summaryrefslogtreecommitdiffstats
path: root/contrib/bind/CHANGES
blob: 0cb28dd0b3eaf03f27399196db3856c72f80a2e7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672
1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834
1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897
1898
1899
1900
1901
1902
1903
1904
1905
1906
1907
1908
1909
1910
1911
1912
1913
1914
1915
1916
1917
1918
1919
1920
1921
1922
1923
1924
1925
1926
1927
1928
1929
1930
1931
1932
1933
1934
1935
1936
1937
1938
1939
1940
1941
1942
1943
1944
1945
1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
1958
1959
1960
1961
1962
1963
1964
1965
1966
1967
1968
1969
1970
1971
1972
1973
1974
1975
1976
1977
1978
1979
1980
1981
1982
1983
1984
1985
1986
1987
1988
1989
1990
1991
1992
1993
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
2028
2029
2030
2031
2032
2033
2034
2035
2036
2037
2038
2039
2040
2041
2042
2043
2044
2045
2046
2047
2048
2049
2050
2051
2052
2053
2054
2055
2056
2057
2058
2059
2060
2061
2062
2063
2064
2065
2066
2067
2068
2069
2070
2071
2072
2073
2074
2075
2076
2077
2078
2079
2080
2081
2082
2083
2084
2085
2086
2087
2088
2089
2090
2091
2092
2093
2094
2095
2096
2097
2098
2099
2100
2101
2102
2103
2104
2105
2106
2107
2108
2109
2110
2111
2112
2113
2114
2115
2116
2117
2118
2119
2120
2121
2122
2123
2124
2125
2126
2127
2128
2129
2130
2131
2132
2133
2134
2135
2136
2137
2138
2139
2140
2141
2142
2143
2144
2145
2146
2147
2148
2149
2150
2151
2152
2153
2154
2155
2156
2157
2158
2159
2160
2161
2162
2163
2164
2165
2166
2167
2168
2169
2170
2171
2172
2173
2174
2175
2176
2177
2178
2179
2180
2181
2182
2183
2184
2185
2186
2187
2188
2189
2190
2191
2192
2193
2194
2195
2196
2197
2198
2199
2200
2201
2202
2203
2204
2205
2206
2207
2208
2209
2210
2211
2212
2213
2214
2215
2216
2217
2218
2219
2220
2221
2222
2223
2224
2225
2226
2227
2228
2229
2230
2231
2232
2233
2234
2235
2236
2237
2238
2239
2240
2241
2242
2243
2244
2245
2246
2247
2248
2249
2250
2251
2252
2253
2254
2255
2256
2257
2258
2259
2260
2261
2262
2263
2264
2265
2266
2267
2268
2269
2270
2271
2272
2273
2274
2275
2276
2277
2278
2279
2280
2281
2282
2283
2284
2285
2286
2287
2288
2289
2290
2291
2292
2293
2294
2295
2296
2297
2298
2299
2300
2301
2302
2303
2304
2305
2306
2307
2308
2309
2310
2311
2312
2313
2314
2315
2316
2317
2318
2319
2320
2321
2322
2323
2324
2325
2326
2327
2328
2329
2330
2331
2332
2333
2334
2335
2336
2337
2338
2339
2340
2341
2342
2343
2344
2345
2346
2347
2348
2349
2350
2351
2352
2353
2354
2355
2356
2357
2358
2359
2360
2361
2362
2363
2364
2365
2366
2367
2368
2369
2370
2371
2372
2373
2374
2375
2376
2377
2378
2379
2380
2381
2382
2383
2384
2385
2386
2387
2388
2389
2390
2391
2392
2393
2394
2395
2396
2397
2398
2399
2400
2401
2402
2403
2404
2405
2406
2407
2408
2409
2410
2411
2412
2413
2414
2415
2416
2417
2418
2419
2420
2421
2422
2423
2424
2425
2426
2427
2428
2429
2430
2431
2432
2433
2434
2435
2436
2437
2438
2439
2440
2441
2442
2443
2444
2445
2446
2447
2448
2449
2450
2451
2452
2453
2454
2455
2456
2457
2458
2459
2460
2461
2462
2463
2464
2465
2466
2467
2468
2469
2470
2471
2472
2473
2474
2475
2476
2477
2478
2479
2480
2481
2482
2483
2484
2485
2486
2487
2488
2489
2490
2491
2492
2493
2494
2495
2496
2497
2498
2499
2500
2501
2502
2503
2504
2505
2506
2507
2508
2509
2510
2511
2512
2513
2514
2515
2516
2517
2518
2519
2520
2521
2522
2523
2524
2525
2526
2527
2528
2529
2530
2531
2532
2533
2534
2535
2536
2537
2538
2539
2540
2541
2542
2543
2544
2545
2546
2547
2548
2549
2550
2551
2552
2553
2554
2555
2556
2557
2558
2559
2560
2561
2562
2563
2564
2565
2566
2567
2568
2569
2570
2571
2572
2573
2574
2575
2576
2577
2578
2579
2580
2581
2582
2583
2584
2585
2586
2587
2588
2589
2590
2591
2592
2593
2594
2595
2596
2597
2598
2599
2600
2601
2602
2603
2604
2605
2606
2607
2608
2609
2610
2611
2612
2613
2614
2615
2616
2617
2618
2619
2620
2621
2622
2623
2624
2625
2626
2627
2628
2629
2630
2631
2632
2633
2634
2635
2636
2637
2638
2639
2640
2641
2642
2643
2644
2645
2646
2647
2648
2649
2650
2651
2652
2653
2654
2655
2656
2657
2658
2659
2660
2661
2662
2663
2664
2665
2666
2667
2668
2669
2670
2671
2672
2673
2674
2675
2676
2677
2678
2679
2680
2681
2682
2683
2684
2685
2686
2687
2688
2689
2690
2691
2692
2693
2694
2695
2696
2697
2698
2699
2700
2701
2702
2703
2704
2705
2706
2707
2708
2709
2710
2711
2712
2713
2714
2715
2716
2717
2718
2719
2720
2721
2722
2723
2724
2725
2726
2727
2728
2729
2730
2731
2732
2733
2734
2735
2736
2737
2738
2739
2740
2741
2742
2743
2744
2745
2746
2747
2748
2749
2750
2751
2752
2753
2754
2755
2756
2757
2758
2759
2760
2761
2762
2763
2764
2765
2766
2767
2768
2769
2770
2771
2772
2773
2774
2775
2776
2777
2778
2779
2780
2781
2782
2783
2784
2785
2786
2787
2788
2789
2790
2791
2792
2793
2794
2795
2796
2797
2798
2799
2800
2801
2802
2803
2804
2805
2806
2807
2808
2809
2810
2811
2812
2813
2814
2815
2816
2817
2818
2819
2820
2821
2822
2823
2824
2825
2826
2827
2828
2829
2830
2831
2832
2833
2834
2835
2836
2837
2838
2839
2840
2841
2842
2843
2844
2845
2846
2847
2848
2849
2850
2851
2852
2853
2854
2855
2856
2857
2858
2859
2860
2861
2862
2863
2864
2865
2866
2867
2868
2869
2870
2871
2872
2873
2874
2875
2876
2877
2878
2879
2880
2881
2882
2883
2884
2885
2886
2887
2888
2889
2890
2891
2892
2893
2894
2895
2896
2897
2898
2899
2900
2901
2902
2903
2904
2905
2906
2907
2908
2909
2910
2911
2912
2913
2914
2915
2916
2917
2918
2919
2920
2921
2922
2923
2924
2925
2926
2927
2928
2929
$Id: CHANGES,v 8.53 1997/06/01 20:34:25 vixie Exp vixie $

	--- 4.9.6 released ---

805. [security]	The server now caches only those response records
		that are within the current query domain.  (From BIND-8)

804. [security]	another buffer overrun plugged, this time in res_search().

803. [bug]	core leak fixed in ns_resp.c (twice).

802. [proto]	RTT sorting was defeating round robin for nameserver A RRs.

801. [bug]	res_send() now considers FD_SETSIZE usefully.

800. [bug]	formatting errors corrected in precsize_aton().

799. [bug]	now that inet_pton() is safe, we call it a little more often.

798. [bug]	file descriptor leak plugged on systems without SO_LINGER.

797. [bug]	named-xfer signal, exit, and stub bugs fixed.

798. [bug]	tokens with merely _leading_ digits won't be taken as TTL's.

797. [port]	Motorola 88K port integrated.

796. [doc]	some spelling errors, omissions, and misdirections removed.

795. [security]	"dig @0 version.bind chaos" no longer shows user names.

794. [bug]	make d_rcnt larger; reorder databuf for packing efficiency.

793. [bug]	we forgot to reset a pointer after a realloc (named_xfer.c).

792. [bug]	RRset TTL was not being maintained coherently.

791. [doc]	BOG was off by one in its ndots description.

790. [whining]	preserve forwarded RRset order for one last release.

789. [bug]	TCP timeouts were leaking file descriptors.

788. [bug]	AXFR needs 64K to fit in, not PACKETSZ.

787. [bug]	dangling CNAMEs caused erroneous forwarded responses.

786. [protocol]	better checking of incoming additional data.

785. [bug]	forced reload of parents after zone expiry had problems.

784. [bug]	SRV RR's were not decoded properly.

783. [bug]	BUFSIZ is less than PACKETSZ on some systems (overruns).

782. [bug]	named could spin on invalid TCP input formats (ns_main.c).

781. [bug]	short names of all hex digits were being handled incorrectly.

780. [bug]	doupdate was handling BOGUSNS and syslog messages incorrectly.

779. [bug]	named-xfer can now handle RFC1035-compliant zone transfers.

778. [security]	wire protocol names now limited to MAXCDNAME octets.

777. [port]	res_send name redefinition now covered by BIND_RES_POSIX3.

	--- 4.9.5-p1 released ---

776. [doc]	doc/misc/FAQ.* updated by its author.

775. [bug]	KEY RRs were not allowed to default fields per [DNSSEC].

774. [bug]	nslookup was overflowing yet another internal data structure.

773. [bug]	syslog was being given an unprotected string to format from.

772. [debug]	a debugging syslog() was made clearer.

771. [contrib]	contrib/host updated by its author.

770. [bug]	nslookup was overflowing an internal data structure.

769. [port]	ultrix linkage hackery removed from res/res_comp.c.

768. [lint]	named-xfer u_char* vs. char*.

767. [port]	shres/sunos updates from the author.

766. [bug]	nslookup was not limiting the number of addresses it handled.

765. [port]	LOG_NOWAIT turned on if available.

764. [lint]	nslookup NULL vs ERROR.

763. [bug]	p_rr() was erroneously reporting short packets.

762. [bug]	minor memory leak fixed (during bad-name syslogging).

761. [port]	NeXTstep portability improved for modern systems.

760. [bug]	NAPTR RR support was incomplete/broken in named-xfer.

759. [port]	The resolver's POSIX.3 conformance is now optional since
		it was causing trouble for vendor shared library editing.

	--- 4.9.5-rel released ---

758. [doc]	more Linux libc discussions included.

757. [doc]	RFCs 1876, 1995, 1996, 2010, and 2052 now included.

756. [contrib]	new version of contrib/host received from author.

755. [bug]	nslookup had a latent buffer overrun in initialization.

754. [port]	NCR's flavour of SVr4 is now supported.

753. [bug]	fp_nquery() could read past end of buffer.  (fix from BIND 8.1)

752. [conf]	SENSIBLE_DOTS is now the default.  SGI can use WANT_PIDFILE.

751. [doc]	the the BOG had an extra "the" in two places.

750. [bug]	erroneous zones weren't resetting z_ftime.

749. [bug]	named-xfer's handling of unknown type codes was not robust.
		(it's still wrong but now it's wrong more gracefully.)

748. [lint]	u_char vs. char changes in db_load.c.

747. [bug]	a previous patch had leftovers.

746. [bug]	dangling CNAMEs were not handled properly.

745. [doc]	shres/sunos/INSTALL, ./INSTALL and man/gethostbyname.3
		modernized.

744. [bug]	NAPTR replacement domains were being verified as hostnames.

743. [port]	hpux10.10 makefile cleanup.

742. [bug]	inet_net_pton() was doing bad things to subnets and b'casts.

741. [func]	source and owner are now logged with name errors.

	--- 4.9.5-t6b released ---

740. [bug]	dangling cname checking had a few memory leaks.

739. [func]	SRV support made more complete; NAPTR support added.

738. [protocol]	dangling CNAMEs are no longer considered format errors.

737. [bug]	owner domain names like "*." were not considered valid.

736. [contrib]	new version of contrib/host included.

735. [doc]	added some text to shres/solaris/INSTALL.

734. [bug]	loading a zone with a single line SOA RR killed following line.

733. [bug]	priming could deadlock in odd cases.

732. [bug]	SIGHUP now caught before initial zone load.

731. [bug]	IP/TCP session logging now controlled by #ifdef DEBUG.

730. [port]	untested HPUX 10 support added to top level Makefile.

729. [port]	ultrix vs. _res_close(); ultrix wins.

728. [bug]	several d_rcode references weren't #ifdef'd NCACHE.

727. [bug]	SOA timer warnings now consistently logged at LOG_WARNING.

726. [protocol]	added T_NAPTR as RR type 35, hoping the IANA concurs.

	--- 4.9.5-t5b released ---

725. [port]	shared libraries should work on Linux now.

724. [bug]	"dig @0 VERSION.BIND TXT CHAOS" had never been tested.

723. [port]	Solaris 2.6 has AF_LINK but not sa_len.

722. [protocol]	verify RdLength of A and AAAA RRs.

721. [port]	missing include directories will be made during "install".

720. [port]	solaris and sunos should use native assemblers with gcc.

719. [port]	cleaned up some A/UX linkages.

718. [func]	some SOA sanity checks were changed from errors to warnings.

717. [port]	BSD/named/Makefile needed to have dmalloc.c reference removed.

716. [protocol]	cnames and referrals were generating spurious log messages.

715. [port]	ultrix PCC didn't like a =&, said it was ambigious somehow.

	--- 4.9.5-t4b released ---

714. [port]	contrib/os2-emx now contains files nec'y for OS/2 (EMX).

713. [func]	gethostbyname2(x, AF_INET6) now accepts address literals.

712. [bug]	gethostbyname() wasn't seeing RES_USE_INET6 early enough.

711. [bug]	nslookup was printing IPv6 addresses improperly.

710. [port]	an alignment bug was found and fixed by Cray.

709. [bug]	named-xfer was dumping core on incoming LOC RRs.

708. [protocol]	primary zones are edited to make rrset ttl's coherent during
		loading.

707. [protocol]	rrsets with coherent ttl's won't be overridden by new rrsets
		with incoherent ttl's.

706. [port]	Ultrix portability restored.

