638 - verbosity nsd-control command. 3639 3640 14 June 2011: Wouter 3641 - Fix to have no authority NS set processing for CNAMEs. 3642 3643 9 June 2011: Wouter 3644 - fix bug that relptrs have to be initialized with rel_ptr_init() when 3645 created and zeroed with rptr_zero before deletion. 3646 - tag 4.0.0-imp4 created 3647 - trunk is 4.0.0-imp5 under development. 3648 3649 8 June 2011: Wouter 3650 - nsd reads the zonelist file on start. 3651 - updated acx_nlnetlabs.m4 to version 11. 3652 - configure checks size of off_t and increase region-allocator 3653 alignment to 8 if it is 64bit and alignment at 4. 3654 - fixed bug where not all references were removed before mmap was 3655 synced to another process. 3656 3657 7 June 2011: Wouter 3658 - code to add and remove zonelist entries, and unit test. 3659 3660 6 June 2011: Wouter 3661 - fix unit tests for mmap with TODO and removal of -f in nsd-patch. 3662 - zone expiry is communicated via the mmap, and not via the pipes, 3663 simplifying the code significantly as well as making a large number 3664 of zones more feasible. 3665 3666 1 June 2011: Wouter 3667 - mmap used for parent-xfrd communication of tasks and task results. 3668 SIGHUP is sent to xfrd so it can become a task in the normal 3669 workflow. This can process about 4500 zones per second (this was 3670 with lots of debug prints per zone, in debug compile). The mmaps 3671 are file-backed with /tmp/ files. They are removed on a clean exit. 3672 - nsd.db and tmp mmaps are created with mode 0600 for safety. 3673 - updated flag removed, nsd-patch always in -f force mode (-f removed) 3674 and writes all zones always. Its role is taken over by task results. 3675 3676 30 May 2011: Wouter 3677 - Fix Makefile for U in environment, since wrong U is more common than 3678 deansification necessity. 3679 3680 27 May 2011: Wouter 3681 - xfrd is forked before the database is read in, thus it does not 3682 consume the memory of the database. It can be reforked on a crash, 3683 which is like the current case. Difffile is cleaned by main process 3684 and the soa serials are all sent via pipe instead of via forkmem. 3685 3686 24 May 2011: Wouter 3687 - implemented patterns in the nsd.conf file. 3688 they can be instantiated with include-pattern: x. 3689 existing zone definitions keep working (backwards compatible), such 3690 zones really have an implicit pattern and cannot_delete flag set. 3691 - work on zonelist read and storage. 3692 3693 20 May 2011: Wouter 3694 - from NSD_3_2 branch the fix: bug if the zonefile is changed for a 3695 secondary but stored transfers are applied, and stop ixfr to empty. 3696 The zone is flagged with error, and the good zone is still in nsd.db 3697 for NSD4. 3698 3699 17 May 2011: Wouter 3700 - unit test for code coverage on nsec3 ixfr. 3701 - tag 4.0.0-imp3 created 3702 - trunk is 4.0.0-imp4 under development. 3703 3704 13 May 2011: Matthijs 3705 - Fix bug #381 - Binary escaped and transfers. 3706 3707 13 May 2011: Wouter 3708 - Unit test nsec3 salt change and fix for sanity check of nsec3 chain. 3709 pretty prints the nsec3 parameters if verbose. 3710 3711 12 May 2011: Wouter 3712 - more unit test for nsec3 precompile changes. 3713 - unit test for salt change, rehash in udb fix, remove last NSEC3 3714 from chain works, NSEC3PARAM RR fixed up if RR added or removed 3715 from NSEC3PARAM RRset, hashtrees cleared properly, precompile clear 3716 more thorough (not dependant on nsec3_conditions). 3717 3718 11 May 2011: Wouter 3719 - fixes for nsec3 precompile code: precompile for empty nonterminals 3720 created when an RR is added. If SOA removed, precompile stays 3721 coherent even though domain_find_zone no longer returns correct zone. 3722 3723 21 April 2011: Wouter 3724 - unit test and fixes in nsec3 precompile code. 3725 3726 20 April 2011: Wouter 3727 - incremental NSEC3 precompile. 3728 3729 14 April 2011: Wouter 3730 - remove chnum. Added numlist sorted by domain.number. 3731 domains that are not used are removed. 3732 3733 13 April 2011: Wouter 3734 - Fix is_existing flag for ENT when domain that has a shared ENT 3735 is deleted by IXFR. 3736 - zonec can parse strings with RR in it. 3737 - unit test for namedb. 3738 3739 8 April 2011: Wouter 3740 - porting complete. 3741 - tag 4.0.0-imp2 created 3742 - trunk is version 4.0.0-imp3. 3743 3744 7 April 2011: Wouter 3745 - ported to sunos 4.1.4, the unit test works (udb, radtree in mmap). 3746 3747 6 April 2011: Wouter 3748 - UDB_CHECK is enabled if --enable-checking is used. 3749 Because it checks the pointer-administration lists it slows down. 3750 - udb-inspect has feature -l that lists zones (and RRs) in nsd.db. 3751 - fix memory leak by zonec; the region_cleanup triggers too late. 3752 - set listen TCP_BACKLOG to 16 by default, it avoids connect reset 3753 by peer in 1000-zones transfer on an ultra10, thus for many-zones. 3754 - default xfrd-reload-timeout to 1 second. 3755 3756 5 April 2011: Wouter 3757 - Fix uninitialised value in xfrd nsd_soa, the rdata_count. 3758 - Unit test for update of the nsd.db with new contents. 3759 - Fix array bounds check in radtree-search function. 3760 3761 4 April 2011: Wouter 3762 - removed zonec from tests. fix unknown_rr test, enable ipseckey test. 3763 increased timeouts on tests that are hard on the filesystem. 3764 - Fixed IPSECKEY printout by nsd-patch. 3765 3766 30 March 2011: Wouter 3767 - nsd edits nsd.db for IXFR and AXFR messages. since xfrd already 3768 checks zone transfers completely for syntax those errors cannot 3769 happen, if they do (memory, disk error) the file is left dirty, 3770 to be recreated on the next start (and the process dies). 3771 3772 29 March 2011: Wouter 3773 - nsd recreates nsd.db if it has not been closed properly or is 3774 corrupted (bad header or wrong file format). 3775 3776 28 March 2011: Wouter 3777 - NSD without zonec. NSD loads zonefiles on start. 3778 NSD stores NSEC3hashes on disk. 3779 3780 25 March 2011: Wouter 3781 - Fix bug #365, you can set NSDC_ZONEC_VERBOSE and NSDC_PATCH_STYLE 3782 in the environment where nsdc runs. 3783 - Fix bug #375, typos in nsd.conf.5. 3784 - First step of bug #369: RRSIG DNSKEY sets zone to be treated DNSSEC. 3785 - Fix bug #302, nsd accepts XFR but refuses to re-read the slave zone. 3786 - NSD4 work: removed zonec, nsdc patch does not write text files 3787 for slave zones (as if option is always to binary, this capability 3788 returns later), nsdc patch deletes the ixfr.db. 3789 kill-HUP rereads zone files that have changed. 3790 3791 24 March 2011: Wouter 3792 - compile fixes for BSD. preserve RRset order. 3793 3794 23 March 2011: Wouter 3795 - udbzone, store and read zone data in the random-access udb format. 3796 3797 21 March 2011: Wouter 3798 - udbradtree works. udb-inspect tool can print radtree details. 3799 3800 16 March 2011: Matthijs 3801 - undo fix bug#325: messes up dname compression 3802 3803 14 March 2011: Wouter 3804 - udb code added. uses lookup3 from unbound (public domain). 3805 - unit test for radix tree in cutest. 3806 - unit test for udb in cutest. 3807 - udb-inspect tool to printout internals of udb files. 3808 for debug, not installed or built by default. 3809 - removed --disable-radixtree option. 3810 3811 11 March 2011: Wouter 3812 - Removed precompile features, speed gain took too much memory. 3813 - domain number to size_t. 3814 3815 9 March 2011: Wouter 3816 - DNAME synthesis of CNAME. Uses TTL of the DNAME record. 3817 - nsec3 and wildcard code. No additional section for wildcards. 3818 Also CNAME and DNAME replies contain only that record (and synth 3819 CNAME), the chain is not followed. 3820 3821 8 March 2011: Wouter 3822 - precompile work: 3823 class ANY gets AA flag, SOA and type-NS processing, just 3824 like BIND (9.6) and it simplifies processing for NSD. 3825 other than compression difference (precompile compresses smaller), 3826 there are no differences in a 49000 query testset against the root, 3827 without EDNS. 3828 3829 7 March 2011: Wouter 3830 - check chown value and report high verbosity its error. 3831 3832 3 March 2011: Matthijs 3833 - fix #bug352: fix hardcoded paths in manpages. 3834 3835 2 March 2011: Matthijs 3836 - fix #bug354: make realclean cleans too much 3837 - added make devclean for cleaning up autoconf and automake stuff 3838 - Fix hardcoded paths in nsd.conf.sample and nsd.conf.5 3839 3840 24 February 2011: Matthijs 3841 - fix #bug350: refused notifies should log client ip. 3842 3843 2 March 2011: Wouter 3844 - Fix AXFR service with radix tree. 3845 - cutest for speed of answer encoding, and format of answers for root. 3846 3847 1 March 2011: Wouter 3848 - after merge, remove double -I. from makefile. 3849 - radixtree is default. Nicer makefile and no warnings from unused 3850 flex functions. 3851 3852 1 March 2011: Wouter 3853 - merge with trunk r3181: 3854 24 February 2011: Matthijs 3855 - fix #bug350: refused notifies should log client ip. 3856 24 February 2011: Wouter 3857 - fix bug#362: outgoing-interface and v4 vs. v6 leads to spurious 3858 warning messages. 3859 - fix bug#363: nsd-checkconf -v does not print outgoing-interface ok. 3860 - fix that nsd-checkconf -o outgoing-interface omits NOKEY. 3861 23 February 2011: Wouter 3862 - fix for bug#357, make xfrd quit with many zones. 3863 3864 23 February 2011: Wouter 3865 - Merge trunk r3151. 3866 22 February 2011: Matthijs 3867 - Patch Jakob Schlyter (setusercontext before chroot). 3868 18 February 2011: Wouter 3869 - overhaul of testset, with port uniqueness and fast start and stop. 3870 11 February 2011: Wouter 3871 - added test case to do with bug357. 3872 24 January 2011: Matthijs 3873 - Patch Tom Hendrikx (only errors to stderr when doing nsdc patch). 3874 3875 17 February 2011: Wouter 3876 - Fix leak of compressiontable when the domain table increases in size. 3877 - added test case to do with bug357. 3878 3879 10 February 2011: Wouter 3880 - Merged with trunk r3115 changes: 3881 20 January 2011: Wouter 3882 - Fix on shutdown, then getaddrinfo acquired data uses freeaddrinfo. 3883 19 January 2011: Wouter 3884 - Bug #348: no -I/usr and -L/usr for libcrypto in /usr. 3885 5 January 2011: Matthijs 3886 - Fix nsdc update and nsdc notify 3887 - Force outgoing interface to be a single range acl 3888 - Update documentation about acl options 3889 - Code review 3890 - Fix nsdc so it can use hmac-sha* tsigs 3891 - Bug #347: NSEC3 nodata QTYPE=DS not at delegation mismatch 3892 4 January 2011: Yuri 3893 - Doc spelling error, bug#345 3894 15 December 2010: Wouter 3895 - fix race condition when nsd is stopped while a reload is in 3896 progress, often when rc.d does nsdc patch; nsdc stop in sequence. 3897 reload is now signalled to stop too. 3898 10 December 2010: Matthijs 3899 - fix bug#306: applied documentation patch 3900 - fix bug#253: now also for QTYPE=DS. 3901 12 October 2010: Wouter 3902 - Fix compilation on SunOS4. 3903 24 September 2010: Matthijs 3904 - Bug #328: nsd-checkconf overrun 3905 1 September 2010: Yuri 3906 - Support for huge TXT records. 3907 23 Aug 2010: Wouter 3908 - fix bug#325: remove stale files from cvs from repo. 3909 16 Aug 2010: Yuri 3910 - zonec, MAXRDATALEN check was off by one. 3911 9 Aug 2010: Matthijs 3912 - nsdc return 1 outside function, should be exit 1 3913 - Bug #320: arc4random 3914 2 Aug 2010: Matthijs 3915 - Bump to 3.2.7. 3916 21 July 2010: Wouter 3917 - NUM_RECV_PER_SELECT 100 implemented, configure check if kernel 3918 supports this. 3919 3920 17 January 2011: Matthijs 3921 - Bump to 3.2.8. 3922 3923 5 January 2011: Matthijs 3924 - Fix nsdc update and nsdc notify 3925 - Force outgoing interface to be a single range acl 3926 - Update documentation about acl options 3927 - Code review 3928 - Fix nsdc so it can use hmac-sha* tsigs 3929 - Bug #347: NSEC3 nodata QTYPE=DS not at delegation mismatch 3930 3931 20 July 2010: Wouter 3932 - Branched from trunk. Added radix tree. 3933 - use -fwhole-program if gcc supports it. 3934 3935 19 July 2010: Matthijs 3936 - fix bug#314, NSEC next field now correctly escapes spaces. 3937 Also fixes label overflow issue. 3938 - Put back HAVE_SSL. 3939 - Code reviews. 3940 - Add donor text. 3941 3942 6 July 2010: Wouter 3943 - Compiles on Minix 3.1.7; checks ss_family, suseconds_t, some 3944 warning fixes. Needs socketpair to work, e.g. 3945 http://wiki.minix3.org/en/SummerOfCode2010/UnixDomainSockets. 