-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, NSD 4.1.4rc1 maintainers pre-release candidate 1 is available: http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.4rc1.tar.gz sha1 787dba69fc4a9ceba2e0ea4a712551e3a02302e5 sha256 6a8dd9ae36ed181fc9af15c1ba98bd6ce5306f180010d14390e9f08c64902197 This release has fixes for operational issues: for NSID responses and for fetching expired zones with wrong serial management. There are also installation changes. The number of interface: lines in nsd.conf is unlimited. The reuseport: yes option is enabled by default for Linux, but not enabled by default on FreeBSD where it apparently is available but not implemented, it can still also be controlled from nsd.conf. When enabled and it works it gives (sizable) speed improvements on multicore systems. Packagers may want to use the newly added --enable-pie and --enable-relro-now options to link a safer binary (but you may already have them if you use custom LDFLAGS). FEATURES: - - RFC7553 RR Type URI support. - - removed hardcoded interface limit, --with-max-ips removed. - - SO_REUSEPORT support, by default on Linux, or with reuseport: yes. - - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. - - --enable-pie and --enable-relro-now options for a safer executable. BUG FIXES: - - Fix NSID response for short edns sizes. - - Fix that for expired zones NSD performs an AXFR and accepts newer and older serial numbers. - - Document that minimal responses only minimizes responses to fit in one datagram. It does not minimize smaller responses. - - Fix #618: documented need to list ip-addresses seperately in nsd.conf if there are multiple, because the source address of replies can otherwise go wrong. - - Fix that notify from nsd-control contains soa serial. - - Fix #698 formatting errors and typos in nsd.8.in. Best regards, Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJV5FNnAAoJEJ9vHC1+BF+N7PIP/2qSnFGRyTT/N9Yed9Aj15ub MJVbY+0JGbt0kjb6IvjxAoYMqcV86C6IG0kfMs2l6OjQ3lOrOakuGPuTc0GHNsRc V6gq9vCHWzueiZqD5YzRvIXFZOJ4Q2je7KacEc8ADHrBRB4Gzj1/L4kR+t/zPtT6 k/S7yfUL4lqnrnT11ytOYJnmf+rk1ktD2D4y8ZvO4dcw/UN09AfqC7NkyfnTPiPj afba2riUphvM8hjBJMtWQwrqkaNELcAGGOKeecNyJnDi/8+c3p2mfDVNyjsV4Lke XxOVlf0eEYiOxdTYVGkDZwtmWz1SyNMi/YU+IloI0hgcGh2hbVZmXbJn7D78dLJ4 nWbiWIvC/5yAwS2L432kkz6JCrEFf8oduAsYWW742g/tw3sagAaSabvqayD0IbT8 OU6TDb3Xq6y6QHBhowYBR6Xff7F0LKDs1CmRERIzqIHKj4kDbUUFag1wc37J7DXK svK0IKHG5vaAFsoH4YLIupKe8OELWzw9CN72XajMQ8unMIj2YXxfv7lhC/X4wrLB QEKbxo9n2uRAvxXAcvswSTp8U1e3yieJbKpZ3I7SE/RsZlR/xe+g2gX4+T0HMMZw f4vvox4r43X3fgeXim/YX8OYPTU/tWN13OWLZ9j7ly447lynPvZGebCjcyDtO9h+ GX/Bde/vfXktCdauhL1z =gCQP -----END PGP SIGNATURE-----