705. [func]	added "limit files XXX" to boot file.

704. [bug]	trace generation code was getting unaligned accesses.

703. [contrib]	added contrib/getkeyby, from gnu@toad.com.

702. [func]	MAXDNAME is now 4*256+1 to allow for \000 and the NUL.

701. [bug]	samedomain() wasn't paying attention to escapes.

700. [func]	allow long text strings in T_X25 RRs.

699. [port]	added base64.c to shres/*/Makefile.

698. [port]	picked some lint out of tools/nslookup/getinfo.c.

697. [bug]	we were calling isupper() without calling isascii() first.

696. [protocol]	a new kind of bad referral is now caught and ignored.

	--- 4.9.5-t3b released ---

695. [func]	Use delete_stale() in preference to delete_all() more often.

694. [func]	DATUMREFCNT is no longer an option.

693. [port]	fixed up the CPPFLAGS usage in the top level Makefile.

692. [port]	fixed up the __ defines (for POSIX.3) in include/resolv.h.

691. [port]	removed all uses of "ssize_t", the world is not ready for it.
		(fixed two latent signed/unsigned code bugs in the process.)

	--- 4.9.5-t3a released ---

690. [bug]	the stale() and delete_all() calls in finddata() weren't
		respectful toward T_ANY and C_ANY queries.

689. [lint]	miscellaneous compiler warnings were disappeared.

688. [func]	handles insane/unreachable root servers a little better now.

687. [bug]	T1A's core dumps from bad databufs should be all fixed now.

686. [func]	overlong TXT strings should work again.

685. [port]	updated compat/include/sys/cdefs.h to BSD 4.4-Lite (8.7) vers.

684. [doc]	doc/i-d/* added.

683. [contrib]	"nslint" added to contrib/.

682. [protocol]	irrelevant authority information is now correctly ignored.

681. [func]	DO_RELOAD Is no longer optional.

680. [cleanup]	ALLOW_UPDATES is gone.

679. [port]	some systems need _res to be in text rather than bss.

678. [port]	-Dssize_t=int is gone; see portability.h.

677. [contrib]	outdates #671; update to contrib/host version 960808.

676. [doc]	formatting fix to man/named.man8.

	--- 4.9.5-t2a released ---

675. [lint]	various.

674. [feature]	support added for SRV RR (untested).

673. [protocol]	added definitions for EID, NIMLOC, SRV, ATMA, and IXFR.

672. [bug]	fixed decoding problem wrt AAAA in tools/nslookup/debug.c.

671. [bug]	fixed formatting problem wrt TXT in contrib/host/host.c.

	--- 4.9.5-t1a released ---

670. [feature]	added SIG and KEY RR support (without signature or
		verification).

669. [internal]	name/number translations are now mostly table driven.

668. [feature]	nslookup now has better[/different] error messages.

667. [feature]	inet_neta(), inet_net_ntop(), inet_net_pton() added.

666. [bug]	parent zone will be reloaded when a child zone changes.

665. [protocol]	RETURNSOA logic has been refined, and now ships "enabled."

664. [protocol]	cached RRsets are now completely flushed when new data arrives.

663. [port]	IRIX shared libraries are now supported.

662. [port]	SCO OSE5 support has been upgraded slightly.

661. [bug]	insane root servers will now be handled correctly.

660. [bug]	TXT RRs are now parsed and displayed in full RFC1035 form.

659. [port]	UXP/DS is now supported in the top level Makefile.

658. [feature]	BIND now checks that UDP checksums are enabled in the kernel.

	--- 4.9.4-p1 released ---

657. [bug]	some configurations were mistakenly disabling cache purges.

656. [doc]	"\ " was causing a line break in zone file parsing.

655. [doc]	named(8) wasn't describing the "response" literal.

654. [doc]	formatting errors fixed in include/arpa/nameser.h.

653. [doc]	doc/misc/DynamicUpdate now has a deprecating comment.

652. [bug]	BSD/nslookup/Makefile was making the wrong links.

651. [bug]	a hashing function should be as simple as possible,
		but not simpler.

650. [bug]	dn_mailok() could walk off the end of the name buffer.

649. [bug]	bad names were not exiting through the right code path.

648. [bug]	we were referencing dynamic memory after free()'ing it.

647. [bug]	savename() was bzero()'ing the wrong number of bytes.

646. [bug]	ctypes.h needed to be included in res/res_debug.c.

645. [port]	sys/types.h needed to be included in a lot of places.

	--- 4.9.4-rel released ---

644. [bug]	gethnamadr.c:getanswer() wasn't decrementing buflen.

643. [contrib]	new contrib/misc/gencidrzone.

	--- 4.9.4-t5b released ---

642. [bug]	SOA serial checking was not trying backup servers.

641. [doc]	added doc/rfc/rfc1713.

640. [bug]	don't try to purge the cache on nonrecursive servers.

639. [bug]	sysquery() was not recovering from lack of root servers.

638. [bug]	dnsquery.c wasn't calling res_init().

637. [bug]	ns_resp() was erroneously detecting name errors.

636. [bug]	nslookup() was returning failure even when fwdrs were avail.

635. [bug]	inet_pton() was returning EINVAL rather than EAFNOSUPPORT.

	--- 4.9.4-t4b released ---

634. [bug]	named-xfer was writing AAAA RRs to the wrong file pointer.

633. [port]	ULTRIX and RISCOS both need NEED_STRDUP in conf/portability.h.

632. [bug]	BSD/named/Makefile was installing its man page in section 1.

	--- 4.9.4-t4a released ---

631. [bug]	nslookup was dumping core on bad 'server' commands.

630. [bug]	dig was not able to print SRV RRs.

629. [bug]	dig was seeing artificial protocol errors printing AAAA RRs.

	--- 4.9.4-t3b released ---

628. [bug]	"stub ." changes were being updated in the wrong place.

627. [bug]	forgot to remove fourth arg from inet_pton() in tools/addr.c.

626. [port]	was missing -DSPRINTF_CHAR in one spot in the top Makefile.

	--- 4.9.4-t3a released ---

625. [api]	inet_pton()'s signature changed due to ipng@sunroof discussion.

624. [port]	shres/* should work again (was broken by inet_ntop, inet_pton)

623. [bug]	sprintf() doesn't return "int" on DomainOS, either.

	--- 4.9.4-t2a released ---

622. [bug]	sprintf() doesn't return "int" on SunOS or ULTRIX.

	--- 4.9.4-t1a released ---

622. [bug]	more print errors in the name validation logic fixed.

621. [feature]	added support for IPv6 addresses to the resolver and daemon.
		see doc/misc/IPv6 for details.

620. [perf]	XSTATS off by default.  client stats now in XSTATS.

619. [conf]	LOC_RR is on by default (it's an RFC now).

618. [perf]	pulled in memory saving NAME,NAMELEN,NAMESIZE logic from
		development source pool.

617. [bug]	we were logging at INFO priority even when not loading a
		zone due to certain kinds of database format errors.

616. [bug]	truncated responses were not being forwarded.

615. [contrib]	added contrib/misc/gencidrzone.pl, updated contrib/host.

614. [bug]	minor and latent bug in dcalloc() fixed.

613. [bug]	the RFC952 + "_" code wasn't strict enough.

612. [bug]	the PTR name check was using ipv6.int rather than ip6.int.

611. [conf]	changed "check-names forwarded" to "check-names response".

610. [doc]	man page said check-name, should have said check-names.

609. [bug]	in res_send(), query ID mismatches weren't handled in VC's.

608. [bug]	res_send() would overrun its buffer when parsing truncated
		replies for its diagnostic output.

607. [bug]	EINTR wasn't causing a select() restart in res_send.

606. [bug]	fixed a race condition related to SO_LINGER.

605. [bug]	some "lame delegation" messages were printing wrong information

604. [bug]	uncached out of zone CNAMEs were returning SERVFAIL rather
		than timing out; this prevented the client from retrying.

603. [bug]	lame delegations will now try other servers rather than just
		SERVFAIL'ing.  the old behaviour was too draconian.

602. [security]	we were cycling back through the volatile cache when searching
		for glue to match the bootstrap cache.

601. [bug]	we were not recognizing upward zone cuts in some circumstances

600. [API bug]	getnetbyaddr() was taking a long, rather than a u_long.

599. [bug]	PX RRs were not properly handled by named-xfer.c.

598. [bug]	WKS RRs were written incorrectly in db_dump.c.

597. [bug]	named would not create a brand new pid file.

596. [bug]	memory leak in ns_resp.c plugged.

595. [bug]	another wildcarding bug (in ns_maint.c) stomped.

594. [contrib]	added contrib/misc/settransfer-gaine.shar.

593. [security]	db_load() will allow invalid SOA ANAMEs, for now.

592. [bug]	dig and nslookup needed code from 4.9.4-T1A for AXFR (#589).

591. [bug]	dig and nslookup both dumped core if dn_expand() failed.

590. [port]	changed __RES to 19960229 due to dn_isvalid() API addition.

589. [bug]	named-xfer was unable to handle some compliant AXFR streams.

588. [security]	call dn_isvalid() from db_load() to catch zone naming errors.

587. [security]	added function dn_isvalid(), called from dn_expand(), per CERT.

586. [bug]	dangling NS RR's (no A RR's in cache) weren't recoverable.

585. [bug]	named was ignoring the cache for "." even after priming.

584. [bug]	ns_resp() could dump core during some kinds of query restarts.

583. [bug]	default logging priority for lame delegations now LOG_DEBUG.

582. [doc]	added RFC 1912 which expands upon RFC 1537.

581. [port]	BSD really does not have SIGIOT any more, stop using it.

580. [bug]	getnetent() could mangle /etc/networks input lines.

579. [bug]	db_dump was printing -1 for TTL wherever default TTL was used.

578. [port]	many scanf/printf patterns misused %lu, DEC AXP didn't like it.

577. [bug]	named-xfer and res_debug were mishandling "\\" in TXT/HINFO.

576. [bug]	"limit" directive was setting current but not max system limit.

	--- 4.9.3-p1 released ---

575. [port]	Ultrix/Hesiod named responses are oversized, we were
		incorrectly accepting them and then overwriting the stack.

574. [port]	BSD/OS 2.1 required some ./BSD/Makefile changes.

	--- 4.9.3-rel released ---

573. [contrib]	put in "951231" version of contrib/host.

572. [doc]	new file doc/info/SCO-2 concerning <sys/param.h> porting.

571. [bug]	zones whose master files contained only $INCLUDEs were
		incorrectly considered to not have any RR's (old bug.)

570. [doc]	trivial man/named.8 tweak.

569. [doc]	minor documentation tweak to shres/solaris/ISSUES.

	--- 4.9.3-beta34 released ---

568. [bug]	very minor initialization bug fixed in tools/dig.c.

567. [bug]	disabled VALIDATE; all this code is trash and will be removed
		along with ALLOW_UPDATES very early in the next alpha cycle.
		we are now back to the B26 level of stability, with several
		minor bug fixes from intervening betas.

566. [bug]	fixed memory leak introduced in #565.

	--- 4.9.3-beta33 released ---

565. [proto]	we were generating truncated RRsets due to VALIDATE bugs.

564. [proto]	we weren't stopping early enough on some kinds of truncation.

563. [doc]	added doc/info/Solaris, concerning Sun Patch-ID# 102165-02.

562. [bug]	named/ns_resp.c had an overzealous #ifdef.

561. [port]	tools/nslookup/getinfo.c had an ANSI C nit.

560. [port]	shres/netbsd and Makefile's netbsd stuff was wrong.

559. [doc]	shres/* documentation had more pathname problems.

558. [port]	SCO OSE5 portability problem (minor).

557. [doc]	added doc/misc/style.txt out of my archives.

556. [contrib]	updated contrib/arlib, contrib/dnsparse (really!).

555. [bug]	quoted newlines were still broken even after #509.

554. [bug]	dangling CNAME cache chains could make named dump core.

553. [bug]	forwarders didn't work well with VALIDATE.

	--- 4.9.3-beta32 released ---

552. [doc]	./Makefile had some out of date comments.

551. [bug]	shres/sunos/* needed some fine tuning.

550. [contrib]	contrib/dnsparse replaced with a later version.

	--- 4.9.3-beta31 released ---

549. [bug]	"make links" hadn't been tested in a while; shres/* req'd chg.

548. [bug]	shres/sunos/* needed some fixups due to a late Sun patch.

547. [doc]	Makefile comments for Linux were out of date.

546. [doc]	OPTIONS had an incorrect path name and some factual errors.

545. [bug]	shres/sunos/Makefile had some incorrect path names.

	--- 4.9.3-beta30 released ---

544. [port]	some systems with broken CPP's wouldn't compile ns_req.c.

543. [bug]	query restart bug in ns_resp.c.

	--- 4.9.3-beta29 released ---

542. [port]	rearranged signal() calls to make POSIX + SYSV possible.

541. [port]	padded _res to 512 bytes; moved initialized data to res_data.c.

540. [port]	added experimental shres/netbsd/ directory.

539. [bug]	we weren't able to load 0 ttl's in zone files.

538. [doc]	BOG corrections.

	--- 4.9.3-beta28 never released ---

537. [contrib]	new contrib/lamers/ directory.

536. [bug]	there was a possible deadlock condition over missing glue.

535. [bug]	previous patch to db_load() was misapplied.

534. [bug]	several ancient cache corruption bugs fixed in ns_resp().

533. [root]	root servers required a new ``no-fetch-glue'' option.

532. [bug]	all kinds of stuff was broken under shres/ due to new subdir.

	--- 4.9.3-beta27 released ---

531. [bug]	limited support for labels containing \. (literal dot.)

530. [bug]	new root.cache file imported from internic.

529. [bug]	another set of bug fixes to the zone transfer scheduler.

528. [bug]	VALIDATE reenabled but without packet editing.

527. [bug]	glue passing through CNAMEs will now be cached properly.

526. [bug]	deleted zones should no longer cause core dumps.

525. [func]	several messages changed to be more informative.

524. [bug]	loc_ntoa() was returning a pointer to a stack variable.

523. [bug]	wildcard RR's were being deleted by purge_zone().

522. [bug]	"ndc start" didn't work if no pid file existed.

521. [port]	Sun SVR4 fixes, including shared library support.

520. [bug]	we weren't using "forwarders" if "options forward_only"
		wasn't set (in some cases.)

519. [bug]	named-xfer wasn't called res_init().

518. [bug]	lots of byte order nits.

517. [bug]	"tools/host -a" now prints in RR format again.

516. [proto]	minimum TTL changes from five minutes to zero seconds.

515. [bug]	SOA TTL of zero is no longer considered an error.

514. [bug]	division by zero error corrected in ns_refreshtime().

513. [bug]	we had the #ifdefs nexted backwards in <netdb.h>.

