Skip to content
Browse files

Import bind 9.10.4-P1

  • Loading branch information...
1 parent 665b946 commit f44228306b8cddbdf533a2fbc7102408582e4ec3 christos committed May 26, 2016
Showing with 5,183 additions and 4,002 deletions.
  1. +368 −6 external/bsd/bind/dist/CHANGES
  2. +3 −5 external/bsd/bind/dist/FAQ
  3. +77 −83 external/bsd/bind/dist/FAQ.xml
  4. +5 −2 external/bsd/bind/dist/Makefile.in
  5. +15 −21 external/bsd/bind/dist/README
  6. +5 −2 external/bsd/bind/dist/acconfig.h
  7. +2 −2 external/bsd/bind/dist/bin/check/Makefile.in
  8. +55 −39 external/bsd/bind/dist/bin/check/named-checkconf.8
  9. +37 −11 external/bsd/bind/dist/bin/check/named-checkconf.c
  10. +33 −39 external/bsd/bind/dist/bin/check/named-checkconf.docbook
  11. +21 −27 external/bsd/bind/dist/bin/check/named-checkconf.html
  12. +100 −84 external/bsd/bind/dist/bin/check/named-checkzone.8
  13. +2 −2 external/bsd/bind/dist/bin/check/named-checkzone.c
  14. +78 −85 external/bsd/bind/dist/bin/check/named-checkzone.docbook
  15. +80 −86 external/bsd/bind/dist/bin/check/named-checkzone.html
  16. +1 −1 external/bsd/bind/dist/bin/check/win32/checkconf.vcxproj.in
  17. +1 −1 external/bsd/bind/dist/bin/check/win32/checktool.vcxproj.in
  18. +1 −1 external/bsd/bind/dist/bin/check/win32/checkzone.vcxproj.in
  19. +4 −4 external/bsd/bind/dist/bin/confgen/Makefile.in
  20. +62 −46 external/bsd/bind/dist/bin/confgen/ddns-confgen.8
  21. +34 −41 external/bsd/bind/dist/bin/confgen/ddns-confgen.docbook
  22. +29 −35 external/bsd/bind/dist/bin/confgen/ddns-confgen.html
  23. +71 −55 external/bsd/bind/dist/bin/confgen/rndc-confgen.8
  24. +34 −41 external/bsd/bind/dist/bin/confgen/rndc-confgen.docbook
  25. +42 −48 external/bsd/bind/dist/bin/confgen/rndc-confgen.html
  26. +1 −1 external/bsd/bind/dist/bin/confgen/win32/confgentool.vcxproj.in
  27. +1 −1 external/bsd/bind/dist/bin/confgen/win32/ddnsconfgen.vcxproj.in
  28. +1 −1 external/bsd/bind/dist/bin/confgen/win32/rndcconfgen.vcxproj.in
  29. +2 −2 external/bsd/bind/dist/bin/delv/Makefile.in
  30. +130 −107 external/bsd/bind/dist/bin/delv/delv.1
  31. +5 −4 external/bsd/bind/dist/bin/delv/delv.c
  32. +54 −53 external/bsd/bind/dist/bin/delv/delv.docbook
  33. +56 −58 external/bsd/bind/dist/bin/delv/delv.html
  34. +1 −1 external/bsd/bind/dist/bin/delv/win32/delv.vcxproj.in
  35. +2 −2 external/bsd/bind/dist/bin/dig/Makefile.in
  36. +206 −173 external/bsd/bind/dist/bin/dig/dig.1
  37. +30 −21 external/bsd/bind/dist/bin/dig/dig.c
  38. +75 −65 external/bsd/bind/dist/bin/dig/dig.docbook
  39. +78 −68 external/bsd/bind/dist/bin/dig/dig.html
  40. +75 −62 external/bsd/bind/dist/bin/dig/dighost.c
  41. +76 −58 external/bsd/bind/dist/bin/dig/host.1
  42. +40 −40 external/bsd/bind/dist/bin/dig/host.docbook
  43. +35 −36 external/bsd/bind/dist/bin/dig/host.html
  44. +82 −49 external/bsd/bind/dist/bin/dig/nslookup.1
  45. +38 −39 external/bsd/bind/dist/bin/dig/nslookup.docbook
  46. +31 −31 external/bsd/bind/dist/bin/dig/nslookup.html
  47. +1 −1 external/bsd/bind/dist/bin/dig/win32/dig.vcxproj.in
  48. +1 −1 external/bsd/bind/dist/bin/dig/win32/dighost.vcxproj.in
  49. +1 −1 external/bsd/bind/dist/bin/dig/win32/host.vcxproj.in
  50. +1 −1 external/bsd/bind/dist/bin/dig/win32/nslookup.vcxproj.in
  51. +3 −3 external/bsd/bind/dist/bin/dnssec/Makefile.in
  52. +64 −48 external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.8
  53. +53 −61 external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.docbook
  54. +18 −24 external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.html
  55. +54 −38 external/bsd/bind/dist/bin/dnssec/dnssec-importkey.8
  56. +47 −54 external/bsd/bind/dist/bin/dnssec/dnssec-importkey.docbook
  57. +20 −27 external/bsd/bind/dist/bin/dnssec/dnssec-importkey.html
  58. +123 −83 external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.8
  59. +52 −59 external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.docbook
  60. +26 −32 external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.html
  61. +143 −103 external/bsd/bind/dist/bin/dnssec/dnssec-keygen.8
  62. +59 −67 external/bsd/bind/dist/bin/dnssec/dnssec-keygen.docbook
  63. +28 −34 external/bsd/bind/dist/bin/dnssec/dnssec-keygen.html
  64. +41 −25 external/bsd/bind/dist/bin/dnssec/dnssec-revoke.8
  65. +3 −2 external/bsd/bind/dist/bin/dnssec/dnssec-revoke.c
  66. +30 −37 external/bsd/bind/dist/bin/dnssec/dnssec-revoke.docbook
  67. +13 −19 external/bsd/bind/dist/bin/dnssec/dnssec-revoke.html
  68. +61 −45 external/bsd/bind/dist/bin/dnssec/dnssec-settime.8
  69. +3 −2 external/bsd/bind/dist/bin/dnssec/dnssec-settime.c
  70. +43 −51 external/bsd/bind/dist/bin/dnssec/dnssec-settime.docbook
  71. +24 −30 external/bsd/bind/dist/bin/dnssec/dnssec-settime.html
  72. +157 −137 external/bsd/bind/dist/bin/dnssec/dnssec-signzone.8
  73. +14 −4 external/bsd/bind/dist/bin/dnssec/dnssec-signzone.c
  74. +65 −72 external/bsd/bind/dist/bin/dnssec/dnssec-signzone.docbook
  75. +50 −56 external/bsd/bind/dist/bin/dnssec/dnssec-signzone.html
  76. +49 −33 external/bsd/bind/dist/bin/dnssec/dnssec-verify.8
  77. +29 −36 external/bsd/bind/dist/bin/dnssec/dnssec-verify.docbook
  78. +15 −21 external/bsd/bind/dist/bin/dnssec/dnssec-verify.html
  79. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/dnssectool.vcxproj.in
  80. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/dsfromkey.vcxproj.in
  81. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/importkey.vcxproj.in
  82. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/keyfromlabel.vcxproj.in
  83. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/keygen.vcxproj.in
  84. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/revoke.vcxproj.in
  85. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/settime.vcxproj.in
  86. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/signzone.vcxproj.in
  87. +1 −1 external/bsd/bind/dist/bin/dnssec/win32/verify.vcxproj.in
  88. +2 −2 external/bsd/bind/dist/bin/named/Makefile.in
  89. +4 −4 external/bsd/bind/dist/bin/named/bind9.xsl
  90. +2 −2 external/bsd/bind/dist/bin/named/bind9.xsl.h
  91. +22 −16 external/bsd/bind/dist/bin/named/client.c
  92. +4 −4 external/bsd/bind/dist/bin/named/config.c
  93. +75 −36 external/bsd/bind/dist/bin/named/control.c
  94. +6 −2 external/bsd/bind/dist/bin/named/controlconf.c
  95. +3 −3 external/bsd/bind/dist/bin/named/include/named/log.h
  96. +3 −2 external/bsd/bind/dist/bin/named/include/named/query.h
  97. +25 −22 external/bsd/bind/dist/bin/named/include/named/server.h
  98. +3 −3 external/bsd/bind/dist/bin/named/lwdgrbn.c
  99. +95 −57 external/bsd/bind/dist/bin/named/lwresd.8
  100. +41 −48 external/bsd/bind/dist/bin/named/lwresd.docbook
  101. +23 −29 external/bsd/bind/dist/bin/named/lwresd.html
  102. +21 −13 external/bsd/bind/dist/bin/named/main.c
  103. +152 −81 external/bsd/bind/dist/bin/named/named.8
  104. +160 −92 external/bsd/bind/dist/bin/named/named.conf.5
  105. +74 −72 external/bsd/bind/dist/bin/named/named.conf.docbook
  106. +46 −45 external/bsd/bind/dist/bin/named/named.conf.html
  107. +52 −57 external/bsd/bind/dist/bin/named/named.docbook
  108. +37 −40 external/bsd/bind/dist/bin/named/named.html
  109. +125 −49 external/bsd/bind/dist/bin/named/query.c
  110. +233 −152 external/bsd/bind/dist/bin/named/server.c
  111. +6 −4 external/bsd/bind/dist/bin/named/statschannel.c
  112. +5 −4 external/bsd/bind/dist/bin/named/unix/include/named/os.h
  113. +35 −4 external/bsd/bind/dist/bin/named/unix/os.c
  114. +5 −4 external/bsd/bind/dist/bin/named/win32/include/named/os.h
  115. +6 −2 external/bsd/bind/dist/bin/named/win32/named.dsp.in
  116. +2 −2 external/bsd/bind/dist/bin/named/win32/named.mak.in
  117. +3 −0 external/bsd/bind/dist/bin/named/win32/named.vcxproj.filters.in
  118. +4 −3 external/bsd/bind/dist/bin/named/win32/named.vcxproj.in
  119. +79 −2 external/bsd/bind/dist/bin/named/win32/os.c
  120. +13 −3 external/bsd/bind/dist/bin/named/xfrout.c
  121. +7 −2 external/bsd/bind/dist/bin/named/zoneconf.c
  122. +2 −2 external/bsd/bind/dist/bin/nsupdate/Makefile.in
  123. +156 −132 external/bsd/bind/dist/bin/nsupdate/nsupdate.1
  124. +30 −6 external/bsd/bind/dist/bin/nsupdate/nsupdate.c
  125. +77 −79 external/bsd/bind/dist/bin/nsupdate/nsupdate.docbook
  126. +65 −66 external/bsd/bind/dist/bin/nsupdate/nsupdate.html
  127. +1 −1 external/bsd/bind/dist/bin/nsupdate/win32/nsupdate.vcxproj.in
Sorry, we could not display the entire diff because too many files (771) changed.
