summaryrefslogtreecommitdiff
path: root/usr.sbin/nsd
AgeCommit message (Collapse)Author
2021-08-10add file missed in previousStuart Henderson
2021-08-10Update to nsd 4.3.7Florian Obser
OK sthen
2021-06-30use @ to silently execute "exec make"Theo de Raadt
2021-04-06convert UTF-8 to plain ascii, spotted by florianStuart Henderson
2021-04-06merge NSD 4.3.6Stuart Henderson
2021-04-06merge NSD 4.3.6Stuart Henderson
2021-04-02configyyrename.h is no longer needed with the switch to flex -P c_.Florian Obser
This was also removed upstream. OK sthen
2021-04-01merge NSD 4.3.6rc1Stuart Henderson
2021-01-27nsd contains two yacc parsers, but predates "yacc -b". Instead aTheo de Raadt
script renames the fields in one parser. Three additional variables (yysslim, yyssp, yystacksize) need to be renamed also. Yes it is worse than stepping out of bed on the wrong side into cat vomit.
2010-01-15NSD v3.2.4Jakob Schlyter
2020-12-10update to nsd 4.3.4Florian Obser
2020-11-24Pid files? Where we're going, we don't need pid files.Florian Obser
OK sthen
2020-10-13More useless stuff snuck in.Florian Obser
OK sthen
2020-10-13remove dir useless for cvsStuart Henderson
2020-10-13merge NSD 4.3.3Stuart Henderson
2020-10-13import NSD 4.3.3, ok florian@Stuart Henderson
2020-07-23Fix strlcpy() usage. The size argument should be the full size ofTodd C. Miller
the buffer, not the number of bytes to copy. The strlcpy() return value should be checked to verify that truncation did not occur. OK florian@
2020-07-23Update to 4.3.2.Florian Obser
2020-06-02remove useless redirectionsMarc Espie
okay tb@, florian@
2020-05-14Update to 4.3.1Florian Obser
Testing & OK sthen
2020-05-14We forgot to keep ChangeLog in sync in previous updates.Florian Obser
Bring in the mission changes up to 4.2.4. Also bring in doc/RELNOTES. Both changes ease the process of syncing with upstream. OK sthen
2019-12-21a few depend:-related thingies that were still in.Marc Espie
okay millert@, tb@
2019-12-18add the changelogStuart Henderson
2019-12-18remove, not useful hereStuart Henderson
2019-12-18merge NSD 4.2.4Stuart Henderson
2019-12-18import NSD 4.2.4, ok florianStuart Henderson
2019-09-17merge 4.2.2Stuart Henderson
2019-03-30DisableFlorian Obser
- Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. with an ifdef NOTYET. It is too close to release and we want to let this sit for a bit. Pointed out / requested by sthen.
2019-03-30Update to nsd 4.1.27Florian Obser
OK sthen
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2018-12-10Update to 4.1.26Florian Obser
OK sthen
2018-09-29update to 4.1.25Florian Obser
OK sthen (on a slightly different configure script version)
2018-09-29I forgot to put this in with the 4.1.24 update.Florian Obser
It is of course not relevant for us but introduces a diff when the configure script is regenerated on upgrades and this file is not arround.
2018-08-16update to 4.1.24Florian Obser
OK sthen
2013-11-26import NSD 4.0.0, tests from Dorian Büttner, Patrik Lundin, requested by ↵Stuart Henderson
brad@
2010-01-15NSD v3.2.4Jakob Schlyter
2018-07-30update to nsd 4.1.23, from the release notes:Florian Obser
------------------------------------------------------------------------ NSD versions 4.1.22 and before are vulnerable in comparing TSIG information and this can be used to discover a TSIG secret. NSD uses TSIG to protect zone transfers. The TSIG code uses a secret key to protect the data. The secret key is shared with both sides of the zone transfer connection. The comparison code in NSD was not time insensitive, causing the potential for an attacker to use timing information to discover data about the key contents. NSD versions from 2.2.0 to 4.1.22 are vulnerable. Upgrade to 4.1.23 or newer to get the fix. It was reported by Ondrej Sury (ISC). ------------------------------------------------------------------------ OK tb, sthen
2018-06-14regenFlorian Obser
2018-06-14Update to nsd 4.1.22Florian Obser
The improved refuse-any option that showed up in upstream 4.1.22 had already been cherry picked in OpenBSD. OK sthen
2018-05-18Turn on minimal-reponses and refuse-any per default.Florian Obser
OK sthen
2018-05-17From upcomming nsd 4.1.22:Florian Obser
refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal OK sthen
2018-05-17update to nsd 4.1.21Florian Obser
OK sthen
2018-03-06update to NSD 4.1.20, ok florian@Stuart Henderson
- Fix memory leak in zone file read of unknown rr formatted RRs. - Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.
2013-02-18Update to NSD 3.2.15, ok brad@ phessler@ deraadt@ also tested by okan@Stuart Henderson
2018-02-20merge configure.ac from NSD 4.1.19, previously we had an updatedStuart Henderson
generated configure file, but old configure.ac.
2018-02-03regenFlorian Obser
2018-02-03Update nsd to 4.1.19.Florian Obser
OK sthen@, "so far so good" millert@ Obligatory commit from 33,000 ft.
2018-01-13Add descriptions for HAVE_B64_NTOP and HAVE_B64_PTON so autoheaderTodd C. Miller
will run. OK florian@
2017-11-01Make ip-transparent option work by using SO_BINDANY.Florian Obser
OK jca, benno jca also points out that Delan Azabani (delan _AT_ azabani.com) wrote exactly the same diff in 2016. It was OK bluhm but apparently never commited.
2017-08-11missed in previousFlorian Obser
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 08:34:54 +0000