From owner-p4-projects@FreeBSD.ORG Tue Dec 4 00:05:10 2007 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id 3A73E16A420; Tue, 4 Dec 2007 00:05:10 +0000 (UTC) Delivered-To: perforce@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CDDAE16A419 for ; Tue, 4 Dec 2007 00:05:09 +0000 (UTC) (envelope-from peter@freebsd.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id BAA6913C474 for ; Tue, 4 Dec 2007 00:05:09 +0000 (UTC) (envelope-from peter@freebsd.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id lB4059aB064837 for ; Tue, 4 Dec 2007 00:05:09 GMT (envelope-from peter@freebsd.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id lB4052HC064818 for perforce@freebsd.org; Tue, 4 Dec 2007 00:05:02 GMT (envelope-from peter@freebsd.org) Date: Tue, 4 Dec 2007 00:05:02 GMT Message-Id: <200712040005.lB4052HC064818@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to peter@freebsd.org using -f From: Peter Wemm To: Perforce Change Reviews Cc: Subject: PERFORCE change 130128 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2007 00:05:10 -0000 http://perforce.freebsd.org/chv.cgi?CH=130128 Change 130128 by peter@peter_daintree on 2007/12/04 00:04:43 IFC @130127 Affected files ... .. //depot/projects/hammer/contrib/bind9/CHANGES#9 integrate .. //depot/projects/hammer/contrib/bind9/COPYRIGHT#5 integrate .. //depot/projects/hammer/contrib/bind9/FAQ#7 integrate .. //depot/projects/hammer/contrib/bind9/FAQ.xml#5 integrate .. //depot/projects/hammer/contrib/bind9/Makefile.in#4 integrate .. //depot/projects/hammer/contrib/bind9/README#8 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/check-tool.c#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkconf.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkconf.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkconf.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkzone.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkzone.c#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkzone.docbook#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/check/named-checkzone.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/dig.1#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/dig.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/dig.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/dig.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/dighost.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/host.1#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/host.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/host.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/host.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/include/dig/dig.h#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/nslookup.1#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/nslookup.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/nslookup.docbook#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dig/nslookup.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-keygen.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-keygen.c#3 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-keygen.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-keygen.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-signzone.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-signzone.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-signzone.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/dnssec/dnssec-signzone.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/client.c#7 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/config.c#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/control.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/lwresd.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/lwresd.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/lwresd.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.conf.5#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.conf.docbook#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.conf.html#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.docbook#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/named.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/query.c#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/server.c#7 integrate .. //depot/projects/hammer/contrib/bind9/bin/named/update.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/nsupdate/nsupdate.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/nsupdate/nsupdate.c#6 integrate .. //depot/projects/hammer/contrib/bind9/bin/nsupdate/nsupdate.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/nsupdate/nsupdate.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/Makefile.in#3 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc-confgen.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.8#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.conf.5#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.conf.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.conf.html#5 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/bin/rndc/rndc.html#5 integrate .. //depot/projects/hammer/contrib/bind9/configure.in#6 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM-book.xml#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch01.html#6 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch02.html#6 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch03.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch04.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch05.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch06.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch07.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch08.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch09.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.ch10.