14:31 Mathieu Arnold (mat) 

all: Remove all other $FreeBSD keywords.

    135fdee

18:54 pi 

dns/nsd: upgrade 4.2.4 -> 4.3.0

This port incorporates also the proposed bug fix at bug #242367

Major changes:

This release adds cpu affinity.  By pinning a server process to a
specific cpu, having a separate network card also for that cpu, and
an interface address also for that server process, the throughput is
increased.  This increases performance of the nameserver.

Sparse TSIG signing support is removed, to comply with the latest tsig
standard update draft.

There is a feature to drop update queries, with opcode UPDATE,
with nsd.conf option drop-updates.

4.3.0
=========
FEATURES:
- Fix to use getrandom() for randomness, if available.
- Fix #56: Drop sparse TSIG signing support in NSD.
  Sign every axfr packet with TSIG, according to the latest
  draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1.
- Merge pull request #59 from buddyns: add FreeBSD support
  for conf key ip-transparent.
- Add feature to pin server processes to specific cpus.
- Add feature to pin IP addresses to selected server processes.
- Set process title to identify individual processes.
- Merge PR#22: minimise-any: prefer polular and not large RRset,
  from Daisuke Higashi.
- Add support for SO_BINDTODEVICE on Linux.
- Add support for SO_SETFIB on FreeBSD.
- Add feature to drop queries with opcode UPDATE.

BUG FIXES:
- Fix fname null check of fname in namedb_read_zonefile.
- Fix implicit cast of size in udb_radnode_array_grow.
- Fix ignore of return value of ssl_printf in remote.c.
- Fix unused check of fd in parent_handle_reload_command.
- Attempt to fix signedness of nscount lookup in ixfr query_process.
- Fix identical branches for ssl_print of errors in remote.c.
- Fix type cast bounds, signedness of opt_rdlen in edns_parse_record.
- Fix to separate header and data lines in parse_zone_list_file.
- Fix to define max number of EDNS records we are willing to
  spend time on.
- Fix size of string len and capacity type cast in udbradtree.
- Fix to protect rrcount in tsig_find_rr from overflow.
- Annotate radix_find_prefix_node not reachable trail code.
- Fix to protect rrcount in packet_find_notify_serial from overflow.
- Fix to close socket on error in create_tcp_accept_sock.
- Fix to log on failure to chmod for socket for remote control.
- Fix to remove unneeded if in open of socket for remote control.
- Fix to restore input parameter on call failure in create_dirs.
- Please checker by terminating and initialising string read
  by remote control.
- Fix to define upper bounds on rr counts read from untrusted packet
  data.
- Separate acl_addr_match_range functions for ip4 and ip6, to
  please checkers.
- Avoid unused variable warning in new match_range_v4 function.
- Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters.
- use-systemd is ignored in nsd.conf, when NSD is compiled with
  libsystemd it always signals readiness, if possible.
- Note that use-systemd is not necessary and ignored in man page.
- Fix unreachable code in ssl set options code.
- Fix bad shift in assertion code analyzer complaint.
- Fix responses for IXFR so that the authority section is not echoed
  in the response.
- Merge PR#60: Minor portability fixes from michaelforney, with
  avoid pointer arithmetic on void* and avoid unnecessary VLA.
- Fix that the retry wait does not exceed one day for zone transfers.

CHANGES:
- Set FD_CLOEXEC on opened sockets.

PR:		244886, 242367[2]
Submitted by:	Jaap Akkerhuis <jaap@nlnetlabs.nl> (maintainer)
Reported by:	Leo Vandewoestijne <freebsd@dns.company> [2]
Relnotes:	https://github.com/NLnetLabs/nsd/blob/NSD_4_3_0_REL/doc/ChangeLog

 

13:22 lev 

 Add profiles to nsd init script.

PR:		211883
Submitted by:	lev
Approved by:	jaap@NLnetLabs.nl

 

17:44 amdmi3 

- Add option to install Munun plugin

PR:		199798
Submitted by:	tgyurci@gmail.com
Approved by:	maintainer timeout

 

02:42 erwin 

update to 4.1.1

Major Features:

- RFC 7344: CDS and CDNSKEY (read record types).
- per zone statistics with --enable-zone-stats
- Disabled use of SSLv3 in nsd-control.
- Synthesize CNAMEs with same TTL as DNAME.
- nsd-checkconf -f prints out full name of pidfile (with dir). [1]

PR:		197291,
		196449 [1]
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>,
		Adam Zaleski <adam@zaleski.org> [1]

 

12:55 madpilot 

- Update to 4.0.3

PR:		ports/187596
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

 

10:46 erwin 

There was a wrong rc script in the port preventing the daemon to run.

