[nsd-users] NSD 4.1.4 release

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

NSD 4.1.4 is available:
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.4.tar.gz
sha1 61985f631d332b6feaeb46d04a7245bb80951921
sha256 d6e0e9cd1f637a3b4bfa48dba47b1564408eb531c57f6a3dda1a2d529df800f0

This release has fixes for operational issues: for NSID responses and
for fetching expired zones with wrong serial management.

There are also installation changes.  The number of interface: lines
in nsd.conf is unlimited.  The reuseport: yes option is enabled by
default for Linux, but not enabled by default on FreeBSD where it
apparently is available but not implemented, it can still also be
controlled from nsd.conf.  When enabled and it works it gives
(sizable) speed improvements on multicore systems.  Packagers may want
to use the newly added --enable-pie and --enable-relro-now options to
link a safer binary (but you may already have them if you use custom
LDFLAGS).

FEATURES:
- - RFC7553 RR Type URI support.
- - removed hardcoded interface limit, --with-max-ips removed.
- - SO_REUSEPORT support, by default on Linux, or with reuseport: yes.
- - Admitted axfrs are logged at verbosity 1.  Refused at verbosity 2.
- - --enable-pie and --enable-relro-now options for a safer executable.

BUG FIXES:
- - Fix NSID response for short edns sizes.
- - Fix that for expired zones NSD performs an AXFR and accepts newer
  and older serial numbers.
- - Document that minimal responses only minimizes responses to fit
  in one datagram.  It does not minimize smaller responses.
- - Fix #618: documented need to list ip-addresses seperately in
  nsd.conf if there are multiple, because the source address of
  replies can otherwise go wrong.
- - Fix that notify from nsd-control contains soa serial.
- - Fix #698 formatting errors and typos in nsd.8.in.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=MvsB
-----END PGP SIGNATURE-----