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.html#7 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Bv9ARM.pdf#5 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/Makefile.in#4 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.dig.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.dnssec-keygen.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.dnssec-signzone.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.host.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.named-checkconf.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.named-checkzone.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.named.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.rndc-confgen.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.rndc.conf.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/arm/man.rndc.html#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/draft/draft-schlitt-spf-classic-02.txt#2 delete .. //depot/projects/hammer/contrib/bind9/doc/misc/Makefile.in#3 integrate .. //depot/projects/hammer/contrib/bind9/doc/misc/migration#4 integrate .. //depot/projects/hammer/contrib/bind9/doc/rfc/index#4 integrate .. //depot/projects/hammer/contrib/bind9/doc/rfc/rfc4398.txt#1 branch .. //depot/projects/hammer/contrib/bind9/doc/rfc/rfc4408.txt#1 branch .. //depot/projects/hammer/contrib/bind9/doc/rfc/rfc4470.txt#1 branch .. //depot/projects/hammer/contrib/bind9/doc/rfc/rfc4634.txt#1 branch .. //depot/projects/hammer/contrib/bind9/doc/rfc/rfc4641.txt#1 branch .. //depot/projects/hammer/contrib/bind9/lib/bind/api#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/config.h.in#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/configure#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/configure.in#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/dst/dst_api.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/dst/hmac_link.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/irs/gai_strerror.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/irs/irs_data.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/isc/ctl_clnt.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/make/rules.in#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/nameser/ns_parse.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/port_before.h.in#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/resolv/res_data.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind/resolv/res_init.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind9/api#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/bind9/check.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/adb.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/api#7 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/dispatch.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/dnssec.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/include/dns/db.h#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/include/dns/dispatch.h#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/include/dns/validator.h#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/journal.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/lookup.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/master.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/message.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/openssl_link.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/openssldh_link.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/openssldsa_link.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/rbtdb.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/rdata/generic/ds_43.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/rdataslab.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/resolver.c#8 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/rootns.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/sdb.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/sdlz.c#2 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/tsig.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/validator.c#7 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/view.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/xfrin.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/dns/zone.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/Makefile.in#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/alpha/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/alpha/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/api#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/arm/include/isc/atomic.h#2 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/hmacsha.c#2 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/ia64/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/ia64/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/include/isc/platform.h.in#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/include/isc/string.h#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/mem.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/mips/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/mips/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/mips/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/noatomic/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/noatomic/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/powerpc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/powerpc/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/powerpc/include/isc/atomic.h#2 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/sparc64/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/sparc64/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/timer.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/unix/ifiter_getifaddrs.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/unix/ifiter_ioctl.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/unix/net.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/unix/socket.c#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/unix/syslog.