Date: Sat, 28 Jul 2007 22:08:56 GMT From: Matt Jacob <mjacob@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 124285 for review Message-ID: <200707282208.l6SM8ulC099892@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=124285 Change 124285 by mjacob@mjexp on 2007/07/28 22:08:44 IFC Affected files ... .. //depot/projects/mjexp/contrib/bind9/CHANGES#6 integrate .. //depot/projects/mjexp/contrib/bind9/README#5 integrate .. //depot/projects/mjexp/contrib/bind9/bin/named/client.c#4 integrate .. //depot/projects/mjexp/contrib/bind9/bin/named/server.c#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM-book.xml#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch01.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch02.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch03.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch04.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch05.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch06.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch07.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch08.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch09.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch10.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.html#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.pdf#4 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.dig.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.dnssec-keygen.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.dnssec-signzone.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.host.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.named-checkconf.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.named-checkzone.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.named.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.rndc-confgen.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.rndc.conf.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/doc/arm/man.rndc.html#2 integrate .. //depot/projects/mjexp/contrib/bind9/lib/dns/dispatch.c#4 integrate .. //depot/projects/mjexp/contrib/bind9/lib/dns/include/dns/dispatch.h#3 integrate .. //depot/projects/mjexp/contrib/bind9/version#6 integrate .. //depot/projects/mjexp/etc/mtree/BSD.usr.dist#8 integrate .. //depot/projects/mjexp/etc/rc.d/netif#5 integrate .. //depot/projects/mjexp/lib/libc/net/sctp_sys_calls.c#9 integrate .. //depot/projects/mjexp/lib/libelf/elf_begin.3#2 integrate .. //depot/projects/mjexp/lib/libelf/elf_memory.3#2 integrate .. //depot/projects/mjexp/release/doc/en_US.ISO8859-1/relnotes/article.sgml#23 integrate .. //depot/projects/mjexp/share/man/man9/sysctl_ctx_init.9#2 integrate .. //depot/projects/mjexp/sys/amd64/amd64/trap.c#10 integrate .. //depot/projects/mjexp/sys/arm/arm/busdma_machdep.c#8 integrate .. //depot/projects/mjexp/sys/arm/arm/cpufunc.c#6 integrate .. //depot/projects/mjexp/sys/arm/arm/cpufunc_asm_xscale_c3.S#1 branch .. //depot/projects/mjexp/sys/arm/arm/elf_trampoline.c#6 integrate .. //depot/projects/mjexp/sys/arm/arm/identcpu.c#3 integrate .. //depot/projects/mjexp/sys/arm/arm/intr.c#6 integrate .. //depot/projects/mjexp/sys/arm/arm/pmap.c#8 integrate .. //depot/projects/mjexp/sys/arm/arm/vm_machdep.c#7 integrate .. //depot/projects/mjexp/sys/arm/conf/CRB#1 branch .. //depot/projects/mjexp/sys/arm/include/armreg.h#3 integrate .. //depot/projects/mjexp/sys/arm/include/cpufunc.h#4 integrate .. //depot/projects/mjexp/sys/arm/include/pmap.h#6 integrate .. //depot/projects/mjexp/sys/arm/include/pte.h#3 integrate .. //depot/projects/mjexp/sys/arm/xscale/i80321/i80321_pci.c#3 integrate .. //depot/projects/mjexp/sys/arm/xscale/i80321/i80321_timer.c#3 integrate .. //depot/projects/mjexp/sys/arm/xscale/i80321/i80321_wdog.c#4 integrate .. //depot/projects/mjexp/sys/arm/xscale/i80321/i80321var.h#2 integrate .. //depot/projects/mjexp/sys/arm/xscale/i80321/obio.c#2 integrate .. //depot/projects/mjexp/sys/arm/xscale/i8134x/crb_machdep.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/files.crb#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/files.i81342#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342_mcu.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342_pci.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342_space.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342reg.h#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/i81342var.h#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/obio.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/obio_space.