9.6-ESV

author Mark Andrews <marka@isc.org>

Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)

committer Mark Andrews <marka@isc.org>

Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)
author Mark Andrews <marka@isc.org>
Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)
committer Mark Andrews <marka@isc.org>
Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)
diff --git a/CHANGES b/CHANGES

index d230421cad832a1e899f430e30b464e7ac5a0ed7..ae46f90f867f84c4236eb84d453ee264e61e2e53 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+       --- 9.6-ESV released ---
+
+2852.  [bug]           Handle broken DNSSEC trust chains better. [RT #15619]
  
         --- 9.6.2 released ---
  
diff --git a/README b/README

index 902d9ed97d2164a14fccc31edea8be0ce050fd4e..fc981a6d6949f814c7872e870a3f965329e93e6b 100644 (file)
--- a/README
+++ b/README
@@ -42,6 +42,12 @@ BIND 9
                 Stichting NLnet - NLnet Foundation
                 Nominum, Inc.
  
+BIND 9.6-ESV (Extended Support Version)
+
+       BIND 9.6-ESV will be supported until March 31, 2013, at
+       which time you will need to upgrade to the current release
+       of BIND.
+
  BIND 9.6.2
  
         BIND 9.6.2 is a maintenance release, fixing bugs in 9.6.1.
diff --git a/bin/named/server.c b/bin/named/server.c

index b9259c71a7c13c981658b91c7cbbef953f174e38..8f6778666a07b62116c849ca91b5c25ec0cd6d9f 100644 (file)
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: server.c,v 1.520.12.11 2009/12/24 00:17:47 each Exp $ */
+/* $Id: server.c,v 1.520.12.11.10.1 2010/03/03 22:06:36 marka Exp $ */
  
  /*! \file */
  
@@ -4726,6 +4726,8 @@ dumpdone(void *arg, isc_result_t result) {
         }
         if (dctx->cache != NULL) {
                 dns_adb_dump(dctx->view->view->adb, dctx->fp);
+               dns_resolver_printbadcache(dctx->view->view->resolver,
+                                          dctx->fp);
                 dns_db_detach(&dctx->cache);
         }
         if (dctx->dumpzones) {
diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml

index 44e30b16da9652d9b7cc57a4652d2eea30930148..da80a31f1579796972ab12caf7dce4f34a516aad 100644 (file)
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -18,7 +18,7 @@
   - PERFORMANCE OF THIS SOFTWARE.
  -->
  
-<!-- File: $Id: Bv9ARM-book.xml,v 1.380.14.24 2010/01/23 23:47:52 tbox Exp $ -->
+<!-- File: $Id: Bv9ARM-book.xml,v 1.380.14.24.4.1 2010/03/03 22:06:36 marka Exp $ -->
  <book xmlns:xi="http://www.w3.org/2001/XInclude">
    <title>BIND 9 Administrator Reference Manual</title>
  
@@ -7705,6 +7705,13 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
                    <literal>1800</literal> (30 minutes).
                  </para>
  
+               <para>
+                 Lame-ttl also controls the amount of time DNSSEC
+                 validation failures are cached.  There is a minimum
+                 of 30 seconds applied to bad cache entries if the
+                 lame-ttl is set to less than 30 seconds.
+               </para>
+
                </listitem>
              </varlistentry>
  
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html

index 9da3432bc865bdb9fcac47b7ad8285d8f8525170..a6ccccdc68df4aa0333936b12145e63d17576b61 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: Bv9ARM.ch06.html,v 1.201.14.18 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: Bv9ARM.ch06.html,v 1.201.14.18.4.1 2010/03/03 22:06:37 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -78,25 +78,25 @@
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
              Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586874"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586877"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
              Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586961"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587080"><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586964"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587083"><span><strong class="command">trusted-keys</strong></span> Statement Definition
              and Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587162"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587165"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
              Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588567"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588638"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
  </dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2591182">Zone File</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2591117">Zone File</a></span></dt>
  <dd><dl>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593413">Discussion of MX Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593348">Discussion of MX Records</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593960">Inverse Mapping in IPv4</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594155">Other Zone File Directives</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594565"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593895">Inverse Mapping in IPv4</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594090">Other Zone File Directives</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594500"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
  </dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
@@ -4397,14 +4397,22 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
  <a name="tuning"></a>Tuning</h4></div></div></div>
  <div class="variablelist"><dl>
  <dt><span class="term"><span><strong class="command">lame-ttl</strong></span></span></dt>
-<dd><p>
+<dd>
+<p>
                    Sets the number of seconds to cache a
                    lame server indication. 0 disables caching. (This is
                    <span class="bold"><strong>NOT</strong></span> recommended.)
                    The default is <code class="literal">600</code> (10 minutes) and the
                    maximum value is
                    <code class="literal">1800</code> (30 minutes).
-                </p></dd>
+                </p>
+<p>
+                  Lame-ttl also controls the amount of time DNSSEC
+                  validation failures are cached.  There is a minimum
+                  of 30 seconds applied to bad cache entries if the
+                  lame-ttl is set to less than 30 seconds.
+                </p>
+</dd>
  <dt><span class="term"><span><strong class="command">max-ncache-ttl</strong></span></span></dt>
  <dd><p>
                    To reduce network traffic and increase performance,
@@ -5060,7 +5068,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2586874"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<a name="id2586877"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
              Usage</h3></div></div></div>
  <p>
            The <span><strong class="command">statistics-channels</strong></span> statement
@@ -5111,7 +5119,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2586961"></a><span><strong class="command">trusted-keys</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2586964"></a><span><strong class="command">trusted-keys</strong></span> Statement Grammar</h3></div></div></div>
  <pre class="programlisting"><span><strong class="command">trusted-keys</strong></span> {
      <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ;
      [<span class="optional"> <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; [<span class="optional">...</span>]</span>]
@@ -5120,7 +5128,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2587080"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<a name="id2587083"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
              and Usage</h3></div></div></div>
  <p>
              The <span><strong class="command">trusted-keys</strong></span> statement defines
@@ -5166,7 +5174,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2587162"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2587165"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
  <p>
              The <span><strong class="command">view</strong></span> statement is a powerful
              feature
@@ -5432,10 +5440,10 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2588567"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2588638"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2588574"></a>Zone Types</h4></div></div></div>
+<a name="id2588646"></a>Zone Types</h4></div></div></div>
  <div class="informaltable"><table border="1">
  <colgroup>
  <col>
@@ -5646,7 +5654,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2589070"></a>Class</h4></div></div></div>
+<a name="id2589005"></a>Class</h4></div></div></div>
  <p>
                The zone's name may optionally be followed by a class. If
                a class is not specified, class <code class="literal">IN</code> (for <code class="varname">Internet</code>),
@@ -5668,7 +5676,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2589172"></a>Zone Options</h4></div></div></div>
+<a name="id2589038"></a>Zone Options</h4></div></div></div>
  <div class="variablelist"><dl>
  <dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt>
  <dd><p>
@@ -6247,7 +6255,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2591182"></a>Zone File</h2></div></div></div>
+<a name="id2591117"></a>Zone File</h2></div></div></div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
  <a name="types_of_resource_records_and_when_to_use_them"></a>Types of Resource Records and When to Use Them</h3></div></div></div>
@@ -6260,7 +6268,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
            </p>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2591201"></a>Resource Records</h4></div></div></div>
+<a name="id2591204"></a>Resource Records</h4></div></div></div>
  <p>
                A domain name identifies a node.  Each node has a set of
                resource information, which may be empty.  The set of resource
@@ -6997,7 +7005,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2592824"></a>Textual expression of RRs</h4></div></div></div>
+<a name="id2592759"></a>Textual expression of RRs</h4></div></div></div>
  <p>
                RRs are represented in binary form in the packets of the DNS
                protocol, and are usually represented in highly encoded form
@@ -7200,7 +7208,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2593413"></a>Discussion of MX Records</h3></div></div></div>
+<a name="id2593348"></a>Discussion of MX Records</h3></div></div></div>
  <p>
              As described above, domain servers store information as a
              series of resource records, each of which contains a particular
@@ -7456,7 +7464,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2593960"></a>Inverse Mapping in IPv4</h3></div></div></div>
+<a name="id2593895"></a>Inverse Mapping in IPv4</h3></div></div></div>
  <p>
              Reverse name resolution (that is, translation from IP address
              to name) is achieved by means of the <span class="emphasis"><em>in-addr.arpa</em></span> domain
@@ -7517,7 +7525,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2594155"></a>Other Zone File Directives</h3></div></div></div>
+<a name="id2594090"></a>Other Zone File Directives</h3></div></div></div>
  <p>
              The Master File Format was initially defined in RFC 1035 and
              has subsequently been extended. While the Master File Format
@@ -7532,7 +7540,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
            </p>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2594178"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
+<a name="id2594113"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
  <p>
                When used in the label (or name) field, the asperand or
                at-sign (@) symbol represents the current origin.
@@ -7543,7 +7551,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2594194"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
+<a name="id2594129"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
  <p>
                Syntax: <span><strong class="command">$ORIGIN</strong></span>
                <em class="replaceable"><code>domain-name</code></em>
@@ -7572,7 +7580,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2594391"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
+<a name="id2594326"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
  <p>
                Syntax: <span><strong class="command">$INCLUDE</strong></span>
                <em class="replaceable"><code>filename</code></em>
@@ -7608,7 +7616,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2594460"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
+<a name="id2594395"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
  <p>
                Syntax: <span><strong class="command">$TTL</strong></span>
                <em class="replaceable"><code>default-ttl</code></em>
@@ -7627,7 +7635,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2594565"></a><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
+<a name="id2594500"></a><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
  <p>
              Syntax: <span><strong class="command">$GENERATE</strong></span>
              <em class="replaceable"><code>range</code></em>
@@ -8018,7 +8026,7 @@ $GENERATE 1-127 $ CNAME $.0</pre>
            </p>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2595493"></a>Name Server Statistics Counters</h4></div></div></div>
+<a name="id2595428"></a>Name Server Statistics Counters</h4></div></div></div>
  <div class="informaltable"><table border="1">
  <colgroup>
  <col>
@@ -8575,7 +8583,7 @@ $GENERATE 1-127 $ CNAME $.0</pre>
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2596966"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
+<a name="id2596901"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
  <div class="informaltable"><table border="1">
  <colgroup>
  <col>
@@ -8729,7 +8737,7 @@ $GENERATE 1-127 $ CNAME $.0</pre>
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2597349"></a>Resolver Statistics Counters</h4></div></div></div>
+<a name="id2597284"></a>Resolver Statistics Counters</h4></div></div></div>
  <div class="informaltable"><table border="1">
  <colgroup>
  <col>
@@ -9105,7 +9113,7 @@ $GENERATE 1-127 $ CNAME $.0</pre>
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2598368"></a>Socket I/O Statistics Counters</h4></div></div></div>
+<a name="id2598302"></a>Socket I/O Statistics Counters</h4></div></div></div>
  <p>
                Socket I/O statistics counters are defined per socket
                types, which are
@@ -9260,7 +9268,7 @@ $GENERATE 1-127 $ CNAME $.0</pre>
  </div>
  <div class="sect3" lang="en">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2598877"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
+<a name="id2598812"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
  <p>
                Most statistics counters that were available
                in <span><strong class="command">BIND</strong></span> 8 are also supported in
diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html

index dd6991c504014095a89d7576ca581af745cfc3b4..e56035adc85eb51ac3244ab5067b9f58c0885ad9 100644 (file)
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: Bv9ARM.ch07.html,v 1.178.14.13 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: Bv9ARM.ch07.html,v 1.178.14.13.4.1 2010/03/03 22:06:37 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -46,10 +46,10 @@
  <p><b>Table of Contents</b></p>
  <dl>
  <dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2599120"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2599054"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
  <dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599201">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599329">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599136">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599264">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
  </dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt>
  </dl>
@@ -119,7 +119,7 @@ zone "example.com" {
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599120"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span>
+<a name="id2599054"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span>
  </h2></div></div></div>
  <p>
            On UNIX servers, it is possible to run <acronym class="acronym">BIND</acronym>
@@ -145,7 +145,7 @@ zone "example.com" {
          </p>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2599201"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div>
+<a name="id2599136"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div>
  <p>
              In order for a <span><strong class="command">chroot</strong></span> environment
              to
@@ -173,7 +173,7 @@ zone "example.com" {
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2599329"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div>
+<a name="id2599264"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div>
  <p>
              Prior to running the <span><strong class="command">named</strong></span> daemon,
              use
diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html

index 8b5ebbed550bf8e1c6603850de16c09fca7669a0..04b05a3eaf3b9449afb0d4c20abdc328611f3f80 100644 (file)
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: Bv9ARM.ch08.html,v 1.178.14.13 2010/01/24 01:55:24 tbox Exp $ -->
+<!-- $Id: Bv9ARM.ch08.html,v 1.178.14.13.4.1 2010/03/03 22:06:37 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -45,18 +45,18 @@
  <div class="toc">
  <p><b>Table of Contents</b></p>
  <dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599409">Common Problems</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2599414">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599426">Incrementing and Changing the Serial Number</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599443">Where Can I Get Help?</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599344">Common Problems</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2599349">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599361">Incrementing and Changing the Serial Number</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599378">Where Can I Get Help?</a></span></dt>
  </dl>
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599409"></a>Common Problems</h2></div></div></div>
+<a name="id2599344"></a>Common Problems</h2></div></div></div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2599414"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div>
+<a name="id2599349"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div>
  <p>
              The best solution to solving installation and
              configuration issues is to take preventative measures by setting
@@ -68,7 +68,7 @@
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599426"></a>Incrementing and Changing the Serial Number</h2></div></div></div>
+<a name="id2599361"></a>Incrementing and Changing the Serial Number</h2></div></div></div>
  <p>
            Zone serial numbers are just numbers &#8212; they aren't
            date related.  A lot of people set them to a number that
@@ -95,7 +95,7 @@
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599443"></a>Where Can I Get Help?</h2></div></div></div>
+<a name="id2599378"></a>Where Can I Get Help?</h2></div></div></div>
  <p>
            The Internet Systems Consortium
            (<acronym class="acronym">ISC</acronym>) offers a wide range
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html