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_32/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_32/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_64/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_64/include/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in#1 branch .. //depot/projects/hammer/contrib/bind9/lib/isccc/symtab.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/isccfg/api#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/api#6 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/context.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/getaddrinfo.c#5 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/getipnode.c#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/lwres_gnba.c#3 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_buffer.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_config.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_context.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_gabn.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_gai_strerror.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_gethostent.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_getipnode.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_getnameinfo.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_gnba.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_hstrerror.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_inetntop.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_noop.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_packet.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/lib/lwres/man/lwres_resutil.docbook#4 integrate .. //depot/projects/hammer/contrib/bind9/make/rules.in#5 integrate .. //depot/projects/hammer/contrib/bind9/version#9 integrate .. //depot/projects/hammer/include/assert.h#2 integrate .. //depot/projects/hammer/lib/bind/bind/Makefile#7 integrate .. //depot/projects/hammer/lib/bind/bind/config.h#6 integrate .. //depot/projects/hammer/lib/bind/bind/port_before.h#5 integrate .. //depot/projects/hammer/lib/bind/config.h#8 integrate .. //depot/projects/hammer/lib/bind/config.mk#11 integrate .. //depot/projects/hammer/lib/bind/isc/isc/platform.h#5 integrate .. //depot/projects/hammer/lib/bind/lwres/Makefile#8 integrate .. //depot/projects/hammer/lib/csu/common/crtbrand.c#4 integrate .. //depot/projects/hammer/lib/libc/amd64/Makefile.inc#7 integrate .. //depot/projects/hammer/lib/libc/gdtoa/_ldtoa.c#4 integrate .. //depot/projects/hammer/lib/libc/gdtoa/machdep_ldisQ.c#3 integrate .. //depot/projects/hammer/lib/libc/gdtoa/machdep_ldisx.c#3 integrate .. //depot/projects/hammer/lib/libc/gen/closedir.c#4 integrate .. //depot/projects/hammer/lib/libc/gen/readdir.c#4 integrate .. //depot/projects/hammer/lib/libc/gen/seekdir.c#3 integrate .. //depot/projects/hammer/lib/libc/gen/telldir.c#3 integrate .. //depot/projects/hammer/lib/libc/i386/Makefile.inc#3 integrate .. //depot/projects/hammer/lib/libc/ia64/Makefile.inc#6 integrate .. //depot/projects/hammer/lib/libc/nameser/ns_parse.c#3 integrate .. //depot/projects/hammer/lib/libc/resolv/res_data.c#4 integrate .. //depot/projects/hammer/lib/libc/resolv/res_init.c#5 integrate .. //depot/projects/hammer/lib/libc/sparc64/Makefile.inc#6 integrate .. //depot/projects/hammer/lib/libkse/arch/ia64/include/pthread_md.h#2 integrate .. //depot/projects/hammer/lib/libkse/arch/powerpc/include/pthread_md.h#3 integrate .. //depot/projects/hammer/lib/libpmc/pmc.3#13 integrate .. //depot/projects/hammer/lib/libpmc/pmclog.c#5 integrate .. //depot/projects/hammer/lib/libpmc/pmclog.h#4 integrate .. //depot/projects/hammer/libexec/rtld-elf/sparc64/rtld_machdep.h#8 integrate .. //depot/projects/hammer/share/man/man9/Makefile#77 integrate .. //depot/projects/hammer/share/man/man9/stack.9#3 integrate .. //depot/projects/hammer/sys/amd64/amd64/db_trace.c#40 integrate .. //depot/projects/hammer/sys/amd64/amd64/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/amd64/conf/GENERIC#101 integrate .. //depot/projects/hammer/sys/amd64/conf/NOTES#105 integrate .. //depot/projects/hammer/sys/amd64/include/stack.h#1 branch .. //depot/projects/hammer/sys/arm/arm/db_trace.c#13 integrate .. //depot/projects/hammer/sys/arm/arm/nexus_io.c#7 delete .. //depot/projects/hammer/sys/arm/arm/nexus_io_asm.S#4 delete .. //depot/projects/hammer/sys/arm/arm/pmap.c#45 integrate .. //depot/projects/hammer/sys/arm/arm/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/arm/conf/AVILA#6 integrate .. //depot/projects/hammer/sys/arm/conf/BWCT#2 integrate .. //depot/projects/hammer/sys/arm/conf/CRB#3 integrate .. //depot/projects/hammer/sys/arm/conf/EP80219#4 integrate .. //depot/projects/hammer/sys/arm/conf/HL200#2 integrate .. //depot/projects/hammer/sys/arm/conf/IQ31244#14 integrate .. //depot/projects/hammer/sys/arm/conf/KB920X#6 integrate .. //depot/projects/hammer/sys/arm/conf/SIMICS#11 integrate .. //depot/projects/hammer/sys/arm/conf/SKYEYE#4 integrate .. //depot/projects/hammer/sys/arm/include/asmacros.h#7 integrate .. //depot/projects/hammer/sys/arm/include/atomic.h#19 integrate .. //depot/projects/hammer/sys/arm/include/stack.h#1 branch .. //depot/projects/hammer/sys/arm/sa11x0/files.sa11x0#2 integrate .. //depot/projects/hammer/sys/compat/ndis/ndis_var.h#27 integrate .. //depot/projects/hammer/sys/compat/ndis/ntoskrnl_var.h#26 integrate .. //depot/projects/hammer/sys/compat/ndis/subr_ndis.c#43 integrate .. //depot/projects/hammer/sys/compat/ndis/subr_ntoskrnl.c#46 integrate .. //depot/projects/hammer/sys/conf/NOTES#130 integrate .. //depot/projects/hammer/sys/conf/files#165 integrate .. //depot/projects/hammer/sys/conf/files.amd64#99 integrate .. //depot/projects/hammer/sys/conf/files.arm#11 integrate .. //depot/projects/hammer/sys/conf/files.i386#85 integrate .. //depot/projects/hammer/sys/conf/files.ia64#41 integrate .. //depot/projects/hammer/sys/conf/files.pc98#64 