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/obiovar.h#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/std.crb#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/std.i81342#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/uart_bus_i81342.c#1 branch .. //depot/projects/mjexp/sys/arm/xscale/i8134x/uart_cpu_i81342.c#1 branch .. //depot/projects/mjexp/sys/conf/Makefile.arm#4 integrate .. //depot/projects/mjexp/sys/contrib/pf/net/if_pfsync.c#7 integrate .. //depot/projects/mjexp/sys/dev/ath/ath_rate/amrr/amrr.c#4 integrate .. //depot/projects/mjexp/sys/dev/ath/ath_rate/onoe/onoe.c#5 integrate .. //depot/projects/mjexp/sys/dev/ce/if_ce.c#6 integrate .. //depot/projects/mjexp/sys/dev/cp/if_cp.c#6 integrate .. //depot/projects/mjexp/sys/dev/ctau/if_ct.c#6 integrate .. //depot/projects/mjexp/sys/dev/cx/if_cx.c#6 integrate .. //depot/projects/mjexp/sys/dev/em/if_em.c#10 integrate .. //depot/projects/mjexp/sys/dev/if_ndis/if_ndis.c#8 integrate .. //depot/projects/mjexp/sys/dev/re/if_re.c#15 integrate .. //depot/projects/mjexp/sys/dev/usb/ufoma.c#6 integrate .. //depot/projects/mjexp/sys/dev/usb/ukbd.c#9 integrate .. //depot/projects/mjexp/sys/dev/usb/ums.c#8 integrate .. //depot/projects/mjexp/sys/dev/usb/usbdevs#19 integrate .. //depot/projects/mjexp/sys/fs/devfs/devfs_vnops.c#12 integrate .. //depot/projects/mjexp/sys/fs/fifofs/fifo_vnops.c#5 integrate .. //depot/projects/mjexp/sys/i386/i386/trap.c#11 integrate .. //depot/projects/mjexp/sys/i386/isa/clock.c#11 integrate .. //depot/projects/mjexp/sys/kern/kern_kse.c#11 integrate .. //depot/projects/mjexp/sys/kern/kern_thread.c#14 integrate .. //depot/projects/mjexp/sys/kern/subr_bus.c#5 integrate .. //depot/projects/mjexp/sys/kern/uipc_domain.c#3 integrate .. //depot/projects/mjexp/sys/kern/uipc_usrreq.c#13 integrate .. //depot/projects/mjexp/sys/kern/vfs_mount.c#16 integrate .. //depot/projects/mjexp/sys/kern/vfs_vnops.c#8 integrate .. //depot/projects/mjexp/sys/net/bpf.c#7 integrate .. //depot/projects/mjexp/sys/net/if.c#10 integrate .. //depot/projects/mjexp/sys/net/if_bridge.c#11 integrate .. //depot/projects/mjexp/sys/net/if_bridgevar.h#6 integrate .. //depot/projects/mjexp/sys/net/if_ethersubr.c#14 integrate .. //depot/projects/mjexp/sys/net/if_lagg.c#8 integrate .. //depot/projects/mjexp/sys/net/netisr.c#3 integrate .. //depot/projects/mjexp/sys/netgraph/netgraph.h#3 integrate .. //depot/projects/mjexp/sys/netgraph/ng_bpf.c#2 integrate .. //depot/projects/mjexp/sys/netgraph/ng_eiface.c#3 integrate .. //depot/projects/mjexp/sys/netinet/ip_carp.c#7 integrate .. //depot/projects/mjexp/sys/netinet/ip_dummynet.c#5 integrate .. //depot/projects/mjexp/sys/netinet/ip_fw2.c#14 integrate .. //depot/projects/mjexp/sys/netinet/ip_mroute.c#11 integrate .. //depot/projects/mjexp/sys/netinet/sctp_asconf.c#15 integrate .. //depot/projects/mjexp/sys/netinet/sctp_asconf.h#7 integrate .. //depot/projects/mjexp/sys/netinet/sctp_input.c#20 integrate .. //depot/projects/mjexp/sys/netinet/sctp_output.c#21 integrate .. //depot/projects/mjexp/sys/netinet/sctp_pcb.c#20 integrate .. //depot/projects/mjexp/sys/netinet/sctp_pcb.h#14 integrate .. //depot/projects/mjexp/sys/netinet/sctp_structs.h#16 integrate .. //depot/projects/mjexp/sys/netinet/sctp_timer.c#15 integrate .. //depot/projects/mjexp/sys/netinet/sctp_usrreq.c#19 integrate .. //depot/projects/mjexp/sys/netinet/sctputil.c#22 integrate .. //depot/projects/mjexp/sys/netinet/sctputil.h#13 integrate .. //depot/projects/mjexp/sys/netinet/tcp_input.c#20 integrate .. //depot/projects/mjexp/sys/netinet/tcp_subr.c#17 integrate .. //depot/projects/mjexp/sys/netinet/tcp_syncache.c#14 integrate .. //depot/projects/mjexp/sys/netinet/tcp_syncache.h#1 branch .. //depot/projects/mjexp/sys/netinet/tcp_var.h#12 integrate .. //depot/projects/mjexp/sys/netinet6/sctp6_usrreq.c#17 integrate .. //depot/projects/mjexp/sys/netinet6/udp6_usrreq.c#9 integrate .. //depot/projects/mjexp/sys/nfsserver/nfs_srvsubs.c#6 integrate .. //depot/projects/mjexp/sys/nfsserver/nfs_syscalls.c#8 integrate .. //depot/projects/mjexp/sys/sys/kernel.h#5 integrate .. //depot/projects/mjexp/sys/sys/mutex.h#13 integrate .. //depot/projects/mjexp/sys/sys/proc.h#21 integrate .. //depot/projects/mjexp/sys/sys/vmmeter.h#7 integrate .. //depot/projects/mjexp/sys/vm/vm_meter.c#7 integrate .. //depot/projects/mjexp/sys/vm/vm_page.c#17 integrate .. //depot/projects/mjexp/sys/vm/vnode_pager.c#6 integrate .. //depot/projects/mjexp/tools/tools/net80211/Makefile#2 integrate .. //depot/projects/mjexp/tools/tools/net80211/README#2 integrate .. //depot/projects/mjexp/tools/tools/net80211/wlandebug/Makefile#3 delete .. //depot/projects/mjexp/tools/tools/net80211/wlandebug/wlandebug.8#2 delete .. //depot/projects/mjexp/tools/tools/net80211/wlandebug/wlandebug.c#5 delete .. //depot/projects/mjexp/usr.bin/calendar/calendars/calendar.holiday#5 integrate .. //depot/projects/mjexp/usr.bin/vmstat/vmstat.c#4 integrate .. //depot/projects/mjexp/usr.sbin/Makefile#7 integrate .. //depot/projects/mjexp/usr.sbin/acpi/acpidump/acpi_user.c#3 integrate .. //depot/projects/mjexp/usr.sbin/wlandebug/Makefile#1 branch .. //depot/projects/mjexp/usr.sbin/wlandebug/wlandebug.8#1 branch .. //depot/projects/mjexp/usr.sbin/wlandebug/wlandebug.c#1 branch Differences ... ==== //depot/projects/mjexp/contrib/bind9/CHANGES#6 (text+ko) ==== @@ -1,4 +1,34 @@ + --- 9.4.1-P1 released --- + +2206. [security] "allow-query-cache" and "allow-recursion" now + cross inherit from each other. + + If allow-query-cache is not set in named.conf then + allow-recursion is used if set, otherwise allow-query + is used if set, otherwise the default (localnets; + localhost;) is used. + + If allow-recursion is not set in named.conf then + allow-query-cache is used if set, otherwise allow-query + is used if set, otherwise the default (localnets; + localhost;) is used. + + [RT #16987] + +2203. [security] Query id generation was cryptographically weak. + [RT # 16915] + +2202. [security] The