Re: [dns-operations] .FI going insecure for two weeks (!)

--- Begin Message --- I have forwarded this thread to a contact at .fi and suggested they join the conversation and add some context. My guess would also be that there is more than meets the eye, but hard to know for sure from the short note. Erwin > On 17 Dec 2024, at 21.51, Shumon Huque wro

[knot-dns-users] Re: module 'mod-onlinesign/authsignal', incompatible with automatic signing

etting (remove nsec3 from the policy). > > Daniel > > On 5/13/24 22:18, Erwin Lansing via knot-dns-users wrote: >> Howdy, >> I’m trying to get Knot 3.3.5 to use authenticated DNSSEC bootstrapping >> following the blog article and docs. However, I’m getting an error

[knot-dns-users] module 'mod-onlinesign/authsignal', incompatible with automatic signing

Howdy, I’m trying to get Knot 3.3.5 to use authenticated DNSSEC bootstrapping following the blog article and docs. However, I’m getting an error for the signalling zones, but I fail to figure out what I may have overlooked. error: [_signal.ns2.droso.dk .] module '

Re: [DNSOP] Call for Adoption: draft-arends-private-use-tld

I support the adoption and will review. Erwin > On 12 Jun 2020, at 17.12, Tim Wicinski wrote: > >  > > All, > > As we stated in the meeting and in our chairs actions, we're going to run > regular calls for adoptions over the next few months. We are looking for > *explicit* support for ad

Re: [regext] Implementations of draft-wisser-registrylock?

Hi Ulrich,Thanks for creating this draft.My impression from reviewing the different registry business models is, that most differences are related to sales channel and out-of-band unlocking methods. As long as locking trough create and update is optional for the server implementation, and since the

Re: [dns-operations] [Ext] Re: Contingency plans for the next Root KSK Ceremony

--- Begin Message --- Hi Kim, > On 27 Mar 2020, at 01.55, Kim Davies wrote: > > Hopefully our approach does not depend solely on TCRs for confidence. > We've consciously sought to operate a highly transparent process > that allows anyone who is interested - not just TCRs - to witness > proceedin

Re: [regext] Implementations of draft-wisser-registrylock?

Hi Alex, There are several business models for registry lock. One size doesn’t fit all, but rather than every registry reinventing the wheel, we are trying to boil those down to 2-4 basic models within CENTR. That work is first and foremost looking at the user experience, but should hopefully a

Re: [DNSOP] On .ZZ

> -Original Message- > From: DNSOP On Behalf Of Bill Woodcock > Sent: Friday, November 22, 2019 9:27 > To: Shane Kerr > Cc: dnsop@ietf.org > Subject: Re: [DNSOP] On .ZZ > > > > > On Nov 22, 2019, at 12:20 AM, Shane Kerr > wrote: > > > > So the intention of the ISO at least is that t

Re: [DNSOP] Obsoleting DLV

> On 2 Jul 2019, at 21.31, Jim Reid wrote: > > > >> On 2 Jul 2019, at 19:12, Matthijs Mekking wrote: >> >> I think it is time to move the protocol to Historic status as a clear signal >> to >> everyone that it should no longer be implemented or deployed. > > Agreed. Kill it with fire! >

Re: [dns-wg] Using CDS delegation to add DS records (was Re: NCC reverse delegation criteria)

ort DNSSEC, at least last time I asked. Med venlig hilsen / Best regards Erwin Lansing Head of Security & Chief Technologist

Re: [regext] Security Lock anyone? (Was: Preliminary agenda for Prague, and call for agenda items)

Folks, At .dk we also offer a form form of registry lock, called VID, which I’d like to redesign at some point. Having a standardised, or at least similar “enough” product offering across different registries and TLDs would make it much more attractive for registrants. Even though I won’t be

Re: [dns-wg] the day of reckoning is near

On 10 Oct 2018, at 17.38, Frank Fiene mailto:ffi...@veka.com>> wrote: You mean KSK rollover? No, we have local farmers here in the west of Germany! :-D Am 10.10.2018 um 16:39 schrieb Jim Reid mailto:j...@rfc1035.com>>: So, who’s stocked up on canned food and ammunition in case it all goes h

Re: [regext] [hrpc] Human Rights Review of draft-ietf-regext-verificationcode

> On 3 Oct 2018, at 17.39, Ulrich Wisser wrote: > > Denmark has plans to only allow registrations with a Danish electronic id. I’m sorry to barge in and distract from the real discussion here, but I cannot let such a blatant inaccuracy stand. There are no such plans, neither have there ever b

Re: [Opendnssec-user] Guidance on Chained Zone Validation

> On 11 Oct 2016, at 19.01, Mark Elkins wrote: > > (Someone here must have done this) > > I've got the zones.. > > ZA >/ | \ > org co web(.za) > > All sign just fine. My own checking tool plus tools like dnssec-verify > and validns pass the individual zones just fine. My copy of t