View
374 external/bsd/bind/dist/CHANGES
@@ -1,35 +1,253 @@
+ --- 9.10.4-P1 released ---
- --- 9.10.3-P4 released ---
+4368. [bug] Fix a crash when calling "rndc stats" on some
+ Windows builds because some Visual Studio compilers
+ generated crashing code for the "%z" printf()
+ format specifier. [RT #42380]
+
+4366. [bug] Address race condition when updating rbtnode bit
+ fields. [RT #42379]
+
+4363. [port] win32: Disable explicit triggering UAC when running
+ BINDInstall.
+
+ --- 9.10.4 released ---
+
+ --- 9.10.4rc1 released ---
+
+4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
+
+4346. [bug] Fixed a regression introduced in change #4337 which
+ caused signed domains with revoked KSKs to fail
+ validation. [RT #42147]
+
+4345. [contrib] perftcpdns mishandled the return values from
+ clock_nanosleep. [RT #42131]
+
+4344. [port] Address openssl version differences. [RT #42059]
+
+ --- 9.10.4b3 released ---
+
+4342. [bug] 'rndc flushtree' could fail to clean the tree if there
+ wasn't a node at the specified name. [RT #41846]
+
+4341. [bug] Correct the handling of ECS options with
+ address family 0. [RT #41377]
+
+4338. [bug] Reimplement change 4324 as it wasn't properly doing
+ all the required book keeping. [RT #41941]
+
+4337. [bug] The previous change exposed a latent flaw in
+ key refresh queries for managed-keys when
+ a cached DNSKEY had TTL 0. [RT #41986]
+
+4336. [bug] Don't emit records with zero ttl unless the records
+ were learnt with a zero ttl. [RT #41687]
+
+4335. [bug] zone->view could be detached too early. [RT #41942]
+
+4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
+ 2001:500:9f::42.
+
+ --- 9.10.4b2 released ---
+
+4332. [bug] Windows SIT -> COOKIE configuration support was
+ accidentally back ported to 9.10 breaking existing
+ configurations. [RT #41905]
+
+4331. [func] When loading managed signed zones detect if the
+ RRSIG's inception time is in the future and regenerate
+ the RRSIG immediately. [RT #41808]
+
+4330. [protocol] Identify the PAD option as "PAD" when printing out
+ a message.
+
+ --- 9.10.4b1 released ---
+
+4329. [func] Warn about a common misconfiguration when forwarding
+ RFC 1918 zones. [RT #41441]
+
+4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
+
+4327. [func] Log query and depth counters during fetches when
+ querytrace (./configure --enable-querytrace) is
+ enabled (helps in diagnosing). [RT #41787]
+
+4326. [protocol] Add support for AVC. [RT #41819]
+
+4324. [bug] When deleting records from a zone database, interior
+ nodes could be left empty but not deleted, damaging
+ search performance afterward. [RT #40997]
+
+4323. [bug] Improve HTTP header processing on statschannel.
+ [RT #41674]
4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
[RT #41809]
+4321. [bug] Zones using mapped files containing out-of-zone data
+ could return SERVFAIL instead of the expected NODATA
+ or NXDOMAIN results. [RT #41596]
+
+4320. [bug] Insufficient memory allocation when handling
+ "none" ACL could cause an assertion failure in
+ named when parsing ACL configuration. [RT #41745]
+
4319. [security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
(CVE-2016-1286) [RT #41753]
4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]
- --- 9.10.3-P3 released ---
+4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
+
+4315. [bug] Check that configured view class isn't a meta class.
+ [RT #41572].
+
+4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
+ testing tools provided by Nominum, Inc.
+
+4313. [bug] Handle ns_client_replace failures in test mode.
+ [RT #41190]
+
+4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
+ was not consistent. [RT #41600]
+
+4311. [bug] Prevent "rndc delzone" from being used on
+ response-policy zones. [RT #41593]
+
+4310. [performance] Use __builtin_expect() where available to annotate
+ conditions with known behavior. [RT #41411]
+
+4308. [func] Added operating system details to "named -V"
+ output. [RT #41452]
+
+4307. [bug] "dig +subnet" could send incorrectly-formatted
+ Client Subnet options if the prefix length was
+ not divisible by 8. [RT #45178]
+
+4306. [maint] Added a PKCS#11 openssl patch supporting
+ version 1.0.2f [RT #38312]
+
+4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
+ from the zone's apex. [RT #41483]
+
+4304. [port] xfer system test failed as 'tail -n +value' is not
+ portable. [RT #41315]
+
+4303. [bug] "dig +subnet" was unable to send a prefix length of
+ zero, as it was incorrectly changed to 32 for v4
+ prefixes or 128 for v6 prefixes. In addition to
+ fixing this, "dig +subnet=0" has been added as a
+ short form for 0.0.0.0/0. [RT #41553]
+
+4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
+
+4300. [cleanup] Added new querytrace logging. [RT #41155]
+
+4299. [bug] Check that exactly totallen bytes are read when
+ reading a RRset from raw files in both single read
+ and incremental modes. [RT #41402]
+
+4298. [bug] dns_rpz_add errors in loadzone were not being
+ propagated up the call stack. [RT #41425]
+
+4297. [test] Ensure delegations in RPZ zones fail robustly.
+ [RT #41518]
+
+4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
+ could allow incorrect text formatting of EDNS EXPIRE
+ options. [RT #41437]
+
+4294. [bug] Fixed a regression in which "rndc stop -p" failed
+ to print the PID. [RT #41513]
+
+4293. [bug] Address memory leak on priming query creation failure.
+ [RT #41512]
+
+4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
+
+4289. [bug] The server could crash due to memory being used
+ after it was freed if a zone transfer timed out.