512. [bug]	we were able to dump core while tracing due to a NULL pointer.

511. [bug]	DiG wasn't able to suppress all of res_debug.c's comments.

510. [doc]	BOG typos.  new doc/misc/FAQ.  new site in MIRRORS.

509. [bug]	another side effect of the inet_aton() change was fixed,
		this time it was breaking escaped newlines in named.boot.

508. [contrib]	new contrib/host, contrib/misc/settransfer, contrib/msql.
		contrib/umich/lame_delegation was withdrawn by the author.

507. [bug]	DiG didn't do ndots and was trigger happy about options.

506. [port]	NextStep, Interactive, SCO, Digital UNIX, ULTRIX improvements.

505. [bug]	we were overly restrictive about nonauthoritative NXDOMAINs.

504. [bug]	named was generating corrupt responses in au truncation.

503. [port]	shres/* now supports SunOS 4.1.4.

502. [bug]	nslookup wasn't behaving properly in the presence of "ndots".

501. [bug]	we now delay 5 seconds after an "ndc restart" or "ndc start".

500. [bug]	change #494 was incomplete.

	--- 4.9.3-beta26 released ---

499. [bug]	we needed a SERVFAIL in an error case.

498. [bug]	some recently added byte order bugs were stomped;
		data_inaddr() was made slightly more conservative.

497. [port]	local_hostname_length() moved to its own source file.

496. [bug]	Beta25's change to compat/Makefile was wrong.

495. [bug]	tools/host.c wasn't processing cnames properly.

	--- 4.9.3-beta25 released ---

494. [func]	"include" directive in boot file is no longer fatal if the
		specified file doesn't exist or is not readable.

493. [bug]	new interfaces' UDP sockets weren't affecting select()'s mask.

492. [doc]	another round of changes and cleanups to the BOG.

491. [bug]	various cleanups to lame server detection.

490. [port]	completely new shres/* from CKD.

489. [doc]	added a ***NOTE*** to ./INSTALL about operating system files.

488. [port]	GNU C Library changes for include/netdb.h.

487. [func]	named will try a little bit longer to bind() its stream socket.

486. [contrib]	new packages: contrib/inaddrtool and contrib/trnamed.

485. [func]	ns_forw will no longer forward to 0.0.0.0, 255.255.255.255,
		or 127.0.0.1.

484. [port]	more POSIX_SIGNALS conversions.

483. [bug]	compat/Makefile wasn't passing on all definitions to submakes.

482. [port]	bad bug in NeXT C Library worked around.

481. [doc]	RFC 1794 is now included in doc/rfc.

480. [bug]	a debugging printf() was accessing freed memory.

479. [port]	doc/info/NCR has been replaced.

478. [port]	doc/info/interactive has been replaced by its author.

477. [port]	UNIXWARE 2.X changes.

476. [bug]	ns_init.c was creating files in "//tmp" rather than "/tmp".

475. [bug]	inet_aton() reverts to mostly previous behaviour.

474. [bug]	PTR->CNAME support added; name test fixed.

473. [func]	added gethostbyname2(), improved its man page.

472. [port]	Linux connect() can reconnect, res/res_send.c now knows this.

471. [build]	several "clean" targets were not removing ".depend" files.

470. [bug]	dqflush() was using memory after free()ing it and never closing
		any file descriptors and not clearing select()'s mask bits.

	--- 4.9.3-beta24 released ---

469. [bug]	We no longer share static return buffers across functions in
		res_debug.c.

468. [logging]	An extraneous haveComplained() was removed from ns_resp.c.

467. [portdoc]	Linux build doc changes.

	--- 4.9.3-beta23 released ---

466. [doc]	big reorg to BOG.

465. [doc]	minor corrections to man pages.

464. [port]	NEC Makefile changes.

463. [contrib]	random updates.

462. [bug]	res_send() wasn't always clearing errno, which led to
		false-negative return conditions.

461. [port]	minor u_char-vs-char lint removed.

460. [port]	backed out a recent Linux portability change.

	--- 4.9.3-beta22 released ---

459. [port]	made a major lint pass.

458. [func]	paved over a bad security hole in named-xfer.

457. [bug]	negative caching vs (secure_zone | cname checking) bugs.

456. [port]	moved all:: target to be first in top level Makefile.

455. [bug]	res/res_send.c had a bad macro definition.

454. [doc]	RUNSON moved to doc/info.  MIRRORS file added.

453. [quality]	learntFrom() was reformatted.

452. [doc]	minor changes for shlib/ISSUES, tools/nslookup/nslookup.help.

451. [port]	linux, NCR, Solaris, NExT portability changes.

450. [func]	added RES_NOALIASES flag, needed for security.

449. [bug]	we were defining a nonstandard DNS header flag as PR.  no more.

	--- 4.9.3-beta21 released ---

448. [port]	systems with hundreds of network interfaces need big ioctl()'s.

447. [func]	zones without NS RR's or with mismatching SOA RR's are caught.

446. [bug]	miscellaneous fixes to res/gethnamaddr.c.

445. [bug]	the secure_zone logic was incomplete.

444. [bug]	bootfile "options" parsing was broken.

443. [bug]	named-xfer was munging incoming WKS RR's.

442. [contrib]	various cleanups.

	--- 4.9.3-beta20 released ---

441. [contrib]	put in DOC 2.1.1.

440. [func]	change/addition to the "lame delegation" syslog message.

439. [bug]	emulation macros WIFSIGNALED and WIFEXITED were bogus.

438. [bug]	missing "#ifndef INVQ" added.

437. [doc]	man pages and BOG updated to include new B18/B19 features.

436. [port]	PIDDIR definition removed from Solaris 2.X.

435. [port]	shres/Makefile fixed for new location of inet_addr.c.

434. [port]	getnetnamaddr.c had a spurious "#if defined(sun)"

433. [bugs]	random typos and glitches from the beta19 afternoon rush.

	--- 4.9.3-beta19 released ---

432. [func]	we should be much more resistant to root cache corruption now.

431. [bug]	tcp socket send buffer will now be set at 16K to avoid blocks.

430. [bug]	ns_req.c had two cases where it could overflow a buffer.

429. [bug]	the "." zone will now respect the setting of NO_GLUE.

428. [func]	0.0.0.0 A RR's are allowed in the DB but we won't use them.

427. [func]	"options fake-iquery" added, users of Sun nslookup take note.

426. [port]	include/netdb.h now has some #ifdef sun defs in it.

425. [bug]	negative caching bugs in findns() and in ns_forw.c.

424. [func]	"limit transfers-per-ns" directive added.

423. [bug]	infinite loop fixed in named-xfer.c's version number printing.

422. [bug]	gethostbyname() of a dotted quad in an auto variable will
		no longer cause the caller to consume random stack trash.

421. [port]	inet_aton() has moved from lib44bsd.a back to libresolv.a.

420. [func]	any punctuation character can now terminate an inet_aton().

419. [port]	use sigemptyset(), sigaddset() - in preference to sigmask().

	--- 4.9.3-beta18 released ---

418. [bug]	``close(11): interrupted system call'' now fixed.

417. [bug]	big name servers would never refresh all their zones since
		tryxfer() wasn't a "fair" scheduler.  it is now.

416. [func]	SOA syntax errors will now lead to dead zones, not dead srvrs.

415. [func]	expiration values lower than refresh values cause a warning.

414. [func]	added "options" and "limit" directives to named.boot.

413. [port]	new file: doc/info/solaris.too.

412. [bug]	possible div-by-zero in ns_init.c.

411. [port]	NeXTstep, UNIXWARE, ISC, AUX changes/additions to top Makefile.

410. [port]	POSIX_SIGNALS covers a bit more code now.

409. [bug]	CNAME->PTR responses were triggering syslog() unnecessarily.

408. [port]	res_send.c's socket() calls were using the wrong arguments.
		this was benign but with IPv6 looming, we need to clean it up.

407. [bug]	the delayed free() logic (DATUMREFCNT) didn't account for
		the possibility of some NULL pointers, in ns_resp.c.

406. [bug]	we were walking through purged list items in ns_forw.c.
		this caused bad things to happen when glue expired.

405. [bug]	"attempted update to auth zone" is no longer a warning.

404. [bug]	fp_nquery() is now used everywhere, fp_query() is deprecated.

403. [port]	hstrerror()'s result is now declared as const.

402. [bug]	a flakey initialization in the resolver has been fixed.

401. [port]	removed some junk around getnetbyname(), needs testing on suns.

400. [func]	BIND's version number now appears as a comment in zone files
		written by named-xfer.

399. [func]	older, bogus HINFO RR's will now be fixed up with warnings.

398. [bug]	"SOA class not same as zone's" is now a zone load error.

397. [func]	all of the syslog() priorities have been lowered.

396. [doc]	added doc/misc/{FAQ.1of2,FAQ.2of2,vixie-security.ps}.

368. [port]	top level Makefile updates: .depend files aren't shipped;
		solaris, linux, dec osf/1, dynix build more cleanly.

367. [port]	LOC RR logic has had some lint removed.  also named-xfer.c.

366. [contrib]	dnswalk 1.8.3 is now included.

365. [security]	initial query ID is no longer a fixed constant.

	--- 4.9.3-beta17 released ---

364. named/ndc.sh didn't always exit with nonzero on errors.

363. include/arpa/Makefile was installing into //.

362. convex cleanups.  osf/1 cleanups.

361. minor nit in sprintf() format string in tools/host.c.

	--- 4.9.3-beta16 released ---

360. CRED is long gone.

359. convex systems have getrusage().

358. CPPFLAGS wasn't quite right.

	--- 4.9.3-beta15 released ---

357. netdb.h now externs h_errno.

356. fixed odd corner case bug in res_query().

355. no BIND beta is complete without a patch to shres/PROBLEMS.

354. minor addition to the "ndc" command line syntax.

353. "." domain syslog() raised from LOG_DEBUG to LOG_WARNING.

352. minor nit in named-xfer.c.

351. the BSD/* Makefiles were mode 440, are now 444.

350. new (undocumented) make target: "make mkdirs".

349. output format change in tools/host.c.

348. contrib/* updates.

347. CPPFLAGS variable added to the Makefile tree, should quieten some makes.
     nextstep, solaris, and svr4 systems have some new build parameters.

346. BOG cleanups and addition of PX RR documentation.

345. more items for RUNSON.

344. several combinations and permutations of compilation options didn't work.

	--- 4.9.3-beta14 released ---

343. Type cast fix for #340.

343. Small change to RUNSON.

342. Removed fsync() call, it really wasn't nec'y and was causing trouble.

	--- 4.9.3-beta13 released ---

341. Small fix for #331.

340. Inverse queries, if enabled, will be logged if QRYLOG is enabled and on.

339. Nonrecursive servers (-r) will once again sysquery() for missing glue.

338. named/ndc now preserves the user's $PATH.

337. SUNSECURITY is now only on for shres/*.

336. New version of contrib/host has been included.

335. tools/nsquery.c and tools/nstest.c were moved to contrib/old/.

334. Portability changes for HP-UX, Solaris, Linux, SCO UNIX.

333. INVQ (inverse query support) now defaults to "off".

332. Some of the internal hashing logic for syslog() rate limiting was not
     accurate (more things were logged than should have been).

	--- 4.9.3-beta12-patch2 released ---

331. Default domain in $INCLUDE files is now intuitive (rather than ".").

330. Lame delegations are now only logged for class "IN".

329. Format change to XSTATS output to make it more readable.

328. Bad responses could cause core dumps in DiG, nslookup, etc.

327. The now-requisite change to shres/* was discovered and put in.

326. Portability changes for Linux, SCO, ULTRIX3, NeXT.

325. Bit the bullet and reset all the RCS revision numbers to 8.1==4.9.3.b12.

	--- 4.9.3-beta12-patch1 released ---

324. Added some missing pieces to the NSAP and NSAP_PTR handling.

323. Tightened some of the GEN_AXFR code, fixed potential C_HS problem.

322. Fixed minor niggle in the way "dig" parses its arguments.

321. Final(?) tuning of the SunOS shres stuff.

320. Reorganized the SunOS build params in the top level Makefile.

	--- 4.9.3-beta12 released ---

319. Fixed DiG so that ". IN NS" was the default if no args are given. (Vixie)

318. Merged the resolver with 4.4BSD's; made a BSD/ subdirectory off the main
     tree for easy integration into BSD/OS, FreeBSD, NetBSD, et al; moved the
     "master" subdirectory to "conf/master" to cut down on top level clutter.

317. Lots of last minute fiddling to make Beta12 "right".  (cast of thousands)

316. Minor byte order bug in BIND_NOTIFY.  (Grange)

315. Added code to db_load() to detect "no RR's found" case.  (Vixie; Heiney)

314. "Zone declared more than once" test added.  (Grange; Vixie)

313. XSTATS interval was changed from "no more than once a minute, and usually
     every fifteen minutes" to "no more than once an hour, and usually every
     hour".  (Gianopoulos; Vixie)

312. Minor stuff in BIND_NOTIFY and the Ultrix and OSF/1 builds.  (Heiney)

311. Continuing hacks to LOC RR (experimental) and shres/*.  (Davis)

	--- 4.9.3-beta11-patch5 released ---

310. Minor BOG patches.  (Shapiro)

309. Minor LOC RR lint.  (Heiney; Truck)

308. Minor STUBS changes in ns_req.c.  (Andrews)

307. Ultrix and OSF/1 now install "man" (not "cat") pages.  AIX now installs
     *.[0-9] rather than *.0 pages.  (Vixie, et al)

306. conf/Info.* moved to new directory doc/info/*.  (Vixie)

305. NOTIFY could cause multiple simultaneous axfr's.  (Andrews; Vixie)

	--- 4.9.3-beta11-patch4 released ---

304. Minor fixes to PURGE_ZONE, CLEANCACHE, RETURNSOA, and dig.  (Mark Andrews)

303. LOC RR support is now in.  (Chris Davis; Vixie)

302. General portability stuff (with ISC leanings).  (Mark Galbraith)

301. Minor DiG portability fix.  (Dima Volodin)

300. Yet more HINFO fixes.  (Gianopoulos)

299. Really minor patch to tools/nstest.c, plus AIX fixes.  (David Bolen)

298. More shres/* fixes.  (Davis; Woods)

297. Minor SCO fixups.  (Eduard Vopicka)

296. Fixed #include <signal.h> problem in db_glue.c.  (cast of thousands)

295. Minor goofs in the sources.  (Grange; Gianopoulos)

294. Minor patch to the BOG (font problem).  (Shapiro; Vixie)

	--- 4.9.3-beta11-patch3 released ---

293. Minor #ifdef screwup corrected.  (Mohamed Ellozy)

292. Small HP-UX portability change.  (Truck)

291. Minor BOG correction.  (Harlan Stenn)

290. PX RR support.  (Pierluigi Bonetti)

289. Made random refresh interval a little more robust.  (Miller; Vixie)

288. Minor portability changes for DEC OSF/1.  (Bob Heiney)

287. We now do a setvbuf() on outbound AXFR streams since the system's
     default size causes more write()'s (and therefore TCP segments)
     than we really want.  (Paul Mockapetris' idea; Paul Vixie's code.)

