124 November 2020: Wouter 2 - Merge PR #141: ZONEMD RR type. 3 - tag for 4.3.4rc1. 4 523 November 2020: Wouter 6 - Fix #142: NODATA answers missin SOA in authority section after 7 CNAME chain. 8 - Fix for CVE-2020-28935 : Fix that symlink does not interfere 9 with chown of pidfile. 10 - fix writepid for retvalue 0. 11 129 November 2020: Wouter 13 - Fix #138: NSD returns non-EDNS answer when QUESTION is empty. 14 - Fix to check nscount in previous fix for EDNS in formerr response 15 when there is no question. 16 1728 October 2020: Wouter 18 - Remove unused init_cfg_parse routine from configlexer. 19 2020 October 2020: Wouter 21 - Fix to add missing closest encloser NSEC3 for wildcard nodata type 22 DS answer. 23 2414 October 2020: Wouter 25 - Fix #134: IPV4_MINIMAL_RESPONSE_SIZE vs EDNS_MAX_MESSAGE_LEN. 26 2713 October 2020: Wouter 28 - Fix missing parenthesis on size of fix to init buffer. 29 3012 October 2020: Wouter 31 - Fix #127: two minor `-Wcast-qual` cleanups 32 - Fix #126: minor header hygiene 33 - Fix #125: include config.h in compat/setproctitle.c and fix prototype of `setproctitle` 34 - Fix #133: fix 0-init of local ( stack ) buffer. 35 368 October 2020: Wouter 37 - tag for 4.3.3 release 38 - current repository contains 4.3.4 in development. 39 - Fix #129: ambiguous use of errno, in log message if sendmmsg fails. 40 - Fix #128: Fix that the invalid port number is logged for sendmmsg 41 failed: Invalid argument. 42 431 October 2020: Wouter 44 - tag for 4.3.3rc1 release. 45 4630 September 2020: Wouter 47 - Updated date in nsd -v output. 48 - Fixup bug013_truncate, checkconf and cutest_qroot tests for new 49 default EDNS size. 50 5129 September 2020: Willem 52 - Follow DNS flag day 2020 advice and 53 set default EDNS message size to 1232. 54 554 September 2020: Wouter 56 - Remove unused space from LIBS on link line. 57 583 September 2020: Wouter 59 - Merge PR #121: Increase log level of recreated database from 60 WARNING to ERR. 61 621 September 2020: Wouter 63 - Fix #119: fix compile warnings from new gcc. 64 - Fix #119: warn when trying to parse a directory. 65 6627 August 2020: Wouter 67 - Merged PR #113 with fixes. Instead of listing an IP-address to 68 listen on, an interface name can be specified in nsd.conf, with 69 ip-address: eth0. The IP-addresses for that interface are then used. 70 7126 August 2020: Wouter 72 - Add xstrdup for PR #113. 73 - Tidy up code like in PR #113. 74 - Import code from PR #113. 75 - Fix for unknown EVP_MAC_CTX_free function in openssl 3.0.0 tsig code. 76 7724 August 2020: Wouter 78 - Fix that configure checks for EVP_sha256 to detect openssl, because 79 HMAC_CTX_new is deprecated in 3.0.0. 80 - Port TSIG code for openssl 3.0.0-alpha6. 81 - Sync acx_nlnetlabs.m4 with the unbound repo. 82 - Review fixes for tsig, defensive free and zero. 83 844 August 2020: Wouter 85 - Merge #117: mini_event.h (4.3.2 and 4.3.1) on OpenBSD cannot find 86 fd_set - patch. 87 8823 July 2020: Wouter 89 - Merge #115 from millert: Fix strlcpy() usage. From OpenBSD. 90 9115 July 2020: Wouter 92 - Fix make install with --with-pidfile="". 93 9414 July 2020: Wouter 95 - Tag for 4.3.2 release. Master branch contains the next version 96 in development, 4.3.3. 97 987 July 2020: Wouter 99 - Tag for 4.3.2rc1. 100 1016 July 2020: Wouter 102 - Fix compile includes for xfr-inspect tool on FreeBSD. 103 - Add tpkg/run_vm.sh that runs test when in a virtual machine. 104 - Merge #112 from jaredmauch: log old and new serials when NSD 105 rejects an IXFR due to an old serial number. 106 - Fix bug034 test for vm test changes. 107 10822 June 2020: Wouter 109 - Remove errno reset behaviour from sendmmsg and recvmmsg 110 replacement functions. 111 - Fix unit test for different nsd-control-setup -h exit code. 112 11319 June 2020: Wouter 114 - Merge #108 from Nomis: Make the max-retry-time description clearer. 115 - Retry when udp send buffer is full to wait until buffer space is 116 available. 117 11818 June 2020: Wouter 119 - Do not log EAGAIN errors for sendmmsg, to stop log spam on OpenBSD. 120 12117 June 2020: Wouter 122 - Fix #107: nsd -v shows configure line, openssl version and libevent version. 123 12427 May 2020: Wouter 125 - Fix unlink of pidfile warning if not possible due to permissions, 126 nsd can display the message at high verbosity levels. 127 - Update contrib/nsd.service for chown of nsd.log and /var/log in 128 ReadWritePaths. 129 - Removed contrib/nsd.service, example is too complicated and not 130 useful. 131 13215 May 2020: Wouter 133 - Merge PR#102 from and0x000: add missing default in documentation 134 for drop-updates. 135 - Fix checkconf test for log-only-syslog option. 136 13714 May 2020: Wouter 138 - Document default value for tcp-timeout. 139 14013 May 2020: Jeroen 141 - Fix #99: Fix copying of socket properties with reuseport enabled. 142 14324 April 2020: Wouter 144 - Fix #97: EDNS unknown version: query not in response. 145 14621 April 2020: Wouter 147 - Fix #96: log-only-syslog: yes sets to only use syslog, fixes 148 that the default configuration and systemd results in duplicate 149 log messages. 150 15120 April 2020: Wouter 152 - Fix #95: Removed make test check because tpkg not included in 153 release tarballs. 154 - Fix unused parameter compile warnings. 155 15616 April 2020: Wouter 157 - Tag for 4.3.1 release and track 4.3.2 release in code repository. 158 - note sha256 digest algo use in makedist.sh. 159 - Fix for posix shell syntax for trap in nsd-control-setup. 160 - Fix to omit the listen-on lines from log at startup, unless verbose. 161 - Fix uninitialised values for bindtodevice option at startup with 162 reuseport and multiple interfaces. 163 1648 April 2020: Wouter 165 - Tag for 4.3.1rc2. 166 1677 April 2020: Wouter 168 - Merge PR #91 by gearnode: nsd-control-setup recreate certificates. 169 The '-r' option recreates certificates. Without it it creates them 170 if they do not exist, and does not modify them otherwise. 171 1726 April 2020: Wouter 173 - Merge PR #90 by phicoh: O_CLOEXEC should be FD_CLOEXEC. 174 - Merge PR #92 by tonysgi: Fix typo. 175 1762 April 2020: Wouter 177 - Tag for 4.3.1rc1. 178 1791 April 2020: Wouter 180 - Fix for whitespace in minimal responses test for FreeBSD. 181 18225 March 2020: Wouter 183 - Merge PR #86 from noloader: Use precious variables for GREP, EGREP, 184 SED, AWK, LEX and YACC. 185 - For PR #86: Fix that programs loaded after CFLAGS and stuff is 186 set, specifically the compiler, so that it can work if it needs 187 special flags from that. Fix that lex only needs to support -i 188 if actually defined, otherwise the output included in the source 189 tarball can be used. 190 - Merge PR #72 from noloader: Increase Travis testing coverage 191 19223 March 2020: Wouter 193 - Fix unterminated ifdef in nsd.h. 194 - Fix unknown u_long in util.c for Issue #80 . 195 19620 March 2020: Wouter 197 - Merge PR #83 from noloader: Fix GNU HURD sched_setaffinity compile. 198 - Fix #82: print error when system does not have setaffinity. 199 - Fix #80: NetBSD and implicit declaration of reallocarray. 200 - Fix for #80: Fix reallocarray test to define before include. 201 - Fix for #80: Define alternatives for IFNAMSIZ if it does not exist. 202 20319 March 2020: Wouter 204 - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile. 205 - Fix #75: configure test for sched_setaffinity, and use 206 cpuset_setaffinity otherwise. Also test for presence of sysconf. 207 - Fix #74: GNU Hurd fix cast from pointer to integer of different size. 208 - Fix for #74, #75: cpuset test for header contents and provide code. 209 - Fix #78: Fix SO_SETFIB error on FreeBSD. 210 21118 March 2020: Wouter 212 - Fix #70: error: 'fd_set' undeclared. 213 - Fix #71: error: 'for' loop initial declaration used outside C99 214 mode. 215 - Fix to move declarations out of for loops in event test too. 216 - Fix to move declarations out of for loops in popen3 test too. 217 - Another fix to move declaration out of for loop for event test. 218 - Fix to move declarations out of for loops in cutest regex display. 219 22017 March 2020: Wouter 221 - tag for 4.3.0 release and master branch has version 4.3.1. 222 22310 March 2020: Wouter 224 - repository has version number 4.3.0. Tag for 4.3.0rc1. 225 2263 March 2020: Wouter 227 - Fix that the retry wait does not exceed one day for zone transfers. 228 22927 February 2020: Wouter 230 - Fix warning on FreeBSD about pointer size cast. 231 23226 February 2020: Wouter 233 - Fixup fix of reuseport TCP for server close of sockets not used 234 by it. And the unit test skips when the necessary debug output 235 is not enabled. 236 23725 February 2020: Wouter 238 - Fix event unit test, signal has to be registered with signal_add, 239 event_add not for every backend for signals. The event_initialized 240 is not possible for every backend, so event_added variable. The 241 agent write event fires after a timeout, instead of on event write 242 so that it does not trigger a sigpipe event when the handlers stop. 243 Timeout shorted to 0.1 second. event_get_fd was not implemented, 244 so used ev_fd. Debug output printfs added to see what happens. 245 - Fix checkconf test for new drop-updates config option. 246 - Fix errors with reuseport and TCP file descriptors, it was 247 closing them for server-1 in server-2 and server-3.. 248 2497 February 2020: Jeroen 250 - Add feature to drop queries with opcode UPDATE. 251 2526 February 2020: Jeroen 253 - Support SO_BINDTODEVICE on Linux. Specify bindtodevice: yes 254 to bind sockets directly to the network interface. 255 - Support SO_SETFIB on FreeBSD. Add setfib=<FIB> after an ip-address 256 option to use the specified FIB for that socket. 257 - Require user to add servers=<range> after an ip-address option to 258 specify the servers that must listen on that socket. 259 2606 February 2020: Wouter 261 - Merge PR#60: Minor portability fixes from michaelforney, with 262 avoid pointer arithmetic on void* and avoid unnecessary VLA. 263 2644 February 2020: Wouter 265 - Merge PR#22: minimise-any: prefer polular and not large RRset, 266 from Daisuke Higashi. 267 - Fix responses for IXFR so that the authority section is not echoed 268 in the response. 269 27021 January 2020: Wouter 271 - Fix leak in server bitset setup. 272 27316 January 2020: Jeroen 274 - Add zone resource record iterator for future zone-verification port. 275 - Set FD_CLOEXEC on opened sockets. 276 - Add popen3 implementation for future zone-verification port. 277 - Add -r option to cutest so that a subset of tests can be run. 278 27915 January 2020: Jeroen 280 - Add feature to pin server proccesses to specific cpus. 281 - Add feature to pin IP addresses to selected server processes. 282 - Set process title to identify individual processes. 283 28413 January 2020: Wouter 285 - Merge pull request #59 from buddyns: add FreeBSD support 286 for conf key ip-transparent. 287 28810 January 2020: Wouter 289 - Fix unreachable code in ssl set options code. 290 - Fix bad shift in assertion code analyzer complaint. 291 2926 January 2020: Wouter 293 - Fix #56: Drop sparse TSIG signing support in NSD. 294 Sign every axfr packet with TSIG, according to the latest 295 draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1. 296 29712 December 2019: Wouter 298 - Note that use-systemd is not necessary and ignored in man page. 299 30011 December 2019: Wouter 301 - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters. 302 - use-systemd is ignored in nsd.conf, when NSD is compiled with 303 libsystemd it always signals readiness, if possible. 304 3059 December 2019: Wouter 306 - Fix to define upper bounds on rr counts read from untrusted packet 307 data. 308 - Try different annotation for radix_find_prefix_node not reachable. 309 - Separate acl_addr_match_range functions for ip4 and ip6, to 310 please checkers. 311 - Avoid unused variable warning in new match_range_v4 function. 312 3136 December 2019: Wouter 314 - Fix to define max number of EDNS records we are willing to 315 spend time on. 316 - Fix size of string len and capacity type cast in udbradtree. 317 - Fix to protect rrcount in tsig_find_rr from overflow. 318 - Annotate radix_find_prefix_node not reachable trail code. 319 - Fix to protect rrcount in packet_find_notify_serial from overflow. 320 - Fix to close socket on error in create_tcp_accept_sock. 321 - Fix to log on failure to chmod for socket for remote control. 322 - Fix to remove unneeded if in open of socket for remote control. 323 - Fix to restore input parameter on call failure in create_dirs. 324 - Please checker by terminating and initialising string read 325 by remote control. 326 - Fixup of random_generate negative modulo, from previous commit, 327 and return srandom when random is used if no getrandom. 328 3295 December 2019: Wouter 330 - Fix fname null check of fname in namedb_read_zonefile. 331 - Fix implicit cast of size in udb_radnode_array_grow. 332 - Fix ignore of return value of ssl_printf in remote.c. 333 - Fix unused check of fd in parent_handle_reload_command. 334 - Fix to use getrandom() for randomness, if available. 335 - Attempt to fix signedness of nscount lookup in ixfr query_process. 336 - Fix identical branches for ssl_print of errors in remote.c. 337 - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record. 338 - Fix to separate header and data lines in parse_zone_list_file. 339 3403 December 2019: Wouter 341 - Fix #52: do not log transient network full errors unless higher 342 verbosity is set. 343 - Fix checkconf test for new error output string. 344 - tag for 4.2.4rc1 release. This became the 4.2.4 release, 345 and the master branch continues with 4.2.5 in development. 346 34727 November 2017 Jeroen 348 - Fix regressions in configparser.y 349 35022 November 2019: Wouter 351 - Fix #48: Add make distclean that removes config.h made by configure. 352 And add maintainer-clean that removes bison and flex output. 353 35418 November 2019: Wouter 355 - Detect fixed time memcmp for openssl 0.9.8 compatibility. 356 - Detect EC_KEY_new_by_curve_name for openssl 0.9.8. 357 - include limits.h for UINT_MAX. 358 - If no recvmmsg, dont use msg_flags member, but errno for error, 359 where our fallback function left it, msg_flags also does not exist 360 on some systems. 361 - Remove unused variable warning for portability. 362 36314 November 2019: Wouter 364 - Fix checkconf test with filenames that sort in the same order. 365 - Tag for 4.2.3rc1. Branch master is 4.2.4 in development. 366 36711 November 2019: Wouter 368 - Fix #44: document that remote-control is a top-level nsd.conf 369 attribute. 370 - Fix compile on OSX. 371 - Fix for #44: nicer top-level clause documentation. 372 37322 October 2019: Jeroen 374 - Number of different UDP handlers has been reduced to one. recvmmsg 375 and sendmmsg implementations are now used on all platforms. 376 Compatible implementations are in place for systems that lack the 377 system calls. 378 - Socket options are now set in designated functions for easy reuse. 379 - Socket setup has been simplified for easy reuse. 380 - Configuration parser is now aware of the context in which an option 381 was specified. 382 38321 October 2019: Wouter 384 - For #21 add 385 contrib/patch_for_s6_startup_and_other_service_supervisors.diff 386 that adds support for readiness notification with READY_FD from 387 Cameron Nemo. 388 38917 October 2019: Jeroen 390 - Fix #40: Merge small fixes for confine-to-zone by Greg Bock. 391 39215 October 2019: Jeroen 393 - For #39: Merge confine-to-zone feature contributes by Greg Bock. 394 39526 September 2019: Wouter 396 - Fix #38: log address and failure reason with tls handshake errors, 397 squelches (the same as unbound) some unless high verbosity is used. 398 - Fixup clang analysis warning in xfrd_parse_received_xfr_packet 399 master dereference. 400 40125 September 2019: Wouter 402 - The nsd.conf includes are sorted ascending, for include statements 403 with a '*' from glob. 404 40516 September 2019: Wouter 406 - Fixup warnings during --disable-ipv6 compile. 407 - Fixup unit test executable to run without IPv6. 408 4094 September 2019: Wouter 410 - Fix #35: excessive logging of ixfr failures, it stops the log when 411 fallback to axfr is possible. log is enabled at high verbosity. 412 4132 September 2019: Wouter 414 - For #21: pidfile "" allows to run NSD without a pidfile, for 415 startup management tools like daemontools. 416 41728 August 2019: Wouter 418 - In tests check for tls test tool availability. 419 42019 August 2019: Wouter 421 - Tag for 4.2.2 release. Git master contains 4.2.3 in development. 422 42313 August 2019: Wouter 424 - Fix error message for out of zone data to have more information. 425 - Tag for 4.2.2rc2. 426 42712 August 2019: Wouter 428 - Fix #33: Fix segfault in service of remaining streams on exit. 429 4306 August 2019: Wouter 431 - Tag for 4.2.2rc1. 432 4335 August 2019: Wouter 434 - PR #31: nsd-control: Add missing stdio header. 435 - PR #32: tsig: Fix compilation without HAVE_SSL. 436 - Cleanup tls context on xfrd exit. 437 43831 July 2019: Wouter 439 - Fix #29: SSHFP check NULL pointer dereference. 440 - Fix #30: SSHFP check failure due to missing domain name. 441 - Fix to timeval_add in minievent for remaining second in microseconds. 442 44322 July 2019: Wouter 444 - Set timeout for refetch immediately, only spread load when there 445 are retries. 446 44719 July 2019: Wouter 448 - Set no renegotiation on the SSL context to stop client 449 session renegotiation. 450 45118 July 2019: Wouter 452 - Fix #25: NSD doesn't refresh zones after extended downtime, 453 it refreshes the old zones, with a random delay of a couple of 454 seconds to spread the load. 455 - Fix so that expired zones stay expired when server is down a 456 long time. 457 45817 July 2019: Wouter 459 - Fix that NSD warns for wrong length of the hash in SSHFP records. 460 46115 July 2019: Wouter 462 - PR #23: Fix typo in nsd.conf man-page. 463 4644 July 2019: Wouter 465 - Set version to 4.2.2 in development. 466 - clean memory on exit of nsd-checkzone for memory debug. 467 - Fix #20: CVE-2019-13207 Stack-based Buffer Overflow in the 468 dname_concatenate() function. Reported by Frederic Cambus. 469 It causes the zone parser to crash on a malformed zone file, 470 with assertions enabled, an assertion catches it. 471 - Fix #19: Out-of-bounds read caused by improper validation of 472 array index. Reported by Frederic Cambus. The zone parser 473 fails on type SIG because of mismatched definition with RRSIG. 474 4752 July 2019: Wouter 476 - Tag for 4.2.1rc1 477 47827 June 2019: Wouter 479 - Fix unit test for added options and no dot after zone updated 480 log message. 481 - Fix compile without accept4. 482 48321 June 2019: Wouter 484 - Omit remaining tcp processing if the list is empty. 485 - Fix output of nsd-checkconf -h. 486 48720 June 2019: Wouter 488 - Initialize event structures before event_set, to stop uninitialized 489 values from setting event library lists and assertions, that would 490 sometimes also show after event_del. 491 - Added num.tls and num.tls6 stat counters. 492 - PR #12: send-buffer-size, receive-buffer-size, 493 tcp-reject-overflow options for nsd.conf, from Jeroen Koekkoek. 494 - Do not use symbol from libc, instead use own replacement, if not 495 available, for accept4. 496 - Fix #14, tcp connections have 1/10 to be active and have to work 497 every second, and then they get time to complete during a reload, 498 this is a process that lingers with the old version during a version 499 update. 500 50119 June 2019: Wouter 502 - Fix tls handshake event callback function mistake, reported 503 by Mykhailo Danylenko. 504 50518 June 2019: Wouter 506 - Fix #15: crash in SSL library, initialize variables for TCP access 507 when TLS is configured. 508 50914 June 2019: Wouter 510 - Fix to init event not pointer, in reassignment. 511 51212 June 2019: Wouter 513 - Fix to init event structure for reassignment. 514 51511 June 2019: Wouter 516 - NSD 4.2.0 release. Current development is 4.2.1. 517 - Fixup of RELNOTES, corrected RFC reference for 4892. 518 - Fix #13: Stray dot at the end of some log entries, removes dot 519 after updated serial number in log entry. 520 - Fix TLS cipher selection, the previous was redundant, prefers 521 CHACHA20-POLY1305 over AESGCM and was not as readable as it could be. 522 - Consolidate server tls context create and remote control context 523 create, with hardening for the remote control tls context too. 524 5256 June 2019: Wouter 526 - NSD 4.2.0rc1 tag. 527 5284 June 2019: Wouter 529 - Fix unit test for outgoing interface to use random port numbers for 530 the outgoing interface config. 531 53229 May 2019: Wouter 533 - Fix to guard _OPENBSD_SOURCE from redefinition. 534 53528 May 2019: Wouter 536 - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD. 537 53816 May 2019: Wouter 539 - Fix #10: Fix memory leaks caused by duplicate rr and include 540 instructions. 541 5426 May 2019: Wouter 543 - Note CII best practices badge for NSD on the README.md. 544 5452 May 2019: Wouter 546 - Fix .gitignore for unit test generated files. 547 - Fix checkconf unit test for hide-identity and tls. 548 5491 May 2019: Wouter 550 - Fix makedist.sh for use with git. 551 - Nicer output on travis for clang analysis. 552 - Add .gitignore file to exclude built files from version tracking. 553 - Add README.md file in repository with compile instructions. 554 - Fix .gitignore for dnstap files and aclocal temp. 555 - Add aclocal to README.md for pkgconfig for some configure options. 556 55725 April 2019: Wouter 558 - Add tls.tpkg unit test for DNS over TLS functionality. 559 56018 April 2019: Wouter 561 - Fix to avoid buffer alloc with global buffer in tls write handler. 562 - Fix to initialize event structure when accepting TCP connection. 563 - Use travis for build check, initial unit test and clang analysis. 564 - Disable SSLv2,3,TLSv1.0,1.1 if TLS1.2 is available in libssl. 565 - Disable weak ciphers, enable CIPHER_SERVER_PREFERENCE. 566 - further setup ssl ctx after the keys are loaded, for ECDH. 567 - TLS OCSP stapling support, enabled with tls-service-ocsp: filename, 568 patch from Andreas Schulze. 569 57017 April 2019: Wouter 571 - Fix to share openssl init code, and perform it once. 572 57316 April 2019: Andreas via Sara 574 - Patch to add support for TCP Fast Open 575 - Patch to add support for tls service on a specified tls port 576 57716 April 2019: Wouter 578 - Fix #4249: The option hide-identity: yes stops NSD from responding 579 with the hostname for chaos class queries. Implements the RFC4829 580 security considerations. 581 - Remove starttls, this signalling method was not standardized. 582 - Remove TO bit, this signalling method was not standardized. 583 - Remove unused first_query and tls_ok states. 584 - Remove sign-compare warning in tls packet send code. 585 - Fix spelling in comment and log printout. 586 - Fix potential uninitialized variable. 587 - Fix documentation for DNS over TLS, and set default port 853. 588 - Fix to add missing comment. 589 - Fix that the TLS handshake routine sets the correct event to 590 continue when done. 591 - Fix that TLS renegotiation calls the read and write routines again 592 with the same parameters when the desired event has been satisfied. 593 - Fix that TCP Fastopen has better error message and supports OSX. 594 - Fix log for fastopen with verbosity. 595 - Squelch TLS handshake failure log until verbosity 3. 596 - Add per-zone statistics for TLS queries, and dnstap for TLS queries, 597 and rcode and TCflag statistics for TCP and TLS queries. 598 59925 March 2019: Wouter 600 - Print IP address when bind socket fails with error. 