aboutsummaryrefslogtreecommitdiffstats
path: root/dns/bind9
Commit message (Collapse)AuthorAgeFilesLines
* Upgrade to version 9.3.4, the latest from ISC, which addresses theDoug Barton2007-01-252-8/+8
| | | | | | | | | | | | | | | | | | | | | | | following security issues. All users of BIND are encouraged to upgrade to this version. 2126. [security] Serialise validation of type ANY responses. [RT #16555] 2124. [security] It was possible to dereference a freed fetch context. [RT #16584] 2089. [security] Raise the minimum safe OpenSSL versions to OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions prior to these have known security flaws which are (potentially) exploitable in named. [RT #16391] 2088. [security] Change the default RSA exponent from 3 to 65537. [RT #16391] 2066. [security] Handle SIG queries gracefully. [RT #16300] 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. [RT #15642]
* Apply the markup fixes from the base to the nsupdate.8 andDoug Barton2006-12-211-0/+8
| | | | nslookup.1 man pages.
* Upgrade to version 9.3.3, the latest from ISC. This isDoug Barton2006-12-102-8/+8
| | | | | | | | a maintenance release, with the usual round of bug and security fixes. All users of BIND 9 are encouraged to upgrade to this version.
* Update to version 9.3.2-P2, which addresses the vulnerabilityDoug Barton2006-11-032-8/+8
| | | | | | | | | | | | | | | | | | | | | | announced by ISC dated 31 October (delivered via e-mail to the bind-announce@isc.org list today): Description: Because of OpenSSL's recently announced vulnerabilities (CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named, we are announcing this workaround and releasing patches. A proof of concept attack on OpenSSL has been demonstrated for CAN-2006-4339. OpenSSL is required to use DNSSEC with BIND. Fix for version 9.3.2-P1 and lower: Upgrade to BIND 9.2.3-P2, then generate new RSASHA1 and RSAMD5 keys for all old keys using the old default exponent and perform a key rollover to these new keys. These versions also change the default RSA exponent to be 65537 which is not vulnerable to the attacks described in CAN-2006-4339.
* Upgrade to version 9.3.2-P1, which addresses the following securityDoug Barton2006-09-072-8/+8
| | | | | | | | | | | | | vulnerabilities: http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en 2066. [security] Handle SIG queries gracefully. [RT #16300] http://www.kb.cert.org/vuls/id/697164 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. [RT #15642] All users of BIND 9 are encouraged to upgrade to this version.
* Add OPTIONS to the rest of my ports that need them.Doug Barton2006-08-281-16/+10
| | | | Add CONFLICTS to the bind* ports.
* Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtryEdwin Groothuis2006-01-221-1/+1
| | | | | Approved by: krion@ PR: ports/88711 (related)
* Update to 9.3.2, the latest from ISCDoug Barton2005-12-284-31/+9
|
* Move the verify target after pre-fetch.Doug Barton2005-12-061-3/+3
|
* Committed the wrong version ... s#/usr/local#${LOCALBASE}#Doug Barton2005-11-271-1/+1
|
* Fix a long-standing problem that appears when users installDoug Barton2005-11-271-1/+7
| | | | | | | | | | | openssl from ports, and do not use the option to have the port version overwrite the base version. Several folks have mentioned this problem in the past, but a good workaround (and more importantly, solid testing) were provided by the submitter. Submitted by: Uffe Vedenbrant <uffe@vedenbrant.se>
* Add SHA256 checksums to my portsDoug Barton2005-11-241-0/+2
|
* For the ports that I maintain, do the following as appropriate:Doug Barton2005-10-291-1/+5
| | | | | | | | | 1. Add myself as a backup master site (Sourceforge and CPAN ports already have good enough coverage, so skip them). 2. For all ports that have them, download the PGP signature files. 3. For ports in 2, add a verify target to the Makefile 4. For ports where I was already providing a master site, update the URL. 5. Pet portlint in a couple of places.
* This issue was researched by glebius, and this patch wasDoug Barton2005-08-191-0/+23
| | | | | | | | | | | | | | | incorporated by ISC into the next version of BIND. The patch addresses a problem with high-load resolvers which hit memory barriers. Without this patch, running the resolving name server out of memory would lead to "unpredictable results." Of course, the canonical answer to this problem is to put more memory into the system, however that is not always possible, and the code should be able to handle this situation gracefully in any case. Approved by: portmgr (krion)
* ISC staff has informed me that in BIND 9.3.x, threads are always aDoug Barton2005-06-291-1/+3
| | | | | bad idea, so disable them in all cases unless the user has affirmatively requested this through the define.
