NSD 3.2.10

Bugfixes:

* Bugfix #421: Truncate pidfile on shutdown, before unlink.
* Bugfix #423: Fix slow zone transfer processing due to
  'Fix is_existing flag for ENT' bugfix.
* Bugfix #430: Fix segfault when MAX_INTERFACES set to more than 65K.
* Fix configure.ac strptime check for gcc 4.6.2, acx_nlnetlabs.m4 update

NSD 3.2.9

Features:

* Minimize responses to reduce truncation: NSD will only add optional
  records to the authority and additional sections when the response size
  does not exceed the minimal response size.
* The minimal response size is 512 (no-EDNS), 1480 (EDNS/IPv4),
  1220 (EDNS/IPv6), or the advertized EDNS buffer size if that is smaller
  than the EDNS default.
* The feature is enabled by default. You can disable it by configuring NSD
  with --disable-minimal-responses.
* Less NSEC3 prehashing. This will make NSD handle zone transfers faster,
  but will decrease the performance of NXDOMAIN and wildcard NODATA responses.
  Full prehashing is enabled by default. If you want less NSEC3 prehashing,
  configure NSD with --disable-full-prehash. Thanks Secure64 for the patch.

Bugfixes:

* Bugfix #302: nsd accepts XFR but refuses to re-read the slave zone.
* Bugfix #365: set patch style and zonec verbose for nsdc.
* First step of bug #369: RRSIG DNSKEY sets zone to be treated DNSSEC.
* Bugfix #375: typos in nsd.conf.5.
* Bugfix #381: Binary escaped and transfers.
* Bugfix #397: Don't allow relative domain names as origin in $INCLUDE
  directives.
* Fix printout of IPSECKEY by nsd-patch.
* Fix is_existing flag for ENT when domain that has a shared ENT is deleted
  by IXFR. (ENT == Empty Non-Terminal)
* Fix bug if the zonefile is changed for a secondary but stored transfers
  are applied, and stop it from applying ixfr to empty zone. The zone is
  flagged with error and AXFR-ed.
* Fix to have no authority NS set processing for CNAMEs.
* Fix nsd-checkconf to check tsig algorithms properly.
* Set the AA bit on responses that have an authoritative CNAME.
* Fix denial of existence response for empty non-terminal that looks like
  a NSEC3-only domain (but has data below it).

Operational notes:

nsd.db version number increased because NSD 3.2.7 and earlier zonec is not
compatible due to the TXT strings change. Please run nsdc rebuild before
running NSD 3.2.9 and later versions.

3 files changed, 11 insertions, 9 deletions

diff --git a/net/nsd/MESSAGE b/net/nsd/MESSAGE
index 43eb3ac7c4e..732a9c88529 100644
--- a/net/nsd/MESSAGE
+++ b/net/nsd/MESSAGE
@@ -1,5 +1,9 @@
 ===========================================================================
-$NetBSD: MESSAGE,v 1.2 2007/08/11 23:48:40 joerg Exp $
+$NetBSD: MESSAGE,v 1.3 2012/04/18 10:39:43 pettai Exp $
+
+nsd.db version number increased because NSD 3.2.7 and earlier zonec is
+not compatible due to the TXT strings change. Please run nsdc rebuild
+before running NSD 3.2.9 and later versions.
 
 The configuration format of nsd has changed between 2.x and 3.x.
 A sample Python script to help migrating the old nsd.zones format
diff --git a/net/nsd/Makefile b/net/nsd/Makefile
index 4b550a895ca..397ec75f5ee 100644
--- a/net/nsd/Makefile
+++ b/net/nsd/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.53 2011/06/19 16:25:12 pettai Exp $
+# $NetBSD: Makefile,v 1.54 2012/04/18 10:39:43 pettai Exp $
 
-DISTNAME=	nsd-3.2.8
+DISTNAME=	nsd-3.2.10
 CATEGORIES=	net
 MASTER_SITES=	http://www.nlnetlabs.nl/downloads/nsd/
 
@@ -23,7 +23,6 @@ PKG_SYSCONFSUBDIR=	nsd
 
 CONFIGURE_ARGS+=--with-configdir=${PKG_SYSCONFDIR:Q}
 CONFIGURE_ARGS+=--enable-bind8-stats
-CONFIGURE_ARGS+=--with-libwrap=${BUILDLINK_PREFIX.tcp_wrappers}
 .if !empty(PKG_OPTIONS:Minet6)
 CONFIGURE_ARGS+=--enable-ipv6
 .else
@@ -52,6 +51,5 @@ INSTALLATION_DIRS=	share/examples/nsd
 post-install:
 	${INSTALL_DATA} ${WRKSRC}/contrib/nsd.zones2nsd.conf ${DESTDIR}${PREFIX}/share/examples/nsd
 
-.include "../../security/tcp_wrappers/buildlink3.mk"
 .include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
diff --git a/net/nsd/distinfo b/net/nsd/distinfo
index 24096941587..2c876d47720 100644
--- a/net/nsd/distinfo
+++ b/net/nsd/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.32 2011/09/12 17:05:01 taca Exp $
+$NetBSD: distinfo,v 1.33 2012/04/18 10:39:43 pettai Exp $
 
-SHA1 (nsd-3.2.8.tar.gz) = e8db690a09f53152f0dca6e4fbfabcc89003fced
-RMD160 (nsd-3.2.8.tar.gz) = b3dcb965e65c4d65a7618997305ff9600b365898
-Size (nsd-3.2.8.tar.gz) = 868051 bytes
+SHA1 (nsd-3.2.10.tar.gz) = 04657cffe5087d97213b245f8281296cac86b868
+RMD160 (nsd-3.2.10.tar.gz) = f096d162242d695dfa0596a46229c3a16475bafd
+Size (nsd-3.2.10.tar.gz) = 879180 bytes
 SHA1 (patch-aa) = 81b820eb4f2056ab85cad16b7dc526f1ba2737aa
 SHA1 (patch-util.c) = acaf676e675fc07ef51b4c1cc056214731bc193f