diff options
| author | erwin <erwin@FreeBSD.org> | 2013-04-17 15:57:54 +0800 |
|---|---|---|
| committer | erwin <erwin@FreeBSD.org> | 2013-04-17 15:57:54 +0800 |
| commit | d99283f9cfad75d2add0f6e9d334a205ed87ca79 (patch) | |
| tree | 115667e2e8529746ad80d1d3db2c4466f8c29aae | |
| parent | 0d9be530be19202276eeaa11571c1b18f2f0ec91 (diff) | |
| download | freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.tar.gz freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.tar.zst freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.zip | |
Update RPZ+RRL patchset to the latest version.
The change makes "slip 1;" send only truncated (TC=1) responses.
Without the change, "slip 1;" is the same as the default of "slip 2;".
That default, which alternates truncated with dropped responses
when the rate limit is exceeded, is better for authoritative DNS
servers, because it further reduces the amplification of an attack
from about 1X to about 0.5X.
DNS RRL is not recommended for recursive servers.
Feature safe: yes
| -rw-r--r-- | dns/bind98/Makefile | 2 | ||||
| -rw-r--r-- | dns/bind98/distinfo | 4 | ||||
| -rw-r--r-- | dns/bind99/Makefile | 2 | ||||
| -rw-r--r-- | dns/bind99/distinfo | 4 |
4 files changed, 6 insertions, 6 deletions
diff --git a/dns/bind98/Makefile b/dns/bind98/Makefile index fe8d756e76a7..d38396ba7db9 100644 --- a/dns/bind98/Makefile +++ b/dns/bind98/Makefile @@ -109,7 +109,7 @@ CONFIGURE_ARGS+= --enable-rpz-nsdname .endif .if ${PORT_OPTIONS:MRPZRRL_PATCH} -PATCHFILES= 9.8.4-rpz+rl.072.23-P1.patch +PATCHFILES= 9.8.4-rpz+rl.094.21-P2.patch PATCH_SITES= http://ss.vix.com/~vjs/ .endif diff --git a/dns/bind98/distinfo b/dns/bind98/distinfo index 19aaffda5987..5f70404563be 100644 --- a/dns/bind98/distinfo +++ b/dns/bind98/distinfo @@ -1,4 +1,4 @@ SHA256 (bind-9.8.4-P2.tar.gz) = e772edfb41036a25e1392ab15ff4d3754f03c301b4b059d64afd8d8dadd18193 SIZE (bind-9.8.4-P2.tar.gz) = 7129690 -SHA256 (9.8.4-rpz+rl.072.23-P1.patch) = e5f792fdc683285528392e6cdfb9d99138b2fe220e5f617edcf8b45cbb992aaa -SIZE (9.8.4-rpz+rl.072.23-P1.patch) = 176430 +SHA256 (9.8.4-rpz+rl.094.21-P2.patch) = 7fdc4beaf1f20877f636ba0991d0c48c65bd497df19323f156fe91cca06357ba +SIZE (9.8.4-rpz+rl.094.21-P2.patch) = 176510 diff --git a/dns/bind99/Makefile b/dns/bind99/Makefile index 7b9e013a82da..4f3a3f6b6ca8 100644 --- a/dns/bind99/Makefile +++ b/dns/bind99/Makefile @@ -115,7 +115,7 @@ CONFIGURE_ARGS+= --enable-rpz-nsdname .endif .if ${PORT_OPTIONS:MRPZRRL_PATCH} -PATCHFILES= 9.9.2-rpz+rl.072.23-P1.patch +PATCHFILES= 9.9.2-rpz+rl.094.21-P2.patch PATCH_SITES= http://ss.vix.com/~vjs/ .endif diff --git a/dns/bind99/distinfo b/dns/bind99/distinfo index 3960e5d8384a..29497c414b53 100644 --- a/dns/bind99/distinfo +++ b/dns/bind99/distinfo @@ -1,4 +1,4 @@ SHA256 (bind-9.9.2-P2.tar.gz) = ff822734e3550969251411e20f6f7397d14a912613a42af423752e93fdb565d2 SIZE (bind-9.9.2-P2.tar.gz) = 7277958 -SHA256 (9.9.2-rpz+rl.072.23-P1.patch) = 4afd63b44e3ecb2a782ca00542aea3c737a4de2a82c343cb15773fa3df17aef1 -SIZE (9.9.2-rpz+rl.072.23-P1.patch) = 177613 +SHA256 (9.9.2-rpz+rl.094.21-P2.patch) = cd8ba70b8f5029cc464f4db6c632c8b48cdd081cb5cfb51936fd7f9c080b91ea +SIZE (9.9.2-rpz+rl.094.21-P2.patch) = 177693 |