* 1. The OPTIONS stuff isn't working the way it should according to reports,Doug Barton2005-03-171-4/+2
| | | | | | so rip it out until I have a chance to debug it. 2. Improve the comment about deprecating an old knob.
* Upgrade to 9.3.1, the latest version from ISC. This version containsDoug Barton2005-03-133-32/+23
| | | | | | | | | | | | | | | | | | several important fixes, including a remote (although unlikely) exploit. See the CHANGES file for details. All users of BIND 9 are highly encouraged to upgrade to this version. Changes to the port include: 1. Remove ISC patch to 9.3.0 that addressed the remote exploit 2. Change to OPTIONS, and thereby 3. --enable-threads is now the default. Users report that the new thread code in 9.3.x works significantly better than the old on all versions of FreeBSD. 4. Add a temporary shim for the old PORT_REPLACES_BASE_BIND9 option. The OPTIONS framework requires knobs to start with WITH_ or WITHOUT_ 5. Remove patch that shoehorned named.conf.5 into the right place, it has been fixed in the code.
* Include a patch from ISC to deal with the following vulnerability:Doug Barton2005-01-292-1/+13
| | | | | | | | | | | | | | | | | | | | | | | Name: BIND: Self Check Failing [Added 2005.25.01] Versions affected: BIND 9.3.0 Severity: LOW Exploitable: Remotely Type: Denial of Service Description: An incorrect assumption in the validator (authvalidated) can result in a REQUIRE (internal consistancy) test failing and named exiting. Workarounds: Turn off dnssec validation (off by default) at the options/view level. dnssec-enable no; Active Exploits: None known Bump PORTREVISION accordingly. It should be noted that the vast majority of users would not have DNSSEC enabled, and therefore are not vulnerable to this bug.
* The parens around the OSVERSION test were fatal for < 4.9, and did notDoug Barton2004-09-271-1/+1
| | | | | | | | provide anything useful for newer systems, so remove them. PR: ports/72118 Submitted by: Michel Lavondes <fox@vader.aacc.cc.md.us> Approved by: portmgr (eik)
* Update to BIND 9.3.0, the latest from ISC. This version has severalDoug Barton2004-09-246-27/+59
| | | | | | | | | | | | | | | | significant updates, not the least of which is the new and improved DNSSEC code based on the latest standards (including DS). Various updates to the port, including: 1. Download the PGP signature 2. If running on ${OSVERSION} >= 503000, configure with threads 3. Update pkg-descr re IPv6 RRs 4. Update pkg-message to reflect a world with 6-current There is also a patch to correct a man page installation error. This problem should be fixed in the next release. Approved by: portmgr (marcus)
* The ringserver sites don't have the latest BIND 9.Doug Barton2004-04-041-2/+1
| | | | Submitted by: fenner's distfile survey
* DISTNAME is a slightly less painful way of dealing with wackyDoug Barton2004-03-151-2/+1
| | | | version numbers.
* Now that the SIZE thing has stabilized, add it to the ports I maintain.Doug Barton2004-03-141-0/+1
|
* I specifically stated that I did not want to bump portepoch for this port.Doug Barton2003-10-281-1/+0
| | | | | | | | | | I realize that my error in version numbering previously caused some confusion about 9.2.3 being a more up to date version than 9.2.3.4, but this will quickly be resolved with the next version, and affected only a few users who installed the release candidate. The portepoch change is permanent, and perpetuates a silly kludge for no good reason. Please do not change this again without discussing it with me.
* Fix removal of the last digit in the version number issue.Edwin Groothuis2003-10-281-0/+1
| | | | | | | [~/cvs/ports/dns/bind9] edwin@k7>pkg_version -t 9.2.3.4 9.2.3 > [~/cvs/ports/dns/bind9] edwin@k7>pkg_version -t 9.2.3.4 9.2.3,1 <
* Upgrade to the 9.2.3 release versionDoug Barton2003-10-252-3/+3
|
* Unbreak(?) USE_OPENSSL support for people that don't have it in the baseDoug Barton2003-10-031-7/+2
| | | | Submitted by: A cast of thousands
* Upgrade to version 9.2.3rc4.Doug Barton2003-09-252-4/+4
| | | | | | | | The 9.2.3 code has many many bugs fixed from 9.2.2, check CHANGES for more information. The rc4 code has the delegation-only options. Check the ARM for information on how to enable it.