3946 3947 2 July 2010: Wouter 3948 - Put back CHECK_SSL in configure (removed with disable-tsig). 3949 3950 17 June 2010: Matthijs 3951 - Expand command line option '-a' and config option 'ip-address:' 3952 with port number. 3953 - Removed --disable-nsid, --disable-dnssec, --disable-tsig 3954 3955 14 April 2010: Matthijs 3956 - Bump to 3.2.6. 3957 3958 14 April 2010: Matthijs 3959 - uintptr_t fallback value to void* 3960 - Backwards compatibility for MAP_ANONYMOUS 3961 - Tag 3.2.5. 3962 3963 31 March 2010: Matthijs 3964 - Commit b64_pton optimalized compat code (Martin Svec). 3965 - Commit (experimental) mmap-alloc-namedb patch (Martin Svec). 3966 - Commit parse-token-leaks patch (Martin Svec). 3967 3968 27 March 2010: Wouter 3969 - fix bug#303: misspelled error message. 3970 3971 19 March 2010: Wouter 3972 - documented nsid: "hex string" setting in nsd.conf.sample. 3973 3974 24 February 2010: Matthijs 3975 - nsid: option 3976 - Enable NSID support by default 3977 - --with-chroot configure option 3978 - Less stupid chroot error handling 3979 3980 15 February 2010: Matthijs 3981 - Skip memory cleanup to speed up reload (Martin Svec) 3982 3983 1 February 2010: Wouter 3984 - compat code for memcmp unsigned comparisons. 3985 3986 21 January 2010: Wouter 3987 - fixup debug sprintf to snprintf. 3988 3989 21 January 2010: Matthijs 3990 - Secure string functions, including compat code for strlcat. 3991 - Randomness utility function 3992 - Prepare for default chroot 3993 3994 6 January 2010: Wouter 3995 - check write errors when marking commit failed when difffile is broken. 3996 3997 6 January 2010: Matthijs 3998 - Move to 3.2.5 3999 4000 23 December 2009: Matthijs 4001 - Store new options in nsd structure. 4002 4003 22 December 2009: Matthijs 4004 - New options 'ipv4-edns-size:' and 'ipv6-edns-size'. 4005 - Bug 276 4006 - Bug 286 4007 - Bug 288 4008 4009 21 December 2009: Matthijs 4010 - New option 'tcp-query-count:'. 4011 - New option 'tcp-timeout:' and configure option '--with-tcp-timeout'. 4012 - New zone option 'notify-retry:'. 4013 4014 11 December 2009: Wouter 4015 - Disable UDP IPv4 DF flag on Linux/FreeBSD/AIX with socket option. 4016 4017 20 November 2009: Matthijs 4018 - NSID bugfix: NSD did not recognize NSID in the query. 4019 4020 9 September 2009: Matthijs 4021 - DLV support 4022 4023 18 August 2009: Matthijs 4024 - Bug 269. 4025 - Typo: logincap.h -> login_cap.h 4026 4027 12 August 2009: Matthijs 4028 - Maintainers feedback 4029 4030 10 August 2009: Matthijs 4031 - Code review. 4032 - Also send errors to /dev/null in controlled_stop. 4033 - chown nsd.db 4034 4035 7 August 2009: Matthijs 4036 - Bug 266: don't have strptime build error 4037 4038 28 July 2009: Matthijs 4039 - Bug 263: make TSIG algorithms comparison case insensitive. 4040 4041 23 July 2009: Matthijs 4042 - Patch Paul Wouters for NSD using hardcoded name. 4043 4044 13 July 2009: Matthijs 4045 - Bug 236: allow RRs before the SOA RR. 4046 - Bug 253: No need for NS RRset in authority section, when returning 4047 final answer for QTYPE=DNSKEY. 4048 4049 29 June 2009: Wouter 4050 - patch for use of Linux IPV6_MTU option, so that on linux the default 4051 EDNS UDP size advertised becomes 4096 over IPv6. It fragments the 4052 packets using the IPv6 minimum MTU. 4053 4054 19 May 2009: Matthijs 4055 - Clean up configure script (install hickup) 4056 - Bug 249: Remove unnecessary LLONG_MIN and LLONG_MAX code. 4057 - Replace strtoll code with own strtoserial function. 4058 - Move up to 3.2.3. 4059 4060 11 May 2009: Matthijs 4061 - Add Off-by-one test 4062 4063 6 May 2009: Matthijs 4064 - Small fix in SO_REUSEADDR warning log message. 4065 - Off-by-one bugfix (thanks Ilja van Sprundel, IOActive) 4066 4067 29 April 2009: Matthijs 4068 - A more ensured do_stop (useful fo nsdc restart). 4069 4070 2 February 2009: Matthijs 4071 - Bugfix #234. 4072 - Bugfix #235. 4073 - Reset 'error occurred' after notifying an error occurred at the $TTL or 4074 $ORIGIN directive (Otherwise, the whole zone is skipped because the 4075 error is reset after reading the SOA). 4076 4077 2 February 2009: Matthijs 4078 - Bugfix: return BADVERS when EDNS version > 0, instead of 0x1<FORMERR>. 4079 4080 19 January 2009: Matthijs 4081 - Bug 230: nsd-*: use stdout for non-error output (instead of stderr). 4082 - Don't do strptime test when cross compiling. 4083 4084 17 January 2009: Jelte 4085 - Fix file rotation when no logfile but chroot. 4086 4087 8 January 2009: Matthijs 4088 - New nsd-patch option -o dbfile (set output.db) 4089 - update nsdc to deal with the new nsd-patch options 4090 - strptime compat fix 4091 4092 6 January 2009: Matthijs 4093 - New nsd-patch option -s (skip writing zonefiles) 4094 - Removed some region_create memchecks (not needed) 4095 4096 5 January 2009: Matthijs 4097 - Bug 218 4098 - Bug 222 4099 - Replace SHA256_DIGEST_LENGTH with nicer HAVE_EVP_SHA256 4100 4101 10 December 2008: Matthijs 4102 - Bugfix: better error message when ixfr.db cannot be read 4103 4104 18 November 2008: Matthijs 4105 - chown logfile, don't do file rotation if logfile is outside absolute 4106 and outside chroot. 4107 4108 17 November 2008: Matthijs 4109 - File rotation for nsd.log when owned by nsd (+ tpkg test). 4110 - Only AXFR fallback if master responded NOTIMPL or FORMATERR on IXFR 4111 request. 4112 - allow-axfr-fallback option. 4113 4114 7 November 2008: Matthijs 4115 - Bugfix: don't fclose if logfile == NULL. 4116 4117 30 October 2008: Matthijs 4118 - Allow escape characters in literal dnames 4119 - Fix typo in zonec manpage 4120 - Some fixes from code review 4121 4122 20 October 2008: Matthijs 4123 - Redo bugfix literal domain names in rdata (code adjustment) 4124 - Added tests for case sensitive dns names and "Bug #162" 4125 - Adjust nsd-patch to new ixfr.db format 4126 4127 14 October 2008: Matthijs 4128 - Only SO_LINGER when outgoing port is set 4129 - Reset diff_skip when a new difffile is created (parts in the difffile 4130 now have a timestamp). 4131 - Undo bugfix literal domain names in rdata (code adjustment) 4132 - Split up dname_parse to parse literal dnames and normalized dnames. 4133 4134 3 October 2008: Matthijs 4135 - setsockopt SO_LINGER, for portability outgoing-interface (BSD/Solaris) 4136 4137 1 October 2008: Matthijs 4138 - Configure the source ip-address for notifies by the master and zone 4139 transfer requests by the slave in nsd.conf. 4140 - Previously added source hostname/ip and port configuration for 4141 nsd-notify and nsd-xfer 4142 - Finetuned nsdc for nsdc notify and nsdc update 4143 4144 29 September 2008: Matthijs 4145 - Bugfix: only normalize domain names in rdatas when rrtype is listed in 4146 RFC 4034, section 6.2: Canonical RR Form. 4147 - Update TODO list 4148 4149 25 September 2008: Matthijs 4150 - Fix bug where hmac-sha256 was in algorithm table, but could not be 4151 retrieved by name or id. 4152 - Additional arguments for nsd-notify and nsd-xfer: set outgoing 4153 hostname/ip-address and source port. 4154 - Additional TODO entry: optimize code in nsd-* programs. 4155 4156 8 September 2008: Matthijs 4157 - RFC 4635, bugfix #130: support for hmac-sha1 and hmac-sha256 tsig 4158 algorithms. 4159 - modify and add tpkg tests for hmac-sha1 algorithms. 4160 4161 2 September 2008: Matthijs 4162 - AXFR fallback when IXFR/UDP failed on all masters 4163 - Bugfix: strip off chroot value in corner cases 4164 - Additional debug and verbose log messages 4165 4166 29 August 2008: Matthijs 4167 - IXFR allow UDP option 4168 4169 26 August 2008: Matthijs 4170 - Code layout, additional comments and documentation typo fixes 4171 - IXFR over TCP, no longer UDP 4172 4173 17 July 2008: Matthijs 4174 - Make the maximum number of interfaces configurable. 4175 - Write pidfile *after* successful server initialization, 4176 instead of writing, and unlink if fail. 4177 4178 16 July 2008: Matthijs 4179 - Set upcoming release to 3.1.1 4180 - Wouter: fixed memory leaks that happened on error, mostly on 4181 zone transfer errors. 4182 4183 11 July 2008: Matthijs 4184 - Avoid race condition in nsdc: let nsd server update pidfile before 4185 closing old parent process. 4186 4187 8 July 2008: Jelte 4188 - Fixed NSEC3 memory leak in the case NSEC3 is not needed. 4189 4190 7 July 2008: Matthijs 4191 - Bugfix #191 4192 4193 9 June 2008: Matthijs 4194 - When comparing RRs, do not compare TTL values (since the same record 4195 with different TTL values are considered equal). 4196 - Fixup some more unaligned memory access that could occur when 4197 reading ixfr.db. 4198 4199 19 May 2008: Matthijs 4200 - Do not always log tcp read errors, only when real error or high verbosity 4201 4202 28 April 2008: Matthijs 4203 - Bugfix #172 (misleading error from zonec) 4204 4205 27 March 2008: Matthijs 4206 - Port some branch modifications to trunk 4207 4208 28 February 2008: Matthijs 4209 - Do not answer nsec3 wildcard information when DO bit is not set 4210 4211 19 February 2008: Matthijs 4212 - Fixed strptime bug (for MacOS Leopard) 4213 4214 22 January 2008: Matthijs 4215 - Add configuration for chkconfig to control nsd service (bug 164) 4216 4217 15 January 2008: Matthijs 4218 - Fixed bug 157 where nsd would return FORMERR if edns query is 4219 received with version set to zero and rdlen is larger than zero. 4220 4221 8 January 2008: Wouter 4222 - no warning about optout records. also no warning about missing 4223 nsec3 records. 4224 - check for hash(apex)==nsec3 with SOA bit was done in duplicate. 4225 - removed old commented out code 4226 - using SOA bit in NSEC3 typemap to detect parameters 4227 - using nonhashed NSEC3 to prove qtype=NSEC3 nxdomains 4228 - prints for debugging. 4229 - nicer comment on nsec3_lookup. 4230 4231 7 January 2008: Wouter 4232 - Fixup nsec3 tests, they need zonesdir: "." in conf files. 4233 The tests pass. 4234 - configure default is --enable-nsec3. Disabling this will save 20% more 4235 memory (for very large zones). Moved tests to test on commit. 4236 - set RRTYPE numbers for NSEC3=50, NSEC3PARAM=51. 4237 - fixup checkconf test - updated parser lexer gives syntax error 4238 on some garbage instead of parse error. Parselexer is updated for 4239 new options (hide-version, verbosity). 4240 - removed highrange rrtype code. fixup cutest for that. 4241 - speedup of prehash code. 4242 - skip nonexistent domains (operator.example.com). 4243 - skip only-nsec3 domains (that could be 2x speedup) 4244 - skip glue nameserver domains (for TLD with 2 glue per 4245 delegation this is a 3x speedup). 4246 - skip the prehash_domain for delegation points, which saves 4247 another 2/3 hash operations, 3x speedup. 4248 - printout how long nsec3 prepare took (verbosity >= 1). 4249 4250 3 December 2007: Matthijs 4251 - Fixup bug where data related files are looked up in the wrong 4252 directory when chrooted with chrootdir ending with a slash. 4253 4254 26 November 2007: Matthijs 4255 - Fixup bug start nsd while already running: do not initialize server, 4256 since it is already running. 4257 4258 15 November 2007: Matthijs 4259 - Changed man pages format from mdoc to mansun, to support the Solaris OS. 4260 - Better logging for nsd-notify (show 'broken' zone) 4261 4262 13 November 2007: Wouter 4263 - CREDITS and RELNOTES now in utf-8. 4264 4265 12 November 2007: Matthijs 4266 - Changed man pages according to bug 162. 4267 4268 30 October 2007: Wouter 4269 - Fixup for skip after unknown deleted IXFR RR, otherwise processing 4270 would continue at the wrong spot in the packet and process the IXFR 4271 as if it were malformed. 4272 - added unit test for this in long (needs ldns-testns, updated it). 4273 - added unit test for rollback of malformed zone transfers. 4274 Fixup for it, and fixup in ldns-testns to be randomport and 4275 copy id for hex packets. 4276 4277 29 October 2007: Wouter 4278 - Fixup bug where malformed IXFR replies cause partial processing in 4279 reload (or nsd-patch or nsd-startup). One result is multiple SOA 4280 records in zone apex. Fixup rolls back the zone transfer, and waits 4281 for NSD to try to load again. 4282 4283 26 October 2008: Wouter 4284 - small fix in descriptive text in sample config for debug-mode. 4285 4286 9 October 2007: Mark 4287 - Change default location of: nsd.db, ixfr.db & xfrd.state to 4288 /var/db/nsd. 4289 4290 5 October 2007: Wouter 4291 - Fixup manual page entry for allow AXFR to anyone. 