Re: [Opendnssec-user] Dynamic updates

ature in OpenDNSSEC? We have not yet started a similar project yet, but is something we’ll be looking into probably next year. Definitely something we’d like to see on the roadmap as well. Thanks, Erwin — Med venlig hilsen/Best Regards Erwin Lansing Sikkerhedschef / CISO DK Hostmaster A/S Ka

svn commit: r297233 - stable/9/etc/namedb

Author: erwin Date: Thu Mar 24 11:38:18 2016 New Revision: 297233 URL: https://svnweb.freebsd.org/changeset/base/297233 Log: Update with new IPv6 address for l-root. Obtained from:IANA Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/named.root Modified: stable/9/

svn commit: r297233 - stable/9/etc/namedb

Author: erwin Date: Thu Mar 24 11:38:18 2016 New Revision: 297233 URL: https://svnweb.freebsd.org/changeset/base/297233 Log: Update with new IPv6 address for l-root. Obtained from:IANA Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/named.root Modified: stable/9/

svn commit: r291646 - stable/9/etc/namedb

Author: erwin Date: Wed Dec 2 11:11:58 2015 New Revision: 291646 URL: https://svnweb.freebsd.org/changeset/base/291646 Log: Update addresses for H root. Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/named.root Modified: stable/9/etc/namedb/named.root ===

svn commit: r291646 - stable/9/etc/namedb

Author: erwin Date: Wed Dec 2 11:11:58 2015 New Revision: 291646 URL: https://svnweb.freebsd.org/changeset/base/291646 Log: Update addresses for H root. Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/named.root Modified: stable/9/etc/namedb/named.root ===

svn commit: r288577 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dnssec contrib/bind9/bin/named contrib/bind9/bin/named/inc...

Author: erwin Date: Sat Oct 3 09:33:29 2015 New Revision: 288577 URL: https://svnweb.freebsd.org/changeset/base/288577 Log: Update BIND to 9.9.8 See release notes for notable changes: https://kb.isc.org/article/AA-01305 Note this is a direct commit to stable/9 as BIND is no longer i

svn commit: r288577 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dnssec contrib/bind9/bin/named contrib/bind9/bin/named/inc...

Author: erwin Date: Sat Oct 3 09:33:29 2015 New Revision: 288577 URL: https://svnweb.freebsd.org/changeset/base/288577 Log: Update BIND to 9.9.8 See release notes for notable changes: https://kb.isc.org/article/AA-01305 Note this is a direct commit to stable/9 as BIND is no longer i

svn commit: r288438 - in vendor/bind9/dist: . bin/check bin/confgen bin/dig bin/dnssec bin/named bin/named/include/named bin/nsupdate bin/rndc bin/tools doc/arm doc/misc lib/bind9 lib/dns lib/dns/i...

Author: erwin Date: Thu Oct 1 07:47:44 2015 New Revision: 288438 URL: https://svnweb.freebsd.org/changeset/base/288438 Log: Vendor import of BIND 9.9.8 Sponsored by: DK Hostmaster A/S Added: vendor/bind9/dist/doc/arm/html-fixup.pl (contents, props changed) Modified: vendor/bind9/dis

svn commit: r288439 - vendor/bind9/9.9.8

Author: erwin Date: Thu Oct 1 07:48:26 2015 New Revision: 288439 URL: https://svnweb.freebsd.org/changeset/base/288439 Log: Tag the 9.9.8 release Sponsored by: DK Hostmaster A/S Added: - copied from r288438, vendor/bind9/dist/ Directory Properties: vendor/bind9/9.9.8/ (props chan

Re: Proposal: make portsnap generate INDEX-${OSREL:R} only by default

On Thu, Aug 06, 2015 at 05:19:54PM -0700, Xin Li wrote: > Hi, > > Currently the default portsnap.conf would generate INDEX-11, INDEX-10 > and INDEX-9. The INDEX file is only used for searching ports, and only > one (INDEX-${OSREL:R}) file is actually used. > This is default behaviour for other