+ [RT #41297]
4288. [bug] Fixed a regression in resolver.c:possibly_mark()
which caused known-bogus servers to be queried
anyway. [RT #41321]
+4287. [bug] Silence an overly noisy log message when message
+ parsing fails. [RT #41374]
+
4286. [security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
(CVE-2015-8705) [RT #41397]
4285. [security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]
- --- 9.10.3-P2 released ---
+4284. [bug] Some GeoIP options were incorrectly documented
+ using abbreviated forms which were not accepted by
+ named. The code has been updated to allow both
+ long and abbreviated forms. [RT #41381]
+
+4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
+
+4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
+
+4280. [performance] Use optimal message sizes to improve compression
+ in AXFRs. This reduces network traffic. [RT #40996]
+
+4279. [test] Don't use fixed ports when unit testing. [RT #41194]
+
+4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
+ [RT #41238]
+
+4277. [performance] Improve performance of the RBT, the central zone
+ datastructure: The aux hashtable was improved,
+ hash function was updated to perform more
+ uniform mapping, uppernode was added to
+ dns_rbtnode, and other cleanups and performance
+ improvements were made. [RT #41165]
+
+4276. [protocol] Add support for SMIMEA. [RT #40513]
+
+4274. [performance] Speed up typemap processing from text. [RT #41196]
+
+4273. [bug] Only call dns_test_begin() and dns_test_end() once each
+ in nsec3_test as it fails with GOST if called multiple
+ times.
+
+4272. [bug] dig: the +norrcomments option didn't work with +multi.
+ [RT #41234]
+
+4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
+ [RT #41235]
4270. [security] Update allowed OpenSSL versions as named is
potentially vulnerable to CVE-2015-3193.
+4269. [bug] Zones using "map" format master files currently
+ don't work as policy zones. This limitation has
+ now been documented; attempting to use such zones
+ in "response-policy" statements is now a
+ configuration error. [RT #38321]
+
+4267. [test] Check sdlz error handling. [RT #41142]
+
+4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
+
+4264. [bug] Check const of strchr/strrchr assignments match
+ argument's const status. [RT #41150]
+
+4262. [bug] Fixed a bug in epoll socket code that caused
+ sockets to not be registered for ready
+ notification in some cases, causing named to not
+ read from or write to them, resulting in what
+ appear to the user as blocked connections.
+ [RT #41067]
+
4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
[RT #40556]
@@ -38,10 +256,154 @@
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #40987]
+4258. [bug] Limit rndc query message sizes to 32 KiB. This should
+ not break any legitimate rndc commands, but will
+ prevent a rogue rndc query from allocating too
+ much memory. [RT #41073]
+
+4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
+
+4256. [bug] Allow rndc command arguments to be quoted so as
+ to allow spaces. [RT #36665]
+
+4254. [bug] Address missing lock when getting zone's serial.
+ [RT #41072]
+
4253. [security] Address fetch context reference count handling error
- on socket error. (CVE-2015-8461) [RT#40945]
+ on socket error. (CVE-2015-8461) [RT#40945]
+
+4248. [performance] Add an isc_atomic_storeq() function, use it in
+ stats counters to improve performance.
+ [RT #39972] [RT #39979]
+
+4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
+ defined to report json library version. [RT #41045]
+
+4246. [test] Ensure the statschannel system test runs when BIND
+ is not built with libjson. [RT #40944]
+
+4245. [bug] Fix statistics version to match against in bind9.xsl.
+ [RT #41039]
+
+4244. [bug] The parser was not reporting that use-ixfr is obsolete.
+ [RT #41010]
+
+4242. [bug] Replace the client if not already replaced when
+ prefetching. [RT #41001]
+
+4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
+ the ARM. [RT #40955]
+
+4240. [port] Fix LibreSSL compatibility. [RT #40977]
+
+4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
+ [RT #40947]
+
+4237. [doc] Upgraded documentation toolchain to use DocBook 5
+ and dblatex. [RT #40766]
+
+4236. [performance] On machines with 2 or more processors (CPU), the
+ default value for the number of UDP listeners
+ has been changed to the number of detected
+ processors minus one. [RT #40761]
+
+4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
+ [RT #40597]
+
+4232. [contrib] Address unchecked memory allocation calls in
+ query-loc and zone2ldap. [RT #40789]
+
+4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
+ uninitialized result. [RT #40839]
+
+4229. [bug] A variable could be used uninitialized in
+ dns_update_signaturesinc. [RT #40784]
+
+4228. [bug] Address race condition in dns_client_destroyrestrans.
+ [RT #40605]
+
+4227. [bug] Silence static analysis warnings. [RT #40828]
+
+4226. [bug] Address a theoretical shutdown race in
+ zone.c:notify_send_queue(). [RT #38958]
+
+4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
+ shared libraries. [RT #39557]
+
+4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
+ [RT #40583]
+
+4220. [doc] Improve documentation for zone-statistics.
+ [RT #36955]
+
+4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
+ EGAIN when these soft error are not retried for
+ isc_socket_send*().
+
+4218. [bug] Potential null pointer dereference on out of memory
+ if mmap is not supported. [RT #40777]
+
+4217. [protocol] Add support for CSYNC. [RT #40532]
+
+4216. [cleanup] Silence static analysis warnings. [RT #40649]
+
+4215. [bug] nsupdate: skip to next request on GSSTKEY create
+ failure. [RT #40685]
+
+4214. [protocol] Add support for TALINK. [RT #40544]
+
+4213. [bug] Don't reuse a cache across multiple classes.
+ [RT #40205]
+
+4210. [cleanup] Silence use after free false positive. [RT #40743]
+
+4209. [bug] Address resource leaks in dlz modules. [RT #40654]
+
+4208. [bug] Address null pointer dereferences on out of memory.
+ [RT #40764]
+
+4207. [bug] Handle class mismatches with raw zone files.
+ [RT #40746]
+
+4206. [bug] contrib: fixed a possible NULL dereference in
+ DLZ wildcard module. [RT #40745]
+
+4205. [bug] 'named-checkconf -p' could include unwanted spaces
+ when printing tuples with unset optional fields.
+ [RT #40731]
+
+4204. [bug] 'dig +trace' failed to lookup the correct type if
+ the initial root NS query was retried. [RT #40296]
+
+4203. [test] The rrchecker system test now tests conversion
+ to and from unknown-type format. [RT #40584]
+
+4202. [bug] isccc_cc_fromwire() could return an incorrect
+ result. [RT #40614]
+
+4201. [func] The default preferred-glue is now the address record
+ type of the transport the query was received
+ over. [RT #40468]
+
+4200. [cleanup] win32: update BINDinstall to be BIND release
+ independent. [RT #38915]
+
+4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
+ [RT #40545] [RT #40547] [RT #40561] [RT #40563]
+
+4198. [doc] Add fetch-quota-params, fetches-per-server, and
+ fetches-per-zone to doc/misc/options. [RT #40601]
+
+4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
+ [RT #40603]
+
+4196. [doc] Improve how "enum + other" types are documented.
+ [RT #40608]
+
+4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
- --- 9.10.3-P1 (withdrawn) ---
+4194. [bug] named-checkconf -p failed to properly print a port
+ range. [RT #40634]
--- 9.10.3 released ---
@@ -56,7 +418,7 @@
4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
as per RFC 6763. [RT #37889]
-4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
+4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
valid with check-names. <forest> still needs to be
LDH. [RT #40399]
View
8 external/bsd/bind/dist/FAQ
@@ -1,9 +1,7 @@
-Frequently Asked Questions about BIND 9
-
-Copyright � 2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
+Copyright ? 2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
("ISC")
-Copyright 2000-2003 Internet Software Consortium.
+Copyright ? 2000-2003 Internet Software Consortium.
-----------------------------------------------------------------------
@@ -94,7 +92,7 @@ Q: I'm trying to use TSIG to authenticate dynamic updates or zone
rejecting the TSIG. Why?
A: This may be a clock skew problem. Check that the the clocks on the
- client and server are properly synchronised (e.g., using ntp).
+ client and server are properly synchronized (e.g., using ntp).
Q: I see a log message like the following. Why?
View
160 external/bsd/bind/dist/FAQ.xml
@@ -1,7 +1,5 @@
-<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" []>
<!--
- - Copyright (C) 2004-2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2010, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -17,11 +15,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- Id: FAQ.xml,v 1.54 2010/01/19 23:48:55 tbox Exp -->
+<!-- Converted by db4-upgrade version 1.0 -->
+<article xmlns="http://docbook.org/ns/docbook" version="5.0" class="faq">
-<article class="faq">
- <title>Frequently Asked Questions about BIND 9</title>
- <articleinfo>
+ <info>
<copyright>
<year>2004</year>
<year>2005</year>
@@ -41,11 +38,11 @@
<year>2003</year>
<holder>Internet Software Consortium.</holder>
</copyright>
- </articleinfo>
- <qandaset defaultlabel='qanda'>
-
- <qandadiv><title>Compilation and Installation Questions</title>
-
+ </info>
+ <qandaset defaultlabel="qanda">
+
+ <qandadiv><title>Compilation and Installation Questions</title>
+
<qandaentry>
<question>
<para>
@@ -61,7 +58,7 @@
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -70,7 +67,7 @@
</question>
<answer>
<para>
- Short Answer: No.