integrate .. //depot/projects/hammer/sys/conf/files.powerpc#25 integrate .. //depot/projects/hammer/sys/conf/files.sparc64#42 integrate .. //depot/projects/hammer/sys/conf/files.sun4v#5 integrate .. //depot/projects/hammer/sys/conf/options#117 integrate .. //depot/projects/hammer/sys/dev/amr/amr.c#36 integrate .. //depot/projects/hammer/sys/dev/amr/amr_cam.c#19 integrate .. //depot/projects/hammer/sys/dev/amr/amr_pci.c#25 integrate .. //depot/projects/hammer/sys/dev/if_ndis/if_ndis.c#55 integrate .. //depot/projects/hammer/sys/dev/if_ndis/if_ndis_pci.c#14 integrate .. //depot/projects/hammer/sys/dev/if_ndis/if_ndisvar.h#21 integrate .. //depot/projects/hammer/sys/dev/re/if_re.c#53 integrate .. //depot/projects/hammer/sys/dev/si/si_pci.c#10 integrate .. //depot/projects/hammer/sys/dev/snp/snp.c#24 integrate .. //depot/projects/hammer/sys/dev/sound/pci/hda/hdac.c#13 integrate .. //depot/projects/hammer/sys/dev/sound/pcm/channel.c#26 integrate .. //depot/projects/hammer/sys/dev/usb/if_zyd.c#7 integrate .. //depot/projects/hammer/sys/i386/conf/GENERIC#59 integrate .. //depot/projects/hammer/sys/i386/conf/NOTES#95 integrate .. //depot/projects/hammer/sys/i386/i386/db_trace.c#23 integrate .. //depot/projects/hammer/sys/i386/i386/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/i386/include/stack.h#1 branch .. //depot/projects/hammer/sys/ia64/conf/GENERIC#31 integrate .. //depot/projects/hammer/sys/ia64/ia64/db_machdep.c#6 integrate .. //depot/projects/hammer/sys/ia64/ia64/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/kern/kern_descrip.c#71 integrate .. //depot/projects/hammer/sys/kern/kern_linker.c#32 integrate .. //depot/projects/hammer/sys/kern/kern_lock.c#32 integrate .. //depot/projects/hammer/sys/kern/kern_proc.c#62 integrate .. //depot/projects/hammer/sys/kern/subr_stack.c#4 integrate .. //depot/projects/hammer/sys/kern/vfs_bio.c#79 integrate .. //depot/projects/hammer/sys/modules/amr/Makefile#4 integrate .. //depot/projects/hammer/sys/netinet/ip_input.c#70 integrate .. //depot/projects/hammer/sys/pc98/conf/GENERIC#47 integrate .. //depot/projects/hammer/sys/pc98/include/stack.h#1 branch .. //depot/projects/hammer/sys/pci/xrpu.c#14 delete .. //depot/projects/hammer/sys/powerpc/conf/GENERIC#34 integrate .. //depot/projects/hammer/sys/powerpc/include/stack.h#1 branch .. //depot/projects/hammer/sys/powerpc/powerpc/db_trace.c#14 integrate .. //depot/projects/hammer/sys/powerpc/powerpc/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/sparc64/conf/GENERIC#56 integrate .. //depot/projects/hammer/sys/sparc64/include/stack.h#1 branch .. //depot/projects/hammer/sys/sparc64/pci/psycho.c#37 integrate .. //depot/projects/hammer/sys/sparc64/sparc64/db_trace.c#14 integrate .. //depot/projects/hammer/sys/sparc64/sparc64/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/sun4v/conf/GENERIC#7 integrate .. //depot/projects/hammer/sys/sun4v/include/stack.h#1 branch .. //depot/projects/hammer/sys/sun4v/sun4v/db_trace.c#2 integrate .. //depot/projects/hammer/sys/sun4v/sun4v/stack_machdep.c#1 branch .. //depot/projects/hammer/sys/sys/elf_common.h#9 integrate .. //depot/projects/hammer/sys/sys/linker.h#20 integrate .. //depot/projects/hammer/sys/sys/pmc.h#9 integrate .. //depot/projects/hammer/sys/sys/pmclog.h#4 integrate .. //depot/projects/hammer/sys/sys/stack.h#3 integrate .. //depot/projects/hammer/sys/sys/sysctl.h#37 integrate .. //depot/projects/hammer/sys/sys/user.h#23 integrate .. //depot/projects/hammer/sys/sys/xrpuio.h#3 delete .. //depot/projects/hammer/sys/ufs/ffs/ffs_alloc.c#35 integrate .. //depot/projects/hammer/sys/vm/redzone.c#2 integrate .. //depot/projects/hammer/sys/vm/vm_page.c#65 integrate .. //depot/projects/hammer/tools/regression/lib/libc/stdio/test-printfloat.c#9 integrate .. //depot/projects/hammer/tools/regression/lib/libc/stdio/test-scanfloat.c#6 integrate .. //depot/projects/hammer/usr.bin/Makefile#55 integrate .. //depot/projects/hammer/usr.bin/procstat/Makefile#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat.1#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat.h#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_args.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_basic.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_bin.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_cred.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_files.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_kstack.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_threads.c#1 branch .. //depot/projects/hammer/usr.bin/procstat/procstat_vm.c#1 branch .. //depot/projects/hammer/usr.sbin/pmcstat/pmcstat_log.c#8 integrate .. //depot/projects/hammer/usr.sbin/zic/zic.c#5 integrate Differences ... ==== //depot/projects/hammer/contrib/bind9/CHANGES#9 (text+ko) ==== @@ -1,5 +1,117 @@ - --- 9.4.1-P1 released --- + --- 9.4.2 released --- + --- 9.4.2rc2 released --- + +2259. [bug] Reverse incorrect LIBINTERFACE bump of libisc + in 9.4.2rc1. Applications built against 9.4.2rc1 + will need to be rebuilt. + +2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken. + [RT #17241] + +2257. [bug] win32: Use the full path to vcredist_x86.exe when + calling it. [RT #17222] + +2256. [bug] win32: Correctly register the installation location of + bindevt.dll. [RT #17159] + +2255. [bug] L.ROOT-SERVERS.NET is now 199.7.83.42. + +2254. [bug] timer.c:dispatch() failed to lock timer->lock + when reading timer->idle allowing it to see + intermediate values as timer->idle was reset by + isc_timer_touch(). [RT #17243] + + --- 9.4.2rc1 released --- + +2251. [doc] Update memstatistics-file documentation to reflect + reality. Note there is behaviour change for BIND 9.5. + [RT #17113] + +2249. [bug] Only set Authentic Data bit if client requested + DNSSEC, per RFC 3655 [RT #17175] + +2248. [cleanup] Fix several errors reported by Coverity. [RT #17160] + +2245. [bug] Validating