601 60221 March 2019: Wouter 603 - Fix spelling error in release notes. 604 - Fix to delete unused zparser.default_apex member. 605 60619 March 2019: Wouter 607 - tag 4.1.27rc1. This became 4.1.27 on 25 March 2019 and trunk has 608 4.1.28 in development. 609 61018 March 2019: Wouter 611 - Fix unit test bug013_truncate for new truncation with EDNS size, 612 it is one RR smaller for the truncated response in the test. 613 61414 March 2019: Wouter 615 - Fixed radtree_insert memory leak. 616 - Fixed access recycled variable. 617 61811 March 2019: Wouter 619 - Fix #6: nsd-control-setup: Change validity time to a shorter 620 period (<2038). 621 - Fix unused definition in header remote.h. 622 - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big. 623 - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets. 624 62518 February 2019: Wouter 626 - Fix to remove unused code. 627 62815 February 2019: Wouter 629 - tentative robustness, delete stats items from list twice if needed. 630 63114 February 2019: Wouter 632 - Fix #4: setusercontext() is in libutil on NetBSD, and also 633 include login_cap.h only if it exists. 634 - Fix #4215: fixup for state update for TSIG information in server 635 processes, nicer printout for tsig_print, tsig_print without 636 arguments and no leaks. 637 - nicer logging for update_tsig. 638 6391 February 2019: Wouter 640 - Fix for tsig assoc_tsig command on acl with nokey elements. 641 64229 January 2019: Wouter 643 - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds 644 nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig 645 and del_tsig. These changes are gone after reload, edit the 646 config file (or a file included from it) to make changes that 647 last after restart. 648 - documentation for tsig nsd-control options. 649 65024 January 2019: Wouter 651 - Deny ANY with only one RR in response, by default. Patch from 652 Daisuke Higashi. The deny-any statement in nsd.conf sets ANY 653 queries over UDP to be further moved to TCP as well. 654 Also no additional section processig for type ANY, reducing 655 the response size. 656 - assertions for clang analysis. 657 65810 December 2018: Wouter 659 - Fix for FreeBSD port with dnstap enabled. 660 6616 December 2018: Wouter 662 - Fix to reduce region_log_stats if condition, this removes a 663 debug statement. 664 6655 December 2018: Wouter 666 - Fix #4213: disable-ipv6 and dnstap compile error. 667 6683 December 2018: Wouter 669 - Note that the content_list member is unused; and could be removed 670 if the database format is modified or updated. 671 - Fix that dnstap logs CQ and CR like BIND does. 672 - Revert that, it looks wrong, AQ and AR are for the authoritative. 673 67429 November 2018: Wouter 675 - Tag for 4.1.26rc1. Which became 4.1.26 on 4 dec 2018. 676 Trunk has 4.1.27 in development. 677 - Fix clang analysis warning on null in closest encloser for wildcard 678 denial nsec. 679 - Fix clang analysis warnings. 680 68127 November 2018: Wouter 682 - Fix parsezone failure in 4194 fix. 683 68426 November 2018: Wouter 685 - Fix to not set GLOB_NOSORT so the nsd.conf include: files are 686 sorted and in a predictable order. 687 - Added nsd-control changezone. nsd-control changezone name pattern 688 allows the change of a zone pattern option without downtime for 689 the zone, in one operation. 690 - Fix #3433: document that reconfig does not change per-zone stats. 691 69220 November 2018: Wouter 693 - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails. 694 This sets the msg_hdr.msg_namelen correctly after receipt. 695 69619 November 2018: Wouter 697 - Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes 698 option in nsd.conf. 699 - Fix #4202: nsd-control delzone incorrect exit code on error. 700 - Tab style fix to use tab for 8 spaces, from Xiaobo Liu. 701 70225 October 2018: Wouter 703 - Adjust dnstap socket path for chroot. 704 70522 October 2018: Wouter 706 - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of 707 DNSSEC RRs. 708 - Fix some more, neater code and checks for domain length limit. 709 - check that the dnstap socket file can be opened and exists, print 710 error if not. 711 7124 October 2018: Wouter 713 - dnstap work, the dnstap.proto is a copy of the file from Unbound, 714 also dnstap.m4 configure include file. 715 - dnstap collector: free eventbase and memclean nicer. 716 - dnstap collector: send data and read it in collector. 717 - dnstap/dnstap.c and .h from Unbound's contribution from 718 Farsight Security, added to then adapt it for dnstap logging in NSD. 719 - dnstap.c with auth query and auth response, and called from 720 the collector. 721 - dnstap work, config nsd.conf parse. 722 - dnstap example config. 723 72425 September 2018: Wouter 725 - NSD 4.1.25 released, trunk has 4.1.26 in development. 726 72718 September 2018: Wouter 728 - tag for NSD 4.1.25rc1. 729 73017 September 2018: Wouter 731 - Fix #4156: Fix systemd service manager state change notification 732 73314 September 2018: Wouter 734 - Remove unused if clause during server service startup. 735 73613 September 2018: Wouter 737 - Fix typo in clang analysis test. 738 - Annotate exit functions with noreturn. 739 - nsd-control prints neater errors for file failures. 740 74112 September 2018: Wouter 742 - clang analysis test. 743 74411 September 2018: Wouter 745 - Fix to combine the same error function into one, from Xiaobo Liu. 746 - Fix initialisation in remote.c. 747 - please clang analyzer and fix parse of IPSECKEY with bad gateway. 748 - Fix unit test code for clang analyzer. 749 - Fix nsd-checkconf fail on bad zone name. 750 75110 September 2018: Wouter 752 - Fix coding style in nsd.c 753 7547 September 2018: Wouter 755 - append_trailing_slash has one implementation and is not repeated 756 differently. 757 7584 September 2018: Wouter 759 - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu. 760 76115 August 2018: Wouter 762 - Fix use_systemd typo/leftover in remote.c. 763 76413 August 2018: Wouter 765 - tag for 4.1.24 release. 766 - trunk is 4.1.25 in development. 767 - Fix that nsec3 precompile deletion happens before the RRs of 768 the zone are deleted. 769 - Fix printout of accepted remote control connection for unix sockets. 770 7716 August 2018: Wouter 772 - tag for 4.1.24rc1 release. 773 77430 July 2018: Wouter 775 - Tag for NSD 4.1.23 release, trunk is 4.1.24, includes 776 fix NSD time sensitive TSIG compare vulnerability. 777 - Fix checkconf test for use-systemd option. 778 77925 July 2018: Wouter 780 - #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM 781 chain, NSD leniently attempts to find a working NSEC3PARAM. 782 78323 July 2018: Wouter 784 - Remove socket activation from systemd code, it was reported as 785 not useful to enable. The readiness signalling is still there, 786 and can be enabled with use-systemd: yes. 787 - Only call sd_notify from systemd when use-systemd is yes. 788 7896 July 2018: Wouter 790 - RFC8162 support, for record type SMIMEA. 791 - Fix that type CAA (and URI) in the zone file can contain 792 dots when not in quotes. 793 79426 June 2018: Wouter 795 - configure --enable-systemd (needs pkg-config and libsystemd) can 796 be used to then use-systemd: yes in nsd.conf and use socket 797 activation and readiness signalling with systemd. 798 79919 June 2018: Wouter 800 - #4106: Fix that stats printed from nsd-control are recast from 801 unsigned long to unsigned (remote.c). 802 80314 June 2018: Wouter 804 - Fix that first control-interface determines if TLS is used. Warn 805 when IP address interfaces are used without TLS. 806 80712 June 2018: Wouter 808 - #4102: control interface via local socket. 809 configure it with control-interface: "/path/nsd.ctl" The path 810 has to start with a / to separate it from an IP address. 811 The local socket does not use SSL, but unencrypted traffic, use 812 file and containing directory permissions to restrict access. 813 8146 June 2018: Wouter 815 - Patch to fix openwrt for mac os build darwin detection in configure. 816 8174 June 2018: Wouter 818 - tag for 4.1.22rc1. Became 4.1.22 on 11 June, trunk is 4.1.23 in 819 development from this point. 820 82131 May 2018: Wouter 822 - Fix to use same condition for nsec3 hash allocation and free. 823 82423 May 2018: Wouter 825 - Use accept4 to speed up answer of TCP queries, on Linux and FreeBSD 826 and OpenBSD. 827 82822 May 2018: Wouter 829 - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. 830 83115 May 2018: Wouter 832 - Fix memory free in unit test. 833 83414 May 2018: Wouter 835 - Tag for 4.1.21 release. 836 - trunk has 4.1.22 in development. 837 - refuse-any sends truncation (+TC) in reply to ANY queries over UDP, 838 and allows TCP queries like normal. 839 8407 May 2018: Wouter 841 - Tag for 4.1.21rc1 release. 842 8434 May 2018: Wouter 844 - Fix #4093: Release notes not using 2018. 845 8463 May 2018: Wouter 847 - Fix buffer size warnings from compiler on filename lengths. 848 84926 April 2018: Wouter 850 - lower memory usage for tcp connections, so tcp-count can be higher. 851 - Fix checkconf test for refuse-any option. 852 8533 April 2018: Wouter 854 - refuse-any nsd.conf option that refuses queries of type ANY. 855 8565 March 2018: Wouter 857 - Fix #3562: explain build error when flex missing. 858 85920 February 2018: Wouter 860 - For more clang warnings 861 - Fix spelling error in xfr-inspect. 862 86319 February 2018: Wouter 864 - Fix for clang analysis complaints. 865 86615 February 2018: Wouter 867 - --enable-memclean cleans up memory for use with memory checkers, 868 eg. valgrind. 869 - Fix unused variable warnings from clang analyzer. 870 87114 February 2018: Wouter 872 - updated RELNOTES for upcoming release. 873 - tag 4.1.20rc1, became release on 20 feb, trunk has 4.1.21 in 874 development. 875 8769 February 2018: Wouter 877 - make depend: updated the make dependencies in the Makefile. 878 8798 February 2018: Wouter 880 - Fix memory leak when rehashing nsec3 after axfr or zonefile read, 881 in the selectively allocated precompiled nsec3 hashes. 882 8836 February 2018: Wouter 884 - Fix memory leak in zone file read of unknown rr formatted RRs. 885 88611 December 2017: Wouter 887 - Add test for support of -Wno-address-of-packed-member for 888 --enable-packed. 889 - tag for release 4.1.19 890 - trunk has 4.1.20 in development. 891 8928 December 2017: Wouter 893 - tag for 4.1.19rc1 894 8957 December 2017: Wouter 896 - Fixup lexer warning for gcc 4.2. 897 8986 December 2017: Wouter 899 - Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 900 and ip6 targets. 901 9025 December 2017: Wouter 903 - Fix spelling error in xfr-inspect. 904 9051 December 2017: Wouter 906 - Fix warnings emitted by clang for --enable-packed. Alignment is not 907 a problem for x86_64, don't enable packed when the platform 908 requires aligned access. 909 91030 November 2017: Wouter 911 - tag for 4.1.18 release. 912 - trunk has 4.1.19 in development. 913 - ignore fallthrough compiler warning in flex EOF rule. 914 91527 November 2017: Wouter 916 - Fix crash for DS query when parent and child zones both configured 917 in nsd.conf and parent zone has not loaded properly. 918 - tag for 4.1.18rc2. 919 92016 November 2017: Wouter 921 - tag for 4.1.18rc1. 922 92314 November 2017: Wouter 924 - Fix #2871: Increase number of sockets for xfrd transfers. 925 9266 November 2017: Wouter 927 - Set usage counts in namedb tree to uint32 to save memory. 928 - Fix up debug content from nsec3 collision printout work. 929 9302 November 2016: Wouter 931 - make ip-transparent option work on OpenBSD. 932 93311 October 2016: Wouter 934 - Fix #1567: Change crit to err log level for gettimeofday failure. 935 Add defines for compile without syslog. 936 9379 October 2016: Wouter 938 - Fix collision printout of nsec3 to print name, hash and reverse. 939 9402 October 2016: Wouter 941 - nsd-control zonestatus prints wait time between attempts, for zones 942 that are in that waiting time. 943 94419 September 2016: Wouter 945 - merges feature branch branches/alloced_prehashes into trunk. 946 94718 September 2016: Wouter 948 - Fix #1446: A corrupted zone file "propagates" to good ones. 949 95014 September 2016: Wouter 951 - Fix layout in xfrd.c. 952 9536 September 2017: Willem 954 - Save memory by selectively allocate precompiled nsec3 hashes 955 95629 August 2016: Wouter 957 - With --enable-packed save memory, at expense of unaligned reads. 958 - Fix writev compile warning on FreeBSD. 959 96025 July 2016: Wouter 961 - NSD sends up to 16 notifies simultaneously for up to 64 zones, 962 to increase rate of notification for large master configurations. 963 96424 July 2016: Wouter 965 - Fix gcc 7.1.1 warnings. 966 96717 July 2016: Wouter 968 - Trunk has 4.1.18 969 - xfr-inspect is part of source dir, but not made or installed by 970 default. 971 - retry timeout between sending notifies dropped from 15 to 3 sec. 972 97313 July 2016: Wouter 974 - tag 4.1.17rc1, and that became the 4.1.17 release on 21 July 2017. 975 97629 June 2016: Wouter 977 - make depend. 978 97926 June 2016: Wouter 980 - Fix text format of deletes for CDS and CDNSKEY, single 0 to represent 981 empty base64 or hex string. 982 98323 June 2016: Wouter 984 - Fix potential null pointer in nsec3 adjustment tree. 985 98615 June 2016: Wouter 987 - xfr-inspect debug tool prints out xfr contents of files in tmp. 988 9896 June 2016: Wouter 990 - Fix #1272: use writev to put tcp length field with data for outgoing 991 zone transfer requests. 992 99316 May 2016: Wouter 994 - zone parser parses type AVC (it has TXT format). 995 99625 April 2016: Wouter 997 - 4.1.16 release tag. 998 - trunk contains 4.1.17 in development. 999 100011 April 2016: Wouter 1001 - 4.1.16 rc1 tag for release. 1002 - minor manpage fix. 1003 10045 April 2016: Wouter 1005 - Patch for expire state in multi-master when masters includes 1006 broken master. 1007 100827 March 2016: Wouter 1009 - Fix 1243: Option to make NSD emit really minimal responses, 1010 minimal-responses: yes in nsd.conf. 1011 - but they give additional information for priming queries (type NS). 1012 10136 March 2016: Wouter 1014 - Fix 1228: OpenSSL include is not guarded with HAVE_SSL 1015 101628 February 2016: Wouter 1017 - Printout serial error with hint it may be too big. 1018 101920 February 2016: Wouter 1020 - Fix missing _t to _type conversion for disable-radix-tree option. 1021 102215 February 2016: Wouter 1023 - zone parser can parse acronyms for algorithms ED25519 and ED448. 1024 102513 February 2016: Wouter 1026 - Calculate new udb index after growing the array, fix from 1027 Chaofeng Liu. 1028 10297 February 2016: Wouter 1030 - tag for 4.1.15 rc1. Which became 4.1.15 on 16 Feb. Trunk 4.1.16. 1031 103219 January 2016: Wouter 1033 - Fix to rename _t typedefs because POSIX reserves them. 1034 10353 January 2016: Wouter 1036 - Fix #1195: Fix so that NSD fails on non-compliant values for Serial. 1037 103814 December 2016: Wouter 1039 - Squelch zone transfer error address family not supported by protocol 1040 at low verbosity levels. 1041 104213 December 2016: Wouter 1043 - Fix nsd-control and ipv6 only. 1044 10458 December 2016: Wouter 1046 - tag 4.1.14 1047 - trunk contains 4.1.15 in development. 1048 10491 December 2016: Wouter 1050 - Fix restart of zone transfers when new config becomes available. 1051 - tag 4.1.14rc1 1052 105325 October 2016: Wouter 1054 - Fix #1132 for SERVFAIL zones perform backoff, and remembers the 1055 timeout on next startup. 1056 - Save backoff timeout into xfrd.state file, this file has a higher 1057 version number now. Old files are skipped silently (causes 1058 refresh) and created as new files upon exit. 1059 - Set number of rounds to 1; NSD will try every master once, then 1060 wait for timeout or notify. 1061 - Fix axfr fallback for rounds to 1. 1062 106320 October 2016: Wouter 1064 - suppress compile warning in lex files. 1065 106618 October 2016: Wouter 1067 - Robust fix against missing master in tcp_open for xfrd. 1068 - More in depth fix for the previous. 1069 - Fix wildcards in include: config statements with chroot enabled. 1070 107127 September 2016: Wouter 1072 - NSD 4.1.13 tag. 1073 - trunk has 4.1.14 in development. 1074 - Fix null memcpy for radixtree with single link element. 1075 107619 September 2016: Wouter 1077 - Review comments Ralph: wrapped long lines and nicer example conf. 1078 107916 September 2016: Wouter 1080 - NSD 4.1.13rc1 tag. 1081 108215 September 2016: Wouter 1083 - Test for openssl init_crypto and init_ssl functions. 1084 108514 September 2016: Ralph 1086 - Fix OPENSSL_INIT_ADD_ALL_DIGESTS compatibility check 1087 108813 September 2016: Wouter 1089 - Fix double const in dname_const() function. 1090 - Silenced flex-generated sign-unsigned warning print with gcc 1091 diagnostic pragma. 1092 10938 September 2016: Wouter 1094 - more extensible edns option handling. 1095 10962 September 2016: Wouter 1097 - Release of 4.1.12; trunk is 4.1.13 and the patch for 4.1.12 (that 1098 does not contain the other changes to the trunk) is folded into 1099 the trunk. 1100 - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. 1101 110225 August 2016: Wouter 1103 - Fix multimaster for not tried full zone transfer for a expired zone. 1104 - Explain --disable-radix tree uses some more CPU. 1105 110622 August 2016: Wouter 1107 - Fix README spelling error of BSD license (reported by Joerg Jung). 1108 110919 August 2016: Wouter 1110 - for type SRV add A/AAAA to the additional section (if possible), 1111 just like we already do for type MX. 1112 111317 August 2016: Wouter 1114 - Add robustness against unallocated data in nsec3 trees. 1115 111616 August 2016: Wouter 1117 - configure --disable-radix-tree for about 15% lower memory usage. 1118 111912 August 2016: Wouter 1120 - Fix #817: xfrd update failed loop. 1121 11229 August 2016: Wouter 1123 - Can config key algorithms with the digest name, eg. 'sha256'. 1124 - default tsig algorithm is sha256. 1125 - Fix typo in log output, 'transfered' -> 'transferred'. 1126 - Fix compile warnings about signcompare in minmax retrytime. 1127 11288 August 2016: Wouter 1129 - Support syntax of RR type OPENPGPKEY from RFC 7929. 1130 11315 August 2016: Wouter 1132 - multi-master-check: yes can be used to check all masters for the 1133 last version, using the higher version from the configured masters, 1134 from Manabu Sonoda. 1135 - small fixups on patch. And fix spacing and remove configure flag. 1136 - Fix #812: make depend fails after distribution. 1137 11382 August 2016: Wouter 1139 - Fix unused result warnings from write and strtol. 1140 11411 August 2016: Wouter 1142 - Tag 4.1.11rc1. 1143 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. 1144 - Tag 4.1.11rc2. 1145 - trunk is 4.1.12 in development. 1146 11478 July 2016: Wouter 1148 - Note down tracking numbers for issue JVN#63359718 JPCERT#91251865. 1149 11505 July 2016: Wouter 1151 - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone 1152 transfer data size, from Toshifumi Sakaguchi. 1153 115427 June 2016: Wouter 1155 - Set default for min-refresh-time and min-retry-time to 0. Behaves 1156 just like before, but has a configurable option in nsd.conf. 1157 - Fix #783: Trying to run a root server without having configured it 1158 silently gives wrong answers. 1159 116016 June 2016: Wouter 1161 - When tcp is more than half full, use short timeout for tcp session. 1162 - Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. 1163 - man page entries for max-refresh-time patch. 1164 116515 June 2016: Wouter 1166 - Fix build without IPv6, patch from Zdenek Kaspar. 1167 116814 June 2016: Wouter 1169 - release 4.1.10 and tag for that. 1170 - trunk has 4.1.11 in development. 1171 11727 June 2016: Wouter 1173 - Fix NSEC3 ent fix to use closest encloser, not wildcard denial. 1174 11752 June 2016: Wouter 1176 - Fix for NSEC3 with zone signed without exact match for empty 1177 nonterminals, the answer for that domain gets wildcard denial. 1178 - #772 Document that recvmmsg has IPv6 problems on some linux kernels. 1179 - tag for 4.1.10rc1. 1180 118131 May 2016: Wouter 1182 - print notice that nsd is starting before taking off. 1183 118420 May 2016: Wouter 1185 - Updated fix for nonterminal nsec3 answers. 1186 118719 May 2016: Wouter 1188 - Fix empty nonterminal nsec3 cover answers. 1189 119012 May 2016: Wouter 1191 - NSD includes AAAA before A for queries over IPV6 (in delegations). 1192 And TC is set if no glue can be provided with a delegation because 1193 of packet size. 1194 119519 April 2016: Wouter 1196 - Fix #755: NSD spins after a zone update and a lot of TCP queries. 1197 11987 April 2016: Wouter 1199 - If set without nsd.db print "" as the default in the man pages. 1200 12014 April 2016: Wouter 1202 - Fix #751: NSD fails to occlude names below a DNAME. 1203 120424 March 2016: Wouter 1205 - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. 1206 120721 March 2016: Wouter 1208 - Update acx_nlnetlabs.m4 to version 33 with HMAC_Update test. 1209 - acx_nlnetlabs.m4 to v34, with -ldl -pthread test for libcrypto. 1210 121115 March 2016: Wouter 1212 - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option 1213 for Linux, binds to interfaces and addresses that are down. 1214 - Change the nsd.db file version because of nanosecond precision fix. 1215 - 4.1.9 release with the nsd.db file version fix (but not freebind), 1216 trunk contains 4.1.10 in development. 1217 121810 March 2016: Wouter 1219 - Tag 4.1.8 1220 - Trunk contains 4.1.9 in development. 1221 12222 March 2016: Wouter 1223 - Tag 4.1.8rc1 1224 12251 March 2016: Wouter 1226 - #744: Fix that NSD replies for configured but unloaded zone 1227 with SERVFAIL, not REFUSED. 1228 122916 February 2016: Wouter 1230 - RR type CSYNC (RFC7477) syntax is supported. 1231 123229 January 2016: Wouter 1233 - #739: zonefile changes when mtime is small are detected on reload, 1234 if filesystem supports precision mtime values. 1235 123619 January 2016: Wouter 1237 - Fix #736: segfault during zone transfer. 1238 123908 January 2016: Wouter 1240 - Define _DEFAULT_SOURCE with _BSD_SOURCE for recent Linuxes. 1241 124205 January 2016: Wouter 1243 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch 1244 from Daisuke Higashi. 1245 124604 January 2016: Wouter 1247 - Updated acx_nlnetlabs to version 32. 1248 124911 December 2015: Wouter 1250 - Fix flto check for OSX clang. 1251 125210 December 2015: Wouter 1253 - 4.1.7 release 1254 - trunk has 4.1.8 in development. 1255 - take advantage of arc4random_uniform if available, patch from 1256 Loganaden Velvindron. 1257 12583 December 2015: Wouter 1259 - tag for 4.1.7rc1 prerelease. 1260 12612 December 2015: Wouter 1262 - configure --enable-ratelimit-default-is-off with --enable-ratelimit 1263 to set the default ratelimit to disabled but available in nsd.conf. 1264 - Document that ratelimit qps and slip are updated in reconfig. 1265 - version: "string" option to set chaos version query reply string. 1266 - Fix up defaults in manpage. 1267 12681 December 2015: Wouter 1269 - Explain rrl-slip better in documentation. 1270 127130 November 2015: Wouter 1272 - Fix TCP responses when REUSEPORT is in use by turning it off. 1273 - reuseport: no is the default, because the feature is not troublefree. 1274 - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. 1275 127624 November 2015: Wouter 1277 - Fix zonec ttl mismatch printout to include more information. 1278 127918 November 2015: Wouter 1280 - RELNOTES more descriptive. 1281 - newer acx_nlnetlabs.m4. 1282 - spelling fixes from Igor Sobrado Delgado. 1283 128417 November 2015: Wouter 1285 - Fix #721: Fix wrong error code (FORMERR) returned for unknown 1286 opcode. NOTIMP expected. 