+ Short Answer: No.
</para>
<para>
Long Answer: There really isn't a default configuration which fits
@@ -93,9 +90,9 @@
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Compilation and Installation Questions -->
-
+
<qandadiv><title>Configuration and Setup Questions</title>
<qandaentry>
@@ -125,7 +122,7 @@ example.com. 86400 IN SOA ns hostmaster ( 1 3600 1800 1814400 3600 )</programlis
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<!-- configuration -->
<question>
@@ -223,7 +220,7 @@ view "chaos" chaos {
<answer>
<para>
This may be a clock skew problem. Check that the the clocks
- on the client and server are properly synchronised (e.g.,
+ on the client and server are properly synchronized (e.g.,
using ntp).
</para>
</answer>
@@ -251,7 +248,7 @@ view "chaos" chaos {
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -266,7 +263,7 @@ view "chaos" chaos {
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -359,7 +356,7 @@ Slave 10.0.1.2:
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -392,7 +389,7 @@ named-checkzone example.com tmp</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -416,7 +413,7 @@ named-checkzone example.com tmp</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -501,7 +498,7 @@ Master 10.0.1.1:
You are running chrooted (-t) and have not supplied local timezone
information in the chroot area.
</para>
- <simplelist>
+ <simplelist type="vert">
<member>FreeBSD: /etc/localtime</member>
<member>Solaris: /etc/TIMEZONE and /usr/share/lib/zoneinfo</member>
<member>OSF: /etc/zoneinfo/localtime</member>
@@ -511,7 +508,7 @@ Master 10.0.1.1:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -551,7 +548,7 @@ Master 10.0.1.1:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -603,7 +600,7 @@ zone "example.net" {
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -694,9 +691,9 @@ server ::/0 { bogus yes; };
</programlisting>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Configuration and Setup Questions -->
-
+
<qandadiv><title>Operations Questions</title>
<qandaentry>
@@ -768,7 +765,7 @@ server ::/0 { bogus yes; };
</qandadiv> <!-- Operations Questions -->
<qandadiv><title>General Questions</title>
-
+
<qandaentry>
<question>
<para>
@@ -807,14 +804,13 @@ server ::/0 { bogus yes; };
of sending dynamic update requests to DNS servers without
being specifically configured to do so. If the update
requests are coming from a Windows 2000 machine, see
- <ulink
- url="http://support.microsoft.com/support/kb/articles/q246/8/04.asp">
- &lt;http://support.microsoft.com/support/kb/articles/q246/8/04.asp&gt;</ulink>
+ <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://support.microsoft.com/support/kb/articles/q246/8/04.asp">
+ &lt;http://support.microsoft.com/support/kb/articles/q246/8/04.asp&gt;</link>
for information about how to turn them off.
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -849,7 +845,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -867,7 +863,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -883,7 +879,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -910,7 +906,7 @@ serial-query-rate 5; // default 20</programlisting>
</answer>
</qandaentry>
- <qandaentry>
+ <qandaentry>
<question>
<para>
I don't get RRSIG's returned when I use "dig +dnssec".
@@ -922,7 +918,7 @@ serial-query-rate 5; // default 20</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -959,7 +955,7 @@ serial-query-rate 5; // default 20</programlisting>
usage rules and are leaking queries to the Internet. You
should establish your own zones for these addresses to prevent
you querying the Internet's name servers for these addresses.
- Please see <ulink url="http://as112.net/">&lt;http://as112.net/&gt;</ulink>
+ Please see <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://as112.net/">&lt;http://as112.net/&gt;</link>
for details of the problems you are causing and the counter
measures that have had to be deployed.
</para>
@@ -1006,7 +1002,7 @@ empty:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1083,9 +1079,9 @@ empty:
</qandaentry>
</qandadiv> <!-- General Questions -->
-
+
<qandadiv><title>Operating-System Specific Questions</title>
-
+
<qandadiv><title>HPUX</title>
<qandaentry>
@@ -1113,9 +1109,9 @@ configure: error: need either working unistd.h or sys/select.h</programlisting>
</qandadiv> <!-- HPUX -->
<qandadiv><title>Linux</title>
-
+
<qandaentry>
- <question>
+ <question>
<para>
Why do I get the following errors:
<programlisting>general: errno2result.c:109: unexpected error:
@@ -1129,7 +1125,7 @@ client: UDP client handler shutting down due to fatal receive error: unexpected
</para>
<para>
See:
- <ulink url="http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2">&lt;http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2&gt;</ulink>
+ <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2">&lt;http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2&gt;</link>
</para>
</answer>
</qandaentry>
@@ -1146,9 +1142,9 @@ client: UDP client handler shutting down due to fatal receive error: unexpected
non-blocking is ignored. It is reported that setting
xfrm_larval_drop to 1 helps but this may have negative side effects.
See:
-<ulink url="https://bugzilla.redhat.com/show_bug.cgi?id=427629">&lt;https://bugzilla.redhat.com/show_bug.cgi?id=427629&gt;</ulink>
+<link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://bugzilla.redhat.com/show_bug.cgi?id=427629">&lt;https://bugzilla.redhat.com/show_bug.cgi?id=427629&gt;</link>
and
-<ulink url="http://lkml.org/lkml/2007/12/4/260">&lt;http://lkml.org/lkml/2007/12/4/260&gt;</ulink>.
+<link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://lkml.org/lkml/2007/12/4/260">&lt;http://lkml.org/lkml/2007/12/4/260&gt;</link>.
</para>
<para>
xfrm_larval_drop can be set to 1 by the following procedure:
@@ -1178,7 +1174,7 @@ echo "1" &gt; proc/sys/net/core/xfrm_larval_drop</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1197,7 +1193,7 @@ echo "1" &gt; proc/sys/net/core/xfrm_larval_drop</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1218,7 +1214,7 @@ modprobe capability</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1244,8 +1240,7 @@ modprobe capability</programlisting>
<para>
Red Hat have adopted the National Security Agency's
- SELinux security policy (see <ulink
- url="http://www.nsa.gov/selinux">&lt;http://www.nsa.gov/selinux&gt;</ulink>)
+ SELinux security policy (see <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://www.nsa.gov/selinux">&lt;http://www.nsa.gov/selinux&gt;</link>)
and recommendations for BIND security , which are more
secure than running named in a chroot and make use of
the bind-chroot environment unnecessary .
@@ -1279,7 +1274,7 @@ $ROOTDIR/var/tmp
able to write or create files except in the directories
above, with SELinux in Enforcing mode.
</para>
-
+
<para>
So, to allow named to update slave or DDNS zone files,
it is best to locate them in $ROOTDIR/var/named/slaves,
@@ -1290,7 +1285,7 @@ zone "slave.zone." IN {
type slave;
file "slaves/slave.zone.db";
...
-};
+};
zone "ddns.zone." IN {
type master;
allow-updates {...};
@@ -1323,13 +1318,13 @@ options {
system-config-securitylevel GUI, using the 'setsebool'
command, or in /etc/selinux/targeted/booleans.
</para>
-
+
<para>
You can disable SELinux protection for named entirely by
setting the 'named_disable_trans=1' SELinux tunable boolean
parameter.
</para>
-
+
<para>
The SELinux named policy defines these SELinux contexts for named:
<informalexample>
@@ -1340,7 +1335,7 @@ named_cache_t: for files modifiable by named - $ROOTDIR/var/{tmp,named/{slaves,d
</programlisting>
</informalexample>
</para>
-
+
<para>
If you want to retain use of the SELinux policy for named,
and put named files in different locations, you can do
@@ -1358,7 +1353,7 @@ named_cache_t: for files modifiable by named - $ROOTDIR/var/{tmp,named/{slaves,d
</programlisting>
</informalexample>
</para>
-
+
<para>
To create a custom modifiable named data location, e.g.