default acls for allow-query-cache and + allow-recursion were not being applied. [RT #16960] + +2193. [port] win32: BINDInstall.exe is now linked statically. + [RT #16906] + +2192. [port] win32: use vcredist_x86.exe to install Visual + Studio's redistributable dlls if building with + Visual Stdio 2005 or later. + --- 9.4.1 released --- 2172. [bug] query_addsoa() was being called with a non zone db. ==== //depot/projects/mjexp/contrib/bind9/README#5 (text+ko) ==== @@ -43,6 +43,11 @@ Nominum, Inc. +BIND 9.4.1-P1 + + BIND 9.4.1-P1 is a security release, containing a fixes for a + security bugs in BIND 9.4.1. + BIND 9.4.1 BIND 9.4.1 is a security release, containing a fix for a ==== //depot/projects/mjexp/contrib/bind9/bin/named/client.c#4 (text+ko) ==== @@ -15,7 +15,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: client.c,v 1.219.18.20 2006/07/22 01:02:36 marka Exp $ */ +/* $Id: client.c,v 1.219.18.20.14.1 2007/06/26 02:58:54 marka Exp $ */ #include <config.h> @@ -1440,6 +1440,14 @@ } /* + * Hash the incoming request here as it is after + * dns_dispatch_importrecv(). + */ + dns_dispatch_hash(&client->now, sizeof(client->now)); + dns_dispatch_hash(isc_buffer_base(buffer), + isc_buffer_usedlength(buffer)); + + /* * It's a request. Parse it. */ result = dns_message_parse(client->message, buffer, 0); ==== //depot/projects/mjexp/contrib/bind9/bin/named/server.c#4 (text+ko) ==== @@ -15,7 +15,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: server.c,v 1.419.18.49 2006/12/07 05:24:19 marka Exp $ */ +/* $Id: server.c,v 1.419.18.49.12.2 2007/07/09 02:23:16 marka Exp $ */ /*! \file */ @@ -1435,12 +1435,12 @@ view->additionalfromcache = ISC_TRUE; } + /* + * Set "allow-query-cache" and "allow-recursion" acls if + * configured in named.conf. + */ CHECK(configure_view_acl(vconfig, config, "allow-query-cache", actx, ns_g_mctx, &view->queryacl)); - if (view->queryacl == NULL) - CHECK(configure_view_acl(NULL, ns_g_defaults, - "allow-query-cache", actx, - ns_g_mctx, &view->queryacl)); if (strcmp(view->name, "_bind") != 0) CHECK(configure_view_acl(vconfig, config, "allow-recursion", @@ -1460,11 +1460,29 @@ "active%s%s", forview, viewname); /* - * Set default "allow-recursion" acl. + * "allow-query-cache" inherits from "allow-recursion" if set, + * otherwise from "allow-query" if set. + * "allow-recursion" inherits from "allow-query-cache" if set, + * otherwise from "allow-query" if set. + */ + if (view->queryacl == NULL && view->recursionacl != NULL) + dns_acl_attach(view->recursionacl, &view->queryacl); + if (view->queryacl == NULL) + CHECK(configure_view_acl(vconfig, config, "allow-query", + actx, ns_g_mctx, &view->queryacl)); + if (view->recursionacl == NULL && view->queryacl != NULL) + dns_acl_attach(view->queryacl, &view->recursionacl); + + /* + * Set default "allow-recursion" and "allow-query-cache" acls. */ if (view->recursionacl == NULL && view->recursion) - CHECK(configure_view_acl(NULL, ns_g_defaults, "allow-recursion", + CHECK(configure_view_acl(NULL, ns_g_config, "allow-recursion", actx, ns_g_mctx, &view->recursionacl)); + if (view->queryacl == NULL) + CHECK(configure_view_acl(NULL, ns_g_config, + "allow-query-cache", actx, + ns_g_mctx, &view->queryacl)); CHECK(configure_view_acl(vconfig, config, "sortlist", actx, ns_g_mctx, &view->sortlist)); ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM-book.xml#4 (text+ko) ==== @@ -18,7 +18,7 @@ - PERFORMANCE OF THIS SOFTWARE. --> -<!-- File: $Id: Bv9ARM-book.xml,v 1.241.18.66 2007/01/29 23:57:20 marka Exp $ --> +<!-- File: $Id: Bv9ARM-book.xml,v 1.241.18.66.10.1 2007/07/09 02:23:16 marka Exp $ --> <book xmlns:xi="http://www.w3.org/2001/XInclude"> <title>BIND 9 Administrator Reference Manual</title> @@ -5827,32 +5827,29 @@ <listitem> <para> Specifies which hosts are allowed to get answers - from the cache. The default is the builtin acls - <command>localnets</command> and - <command>localhost</command>. + from the cache. If <command>allow-query-cache</command> + is not set then <command>allow-recursion</command> + is used if set, otherwise <command>allow-query</command> + is used if set, otherwise the default + (<command>localnets;</command> + <command>localhost;</command>) is used. </para> - <para> - The way to set query access to the cache is now - via <command>allow-query-cache</command>. - This differs from earlier versions which used - <command>allow-query</command>. - </para> </listitem> </varlistentry> <varlistentry> <term><command>allow-recursion</command></term> <listitem> - <para> + <para> Specifies which hosts are allowed to make recursive - queries through this server. If not specified, - the default is to allow recursive queries from - the builtin acls <command>localnets</command> and - <command>localhost</command>. - Note that disallowing recursive queries for a - host does not prevent the host from retrieving - data that is already in the server's cache. - </para> + queries through this server. If + <command>allow-recursion</command> is not set + then <command>allow-query-cache</command> is + used if set, otherwise <command>allow-query</command> + is used if set, otherwise the default + (<command>localnets;</command> + <command>localhost;</command>) is used. + </para> </listitem> </varlistentry> ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch01.