head	1.16;
access;
symbols
	pkgsrc-2019Q3:1.15.0.2
	pkgsrc-2019Q3-base:1.15
	pkgsrc-2019Q2:1.13.0.2
	pkgsrc-2019Q2-base:1.13
	pkgsrc-2019Q1:1.9.0.2
	pkgsrc-2019Q1-base:1.9
	pkgsrc-2018Q4:1.7.0.2
	pkgsrc-2018Q4-base:1.7
	pkgsrc-2018Q3:1.4.0.2
	pkgsrc-2018Q3-base:1.4;
locks; strict;
comment	@# @;


1.16
date	2019.10.16.08.54.52;	author maya;	state dead;
branches;
next	1.15;
commitid	aF17jDQGbkZwq4HB;

1.15
date	2019.08.18.12.55.29;	author otis;	state Exp;
branches;
next	1.14;
commitid	zjwA0F5vbFkhEvzB;

1.14
date	2019.08.11.13.22.06;	author wiz;	state Exp;
branches;
next	1.13;
commitid	Ifet9Pg6Qt99ZByB;

1.13
date	2019.06.28.17.01.30;	author jperkin;	state Exp;
branches;
next	1.12;
commitid	3N7jdhjnyww2EYsB;

1.12
date	2019.06.20.02.15.20;	author taca;	state Exp;
branches;
next	1.11;
commitid	MIzKDzqaNxSA0SrB;

1.11
date	2019.05.02.13.31.07;	author taca;	state Exp;
branches;
next	1.10;
commitid	YgM45EFyHQk8kDlB;

1.10
date	2019.04.30.02.46.16;	author taca;	state Exp;
branches;
next	1.9;
commitid	8R55zhnbv4WMNjlB;

1.9
date	2019.02.22.01.24.24;	author taca;	state Exp;
branches
	1.9.2.1;
next	1.8;
commitid	HPu8At5dmStewHcB;

1.8
date	2019.01.17.08.53.37;	author he;	state Exp;
branches;
next	1.7;
commitid	4jVI4t4t4Oc6a78B;

1.7
date	2018.12.15.16.40.20;	author taca;	state Exp;
branches
	1.7.2.1;
next	1.6;
commitid	j6fAViIgqIgRNU3B;

1.6
date	2018.10.30.09.34.45;	author triaxx;	state Exp;
branches;
next	1.5;
commitid	SgPo1U2XPxkKVXXA;

1.5
date	2018.10.21.15.51.46;	author taca;	state Exp;
branches;
next	1.4;
commitid	RIZ3aqRYz2b0jQWA;

1.4
date	2018.09.27.04.24.18;	author wiz;	state Exp;
branches;
next	1.3;
commitid	5DrzbxIhj7N2hHTA;

1.3
date	2018.09.20.10.03.03;	author taca;	state Exp;
branches;
next	1.2;
commitid	8mVGTCGmlsaZmPSA;

1.2
date	2018.09.13.02.57.43;	author jklos;	state Exp;
branches;
next	1.1;
commitid	to6D8QyZrhYYeTRA;

1.1
date	2018.09.09.13.16.01;	author taca;	state Exp;
branches;
next	;
commitid	FrxMwC0fWpx2NqRA;

1.9.2.1
date	2019.05.12.20.37.28;	author spz;	state Exp;
branches;
next	;
commitid	MU4jahZFaguwmXmB;

1.7.2.1
date	2019.03.04.16.51.40;	author bsiegert;	state Exp;
branches;
next	;
commitid	vDF65slPtHRzk4eB;


desc
@@


1.16
log
@bind912: remove. End of life, alternative exists.