'/var/log/named' for a log file, do:
@@ -1368,7 +1363,7 @@ named_cache_t: for files modifiable by named - $ROOTDIR/var/{tmp,named/{slaves,d
</programlisting>
</informalexample>
</para>
-
+
<para>
To create a custom zone file location, e.g. /root/zones/, do:
<informalexample>
@@ -1377,7 +1372,7 @@ named_cache_t: for files modifiable by named - $ROOTDIR/var/{tmp,named/{slaves,d
</programlisting>
</informalexample>
</para>
-
+
<para>
See these man-pages for more information : selinux(8),
named_selinux(8), chcon(1), setsebool(8)
@@ -1403,8 +1398,8 @@ named_cache_t: for files modifiable by named - $ROOTDIR/var/{tmp,named/{slaves,d
</question>
<answer>
<para>
- Ubuntu uses AppArmor <ulink url="http://en.wikipedia.org/wiki/AppArmor">
- &lt;http://en.wikipedia.org/wiki/AppArmor&gt;</ulink> in
+ Ubuntu uses AppArmor <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://en.wikipedia.org/wiki/AppArmor">
+ &lt;http://en.wikipedia.org/wiki/AppArmor&gt;</link> in
addition to normal file system permissions to protect the system.
</para>
<para>
@@ -1438,11 +1433,11 @@ proc /var/named/proc proc defaults 0 0</programlisting>
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Linux -->
-
+
<qandadiv><title>Windows</title>
-
+
<qandaentry>
<question>
<para>
@@ -1463,7 +1458,7 @@ proc /var/named/proc proc defaults 0 0</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1489,11 +1484,11 @@ options {
</informalexample>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Windows -->
-
+
<qandadiv><title>FreeBSD</title>
-
+
<qandaentry>
<question>
<para>
@@ -1513,16 +1508,16 @@ rand_irqs="3 14 15"</programlisting>
</informalexample>
<para>
See also
- <ulink url="http://people.freebsd.org/~dougb/randomness.html">
- &lt;http://people.freebsd.org/~dougb/randomness.html&gt;</ulink>.
+ <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://people.freebsd.org/~dougb/randomness.html">
+ &lt;http://people.freebsd.org/~dougb/randomness.html&gt;</link>.
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- FreeBSD -->
-
+
<qandadiv><title>Solaris</title>
-
+
<qandaentry>
<question>
<para>
@@ -1534,15 +1529,14 @@ rand_irqs="3 14 15"</programlisting>
Sun has a blog entry describing how to do this.
</para>
<para>
- <ulink
- url="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris">
+ <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris">
&lt;http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris&gt;
- </ulink>
+ </link>
</para>
</answer>
</qandaentry>
-
- </qandadiv>
+
+ </qandadiv> <!-- Solaris -->
<qandadiv><title>Apple Mac OS X</title>
@@ -1558,7 +1552,7 @@ rand_irqs="3 14 15"</programlisting>
</para>
<informalexample>
<programlisting>
-% sudo rndc-confgen > /etc/rndc.conf</programlisting>
+% sudo rndc-confgen &gt; /etc/rndc.conf</programlisting>
</informalexample>
<para>
Copy the key statement from /etc/rndc.conf into /etc/rndc.key, e.g.:
@@ -1606,8 +1600,8 @@ key "rndc-key" {
</answer>
</qandaentry>
- </qandadiv>
-
+ </qandadiv> <!-- Apple Mac OS X -->
+
</qandadiv> <!-- Operating-System Specific Questions -->
</qandaset>
View
7 external/bsd/bind/dist/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2009, 2011-2015 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 1998-2002 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -19,7 +19,7 @@ srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
SUBDIRS = make unit lib bin doc
TARGETS =
@@ -33,6 +33,9 @@ MANOBJS = ${MANPAGES} ${HTMLPAGES}
@BIND9_MAKE_RULES@
+newrr:
+ cd lib/dns; ${MAKE} newrr
+
bind.keys.h: ${top_srcdir}/bind.keys ${srcdir}/util/bindkeys.pl
${PERL} ${srcdir}/util/bindkeys.pl < ${top_srcdir}/bind.keys > $@
View
36 external/bsd/bind/dist/README
@@ -51,29 +51,21 @@ BIND 9
For up-to-date release notes and errata, see
http://www.isc.org/software/bind9/releasenotes
+BIND 9.10.4-P1
-BIND 9.10.3-P4
+ This version contains tree urgent fixes to BIND 9.10.4:
+ 1) Windows installation was failing without manual updating
+ of BINDinstall's attributes.
+ 2) Windows doesn't support the %z printf modifier.
+ 3) A race condition was causing instability in the rbt
+ tree state.
- BIND 9.10.3-P4 is a security release addressing the flaws
- described in CVE-2016-1285, CVE-2016-1286 and CVE-2016-2088.
+BIND 9.10.4
-BIND 9.10.3-P3
-
- BIND 9.10.3-P3 is a security release addressing the flaws
- described in CVE-2015-8704 and CVE-2015-8705. It also fixes
- a serious regression in authoritative server selection that
- was introduced in BIND 9.10.3.
-
-BIND 9.10.3-P2
-
- BIND 9.10.3-P2 is a security release addressing the flaws
- described in CVE-2015-3193 (OpenSSL), CVE-2015-8000 and
- CVE-2015-8461.
-
-BIND 9.10.3-P1
-
- BIND 9.10.3-P1 was incomplete and was withdrawn prior to
- publication.
+ BIND 9.10.4 is a maintenance release and addresses bugs
+ found in BIND 9.10.3 and earlier, as well as the security
+ flaws described in CVE-2015-8000, CVE-2015-8461, CVE-2015-8704,
+ CVE-2015-8705, CVE-2016-1285, CVE-2016-1286, and CVE-2016-2088.
BIND 9.10.3
@@ -104,7 +96,7 @@ BIND 9.10.3
NOTE: These features are NOT built in by default; use
"configure --enable-fetchlimit" to enable them.
- - Dig now supports sending of arbitary EDNS options by specifying
+ - Dig now supports sending of arbitrary EDNS options by specifying
them on the command line.
BIND 9.10.2
@@ -541,6 +533,8 @@ Change Log
[tuning] Changes to built-in configuration defaults
and constants to improve performance
+ [performance] Other changes to improve server performance
+
[protocol] Updates to the DNS protocol such as new
RR types
View
7 external/bsd/bind/dist/acconfig.h
@@ -1,7 +1,7 @@
-/* $NetBSD: acconfig.h,v 1.1.1.9 2014/12/10 03:34:22 christos Exp $ */
+/* $NetBSD: acconfig.h,v 1.1.1.10 2016/05/26 15:45:39 christos Exp $ */
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014, 2016 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -148,3 +148,6 @@ int sigwait(const unsigned int *set, int *sig);
/* Define if threads need PTHREAD_SCOPE_SYSTEM */
#undef NEED_PTHREAD_SCOPE_SYSTEM
+
+/* Define to 1 if you have the uname library function. */
+#undef HAVE_UNAME
View
4 external/bsd/bind/dist/bin/check/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2007, 2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2007, 2009, 2012, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2000-2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -19,7 +19,7 @@ srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
@BIND9_MAKE_INCLUDES@
View
94 external/bsd/bind/dist/bin/check/named-checkconf.8
@@ -1,6 +1,6 @@
-.\" $NetBSD: named-checkconf.8,v 1.1.1.9 2014/12/10 03:34:23 christos Exp $
+.\" $NetBSD: named-checkconf.8,v 1.1.1.10 2016/05/26 15:45:40 christos Exp $
.\"
-.\" Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2002 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -15,115 +15,131 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" Id
-.\"
.hy 0
.ad l
-.\" Title: named\-checkconf
+'\" t
+.\" Title: named-checkconf
.\" Author:
-.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: January 10, 2014
+.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
+.\" Date: 2014-01-10
.\" Manual: BIND9
-.\" Source: BIND9
+.\" Source: ISC
+.\" Language: English
.\"
-.TH "NAMED\-CHECKCONF" "8" "January 10, 2014" "BIND9" "BIND9"
+.TH "NAMED\-CHECKCONF" "8" "2014\-01\-10" "ISC" "BIND9"
+.\" -----------------------------------------------------------------
+.\" * Define some portability stuff
+.\" -----------------------------------------------------------------
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.\" http://bugs.debian.org/507673
+.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.\" -----------------------------------------------------------------
+.\" * set default formatting
+.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
+.\" -----------------------------------------------------------------
+.\" * MAIN CONTENT STARTS HERE *
+.\" -----------------------------------------------------------------
.SH "NAME"
-named\-checkconf \- named configuration file syntax checking tool
+named-checkconf \- named configuration file syntax checking tool
.SH "SYNOPSIS"
-.HP 16
+.HP \w'\fBnamed\-checkconf\fR\ 'u
\fBnamed\-checkconf\fR [\fB\-h\fR] [\fB\-v\fR] [\fB\-j\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] {filename} [\fB\-p\fR] [\fB\-x\fR] [\fB\-z\fR]
.SH "DESCRIPTION"
.PP
\fBnamed\-checkconf\fR
checks the syntax, but not the semantics, of a
\fBnamed\fR
-configuration file. The file is parsed and checked for syntax errors, along with all files included by it. If no file is specified,
-\fI/etc/named.conf\fR
-is read by default.