index 72ab6fe248f6e6a172fcdb45615358f54743e4dd..8007dd2dade9e17b5cd65ca3f9c37ae374d9462e 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: Bv9ARM.ch09.html,v 1.180.16.14 2010/01/24 01:55:24 tbox Exp $ -->
+<!-- $Id: Bv9ARM.ch09.html,v 1.180.16.14.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -45,21 +45,21 @@
  <div class="toc">
  <p><b>Table of Contents</b></p>
  <dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599573">Acknowledgments</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599508">Acknowledgments</a></span></dt>
  <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599813">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599748">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
  <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
  <dd><dl>
  <dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2603025">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2603028">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
  </dl></dd>
  </dl>
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599573"></a>Acknowledgments</h2></div></div></div>
+<a name="id2599508"></a>Acknowledgments</h2></div></div></div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
  <a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
@@ -162,7 +162,7 @@
  </div>
  <div class="sect1" lang="en">
  <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2599813"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
+<a name="id2599748"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
  <a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div>
@@ -250,17 +250,17 @@
            </p>
  <div class="bibliography">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2599932"></a>Bibliography</h4></div></div></div>
+<a name="id2599936"></a>Bibliography</h4></div></div></div>
  <div class="bibliodiv">
  <h3 class="title">Standards</h3>
  <div class="biblioentry">
-<a name="id2599943"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
+<a name="id2599946"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2599966"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
+<a name="id2599970"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2599990"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Implementation and
+<a name="id2599993"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Implementation and
                    Specification</i>. </span><span class="pubdate">November 1987. </span></p>
  </div>
  </div>
@@ -268,42 +268,42 @@
  <h3 class="title">
  <a name="proposed_standards"></a>Proposed Standards</h3>
  <div class="biblioentry">
-<a name="id2600026"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
+<a name="id2600029"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
                    Specification</i>. </span><span class="pubdate">July 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600053"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
+<a name="id2600056"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
                    Queries</i>. </span><span class="pubdate">March 1998. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600078"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2600082"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600103"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2600106"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600126"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
+<a name="id2600130"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600182"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
+<a name="id2600185"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600209"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
+<a name="id2600212"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600235"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
+<a name="id2600238"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600297"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2600300"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600327"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2600330"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600357"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
+<a name="id2600360"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600384"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
+<a name="id2600387"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
                         Key Transaction Authentication for DNS
                         (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p>
  </div>
@@ -312,19 +312,19 @@
  <h3 class="title">
  <acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
  <div class="biblioentry">
-<a name="id2600466"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
+<a name="id2600469"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600492"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
+<a name="id2600496"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600529"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
+<a name="id2600532"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600594"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
+<a name="id2600597"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600659"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
+<a name="id2600662"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
                         Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
  </div>
  </div>
@@ -332,146 +332,146 @@
  <h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym>
                  Implementation</h3>
  <div class="biblioentry">
-<a name="id2600732"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
+<a name="id2600736"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
                    Deployed <acronym class="acronym">DNS</acronym> Software.</i>. </span><span class="pubdate">October 1993. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600758"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
+<a name="id2600761"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
                    Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600826"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2600829"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600861"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
+<a name="id2600865"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
                  Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p>
  </div>
  </div>
  <div class="bibliodiv">
  <h3 class="title">Resource Record Types</h3>
  <div class="biblioentry">
-<a name="id2600907"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
+<a name="id2600910"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2600965"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
+<a name="id2600968"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601002"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
+<a name="id2601005"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
                    the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601037"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
+<a name="id2601041"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
                    Domain
                    Name System</i>. </span><span class="pubdate">January 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601092"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
+<a name="id2601095"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
                    Location of
                    Services.</i>. </span><span class="pubdate">October 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601130"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
+<a name="id2601133"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
                    Distribute MIXER
                    Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601156"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
+<a name="id2601159"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601181"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2601185"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601208"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2601211"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601235"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2601238"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601274"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2601277"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601304"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2601307"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601334"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
+<a name="id2601337"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601377"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2601380"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601410"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
+<a name="id2601413"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601436"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
+<a name="id2601440"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601460"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
+<a name="id2601463"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
                    version 6</i>. </span><span class="pubdate">October 2003. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601586"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
+<a name="id2601589"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
  </div>
  </div>
  <div class="bibliodiv">
  <h3 class="title">
  <acronym class="acronym">DNS</acronym> and the Internet</h3>
  <div class="biblioentry">
-<a name="id2601618"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
+<a name="id2601621"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
                    and Other Types</i>. </span><span class="pubdate">April 1989. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601643"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
+<a name="id2601646"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
                    Support</i>. </span><span class="pubdate">October 1989. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601666"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
+<a name="id2601669"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601689"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
+<a name="id2601692"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601735"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
+<a name="id2601738"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601758"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2601762"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
  </div>
  </div>
  <div class="bibliodiv">
  <h3 class="title">
  <acronym class="acronym">DNS</acronym> Operations</h3>
  <div class="biblioentry">
-<a name="id2601816"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p>
+<a name="id2601819"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601840"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
+<a name="id2601843"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
                    Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601866"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
+<a name="id2601869"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
                    Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601893"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p>
+<a name="id2601896"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2601929"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
+<a name="id2601932"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
                    Network Services.</i>. </span><span class="pubdate">October 1997. </span></p>
  </div>
  </div>
  <div class="bibliodiv">
  <h3 class="title">Internationalized Domain Names</h3>
  <div class="biblioentry">
-<a name="id2601975"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
+<a name="id2601978"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
                         and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602007"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
+<a name="id2602010"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602121"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
+<a name="id2602124"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602156"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
+<a name="id2602160"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
                         for Internationalized Domain Names in
                         Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
  </div>
@@ -487,47 +487,47 @@
                  </p>
  </div>
  <div class="biblioentry">
-<a name="id2602201"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
+<a name="id2602204"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
                    Attributes</i>. </span><span class="pubdate">May 1993. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602224"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
+<a name="id2602227"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602249"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
+<a name="id2602252"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
                    Balancing</i>. </span><span class="pubdate">April 1995. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602275"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
+<a name="id2602278"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602298"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
+<a name="id2602301"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602344"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
+<a name="id2602347"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602368"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
+<a name="id2602371"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602394"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
+<a name="id2602397"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
                         Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602420"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
+<a name="id2602423"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
  </div>
  </div>
  <div class="bibliodiv">
  <h3 class="title">Obsolete and Unimplemented Experimental RFC</h3>
  <div class="biblioentry">
-<a name="id2602464"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
+<a name="id2602467"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
                    Location</i>. </span><span class="pubdate">November 1994. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602521"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
+<a name="id2602524"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602548"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
+<a name="id2602551"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
                         and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p>
  </div>
  </div>
@@ -541,39 +541,39 @@
                  </p>
  </div>
  <div class="biblioentry">
-<a name="id2602596"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
+<a name="id2602667"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602704"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
+<a name="id2602707"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602730"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2602733"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602760"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
+<a name="id2602763"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
                         Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602786"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
+<a name="id2602789"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602812"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
+<a name="id2602816"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602849"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
+<a name="id2602852"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602885"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
+<a name="id2602888"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602912"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
+<a name="id2602915"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602938"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
+<a name="id2602941"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
                        (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p>
  </div>
  <div class="biblioentry">
-<a name="id2602983"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
+<a name="id2602986"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
  </div>
  </div>
  </div>
@@ -594,14 +594,14 @@
  </div>
  <div class="sect2" lang="en">
  <div class="titlepage"><div><div><h3 class="title">
-<a name="id2603025"></a>Other Documents About <acronym class="acronym">BIND</acronym>
+<a name="id2603028"></a>Other Documents About <acronym class="acronym">BIND</acronym>
  </h3></div></div></div>
  <p></p>
  <div class="bibliography">
  <div class="titlepage"><div><div><h4 class="title">
-<a name="id2603034"></a>Bibliography</h4></div></div></div>
+<a name="id2603037"></a>Bibliography</h4></div></div></div>
  <div class="biblioentry">
-<a name="id2603036"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
+<a name="id2603040"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
  </div>
  </div>
  </div>
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html

index b31b67ac0fe47aedf8ada1985b1888b5031ecc7f..44abd7729d43e60d9f9112080540915b4fa3080d 100644 (file)
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: Bv9ARM.html,v 1.193.14.14 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: Bv9ARM.html,v 1.193.14.14.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -157,25 +157,25 @@
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
              Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586874"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586877"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
              Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586961"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587080"><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586964"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587083"><span><strong class="command">trusted-keys</strong></span> Statement Definition
              and Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587162"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2587165"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
              Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588567"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588638"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
  </dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2591182">Zone File</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2591117">Zone File</a></span></dt>
  <dd><dl>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593413">Discussion of MX Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593348">Discussion of MX Records</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593960">Inverse Mapping in IPv4</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594155">Other Zone File Directives</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594565"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2593895">Inverse Mapping in IPv4</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594090">Other Zone File Directives</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2594500"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
  </dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
@@ -184,31 +184,31 @@
  <dt><span class="chapter"><a href="Bv9ARM.ch07.html">7. <acronym class="acronym">BIND</acronym> 9 Security Considerations</a></span></dt>
  <dd><dl>
  <dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2599120"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2599054"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
  <dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599201">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599329">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599136">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2599264">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
  </dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt>
  </dl></dd>
  <dt><span class="chapter"><a href="Bv9ARM.ch08.html">8. Troubleshooting</a></span></dt>
  <dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599409">Common Problems</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2599414">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599426">Incrementing and Changing the Serial Number</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599443">Where Can I Get Help?</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599344">Common Problems</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2599349">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599361">Incrementing and Changing the Serial Number</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2599378">Where Can I Get Help?</a></span></dt>
  </dl></dd>
  <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Appendices</a></span></dt>
  <dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599573">Acknowledgments</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599508">Acknowledgments</a></span></dt>
  <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599813">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2599748">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
  <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
  <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
  <dd><dl>
  <dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
  <dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2603025">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2603028">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
  </dl></dd>
  </dl></dd>
  <dt><span class="reference"><a href="Bv9ARM.ch10.html">I. Manual pages</a></span></dt>
diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html

index 9339878fcde1bf6df1b3e4c7ace402823e6f5211..87701d1b08176cdfd3ab3db151eaf6b7b56fc190 100644 (file)
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.dig.html,v 1.93.14.15 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.dig.html,v 1.93.14.15.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -52,7 +52,7 @@
  <div class="cmdsynopsis"><p><code class="command">dig</code>  [global-queryopt...] [query...]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2575907"></a><h2>DESCRIPTION</h2>
+<a name="id2563895"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">dig</strong></span>
        (domain information groper) is a flexible tool
        for interrogating DNS name servers.  It performs DNS lookups and
@@ -98,7 +98,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2576002"></a><h2>SIMPLE USAGE</h2>
+<a name="id2575937"></a><h2>SIMPLE USAGE</h2>
  <p>
        A typical invocation of <span><strong class="command">dig</strong></span> looks like:
        </p>
@@ -144,7 +144,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2629838"></a><h2>OPTIONS</h2>
+<a name="id2576048"></a><h2>OPTIONS</h2>
  <p>
        The <code class="option">-b</code> option sets the source IP address of the query
        to <em class="parameter"><code>address</code></em>.  This must be a valid
@@ -248,7 +248,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2630181"></a><h2>QUERY OPTIONS</h2>
+<a name="id2630184"></a><h2>QUERY OPTIONS</h2>
  <p><span><strong class="command">dig</strong></span>
        provides a number of query options which affect
        the way in which lookups are made and the results displayed.  Some of
@@ -573,7 +573,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2631181"></a><h2>MULTIPLE QUERIES</h2>
+<a name="id2631253"></a><h2>MULTIPLE QUERIES</h2>
  <p>
        The BIND 9 implementation of <span><strong class="command">dig </strong></span>
        supports
@@ -619,7 +619,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2631335"></a><h2>IDN SUPPORT</h2>
+<a name="id2631406"></a><h2>IDN SUPPORT</h2>
  <p>
        If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
        domain name) support, it can accept and display non-ASCII domain names.
@@ -633,14 +633,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2631432"></a><h2>FILES</h2>
+<a name="id2631435"></a><h2>FILES</h2>
  <p><code class="filename">/etc/resolv.conf</code>
      </p>
  <p><code class="filename">${HOME}/.digrc</code>
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2631453"></a><h2>SEE ALSO</h2>
+<a name="id2631457"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
        <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
@@ -648,7 +648,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2631491"></a><h2>BUGS</h2>
+<a name="id2631494"></a><h2>BUGS</h2>
  <p>
        There are probably too many query options.
      </p>
diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html

index 7c84aff80cf10651c345a370bf215561ad725b9a..cdbc3adb37f85a8f8a6cc25d10b7a4adcb2821e3 100644 (file)
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.dnssec-dsfromkey.html,v 1.6.14.14 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.dnssec-dsfromkey.html,v 1.6.14.14.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -51,14 +51,14 @@
  <div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code>  {-s} [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dir</code></em></code>] {dnsname}</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604057"></a><h2>DESCRIPTION</h2>
+<a name="id2604060"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">dnssec-dsfromkey</strong></span>
        outputs the Delegation Signer (DS) resource record (RR), as defined in
        RFC 3658 and RFC 4509, for the given key(s).
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604071"></a><h2>OPTIONS</h2>
+<a name="id2604074"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-1</span></dt>
  <dd><p>
@@ -99,7 +99,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604201"></a><h2>EXAMPLE</h2>
+<a name="id2604204"></a><h2>EXAMPLE</h2>
  <p>
        To build the SHA-256 DS RR from the
        <strong class="userinput"><code>Kexample.com.+003+26160</code></strong>
@@ -114,7 +114,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604237"></a><h2>FILES</h2>
+<a name="id2604241"></a><h2>FILES</h2>
  <p>
        The keyfile can be designed by the key identification
        <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
@@ -128,13 +128,13 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604279"></a><h2>CAVEAT</h2>
+<a name="id2604282"></a><h2>CAVEAT</h2>
  <p>
        A keyfile error can give a "file not found" even if the file exists.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604289"></a><h2>SEE ALSO</h2>
+<a name="id2604292"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
        <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -143,7 +143,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604325"></a><h2>AUTHOR</h2>
+<a name="id2604328"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html