Re: Proposal: make portsnap generate INDEX-${OSREL:R} only by default

On Thu, Aug 06, 2015 at 05:19:54PM -0700, Xin Li wrote: > Hi, > > Currently the default portsnap.conf would generate INDEX-11, INDEX-10 > and INDEX-9. The INDEX file is only used for searching ports, and only > one (INDEX-${OSREL:R}) file is actually used. > This is default behaviour for other

svn commit: r286124 - in stable/9/contrib/bind9: . doc/arm lib/dns lib/lwres/man

Author: erwin Date: Fri Jul 31 11:10:43 2015 New Revision: 286124 URL: https://svnweb.freebsd.org/changeset/base/286124 Log: Update BIND to 9.9.7-P2 This is a direct commit to stable/9 as BIND is no longer in head. Sponsored by: DK Hostmaster A/S Modified: stable/9/contrib/bind9/CHA

svn commit: r286124 - in stable/9/contrib/bind9: . doc/arm lib/dns lib/lwres/man

Author: erwin Date: Fri Jul 31 11:10:43 2015 New Revision: 286124 URL: https://svnweb.freebsd.org/changeset/base/286124 Log: Update BIND to 9.9.7-P2 This is a direct commit to stable/9 as BIND is no longer in head. Sponsored by: DK Hostmaster A/S Modified: stable/9/contrib/bind9/CHA

svn commit: r286109 - vendor/bind9/9.9.7-P2

Author: erwin Date: Fri Jul 31 07:04:33 2015 New Revision: 286109 URL: https://svnweb.freebsd.org/changeset/base/286109 Log: Tag the 9.9.7-P2 release Sponsored by: DK Hostmaster A/S Added: - copied from r286108, vendor/bind9/dist/ Directory Properties: vendor/bind9/9.9.7-P2/ (prop

svn commit: r286108 - in vendor/bind9/dist: . doc/arm lib/dns lib/lwres/man

Author: erwin Date: Fri Jul 31 07:03:06 2015 New Revision: 286108 URL: https://svnweb.freebsd.org/changeset/base/286108 Log: Vendor import of BIND 9.9.7-P2 Sponsored by: DK Hostmaster A/S Modified: vendor/bind9/dist/CHANGES vendor/bind9/dist/README vendor/bind9/dist/doc/arm/Bv9ARM.ch

Re: INDEX build failed for 8.x

se are just warnings (though they still should be fixed), the real culprit is further below with a failed dependency: make_index: /home/indexbuild/tindex/ports/print/latex-beamer: no entry for /home/indexbuild/tindex/ports/print/latex-pgf Erwin -- Erwin Lansing

Re: svn commit: r284285 - in stable/10: crypto/openssl crypto/openssl/apps crypto/openssl/crypto crypto/openssl/crypto/aes crypto/openssl/crypto/asn1 crypto/openssl/crypto/bf crypto/openssl/crypto/bio

> > > Log: > > MFC: r284283 > > > > Merge OpenSSL 1.0.1n. > > Hi Jung-uk, > Why the insta-MFC? Security fixes: https://openssl.org/news/secadv_20150611.txt Erwin -- Erwin Lansinghttp://droso.d

Re: svn commit: r284285 - in stable/10: crypto/openssl crypto/openssl/apps crypto/openssl/crypto crypto/openssl/crypto/aes crypto/openssl/crypto/asn1 crypto/openssl/crypto/bf crypto/openssl/crypto/bio

> > > Log: > > MFC: r284283 > > > > Merge OpenSSL 1.0.1n. > > Hi Jung-uk, > Why the insta-MFC? Security fixes: https://openssl.org/news/secadv_20150611.txt Erwin -- Erwin Lansinghttp://droso.d

Re: [dns-operations] Writeup of Spring Workshop

at as well. There's very active development going on in the FreeBSD network stack, so any concrete and specific numbers, bottlenecks, experience, etc. I can take back (or make introductions) to the developers will be most welcome. That's both UDP and TCP, IPv4 and IPv6, of course. Erwin

Re: BIND REPLACE_BASE option

ere can provide the same functionality out of the box, and would be my first recommendation for people starting a local package repository, but if you already have a system in place, there's probably no need to spend time to migrate to poudriere. Erwin -- Erwin Lansing

Re: BIND REPLACE_BASE option

ll build a single package of one port from the system it is run from. That means that the port, and all of its dependencies, will be installed on the host. Depending on your needs, this can be a good or a bad thing. They're two completely different beasts and neither can re

svn commit: r275890 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnssec contrib/bind9/bin...

Author: erwin Date: Thu Dec 18 08:36:19 2014 New Revision: 275890 URL: https://svnweb.freebsd.org/changeset/base/275890 Log: Update BIND to 9.9.6-P1 Most notable changes in 9.9.6 and includes the latest SA: https://lists.isc.org/pipermail/bind-announce/2014-September/000928.html Note

svn commit: r275890 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnssec contrib/bind9/bin...