1287 128816 November 2015: Wouter 1289 - Allocate less memory for TSIG digest. 1290 12916 November 2015: Wouter 1292 - Fixup for newer acx_nlnetlabs.m4, test for openssl version after 1293 testing for libdl need. 1294 12955 November 2015: Wouter 1296 - newer acx_nlnetlabs.m4, does not needlessly link with -ldl. 1297 129830 October 2015: Wouter 1299 - Fix tpkg tests for portability. 1300 130129 October 2015: Wouter 1302 - patch from Doug Hogan for SSL_OP_NO_SSLvx options. 1303 - updated contrib/nsd.spec, from Bálint Szigeti. 1304 - support configure --with-dbfile="" for nodb mode by default, where 1305 there is no binary database, but nsd reads and writes zonefiles. 1306 130727 October 2015: Wouter 1308 - portability fixes. 1309 131026 October 2015: Wouter 1311 - Init pfd for handlers added during handler-event-walk. 1312 131323 October 2015: Wouter 1314 - Fix many interfaces and zones updates from nsd parent event loop. 1315 131622 October 2015: Wouter 1317 - 4.1.6 release tag. 1318 - trunk contain 4.1.7 in development. 1319 132020 October 2015: Wouter 1321 - 4.1.6rc2 tag created. 1322 132319 October 2015: Wouter 1324 - Fix compile of zonec error message on FreeBSD. 1325 132615 October 2015: Wouter 1327 - 4.1.6rc1 tag created. 1328 132913 October 2015: Wouter 1330 - nsd-checkconf warns for master zones with no zonefile statement. 1331 - Fix start failure when many file descriptors are in use. 1332 - The servfail rcode is not printed with a space in the middle. 1333 - fixup file descriptor fixup nicer. 1334 - print failed token for config syntax error or parse error. 1335 133612 October 2015: Wouter 1337 - Fix #711: Document that debug-mode yes is used for staying 1338 attached to the supervisor console. 1339 - Document verbosity 3 prints more information. 1340 134130 September 2015: Wouter 1342 - makedist.sh print on pgp signature creation. 1343 134428 September 2015: Wouter 1345 - Fix typo in zonec.c inside error message. 1346 134724 September 2015: Wouter 1348 - Fix #701: Fix that AD=1 set in a BADVERS response. 1349 135021 September 2015: Wouter 1351 - Fix #706: default port 53 not opened on ip4 because of getaddrinfo 1352 hints initialisation failure. 1353 - 4.1.5 release tag 1354 - trunk contains 4.1.6 in development. 1355 13569 September 2015: Wouter 1357 - 4.1.4 release tag created. 1358 - trunk contains 4.1.5 in development. 1359 136031 August 2015: Wouter 1361 - 4.1.4rc1 tag created. 1362 136328 August 2015: Wouter 1364 - Fix #698 formatting errors and typos in nsd.8.in. 1365 - Add --enable-pie and --enable-relro-now options. 1366 136718 August 2015: Wouter 1368 - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. 1369 137017 August 2015: Wouter 1371 - Fixed checkconf test for reuseport setting. 1372 137314 August 2015: Wouter 1374 - SO_REUSEPORT does not work on FreeBSD. Enabled by default on Linux, 1375 not enabled by default on other OSes. 1376 13775 August 2015: Wouter 1378 - Fix that notify from nsd-control contains soa serial. 1379 13803 August 2015: Wouter 1381 - squelch SO_REUSEPORT failure on verbosity less than 3. 1382 138331 July 2015: Wouter 1384 - removed hardcoded interface limit, --with-max-ips removed. 1385 - SO_REUSEPORT support. 1386 138716 July 2015: Wouter 1388 - Fix #618: documented need to list ip-addresses separately in 1389 nsd.conf if there are multiple, because the source address of 1390 replies can otherwise go wrong. 1391 139210 July 2015: Wouter 1393 - Fix that for expired zones NSD performs an AXFR and accepts newer 1394 and older serial numbers. 1395 - Document that minimal responses only minimizes responses to fit 1396 in one datagram. It does not minimize smaller responses. 1397 13982 July 2015: Wouter 1399 - Fix NSID response for short edns sizes. 1400 140123 June 2015: Wouter 1402 - Trunk contains 4.1.4 in development. 1403 14044 June 2015: Wouter 1405 - Tag 4.1.3rc1 1406 - improve nsd-control usage text. (23 june - added to 4.1.3) 1407 - RFC7553 RR Type URI support. 1408 14092 June 2015: Wouter 1410 - Fix redefined macro lex warning for freebsd flex. 1411 141229 May 2015: Wouter 1413 - Fix that formerrors are ratelimited. 1414 141519 May 2015: Wouter 1416 - max-interfaces raised to 32. 1417 141818 May 2015: Wouter 1419 - removed unused defines for unofficial tsig-hmac algorithm codes. 1420 The TSIG algorithm is identified by name in the config file. 1421 142214 May 2015: Wouter 1423 - hmac sha224, sha384 and sha512 support, patch from David Gwynne. 1424 142523 April 2015: Wouter 1426 - Fix crash in zone parser for relative dname after error in origin. 1427 - Test for zone parser failures 1428 142921 April 2015: Wouter 1430 - nsd-control addzones and delzones read list of zones from stdin. 1431 - Fix task and zonestat files to be stored in a subdirectory in tmp 1432 to stop privilege elevation. 1433 - printout names for successful addition and removal with bulk command. 1434 143520 April 2015: Wouter 1436 - Fix #665: when removing subdomain, nsd does not reparse parent zone. 1437 143814 April 2015: Wouter 1439 - trunk contains 4.1.3(upcoming). 1440 14417 April 2015: Wouter 1442 - Tag 4.1.2rc2. 1443 14442 April 2015: Wouter 1445 - Made log message more consistent, changed 'axfr refused' log message 1446 to be more consistent with other messages. Also notify refused. 1447 - verbosity 2 logs axfr refused and notify refused. 1448 verbosity 1 contains less log messages. 1449 145031 March 2015: Wouter 1451 - Tag 4.1.2rc1. 1452 145324 March 2015: Wouter 1454 - Fix #654: Fix contradiction in notify logging verbosity level. 1455 - Incoming notifies have serial number logged (at verbosity 1). 1456 - Fix #655: Fix contradiction in verbosity for zone transfers. 1457 145817 March 2015: Wouter 1459 - Use reallocarray for integer overflow protection, patch submitted 1460 by Loganaden Velvindron. 1461 - Fix allocation integer overflow checks. 1462 146313 March 2015: Wouter 1464 - Fix buffer overflow in config parse of domain name, 1465 reported by John Van de Meulebrouck Brendgard. 1466 146712 March 2015: Wouter 1468 - Updated default keylength in nsd-control-setup to 3k. 1469 147010 March 2015: Wouter 1471 - Fix use after free after zonefile syntax error followed by ttl 1472 or origin directive, reported by John Van de Meulebrouck Brendgard. 1473 - Fix syntax error followed by too many TXT elements parse crash 1474 reported by John Van de Meulebrouck Brendgard. 1475 14769 March 2015: Wouter 1477 - Fix origin directive from unused old value and subdomain parser 1478 failure, reported by John Van de Meulebrouck Brendgard. 1479 14802 March 2015: Wouter 1481 - Fix b64pton out of bounds error on invalid zonefile input 1482 reported by John Van de Meulebrouck Brendgard. 1483 148420 February 2015: Wouter 1485 - Fix segfault on double origin in zone reader (thanks John Van de 1486 Meulebrouck Brendgard). 1487 148819 February 2015: Wouter 1489 - Remove dead code domain_table_iterate. 1490 - Fix segfault in zone reader on invalid input 1491 reported by John Van de Meulebrouck Brendgard. 1492 14935 February 2015: Wouter 1494 - Fix #642: Change 'zone read with no errors' to '.. with success'. 1495 Patch from Benedikt Heine. 1496 14973 February 2015: Wouter 1498 - Tag 4.1.1 release 1499 - Trunk is 4.1.2 in development. 1500 - Remove some duplicate header includes (from Brad Smith). 1501 - Fix tcp waiting list for zone transfers where the bind and connect 1502 calls fail. 1503 150429 January 2015: Wouter 1505 - Fix zonesdir chroot error message. 1506 150728 January 2015: Wouter 1508 - correct some hyphen-used-as-minus-sign (from Andreas Schulze) in 1509 man pages. 1510 151127 January 2015: Wouter 1512 - Tag 4.1.1rc1 1513 151421 January 2015: Wouter 1515 - Synthesize CNAMEs with same TTL as DNAME. 1516 151712 January 2015: Wouter 1518 - Fix casts for ctype functions (from Todd Miller). 1519 - nsd-checkconf -f prints out full name of pidfile (with dir). 1520 15219 January 2015: Wouter 1522 - Fix bug#637: fix that nsd.db grows limitlessly, an off by one 1523 on one megabyte free chunks, created during AXFRs of large zones, 1524 that caused the one megabyte chunk to be leaked. 1525 - Fix udb-inspect for one megabyte chunks, counts and statistics. 1526 15276 January 2015: Wouter 1528 - Fix spinning NSD with lots of failing transfers, due to pointer 1529 comparison using void pointer subtraction (from Otto Moerbeek). 1530 15315 January 2015: Wouter 1532 - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE. 1533 15344 Nov 2014: Wouter 1535 - Document zonestat config, and nsd-checkconf access. 1536 15373 Nov 2014: Wouter 1538 - Fix that failure to add tcp to tcp base does not leak the socket. 1539 154027 Oct 2014: Wouter 1541 - Disabled use of SSLv3 in nsd-control. 1542 - zonestats are cleared (or not, with stats_noreset). 1543 154422 Oct 2014: Wouter 1545 - Test for wildcard fix (from 3.2). 1546 154716 Oct 2014: Wouter 1548 - Fixes for wildcard addition and deletion, speedup for some cases. 1549 155015 Oct 2014: Wouter 1551 - Fix that queries for noname CH TXT are REFUSED instead of nodata. 1552 155314 Oct 2014: Wouter 1554 - per zone statistics with --enable-zone-stats, configure with 1555 zonestats: "zonestatidentifier", zones with the same id are added. 1556 155710 Oct 2014: Wouter 1558 - Fix #616: retry xfer for zones with no content after command. 1559 - Fix char used as array index warnings on NetBSD. 1560 15618 Oct 2014: Wouter 1562 - Fix "xfrd_handle_ipc: bad mode" log errors when compiled 1563 with --disable-bind8-stats. 1564 156518 Sep 2014: Wouter 1566 - Fix that expired zones stay expired after a server restart. 1567 156815 Sep 2014: Wouter 1569 - RFC 7344: CDS and CDNSKEY (read in). 1570 15714 Sep 2014: Wouter 1572 - Tag 4.1.0. 1573 - trunk is 4.1.1 in development. 1574 - fix manpage for nsd-checkzone to have version and date. 1575 157629 Aug 2014: Wouter 1577 - Fix install of the nsd-checkconf man page. 1578 157928 Aug 2014: Wouter 1580 - Tag 4.1.0rc1 1581 158225 Aug 2014: Wouter 1583 - Increased default --with-max-ips from 8 to 16, this increases the 1584 number of interfaces you can specify in nsd.conf to listen to. 1585 158619 Aug 2014: Wouter 1587 - Remove .LP after .SH in man pages. 1588 15897 Aug 2014: Wouter 1590 - Fix for process swap of main and reload, reload failure from the 1591 pipe is acted on, and reload fail not cause nsd to shutdown, also 1592 ignore sigchlds from the servermain in reload, that would cause 1593 EINTR to break file reads. 1594 - trunk has version 4.1. 1595 15965 Aug 2014: Wouter 1597 - Fix #600: document that provide-xfr provides AXFR and not IXFR. 1598 - remove program group fix, because it is not needed. 1599 - Fix rising-load-average or memory-leaks in OSes (Linux since 2.6), 1600 that keep track of all past process parents, or leak memory 1601 for them. Fix makes it so there is no very deep string of 1602 process parents. 1603 The reload process is now the process parent of servermain. That 1604 makes signals for children arrive at the reload, and servermain 1605 has to use closed pipes to detect that children have exited. 1606 16071 Aug 2014: Wouter 1608 - Set program group on main process and its child processes, and 1609 kill them on a reload. 1610 161120 July 2014: Wouter 1612 - Fix endian.h include for OpenBSD. 1613 161415 July 2014: Wouter 1615 - Fix -O3 compile flag to -O2 to avoid miscompilations. 1616 - Allow user to override the -g -O2 CFLAGS in ./configure. 1617 161811 July 2014: Wouter 1619 - fix strptime implicit declaration error on OpenBSD. 1620 16219 July 2014: Wouter 1622 - removed unnecessary arc4random_uniform. 1623 16248 July 2014: Matthijs 1625 - fake-rfc2553 patch (thanks Benjamin Baier). 1626 16278 July 2014: Wouter 1628 - wait and reap processes that are not part of the process group. 1629 16307 July 2014: Wouter 1631 - Code review fixup from NSD3. 1632 163330 Jun 2014: Wouter 1634 - Fix #590: rrl log does not print wildcard as a star but escaped. 1635 - Fix #591: rrl log messages at verbosity level 1. 1636 (If that does not work for everyone, we need rrl-log: yesno option). 1637 163827 Jun 2014: Wouter 1639 - Fixup rr-test test so that it does not fail on the #553 string. 1640 164117 Jun 2014: Matthijs 1642 - Fix #587: Default value for statistics is 0. 1643 - Remove the shift-reduce conflicts from the bug#553 fix. 1644 16455 Jun 2014: Wouter 1646 - Fix roundrobin cornercase for truncated packets. 1647 - round-robin: yesno in nsd.conf enabled round robin rotation. 1648 164928 May 2014: Wouter 1650 - Fix #585: yylex_destroy missing, cannot compile on RHEL 5.x. 1651 - Fix #583: Round-robin for records in the Answer section. 1652 165322 May 2014: Wouter 1654 - Fix zonefile parse with no whitespace before semicolon comments. 1655 165616 May 2014: Wouter 1657 - xfrd reaps children on a timer as well, similar to server_parent. 1658 16598 May 2014: Wouter 1660 - Fix #564: nsd-checkzone tool to check zonefile correctness. 1661 16627 May 2014: Wouter 1663 - Fix #577: makefile incorrectly installed manpages from srcdir. 1664 166530 April 2014: Wouter 1666 - Fix that xfrd reaps all children on every eventloop, because some 1667 exited reloads may attach here and need reaping, also if the signal 1668 is lost. 1669 167023 April 2014: Wouter 1671 - Fix progress printout for very large zones (numeric overflow). 1672 167310 April 2014: Wouter 1674 - Fix write_socket return value check in server.c (Thanks Brad Smith, 1675 Mark Kettenis). 1676 16778 April 2014: Wouter 1678 - nsd-control addzone reports if zone already exists. 1679 16807 April 2014: Wouter 1681 - Fix #571: unused variable and incompatible pointer warnings when 1682 compiled on a system without INET6. 1683 168427 March 2014: Wouter 1685 - Fix delete or rename of a lot of zones and make it take a 1686 non-enormous time. Database compaction is deferred. 1687 - Speed up deletion of zone contents a lot, (56s to 1s), speeds up 1688 delete, rename and AXFR for zones. Defer emptynonterminal checks. 1689 - Better example config in nsd.conf manual page. 1690 - log-time-ascii option, default yes, with readable timestamp in log. 1691 169225 March 2014: Wouter 1693 - nsd shuts down during init process if given signal. 1694 - shorter logging for zone transfer fail rcodes. 1695 169624 March 2014: Wouter 1697 - include: "foo/nsd.d/*.conf" works, wildcard glob on includes. 1698 - Fix print filename of encompassing config file on read failure. 1699 170021 March 2014: Wouter 1701 - Fix bug in nodatabase mode with ixfrs that change nsec3param 1702 (Thanks Anand Buddhdev). 1703 - Changed maxbackoff for no-content secondary zones from 4h to 24h. 1704 - nocontent zones are checked on startup, but continue backoff 1705 from stored xfrd.state values. 1706 170719 March 2014: Wouter 1708 - made database: "" set the 3600 default for zonefileswrite only 1709 if it is also at its default, so that user settings override. 1710 - Unit test for zonefiles-write. 1711 - Write xfrd.state for nodb mode again. Disable xfrd.state with 1712 xfrdfile: "" in config. Does not check slave zone if state is 1713 same as last time on startup. 1714 - Fixed shutdown message sporadically not printed on exit. 1715 - Documented zonefile %s syntax in nsd.conf man page. 1716 - Fix manpage to put colon after zonefiles check and write. 1717 - Change from 'Zone" to "zone" with ".. serial .. is updated" log 1718 message. 1719 172018 March 2014: Wouter 1721 - unit test for nodb mode. 1722 - Speed up zone write (.nl zonefile 30% faster). 1723 The memory alloc-dealloc in print_rr has been moved to print_rrs. 1724 - (from 3.2), fix for #553 and for other TXT string syntax. 1725 - in nodb mode, xfrd.state is not written out, because the zones 1726 are refreshed upon next startup anyway, so keeping timers and state 1727 is unnecessary. 1728 - zonefiles-write option in nsd.conf, enabled when database is "". 1729 The server writes changed zonefiles to disk every hour. 1730 173117 March 2014: Wouter 1732 - Speed up zone parsing (.nl reads 40% faster). 1733 The rrtype_from_string routine is called often, optimised it. 1734 173514 March 2014: Wouter 1736 - tag 4.0.3 1737 - trunk has 4.0.4 in development. 1738 - database: "" starts without mmap of database. Less memory is used, 1739 zones are read from text zonefile. 1740 174113 March 2014: Wouter 1742 - Fix nsd.db unclean close check. Previous databases are considered 1743 unclean by the code and are created anew. 1744 - Adds nsd.db larger than 400Tb check for sanity. Also test if 1745 filesize as documented in the file is correct. 1746 - nsd waits for tasks to complete on stop, prevents nsd.db corruption. 1747 - fix to not delete tmpdir too early in shutdown process. 1748 174912 March 2014: Wouter 1750 - tag 4.0.2 1751 - trunk has 4.0.3 in development. 1752 - disabled udb checking functionality that made it very slow, 1753 this was enabled when enable-checking was turned on. 1754 175527 February 2014: Wouter 1756 - tag 4.0.2rc1 1757 175826 February 2014: Wouter 1759 - Fix that NSD will delete and recreate not-clean-closed databases. 1760 176120 February 2014: Wouter 1762 - Fix from 3.2: make SOA RDATA comparisons in XFR more lenient (only 1763 check serial). 1764 176518 February 2014: Wouter 1766 - Fix leak of zone name after zonefile read. 1767 - Fix malloc too large that would be leaked in the radix tree. 1768 176914 February 2014: Wouter 1770 - configure change for easier compile on Minix. 1771 177210 February 2014: Wouter 1773 - Fix #552: zonefile loads on nsd-control reconfig when the name 1774 of the file has changed. 1775 17767 February 2014: Wouter 1777 - Fix #551: change Regent to Copyright holder in the LICENSE, 1778 to match the definition on opensource.org for the BSD License. 1779 17803 February 2014: Wouter 1781 - Disabled recvmmsg and sendmmsg usage by default because kernel 1782 versions have implementation issues: ipv6 ignored, security issues. 1783 - Detect libevent2 install automatically by configure, and use 1784 event2 header files if necessary. 1785 - Fixup link with lib/event2 subdir. 1786 178730 January 2014: Wouter 1788 - Fix expired zones to give SERVFAIL, also when parent zone loaded. 1789 179027 January 2014: Wouter 1791 - tag 4.0.1. 1792 - trunk is 4.0.2 in development. 1793 - rcode REFUSED for queries to non-hosted zones. 1794 - documented nsd-control zonestatus output in nsd-control manpage. 1795 - remove mention of nsdc from nsd-checkconf manpage. 1796 179721 January 2014: Wouter 1798 - tag 4.0.1rc2 1799 180020 January 2014: Wouter 1801 - Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx). 1802 180317 January 2014: Wouter 1804 - Fix type CAA. 1805 - Fix type EUI48. 1806 - nsid can be set with "ascii_somestring" in ascii. 1807 - Fix printout of high-chars in TXT on NetBSD. 1808 180916 January 2014: Wouter 1810 - Unit test for WKS failure. 1811 181215 January 2014: Wouter 1813 - tag 4.0.1rc1 1814 181513 January 2014: Wouter 1816 - Check if configure in srcdir collides with outofdir build. 1817 181810 January 2014: Wouter 1819 - Fix that chroot is removed from zonefile names (for absolute names). 1820 18219 January 2014: Wouter 1822 - Fix that bad IXFR updates do not result in double SOA records, 1823 and that an AXFR is started (attempted) when the zone state seems 1824 to be inconsistent with the master's zone state. 1825 18268 January 2014: Matthijs 1827 - Bugfix #542: Match RRSIG TTL with SOA TTL in negative response. 1828 18297 January 2014: Wouter 1830 - Fix xfrd when zone transfer TCP contains zero length packets. 1831 - Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3, 1832 because AXFRs overwrote nsec3 administration in the child zone. 1833 18342 January 2014: Wouter 1835 - Log ip address for sendto and sendmmsg failures. 1836 18374 December 2013: Matthijs 1838 - Support for CAA RRtype (RFC 6844). 1839 184026 November 2013: Wouter 1841 - Fix segfaults after read of zones with rr type WKS from zonefile. 1842 - Seed PRNG for openssl at start of daemon, fixes SSL connection issue. 1843 184425 November 2013: Wouter 1845 - (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset. 1846 184711 November 2013: Wouter 1848 - Fix bug#534: IXFR query loop over UDP for zones that are unchanged. 1849 185011 November 2013: Matthijs 1851 - EUI48 and EUI64 is now RFC 7043 1852 18535 November 2013: Wouter 1854 - Accept interface: as an alternative for ip-address: for 1855 consistency with unbound.conf syntax. 1856 185729 October 2013: Wouter 1858 - tag for 4.0.0 release. 1859 - trunk has 4.0.1 in development, for bug fixes. 1860 186124 October 2013: Wouter 1862 - Fixup zone change code. 1863 - tag 4.0.0rc3. 1864 186521 October 2013: Matthijs 1866 - Initialize xfrd zone when changing zone from master to slave 1867 and delete xfrd zone when changing zone from slave to master. 1868 186914 October 2013: Wouter 1870 - tag 4.0.0rc2. 1871 187214 October 2013: Matthijs 1873 - Additional log messages with reason why RR to be deleted cannot be 1874 found. 1875 187614 October 2013: Wouter 1877 - Fix for zone transfer that has different-cased RRSIG signer names 1878 or NSEC next-owner names. 1879 18809 October 2013: Wouter 1881 - tsig errors on incoming tsig print key name and source IP of query. 1882 18838 October 2013: Wouter 1884 - Update documentation for nsd -d option. 1885 18867 October 2013: Wouter 1887 - Fix mini_event ev_once flag to be prettier (review comments Yuri). 1888 - tag 4.0.0rc1 recreated. 1889 18904 October 2013: Wouter 1891 - Fix bug where if you do not have flex, and then install flex, it 1892 would not make without a re-untar of the source. 1893 18943 October 2013: Wouter 1895 - Review changes from Matthijs. 1896 - doc/README updated, 'nsdc' is now removed. 1897 18981 October 2013: Wouter 1899 - Review commits from Matthijs. 1900 - doc/UPGRADING updated, review Yuri. 1901 190230 September 2013: Wouter 1903 - tag 4.0.0rc1 1904 - updated doc/RELNOTES 1905 190619 September 2013: Wouter 1907 - configure --disable-recvmmsg for compat with older Linux kernels, 1908 by default it autodetects support in the kernel on the buildmachine. 1909 191020 Aug 2013: Wouter 1911 - Fix time at 2038, uint32s changed to time_t, support 64bit time_t. 1912 191319 Aug 2013: Wouter 1914 - Fix use of 32bit time, for 2038, thanks to Theo de Raadt for patch. 1915 191613 Aug 2013: Wouter 1917 - Bugfix#518 Incorrect RRL prefix length option names in nsd.conf 1918 man page from Ville Mattila. 1919 19209 Aug 2013: Wouter 1921 - Fix that xfrd, and nsd-control, does not stop responding when reload 1922 errors out. The pid is sent like it should by server_main. 1923 - Fix that EOF in quoted string error does not cause reload to exit. 1924 - Fixup errors from the stack code checker. 1925 19266 Aug 2013: Wouter 1927 - Removed use of random when arc4random is available. Thus, random 1928 and srandom are then not linked with the executable. 1929 193016 Jul 2013: Wouter 1931 - Fix segfault with no logfile and chroot (Thanks Patrik Lundin). 1932 193315 Jul 2013: Wouter 1934 - beta 5 tag. 1935 - trunk has beta6 named in configure. 1936 19379 Jul 2013: Wouter 1938 - unlink xfr file if transfer is stopped, timeouted or interrupted. 1939 And unlink xfr file in progress when the zone is deleted. 1940 19418 Jul 2013: Wouter 1942 - Increase tcpbacklog default to 256 (silently capped to 128 on BSD). 1943 For remote control keep it at 16, it has less TCP load. 1944 It does not actually increase TCP performance (some except), but 1945 reduces connection loss when there is a spike in TCP connections. 1946 19475 Jul 2013: Wouter 1948 - nsd-mem stores temp files in current dir because /tmp is too small. 1949 - printout pct parsed, read, nsec3 and written every 100.000 elements 1950 and after 5 seconds. For big zones. 