index 8996855de520fd77a04037f261e18e6319af3b3a..1c250e9a0b71e3e79ae99b16d9a9b0393bf45211 100644 (file)
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.dnssec-keyfromlabel.html,v 1.31.14.17 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.dnssec-keyfromlabel.html,v 1.31.14.17.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code>  {-a <em class="replaceable"><code>algorithm</code></em>} {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-k</code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {name}</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604585"></a><h2>DESCRIPTION</h2>
+<a name="id2604588"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">dnssec-keyfromlabel</strong></span>
        gets keys with the given label from a crypto hardware and builds
        key files for DNSSEC (Secure DNS), as defined in RFC 2535
@@ -58,7 +58,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604599"></a><h2>OPTIONS</h2>
+<a name="id2604602"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
  <dd>
@@ -139,7 +139,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604873"></a><h2>GENERATED KEY FILES</h2>
+<a name="id2604945"></a><h2>GENERATED KEY FILES</h2>
  <p>
        When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes
        successfully,
@@ -180,7 +180,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2604967"></a><h2>SEE ALSO</h2>
+<a name="id2605038"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
        <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -188,7 +188,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2605000"></a><h2>AUTHOR</h2>
+<a name="id2605072"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html

index 5f6ca8003c91c186cce3ef9f01fc66cdf6eee0f0..0e19917e53120fb8317111bb4f2755c7d9d15486 100644 (file)
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.dnssec-keygen.html,v 1.97.14.17 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.dnssec-keygen.html,v 1.97.14.17.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code>  {-a <em class="replaceable"><code>algorithm</code></em>} {-b <em class="replaceable"><code>keysize</code></em>} {-n <em class="replaceable"><code>nametype</code></em>} [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-e</code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k</code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {name}</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2605796"></a><h2>DESCRIPTION</h2>
+<a name="id2605799"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">dnssec-keygen</strong></span>
        generates keys for DNSSEC (Secure DNS), as defined in RFC 2535
        and RFC 4034.  It can also generate keys for use with
@@ -63,7 +63,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2605816"></a><h2>OPTIONS</h2>
+<a name="id2605819"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
  <dd>
@@ -173,7 +173,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2606433"></a><h2>GENERATED KEYS</h2>
+<a name="id2607528"></a><h2>GENERATED KEYS</h2>
  <p>
        When <span><strong class="command">dnssec-keygen</strong></span> completes
        successfully,
@@ -219,7 +219,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608588"></a><h2>EXAMPLE</h2>
+<a name="id2608865"></a><h2>EXAMPLE</h2>
  <p>
        To generate a 768-bit DSA key for the domain
        <strong class="userinput"><code>example.com</code></strong>, the following command would be
@@ -240,7 +240,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608645"></a><h2>SEE ALSO</h2>
+<a name="id2608921"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
        <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
        <em class="citetitle">RFC 2539</em>,
@@ -249,7 +249,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608812"></a><h2>AUTHOR</h2>
+<a name="id2608952"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html

index 735cce1dbee390e49b2fea92b791b6e284cd3dd7..a811df32221df74b493b801a69496f20bcbdf79f 100644 (file)
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.dnssec-signzone.html,v 1.94.14.23 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.dnssec-signzone.html,v 1.94.14.23.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code>  [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-p</code>] [<code class="option">-P</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-t</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2607536"></a><h2>DESCRIPTION</h2>
+<a name="id2608017"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">dnssec-signzone</strong></span>
        signs a zone.  It generates
        NSEC and RRSIG records and produces a signed version of the
@@ -61,7 +61,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2607560"></a><h2>OPTIONS</h2>
+<a name="id2608041"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-a</span></dt>
  <dd><p>
@@ -291,7 +291,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2659930"></a><h2>EXAMPLE</h2>
+<a name="id2658773"></a><h2>EXAMPLE</h2>
  <p>
        The following command signs the <strong class="userinput"><code>example.com</code></strong>
        zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span>
@@ -320,7 +320,7 @@ db.example.com.signed
  %</pre>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2660003"></a><h2>KNOWN BUGS</h2>
+<a name="id2658845"></a><h2>KNOWN BUGS</h2>
  <p>
          <span><strong class="command">dnssec-signzone</strong></span> was designed so that it could
          sign a zone partially, using only a subset of the DNSSEC keys
@@ -345,14 +345,14 @@ db.example.com.signed
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2660035"></a><h2>SEE ALSO</h2>
+<a name="id2658877"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
        <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
        <em class="citetitle">RFC 4033</em>.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2660059"></a><h2>AUTHOR</h2>
+<a name="id2658902"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html

index 85ed78eaf6f504c5192bef33094f5da1a06ad5d8..26c019bdef64567cec19f1a995e8fbc914a38438 100644 (file)
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.host.html,v 1.93.14.15 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.host.html,v 1.93.14.15.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">host</code>  [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] {name} [server]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2603350"></a><h2>DESCRIPTION</h2>
+<a name="id2603353"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">host</strong></span>
        is a simple utility for performing DNS lookups.
        It is normally used to convert names to IP addresses and vice versa.
@@ -202,7 +202,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2603864"></a><h2>IDN SUPPORT</h2>
+<a name="id2603867"></a><h2>IDN SUPPORT</h2>
  <p>
        If <span><strong class="command">host</strong></span> has been built with IDN (internationalized
        domain name) support, it can accept and display non-ASCII domain names. 
@@ -216,12 +216,12 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2603893"></a><h2>FILES</h2>
+<a name="id2603896"></a><h2>FILES</h2>
  <p><code class="filename">/etc/resolv.conf</code>
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2603907"></a><h2>SEE ALSO</h2>
+<a name="id2603910"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,
        <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>.
      </p>
diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html

index 424c9481d1989b6f7db7085758eaf8efadea7e8f..1eef86e49aec01b171f5957bd291d749caac714f 100644 (file)
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.named-checkconf.html,v 1.92.14.20 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.named-checkconf.html,v 1.92.14.20.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,14 +50,14 @@
  <div class="cmdsynopsis"><p><code class="command">named-checkconf</code>  [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-z</code>]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608162"></a><h2>DESCRIPTION</h2>
+<a name="id2609121"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">named-checkconf</strong></span>
        checks the syntax, but not the semantics, of a named
        configuration file.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608176"></a><h2>OPTIONS</h2>
+<a name="id2609134"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-h</span></dt>
  <dd><p>
@@ -92,21 +92,21 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608292"></a><h2>RETURN VALUES</h2>
+<a name="id2609319"></a><h2>RETURN VALUES</h2>
  <p><span><strong class="command">named-checkconf</strong></span>
        returns an exit status of 1 if
        errors were detected and 0 otherwise.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608306"></a><h2>SEE ALSO</h2>
+<a name="id2609333"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
        <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2608882"></a><h2>AUTHOR</h2>
+<a name="id2609363"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html

index cabab442cfa1a25b55c9845b6fcdaeddc29d2464..756d865daa102a2f1c8af729b0ea6df44dfebb3c 100644 (file)
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.named-checkzone.html,v 1.98.14.20 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.named-checkzone.html,v 1.98.14.20.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -51,7 +51,7 @@
  <div class="cmdsynopsis"><p><code class="command">named-compilezone</code>  [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2610311"></a><h2>DESCRIPTION</h2>
+<a name="id2609973"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">named-checkzone</strong></span>
        checks the syntax and integrity of a zone file.  It performs the
        same checks as <span><strong class="command">named</strong></span> does when loading a
@@ -71,7 +71,7 @@
       </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2610361"></a><h2>OPTIONS</h2>
+<a name="id2610023"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-d</span></dt>
  <dd><p>
@@ -257,14 +257,14 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2664074"></a><h2>RETURN VALUES</h2>
+<a name="id2659640"></a><h2>RETURN VALUES</h2>
  <p><span><strong class="command">named-checkzone</strong></span>
        returns an exit status of 1 if
        errors were detected and 0 otherwise.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2664088"></a><h2>SEE ALSO</h2>
+<a name="id2659654"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
        <em class="citetitle">RFC 1035</em>,
@@ -272,7 +272,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2664189"></a><h2>AUTHOR</h2>
+<a name="id2659755"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html

index d4783be0acde0602f583c94e141796b099a0d728..2e23b83bdc64c3f64558a96376159595be164944 100644 (file)
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.named.html,v 1.99.14.20 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.named.html,v 1.99.14.20.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">named</code>  [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2610590"></a><h2>DESCRIPTION</h2>
+<a name="id2610525"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">named</strong></span>
        is a Domain Name System (DNS) server,
        part of the BIND 9 distribution from ISC.  For more
@@ -65,7 +65,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2610621"></a><h2>OPTIONS</h2>
+<a name="id2610556"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-4</span></dt>
  <dd><p>
@@ -238,7 +238,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2652727"></a><h2>SIGNALS</h2>
+<a name="id2652594"></a><h2>SIGNALS</h2>
  <p>
        In routine operation, signals should not be used to control
        the nameserver; <span><strong class="command">rndc</strong></span> should be used
@@ -259,7 +259,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2652777"></a><h2>CONFIGURATION</h2>
+<a name="id2652644"></a><h2>CONFIGURATION</h2>
  <p>
        The <span><strong class="command">named</strong></span> configuration file is too complex
        to describe in detail here.  A complete description is provided
@@ -276,7 +276,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2652826"></a><h2>FILES</h2>
+<a name="id2652693"></a><h2>FILES</h2>
  <div class="variablelist"><dl>
  <dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
  <dd><p>
@@ -289,7 +289,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2664544"></a><h2>SEE ALSO</h2>
+<a name="id2659836"></a><h2>SEE ALSO</h2>
  <p><em class="citetitle">RFC 1033</em>,
        <em class="citetitle">RFC 1034</em>,
        <em class="citetitle">RFC 1035</em>,
@@ -302,7 +302,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2664614"></a><h2>AUTHOR</h2>
+<a name="id2659907"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html

index d3d7547b81f371f671fd20266eb2566a03a19fa3..6b05a4a5ac41db48376cd912dbcec09ba2f7f553 100644 (file)
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.nsupdate.html,v 1.22.14.21 2010/01/24 01:55:25 tbox Exp $ -->
+<!-- $Id: man.nsupdate.html,v 1.22.14.21.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">nsupdate</code>  [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] |  [<code class="option">-o</code>] |  [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] |  [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [filename]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2611269"></a><h2>DESCRIPTION</h2>
+<a name="id2611204"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">nsupdate</strong></span>
        is used to submit Dynamic DNS Update requests as defined in RFC2136
        to a name server.
@@ -187,7 +187,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2611595"></a><h2>INPUT FORMAT</h2>
+<a name="id2611667"></a><h2>INPUT FORMAT</h2>
  <p><span><strong class="command">nsupdate</strong></span>
        reads input from
        <em class="parameter"><code>filename</code></em>
@@ -451,7 +451,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2666627"></a><h2>EXAMPLES</h2>
+<a name="id2660691"></a><h2>EXAMPLES</h2>
  <p>
        The examples below show how
        <span><strong class="command">nsupdate</strong></span>
@@ -505,7 +505,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2666677"></a><h2>FILES</h2>
+<a name="id2660741"></a><h2>FILES</h2>
  <div class="variablelist"><dl>
  <dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt>
  <dd><p>
@@ -524,7 +524,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2666746"></a><h2>SEE ALSO</h2>
+<a name="id2660810"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">RFC2136</span></span>,
        <span class="citerefentry"><span class="refentrytitle">RFC3007</span></span>,
        <span class="citerefentry"><span class="refentrytitle">RFC2104</span></span>,
@@ -537,7 +537,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2666817"></a><h2>BUGS</h2>
+<a name="id2660881"></a><h2>BUGS</h2>
  <p>
        The TSIG key is redundantly stored in two separate files.
        This is a consequence of nsupdate using the DST library
diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html

index d6240a718e3494170ddcb2f96aa9fb71490cb1af..13ec6d1f5b56fc703c4857061436af507a4ed690 100644 (file)
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.rndc-confgen.html,v 1.102.14.21 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.rndc-confgen.html,v 1.102.14.21.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -48,7 +48,7 @@
  <div class="cmdsynopsis"><p><code class="command">rndc-confgen</code>  [<code class="option">-a</code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2632964"></a><h2>DESCRIPTION</h2>
+<a name="id2633104"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">rndc-confgen</strong></span>
        generates configuration files
        for <span><strong class="command">rndc</strong></span>.  It can be used as a
@@ -64,7 +64,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2633030"></a><h2>OPTIONS</h2>
+<a name="id2633170"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-a</span></dt>
  <dd>
@@ -171,7 +171,7 @@
  </dl></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2633621"></a><h2>EXAMPLES</h2>
+<a name="id2634989"></a><h2>EXAMPLES</h2>
  <p>
        To allow <span><strong class="command">rndc</strong></span> to be used with
        no manual configuration, run
@@ -188,7 +188,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2634974"></a><h2>SEE ALSO</h2>
+<a name="id2635046"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
        <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -196,7 +196,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2635013"></a><h2>AUTHOR</h2>
+<a name="id2635084"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html