Author: erwin Date: Thu Dec 18 08:36:19 2014 New Revision: 275890 URL: https://svnweb.freebsd.org/changeset/base/275890 Log: Update BIND to 9.9.6-P1 Most notable changes in 9.9.6 and includes the latest SA: https://lists.isc.org/pipermail/bind-announce/2014-September/000928.html Note

svn commit: r275803 - vendor/bind9/9.9.6-P1

Author: erwin Date: Mon Dec 15 12:16:09 2014 New Revision: 275803 URL: https://svnweb.freebsd.org/changeset/base/275803 Log: Tag the 9.9.6-P1 release Sponsored by: DK Hostmaster A/S Added: vendor/bind9/9.9.6-P1/ - copied from r275802, vendor/bind9/dist/ _

svn commit: r269049 - stable/9/etc/namedb

Author: erwin Date: Thu Jul 24 09:40:31 2014 New Revision: 269049 URL: http://svnweb.freebsd.org/changeset/base/269049 Log: Sync with 2014060201 which adds IPv6 to b.root-servers.net Note that this is a direct commit to stable/9 as this file is no longer in HEAD. Sponsored by: DK Hos

svn commit: r269049 - stable/9/etc/namedb

Author: erwin Date: Thu Jul 24 09:40:31 2014 New Revision: 269049 URL: http://svnweb.freebsd.org/changeset/base/269049 Log: Sync with 2014060201 which adds IPv6 to b.root-servers.net Note that this is a direct commit to stable/9 as this file is no longer in HEAD. Sponsored by: DK Hos

Re: p5-Crypt-SSleay update

owing actions were performed: > >Installation of devel/p5-Module-Build (p5-Module-Build-0.4206) > >Installation of devel/p5-Path-Class (p5-Path-Class-0.33) > > > > > > ===>>> You can restart from the point of failure with this command line: >

svn commit: r267434 - stable/8/etc/namedb

Author: erwin Date: Fri Jun 13 07:23:46 2014 New Revision: 267434 URL: http://svnweb.freebsd.org/changeset/base/267434 Log: Sync with 2014060201 which adds IPv6 to b.root-servers.net Note that this is a direct commit to stable/8 as this file is no longer in HEAD. Sponsored by: DK Hos

svn commit: r265144 - stable/8/etc/namedb

Author: erwin Date: Wed Apr 30 09:57:38 2014 New Revision: 265144 URL: http://svnweb.freebsd.org/changeset/base/265144 Log: Pick up the 2014032601 update which adds an IPv6 address for C. Note that this is a direct commit to stable/8 as this file is no longer in HEAD. Sponsored by: D

svn commit: r265142 - stable/9/etc/namedb

Author: erwin Date: Wed Apr 30 09:55:45 2014 New Revision: 265142 URL: http://svnweb.freebsd.org/changeset/base/265142 Log: Pick up the 2014032601 update which adds an IPv6 address for C. Note that this is a direct commit to stable/9 as this file is no longer in HEAD. Sponsored by: D

svn commit: r265142 - stable/9/etc/namedb

Author: erwin Date: Wed Apr 30 09:55:45 2014 New Revision: 265142 URL: http://svnweb.freebsd.org/changeset/base/265142 Log: Pick up the 2014032601 update which adds an IPv6 address for C. Note that this is a direct commit to stable/9 as this file is no longer in HEAD. Sponsored by: D

svn commit: r262706 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnssec contrib/bind9/bin...

Author: erwin Date: Mon Mar 3 09:18:19 2014 New Revision: 262706 URL: http://svnweb.freebsd.org/changeset/base/262706 Log: MFV 262445: Update BIND to 9.9.5 Release note: https://lists.isc.org/pipermail/bind-announce/2013-September/000871.html https://lists.isc.org/pipermail/bin

svn commit: r262706 - in stable/9: contrib/bind9 contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnssec contrib/bind9/bin...

Author: erwin Date: Mon Mar 3 09:18:19 2014 New Revision: 262706 URL: http://svnweb.freebsd.org/changeset/base/262706 Log: MFV 262445: Update BIND to 9.9.5 Release note: https://lists.isc.org/pipermail/bind-announce/2013-September/000871.html https://lists.isc.org/pipermail/bin

svn commit: r262446 - vendor/bind9/9.9.5

Author: erwin Date: Mon Feb 24 13:59:23 2014 New Revision: 262446 URL: http://svnweb.freebsd.org/changeset/base/262446 Log: Tag the 9.9.5 release Added: vendor/bind9/9.9.5/ - copied from r262445, vendor/bind9/dist/ ___ svn-src-all@freebsd.org m

svn commit: r262445 - in vendor/bind9/dist: . bin/check bin/confgen bin/dig bin/dig/include/dig bin/dnssec bin/named bin/named/include/named bin/named/unix bin/nsupdate bin/rndc doc/arm doc/misc li...