lack of DS records at trust anchors wasn't + working. [RT #17151] + +2238. [bug] It was possible to trigger a REQUIRE when a + validation was cancelled. [RT #17106] + +2237. [bug] libbind: res_init() was not thread aware. [RT #17123] + +2236. [bug] dnssec-signzone failed to preserve the case of + of wildcard owner names. [RT #17085] + +2235. [bug] was not being installed. [RT #17135] + +2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134] + +2232. [bug] dns_adb_findaddrinfo() could fail and return + ISC_R_SUCCESS. [RT #17137] + +2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken. + [RT #17088] + +2230. [bug] We could INSIST reading a corrupted journal. + [RT #17132] + +2228. [contrib] contrib: Change 2188 was incomplete. + +2227. [cleanup] Tidied up the FAQ. [RT #17121] + +2225. [bug] More support for systems with no IPv4 addresses. + [RT #17111] + +2224. [bug] Defer journal compaction if a xfrin is in progress. + [RT #17119] + +2223. [bug] Make a new journal when compacting. [RT #17119] + +2221. [bug] Set the event result code to reflect the actual + record returned to caller when a cache update is + rejected due to a more credible answer existing. + [RT #17017] + +2220. [bug] win32: Address a race condition in final shutdown of + the Windows socket code. [RT #17028] + +2219. [bug] Apply zone consistancy checks to additions, not + removals, when updating. [RT #17049] + +2218. [bug] Remove unnecessary REQUIRE from dns_validator_create(). + [RT #16976] + +2216. [cleanup] Fix a number of errors reported by Coverity. + [RT #17094] + +2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094] + +2214. [bug] Deregister OpenSSL lock callback when cleaning + up. Reorder OpenSSL cleanup so that RAND_cleanup() + is called before the locks are destroyed. [RT #17098] + +2213. [bug] SIG0 diagnostic failure messages were looking at the + wrong status code. [RT #17101] + +2212. [func] 'host -m' now causes memory statistics and active + memory to be printed at exit. [RT 17028] + +2210. [bug] Deleting class specific records via UPDATE could + fail. [RT #17074] + +2209. [port] osx: linking against user supplied static OpenSSL + libraries failed as the system ones were still being + found. [RT #17078] + +2208. [port] win32: make sure both build methods produce the + same output. [RT #17058] + +2207. [port] Some implementations of getaddrinfo() fail to set + ai_canonname correctly. [RT #17061] + + --- 9.4.2b1 released --- 2206. [security] "allow-query-cache" and "allow-recursion" now cross inherit from each other. @@ -16,12 +128,32 @@ [RT #16987] +2205. [bug] libbind: change #2119 broke thread support. [RT #16982] + 2203. [security] Query id generation was cryptographically weak. [RT # 16915] 2202. [security] The default acls for allow-query-cache and allow-recursion were not being applied. [RT #16960] +2200. [bug] The search for cached NSEC records was stopping to + early leading to excessive DLV queries. [RT #16930] + +2199. [bug] win32: don't call WSAStartup() while loading dlls. + [RT #16911] + +2198. [bug] win32: RegCloseKey() could be called when + RegOpenKeyEx() failed. [RT #16911] + +2197. [bug] Add INSIST to catch negative responses which are + not setting the event result code appropriately. + [RT #16909] + +2196. [port] win32: yield processor while waiting for once to + to complete. [RT #16958] + +2194. [bug] Close journal before calling 'done' in xfrin.c. + 2193. [port] win32: BINDInstall.exe is now linked statically. [RT #16906] @@ -29,6 +161,145 @@ Studio's redistributable dlls if building with Visual Stdio 2005 or later. +2189. [bug] Handle socket() returning EINTR. [RT #15949] + +2188. [contrib] queryperf: autoconf changes to make the search for + libresolv or libbind more robust. [RT #16299] + +2187. [bug] query_addds(), query_addwildcardproof() and + query_addnxrrsetnsec() should take a version + arguement. [RT #16368] + +2186. [port] cygwin: libbind: check for struct sockaddr_storage + independently of IPv6. [RT #16482] + +2185. [port] sunos: libbind: check for ssize_t, memmove() and + memchr(). [RT #16463] + +2183. [bug] dnssec-signzone didn't handle offline private keys + well. [RT #16832] + +2182. [bug] dns_dispatch_createtcp() and dispatch_createudp() + could return ISC_R_SUCCESS when they ran out of + memory. [RT #16365] + +2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462] + +2180. [cleanup] Remove bit test from 'compress_test' as they + are no longer needed. [RT #16497] + +2178. [bug] 'rndc reload' of a slave or stub zone resulted in + a reference leak. [RT #16867] + +2177. [bug] Array bounds overrun on read (rcodetext) at + debug level 10+. [RT #16798] + +2176. [contrib] dbus update to handle race condition during + initialisation (Bugzilla 235809). [RT #16842] + +2175. [bug] win32: windows broadcast condition variable support + was broken. [RT #16592] + +2174. [bug] I/O errors should always be fatal when reading + master files. [RT #16825] + +2173. [port] win32: When compiling with MSVS 2005 SP1 we also + need to ship Microsoft.VC80.MFCLOC. + +2171. [bug] Handle breaks in DNSSEC trust chains where the parent + servers are not DS aware (DS queries to the parent + return a referral to the child). + +2170. [func] Add acache processing to test suite. [RT #16711] + +2169. [bug] host, nslookup: when reporting NXDOMAIN report the + given name and not the last name searched for. + [RT #16763] + +2168. [bug] nsupdate: in non-interactive mode treat syntax errors + as fatal errors. [RT #16785] + +2167. [bug] When re-using a automatic zone named failed to + attach it to the new view. [RT #16786] + +2166. [bug] When running in batch mode, dig could misinterpret + a server address as a name to be looked up, causing + unexpected output. [RT #16743] + +2164. [bug] The code to determine how named-checkzone / + named-compilezone was called failed under windows. + [RT #16764] + +2162. [func] Allow "rrset-order fixed" to be disabled at compile + time. [RT #16665] + +2161. [bug] 'rndc flush' could report a false success. [RT #16698] + +2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned + from getifaddrs(). [RT #16708] + +2159. [bug] Array bounds overrun in acache processing. [RT #16710] + +2158. [bug] ns_client_isself() failed to initialise key + leading to a REQUIRE failure. [RT #16688] + +2156. [bug] Fix node reference leaks in lookup.c:lookup_find(), + resolver.c:validated() and resolver.c:cache_name(). + Fix a memory leak in rbtdb.c:free_noqname(). + Make lookup.c:lookup_find() robust against + event leaks. [RT #16685] + +2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com. + [RT #16694] + +2153. [bug] nsupdate could leak memory. [RT #16691] + +2152. [cleanup] Use sizeof(buf) instead of fixed number in + dighost.c:get_trusted_key(). [RT #16678] + +2151. [bug] Missing newline in usage message for journalprint. + [RT #16679] + +2150. [bug] 'rrset-order cyclic' uniformly distribute the + starting point for the first response for a given + RRset. [RT #16655] + +2149. [bug] isc_mem_checkdestroyed() failed to abort on + if there were still active memory contexts. + [RT #16672] + +2147. [bug] libbind: remove potential buffer overflow from + hmac_link.c. [RT #16437] + +2146. [cleanup] Silence Linux's spurious "obsolete setsockopt + SO_BSDCOMPAT" message. [RT #16641] + +2145. [bug] Check DS/DLV digest lengths for known digests. + [RT #16622] + +2144. [cleanup] Suppress logging of SERVFAIL from forwarders. + [RT #16619] + +2143. [bug] We failed to restart the IPv6 client when the + kernel failed to return the destination the + packet was sent to. [RT #16613] + +2142. [bug] Handle master files with a modification time that + matches the epoch. [RT# 16612] + +2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN + equivalent of LDH checks). [RT #16609] + +2140. [bug] libbind: missing unlock on pthread_key_create() + failures. [RT #16654] + +2139. [bug] dns_view_find() was being called with wrong type + in adb.c. [RT #16670] + +2119. [compat] libbind: allow res_init() to succeed enough to + return the default domain even if it was unable + to allocate memory. + --- 9.4.1 released --- 2172. [bug] query_addsoa() was being called with a non zone db. @@ -524,7 +795,7 @@ hex strings with comments. [RT #15814] 1974. [doc] List each of the zone types and associated zone - options seperately in the ARM. + options separately in the ARM. 1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606] @@ -551,7 +822,7 @@ 1965. [func] Suppress spurious "recusion requested but not available" warning with 'dig +qr'. [RT #15780]. -1964. [func] Seperate out MX and SRV to CNAME checks. [RT #15723] +1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723] 1963. [port] Tru64 4.0E doesn't support send() and recv(). [RT #15586] @@ -771,7 +1042,7 @@ 1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and ISC_NETADDR_FORMATSIZE to allow for scope details. -1897. [func] x86 and x86_64 now have seperate atomic locking +1897. [func] x86 and x86_64 now have separate atomic locking implementations. 1896. [bug] Recursive clients soft quota support wasn't working @@ -825,7 +1096,7 @@ [RT #14892] 1878. [func] Detect duplicates of UDP queries we are recursing on - and drop them. New stats category "duplicates". + and drop them. New stats category "duplicate". [RT #2471] 1877. [bug] Fix unreasonably low quantum on call to @@ -1769,7 +2040,7 @@ [RT #6427] 1555. [func] 'rrset-order cyclic' no longer has a random starting - point. [RT #7572] + point per query. [RT #7572] 1554. [bug] dig, host, nslookup failed when no nameservers were specified in /etc/resolv.conf. [RT #8232] @@ -6250,7 +6521,7 @@ and has been removed. 170. [cleanup] Remove inter server consistancy checks from zone, - these should return as a seperate module in 9.1. + these should return as a separate module in 9.1. dns_zone_checkservers(), dns_zone_checkparents(), dns_zone_checkchildren(), dns_zone_checkglue(). ==== //depot/projects/hammer/contrib/bind9/COPYRIGHT#5 (text+ko) ==== @@ -1,7 +1,7 @@ Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") Copyright (C) 1996-2003 Internet Software Consortium. -Permission to use, copy, modify, and distribute this software for any +Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. @@ -13,7 +13,7 @@ OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. -$Id: COPYRIGHT,v 1.9.18.3 2007/01/08 02:41:59 marka Exp $ +$Id: COPYRIGHT,v 1.9.18.4 2007/08/28 07:19:54 tbox Exp $ Portions Copyright (C) 1996-2001 Nominum, Inc. ==== //depot/projects/hammer/contrib/bind9/FAQ#7 (text+ko) ==== @@ -4,97 +4,71 @@ Copyright © 2000-2003 Internet Software Consortium. -------------------------------------------------------------------------------- +----------------------------------------------------------------------- -Q: Why doesn't -u work on Linux 2.2.x when I build with --enable-threads? +1. Compilation and Installation Questions -A: Linux threads do not fully implement the Posix threads (pthreads) standard. In - particular, setuid() operates only on the current thread, not the full process. - Because of this limitation, BIND 9 cannot use setuid() on Linux as it can on - all other supported platforms. setuid() cannot be called before creating - threads, since the server does not start listening on reserved ports until - after threads have started. +Q: I'm trying to compile BIND 9, and "make" is failing due to files not + being found. Why? - In the 2.2.18 or 2.3.99-pre3 and newer kernels, the ability to preserve - capabilities across a setuid() call is present. This allows BIND 9 to call - setuid() early, while retaining the ability to bind reserved ports. This is a - Linux-specific hack. +A: Using a parallel or distributed "make" to build BIND 9 is not + supported, and doesn't work. If you are using one of