index 029eff39666edb29aaf153fce4b264ad70a570f3..cefa45ecd5409582008abcb46516aa70201a4505 100644 (file)
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.rndc.conf.html,v 1.103.14.21 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.rndc.conf.html,v 1.103.14.21.4.1 2010/03/03 22:06:38 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2607086"></a><h2>DESCRIPTION</h2>
+<a name="id2606202"></a><h2>DESCRIPTION</h2>
  <p><code class="filename">rndc.conf</code> is the configuration file
        for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control
        utility.  This file has a similar structure and syntax to
@@ -135,7 +135,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2615587"></a><h2>EXAMPLE</h2>
+<a name="id2613269"></a><h2>EXAMPLE</h2>
  <pre class="programlisting">
        options {
          default-server  localhost;
@@ -209,7 +209,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2621648"></a><h2>NAME SERVER CONFIGURATION</h2>
+<a name="id2628000"></a><h2>NAME SERVER CONFIGURATION</h2>
  <p>
        The name server must be configured to accept rndc connections and
        to recognize the key specified in the <code class="filename">rndc.conf</code>
@@ -219,7 +219,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2621673"></a><h2>SEE ALSO</h2>
+<a name="id2628025"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>,
@@ -227,7 +227,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2621712"></a><h2>AUTHOR</h2>
+<a name="id2628064"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html

index 8500fd3374874344efce1cb8c8e2782f2dcce9c0..59e645b7578c33fa93a486824a920a217b1258b9 100644 (file)
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: man.rndc.html,v 1.101.14.21 2010/01/24 01:55:26 tbox Exp $ -->
+<!-- $Id: man.rndc.html,v 1.101.14.21.4.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -50,7 +50,7 @@
  <div class="cmdsynopsis"><p><code class="command">rndc</code>  [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2612654"></a><h2>DESCRIPTION</h2>
+<a name="id2612248"></a><h2>DESCRIPTION</h2>
  <p><span><strong class="command">rndc</strong></span>
        controls the operation of a name
        server.  It supersedes the <span><strong class="command">ndc</strong></span> utility
@@ -79,7 +79,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2612705"></a><h2>OPTIONS</h2>
+<a name="id2612298"></a><h2>OPTIONS</h2>
  <div class="variablelist"><dl>
  <dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
  <dd><p>
@@ -151,7 +151,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2613339"></a><h2>LIMITATIONS</h2>
+<a name="id2612523"></a><h2>LIMITATIONS</h2>
  <p><span><strong class="command">rndc</strong></span>
        does not yet support all the commands of
        the BIND 8 <span><strong class="command">ndc</strong></span> utility.
@@ -165,7 +165,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2613370"></a><h2>SEE ALSO</h2>
+<a name="id2612554"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
        <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
        <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -175,7 +175,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2615132"></a><h2>AUTHOR</h2>
+<a name="id2613088"></a><h2>AUTHOR</h2>
  <p><span class="corpauthor">Internet Systems Consortium</span>
      </p>
  </div>
diff --git a/lib/dns/api b/lib/dns/api

index 1505071b41bd2430d4bfaea585714c0e73a4c5f9..4fc7eca838cbddb0dfed71ceec32969de7ec9def 100644 (file)
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -1,3 +1,3 @@
-LIBINTERFACE = 55
-LIBREVISION = 1
-LIBAGE = 0
+LIBINTERFACE = 56
+LIBREVISION = 0
+LIBAGE = 1
diff --git a/lib/dns/include/dns/rdataset.h b/lib/dns/include/dns/rdataset.h

index baff146fcade60a118a2e6747ddb57274c6b6aab..8104b50c5f7cd1c1e0feaf567bd2e1f4dc4d5a47 100644 (file)
--- a/lib/dns/include/dns/rdataset.h
+++ b/lib/dns/include/dns/rdataset.h
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: rdataset.h,v 1.65.50.2 2009/01/18 23:47:41 tbox Exp $ */
+/* $Id: rdataset.h,v 1.65.50.2.24.1 2010/03/03 22:06:39 marka Exp $ */
  
  #ifndef DNS_RDATASET_H
  #define DNS_RDATASET_H 1
@@ -110,6 +110,9 @@ typedef struct dns_rdatasetmethods {
                                                  dns_rdataset_t *rdataset,
                                                  dns_rdatasetadditional_t type,
                                                  dns_rdatatype_t qtype);
+       void                    (*settrust)(dns_rdataset_t *rdataset,
+                                           dns_trust_t trust);
+       void                    (*expire)(dns_rdataset_t *rdataset);
  } dns_rdatasetmethods_t;
  
  #define DNS_RDATASET_MAGIC            ISC_MAGIC('D','N','S','R')
@@ -634,6 +637,19 @@ dns_rdataset_putadditional(dns_acache_t *acache,
   *                       information for 'rdataset.'
   */
  
+void
+dns_rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust);
+/*%<
+ * Set the trust of the 'rdataset' to trust in any in the backing database.
+ * The local trust level of 'rdataset' is also set.
+ */
+
+void
+dns_rdataset_expire(dns_rdataset_t *rdataset);
+/*%<
+ * Mark the rdataset to be expired in the backing database.
+ */
+
  ISC_LANG_ENDDECLS
  
  #endif /* DNS_RDATASET_H */
diff --git a/lib/dns/include/dns/resolver.h b/lib/dns/include/dns/resolver.h

index fa837c1de4d769cc2e7648d5e90423be31929713..537bf0fc0f34fff1d2f45d18b169490118fab5af 100644 (file)
--- a/lib/dns/include/dns/resolver.h
+++ b/lib/dns/include/dns/resolver.h
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2001, 2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: resolver.h,v 1.60.56.3 2009/01/29 22:40:35 jinmei Exp $ */
+/* $Id: resolver.h,v 1.60.56.3.24.1 2010/03/03 22:06:39 marka Exp $ */
  
  #ifndef DNS_RESOLVER_H
  #define DNS_RESOLVER_H 1
@@ -508,6 +508,48 @@ dns_resolver_setzeronosoattl(dns_resolver_t *resolver, isc_boolean_t state);
  unsigned int
  dns_resolver_getoptions(dns_resolver_t *resolver);
  
+void
+dns_resolver_addbadcache(dns_resolver_t *resolver, dns_name_t *name,
+                        dns_rdatatype_t type, isc_time_t *expire);
+/*%<
+ * Add a entry to the bad cache for <name,type> that will expire at 'expire'.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ * \li name to be valid.
+ */
+
+isc_boolean_t
+dns_resolver_getbadcache(dns_resolver_t *resolver, dns_name_t *name,
+                        dns_rdatatype_t type, isc_time_t *now);
+/*%<
+ * Check to see if there is a unexpired entry in the bad cache for
+ * <name,type>.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ * \li name to be valid.
+ */
+
+void
+dns_resolver_flushbadcache(dns_resolver_t *resolver, dns_name_t *name);
+/*%<
+ * Flush the bad cache of all entries at 'name' if 'name' is non NULL.
+ * Flush the entire bad cache if 'name' is NULL.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ */
+
+void
+dns_resolver_printbadcache(dns_resolver_t *resolver, FILE *fp);
+/*%
+ * Print out the contents of the bad cache to 'fp'.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ */
+
  ISC_LANG_ENDDECLS
  
  #endif /* DNS_RESOLVER_H */
diff --git a/lib/dns/include/dns/result.h b/lib/dns/include/dns/result.h

index ed29bcd5d3f6000787502c72748b903a4f9052c3..fae43e348ecfd488725dc9a81f5cef70cde5c68e 100644 (file)
--- a/lib/dns/include/dns/result.h
+++ b/lib/dns/include/dns/result.h
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2008  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2008, 2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1998-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: result.h,v 1.116 2008/09/25 04:02:39 tbox Exp $ */
+/* $Id: result.h,v 1.116.228.1 2010/03/03 22:06:39 marka Exp $ */
  
  #ifndef DNS_RESULT_H
  #define DNS_RESULT_H 1
@@ -148,8 +148,10 @@
  #define DNS_R_MXISADDRESS              (ISC_RESULTCLASS_DNS + 102)
  #define DNS_R_DUPLICATE                        (ISC_RESULTCLASS_DNS + 103)
  #define DNS_R_INVALIDNSEC3             (ISC_RESULTCLASS_DNS + 104)
+#define DNS_R_NOTMASTER                        (ISC_RESULTCLASS_DNS + 105)
+#define DNS_R_BROKENCHAIN              (ISC_RESULTCLASS_DNS + 106)
  
-#define DNS_R_NRESULTS                 105     /*%< Number of results */
+#define DNS_R_NRESULTS                 107     /*%< Number of results */
  
  /*
   * DNS wire format rcodes.
diff --git a/lib/dns/include/dns/validator.h b/lib/dns/include/dns/validator.h

index 2555214b14cf2c43369c18b4372bdb1879e3d634..1f9ec74bf55615666e2dea254fac01b45e9e5a4f 100644 (file)
--- a/lib/dns/include/dns/validator.h
+++ b/lib/dns/include/dns/validator.h
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 2000-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: validator.h,v 1.41.48.3 2009/01/18 23:25:17 marka Exp $ */
+/* $Id: validator.h,v 1.41.48.3.24.1 2010/03/03 22:06:39 marka Exp $ */
  
  #ifndef DNS_VALIDATOR_H
  #define DNS_VALIDATOR_H 1
@@ -159,6 +159,8 @@ struct dns_validator {
         isc_boolean_t                   mustbesecure;
         unsigned int                    dlvlabels;
         unsigned int                    depth;
+       unsigned int                    authcount;
+       unsigned int                    authfail;
  };
  
  /*%
diff --git a/lib/dns/ncache.c b/lib/dns/ncache.c

index af0450b525dc594fa353b46a2083be7a6e0997bb..c1d9dc858956ae05062bcc0fe7903c1609daa05e 100644 (file)
--- a/lib/dns/ncache.c
+++ b/lib/dns/ncache.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004, 2005, 2007, 2008  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: ncache.c,v 1.43 2008/09/25 04:02:38 tbox Exp $ */
+/* $Id: ncache.c,v 1.43.336.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -519,6 +519,8 @@ static dns_rdatasetmethods_t rdataset_methods = {
         NULL,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c

index f841ebea5e943d21ae033259175007587fee3429..20bfc4a8e8de2350c629781e787f6c1f1627c73c 100644 (file)
--- a/lib/dns/rbtdb.c
+++ b/lib/dns/rbtdb.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: rbtdb.c,v 1.270.12.16 2009/12/30 08:34:30 jinmei Exp $ */
+/* $Id: rbtdb.c,v 1.270.12.16.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -521,6 +521,8 @@ static void overmem_purge(dns_rbtdb_t *rbtdb, unsigned int locknum_start,
  static isc_result_t resign_insert(dns_rbtdb_t *rbtdb, int idx,
                                   rdatasetheader_t *newheader);
  static void prune_tree(isc_task_t *task, isc_event_t *event);
+static void rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust);
+static void rdataset_expire(dns_rdataset_t *rdataset);
  
  static dns_rdatasetmethods_t rdataset_methods = {
         rdataset_disassociate,
@@ -535,7 +537,9 @@ static dns_rdatasetmethods_t rdataset_methods = {
         rdataset_getclosest,
         rdataset_getadditional,
         rdataset_setadditional,
-       rdataset_putadditional
+       rdataset_putadditional,
+       rdataset_settrust,
+       rdataset_expire
  };
  
  static void rdatasetiter_destroy(dns_rdatasetiter_t **iteratorp);
@@ -7407,6 +7411,34 @@ rdataset_getclosest(dns_rdataset_t *rdataset, dns_name_t *name,
         return (ISC_R_SUCCESS);
  }
  
+static void
+rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust) {
+       dns_rbtdb_t *rbtdb = rdataset->private1;
+       dns_rbtnode_t *rbtnode = rdataset->private2;
+       rdatasetheader_t *header = rdataset->private3;
+
+       header--;
+       NODE_LOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+                 isc_rwlocktype_write);
+       header->trust = rdataset->trust = trust;
+       NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+                 isc_rwlocktype_write);
+}
+
+static void
+rdataset_expire(dns_rdataset_t *rdataset) {
+       dns_rbtdb_t *rbtdb = rdataset->private1;
+       dns_rbtnode_t *rbtnode = rdataset->private2;
+       rdatasetheader_t *header = rdataset->private3;
+
+       header--;
+       NODE_LOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+                 isc_rwlocktype_write);
+       expire_header(rbtdb, header, ISC_FALSE);
+       NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+                 isc_rwlocktype_write);
+}
+
  /*
   * Rdataset Iterator Methods
   */
diff --git a/lib/dns/rdatalist.c b/lib/dns/rdatalist.c

index d6f11ae64d3007d85593e2d55dcb005446c19de3..97cef94b06a12d7732bf355a3c3e59c338ae743d 100644 (file)
--- a/lib/dns/rdatalist.c
+++ b/lib/dns/rdatalist.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004, 2005, 2007, 2008  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2001, 2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: rdatalist.c,v 1.36 2008/09/24 02:46:22 marka Exp $ */
+/* $Id: rdatalist.c,v 1.36.338.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -46,6 +46,8 @@ static dns_rdatasetmethods_t methods = {
         isc__rdatalist_getclosest,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
diff --git a/lib/dns/rdataset.c b/lib/dns/rdataset.c

index 6088a068ad2f3252644f16754ec2db9a1ff39569..4361913377fcab8496b1b20eab0d21969f0e6d56 100644 (file)
--- a/lib/dns/rdataset.c
+++ b/lib/dns/rdataset.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: rdataset.c,v 1.82.50.2 2009/01/18 23:47:40 tbox Exp $ */
+/* $Id: rdataset.c,v 1.82.50.2.24.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -182,6 +182,8 @@ static dns_rdatasetmethods_t question_methods = {
         NULL,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
@@ -732,3 +734,22 @@ dns_rdataset_putadditional(dns_acache_t *acache,
         return (ISC_R_FAILURE);
  }
  