Author: erwin Date: Mon Feb 24 13:58:58 2014 New Revision: 262445 URL: http://svnweb.freebsd.org/changeset/base/262445 Log: Vendor import of BIND 9.9.5 Approved by: delphij (mentor, implicit) Sponsored by: DK Hostmaster A/S Added: vendor/bind9/dist/bin/dnssec/dnssec-importkey.8 vend

svn commit: r262444 - vendor/bind9/9.8.7

Author: erwin Date: Mon Feb 24 13:58:01 2014 New Revision: 262444 URL: http://svnweb.freebsd.org/changeset/base/262444 Log: Tag the 9.8.7 release Added: vendor/bind9/9.8.7/ - copied from r262443, vendor/bind9/dist-9.8/ ___ svn-src-all@freebsd.o

svn commit: r262443 - in vendor/bind9/dist-9.8: . bin/check bin/confgen bin/dig bin/dig/include/dig bin/dnssec bin/named bin/named/include/named bin/named/unix bin/nsupdate bin/rndc doc/arm lib/bin...

Author: erwin Date: Mon Feb 24 13:57:07 2014 New Revision: 262443 URL: http://svnweb.freebsd.org/changeset/base/262443 Log: Vendor import of BIND 9.8.7 Approved by: delphij (mentor, implicit) Sponsored by: DK Hostmaster A/S Added: vendor/bind9/dist-9.8/lib/isc/include/isc/safe.h ven

BIND needs more TLC

also wonder if that team should think a bit bigger and make it a ports-dns team instead and be open to also look after other DNS related ports (though not steal them from current maintainers). Thought and, especially, volunteers are most welcome. Erwin -- Erwin Lansing

Re: Proposal for Authors / Vendors in ports

oo many places, and would rather split content from logic and add these to pkg-descr as well next to the current WWW. I know we're not consistent already with things like COMMENT and LICENSE already in the Makefile, so won't ojbect too much

Re: FreeBSD 10 Beta2 /etc/rc.d/named script and /etc/defaults/rc.conf

On Wed, Nov 06, 2013 at 02:59:15PM +0100, Erwin Lansing wrote: > >> E> > > >> E> > Erwin, can you please handle that? > >> E> > >> E> Things are much worse that this, the ports are completely written under > >> the assumption that the

Re: svn commit: r257694 - in head/etc: . defaults namedb periodic/daily rc.d

On Tue, Nov 05, 2013 at 09:30:07AM +, Gleb Smirnoff wrote: > Author: glebius > Date: Tue Nov 5 09:30:06 2013 > New Revision: 257694 > URL: http://svnweb.freebsd.org/changeset/base/257694 > > Log: > Remove remnants of BIND from /etc, since there is no BIND in base now. > Thanks for takin

Re: svn commit: r257694 - in head/etc: . defaults namedb periodic/daily rc.d

On Tue, Nov 05, 2013 at 09:30:07AM +, Gleb Smirnoff wrote: > Author: glebius > Date: Tue Nov 5 09:30:06 2013 > New Revision: 257694 > URL: http://svnweb.freebsd.org/changeset/base/257694 > > Log: > Remove remnants of BIND from /etc, since there is no BIND in base now. > Thanks for takin

Re: FreeBSD 10 Beta2 /etc/rc.d/named script and /etc/defaults/rc.conf

On 04 Nov 2013, at 09:34, Gleb Smirnoff wrote: > [adding maintainer to Cc] > > On Mon, Nov 04, 2013 at 01:41:01AM +0200, George Kontostanos wrote: > G> > Am 03.11.2013 um 23:06 schrieb Gleb Smirnoff : > G> > > G> > > On Sun, Nov 03, 2013 at 10:05:02PM +0200, Özkan KIRIK wrote: > G> > > Ö> Alto

Re: [HEADSUP] Staging, packaging and more

xtend bapt's earlier example, there will be: curl-bin curl-lib curl-dev *and* curl packages which includes all of the above and will be the default for those who don't care, but we add the first three for those who want. If we have split package support, it is just too eas

Re: [HEADSUP] Staging, packaging and more

ou are used to today, binaries, libraries, etc., but for those who want can install just the separate packages. Erwin -- Erwin Lansinghttp://droso.dk er...@freebsd.orghttp:// www.FreeBSD.org ___ freebsd-

Re: [HEADSUP] Staging, packaging and more

h several Linux distributions but I can see the point for for embedded systems as well. But can't we have both? Create three packages, a default full package and split packages of -bin, -lib, and even -doc. My first though twas to make the full package a meta-package that would install the split

Re: SVN RELEASE_9_2_0

e ports and doc trees, you would go for head (current). > > He's not talking about a branch. It was a tag that allowed one to fetch > the snapshot of the ports tree that was included on the release CDs and > from which the release packages were buil

Re: SVN RELEASE_9_2_0

om this branch, is my > understanding. > The were indeed: > svn info|grep URL URL: svn://svn.freebsd.org/ports/branches/RELENG_9_2_0 Relative URL: ^/branches/RELENG_9_2_0 Erwin -- Erwin Lansinghttp://droso.dk er...@freebsd.org

