changes

linux网络工具

1035.	[bug]		If we respond to multicast queries (which we
			currently do not), respond from a unicast address
			as specified in RFC 1123. [RT #137]

1034.	[bug]		Ignore the RD bit on multicast queries as specified
			in RFC 1123. [RT #137]

1032.	[func]		hostname.bind/txt/chaos now returns the name of
			the machine hosting the nameserver.  This is useful
			in diagnosing problems with anycast servers.

1025.	[bug]		Don't use multicast addresses to resolve iterative
			queries. [RT #101]

1024.	[port]		Compilation failed on HP-UX 11.11 due to
			incompatible use of the SIOCGLIFCONF macro
			name. [RT #1831]

1023.	[func]		Accept hints without TTLs.

1011.	[cleanup]	Removed isc_dir_current().

1009.	[port]		OpenUNIX 8 support. [RT #1728]

1008.	[port]		libtool.m4, ltmain.sh from libtool-1.4.2.

1007.	[port]		config.guess, config.sub from autoconf-2.52.

1003.	[func]		Add the +retry option to dig.

 999.	[func]		"rndc retransfer zone [class [view]]" added.
			[RT #1752]

 998.	[func]		named-checkzone now has arguments to specify the
			chroot directory (-t) and working directory (-w).
			[RT #1755]

 997.	[func]		Add support for RSA-SHA1 keys (RFC3110).

 996.	[func]		Issue warning if the configuration filename contains
			the chroot path.

 994.	[func]		Treat non-authoritative responses to queries for type
			NS as referrals even if the NS records are in the
			answer section, because BIND 8 servers incorrectly
			send them that way.  This is necessary for DNSSEC
			validation of the NS records of a secure zone to
			succeed when the parent is a BIND 8 server. [RT #1706]

 993.	[func]		dig: -v now reports the version.

 991.	[func]		Lower UDP refresh timeout messages to level
			debug 1.

 985.	[func]		Consider network interfaces to be up iff they have
			a nonzero IP address rather than based on the
			IFF_UP flag. [RT #1160]

 983.	[func]		The server now supports generating IXFR difference
			sequences for non-dynamic zones by comparing zone
			versions, when enabled using the new config
			option "ixfr-from-differences". [RT #1727]

 982.	[func]		If "memstatistics-file" is set in options the memory
			statistics will be written to it.

 981.	[func]		The dnssec tools can now take multiple '-r randomfile'
			arguments.

 979.	[func]		Incremental master file dumping.  dns_master_dumpinc(),
			dns_master_dumptostreaminc(), dns_dumpctx_attach(),
			dns_dumpctx_detach(), dns_dumpctx_cancel(),
			dns_dumpctx_db() and dns_dumpctx_version().

 976.	[func]		named-checkconf can now test load master zones
			(named-checkconf -z). [RT #1468]

 970.	[func]		'max-journal-size' can now be used to set a target
			size for a journal.

 969.	[func]		dig now supports the undocumented dig 8 feature
			of allowing arbitrary labels, not just dotted
			decimal quads, with the -x option.  This can be
			used to conveniently look up RFC2317 names as in
			"dig -x 10.0.0.0-127". [RT #827, #1576, #1598]

	--- 9.2.3rc1 released ---

1499.	[bug]		isc_random need to be seeded better if arc4random()
			is not used.

1498.	[port]		bsdos: 5.x support.

1497.	[protocol]	dig, nslookup and host now perform nibble lookups
			under IP6.ARPA, use -i for IP6.INT (dig and host).
			lwres now uses IP6.ARPA.

1496.	[port]		test for pthread_attr_setstacksize().

1495.	[cleanup]	Replace hash functions with universal hash.

1494.	[security]	Turn on RSA BLINDING as a precaution.

1493.	[doc]		A6 and "bitstring" labels are now experimental.

1492.	[cleanup]	Preserve rwlock quota context when upgrading /
			downgrading. [RT #5599]

1491.	[bug]		dns_master_dump*() would produce extraneous $ORIGIN
			lines. [RT #6206]

1490.	[bug]		Accept reading state as well as working state in
			ns_client_next(). [RT #6813]

1489.	[compat]	Treat 'allow-update' on slave zones as a warning.
			[RT #3469]

1488.	[bug]		Don't override trust levels for glue addresses.
			[RT #5764]

1487.	[bug]		A REQUIRE() failure could be triggered if a zone was
			queued for transfer and the zone was then removed.
			[RT #6189]

1486.	[bug]		isc_print_snprintf() '%%' consumed one too many format
			characters. [RT# 8230]

1485.	[bug]		gen failed to handle high type values. [RT #6225]

1484.	[bug]		The number of records reported after a AXFR was wrong.
			[RT #6229]

1483.	[bug]		dig axfr failed if the message id in the answer failed
			to match that in the request.  Only the id in the first
			message is required to match. [RT #8138]

1482.	[bug]		named could fail to start if the kernel supports
			IPv6 but no interfaces are configured.  Similarly
			for IPv4. [RT #6229]

1481.	[bug]		Refresh and stub queries failed to use masters keys
			if specified. [RT #7391]

1480.	[bug]		Provide replay protection for rndc commands.  Full
			replay protection requires both rndc and named to
			be updated.  Partial replay protection (limited
			exposure after restart) is provided if just named
			is updated.