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch01.html,v 1.16.18.19 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch01.html,v 1.16.18.19.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -47,15 +47,15 @@ <dl> <dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564115">Scope of Document</a></span></dt> <dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564138">Organization of This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563473">Conventions Used in This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564746">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563472">Conventions Used in This Document</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564813">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564768">DNS Fundamentals</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564802">Domains and Domain Names</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564886">Zones</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567284">Authoritative Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567525">Caching Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567587">Name Servers in Multiple Roles</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564835">DNS Fundamentals</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564869">Domains and Domain Names</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564953">Zones</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567283">Authoritative Name Servers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567524">Caching Name Servers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567586">Name Servers in Multiple Roles</a></span></dt> </dl></dd> </dl> </div> @@ -116,7 +116,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2563473"></a>Conventions Used in This Document</h2></div></div></div> +<a name="id2563472"></a>Conventions Used in This Document</h2></div></div></div> <p> In this document, we use the following general typographic conventions: @@ -243,7 +243,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2564746"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div> +<a name="id2564813"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div> <p> The purpose of this document is to explain the installation and upkeep of the <acronym class="acronym">BIND</acronym> software @@ -253,7 +253,7 @@ </p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2564768"></a>DNS Fundamentals</h3></div></div></div> +<a name="id2564835"></a>DNS Fundamentals</h3></div></div></div> <p> The Domain Name System (DNS) is a hierarchical, distributed database. It stores information for mapping Internet host names to @@ -273,7 +273,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2564802"></a>Domains and Domain Names</h3></div></div></div> +<a name="id2564869"></a>Domains and Domain Names</h3></div></div></div> <p> The data stored in the DNS is identified by <span class="emphasis"><em>domain names</em></span> that are organized as a tree according to organizational or administrative boundaries. Each node of the tree, @@ -319,7 +319,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2564886"></a>Zones</h3></div></div></div> +<a name="id2564953"></a>Zones</h3></div></div></div> <p> To properly operate a name server, it is important to understand the difference between a <span class="emphasis"><em>zone</em></span> @@ -372,7 +372,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2567284"></a>Authoritative Name Servers</h3></div></div></div> +<a name="id2567283"></a>Authoritative Name Servers</h3></div></div></div> <p> Each zone is served by at least one <span class="emphasis"><em>authoritative name server</em></span>, @@ -389,7 +389,7 @@ </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2567307"></a>The Primary Master</h4></div></div></div> +<a name="id2567306"></a>The Primary Master</h4></div></div></div> <p> The authoritative server where the master copy of the zone data is maintained is called the @@ -409,7 +409,7 @@ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2567337"></a>Slave Servers</h4></div></div></div> +<a name="id2567336"></a>Slave Servers</h4></div></div></div> <p> The other authoritative servers, the <span class="emphasis"><em>slave</em></span> servers (also known as <span class="emphasis"><em>secondary</em></span> servers) @@ -425,7 +425,7 @@ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2567358"></a>Stealth Servers</h4></div></div></div> +<a name="id2567357"></a>Stealth Servers</h4></div></div></div> <p> Usually all of the zone's authoritative servers are listed in NS records in the parent zone. These NS records constitute @@ -460,7 +460,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2567525"></a>Caching Name Servers</h3></div></div></div> +<a name="id2567524"></a>Caching Name Servers</h3></div></div></div> <p> The resolver libraries provided by most operating systems are <span class="emphasis"><em>stub resolvers</em></span>, meaning that they are not @@ -487,7 +487,7 @@ </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2567560"></a>Forwarding</h4></div></div></div> +<a name="id2567559"></a>Forwarding</h4></div></div></div> <p> Even a caching name server does not necessarily perform the complete recursive lookup itself. Instead, it can @@ -514,7 +514,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2567587"></a>Name Servers in Multiple Roles</h3></div></div></div> +<a name="id2567586"></a>Name Servers in Multiple Roles</h3></div></div></div> <p> The <acronym class="acronym">BIND</acronym> name server can simultaneously act as ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch02.