summaryrefslogtreecommitdiff
path: root/usr.sbin/nsd
AgeCommit message (Collapse)Author
2022-07-02Avoid c99 features, come on, this is supposed to be highly portable softwareTheo de Raadt
ok florian
2022-06-30Update to nsd 4.6.0; OK sthenFlorian Obser
2022-06-30Track doc/README, makes merging new releases easier.Florian Obser
OK sthen
2022-05-13Update to nsd 4.5.0Florian Obser
OK sthen
2022-03-16Update to nsd 4.4.0Florian Obser
tested by sthen and me OK sthen
2021-12-22Trivial update to 4.3.9.Florian Obser
2021-10-24nsd 4.3.7 shipped with DNS cookies on and then flipped to a default ofFlorian Obser
in 4.3.8. Since we shipped 4.3.7 in 7.0 we should not flip-flop between on and off all the time. Keep the default to on. Suggested by & OK sthen
2021-10-24Update to 4.3.8.Florian Obser
OK sthen
2010-01-15NSD v3.2.4Jakob Schlyter
2021-08-10add file missed in previousStuart Henderson
2021-08-10Update to nsd 4.3.7Florian Obser
OK sthen
2021-06-30use @ to silently execute "exec make"Theo de Raadt
2021-04-06convert UTF-8 to plain ascii, spotted by florianStuart Henderson
2021-04-06merge NSD 4.3.6Stuart Henderson
2021-04-06merge NSD 4.3.6Stuart Henderson
2021-04-02configyyrename.h is no longer needed with the switch to flex -P c_.Florian Obser
This was also removed upstream. OK sthen
2021-04-01merge NSD 4.3.6rc1Stuart Henderson
2021-01-27nsd contains two yacc parsers, but predates "yacc -b". Instead aTheo de Raadt
script renames the fields in one parser. Three additional variables (yysslim, yyssp, yystacksize) need to be renamed also. Yes it is worse than stepping out of bed on the wrong side into cat vomit.
2010-01-15NSD v3.2.4Jakob Schlyter
2020-12-10update to nsd 4.3.4Florian Obser
2020-11-24Pid files? Where we're going, we don't need pid files.Florian Obser
OK sthen
2020-10-13More useless stuff snuck in.Florian Obser
OK sthen
2020-10-13remove dir useless for cvsStuart Henderson
2020-10-13merge NSD 4.3.3Stuart Henderson
2020-10-13import NSD 4.3.3, ok florian@Stuart Henderson
2020-07-23Fix strlcpy() usage. The size argument should be the full size ofTodd C. Miller
the buffer, not the number of bytes to copy. The strlcpy() return value should be checked to verify that truncation did not occur. OK florian@
2020-07-23Update to 4.3.2.Florian Obser
2020-06-02remove useless redirectionsMarc Espie
okay tb@, florian@
2020-05-14Update to 4.3.1Florian Obser
Testing & OK sthen
2020-05-14We forgot to keep ChangeLog in sync in previous updates.Florian Obser
Bring in the mission changes up to 4.2.4. Also bring in doc/RELNOTES. Both changes ease the process of syncing with upstream. OK sthen
2019-12-21a few depend:-related thingies that were still in.Marc Espie
okay millert@, tb@
2019-12-18add the changelogStuart Henderson
2019-12-18remove, not useful hereStuart Henderson
2019-12-18merge NSD 4.2.4Stuart Henderson
2019-12-18import NSD 4.2.4, ok florianStuart Henderson
2019-09-17merge 4.2.2Stuart Henderson
2019-03-30DisableFlorian Obser
- Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. with an ifdef NOTYET. It is too close to release and we want to let this sit for a bit. Pointed out / requested by sthen.
2019-03-30Update to nsd 4.1.27Florian Obser
OK sthen
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2018-12-10Update to 4.1.26Florian Obser
OK sthen
2018-09-29update to 4.1.25Florian Obser
OK sthen (on a slightly different configure script version)
2018-09-29I forgot to put this in with the 4.1.24 update.Florian Obser
It is of course not relevant for us but introduces a diff when the configure script is regenerated on upgrades and this file is not arround.
2018-08-16update to 4.1.24Florian Obser
OK sthen
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2010-01-15NSD v3.2.4Jakob Schlyter
2018-07-30update to nsd 4.1.23, from the release notes:Florian Obser
------------------------------------------------------------------------ NSD versions 4.1.22 and before are vulnerable in comparing TSIG information and this can be used to discover a TSIG secret. NSD uses TSIG to protect zone transfers. The TSIG code uses a secret key to protect the data. The secret key is shared with both sides of the zone transfer connection. The comparison code in NSD was not time insensitive, causing the potential for an attacker to use timing information to discover data about the key contents. NSD versions from 2.2.0 to 4.1.22 are vulnerable. Upgrade to 4.1.23 or newer to get the fix. It was reported by Ondrej Sury (ISC). ------------------------------------------------------------------------ OK tb, sthen
2018-06-14regenFlorian Obser
2018-06-14Update to nsd 4.1.22Florian Obser
The improved refuse-any option that showed up in upstream 4.1.22 had already been cherry picked in OpenBSD. OK sthen
2018-05-18Turn on minimal-reponses and refuse-any per default.Florian Obser
OK sthen
2018-05-17From upcomming nsd 4.1.22:Florian Obser
refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal OK sthen
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 02:50:48 +0000