286. Recast all uses of abort() to call private function panic().  This was
     nec'y since we use the ABRT (IOT) signal to force a statistics dump, and
     having it dump statistics inside of abort() was a bad thing.
     (Mark Andrews noticed the problem; Paul Vixie fixed it.)

285. Minor change to top-level Makefile for OSF/1 man pages.  (Shapiro)

284. Minor change to HINFO stuff.  (Gianopoulos)

283. Minor changes to XSTATS #ifdef's.  (Benoit Grange)

282. Minor change to top-level Makefile for ULTRIX/VAX.  (William Gianopoulos)

	--- 4.9.3-beta11-patch2 released ---

281. Another batch of (minor) HINFO changes.  (William Gianopoulos)

280. Minor formatting changes to keep ctags happy.  (Craig Leres)

279. Minor changes to OPTIONS.  (Mark Seiden)

278. New option XSTATS (default "on" for now).  (Benoit Grange)

277. res_mkquery() wasn't calling res_init().  (Philip Gladstone)

276. Minor cleanup to shres/INSTALL.  (Chris Davis)

275. We now set a SO_LINGER on outbound zone transfers.  (Peter Wemm; Vixie)

274. Minor portability fix for VAX Ultrix.  (Stan Barber)

273. Fixed two time warp problems.  (Bob Heiney; Paul Vixie)

272. Named-xfer will now log and error and abort if it encounters an RR type
     it doesn't recognize.  (Mark Andrews; Paul Vixie)

271. Minor cleanups to the HINFO comparison code in db_update.  (Bryan Beecher)

270. Made CLEANCACHE less of a CPU hog.  (Benoit Grange; Mark Andrews)

269. Add even more branches to the cred/clev decision tree, to make it more
     robust about borderline data at zone cuts.  (Jack McCann; Mark Andrews)

268. New option (default: "on" for now): PURGE_ZONE.  (Mark Andrews)

267. Added contrib/misc/{soa-easy,dnsfind}.shar.  I will not be including
     this in the b11p2 diffs, though it will be in the next full kit.
     (Tim Cook)

266. I finally broke down and made a recommendation in the BOG with respect to
     "nameserver 127.0.0.1".  (Greg Woods supplied the patch)

265. Minor portability stuff for SunOS.  (Greg Woods)

	--- 4.9.3-beta11-patch1 released ---

264. 900-second check removed; TTL==0 should work now.  (Mark Andrews)

263. Minor db_save() patch for initializing memory.  (Bryan Beecher)

262. Minor ESIX (SVR4.0.4/gcc) changes.  (John Polstra)

261. Minor dig-related patch to res_send.c.  (Mark Andrews)

260. Minor line number fix for ns_init().  (Havard Eidnes)

259. NetBSD shared library stuff is now in contrib/misc/netbsd-shlib.shar.
     (Matt Ragan)

258. NeXT portability changes.  (Allan Nathanson)

257. Minor HP-UX portability stuff.  (Lewis; Corrigan)

256. Two medium sized bugs in BIND_NOTIFY.  (Don "Truck" Lewis)

255. Minor lint in ns_req.c.  (Mark Andrews)

254. Minor ndc.sh build problem.  (Michael Corrigan)

253. Minor coding inconsistency in res/res_comp.c.  (Jeff Schreiber; Vixie)

252. Minor BOG addition (SIGIOT).  (Bryan Knowles)

	--- 4.9.3-beta11 released ---

251. If a master zone's serial number goes backwards, named now logs a
     warning.  (Mark Andrews)

250. Minor portability nit in ns_forw().  (Simon Leinen)

249. Another portability problem fixed in ndc.sh. (Corrigan)

248. Declaration problem with findZonePri() fixed. (Corrigan)

247. References to CNAMES from MX/NS/MB will now be explicitly logged. (Vixie)

246. Made the BIND_NOTIFY logic more robust; it still does not match the
     current I-D (no delays yet).  (Vixie)

245. Fixed a writable-string problem.  Added a lot of ANSI "const"'s. (Vixie)

	--- 4.9.3-beta10-patch1 released ---

244. Added shres/PROBLEMS file.  (Chris Davis)

243. Corrected the BOG on the meaning of ".".  (Doug Luce, Paul Vixie)

242. SOA's can now be stored in $INCLUDE files.  (John Lind)

241. Rejection of 0.0.0.0 had a potential seg fault.  (Mark Andrews)

240. NoRecurse wasn't preventing queries for missing glue.  (Mark Andrews)

239. WKS nonaggregation test had bad length.  (Ed Clarke, Chris Britton)

238. NeXT library problem worked around.  (Greg Wohletz)

237. Core dump fixed in the dprintf() macro.  (Eric Murray)

236. MBZ fields in new queries were actually stack trash.  (Olson, Vixie)

235. Adds and changes to contrib/:
	Added contrib/misc/dnstools.shar, from alt.sources. (Eric Murray)
	Added contrib/misc/settransfer.shar (nonrecommended). (Tom Brisco)
	Updated contrib/host/* with latest public version. (Eric Wassenaar)
	Updated contrib/host/makezones with latest pub. version. (Philip Hazel)

234. Made the "ps" command needed by ndc.sh a configurable parameter.

	--- 4.9.3-beta10 released ---

233. Added and reordered a lot of code in ns_resp() to cause it to be
     slighly harder to spoof with bad packets.  More work needs to be done,
     so that named will be as spoof-proof as the resolver has become.  (Vixie.)

232. Added new RR types to include/arpa/nameser.h, per RFC 1700. (Vixie)

231. New "ndc" command.  (Vixie)

230. The VALIDATE option is now formally deprecated.  It has bugs its detection
     of invalid responses, and is known to mutilate perfectly valid CNAME
     responses, to the detriment of clients.  This code will likely be deleted
     in the next BIND release, to be replaced by an ``always restart query''
     strategy.  (Vixie)

229. Moved a syslog() so that primary as well as secondary loads are logged.

228. Resolver functions now reliably set h_errno.  (Vixie, Wassenaar)

227. Expired zones now lose their cached serial number information, giving
     an opportunity to refresh a zone after a serial number goes backward.
     (Andrews)

226. Sun386i support crept in on little cat feet.  (Brownlee)

225. UDP packets could be overstuffed by 12 bytes.  (Reilly, Vixie)

224. failing connect()'s in named-xfer will no longer be logged.  (Andrews)

223. merged IETF stream (Vixie):
	a. made ALLOW_UPDATES even more optional (it will disappear soon);
	b. added NOTIFY option (experimental);
	c. cleaned up some comments;
	d. removed T_SA (was experimental, replaced by ROUND_ROBIN);
	e. made named/Makefile's default CFLAGS -g (it usually inherits -O);
	f. random code cleanup;
	g. some internal errors are now fatal instead of warnings.
     these changes were brought in once it became clear that there would be
     another Beta of 4.9.3.

222. tools/Makefile was using "make" instead of "${MAKE}".  (Day)

221. yet another bug was found and fixed in the SUNSECURITY code.  (Brown)

220. a variable reuse problem in the SUNSECURITY syslog()'s in gethnamaddr.c
     was fixed.  (Wohletz, Wemm, Vixie)

219. "stub" root zones now affect the hint cache (STUBS is experimental).
     in this situation it is reasonable to not have a "cache" directive,
     and some code was reordered to make this possible.  (Andrews)

218. contrib/umich/lame-delegation/LISA-VI-paper.ps is now a proper
     PostScript(tm) file.  (Davis)

217. syslog() cleanups in named-xfer.c.  (Vixie, Barrett)

216. shres/Makefile now forces -O. (Braniss, Ray)

215. New contrib/misc/ctldns.sh. (Bush)

214. New contrib/misc/dns-peers.info. (Wolfhugel)

213. BOG and named(8) fixes. (Paffrath, Vixie, Hawkinson)

212. database input errors will no longer cause the following line to
     be ignored. (Gianopoulos)

211. the TXT RR fixes done so far in 4.9.3 have been backed out; we're
     back to the 4.9.2 behaviour. (Gianopoulos)

210. the authority section will no longer duplicate the answer section
     if both would contain the same NS RR set. (Vixie)

	--- 4.9.3-beta9-patch1 released ---

209. installed marka's patch to CRED that fixes BETA9's flaw.

208. added comment to README about -l44bsd and inet_aton().

207. new directory: contrib/multizdb.  highly nonrecommended.

206. small NextStep change in Makefile.

	--- 4.9.3-beta9 released ---

205. minor Makefile fix after beta9 was previewed on bind-workers; also, a
     new file conf/Info.Linux-more has been included.

204. BOG fixes.

203. netlists elements are now
	{ addr [ "&" mask ] }
     which for the EBNF-impaired, means that "&" introduces an explicit mask.
     implicit masks are either by-class or 0xffffffff, depending on ALLOW_HOSTS
     in the call to get_netlist().

202. name compression is now case-insensitive.

201. duplicate RRDATA won't trigger the new "auth warning" in db_update().

	--- 4.9.3-beta8-patch2 released ---

200. added a haveComplained() to limit auth warnings.

199. fixed idiotic code reordering from patch1.

	--- 4.9.3-beta8-patch1 released ---

198. a bad-string-termination bug was fixed in getnetanswer().

197. an uninitialized-variable bug was fixed in db_update().

	--- 4.9.3-beta8 released ---

196. Several minor corrections were made to the BOG.

195. "clev" now distinguishes between root and TLD (wasn't worth a darn before)

194. empty nodes in authority zones are now protected from non-auth updates.
     (most of db_update() was rewritten to fix/support this.)

193. negative cache items weren't updated before, now they are.

192. zone updates from answers were prevented for new types but not if some
     rr already existed with that type.  fixed.  also syslogged.

191. the cache now distinguishes between authoritative answers and zone rr's.

190. negative cache items are now marked appropriately authoritative.

189. CRED is no longer optional.

188. Another enhancement has been made to HINFO parsing.  Named-xfer now
     accepts RFC-bogus input formats generated by previous versions of BIND.

187. SUNSECURITY now forces RES_DEFNAMES on so that relative "localhost" works.

186. Minor portability fixes for DEC OSF/1, HP-UX.

	--- 4.9.3-beta7-patch2 released ---

186. i forgot to comment out template Linux lines in top Makefile.  fixed.

185. "bogusns" directive significantly strengthened, for IN-ADDR.ARPA problem.
     also fixed a bug in hardcoded root server lame detection.

	--- 4.9.3-beta7-patch1 released ---

184. Yet another ULTRIX incompatibility has been worked around.

183. Bogus HINFO RR's will no longer cause corrupt secondary zone files.

182. NeXT support is now complete.  Builds right out of the box.

181. Updated TODO file.

180. Added new INSTALL file.

179. Minor doc fix in OPTIONS file.

178. Security-related bug fix to new sunos shres/* stuff.

177. Limited Linux portability was added.

176. Trailing dots on zone names in named.boot are now ignored.

175. Random lint was removed.

174. DiG changes: increment version number (2.1), allow default domain (.).

	--- 4.9.3-beta7 released ---

173. named-xfer would act strangely if trailing dot domains given as arguments.

172. setenv() now provided on systems that need it (NeXTStep, e.g.).

171. doc changes for shres/*.

170. fixed debugging output problem in ns_req.c.

169. fixed portability "bugs" on ultrix systems (some tools wouldn't link).

168. minor functionality change in named/ns_validate.c.

167. minor lint in res/res_comp.c.

166. minor change to contrib/doc-2.0/*.

	--- 4.9.3-beta6 released ---

165. another small adjustment to the Apollo section of the Makefile.

164. a completely new shres/* was submitted; contrib/sunlibc is deprecated.

163. INVQ is back on again by default.  See README.

162. another set of patches for obscure corner cases in the HINFO parser.

161. added new SUNOS4 macro to Makefile and conf/portability.h; this should
     fix the trouble folks were having with strerror() on SunOS 4.X systems.

160. minor Makefile changes.

159. processes which send outbound zone transfers now close all inherited
     descriptors, since they can be longer-lived than the main named.

	--- 4.9.3-beta5 released ---

158. various lint involving options which are rarely defined.

157. sunos needed -DBSD=43 rather than -DBSD.

156. minor memory leak fixed in ns_req.c.

155. some install directories for DGUX were wrong.

	--- 4.9.3-beta4 released ---

154. a new man/* hierarchy was installed which should be more portable.

153. a new contrib/host has been included.

152. a parsing problem in HINFO was fixed.

151. a few minor changes to contrib/sunlibc/Makefile.

150. typo in res_send.c fixed.

149. fine tuning the credibility-level heuristics.

148. dn_expand() will fail on names which have bad characters in them.

147. disappearing zones could cause a core dump in syslog() - fixed.

146. text of warnings in named-xfer corrected.

145. limited DGUX, RISCOS support added.

144. contrib/sunlibc/Makefile MFLAGS/MARGS problem fixed.

143. another SunOS recv() bug has been worked around.

142. various BOG fixes.

141. updated master/root.cache file from latest InterNIC version.

140. Added ``max-fetch'' to named(8).

139. NOT_BIND problem in named/tree.c fixed.

138. minor lint, memory leaks, and portability problems were fixed.

	--- 4.9.3-beta3 released ---

137. some serious (and recently) dynamic memory bugs were killed.

136. a reference to uninitialized data was fixed in res_query().

135. a RES_STAYOPEN-related bug was fixed in res_send().

134. isascii() and isxdigit() now simulated on systems which lack them.

133. named's local setproctitle() has been renamed to avoid system conflicts.

132. minor bugfix to negative caching code.

131. minor bugfix in validation code.

130. the typestats[] multiple definition problem was fixed.

129. some Sequent portability changes were folded in.

128. a new contrib/sunlibc was donated, but hasn't been tested.

127. minor changes to contrib/sunlibc/Info.*.  is anybody using shres/*, tho?

126. STDIN_FILENO and STDOUT_FILENO are now defined by conf/portability.h.

125. there is now a ``max-fetch'' directive in the boot file (see the BOG).

124. there is now a RENICE option in conf/options.h.

123. the toplevel Makefile has been made slightly more readable.

122. <<DELETED>>

121. minor fixups in the lame delegation code.

	--- 4.9.3-beta2 released ---

120. I upgraded my "-me" macros so that the included doc/bog/file.psf is OK.

119. NXDOMAIN responses from the negative cache will now always be
     authoritative.  this is the least of all evils, trust me.

118. strcasecmp() in compat/lib is now ANSI compliant.