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch02.html,v 1.13.18.18 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch02.html,v 1.13.18.18.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -45,16 +45,16 @@ <div class="toc"> <p><b>Table of Contents</b></p> <dl> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567621">Hardware requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567648">CPU Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567660">Memory Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567687">Name Server Intensive Environment Issues</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567698">Supported Operating Systems</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567620">Hardware requirements</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567646">CPU Requirements</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567659">Memory Requirements</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567686">Name Server Intensive Environment Issues</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567697">Supported Operating Systems</a></span></dt> </dl> </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567621"></a>Hardware requirements</h2></div></div></div> +<a name="id2567620"></a>Hardware requirements</h2></div></div></div> <p> <acronym class="acronym">DNS</acronym> hardware requirements have traditionally been quite modest. @@ -73,7 +73,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567648"></a>CPU Requirements</h2></div></div></div> +<a name="id2567646"></a>CPU Requirements</h2></div></div></div> <p> CPU requirements for <acronym class="acronym">BIND</acronym> 9 range from i486-class machines @@ -84,7 +84,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567660"></a>Memory Requirements</h2></div></div></div> +<a name="id2567659"></a>Memory Requirements</h2></div></div></div> <p> The memory of the server has to be large enough to fit the cache and zones loaded off disk. The <span><strong class="command">max-cache-size</strong></span> @@ -107,7 +107,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567687"></a>Name Server Intensive Environment Issues</h2></div></div></div> +<a name="id2567686"></a>Name Server Intensive Environment Issues</h2></div></div></div> <p> For name server intensive environments, there are two alternative configurations that may be used. The first is where clients and @@ -124,7 +124,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567698"></a>Supported Operating Systems</h2></div></div></div> +<a name="id2567697"></a>Supported Operating Systems</h2></div></div></div> <p> ISC <acronym class="acronym">BIND</acronym> 9 compiles and runs on a large number ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch03.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch03.html,v 1.35.18.26 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch03.html,v 1.35.18.26.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -47,14 +47,14 @@ <dl> <dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568003">A Caching-only Name Server</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568019">An Authoritative-only Name Server</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568002">A Caching-only Name Server</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568018">An Authoritative-only Name Server</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568041">Load Balancing</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568465">Name Server Operations</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568040">Load Balancing</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568464">Name Server Operations</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568470">Tools for Use With the Name Server Daemon</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569972">Signals</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568469">Tools for Use With the Name Server Daemon</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2570039">Signals</a></span></dt> </dl></dd> </dl> </div> @@ -68,7 +68,7 @@ <a name="sample_configuration"></a>Sample Configurations</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2568003"></a>A Caching-only Name Server</h3></div></div></div> +<a name="id2568002"></a>A Caching-only Name Server</h3></div></div></div> <p> The following sample configuration is appropriate for a caching-only name server for use by clients internal to a corporation. All @@ -95,7 +95,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2568019"></a>An Authoritative-only Name Server</h3></div></div></div> +<a name="id2568018"></a>An Authoritative-only Name Server</h3></div></div></div> <p> This sample configuration is for an authoritative-only server that is the master server for "<code