[nsd-users] NSD 4.1.4rc1 maintainers pre-release

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

NSD 4.1.4rc1 maintainers pre-release candidate 1 is available:
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.4rc1.tar.gz
sha1 787dba69fc4a9ceba2e0ea4a712551e3a02302e5
sha256 6a8dd9ae36ed181fc9af15c1ba98bd6ce5306f180010d14390e9f08c64902197

This release has fixes for operational issues: for NSID responses and
for fetching expired zones with wrong serial management.

There are also installation changes.  The number of interface: lines
in nsd.conf is unlimited.  The reuseport: yes option is enabled by
default for Linux, but not enabled by default on FreeBSD where it
apparently is available but not implemented, it can still also be
controlled from nsd.conf.  When enabled and it works it gives
(sizable) speed improvements on multicore systems.  Packagers may want
to use the newly added --enable-pie and --enable-relro-now options to
link a safer binary (but you may already have them if you use custom
LDFLAGS).

FEATURES:
- - RFC7553 RR Type URI support.
- - removed hardcoded interface limit, --with-max-ips removed.
- - SO_REUSEPORT support, by default on Linux, or with reuseport: yes.
- - Admitted axfrs are logged at verbosity 1.  Refused at verbosity 2.
- - --enable-pie and --enable-relro-now options for a safer executable.

BUG FIXES:
- - Fix NSID response for short edns sizes.
- - Fix that for expired zones NSD performs an AXFR and accepts newer
  and older serial numbers.
- - Document that minimal responses only minimizes responses to fit
  in one datagram.  It does not minimize smaller responses.
- - Fix #618: documented need to list ip-addresses seperately in
  nsd.conf if there are multiple, because the source address of
  replies can otherwise go wrong.
- - Fix that notify from nsd-control contains soa serial.
- - Fix #698 formatting errors and typos in nsd.8.in.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJV5FNnAAoJEJ9vHC1+BF+N7PIP/2qSnFGRyTT/N9Yed9Aj15ub
MJVbY+0JGbt0kjb6IvjxAoYMqcV86C6IG0kfMs2l6OjQ3lOrOakuGPuTc0GHNsRc
V6gq9vCHWzueiZqD5YzRvIXFZOJ4Q2je7KacEc8ADHrBRB4Gzj1/L4kR+t/zPtT6
k/S7yfUL4lqnrnT11ytOYJnmf+rk1ktD2D4y8ZvO4dcw/UN09AfqC7NkyfnTPiPj
afba2riUphvM8hjBJMtWQwrqkaNELcAGGOKeecNyJnDi/8+c3p2mfDVNyjsV4Lke
XxOVlf0eEYiOxdTYVGkDZwtmWz1SyNMi/YU+IloI0hgcGh2hbVZmXbJn7D78dLJ4
nWbiWIvC/5yAwS2L432kkz6JCrEFf8oduAsYWW742g/tw3sagAaSabvqayD0IbT8
OU6TDb3Xq6y6QHBhowYBR6Xff7F0LKDs1CmRERIzqIHKj4kDbUUFag1wc37J7DXK
svK0IKHG5vaAFsoH4YLIupKe8OELWzw9CN72XajMQ8unMIj2YXxfv7lhC/X4wrLB
QEKbxo9n2uRAvxXAcvswSTp8U1e3yieJbKpZ3I7SE/RsZlR/xe+g2gX4+T0HMMZw
f4vvox4r43X3fgeXim/YX8OYPTU/tWN13OWLZ9j7ly447lynPvZGebCjcyDtO9h+
GX/Bde/vfXktCdauhL1z
=gCQP
-----END PGP SIGNATURE-----