Superseded by bind914.
@
text
@# $NetBSD: Makefile,v 1.15 2019/08/18 12:55:29 otis Exp $

DISTNAME=	bind-${BIND_VERSION}
PKGNAME=	${DISTNAME:S/-P/pl/}
PKGREVISION=	2
CATEGORIES=	net
MASTER_SITES=	ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	http://www.isc.org/software/bind/
COMMENT=	Berkeley Internet Name Daemon implementation of DNS, version 9.12
LICENSE=	mpl-2.0

CONFLICTS+=	host-[0-9]*

MAKE_JOBS_SAFE=	no
USE_CWRAPPERS=	no

BIND_VERSION=	9.12.4-P2

.include "../../mk/bsd.prefs.mk"

BUILD_DEFS+=	BIND_DIR VARBASE

.include "options.mk"

USE_TOOLS+=		pax perl
USE_LIBTOOL=		yes
GNU_CONFIGURE=		yes

CONFIGURE_ARGS+=	--with-libtool
CONFIGURE_ARGS+=	--sysconfdir=${PKG_SYSCONFDIR}
CONFIGURE_ARGS+=	--localstatedir=${VARBASE}
CONFIGURE_ARGS+=	--with-openssl=${SSLBASE:Q}
CONFIGURE_ARGS+=	--with-python=no
.if !empty(MACHINE_PLATFORM:MNetBSD-*-m68k) || \
    !empty(MACHINE_PLATFORM:MNetBSD-*-mipsel) || \
    !empty(MACHINE_PLATFORM:MNetBSD-*-vax)
CONFIGURE_ARGS+=	--disable-atomic
.endif
.if ${MACHINE_PLATFORM:MNetBSD-*-powerpc} != ""
CONFIGURE_ARGS+=	--disable-threads
.endif
CONFIGURE_ARGS.DragonFly+=	--disable-kqueue

PKG_GROUPS_VARS+=	BIND_GROUP
PKG_USERS_VARS=		BIND_USER

PKG_GROUPS=		${BIND_GROUP}
PKG_USERS=		${BIND_USER}:${BIND_GROUP}

PKG_GECOS.${BIND_USER}=	Named pseudo-user
PKG_HOME.${BIND_USER}=	${BIND_DIR}

DOCS=			CHANGES HISTORY OPTIONS README

FILES_SUBST+=		BIND_GROUP=${BIND_GROUP} \
			BIND_USER=${BIND_USER} PAX=${PAX:Q} \
			SSLBASE=${SSLBASE}
MESSAGE_SUBST+=		BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}

DOCDIR=			share/doc/bind9

RCD_SCRIPTS=		named9
SMF_METHODS=		named

INSTALL_MAKE_FLAGS+=	sysconfdir=${PREFIX}/share/examples/bind9
CONF_FILES+=		share/examples/bind9/bind.keys \
			${PKG_SYSCONFDIR}/bind.keys

INSTALLATION_DIRS+=	${DOCDIR} ${DOCDIR}/arm

post-install:
.for f in ${DOCS}
	${INSTALL_DATA} ${WRKSRC}/${f} ${DESTDIR}${PREFIX}/${DOCDIR}
.endfor
	${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DESTDIR}${PREFIX}/${DOCDIR}/arm

.include "../../devel/zlib/buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.15
log
@net/bind912: add zlib dependency. fixes build on SmartOS.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2019/08/11 13:22:06 wiz Exp $
@


1.14
log
@Bump PKGREVISIONs for perl 5.30.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2019/06/28 17:01:30 jperkin Exp $
d79 1
@


1.13
log
@bind*: Remove privileges from SMF method script.

This inadvertently opened up the named process to more privileges than
necessary and could be considered a security risk.  This may affect chroot
support, adding back in support for that will need to be done carefully.

Bump PKGREVISIONs.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2019/06/20 02:15:20 taca Exp $
d5 1
a5 1
PKGREVISION=	1
@


1.12
log
@net/bind912: update to 9.12.4pl2

Update bind912 to 9.12.4pl2 (BIND 9.12.4-P2).

	--- 9.12.4-P2 released ---

5244.	[security]	Fixed a race condition in dns_dispatch_getnext()
			that could cause an assertion failure if a
			significant number of incoming packets were
			rejected. (CVE-2019-6471) [GL #942]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2019/05/02 13:31:07 taca Exp $
d5 1
@


1.11
log
@net/bind912: fix an error when reloading configuration

Fix an error when reloading configuration.  There is on more check to
"directory" in option statement is writable.

Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2019/04/30 02:46:16 taca Exp $
a4 1
PKGREVISION=	1
d18 1
a18 1
BIND_VERSION=	9.12.4-P1
@


1.10
log
@net/bind912: update to 9.12.4pl1

Update bind912 to 9.12.4pl1 (BIND 9.12.4-P1).

Fix security problem CVE-2018-5743 and CVE-2019-6467 and overhaul pkgsrc.
Now no need to change namedb is permission under NetBSD.

pkgsrc changes:

* Simplify DESCR.
* Update note about required directories.
* Drop pkg-config from USE_TOOLS.
* Drop none existing configure arguments and PKG_OPTIONS:
	- fetchlimit
	- sit
* Sort PLIST.

Please refer CHANGES file in detail before 9.12.4 release:

	--- 9.12.4-P1 released ---

5200.	[security]	tcp-clients settings could be exceeded in some cases,
			which could lead to exhaustion of file descriptors.
			(CVE-2018-5743) [GL #615]

5199.	[security]	In certain configurations, named could crash
			if nxdomain-redirect was in use and a redirected
			query resulted in an NXDOMAIN from the cache.
			(CVE-2019-6467) [GL #880]

5167.	[bug]		nxdomain-redirect could sometimes lookup the wrong
			redirect name. [GL #892]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2019/02/22 01:24:24 taca Exp $
d5 1
@


1.9
log
@net/bind912: update to 9.12.3pl4

Update bind912 to 9.12.3pl4 (BIND 9.12.3-P4).

	--- 9.12.3-P4 released ---

	--- 9.12.3-P3 released (withdrawn) ---

5141.	[security]	Zone transfer controls for writable DLZ zones were
			not effective as the allowzonexfr method was not being
			called for such zones. (CVE-2019-6465) [GL #790]

	--- 9.12.3-P2 released (withdrawn) ---

5118.	[security]	Named could crash if it is managing a key with
			`managed-keys` and the authoritative zone is rolling
			the key to an unsupported algorithm. (CVE-2018-5745)
			[GL #780]

5110.	[security]	Named leaked memory if there were multiple Key Tag
			EDNS options present. (CVE-2018-5744) [GL #772]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2019/01/17 08:53:37 he Exp $
d18 1
a18 1
BIND_VERSION=	9.12.3-P4
d26 1
a26 1
USE_TOOLS+=		pax perl pkg-config
a32 1
CONFIGURE_ARGS+=	--disable-openssl-version-check
@


1.9.2.1
log
@Pullup ticket #5957 - requested by taca
net/bind912: security update

Revisions pulled up:
- net/bind912/DESCR                                             1.2
- net/bind912/MESSAGE                                           1.2
- net/bind912/Makefile                                          1.10-1.11
- net/bind912/PLIST                                             1.3
- net/bind912/distinfo                                          1.7-1.8
- net/bind912/options.mk                                        1.4
- net/bind912/patches/patch-bin_named_server.c                  1.1-1.2
- net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c          1.1
- net/bind912/patches/patch-lib_dns_view.c                      1.1
- net/bind912/patches/patch-lib_isc_unix_socket.c               1.3

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Apr 30 02:46:16 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: DESCR MESSAGE Makefile PLIST distinfo options.mk
   	pkgsrc/net/bind912/patches: patch-lib_isc_unix_socket.c
   Added Files:
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c
   	    patch-bin_pkcs11_pkcs11-keygen.c patch-lib_dns_view.c

   Log Message:
   net/bind912: update to 9.12.4pl1

   Update bind912 to 9.12.4pl1 (BIND 9.12.4-P1).

   Fix security problem CVE-2018-5743 and CVE-2019-6467 and overhaul pkgsrc.
   Now no need to change namedb is permission under NetBSD.

   pkgsrc changes:

   * Simplify DESCR.
   * Update note about required directories.
   * Drop pkg-config from USE_TOOLS.
   * Drop none existing configure arguments and PKG_OPTIONS:
   	- fetchlimit
   	- sit
   * Sort PLIST.