1951 19523 Jul 2013: Wouter 1953 - region-allocator has list of large allocations, so delete is in O(1). 1954 - recursive readroutine for speedup of nsd.db reads (30%). 1955 - udb-inspect prints type summary of nodes in nsd.db. 1956 195728 Jun 2013: Matthijs 1958 - Update tmp serial in xfr checking. 1959 196028 Jun 2013: Wouter 1961 - nsd.db 12% smaller, no nsec3 hash storage. Also ups udb version 1962 because of the format change. printout udb write complete for 1963 debug. 1964 - Fix warning in labellength 0 code. 1965 196627 Jun 2013: Matthijs 1967 - Better XFR checking, fallback to AXFR (if allowed) if three 1968 malformed XFR packets have been seen. 1969 - zonec: Don't crash on domain names with label length 0. 1970 197125 Jun 2013: Matthijs 1972 - Rename --enable-eui-rrtypes to --enable-draft-rrtypes. 1973 197425 Jun 2013: Wouter 1975 - acx_nlnetlabs.m4 update, --disable-flto. 1976 197720 Jun 2013: Matthijs 1978 - Use IPV6 minimum MTU settings with TCP to reduce failures that 1979 are caused by delays in learning working PMTU when communicating 1980 through a tunnel. 1981 - Improved RRL logging: also print triggering query src addr and qtype 1982 (thanks Klaus Darilion). 1983 - Merge some minor stuff from NSD3.2 1984 198518 Jun 2013: Matthijs 1986 - Add rrl-slip config option (thanks Stephane Bortzmeyer). 1987 - Add rrl-ipv{4,6}-prefix-length config option. 1988 - Bug #496: Support for EUI48 and EUI64 RR types. 1989 199014 Jun 2013: Wouter 1991 - Optimizations: -O3 if possible (user can override CFLAGS), udp 1992 buffers are set to 1m by default (if socket options exist), 1993 use recvmmsg and sendmmsg, or only recvmmsg, or recvfrom. 1994 199511 Jun 2013: Wouter 1996 - Fix memory leak in zone parser for txt record (since the large 1997 number of txt subsections fix). 1998 - Fix zone parser allocations to be in db region. 1999 - nsd-mem prints advice 2000 20015 Jun 2013: Wouter 2002 - Fix segfault on repeated reconfigs, double free of zone apex name. 2003 20044 Jun 2013: Wouter 2005 - Remove duplicate zlfile variable from options structure. 2006 200730 May 2013: Wouter 2008 - Fix nsd-mem for printout of values above 4G. 2009 201016 May 2013: Wouter 2011 - Patch from Lukas Wunner that makes chroot more consistent. 2012 Make all paths absolute with the chrootdir in front, or use 2013 an absolute zonesdir with other patsh relative to that. 2014 20153 May 2013: Wouter 2016 - Fix race on exit of nsd, for restarts, so that the pidfile-pid 2017 process waits until port53 has been closed before exiting. 2018 - update acx_nlnetlabs.m4 to v23, sleep w32 fix. 2019 202029 April 2013: Wouter 2021 - Remove unused pointer and fixup chroot include for trail slash. 2022 202326 April 2013: Wouter 2024 - Patch from Lukas Wunner that makes nsd.conf include files work 2025 inside chroot/etc environments on repattern and reconfig. 2026 202725 April 2013: Matthijs 2028 - New config option "ip-transparent:", to bind to non local addresses 2029 (thanks Arjen Zonneveld). 2030 - RRtypes ASFDB, RP, RT should not compress dnames (thanks Peter 2031 van Dijk). 2032 203319 April 2013: Wouter 2034 - own snprintf, fix use of snprintf return value (in debug print). 2035 203618 April 2013: Wouter 2037 - fix bug #491: pick program name (0th argument) as syslog identity. 2038 20399 April 2013: Wouter 2040 - Bug #494: Exit with return code 1 if socket code fails. (from 3.2) 2041 - Fix B64_NTOP replacement definitions in configure.ac. 2042 204326 March 2013: Wouter 2044 - update lookup3.c with better endianness detection. 2045 204625 March 2013: Wouter 2047 - faster nsec3 updates. 2048 - Fixup contrib/bug390.patch for 4.0.0b4. 2049 - remove leak of nsec3. 2050 - allocate radixtree in region for small (5%) total savings and 2051 about 15% savings in the radixtree itself (due to many small alloc 2052 savings in region). 2053 205422 March 2013: Wouter 2055 - use less memory for non-nsec3, nsec3tree. 2056 205718 March 2013: Wouter 2058 - update nsd-mem with pretty printout and RRL count. 2059 206014 March 2013: Wouter 2061 - Fix memory statistics in nsd_munin_. 2062 20638 March 2013: Wouter 2064 - nsd-mem tool initial commit. 2065 20667 March 2013: Wouter 2067 - notify information is logged at correct verbosity level, 1. 2068 20695 March 2013: Matthijs 2070 - Add hash to rrl bucket 2071 20725 March 2013: Wouter 2073 - Fixup the growth and shrinkage of nsd.db. This should use less 2074 calls to remap and change the file and mmap size. 2075 207615 February 2013: Wouter 2077 - Fix compile on bigendian netbsd alpha. 2078 - Fixup tests for older dig (check if +noedns option is supported) 2079 208011 February 2013: Matthijs 2081 - Fix outgoing-interface: Don't fail if family is IPv6 but 2082 only IPv4 outgoing-interface is set, or vice versa. 2083 208411 February 2013: Wouter 2085 - fix tcp zonetransfer pipeline lookup function. 2086 - remove compiler warning for memset from tsig read. 2087 20887 February 2013: Wouter 2089 - detect endianness in lookup3 on BSD, patch from Brad Smith. 2090 - nsd-control verbosity prints out verbosity level without argument. 2091 - nsd-control status prints out ratelimit if ratelimit is enabled. 2092 20935 February 2013: Wouter 2094 - Fix that old zonefile does not override newer AXFR for slave zones. 2095 - Nicer printout of notify. 2096 - beta4 2097 20984 February 2013: Wouter 2099 - Fix AXFR of NSEC3 slave zone. 2100 21011 February 2013: Wouter 2102 - Less printout of 'bad transfer'. 2103 210431 January 2013: Wouter 2105 - Fix that nsec3 zones are precompiled when read from udb. This 2106 caused assertion failures. 2107 - Fix is_apex flag for zones read from udb. 2108 210929 January 2013: Matthijs 2110 - RRL documented in nsd.conf.sample 2111 211229 January 2013: Wouter 2113 - printout log less verbosely, not every axfr packet. 2114 - remove printout of "bad transfer" to the log for notimpl. 2115 - fixup tests for new netstat and new netcat. 2116 211725 January 2013: Wouter 2118 - fix gcc warning, do not use uninit value for rng init. 2119 - fix zonefiles-check: entry in nsd.conf 2120 - remove -fwhole-program gcc flag usage. We cannot reliably detect 2121 if it works without failure. 2122 212323 January 2013: Wouter 2124 - beta3 2125 212622 January 2013: Wouter 2127 - Fix time calculation of zone transfer. 2128 - log ip address with tcp failure. 2129 213021 January 2013: Wouter 2131 - Improve tabs in sample nsd.conf for different tabsizes. 2132 - Fix segv if xfrdir does not exit. 2133 - create xfrdir on make install (does not remove on make uninstall, 2134 because this could be /tmp). 2135 - do not leave task files in /tmp if nsd fails to startup because 2136 of file permissions. 2137 - do-ip4 and do-ip6 nsd.conf options just like unbound. 2138 - fixed testset for dig9 default with edns. 2139 214018 January 2013: Wouter 2141 - Fix configure for gentoo gcc and headers. 2142 - List libevent in README. 2143 - Tabs and spaces nicer in nsd.conf.sample. 2144 - Fix spurious assertion failure for some rrl blocks. 2145 214616 January 2013: Wouter 2147 - Added zonefiles-check option, default yes, check mtimes of zone files 2148 on sighup and startup (from Robin Hack). 2149 215015 January 2013: Wouter 2151 - documented that the _implicit_ pattern names are used internally. 2152 215310 January 2013: Wouter 2154 - updated RELNOTES. 2155 - applied patch from Robin Hack to remove double pid file truncation. 2156 - repattern is called reconfig (because most config options are 2157 picked up, except for superuser options (chroot, logfile, port)). 2158 - document that the zonefile attribute can be empty. 2159 21609 January 2013: Wouter 2161 - 4.0.0b2 is beta2 version tag. 2162 21638 January 2013: Matthijs 2164 - Merge changes from 3.2.15 with trunk: 2165 * Update docs: CREDITS, NEW-CFG-OPTION, REQUIREMENTS, 2166 RELNOTES, TODO 2167 * Update dname_test.tpkg test. 2168 * TSIG init only fails if no digests at all can be found. 2169 * Remove unused tsig_get_algorithm_by_id code (was used by 2170 nsd-xfer). 2171 * Fix some fd leaks. 2172 * Bug #485: Fallback to DEFAULT_TTL if MSB is set. 2173 * Fix RCODE when xNAME loop final answer not exist to NXDOMAIN. 2174 21758 January 2013: Wouter 2176 - Fix make outside of source directory. 2177 21787 January 2013: Wouter 2179 - fixed uninit variable for empty zone axfr request 2180 - fixed alloc of acl options for config zones so they can be deleted. 2181 - fixed that pattern name is copied, so that patterns stay the same. 2182 - repattern also rereads the zones in the config file and applies that 2183 to the running server. 2184 218521 December 2012: Wouter 2186 - --with-logfile sets the logfile inside the example documentation. 2187 - Fixed addzone and delzone inside chroot (thanks Will Pressly). 2188 218919 December 2012: Wouter 2190 - Fixup for libevent-2.1.2. 2191 219218 December 2012: Wouter 2193 - makedist makes sha256 for tarballs. 2194 - nsd-control start runs an absolute path to start sbin/nsd. 2195 219617 December 2012: Wouter 2197 - Fix for use with libev (no use of event.ev_flags). 2198 219912 December 2012: Wouter 2200 - 4.0.0b1 is beta1 version. 2201 220211 December 2012: Matthijs 2203 - Better ILNP RR parsing (thanks Stephane Bortzmeyer). 2204 220511 December 2012: Wouter 2206 - fix libevent=no signals on Solaris. 2207 - Fix handle of activated zones from timeout event. 2208 - contrib/nsd_munin_ updated with memory lookup for BSD. 2209 221010 December 2012: Wouter 2211 - implement --with-libevent=no. 2212 221310 December 2012: Matthijs 2214 - Bug #483: Better error messages for TSIG errors. 2215 - RFC 2845: If BADKEY or BADSIG, RCODE should be NOTAUTH. 2216 Also, continue TSIG verification if NOTAUTH. 2217 22187 December 2012: Wouter 2219 - stable pidfile, xfrd is process leader and forks server-parent. 2220 22215 December 2012: Wouter 2222 - NSD4_imp_6 tag. 2223 - trunk has imp_7 implementation. 2224 22254 December 2012: Wouter 2226 - NSD-RRL documented in manpage. 2227 22283 December 2012: Wouter 2229 - Fixup exit of server-child while notifies are incoming. 2230 223128 November 2012: Wouter 2232 - RRL implements classification type RRSIG. 2233 223426 November 2012: Wouter 2235 - Fix to make nsd.udb portable between 32bit and 64bit machines. 2236 - Fix to make udb mmap work for FreeBSD8 when it grows significantly. 2237 223823 November 2012: Wouter 2239 - Fix compiler warnings and fix blocking pipes. 2240 - default tcp-count set to 100. 2241 224221 November 2012: Wouter 2243 - Implement rrl log of unblock for collision. 2244 - imported TLSA and ILNP support from NSD3. 2245 224619 November 2012: Wouter 2247 - Fix bug 480: libevent use when tcp-count is hit caused hang (in NSD4). 2248 22499 November 2012: Wouter 2250 - Log when NSD-RRL stops a stream from being blocked. 2251 22528 November 2012: Willem 2253 - Fix AXFR. Loop through the zone to transfer only. 2254 22552 November 2012: Wouter 2256 - Fix bug 478: declaration after statement (for gcc 2.95). 2257 22581 November 2012: Wouter 2259 - Fix default settings for RRL. 2260 226130 October 2012: Wouter 2262 - review fixup of RRL SLIP response. 2263 - RRL uses dev/random at start, nonRRL does not. 2264 226526 October 2012: Wouter 2266 - nsd-control repattern also changes rrl-ratelimit and whitelist limit. 2267 226817 October 2012: Wouter 2269 - Fix alignment problem in zone transfer pipeline code. 2270 - Fix random generator generating negative. 2271 - Fix udb radtree strspace creation bug. 2272 227315 October 2012: Wouter 2274 - Fix activated zone does not interrupt transfer. 2275 - Log of connection failure for zone transfer is neater. 2276 227712 October 2012: Wouter 2278 - Fix invalid time argument in nsd control (for OpenBSD). 2279 228011 October 2012: Wouter 2281 - Fix build on OpenBSD (Thanks Oliver Peter). 2282 - tpkg for RRL. 2283 228410 October 2012: Wouter 2285 - implement nsd-checkconf option use of rrl-whitelist. 2286 22879 October 2012: Wouter 2288 - with --enable-ratelimit you enable ratelimiting, with verbosity 2 2289 it logs what is ratelimited for operational inspection. 2290 - unit test for rrl. 2291 - rrl uses mmap to save state across reloads. 2292 - rrl enum and u16 flags (dnskey type). 2293 - rrl whitelist and config. 2294 22958 October 2012: Wouter 2296 - Sync with unbound lookup3, has raninit value. 2297 22985 October 2012: Wouter 2299 - fix bug with event loop in zone transfer pipeline. 2300 - close xfrd_sock_p in server_child because otherwise due to use of 2301 kqueue, it gets a broken pipe when that process exits (on FreeBSD). 2302 23034 October 2012: Wouter 2304 - Fixup no use of internals ev_flags of libevent. 2305 23061 October 2012: Wouter 2307 - fix xfrd tcp skip. 2308 230921 September 2012: Wouter 2310 - tzset before chroot for correct timezone (from Camiel Dobbelaar). 2311 - pipeline support for AXFR and IXFR tcp queries. 2312 231311 September 2012: Wouter 2314 - writev support for TCP. 2315 231628 August 2012: Wouter 2317 - TXT records with components longer than 255 fail to parse, 2318 but without segfault, it continues processing with non NULL value. 2319 232027 August 2012: Wouter 2321 - libevent in server_child. 2322 232321 August 2012: Matthijs 2324 - Fix bug#464: Conditionally define MAXHOSTNAMELEN 2325 232620 August 2012: Wouter 2327 - Fix hang on exit in xfrd. 2328 - optimized socket counts for zone transfer speed. 2329 233013 August 2012: Wouter 2331 - Fix xfrd libevent events. 2332 233310 August 2012: Wouter 2334 - libevent in xfrd. 2335 233626 July 2012: Yuri 2337 - Prioritize notify sender for requesting XFR. 2338 (thanks Ilya Bakulin) 2339 234019 July 2012: Willem 2341 - Fix for VU#624931 CVE-2012-2978: NSD denial of service 2342 vulnerability from non-standard DNS packet from any host 2343 on the internet. 2344 http://www.nlnetlabs.nl/downloads/CVE-2012-2978.txt 2345 234618 July 2012: Wouter 2347 - Fix bug#460: man page correction - identity. 2348 23499 July 2012: Wouter 2350 - delete temporary transfer files on exit of xfrd and reload. 2351 - when tasks are applied, reload checks if it must exit between 2352 tasks, so that it can quickly exit when NSD is told to quit. 2353 - fix bug in apply_xfr that must use an udb_ptr because it shifts 2354 when new allocations are made. 2355 23566 July 2012: Wouter 2357 - add xfrdir: "/tmp" option and configure --with-xfrdir="/tmp". 2358 The nsd.task files and a subdirectory for zone transfers are 2359 created there. 2360 23612 July 2012: Wouter 2362 - fix checkconf unit test and add test for backwards compatibility 2363 for difffile: "x" statement. 2364 236529 June 2012: Wouter 2366 - Implemented /tmp/nsd.xfr.xxx/ to replace ixfr.db. So that nsdc 2367 patch is no longer needed. 2368 23698 June 2012: Wouter 2370 - Fix tpkg test cutest_qroot and rr-test for printout of algorithms 2371 as numbers, and copy of DO flag to the answer. 2372 - pick up fd fix from 3_2 branch: Some more fd >= 0 to fd != -1 fixes 2373 237431 May 2012: Matthijs 2375 - Sync with 3.2 branch 2376 237724 February 2012: Wouter 2378 - Fix for qtype ANY for a wildcard domain in NSEC signed zone. 2379 23809 February 2012: Wouter 2381 - Update acxnlnetlabs.m4 version 21, fixed MEMCMP_BROKEN #undef line. 2382 238323 January 2012: Wouter 2384 - remove clang security warning about %n in format string. 2385 238620 January 2012: Wouter 2387 - Fix bug #430: segfault when MAX_INTERFACES set to more than 65K. 2388 - Fix configure for OpenIndiana sunos 5.11, acx_nlnetlabs.m4 update. 2389 239012 January 2012: Matthijs 2391 - Fix bug #421: truncate pidfile on shutdown, before unlink. 2392 239310 January 2012: Wouter 2394 - removed unused variables. 2395 239610 November 2011: Wouter 2397 - acxnlnetlabs.m4 updated to version 16, better lto check (a.out drop). 2398 23993 November 2011: Wouter 2400 - fflush zonelistfile after zone add or delete. 2401 24021 November 2011: Wouter 2403 - Fix -flto detection for llvm compiler on Lion. 2404 240510 October 2011: Matthijs 2406 - Don't clear the AA bit if there is an authoritative CNAME in the 2407 answer section (as shown in RFC 1034, Section 6.2.7, 2nd example). 2408 240910 October 2011: Wouter 2410 - squelch EPIPE when writing AXFR, enable with verbosity 2. 2411 241226 September 2011: (Matthijs, from NSD3_2 branch) 2413 - Copy the DO bit to the response. 2414 - Don't return SERVFAIL on a domain that looks like a NSEC3 2415 domain but is actually a empty non-terminal. 2416 241719 August 2011: Wouter 2418 - Fix segfault if no logfile is used. 2419 24205 August 2011: Wouter 2421 - Fix make from repeating action already taken. 2422 - Fix compile without openssl. 2423 24243 August 2011: Wouter 2425 - silence 'Broken pipe' messages in log (visible with verbosity 2). 2426 - fix makedist.sh for removal of patch, notify, xfer. new nsd-control. 2427 - tag 4.0.0-imp-5 created. 2428 - trunk is 4.0.0-imp-6 under development. 2429 - added nsd_munin_ script for statistics monitoring to contrib. 2430 24312 August 2011: Wouter 2432 - fix compile on Ubuntu 11.04 systems, detects cc system header issue. 2433 24341 August 2011: Wouter 2435 - fix checkconf test for remote control options. 2436 - fix warning on Ubuntu 10.04, fix autoconf 2.68 warning on NetBSD. 2437 243829 July 2011: Wouter 2439 - zones with no zonefile are not written to text (assumes you can 2440 get AXFR and IXFR for the contents). They are stored in nsd.db. 2441 - test for repattern. 2442 244328 July 2011: Wouter 2444 - nsd-control repattern reads TSIG and pattern configuration. 2445 244625 July 2011: Wouter 2447 - fixed tests for removed tools from nsd, with replacements. 2448 replaced nsd-patch with nsd-control write. replaced nsd-notify with 2449 ldns-notify. replaced nsd-xfer with dig -t axfr. 2450 - fix for xfrd restart if crashed. xfrd knows if a reload is 2451 active at that time so it cannot start another one at the same 2452 time. New shortsoa track for start that does not use taskdb 2453 in use by reload. taskdb in use by crashed xfrd is recreated, 2454 in case it is corrupt. This keeps the nsd.db intact, keeps 2455 reload running with its updated and keeps service from the 2456 server processes active. 2457 245822 July 2011: Wouter 2459 - added contrib/nsd.init (nsdc.sh that only does start,stop). 2460 - removed nsdc.sh, nsd-xfer, nsd-notify, nsd-patch. 2461 for rc.d: contrib/nsd.init, or platform specific init script. 2462 nsd-xfer: see nsd-control transfer, or force_transfer. 2463 nsd-notify: see nsd-control notify. 2464 nsd-patch: see (cron job to) nsd-control write. 2465 246621 July 2011: Wouter 2467 - nsd-control notify, transfer and force_transfer. 2468 - fix for bug in write and reload zone option. 2469 - nsd-control zonestatus command. 2470 247120 July 2011: Wouter 2472 - reload can be given optional zone argument. 2473 - nsd-control reopen_logfile. 2474 - nsd-control write changed zonefiles. 2475 247618 July 2011: Wouter 2477 - Fix xfrd activation of zones to not break running zone transfers. 2478 247913 July 2011: Wouter 2480 - fix that signal causes stats to be printed to log. 2481 - fix stats without remotecontrol. 2482 - ignore notify and soainfo for deleted zone, if due to race they 2483 arrive after the deletion. 2484 - tpkg test for nsd-control, addzone and delzone 2485 24865 July 2011: Wouter 2487 - fix link to ssl with FreeBSD make. 2488 24891 July 2011: Wouter 2490 - fix optimize compile to link with ssl. 2491 249229 June 2011: Wouter 2493 - nsd-control delzone zone. Removes zone from zonelist. 2494 - stats includes number of zones. 2495 - RAXFR stat, which has not worked since NSD 1.2.4, reinstated. 2496 - print more memory statistics, for xfrd and config. 2497 249828 June 2011: Wouter 2499 - nsd-control addzone zone pattern. Adds new zone, slave or master. 2500 250127 June 2011: Wouter 2502 - nsd-control stats and stats_noreset (if enabled at compile time). 2503 nsd does not print statistics to logfile if period is 0. 2504 250523 June 2011: Wouter 2506 - -flto check supports clang compiler. 2507 250822 June 2011: Wouter 2509 - remote control, config, client, setup and status command. 2510 - reload nsd-control command. 2511 - stop nsd-control command. 2512 - verbosity nsd-control command. 2513 251414 June 2011: Wouter 2515 - Fix to have no authority NS set processing for CNAMEs. 2516 25179 June 2011: Wouter 2518 - fix bug that relptrs have to be initialized with rel_ptr_init() when 2519 created and zeroed with rptr_zero before deletion. 2520 - tag 4.0.0-imp4 created 2521 - trunk is 4.0.0-imp5 under development. 2522 25238 June 2011: Wouter 2524 - nsd reads the zonelist file on start. 2525 - updated acx_nlnetlabs.m4 to version 11. 2526 - configure checks size of off_t and increase region-allocator 2527 alignment to 8 if it is 64bit and alignment at 4. 2528 - fixed bug where not all references were removed before mmap was 2529 synced to another process. 2530 25317 June 2011: Wouter 2532 - code to add and remove zonelist entries, and unit test. 2533 25346 June 2011: Wouter 2535 - fix unit tests for mmap with TODO and removal of -f in nsd-patch. 2536 - zone expiry is communicated via the mmap, and not via the pipes, 2537 simplifying the code significantly as well as making a large number 2538 of zones more feasible. 2539 25401 June 2011: Wouter 2541 - mmap used for parent-xfrd communication of tasks and task results. 2542 SIGHUP is sent to xfrd so it can become a task in the normal 2543 workflow. This can process about 4500 zones per second (this was 2544 with lots of debug prints per zone, in debug compile). The mmaps 2545 are file-backed with /tmp/ files. They are removed on a clean exit. 2546 - nsd.db and tmp mmaps are created with mode 0600 for safety. 2547 - updated flag removed, nsd-patch always in -f force mode (-f removed) 2548 and writes all zones always. Its role is taken over by task results. 2549 255030 May 2011: Wouter 2551 - Fix Makefile for U in environment, since wrong U is more common than 2552 deansification necessity. 2553 255427 May 2011: Wouter 2555 - xfrd is forked before the database is read in, thus it does not 2556 consume the memory of the database. It can be reforked on a crash, 2557 which is like the current case. Difffile is cleaned by main process 2558 and the soa serials are all sent via pipe instead of via forkmem. 2559 256024 May 2011: Wouter 2561 - implemented patterns in the nsd.conf file. 2562 they can be instantiated with include-pattern: x. 2563 existing zone definitions keep working (backwards compatible), such 2564 zones really have an implicit pattern and cannot_delete flag set. 2565 - work on zonelist read and storage. 2566 256720 May 2011: Wouter 2568 - from NSD_3_2 branch the fix: bug if the zonefile is changed for a 2569 secondary but stored transfers are applied, and stop ixfr to empty. 2570 The zone is flagged with error, and the good zone is still in nsd.db 2571 for NSD4. 2572 257317 May 2011: Wouter 2574 - unit test for code coverage on nsec3 ixfr. 2575 - tag 4.0.0-imp3 created 2576 - trunk is 4.0.0-imp4 under development. 2577 257813 May 2011: Matthijs 2579 - Fix bug #381 - Binary escaped and transfers. 2580 258113 May 2011: Wouter 2582 - Unit test nsec3 salt change and fix for sanity check of nsec3 chain. 2583 pretty prints the nsec3 parameters if verbose. 2584 258512 May 2011: Wouter 2586 - more unit test for nsec3 precompile changes. 2587 - unit test for salt change, rehash in udb fix, remove last NSEC3 2588 from chain works, NSEC3PARAM RR fixed up if RR added or removed 2589 from NSEC3PARAM RRset, hashtrees cleared properly, precompile clear 2590 more thorough (not dependant on nsec3_conditions). 