+void
+dns_rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust) {
+       REQUIRE(DNS_RDATASET_VALID(rdataset));
+       REQUIRE(rdataset->methods != NULL);
+
+       if (rdataset->methods->settrust != NULL)
+               (rdataset->methods->settrust)(rdataset, trust);
+       else
+               rdataset->trust = trust;
+}
+
+void
+dns_rdataset_expire(dns_rdataset_t *rdataset) {
+       REQUIRE(DNS_RDATASET_VALID(rdataset));
+       REQUIRE(rdataset->methods != NULL);
+
+       if (rdataset->methods->expire != NULL)
+               (rdataset->methods->expire)(rdataset);
+}
diff --git a/lib/dns/rdataslab.c b/lib/dns/rdataslab.c

index b22868d6f212669f5b3fe53de4f1efa9436c3c51..8d12eb8c8f454d0f2ab9bd61cd40fcf7029247e3 100644 (file)
--- a/lib/dns/rdataslab.c
+++ b/lib/dns/rdataslab.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: rdataslab.c,v 1.48.50.2 2009/01/18 23:47:40 tbox Exp $ */
+/* $Id: rdataslab.c,v 1.48.50.2.24.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -436,6 +436,8 @@ static dns_rdatasetmethods_t rdataset_methods = {
         NULL,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c

index 02e96cda70994f123f2a32bd1a31f051897a2ca3..9dbb764f0be786f53b4c6e198d71e622b0b4faa2 100644 (file)
--- a/lib/dns/resolver.c
+++ b/lib/dns/resolver.c
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: resolver.c,v 1.384.14.20 2010/01/07 23:47:36 tbox Exp $ */
+/* $Id: resolver.c,v 1.384.14.20.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -334,6 +334,18 @@ typedef struct alternate {
         ISC_LINK(struct alternate)      link;
  } alternate_t;
  
+typedef struct dns_badcache dns_badcache_t;
+struct dns_badcache {
+       dns_badcache_t *        next;
+       dns_rdatatype_t         type;
+       isc_time_t              expire;
+       unsigned int            hashval;
+       dns_name_t              name;
+};
+#define DNS_BADCACHE_SIZE 1021
+#define DNS_BADCACHE_TTL(fctx) \
+       (((fctx)->res->lame_ttl > 30 ) ? (fctx)->res->lame_ttl : 30)
+
  struct dns_resolver {
         /* Unlocked. */
         unsigned int                    magic;
@@ -380,6 +392,13 @@ struct dns_resolver {
         isc_boolean_t                   priming;
         unsigned int                    spillat;        /* clients-per-query */
         unsigned int                    nextdisp;
+
+       /* Bad cache. */
+       dns_badcache_t  **              badcache;
+       unsigned int                    badcount;
+       unsigned int                    badhash;
+       unsigned int                    badsweep;
+
         /* Locked by primelock. */
         dns_fetch_t *                   primefetch;
         /* Locked by nlock. */
@@ -410,7 +429,8 @@ static void empty_bucket(dns_resolver_t *res);
  static isc_result_t resquery_send(resquery_t *query);
  static void resquery_response(isc_task_t *task, isc_event_t *event);
  static void resquery_connected(isc_task_t *task, isc_event_t *event);
-static void fctx_try(fetchctx_t *fctx, isc_boolean_t retrying);
+static void fctx_try(fetchctx_t *fctx, isc_boolean_t retrying,
+                    isc_boolean_t badcache);
  static isc_boolean_t fctx_destroy(fetchctx_t *fctx);
  static isc_result_t ncache_adderesult(dns_message_t *message,
                                       dns_db_t *cache, dns_dbnode_t *node,
@@ -1169,7 +1189,7 @@ process_sendevent(resquery_t *query, isc_event_t *event) {
                 if (result != ISC_R_SUCCESS)
                         fctx_done(fctx, result, __LINE__);
                 else
-                       fctx_try(fctx, ISC_TRUE);
+                       fctx_try(fctx, ISC_TRUE, ISC_FALSE);
         }
  }
  
@@ -2071,7 +2091,7 @@ resquery_connected(isc_task_t *task, isc_event_t *event) {
                 if (result != ISC_R_SUCCESS)
                         fctx_done(fctx, result, __LINE__);
                 else
-                       fctx_try(fctx, ISC_TRUE);
+                       fctx_try(fctx, ISC_TRUE, ISC_FALSE);
         }
  }
  
@@ -2133,7 +2153,7 @@ fctx_finddone(isc_task_t *task, isc_event_t *event) {
         dns_adb_destroyfind(&find);
  
         if (want_try)
-               fctx_try(fctx, ISC_TRUE);
+               fctx_try(fctx, ISC_TRUE, ISC_FALSE);
         else if (want_done)
                 fctx_done(fctx, ISC_R_FAILURE, __LINE__);
         else if (bucket_empty)
@@ -2545,7 +2565,7 @@ isstrictsubdomain(dns_name_t *name1, dns_name_t *name2) {
  }
  
  static isc_result_t
-fctx_getaddresses(fetchctx_t *fctx) {
+fctx_getaddresses(fetchctx_t *fctx, isc_boolean_t badcache) {
         dns_rdata_t rdata = DNS_RDATA_INIT;
         isc_result_t result;
         dns_resolver_t *res;
@@ -2764,12 +2784,24 @@ fctx_getaddresses(fetchctx_t *fctx) {
                          */
                         result = DNS_R_WAIT;
                 } else {
+                       isc_time_t expire;
+                       isc_interval_t i;
                         /*
                          * We've lost completely.  We don't know any
                          * addresses, and the ADB has told us it can't get
                          * them.
                          */
                         FCTXTRACE("no addresses");
+                       isc_interval_set(&i, DNS_BADCACHE_TTL(fctx), 0);
+                       result = isc_time_nowplusinterval(&expire, &i);
+                       if (badcache &&
+                           (fctx->type == dns_rdatatype_dnskey ||
+                            fctx->type == dns_rdatatype_dlv ||
+                            fctx->type == dns_rdatatype_ds) &&
+                            result == ISC_R_SUCCESS)
+                               dns_resolver_addbadcache(fctx->res,
+                                                        &fctx->name,
+                                                        fctx->type, &expire);
                         result = ISC_R_FAILURE;
                 }
         } else {
@@ -2992,7 +3024,7 @@ fctx_nextaddress(fetchctx_t *fctx) {
  }
  
  static void
-fctx_try(fetchctx_t *fctx, isc_boolean_t retrying) {
+fctx_try(fetchctx_t *fctx, isc_boolean_t retrying, isc_boolean_t badcache) {
         isc_result_t result;
         dns_adbaddrinfo_t *addrinfo;
  
@@ -3010,7 +3042,7 @@ fctx_try(fetchctx_t *fctx, isc_boolean_t retrying) {
                 fctx_cleanupaltfinds(fctx);
                 fctx_cleanupforwaddrs(fctx);
                 fctx_cleanupaltaddrs(fctx);
-               result = fctx_getaddresses(fctx);
+               result = fctx_getaddresses(fctx, badcache);
                 if (result == DNS_R_WAIT) {
                         /*
                          * Sleep waiting for addresses.
@@ -3175,7 +3207,7 @@ fctx_timeout(isc_task_t *task, isc_event_t *event) {
                         /*
                          * Keep trying.
                          */
-                       fctx_try(fctx, ISC_TRUE);
+                       fctx_try(fctx, ISC_TRUE, ISC_FALSE);
         }
  
         isc_event_free(&event);
@@ -3345,7 +3377,7 @@ fctx_start(isc_task_t *task, isc_event_t *event) {
                 if (result != ISC_R_SUCCESS)
                         fctx_done(fctx, result, __LINE__);
                 else
-                       fctx_try(fctx, ISC_FALSE);
+                       fctx_try(fctx, ISC_FALSE, ISC_FALSE);
         } else if (bucket_empty)
                 empty_bucket(res);
  }
@@ -3923,6 +3955,8 @@ validated(isc_task_t *task, isc_event_t *event) {
  
         LOCK(&fctx->res->buckets[fctx->bucketnum].lock);
  
+       isc_stdtime_get(&now);
+
         /*
          * If chaining, we need to make sure that the right result code is
          * returned, and that the rdatasets are bound.
@@ -3969,35 +4003,80 @@ validated(isc_task_t *task, isc_event_t *event) {
                 inc_stats(fctx->res, dns_resstatscounter_valfail);
                 fctx->valfail++;
                 fctx->vresult = vevent->result;
-               result = ISC_R_NOTFOUND;
-               if (vevent->rdataset != NULL)
-                       result = dns_db_findnode(fctx->cache, vevent->name,
-                                                ISC_TRUE, &node);
-               if (result == ISC_R_SUCCESS)
-                       (void)dns_db_deleterdataset(fctx->cache, node, NULL,
-                                                   vevent->type, 0);
-               if (result == ISC_R_SUCCESS && vevent->sigrdataset != NULL)
-                       (void)dns_db_deleterdataset(fctx->cache, node, NULL,
-                                                   dns_rdatatype_rrsig,
-                                                   vevent->type);
-               if (result == ISC_R_SUCCESS)
-                       dns_db_detachnode(fctx->cache, &node);
-               result = vevent->result;
+               if (fctx->vresult != DNS_R_BROKENCHAIN) {
+                       result = ISC_R_NOTFOUND;
+                       if (vevent->rdataset != NULL)
+                               result = dns_db_findnode(fctx->cache,
+                                                        vevent->name,
+                                                        ISC_TRUE, &node);
+                       if (result == ISC_R_SUCCESS)
+                               (void)dns_db_deleterdataset(fctx->cache, node,
+                                                            NULL,
+                                                           vevent->type, 0);
+                       if (result == ISC_R_SUCCESS &&
+                            vevent->sigrdataset != NULL)
+                               (void)dns_db_deleterdataset(fctx->cache, node,
+                                                           NULL,
+                                                           dns_rdatatype_rrsig,
+                                                           vevent->type);
+                       if (result == ISC_R_SUCCESS)
+                               dns_db_detachnode(fctx->cache, &node);
+               }
+               if (fctx->vresult == DNS_R_BROKENCHAIN && !negative) {
+                       /*
+                        * Cache the data as pending for later validation.
+                        */
+                       result = ISC_R_NOTFOUND;
+                       if (vevent->rdataset != NULL)
+                               result = dns_db_findnode(fctx->cache,
+                                                        vevent->name,
+                                                        ISC_TRUE, &node);
+                       if (result == ISC_R_SUCCESS) {
+                               (void)dns_db_addrdataset(fctx->cache, node,
+                                                        NULL, now,
+                                                        vevent->rdataset, 0,
+                                                        NULL);
+                       }
+                       if (result == ISC_R_SUCCESS &&
+                           vevent->sigrdataset != NULL)
+                               (void)dns_db_addrdataset(fctx->cache, node,
+                                                        NULL, now,
+                                                        vevent->sigrdataset,
+                                                        0, NULL);
+                       if (result == ISC_R_SUCCESS)
+                               dns_db_detachnode(fctx->cache, &node);
+               }
+               result = fctx->vresult;
                 add_bad(fctx, addrinfo, result, badns_validation);
                 isc_event_free(&event);
                 UNLOCK(&fctx->res->buckets[fctx->bucketnum].lock);
                 INSIST(fctx->validator == NULL);
                 fctx->validator = ISC_LIST_HEAD(fctx->validators);
-               if (fctx->validator != NULL) {
+               if (fctx->validator != NULL)
                         dns_validator_send(fctx->validator);
-               } else if (sentresponse)
+               else if (sentresponse)
                         fctx_done(fctx, result, __LINE__); /* Locks bucket. */
-               else
-                       fctx_try(fctx, ISC_TRUE);       /* Locks bucket. */
+               else if (result == DNS_R_BROKENCHAIN) {
+                       isc_result_t tresult;
+                       isc_time_t expire;
+                       isc_interval_t i;
+
+                       isc_interval_set(&i, DNS_BADCACHE_TTL(fctx), 0);
+                       tresult = isc_time_nowplusinterval(&expire, &i);
+                       if (negative &&
+                           (fctx->type == dns_rdatatype_dnskey ||
+                            fctx->type == dns_rdatatype_dlv ||
+                            fctx->type == dns_rdatatype_ds) &&
+                            tresult == ISC_R_SUCCESS)
+                               dns_resolver_addbadcache(fctx->res,
+                                                        &fctx->name,
+                                                        fctx->type, &expire);
+                       fctx_done(fctx, result, __LINE__); /* Locks bucket. */
+               } else
+                       fctx_try(fctx, ISC_TRUE, ISC_TRUE); /* Locks bucket. */
                 return;
         }
  
-       isc_stdtime_get(&now);
  
         if (negative) {
                 dns_rdatatype_t covers;
@@ -5790,7 +5869,7 @@ resume_dslookup(isc_task_t *task, isc_event_t *event) {
                 /*
                  * Try again.
                  */
-               fctx_try(fctx, ISC_TRUE);
+               fctx_try(fctx, ISC_TRUE, ISC_FALSE);
         } else {
                 unsigned int n;
                 dns_rdataset_t *nsrdataset = NULL;
@@ -6629,7 +6708,7 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
                 /*
                  * Try again.
                  */
-               fctx_try(fctx, !get_nameservers);
+               fctx_try(fctx, !get_nameservers, ISC_FALSE);
         } else if (resend) {
                 /*
                  * Resend (probably with changed options).
@@ -6691,6 +6770,27 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
  /***
   *** Resolver Methods
   ***/
+static void
+destroy_badcache(dns_resolver_t *res) {
+       dns_badcache_t *bad, *next;
+       unsigned int i;
+
+       if (res->badcache != NULL) {
+               for (i = 0; i < res->badhash; i++)
+                       for (bad = res->badcache[i]; bad != NULL;
+                            bad = next) {
+                               next = bad->next;
+                               isc_mem_put(res->mctx, bad, sizeof(*bad) +
+                                           bad->name.length);
+                               res->badcount--;
+                       }
+               isc_mem_put(res->mctx, res->badcache,
+                           sizeof(*res->badcache) * res->badhash);
+               res->badcache = NULL;
+               res->badhash = 0;
+               INSIST(res->badcount == 0);
+       }
+}
  
  static void
  destroy(dns_resolver_t *res) {
@@ -6728,6 +6828,7 @@ destroy(dns_resolver_t *res) {
                 isc_mem_put(res->mctx, a, sizeof(*a));
         }
         dns_resolver_reset_algorithms(res);
+       destroy_badcache(res);
         dns_resolver_resetmustbesecure(res);
  #if USE_ALGLOCK
         isc_rwlock_destroy(&res->alglock);
@@ -6851,6 +6952,10 @@ dns_resolver_create(dns_view_t *view,
         ISC_LIST_INIT(res->alternates);
         res->udpsize = RECV_BUFFER_SIZE;
         res->algorithms = NULL;
+       res->badcache = NULL;
+       res->badcount = 0;
+       res->badhash = 0;
+       res->badsweep = 0;
         res->mustbesecure = NULL;
         res->spillatmin = res->spillat = 10;
         res->spillatmax = 100;
@@ -7692,6 +7797,256 @@ dns_resolver_getudpsize(dns_resolver_t *resolver) {
         return (resolver->udpsize);
  }
  