1479.	[bug]		cfg_create_tuple() failed to handle out of
			memory cleanup.  parse_list() would leak memory
			on syntax errors.

1478.	[port]		ifconfig.sh didn't account for other virtual
			interfaces.  It now takes a optional argument
			to specify the first interface number. [RT #3907]

1477.	[bug]		memory leak using stub zones and TSIG.

1476.	[port]		win32: port unreachables were blocking further i/o
			on sockets (Windows 2000 SP2 and later).

1473.	[bug]		create_map() and create_string() failed to handle out
			of memory cleanup.  [RT #6813]

1472.	[contrib]	idnkit-1.0 from JPNIC, replaces mdnkit.

1471.	[bug]		libbind: updated to BIND 8.4.0.

1470.	[bug]		Incorrect length passed to snprintf. [RT #5966]

1466.	[bug]		lwresd configuration errors resulted in memory
			and lock leaks.  [RT #5228]

1465.	[bug]		isc_base64_decodestring() and isc_base64_tobuffer()
			failed to check that trailing bits were zero allowing
			some invalid base64 strings to be accepted.  [RT #5397]

1464.	[bug]		Preserve "out of zone" data for outgoing zone
			transfers. [RT #5192]

1463.	[bug]		dns_rdata_from{wire,struct}() failed to catch bad
			NXT bit maps. [RT #5577]

1462.	[bug]		parse_sizeval() failed to check the token type.
			[RT #5586]

1461.	[bug]		Remove deadlock from rbtdb code. [RT #5599]

1460.	[bug]		inet_pton() failed to reject certain malformed
			IPv6 literals.

1459.	[bug]		win32: we were leaking a bits in the exception
			fd_set resulting in "Socket operation on non-socket"
			errors from select(). [RT #2966]

1456.	[contrib]	gen-data-queryperf.py from Stephane Bortzmeyer.

1453.	[doc]		ARM: $GENERATE example wasn't accurate. [RT #5298]

1452.	[bug]		Bad #ifdef, ISC_RFC2335 -> ISC_RFC2535.

1451.	[bug]		rndc-confgen didn't exit with a error code for all
			failures. [RT #5209]

1450.	[bug]		Fetching expired glue failed under certain
			circumstances.  [RT #5124]

1449.	[bug]		query_addbestns() didn't handle running out of memory
			gracefully.

1448.	[bug]		Handle empty wildcards labels.

1447.	[bug]		We were casting (unsigned int) to and from (void *).
			rdataset->private4 is now rdataset->privateuint4
			to reflect a type change.

1445.	[bug]		DNS_ADBFIND_STARTATROOT broke stub zones.  This has
			been replaced with DNS_ADBFIND_STARTATZONE which
			causes the search to start using the closest zone.

1439.	[bug]		Named could return NOERROR with certain NOTIFY
			failures.  Return NOTAUTH if the NOTIFY zone is
			not being served.

1435.	[bug]		zmgr_resume_xfrs() was being called read locked
			rather than write locked.  zmgr_resume_xfrs()
			was not being called if the zone was being
			shutdown.

1437.	[bug]		Leave space for stdio to work in. [RT #5033]

1434.	[bug]		"rndc reconfig" failed to initiate the initial
			zone transfer of new slave zones.

1431.	[bug]		isc_print_snprintf() "%s" with precision could walk off
			end of argument. [RT #5191]

1429.	[bug]		Prevent the cache getting locked to old servers.

1424.	[bug]		EDNS version not being correctly printed.

1423.	[contrib]	queryperf: added A6 and SRV.

1420.	[port]		solaris: work around gcc optimizer bug.

1419.	[port]		openbsd: use /dev/arandom. [RT #4950]

1418.	[bug]		'rndc reconfig' did not cause new slaves to load.

1416.	[bug]		Empty node should return NOERROR NODATA, not NXDOMAIN.
			[RT #4715]

1411.	[bug]		empty nodes should stop wildcard matches. [RT #4802]

1408.	[bug]		"make distclean" was not complete. [RT #4700]

1407.	[bug]		lfsr incorrectly implements the shift register.
			[RT #4617]

1406.	[bug]		dispatch initializes one of the LFSR's with a incorrect
			polynomial.  [RT #4617]

1405.	[func]		Use arc4random() if available.