117. PTR RR's are no longer subject to ROUND_ROBIN processing.

116. writev() emulation for SCO had a bug.

115. the resolver no longer calls sscanf() or qsort().

114. minor debugging nit cleaned up in res_querydomain().

113. IP options on incoming connections are now logged and ignored.  This
     should probably be done for datagrams as well but not today.

112. tree.c made portable to non-POSIX/ANSI systems.

111. NSAP RR's are now supported. NSAP_PTR RR's are deprecated and so left out.

110. outbound zone transfers are now logged.

109. various lint cleaned up wrt 16-bit integer handling.

108. named-xfer was exiting bogusly on some systems due to flakey kernel
     interfaces.  i've rewritten some of the code to avoid the problem,
     and fixed plenty of lint in the process.

	--- 4.9.3-beta1 released ---

107. Apollo systems were dumping core because of a missing #include <resolv.h>.

106. NSAP and NSAP_PTR RR's now recognized by res_debug() (but nothing else).

105. NeXTstep 2.1/3.0 and Pyramid dcosx now nominally supported.

104. res_querydomain() was doing Bad things if given an empty name.

		--- 4.9.3.a5.p4 published ---

103. named-xfer's exit cause is now syslog()'d more often/clearly (Paul Vixie).

102. I left out a ";" in the new compat/lib/ftruncate.c file (Craig Leres).

101. X25, ISDN, and RT RR support have been added (Michael A. Meiszl).

		--- 4.9.3.a5.p3 published ---

100. Another glitch (very minor this time) was found and fixed in the
     QSERIAL logic.  This was a performance problem only -- reliability
     wasn't affected (Bob Heiney).

99. SCO UNIX is now supported, thanks in part to Michael A. Meiszl.

98. I witlessly used a GCC-only feature (automatic aggregate initialization)
    in a5p2.  Kazuhisa Shimizu was the first to report it.

		--- 4.9.3.a5.p2 published ---

97. NEC EWS4800 EWS-UX/V Rel4.0/Rel4.2 support (from Kazuhisa Shimizu).

96. Some of the security checking logic in the new res/gethnamaddr.c's
    getanswer() was happening in the wrong order (thanks, Bob Heiney).

95. Minor typo in the man/host.1 man page (caught by Robert Elz).

94. DiG was groping core if given more than 10 tokens in a lookup string
    (Michael J. Corrigan provided the fix).

93. Queries to INADDR_ANY ("0.0.0.0") come back from the system's primary
    interface, and res_send() was discarding them.  A proper fix would add
    a lot of code to the resolver, so for now we'll just work around it
    (Michael J. Corrigan reported this).

92. The "data outside zone" syslog message was misleading (Bob Heiney).

		--- 4.9.3.a5.p1 published ---

91. res/gethnamaddr.c wouldn't compile on non-BSD systems since it depended
    on LOG_AUTH which is a post-4.3 feature (Bob Heiney reported this).

	****** 4.9.3-alpha5 released ******

90. redid most of my previous round of prototyping now that i truly 
    understand which variables and parameters should be u_char and which
    ones should be char.  (Vixie)

89. added (optional) prototypes for _getshort() and _getlong(); this means
    the calls all need casts of their argument since it usually isn't a
    u_char*.  Also prototyped res_query(), res_search, and the nominally
    private but for some reason not static res_querydomain().  (Vixie)

88. security related: responses from servers we didn't query are now ignored
    by the resolver; answers with QDCOUNT!=1 are treated as errors; name
    mismatches in the question or any part of the answer field are syslog()'d
    and ignored.  (Vixie)

87. fixed a bug in the SUNSECURITY stuff.  (Vixie)

86. a long standing bug in the name hashing code that caused it to ``hash in''
    the case of the name's characters, was found and fixed.  (twice.) (Vixie)

85. Bob Heiney did some performance analysis and concluded that samedomain()
    was soaking down cycles at a rate disproportionate to its usefulness; he
    reimplemented it in a way that violated the (good,fast,cheap) rule.

84. the RFC1101 implementation of getnetby*() was using case-sensitive
    string compares.

83. fp_query() will no longer try to format packets larger than PACKETSZ,
    and for perversity, dig and named are now prepared to handle replies
    (via TCP) larger than PACKETSZ.  new function: __fp_nquery().  (Vixie)

82. multiline initial syslog() is fixed (Bill G).

81. Don Lewis sent in a big update for the lame delegation logic.  Vixie fixed
    one bug.  Bryan Beecher had a big hand in this.

80. TCP replies can now be up to 8K in size (don walsh).

79. validation bug fixed (don lewis).

78. BOG patches from mike minnich and others.

77. more lint fixes for Cray (norb brotz).

76. a new hostname(7) man page was contributed by Art Harkin.

75. DESTINC is now a settable Makefile parameter (Marion Hakanson).

74. the zones-not-transferring bug is finally gone.

73. now using LOG_PERROR in openlog(); many parallel dprintf()'s are gone.

72. inability to retrieve serial number via UDP now forces TCP transfer.

71. removing secondary zone files and SIGHUP'ing will now force a transfer.

70. "cache" directives can now specify "/class" as documented in the BOG.

69. Mark Andrews' fix for the ns_forw core dump is in.

68. Keith Bostic fixed some typo's in the man pages.

67. Compiling without NCACHE is possible now (John Hanley).

66. Bill Gianopoulos and Alan Barrett finally agreed on what glue was and
    Bill's alpha4 patch is mostly gone now, and one new idea was added.

65. BOG improvements (Vixie, Brooks).

64. Mark Andrews' CLEANCACHE (recommended) and RETURNSOA (__NOT__ recommended!)
    are in.  RETURNSOA should not be enabled at this time; there's nothing
    wrong with the code but it will cause cache corruption in older servers
    and may not be necessary.  The jury is still out.

63. outbound zone transfers are now logged (requested by Ron Johnson).

62. serial number queries sent out for zone transfer purposes will now be
    limited to a maximum of four (4) simultaneous outstanding; this keeps
    BIND from overflowing its UDP socket buffer when hundreds of zones must
    be checked (still trying to fix Paul Pomes' problem).

61. short A RR's in responses will no longer lead to purify errors due to short
    malloc()'s in savedata() (thanks to Nicholas Briggs for reporting this).

	****** 4.9.3-alpha4 released ******

60. manifest constants used instead of "sizeof({u_,}int{16,32}_t)", for
    systems which lack 16- and 32-bit integers (paul vixie for norm brotz).

59. zone transfer anti-glue logic made RFC1034-compliant (bill gianopoulos).

58. seg fault in sysquery() (from LAME_DELEGATION) fixed (mark andrews).

	****** 4.9.3-alpha3 released ******

57. a big, hefty patch was made to the negative caching logic (mark andrews).

56. named-xfer will no longer scramble the default origin (alan barrett).

55. random bits of lint found and removed (mario guerra).

54. convexos-10 is now supported (jukka ukkonen).

53. seg fault in database dumps (from VALIDATE) fixed (don lewis).

52. problem with extra bogus 0.0.0.0 A RR's from VALIDATE fixed (mark andrews).

51. the LAME_DELEGATION logic once written into 4.8.3 by don lewis has
    been substantially reworked and put into 4.9.3-alpha3 (bryan beecher).

50. all instances of "sizeof(HEADER)" were changed to "HFIXEDSZ" to make
    life easier for the cray.  also, "struct HEADER" in include/arpa/nameser.h
    uses just bit fields now, for portability to 64-bit systems without
    16-bit integer types.   (norb brotz suggested it; paul vixie did it).

49. build changes for NeXT and AIX systems (artur romao; c. wolfhugel).

48. random sunshlib changes (piete brooks).

47. minor fixes for solaris build (carson gaspar; paul pomes).

48. a few bugs were wrung out of the BOG (per hedeland; vixie).

	****** 4.9.3-alpha2 released ******

47. several obscure Makefile problems were fixed (vixie).

46. there is now a per-primary-NS quota for simultaneous zone transfers; this
    will cut down on the retry thrashing seen on servers that are secondary for
    thousands of zones (vixie).

45. a bug introduced by change #23 has been fixed (marten terpstra; apb).

44. the "data outside zone" messages are now consistent (piete brooks; vixie).

43. several #include's were reordered in res/*.c and a few #ifdef's were
    changed; BIND should now run OK on DGUX (henry miller).

42. several changes to the conf/options.h and Makefile (vixie):
    -> SVR4 has been added as a top-level Makefile CDEFS option
    -> SYSV has moved from conf/options.h to the top level Makefile
    -> INVQ is now an "#ifdef" rather than a "#if"

41. resolver no longer uses initialized static data, which should make shared
    libraries easier to generate (vixie did it, at the urging of many others).

40. now compiles on Apollo DomainOS (don lewis).

	****** 4.9.3-alpha1 released ******

39. lots of lint found and fixed (craig leres).

38. illegal enum compare fixed in named/ns_stats.c (vixie).

37. missing ')' added in SUNSECURITY section of res/gethnamaddr.c (h miller).

	****** 4.9.3-prealpha released ******

36. ***REMOVED***

35. various bugs were fixed in the negative caching (vixie; mark andrews).

34. several debugging and dump output problems were fixed (mark andrews).

33. TXT RR's can now be read from zone files even if they lack quotes;
    the RFC doesn't say quotes are needed (jim martin).

32. limited support for AIX-3 is now included (christoph wolfhugel).

31. SUNSECURITY is now an obvious default in ./Makefile (p killey; b beecher).

30. VC queries that time out are now GC'd and SERVFAIL'd (mark andrews).

29. HP-UX 9.0's top-level makefile variables have been changed (don lewis).

28. various fixes for tools/host.c (jim martin; mark andrews).

27. syslog messages logged by SUNSECURITY will now include the address of
    the host that's having problems (david morrison).

26. systems whose connect() calls fail if a socket is already connect()'d
    will now have their sockets closed and recreated in res_send() (piete
    brooks; mark andrews; vixie).

25. res_send() will now corrected reset its "connected" variable when the
    connectedness of a socket changes (mark andrews).

24. SERVFAIL responses will no longer terminate the res_search() inner loop,
    thus catastrophic problems with early search elements will no longer
    prevent res_search() from trying later search elements (bryan beecher;vix).

23. non-NS RR's for delegated subzones will no longer be accepted in a zone
    transfer (alan p barrett).

22. the setting for _PATH_PIDFILE is now overridden by the Makefile (l hume).

21. named.restart.sh now has a smaller path with %DESTSBIN% first therein;
    this should prevent the vendor version of named from being exec'd by
    accident (leigh hume).

20. big change: statistics are now kept "per name server" rather than as
    a single global array.  the /var/tmp/named.stats file format has changed
    quite a bit, so older awk/perl scripts are likely to stop working.

19. big change: every RR now keeps a pointer to a "nameser" struct; this
    currently permits SIGINT-initiated dumps to include the address of all
    non-zone data, which will help with tracking down corrupt data.

18. db_load.c was missing two #ifdef/#endif's for CRED (mike minnich).

17. don't aggregate SOA or WKS RR's in the cache (vixie).

16. minor cosmetic changes (vixie).

15. fixed typo in compat/Makefile ("LIBDIR" -> "DESTDIR") (rob davies).

14. fixed spurious "accept: interrupted system calls" (vixie).

13. named will now start as many named-xfer's as it should; previously it
    lost track of the need for transfers at the beginning of each maint
    cycle.  also, we don't bother asking for an SOA if we know that our
    zone is out of date.  i've changed the transfer metrics so that more
    transfers can happen concurrently, and maint cycles come more often.
    (andrew partan; vixie).

12. a number of LOG_ERR and LOG_CRIT syslogs were downgraded to LOG_NOTICE
    (rob davies; vixie).

11. sequence number checking now treats "zero" as a special case.
    (craig leres; andrew partan; vixie).

10. MFLAGS no longer used explicitly, since it is often used implicitly
    (mark andrews; vixie).

9. ADDAUTH is no longer considered experimental (tony stoneley; vixie).

8. several obscure type bugs fixed (don lewis).

7. signal handlers all now preserve errno (don lewis).

6. TTL deprecation made more portable (don lewis).

5. now compiles on Apollo DomainOS and is generally more POSIX-ish (don lewis).

4. bryan beecher's "query" tool has been promoted to tools/ and renamed to
   dnsquery.  minor changes were required in several Makefiles (vixie).

3. "make links" at the top level will now make a higher resolution link tree,
   which makes porting easier on some systems (ian dickinson).

2. Convex feof() bug now has a workaround (jukka ukkonen).

1. gethostby*() will no longer overwrite its fixed-size array if a host with
   too many addresses is handled (reported by piete brooks, fixed by vixie).

-------------------------------------- 4.9.3 above, 4.9.2 below

4.9.2 ------------------ FINAL ----------------- Paul Vixie

57. updated TODO, README files.

56. fix to contrib/sunlibc/Makefile.

55. several new items in contrib/.

54. Corrected bad command line parsing bug in tools/dig.c; also added the
    old query timing code back in (thanks to Havard Eidnes).

53. Ported contrib/decwrl/host.c to the modern interfaces.

4.9.2 ------------------ BETA5 ----------------- Paul Vixie

52. A number of optimizations that fell out of negative caching and/or the
    validation code have been turned off in order to avoid confusing older
    nameservers and their unfortunate assumptions about co-invariants.
    Mark Andrews and Robert Elz were the principle debuggers and contributors
    to this part of the effort.

51. We're now much more portable to systems without Posix or BSD signals,
    thanks to Bill Wisner.

50. tools/host.c now has more reasonable error messages and can deal with
    negative caching servers.

49. Lots of Makefile gaffes are now fixed.

48. New "host" in contrib/host/, complements of Eric Wassenaar.

47. AFSDB support is now complete, thanks to Chris Everhart.

46. The bug whereby named would sporadically return NXDOMAIN when it should
    have sent back a referral has been fixed.

4.9.2 ------------------ BETA3, BETA4 ----------------- Paul Vixie

45. Robert Elz has provided updated LOCALDOMAIN environment variable 
    processing, making it more like resolv.conf's "search" than "domain".
    In the spirit of this I have added a RES_OPTIONS environment variable
    and a corresponding "options" keyword to resolv.conf.  All of this is
    documented in the man pages and in the BOG.  Robert has also contributed
    several bug fixes to the validation and negative caching code.

4.9.2 ------------------ ALPHA ----------------- Paul Vixie

44. BETA1, BETA2, and three patches to BETA2 have all come and gone without
    itemized descriptions in this file.  I'll provide the RCS history on the
    code to anyone who asks, but basically what's been happening is that some
    core dumps were fixed, others added, then those were fixed too.  Meanwhile
    RFC 1535 has been published, codifying CERT's concerns and our answer to
    them.  BIND is now RFC 1535 compatible.  RFC's 1535, 1536, and 1537 are
    now included in the doc/ directory.  Note that Mark Andrews supplied many
    of the fixes to the core dumps, some of which were introduced by me and
    some by ISI's negative caching and/or validation code.

