Download

More Information

pdnsd

Changes: This version fixes some security problems. It contains a fix for a "dangling pointer" bug that could cause pdnsd to crash when it received a long reply. It also addresses some of the issues raised in the CERT vulnerability note VU#800113 by making source port randomization the default. This release also fixes problems with compiling pdnsd for the ARM architecture and for the Darwin platform (Max OS X). There are a number of (minor) new features, such as support for "include" files.

Changes: A bug has been fixed that caused pdnsd to handle NXDOMAIN replies inefficiently. The code that implements the ping test has been fixed for 64-bit systems. A new option can be used to give each server in a section of the configuration file an equal chance of being queried. New options make it possible to check whether the replies of name servers contain certain IP addresses and if so reject these replies. The pdnsd-ctl 'add' commands now allow multiple IP addresses to be specified for the same name. pdnsd's ability to resolve from root servers has been improved.

Changes: This release introduces a new query method: "udp_tcp". With this method, a UDP query is tried first and, if the UDP answer is truncated, the query is repeated using TCP. There is a new configuration option "use_nss", which can be turned off to prevent lengthy timeouts and stalls in certain situations. A bug has been fixed that previously could cause pdnsd to crash when started in debug mode.

Changes: A memory leak and a minor buffer overflow problem have been fixed. There is now a fix for some situations that would previously cause pdnsd to exit prematurely (such as ACPI S3 sleep or trying to attach strace to pdnsd). Time intervals specified in the configuration file can now be expressed in minutes, hours, days, and weeks as well as seconds. Support for Mac OS X 10.4 Tiger has been improved. The "pdnsd-ctl status" command now also provides some information about the status of the running threads.

Changes: The "pdnsd-ctl empty-cache" command has been improved: it is possible to specify a selection of names to delete instead of emptying the cache completely and pdnsd should remain responsive while a "pdnsd-ctl empty-cache" command is running. "pdnsd-ctl config" or server commands should no longer be held up by ping or query uptests to unresponsive servers. It should now be possible to resolve the same names with query_method=tcp_udp as with query_method=udp_only, though perhaps with an occasional delay when a TCP query times out. A number of problems with resolving from root servers have been solved.