class="filename">example.com</code>" @@ -137,7 +137,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2568041"></a>Load Balancing</h2></div></div></div> +<a name="id2568040"></a>Load Balancing</h2></div></div></div> <p> A primitive form of load balancing can be achieved in the <acronym class="acronym">DNS</acronym> by using multiple A records for @@ -280,10 +280,10 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2568465"></a>Name Server Operations</h2></div></div></div> +<a name="id2568464"></a>Name Server Operations</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2568470"></a>Tools for Use With the Name Server Daemon</h3></div></div></div> +<a name="id2568469"></a>Tools for Use With the Name Server Daemon</h3></div></div></div> <p> This section describes several indispensable diagnostic, administrative and monitoring tools available to the system @@ -741,7 +741,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2569972"></a>Signals</h3></div></div></div> +<a name="id2570039"></a>Signals</h3></div></div></div> <p> Certain UNIX signals cause the name server to take specific actions, as described in the following table. These signals can ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch04.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch04.html,v 1.40.18.34 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch04.html,v 1.40.18.34.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -49,28 +49,28 @@ <dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt> <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570429">Split DNS</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570428">Split DNS</a></span></dt> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570949">Generate Shared Keys for Each Pair of Hosts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571022">Copying the Shared Secret to Both Machines</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571033">Informing the Servers of the Key's Existence</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571141">Instructing the Server to Use the Key</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571198">TSIG Key Based Access Control</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571243">Errors</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570948">Generate Shared Keys for Each Pair of Hosts</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571021">Copying the Shared Secret to Both Machines</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571032">Informing the Servers of the Key's Existence</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571140">Instructing the Server to Use the Key</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571197">TSIG Key Based Access Control</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571242">Errors</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571257">TKEY</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571306">SIG(0)</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571256">TKEY</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571305">SIG(0)</a></span></dt> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#DNSSEC">DNSSEC</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571579">Generating Keys</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571649">Signing the Zone</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571728">Configuring Servers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571578">Generating Keys</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571648">Signing the Zone</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571726">Configuring Servers</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571802">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571801">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572001">Address Lookups Using AAAA Records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572022">Address to Name Lookups Using Nibble Format</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572000">Address Lookups Using AAAA Records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572021">Address to Name Lookups Using Nibble Format</a></span></dt> </dl></dd> </dl> </div> @@ -204,7 +204,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2570429"></a>Split DNS</h2></div></div></div> +<a name="id2570428"></a>Split DNS</h2></div></div></div> <p> Setting up different views, or visibility, of the DNS space to internal and external resolvers is usually referred to as a @@ -479,7 +479,7 @@ </p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2570949"></a>Generate Shared Keys for Each Pair of Hosts</h3></div></div></div> +<a name="id2570948"></a>Generate Shared Keys for Each Pair of Hosts</h3></div></div></div> <p> A shared secret is generated to be shared between <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host2</em></span>. An arbitrary key name is chosen: "host1-host2.". The key name must @@ -487,7 +487,7 @@ </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2570966"></a>Automatic Generation</h4></div></div></div> +<a name="id2570965"></a>Automatic Generation</h4></div></div></div> <p> The following command will generate a 128-bit (16 byte) HMAC-MD5 key as described above. Longer