43. patch05 to ALPHA2 (930908) released: this includes new DNSRCH logic to
    correct a serious problem that CERT called me with today.  the change is
    subtle and will have the effect that names which could match either as
    fully qualified names or partially qualified names using the local search
    list will be found as fully qualified.  previous releases would have found
    them first through the local search list.  local search lists are a bad
    idea in my opinion; see new SEARCH_DEFAULT option in OPTIONS file for more
    information.  also in this release: limited Solaris support, in the form
    of POSIX-style signal handling used on systems which support (or require)
    it.  as of this patch, 4.9.2 has a good chance of compiling out of the box
    on Solaris, modulo makefile edits.  dig and host should be more portable
    now, too.

42. patch04 to ALPHA2 (930908) released: this corrects several borderline
    syntax errors in various Makefiles (Sun and Ultrix makes complained);
    it corrects a coredump on Ultrix systems (which aren't really as POSIX
    as i thought they were); it lets dig and nslookup compile again on SunOS;
    and it cleans up some dirty junk in named-xfer.c.  this stuff is really
    really minor but i would like to see it tested on a Sun system before the
    beta.

41. patch03 to ALPHA2 (930908) released: this uses compat/include by default
    which is helpful on BSD/386 systems and shouldn't hurt any others except
    perhaps real 4.4BSD systems (and maybe not even those); it removes Bryan
    Beecher's SHUFFLE_ADDRS option since he and I agree that Marshall Rose's
    ROUND_ROBIN stuff is more general and cleaner; it includes various patches
    to the documentation sent in by several folks (please print the BOG and
    let me know if you find problems in it); it fixes "make depend" problem
    in "man/" subdirectory; it fixes several outright bugs in Gregory Shapiro's
    SECURE_ZONES code; it removes an obscure syslog() that should have been a
    dprintf() ("validate_count -> 0"); it fixes a bug in NCACHE whereby a T_ANY
    query for a name which was negatively cached but had children would return
    _answers_ with the T_ANY type for subsequent queries; several newer syslog
    messages were reworded to make them clearer; a portability bug in the
    SUNSECURITY logic was fixed; another in the RFC1101 logic was fixed;
    support for the PAGER environment variable was added to nslookup (sorry,
    i know we're in functional freeze but this will enable development in the
    next cycle and it was pretty simple) and only affects the "view" and "help"
    commands.

40. patch02 to ALPHA2 (930908) released; this includes more fixed from Mark
    Andrews, this time to Anant's NCACHE stuff (memory leak and functional
    bug).  Also included is a patch from Gregory Neil Shapiro to his SECURE_
    ZONES code, which I hadn't noticed since I don't run it here.

39. patch01 to ALPHA2 (930908) released; this includes some fixes from Mark
    Andrews to his "clev" and ADDAUTH stuff.  The "clev" patch fixes a problem
    on all servers; the ADDAUTH stuff is still experimental so most users will
    not be affected by it.  Dave Morrison also sent a patch for the USE_UTIME
    logic, which is important for ULTRIX systems.

38. 4.9.2-ALPHA2 released on 930908.

37. Mark Andrews sent an initial attempt at implementing ADDAUTH, which will
    eventually allow named to include authority and glue RR's with all 
    authoritative answers.  I am not sure that the design goal is right, and
    the implementation currently sends back glue RR's but no authority RR's,
    so I'm recommending against using this for now.  But since it changes some
    internal interfaces in a harmless enough way, I'm including the changes.

36. Marshall Rose's ROUND_ROBIN code snuck in at the last hour.  This is the
    best answer I've seen to the problems purported to be solved by SA RR's,
    and my wording in the OPTIONS file shows this.

35. These items from TODO is now done:

    [vixie@pa.dec.com 25apr93]: clean up debugging
	replace all "#ifdef DEBUG...fprintf(...)...#endif" with dprintf(...)
	which would be a macro that only expands to an fprintf() if DEBUG is
	set.  dprintf(x, (args)) with x as the log level.  perhaps change log
	levels to be symbolic, and perhaps make them a mask instead of a limit.

    [vixie@pa.dec.com 25apr93]: clean up #ifdef's and portability
	add and use function prototypes.  make everything static that can be.
	externs should only be in .h files (add more .h files, per module if
	needed, to cover these).  add "export" keyword (null define) to make
	it clear which names are exported and which are static.  all top-blevel
	names in a module must be "export" or "static".

    [gshapiro@wpi.edu and vixie@pa.dec.com 26apr93]: access control
	"xfrnets" is ok but what we really need is full access control per
	zone rather than a global list of acceptable client nets.  this is
	especially important if you send /etc/passwd via zone transfer.

    [postel@isi.edu anant@isi.edu jaffe@noc.rutgers.edu
     28apr93]: negative caching
	Paul:
	We'ed like to have included in 4.9.1
	our implemention for negative caching.
	--jon & Anant.

    [vixie@pa.dec.com 16may93]: inet_addr needs to die
	to be replaced by calls to inet_aton, which doesn't confuse the
	broadcast address with bad addresses.

    [Paul:  I know you said that you'd like to wait for the IETF DNS WG to
	"bless" an official load balancing scheme, but I'll be adding my
	shuffle A records to BIND 4.9 for use here at U-M anyhow.  The code
	mods to existing source files are minimal since the bulk of the work
	is done in a separate .c I added.  If you don't want SA records to
	move into 4.9.1 unless they become official, please just toss this
	first entry. --bryan@umich.edu]

    [bryan@umich.edu 25apr93]: add "shuffle A" records
	There are several schemes for adding some kind of load balancing
	capability to the DNS.  Our "Shuffle Address" (SA) records are one
	stab at this, and since they're in use at U-M, I need to add them
	so we can use BIND 4.9 here.

    [bryan@umich.edu 25apr93]: add AFSDB records
	AFSDB records were proposed in RFC xxxx.  We use them here at the
	University of Michigan, so I need to add them for our copy of
	BIND 4.9.

    [bryan@umich.edu 25apr93]: small fix to resolver's p_cdname()
	The current copy of p_cdname() in the resolver does not work
	for query responses larger than 512 bytes (which can happen when
	using TCP).  A very small modification changes the "sanity check"
	argument (the second one) to dn_expand() from "msg + 512" to
	"cp + MAXCDNAME".  (This showed up very recently.)

34. While waiting for some last minute changes from volunteers, I looked
    at my work queue and saw that asp@uunet.uu.net had asked a while ago
    that named not fork/exec a named-xfer unless it had already determined
    that the serial number was out of date.  This is important to sites like
    UUNET and DECWRL, which have thousands of "secondary" lines in their
    named.boot and can take hours to check all the serial numbers at boot
    time if named forks/execs named-xfer and lets named-xfer compare the
    serial numbers, rather than comparing them in named and only fork/exec'ing
    a named-xfer if it's actually neccessary to do a transfer.  In spite of
    C's lack of threads, this only took a few hours to do.  So it's in.

33. Gregory Shapiro's "secure_zone" changes are in.  See the BOG.

32. Internals changes: STATS is no longer optional; ns_req() has been split
    into three functions for readability.  Convex systems are now supported.
    You can now define LOG_FAC in conf/options.h if you want to syslog as
    LOG_LOCAL1 or some other non-LOG_DAEMON value.  The mkstemp() problem on
    ULTRIX has been fixed.  More dead code has been eliminated.

31. Large TCP queries are now printable in debug mode (which is used by
    "dig" and "nslookup"), thanks to a patch and a lot of patient explain-
    ations from Bryan Beecher.

30. Data from subdomains ("deeper zones") is now considered more credible
    than data from parent zones, if both are authoritative.  This permits
    a subdomain's data to differ from its parents delegation information
    and have the most-local information supercede the least-local.  Mark
    Andrews <marka@syd.dms.csiro.au> sent this in, and it is nonoptional.

29. rossc@ucc.su.oz.au's SUNSECURITY patch is now included, along with
    marka@syd.dms.csiro.au's performance improvement to it.  Note that
    I am violating my own policies by including this, since it came
    without a corresponding patch to OPTIONS, conf/options.h, and the BOG.

28. Interfaces with multiple addresses were not being handled properly.
    This is an issue for 4.3-Reno and later BSD systems, including BNR2
    ("Net-2") and 4.4BSD.  Multiple addresses are not properly handled
    as if they were all aliases for the localhost.

27. Jukka Ukkonen <ukkonen@csc.fi> sent me some patches for the Convex,
    which I've put it but cannot test.

26. sob@tmc.edu (Stan Barber) sent me new versions of contrib/host/host.c
    and contrib/host/send.c, which I have installed but not tested.  I am
    still waiting for someone to update the version in tools/host.c, which
    is going to be a lot more work.  Contact me via e-mail if you want to
    help.

25. My credibility stuff from the original 4.9 (and before that, KJB)
    was operating under a ``scorched earth'' policy due to a brain fault
    on my part when I wrote the code originally.  Tim.Goodwin@pipex.net
    discovered this and sent in a patch.  Note that throwing out glue is
    generally OK since glue is generally NOT OK, but disposing of it after
    ~20 references is a lot better than disposing of it after 1 reference.

24. NS RR sorting on forwarded and system queries was not happening
    unless more than 1024 milliseconds of RTT variance existed among
    the servers.  This was a good value for development and testing
    but not for production use.  The value is now 128 milliseconds.
    No, this should not be a configurable in the boot file.

23. I am including a file doc/FAQ which was posted to usenet as:
	From: craig@ecel.uwa.edu.au (Craig Richmond - division)
	Newsgroups: comp.protocols.tcp-ip.domains
	Subject: FAQ: Setting up a basic DNS server for a domain
	Date: 3 Aug 1993 10:53:51 GMT
	Organization: The University of Western Australia
	Lines: 1088
	Message-ID: <23lg3v$1go@uniwa.uwa.edu.au>
	Summary: Step by Step implementation of a DNS server
	Keywords: FAQ DNS setup

22. named-xfer now syslogs if the remote server's serial number is _lower_
    than ours, which does seem like a bad thing.  per@erix.ericsson.se
    (Per Hedeland) sent this in.

21. man/resolver.3 had a typo on the exp_dn argument to dn_expand.  fixed.
    (Steve Alexander <stevea@lachman.com> sent this in.)

20. include/sys/cdefs.h moved to compat/include/sys/cdefs.h since some
    systems have their own which must be used.  the top-level makefile
    must be edited if you are on one of these systems, since the default
    CFLAGS includes this new directory as a -I directive.  sys/bitypes.h
    has also moved.

19. A neccessary bug fix for ISI's VALIDATE/NCACHE code has been incorporated.
    If you had to rebuild without these turned on in options.h to get your
    CNAME lookups to work again in an earlier 4.9.2 ALPHA, you can turn them
    on again now.

18. The q_system field of the query structure has been removed in favor of
    a q_type field containing bit definitions.  The old PRIMING_CACHE magic
    cookie is no longer used.  Go to the end of the universe, do not pass go.

17. Converted to ANSI C.  All functions are static unless they are actually
    needed outside the current module ("file" in C terminology); static 
    functions are declared with prototypes if they are forward-referenced.
    Externally visible functions are declared in separate header files, with
    prototypes.  ns.h and db.h have been split into four new header files:
	db.h -> db_defs.h db_glob.h db_func.h
	ns.h -> ns_defs.h ns_glob.h ns_func.h

    The *_defs files contain only structure and type definitions, and macro
    definitions.  Nothing that generates text or data space in the executable
    is declared here.

    The *_glob files contain only global variable declarations, which used to
    be defined in the various *.c files in a more or less random fashion.  The
    declarations are "extern" if included from non-main()-containing files, but
    are defined globally and given initial values in main()-ish files.  This
    reuse of the same declarations insures that the type and size declarations
    match between definitions and external references to them.

    The *_func files contains function prototypes for global ("extern")
    functions.  The prototypes are all optional so will not break non-ANSI
    systems.  Note that I don't have such a system any more so I may be wrong.

16. Removed all remaining references to "short" or "long" that did not
    depend on the vague semantics of those types.  Most uses were actually
    depending on a size of 16 bits for short and 32 bits for long, and there
    are processors/compilers where each of these types is different.  This
    work was begun in 4.9 and is now complete.  Note that some structs that
    are used in large data structures use "char" for 8-bit integers.  It helps.

05Jul93 - ALPHA Released

This is the cleanup release after 4.9.  I'm going to try the TCSH style of
logging the changes; let me know if you think it's a bad way of doing it.

15. the resolver now includes an implementation of RFC 1101, which allows
    network names to be encoded in the DNS tree rather than in /etc/networks.
    this implementation is by rps@matuc2.mat.uc.pt (Rui Pedro Mendes Salgueiro)
    i put the test program and original documentation in contrib/rfc1101/.  i
    would like to see their main.c ("nettest") turned into a tools/nettest,
    but i'm not willing to do the work myself.  it needs a man page, etc.

14. as expected the initial HS zone transfer stuff didn't work that well.
    thanks to <per@ericsson.se>, retries after failed SOA queries will use
    C_IN rather than falling through to C_HS inappropriately.

13. ns_init.c was fcntl(SETFL)'ing in a destructive way.  it now does a
    fcntl(GETFL) to get the old option mask and then |'s in the new flag.
    this patch came from Eduard Vopicka <Eduard.Vopicka@vse.cz>.

12. there are two new conf/Info.* files; check 'em out.

11. ultrix (some versions, especially the vax ones) libc.a had some bad
    naming conventions for some resolver routines.  getshort/putshort just
    have to be real functions, not just macros, or you can't link anything
    with this resolver.  patch was sent by <aas@brain.physics.swin.oz.au>.

10. sethostent(x) for host files was sticky for nonzero 'x' (avalon@anu.edu.au)

9.  hp9000s700 is now supported in include/arpa/nameser.h (avalon@anu.edu.au)

8.  statistics dumps now print the time in decimal-seconds-since-1970 in
    addition to the old "ctime" format, for ease of debugging.  (Peter Koch).

7.  systems with 14-character filename limitations have apparently been
    having trouble in named-xfer since its temporary file names are bigger
    than they can handle.  ash@hp sent in some patches a while ago, enabled
    with SHORT_FNAMES in conf/options.h, to deal with this appropriately.
    We should probably just generate short names always.

6.  Some security stuff from ISI.  According to Anant Kumar <anant@isi.edu>:

	The validation procedure is the major change here. Currently, we
	accept anything from a server, as long as we had asked it a question.
	This implies that a malicious server can really send us any data and
	we not only pass it on, we also cache it for as long as the TTL
	holds. This can be really bad for our health and for that of those
	who use the DNS.

