nsd users - Jun 2016 - NSD 4.1.10rc2

Hi,

NSD 4.1.10rc1 pre-release is available:
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc1.tar.gz
sha1 3231e42c8f853fe9af4e17da0ee6be0688382935
sha256 aa511ec8fe7a669ec35b65b848c4dd277b675229590ca2c6796cfde53bc1672c
pgp http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc1.tar.gz.asc

This is the pre-release, for test, build and package issues.

Transport preference for glue, DNAME occlusion, and other bug fixes.

4.1.10
===============FEATURES:
- ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option
  for Linux, binds to interfaces and addresses that are down.
- NSD includes AAAA before A for queries over IPV6 (in delegations).
  And TC is set if no glue can be provided with a delegation because
  of packet size.
- print notice that nsd is starting before taking off.
BUG FIXES:
- Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
- Fix #751: NSD fails to occlude names below a DNAME.
- If set without nsd.db print "" as the default in the man pages.
- Fix #755: NSD spins after a zone update and a lot of TCP queries.
- Fix for NSEC3 with zone signed without exact match for empty
  nonterminals, the answer for that domain gets wildcard denial.
- #772 Document that recvmmsg has IPv6 problems on some linux kernels.

Best regards, Wouter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20160602/37f8a8a1/attachment.bin>

W.C.A. Wijngaards:
> This is the pre-release, for test, build and package issues.
tests passed here (debian jessie)

Andreas

W.C.A. Wijngaards:
> This is the pre-release, for test, build and package issues.
compile also on SLES11
> 4.1.10
> ===============> FEATURES:
> - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option
>   for Linux, binds to interfaces and addresses that are down.
SLES11 use Kernel 3.0.101
neither ip-transparent nor ip-freebind work here.
I guess my kernel is to old, right?

Andreas

Hi,

Release candidate 2 for NSD 4.1.10 is available:
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc2.tar.gz
sha1 4b1ef7d44eefccdcb1af22a3dc4ff5cdb8af061f
sha256 33cdbff02a608a3a17948fd58f48c6159e7abebb52ce29aca5076f154dfdb512
pgp http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc2.tar.gz.asc

The RC2 changes the fix for NSEC3 ENT, the RC1 fix added the wrong NSEC3
record to the additional section.

Best regards, Wouter

On 02/06/16 15:37, W.C.A. Wijngaards wrote:
> Hi,
> 
> NSD 4.1.10rc1 pre-release is available:
> http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc1.tar.gz
> sha1 3231e42c8f853fe9af4e17da0ee6be0688382935
> sha256 aa511ec8fe7a669ec35b65b848c4dd277b675229590ca2c6796cfde53bc1672c
> pgp http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.10rc1.tar.gz.asc
> 
> This is the pre-release, for test, build and package issues.
> 
> Transport preference for glue, DNAME occlusion, and other bug fixes.
> 
> 4.1.10
> ===============> FEATURES:
> - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option
>   for Linux, binds to interfaces and addresses that are down.
> - NSD includes AAAA before A for queries over IPV6 (in delegations).
>   And TC is set if no glue can be provided with a delegation because
>   of packet size.
> - print notice that nsd is starting before taking off.
> BUG FIXES:
> - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
> - Fix #751: NSD fails to occlude names below a DNAME.
> - If set without nsd.db print "" as the default in the man pages.
> - Fix #755: NSD spins after a zone update and a lot of TCP queries.
> - Fix for NSEC3 with zone signed without exact match for empty
>   nonterminals, the answer for that domain gets wildcard denial.
> - #772 Document that recvmmsg has IPv6 problems on some linux kernels.
> 
> Best regards, Wouter
> 
> 
> 
> _______________________________________________
> maintainers mailing list
> maintainers at nlnetlabs.nl
> https://nlnetlabs.nl/mailman/listinfo/maintainers
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20160609/c065b24c/attachment.bin>