keys are better, but shorter keys @@ -512,7 +512,7 @@ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2571004"></a>Manual Generation</h4></div></div></div> +<a name="id2571003"></a>Manual Generation</h4></div></div></div> <p> The shared secret is simply a random sequence of bits, encoded in base-64. Most ASCII strings are valid base-64 strings (assuming @@ -527,7 +527,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571022"></a>Copying the Shared Secret to Both Machines</h3></div></div></div> +<a name="id2571021"></a>Copying the Shared Secret to Both Machines</h3></div></div></div> <p> This is beyond the scope of DNS. A secure transport mechanism should be used. This could be secure FTP, ssh, telephone, etc. @@ -535,7 +535,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571033"></a>Informing the Servers of the Key's Existence</h3></div></div></div> +<a name="id2571032"></a>Informing the Servers of the Key's Existence</h3></div></div></div> <p> Imagine <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host 2</em></span> are @@ -564,7 +564,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571141"></a>Instructing the Server to Use the Key</h3></div></div></div> +<a name="id2571140"></a>Instructing the Server to Use the Key</h3></div></div></div> <p> Since keys are shared between two hosts only, the server must be told when keys are to be used. The following is added to the <code class="filename">named.conf</code> file @@ -596,7 +596,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571198"></a>TSIG Key Based Access Control</h3></div></div></div> +<a name="id2571197"></a>TSIG Key Based Access Control</h3></div></div></div> <p> <acronym class="acronym">BIND</acronym> allows IP addresses and ranges to be specified in ACL @@ -624,7 +624,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571243"></a>Errors</h3></div></div></div> +<a name="id2571242"></a>Errors</h3></div></div></div> <p> The processing of TSIG signed messages can result in several errors. If a signed message is sent to a non-TSIG aware @@ -650,7 +650,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2571257"></a>TKEY</h2></div></div></div> +<a name="id2571256"></a>TKEY</h2></div></div></div> <p><span><strong class="command">TKEY</strong></span> is a mechanism for automatically generating a shared secret between two hosts. There are several "modes" of @@ -686,7 +686,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2571306"></a>SIG(0)</h2></div></div></div> +<a name="id2571305"></a>SIG(0)</h2></div></div></div> <p> <acronym class="acronym">BIND</acronym> 9 partially supports DNSSEC SIG(0) transaction signatures as specified in RFC 2535 and RFC2931. @@ -747,7 +747,7 @@ </p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571579"></a>Generating Keys</h3></div></div></div> +<a name="id2571578"></a>Generating Keys</h3></div></div></div> <p> The <span><strong class="command">dnssec-keygen</strong></span> program is used to generate keys. @@ -798,7 +798,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571649"></a>Signing the Zone</h3></div></div></div> +<a name="id2571648"></a>Signing the Zone</h3></div></div></div> <p> The <span><strong class="command">dnssec-signzone</strong></span> program is used to @@ -842,7 +842,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571728"></a>Configuring Servers</h3></div></div></div> +<a name="id2571726"></a>Configuring Servers</h3></div></div></div> <p> To enable <span><strong class="command">named</strong></span> to respond appropriately to DNS requests from DNSSEC aware clients, @@ -930,7 +930,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2571802"></a>IPv6 Support in <acronym class="acronym">BIND</acronym> 9</h2></div></div></div> +<a name="id2571801"></a>IPv6 Support in <acronym class="acronym">BIND</acronym> 9</h2></div></div></div> <p> <acronym class="acronym">BIND</acronym> 9 fully supports all currently defined forms of IPv6 @@ -969,7 +969,7 @@ </p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2572001"></a>Address Lookups Using AAAA Records</h3></div></div></div> +<a name="id2572000"></a>Address Lookups Using AAAA Records</h3></div></div></div> <p> The IPv6 AAAA record is a parallel to the IPv4 A record, and, unlike the deprecated A6 record, specifies the entire @@ -988,7 +988,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2572022"></a>Address to Name Lookups Using Nibble Format</h3></div></div></div> +<a name="id2572021"></a>Address to Name Lookups Using Nibble Format</h3></div></div></div> <p> When looking up an address in nibble format, the address components are simply reversed, just as in IPv4, and ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch05.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch05.html,v 1.33.18.28 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch05.html,v 1.33.18.28.