+void
+dns_resolver_flushbadcache(dns_resolver_t *resolver, dns_name_t *name) {
+       unsigned int i;
+       dns_badcache_t *bad, *prev, *next;
+
+       REQUIRE(VALID_RESOLVER(resolver));
+
+       LOCK(&resolver->lock);
+       if (resolver->badcache == NULL)
+               goto unlock;
+
+       if (name != NULL) {
+               isc_time_t now;
+               isc_result_t result;
+               result = isc_time_now(&now);
+               if (result != ISC_R_SUCCESS)
+                       isc_time_settoepoch(&now);
+               i = dns_name_hash(name, ISC_FALSE) % resolver->badhash;
+               prev = NULL;
+               for (bad = resolver->badcache[i]; bad != NULL; bad = next) {
+                       int n;
+                       next = bad->next;
+                       n = isc_time_compare(&bad->expire, &now);
+                       if (n < 0 || dns_name_equal(name, &bad->name)) {
+                               if (prev == NULL)
+                                       resolver->badcache[i] = bad->next;
+                               else
+                                       prev->next = bad->next;
+                               isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                                           bad->name.length);
+                               resolver->badcount--;
+                       } else
+                               prev = bad;
+               }
+       } else
+               destroy_badcache(resolver);
+
+ unlock:
+       UNLOCK(&resolver->lock);
+
+}
+
+static void
+resizehash(dns_resolver_t *resolver, isc_time_t *now, isc_boolean_t grow) {
+       unsigned int newsize;
+       dns_badcache_t **new, *bad, *next;
+       unsigned int i;
+
+       if (grow)
+               newsize = resolver->badhash * 2 + 1;
+       else
+               newsize = (resolver->badhash - 1) / 2;
+
+       new = isc_mem_get(resolver->mctx,
+                         sizeof(*resolver->badcache) * newsize);
+       if (new == NULL)
+               return;
+       memset(new, 0, sizeof(*resolver->badcache) * newsize);
+       for (i = 0; i < resolver->badhash; i++) {
+               for (bad = resolver->badcache[i]; bad != NULL; bad = next) {
+                       next = bad->next;
+                       if (isc_time_compare(&bad->expire, now) < 0) {
+                               isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                                           bad->name.length);
+                               resolver->badcount--;
+                       } else {
+                               bad->next = new[bad->hashval % newsize];
+                               new[bad->hashval % newsize] = bad;
+                       }
+               }
+       }
+       isc_mem_put(resolver->mctx, resolver->badcache,
+                   sizeof(*resolver->badcache) * resolver->badhash);
+       resolver->badhash = newsize;
+       resolver->badcache = new;
+}
+
+void
+dns_resolver_addbadcache(dns_resolver_t *resolver, dns_name_t *name,
+                        dns_rdatatype_t type, isc_time_t *expire)
+{
+       isc_time_t now;
+       isc_result_t result = ISC_R_SUCCESS;
+       unsigned int i, hashval;
+       dns_badcache_t *bad, *prev, *next;
+
+       REQUIRE(VALID_RESOLVER(resolver));
+
+       LOCK(&resolver->lock);
+       if (resolver->badcache == NULL) {
+               resolver->badcache = isc_mem_get(resolver->mctx,
+                                                sizeof(*resolver->badcache) *
+                                                DNS_BADCACHE_SIZE);
+               if (resolver->badcache == NULL) {
+                       result = ISC_R_NOMEMORY;
+                       goto cleanup;
+               }
+               resolver->badhash = DNS_BADCACHE_SIZE;
+               memset(resolver->badcache, 0, sizeof(*resolver->badcache) *
+                      resolver->badhash);
+       }
+
+       result = isc_time_now(&now);
+       if (result != ISC_R_SUCCESS)
+               isc_time_settoepoch(&now);
+       hashval = dns_name_hash(name, ISC_FALSE);
+       i = hashval % resolver->badhash;
+       prev = NULL;
+       for (bad = resolver->badcache[i]; bad != NULL; bad = next) {
+               next = bad->next;
+               if (bad->type == type && dns_name_equal(name, &bad->name))
+                       break;
+               if (isc_time_compare(&bad->expire, &now) < 0) {
+                       if (prev == NULL)
+                               resolver->badcache[i] = bad->next;
+                       else
+                               prev->next = bad->next;
+                       isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                                   bad->name.length);
+                       resolver->badcount--;
+               } else
+                       prev = bad;
+       }
+       if (bad == NULL) {
+               isc_buffer_t buffer;
+               bad = isc_mem_get(resolver->mctx, sizeof(*bad) + name->length);
+               if (bad == NULL) {
+                       result = ISC_R_NOMEMORY;
+                       goto cleanup;
+               }
+               bad->type = type;
+               bad->hashval = hashval;
+               isc_buffer_init(&buffer, bad + 1, name->length);
+               dns_name_init(&bad->name, NULL);
+               dns_name_copy(name, &bad->name, &buffer);
+               bad->next = resolver->badcache[i];
+               resolver->badcache[i] = bad;
+               resolver->badcount++;
+               if (resolver->badcount > resolver->badhash * 8)
+                       resizehash(resolver, &now, ISC_TRUE);
+               if (resolver->badcount < resolver->badhash * 2 &&
+                   resolver->badhash > DNS_BADCACHE_SIZE)
+                       resizehash(resolver, &now, ISC_FALSE);
+       }
+       bad->expire = *expire;
+ cleanup:
+       UNLOCK(&resolver->lock);
+}
+
+isc_boolean_t
+dns_resolver_getbadcache(dns_resolver_t *resolver, dns_name_t *name,
+                        dns_rdatatype_t type, isc_time_t *now)
+{
+       dns_badcache_t *bad, *prev, *next;
+       isc_boolean_t answer = ISC_FALSE;
+       unsigned int i;
+
+       REQUIRE(VALID_RESOLVER(resolver));
+
+       LOCK(&resolver->lock);
+       if (resolver->badcache == NULL)
+               goto unlock;
+
+       i = dns_name_hash(name, ISC_FALSE) % resolver->badhash;
+       prev = NULL;
+       for (bad = resolver->badcache[i]; bad != NULL; bad = next) {
+               next = bad->next;
+               /*
+                * Search the hash list. Clean out expired records as we go.
+                */
+               if (isc_time_compare(&bad->expire, now) < 0) {
+                       if (prev != NULL)
+                               prev->next = bad->next;
+                       else
+                               resolver->badcache[i] = bad->next;
+                       isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                                   bad->name.length);
+                       resolver->badcount--;
+                       continue;
+               }
+               if (bad->type == type && dns_name_equal(name, &bad->name)) {
+                       answer = ISC_TRUE;
+                       break;
+               }
+               prev = bad;
+       }
+
+       /*
+        * Slow sweep to clean out stale records.
+        */
+       i = resolver->badsweep++ % resolver->badhash;
+       bad = resolver->badcache[i];
+       if (bad != NULL && isc_time_compare(&bad->expire, now) < 0) {
+               resolver->badcache[i] = bad->next;
+               isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                           bad->name.length);
+               resolver->badcount--;
+       }
+
+ unlock:
+       UNLOCK(&resolver->lock);
+       return (answer);
+}
+
+void
+dns_resolver_printbadcache(dns_resolver_t *resolver, FILE *fp) {
+       char namebuf[DNS_NAME_FORMATSIZE];
+       char typebuf[DNS_RDATATYPE_FORMATSIZE];
+       dns_badcache_t *bad, *next, *prev;
+       isc_time_t now;
+       unsigned int i;
+       isc_uint64_t t;
+
+       LOCK(&resolver->lock);
+       fprintf(fp, ";\n; Bad cache\n;\n");
+
+       if (resolver->badcache == NULL)
+               goto unlock;
+
+       TIME_NOW(&now);
+       for (i = 0; i < resolver->badhash; i++) {
+               prev = NULL;
+               for (bad = resolver->badcache[i]; bad != NULL; bad = next) {
+                       next = bad->next;
+                       if (isc_time_compare(&bad->expire, &now) < 0) {
+                               if (prev != NULL)
+                                       prev->next = bad->next;
+                               else
+                                       resolver->badcache[i] = bad->next;
+                               isc_mem_put(resolver->mctx, bad, sizeof(*bad) +
+                                           bad->name.length);
+                               resolver->badcount--;
+                               continue;
+                       }
+                       prev = bad;
+                       dns_name_format(&bad->name, namebuf, sizeof(namebuf));
+                       dns_rdatatype_format(bad->type, typebuf,
+                                            sizeof(typebuf));
+                       t = isc_time_microdiff(&bad->expire, &now);
+                       t /= 1000;
+                       fprintf(fp, "; %s/%s [ttl "
+                               "%" ISC_PLATFORM_QUADFORMAT "u]\n",
+                               namebuf, typebuf, t);
+               }
+       }
+
+ unlock:
+       UNLOCK(&resolver->lock);
+}
+
  static void
  free_algorithm(void *node, void *arg) {
         unsigned char *algorithms = node;
diff --git a/lib/dns/result.c b/lib/dns/result.c

index 54c70e0e9088f673d8e7582278b649988808682d..f241ded6ea749ac86c6297e5b448fe1be941a210 100644 (file)
--- a/lib/dns/result.c
+++ b/lib/dns/result.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004, 2005, 2007, 2008  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1998-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: result.c,v 1.125 2008/09/25 04:02:38 tbox Exp $ */
+/* $Id: result.c,v 1.125.124.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -157,6 +157,9 @@ static const char *text[DNS_R_NRESULTS] = {
         "MX is an address",                    /*%< 102 DNS_R_MXISADDRESS */
         "duplicate query",                     /*%< 103 DNS_R_DUPLICATE */
         "invalid NSEC3 owner name (wildcard)", /*%< 104 DNS_R_INVALIDNSEC3 */
+
+       "not master",                          /*%< 105 DNS_R_NOTMASTER */
+       "broken trust chain",                  /*%< 106 DNS_R_BROKENCHAIN */
  };
  
  static const char *rcode_text[DNS_R_NRCODERESULTS] = {
diff --git a/lib/dns/sdb.c b/lib/dns/sdb.c

index ab9ff1967f687d06394c51da8b20ce1aaeba1dc4..6ec620972e56926cd65c114b4c9ffaaacae1b92d 100644 (file)
--- a/lib/dns/sdb.c
+++ b/lib/dns/sdb.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 2000, 2001, 2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: sdb.c,v 1.66.48.3 2009/06/26 06:25:44 marka Exp $ */
+/* $Id: sdb.c,v 1.66.48.3.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -1387,6 +1387,8 @@ static dns_rdatasetmethods_t methods = {
         NULL,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
diff --git a/lib/dns/sdlz.c b/lib/dns/sdlz.c

index 5e5f7e3d7a25f2ceecfb8b15ff05d1091b060c60..f2f778613ae4c373b1ea5c9d0b4f679783fcda2e 100644 (file)
--- a/lib/dns/sdlz.c
+++ b/lib/dns/sdlz.c
@@ -1,5 +1,5 @@
  /*
- * Portions Copyright (C) 2005-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Portions Copyright (C) 2005-2010  Internet Systems Consortium, Inc. ("ISC")
   * Portions Copyright (C) 1999-2001  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
   * USE OR PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: sdlz.c,v 1.18.50.3 2009/06/26 06:25:44 marka Exp $ */
+/* $Id: sdlz.c,v 1.18.50.3.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -1211,6 +1211,8 @@ static dns_rdatasetmethods_t rdataset_methods = {
         NULL,
         NULL,
         NULL,
+       NULL,
+       NULL,
         NULL
  };
  
diff --git a/lib/dns/validator.c b/lib/dns/validator.c

index 1e55a34055b3394f378aacc0cee64df1c08d7219..faaa3f366a9a463e3f3e5af193773de7e684132d 100644 (file)
--- a/lib/dns/validator.c
+++ b/lib/dns/validator.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 2000-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: validator.c,v 1.164.12.11 2009/12/30 06:44:44 each Exp $ */
+/* $Id: validator.c,v 1.164.12.11.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  #include <config.h>
  