Re: [CURRENT] unbound: zonefiles?

like local-zone and > local-data. Since I have some larger files defining a local domain, > I'd expect having a data file to be loaded. > > Maybe I'm wrong, eventually someone can send me short notice whether > external file load is possible or not. > > Than

svn commit: r255233 - in stable/9/usr.bin: dig host nslookup

Author: erwin Date: Thu Sep 5 06:58:49 2013 New Revision: 255233 URL: http://svnweb.freebsd.org/changeset/base/255233 Log: MFC r255056 Reduce WARNS to 0 for dig, host, and nslookup to make them compile with the optional WITH_BIND_SIGCHASE. Submitted by: Andre Albsmeier Appro

svn commit: r255233 - in stable/9/usr.bin: dig host nslookup

Author: erwin Date: Thu Sep 5 06:58:49 2013 New Revision: 255233 URL: http://svnweb.freebsd.org/changeset/base/255233 Log: MFC r255056 Reduce WARNS to 0 for dig, host, and nslookup to make them compile with the optional WITH_BIND_SIGCHASE. Submitted by: Andre Albsmeier Appro

Re: svn commit: r254897 - in stable/9: contrib/bind9 contrib/bind9/bin contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnsse

Hi Andre, On Thu, Aug 29, 2013 at 09:56:31AM +0200, Andre Albsmeier wrote: > On Mon, 26-Aug-2013 at 07:17:42 +0000, Erwin Lansing wrote: > > Author: erwin > > Date: Mon Aug 26 07:17:41 2013 > > New Revision: 254897 > > URL: http://svnweb.freebsd.org/changeset/base/254

Re: svn commit: r254897 - in stable/9: contrib/bind9 contrib/bind9/bin contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnsse

Hi Andre, On Thu, Aug 29, 2013 at 09:56:31AM +0200, Andre Albsmeier wrote: > On Mon, 26-Aug-2013 at 07:17:42 +0000, Erwin Lansing wrote: > > Author: erwin > > Date: Mon Aug 26 07:17:41 2013 > > New Revision: 254897 > > URL: http://svnweb.freebsd.org/changeset/base/254

svn commit: r255056 - in head/usr.bin: dig host nslookup

Author: erwin Date: Fri Aug 30 06:21:00 2013 New Revision: 255056 URL: http://svnweb.freebsd.org/changeset/base/255056 Log: Reduce WARNS to 0 for dig, host, and nslookup to make them compile with the optional WITH_BIND_SIGCHASE. Submitted by: Andre Albsmeier Approved by: delphij (ment

svn commit: r255056 - in head/usr.bin: dig host nslookup

Author: erwin Date: Fri Aug 30 06:21:00 2013 New Revision: 255056 URL: http://svnweb.freebsd.org/changeset/base/255056 Log: Reduce WARNS to 0 for dig, host, and nslookup to make them compile with the optional WITH_BIND_SIGCHASE. Submitted by: Andre Albsmeier Approved by: delphij (ment

Re: Why default route is not installed last?

tic routes, with the last one in the list a default route. Hetzner has fixed the setup now, so one can use a standard rc config these days, but just to show that such weird setups do exist. Given that the default is also the last resort, it makes sense it's loaded l

Re: make[6]: stopped in /usr/src/lib/bind/dns

On Mon, Aug 12, 2013 at 04:42:12PM -0400, AN wrote: > /usr/src/lib/bind/dns/../../../contrib/bind9/lib/dns/zone.c -o zone.o > /usr/src/lib/bind/dns/../../../contrib/bind9/lib/dns/zone.c:2772:23: > warning: comparison of constant 245 with >expression of type 'dns_hash_t' is always false >

svn commit: r254323 - vendor/bind9/9.9.3-P2

Author: erwin Date: Wed Aug 14 11:11:49 2013 New Revision: 254323 URL: http://svnweb.freebsd.org/changeset/base/254323 Log: Tag the Bind 9.9.3-P2 import Approved by: delphij (mentor, implicit) Sponsored by: DK Hostmaster A/S Added: vendor/bind9/9.9.3-P2/ - copied from r254322, ve

svn commit: r254321 - vendor/bind9/dist-9.8

Author: erwin Date: Wed Aug 14 10:20:25 2013 New Revision: 254321 URL: http://svnweb.freebsd.org/changeset/base/254321 Log: Fork the vendor branch to allow for continued support of BIND 9.8.x for release up to 9.2 Approved by: delphij (mentor, implicit) Sponsored by: DK Hostmaster A/S