4292 4293 3 August 2007: Mark 4294 - Report source and zone for denied AXFR attempts. 4295 4296 25 July 2007: Wouter 4297 - bind2nsd to 0.5.0, fixup of includes, key{} handling. 4298 4299 19 July 2007: Wouter 4300 - bind2nsd to 0.4.8, fixup of include bug. 4301 4302 18 July 2007: Wouter 4303 - added contrib for bind2nsd, Al Stone provided an abridged version 4304 that neatly fits for contrib. 4305 4306 17 July 2007: Wouter 4307 - fixup commithooks. 4308 4309 16 July 2007: Wouter 4310 - Added reference to http://bind2nsd.sourceforge.net/ to 4311 contrib/README. 4312 4313 3 July 2007: Mark 4314 - Zone compiler now gives more sane error message when out of 4315 diskspace. 4316 - Fixed a call to drill in tpkg that made a test check bind instead of 4317 nsd. 4318 4319 2 July 2007: Mark 4320 - Remove last traces of mmap usage. 4321 - Some cleanups in tpkg. 4322 4323 24 April 2007: Mark 4324 - Added "hide-version" configuration setting. Enabling this feature 4325 stops NSD from answering to CHAOS class version requests. 4326 4327 19 April 2007: Wouter 4328 - Compiled on minix 3.1.3 and make some adjustments to ease porting. 4329 ECONNABORTED is checked for. sys/select.h included in nsd-notify. 4330 SO_REUSEADDR failure is not fatal. PF_INET compat code added. 4331 If you compile yourself; strptime and socketpair need compat code. 4332 4333 13 April 2007: Wouter 4334 - Minor tweak to nsec3.c, more elegant handling of malformed nsec3 4335 records from a zone transfer. 4336 4337 10 April 2007: Wouter 4338 - Fixup ignored return value in region-allocator. Now returns a NULL 4339 memory allocation failure and leaves region in a consistent state. 4340 4341 20 March 2007: Wouter 4342 - Released 3.0.5. 4343 - (for 3.0.6) -O2 test for Alpha moved to saner position. 4344 4345 16 March 2007: Wouter 4346 - port configure to AIX, removed warning on ALIGNMENT in region code. 4347 defined _ALL_SOURCE to get recent C definitions on AIX. 4348 - improved nsec3.h comments. 4349 4350 22 February 2007: Wouter 4351 - Zonesdir default is now /etc/nsd. 4352 So that the invocation directory is not used to dump files into. 4353 The user can change the zonesdir by editing the config file. 4354 The directory is created by install, if not an error is printed. 4355 - updated tpkg tests to use current dir for testing. 4356 - tcp connections that drop do not spam the log file. 4357 Unless verbosity is set high. 4358 4359 19 February 2007: Wouter 4360 - Fix empty line printed with warning on 'force zone transfer'. 4361 4362 15 February 2007: Wouter 4363 - Check for EPROTO definition to compile on FreeBSD4/Alpha. 4364 4365 13 February 2007: Mark 4366 - Debug flag (-d) behavior changed. Nsd now also forks children when 4367 run in debug mode. 4368 - Added verbosity mode (-V <level>) for extra operational logging. 4369 4370 8 January 2007: Wouter 4371 - README text on interface configuration added. 4372 4373 2 January 2007: Wouter 4374 - Fixup accept() that could block due to already closed connection. 4375 Made listen() nonblocking, ignores errcodes that indicate closed tcp. 4376 4377 29 January 2007: Mark 4378 - Handle the new CERT RDATA types defined in RFC 4398 (submitted 4379 by Mans Nilsson). 4380 - Change nsd-notify retry timer from linear into exponential backoff 4381 (submitted by Mans Nilsson). 4382 - Due to a small bug in a comparison statement, zonec would fail 4383 on the parsing of unknown CERT types. This got triggered by the 4384 first bugfix today, as that one shouldn't have been discovered in 4385 the first place. Took the opportunity to sanitize two other 4386 comparison statements related to strtol(). 4387 4388 24 January 2007: Wouter 4389 - Tentative change to set UDP sockets nonblocking. Perhaps it 4390 helps Howard. 4391 4392 19 January 2007: Wouter 4393 - NSEC3 work. prehash printed only once with time taken to prepare. 4394 - prints are now only in DEBUG mode (except errors). 4395 - rr descriptor counts for NSEC3 updated, has an extra field flags. 4396 - now NSEC3PARAMs with flags!=0 are ignored, as per draft-09. 4397 - Fixed where only first NSEC3PARAM was properly detected. 4398 - Added tpkg in manual (because you need to compile with nsec3) 4399 that performs the test queries from draft-09 and checks them. 4400 - Made tpkg to test NSEC3 parameter detection. NSD will skip any 4401 NSEC3PARAMs that don't work until the first working one is found. 4402 Also, this means unknown hash algorithms are simply ignored. 4403 A zone that uses exclusively unknown hash algorithms for NSEC3 4404 will give errors on loading (or after zone transfer) but NSD 4405 will load and serve the zone (but no NSEC3s are returned). 4406 - added tpkg in manual to test parent side DS answers. 4407 These follow a different code path than child side DS. 4408 - Will allow NSEC3s(and signatures) below a DNAME. 4409 - A query for an NSEC3 ownername will lead to DNAME redirection 4410 as if the NSEC3 did not exist. 4411 - Test package in manual that tests NSEC3 and DNAME in the apex. 4412 - Changed NSEC3 memory requirements from 5 pointers per domain name 4413 to 3 pointers and 2 bits. 4414 - Added jumpstart for nsec3 search, will greatly speed up optout 4415 zone nxdomains. At the cost of one ptr per domain name. 4416 The speedup also speeds up the nsec3 prepare stage. 4417 4418 18 January 2007: Wouter 4419 - Created 3.0.4 release tag. 4420 - 3.0.5 number in trunk. 4421 - add nsd.spec patch from Farkas Levente to contrib. 4422 - NSEC3 new wireformat and presentation format from draft-09. 4423 4424 11 January 2007: Wouter 4425 - The message 'server .. closed cmd channel' is now priority INFO. 4426 This to reduce the 'error' amount in the logs. 4427 - On error in a tcp request, set to retry next instead of waiting 4428 for the tcp timeout. 4429 4430 9 January 2007: Wouter 4431 - TSIG acl matching changed so that NOKEY allow-notify entries match 4432 only queries without a tsig. Otherwise NSD would crash. 4433 This only affects servers that have allow-notify: ip NOKEY and 4434 someone sends a TSIG signed notify from that ip. 4435 - test package for that. 4436 - Fix for reply to notify messages with ANCOUNT wrong. The ack 4437 to notify messages that passed the ACL, and had a SOA in the answer 4438 section of the query, included wrong RR counts in the header. 4439 - test package for notify reply wireformat. 4440 4441 8 January 2007: Wouter 4442 - ipc_send_blocked will not lead to busy waiting on it, but will block 4443 in select, until SOA_END comes by. 4444 - server_main sends SOA_END if reload crashes, to xfrd. So that xfrd 4445 can set ipc_blocked=0 and can_send_reload=1; and thus resume service, 4446 assuming that the crash was a temporary condition. 4447 This will lead to trying every reload-timeout seconds to reload 4448 if it is a permanent condition. Which is more obvious to the 4449 operator. 4450 - put the error "error: diff: RR ns.kiev.ua. already exists" in 4451 debug mode only. Zone transfers with this error are liberally 4452 accepted, and we should not spam the logfile. 4453 - empty zones will not be retried forever every 10 seconds, 4454 but exponential backoff to a max of every 4 hours. 4455 The exact value is randomised to spread out attempts. 4456 4457 5 January 2007: Wouter 4458 - Fixed --zonesdir=<path> for configure. The value did not get used 4459 as a default value. Now it is used as a default value. If a 4460 default value is set for zonesdir, you can go to a 'no value 4461 specified' by giving the empty string, zonesdir: "" in nsd.config. 4462 - Fixed checkconf.tpkg for this change. nsd-checkconf will 4463 output zonesdir: "" as this is the default for --zonesdir. 4464 4465 2 January 2007: Wouter 4466 - Added contrib script from Stephane Bortzmeyer to convert NSD 2 to 4467 NSD 3 config files. Converts secondary zones and TSIG keys. 4468 - Made config conversion script skip empty lines. 4469 - Made config conversion script convert primary zones (and notify). 4470 - Nsdc control script will exit with 'nsd startup failed.' if nsd 4471 fails to start (due to bad config file for example). 4472 4473 15 December 2006: Wouter 4474 - Removed dlopen() checks from configure.ac, NSD3 no longer has 4475 dynamic plugin support (since 3.0.0). 4476 - added .rpm spec file to contrib. 4477 - Updated README to remove reference to buildzones script. 4478 4479 12 December 2006: Wouter 4480 - Added missing include to ipc.c to compile on SunOS. 4481 - Cast to avoid signed/unsigned comparison in compat/inet_ntop.c. 4482 4483 11 December 2006: Wouter 4484 - Added test to check for CNAME and other data error by zonec. 4485 Currently NSEC, NSEC3, RRSIG, SIG, NXT are allowed next to CNAME. 4486 - Fixup unaligned memory access that could occur when reading ixfr.db 4487 with a partial transfer inside. 4488 - RR type WKS (well known service) was not printed correctly, 4489 htons() was forgotten when calling getservbyport. 4490 - NSD does not complain about not being able to read the db CRC 4491 when all that happens is the file became longer or shorter. 4492 4493 8 December 2006: Wouter 4494 - Moved down max XFRD UDP sockets for zone transfer queries to 100 4495 down from 300. This makes the total socket max at 200, so it fits 4496 easily under 256 ulimit (a common default). 4497 4498 7 December 2006: Wouter 4499 - Improved error message to help operator. 4500 - created 3.0.3 svn tag. 4501 - default of zonesdir corrected (no directory is default). 4502 4503 4 December 2006: Wouter 4504 - updated test packages. Moved 213_large from manual to long. 4505 size_0, source_port_0 made more working (needs root permission). 4506 4507 1 December 2006: Wouter 4508 - Moved xfrd ipc and reload handlers to front of event handler 4509 lists for a 10% speedup in xfrd. 4510 - Fixed so that NSD no longer interrupts zone transfers when 4511 a notify comes in for that zone. Added package to test it. 4512 - Fixed warning on Solaris 10. 4513 4514 30 November 2006: Wouter 4515 - Test for fallback in getaddrinfo more portable. 4516 Ported to FreeBSD 6.1 without inet6. 4517 - New quit sync had a problem with blocking in dispatch. Fixed. 4518 - reload will retry quit_sync if nothing happens. 4519 - parent tries to empty the pipes before closing them on quitsync. 4520 - xfrd does not send reload when previous reload request busy. 4521 - netio will only deliver the number of bits from select 4522 and then stop. Optimisation. 4523 4524 29 November 2006: Wouter 4525 - Fixed getaddrinfo error message to be more descriptive. 4526 - Fallback to ip4 also if getaddrinfo fails for ip6. 4527 - instead of EAI_ADDRFAMILY uses EAI_FAMILY which is portable 4528 to FreeBSD. 4529 - signed/unsigned warning fix for FD_SETSIZE comparison. 4530 - Lots of debug statements and new quit sync feature, where 4531 the server children are synced with. So as not to lose buffers. 4532 4533 28 November 2006: Wouter 4534 - Debugging 10k zones transfer, set so that zones waiting for a 4535 socket do not get timeouts. 4536 - Debug change so that an event is only returned to one handler 4537 by netio. 4538 Reversed this. Netio will not deliver events you do not listen 4539 to, and since xfrd first listens to write then read, it will 4540 not have problems with stale events (for the fd from the previous 4541 select) because these are always read, while it needs a write. 4542 Re-Reversed it: netio will deliver events only once. 4543 This is easier to understand for the poor hapless developer. 4544 - Need to set notify_current for notify on waiting list. Fixed. 4545 4546 27 November 2006: Wouter 4547 - Debugging 10k zones transfer, noticed that it is possible for 4548 netio to give a callback for an event that you were not listening 4549 to. Now no longer does that. 4550 4551 16 November 2006: Wouter 4552 - Bug #153: now checks for FD_SETSIZE when adding fd to select fdset. 4553 - Easy overview of socket allocation for xfrd in xfrd.h 4554 - Upped the default xfrd socket limits a bit. 4555 - Log message that the TCP connection limit is reach is now only 4556 in -L 2 logging. It is spammy. 4557 - updated dependencies. 4558 - Added test for notify-socketcount, and removed unused files from 4559 bug153 test package. 