@@ -177,9 +177,16 @@ static inline void
  markanswer(dns_validator_t *val) {
         validator_log(val, ISC_LOG_DEBUG(3), "marking as answer");
         if (val->event->rdataset != NULL)
-               val->event->rdataset->trust = dns_trust_answer;
+               dns_rdataset_settrust(val->event->rdataset, dns_trust_answer);
         if (val->event->sigrdataset != NULL)
-               val->event->sigrdataset->trust = dns_trust_answer;
+               dns_rdataset_settrust(val->event->sigrdataset,
+                                     dns_trust_answer);
+}
+
+static inline void
+marksecure(dns_validatorevent_t *event) {
+       dns_rdataset_settrust(event->rdataset, dns_trust_secure);
+       dns_rdataset_settrust(event->sigrdataset, dns_trust_secure);
  }
  
  static void
@@ -425,7 +432,7 @@ fetch_callback_validator(isc_task_t *task, isc_event_t *event) {
                 if (eresult == ISC_R_CANCELED)
                         validator_done(val, eresult);
                 else
-                       validator_done(val, DNS_R_NOVALIDKEY);
+                       validator_done(val, DNS_R_BROKENCHAIN);
         }
         want_destroy = exit_check(val);
         UNLOCK(&val->lock);
@@ -495,7 +502,7 @@ dsfetched(isc_task_t *task, isc_event_t *event) {
                 if (eresult == ISC_R_CANCELED)
                         validator_done(val, eresult);
                 else
-                       validator_done(val, DNS_R_NOVALIDDS);
+                       validator_done(val, DNS_R_BROKENCHAIN);
         }
         want_destroy = exit_check(val);
         UNLOCK(&val->lock);
@@ -635,10 +642,16 @@ keyvalidated(isc_task_t *task, isc_event_t *event) {
                 if (result != DNS_R_WAIT)
                         validator_done(val, result);
         } else {
+               if (eresult != DNS_R_BROKENCHAIN) {
+                       if (dns_rdataset_isassociated(&val->frdataset))
+                               dns_rdataset_expire(&val->frdataset);
+                       if (dns_rdataset_isassociated(&val->fsigrdataset))
+                               dns_rdataset_expire(&val->fsigrdataset);
+               }
                 validator_log(val, ISC_LOG_DEBUG(3),
                               "keyvalidated: got %s",
                               isc_result_totext(eresult));
-               validator_done(val, eresult);
+               validator_done(val, DNS_R_BROKENCHAIN);
         }
         want_destroy = exit_check(val);
         UNLOCK(&val->lock);
@@ -685,10 +698,16 @@ dsvalidated(isc_task_t *task, isc_event_t *event) {
                 if (result != DNS_R_WAIT)
                         validator_done(val, result);
         } else {
+               if (eresult != DNS_R_BROKENCHAIN) {
+                       if (dns_rdataset_isassociated(&val->frdataset))
+                               dns_rdataset_expire(&val->frdataset);
+                       if (dns_rdataset_isassociated(&val->fsigrdataset))
+                               dns_rdataset_expire(&val->fsigrdataset);
+               }
                 validator_log(val, ISC_LOG_DEBUG(3),
                               "dsvalidated: got %s",
                               isc_result_totext(eresult));
-               validator_done(val, eresult);
+               validator_done(val, DNS_R_BROKENCHAIN);
         }
         want_destroy = exit_check(val);
         UNLOCK(&val->lock);
@@ -1199,6 +1218,8 @@ authvalidated(isc_task_t *task, isc_event_t *event) {
                 validator_log(val, ISC_LOG_DEBUG(3),
                               "authvalidated: got %s",
                               isc_result_totext(result));
+               if (result == DNS_R_BROKENCHAIN)
+                       val->authfail++;
                 if (result == ISC_R_CANCELED)
                         validator_done(val, result);
                 else {
@@ -1271,6 +1292,7 @@ authvalidated(isc_task_t *task, isc_event_t *event) {
   * \li DNS_R_NCACHENXRRSET
   * \li DNS_R_NXRRSET
   * \li DNS_R_NXDOMAIN
+ * \li DNS_R_BROKENCHAIN
   */
  static inline isc_result_t
  view_find(dns_validator_t *val, dns_name_t *name, dns_rdatatype_t type) {
@@ -1280,9 +1302,12 @@ view_find(dns_validator_t *val, dns_name_t *name, dns_rdatatype_t type) {
         dns_rdata_t rdata = DNS_RDATA_INIT;
         isc_result_t result;
         unsigned int options;
+       isc_time_t now;
         char buf1[DNS_NAME_FORMATSIZE];
         char buf2[DNS_NAME_FORMATSIZE];
         char buf3[DNS_NAME_FORMATSIZE];
+       char namebuf[DNS_NAME_FORMATSIZE];
+       char typebuf[DNS_RDATATYPE_FORMATSIZE];
  
         if (dns_rdataset_isassociated(&val->frdataset))
                 dns_rdataset_disassociate(&val->frdataset);
@@ -1292,6 +1317,16 @@ view_find(dns_validator_t *val, dns_name_t *name, dns_rdatatype_t type) {
         if (val->view->zonetable == NULL)
                 return (ISC_R_CANCELED);
  
+       if (isc_time_now(&now) == ISC_R_SUCCESS &&
+           dns_resolver_getbadcache(val->view->resolver, name, type, &now)) {
+
+               dns_name_format(name, namebuf, sizeof(namebuf));
+               dns_rdatatype_format(type, typebuf, sizeof(typebuf));
+               validator_log(val, ISC_LOG_INFO, "bad cache hit (%s/%s)",
+                             namebuf, typebuf);
+               return (DNS_R_BROKENCHAIN);
+       }
+
         options = DNS_DBFIND_PENDINGOK;
         if (type == dns_rdatatype_dlv)
                 options |= DNS_DBFIND_COVERINGNSEC;
@@ -1300,6 +1335,7 @@ view_find(dns_validator_t *val, dns_name_t *name, dns_rdatatype_t type) {
         result = dns_view_find(val->view, name, type, 0, options,
                                ISC_FALSE, NULL, NULL, foundname,
                                &val->frdataset, &val->fsigrdataset);
+
         if (result == DNS_R_NXDOMAIN) {
                 if (dns_rdataset_isassociated(&val->frdataset))
                         dns_rdataset_disassociate(&val->frdataset);
@@ -1656,7 +1692,8 @@ get_key(dns_validator_t *val, dns_rdata_rrsig_t *siginfo) {
                 /*
                  * We don't know anything about this key.
                  */
-               result = create_fetch(val, &siginfo->signer, dns_rdatatype_dnskey,
+               result = create_fetch(val, &siginfo->signer,
+                                     dns_rdatatype_dnskey,
                                       fetch_callback_validator, "get_key");
                 if (result != ISC_R_SUCCESS)
                         return (result);
@@ -1671,7 +1708,8 @@ get_key(dns_validator_t *val, dns_rdata_rrsig_t *siginfo) {
                  * This key doesn't exist.
                  */
                 result = DNS_R_CONTINUE;
-       }
+       } else if (result == DNS_R_BROKENCHAIN)
+               return (result);
  
         if (dns_rdataset_isassociated(&val->frdataset) &&
             val->keyset != &val->frdataset)
@@ -1919,8 +1957,7 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
                                       "looking for noqname proof");
                         return (nsecvalidate(val, ISC_FALSE));
                 } else if (result == ISC_R_SUCCESS) {
-                       event->rdataset->trust = dns_trust_secure;
-                       event->sigrdataset->trust = dns_trust_secure;
+                       marksecure(event);
                         validator_log(val, ISC_LOG_DEBUG(3),
                                       "marking as secure");
                         return (result);
@@ -2096,8 +2133,7 @@ dlv_validatezonekey(dns_validator_t *val) {
                               "no RRSIG matching DLV key");
         }
         if (result == ISC_R_SUCCESS) {
-               val->event->rdataset->trust = dns_trust_secure;
-               val->event->sigrdataset->trust = dns_trust_secure;
+               marksecure(val->event);
                 validator_log(val, ISC_LOG_DEBUG(3), "marking as secure");
                 return (result);
         } else if (result == ISC_R_NOMORE && !supported_algorithm) {
@@ -2198,8 +2234,7 @@ validatezonekey(dns_validator_t *val) {
                                 keynode = nextnode;
                         }
                         if (result == ISC_R_SUCCESS) {
-                               event->rdataset->trust = dns_trust_secure;
-                               event->sigrdataset->trust = dns_trust_secure;
+                               marksecure(event);
                                 validator_log(val, ISC_LOG_DEBUG(3),
                                               "signed by trusted key; "
                                               "marking as secure");
@@ -2226,11 +2261,14 @@ validatezonekey(dns_validator_t *val) {
                          */
                         dns_name_format(val->event->name, namebuf,
                                         sizeof(namebuf));
-                       validator_log(val, ISC_LOG_DEBUG(2),
+                       validator_log(val, ISC_LOG_NOTICE,
                                       "unable to find a DNSKEY which verifies "
                                       "the DNSKEY RRset and also matches one "
                                       "of specified trusted-keys for '%s'",
                                       namebuf);
+                       validator_log(val, ISC_LOG_NOTICE,
+                                     "please check the 'trusted-keys' for "
+                                     "'%s' in named.conf.", namebuf);
                         return (DNS_R_NOVALIDKEY);
                 }
  
@@ -2291,7 +2329,8 @@ validatezonekey(dns_validator_t *val) {
                                 dns_rdataset_disassociate(&val->fsigrdataset);
                         validator_log(val, ISC_LOG_DEBUG(2), "no DS record");
                         return (DNS_R_NOVALIDSIG);
-               }
+               } else if (result == DNS_R_BROKENCHAIN)
+                       return (result);
         }
  
         /*
@@ -2440,8 +2479,7 @@ validatezonekey(dns_validator_t *val) {
                               "no RRSIG matching DS key");
         }
         if (result == ISC_R_SUCCESS) {
-               event->rdataset->trust = dns_trust_secure;
-               event->sigrdataset->trust = dns_trust_secure;
+               marksecure(event);
                 validator_log(val, ISC_LOG_DEBUG(3), "marking as secure");
                 return (result);
         } else if (result == ISC_R_NOMORE && !supported_algorithm) {
@@ -2844,6 +2882,7 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) {
                                                   "nsecvalidate");
                         if (result != ISC_R_SUCCESS)
                                 return (result);
+                       val->authcount++;
                         return (DNS_R_WAIT);
  
                 }
@@ -2868,8 +2907,7 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) {
                                       "noqname proof found");
                         validator_log(val, ISC_LOG_DEBUG(3),
                                       "marking as secure");
-                       val->event->rdataset->trust = dns_trust_secure;
-                       val->event->sigrdataset->trust = dns_trust_secure;
+                       marksecure(val->event);
                         return (ISC_R_SUCCESS);
                 } else if ((val->attributes & VALATTR_FOUNDOPTOUT) != 0 &&
                            dns_name_countlabels(dns_fixedname_name(&val->wild))
@@ -2923,6 +2961,8 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) {
         }
                 findnsec3proofs(val);
  
+       if (val->authcount == val->authfail)
+               return (DNS_R_BROKENCHAIN);
         validator_log(val, ISC_LOG_DEBUG(3),
                       "nonexistence proof(s) not found");
         val->attributes |= VALATTR_INSECURITY;
@@ -2954,6 +2994,58 @@ check_ds(dns_validator_t *val, dns_name_t *name, dns_rdataset_t *rdataset) {
         return (ISC_FALSE);
  }
  
+static void
+dlvvalidated(isc_task_t *task, isc_event_t *event) {
+       dns_validatorevent_t *devent;
+       dns_validator_t *val;
+       isc_result_t eresult;
+       isc_boolean_t want_destroy;
+
+       UNUSED(task);
+       INSIST(event->ev_type == DNS_EVENT_VALIDATORDONE);
+
+       devent = (dns_validatorevent_t *)event;
+       val = devent->ev_arg;
+       eresult = devent->result;
+
+       isc_event_free(&event);
+       dns_validator_destroy(&val->subvalidator);
+
+       INSIST(val->event != NULL);
+
+       validator_log(val, ISC_LOG_DEBUG(3), "in dlvvalidated");
+       LOCK(&val->lock);
+       if (CANCELED(val)) {
+               validator_done(val, ISC_R_CANCELED);
+       } else if (eresult == ISC_R_SUCCESS) {
+               validator_log(val, ISC_LOG_DEBUG(3),
+                             "dlvset with trust %d", val->frdataset.trust);
+               dns_rdataset_clone(&val->frdataset, &val->dlv);
+               val->havedlvsep = ISC_TRUE;
+               if (dlv_algorithm_supported(val))
+                       dlv_validator_start(val);
+               else {
+                       markanswer(val);
+                       validator_done(val, ISC_R_SUCCESS);
+               }
+       } else {
+               if (eresult != DNS_R_BROKENCHAIN) {
+                       if (dns_rdataset_isassociated(&val->frdataset))
+                               dns_rdataset_expire(&val->frdataset);
+                       if (dns_rdataset_isassociated(&val->fsigrdataset))
+                               dns_rdataset_expire(&val->fsigrdataset);
+               }
+               validator_log(val, ISC_LOG_DEBUG(3),
+                             "dlvvalidated: got %s",
+                             isc_result_totext(eresult));
+               validator_done(val, DNS_R_BROKENCHAIN);
+       }
+       want_destroy = exit_check(val);
+       UNLOCK(&val->lock);
+       if (want_destroy)
+               destroy(val);
+}
+
  /*%
   * Callback from fetching a DLV record.
   *
@@ -3173,6 +3265,24 @@ finddlvsep(dns_validator_t *val, isc_boolean_t resume) {
                               namebuf);
                 result = view_find(val, dlvname, dns_rdatatype_dlv);
                 if (result == ISC_R_SUCCESS) {
+                       if (DNS_TRUST_PENDING(val->frdataset.trust) &&
+                           dns_rdataset_isassociated(&val->fsigrdataset))
+                       {
+                               dns_fixedname_init(&val->fname);
+                               dns_name_copy(dlvname,
+                                             dns_fixedname_name(&val->fname),
+                                             NULL);
+                               result = create_validator(val,
+                                               dns_fixedname_name(&val->fname),
+                                                         dns_rdatatype_dlv,
+                                                         &val->frdataset,
+                                                         &val->fsigrdataset,
+                                                         dlvvalidated,
+                                                         "finddlvsep");
+                               if (result != ISC_R_SUCCESS)
+                                       return (result);
+                               return (DNS_R_WAIT);
+                       }
                         if (val->frdataset.trust < dns_trust_secure)
                                 return (DNS_R_NOVALIDSIG);
                         val->havedlvsep = ISC_TRUE;
@@ -3223,6 +3333,7 @@ finddlvsep(dns_validator_t *val, isc_boolean_t resume) {
   * \li DNS_R_NOVALIDSIG
   * \li DNS_R_NOVALIDNSEC
   * \li DNS_R_NOTINSECURE
+ * \li DNS_R_BROKENCHAIN
   */
  static isc_result_t
  proveunsecure(dns_validator_t *val, isc_boolean_t have_ds, isc_boolean_t resume)
@@ -3465,7 +3576,8 @@ proveunsecure(dns_validator_t *val, isc_boolean_t have_ds, isc_boolean_t resume)
                         if (result != ISC_R_SUCCESS)
                                 goto out;
                         return (DNS_R_WAIT);
-               }
+               } else if (result == DNS_R_BROKENCHAIN)
+                       return (result);
         }
  