2591 259211 May 2011: Wouter 2593 - fixes for nsec3 precompile code: precompile for empty nonterminals 2594 created when an RR is added. If SOA removed, precompile stays 2595 coherent even though domain_find_zone no longer returns correct zone. 2596 259721 April 2011: Wouter 2598 - unit test and fixes in nsec3 precompile code. 2599 260020 April 2011: Wouter 2601 - incremental NSEC3 precompile. 2602 260314 April 2011: Wouter 2604 - remove chnum. Added numlist sorted by domain.number. 2605 domains that are not used are removed. 2606 260713 April 2011: Wouter 2608 - Fix is_existing flag for ENT when domain that has a shared ENT 2609 is deleted by IXFR. 2610 - zonec can parse strings with RR in it. 2611 - unit test for namedb. 2612 26138 April 2011: Wouter 2614 - porting complete. 2615 - tag 4.0.0-imp2 created 2616 - trunk is version 4.0.0-imp3. 2617 26187 April 2011: Wouter 2619 - ported to sunos 4.1.4, the unit test works (udb, radtree in mmap). 2620 26216 April 2011: Wouter 2622 - UDB_CHECK is enabled if --enable-checking is used. 2623 Because it checks the pointer-administration lists it slows down. 2624 - udb-inspect has feature -l that lists zones (and RRs) in nsd.db. 2625 - fix memory leak by zonec; the region_cleanup triggers too late. 2626 - set listen TCP_BACKLOG to 16 by default, it avoids connect reset 2627 by peer in 1000-zones transfer on an ultra10, thus for many-zones. 2628 - default xfrd-reload-timeout to 1 second. 2629 26305 April 2011: Wouter 2631 - Fix uninitialised value in xfrd nsd_soa, the rdata_count. 2632 - Unit test for update of the nsd.db with new contents. 2633 - Fix array bounds check in radtree-search function. 2634 26354 April 2011: Wouter 2636 - removed zonec from tests. fix unknown_rr test, enable ipseckey test. 2637 increased timeouts on tests that are hard on the filesystem. 2638 - Fixed IPSECKEY printout by nsd-patch. 2639 264030 March 2011: Wouter 2641 - nsd edits nsd.db for IXFR and AXFR messages. since xfrd already 2642 checks zone transfers completely for syntax those errors cannot 2643 happen, if they do (memory, disk error) the file is left dirty, 2644 to be recreated on the next start (and the process dies). 2645 264629 March 2011: Wouter 2647 - nsd recreates nsd.db if it has not been closed properly or is 2648 corrupted (bad header or wrong file format). 2649 265028 March 2011: Wouter 2651 - NSD without zonec. NSD loads zonefiles on start. 2652 NSD stores NSEC3hashes on disk. 2653 265425 March 2011: Wouter 2655 - Fix bug #365, you can set NSDC_ZONEC_VERBOSE and NSDC_PATCH_STYLE 2656 in the environment where nsdc runs. 2657 - Fix bug #375, typos in nsd.conf.5. 2658 - First step of bug #369: RRSIG DNSKEY sets zone to be treated DNSSEC. 2659 - Fix bug #302, nsd accepts XFR but refuses to re-read the slave zone. 2660 - NSD4 work: removed zonec, nsdc patch does not write text files 2661 for slave zones (as if option is always to binary, this capability 2662 returns later), nsdc patch deletes the ixfr.db. 2663 kill-HUP rereads zone files that have changed. 2664 266524 March 2011: Wouter 2666 - compile fixes for BSD. preserve RRset order. 2667 266823 March 2011: Wouter 2669 - udbzone, store and read zone data in the random-access udb format. 2670 267121 March 2011: Wouter 2672 - udbradtree works. udb-inspect tool can print radtree details. 2673 267416 March 2011: Matthijs 2675 - undo fix bug#325: messes up dname compression 2676 267714 March 2011: Wouter 2678 - udb code added. uses lookup3 from unbound (public domain). 2679 - unit test for radix tree in cutest. 2680 - unit test for udb in cutest. 2681 - udb-inspect tool to printout internals of udb files. 2682 for debug, not installed or built by default. 2683 - removed --disable-radixtree option. 2684 268511 March 2011: Wouter 2686 - Removed precompile features, speed gain took too much memory. 2687 - domain number to size_t. 2688 26899 March 2011: Wouter 2690 - DNAME synthesis of CNAME. Uses TTL of the DNAME record. 2691 - nsec3 and wildcard code. No additional section for wildcards. 2692 Also CNAME and DNAME replies contain only that record (and synth 2693 CNAME), the chain is not followed. 2694 26958 March 2011: Wouter 2696 - precompile work: 2697 class ANY gets AA flag, SOA and type-NS processing, just 2698 like BIND (9.6) and it simplifies processing for NSD. 2699 other than compression difference (precompile compresses smaller), 2700 there are no differences in a 49000 query testset against the root, 2701 without EDNS. 2702 27037 March 2011: Wouter 2704 - check chown value and report high verbosity its error. 2705 27063 March 2011: Matthijs 2707 - fix #bug352: fix hardcoded paths in manpages. 2708 27092 March 2011: Matthijs 2710 - fix #bug354: make realclean cleans too much 2711 - added make devclean for cleaning up autoconf and automake stuff 2712 - Fix hardcoded paths in nsd.conf.sample and nsd.conf.5 2713 271424 February 2011: Matthijs 2715 - fix #bug350: refused notifies should log client ip. 2716 27172 March 2011: Wouter 2718 - Fix AXFR service with radix tree. 2719 - cutest for speed of answer encoding, and format of answers for root. 2720 27211 March 2011: Wouter 2722 - after merge, remove double -I. from makefile. 2723 - radixtree is default. Nicer makefile and no warnings from unused 2724 flex functions. 2725 27261 March 2011: Wouter 2727 - merge with trunk r3181: 2728 24 February 2011: Matthijs 2729 - fix #bug350: refused notifies should log client ip. 2730 24 February 2011: Wouter 2731 - fix bug#362: outgoing-interface and v4 vs. v6 leads to spurious 2732 warning messages. 2733 - fix bug#363: nsd-checkconf -v does not print outgoing-interface ok. 2734 - fix that nsd-checkconf -o outgoing-interface omits NOKEY. 2735 23 February 2011: Wouter 2736 - fix for bug#357, make xfrd quit with many zones. 2737 273823 February 2011: Wouter 2739 - Merge trunk r3151. 2740 22 February 2011: Matthijs 2741 - Patch Jakob Schlyter (setusercontext before chroot). 2742 18 February 2011: Wouter 2743 - overhaul of testset, with port uniqueness and fast start and stop. 2744 11 February 2011: Wouter 2745 - added test case to do with bug357. 2746 24 January 2011: Matthijs 2747 - Patch Tom Hendrikx (only errors to stderr when doing nsdc patch). 2748 274917 February 2011: Wouter 2750 - Fix leak of compressiontable when the domain table increases in size. 2751 - added test case to do with bug357. 2752 275310 February 2011: Wouter 2754 - Merged with trunk r3115 changes: 2755 20 January 2011: Wouter 2756 - Fix on shutdown, then getaddrinfo acquired data uses freeaddrinfo. 2757 19 January 2011: Wouter 2758 - Bug #348: no -I/usr and -L/usr for libcrypto in /usr. 2759 5 January 2011: Matthijs 2760 - Fix nsdc update and nsdc notify 2761 - Force outgoing interface to be a single range acl 2762 - Update documentation about acl options 2763 - Code review 2764 - Fix nsdc so it can use hmac-sha* tsigs 2765 - Bug #347: NSEC3 nodata QTYPE=DS not at delegation mismatch 2766 4 January 2011: Yuri 2767 - Doc spelling error, bug#345 2768 15 December 2010: Wouter 2769 - fix race condition when nsd is stopped while a reload is in 2770 progress, often when rc.d does nsdc patch; nsdc stop in sequence. 2771 reload is now signalled to stop too. 2772 10 December 2010: Matthijs 2773 - fix bug#306: applied documentation patch 2774 - fix bug#253: now also for QTYPE=DS. 2775 12 October 2010: Wouter 2776 - Fix compilation on SunOS4. 2777 24 September 2010: Matthijs 2778 - Bug #328: nsd-checkconf overrun 2779 1 September 2010: Yuri 2780 - Support for huge TXT records. 2781 23 Aug 2010: Wouter 2782 - fix bug#325: remove stale files from cvs from repo. 2783 16 Aug 2010: Yuri 2784 - zonec, MAXRDATALEN check was off by one. 2785 9 Aug 2010: Matthijs 2786 - nsdc return 1 outside function, should be exit 1 2787 - Bug #320: arc4random 2788 2 Aug 2010: Matthijs 2789 - Bump to 3.2.7. 2790 21 July 2010: Wouter 2791 - NUM_RECV_PER_SELECT 100 implemented, configure check if kernel 2792 supports this. 2793 279417 January 2011: Matthijs 2795 - Bump to 3.2.8. 2796 27975 January 2011: Matthijs 2798 - Fix nsdc update and nsdc notify 2799 - Force outgoing interface to be a single range acl 2800 - Update documentation about acl options 2801 - Code review 2802 - Fix nsdc so it can use hmac-sha* tsigs 2803 - Bug #347: NSEC3 nodata QTYPE=DS not at delegation mismatch 2804 280520 July 2010: Wouter 2806 - Branched from trunk. Added radix tree. 2807 - use -fwhole-program if gcc supports it. 2808 280919 July 2010: Matthijs 2810 - fix bug#314, NSEC next field now correctly escapes spaces. 2811 Also fixes label overflow issue. 2812 - Put back HAVE_SSL. 2813 - Code reviews. 2814 - Add donor text. 2815 28166 July 2010: Wouter 2817 - Compiles on Minix 3.1.7; checks ss_family, suseconds_t, some 2818 warning fixes. Needs socketpair to work, e.g. 2819 http://wiki.minix3.org/en/SummerOfCode2010/UnixDomainSockets. 2820 28212 July 2010: Wouter 2822 - Put back CHECK_SSL in configure (removed with disable-tsig). 2823 282417 June 2010: Matthijs 2825 - Expand command line option '-a' and config option 'ip-address:' 2826 with port number. 2827 - Removed --disable-nsid, --disable-dnssec, --disable-tsig 2828 282914 April 2010: Matthijs 2830 - Bump to 3.2.6. 2831 283214 April 2010: Matthijs 2833 - uintptr_t fallback value to void* 2834 - Backwards compatibility for MAP_ANONYMOUS 2835 - Tag 3.2.5. 2836 283731 March 2010: Matthijs 2838 - Commit b64_pton optimalized compat code (Martin Svec). 2839 - Commit (experimental) mmap-alloc-namedb patch (Martin Svec). 2840 - Commit parse-token-leaks patch (Martin Svec). 2841 284227 March 2010: Wouter 2843 - fix bug#303: misspelled error message. 2844 284519 March 2010: Wouter 2846 - documented nsid: "hex string" setting in nsd.conf.sample. 2847 284824 February 2010: Matthijs 2849 - nsid: option 2850 - Enable NSID support by default 2851 - --with-chroot configure option 2852 - Less stupid chroot error handling 2853 285415 February 2010: Matthijs 2855 - Skip memory cleanup to speed up reload (Martin Svec) 2856 28571 February 2010: Wouter 2858 - compat code for memcmp unsigned comparisons. 2859 286021 January 2010: Wouter 2861 - fixup debug sprintf to snprintf. 2862 286321 January 2010: Matthijs 2864 - Secure string functions, including compat code for strlcat. 2865 - Randomness utility function 2866 - Prepare for default chroot 2867 28686 January 2010: Wouter 2869 - check write errors when marking commit failed when difffile is broken. 2870 28716 January 2010: Matthijs 2872 - Move to 3.2.5 2873 287423 December 2009: Matthijs 2875 - Store new options in nsd structure. 2876 287722 December 2009: Matthijs 2878 - New options 'ipv4-edns-size:' and 'ipv6-edns-size'. 2879 - Bug 276 2880 - Bug 286 2881 - Bug 288 2882 288321 December 2009: Matthijs 2884 - New option 'tcp-query-count:'. 2885 - New option 'tcp-timeout:' and configure option '--with-tcp-timeout'. 2886 - New zone option 'notify-retry:'. 2887 288811 December 2009: Wouter 2889 - Disable UDP IPv4 DF flag on Linux/FreeBSD/AIX with socket option. 2890 289120 November 2009: Matthijs 2892 - NSID bugfix: NSD did not recognize NSID in the query. 2893 28949 September 2009: Matthijs 2895 - DLV support 2896 289718 August 2009: Matthijs 2898 - Bug 269. 2899 - Typo: logincap.h -> login_cap.h 2900 290112 August 2009: Matthijs 2902 - Maintainers feedback 2903 290410 August 2009: Matthijs 2905 - Code review. 2906 - Also send errors to /dev/null in controlled_stop. 2907 - chown nsd.db 2908 29097 August 2009: Matthijs 2910 - Bug 266: don't have strptime build error 2911 291228 July 2009: Matthijs 2913 - Bug 263: make TSIG algorithms comparison case insensitive. 2914 291523 July 2009: Matthijs 2916 - Patch Paul Wouters for NSD using hardcoded name. 2917 291813 July 2009: Matthijs 2919 - Bug 236: allow RRs before the SOA RR. 2920 - Bug 253: No need for NS RRset in authority section, when returning 2921 final answer for QTYPE=DNSKEY. 2922 292329 June 2009: Wouter 2924 - patch for use of Linux IPV6_MTU option, so that on linux the default 2925 EDNS UDP size advertised becomes 4096 over IPv6. It fragments the 2926 packets using the IPv6 minimum MTU. 2927 292819 May 2009: Matthijs 2929 - Clean up configure script (install hickup) 2930 - Bug 249: Remove unnecessary LLONG_MIN and LLONG_MAX code. 2931 - Replace strtoll code with own strtoserial function. 2932 - Move up to 3.2.3. 2933 293411 May 2009: Matthijs 2935 - Add Off-by-one test 2936 29376 May 2009: Matthijs 2938 - Small fix in SO_REUSEADDR warning log message. 2939 - Off-by-one bugfix (thanks Ilja van Sprundel, IOActive) 2940 294129 April 2009: Matthijs 2942 - A more ensured do_stop (useful fo nsdc restart). 2943 29442 February 2009: Matthijs 2945 - Bugfix #234. 2946 - Bugfix #235. 2947 - Reset 'error occurred' after notifying an error occurred at the $TTL or 2948 $ORIGIN directive (Otherwise, the whole zone is skipped because the 2949 error is reset after reading the SOA). 2950 29512 February 2009: Matthijs 2952 - Bugfix: return BADVERS when EDNS version > 0, instead of 0x1<FORMERR>. 2953 295419 January 2009: Matthijs 2955 - Bug 230: nsd-*: use stdout for non-error output (instead of stderr). 2956 - Don't do strptime test when cross compiling. 2957 295817 January 2009: Jelte 2959 - Fix file rotation when no logfile but chroot. 2960 29618 January 2009: Matthijs 2962 - New nsd-patch option -o dbfile (set output.db) 2963 - update nsdc to deal with the new nsd-patch options 2964 - strptime compat fix 2965 29666 January 2009: Matthijs 2967 - New nsd-patch option -s (skip writing zonefiles) 2968 - Removed some region_create memchecks (not needed) 2969 29705 January 2009: Matthijs 2971 - Bug 218 2972 - Bug 222 2973 - Replace SHA256_DIGEST_LENGTH with nicer HAVE_EVP_SHA256 2974 297510 December 2008: Matthijs 2976 - Bugfix: better error message when ixfr.db cannot be read 2977 297818 November 2008: Matthijs 2979 - chown logfile, don't do file rotation if logfile is outside absolute 2980 and outside chroot. 2981 298217 November 2008: Matthijs 2983 - File rotation for nsd.log when owned by nsd (+ tpkg test). 2984 - Only AXFR fallback if master responded NOTIMPL or FORMATERR on IXFR 2985 request. 2986 - allow-axfr-fallback option. 2987 29887 November 2008: Matthijs 2989 - Bugfix: don't fclose if logfile == NULL. 2990 299130 October 2008: Matthijs 2992 - Allow escape characters in literal dnames 2993 - Fix typo in zonec manpage 2994 - Some fixes from code review 2995 299620 October 2008: Matthijs 2997 - Redo bugfix literal domain names in rdata (code adjustment) 2998 - Added tests for case sensitive dns names and "Bug #162" 2999 - Adjust nsd-patch to new ixfr.db format 3000 300114 October 2008: Matthijs 3002 - Only SO_LINGER when outgoing port is set 3003 - Reset diff_skip when a new difffile is created (parts in the difffile 3004 now have a timestamp). 3005 - Undo bugfix literal domain names in rdata (code adjustment) 3006 - Split up dname_parse to parse literal dnames and normalized dnames. 3007 30083 October 2008: Matthijs 3009 - setsockopt SO_LINGER, for portability outgoing-interface (BSD/Solaris) 3010 30111 October 2008: Matthijs 3012 - Configure the source ip-address for notifies by the master and zone 3013 transfer requests by the slave in nsd.conf. 3014 - Previously added source hostname/ip and port configuration for 3015 nsd-notify and nsd-xfer 3016 - Finetuned nsdc for nsdc notify and nsdc update 3017 301829 September 2008: Matthijs 3019 - Bugfix: only normalize domain names in rdatas when rrtype is listed in 3020 RFC 4034, section 6.2: Canonical RR Form. 3021 - Update TODO list 3022 302325 September 2008: Matthijs 3024 - Fix bug where hmac-sha256 was in algorithm table, but could not be 3025 retrieved by name or id. 3026 - Additional arguments for nsd-notify and nsd-xfer: set outgoing 3027 hostname/ip-address and source port. 3028 - Additional TODO entry: optimize code in nsd-* programs. 3029 30308 September 2008: Matthijs 3031 - RFC 4635, bugfix #130: support for hmac-sha1 and hmac-sha256 tsig 3032 algorithms. 3033 - modify and add tpkg tests for hmac-sha1 algorithms. 3034 30352 September 2008: Matthijs 3036 - AXFR fallback when IXFR/UDP failed on all masters 3037 - Bugfix: strip off chroot value in corner cases 3038 - Additional debug and verbose log messages 3039 304029 August 2008: Matthijs 3041 - IXFR allow UDP option 3042 304326 August 2008: Matthijs 3044 - Code layout, additional comments and documentation typo fixes 3045 - IXFR over TCP, no longer UDP 3046 304717 July 2008: Matthijs 3048 - Make the maximum number of interfaces configurable. 3049 - Write pidfile *after* successful server initialization, 3050 instead of writing, and unlink if fail. 3051 305216 July 2008: Matthijs 3053 - Set upcoming release to 3.1.1 3054 - Wouter: fixed memory leaks that happened on error, mostly on 3055 zone transfer errors. 3056 305711 July 2008: Matthijs 3058 - Avoid race condition in nsdc: let nsd server update pidfile before 3059 closing old parent process. 3060 30618 July 2008: Jelte 3062 - Fixed NSEC3 memory leak in the case NSEC3 is not needed. 3063 30647 July 2008: Matthijs 3065 - Bugfix #191 3066 30679 June 2008: Matthijs 3068 - When comparing RRs, do not compare TTL values (since the same record 3069 with different TTL values are considered equal). 3070 - Fixup some more unaligned memory access that could occur when 3071 reading ixfr.db. 3072 307319 May 2008: Matthijs 3074 - Do not always log tcp read errors, only when real error or high verbosity 3075 307628 April 2008: Matthijs 3077 - Bugfix #172 (misleading error from zonec) 3078 307927 March 2008: Matthijs 3080 - Port some branch modifications to trunk 3081 308228 February 2008: Matthijs 3083 - Do not answer nsec3 wildcard information when DO bit is not set 3084 308519 February 2008: Matthijs 3086 - Fixed strptime bug (for MacOS Leopard) 3087 308822 January 2008: Matthijs 3089 - Add configuration for chkconfig to control nsd service (bug 164) 3090 309115 January 2008: Matthijs 3092 - Fixed bug 157 where nsd would return FORMERR if edns query is 3093 received with version set to zero and rdlen is larger than zero. 3094 30958 January 2008: Wouter 3096 - no warning about optout records. also no warning about missing 3097 nsec3 records. 3098 - check for hash(apex)==nsec3 with SOA bit was done in duplicate. 3099 - removed old commented out code 3100 - using SOA bit in NSEC3 typemap to detect parameters 3101 - using nonhashed NSEC3 to prove qtype=NSEC3 nxdomains 3102 - prints for debugging. 3103 - nicer comment on nsec3_lookup. 3104 31057 January 2008: Wouter 3106 - Fixup nsec3 tests, they need zonesdir: "." in conf files. 3107 The tests pass. 3108 - configure default is --enable-nsec3. Disabling this will save 20% more 3109 memory (for very large zones). Moved tests to test on commit. 3110 - set RRTYPE numbers for NSEC3=50, NSEC3PARAM=51. 3111 - fixup checkconf test - updated parser lexer gives syntax error 3112 on some garbage instead of parse error. Parselexer is updated for 3113 new options (hide-version, verbosity). 3114 - removed highrange rrtype code. fixup cutest for that. 3115 - speedup of prehash code. 3116 - skip nonexistent domains (operator.example.com). 3117 - skip only-nsec3 domains (that could be 2x speedup) 3118 - skip glue nameserver domains (for TLD with 2 glue per 3119 delegation this is a 3x speedup). 3120 - skip the prehash_domain for delegation points, which saves 3121 another 2/3 hash operations, 3x speedup. 3122 - printout how long nsec3 prepare took (verbosity >= 1). 3123 31243 December 2007: Matthijs 3125 - Fixup bug where data related files are looked up in the wrong 3126 directory when chrooted with chrootdir ending with a slash. 3127 312826 November 2007: Matthijs 3129 - Fixup bug start nsd while already running: do not initialize server, 3130 since it is already running. 3131 313215 November 2007: Matthijs 3133 - Changed man pages format from mdoc to mansun, to support the Solaris OS. 3134 - Better logging for nsd-notify (show 'broken' zone) 3135 313613 November 2007: Wouter 3137 - CREDITS and RELNOTES now in utf-8. 3138 313912 November 2007: Matthijs 3140 - Changed man pages according to bug 162. 3141 314230 October 2007: Wouter 3143 - Fixup for skip after unknown deleted IXFR RR, otherwise processing 3144 would continue at the wrong spot in the packet and process the IXFR 3145 as if it were malformed. 3146 - added unit test for this in long (needs ldns-testns, updated it). 3147 - added unit test for rollback of malformed zone transfers. 3148 Fixup for it, and fixup in ldns-testns to be randomport and 3149 copy id for hex packets. 3150 315129 October 2007: Wouter 3152 - Fixup bug where malformed IXFR replies cause partial processing in 3153 reload (or nsd-patch or nsd-startup). One result is multiple SOA 3154 records in zone apex. Fixup rolls back the zone transfer, and waits 3155 for NSD to try to load again. 3156 315726 October 2008: Wouter 3158 - small fix in descriptive text in sample config for debug-mode. 3159 31609 October 2007: Mark 3161 - Change default location of: nsd.db, ixfr.db & xfrd.state to 3162 /var/db/nsd. 3163 31645 October 2007: Wouter 3165 - Fixup manual page entry for allow AXFR to anyone. 3166 31673 August 2007: Mark 3168 - Report source and zone for denied AXFR attempts. 3169 317025 July 2007: Wouter 3171 - bind2nsd to 0.5.0, fixup of includes, key{} handling. 3172 317319 July 2007: Wouter 3174 - bind2nsd to 0.4.8, fixup of include bug. 3175 317618 July 2007: Wouter 3177 - added contrib for bind2nsd, Al Stone provided an abridged version 3178 that neatly fits for contrib. 3179 318017 July 2007: Wouter 3181 - fixup commithooks. 3182 318316 July 2007: Wouter 3184 - Added reference to http://bind2nsd.sourceforge.net/ to 3185 contrib/README. 3186 31873 July 2007: Mark 3188 - Zone compiler now gives more sane error message when out of 3189 diskspace. 3190 - Fixed a call to drill in tpkg that made a test check bind instead of 3191 nsd. 3192 31932 July 2007: Mark 3194 - Remove last traces of mmap usage. 3195 - Some cleanups in tpkg. 3196 319724 April 2007: Mark 3198 - Added "hide-version" configuration setting. Enabling this feature 3199 stops NSD from answering to CHAOS class version requests. 3200 320119 April 2007: Wouter 3202 - Compiled on minix 3.1.3 and make some adjustments to ease porting. 3203 ECONNABORTED is checked for. sys/select.h included in nsd-notify. 3204 SO_REUSEADDR failure is not fatal. PF_INET compat code added. 3205 If you compile yourself; strptime and socketpair need compat code. 3206 320713 April 2007: Wouter 3208 - Minor tweak to nsec3.c, more elegant handling of malformed nsec3 3209 records from a zone transfer. 3210 321110 April 2007: Wouter 3212 - Fixup ignored return value in region-allocator. Now returns a NULL 3213 memory allocation failure and leaves region in a consistent state. 3214 321520 March 2007: Wouter 3216 - Released 3.0.5. 3217 - (for 3.0.6) -O2 test for Alpha moved to saner position. 3218 321916 March 2007: Wouter 3220 - port configure to AIX, removed warning on ALIGNMENT in region code. 3221 defined _ALL_SOURCE to get recent C definitions on AIX. 3222 - improved nsec3.h comments. 3223 322422 February 2007: Wouter 3225 - Zonesdir default is now /etc/nsd. 3226 So that the invocation directory is not used to dump files into. 3227 The user can change the zonesdir by editing the config file. 3228 The directory is created by install, if not an error is printed. 3229 - updated tpkg tests to use current dir for testing. 3230 - tcp connections that drop do not spam the log file. 3231 Unless verbosity is set high. 3232 323319 February 2007: Wouter 3234 - Fix empty line printed with warning on 'force zone transfer'. 3235 323615 February 2007: Wouter 3237 - Check for EPROTO definition to compile on FreeBSD4/Alpha. 