+configuration file\&. The file is parsed and checked for syntax errors, along with all files included by it\&. If no file is specified,
+/etc/named\&.conf
+is read by default\&.
.PP
Note: files that
\fBnamed\fR
reads in separate parser contexts, such as
-\fIrndc.key\fR
+rndc\&.key
and
-\fIbind.keys\fR, are not automatically read by
-\fBnamed\-checkconf\fR. Configuration errors in these files may cause
+bind\&.keys, are not automatically read by
+\fBnamed\-checkconf\fR\&. Configuration errors in these files may cause
\fBnamed\fR
to fail to run, even if
\fBnamed\-checkconf\fR
-was successful.
+was successful\&.
\fBnamed\-checkconf\fR
-can be run on these files explicitly, however.
+can be run on these files explicitly, however\&.
.SH "OPTIONS"
.PP
\-h
.RS 4
-Print the usage summary and exit.
+Print the usage summary and exit\&.
.RE
.PP
\-t \fIdirectory\fR
.RS 4
Chroot to
-\fIdirectory\fR
-so that include directives in the configuration file are processed as if run by a similarly chrooted named.
+directory
+so that include directives in the configuration file are processed as if run by a similarly chrooted named\&.
.RE
.PP
\-v
.RS 4
Print the version of the
\fBnamed\-checkconf\fR
-program and exit.
+program and exit\&.
.RE
.PP
\-p
.RS 4
Print out the
-\fInamed.conf\fR
-and included files in canonical form if no errors were detected.
+named\&.conf
+and included files in canonical form if no errors were detected\&.
.RE
.PP
\-x
.RS 4
-When printing the configuration files in canonical form, obscure shared secrets by replacing them with strings of question marks ('?'). This allows the contents of
-\fInamed.conf\fR
-and related files to be shared \(em for example, when submitting bug reports \(em without compromising private data. This option cannot be used without
-\fB\-p\fR.
+When printing the configuration files in canonical form, obscure shared secrets by replacing them with strings of question marks (\*(Aq?\*(Aq)\&. This allows the contents of
+named\&.conf
+and related files to be shared \(em for example, when submitting bug reports \(em without compromising private data\&. This option cannot be used without
+\fB\-p\fR\&.
.RE
.PP
\-z
.RS 4
Perform a test load of all master zones found in
-\fInamed.conf\fR.
+named\&.conf\&.
.RE
.PP
\-j
.RS 4
-When loading a zonefile read the journal if it exists.
+When loading a zonefile read the journal if it exists\&.
.RE
.PP
filename
.RS 4
-The name of the configuration file to be checked. If not specified, it defaults to
-\fI/etc/named.conf\fR.
+The name of the configuration file to be checked\&. If not specified, it defaults to
+/etc/named\&.conf\&.
.RE
.SH "RETURN VALUES"
.PP
\fBnamed\-checkconf\fR
-returns an exit status of 1 if errors were detected and 0 otherwise.
+returns an exit status of 1 if errors were detected and 0 otherwise\&.
.SH "SEE ALSO"
.PP
\fBnamed\fR(8),
-\fBnamed\-checkzone\fR(8),
-BIND 9 Administrator Reference Manual.
+\fBnamed-checkzone\fR(8),
+BIND 9 Administrator Reference Manual\&.
.SH "AUTHOR"
.PP
-Internet Systems Consortium
+\fBInternet Systems Consortium, Inc\&.\fR
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
-Copyright \(co 2000\-2002 Internet Software Consortium.
+Copyright \(co 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
+.br
+Copyright \(co 2000-2002 Internet Software Consortium.
.br
View
48 external/bsd/bind/dist/bin/check/named-checkconf.c
@@ -1,7 +1,7 @@
-/* $NetBSD: named-checkconf.c,v 1.1.1.15 2015/12/17 03:21:50 christos Exp $ */
+/* $NetBSD: named-checkconf.c,v 1.1.1.16 2016/05/26 15:45:40 christos Exp $ */
/*
- * Copyright (C) 2004-2007, 2009-2015 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2016 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -182,6 +182,7 @@ configure_zone(const char *vclass, const char *view,
const char *zfile = NULL;
const cfg_obj_t *maps[4];
const cfg_obj_t *mastersobj = NULL;
+ const cfg_obj_t *inviewobj = NULL;
const cfg_obj_t *zoptions = NULL;
const cfg_obj_t *classobj = NULL;
const cfg_obj_t *typeobj = NULL;
@@ -213,6 +214,10 @@ configure_zone(const char *vclass, const char *view,
}
maps[i] = NULL;
+ cfg_map_get(zoptions, "in-view", &inviewobj);
+ if (inviewobj != NULL)
+ return (ISC_R_SUCCESS);
+
cfg_map_get(zoptions, "type", &typeobj);
if (typeobj == NULL)
return (ISC_R_FAILURE);
@@ -438,15 +443,27 @@ configure_view(const char *vclass, const char *view, const cfg_obj_t *config,
return (result);
}
+static isc_result_t
+config_getclass(const cfg_obj_t *classobj, dns_rdataclass_t defclass,
+ dns_rdataclass_t *classp)
+{
+ isc_textregion_t r;
+
+ if (!cfg_obj_isstring(classobj)) {
+ *classp = defclass;
+ return (ISC_R_SUCCESS);
+ }
+ DE_CONST(cfg_obj_asstring(classobj), r.base);
+ r.length = strlen(r.base);
+ return (dns_rdataclass_fromtext(classp, &r));
+}
/*% load zones from the configuration */
static isc_result_t
load_zones_fromconfig(const cfg_obj_t *config, isc_mem_t *mctx) {
const cfg_listelt_t *element;
- const cfg_obj_t *classobj;
const cfg_obj_t *views;
const cfg_obj_t *vconfig;
- const char *vclass;
isc_result_t result = ISC_R_SUCCESS;
isc_result_t tresult;
@@ -457,17 +474,24 @@ load_zones_fromconfig(const cfg_obj_t *config, isc_mem_t *mctx) {
element != NULL;
element = cfg_list_next(element))
{
+ const cfg_obj_t *classobj;
+ dns_rdataclass_t viewclass;
const char *vname;
+ char buf[sizeof("CLASS65535")];
- vclass = "IN";
vconfig = cfg_listelt_value(element);
- if (vconfig != NULL) {
- classobj = cfg_tuple_get(vconfig, "class");
- if (cfg_obj_isstring(classobj))
- vclass = cfg_obj_asstring(classobj);
- }
+ if (vconfig == NULL)
+ continue;
+
+ classobj = cfg_tuple_get(vconfig, "class");
+ CHECK(config_getclass(classobj, dns_rdataclass_in,
+ &viewclass));
+ if (dns_rdataclass_ismeta(viewclass))
+ CHECK(ISC_R_FAILURE);
+
+ dns_rdataclass_format(viewclass, buf, sizeof(buf));
vname = cfg_obj_asstring(cfg_tuple_get(vconfig, "name"));
- tresult = configure_view(vclass, vname, config, vconfig, mctx);
+ tresult = configure_view(buf, vname, config, vconfig, mctx);
if (tresult != ISC_R_SUCCESS)
result = tresult;
}
@@ -477,6 +501,8 @@ load_zones_fromconfig(const cfg_obj_t *config, isc_mem_t *mctx) {
if (tresult != ISC_R_SUCCESS)
result = tresult;
}
+
+cleanup:
return (result);
}
View
72 external/bsd/bind/dist/bin/check/named-checkconf.docbook
@@ -1,8 +1,7 @@
-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
- [<!ENTITY mdash "&#8212;">]>
+<!DOCTYPE book [
+<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,9 +17,14 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<refentry id="man.named-checkconf">
+<!-- Converted by db4-upgrade version 1.0 -->
+<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named-checkconf">
+ <info>
+ <date>2014-01-10</date>
+ </info>
<refentryinfo>
- <date>January 10, 2014</date>
+ <corpname>ISC</corpname>
+ <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
</refentryinfo>
<refmeta>
@@ -36,6 +40,7 @@
<year>2007</year>
<year>2009</year>
<year>2014</year>
+ <year>2015</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -52,21 +57,21 @@
</refnamediv>
<refsynopsisdiv>
- <cmdsynopsis>
+ <cmdsynopsis sepchar=" ">
<command>named-checkconf</command>
- <arg><option>-h</option></arg>
- <arg><option>-v</option></arg>
- <arg><option>-j</option></arg>
- <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
- <arg choice="req">filename</arg>
- <arg><option>-p</option></arg>
- <arg><option>-x</option></arg>
- <arg><option>-z</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-h</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-v</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-j</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
+ <arg choice="req" rep="norepeat">filename</arg>
+ <arg choice="opt" rep="norepeat"><option>-p</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-x</option></arg>
+ <arg choice="opt" rep="norepeat"><option>-z</option></arg>
</cmdsynopsis>
</refsynopsisdiv>
- <refsect1>
- <title>DESCRIPTION</title>
+ <refsection><info><title>DESCRIPTION</title></info>
+
<para><command>named-checkconf</command>
checks the syntax, but not the semantics, of a
<command>named</command> configuration file. The file is parsed
@@ -84,10 +89,10 @@
successful. <command>named-checkconf</command> can be run
on these files explicitly, however.