4560 - Notify udp sockets are also capped at a max number. The rest 4561 has to wait in a queue. 4562 4563 15 November 2006: Wouter 4564 - Fixed bug #152: identity keyword in nsd.conf did not work. 4565 What happened was that the hostname() from the computer 4566 was overriding the nsd.conf identity. Fixed now. 4567 If commandline is given that is used. 4568 Else nsd.conf entry is used. 4569 Else hostname() detected from computer is used. 4570 Else default string "unidentified" is used. 4571 4572 14 November 2006: Wouter 4573 - Fixed bug where NSD tries to create 10000 udp sockets, 4574 when starting with 10000 secondary zones. Limited to 50 4575 at a time. The XFRD_MAX_UDP constant controls this. 4576 4577 3 November 2006: Wouter 4578 - Created tags/NSD_3_0_2_REL. 4579 4580 2 November 2006: Wouter 4581 - Added pdf for differences.tex for ease of use. 4582 - Updated text in readme on memory usage. 4583 4584 24 October 2006: Wouter 4585 - Recycle rrset memory after doing special processing on the deleted 4586 rrset data. 4587 - log message clearer for 'duplicate xfr part' to 'discarding partial 4588 xfr part'. 4589 - if you have a server that has IXFR turned off but sends a TC flag 4590 for IXFR queries, xfrd will retry to TCP. This makes the use of 4591 'AXFR' flag in nsd.conf file not needed in certain cases. 4592 - Be thrifty and save up the memory that was lost at end of chunks 4593 in the recycle bin. Saved 1.3Mb on 170(rrs)/220(total) Mb dataset. 4594 4595 23 October 2006: Wouter 4596 - Added checks for out of memory in reload (diff file). And it exits 4597 if so neatly. 4598 4599 13 October 2006: Wouter 4600 - Bug #149: Wrong text for NOTAUTH error code. When notify is not 4601 authorised REFUSED error code returned instead. 4602 4603 4 October 2006: Wouter 4604 - More fixes from Koh-ichi Ito (kohi (a] iri.co.jp now), for bug #146, 4605 his bash does not do $(( )), so nsdc.sh has to use test of course. 4606 4607 29 September 2006: Wouter 4608 - recyclebin works, added a test that uses it (about 3 Mb goes 4609 through the recyclebin). This resolves bug #147. 4610 - Made -L 1 logging is little less verbose (-L 2 gets it all). 4611 - added search path for openssl on Solaris 10 (/usr/sfw). 4612 4613 28 September 2006: Wouter 4614 - Removed unused global variable current_region, 4615 and routines for it in region-allocator.c and .h. 4616 - Added recycle option to regions. It will keep track of small 4617 objects in a recycle bin. Large objects are deallocated. 4618 No calls to recycle yet, unit test it first. 4619 - added unit test for region recycle. 4620 4621 27 September 2006: Wouter 4622 - Further suggestion from Koh-ichi Ito, I've set opt->xfrdfile 4623 to XFRDFILE in options_create. So opt->xfrdfile and opt->difffile 4624 are never NULL. This simplifies code elsewhere. 4625 And also handles chroot case (+=l) for default values. 4626 - Fix for bug #145. The skip file position in the diff file was used 4627 inconsistently - one part of the code skipped to before the 'IXFR' 4628 type code and another part skipped to after that. Now all skip to 4629 before the type code. This bug only happens if your diff file 4630 is like: zone1_part1, zone2_part_1, zone1_part2, zone1_commit, 4631 zone2_part2, zone2_commit. The skip over zone1_part1 failed. 4632 - tpkg test in long dir that tests for the bugfix. Takes a long time 4633 and uses ldns-testns feature to wait partway through an AXFR. 4634 - removed debug log of strerror on diff read failure, when the errno 4635 was already output to the logfile (resulting in a nonsense error). 4636 4637 26 September 2006: Wouter 4638 - NSD compiles on Solaris 10 with the sun cc compiler. 4639 Added a define for _STDC_C99 for that. 4640 - Checked that the patch for solaris for bug 143 indeed fixes the bug. 4641 - Fixed bug #146 reported by Koh-ichi Ito: when chrooted nsd failed 4642 to write xfrdfile/difffile. 4643 4644 18 September 2006: Wouter 4645 - no queries for NSEC3, RRSIG, ANY succeed for nsec3 only domains. 4646 4647 15 September 2006: Wouter 4648 - Fixed LOC parsing of integer overflow causing maximum values. 4649 Added to test and backported fix to 2.3.6. 4650 - NSEC3 qtype queries get noerror/nodata or nxdomain answers. 4651 You can query for NSEC3PARAM. 4652 - warnings for printf format on maxOS (sizet needs cast to int). 4653 4654 13 September 2006: Wouter 4655 - added fsync to AF_UNIX sockets to write last command (QUIT) before 4656 closing them. 4657 - sent explicit QUIT command to xfrd on final shutdown of the server. 4658 4659 12 September 2006: Wouter 4660 - Bug #144: LOC defaults for unspecified values wrong. Error in zonec. 4661 Set defaults. Also fixed parser if LOC has no minutes or seconds. 4662 - Also fixed rounding error in seconds 0.001 decimal. 4663 - Test tpkg for bug 144. 4664 4665 11 September 2006: Wouter 4666 - nsdc now more portable in use of 'which'. 4667 Does not only look at exit code but also checks for '^no ' string. 4668 - nsd-patch does a chdir to zonesdir for relative difffile or dbfile 4669 path names. 4670 - nsdc handles zonesdir: for relative pidfile, dbfile, difffile 4671 pathnames. 4672 4673 7 September 2006: Wouter 4674 - bumped version to 3.0.2. 4675 - Nice configuration error when you had the wrong zone name in the 4676 nsd.conf file. Zonec will give an error already. 4677 - When you start a secondary zone without a zone file, you get 4678 a much nicer error message, warning you of the zone transfer. 4679 - Credits for prerelease testers; Thanks guys! 4680 4681 6 September 2006: Wouter 4682 - Fixed nsd-patch so that it writes the SOA at the start of the file. 4683 - test tpkg that tests for the bug, has multiple rrsets at zone apex 4684 and does nsd-patch followed by zonec. 4685 Previous tests did not catch this: they used nsd-xfer to test zone 4686 contents, or only checked the zone-file after nsd-patch. 4687 - version number bumped to 3.0.1. 4688 - svn tag 3_0_1 made. 4689 4690 5 September 2006: Wouter 4691 - differences file improvements. 4692 - created 3.0.0 release in svn tags. 4693 4694 4 September 2006: Wouter 4695 - From suggestions by Bin Zhang: 4696 - nsdc restart does not fail if nsd was not running. 4697 - fixes to man pages, wrong locations for files. 4698 - NSEC3-PARAM has no optout bit in presentation format. 4699 - NSEC3PARAM spelling. 4700 - differences in latex format (needs nlnetlabs housestyle). 4701 4702 31 August 2006: Wouter 4703 - Fix for tsig size still set when data is null ptr. 4704 - Fix configure for NetBSD (1.6 - 2.0) to find struct timespec. 4705 - DIFFERENCES file completion. 4706 4707 30 August 2006: Wouter 4708 - Print error nicely when nonblocking connect fails on systems 4709 in a portable way. 4710 - doc/UPGRADING document to assist NSD 2 to 3 upgrades. 4711 - updates of error print - ignore EINPROGRESS if we check too early. 4712 - wait for select writable before testing for connect error. 4713 - echo "" >&2 is not as portable as we would like, removed from nsdc. 4714 - fixed debug print of a null ptr. 4715 - fixed bug where query for CNAME that points to unserved zone caused 4716 nullptr exception on empty zone ptr. Now original zone is restored 4717 after CNAME-pointed data is added to the packet. 4718 Test in dname.tpkg. Reported by Kai. 4719 - fixed stack corruption when ipv6 disabled. 4720 4721 29 August 2006: Wouter 4722 - NSEC3 made it so it can handle the case where the NSEC3 RRSET 4723 with the SOA bit on does not have the RR with the soa bit set 4724 as the first RR. 4725 - Handle NSEC3-PARAM type. Checks to see if any of them work: 4726 zone apex hashed exists, with NSEC3 type, and RR that has 4727 the same parameters and the SOA bit set. 4728 - in presentation format of NSEC3, NSEC3-PARAM reversed hash, optout. 4729 - update to the DIFFERENCES file, bind 9.3.2 vs NSD 3 and 4730 NSD 2 and 3 comparisons are completed. 4731 4732 28 August 2006: Wouter 4733 - echo messages in nsdc made clearer. nsdc notify and nsdc update 4734 only send notify messages to slaves / localhost to force transfers. 4735 - initial NSEC3-PARAM type code entry. parsed, ignored. 4736 4737 25 August 2006: Wouter 4738 - disabled make test target as tests are not shipped. 4739 - performed prerelease static snapshot. 4740 - updates to the DIFFERENCES document. 4741 4742 24 August 2006: Wouter 4743 - Fix bug 141 port from 2.3.6, copies behaviour from bind 9.3.2. 4744 - Added a test for bug 141. 4745 - Bug141: save the opcode from the query. 4746 4747 23 August 2006: Wouter 4748 - Fixed % by 0 exception in the bugfix #139. 4749 - Fixed RFC 4035 says CD flag SHOULD be cleared on authoritative 4750 responses, now NSD clears the CD flag. This is bug #140. 4751 RFC 4035 could be confusing on this, as it states 'all servers 4752 MUST copy the CD bit' more than once, but then makes clear only 4753 recursive servers are meant with that statement. 4754 - Differences document updates for bind 9.3.2 and nsd 3. 4755 4756 22 August 2006: Wouter 4757 - version number to 3.0.0 in preparation for release. 4758 - Bug #139: resync stats to whole period. Fixed. 4759 4760 21 August 2006: Wouter 4761 - check for error in ftruncate call. 4762 - replaced fwrite call with write_data call from util that does 4763 error checking. 4764 4765 15 August 2006: Wouter 4766 - removed unused struct nsd.named8_stats variable. 4767 - Bug #138: nsd aborts trying to bind all interfaces if ip6 is not 4768 enabled, instead it will fallback to ip4. 4769 4770 14 August 2006: Wouter 4771 - Added test for rollback of an IXFR transfer by xfrd. 4772 - Added test for reload timeout in xfrd, the reload does happen after 4773 a while, but not immediately. 4774 - Test that makes xfrd connect to ip6 address. 4775 - Test that overloads the number of tcp connections in xfrd, 4776 simulating a slow master, so that zones have to queue up to get it. 4777 - code coverage is now 2514 of 10636 uncovered. Still a lot uncovered. 4778 - ixfr queries return NOT_IMPL errors. 4779 4780 11 August 2006: Wouter 4781 - srandom to init random() in xfrd based on PID and time. 4782 - improved usage() information to be more helpful, and with version. 4783 - in makedist.sh, flex and bison called like in Makefile. 4784 - test for tcp underrun and overrun of the buffer. 4785 4786 10 August 2006: Wouter 4787 - added more tests to increase code coverage of testset. 4788 - moved acl parsing code from configparser.c to options.c to help 4789 unit testing. 4790 - nsd-checkconf echod wrong difffile filename with -v. 4791 - nsd-patch can now be used with -f to force printing of all RRs. 4792 - TYPE_NULL crashed NSD when it printed it, arg was ZF_DNAME, 4793 now ZF_UNKNOWN. 4794 - unknown rr test was faulty on input, the length was in nibbles 4795 not in octets, but rfc specifies octets for unknown rrs. 4796 NSD does not look at the length, and prints the length correctly. 4797 - added type NXT to the rr-test for weird RRs. 4798 - added printing test to rr-test, ipseckey and unknown-rr tests. 4799 checks if NSD prints the same RR on output as it read in. 4800 - put -x option for nsd-patch in usage(). 4801 - test that kills an nsd child server and checks that it is 4802 restarted. 4803 4804 9 August 2006: Wouter 4805 - tested nsdc functionality, make install and make uninstall. 4806 - set O_NONBLOCKING on xfrd tcp sockets before the connect call, 4807 because the handshaking can take very long too. 4808 - difffile and xfrdfile set via configure, to absolute pathnames, 4809 so that chroot checks work for them. 4810 - updated tpkgs, they need to set relative paths now for difffile. 4811 - gcov says 2821 of 10617 total code lines are not covered. 4812 compiled with --coverage, not -O2, ran tpkg/* and long/testplan*. 4813 counted grep '#####:' *.gcov | wc and grep '^ *[0-9]*:' *.gcov | wc. 4814 - cleaned up the log functions, NSD no longer spams the syslog with 4815 debug messages. The standard NSD debug util is used, -F -1 -L 2 for 4816 a compile configured with --enable-checking will enable them again. 4817 Errors are logged, as is the automated reload of a new serial. 4818 - tpkgs for bug077 and bug107 were silently failing to test properly. 4819 4820 8 August 2006: Wouter 4821 - fixes for checkconf test, more portable. 4822 - removed items from TODO that have been tested. 4823 for multihomed servers you have to bind to each interface 4824 explicitly to get outgoing ip-address the same as query 4825 destination ip-address. 