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -45,13 +45,13 @@ <div class="toc"> <p><b>Table of Contents</b></p> <dl> -<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2572055">The Lightweight Resolver Library</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2572054">The Lightweight Resolver Library</a></span></dt> <dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt> </dl> </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2572055"></a>The Lightweight Resolver Library</h2></div></div></div> +<a name="id2572054"></a>The Lightweight Resolver Library</h2></div></div></div> <p> Traditionally applications have been linked with a stub resolver library that sends recursive DNS queries to a local caching name ==== //depot/projects/mjexp/contrib/bind9/doc/arm/Bv9ARM.ch06.html#4 (text+ko) ==== @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id: Bv9ARM.ch06.html,v 1.82.18.63 2007/01/30 00:23:45 marka Exp $ --> +<!-- $Id: Bv9ARM.ch06.html,v 1.82.18.63.10.1 2007/07/09 02:25:50 marka Exp $ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> @@ -48,52 +48,52 @@ <dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573470">Comment Syntax</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573333">Comment Syntax</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574151"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574013"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574341"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574203"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574770"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574785"><span><strong class="command">include</strong></span> Statement Definition and +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574632"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574647"><span><strong class="command">include</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574808"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574829"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574920"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575046"><span><strong class="command">logging</strong></span> Statement Definition and +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574670"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574692"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574782"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574908"><span><strong class="command">logging</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576396"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576470"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576534"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576578"><span><strong class="command">masters</strong></span> Statement Definition and +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576395"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576469"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576533"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576577"><span><strong class="command">masters</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576593"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576592"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585018"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585136"><span><strong class="command">trusted-keys</strong></span> Statement Definition +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585031"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585080"><span><strong class="command">trusted-keys</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585216"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585228"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586586"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586599"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2588846">Zone File</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2588791">Zone File</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590800">Discussion of MX Records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590812">Discussion of MX Records</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591419">Inverse Mapping in IPv4</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591546">Other Zone File Directives</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591803"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591432">Inverse Mapping in IPv4</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591559">Other Zone File Directives</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591816"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt> </dl></dd> </dl> @@ -428,7 +428,7 @@ <a name="address_match_lists"></a>Address Match Lists</h3></div></div></div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2573336"></a>Syntax</h4></div></div></div> +<a name="id2573198"></a>Syntax</h4></div></div></div> <pre class="programlisting"><code class="varname">address_match_list</code> = address_match_list_element ; [<span class="optional"> address_match_list_element; ... </span>] <code class="varname">address_match_list_element</code> = [<span class="optional"> ! </span>] (ip_address [<span class="optional">/length</span>] | @@ -437,7 +437,7 @@ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2573364"></a>Definition and Usage</h4></div></div></div> +<a name="id2573226"></a>Definition and Usage</h4></div></div></div> <p> Address match lists are primarily used to determine access control for various server operations. They are also used in >>> TRUNCATED FOR MAIL (1000 lines) <<<
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200707282208.l6SM8ulC099892>