3238 323913 February 2007: Mark 3240 - Debug flag (-d) behavior changed. Nsd now also forks children when 3241 run in debug mode. 3242 - Added verbosity mode (-V <level>) for extra operational logging. 3243 32448 January 2007: Wouter 3245 - README text on interface configuration added. 3246 32472 January 2007: Wouter 3248 - Fixup accept() that could block due to already closed connection. 3249 Made listen() nonblocking, ignores errcodes that indicate closed tcp. 3250 325129 January 2007: Mark 3252 - Handle the new CERT RDATA types defined in RFC 4398 (submitted 3253 by Mans Nilsson). 3254 - Change nsd-notify retry timer from linear into exponential backoff 3255 (submitted by Mans Nilsson). 3256 - Due to a small bug in a comparison statement, zonec would fail 3257 on the parsing of unknown CERT types. This got triggered by the 3258 first bugfix today, as that one shouldn't have been discovered in 3259 the first place. Took the opportunity to sanitize two other 3260 comparison statements related to strtol(). 3261 326224 January 2007: Wouter 3263 - Tentative change to set UDP sockets nonblocking. Perhaps it 3264 helps Howard. 3265 326619 January 2007: Wouter 3267 - NSEC3 work. prehash printed only once with time taken to prepare. 3268 - prints are now only in DEBUG mode (except errors). 3269 - rr descriptor counts for NSEC3 updated, has an extra field flags. 3270 - now NSEC3PARAMs with flags!=0 are ignored, as per draft-09. 3271 - Fixed where only first NSEC3PARAM was properly detected. 3272 - Added tpkg in manual (because you need to compile with nsec3) 3273 that performs the test queries from draft-09 and checks them. 3274 - Made tpkg to test NSEC3 parameter detection. NSD will skip any 3275 NSEC3PARAMs that don't work until the first working one is found. 3276 Also, this means unknown hash algorithms are simply ignored. 3277 A zone that uses exclusively unknown hash algorithms for NSEC3 3278 will give errors on loading (or after zone transfer) but NSD 3279 will load and serve the zone (but no NSEC3s are returned). 3280 - added tpkg in manual to test parent side DS answers. 3281 These follow a different code path than child side DS. 3282 - Will allow NSEC3s(and signatures) below a DNAME. 3283 - A query for an NSEC3 ownername will lead to DNAME redirection 3284 as if the NSEC3 did not exist. 3285 - Test package in manual that tests NSEC3 and DNAME in the apex. 3286 - Changed NSEC3 memory requirements from 5 pointers per domain name 3287 to 3 pointers and 2 bits. 3288 - Added jumpstart for nsec3 search, will greatly speed up optout 3289 zone nxdomains. At the cost of one ptr per domain name. 3290 The speedup also speeds up the nsec3 prepare stage. 3291 329218 January 2007: Wouter 3293 - Created 3.0.4 release tag. 3294 - 3.0.5 number in trunk. 3295 - add nsd.spec patch from Farkas Levente to contrib. 3296 - NSEC3 new wireformat and presentation format from draft-09. 3297 329811 January 2007: Wouter 3299 - The message 'server .. closed cmd channel' is now priority INFO. 3300 This to reduce the 'error' amount in the logs. 3301 - On error in a tcp request, set to retry next instead of waiting 3302 for the tcp timeout. 3303 33049 January 2007: Wouter 3305 - TSIG acl matching changed so that NOKEY allow-notify entries match 3306 only queries without a tsig. Otherwise NSD would crash. 3307 This only affects servers that have allow-notify: ip NOKEY and 3308 someone sends a TSIG signed notify from that ip. 3309 - test package for that. 3310 - Fix for reply to notify messages with ANCOUNT wrong. The ack 3311 to notify messages that passed the ACL, and had a SOA in the answer 3312 section of the query, included wrong RR counts in the header. 3313 - test package for notify reply wireformat. 3314 33158 January 2007: Wouter 3316 - ipc_send_blocked will not lead to busy waiting on it, but will block 3317 in select, until SOA_END comes by. 3318 - server_main sends SOA_END if reload crashes, to xfrd. So that xfrd 3319 can set ipc_blocked=0 and can_send_reload=1; and thus resume service, 3320 assuming that the crash was a temporary condition. 3321 This will lead to trying every reload-timeout seconds to reload 3322 if it is a permanent condition. Which is more obvious to the 3323 operator. 3324 - put the error "error: diff: RR ns.kiev.ua. already exists" in 3325 debug mode only. Zone transfers with this error are liberally 3326 accepted, and we should not spam the logfile. 3327 - empty zones will not be retried forever every 10 seconds, 3328 but exponential backoff to a max of every 4 hours. 3329 The exact value is randomised to spread out attempts. 3330 33315 January 2007: Wouter 3332 - Fixed --zonesdir=<path> for configure. The value did not get used 3333 as a default value. Now it is used as a default value. If a 3334 default value is set for zonesdir, you can go to a 'no value 3335 specified' by giving the empty string, zonesdir: "" in nsd.config. 3336 - Fixed checkconf.tpkg for this change. nsd-checkconf will 3337 output zonesdir: "" as this is the default for --zonesdir. 3338 33392 January 2007: Wouter 3340 - Added contrib script from Stephane Bortzmeyer to convert NSD 2 to 3341 NSD 3 config files. Converts secondary zones and TSIG keys. 3342 - Made config conversion script skip empty lines. 3343 - Made config conversion script convert primary zones (and notify). 3344 - Nsdc control script will exit with 'nsd startup failed.' if nsd 3345 fails to start (due to bad config file for example). 3346 334715 December 2006: Wouter 3348 - Removed dlopen() checks from configure.ac, NSD3 no longer has 3349 dynamic plugin support (since 3.0.0). 3350 - added .rpm spec file to contrib. 3351 - Updated README to remove reference to buildzones script. 3352 335312 December 2006: Wouter 3354 - Added missing include to ipc.c to compile on SunOS. 3355 - Cast to avoid signed/unsigned comparison in compat/inet_ntop.c. 3356 335711 December 2006: Wouter 3358 - Added test to check for CNAME and other data error by zonec. 3359 Currently NSEC, NSEC3, RRSIG, SIG, NXT are allowed next to CNAME. 3360 - Fixup unaligned memory access that could occur when reading ixfr.db 3361 with a partial transfer inside. 3362 - RR type WKS (well known service) was not printed correctly, 3363 htons() was forgotten when calling getservbyport. 3364 - NSD does not complain about not being able to read the db CRC 3365 when all that happens is the file became longer or shorter. 3366 33678 December 2006: Wouter 3368 - Moved down max XFRD UDP sockets for zone transfer queries to 100 3369 down from 300. This makes the total socket max at 200, so it fits 3370 easily under 256 ulimit (a common default). 3371 33727 December 2006: Wouter 3373 - Improved error message to help operator. 3374 - created 3.0.3 svn tag. 3375 - default of zonesdir corrected (no directory is default). 3376 33774 December 2006: Wouter 3378 - updated test packages. Moved 213_large from manual to long. 3379 size_0, source_port_0 made more working (needs root permission). 3380 33811 December 2006: Wouter 3382 - Moved xfrd ipc and reload handlers to front of event handler 3383 lists for a 10% speedup in xfrd. 3384 - Fixed so that NSD no longer interrupts zone transfers when 3385 a notify comes in for that zone. Added package to test it. 3386 - Fixed warning on Solaris 10. 3387 338830 November 2006: Wouter 3389 - Test for fallback in getaddrinfo more portable. 3390 Ported to FreeBSD 6.1 without inet6. 3391 - New quit sync had a problem with blocking in dispatch. Fixed. 3392 - reload will retry quit_sync if nothing happens. 3393 - parent tries to empty the pipes before closing them on quitsync. 3394 - xfrd does not send reload when previous reload request busy. 3395 - netio will only deliver the number of bits from select 3396 and then stop. Optimisation. 3397 339829 November 2006: Wouter 3399 - Fixed getaddrinfo error message to be more descriptive. 3400 - Fallback to ip4 also if getaddrinfo fails for ip6. 3401 - instead of EAI_ADDRFAMILY uses EAI_FAMILY which is portable 3402 to FreeBSD. 3403 - signed/unsigned warning fix for FD_SETSIZE comparison. 3404 - Lots of debug statements and new quit sync feature, where 3405 the server children are synced with. So as not to lose buffers. 3406 340728 November 2006: Wouter 3408 - Debugging 10k zones transfer, set so that zones waiting for a 3409 socket do not get timeouts. 3410 - Debug change so that an event is only returned to one handler 3411 by netio. 3412 Reversed this. Netio will not deliver events you do not listen 3413 to, and since xfrd first listens to write then read, it will 3414 not have problems with stale events (for the fd from the previous 3415 select) because these are always read, while it needs a write. 3416 Re-Reversed it: netio will deliver events only once. 3417 This is easier to understand for the poor hapless developer. 3418 - Need to set notify_current for notify on waiting list. Fixed. 3419 342027 November 2006: Wouter 3421 - Debugging 10k zones transfer, noticed that it is possible for 3422 netio to give a callback for an event that you were not listening 3423 to. Now no longer does that. 3424 342516 November 2006: Wouter 3426 - Bug #153: now checks for FD_SETSIZE when adding fd to select fdset. 3427 - Easy overview of socket allocation for xfrd in xfrd.h 3428 - Upped the default xfrd socket limits a bit. 3429 - Log message that the TCP connection limit is reach is now only 3430 in -L 2 logging. It is spammy. 3431 - updated dependencies. 3432 - Added test for notify-socketcount, and removed unused files from 3433 bug153 test package. 3434 - Notify udp sockets are also capped at a max number. The rest 3435 has to wait in a queue. 3436 343715 November 2006: Wouter 3438 - Fixed bug #152: identity keyword in nsd.conf did not work. 3439 What happened was that the hostname() from the computer 3440 was overriding the nsd.conf identity. Fixed now. 3441 If commandline is given that is used. 3442 Else nsd.conf entry is used. 3443 Else hostname() detected from computer is used. 3444 Else default string "unidentified" is used. 3445 344614 November 2006: Wouter 3447 - Fixed bug where NSD tries to create 10000 udp sockets, 3448 when starting with 10000 secondary zones. Limited to 50 3449 at a time. The XFRD_MAX_UDP constant controls this. 3450 34513 November 2006: Wouter 3452 - Created tags/NSD_3_0_2_REL. 3453 34542 November 2006: Wouter 3455 - Added pdf for differences.tex for ease of use. 3456 - Updated text in readme on memory usage. 3457 345824 October 2006: Wouter 3459 - Recycle rrset memory after doing special processing on the deleted 3460 rrset data. 3461 - log message clearer for 'duplicate xfr part' to 'discarding partial 3462 xfr part'. 3463 - if you have a server that has IXFR turned off but sends a TC flag 3464 for IXFR queries, xfrd will retry to TCP. This makes the use of 3465 'AXFR' flag in nsd.conf file not needed in certain cases. 3466 - Be thrifty and save up the memory that was lost at end of chunks 3467 in the recycle bin. Saved 1.3Mb on 170(rrs)/220(total) Mb dataset. 3468 346923 October 2006: Wouter 3470 - Added checks for out of memory in reload (diff file). And it exits 3471 if so neatly. 3472 347313 October 2006: Wouter 3474 - Bug #149: Wrong text for NOTAUTH error code. When notify is not 3475 authorised REFUSED error code returned instead. 3476 34774 October 2006: Wouter 3478 - More fixes from Koh-ichi Ito (kohi@iri.co.jp now), for bug #146, 3479 his bash does not do $(( )), so nsdc.sh has to use test of course. 3480 348129 September 2006: Wouter 3482 - recyclebin works, added a test that uses it (about 3 Mb goes 3483 through the recyclebin). This resolves bug #147. 3484 - Made -L 1 logging is little less verbose (-L 2 gets it all). 3485 - added search path for openssl on Solaris 10 (/usr/sfw). 3486 348728 September 2006: Wouter 3488 - Removed unused global variable current_region, 3489 and routines for it in region-allocator.c and .h. 3490 - Added recycle option to regions. It will keep track of small 3491 objects in a recycle bin. Large objects are deallocated. 3492 No calls to recycle yet, unit test it first. 3493 - added unit test for region recycle. 3494 349527 September 2006: Wouter 3496 - Further suggestion from Koh-ichi Ito, I've set opt->xfrdfile 3497 to XFRDFILE in options_create. So opt->xfrdfile and opt->difffile 3498 are never NULL. This simplifies code elsewhere. 3499 And also handles chroot case (+=l) for default values. 3500 - Fix for bug #145. The skip file position in the diff file was used 3501 inconsistently - one part of the code skipped to before the 'IXFR' 3502 type code and another part skipped to after that. Now all skip to 3503 before the type code. This bug only happens if your diff file 3504 is like: zone1_part1, zone2_part_1, zone1_part2, zone1_commit, 3505 zone2_part2, zone2_commit. The skip over zone1_part1 failed. 3506 - tpkg test in long dir that tests for the bugfix. Takes a long time 3507 and uses ldns-testns feature to wait partway through an AXFR. 3508 - removed debug log of strerror on diff read failure, when the errno 3509 was already output to the logfile (resulting in a nonsense error). 3510 351126 September 2006: Wouter 3512 - NSD compiles on Solaris 10 with the sun cc compiler. 3513 Added a define for _STDC_C99 for that. 3514 - Checked that the patch for solaris for bug 143 indeed fixes the bug. 3515 - Fixed bug #146 reported by Koh-ichi Ito: when chrooted nsd failed 3516 to write xfrdfile/difffile. 3517 351818 September 2006: Wouter 3519 - no queries for NSEC3, RRSIG, ANY succeed for nsec3 only domains. 3520 352115 September 2006: Wouter 3522 - Fixed LOC parsing of integer overflow causing maximum values. 3523 Added to test and backported fix to 2.3.6. 3524 - NSEC3 qtype queries get noerror/nodata or nxdomain answers. 3525 You can query for NSEC3PARAM. 3526 - warnings for printf format on maxOS (sizet needs cast to int). 3527 352813 September 2006: Wouter 3529 - added fsync to AF_UNIX sockets to write last command (QUIT) before 3530 closing them. 3531 - sent explicit QUIT command to xfrd on final shutdown of the server. 3532 353312 September 2006: Wouter 3534 - Bug #144: LOC defaults for unspecified values wrong. Error in zonec. 3535 Set defaults. Also fixed parser if LOC has no minutes or seconds. 3536 - Also fixed rounding error in seconds 0.001 decimal. 3537 - Test tpkg for bug 144. 3538 353911 September 2006: Wouter 3540 - nsdc now more portable in use of 'which'. 3541 Does not only look at exit code but also checks for '^no ' string. 3542 - nsd-patch does a chdir to zonesdir for relative difffile or dbfile 3543 path names. 3544 - nsdc handles zonesdir: for relative pidfile, dbfile, difffile 3545 pathnames. 3546 35477 September 2006: Wouter 3548 - bumped version to 3.0.2. 3549 - Nice configuration error when you had the wrong zone name in the 3550 nsd.conf file. Zonec will give an error already. 3551 - When you start a secondary zone without a zone file, you get 3552 a much nicer error message, warning you of the zone transfer. 3553 - Credits for prerelease testers; Thanks guys! 3554 35556 September 2006: Wouter 3556 - Fixed nsd-patch so that it writes the SOA at the start of the file. 3557 - test tpkg that tests for the bug, has multiple rrsets at zone apex 3558 and does nsd-patch followed by zonec. 3559 Previous tests did not catch this: they used nsd-xfer to test zone 3560 contents, or only checked the zone-file after nsd-patch. 3561 - version number bumped to 3.0.1. 3562 - svn tag 3_0_1 made. 3563 35645 September 2006: Wouter 3565 - differences file improvements. 3566 - created 3.0.0 release in svn tags. 3567 35684 September 2006: Wouter 3569 - From suggestions by Bin Zhang: 3570 - nsdc restart does not fail if nsd was not running. 3571 - fixes to man pages, wrong locations for files. 3572 - NSEC3-PARAM has no optout bit in presentation format. 3573 - NSEC3PARAM spelling. 3574 - differences in latex format (needs nlnetlabs housestyle). 3575 357631 August 2006: Wouter 3577 - Fix for tsig size still set when data is null ptr. 3578 - Fix configure for NetBSD (1.6 - 2.0) to find struct timespec. 3579 - DIFFERENCES file completion. 3580 358130 August 2006: Wouter 3582 - Print error nicely when nonblocking connect fails on systems 3583 in a portable way. 3584 - doc/UPGRADING document to assist NSD 2 to 3 upgrades. 3585 - updates of error print - ignore EINPROGRESS if we check too early. 3586 - wait for select writable before testing for connect error. 3587 - echo "" >&2 is not as portable as we would like, removed from nsdc. 3588 - fixed debug print of a null ptr. 3589 - fixed bug where query for CNAME that points to unserved zone caused 3590 nullptr exception on empty zone ptr. Now original zone is restored 3591 after CNAME-pointed data is added to the packet. 3592 Test in dname.tpkg. Reported by Kai. 3593 - fixed stack corruption when ipv6 disabled. 3594 359529 August 2006: Wouter 3596 - NSEC3 made it so it can handle the case where the NSEC3 RRSET 3597 with the SOA bit on does not have the RR with the soa bit set 3598 as the first RR. 3599 - Handle NSEC3-PARAM type. Checks to see if any of them work: 3600 zone apex hashed exists, with NSEC3 type, and RR that has 3601 the same parameters and the SOA bit set. 3602 - in presentation format of NSEC3, NSEC3-PARAM reversed hash, optout. 3603 - update to the DIFFERENCES file, bind 9.3.2 vs NSD 3 and 3604 NSD 2 and 3 comparisons are completed. 3605 360628 August 2006: Wouter 3607 - echo messages in nsdc made clearer. nsdc notify and nsdc update 3608 only send notify messages to slaves / localhost to force transfers. 3609 - initial NSEC3-PARAM type code entry. parsed, ignored. 3610 361125 August 2006: Wouter 3612 - disabled make test target as tests are not shipped. 3613 - performed prerelease static snapshot. 3614 - updates to the DIFFERENCES document. 3615 361624 August 2006: Wouter 3617 - Fix bug 141 port from 2.3.6, copies behaviour from bind 9.3.2. 3618 - Added a test for bug 141. 3619 - Bug141: save the opcode from the query. 3620 362123 August 2006: Wouter 3622 - Fixed % by 0 exception in the bugfix #139. 3623 - Fixed RFC 4035 says CD flag SHOULD be cleared on authoritative 3624 responses, now NSD clears the CD flag. This is bug #140. 3625 RFC 4035 could be confusing on this, as it states 'all servers 3626 MUST copy the CD bit' more than once, but then makes clear only 3627 recursive servers are meant with that statement. 3628 - Differences document updates for bind 9.3.2 and nsd 3. 3629 363022 August 2006: Wouter 3631 - version number to 3.0.0 in preparation for release. 3632 - Bug #139: resync stats to whole period. Fixed. 3633 363421 August 2006: Wouter 3635 - check for error in ftruncate call. 3636 - replaced fwrite call with write_data call from util that does 3637 error checking. 3638 363915 August 2006: Wouter 3640 - removed unused struct nsd.named8_stats variable. 3641 - Bug #138: nsd aborts trying to bind all interfaces if ip6 is not 3642 enabled, instead it will fallback to ip4. 3643 364414 August 2006: Wouter 3645 - Added test for rollback of an IXFR transfer by xfrd. 3646 - Added test for reload timeout in xfrd, the reload does happen after 3647 a while, but not immediately. 3648 - Test that makes xfrd connect to ip6 address. 3649 - Test that overloads the number of tcp connections in xfrd, 3650 simulating a slow master, so that zones have to queue up to get it. 3651 - code coverage is now 2514 of 10636 uncovered. Still a lot uncovered. 3652 - ixfr queries return NOT_IMPL errors. 3653 365411 August 2006: Wouter 3655 - srandom to init random() in xfrd based on PID and time. 3656 - improved usage() information to be more helpful, and with version. 3657 - in makedist.sh, flex and bison called like in Makefile. 3658 - test for tcp underrun and overrun of the buffer. 3659 366010 August 2006: Wouter 3661 - added more tests to increase code coverage of testset. 3662 - moved acl parsing code from configparser.c to options.c to help 3663 unit testing. 3664 - nsd-checkconf echod wrong difffile filename with -v. 3665 - nsd-patch can now be used with -f to force printing of all RRs. 3666 - TYPE_NULL crashed NSD when it printed it, arg was ZF_DNAME, 3667 now ZF_UNKNOWN. 3668 - unknown rr test was faulty on input, the length was in nibbles 3669 not in octets, but rfc specifies octets for unknown rrs. 3670 NSD does not look at the length, and prints the length correctly. 3671 - added type NXT to the rr-test for weird RRs. 3672 - added printing test to rr-test, ipseckey and unknown-rr tests. 3673 checks if NSD prints the same RR on output as it read in. 3674 - put -x option for nsd-patch in usage(). 3675 - test that kills an nsd child server and checks that it is 3676 restarted. 3677 36789 August 2006: Wouter 3679 - tested nsdc functionality, make install and make uninstall. 3680 - set O_NONBLOCKING on xfrd tcp sockets before the connect call, 3681 because the handshaking can take very long too. 3682 - difffile and xfrdfile set via configure, to absolute pathnames, 3683 so that chroot checks work for them. 3684 - updated tpkgs, they need to set relative paths now for difffile. 3685 - gcov says 2821 of 10617 total code lines are not covered. 3686 compiled with --coverage, not -O2, ran tpkg/* and long/testplan*. 3687 counted grep '#####:' *.gcov | wc and grep '^ *[0-9]*:' *.gcov | wc. 3688 - cleaned up the log functions, NSD no longer spams the syslog with 3689 debug messages. The standard NSD debug util is used, -F -1 -L 2 for 3690 a compile configured with --enable-checking will enable them again. 3691 Errors are logged, as is the automated reload of a new serial. 3692 - tpkgs for bug077 and bug107 were silently failing to test properly. 3693 36948 August 2006: Wouter 3695 - fixes for checkconf test, more portable. 3696 - removed items from TODO that have been tested. 3697 for multihomed servers you have to bind to each interface 3698 explicitly to get outgoing ip-address the same as query 3699 destination ip-address. 3700 Forks and if-existing are tested and ok in testplan tests. 3701 close_all_sockets is called by child, if tcponly, so leave it. 3702 - user name check is hard portably with shell scripts, and 3703 packaging could set a default user that does not exist on a machine. 3704 - empty nodes (nonterminals) give no nxdomain any more (todo item done). 3705 - removed (old) from TODO. 3706 - removed contrib/buildzones.pl, it is outdated. 3707 37087 August 2006: Wouter 3709 - Made the tests a little more portable. 3710 - fixed mempcy unable to handle unaligned memory addresses on Solaris, 3711 used memmove instead of memcpy in zonec LOC conversion code. 3712 - another unaligned memory access, when storing off_t pointer in 3713 difffile.c, used memmove. 3714 37154 August 2006: Wouter 3716 - nsd will start if diff file is corrupt, with a log message. 3717 It ignores the bad data. 3718 - tpkg files do not override PATH, svnhook sets it. So user can 3719 set path to utilities on the system to run the tests. 3720 - running testset on DecAlpha discovered uninitialised variable 3721 in NSD. Fixed. 3722 - Jakob Schlyter asked for building nsd3 in an obj dir, i.e. 3723 mkdir obj; cd obj; ../configure && make. Fixed up makefile for that. 3724 - and bug137.tpkg for separate obj dir building. 3725 37263 August 2006: Wouter 3727 - more tests in mesh test. 3728 - changed test packages to put nsd log to test result "/dev/stdout". 3729 - test packages more portable - use default 'dig' location. 3730 also, path is appended to, instead of replaced. 3731 37322 August 2006: Wouter 3733 - Region can be customised for detailed memory handling. 3734 Especially if you set large_object_size=0, chunk_size=0, 3735 the region will perform individual allocs, and 'save memory'. 