svn commit: r254316 - releng/9.2/etc/namedb

Author: erwin Date: Wed Aug 14 06:06:39 2013 New Revision: 254316 URL: http://svnweb.freebsd.org/changeset/base/254316 Log: MFC 254132, 254270: Add empty zones for Shared Address Space (RFC 6598) Approved by: re (glebius), delphij (mentor) Sponsored by: DK Hostmaster A/S Modified:

svn commit: r254270 - stable/9/etc/namedb

Author: erwin Date: Tue Aug 13 06:25:17 2013 New Revision: 254270 URL: http://svnweb.freebsd.org/changeset/base/254270 Log: MFC r254132: Add empty zones for Shared Address Space (RFC 6598) Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/

svn commit: r254270 - stable/9/etc/namedb

Author: erwin Date: Tue Aug 13 06:25:17 2013 New Revision: 254270 URL: http://svnweb.freebsd.org/changeset/base/254270 Log: MFC r254132: Add empty zones for Shared Address Space (RFC 6598) Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S Modified: stable/9/etc/namedb/

svn commit: r254239 - in vendor/bind9/dist: . libtool.m4

Author: erwin Date: Mon Aug 12 08:15:58 2013 New Revision: 254239 URL: http://svnweb.freebsd.org/changeset/base/254239 Log: Take the weirdly named libtool file off the vendor brachn and make sure it won't get imported in the future. Approved by: delphij (mentor) Sponsored by: DK Hostm

svn commit: r254132 - head/etc/namedb

Author: erwin Date: Fri Aug 9 07:57:04 2013 New Revision: 254132 URL: http://svnweb.freebsd.org/changeset/base/254132 Log: Add empty zones for Shared Address Space (RFC 6598) Approved by: delphij (mentor) MFC after:3 days Sponsored by: DK Hostmaster A/S Modified: head/etc/named

svn commit: r254132 - head/etc/namedb

Author: erwin Date: Fri Aug 9 07:57:04 2013 New Revision: 254132 URL: http://svnweb.freebsd.org/changeset/base/254132 Log: Add empty zones for Shared Address Space (RFC 6598) Approved by: delphij (mentor) MFC after:3 days Sponsored by: DK Hostmaster A/S Modified: head/etc/named

svn commit: r253984 - head/contrib/bind9/libtool.m4

Author: erwin Date: Tue Aug 6 06:24:37 2013 New Revision: 253984 URL: http://svnweb.freebsd.org/changeset/base/253984 Log: Remove weirdly-named autofoo file. This is not needed for the (FreeBSD) build, and freebsd-update chokes on it. Somehow it did manage to be merged, despite my best ef

svn commit: r253984 - head/contrib/bind9/libtool.m4

Author: erwin Date: Tue Aug 6 06:24:37 2013 New Revision: 253984 URL: http://svnweb.freebsd.org/changeset/base/253984 Log: Remove weirdly-named autofoo file. This is not needed for the (FreeBSD) build, and freebsd-update chokes on it. Somehow it did manage to be merged, despite my best ef

Re: Bind in FreeBSD, security advisories

by default. This means that we can use BIND9 so far, but for the long term, we'll have to look into a more viable alternative anyway. Erwin -- Erwin Lansinghttp://droso.dk er...@freebsd.orghttp:// www.FreeBSD.org ___

svn commit: r253838 - vendor/bind9/9.8.5-P2

Author: erwin Date: Wed Jul 31 11:45:40 2013 New Revision: 253838 URL: http://svnweb.freebsd.org/changeset/base/253838 Log: Tag the 9.8.5-P2 release. Approved by: delphij (mentor, implicit) Added: vendor/bind9/9.8.5-P2/ - copied from r253837, vendor/bind9/dist/

svn commit: r253837 - in vendor/bind9/dist: . lib/dns/rdata/generic

Author: erwin Date: Wed Jul 31 11:42:42 2013 New Revision: 253837 URL: http://svnweb.freebsd.org/changeset/base/253837 Log: Vendor import of BIND 9.8.5-P2 Approved by: delphij (mentor, implicit) Sponsored by: DK Hostmaster A/S Modified: vendor/bind9/dist/CHANGES vendor/bind9/dist/li

Re: bind9 and CVE-2013-4854

ware/ > > So the need for patches for RRL will be a moot point soon??? ;) > That's good news indeed, thanks for the pointer Peter. Erwin -- Erwin Lansing (o_ _o)http://d

svn commit: r253593 - vendor/bind9/9.8.5-P1

Author: erwin Date: Wed Jul 24 07:15:08 2013 New Revision: 253593 URL: http://svnweb.freebsd.org/changeset/base/253593 Log: Tag the 9.8.5-P1 release Added: vendor/bind9/9.8.5-P1/ - copied from r253592, vendor/bind9/dist/ ___ svn-src-all@freebsd