4826 Forks and if-existing are tested and ok in testplan tests. 4827 close_all_sockets is called by child, if tcponly, so leave it. 4828 - user name check is hard portably with shell scripts, and 4829 packaging could set a default user that does not exist on a machine. 4830 - empty nodes (nonterminals) give no nxdomain any more (todo item done). 4831 - removed (old) from TODO. 4832 - removed contrib/buildzones.pl, it is outdated. 4833 4834 7 August 2006: Wouter 4835 - Made the tests a little more portable. 4836 - fixed mempcy unable to handle unaligned memory addresses on Solaris, 4837 used memmove instead of memcpy in zonec LOC conversion code. 4838 - another unaligned memory access, when storing off_t pointer in 4839 difffile.c, used memmove. 4840 4841 4 August 2006: Wouter 4842 - nsd will start if diff file is corrupt, with a log message. 4843 It ignores the bad data. 4844 - tpkg files do not override PATH, svnhook sets it. So user can 4845 set path to utilities on the system to run the tests. 4846 - running testset on DecAlpha discovered uninitialised variable 4847 in NSD. Fixed. 4848 - Jakob Schlyter asked for building nsd3 in an obj dir, i.e. 4849 mkdir obj; cd obj; ../configure && make. Fixed up makefile for that. 4850 - and bug137.tpkg for separate obj dir building. 4851 4852 3 August 2006: Wouter 4853 - more tests in mesh test. 4854 - changed test packages to put nsd log to test result "/dev/stdout". 4855 - test packages more portable - use default 'dig' location. 4856 also, path is appended to, instead of replaced. 4857 4858 2 August 2006: Wouter 4859 - Region can be customised for detailed memory handling. 4860 Especially if you set large_object_size=0, chunk_size=0, 4861 the region will perform individual allocs, and 'save memory'. 4862 The region still keeps tracks of allocations so that at 4863 region_free time all memory is released. 4864 - tsig.region removed, it was not used after attaching a cleanup 4865 at creation. tsig creation uses custom region settings. 4866 - xfrd inits the tsig records with memory saving settings, 4867 so the regions alloced for tsig take up about 60 + 4*8 bytes. 4868 - new custom region for query region - to make chunksize larger 4869 there. The chunksize for the query region is important, if 4870 all allocations for a query fit in it, no mallocs are needed. 4871 - TSIG other_data field size according to RFC 2845 is 0 or 6. 4872 In tsig implementation put a maximum to the field of 16, 4873 otherwise a formerror results. 4874 - query with IXFR appended SOA not formerror. 4875 IXFR queries not reach the handler in axfr.c for IXFR queries. 4876 - removed annoying debug message of added tsig key. 4877 - added test that starts 7 servers in a mesh and lets them fight out 4878 what zones to transfer and serve. 4879 - xfrd logic bug: if notified a slave would not see the renewal 4880 of its current zone. 4881 4882 1 August 2006: Wouter 4883 - Test for remove domains with IXFR. 4884 - Fix for empty nonterminals and IXFR deletes. 4885 - Test for timeouts, including expiry, and expiry and zone updates. 4886 - Test for axfr refused authorisation. 4887 - Test for deadlock in ipc. 4888 4889 31 July 2006: Wouter 4890 - Test plan ixfr test in tpkg/long directory. 4891 - IXFR with many packets tested (one RR per packet). 4892 4893 28 July 2006: Wouter 4894 - tentative change, that preserves ordering of rrtypes for a domain. 4895 - fix for serial rollover (old_serial + 2**31), now works, is seen 4896 as new serial and rolled over to new. 4897 - serial numbers, and time values, printed as unsigned to logfile. 4898 - set so that if info is provided by operator, refreshing state 4899 not expired is used. 4900 - forgot to * a pointer to boolean, is_ixfr in the difffile reader. 4901 This fixes the testplan_ixfr test 1. 4902 4903 27 July 2006: Wouter 4904 - fixup desc of tsig xfer test, remove debug from xfr_huge. 4905 - fixed compressed dname tables cleanup, to set ptr to NULL. 4906 - initialised xfrd_listener.fd to -1. 4907 - fixed difffile handling of very short AXFRs, with no data. 4908 4909 26 July 2006: Wouter 4910 - Updated the requirements with comments from Olaf. 4911 - README discourages use of experimental nsec3 rr a bit more. 4912 - typo in DNAME code, used original qname instead of CNAME 4913 adapted qname variable. 4914 - added IPSECKEY RR type, RFC 4025. 4915 - tpkg test with sample ipseckey rrs. 4916 - wireformat for IPSECKEY depends on the value of a rdata atom, added 4917 WF_IPSECGATEWAY to handle that. 4918 - DHCID type, data is encoded in one binary/b64 blob. 4919 4920 25 July 2006: Wouter 4921 - max number of tries for nsd-notify is 15, so that the 4922 total time for sending is about 75 seconds. 4923 - forward port of fixes for bug 105 and 135 in nsdc. 4924 forward port of test for bug 105. 4925 - fixed nasty bug with configure --prefix=<...> where config.h 4926 was wrong. Now double evaluate the shell expansion on the defines. 4927 4928 5 July 2006: Wouter 4929 - helped in README with gnu make; need to make clean 4930 so that botched attempts by make to create the lexer files 4931 do not stay around. 4932 - removed %zd, replaced by casts to int. 4933 - updated REQUIREMENTS file, the sections on RR types, on what 4934 algorithm NSD follows and on which RFCs are supported are updated. 4935 4936 3 July 2006: Wouter 4937 - 'make depend' target in makefile. (updates both Makefile.in 4938 and Makefile, so it works for users and for svn). 4939 - doc minor update. 4940 4941 2 July 2006: Wouter 4942 - TESTPLAN, README, bugzilla-bugs docs updated. 4943 - NSD for BIND users update. 4944 4945 29 June 2006: Wouter 4946 - removed --zonesfile nsd.zones configure option. 4947 - doc/README updated for 3.0. 4948 - doc update. NSD_FOR_BIND_USERS document. 4949 - moved from -Ds to the config.h header, cleaner compilation output. 4950 - use autoconfs built in large file support enabler. 4951 4952 28 June 2006: Wouter 4953 - nsdc neater, checks for BLOCKED ips more strictly. 4954 - nsd -d also disables xfrd forking, and thus all reloads 4955 and secondary zone treatment. Stated so in manual page. 4956 - fixup, apart from ip4 need to allow ip6 in example.conf 4957 line showing how to allow access for everyone to axfr. 4958 4959 27 June 2006: Wouter 4960 - Fixed read in server.c to be a blocking read for sure, 4961 even if ipc is not blocking on the OS. 4962 - nsd-notify tries to send notify 5 times, then exits with error. 4963 - nsd-checkconf can lookup key secrets by name from a config file. 4964 - difffile option is always set in options struct with default 4965 or config value. 4966 - nsd-patch uses dnames to compare zone names (for trailing .). 4967 - nsdc updated to work with config file. 4968 4969 26 June 2006: Wouter 4970 - Nicer check in autoconf for struct timespec type. 4971 - NSEC3 next hashed ownername is a length byte followed by data. 4972 - nsd-checkconf more quiet, clearer error message. 4973 - NSEC3 does not complain about glue records without nsec3. 4974 - nsdc work (did start, stop, running, rebuild, restart, reload, stats). 4975 4976 21 June 2006: Wouter 4977 - nsid commandline parsed using hex_pton routine. 4978 - unit test for hex_pton. 4979 - added include stdlib, needed for free() on sunos4. 4980 - fixup of disable-ipv6 compilation. 4981 - memmove compat implementation (created fresh). 4982 - yy_set_bol() for old flex compat define. 4983 - compat implementation from openssh4.3p2 for 4984 strlcpy, inet_aton, and inet_ntop routines. 4985 - changed ctime_r usage to ctime() call, nsd is not threaded. 4986 - compiles on SunOS4/gcc-2.95. 4987 - debug statements go to the log_msg route instead of the 4988 fprintf route, so they will get to a nice logfile even if 4989 we forked away, with xfrd. logfile=/dev/stderr gives old way. 4990 - minor changes to cutest to make unit test compile 4991 on SunOS4/gcc-2.95, it checks out fine there. 4992 4993 20 June 2006: Wouter 4994 - updated configure to disable -O2 on platforms where gcc 4995 does not like it (such as dec-alpha). 4996 - nsd-notify used recvfrom and passed addrinfo.ai_addrlen 4997 which is a size_t, but recfrom needs a socklen_t*. On dec 4998 alpha these types differ in size (size_t is 64bit, 4999 socklen_t is 32bit). Therefore, used a wrapper variable 5000 to pass to recvfrom. 5001 - changed long int to time_t in nsd-patch.c to please compiler 5002 on dec alpha. 5003 - dec alpha complains if statements are in front of variable 5004 definitions. Fixed code for some mixups on this. 5005 - Fixup cutest for dec alpha. Code, lowercase filename, %lf->%f. 5006 - cutest fixup uses (size_t) cast and %zx to print ptrs (for debug). 5007 - for SunOS4 configure detects ssize_t and struct timespec. 5008 - removed usage of fpos_t, instead using fseeko/ftello for 64bit. 5009 - configure will define fseeko/ftello with fseek/ftell if unavailable. 5010 - added missing include from buffer.c (stdlib for free()). 5011 - defines for snprintf and vsnprintf in config.h if needed. 5012 - configlexer flex is called more cleanly with -t to write stdout. 5013 - missing include from configparser, stdlib for atoi. 5014 - config.h provide inet_pton define if it is not available. 5015 - fixup of INET6 defines, where sockaddr_storage is used 5016 outside of INET6 defines, in xfrd-tcp. 5017 - edns_init_nsid was not defined in edns.h. 5018 - added compat/fake-rfc2553.c and h from openssh 4.3p2. That has 5019 a BSD license as well. They replace getaddrinfo() (and friends) 5020 when those are missing. 5021 5022 19 June 2006: Wouter 5023 - updated the tpkg/manual tests for NSD 3 config files. 5024 Some need root privileges to run (using hping), they all pass. 5025 - also the tpkg/long test bug_sighup. 5026 - nsec3 code will warn at prehash time for missing exact nsec3 5027 records. So faulty signed zones are more easily spotted. 5028 - fixed NSEC3 and CNAME/DNAME chains, it will disprove the new qname. 5029 - removed for() look in CNAME processing, only first CNAME is 5030 processed now. 5031 - zonec will error on a zone with multiple CNAMEs for one name. 5032 5033 16 June 2006: Wouter 5034 - Swapped read and write ops in xfrd_handle_ipc, so that a read 5035 of a signal from main can stop further writes. 5036 - xfrd will complete its last message before shutting down 5037 the ipc writes and then acknowledge the reload-sync. 5038 This resolves the race where half of ipc messages caused bad 5039 modes from the main. 5040 5041 15 June 2006: Wouter 5042 - In preparation of notify send overhaul, moved the notify 5043 send code to xfrd-notify.c and h files. 5044 - created cleaner split of notify send and xfr code. 5045 Still in the xfr process, because it is a convenient location. 5046 - fixed bug where notify sending would read from wrong fd. 5047 - send master zone notifies. 5048 Does not skips master zone SOA INFO updates. 5049 - fixed bug where port number acls did not match. 5050 - fixed bug where tsig keys are checked for twice, but not error_code. 5051 - fixed notify send retry counting. 5052 - added test tpkg for notifies from nsd master to nsd slave. 5053 - nsd-checkconf flags if you set allow-notify without request-xfr. 5054 5055 14 June 2006: Wouter 5056 - fixed crash bug when dnssec/NSEC enabled and query DNAME 5057 target did not exist. 5058 5059 13 June 2006: Wouter 5060 - created doc subdirectory for documentation. 5061 - removed unused DIFF FILE MAGIC string. 5062 5063 12 June 2006: Wouter 5064 - dname_test tpkg with very extensive DNAME testing. 5065 - moved sizes of zone_name buffers to 3072 - for escaped names. 5066 - nsd-patch has a debug option to list the contents of the 5067 difffile/ixfr.db/transfer patch log in a journal fashion. You can 5068 then manually inspect the contents. 5069 5070 9 June 2006: Wouter 5071 - after a reload NSD will report the memory churn: number of bytes 5072 of memory wasted by the zone transfer code. 5073 5074 8 June 2006: Wouter 5075 - When zone is re-chosen after a CNAME/DNAME no SERVFAIL is set, 5076 noerror is returned instead. 5077 - zonec will error on multiple DNAMEs for the same name. 5078 - zonec will error on DNAME and CNAME together. 5079 - improved loop log message. 5080 5081 7 June 2006: Wouter 5082 - after DNAME the closest_match is set correctly for another DNAME. 