* DOCSDIR'ifyDoug Barton2003-09-251-26/+26
|
* Chase repocopies towards ports/dnsEdwin Groothuis2003-09-051-1/+1
| | | | | | PR: ports/56020 Submitted by: Kimura Fuyuki <fuyuki@nigredo.org> Approved by: portmgr
* Massive repo-copies request: net->dns (partly devel->dns)Edwin Groothuis2003-09-051-1/+1
| | | | | | PR: ports/56020 Submitted by: Kimura Fuyuki <fuyuki@nigredo.org> Approved by: portmgr
* Display the new pkg-message after port build.Doug Barton2003-06-081-0/+2
|
* Add a message to explain how to configure randomness, and rndc.Doug Barton2003-06-081-0/+22
|
* * Update to version 9.2.2, the latest from ISC. This version contains noDoug Barton2003-03-042-3/+4
| | | | | | | new features compared to 9.2.1, only bug fixes. Users of BIND 9 are highly encouraged to upgrade. * Switch to Makefile COMMENT
* Switch to Makefile commentDoug Barton2003-03-041-1/+0
|
* Add my name and e-mailDoug Barton2003-03-041-0/+3
|
* Upgrade to 9.2.2rc1. This version has been available for several months, andDoug Barton2003-01-263-24/+28
| | | | | | | | | is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
* typoYing-Chieh Liao2002-08-011-1/+1
| | | | Submitted by: Kimura Fuyuki <fuyuki@hadaly.org>
* add MASTER_SITE_ISC (1) and apply themYing-Chieh Liao2002-08-011-4/+2
| | | | | PR: 41218 Submitted by: Kimura Fuyuki <fuyuki@hadaly.org> (1)
* Update to the latest release versionDoug Barton2002-05-222-4/+4
|
* Upgrade to 9.2.1rc2, the latest from ISC. Numerous bugs were fixed,Doug Barton2002-04-082-4/+4
| | | | see /usr/local/share/doc/bind9/CHANGES after installation for details.
* Fix PORTVERSION so that wacky things don't happen down the road.Doug Barton2002-03-181-7/+9
| | | | | | In my previous commit I forgot to mention that 'pkg_add -r bind' is only half the rationale for changing PORTNAME. The other half is so that people who really want to can 'pkg_add -r bind9'.
* Upgrade to the latest release candidate, 9.2.1rc1. Numerous 9.x bugsDoug Barton2002-03-173-53/+93
| | | | | | | | | | are fixed in this version, however BIND 9 is still recommended only for early adopters, and those that have time to closely monitor their name service. * Change PORTNAME to bind9 so that 'pkg_add -r bind' does the right thing * Use the local version of openssl, and disable threads on all but the most recent -current. Thread support is still considered experimental.
* Add some mirrorsDoug Barton2001-08-151-0/+2
|
* Update port version to ISC's latest stable releaseDoug Barton2001-07-252-2/+8
|
* Upgrade to 9.1.3rc1, whose most significant change is a fix forDoug Barton2001-05-282-2/+2
| | | | some IXFR problems.
* Upgrade to BIND 9.1.2-Release. There is no newe functionality, butDoug Barton2001-05-093-2/+3
| | | | | it is highly recommended that all users of BIND 9 upgrade to this maintenance release.
* Update to the actual release version of 9.1.1. If you're usingDoug Barton2001-04-032-2/+2
| | | | bind 9, upgrade to this version.
* Latest bug fixes, FOR GREAT JUSTICE !!Doug Barton2001-03-272-2/+2
|
* Latest bug fixes and documentation updates.Doug Barton2001-03-232-2/+2
|
* Latest bug fixes, no features added.Doug Barton2001-03-192-2/+2
|
* Upgrade to ISC's latest. No new features, but a few useful bug fixes.Doug Barton2001-03-112-2/+2
|
* Add more master sites.Jun Kuriyama2001-03-021-1/+2
| | | | Approved by: maintainer
* Update to ISC's latestDoug Barton2001-02-273-2/+3
|
* Latest update from ISC. Truly just bugfixes.Doug Barton2001-02-132-2/+2
|
* Update to ISC's bug fix release. For those who wish to (or need to)Doug Barton2001-02-083-18/+2
| | | | use BIND 9 this upgrade is highly recommended.
