2010年11月12日

[installer 2571] unbound-1.4.7

unbound-1.4.7 出ています。

☆ unbound-1.4.7
http://unbound.net/
http://unbound.net/downloads/unbound-1.4.7.tar.gz

http://www.unbound.net/download.html より:

Unbound 1.4.7
Download: unbound-1.4.7.tar.gz
SHA1 checksum: 6e9d663b414bcbbc7db75d0fc3b9174e45ec0951
SHA256 checksum: fe17ef4639f965cbf0864d0e49ec00d567d7c4ab9f199f2a6f00842b6e48016c
Date: 8 November, 2010

Features

o unbound-anchor app, unbound requires libexpat (xml parser
library). It creates or updates a root.key file. Use it before you
start the validator (e.g. at system boot time).
o dump_infra and flush_infra commands for unbound-control.

Bug Fixes

o GOST code enabled by default (RFC 5933).
o Configure detects libev-4.00.
o do not synthesize a CNAME message from cache for qtype DS.
o Use central entropy to seed threads.
o Change the rtt used to probe EDNS-timeout hosts to 1000 msec.
o Fix validation failure for parent and child on same server with an
insecure childzone and a CNAME from parent to child.
o Change of timeout code. No more lost and backoff in blockage. At
12sec timeout (and at least 2x lost before) one probe per IP is
allowed only. At 120sec, the IP is blocked. After 15min, a 120sec
entry has a single retry packet.
o no timeout backoff if meanwhile a query succeeded.
o Configure errors if ldns is not found.
o Windows 7 fix for the installer.
o Fix bug where fallback_tcp causes wrong roundtrip and edns
observation to be noted in cache. Fix bug where EDNSprobe halted
exponential backoff if EDNS status unknown.
o interface automatic works for some people with ip6
disabled. Therefore the error check is removed, so they can use the
option.
o Fix TCP so it uses a random outgoing-interface.
o Fix bug when DLV below a trust-anchor that uses NSEC3 optout where
the zone has a secure delegation hosted on the same server did not
verify as secure (it was insecure by mistake).
o Fix alloc_reg_release for longer uptime in out of memory
conditions.
o [bugzilla: 329 ]
in example.conf show correct ipv4 link-local 169.254/16.
o compliance with draft-ietf-dnsop-default-local-zones-14, removed
reverse ipv6 orchid prefix from builtin list.
o Algorithm rollover operational reality intrudes, for trust-anchor
and 5011-store, if one key matches it's good enough.
o Fix reported validation error in out of memory condition.
o Abide RFC5155 section 9.2: no AD flag for replies with NSEC3
optout.
o increased mesh-max-activation from 1000 to 3000 for crazy domains
like _tcp.slb.com with 262 servers.
o [bugzilla: 327 ]
Fix for cannot access stub zones until the root is primed.
o openbsd-lint fixes
o [bugzilla: 321 ]
Fix resolution of rs.ripe.net artifacts with 0x20. Delegpt
structures checked for duplicates always. No more nameserver lookups
generated when depth is full anyway.
o [bugzilla: 322 ]
Fix, configure does not respect CFLAGS on Solaris. Pass CFLAGS="-xO4
-xtarget=generic" on the configure command line if use sun-cc, but
some systems need different flags.
o Fix acx_nlnetlabs.m4 configure output for autoconf-2.66 AS_TR_CPP
changes, uses m4_bpatsubst now.
o make test (or make check) should be more portable and run the unit
test and testbound scripts. (make longtest has special requirements).
o More pleasant remote control command parsing.
o Fix name of rrset printed that failed validation.
o Return NXDOMAIN after chain of CNAMEs ends at name-not-found.
o Fix validation in case a trust anchor enters into a zone with
unsupported algorithms.
o iana portlist updated.
o updated ldns tarball.

----
こがよういちろう


投稿者 xml-rpc : 2010年11月12日 11:20
役に立ちました?:
過去のフィードバック 平均:(0) 総合:(0) 投票回数:(0)
本記事へのTrackback: http://hoop.euqset.org/blog/mt-tb2006.cgi/99976
トラックバック
コメント
コメントする




画像の中に見える文字を入力してください。