   Please refer CHANGES file in detail before 9.12.4 release:

   	--- 9.12.4-P1 released ---

   5200.	[security]	tcp-clients settings could be exceeded in some cases,
   			which could lead to exhaustion of file descriptors.
   			(CVE-2018-5743) [GL #615]

   5199.	[security]	In certain configurations, named could crash
   			if nxdomain-redirect was in use and a redirected
   			query resulted in an NXDOMAIN from the cache.
   			(CVE-2019-6467) [GL #880]

   5167.	[bug]		nxdomain-redirect could sometimes lookup the wrong
   			redirect name. [GL #892]


   To generate a diff of this commit:
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/DESCR pkgsrc/net/bind912/MESSAGE
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/bind912/PLIST
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/bind912/options.mk
   cvs rdiff -u -r0 -r1.1 pkgsrc/net/bind912/patches/patch-bin_named_server.c \
       pkgsrc/net/bind912/patches/patch-bin_pkcs11_pkcs11-keygen.c \
       pkgsrc/net/bind912/patches/patch-lib_dns_view.c
   cvs rdiff -u -r1.2 -r1.3 \
       pkgsrc/net/bind912/patches/patch-lib_isc_unix_socket.c

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May  2 13:31:07 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: Makefile distinfo
   	pkgsrc/net/bind912/patches: patch-bin_named_server.c

   Log Message:
   net/bind912: fix an error when reloading configuration

   Fix an error when reloading configuration.  There is on more check to
   "directory" in option statement is writable.

   Bump PKGREVISION.


   To generate a diff of this commit:
   cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/bind912/Makefile
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/bind912/distinfo
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/bind912/patches/patch-bin_named_server.c
@
text
@d1 1
a1 1
# $NetBSD$
a4 1
PKGREVISION=	1
d18 1
a18 1
BIND_VERSION=	9.12.4-P1
d26 1
a26 1
USE_TOOLS+=		pax perl
d33 1
@


1.8
log
@Add a "dnstap" option, defaults to off.
Bump PKGREVISION.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2018/12/15 16:40:20 taca Exp $
a4 1
PKGREVISION=	1
d18 1
a18 1
BIND_VERSION=	9.12.3-P1
@


1.7
log
@net/bind912: update to 9.12.3pl1

Update bind912 to 9.12.3pl1 (BIND 9.12.3-P1).

	--- 9.12.3-P1 released ---

5108.	[bug]		Named could fail to determine bottom of zone when
			removing out of date keys leading to invalid NSEC
			and NSEC3 records being added to the zone. [GL #771]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2018/10/30 09:34:45 triaxx Exp $
d5 1
@


1.7.2.1
log
@Pullup ticket #5918 - requested by taca
net/bind912: security fix

Revisions pulled up:
- net/bind912/Makefile                                          1.8-1.9
- net/bind912/PLIST                                             1.2
- net/bind912/distinfo                                          1.6
- net/bind912/options.mk                                        1.3

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Thu Jan 17 08:53:37 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: Makefile PLIST options.mk

   Log Message:
   Add a "dnstap" option, defaults to off.
   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Feb 22 01:24:24 UTC 2019

   Modified Files:
   	pkgsrc/net/bind912: Makefile distinfo

   Log Message:
   net/bind912: update to 9.12.3pl4

   Update bind912 to 9.12.3pl4 (BIND 9.12.3-P4).

   	--- 9.12.3-P4 released ---

   	--- 9.12.3-P3 released (withdrawn) ---

   5141.	[security]	Zone transfer controls for writable DLZ zones were
   			not effective as the allowzonexfr method was not being
   			called for such zones. (CVE-2019-6465) [GL #790]

   	--- 9.12.3-P2 released (withdrawn) ---

   5118.	[security]	Named could crash if it is managing a key with
   			`managed-keys` and the authoritative zone is rolling
   			the key to an unsupported algorithm. (CVE-2018-5745)
   			[GL #780]