	We add this procedure to verify for each RR returned by a server
	that it is indeed authoritative for either that zone, or for a
	parent zone.  We end up trusting the root servers for everything!
	Also, the more rich our cache is the more choosy we become about the
	data we add on to it. This stuff is all ifdef'd with "#ifdef VALIDATE"

	The negative caching stuff adds on a d_rcode field to the databufs.
	Any positive entry now shows a NOERROR there while negative entries
	have either a NXDOMAIN or NOERROR_NODATA. NOERROR_NODATA rcode is
	never returned.  It is used only to differentiate, within the
	internal database, between negative and positive entries. We use the
	regular hash table (hashtab) to store negative entries, too. Only
	authoritative answers are negative cached, for NTTL (parameterized,
	currently 10 minutes) seconds. Non-authoritative NXDOMAINs or
	NOERROR with zero RR count, now generated, are now accepted but
	never cached. This is ifdef'd with "#ifdef NCACHE".

5. "make install" now has a prayer of working for the man pages. an observation
   was made that net2++ systems _require_ formatted "cat" pages and that older
   systems are _able_ to use them, so that's all we install.

4. i wrote man pages for named.reload, named.restart, and named-xfer.  these
   were actually in 4.9.1 for 4.4BSD.

3. unneeded functions in compat/lib will now generate placeholder symbols, to
   make sure that the linker doesn't generate ugly-but-harmless warnings.

2. my ignorance of the true meaning of _POSIX_SOURCE has been corrected,
   along with the ugly-but-working code in conf/portability.h and elsewhere.

1. non-resolver routines moved from res/ to compat/lib/.  this will shorten
   libresolv.a and make it easier to integrate new BIND releases into Net-2
   descendents such as 4.4BSD and BSD/386.

4.9.1 ------------------

This is the integration of the changes that were made for 4.4BSD.  This
release will not be published.  Changes include:

doc/BOG/*: many changes to improve appearance of the output, including
	orphan-avoidance and better tab stops.  Sent to me by someone on
	the net who deserves thanks but I've lost the original mail.  Oops.

include/*: the CSRG people weren't entirely pleased with the interface
	changes i made to the res_*() and inet_*() functions.  in particular,
	the changes from "long" to "u_int32_t" were too sweeping in their
	opinion since Posix is already working on standardizing them and
	might look unkindly on an apparently-still-evolving interface.  also,
	the possibility that all the vendors will change their implementations
	to match the new interface is apparently rather dim.  therefore most
	externally-visible occurances of the int32_t type have been changed
	back to "long" in the resolver interface.  we believe that this should
	still be portable to Cray and AXP machines, but i'll wait to hear from
	someone who can actually try it out and let me know.

tools/*: the "net2" version of "lex" requires some additional flags and libs,
	and this had implications for the Makefiles and the dig.c source file.
	nslookup's man page is now in man/ rather than tools/nslookup, for
	consistency.

named/*: last-minute 4.9-FINAL changes to named-xfer.c and db_load.c resulted
	in corruption of TXT records on zone transfers, and a high number of
	useless syslog(SYS_ERR) messages about zones already being up to date.
	these last-minute changes have been massaged into better shape and are
	now a lot readier for prime time than they were.  a lesson was learned.

	the inet_aton() function is now used where appropriate, rather than the
	old inet_addr().  this is just an evolutionary move that should have no
	practical implications.  bad addresses in the "tcplist", "bogusns", and
	"sortlist" directives (from named.boot) are now syslogged.

	some open files are still inherited by named-xfer from named, but they
	are properly closed now.

	the SIGXFSZ signal is now accepted as an alias for SIGHUP, in support
	of the wierd DEC Hesiod implementation.  no practical significance.

res/*: one important bug fix in the gethostent() stuff, and a whole bunch of
	evolutionary include file changes.

include/*: include/sys was moved to compat/include/sys, since systems that
	do not need it really really really need to get their own instead.
	at some point i'm going to move the res/*.c files that are needed for
	compatibility but not really part of the resolver, into compat/lib.

general: there are more settable parameters in the top-level Makefile, and
	they are propagated downward into the subdirectories' Makefiles.  you
	should not have to edit any Makefile except the top-level one.  Note
	that "make links" still creates local Makefiles in the build directory
	because "mkdep" still edits the Makefiles on most systems.

4.9-FINAL -------------------

Kevin Dunlap sent in some changes for the BOG.  So did a lot of other folks.

Someone asked about AXP-OSF, so I did a trivial 64-bit port.  Porting to
other 64-bit systems should be simple now.  Someone also sent in some MIPS
RISCOS portability changes, which were simple and therefore were put in.  
Note that some type names have been added to BSD 4.4 as a result of this
work; they are going to be in <sys/types.h> in BSD 4.4 but they are in a
local include file called <sys/bitypes.h> in this distribution, with 
appropriate #ifdef's in the include files that depend on them.  Those of you
who are porting to 64-bit platforms where "long" isn't 32 bits should be
using these new names for your types; there was no standard before this,
but the names we've added for BIND 4.9 and BSD 4.4 are going to be proposed
to Posix at some point.  Sometimes it's just not OK for "int" to be the
"natural integer size of the machine" and you just _have_ to tell the compiler
how many bits you want.

The NIC added a new root server, thus pushing the size of a nonauthoritative
root server response (which includes the root server list in the answer as
well as the authority sections) over the 512-byte limit.  This showed up a
long-term BIND bug wherein it failed to set the TC ("truncation occurred")
bit if truncation occurred anywhere but the answer section.  Since truncation
was occuring at the end of the packet, in the additional data section, this
meant that BIND was generating truncated responses without setting TC in the
response header.  Upon further investigation, I found that BIND ignored TC
on responses it received from other name servers.  RFC 1035 states that RR's
from truncated responses should not be cached; with creative interpretation
of the exact 1035 wording, I found a way to reach this goal while still 
caching the answer section (as long as the truncation occurred in some other
section, which 1035 gives no definitive way to determine but I'm happy with
my guess).

While researching the above, I finally broke down and added credibility
output to the zone dump files.  They are in the comments so should cause
no trouble.  There's more work to be done on the dump output; in particular,
Phil Almquist proposed and even prototyped a "tagging" of all RR's with the
A RR of the nameserver that sent them to us; this feature should be added
and the dump output should include it.  This would add a lot to our ability
to track down corrupt data.

Don Lewis and I had more discussions about TC and ended up agreeing that the
right thing to do is to set TC on responses that overflow in the answer or
authority section, truncating at an RR boundary, but do not set TC on responses
that overflow in the additional-data section (truncating at a {name,type}
boundary).  This actually solves the root server problem pretty well, since
BIND 4.9 will, when it tries to use an NS whose A isn't in the cache, generate
a sysquery() for the missing A.  (Heck, additional data TTL's are depreciated
at the rate of 5% per use, so this would end up happening pretty quickly even
if we did cache a partial {name,type} -- but now we won't have to.)

While trying to fix all of this stuff I ended up moving some functions around
to avoid duplicating them in different source files, and I reformatted some
source lines that went over 80 characters.  I also made a few things "static"
that used to be unneccessarily global.  More of that will happen in 4.9.1.

DEC's product version of MIT Hesiod uses SIGXFSZ for what we do with SIGHUP;
since the default for SIGXFSZ is to exit, it seemed prudent to wire it up to
do what SIGHUP does instead, so that this BIND can run on DEC Hesiod servers.

At the request of several people, I integrated the USC "dig" and Rutgers
"host" tools into the distribution.  This required some changes to the
resolver library's debugging output formats, which will be visible in
nslookup, nsquery, and any other tool that sets the RES_DEBUG option.
Note that there is no support for "DEFNAMES" in this version of dig, due
to design changes between 4.8 (from which "dig" is derived) and 4.9.  there
is no reason in principle why it can't be made to work, but it doesn't work
now.  therefore only fully-qualified names can be looked up with this "dig".

I had to change the name of the resolver "state" structure to be "__res_state"
for standards conformance (really, it is not reasonable to expect that because
a program includes <resolv.h> it will never define its own structure called
"state".  This change highlights the imperative that any application which is
relinked against this resolver must first be recompiled against these include
files (notably <resolv.h>).  This is true for almost all versions of libresolv.

I asked for items for the "TODO" list and got quite a few.  Check them out
before you hack; someone else may already have started doing what you want to
do.  I also asked for tools for the "contrib" subdirectory and got 650KB worth.
They make the BIND 4.9 distribution a lot larger than 4.8.3 was, but the extra
bytes are well worth their weight.

Kenneth Almquist (no relation to Phil, as far as I know) posted a patch for
res_send() that lets it keep track of servers that are responding "SERVFAIL"
or some other fatal condition; these servers are NOT used for retries of the
current query.  This information is not persistent between calls to res_send()
since future calls will probably be for different {name,type} queries, which
will not neccessarily fail in the same way.  This change is trivial and makes
a measurable difference in the amount of DNS traffic on my local net.

4.9-BETA ------------------- April 17, 1993 -- Paul Vixie -- DECWRL

"Peter Koch" <pk@TechFak.Uni-Bielefeld.DE>'s previous patch caused core
dumps on some systems.  I fixed part of it and Peter sent me a fix for
the rest of it.  All is now well.

The Bind Operations Guide in doc/BOG has been updated to 4.9.  Also, the
man page in man/named.8 has had some patches applied.  The copyrights are
all fixed now.  Let's get this thing OUT of here!

4.9-ALPHA ------------------- March 15, 1993 -- Paul Vixie -- DECWRL

There was a really bad bug affecting wildcards.  I received a patch
from "Peter Koch" <pk@TechFak.Uni-Bielefeld.DE> which fixes some of
it, but I can't quite motivate myself to fix the rest of it since I
know that what's _really_ wrong is going to require chainsaws and
dynamite to fix and that'll add another year to the release.  I think
that this patch will hold us for a while.

There are a LOT of portability changes that I'm holding onto, especially
including 64-bit fixes.  Do not submit any more portability changes
until 4.9.1 opens.  Go ahead and make them, but be prepared to remake
them later.  Let me know what you are doing but don't send me any diffs
for portability until I ask for them.  4.9 has been stuck in the barrel
for way too long already -- patches that don't fix RFC-noncompliance or
core dumps will just go into my "todo" folder (which is presently a
black hole of great mass).

4.9-ALPHA ---------------- Febrtuary 2, 1992 -- Paul Vixie -- DECWRL

Mostly portability fixes.  The nslookup "lex" problem is BSDI-specific
and I'm not going to hold up release because of it.  This will be the
last alpha release before the public beta.  It is, as usual, running
the DEC.COM primary name service and has done so for more than a week
without any problems.

4.9-ALPHA ---------------- January 10, 1993 -- Paul Vixie -- DECWRL

Once I get the known bug in nslookup (see below) fixed, this version is going
to go into public beta.  I would appreciate it if everyone would try it out.

KNOWN BUG IN THIS RELEASE: something wild is going on inside of the yylex()
routing on BSD/386 systems.  It only affects nslookup.  I'm still trying to
figure out how I'm going to debug this; lex experts, please see what's going
on.  None of the changes since the 930105 release should have been capable
of producing this change, but something is sure doing it.

I finally fixed the {GET,PUT}{SHORT,LONG} macros to stop issuing warnings
on HP-UX systems.  They are also warning-free on Ultrix(SPIM,VAX), BSDI(386),
and SunOS(SPARC) systems.  I took the plunge and changed the internal functions
in res/res_comp.c to depend on these macros instead of duplicating the code,
and everything still works.

Tom Limoncelli found three ancient memory leaks.  I fixed two of them
but the last one looks too much like a "cannot happen" for me to be
willing to experiment with it.  Besides which, it's "very" minor.

Uses setsid() on POSIX systems.  PID file is now optional.  (arc@sgi)

Comments (";" or "#") are now allowed in resolv.conf (arc@sgi).

Documentation and copyright changes in README.

Known to compile on NeXT machines.

Some portability changes for AIX, whose CC is very picky.

I forgot to mention in the 921227 release that T_RP is supported (arc@sgi).

I included a number of changes that Alan Barrett has been trying to get
in since the 921221 version.  Most are portability-related, and the few
things that are functional are changes to my own previous additions :-),
so I'm fairly sure that they are doing the right thing.  Alan's changes
include:

    include/arpa/nameser.h
	improved error diagnosis in the BYTE_ORDER configuration.

	changed hp9000 test to hp9000s300.  As far as I know, there is
	no hp9000 preprocessor symbol.  Should probably add other
	hp9000s<whatever> tests, but have not done so.

    named/ns.h
	Moved the XFER-related stuff from the end of the file to near
	the top, where it is grouped with similar stuff.

    Makefiles:
	Add SYSLIBS variable, so folk can compile with -lBSD easily.

	Changed install targets to make them easier to customise.

	make links wasn't handling named.{reload,restart}*

	Add ${CDEBUG} flag to link step.  Some debuggers don't work
	right if the program isn't linked with the -g flag.

    struct timeval members are declared as unsigned long on some systems.
	Add casts to (long) in several if statements that appear to assume
	that tv_sec is signed.

    PID_FIX in ns_main.c controlled more than just whether or not the
    pid file gets fixed.
	Changed it to control only that one feature.

    For debugging, it is useful for a nameserver to listen to non-standard
    port, but to forward requests to a standard port.
	Add "-p remote/local" option to named/ns_main.c.
	Also needed some other changes elsewhere.

    Don't forward back to the host that asked us a question, unless they
    asked from some port other than their nameserver port.  This allows a
    dig or nslookup user on a host to ask us questions with
    recursion-desired, where we are willing to recursively ask the
    nameserver on their host.  However, if a nameserver asks us something
    we will not recurse back to them.
	nslookup() in named/ns_forw.c checks for this and returns -1.
	ns_forw() and sysquery() notice this and return SERVFAIL.

	Moved the nsContainsUs functionality from a separate routine
	into nslookup().  No need to do the same tree walk several times.

    While trying to track down various problems, added detection
    and logging of errors in several syscalls in ns_main.c.

    Avoid integer overflow in roundtrip time calc in ns_resp.
    This needs a definition for INT_MAX.

    Fixed root zone transfer bug.  Also corrected some slightly misleading
    comments in the doaxfr() code, and added some more comments.

4.9-ALPHA ---------------- January 5, 1993 -- Paul Vixie -- DECWRL

This one was built and tested on Ultrix 4.2 (SPIM, MIPS CC and GCC),
BSD/386 (Gamma.4), Sun SPARC (4.0.3, sorry, that's the latest I have),
4.3BSD Reno (VAX, PCC), and Ultrix 3.0 (VAX PCC).

Moved res/defs.h to conf/portability.h; named/options.h to conf/options.h.

Portability changes for O_NDELAY.  SUNOS is really strange about this.

