summaryrefslogtreecommitdiffstats
path: root/usr.sbin/unbound
Commit message (Collapse)AuthorAgeFilesLines
* META MODE: Update dependencies with 'the-lot' and add missing directories.bdrewery2015-12-015-0/+105
| | | | | | | | | | | | | | This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable. Currently rescue/rescue and sys/modules are still not connected. Sponsored by: EMC / Isilon Storage Division
* Add more SUBDIR_PARALLEL.bdrewery2015-09-261-0/+1
| | | | | MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
* If forwarders were specified on the command line, create an emptydes2015-09-161-6/+14
| | | | | | resolvconf.conf so that resolvconf won't replace the manually configured forwarders with dynamically configured ones the next time the lease is renewed.
* Enable remote control using a local socket in the default configuration.des2015-01-051-13/+52
|
* Convert usr.sbin to LIBADDbapt2014-11-254-12/+4
| | | | Reduce overlinking
* Fix support for IPv6 nameservers.des2014-09-081-1/+1
| | | | | | PR: 188931 Submitted by: Takefu <takefu@airport.fm> MFC after: 3 days
* Rework privatelib/internallibbapt2014-08-064-4/+4
| | | | | | | | | | | | | | Make sure everything linking to a privatelib and/or an internallib does it directly from the OBJDIR rather than DESTDIR. Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing in final installation Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to internal/privatelib Directly link to the .so in case of private library to avoid having to complexify LDFLAGS. Phabric: https://phabric.freebsd.org/D553 Reviewed by: imp, emaste
* Use a combination of unblock-lan-zones (r268839) and domain-insecuredes2014-07-181-1/+51
| | | | to fix reverse lookups on networks using private addresses.
* Create /var/unbound/conf.d for additional configuration files.des2014-05-291-2/+11
| | | | | | Ensure that it is used if present. MFH: 3 weeks
* Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyterdes2013-09-231-5/+3
| | | | | | | | | | pointed out, having additional nameservers listed in /etc/resolv.conf can break DNSSEC verification by providing a false positive if unbound returns SERVFAIL due to an invalid signature. The downside is that the domain / search path won't get updated either, but we can live with that. Approved by: re (blanket)
* Ensure that resolvconf(8) preserves the edns0 setting.des2013-09-231-0/+1
| | | | Approved by: re (blanket)
* Add a setup script for unbound(8) called local-unbound-setup. Itdes2013-09-233-0/+364
| | | | | | | | | | | | | | | | | | | | | | | | | generates a configuration suitable for running unbound as a caching forwarding resolver, and configures resolvconf(8) to update unbound's list of forwarders in addition to /etc/resolv.conf. The initial list is taken from the existing resolv.conf, which is rewritten to point to localhost. Alternatively, a list of forwarders can be provided on the command line. To assist this script, add an rc.subr command called "enabled" which does nothing except return 0 if the service is enabled and 1 if it is not, without going through the usual checks. We should consider doing the same for "status", which is currently pointless. Add an rc script for unbound, called local_unbound. If there is no configuration file, the rc script runs local-unbound-setup to generate one. Note that these scripts place the unbound configuration files in /var/unbound rather than /etc/unbound. This is necessary so that unbound can reload its configuration while chrooted. We should probably provide symlinks in /etc. Approved by: re (blanket)
* Set NO_WERROR for unbound until I can figure out how to unbreak thedes2013-09-151-0/+2
| | | | | | non-clang build. Approved by: re (blanket)
* Build and install the Unbound caching DNS resolver daemon.des2013-09-156-0/+78
Approved by: re (blanket)
OpenPOWER on IntegriCloud