5083 - in case of a loop returns gracefully instead of crash. 5084 - nsec3 checks if it is enabled for the zone for wildcards. 5085 - NSD will give referrals for zone cuts encountered after a CNAME 5086 or a DNAME. This also fixed various subtle stuff with CNAME/DNAME 5087 and TYPE_DS at zone cuts. It basically re-determines the zone 5088 to use after the CNAME/DNAME. 5089 5090 6 June 2066: Wouter 5091 - zonec checks for data below a DNAME, and will not create the db, 5092 as per rfc 2672. Tpkg test to make sure such a zone is not loaded. 5093 - updated rr-test tpkg so it has no data below a DNAME. 5094 - DNAME synthesis of CNAME records, including compression for cname. 5095 - included cname creation in dname test. 5096 - preallocate the extra temporary domain_type structures. 5097 - too many temp domains returns OK packet so that the resolver 5098 will recurse and ask us again with the last name in the chain. 5099 - fixed bug introduced in preallocation on temp domain numbering. 5100 5101 2 June 2006: Wouter 5102 - dname_replace function that does DNAME replace and unit tests. 5103 - added error codes from DNSUPD rfc2136 to constants in dns.h. 5104 - in query.c added DNAME following code. 5105 - fixed bug 134: hints[i] in nsd.c to hints[0]. 5106 - added tpkg small test for DNAME. 5107 - tpkg to test bug 134 (starts 100 processes). 5108 5109 1 June 2006: Wouter 5110 - tsig test with NSD master and NSD slave server. Tsig AXFR transfer. 5111 nsd-xfer used to test slave zone contents. 5112 - fixed bug where buffer_flip() is done before appending tsig rr. 5113 - version printed at start of nsd in logfile. 5114 - xfrd prints name of tsig key used during transfer in commit comments 5115 so it appears in the log file and in zonefile after nsd-patch. 5116 - prints RRs from diff file only if debug level >= 1. 5117 - scalable transfer test xfr_gig added, you can set the size to try 5118 in the .pre file. Now set very small. 5119 5120 31 May 2006: Wouter 5121 - xfrd check for failed updates. It compares the time it wrote the 5122 commit to disk with the time of the last reload command. 5123 Failed updates are restarted like the zone is notified of the soa. 5124 It also catches reloads that have been lost (reload cmd while reload 5125 is running, or a crashed reload process, for example). 5126 - when reload is issued, times at that second are put back one second, 5127 so that after a reload all the zones that should have been loaded 5128 have a time from before the reload. 5129 - if a reload crashes, NSD will continue with the old database, 5130 xfrd is not informed, since it cannot fix that. 5131 - nsd-checkconf strdups arg strings before writing to it. 5132 - tsig error replies contain error data, but no signature. 5133 also crashproof, badly formatted tsigs get a format error. 5134 - tsig error print knows about DNS rcodes in tsig error field. 5135 - added tpkg tests for tsig. 5136 - tpkg test for nsd-xfer with TSIG from nsd. 5137 - small stuff with makedist.sh, CREDITS, Features, make test. 5138 5139 30 May 2006: Wouter 5140 - tsig pre-allocs the rr_region, not at runtime, tsig_create_record(). 5141 - redid some region work for tsig. Now has another temporary region 5142 for the context data. User is only aware of the region passed at 5143 start that exists for the lifetime of the struct. 5144 During TSIG checks no more mallocs are done, only region_free_all 5145 and region allocs (of small size). 5146 - checkconf, port is stored as a string. 5147 - tsig now keeps a max_digest_size for giving reserved space. 5148 - AXFR does tsig every 96 packets (and first and last packet). 5149 - tsig signing works for all queries. SOA queries, ... 5150 If you configured the key in the config file, you can use 5151 that key for any query for any zone. 5152 Except for NOTIFY and AXFR queries; those are only allowed for 5153 the zone (and source ip address) which are configured in the config. 5154 - cleaner compile with tsig disabled. 5155 - fixed unknown key error reply in tsig. 5156 5157 29 May 2006: Wouter 5158 - The nonblocking write routines disable silently if they have 5159 nothing to do. 5160 - put xfrd read/write state routines (almost 500 lines of code) 5161 into xfrd-disk.c file. 5162 - little readme blurb on xfrd state file for the operator. 5163 - put ipc code in its own file for ease of reading. 5164 - removed --disable-axfr, you can control this via acls. 5165 With no provide-xfr: statements, a zone will not do axfr. 5166 5167 25 May 2006: Wouter 5168 - fixed reload sending; it checks for EAGAIN and EINTR. 5169 - reload sends parent quit command blocking to make sure of arrival. 5170 - send_children_quit in parent uses nonblocking writes and closes 5171 the pipe to signal the child to quit (even if the write does not 5172 come through, the closed pipe will cause the child to quit). 5173 - need_to_send_STATS flag in parent. 5174 - reload has its own ipc-listening handler in server_main. 5175 - nonblocking writes for server_main; this solved write-blocking race. 5176 - another race condition solved, if a process dies, half a read or 5177 write buffer could be left behind on another process. These are 5178 dropped. Now: 5179 * The server_main drops ipc from dead children. 5180 * The server_main drops ipc if xfrd dies. 5181 * The server_main drops xfrd(old) and all children ipc 5182 on reload. 5183 * The xfrd drops ipc to parent on a SOA_BEGIN from reload. 5184 So after reload, but parent and xfrd start with 5185 clean ipc buffers. 5186 5187 24 May 2006: Wouter 5188 - unit tests print progress while running to stderr. Included license 5189 of cutest with its source in svn repository. 5190 - stack type (for the IPC buffer of zone update dirty). And unit test. 5191 - only update zone-is_ok if needed to reduce memory copy on write. 5192 - split off conn_write() from xfrd tcp nonblocking write routines. 5193 - nonblocking writes for xfrd. 5194 5195 22 May 2006: Wouter 5196 - ported over minor nits from 2.3.5 NSD fixups. Cast to (void) 5197 unused function return values. 5198 - removed kill signal to children, superfluous due to quit cmd ipc. 5199 - moved is_ok for zones to the zone_type in namedb, not in 5200 the options, it is a runtime value not a config value. 5201 For zones that have no data, parent and children keep no state. 5202 5203 12 May 2006: Wouter 5204 - fixed up usage print for zonec to include -f option. 5205 - xfrd send notifies. 5206 - server no longer sends SOA INFO for master zones. 5207 - removed possible debug log print of a null string. 5208 5209 11 May 2006: Wouter 5210 - nsd.conf.sample shows defaults for ip4-only, ip6-only and debug-mode. 5211 - SOA_BEGIN message on start of reload sending soa info so that 5212 xfrd will not reply with expire-notifications and thus deadlock 5213 both on blocking writes (and no OS buffer on the pipes). 5214 5215 10 May 2006: Wouter 5216 - nsdc.sh is set +x after creation. 5217 - improved error message when zone in db has no config info. 5218 - support for broken nsec3 chains (if the one with the SOA bit 5219 is complete, it is OK for there to be other nsec3 chains 5220 with different parameters in the zone). 5221 5222 9 May 2006: Wouter 5223 - Fix for finding bad zone when populating SOA info on start. 5224 it would find a parent zone instead of the zone in question ( 5225 which is empty). 5226 - request-xfr: AXFR 10.0.0.153 keytouse syntax to interoperate 5227 with NSD machines. Will only send AXFR queries to the machine. 5228 - documented AXFR option in nsd.conf.5 manual page, 5229 and updated nsd-checkconf, nsd.conf.sample. 5230 - made 'skipping zone' log entry clearer (Sam Weiler asked). 5231 5232 8 May 2006: Wouter 5233 - updated zparser.y to handle empty nsec_seq lists. 5234 for empty nonterminals in NSEC3. 5235 - nicer without ambiguous grammar. 5236 5237 5 May 2006: Wouter 5238 - nsd-notify handles option -y key:secret to TSIG sign outgoing 5239 queries. 5240 - the acl checks now verify TSIG signatures on the query. 5241 - iterated_hash compiles with ssl disabled. 5242 - new ipc NSD_ZONE_STATE sent by xfrd to nsd process. notifies 5243 nsd of the state (ok or expired) of a zone. 5244 - reload process waits for the old server_main to exit to make 5245 sure there is no race condition listening to the NSD_ZONE_STATE 5246 messages generated when reload sends SOA_INFO to xfrd. 5247 - server_main and children all set zone_ok state in config options. 5248 also server_main so that newly forked children get the right state. 5249 - if a secondary zone is expired, NSD returns SERVFAIL. 5250 a transient error, so resolvers try again later. 5251 - SOA_END ipc message, sent by reload to xfrd, so it can repeat 5252 all zone states (which can have changed during reload). 5253 - zone_is_ok kept in config section so that state for zones 5254 without data is not lost. Those have no zone_type*. 5255 - secondary zones start in the expired state. 5256 - if expired zones are updated, then NSD gets the go ahead from 5257 xfrd after reload sends SOAINFO/SOAEND msg, so it is really 5258 updated in nsd memory. 5259 - fixed tpkg xfr_1 to have longer expiry times (from 0 and 3 5260 seconds to 2000 and 3000 seconds), so the zone does not expire 5261 during the test anymore. 5262 5263 4 May 2006: Wouter 5264 - when a new lease is acquired xfrd_packet_newlease result is used. 5265 - if a zone is lost in nsd db, xfrd will update state to match. 5266 - IXFR can use TSIG in queries and verify responses. 5267 - Fixed memory leak in xfrd tsig handling. 5268 5269 3 May 2006: Wouter 5270 - forward of 2.3.4 RELNOTES into trunk. 5271 - debug log statements to track xfrd request rounds. 5272 - removed memleak from handle_passed_packet in xfrd. 5273 - faster find_zone in difffile.c. 5274 - nsd-patch writes commit log entries into zone file. 5275 - took some tsig.c enhancements from 3 branch, 5276 -> if key or algo changes during connection, return bad_key, 5277 -> debug statement neater. 5278 - nsd adds tsig keys to tsig keyring at startup. 5279 5280 2 May 2006: Wouter 5281 - ifdef inet6 back on ss_family usage in server.c. 5282 - nsd-checkconf ip6 ifdefs improved. 5283 - xfrd tries servers 3 rounds, then waits for next retry. 5284 5285 1 May 2006: Wouter 5286 - off_t used for 64bit fileio. 5287 - searches for smallest unused part and sets diff_skip to that. 5288 - doc comment near the region_free_all for every query about 5289 malloc speed. 5290 - null ptr in strcmp does not work on bsd, fixed nsd-checkconf. 5291 - made nsd.conf.sample.in so the sample gets prefix-corrected. 5292 - removed nsd.zones.sample. 5293 - makedist.sh added manual pages for nsd-xfer nsd-patch. 5294 - install/uninstall nsd-patch, nsd-checkconf and manpage. 5295 small update readme. 5296 5297 28 Apr 2006: Wouter 5298 - ixfr >64k in xfrd. 5299 - fixed length of new commit parts. 5300 - fixed multiple ipc reads in xfrd. 5301 - fixed multiple packet ixfr read in diff file. 5302 Miek: 5303 - Forward port fixes for nsd-xfer and nsd-notify 5304 5305 27 Apr 2006: 5306 Wouter: 5307 - nsec3 review fixes. 5308 - diff file format expanded for >64kb transfer support. 5309 - diff reader adjusted for >64kb. 5310 Jelte: 5311 - small non-null options check in nsd.c. 5312 Miek: 5313 - updated nsd-checkconf for zone parse shell script support. 5314 5315 25 Apr 2006: Wouter 5316 - Tests on NSEC3 code. Fixed that the unsecure delegations also 5317 have _ds_ parent nsec3 prehashes, so that they get proper NSEC3s. 5318 NSD will serve NSEC3s to prove 'opt-out' also if the opt-out bit 5319 is (erroneously) not set. 5320 - For the 05pre2 draft section 5.4.8.1. QTYPE is NSEC3, only NSEC3 5321 RRsets at name. Fixed that RRSIGs present do not matter. 5322 And also the closest encloser proof in that case fixed. 5323 If wildcard exists below zone apex servfails (cannot disprove 5324 it and NSD cannot instantiate the wildcard at that point). 5325 5326 24 Apr 2006: Miek 5327 Miek: 5328 - forward port nsid (disabled by default) 5329 Wouter: 5330 - nsd-patch manual page. 5331 - minor MacOSX port fixes. 5332 - xfrd-reload-timeout: config option. 5333 - if you set the xfrd reload timeout to -1 it will not 5334 automatically reload after a transfer. User can reload. 5335 - reload timeout is a wait period after the reload is triggered. 