Removed some unneccessary goto's added to ns_main.c on 1jan.  Oops.

Art Harkin of HP sent in a number of small (read: obviously correct)
improvements, some related to portability, some to functionality.

4.9-ALPHA ---------------- January 1, 1993 -- Paul Vixie -- DECWRL

Changed all O_NONBLOCK to O_NDELAY.  Changed all {r}index to str{r}chr.

Added some SysV support in the form of bcopy->memcpy, bzero->memset.

Added C_HS support to named-xfer (greg@duke.cs.unlv.edu).

Fixed a line-number problem in asp's "include" logic (asp@uunet.uu.net).

streamq's were being used after free().  bug report from fuat@ans.net
and jpe@ee.egr.duke.edu.  bug fix by vixie.

In the resolver, we now default to address 127.0.0.1 rather than 0.0.0.0.
There's a comment in the code that explains why.

In the resolver, arc@xingping.esg.sgi.com changed it to use inet_aton()
and included that function for those not running 4.4bsd.

arc@xingping.esg.sgi.com also provided lots of portability fixes and
general cleanups, in particular to nslookup which he maintains for CSRG.

4.9-ALPHA ---------------- December 27, 1992 -- Paul Vixie -- DECWRL

Added strtoul() to libresolv.a since it's yet another neccessary function
that older systems don't have.  If we can stomach strcasecmp() we can sure
handle this.

Moved res/named/gethostnamadr.c to res/gethnamaddr.c (note basename change)
and res/named/sethostent.c to res/sethostent.c.  Since the host table stuff
isn't in separate files any more I saw no reason to retain the subdirectory.

Updated all the copyrights and applied the small lint changes that bring
the baseline of this version from "4.8.3 as seen on ucbarpa" up to "4.8.3
as released with net-2".  Thanks to the alpha testers for pointing this out
to me and for sending in the diffs.

With much howling and screaming, I ported this to UMIPS (MIPS System V).
There are a lot of really bad things going on in their libc.a, and now
they're going on in BIND as well.

I added a "res/defs.h" file and then proceeded to include it from all kinds
of files that aren't in res/.  I'm thinking of moving it but I'm also trying
to figure out where -- include/ is the wrong place.  res/defs.h has in it all
the ugly ifdef's needed to figure out whether this is a late-model BSD system,
a POSIX system, or just old.

All the "#endif" and "#else" cpp directives now have comments around their
annotations.  It turns out that System V CPP complains about "#endif DEBUG"
but has no problem with "#endif /*DEBUG*/".  In many cases where the #ifdef
was obviously visible and unambiguous, I simply removed the annotation.

The "l" is now a ";".  Thanks to all who replied :-).

There was a very bad bug in the named-xfer interface.  'nuff said.

AIX needs a 32-bit field for PID's.  I can't imagine.  But it's fixed.

The "domain" directive in named.boot is now an option, defaulting to off.

There was a benign bug in sqrm().

doaxfr() is now shorter and clearer.

There is an "include" directive in the named.boot file now.  Its syntax is
simple: "include somefile".  No quotes, no "#", no <brackets>.  This feature
was in 4.9-ALPHA as well, courtesy of Andrew Partan.  I forgot to document it.

4.9-ALPHA ---------------- December 21, 1992 -- Paul Vixie -- DECWRL

This release incorporates fixes from a lot of people, including many from
DECWRL.  Some fixes are just lint; some are to avoid dumping core on non-VAX
computers; many are to fix promiscuity, corruption, and rudeness.

Various internal DEC programmers have ported the old 4.8.3 code to various
not-entirely-BSD-like platforms and turned up some interesting lint.  All
of this has been fixed.  Also, we fixed a bad bug in the handling of timeouts
and SERVFAIL's when forwarders and slave are both used.

I have made major changes to the code inside the ALLOW_UPDATES ifdef's, but
I don't use it and have never compiled with that option turned on so I don't
know if it still works.  Given that SNMP has come and there is an IETF WG for
SNMP management of the DNS, I am thinking very seriously of purging all of the
ALLOW_UPDATES code in 4.9.1.  I suspect that Mike Schwartz will let me know if
this is ok..

(interrim "KJB" notes) ------------------- March, 1992 -- Paul Vixie -- DECWRL

If we are about to forward a query for some zone for which we are one of the
servers, we send back a SERVFAIL instead.  If we don't have it, chances are
good that the other name servers won't have it either.  This is the major
cause of "network meltdown" when the root servers declare you as a name server
for some zone you don't know about and havn't configured yourself for.

Fixed a memory leak such that if db_update() fails to update the database
from a response packet, a databuf will no longer be orphaned.  Also fixed
what looks like a similar leak in the ALLOW_UPDATES code but I don't use it
that hasn't been tested.

Fixed a memory sponge such that if we forward a query to someone who is not
ever going to answer it, we will eventually expire it from our query queue.
Previously it would expire after N retries to N' different servers, which
could be a very long time.  Particularly in the case of lame delegations and
other forwarding loops, we feel that 90 seconds (two max-retry intervals) is
enough time for a query to be answered.  While we were into this code we made
several fields in the query structure into "short"'s since they were only
being used to store smallish integers.  The query list gets Very Long during
a forwarding loop -- even 90 seconds worth of queries is a lot of queries.

This version includes my hacks that assign a "credibility index" to each
<name,type> such that when more credible data arrives for a given
<name,type>, all old data is purged.  When equally-credible data arrives it
is aggregated in the way we all know and love; when less credible data
arrives it is completely ignored.  Credibility, from best to worst, is:
	1. zone files (primary or secondary)
	2. authoritative answers
	3. non-authoritative answers and authority records
	4. additional data
	5. zone files ("cache" or "bootstrap" information)
You need this version of bind if you still show any A RR's in network
32.0.0.0 when you look up uucp-gw-1.pa.dec.com's A or adobe.com's NS.

I have also added some extra code to prevent pollution of the internal
"hint cache."  In all versions of BIND that I was able to test, any IN_A
response to any sysquery() would cause the IN_A RR to be added to the
fcachetab ("hint cache").  This resulted in lots of extra cruft in the hint
cache, that wasn't timed out properly, which in turn resulted in lots of
strange answers ('nuff said, take my word for it.)

Though changes have been made to make the Ultrix and GNU (2.1) C compilers
stop complaining about the source, it should still compile and run just
about anywhere.  In fact, after I cleaned up lots of old lint, this version
of BIND is known to compile and run on:

	Ultrix 4.2 (MIPS or VAX)
	SunOS 4.0.3
	BSD/386 (BSDi beta)

This was being released as King James Bind because, like KJ Sendmail, it is
a merge of every major variant of Bind that we know about.  It was
assembled and tested by Paul Vixie of DEC NSL/WRL, with generous donations
of code and advice from Win Treese of DEC CRL.  Changes from Don Lewis of
Harris, Andrew Partan of UUNET, and Piet Beertema of EUNet are also included.
See the OPTIONS file for a description of the changes you can control with
#ifdef's.

This server has been run on UUCP-GW-{1,2}.PA.DEC.COM, which are in the UUCP
Zone.  Our named.boot file has ~1900 lines in it.  Before we instituted the
changes in this release, our name server usually ran at about 16MB virtual,
15MB physical, growing slowly but constantly until we restarted it.
Whenever a new zone was added to the NIC's root zone listing us as a name
server, our servers would kill themselves and eachother (and NS.UU.NET, one
of the other UUCP Zone name servers) with forwarding loops.  After these
changes, we run at a fairly constant 8MB virtual and physical size, and our
apparent CPU utilization is always 0.0% since we never finish a quantum and
the scheduler always sees us as waiting for I-O.  In other words, life is good.

Notes from UCB version 4.8.3 follow:

-------------------

This is version 4.8.3 of bind.  It is a test release that updates
versions 4.8 and 4.8.1 with fixes, and is essentially the same as
the version of named on the 4.3BSD Reno release.  Although it is
currently described as a test release, it is believed to be reasonably
stable and more usable than the previously-released versions.
Here are some of the more important changes:

  o A list of domains may be specified for searching in resolv.conf instead
    of just the local domain name.

  o gethostbyname() will accept a dotted quad.

  o Support has been added for the the T_TXT data type and for the class
    C_HS.  These are both used by Hesiod from Project Athena at MIT.

  o All of the pathnames have been put into one header file.  This
    makes it easier to change the location based upon your local
    configuration.

  o Responses are only accepted from an address to which we might of sent
    the request.  This might cause problems if some server is multihomed
    and is still running BIND 4.3, but it prevents attacks induced by
    sending responses from another address.

  o Numerous bugs have been fixed:  Adding a new authoritative zone now
    works when the server has a cached SOA record.  Comparisons in the
    db now look at type and class as well instead of dropping records
    with identical data.  Scheduling of maintenance interrupts has been
    moved to one routine avoid spurious ones.  Named goes into the background
    after more of the initialization is done.  Stream connection queue
    handling was cleaned up including a bug that caused data corruption
    and core dumps.  Sys5 no longer can have multiple transfers of the
    same zone occuring at the same time.  Handle CNAME -> CNAME loops
    more gracefully.  Avoid making one server never get queried.  Border
    conditions in resolver are checked more accurately.

  o Nslookup has been updated.

There are several bug reports that have yet to be integrated into this
version.  Hopefully they will be dealt with in the next release.  Please
send feedback on this release.

Notes from versions 4.8.1 and 4.8 follow:

------------------

This is version 4.8.1 of bind.  It is a test release that includes
version 4.8 with fixes, asynchronous zone transfer and better reload
capabilities.  Although it is currently described as a test release,
it is believed to be reasonably stable and more usable than the currently-
released version, 4.8.  The changes of note are:

  o The asynchronous zone transfer code previously posted to the bind
    mailing list has been integrated, completed and tested.  There are
    a number of changes from the version posted, including fixes to
    allow top-level domains to work and a simplification of the timer
    code.

  o The code for reloading the server has been changed so that only
    primary zones master files that have changed are reloaded.  The
    cache and secondary zones are not flushed, and the sortlist, domain,
    etc. are reset to correspond to the boot file contents.

  o Several bugs have been fixed: the name "*" is not interpreted as
    a wildcard in cached zones, only in primary zones.  Secondary servers
    no longer decrement the time-to-live of records by the time since
    they verified the zone with the master; as a result, they never
    hand out nameserver referrals with too short a TTL to be usable.
    A bug was fixed that caused secondary servers with out-of-date
    zones to return empty answers between the actual expiration time
    and the next timeout.

There are several other bugs that have been reported but have not yet
been fixed.  In addition, the next regular release of named will
support negative caching, but this has not been integrated.

I would appreciate receiving feedback on this release; in particular,
problems (or lack of problems) when installing on various systems.
I attempted to update the SysV code when integrating the zone-transfer,
but haven't tested it.

The notes from version 4.8 follow.

----------
Welcome to version 4.8 of bind.

There have been several changes to the named boot file (/etc/named.boot)
of which you should be aware.  The "domain" line for each zone is no longer
needed, but one such line may still be used to specify a default domain
to be used for queries containing names with only a single component.
The term "suffixes", which was added in version 4.7alpha, has been removed.

The manual page on named (named.8) has been updated to reflect all
these changes.  Please read this and look at the example files
before installation.  You should also note the changes in the
resolver code to support non-fully-qualified addresses and per-user
host aliases.  See hostname(7) for an overview.  Two new routines
have been added to the resolver library since the last test release:
res_query formulates a query, sends it, waits for a response and does
preliminary error checking; res_search implements the search rules
of gethostbyname using res_query.

The MX lookup routine in sendmail has been modified to use res_search.  
Also, dn_skip takes an additional parameter and has been renamed
to dn_skipname.  While old sendmail binaries will work with the new
version of bind, because of these changes, it is desirable to install
new sendmail sources and recompile sendmail.  Do not rebuild sendmail 
from old sources.   The new sendmail is on ucbarpa.Berkeley.EDU for
anonymous FTP from pub/4.3/sendmail.MX.tar and pub/4.3/sendmail.MX.tar.Z.

There have been numerous changes to named, fixing most of the known
bugs that can be fixed without major structural changes in the server.
Several server configurations that failed before should now work.
Certain robustness problems have been fixed, in particular bounds-
checking when processing incoming packets.  Two changes have been made
in preparation for negative caching: SOA records are sent in the authority
section in negative responses with NXDOMAIN set, and a bug was fixed that
caused confusion and repeated requests if a response had no error, no answer
and an SOA in the authority section.  As such responses are already sent
by other servers, and will be sent by the next release of BIND, it is
important that all sites upgrade to this version as quickly as possible.

The root "hint" cache and cache file remain the largest problem area,
along with named's naivete in accepting bogus server's data.
These will be addressed in the next release, along with asynchronous
zone transfers, intelligent reloading of zone files, faster startup,
and caching of negative responses.

This version (4.8) will replace the last officially released version (4.5).
Version 4.5 has a serious bug that causes the generation of a continuous
stream of bogons to the root domain servers (bogus queries with the query
response bit set and possibly garbage for nsid and rcode).  It is imperative
that these versions of named be replaced as fast as possible.  We urge you to
field 4.8 quickly, for the sake of the root domain servers.

	Mike Karels
	Jean Wood
	bind@ucbarpa.Berkeley.EDU

## ++Copyright++
## -
## Copyright (c) 
##    The Regents of the University of California.  All rights reserved.
## 
## Redistribution and use in source and binary forms, with or without
## modification, are permitted provided that the following conditions
## are met:
## 1. Redistributions of source code must retain the above copyright
##    notice, this list of conditions and the following disclaimer.
## 2. Redistributions in binary form must reproduce the above copyright
##    notice, this list of conditions and the following disclaimer in the
##    documentation and/or other materials provided with the distribution.
## 3. All advertising materials mentioning features or use of this software
##    must display the following acknowledgement:
## 	This product includes software developed by the University of
## 	California, Berkeley and its contributors.
## 4. Neither the name of the University nor the names of its contributors
##    may be used to endorse or promote products derived from this software
##    without specific prior written permission.
## 
## THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
## ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
## IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
## ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
## FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
## DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
## OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
## HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
## LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
## OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
## SUCH DAMAGE.
## -
## Portions Copyright (c) 1993 by Digital Equipment Corporation.
## 
## Permission to use, copy, modify, and distribute this software for any
## purpose with or without fee is hereby granted, provided that the above
## copyright notice and this permission notice appear in all copies, and that
## the name of Digital Equipment Corporation not be used in advertising or
## publicity pertaining to distribution of the document or software without
## specific, written prior permission.
## 
## THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
## WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
## OF MERCHANTABILITY AND FITNESS.   IN NO EVENT SHALL DIGITAL EQUIPMENT
## CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
## DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
## PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
## ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
## SOFTWARE.
## -
## --Copyright--
OpenPOWER on IntegriCloud