1401.	[bug]		adb wasn't clearing state when the timer expired.

1399.	[bug]		Use serial number arithmetic when testing SIG
			timestamps. [RT #4268]

1397.	[bug]		J.ROOT-SERVERS.NET is now 192.58.128.30.

1389.	[bug]		named could fail to rotate long log files.  [RT #3666]

1388.	[port]		irix: check for sys/sysctl.h and NET_RT_IFLIST before
			defining HAVE_IFLIST_SYSCTL. [RT #3770]

1387.	[bug]		named could crash due to an access to invalid memory
			space (which caused an assertion failure) in
			incremental cleaning.  [RT #3588]

1385.	[bug]		Setting serial-query-rate to 10 would trigger a
			REQUIRE failure.

1384.	[bug]		host was incompatible with BIND 8 in its exit code and
			in the output with the -l option.  [RT #3536]

1373.	[bug]		Recovery from expired glue failed under certain
			circumstances.

1372.	[bug]		named crashes with an assertion failure on exit when
			sharing the same port for listening and querying, and
			changing listening addresses several times. [RT# 3509]

1370.	[bug]		dig '+[no]recurse' was incorrectly documented.

1369.	[bug]		Adding an NS record as the lexicographically last
			record in a secure zone didn't work.

1366.	[contrib]	queryperf usage was incomplete.  Add '-h' for help.

1348.	[port]		win32: Rewrote code to use I/O Completion Ports
			in socket.c and eliminating a host of socket
			errors. Performance is enhanced.

1333.	[contrib]	queryperf now reports a summary of returned
			rcodes (-c), rcodes are printed in mnemonic form (-v).

1299.	[bug]		Set AI_ADDRCONFIG when looking up addresses
			via getaddrinfo() (affects dig, host, nslookup, rndc
			and nsupdate).

1199.	[doc]		ARM reference to RFC 2157 should have been RFC 1918.
			[RT #2436]

1122.	[tuning]	Resolution timeout reduced from 90 to 30 seconds.
			[RT #2046]

 992.	[doc]		dig: ~/.digrc is now documented.

	--- 9.2.2 released ---

1428.	[port]		hpux: temporary work around of hpux 11.11 interface
			scanning.

1427.	[bug]		Race condition in adb with threaded build.

1426.	[cleanup]	Disable RFC2535 style DNSSEC.  This is incompatible
			with the forthcoming DS style DNSSEC.

1425.	[port]		linux/libbind: define __USE_MISC when testing *_r()
			function prototypes in netdb.h.  [RT #4921]

1395.	[port]		OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
			have a working implementation.  [RT #4079]

1382.	[bug]		make install failed with --enable-libbind. [RT #3656]

1381.	[bug]		named failed to correctly process answers that
			contained DNAME records where the resulting CNAME
			resulted in a negative answer.

	--- 9.2.2rc1 released ---

1360.	[bug]		--enable-libbind would fail when not built in the
			source tree for certain OS's.

1359.	[security]	Support patches OpenSSL libraries.
			http://www.cert.org/advisories/CA-2002-23.html

1358.	[bug]		It was possible to trigger a INSIST when debugging
			large dynamic updates. [RT #3390]

1357.	[bug]		nsupdate was extremely wasteful of memory.

1356.	[tuning]	Reduce the number of events / quantum for zone tasks.

1354.	[doc]		lwres man pages had illegal nroff.

1353.	[contrib]	sdb/ldap to version 0.9.

1352.	[bug]		dig, host, nslookup when falling back to TCP use the
			current search entry (if any). [RT #3374]

1351.	[bug]		lwres_getipnodebyname() returned the wrong name
			when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
			was set.

1350.	[bug]		dns_name_fromtext() failed to handle too many labels
			gracefully.

1349.	[security]	Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
			http://www.cert.org/advisories/CA-2002-23.html

1346.	[bug]		Win32: select timeout in socket.c was too small
			as value given was meant to be milliseconds and
			timeval structure requires microseconds. This
			caused high CPU loads with a compute bound loop.
			[RT #3358]

1345.	[port]		Use a explicit -Wformat with gcc.  Not all versions
			include it in -Wall.

1340.	[bug]		Delay and spread out the startup refresh load.

1335.	[bug]		When performing a nonexistence proof, the validator
			should discard parent NXTs from higher in the DNS.

1334.	[bug]		When signing/verifying rdatasets, duplicate rdatas
			need to be suppressed.

1330.	[bug]		When processing events (non-t