upgrade to 9.3.0s20021113

1400.	[bug]		Block the addition of wildcard NS records by IXFR
			or UPDATE. [RT #3502]
1399.	[bug]		Use serial number arithmetic when testing SIG
			timestamps. [RT #4268]
1398.	[doc]		ARM: notify-also should have been also-notify.
			[RT #4345]
1397.	[bug]		J.ROOT-SERVERS.NET is now 192.58.128.30.
1396.	[func]		dnssec-signzone: adjust the default signing time by
			1 hour to allow for clock skew.
1395.	[port]		OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
			have a working implementation.  [RT #4079]
1394.	[func]		It is now possible to check if a particular element is
			in a acl.  Remove duplicate entries from the localnets
			acl.
1393.	[port]		Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
			is not available in the kernel to prevent accidently
			listening on IPv4 interfaces.
1392.	[bug]		named-checkzone: update usage.
1391.	[func]		Add support for IPv6 scoped addresses in named.
1390.	[func]		host now supports ixfr.
1389.	[bug]		named could fail to rotate long log files.  [RT #3666]
1388.	[port]		irix: check for sys/sysctl.h and NET_RT_IFLIST before
			defining HAVE_IFLIST_SYSCTL. [RT #3770]
1387.	[bug]		named could crash due to an access to invalid memory
			space (which caused an assertion failure) in
			incremental cleaning.  [RT #3588]
1386.	[bug]		named-checkzone -z stopped on errors in a zone.
			[RT #3653]
1385.	[bug]		Setting serial-query-rate to 10 would trigger a
			REQUIRE failure.
1384.	[bug]		host was incompatible with BIND 8 in its exit code and
			in the output with the -l option.  [RT #3536]
1383.	[func]		Track the serial number in a IXFR response and log if
			a mismatch occurs.  This is a more specific error than
			"not exact". [RT #3445]
1382.	[bug]		make install failed with --enable-libbind. [RT #3656]
1381.	[bug]		named failed to correctly process answers that
			contained DNAME records where the resulting CNAME
			resulted in a negative answer.
1380.	[func]		'rndc recursing' dump recursing queries to
			'recursing-file = "named.recursing";'.
1379.	[func]		'rndc status' now reports tcp and recursion quota
			states.
1378.	[func]		Improved positive feedback for 'rndc {reload|refresh}.
1377.	[func]		dns_zone_load{new}() now reports if the zone was
			loaded, queued for loading to up to date.
1376.	[func]		New function dns_zone_logc() to log to specified
			category.
1375.	[func]		'rndc dumpdb' now dumps the adb cache along with the
			data cache.
1374.	[func]		dns_adb_dump() now logs the lame zones associated
			with each server.
1373.	[bug]		Recovery from expired glue failed under certian
			circumstances.
1372.	[bug]		named crashes with an assertion failure on exit when
			sharing the same port for listening and querying, and
			changing listening addresses several times. [RT# 3509]
1371.	[bug]		notify-source-v6, transfer-source-v6 and
			query-source-v6 with explict addresses and using the
			same ports as named was listening on could interfere
			with nameds ability to answer queries sent to those
			addresses.
1370.	[bug]		dig '+[no]recurse' was incorrectly documented.
1369.	[bug]		Adding an NS record as the lexicographically last
			record in a secure zone didn't work.
1368.	[func]		remove support for bitstring labels.
1367.	[func]		Use response times to select forwarders.
1366.	[contrib]	queryperf usage was incomplete.  Add '-h' for help.
1365.	[func]		"localhost" and "localnet" acls now include IPv6
			addresses / prefixes.
1364.	[func]		Log file name when unable to open memory statistics
			and dump database files. [RT# 3437]
1363.	[func]		Listen-on-v6 now supports specific addresses.
1362.	[bug]		remove IF_RUNNING test when scanning interfaces.
1361.	[func]		log the reason for rejecting a server when resolving
			queries.
1360.	[bug]		--enable-libbind would fail when not built in the
			source tree for certain OS's.
1359.	[security]	Support patches OpenSSL libraries.
			http://www.cert.org/advisories/CA-2002-23.html
1358.	[bug]		It was possible to trigger a INSIST when debugging
			large dynamic updates. [RT #3390]
1357.	[bug]		nsupdate was extremely wasteful of memory.
1356.	[tuning]	Reduce the number of events / quantum for zone tasks.
1355.	[bug]		Fix DNSSEC wildcard proof for CNAME/DNAME.
1354.	[doc]		lwres man pages had illegal nroff.
1353.	[contrib]	sdb/ldap to version 0.9.
1352.	[bug]		dig, host, nslookup when falling back to TCP use the
			current search entry (if any). [RT #3374]
1351.	[bug]		lwres_getipnodebyname() returned the wrong name
			when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
			was set.
1350.	[bug]		dns_name_fromtext() failed to handle too many labels
			gracefully.
1349.	[security]	Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
			http://www.cert.org/advisories/CA-2002-23.html
1348.	[port]		Win32: Rewrote code to use I/O Completion Ports
			in socket.c and eliminating a host of socket
			errors. Performance is enhanced.
1347.	[placeholder]
1346.	[placeholder]
1345.	[port]		Use a explicit -Wformat with gcc.  Not all versions
			include it in -Wall.
1344.	[func]		Log if the serial number on the master has gone
			backwards.
			If you have multiple machines specified in the masters
			clause you may want to set 'multi-master yes;' to
			suppress this warning.
1343.	[func]		Log successful notifies received (info).  Adjust log
			level for failed notifies to notice.
1342.	[func]		Log remote address with TCP dispatch failures.
1341.	[func]		Allow a rate limiter to be stalled.
1340.	[bug]		Delay and spread out the startup refresh load.
1339.	[func]		dig, host and nslookup now use IP6.ARPA for nibble
			lookups.  Bit string lookups are no longer attempted.
1338.	[func]		IPv6 synthesis is now performed for IP6.ARPA bit
			string queries.
1337.	[func]		IPv6 synthesis is now performed for both IP6.ARPA
			and IP6.INT nibble queries.
1336.	[func]		Nibble lookups under IP6.ARPA are now supported by
			dns_byaddr_create().  dns_byaddr_createptrname() is
			deprecated, use dns_byaddr_createptrname2() instead.