3736 The region still keeps tracks of allocations so that at 3737 region_free time all memory is released. 3738 - tsig.region removed, it was not used after attaching a cleanup 3739 at creation. tsig creation uses custom region settings. 3740 - xfrd inits the tsig records with memory saving settings, 3741 so the regions alloced for tsig take up about 60 + 4*8 bytes. 3742 - new custom region for query region - to make chunksize larger 3743 there. The chunksize for the query region is important, if 3744 all allocations for a query fit in it, no mallocs are needed. 3745 - TSIG other_data field size according to RFC 2845 is 0 or 6. 3746 In tsig implementation put a maximum to the field of 16, 3747 otherwise a formerror results. 3748 - query with IXFR appended SOA not formerror. 3749 IXFR queries not reach the handler in axfr.c for IXFR queries. 3750 - removed annoying debug message of added tsig key. 3751 - added test that starts 7 servers in a mesh and lets them fight out 3752 what zones to transfer and serve. 3753 - xfrd logic bug: if notified a slave would not see the renewal 3754 of its current zone. 3755 37561 August 2006: Wouter 3757 - Test for remove domains with IXFR. 3758 - Fix for empty nonterminals and IXFR deletes. 3759 - Test for timeouts, including expiry, and expiry and zone updates. 3760 - Test for axfr refused authorisation. 3761 - Test for deadlock in ipc. 3762 376331 July 2006: Wouter 3764 - Test plan ixfr test in tpkg/long directory. 3765 - IXFR with many packets tested (one RR per packet). 3766 376728 July 2006: Wouter 3768 - tentative change, that preserves ordering of rrtypes for a domain. 3769 - fix for serial rollover (old_serial + 2**31), now works, is seen 3770 as new serial and rolled over to new. 3771 - serial numbers, and time values, printed as unsigned to logfile. 3772 - set so that if info is provided by operator, refreshing state 3773 not expired is used. 3774 - forgot to * a pointer to boolean, is_ixfr in the difffile reader. 3775 This fixes the testplan_ixfr test 1. 3776 377727 July 2006: Wouter 3778 - fixup desc of tsig xfer test, remove debug from xfr_huge. 3779 - fixed compressed dname tables cleanup, to set ptr to NULL. 3780 - initialised xfrd_listener.fd to -1. 3781 - fixed difffile handling of very short AXFRs, with no data. 3782 378326 July 2006: Wouter 3784 - Updated the requirements with comments from Olaf. 3785 - README discourages use of experimental nsec3 rr a bit more. 3786 - typo in DNAME code, used original qname instead of CNAME 3787 adapted qname variable. 3788 - added IPSECKEY RR type, RFC 4025. 3789 - tpkg test with sample ipseckey rrs. 3790 - wireformat for IPSECKEY depends on the value of a rdata atom, added 3791 WF_IPSECGATEWAY to handle that. 3792 - DHCID type, data is encoded in one binary/b64 blob. 3793 379425 July 2006: Wouter 3795 - max number of tries for nsd-notify is 15, so that the 3796 total time for sending is about 75 seconds. 3797 - forward port of fixes for bug 105 and 135 in nsdc. 3798 forward port of test for bug 105. 3799 - fixed nasty bug with configure --prefix=<...> where config.h 3800 was wrong. Now double evaluate the shell expansion on the defines. 3801 38025 July 2006: Wouter 3803 - helped in README with gnu make; need to make clean 3804 so that botched attempts by make to create the lexer files 3805 do not stay around. 3806 - removed %zd, replaced by casts to int. 3807 - updated REQUIREMENTS file, the sections on RR types, on what 3808 algorithm NSD follows and on which RFCs are supported are updated. 3809 38103 July 2006: Wouter 3811 - 'make depend' target in makefile. (updates both Makefile.in 3812 and Makefile, so it works for users and for svn). 3813 - doc minor update. 3814 38152 July 2006: Wouter 3816 - TESTPLAN, README, bugzilla-bugs docs updated. 3817 - NSD for BIND users update. 3818 381929 June 2006: Wouter 3820 - removed --zonesfile nsd.zones configure option. 3821 - doc/README updated for 3.0. 3822 - doc update. NSD_FOR_BIND_USERS document. 3823 - moved from -Ds to the config.h header, cleaner compilation output. 3824 - use autoconfs built in large file support enabler. 3825 382628 June 2006: Wouter 3827 - nsdc neater, checks for BLOCKED ips more strictly. 3828 - nsd -d also disables xfrd forking, and thus all reloads 3829 and secondary zone treatment. Stated so in manual page. 3830 - fixup, apart from ip4 need to allow ip6 in example.conf 3831 line showing how to allow access for everyone to axfr. 3832 383327 June 2006: Wouter 3834 - Fixed read in server.c to be a blocking read for sure, 3835 even if ipc is not blocking on the OS. 3836 - nsd-notify tries to send notify 5 times, then exits with error. 3837 - nsd-checkconf can lookup key secrets by name from a config file. 3838 - difffile option is always set in options struct with default 3839 or config value. 3840 - nsd-patch uses dnames to compare zone names (for trailing .). 3841 - nsdc updated to work with config file. 3842 384326 June 2006: Wouter 3844 - Nicer check in autoconf for struct timespec type. 3845 - NSEC3 next hashed ownername is a length byte followed by data. 3846 - nsd-checkconf more quiet, clearer error message. 3847 - NSEC3 does not complain about glue records without nsec3. 3848 - nsdc work (did start, stop, running, rebuild, restart, reload, stats). 3849 385021 June 2006: Wouter 3851 - nsid commandline parsed using hex_pton routine. 3852 - unit test for hex_pton. 3853 - added include stdlib, needed for free() on sunos4. 3854 - fixup of disable-ipv6 compilation. 3855 - memmove compat implementation (created fresh). 3856 - yy_set_bol() for old flex compat define. 3857 - compat implementation from openssh4.3p2 for 3858 strlcpy, inet_aton, and inet_ntop routines. 3859 - changed ctime_r usage to ctime() call, nsd is not threaded. 3860 - compiles on SunOS4/gcc-2.95. 3861 - debug statements go to the log_msg route instead of the 3862 fprintf route, so they will get to a nice logfile even if 3863 we forked away, with xfrd. logfile=/dev/stderr gives old way. 3864 - minor changes to cutest to make unit test compile 3865 on SunOS4/gcc-2.95, it checks out fine there. 3866 386720 June 2006: Wouter 3868 - updated configure to disable -O2 on platforms where gcc 3869 does not like it (such as dec-alpha). 3870 - nsd-notify used recvfrom and passed addrinfo.ai_addrlen 3871 which is a size_t, but recfrom needs a socklen_t*. On dec 3872 alpha these types differ in size (size_t is 64bit, 3873 socklen_t is 32bit). Therefore, used a wrapper variable 3874 to pass to recvfrom. 3875 - changed long int to time_t in nsd-patch.c to please compiler 3876 on dec alpha. 3877 - dec alpha complains if statements are in front of variable 3878 definitions. Fixed code for some mixups on this. 3879 - Fixup cutest for dec alpha. Code, lowercase filename, %lf->%f. 3880 - cutest fixup uses (size_t) cast and %zx to print ptrs (for debug). 3881 - for SunOS4 configure detects ssize_t and struct timespec. 3882 - removed usage of fpos_t, instead using fseeko/ftello for 64bit. 3883 - configure will define fseeko/ftello with fseek/ftell if unavailable. 3884 - added missing include from buffer.c (stdlib for free()). 3885 - defines for snprintf and vsnprintf in config.h if needed. 3886 - configlexer flex is called more cleanly with -t to write stdout. 3887 - missing include from configparser, stdlib for atoi. 3888 - config.h provide inet_pton define if it is not available. 3889 - fixup of INET6 defines, where sockaddr_storage is used 3890 outside of INET6 defines, in xfrd-tcp. 3891 - edns_init_nsid was not defined in edns.h. 3892 - added compat/fake-rfc2553.c and h from openssh 4.3p2. That has 3893 a BSD license as well. They replace getaddrinfo() (and friends) 3894 when those are missing. 3895 389619 June 2006: Wouter 3897 - updated the tpkg/manual tests for NSD 3 config files. 3898 Some need root privileges to run (using hping), they all pass. 3899 - also the tpkg/long test bug_sighup. 3900 - nsec3 code will warn at prehash time for missing exact nsec3 3901 records. So faulty signed zones are more easily spotted. 3902 - fixed NSEC3 and CNAME/DNAME chains, it will disprove the new qname. 3903 - removed for() look in CNAME processing, only first CNAME is 3904 processed now. 3905 - zonec will error on a zone with multiple CNAMEs for one name. 3906 390716 June 2006: Wouter 3908 - Swapped read and write ops in xfrd_handle_ipc, so that a read 3909 of a signal from main can stop further writes. 3910 - xfrd will complete its last message before shutting down 3911 the ipc writes and then acknowledge the reload-sync. 3912 This resolves the race where half of ipc messages caused bad 3913 modes from the main. 3914 391515 June 2006: Wouter 3916 - In preparation of notify send overhaul, moved the notify 3917 send code to xfrd-notify.c and h files. 3918 - created cleaner split of notify send and xfr code. 3919 Still in the xfr process, because it is a convenient location. 3920 - fixed bug where notify sending would read from wrong fd. 3921 - send master zone notifies. 3922 Does not skips master zone SOA INFO updates. 3923 - fixed bug where port number acls did not match. 3924 - fixed bug where tsig keys are checked for twice, but not error_code. 3925 - fixed notify send retry counting. 3926 - added test tpkg for notifies from nsd master to nsd slave. 3927 - nsd-checkconf flags if you set allow-notify without request-xfr. 3928 392914 June 2006: Wouter 3930 - fixed crash bug when dnssec/NSEC enabled and query DNAME 3931 target did not exist. 3932 393313 June 2006: Wouter 3934 - created doc subdirectory for documentation. 3935 - removed unused DIFF FILE MAGIC string. 3936 393712 June 2006: Wouter 3938 - dname_test tpkg with very extensive DNAME testing. 3939 - moved sizes of zone_name buffers to 3072 - for escaped names. 3940 - nsd-patch has a debug option to list the contents of the 3941 difffile/ixfr.db/transfer patch log in a journal fashion. You can 3942 then manually inspect the contents. 3943 39449 June 2006: Wouter 3945 - after a reload NSD will report the memory churn: number of bytes 3946 of memory wasted by the zone transfer code. 3947 39488 June 2006: Wouter 3949 - When zone is re-chosen after a CNAME/DNAME no SERVFAIL is set, 3950 noerror is returned instead. 3951 - zonec will error on multiple DNAMEs for the same name. 3952 - zonec will error on DNAME and CNAME together. 3953 - improved loop log message. 3954 39557 June 2006: Wouter 3956 - after DNAME the closest_match is set correctly for another DNAME. 3957 - in case of a loop returns gracefully instead of crash. 3958 - nsec3 checks if it is enabled for the zone for wildcards. 3959 - NSD will give referrals for zone cuts encountered after a CNAME 3960 or a DNAME. This also fixed various subtle stuff with CNAME/DNAME 3961 and TYPE_DS at zone cuts. It basically re-determines the zone 3962 to use after the CNAME/DNAME. 3963 39646 June 2066: Wouter 3965 - zonec checks for data below a DNAME, and will not create the db, 3966 as per rfc 2672. Tpkg test to make sure such a zone is not loaded. 3967 - updated rr-test tpkg so it has no data below a DNAME. 3968 - DNAME synthesis of CNAME records, including compression for cname. 3969 - included cname creation in dname test. 3970 - preallocate the extra temporary domain_type structures. 3971 - too many temp domains returns OK packet so that the resolver 3972 will recurse and ask us again with the last name in the chain. 3973 - fixed bug introduced in preallocation on temp domain numbering. 3974 39752 June 2006: Wouter 3976 - dname_replace function that does DNAME replace and unit tests. 3977 - added error codes from DNSUPD rfc2136 to constants in dns.h. 3978 - in query.c added DNAME following code. 3979 - fixed bug 134: hints[i] in nsd.c to hints[0]. 3980 - added tpkg small test for DNAME. 3981 - tpkg to test bug 134 (starts 100 processes). 3982 39831 June 2006: Wouter 3984 - tsig test with NSD master and NSD slave server. Tsig AXFR transfer. 3985 nsd-xfer used to test slave zone contents. 3986 - fixed bug where buffer_flip() is done before appending tsig rr. 3987 - version printed at start of nsd in logfile. 3988 - xfrd prints name of tsig key used during transfer in commit comments 3989 so it appears in the log file and in zonefile after nsd-patch. 3990 - prints RRs from diff file only if debug level >= 1. 3991 - scalable transfer test xfr_gig added, you can set the size to try 3992 in the .pre file. Now set very small. 3993 399431 May 2006: Wouter 3995 - xfrd check for failed updates. It compares the time it wrote the 3996 commit to disk with the time of the last reload command. 3997 Failed updates are restarted like the zone is notified of the soa. 3998 It also catches reloads that have been lost (reload cmd while reload 3999 is running, or a crashed reload process, for example). 4000 - when reload is issued, times at that second are put back one second, 4001 so that after a reload all the zones that should have been loaded 4002 have a time from before the reload. 4003 - if a reload crashes, NSD will continue with the old database, 4004 xfrd is not informed, since it cannot fix that. 4005 - nsd-checkconf strdups arg strings before writing to it. 4006 - tsig error replies contain error data, but no signature. 4007 also crashproof, badly formatted tsigs get a format error. 4008 - tsig error print knows about DNS rcodes in tsig error field. 4009 - added tpkg tests for tsig. 4010 - tpkg test for nsd-xfer with TSIG from nsd. 4011 - small stuff with makedist.sh, CREDITS, Features, make test. 4012 401330 May 2006: Wouter 4014 - tsig pre-allocs the rr_region, not at runtime, tsig_create_record(). 4015 - redid some region work for tsig. Now has another temporary region 4016 for the context data. User is only aware of the region passed at 4017 start that exists for the lifetime of the struct. 4018 During TSIG checks no more mallocs are done, only region_free_all 4019 and region allocs (of small size). 4020 - checkconf, port is stored as a string. 4021 - tsig now keeps a max_digest_size for giving reserved space. 4022 - AXFR does tsig every 96 packets (and first and last packet). 4023 - tsig signing works for all queries. SOA queries, ... 4024 If you configured the key in the config file, you can use 4025 that key for any query for any zone. 4026 Except for NOTIFY and AXFR queries; those are only allowed for 4027 the zone (and source ip address) which are configured in the config. 4028 - cleaner compile with tsig disabled. 4029 - fixed unknown key error reply in tsig. 4030 403129 May 2006: Wouter 4032 - The nonblocking write routines disable silently if they have 4033 nothing to do. 4034 - put xfrd read/write state routines (almost 500 lines of code) 4035 into xfrd-disk.c file. 4036 - little readme blurb on xfrd state file for the operator. 4037 - put ipc code in its own file for ease of reading. 4038 - removed --disable-axfr, you can control this via acls. 4039 With no provide-xfr: statements, a zone will not do axfr. 4040 404125 May 2006: Wouter 4042 - fixed reload sending; it checks for EAGAIN and EINTR. 4043 - reload sends parent quit command blocking to make sure of arrival. 4044 - send_children_quit in parent uses nonblocking writes and closes 4045 the pipe to signal the child to quit (even if the write does not 4046 come through, the closed pipe will cause the child to quit). 4047 - need_to_send_STATS flag in parent. 4048 - reload has its own ipc-listening handler in server_main. 4049 - nonblocking writes for server_main; this solved write-blocking race. 4050 - another race condition solved, if a process dies, half a read or 4051 write buffer could be left behind on another process. These are 4052 dropped. Now: 4053 * The server_main drops ipc from dead children. 4054 * The server_main drops ipc if xfrd dies. 4055 * The server_main drops xfrd(old) and all children ipc 4056 on reload. 4057 * The xfrd drops ipc to parent on a SOA_BEGIN from reload. 4058 So after reload, but parent and xfrd start with 4059 clean ipc buffers. 4060 406124 May 2006: Wouter 4062 - unit tests print progress while running to stderr. Included license 4063 of cutest with its source in svn repository. 4064 - stack type (for the IPC buffer of zone update dirty). And unit test. 4065 - only update zone-is_ok if needed to reduce memory copy on write. 4066 - split off conn_write() from xfrd tcp nonblocking write routines. 4067 - nonblocking writes for xfrd. 4068 406922 May 2006: Wouter 4070 - ported over minor nits from 2.3.5 NSD fixups. Cast to (void) 4071 unused function return values. 4072 - removed kill signal to children, superfluous due to quit cmd ipc. 4073 - moved is_ok for zones to the zone_type in namedb, not in 4074 the options, it is a runtime value not a config value. 4075 For zones that have no data, parent and children keep no state. 4076 407712 May 2006: Wouter 4078 - fixed up usage print for zonec to include -f option. 4079 - xfrd send notifies. 4080 - server no longer sends SOA INFO for master zones. 4081 - removed possible debug log print of a null string. 4082 408311 May 2006: Wouter 4084 - nsd.conf.sample shows defaults for ip4-only, ip6-only and debug-mode. 4085 - SOA_BEGIN message on start of reload sending soa info so that 4086 xfrd will not reply with expire-notifications and thus deadlock 4087 both on blocking writes (and no OS buffer on the pipes). 4088 408910 May 2006: Wouter 4090 - nsdc.sh is set +x after creation. 4091 - improved error message when zone in db has no config info. 4092 - support for broken nsec3 chains (if the one with the SOA bit 4093 is complete, it is OK for there to be other nsec3 chains 4094 with different parameters in the zone). 4095 40969 May 2006: Wouter 4097 - Fix for finding bad zone when populating SOA info on start. 4098 it would find a parent zone instead of the zone in question ( 4099 which is empty). 4100 - request-xfr: AXFR 10.0.0.153 keytouse syntax to interoperate 4101 with NSD machines. Will only send AXFR queries to the machine. 4102 - documented AXFR option in nsd.conf.5 manual page, 4103 and updated nsd-checkconf, nsd.conf.sample. 4104 - made 'skipping zone' log entry clearer (Sam Weiler asked). 4105 41068 May 2006: Wouter 4107 - updated zparser.y to handle empty nsec_seq lists. 4108 for empty nonterminals in NSEC3. 4109 - nicer without ambiguous grammar. 4110 41115 May 2006: Wouter 4112 - nsd-notify handles option -y key:secret to TSIG sign outgoing 4113 queries. 4114 - the acl checks now verify TSIG signatures on the query. 4115 - iterated_hash compiles with ssl disabled. 4116 - new ipc NSD_ZONE_STATE sent by xfrd to nsd process. notifies 4117 nsd of the state (ok or expired) of a zone. 4118 - reload process waits for the old server_main to exit to make 4119 sure there is no race condition listening to the NSD_ZONE_STATE 4120 messages generated when reload sends SOA_INFO to xfrd. 4121 - server_main and children all set zone_ok state in config options. 4122 also server_main so that newly forked children get the right state. 4123 - if a secondary zone is expired, NSD returns SERVFAIL. 4124 a transient error, so resolvers try again later. 4125 - SOA_END ipc message, sent by reload to xfrd, so it can repeat 4126 all zone states (which can have changed during reload). 4127 - zone_is_ok kept in config section so that state for zones 4128 without data is not lost. Those have no zone_type*. 4129 - secondary zones start in the expired state. 4130 - if expired zones are updated, then NSD gets the go ahead from 4131 xfrd after reload sends SOAINFO/SOAEND msg, so it is really 4132 updated in nsd memory. 4133 - fixed tpkg xfr_1 to have longer expiry times (from 0 and 3 4134 seconds to 2000 and 3000 seconds), so the zone does not expire 4135 during the test anymore. 4136 41374 May 2006: Wouter 4138 - when a new lease is acquired xfrd_packet_newlease result is used. 4139 - if a zone is lost in nsd db, xfrd will update state to match. 4140 - IXFR can use TSIG in queries and verify responses. 4141 - Fixed memory leak in xfrd tsig handling. 4142 41433 May 2006: Wouter 4144 - forward of 2.3.4 RELNOTES into trunk. 4145 - debug log statements to track xfrd request rounds. 4146 - removed memleak from handle_passed_packet in xfrd. 4147 - faster find_zone in difffile.c. 4148 - nsd-patch writes commit log entries into zone file. 4149 - took some tsig.c enhancements from 3 branch, 4150 -> if key or algo changes during connection, return bad_key, 4151 -> debug statement neater. 4152 - nsd adds tsig keys to tsig keyring at startup. 4153 41542 May 2006: Wouter 4155 - ifdef inet6 back on ss_family usage in server.c. 4156 - nsd-checkconf ip6 ifdefs improved. 4157 - xfrd tries servers 3 rounds, then waits for next retry. 4158 41591 May 2006: Wouter 4160 - off_t used for 64bit fileio. 4161 - searches for smallest unused part and sets diff_skip to that. 4162 - doc comment near the region_free_all for every query about 4163 malloc speed. 4164 - null ptr in strcmp does not work on bsd, fixed nsd-checkconf. 4165 - made nsd.conf.sample.in so the sample gets prefix-corrected. 4166 - removed nsd.zones.sample. 4167 - makedist.sh added manual pages for nsd-xfer nsd-patch. 4168 - install/uninstall nsd-patch, nsd-checkconf and manpage. 4169 small update readme. 4170 417128 Apr 2006: Wouter 4172 - ixfr >64k in xfrd. 4173 - fixed length of new commit parts. 4174 - fixed multiple ipc reads in xfrd. 4175 - fixed multiple packet ixfr read in diff file. 4176 Miek: 4177 - Forward port fixes for nsd-xfer and nsd-notify 4178 417927 Apr 2006: 4180 Wouter: 4181 - nsec3 review fixes. 4182 - diff file format expanded for >64kb transfer support. 4183 - diff reader adjusted for >64kb. 4184 Jelte: 4185 - small non-null options check in nsd.c. 4186 Miek: 4187 - updated nsd-checkconf for zone parse shell script support. 4188 418925 Apr 2006: Wouter 4190 - Tests on NSEC3 code. Fixed that the unsecure delegations also 4191 have _ds_ parent nsec3 prehashes, so that they get proper NSEC3s. 4192 NSD will serve NSEC3s to prove 'opt-out' also if the opt-out bit 4193 is (erroneously) not set. 4194 - For the 05pre2 draft section 5.4.8.1. QTYPE is NSEC3, only NSEC3 4195 RRsets at name. Fixed that RRSIGs present do not matter. 4196 And also the closest encloser proof in that case fixed. 4197 If wildcard exists below zone apex servfails (cannot disprove 4198 it and NSD cannot instantiate the wildcard at that point). 4199 420024 Apr 2006: Miek 4201 Miek: 4202 - forward port nsid (disabled by default) 4203 Wouter: 4204 - nsd-patch manual page. 4205 - minor MacOSX port fixes. 4206 - xfrd-reload-timeout: config option. 4207 - if you set the xfrd reload timeout to -1 it will not 4208 automatically reload after a transfer. User can reload. 4209 - reload timeout is a wait period after the reload is triggered. 4210 - more verbose acl logging. Validated acls are logged in detail. 4211 Invalid acls are only logged in debug mode, level >= 1. 4212 - log message when xfrd tcp connections max out. 4213 - if unknown NSEC3 hash type (not SHA-1), disable NSEC3. 4214 - xfrd randomizes the timeouts, within 10% of original, 4215 to spread out activity. Short timeouts < 10 seconds are not 4216 affected, and will give activity bursts (on startup for example). 4217 421821 Apr 2006: Wouter 4219 - put NSEC3 code in nsec3.c and nsec3.h. 4220 - iterated_hash only adds the salt if salt_len > 0. 4221 - added some assertions and cleanups to nsec3 code. 4222 - prehash also calcs the nsec3_last domain*. 4223 - dbaccess when reading in will set the rr_type.owner value. 4224 - changed namedb_find_zone to domain_find_zone, log msgs. 4225 - implemented logic from nsec draft 05-pre2 section 5.4.1 - 5.4.8. 