* I knew I forgot something... the patch is reported to substantiallyDoug Barton2001-02-081-0/+1
| | | | improve the resistance to DOS, so this is worth a portrevision bump.
* Major overhaul, including an updated man/plist, patching the man pagesDoug Barton2001-02-073-4/+71
| | | | | | | | | | | to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
* Take over maintainership of the BIND's. This is something I use every day,Doug Barton2001-01-311-1/+1
| | | | so I'm on top of the security advisories, etc.
* Update to 9.1.0; replace Makefile.in patch with perl regex.Will Andrews2001-01-214-17/+12
| | | | Requested by: Joong Hyun Kim <better@ns1.betterbox.net>
* Add CONFIGURE_ARGS so that named/lwresd put their pid filesAde Lovett2000-12-021-1/+2
| | | | in the "right" place (/var/run), as opposed to ${PREFIX}/var/run
* Update to 9.0.1Doug Barton2000-11-203-16/+23
| | | | | PR: ports/22941 Submitted by: Leif Neland, leifn@neland.dk
* Bump PORTREVISION for the previous commiting.Munechika SUMIKAWA2000-11-041-0/+1
|
* Add 'ipv6' on CATEGORIES. bind9 supports queries via IPv6.Munechika SUMIKAWA2000-11-041-1/+1
|
* Update to BIND version 9.0.0, now with better DNSSEC support among lotsWill Andrews2000-10-296-0/+238
| | | | | | of other neat things like that. Sorry for the delay. Repo-copy by: asami
* Temporarily remove bind9, it is a repo-copy from bind8 not updated.Satoshi Asami2000-10-225-111/+0
| | | | | The history is safe, so just "cvs add" the files back when bind9 is ready to be committed.
* Update with the new PORTNAME/PORTVERSION variablesChris Piazza2000-04-101-2/+2
|
* Add WWW linkMarc G. Fournier2000-02-111-0/+2
|
* Upgrade to 8.2.2 patch 5Justin M. Seger1999-11-153-10/+5
|
* Add a missing file.Bill Fumerola1999-11-131-0/+1
|
* Upgrade to bind-8.2.2.p3 + patch4. Fixes some security issues.Justin M. Seger1999-11-123-7/+13
| | | | | Many people submitted patches for this one, and a combination of them were used.
* $Id$ -> $FreeBSD$Peter Wemm1999-08-301-1/+1
|
* Upgrade to bind 8.2.1Justin M. Seger1999-08-092-10/+7
| | | | | Submitted by: ust@cert.siemens.de PR: ports/12875
* Re-enforce caps, no period. An "exceptions" file has been createdTim Vanderhoek1999-08-031-1/+1
| | | | containing the ports editors/vim5, sysutils/star, and one other.
* Bring back bind8, even -CURRENT only has 8.1.2, this port is more up-to-date.Bill Fumerola1999-06-295-0/+110
| | | | Requested By: a bazillion people both on mailing lists and #FreeBSD.
* Nuke bind8, it's been in the base system for a while now.Justin M. Seger1999-06-265-110/+0
|
* Use latest patches from ISC.Justin M. Seger1999-06-012-2/+6
| | | | PR: ports/11784
* Upgrade to bind 8.2Justin M. Seger1999-04-043-14/+24
| | | | | Submitted by: Brad Hendrickse <bradh@uunet.co.za> PR: ports/10861
* Add a couple more Y2K links...Marc G. Fournier1999-01-131-1/+3
|
* Install HTML documentation in ${PREFIX}/share/doc/bind8Justin M. Seger1998-12-102-1/+17
| | | | PR: 7750
* This netted the largest set of mis-installed manpages, yet!Tim Vanderhoek1998-08-191-14/+0
|
* Update comment to match realityGary Palmer1998-07-191-2/+2
|
* Upgrade to version 8.1.2.Justin M. Seger1998-05-213-13/+14
| | | | Submitted by: Studded@dal.net
* Make this build under current again.Justin M. Seger1998-04-151-16/+1
|
* Take markm out of his misery... The patch belongs to the port'sGarrett Wollman1998-02-051-1/+7
| | | | makefile, not bind's.
* Install the raw (roff) man pages, not the formatted ones.Mark Murray1998-01-131-2/+2
|
* Import of bind 8.1.1 port.Justin M. Seger1997-11-265-0/+100
PR: ports/4118
generated by cgit (git 2.34.1) at 2025-02-23 17:34:03 +0800