Re: [HEADSUP] New mailing pkg-fallout

ing waiting for a "krismail" from me, Martin, or other portmgr members) testing. If you feel the volume is to big, here's your change to make a difference! Erwin -- Erwin Lansinghttp://droso.dk er...@freebsd.orghttp:

Re: dns/bind99

t;L" missed somehow, if I'm not mistaken. > Well spotted, thanks! And fixed. Erwin -- Erwin Lansinghttp://droso.dk er...@freebsd.orghttp:// www.FreeBSD.org ___ freebsd-ports@free

Re: svn commit: r248808 - in stable/9: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns

On Thu, Mar 28, 2013 at 05:39:45AM +, Xin LI wrote: > Author: delphij > Date: Thu Mar 28 05:39:45 2013 > New Revision: 248808 > URL: http://svnweb.freebsd.org/changeset/base/248808 > > Log: > MFC r248788 (erwin): > > Update BIND to 9.8.4-P2 > > Removed the check for regex.h in conf

Re: svn commit: r248808 - in stable/9: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns

On Thu, Mar 28, 2013 at 05:39:45AM +, Xin LI wrote: > Author: delphij > Date: Thu Mar 28 05:39:45 2013 > New Revision: 248808 > URL: http://svnweb.freebsd.org/changeset/base/248808 > > Log: > MFC r248788 (erwin): > > Update BIND to 9.8.4-P2 > > Removed the check for regex.h in conf

svn commit: r248788 - in head: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns

Author: erwin Date: Wed Mar 27 10:11:43 2013 New Revision: 248788 URL: http://svnweb.freebsd.org/changeset/base/248788 Log: Update to 9.8.4-P2 Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some

svn commit: r248788 - in head: contrib/bind9 lib/bind lib/bind/dns lib/bind/dns/dns

Author: erwin Date: Wed Mar 27 10:11:43 2013 New Revision: 248788 URL: http://svnweb.freebsd.org/changeset/base/248788 Log: Update to 9.8.4-P2 Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some

svn commit: r248785 - vendor/bind9/9.8.4-P2

Author: erwin Date: Wed Mar 27 07:16:14 2013 New Revision: 248785 URL: http://svnweb.freebsd.org/changeset/base/248785 Log: Tag the 9.8.4-P2 release Approved by: delphij (mentor) Added: vendor/bind9/9.8.4-P2/ - copied from r248784, vendor/bind9/dist/ ___

svn commit: r248784 - vendor/bind9/dist

Author: erwin Date: Wed Mar 27 07:15:01 2013 New Revision: 248784 URL: http://svnweb.freebsd.org/changeset/base/248784 Log: Vendor import of Bind 9.8.4-P2 Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S Modified: vendor/bind9/dist/CHANGES vendor/bind9/dist/config.h.in

Re: Status of packages

in this list, the latest announcement is here http://www.freebsd.org/news/2012-compromise.html#update20130323 In short, we're working hard on getting everything back online and have made some very good progress the last few weeks and days, and hope to have packages

[portbu...@freebsd.org: linux_base-f10-10_5 failed on amd64 9]

at/RPMS 10734783 drwxr-xr-x2 root wheel 2 Mar 15 12:41 usr/local/src/redhat/RPMS/ia64 10734843 drwxr-xr-x2 root wheel 2 Mar 15 12:41 usr/local/src/redhat/RPMS/sparcv9 10734813 drwxr-xr-x2 root wheel

[HEADSUP] Broken INDEX and other sanity checking mailings reenabled

"Annoying Reminder Guy III" Lansing -- Erwin Lansinghttp://droso.dk er...@freebsd.orghttp:// www.FreeBSD.org ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailma

svn commit: r245162 - stable/7/etc/namedb

Author: erwin Date: Tue Jan 8 08:59:39 2013 New Revision: 245162 URL: http://svnweb.freebsd.org/changeset/base/245162 Log: MFC r245034 Update with new IPv4 address for D root. Approved by:delphij (mentor) Modified: stable/7/etc/namedb/named.root Directory Propertie

svn commit: r245161 - stable/8/etc/namedb

Author: erwin Date: Tue Jan 8 08:58:23 2013 New Revision: 245161 URL: http://svnweb.freebsd.org/changeset/base/245161 Log: MFC r245034 Update with new IPv4 address for D root. Approved by:delphij (mentor) Modified: stable/8/etc/namedb/named.root Directory Propertie

svn commit: r245160 - stable/9/etc/namedb

Author: erwin Date: Tue Jan 8 08:58:07 2013 New Revision: 245160 URL: http://svnweb.freebsd.org/changeset/base/245160 Log: MFC r245034 Update with new IPv4 address for D root. Approved by:delphij (mentor) Modified: stable/9/etc/namedb/named.root Directory Properties:

  1   2   3   4   5   6   7   8   9   10   >