</para>
- </refsect1>
+ </refsection>
+
+ <refsection><info><title>OPTIONS</title></info>
- <refsect1>
- <title>OPTIONS</title>
<variablelist>
<varlistentry>
@@ -176,18 +181,18 @@
</variablelist>
- </refsect1>
+ </refsection>
+
+ <refsection><info><title>RETURN VALUES</title></info>
- <refsect1>
- <title>RETURN VALUES</title>
<para><command>named-checkconf</command>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</para>
- </refsect1>
+ </refsection>
+
+ <refsection><info><title>SEE ALSO</title></info>
- <refsect1>
- <title>SEE ALSO</title>
<para><citerefentry>
<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
@@ -196,16 +201,5 @@
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>.
</para>
- </refsect1>
-
- <refsect1>
- <title>AUTHOR</title>
- <para><corpauthor>Internet Systems Consortium</corpauthor>
- </para>
- </refsect1>
-
-</refentry><!--
- - Local variables:
- - mode: sgml
- - End:
--->
+ </refsection>
+</refentry>
View
48 external/bsd/bind/dist/bin/check/named-checkconf.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -14,14 +14,13 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- Id -->
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named-checkconf</title>
-<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
+<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
</head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
+<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
<a name="man.named-checkconf"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
@@ -31,29 +30,29 @@
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-x</code>] [<code class="option">-z</code>]</p></div>
</div>
-<div class="refsect1" lang="en">
-<a name="id2543411"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">named-checkconf</strong></span>
+<div class="refsection">
+<a name="id-1.7"></a><h2>DESCRIPTION</h2>
+<p><span class="command"><strong>named-checkconf</strong></span>
checks the syntax, but not the semantics, of a
- <span><strong class="command">named</strong></span> configuration file. The file is parsed
+ <span class="command"><strong>named</strong></span> configuration file. The file is parsed
and checked for syntax errors, along with all files included by it.
If no file is specified, <code class="filename">/etc/named.conf</code> is read
by default.
</p>
<p>
- Note: files that <span><strong class="command">named</strong></span> reads in separate
+ Note: files that <span class="command"><strong>named</strong></span> reads in separate
parser contexts, such as <code class="filename">rndc.key</code> and
<code class="filename">bind.keys</code>, are not automatically read
- by <span><strong class="command">named-checkconf</strong></span>. Configuration
- errors in these files may cause <span><strong class="command">named</strong></span> to
- fail to run, even if <span><strong class="command">named-checkconf</strong></span> was
- successful. <span><strong class="command">named-checkconf</strong></span> can be run
+ by <span class="command"><strong>named-checkconf</strong></span>. Configuration
+ errors in these files may cause <span class="command"><strong>named</strong></span> to
+ fail to run, even if <span class="command"><strong>named-checkconf</strong></span> was
+ successful. <span class="command"><strong>named-checkconf</strong></span> can be run
on these files explicitly, however.
</p>
</div>
-<div class="refsect1" lang="en">
-<a name="id2543460"></a><h2>OPTIONS</h2>
-<div class="variablelist"><dl>
+<div class="refsection">
+<a name="id-1.8"></a><h2>OPTIONS</h2>
+<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-h</span></dt>
<dd><p>
Print the usage summary and exit.
@@ -66,7 +65,7 @@
</p></dd>
<dt><span class="term">-v</span></dt>
<dd><p>
- Print the version of the <span><strong class="command">named-checkconf</strong></span>
+ Print the version of the <span class="command"><strong>named-checkconf</strong></span>
program and exit.
</p></dd>
<dt><span class="term">-p</span></dt>
@@ -100,24 +99,19 @@
</p></dd>
</dl></div>
</div>
-<div class="refsect1" lang="en">
-<a name="id2543604"></a><h2>RETURN VALUES</h2>
-<p><span><strong class="command">named-checkconf</strong></span>
+<div class="refsection">
+<a name="id-1.9"></a><h2>RETURN VALUES</h2>
+<p><span class="command"><strong>named-checkconf</strong></span>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</p>
</div>
-<div class="refsect1" lang="en">
-<a name="id2543616"></a><h2>SEE ALSO</h2>
+<div class="refsection">
+<a name="id-1.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
-<div class="refsect1" lang="en">
-<a name="id2543645"></a><h2>AUTHOR</h2>
-<p><span class="corpauthor">Internet Systems Consortium</span>
- </p>
-</div>
</div></body>
</html>
View
184 external/bsd/bind/dist/bin/check/named-checkzone.8
@@ -1,6 +1,6 @@
-.\" $NetBSD: named-checkzone.8,v 1.1.1.11 2014/12/10 03:34:23 christos Exp $
+.\" $NetBSD: named-checkzone.8,v 1.1.1.12 2016/05/26 15:45:40 christos Exp $
.\"
-.\" Copyright (C) 2004-2007, 2009-2014 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2007, 2009-2015 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2002 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -15,112 +15,127 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" Id
-.\"
.hy 0
.ad l
-.\" Title: named\-checkzone
+'\" t
+.\" Title: named-checkzone
.\" Author:
-.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: February 19, 2014
+.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
+.\" Date: 2014-02-19
.\" Manual: BIND9
-.\" Source: BIND9
+.\" Source: ISC
+.\" Language: English
.\"
-.TH "NAMED\-CHECKZONE" "8" "February 19, 2014" "BIND9" "BIND9"
+.TH "NAMED\-CHECKZONE" "8" "2014\-02\-19" "ISC" "BIND9"
+.\" -----------------------------------------------------------------
+.\" * Define some portability stuff
+.\" -----------------------------------------------------------------
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.\" http://bugs.debian.org/507673
+.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.\" -----------------------------------------------------------------
+.\" * set default formatting
+.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
+.\" -----------------------------------------------------------------
+.\" * MAIN CONTENT STARTS HERE *
+.\" -----------------------------------------------------------------
.SH "NAME"
-named\-checkzone, named\-compilezone \- zone file validity checking or converting tool
+named-checkzone, named-compilezone \- zone file validity checking or converting tool
.SH "SYNOPSIS"
-.HP 16
+.HP \w'\fBnamed\-checkzone\fR\ 'u
\fBnamed\-checkzone\fR [\fB\-d\fR] [\fB\-h\fR] [\fB\-j\fR] [\fB\-q\fR] [\fB\-v\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-f\ \fR\fB\fIformat\fR\fR] [\fB\-F\ \fR\fB\fIformat\fR\fR] [\fB\-J\ \fR\fB\fIfilename\fR\fR] [\fB\-i\ \fR\fB\fImode\fR\fR] [\fB\-k\ \fR\fB\fImode\fR\fR] [\fB\-m\ \fR\fB\fImode\fR\fR] [\fB\-M\ \fR\fB\fImode\fR\fR] [\fB\-n\ \fR\fB\fImode\fR\fR] [\fB\-l\ \fR\fB\fIttl\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-o\ \fR\fB\fIfilename\fR\fR] [\fB\-r\ \fR\fB\fImode\fR\fR] [\fB\-s\ \fR\fB\fIstyle\fR\fR] [\fB\-S\ \fR\fB\fImode\fR\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] [\fB\-T\ \fR\fB\fImode\fR\fR] [\fB\-w\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-W\ \fR\fB\fImode\fR\fR] {zonename} {filename}
-.HP 18
+.HP \w'\fBnamed\-compilezone\fR\ 'u
\fBnamed\-compilezone\fR [\fB\-d\fR] [\fB\-j\fR] [\fB\-q\fR] [\fB\-v\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-C\ \fR\fB\fImode\fR\fR] [\fB\-f\ \fR\fB\fIformat\fR\fR] [\fB\-F\ \fR\fB\fIformat\fR\fR] [\fB\-J\ \fR\fB\fIfilename\fR\fR] [\fB\-i\ \fR\fB\fImode\fR\fR] [\fB\-k\ \fR\fB\fImode\fR\fR] [\fB\-m\ \fR\fB\fImode\fR\fR] [\fB\-n\ \fR\fB\fImode\fR\fR] [\fB\-l\ \fR\fB\fIttl\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-r\ \fR\fB\fImode\fR\fR] [\fB\-s\ \fR\fB\fIstyle\fR\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] [\fB\-T\ \fR\fB\fImode\fR\fR] [\fB\-w\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-W\ \fR\fB\fImode\fR\fR] {\fB\-o\ \fR\fB\fIfilename\fR\fR} {zonename} {filename}
.SH "DESCRIPTION"
.PP
\fBnamed\-checkzone\fR
-checks the syntax and integrity of a zone file. It performs the same checks as
+checks the syntax and integrity of a zone file\&. It performs the same checks as
\fBnamed\fR
-does when loading a zone. This makes
+does when loading a zone\&. This makes
\fBnamed\-checkzone\fR
-useful for checking zone files before configuring them into a name server.