   5110.	[security]	Named leaked memory if there were multiple Key Tag
   			EDNS options present. (CVE-2018-5744) [GL #772]
@
text
@d1 1
a1 1
# $NetBSD$
d18 1
a18 1
BIND_VERSION=	9.12.3-P4
@


1.6
log
@bind912: typo in COMMENT
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2018/10/21 15:51:46 taca Exp $
d18 1
a18 1
BIND_VERSION=	9.12.3
@


1.5
log
@net/bind912: udpate to 9.12.3

	--- 9.12.3 released ---

	--- 9.12.3rc1 released ---

5038.	[bug]		Chaosnet addresses were compared incorrectly.
			[GL #562]

5035.	[test]		Fixed errors that prevented the DNSRPS subtests
			from running in the rpz and rpzrecurse system
			tests. [GL #503]

5034.	[bug]		A race between threads could prevent zone maintenance
			scheduled immediately after zone load from being
			performed. [GL #542]

5033.	[bug]		When adding NTAs to multiple views using "rndc nta",
			the text returned via rndc was incorrectly terminated
			after the first line, making it look as if only one
			NTA had been added. Also, it was not possible to
			differentiate between views with the same name but
			different classes; this has been corrected with the
			addition of a "-class" option. [GL #105]

5032.	[func]		Add krb5-selfsub and ms-selfsub update policy rules.
			[GL #511]

5030.	[bug]		Align CMSG buffers to a 64-bit boundary, fixes crash
			on architectures with strict alignment. [GL #521]

5028.	[bug]		Spread the initial RRSIG expiration times over the
			entire working sig-validity-interval when signing a
			zone in named to even out re-signing and transfer
			loads. [GL #418]

5026.	[bug]		rndc reconfig should not touch already loaded zones.
			[GL #276]

5022.	[doc]		Update ms-self, ms-subdomain, krb5-self, and
			krb5-subdomain documentation. [GL !708]

5021.	[bug]		dig returned a non-zero exit code when it received a
			reply over TCP after a retry. [GL #487]

5019.	[cleanup]	A message is now logged when ixfr-from-differences is
			set at zone level for an inline-signed zone. [GL #470]

5018.	[bug]		Fix incorrect sizeof arguments in lib/isc/pk11.c.
			[GL !588]

5017.	[bug]		lib/isc/pk11.c failed to unlink the session before
			releasing the lock which is unsafe. [GL !589]

5016.	[bug]		Named could assert with overlapping filter-aaaa and
			dns64 acls. [GL #445]

5015.	[bug]		Reloading all zones caused zone maintenance to cease
			for inline-signed zones. [GL #435]

5014.	[bug]		Signatures loaded from the journal for the signed
			version of an inline-signed zone were not scheduled for
			refresh. [GL #482]

5013.	[bug]		A referral response with a non-empty ANSWER section was
			inadvertently being treated as an error. [GL #390]

5012.	[bug]		Fix lock order reversal in pk11_initialize. [GL !590]

5009.	[bug]		Upon an OpenSSL failure, the first error in the OpenSSL
			error queue was not logged. [GL #476]

5008.	[bug]		"rndc signing -nsec3param ..." requests were silently
			ignored for zones which were not yet loaded or
			transferred. [GL #468]

5007.	[cleanup]	Replace custom ISC boolean and integer data types
			with C99 stdint.h and stdbool.h types. [GL #9]

5006.	[cleanup]	Code preparing a delegation response was extracted from
			query_delegation() and query_zone_delegation() into a
			separate function in order to decrease code
			duplication. [GL #431]

5005.	[bug]		dnssec-verify, and dnssec-signzone at the verification
			step, failed on some validly signed zones. [GL #442]

5004.	[bug]		'rndc reconfig' could cause inline zones to stop
			re-signing. [GL #439]

5003.	[bug]		dns_acl_isinsecure did not handle geoip elements.
			[GL #406]

5002.	[bug]		mdig: Handle malformed +ednsopt option, support 100
			+ednsopt options per query rather than 100 total and
			address memory leaks if +ednsopt was specified.
			[GL #410]