these, use normal + make or gmake instead. - On a 2.2 kernel, BIND 9 does drop many root privileges, so it should be less of - a security risk than a root process that has not dropped privileges. +Q: Isn't "make install" supposed to generate a default named.conf? - If Linux threads ever work correctly, this restriction will go away. +A: Short Answer: No. - Configuring BIND9 with the --disable-threads option (the default) causes a - non-threaded version to be built, which will allow -u to be used. + Long Answer: There really isn't a default configuration which fits any + site perfectly. There are lots of decisions that need to be made and + there is no consensus on what the defaults should be. For example + FreeBSD uses /etc/namedb as the location where the configuration files + for named are stored. Others use /var/named. -Q: Why do I get the following errors: + What addresses to listen on? For a laptop on the move a lot you may + only want to listen on the loop back interfaces. - general: errno2result.c:109: unexpected error: - general: unable to convert errno to isc_result: 14: Bad address - client: UDP client handler shutting down due to fatal receive error: unexpected error + Who do you offer recursive service to? Is there are firewall to + consider? If so is it stateless or stateful. Are you directly on the + Internet? Are you on a private network? Are you on a NAT'd network? The + answers to all these questions change how you configure even a caching + name server. -A: This is the result of a Linux kernel bug. +2. Configuration and Setup Questions - See: http://marc.theaimsgroup.com/?l=linux-netdev&m=113081708031466&w=2 +Q: Why does named log the warning message "no TTL specified - using SOA + MINTTL instead"? -Q: Why does named log the warning message "no TTL specified - using SOA MINTTL - instead"? - -A: Your zone file is illegal according to RFC1035. It must either have a line - like: +A: Your zone file is illegal according to RFC1035. It must either have a + line like: $TTL 86400 - at the beginning, or the first record in it must have a TTL field, like the - "84600" in this example: + at the beginning, or the first record in it must have a TTL field, like + the "84600" in this example: example.com. 86400 IN SOA ns hostmaster ( 1 3600 1800 1814400 3600 ) -Q: Why do I see 5 (or more) copies of named on Linux? +Q: Why do I get errors like "dns_zone_load: zone foo/IN: loading master + file bar: ran out of space"? -A: Linux threads each show up as a process under ps. The approximate number of - threads running is n+4, where n is the number of CPUs. Note that the amount of - memory used is not cumulative; if each process is using 10M of memory, only a - total of 10M is used. - - Newer versions of Linux's ps command hide the individual threads and require -L - to display them. - -Q: Why does BIND 9 log "permission denied" errors accessing its configuration - files or zones on my Linux system even though it is running as root? +A: This is often caused by TXT records with missing close quotes. Check + that all TXT records containing quoted strings have both open and close + quotes. -A: On Linux, BIND 9 drops most of its root privileges on startup. This including - the privilege to open files owned by other users. Therefore, if the server is - running as root, the configuration files and zone files should also be owned by - root. - -Q: Why do I get errors like "dns_zone_load: zone foo/IN: loading master file bar: - ran out of space"? - -A: This is often caused by TXT records with missing close quotes. Check that all - TXT records containing quoted strings have both open and close quotes. - -Q: How do I produce a usable core file from a multi-threaded named on Linux? - -A: If the Linux kernel is 2.4.7 or newer, multi-threaded core dumps are usable - (that is, the correct thread is dumped). Otherwise, if using a 2.2 kernel, - apply the kernel patch found in contrib/linux/coredump-patch and rebuild the - kernel. This patch will cause multi-threaded programs to dump the correct - thread. - Q: How do I restrict people from looking up the server version? -A: Put a "version" option containing something other than the real version in the - "options" section of named.conf. Note doing this will not prevent attacks and - may impede people trying to diagnose problems with your server. Also it is - possible to "fingerprint" nameservers to determine their version. +A: Put a "version" option containing something other than the real version + in the "options" section of named.conf. Note doing this will not + prevent attacks and may impede people trying to diagnose problems with + your server. Also it is possible to "fingerprint" nameservers to + determine their version. Q: How do I restrict only remote users from looking up the server version? -A: The following view statement will intercept lookups as the internal view that - holds the version information will be matched last. The caveats of the previous - answer still apply, of course. +A: The following view statement will intercept lookups as the internal + view that holds the version information will be matched last. The + caveats of the previous answer still apply, of course. view "chaos" chaos { match-clients { ; }; @@ -105,121 +79,47 @@ }; }; -Q: What do "no source of entropy found" or "could not open entropy source foo" - mean? +Q: What do "no source of entropy found" or "could not open entropy source + foo" mean? -A: The server requires a source of entropy to perform certain operations, mostly - DNSSEC related. These messages indicate that you have no source of entropy. On - systems with /dev/random or an equivalent, it is used by default. A source of - entropy can also be defined using the random-device option in named.conf. +A: The server requires a source of entropy to perform certain operations, + mostly DNSSEC related. These messages indicate that you have