NSD 4.1.22 released
"W.C.A. Wijngaards" <[email protected]>
| Newsgroups | gmane.network.dns.nsd.general |
|---|---|
| Message-ID | <[email protected]> |
Hi, NSD 4.1.22 is available: https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz sha256 f186e86705768a35ecb6ac18d1ee4eeec2745fcd1feab38e64f89c5eb5aa049c pgp https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.22.tar.gz.asc This release fixes a bug where zone transfers would not succeed, because of an error in the selective NSEC3 allocation (introduced in 4.1.18). The refuse ANY query feature now sends truncated answers over UDP and allows TCP queries. This is the same size response on UDP as the refusal but allows the query to succeed over TCP for genuine queriers that fallback to that transport mechanism. The release contains a speed up for TCP processing that should NSD better at handling large numbers of incoming TCP connections. 4.1.22 ================ FEATURES: - refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal. - Use accept4 to speed up answer of TCP queries, on Linux, FreeBSD and OpenBSD. BUG FIXES: - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. - Fix to use same condition for nsec3 hash allocation and free. Best regards, Wouter _______________________________________________ nsd-users mailing list [email protected] https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAlseOmQACgkQn28cLX4E X40/7xAAi+y8jz1DTLK6nwUmPTFWRCaM0nZBwrk/m8ANuN0G/YtGOp73DPXVv3uQ cvx4ZVOxDiJwGm68FO6uM/CvSyQi0u4oTJCxjs39u5fqQf5nfXd/EjM9LKLLp9hL Q3XYn2POPUAEfX7y3GDd8CknZo9rW5/e/zoPMUQeM3gcKALrQf6PhJfnNqDy5Bs/ uwPh2WOFwuvB2VCeDU8VrJe8I0+SdVjcL0X7GeF1ipl+L7Ix02rKa7In0+vcHpRL cz1/iTvtXpcVmxIeeXcf1hzUry0G0Jjprc+d9P0kIFnEFRh0ngdYqN50gsDvEagX nvvjm4xcQSCqDZi62apsv6SOmuALd/Q90n/Ruc53g0U/mScb3P7WBqc49dpwhlaE b2AMyxsUeNbdvgIqn8BCOXhcZEvCczUD7d3Tsl4yJlTDkKWUx/nZ+pdNNOgYaxhQ sr935alIgLEbjV7heC23ztaNmg0DknzrJ6zNeejUBEniY6db4vpjqbrb108tOCDD vu+5OcVqfFqyrZ5G0jR5OI4aeZRsMSnhXtKHXVMAzs+hGxb/K6REYXNKTVxB0H4V bJRi5VncUAzuwkc9Q5TNIFEfINcHVfTYQgyom3mJRSove41gt5hZ6/KTshd76cht omhlI91lYLN3UJ/NVk0RuyNjpaYUVPVGovLjd/gCnTOzHZV+6FA= =w5G/ -----END PGP SIGNATURE-----