4226 NSEC3 responses only happen for nsd compiled with --enable-nsec3 4227 and for zones where an NSEC3 with the SOA bit set exists. 4228 - added prehash pointer to ds parent side cover for opt out. 4229 - removed dynamic plugins. Dynamic plugin support is an explicit 4230 non-requirement (under creeping featurism). 4231 - in domain table create root nsec3 ptrs are NULL. 4232 423320 Apr 2006: Wouter 4234 - Unittest of base 32 encoding. 4235 - unittest start for iterated hash. 4236 - fixed for ctrlc in debug mode. 4237 - delete zparser_conv_long, not used, not needed 4238 - nsd-xfer will display NSEC3 correctly. zonec parses. 4239 - improved usage() line from zonec, about -c none, must be -C. 4240 - base32 printed in lowercase (canonical format for DNS). 4241 - NSEC3 added prehash pointers to the namedb. 4242 - NSEC3 autodetects presence of NSEC3 in zone and parameters. 4243 424419 Apr 2006: Wouter 4245 - port fix base10 in zonec conv short from 2_2 branch to trunk. 4246 and conv byte, algo, certificate, long. 4247 - configure option to enable NSEC3 (--enable-nsec3) support. 4248 - from Ben Laurie's NSEC3 patch, loaned the parse code, 4249 base32 conversion code and iterated_hash. 4250 With some small modifications. The type rrdescriptors are 4251 indexed by value below SPF, and in 4252 rdata_wireformat_to_rdata_atoms BINARYWITHLENGTH checks 4253 for end of buffer. Also parser checks for '-' salt. 4254 Some layout (spaces after ,s). And NSEC3 define is used. 4255 strtol used for iterations is base 10. 4256 - moved rrtype descriptor table sanity check to unittest. 4257 425818 Apr 2006: Wouter 4259 - Fixed check for SOA IN, bad ntohs in the check. 4260 - minimum timeout also enforced for very low expire times. 4261 - report the actual used length of the sockaddr to sento 4262 for FreeBSD. 4263 42647 Apr 2006: Wouter 4265 - modified the kill_nsd tpkg so that it waits up to 10x5 secs 4266 for nsd to make the pid file, and it wait up to 10x5 secs for 4267 nsd to exit after the kill signal is given. 4268 - xfrd checks on startup if there is trailing garbage in the 4269 diff file, left there by a previous xfrd killed in action. 4270 It then snips off any partial parts, so service can resume. 4271 Also the difffile_skip pos is set before any partial record there. 4272 - first version of nsd-patch; reads db and ixfrs and updates zones. 4273 - moved print_rdata from nsd-xfer to rdata.h to share code. 4274 - moved print_rr from nsd-xfer to util.h to share code. 4275 42766 Apr 2006: Wouter 4277 - notify handler passes acl number that matches to xfrd. 4278 - xfrd keeps a next_master for a zone, and sets it after notify. 4279 when notified nsd will try to contact the master that sent 4280 the notify, if send from an address that is both in acl 4281 allow-notify and request-xfr. 4282 - xfrd closes its tcp and udp sockets on exit. 4283 - default names for diff file and xfrd state nicer. 4284 - fixed up kill nsd grep on ps. 4285 - fixed up race conditions in test script for kill nsd 4286 wait for pid file creation by nsd, and grep -v grep in check. 4287 - in nsd signal-flags inherited from the parent are zeroed 4288 when a server_child starts. Also the server_child switches back 4289 to NSD_RUN mode when a bad mode happens. 4290 - check if ixfrs start from the version in memory. 4291 - if IXFR/AXFR ends in a serial that is newer than the serial 4292 that was sent in an notify, update the notified serial. 4293 42945 Apr 2006: Wouter 4295 - added lowerbound for retry timeout. 4296 - added extra assertions to xfrd-tcp.c, saying that the waiting line 4297 for tcp connections must be empty if the counter is below max. 4298 - setup so that the first master tried is the first in acl list. 4299 - diff file skips OPT and TSIG RRs if they are put into the answer 4300 section. 4301 - if IXFR contains an RR to delete that does not exist, nothing 4302 happens. 4303 - update zone for NS, RRSIG also if multiple RRs in the rrset. 4304 - difffile: create zone struct also if domain exists already. 4305 - difffile: destroy temp region on error. 4306 - difffile: in delete_RR, create temp region outside of the routine, 4307 so no alloc region, destroy region for every deleted RR. 4308 - difffile: for IXFR: do not delete final SOA RR. 4309 - difffile: unknown parts in file is an error. 4310 - difffile: EOF on last packet is ignored w/o giving an error. 4311 43124 Apr 2006: Wouter 4313 - Addes EACCES to the netio dispatch error bailout. 4314 - Removed EACCESS (probably due to log_msg), error on close 4315 xfrd pipe is small, main process closes its end, and hopes for 4316 the best). 4317 - review: return on error condition in xfrd_tcp_open fixed. 4318 - review: expired when time >= expire_time, so it will not wait 4319 for the retry after expire until it will detect the expiredness. 4320 - removed duplicate lines from xfrd_handle_zone_timeout. 4321 - review: copy of uint32_t using memcpy to avoid unaligned memory 4322 accesses. 4323 - review: fd=-1 removed from set_refresh_now; only does timer. 4324 - on a tcp timeout it will retry immediately (instead of waiting 4325 another retry timeout). This means if you set refresh_now, it will 4326 interrupt a tcp-timer for a fresh retry with the next master. 4327 - put null in buffer for xfrd read state. 4328 - log msg uses string that exists instead of overwritten buffer. 4329 - read entry sets refresh depending on current time, 4330 and makes sure not to check soa contents if none provided. 4331 added explanatory comments. 4332 - EACCES back in check. 4333 - server_main first checks for terminated children, then select(). 4334 So when select is interrupted, by kill or quitting children, 4335 it will first see if it has to quit itself, before restarting 4336 the children. 4337 - destroy tempregion xfrd read on error. 4338 - check for serial existence in xfrd_handle_incoming_soa. 4339 - handle_incoming_soa uses set_timer_refresh routine. 4340 and can handle expire times < refresh times. 4341 - log msg for udp socket() error. 4342 - review: xfrd_parse_soa_info email parse uses correct buffer spot. 4343 - added a lowerbound to refresh interval (=1 second now). 4344 - upon receipt of a IXFR, if the serial is older than the notified 4345 serial, the zone stays refreshing (but the ixfr is saved). 4346 43473 Apr 2006: Wouter 4348 - Added buffer length check to internal ipc. 4349 - split out packet_read_query_section from the process_query_section 4350 routine (and moved to packet.c/h). 4351 - xfrd reads passed packet via ipc. 4352 - ported over fix to 2_2 on missing rr types by removing the 4353 duplicate RRtype array, and using rrtype_to_string. 4354 - xfrd handles notifies. immediately starts updating. 4355 - xfrd state file format fix. 4356 - removed libwrap stuff - superseded by acls. 4357 use provide-xfr: statements for your zone in the config file. 4358 updated README for this. 4359 - updated tpkg tests for axfr to use provide-xfr: 127.0.0.1 NOKEY 4360 - review: move var create to start of function (xfrd_init()). 4361 436231 Mar 2006: Wouter 4363 - zone type has a pointer to zone options. 4364 - nsd options has an rbtree to find zone options in. 4365 - nsd checks acl for incoming notifies and replies 4366 error or confirmation. 4367 - nicer layout in options.c. 4368 - updated makefile dependencies. 4369 - fixed sz for SOA_INFO ipc, which was too small. 4370 - notify is sent to server_main, server_main sends it to xfrd. 4371 437230 Mar 2006: Wouter 4373 - include: documented in manual page. 4374 - MAXINCLUDES define in one place (config.h). 4375 - configure checks for strptime in include files. 4376 - use %d instead of %zd (sparc5 machine does not get zd). 4377 - use region_strdup in configlexer. 4378 - added a check for EINVAL in dispatch - will abort 4379 on the error instead of busy hang. 4380 438129 Mar 2006: Wouter 4382 - \r for config lexer. (similar changes to zonelexer). 4383 - forward port of fix to 2_2 branch: 4384 short int in var_arg is promoted to int, according to B. Laurie. 4385 The same logic for %o, %d %x would hold for %u I think. 4386 - in XFRD, soa prim_ns and email domain names are kept in a max 4387 size buffer. 4388 - split up dname_parse into parse from string to wireformat 4389 and parse from wireformat to memoryformat, so both can be called. 4390 - split up dname_make_from_packet into reading the wireformat 4391 from the packet and the dname_make, so both can be called. 4392 - xfrd reads all soa info from incoming xfr packets. 4393 - xfrd will ignore TC bit on tcp channels. 4394 - nsd sends xfrd all soa info, including ttl and dnames. 4395 - config file now has an include: filename directive. 4396 439728 Mar 2006: Miek 4398 - forward port fixes for zone compiler and \r. svn:1926-1927 4399 - add DO bit MASK and remove the !! construct 4400 440117 Mar 2006: Wouter 4402 - according to axfr-clarify, added comments that we check 4403 more leniently on further responses on a TCP stream. 4404 440516 Mar 2006: Wouter 4406 - Fixed up SOA INFO Send routines. Send from server works. 4407 - niced up xfrd state file. 4408 - Fixed up so that after a reload it will continue in diff file 4409 where it left off. 4410 - made send of SOA info use write_socket, in case of short writes. 4411 - redesigned xfrd_tcp_read to use the same code for ipc read. 4412 - no free()s before xfrd exit. 4413 - xfrd handles incoming SOA INFO ipc packets. 4414 - removed debug, updated zones get SOA INFO sent. 4415 441615 Mar 2006: Wouter 4417 - Fixed up domain table insert, it was being used in routines 4418 that originate from nsd-xfer that do not set compression numbers 4419 correctly. 4420 - memleak fix in difffile in case of error. 4421 - difffile processing works so that NSD can read an axfr saved 4422 into the nsd.diff file. (xfrd already request and save it there). 4423 - split off xfrd tcp handling into xfrd-tcp.c. 4424 - cleaned up send_udp in xfrd, and read_state. 4425 - removed xfrd tcp_send_blocking. 4426 - xfrd sets state from ok to refresh to expired based on timeout. 4427 - xfrd sets reload timeout. 4428 - Added zone updated to keep track of zones that are changed 4429 after a reload. These zones get their information notified 4430 to xfrd. 4431 - removed unused zprintrr declaration from zonec.h 4432 - nsd sends soa information to xfrd. 4433 443414 Mar 2006: Wouter 4435 - TODO updated 4436 - worked on reload ixfr. It will add/delete RRs and zones. 4437 - xfrd receive parse of xfr messages improved. writes commit. 4438 - server compressed_dname_offsets table is increased if reload 4439 creates extra names. 4440 - difffile will create zone and apex if not there (i.e. the zone 4441 is configured but no data file provided). 4442 - bit more verbose in error message for bad diff file. 4443 - Typo fix in sample config file. 4444 444513 Mar 2006: Wouter 4446 - configure sets fseek (fgetpos/fsetpos) to use 64 bit interface 4447 with _FILE_OFFSET_BITS=64. 4448 - nsd will skip loading the .db if the DB checksum is the same. 4449 - Miek added trace test and nsd kill test. 4450 - Wouter worked on diff file c. 4451 445210 Mar 2006: Wouter 4453 - Cleanup of UDP/TCP code in XFRD. 4454 - xfrd now has tcp max connections and managing. tcp read/write. 4455 - response TC on UDP ixfr, starts TCP. 4456 - sends correct ixfr and axfr queries, a bind server answers. 4457 - made packet_skip_dname() public. 4458 - sets read/write event flags for tcp fd right. 4459 44609 Mar 2006: Wouter 4461 - Removed header from DIFF file format. CRC not that important there, 4462 you have to check the packets anyway. 4463 - cutest rbtree removed unused clean_rbtree and always_fail routines. 4464 - xfrd timeout handler, more work. Checks expire. 4465 44668 Mar 2006: Wouter 4467 - xfrd sends UDP xfr request to master(s) with timeouts, and stores 4468 returned data on disk. 4469 - updated dependencies and declaration of write_soa_buffer. 4470 44717 Mar 2006: Wouter 4472 - Fixed printfs for size_t warnings on Mac OsX. 4473 44746 Mar 2006: nsd-team 4475 * Wouter: xfrd read and write work. Statefile is "nsd.xfst". 4476 * Wouter: nsd-checkconf checks dname parse of zone name:. 4477 * Wouter: updated difffile in parser.y, production in server: clause. 4478 * Wouter: zonec now takes -C for 'no config file' option. 4479 * Wouter: updated configyyrename.h for bison 1.875d on sparc. 4480 * Miek: zonec -h and nsd -h exit with exit code = 0. 4481 * Miek & Wouter: updated tpkgs to work again. 4482 * Wouter: xfrd read handle soas, handle soa_incoming part. 4483 * Wouter: moved compare_serial() from nsd-xfer to util.h. 4484 44854 Mar 2006: Wouter 4486 - xfrd zone and soa memory structure definitions. 4487 - xfrd init zones. 4488 - xfrd read and write state file code. 4489 - option for difffile: and xfrdfile: config lines. 4490 44913 Mar 2006: Wouter 4492 - Removed double kill after reload. Only socket cmd send. 4493 - Added code to handle race condition where xfrd is restarted 4494 during a successful reload. Afterwards, the new server_main 4495 only has the old xfrd pid, new xfrd is an orphan. 4496 Solution: when xfrd closes cmd channel (i.e. it quit) 4497 unexpectedly, send sighup to all processes in the group. 4498 This should quit the orphan & all children & reload the 4499 server_main, which will fork the children and xfrd again. 4500 45012 Mar 2006: Wouter 4502 - Added nsd-checkconf.8 to makedist.sh replace list. 4503 - DIFF file format updated. 4504 - removed tsigkey->server value, it was read in, but unused. 4505 - new function to add config file keys to tsig. 4506 - nsd-checkconf checks parsing of keys. 4507 - Updated sample key file with valid keys. 4508 - added first xfrd files. xfrd is started from server_main. 4509 xfrd listens to server and server to xfrd. xfrd is restarted 4510 if it dies unexpectedly. xfrd quits when server signals it. 4511 xfrd survives nsd reloads. 4512 - nsd_options no longer global variable. 4513 45141 Mar 2006: Wouter 4515 - Nicer text in nsd.8. 4516 - nsd.c prettier code in option handling. 4517 - zonec.c code prettier in option handling, also chdir bug removed. 4518 zonec uses the zone definitions in the config file. 4519 updated zonec.8 and usage(). 4520 - nsd also chdirs to the zonedir, otherwise nsd and zonec would 4521 try to read the database: file from different directories. 4522 .(it does the chdir before the chroot call.) 4523 - new calling syntax for zonec and nsd, because of new config file. 4524 - options added acl acceptance tests (no tsig yet). 4525 - added unit test for options.c - for acl tests. 4526 - zonec removed unused vars, nsd-checkconf print arguments. 4527 - nsd-checkconf.8 manual page. 4528 452928 Feb 2006: Wouter 4530 - checked in options.h and config parser code. 4531 - also nsd-checkconf that will test a config file 4532 .(and optionally show what was read). 4533 - default identity has a spelling error. 4534 - Small fix (typo in example) to config manual page. 4535 - Added ; to configparser.y to please bison 1.75 on bsd. 4536 - Will check for blocked addresses in outgoing acls. Also ranges. 4537 - Check configuration tpkg test added. Uses checkconf. 4538 - checkconf does extra semantic tests. i.e. enable absent features. 4539 - tcpcount and servercount cannot be negative. 4540 - updated nsd.conf.5 manpage for @port syntax. 4541 - changed config parser: allows empty server: part (defaults). 4542 - made nsd.conf.sample file. 4543 - put option to configure for CONFIG_FILE nsd.conf location. 4544 Note. Already nsdc.conf exists. Both exist now. 4545 - updated makefile dependencies (gcc -MM). 4546 - getopt optstring in nsd-checkconf updated ("v" only option). 4547 - Added config .o files to nsd and zonec. This compiles. 4548 - Added commandline option -c configfile to zonec and nsd. 4549 configure defaults < configfile < commandline options in importance. 4550 455124 Feb 2006: Wouter 4552 - Added compute_crc in util.h and unit tests for it. 4553 - in cutest.tpkg the number of unit tests was hardcoded 4554 in the tpkg package. Removed the dependency, cutest exit 4555 value indicates if any failures happened. 4556 - Added crc at end of NSD-database format. Unique per db. 4557 upped db version to 7 because of this. 4558 - Tested that crcs are big/little endian correct. 4559 - Added DIFF file spec 4560 - updated tpkg213 which compares md5 on a zonefile for new format. 4561 - added nsd.conf.5 manual page with a draft contents. 4562 456322 Feb 2006: nsd-team 4564 * Miek: Changed over to Cutest testing framework. 4565 * Miek: fixed typo in netio.h 4566 * Miek: fix syntax in rbtree.c put functions on multiple lines. 4567 * Miek: unit test tpkg for cutest. 4568 * Wouter: fixed ptr bug in rbtree unit test. 4569 457017 Feb 2006: Wouter 4571 - rbtree_delete is added and works. Unit tests are there too. 4572 - Changed tail recursion in rbtree_delete to while loop. 4573 - Tagged this version as NSD_3_signalsocket_solution. 4574 It is the stable 2_2 branch with cleanups, portable, and 4575 signalhandler solution by socket communication redesign. 4576 457715 Feb 2006: nsd-team 4578 * Wouter: Fixed server_child would wait for two kill signals before quit. 4579 * Miek: don't check for port==0 pkt, just try to send them. 4580 Forward Port of 2.3. 4581 * Wouter: Removed unused, not substituted, @nsdxfer@ from Makefile.in. 4582 458314 Feb 2006: Wouter 4584 - Added unit tests for rbtree. Extensive testing of all functions. 4585 - Added tpkg unit test. 4586 - configure tests for CUnit(optional lib for unit tests). Makefile 4587 cleanup so it works on non-gmake on freebsd. 4588 458913 Feb 2006: Wouter 4590 - Removed timespec_add(current_time) in server_main, the timeout was 4591 relative, not absolute. This fixes EINVAL on the timeout on freebsd. 4592 - Added check in configure for compiler flags. Used for -Wextra. 4593 - Added check in configure for va_list definition conflict between 4594 stdio and stdarg. This happens on DEC Alpha/Debian. 4595 - removed --enable-mmap configure option. There is no mmap support 4596 in the current codebase. 4597 - renamed local prev to next in domain_next() in namedb.h. 4598 - Removed heap.h. It was not used. Heap and rbtree are mingled anyway. 4599 - in netio.c, in dispatch, it would store the next pointer 'in case 4600 the handler removes itself'. But if the handler removes that next. 4601 Then it would fail. So stored the next in struct netio. 4602 This removes a potential bug. Netio_dispatch is not reentrant. 4603 Reentry would need a list of iterator* in struct netio. 4604 - Changed process_query() to server_process_query(). It is too 4605 similar to query_process(). 4606 460710 Feb 2006: nsd-team 4608 * Wouter: Improved configure.ac to detect pselect in sys/select. 4609 The check works on freebsd(yes) and fedoracore 3 and 4 (no). 4610 I hope it also works on Solaris. 4611 Also various other prototypes were implicit: chroot, strptime, ... 4612 These are also solved. 4613 * Wouter: Checked configure on sparc5(solaris). Added check for 4614 ctime_r in time.h (for tsig.c). This conf also works on freebsd/linux. 4615 * Wouter: Updated dependencies in makefile for plugin headers. 4616 These are included only when --enable-plugins is present. 4617 * Wouter: Added a send quit over socket to kill commands in server_main, 4618 These act when the fork children fails. If the kill fails, the 4619 socket command hopefully still works. 4620 * Wouter: Put reload code into a separate function. It communicates with 4621 a socket to the old parent, and sends it a quit command. This works 4622 and terminates the old nsd. Left in the kill as a double failsafe. 4623 If the reload process dies, then the parent closes the socket. 4624 * Wouter: Separated the signal mode from the socket-determined nsd->mode. 4625 Every signal function has a variable, so that multiple signals can 4626 arrive. Only the number of signals of the same type is lost, but not 4627 important for nsd. The signals are handled in turn by the run loop. 4628 This completes the coding to remove signal race conditions: 4629 - nsd uses sockets to communicate with its subprocesses(server,reload). 4630 - signal handler routine contains no lengthy system calls. 4631 - signals cannot overwrite a previous signal. 4632 * Wouter: fixed problem where nsd->mode and mode are different in 4633 server_main. Nsd would kill the children, but then restart them again. 4634 463509 Feb 2006: nsd-team 4636 * Wouter: Updated dependencies in Makefile (regenerated them with gcc -MM). 4637 * Wouter: Used splint on the source (with settings to reduce spam.) 4638 And came to the following changes: 4639 - In util.h, make it respect HAVE_CONFIG_H and HAVE_SYSLOG_H. 4640 Also it now defines fallback values for #defines in syslog h. 4641 - Added explicit cast to (unsigned int) in snprintf in dname.c, 4642 dname_to_string routine. 4643 * Wouter: Used extra warnings during gcc compile. -Wextra -Wall 4644 -pedantic -Wbad-function-cast -Wmissing-declarations 4645 -Wmissing-prototypes -Wnested-externs -Wold-style-definition 4646 -Wstrict-prototypes -Wdeclaration-after-statement. 4647 Using -Wtraditional gives too many warnings. 4648 * Wouter: Found a problem with pselect. sys/select.h does not by default 4649 provide the pselect function definition. configure script is 4650 adjusted to test for this and enable _XOPEN_SOURCE=600 to get it. 4651 Found this using the gcc warnings. 4652 * Wouter: dname and rbtree test apps were in make clean target, but 4653 do not exist anymore. Removed from make clean target. 4654 * Wouter: in util log_file() the epoch time_t is passed to printf 4655 without an int cast. Found using extra gcc warnings. 4656 * Wouter: In server.c fixed some signed-unsigned comparisons 4657 using the extra gcc warnings. 4658 - in shutdown and int was used instead of size_t. 4659 - in server_main timeout(signed) was compared with unsigned. 4660 - unused variable in new handler functions. 4661 - in handle_child_command int i instead of size_t was used. 4662 - in zonec the process_rr routine was missing (void) as paramlist. 4663 * Wouter: Added -Wall and -Wextra when --enable-checking is enabled. 4664 * Miek: Ported over the big fat enable checking configure warning. 4665 * Wouter: fixed configure check for pselect on freebsd. 4666 466708 Feb 2006: nsd-team 4668 * Wouter: In server.c also sockets from unexpectedly dead childs are closed. 4669 * Wouter: in nsd.c and server.c cleaned out the signal handler, so that 4670 it only includes two switch/if statements and alters only the mode. 4671 No more calls to alarm(), waitpid(), write(), log_msg(). 4672 Instead the work is done in the runloop in server.c and sent by socket. 4673 Also the parent now waits for children. Parent restarts them. 4674 * Wouter: Fixup, the children will quit if the parent closes the command 4675 socket. If parent is killed, they will exit too. 4676 * Wouter: The server_main now listens to children command channels. 4677 Included timeout to check for terminated processes. 4678 Test says that new signal handler works, and child->parent comm. 4679 468007 Feb 2006: nsd-team 4681 * Miek: configure.ac version to 3.0.0 4682 * Miek: looked at: buffer.{ch}, answer.{ch}, dns.{ch} 4683 those files don't have any changes, except for dns.{ch} for the 4684 explicit compression. 4685 * Miek: looked at: zlexer.lex and zparser.y; only changes there 4686 for the database changes. 4687 * Wouter: Changed buffer in write_pid from 16 bytes to 32 bytes, 4688 this makes 64 bit numbers fit in the buffer. 4689 * Wouter: Socket connection between parent and child nsds added. 4690 But sighandler now in worse shape. Need to close them. Remove kills. 4691 * Wouter: close the parent and child command channel sockets in shutdown(). 4692