diff options
| author | erwin <erwin@FreeBSD.org> | 2013-04-17 15:57:54 +0800 |
|---|---|---|
| committer | erwin <erwin@FreeBSD.org> | 2013-04-17 15:57:54 +0800 |
| commit | d99283f9cfad75d2add0f6e9d334a205ed87ca79 (patch) | |
| tree | 115667e2e8529746ad80d1d3db2c4466f8c29aae /dns/bind99 | |
| parent | 0d9be530be19202276eeaa11571c1b18f2f0ec91 (diff) | |
| download | freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.tar.gz freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.tar.zst freebsd-ports-gnome-d99283f9cfad75d2add0f6e9d334a205ed87ca79.zip | |
Update RPZ+RRL patchset to the latest version.
The change makes "slip 1;" send only truncated (TC=1) responses.
Without the change, "slip 1;" is the same as the default of "slip 2;".
That default, which alternates truncated with dropped responses
when the rate limit is exceeded, is better for authoritative DNS
servers, because it further reduces the amplification of an attack
from about 1X to about 0.5X.
DNS RRL is not recommended for recursive servers.
Feature safe: yes
Diffstat (limited to 'dns/bind99')
| -rw-r--r-- | dns/bind99/Makefile | 2 | ||||
| -rw-r--r-- | dns/bind99/distinfo | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/dns/bind99/Makefile b/dns/bind99/Makefile index 7b9e013a82da..4f3a3f6b6ca8 100644 --- a/dns/bind99/Makefile +++ b/dns/bind99/Makefile @@ -115,7 +115,7 @@ CONFIGURE_ARGS+= --enable-rpz-nsdname .endif .if ${PORT_OPTIONS:MRPZRRL_PATCH} -PATCHFILES= 9.9.2-rpz+rl.072.23-P1.patch +PATCHFILES= 9.9.2-rpz+rl.094.21-P2.patch PATCH_SITES= http://ss.vix.com/~vjs/ .endif diff --git a/dns/bind99/distinfo b/dns/bind99/distinfo index 3960e5d8384a..29497c414b53 100644 --- a/dns/bind99/distinfo +++ b/dns/bind99/distinfo @@ -1,4 +1,4 @@ SHA256 (bind-9.9.2-P2.tar.gz) = ff822734e3550969251411e20f6f7397d14a912613a42af423752e93fdb565d2 SIZE (bind-9.9.2-P2.tar.gz) = 7277958 -SHA256 (9.9.2-rpz+rl.072.23-P1.patch) = 4afd63b44e3ecb2a782ca00542aea3c737a4de2a82c343cb15773fa3df17aef1 -SIZE (9.9.2-rpz+rl.072.23-P1.patch) = 177613 +SHA256 (9.9.2-rpz+rl.094.21-P2.patch) = cd8ba70b8f5029cc464f4db6c632c8b48cdd081cb5cfb51936fd7f9c080b91ea +SIZE (9.9.2-rpz+rl.094.21-P2.patch) = 177693 |