NSD 4.2.3rc1 pre-release

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8405954831874852791==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="UkUGwx6CK2E5UYVxRZrxeRogD5SHMyFV1"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--UkUGwx6CK2E5UYVxRZrxeRogD5SHMyFV1
Content-Type: multipart/mixed; boundary="0ixCAwZffGRdVV2jGooiioV9zS4jyU31p"

--0ixCAwZffGRdVV2jGooiioV9zS4jyU31p
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hi,

NSD 4.2.3rc1 pre-release is available:
https://nlnetlabs.nl/downloads/nsd/nsd-4.2.3rc1.tar.gz
sha256 c9623361236d5b689edee133dc1a4a92f96100acbee96a412e7eb8cd0c5cb6ca
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.2.3rc1.tar.gz.asc

This release has log fixes, features of confine-to-zone and startup
management, an implementation changes in the configuration parser and
socket handling code simplifications.  The implementation changes make
the parser context aware, which is useful for the syntax of (future)
config options.  The socket handling code was rewritten to split it
apart in separately handleable routines.

The confine-to-zone: yesno option from Greg Bock, if enabled stops NSD
from responding with data outside of the zone the query was aimed at.
Answers contain data that comes from one zone only.

The startup management patch for s6 and other service supervisors from
Cameron Nemo can be used to signal readiness notification to them, it is
in contrib.  With that there is the new option that an empty pidfile
statement (pidfile: "") in nsd.conf can be used to run NSD without
having NSD create an nsd.pid file at startup.

There is fix for the sort order of included configuration files with the
include: statement.  Due to a programming oversight it was sorted, but
in reverse.  Files are now included in the sorted order.  Mostly, if
files contain configuration snippets of different zones, or config about
different features, the include order should not matter for them.


4.2.3
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
FEATURES:
- For #39: confine-to-zone configures NSD to not return out-of-zone
  additional information. Contributed by Greg Bock.
- For #21: pidfile "" allows to run NSD without a pidfile, for
  startup management tools like daemontools.
- For #21 add
  contrib/patch_for_s6_startup_and_other_service_supervisors.diff
  that adds support for readiness notification with READY_FD from
  Cameron Nemo.

BUG FIXES:
- Fix #35: excessive logging of ixfr failures, it stops the log when
  fallback to axfr is possible. log is enabled at high verbosity.
- Fixup warnings during --disable-ipv6 compile.
- The nsd.conf includes are sorted ascending, for include statements
  with a '*' from glob.
- Fix #38: log address and failure reason with tls handshake errors,
  squelches (the same as unbound) some unless high verbosity is used.
- Fixup clang analysis warning in xfrd_parse_received_xfr_packet
  master dereference.

CHANGES:
- Number of different UDP handlers has been reduced to one. recvmmsg
  and sendmmsg implementations are now used on all platforms.
  Compatible implementations are in place for systems that lack the
  system calls.
- Socket options are now set in designated functions for easy reuse.
- Socket setup has been simplified for easy reuse.
- Configuration parser is now aware of the context in which an option
  was specified.
- Fix #44: document that remote-control is a top-level nsd.conf
  attribute.


Best regards, Wouter


--0ixCAwZffGRdVV2jGooiioV9zS4jyU31p--

--UkUGwx6CK2E5UYVxRZrxeRogD5SHMyFV1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAl3NSaoACgkQn28cLX4E
X428gQ/6AtalUBegZdid9cZUDEAGWXiF2cc9G8SJx1pLkBt+nPkfwtYQl1Al/bOt
0zmF1R/UZwbmVaWoKYtvo04wvNTSzmc9W+g3NNMU1iFQB4o9qWzew9S8R5wLEk3b
bJrW+KVX79iiebIW9fXsORftAil3K+G9xoHT3wPACLGbobEO/P7EtJaY4RqhDqCR
OKSToXXzUQD+Cz/G9xyy+GckwNHBdXTiQpjGXt48mlsdsQN94y7O9WZJLE/fE3/V
1tD7q1Opv35V70KPlc86Y7TtTT36Vv3JpohZqxr/4QSsGeRCm/RReHYAbZGkmM9D
kNxiHa9kgd5SRwFR2anZUQPOC4FEYiK0bjG2O+6c5YvpjmrFCLb6UKZtEr79RBBw
Gqvjt18pf68sUSlfDvS4+AIg/FLdOini7KXOqOmSz+lXiC5KwLpgrbndES32ctvZ
AxgMUszo8vs8heO40WgH62fdQwbV1vi1ojRbTeqh+5CpRDyO97leECqhqf3kZ4zF
y0nGqPCAywMPH5XJOIue8KhiZqBrT5qxEQuR8pZjoKbObOwlz2r6aqaLY0/AwauZ
q6iGUCLYNN1MycuzXp9aoytElqKb3KbmrdNG8UAaYeadbqwczO7mT+7k0nK4iDTh
KKBpE8HuvuKDqHaa9oGArLNyB3GGtFN7JVtueH+QQ95a4toyHx0=
=tJaK
-----END PGP SIGNATURE-----

--UkUGwx6CK2E5UYVxRZrxeRogD5SHMyFV1--

--===============8405954831874852791==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
nsd-users mailing list
[email protected]
https://open.nlnetlabs.nl/mailman/listinfo/nsd-users

--===============8405954831874852791==--