[nsd-users] NSD 4.0.2 released

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

NSD 4.0.2 is available,
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.0.2.tar.gz
sha1 0855a3a9613e36381cbc36bfc451fb5c92189acc
sha256 f90e1ac7d05ac0dbcef9d0abd629586eac0f166b96bcb36d5948bc3bb8ded51f

This version fixes two memory leaks that would build up after repeated
zone content loads.

By default the use of the syscalls recvmmsg and sendmmsg is disabled,
they give too much issues, e.g. endless loops with errors or failure to
use IPv6.  They can be enabled at compile time.

Nonhosted zones get the REFUSED rcode instead of SERVFAIL.  This is
copied from other authority servers, so that there is identical wire
performance.  In the past NSD started to give SERVFAIL because the
upwards referral that was common at the time was not deemed a good
choice (or good to implement), but the REFUSED rcode serves a similar
purpose and is the behaviour of the other servers.  For hosted zones
with problems, eg. secondary zones with bad data, SERVFAIL is still
returned, this is likely useful for monitoring scripts and also clearly
communicates the expectation of data (when it has been fixed) to
interested clients.


FEATURES:
- - Return REFUSED for queries to non-hosted zones.

BUG FIXES:
- - Fix expired zones to give SERVFAIL, also when parent zone loaded.
- - documented nsd-control zonestatus output in nsd-control manpage.
- - remove mention of nsdc from nsd-checkconf manpage.
- - Disabled recvmmsg and sendmmsg usage by default because kernel
  versions have implementation issues: ipv6 ignored, security issues.
- - Detect libevent2 install automatically by configure, and use
  event2 header files if necessary.
- - Fix #551: change Regent to Copyright holder in the LICENSE,
  to match the definition on opensource.org for the BSD License.
- - Fix #552: zonefile loads on nsd-control reconfig when the name
  of the file has changed.
- - Fix leak of zone name after zonefile read and fix malloc too
  large that would be leaked in the radix tree.
- - Fix from 3.2: make SOA RDATA comparisons in XFR more lenient (only
  check serial).
- - Fix that NSD will delete and recreate not-clean-closed databases.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBAgAGBQJTIGw1AAoJEJ9vHC1+BF+N0CkQAKaMxkIJovCyMYqYlXcjoBMZ
mfcP6Wh2ta1BxA/jXG1h+XVv2jRTXOq2X2jLBd6eoY6vbc0V3upYUwjXLY5cpqDq
ykBZasKNC+UPaJrCmnqLFfHfLtywePFjWZBdkyTBX4REoTF3k8bqXVZ7gDWbWROT
3UMhhXHrMQRPq+CzRAgY4Xt31FXc73sh/ONZjamilIjLDzTtO23OxnDk76P/oRtl
D2BoXpWgCVjEQmRVNQnmXruELokbwkl0rintHi2oHqLIHM7BULljB62Wu026f7iG
iqA6IgXMIXlurOc828S7yCAbML2wq4XAgeMb33Cypg/BfWnAy3S3gWcWs1orBD52
byhFSTSZ0V3VDHZr1kzjWX6fW2WAu9iZAcFE1ZOYgEbcp7EUWfRDsojKgH5Mx38p
hoXTUElvcDhTO/hpfr4WWyMmzzMzggifoSrJNELFHc2QksUWq9Jh90yuHgu0eAmX
DUHV9AXWALbA2utcvl3+OJhOhRcD7bj0MY4NbWELMyIJh5zZkh+gV9oigc6oVc0Y
oHXBbkBJyhkC2xHb4zAWb0RLOo0CEWo7vC7DZB/c+fTjjkqrHc9FTJ6NAtDWqFP1
MLMxd03yTIpt4maolZ23zIAIba2o4QKpsmsX1hjwrGXOaEOlzDk7EAjS0UbooRLZ
Ywr0lKW1566YkeWsuc6s
=4thn
-----END PGP SIGNATURE-----