+useful for checking zone files before configuring them into a name server\&.
.PP
\fBnamed\-compilezone\fR
is similar to
-\fBnamed\-checkzone\fR, but it always dumps the zone contents to a specified file in a specified format. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by
-\fBnamed\fR. When manually specified otherwise, the check levels must at least be as strict as those specified in the
+\fBnamed\-checkzone\fR, but it always dumps the zone contents to a specified file in a specified format\&. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by
+\fBnamed\fR\&. When manually specified otherwise, the check levels must at least be as strict as those specified in the
\fBnamed\fR
-configuration file.
+configuration file\&.
.SH "OPTIONS"
.PP
\-d
.RS 4
-Enable debugging.
+Enable debugging\&.
.RE
.PP
\-h
.RS 4
-Print the usage summary and exit.
+Print the usage summary and exit\&.
.RE
.PP
\-q
.RS 4
-Quiet mode \- exit code only.
+Quiet mode \- exit code only\&.
.RE
.PP
\-v
.RS 4
Print the version of the
\fBnamed\-checkzone\fR
-program and exit.
+program and exit\&.
.RE
.PP
\-j
.RS 4
-When loading a zone file, read the journal if it exists. The journal file name is assumed to be the zone file name appended with the string
-\fI.jnl\fR.
+When loading a zone file, read the journal if it exists\&. The journal file name is assumed to be the zone file name appended with the string
+\&.jnl\&.
.RE
.PP
\-J \fIfilename\fR
.RS 4
-When loading the zone file read the journal from the given file, if it exists. (Implies \-j.)
+When loading the zone file read the journal from the given file, if it exists\&. (Implies \-j\&.)
.RE
.PP
\-c \fIclass\fR
.RS 4
-Specify the class of the zone. If not specified, "IN" is assumed.
+Specify the class of the zone\&. If not specified, "IN" is assumed\&.
.RE
.PP
\-i \fImode\fR
.RS 4
-Perform post\-load zone integrity checks. Possible modes are
+Perform post\-load zone integrity checks\&. Possible modes are
\fB"full"\fR
(default),
\fB"full\-sibling"\fR,
\fB"local"\fR,
\fB"local\-sibling"\fR
and
-\fB"none"\fR.
+\fB"none"\fR\&.
.sp
Mode
\fB"full"\fR
-checks that MX records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). Mode
+checks that MX records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. Mode
\fB"local"\fR
-only checks MX records which refer to in\-zone hostnames.
+only checks MX records which refer to in\-zone hostnames\&.
.sp
Mode
\fB"full"\fR
-checks that SRV records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). Mode
+checks that SRV records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. Mode
\fB"local"\fR
-only checks SRV records which refer to in\-zone hostnames.
+only checks SRV records which refer to in\-zone hostnames\&.
.sp
Mode
\fB"full"\fR
-checks that delegation NS records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). It also checks that glue address records in the zone match those advertised by the child. Mode
+checks that delegation NS records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. It also checks that glue address records in the zone match those advertised by the child\&. Mode
\fB"local"\fR
-only checks NS records which refer to in\-zone hostnames or that some required glue exists, that is when the nameserver is in a child zone.
+only checks NS records which refer to in\-zone hostnames or that some required glue exists, that is when the nameserver is in a child zone\&.
.sp
Mode
\fB"full\-sibling"\fR
@@ -130,196 +145,197 @@ disable sibling glue checks but are otherwise the same as
\fB"full"\fR
and
\fB"local"\fR
-respectively.
+respectively\&.
.sp
Mode
\fB"none"\fR
-disables the checks.
+disables the checks\&.
.RE
.PP
\-f \fIformat\fR
.RS 4
-Specify the format of the zone file. Possible formats are
+Specify the format of the zone file\&. Possible formats are
\fB"text"\fR
(default),
\fB"raw"\fR, and
-\fB"map"\fR.
+\fB"map"\fR\&.
.RE
.PP
\-F \fIformat\fR
.RS 4
-Specify the format of the output file specified. For
-\fBnamed\-checkzone\fR, this does not cause any effects unless it dumps the zone contents.
+Specify the format of the output file specified\&. For
+\fBnamed\-checkzone\fR, this does not cause any effects unless it dumps the zone contents\&.
.sp
Possible formats are
\fB"text"\fR
(default), which is the standard textual representation of the zone, and
\fB"map"\fR,
\fB"raw"\fR, and
\fB"raw=N"\fR, which store the zone in a binary format for rapid loading by
-\fBnamed\fR.
+\fBnamed\fR\&.
\fB"raw=N"\fR
specifies the format version of the raw zone file: if N is 0, the raw file can be read by any version of
-\fBnamed\fR; if N is 1, the file can be read by release 9.9.0 or higher; the default is 1.
+\fBnamed\fR; if N is 1, the file can be read by release 9\&.9\&.0 or higher; the default is 1\&.
.RE
.PP
\-k \fImode\fR
.RS 4
Perform
\fB"check\-names"\fR
-checks with the specified failure mode. Possible modes are
+checks with the specified failure mode\&. Possible modes are
\fB"fail"\fR
(default for
\fBnamed\-compilezone\fR),
\fB"warn"\fR
(default for
\fBnamed\-checkzone\fR) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
.RE
.PP
\-l \fIttl\fR
.RS 4
-Sets a maximum permissible TTL for the input file. Any record with a TTL higher than this value will cause the zone to be rejected. This is similar to using the
+Sets a maximum permissible TTL for the input file\&. Any record with a TTL higher than this value will cause the zone to be rejected\&. This is similar to using the
\fBmax\-zone\-ttl\fR
option in
-\fInamed.conf\fR.
+named\&.conf\&.
.RE
.PP
\-L \fIserial\fR
.RS 4
-When compiling a zone to "raw" or "map" format, set the "source serial" value in the header to the specified serial number. (This is expected to be used primarily for testing purposes.)
+When compiling a zone to "raw" or "map" format, set the "source serial" value in the header to the specified serial number\&. (This is expected to be used primarily for testing purposes\&.)
.RE
.PP
\-m \fImode\fR
.RS 4
-Specify whether MX records should be checked to see if they are addresses. Possible modes are
+Specify whether MX records should be checked to see if they are addresses\&. Possible modes are
\fB"fail"\fR,
\fB"warn"\fR
(default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
.RE
.PP
\-M \fImode\fR
.RS 4
-Check if a MX record refers to a CNAME. Possible modes are
+Check if a MX record refers to a CNAME\&. Possible modes are
\fB"fail"\fR,
\fB"warn"\fR
(default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
.RE
.PP
\-n \fImode\fR
.RS 4
-Specify whether NS records should be checked to see if they are addresses. Possible modes are
+Specify whether NS records should be checked to see if they are addresses\&. Possible modes are
\fB"fail"\fR
(default for
\fBnamed\-compilezone\fR),
\fB"warn"\fR
(default for
\fBnamed\-checkzone\fR) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
.RE
.PP
\-o \fIfilename\fR
.RS 4
Write zone output to
-\fIfilename\fR. If
-\fIfilename\fR
+filename\&. If
+filename
is
-\fI\-\fR
-then write to standard out. This is mandatory for
-\fBnamed\-compilezone\fR.
+\-