4326999e05- New upstream release 4.2.3: * confine-to-zone configures NSD to not return out-of-zone additional information. * pidfile "" allows to run NSD without a pidfile * adds support for readiness notification with READY_FD * fix excessive logging of ixfr failures, it stops the log when fallback to axfr is possible. log is enabled at high verbosity. * Fixup warnings during --disable-ipv6 compile. * The nsd.conf includes are sorted ascending, for include statements with a '*' from glob. * Fix log address and failure reason with tls handshake errors, squelches (the same as unbound) some unless high verbosity is used. * Number of different UDP handlers has been reduced to one. recvmmsg and sendmmsg implementations are now used on all platforms. * Socket options are now set in designated functions for easy reuse. * Socket setup has been simplified for easy reuse. * Configuration parser is now aware of the context in which an option was specified. * document that remote-control is a top-level nsd.conf attribute. - Remove legacy upgrade of nsd users in %post (boo#1157331)boo#1157331)Adam Majer2019-11-20 13:40:55 +00:00
178e6d5492- More specfile cleanup: + Drop SysV support from package (and hence usage of fillup) + Don't redefine %_rundir + Drop useless BuildRequires on systemd-develAdam Majer2018-02-16 08:15:09 +00:00
4c25569d21Accepting request 575619 from home:jengelh:branches:server:dnsAdam Majer2018-02-12 12:25:36 +00:00
15a8757c21- Create a system user, not a regular user - Check if user/group already exists and are in system range - Do not ignore return values from user/group creationAdam Majer2018-02-12 09:05:22 +00:00
ab97dbe788Accepting request 573085 from home:adamm:branches:server:dns
Marguerite Su
2018-02-10 01:08:20 +00:00
6bdae24a72Accepting request 561095 from home:stroeder:branches:server:dnsAdam Majer2018-01-03 08:11:07 +00:00
8dda8812afAccepting request 546762 from home:stroeder:branches:server:dnsAdam Majer2017-12-01 07:06:48 +00:00
9448366b88Accepting request 520865 from home:stroeder:branches:server:dnsMarcus Rueckert2017-09-05 10:52:10 +00:00
783bfb1032Accepting request 493611 from home:stroeder:branches:server:dns
Michael Ströder
2017-05-09 07:58:57 +00:00
87cb031061Accepting request 490699 from home:stroeder:branches:server:dnsAdam Majer2017-04-24 15:38:12 +00:00
871d54aee8Accepting request 450090 from home:stroeder:branches:server:dnsAdam Majer2017-01-13 14:40:56 +00:00
b9ec3da843Accepting request 435127 from home:adamm:branches:server:dnsMarcus Rueckert2016-10-19 10:36:57 +00:00
e0e23724fbAccepting request 417983 from home:adamm:branches:server:dns
Marguerite Su
2016-08-10 01:30:03 +00:00
3e004dc595- update to 4.1.10 - FEATURES: - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down. - NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size. - print notice that nsd is starting before taking off. - BUG FIXES: - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. - Fix#751: NSD fails to occlude names below a DNAME. - If set without nsd.db print "" as the default in the man pages. - Fix#755: NSD spins after a zone update and a lot of TCP queries. - Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser. - #772 Document that recvmmsg has IPv6 problems on some linux kernels.Marcus Rueckert2016-06-29 01:14:06 +00:00
090bbd0971- update to 4.1.9 - Change the nsd.db file version because of nanosecond precision fix. - changes from 4.1.8 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch from Daisuke Higashi. - #739: zonefile changes when mtime is small are detected on reload, if filesystem supports precision mtime values. - RR type CSYNC (RFC7477) syntax is supported. - take advantage of arc4random_uniform if available, patch from Loganaden Velvindron. - Fix flto check for OSX clang. - Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux. - Fix#736: segfault during zone transfer. - Fix#744: Fix that NSD replies for configured but unloaded zone with SERVFAIL, not REFUSED.Marcus Rueckert2016-05-10 22:01:59 +00:00
1b605fa810- update to 4.1.7 - support configure --with-dbfile="" for nodb mode by default, where there is no binary database, but nsd reads and writes zonefiles. - reuseport: no is the default, because the feature is not troublefree. - configure --enable-ratelimit-default-is-off with --enable-ratelimit to set the default ratelimit to disabled but available in nsd.conf. - version: "string" option to set chaos version query reply string. - Fix zones updates from nsd parent event loop when there are a lot of interfaces. - portability fixes. - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new defaults in the ssl libraries. - updated contrib/nsd.spec, from Bálint Szigeti, with new configure options. - Allocate less memory for TSIG digest. - Fix#721: Fix wrong error code (FORMERR) returned for unknown opcode. NOTIMP expected. - Fix zonec ttl mismatch printout to include more information. - Fix TCP responses when REUSEPORT is in use by turning it off. - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. - Explain rrl-slip better in documentation. - Document that ratelimit qps and slip are updated in reconfig. - Fix up defaults in manpage.Marcus Rueckert2015-12-29 23:44:25 +00:00
Dominique Leuenberger
Adam Majer
Ana Guerrero
Michael Ströder
Richard Brown
Marguerite Su
Marcus Rueckert