3 files changed, 13 insertions, 7 deletions

diff --git a/net/bind9-current/Makefile b/net/bind9-current/Makefile
index 97e9d46a291..3c9b9e6430b 100644
--- a/net/bind9-current/Makefile
+++ b/net/bind9-current/Makefile
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.38 2002/10/25 11:56:13 wiz Exp $
+# $NetBSD: Makefile,v 1.39 2002/11/13 01:53:39 itojun Exp $
 #
 
 DISTNAME=	bind-${BIND_VERSION}
-PKGNAME=	bind-9.2.99.20020722
+PKGNAME=	bind-9.2.99.20021113
 CATEGORIES=	net
 MASTER_SITES=	ftp://ftp.isc.org/isc/bind9/snapshots/
 
@@ -10,7 +10,7 @@ MAINTAINER=	hubertf@NetBSD.org
 HOMEPAGE=	http://www.isc.org/products/BIND/
 COMMENT=	Version 9 of the Berkeley Internet Name Daemon, implementation of DNS
 
-BIND_VERSION=	9.3.0s20020722
+BIND_VERSION=	9.3.0s20021113
 DIST_SUBDIR=	bind/${BIND_VERSION}
 
 # IPv6 ready, automatically detected
diff --git a/net/bind9-current/PLIST b/net/bind9-current/PLIST
index 3f10642b95f..6f24d860b44 100644
--- a/net/bind9-current/PLIST
+++ b/net/bind9-current/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.8 2002/09/13 09:48:48 itojun Exp $
+@comment $NetBSD: PLIST,v 1.9 2002/11/13 01:53:40 itojun Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -6,6 +6,9 @@ bin/nslookup
 bin/nsupdate
 etc/rc.d/lwresd
 etc/rc.d/named9
+include/bind9/check.h
+include/bind9/getaddresses.h
+include/bind9/version.h
 include/dns/a6.h
 include/dns/acl.h
 include/dns/adb.h
@@ -159,7 +162,9 @@ include/isccc/types.h
 include/isccc/util.h
 include/isccc/version.h
 include/isccfg/cfg.h
+include/isccfg/grammar.h
 include/isccfg/log.h
+include/isccfg/namedconf.h
 include/isccfg/version.h
 include/lwres/context.h
 include/lwres/int.h
@@ -218,6 +223,7 @@ sbin/rndc-confgen
 @dirrm include/isc
 @dirrm include/dst
 @dirrm include/dns
+@dirrm include/bind9
 man/man1/dig.1
 man/man1/host.1
 man/man3/lwres.3
diff --git a/net/bind9-current/distinfo b/net/bind9-current/distinfo
index b559e6da8f8..096511fdbfd 100644
--- a/net/bind9-current/distinfo
+++ b/net/bind9-current/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.21 2002/08/26 11:42:07 itojun Exp $
+$NetBSD: distinfo,v 1.22 2002/11/13 01:53:40 itojun Exp $
 
-SHA1 (bind/9.3.0s20020722/bind-9.3.0s20020722.tar.gz) = fcd86c88d0fa95d9647ac9db19d3807c5abe2c56
-Size (bind/9.3.0s20020722/bind-9.3.0s20020722.tar.gz) = 5162667 bytes
+SHA1 (bind/9.3.0s20021113/bind-9.3.0s20021113.tar.gz) = 7a2e1ff0449caea971a9a9ea5f7315371927e9aa
+Size (bind/9.3.0s20021113/bind-9.3.0s20021113.tar.gz) = 5278667 bytes
 SHA1 (patch-aa) = c23ea4fdb61e9a08e8f88bcc91fb1adc652403ba
 SHA1 (patch-ab) = 1d3d82e3e01ac38e8a1b1d98e018849e8fe071bf
 SHA1 (patch-ac) = 1696adfab7392e0f150d34931b808e51ad017938