5336 - more verbose acl logging. Validated acls are logged in detail. 5337 Invalid acls are only logged in debug mode, level >= 1. 5338 - log message when xfrd tcp connections max out. 5339 - if unknown NSEC3 hash type (not SHA-1), disable NSEC3. 5340 - xfrd randomizes the timeouts, within 10% of original, 5341 to spread out activity. Short timeouts < 10 seconds are not 5342 affected, and will give activity bursts (on startup for example). 5343 5344 21 Apr 2006: Wouter 5345 - put NSEC3 code in nsec3.c and nsec3.h. 5346 - iterated_hash only adds the salt if salt_len > 0. 5347 - added some assertions and cleanups to nsec3 code. 5348 - prehash also calcs the nsec3_last domain*. 5349 - dbaccess when reading in will set the rr_type.owner value. 5350 - changed namedb_find_zone to domain_find_zone, log msgs. 5351 - implemented logic from nsec draft 05-pre2 section 5.4.1 - 5.4.8. 5352 NSEC3 responses only happen for nsd compiled with --enable-nsec3 5353 and for zones where an NSEC3 with the SOA bit set exists. 5354 - added prehash pointer to ds parent side cover for opt out. 5355 - removed dynamic plugins. Dynamic plugin support is an explicit 5356 non-requirement (under creeping featurism). 5357 - in domain table create root nsec3 ptrs are NULL. 5358 5359 20 Apr 2006: Wouter 5360 - Unittest of base 32 encoding. 5361 - unittest start for iterated hash. 5362 - fixed for ctrlc in debug mode. 5363 - delete zparser_conv_long, not used, not needed 5364 - nsd-xfer will display NSEC3 correctly. zonec parses. 5365 - improved usage() line from zonec, about -c none, must be -C. 5366 - base32 printed in lowercase (canonical format for DNS). 5367 - NSEC3 added prehash pointers to the namedb. 5368 - NSEC3 autodetects presence of NSEC3 in zone and parameters. 5369 5370 19 Apr 2006: Wouter 5371 - port fix base10 in zonec conv short from 2_2 branch to trunk. 5372 and conv byte, algo, certificate, long. 5373 - configure option to enable NSEC3 (--enable-nsec3) support. 5374 - from Ben Laurie's NSEC3 patch, loaned the parse code, 5375 base32 conversion code and iterated_hash. 5376 With some small modifications. The type rrdescriptors are 5377 indexed by value below SPF, and in 5378 rdata_wireformat_to_rdata_atoms BINARYWITHLENGTH checks 5379 for end of buffer. Also parser checks for '-' salt. 5380 Some layout (spaces after ,s). And NSEC3 define is used. 5381 strtol used for iterations is base 10. 5382 - moved rrtype descriptor table sanity check to unittest. 5383 5384 18 Apr 2006: Wouter 5385 - Fixed check for SOA IN, bad ntohs in the check. 5386 - minimum timeout also enforced for very low expire times. 5387 - report the actual used length of the sockaddr to sento 5388 for FreeBSD. 5389 5390 7 Apr 2006: Wouter 5391 - modified the kill_nsd tpkg so that it waits up to 10x5 secs 5392 for nsd to make the pid file, and it wait up to 10x5 secs for 5393 nsd to exit after the kill signal is given. 5394 - xfrd checks on startup if there is trailing garbage in the 5395 diff file, left there by a previous xfrd killed in action. 5396 It then snips off any partial parts, so service can resume. 5397 Also the difffile_skip pos is set before any partial record there. 5398 - first version of nsd-patch; reads db and ixfrs and updates zones. 5399 - moved print_rdata from nsd-xfer to rdata.h to share code. 5400 - moved print_rr from nsd-xfer to util.h to share code. 5401 5402 6 Apr 2006: Wouter 5403 - notify handler passes acl number that matches to xfrd. 5404 - xfrd keeps a next_master for a zone, and sets it after notify. 5405 when notified nsd will try to contact the master that sent 5406 the notify, if send from an address that is both in acl 5407 allow-notify and request-xfr. 5408 - xfrd closes its tcp and udp sockets on exit. 5409 - default names for diff file and xfrd state nicer. 5410 - fixed up kill nsd grep on ps. 5411 - fixed up race conditions in test script for kill nsd 5412 wait for pid file creation by nsd, and grep -v grep in check. 5413 - in nsd signal-flags inherited from the parent are zeroed 5414 when a server_child starts. Also the server_child switches back 5415 to NSD_RUN mode when a bad mode happens. 5416 - check if ixfrs start from the version in memory. 5417 - if IXFR/AXFR ends in a serial that is newer than the serial 5418 that was sent in an notify, update the notified serial. 5419 5420 5 Apr 2006: Wouter 5421 - added lowerbound for retry timeout. 5422 - added extra assertions to xfrd-tcp.c, saying that the waiting line 5423 for tcp connections must be empty if the counter is below max. 5424 - setup so that the first master tried is the first in acl list. 5425 - diff file skips OPT and TSIG RRs if they are put into the answer 5426 section. 5427 - if IXFR contains an RR to delete that does not exist, nothing 5428 happens. 5429 - update zone for NS, RRSIG also if multiple RRs in the rrset. 5430 - difffile: create zone struct also if domain exists already. 5431 - difffile: destroy temp region on error. 5432 - difffile: in delete_RR, create temp region outside of the routine, 5433 so no alloc region, destroy region for every deleted RR. 5434 - difffile: for IXFR: do not delete final SOA RR. 5435 - difffile: unknown parts in file is an error. 5436 - difffile: EOF on last packet is ignored w/o giving an error. 5437 5438 4 Apr 2006: Wouter 5439 - Addes EACCES to the netio dispatch error bailout. 5440 - Removed EACCESS (probably due to log_msg), error on close 5441 xfrd pipe is small, main process closes its end, and hopes for 5442 the best). 5443 - review: return on error condition in xfrd_tcp_open fixed. 5444 - review: expired when time >= expire_time, so it will not wait 5445 for the retry after expire until it will detect the expiredness. 5446 - removed duplicate lines from xfrd_handle_zone_timeout. 5447 - review: copy of uint32_t using memcpy to avoid unaligned memory 5448 accesses. 5449 - review: fd=-1 removed from set_refresh_now; only does timer. 5450 - on a tcp timeout it will retry immediately (instead of waiting 5451 another retry timeout). This means if you set refresh_now, it will 5452 interrupt a tcp-timer for a fresh retry with the next master. 5453 - put null in buffer for xfrd read state. 5454 - log msg uses string that exists instead of overwritten buffer. 5455 - read entry sets refresh depending on current time, 5456 and makes sure not to check soa contents if none provided. 5457 added explanatory comments. 5458 - EACCES back in check. 5459 - server_main first checks for terminated children, then select(). 5460 So when select is interrupted, by kill or quitting children, 5461 it will first see if it has to quit itself, before restarting 5462 the children. 5463 - destroy tempregion xfrd read on error. 5464 - check for serial existence in xfrd_handle_incoming_soa. 5465 - handle_incoming_soa uses set_timer_refresh routine. 5466 and can handle expire times < refresh times. 5467 - log msg for udp socket() error. 5468 - review: xfrd_parse_soa_info email parse uses correct buffer spot. 5469 - added a lowerbound to refresh interval (=1 second now). 5470 - upon receipt of a IXFR, if the serial is older than the notified 5471 serial, the zone stays refreshing (but the ixfr is saved). 5472 5473 3 Apr 2006: Wouter 5474 - Added buffer length check to internal ipc. 5475 - split out packet_read_query_section from the process_query_section 5476 routine (and moved to packet.c/h). 5477 - xfrd reads passed packet via ipc. 5478 - ported over fix to 2_2 on missing rr types by removing the 5479 duplicate RRtype array, and using rrtype_to_string. 5480 - xfrd handles notifies. immediately starts updating. 5481 - xfrd state file format fix. 5482 - removed libwrap stuff - superseded by acls. 5483 use provide-xfr: statements for your zone in the config file. 5484 updated README for this. 5485 - updated tpkg tests for axfr to use provide-xfr: 127.0.0.1 NOKEY 5486 - review: move var create to start of function (xfrd_init()). 5487 5488 31 Mar 2006: Wouter 5489 - zone type has a pointer to zone options. 5490 - nsd options has an rbtree to find zone options in. 5491 - nsd checks acl for incoming notifies and replies 5492 error or confirmation. 5493 - nicer layout in options.c. 5494 - updated makefile dependencies. 5495 - fixed sz for SOA_INFO ipc, which was too small. 5496 - notify is sent to server_main, server_main sends it to xfrd. 5497 5498 30 Mar 2006: Wouter 5499 - include: documented in manual page. 5500 - MAXINCLUDES define in one place (config.h). 5501 - configure checks for strptime in include files. 5502 - use %d instead of %zd (sparc5 machine does not get zd). 5503 - use region_strdup in configlexer. 5504 - added a check for EINVAL in dispatch - will abort 5505 on the error instead of busy hang. 5506 5507 29 Mar 2006: Wouter 5508 - \r for config lexer. (similar changes to zonelexer). 5509 - forward port of fix to 2_2 branch: 5510 short int in var_arg is promoted to int, according to B. Laurie. 5511 The same logic for %o, %d %x would hold for %u I think. 5512 - in XFRD, soa prim_ns and email domain names are kept in a max 5513 size buffer. 5514 - split up dname_parse into parse from string to wireformat 5515 and parse from wireformat to memoryformat, so both can be called. 5516 - split up dname_make_from_packet into reading the wireformat 5517 from the packet and the dname_make, so both can be called. 5518 - xfrd reads all soa info from incoming xfr packets. 5519 - xfrd will ignore TC bit on tcp channels. 5520 - nsd sends xfrd all soa info, including ttl and dnames. 5521 - config file now has an include: filename directive. 5522 5523 28 Mar 2006: Miek 5524 - forward port fixes for zone compiler and \r. svn:1926-1927 5525 - add DO bit MASK and remove the !! construct 5526 5527 17 Mar 2006: Wouter 5528 - according to axfr-clarify, added comments that we check 5529 more leniently on further responses on a TCP stream. 5530 5531 16 Mar 2006: Wouter 5532 - Fixed up SOA INFO Send routines. Send from server works. 5533 - niced up xfrd state file. 5534 - Fixed up so that after a reload it will continue in diff file 5535 where it left off. 5536 - made send of SOA info use write_socket, in case of short writes. 5537 - redesigned xfrd_tcp_read to use the same code for ipc read. 5538 - no free()s before xfrd exit. 5539 - xfrd handles incoming SOA INFO ipc packets. 5540 - removed debug, updated zones get SOA INFO sent. 5541 5542 15 Mar 2006: Wouter 5543 - Fixed up domain table insert, it was being used in routines 5544 that originate from nsd-xfer that do not set compression numbers 5545 correctly. 5546 - memleak fix in difffile in case of error. 5547 - difffile processing works so that NSD can read an axfr saved 5548 into the nsd.diff file. (xfrd already request and save it there). 5549 - split off xfrd tcp handling into xfrd-tcp.c. 5550 - cleaned up send_udp in xfrd, and read_state. 5551 - removed xfrd tcp_send_blocking. 5552 - xfrd sets state from ok to refresh to expired based on timeout. 5553 - xfrd sets reload timeout. 5554 - Added zone updated to keep track of zones that are changed 5555 after a reload. These zones get their information notified 5556 to xfrd. 5557 - removed unused zprintrr declaration from zonec.h 5558 - nsd sends soa information to xfrd. 5559 5560 14 Mar 2006: Wouter 5561 - TODO updated 5562 - worked on reload ixfr. It will add/delete RRs and zones. 5563 - xfrd receive parse of xfr messages improved. writes commit. 5564 - server compressed_dname_offsets table is increased if reload 5565 creates extra names. 5566 - difffile will create zone and apex if not there (i.e. the zone 5567 is configured but no data file provided). 5568 - bit more verbose in error message for bad diff file. 5569 - Typo fix in sample config file. 5570 5571 13 Mar 2006: Wouter 5572 - configure sets fseek (fgetpos/fsetpos) to use 64 bit interface 5573 with _FILE_OFFSET_BITS=64. 5574 - nsd will skip loading the .db if the DB checksum is the same. 5575 - Miek added trace test and nsd kill test. 5576 - Wouter worked on diff file c. 5577 5578 10 Mar 2006: Wouter 5579 - Cleanup of UDP/TCP code in XFRD. 5580 - xfrd now has tcp max connections and managing. tcp read/write. 5581 - response TC on UDP ixfr, starts TCP. 5582 - sends correct ixfr and axfr queries, a bind server answers. 5583 - made packet_skip_dname() public. 5584 - sets read/write event flags for tcp fd right. 