no source + of entropy. On systems with /dev/random or an equivalent, it is used by + default. A source of entropy can also be defined using the + random-device option in named.conf. -Q: I installed BIND 9 and restarted named, but it's still BIND 8. Why? +Q: I'm trying to use TSIG to authenticate dynamic updates or zone + transfers. I'm sure I have the keys set up correctly, but the server is + rejecting the TSIG. Why? -A: BIND 9 is installed under /usr/local by default. BIND 8 is often installed - under /usr. Check that the correct named is running. - -Q: I'm trying to use TSIG to authenticate dynamic updates or zone transfers. I'm - sure I have the keys set up correctly, but the server is rejecting the TSIG. - Why? +A: This may be a clock skew problem. Check that the the clocks on the + client and server are properly synchronised (e.g., using ntp). -A: This may be a clock skew problem. Check that the the clocks on the client and - server are properly synchronised (e.g., using ntp). - -Q: I'm trying to compile BIND 9, and "make" is failing due to files not being - found. Why? - -A: Using a parallel or distributed "make" to build BIND 9 is not supported, and - doesn't work. If you are using one of these, use normal make or gmake instead. - -Q: I have a BIND 9 master and a BIND 8.2.3 slave, and the master is logging error - messages like "notify to 10.0.0.1#53 failed: unexpected end of input". What's - wrong? - -A: This error message is caused by a known bug in BIND 8.2.3 and is fixed in BIND - 8.2.4. It can be safely ignored - the notify has been acted on by the slave - despite the error message. - -Q: I keep getting log messages like the following. Why? - - Dec 4 23:47:59 client 10.0.0.1#1355: updating zone 'example.com/IN': update - failed: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET) - -A: DNS updates allow the update request to test to see if certain conditions are - met prior to proceeding with the update. The message above is saying that - conditions were not met and the update is not proceeding. See doc/rfc/ - rfc2136.txt for more details on prerequisites. - -Q: I keep getting log messages like the following. Why? - - Jun 21 12:00:00.000 client 10.0.0.1#1234: update denied - -A: Someone is trying to update your DNS data using the RFC2136 Dynamic Update - protocol. Windows 2000 machines have a habit of sending dynamic update requests - to DNS servers without being specifically configured to do so. If the update - requests are coming from a Windows 2000 machine, see http:// - support.microsoft.com/support/kb/articles/q246/8/04.asp for information about - how to turn them off. - Q: I see a log message like the following. Why? couldn't open pid file '/var/run/named.pid': Permission denied -A: You are most likely running named as a non-root user, and that user does not - have permission to write in /var/run. The common ways of fixing this are to - create a /var/run/named directory owned by the named user and set pid-file to " - /var/run/named/named.pid", or set pid-file to "named.pid", which will put the - file in the directory specified by the directory option (which, in this case, - must be writable by the named user). +A: You are most likely running named as a non-root user, and that user + does not have permission to write in /var/run. The common ways of + fixing this are to create a /var/run/named directory owned by the named + user and set pid-file to "/var/run/named/named.pid", or set pid-file to + "named.pid", which will put the file in the directory specified by the + directory option (which, in this case, must be writable by the named + user). -Q: When I do a "dig . ns", many of the A records for the root servers are missing. - Why? +Q: I can query the nameserver from the nameserver but not from other + machines. Why? -A: This is normal and harmless. It is a somewhat confusing side effect of the way - BIND 9 does RFC2181 trust ranking and of the efforts BIND 9 makes to avoid - promoting glue into answers. +A: This is usually the result of the firewall configuration stopping the + queries and / or the replies. - When BIND 9 first starts up and primes its cache, it receives the root server - addresses as additional data in an authoritative response from a root server, - and these records are eligible for inclusion as additional data in responses. - Subsequently it receives a subset of the root server addresses as additional - data in a non-authoritative (referral) response from a root server. This causes - the addresses to now be considered non-authoritative (glue) data, which is not - eligible for inclusion in responses. +Q: How can I make a server a slave for both an internal and an external + view at the same time? When I tried, both views on the slave were + transferred from the same view on the master. - The server does have a complete set of root server addresses cached at all - times, it just may not include all of them as additional data, depending on - whether they were last received as answers or as glue. You can always look up - the addresses with explicit queries like "dig a.root-servers.net A". - -Q: Zone transfers from my BIND 9 master to my Windows 2000 slave fail. Why? +A: You will need to give the master and slave multiple IP addresses and + use those to make sure you reach the correct view on the other machine. -A: This may be caused by a bug in the Windows 2000 DNS server where DNS messages - larger than 16K are not handled properly. This can be worked around by setting - the option "transfer-format one-answer;". Also check whether your zone contains - domain names with embedded spaces or other special characters, like "John\ - 032Doe\213s\032Computer", since such names have been known to cause Windows - 2000 slaves to incorrectly reject the zone. - -Q: Why don't my zones reload when I do an "rndc reload" or SIGHUP? - >>> TRUNCATED FOR MAIL (1000 lines) <<<