5001.	[bug]		Fix refcount errors on error paths. [GL !563]

5000.	[bug]		named_server_servestale() could leave the server in
			exclusive mode if an error occured. [GL #441]

4996.	[bug]		dig: Handle malformed +ednsopt option. [GL #403]

4995.	[test]		Add tests for "tcp-self" update policy. [GL !282]

4994.	[bug]		Trust anchor telemetry queries were not being sent
			upstream for locally served zones. [GL #392]

4992.	[bug]		The wrong address was being logged for trust anchor
			telemetry queries. [GL #379]

4990.	[bug]		Prevent a possible NULL reference in pkcs11-keygen.
			[GL #401]

4988.	[bug]		Don't synthesize NXDOMAIN from NSEC for records under
			a DNAME. [GL #386]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2018/09/27 04:24:18 wiz Exp $
d10 1
a10 1
COMMENT=	Berkeley Internet Name Daemon implementation of DNS, version 9.11
@


1.4
log
@bind91?: fix whitespace
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2018/09/20 10:03:03 taca Exp $
d18 1
a18 1
BIND_VERSION=	9.12.2-P2
a28 1
#CONFIG_SHELL=		sh -x
@


1.3
log
@net/bind912: update to 9.12.2pl2

Update bind912 to 9.12.2pl2 (BIND 9.12.2-P2).

	--- 9.12.2-P2 released ---

5022.	[doc]		Update ms-self, ms-subdomain, krb5-self, and
			krb5-subdomain documentation. [GL !708]

5015.	[bug]		Reloading all zones caused zone maintenance to cease
			for inline-signed zones. [GL #435]

5014.	[bug]		Signatures loaded from the journal for the signed
			version of an inline-signed zone were not scheduled for
			refresh. [GL #482]

5013.	[bug]		A referral response with a non-empty ANSWER section was
			inadvertently being treated as an error. [GL #390]

5004.	[bug]		'rndc reconfig' could cause inline zones to stop
			re-signing. [GL #439]
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2018/09/13 02:57:43 jklos Exp $
d37 1
a37 1
.if !empty(MACHINE_PLATFORM:MNetBSD-*-m68k) || \    
@


1.2
log
@Disable atomic operations on VAX and m68k in addition to mipsel so BIND
compiles on these architectures.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2018/09/09 13:16:01 taca Exp $
d18 1
a18 1
BIND_VERSION=	9.12.2-P1
@


1.1
log
@net/bind912: Added BIND 9.12 package

Add bind-9.12.2pl1 (BIND 9.12.2-P1) pacakge.

Note: named(8) requires writable permission to current directory when
start up or the directory specified by "directory" in options statement.


BIND, the Berkeley Internet Name Daemon, version 9 is a major rewrite
of nearly all aspects of the underlying BIND architecture.  Some
of the important features of BIND-9 are:

	- DNS Security
	- IP version 6
	- DNS Protocol Enhancements
	- Views
	- Multiprocessor Support
	- Improved Portability Architecture
	- Full NSEC3 support
	- Automatic zone re-signing
	- New update-policy methods tcp-self and 6to4-self

This package contains the BIND 9.12 release.

	- named and related libraries have been substantially refactored for
	  improved query performance.
	- Code implementing the name server query processing logic has been
	  moved into a new libns library.
	- The DNS Response Policy Service API (DNSRPS) is now supported.
	- Log file timestamps can now also be formatted in ISO 8601 (local)
	  or ISO 8601 (UTC) formats.
	- Added support for the EDNS Padding and Keepalive options.
	- 'new-zones-directory' option sets the location where the
	  configuration data for zones added by rndc addzone is stored.
	- The default key algorithm in rndc-confgen is now hmac-sha256.
	- filter-aaaa-on-v4 and filter-aaaa-on-v6 options are now available
	  by default without a configure option.
	- The obsolete isc-hmac-fixup command has been removed.
@
text
@d1 1
a1 1
# $NetBSD$
d37 3
a39 1
.if ${MACHINE_PLATFORM:MNetBSD-*-mipsel} != ""
@