5585 5586 9 Mar 2006: Wouter 5587 - Removed header from DIFF file format. CRC not that important there, 5588 you have to check the packets anyway. 5589 - cutest rbtree removed unused clean_rbtree and always_fail routines. 5590 - xfrd timeout handler, more work. Checks expire. 5591 5592 8 Mar 2006: Wouter 5593 - xfrd sends UDP xfr request to master(s) with timeouts, and stores 5594 returned data on disk. 5595 - updated dependencies and declaration of write_soa_buffer. 5596 5597 7 Mar 2006: Wouter 5598 - Fixed printfs for size_t warnings on Mac OsX. 5599 5600 6 Mar 2006: nsd-team 5601 * Wouter: xfrd read and write work. Statefile is "nsd.xfst". 5602 * Wouter: nsd-checkconf checks dname parse of zone name:. 5603 * Wouter: updated difffile in parser.y, production in server: clause. 5604 * Wouter: zonec now takes -C for 'no config file' option. 5605 * Wouter: updated configyyrename.h for bison 1.875d on sparc. 5606 * Miek: zonec -h and nsd -h exit with exit code = 0. 5607 * Miek & Wouter: updated tpkgs to work again. 5608 * Wouter: xfrd read handle soas, handle soa_incoming part. 5609 * Wouter: moved compare_serial() from nsd-xfer to util.h. 5610 5611 4 Mar 2006: Wouter 5612 - xfrd zone and soa memory structure definitions. 5613 - xfrd init zones. 5614 - xfrd read and write state file code. 5615 - option for difffile: and xfrdfile: config lines. 5616 5617 3 Mar 2006: Wouter 5618 - Removed double kill after reload. Only socket cmd send. 5619 - Added code to handle race condition where xfrd is restarted 5620 during a successful reload. Afterwards, the new server_main 5621 only has the old xfrd pid, new xfrd is an orphan. 5622 Solution: when xfrd closes cmd channel (i.e. it quit) 5623 unexpectedly, send sighup to all processes in the group. 5624 This should quit the orphan & all children & reload the 5625 server_main, which will fork the children and xfrd again. 5626 5627 2 Mar 2006: Wouter 5628 - Added nsd-checkconf.8 to makedist.sh replace list. 5629 - DIFF file format updated. 5630 - removed tsigkey->server value, it was read in, but unused. 5631 - new function to add config file keys to tsig. 5632 - nsd-checkconf checks parsing of keys. 5633 - Updated sample key file with valid keys. 5634 - added first xfrd files. xfrd is started from server_main. 5635 xfrd listens to server and server to xfrd. xfrd is restarted 5636 if it dies unexpectedly. xfrd quits when server signals it. 5637 xfrd survives nsd reloads. 5638 - nsd_options no longer global variable. 5639 5640 1 Mar 2006: Wouter 5641 - Nicer text in nsd.8. 5642 - nsd.c prettier code in option handling. 5643 - zonec.c code prettier in option handling, also chdir bug removed. 5644 zonec uses the zone definitions in the config file. 5645 updated zonec.8 and usage(). 5646 - nsd also chdirs to the zonedir, otherwise nsd and zonec would 5647 try to read the database: file from different directories. 5648 .(it does the chdir before the chroot call.) 5649 - new calling syntax for zonec and nsd, because of new config file. 5650 - options added acl acceptance tests (no tsig yet). 5651 - added unit test for options.c - for acl tests. 5652 - zonec removed unused vars, nsd-checkconf print arguments. 5653 - nsd-checkconf.8 manual page. 5654 5655 28 Feb 2006: Wouter 5656 - checked in options.h and config parser code. 5657 - also nsd-checkconf that will test a config file 5658 .(and optionally show what was read). 5659 - default identity has a spelling error. 5660 - Small fix (typo in example) to config manual page. 5661 - Added ; to configparser.y to please bison 1.75 on bsd. 5662 - Will check for blocked addresses in outgoing acls. Also ranges. 5663 - Check configuration tpkg test added. Uses checkconf. 5664 - checkconf does extra semantic tests. i.e. enable absent features. 5665 - tcpcount and servercount cannot be negative. 5666 - updated nsd.conf.5 manpage for @port syntax. 5667 - changed config parser: allows empty server: part (defaults). 5668 - made nsd.conf.sample file. 5669 - put option to configure for CONFIG_FILE nsd.conf location. 5670 Note. Already nsdc.conf exists. Both exist now. 5671 - updated makefile dependencies (gcc -MM). 5672 - getopt optstring in nsd-checkconf updated ("v" only option). 5673 - Added config .o files to nsd and zonec. This compiles. 5674 - Added commandline option -c configfile to zonec and nsd. 5675 configure defaults < configfile < commandline options in importance. 5676 5677 24 Feb 2006: Wouter 5678 - Added compute_crc in util.h and unit tests for it. 5679 - in cutest.tpkg the number of unit tests was hardcoded 5680 in the tpkg package. Removed the dependency, cutest exit 5681 value indicates if any failures happened. 5682 - Added crc at end of NSD-database format. Unique per db. 5683 upped db version to 7 because of this. 5684 - Tested that crcs are big/little endian correct. 5685 - Added DIFF file spec 5686 - updated tpkg213 which compares md5 on a zonefile for new format. 5687 - added nsd.conf.5 manual page with a draft contents. 5688 5689 22 Feb 2006: nsd-team 5690 * Miek: Changed over to Cutest testing framework. 5691 * Miek: fixed typo in netio.h 5692 * Miek: fix syntax in rbtree.c put functions on multiple lines. 5693 * Miek: unit test tpkg for cutest. 5694 * Wouter: fixed ptr bug in rbtree unit test. 5695 5696 17 Feb 2006: Wouter 5697 - rbtree_delete is added and works. Unit tests are there too. 5698 - Changed tail recursion in rbtree_delete to while loop. 5699 - Tagged this version as NSD_3_signalsocket_solution. 5700 It is the stable 2_2 branch with cleanups, portable, and 5701 signalhandler solution by socket communication redesign. 5702 5703 15 Feb 2006: nsd-team 5704 * Wouter: Fixed server_child would wait for two kill signals before quit. 5705 * Miek: don't check for port==0 pkt, just try to send them. 5706 Forward Port of 2.3. 5707 * Wouter: Removed unused, not substituted, @nsdxfer@ from Makefile.in. 5708 5709 14 Feb 2006: Wouter 5710 - Added unit tests for rbtree. Extensive testing of all functions. 5711 - Added tpkg unit test. 5712 - configure tests for CUnit(optional lib for unit tests). Makefile 5713 cleanup so it works on non-gmake on freebsd. 5714 5715 13 Feb 2006: Wouter 5716 - Removed timespec_add(current_time) in server_main, the timeout was 5717 relative, not absolute. This fixes EINVAL on the timeout on freebsd. 5718 - Added check in configure for compiler flags. Used for -Wextra. 5719 - Added check in configure for va_list definition conflict between 5720 stdio and stdarg. This happens on DEC Alpha/Debian. 5721 - removed --enable-mmap configure option. There is no mmap support 5722 in the current codebase. 5723 - renamed local prev to next in domain_next() in namedb.h. 5724 - Removed heap.h. It was not used. Heap and rbtree are mingled anyway. 5725 - in netio.c, in dispatch, it would store the next pointer 'in case 5726 the handler removes itself'. But if the handler removes that next. 5727 Then it would fail. So stored the next in struct netio. 5728 This removes a potential bug. Netio_dispatch is not reentrant. 5729 Reentry would need a list of iterator* in struct netio. 5730 - Changed process_query() to server_process_query(). It is too 5731 similar to query_process(). 5732 5733 10 Feb 2006: nsd-team 5734 * Wouter: Improved configure.ac to detect pselect in sys/select. 5735 The check works on freebsd(yes) and fedoracore 3 and 4 (no). 5736 I hope it also works on Solaris. 5737 Also various other prototypes were implicit: chroot, strptime, ... 5738 These are also solved. 5739 * Wouter: Checked configure on sparc5(solaris). Added check for 5740 ctime_r in time.h (for tsig.c). This conf also works on freebsd/linux. 5741 * Wouter: Updated dependencies in makefile for plugin headers. 5742 These are included only when --enable-plugins is present. 5743 * Wouter: Added a send quit over socket to kill commands in server_main, 5744 These act when the fork children fails. If the kill fails, the 5745 socket command hopefully still works. 5746 * Wouter: Put reload code into a separate function. It communicates with 5747 a socket to the old parent, and sends it a quit command. This works 5748 and terminates the old nsd. Left in the kill as a double failsafe. 5749 If the reload process dies, then the parent closes the socket. 5750 * Wouter: Separated the signal mode from the socket-determined nsd->mode. 5751 Every signal function has a variable, so that multiple signals can 5752 arrive. Only the number of signals of the same type is lost, but not 5753 important for nsd. The signals are handled in turn by the run loop. 5754 This completes the coding to remove signal race conditions: 5755 - nsd uses sockets to communicate with its subprocesses(server,reload). 5756 - signal handler routine contains no lengthy system calls. 5757 - signals cannot overwrite a previous signal. 5758 * Wouter: fixed problem where nsd->mode and mode are different in 5759 server_main. Nsd would kill the children, but then restart them again. 5760 5761 09 Feb 2006: nsd-team 5762 * Wouter: Updated dependencies in Makefile (regenerated them with gcc -MM). 5763 * Wouter: Used splint on the source (with settings to reduce spam.) 5764 And came to the following changes: 5765 - In util.h, make it respect HAVE_CONFIG_H and HAVE_SYSLOG_H. 5766 Also it now defines fallback values for #defines in syslog h. 5767 - Added explicit cast to (unsigned int) in snprintf in dname.c, 5768 dname_to_string routine. 5769 * Wouter: Used extra warnings during gcc compile. -Wextra -Wall 5770 -pedantic -Wbad-function-cast -Wmissing-declarations 5771 -Wmissing-prototypes -Wnested-externs -Wold-style-definition 5772 -Wstrict-prototypes -Wdeclaration-after-statement. 5773 Using -Wtraditional gives too many warnings. 5774 * Wouter: Found a problem with pselect. sys/select.h does not by default 5775 provide the pselect function definition. configure script is 5776 adjusted to test for this and enable _XOPEN_SOURCE=600 to get it. 5777 Found this using the gcc warnings. 5778 * Wouter: dname and rbtree test apps were in make clean target, but 5779 do not exist anymore. Removed from make clean target. 5780 * Wouter: in util log_file() the epoch time_t is passed to printf 5781 without an int cast. Found using extra gcc warnings. 5782 * Wouter: In server.c fixed some signed-unsigned comparisons 5783 using the extra gcc warnings. 5784 - in shutdown and int was used instead of size_t. 5785 - in server_main timeout(signed) was compared with unsigned. 5786 - unused variable in new handler functions. 5787 - in handle_child_command int i instead of size_t was used. 5788 - in zonec the process_rr routine was missing (void) as paramlist. 5789 * Wouter: Added -Wall and -Wextra when --enable-checking is enabled. 5790 * Miek: Ported over the big fat enable checking configure warning. 5791 * Wouter: fixed configure check for pselect on freebsd. 5792 5793 08 Feb 2006: nsd-team 5794 * Wouter: In server.c also sockets from unexpectedly dead childs are closed. 5795 * Wouter: in nsd.c and server.c cleaned out the signal handler, so that 5796 it only includes two switch/if statements and alters only the mode. 5797 No more calls to alarm(), waitpid(), write(), log_msg(). 5798 Instead the work is done in the runloop in server.c and sent by socket. 5799 Also the parent now waits for children. Parent restarts them. 5800 * Wouter: Fixup, the children will quit if the parent closes the command 5801 socket. If parent is killed, they will exit too. 5802 * Wouter: The server_main now listens to children command channels. 5803 Included timeout to check for terminated processes. 5804 Test says that new signal handler works, and child->parent comm. 5805 5806 07 Feb 2006: nsd-team 5807 * Miek: configure.ac version to 3.0.0 5808 * Miek: looked at: buffer.{ch}, answer.{ch}, dns.{ch} 5809 those files don't have any changes, except for dns.{ch} for the 5810 explicit compression. 5811 * Miek: looked at: zlexer.lex and zparser.y; only changes there 5812 for the database changes. 5813 * Wouter: Changed buffer in write_pid from 16 bytes to 32 bytes, 5814 this makes 64 bit numbers fit in the buffer. 5815 * Wouter: Socket connection between parent and child nsds added. 5816 But sighandler now in worse shape. Need to close them. Remove kills. 5817 * Wouter: close the parent and child command channel sockets in shutdown(). 5818
Indexes created Sat Feb 28 05:31:39 UTC 2026