Added STAGING support

Added LICENSE (NSD3CLAUSE) statement

Other small changes to make portlint more happy

PR:		186631
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

 

14:44 decke 

- Update to 4.0.1
- Cleanup rc script

FEATURES:
- recognizes ip-address and interface as synonyms for convenience.
- Support for EUI48 and EUI64 RR types enabled by default (RFC 7043).
- Support for CAA RRtype (RFC 6844).
- NSID can be set with "ascii_somestring" in ascii.

BUG FIXES:
- Fix xfrd when zone transfer TCP contains zero length packets.
- Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3,
because AXFRs overwrote nsec3 administration in the child zone.
- Fix that bad IXFR updates do not result in double SOA records,
and that an AXFR is started (attempted) when the zone state seems
to be inconsistent with the master's zone state.
- Log ip address for sendto and sendmmsg failures.
- Fix segfaults after read of zones with rr type WKS from zonefile.
- Seed PRNG for openssl at start of daemon, fixes SSL connection issue.
- Bugfix #534: IXFR query loop over UDP for zones that are unchanged.
- (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset.
- (same as in 3.2.16): Bugfix #542: Match RRSIG TTL with SOA TTL in
negative response.
- Check if configure in srcdir collides with outofdir build.
- Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx).
- Fix printout of high-chars in TXT on NetBSD.

PR:		ports/186308
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

 

13:24 erwin 

Please welcome NSD 4.0.0

For all new features, see
http://www.nlnetlabs.nl/svn/nsd/tags/NSD_4_0_0_REL/doc/NSD-4-features

This version replaces the nsdc control program with nsd-control.
This requires some manual setup with nsd-control-setup and editing
of the config files. nsd-control is incompatible with nsdc so when
that is used in scripts, these should be adapted.

NSD 3 is still supported as dns/nsd3.

PR:		183888
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>

 

21:59 beech 

- Add multi-instance support

PR:		ports/176156
Submitted by:	Darren Pilgrim <darren.pilgrim@gmail.com>
Approved by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

 

08:57 dougb 

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

11:36 miwi 

- Update to 3.2.9

PR:             162782
Submitted by:   Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Feature safe:   yes

16:04 bapt 

- fix status command in rc file
- while here remove MD5 entry
bump port revision

PR:             ports/152565
Submitted by:   eli <elij.mx _at_ gmail.com>
Approved by:    Jaap Akkerhuis <jaap _at_ nlnetlabs.nl>

15:44 bapt 

improvements on rc script:
 - support reload command
 - use nsdc cli has command and let it perform the actual start,stop,... of the
daemon
 - at start check if the database exists if not built it (this prevent the
daemon to fail at starting)
 - remove the now userless sleep in stop command

bump portrevision

PR:             ports/152331
Submitted by:   Philippe Pepiot <phil _at_ philpep.org>
Approved by:    Jaap Akkerhuis <jaap _at_ NLnetLabs.nl> (maintainer)

00:15 dougb 

Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#

19:37 pgollucci 

- Fix permission issues

PR:             ports/143550
Submitted by:   Marko Njezic <mrmax063@maxempire.com>
Approved by:    Olafur Osvaldsson <osvaldsson@icelandic.net> (maintainer)

00:30 miwi 

- Add missing openssl dependency [1]
- Fix race when stopping nsd [2]

PR:             ports/130263 [1]
                ports/130294 [2]

Submitted by:   Artis Caune <Artis.Caune@gmail.com> [1] [2]
Approved by:    maintainer

20:34 miwi 

- Update to 3.2.0

PR:             128818
Submitted by:   Olafur Osvaldsson <osvaldsson@icelandic.net> (maintainer)

17:23 pgollucci 

Cosmetic changes to the rc.d file

Submitted by:   dougb
Approved by:    araujo (mentor), maintainer implicit

22:25 pgollucci 

- Update to 3.1.1
- Respect NOPORTDOCS
- Add option NSDMAX_INT
- rename rc.d script nsd.sh -> nsd

PR:     ports/125898
Approved by:    Olafur Osvaldsson <osvaldsson@icelandic.net>  (maintainer),
araujo (mentor)