  /*
@@ -3682,6 +3794,8 @@ dns_validator_create(dns_view_t *view, dns_name_t *name, dns_rdatatype_t type,
         val->seensig = ISC_FALSE;
         val->havedlvsep = ISC_FALSE;
         val->depth = 0;
+       val->authcount = 0;
+       val->authfail = 0;
         val->mustbesecure = dns_resolver_getmustbesecure(view->resolver, name);
         dns_rdataset_init(&val->frdataset);
         dns_rdataset_init(&val->fsigrdataset);
diff --git a/lib/dns/view.c b/lib/dns/view.c

index 961268e22c1cbf9eb91b429a0692f43ec22e5e51..3726eefa5fb680b9905f34698b84cb200b556169 100644 (file)
--- a/lib/dns/view.c
+++ b/lib/dns/view.c
@@ -1,5 +1,5 @@
  /*
- * Copyright (C) 2004-2009  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010  Internet Systems Consortium, Inc. ("ISC")
   * Copyright (C) 1999-2003  Internet Software Consortium.
   *
   * Permission to use, copy, modify, and/or distribute this software for any
@@ -15,7 +15,7 @@
   * PERFORMANCE OF THIS SOFTWARE.
   */
  
-/* $Id: view.c,v 1.150.84.3 2009/11/12 23:39:23 marka Exp $ */
+/* $Id: view.c,v 1.150.84.3.10.1 2010/03/03 22:06:39 marka Exp $ */
  
  /*! \file */
  
@@ -1271,10 +1271,11 @@ dns_view_dumpdbtostream(dns_view_t *view, FILE *fp) {
  
         (void)fprintf(fp, ";\n; Cache dump of view '%s'\n;\n", view->name);
         result = dns_master_dumptostream(view->mctx, view->cachedb, NULL,
-                                         &dns_master_style_cache, fp);
+                                        &dns_master_style_cache, fp);
         if (result != ISC_R_SUCCESS)
                 return (result);
         dns_adb_dump(view->adb, fp);
+       dns_resolver_printbadcache(view->resolver, fp);
         return (ISC_R_SUCCESS);
  }
  
@@ -1295,6 +1296,8 @@ dns_view_flushcache(dns_view_t *view) {
         dns_cache_attachdb(view->cache, &view->cachedb);
         if (view->acache != NULL)
                 dns_acache_setdb(view->acache, view->cachedb);
+       if (view->resolver != NULL)
+               dns_resolver_flushbadcache(view->resolver, NULL);
  
         dns_adb_flush(view->adb);
         return (ISC_R_SUCCESS);
@@ -1309,6 +1312,8 @@ dns_view_flushname(dns_view_t *view, dns_name_t *name) {
                 dns_adb_flushname(view->adb, name);
         if (view->cache == NULL)
                 return (ISC_R_SUCCESS);
+       if (view->resolver != NULL)
+               dns_resolver_flushbadcache(view->resolver, name);
         return (dns_cache_flushname(view->cache, name));
  }
  
diff --git a/lib/dns/win32/libdns.def b/lib/dns/win32/libdns.def

index 0331c278e14d2c180b867064f80d8ac124cc91f0..fd3792b18e3535ae38d3571af639fc824c6c966b 100644 (file)
--- a/lib/dns/win32/libdns.def
+++ b/lib/dns/win32/libdns.def
@@ -467,6 +467,7 @@ dns_rdataset_clone
  dns_rdataset_count
  dns_rdataset_current
  dns_rdataset_disassociate
+dns_rdataset_expire
  dns_rdataset_first
  dns_rdataset_getadditional
  dns_rdataset_getclosest
@@ -478,6 +479,7 @@ dns_rdataset_makequestion
  dns_rdataset_next
  dns_rdataset_putadditional
  dns_rdataset_setadditional
+dns_rdataset_settrust
  dns_rdataset_totext
  dns_rdataset_towire
  dns_rdataset_towiresorted
@@ -520,6 +522,7 @@ dns_requestmgr_detach
  dns_requestmgr_shutdown
  dns_requestmgr_whenshutdown
  dns_resolver_addalternate
+dns_resolver_addbadcache
  dns_resolver_algorithm_supported
  dns_resolver_attach
  dns_resolver_cancelfetch
@@ -532,7 +535,9 @@ dns_resolver_disable_algorithm
  dns_resolver_dispatchmgr
  dns_resolver_dispatchv4
  dns_resolver_dispatchv6
+dns_resolver_flushbadcache
  dns_resolver_freeze
+dns_resolver_getbadcache
  dns_resolver_getlamettl
  dns_resolver_getoptions
  dns_resolver_getudpsize
@@ -540,6 +545,7 @@ dns_resolver_getzeronosoattl
  dns_resolver_logfetch
  dns_resolver_nrunning
  dns_resolver_prime
+dns_resolver_printbadcache
  dns_resolver_reset_algorithms
  dns_resolver_resetmustbesecure
  dns_resolver_setclientsperquery
diff --git a/lib/lwres/man/lwres.html b/lib/lwres/man/lwres.html

index c90bcbd575f27636e8f5f72be1190b55fd55d21c..f7f3a9fc7255ffc20c2cc7459a9295cbddb29957 100644 (file)
--- a/lib/lwres/man/lwres.html
+++ b/lib/lwres/man/lwres.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres &#8212; introduction to the lightweight resolver library</p>
@@ -32,7 +32,7 @@
  <div class="funcsynopsis"><pre class="funcsynopsisinfo">#include &lt;lwres/lwres.h&gt;</pre></div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543348"></a><h2>DESCRIPTION</h2>
+<a name="id2543346"></a><h2>DESCRIPTION</h2>
  <p>
        The BIND 9 lightweight resolver library is a simple, name service
        independent stub resolver library.  It provides hostname-to-address
@@ -47,7 +47,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543361"></a><h2>OVERVIEW</h2>
+<a name="id2543358"></a><h2>OVERVIEW</h2>
  <p>
        The lwresd library implements multiple name service APIs.
        The standard
@@ -101,7 +101,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543425"></a><h2>CLIENT-SIDE LOW-LEVEL API CALL FLOW</h2>
+<a name="id2543422"></a><h2>CLIENT-SIDE LOW-LEVEL API CALL FLOW</h2>
  <p>
        When a client program wishes to make an lwres request using the
        native low-level API, it typically performs the following
@@ -149,7 +149,7 @@
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543573"></a><h2>SERVER-SIDE LOW-LEVEL API CALL FLOW</h2>
+<a name="id2543571"></a><h2>SERVER-SIDE LOW-LEVEL API CALL FLOW</h2>
  <p>
        When implementing the server side of the lightweight resolver
        protocol using the lwres library, a sequence of actions like the
@@ -191,7 +191,7 @@
  <p></p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543656"></a><h2>SEE ALSO</h2>
+<a name="id2543654"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_gethostent</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_getipnode</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_buffer.html b/lib/lwres/man/lwres_buffer.html

index b546bcf155d07d606ebc5a63263680c6d5a69e32..042e1586700d30837a1cbd135e423cefbe9dafea 100644 (file)
--- a/lib/lwres/man/lwres_buffer.html
+++ b/lib/lwres/man/lwres_buffer.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_buffer.html,v 1.21.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_buffer.html,v 1.21.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_buffer_init, lwres_buffer_invalidate, lwres_buffer_add, lwres_buffer_subtract, lwres_buffer_clear, lwres_buffer_first, lwres_buffer_forward, lwres_buffer_back, lwres_buffer_getuint8, lwres_buffer_putuint8, lwres_buffer_getuint16, lwres_buffer_putuint16, lwres_buffer_getuint32, lwres_buffer_putuint32, lwres_buffer_putmem, lwres_buffer_getmem &#8212; lightweight resolver buffer management</p>
@@ -262,7 +262,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543892"></a><h2>DESCRIPTION</h2>
+<a name="id2543890"></a><h2>DESCRIPTION</h2>
  <p>
        These functions provide bounds checked access to a region of memory
        where data is being read or written.
diff --git a/lib/lwres/man/lwres_config.html b/lib/lwres/man/lwres_config.html

index fb29b7fbaec6d2ae3611832f3b759b06416ada5c..aad6768e911c9602b9c982e257ef83e5fa190c04 100644 (file)
--- a/lib/lwres/man/lwres_config.html
+++ b/lib/lwres/man/lwres_config.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_config.html,v 1.22.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_config.html,v 1.22.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_conf_init, lwres_conf_clear, lwres_conf_parse, lwres_conf_print, lwres_conf_get &#8212; lightweight resolver configuration</p>
@@ -90,7 +90,7 @@ lwres_conf_t *
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543441"></a><h2>DESCRIPTION</h2>
+<a name="id2543438"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_conf_init()</code>
        creates an empty
        <span class="type">lwres_conf_t</span>
@@ -123,7 +123,7 @@ lwres_conf_t *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543508"></a><h2>RETURN VALUES</h2>
+<a name="id2543506"></a><h2>RETURN VALUES</h2>
  <p><code class="function">lwres_conf_parse()</code>
        returns <span class="errorcode">LWRES_R_SUCCESS</span>
        if it successfully read and parsed
@@ -142,13 +142,13 @@ lwres_conf_t *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543545"></a><h2>SEE ALSO</h2>
+<a name="id2543543"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">stdio</span>(3)</span>,
        <span class="citerefentry"><span class="refentrytitle">resolver</span>(5)</span>.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543571"></a><h2>FILES</h2>
+<a name="id2543569"></a><h2>FILES</h2>
  <p><code class="filename">/etc/resolv.conf</code>
      </p>
  </div>
diff --git a/lib/lwres/man/lwres_context.html b/lib/lwres/man/lwres_context.html

index 22bdcd3c1e40ad0a8c63d2eaf12b86d6056a79a1..3635b9c913a5022f216a4e713543160cf4ab1013 100644 (file)
--- a/lib/lwres/man/lwres_context.html
+++ b/lib/lwres/man/lwres_context.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_context.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_context.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_context_create, lwres_context_destroy, lwres_context_nextserial, lwres_context_initserial, lwres_context_freemem, lwres_context_allocmem, lwres_context_sendrecv &#8212; lightweight resolver context management</p>
@@ -172,7 +172,7 @@ void *
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543531"></a><h2>DESCRIPTION</h2>
+<a name="id2543529"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_context_create()</code>
        creates a <span class="type">lwres_context_t</span> structure for use in
        lightweight resolver operations.  It holds a socket and other
@@ -258,7 +258,7 @@ void *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543719"></a><h2>RETURN VALUES</h2>
+<a name="id2543717"></a><h2>RETURN VALUES</h2>
  <p><code class="function">lwres_context_create()</code>
        returns <span class="errorcode">LWRES_R_NOMEMORY</span> if memory for
        the <span class="type">struct lwres_context</span> could not be allocated,
@@ -283,7 +283,7 @@ void *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543769"></a><h2>SEE ALSO</h2>
+<a name="id2543767"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_conf_init</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">malloc</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_gabn.html b/lib/lwres/man/lwres_gabn.html

index e5cb4d31c0251d0c28e99830ecaf636905838326..2b6ba853a796c3df07e81b8447f2b127a87e1c33 100644 (file)
--- a/lib/lwres/man/lwres_gabn.html
+++ b/lib/lwres/man/lwres_gabn.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_gabn.html,v 1.24.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_gabn.html,v 1.24.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_gabnrequest_render, lwres_gabnresponse_render, lwres_gabnrequest_parse, lwres_gabnresponse_parse, lwres_gabnresponse_free, lwres_gabnrequest_free &#8212; lightweight resolver getaddrbyname message handling</p>
@@ -178,7 +178,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543522"></a><h2>DESCRIPTION</h2>
+<a name="id2543520"></a><h2>DESCRIPTION</h2>
  <p>
        These are low-level routines for creating and parsing
        lightweight resolver name-to-address lookup request and
@@ -278,7 +278,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543667"></a><h2>RETURN VALUES</h2>
+<a name="id2543665"></a><h2>RETURN VALUES</h2>
  <p>
        The getaddrbyname opcode functions
        <code class="function">lwres_gabnrequest_render()</code>,
@@ -316,7 +316,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543733"></a><h2>SEE ALSO</h2>
+<a name="id2543731"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>
      </p>
  </div>
diff --git a/lib/lwres/man/lwres_gai_strerror.html b/lib/lwres/man/lwres_gai_strerror.html

index 994782dbb27367769f9fefb9716212a0197d0544..393efeb79b405f3c95a20189dd272abe6dbdaecc 100644 (file)
--- a/lib/lwres/man/lwres_gai_strerror.html
+++ b/lib/lwres/man/lwres_gai_strerror.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_gai_strerror.html,v 1.24.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_gai_strerror.html,v 1.24.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_gai_strerror &#8212; print suitable error string</p>
@@ -42,7 +42,7 @@ char *
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543361"></a><h2>DESCRIPTION</h2>
+<a name="id2543358"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_gai_strerror()</code>
        returns an error message corresponding to an error code returned by
        <code class="function">getaddrinfo()</code>.
@@ -110,7 +110,7 @@ char *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543576"></a><h2>SEE ALSO</h2>
+<a name="id2543574"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">strerror</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_getaddrinfo</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_getaddrinfo.html b/lib/lwres/man/lwres_getaddrinfo.html

index d3f6e0ba358349fb5725c1b0817dbfe7884419c2..ef5cd405826306e51715624eb5070e11ba13e737 100644 (file)
--- a/lib/lwres/man/lwres_getaddrinfo.html
+++ b/lib/lwres/man/lwres_getaddrinfo.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_getaddrinfo.html,v 1.27.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_getaddrinfo.html,v 1.27.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_getaddrinfo, lwres_freeaddrinfo &#8212; socket address structure to host and service name</p>
@@ -89,7 +89,7 @@ struct  addrinfo {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543412"></a><h2>DESCRIPTION</h2>
+<a name="id2543410"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_getaddrinfo()</code>
        is used to get a list of IP addresses and port numbers for host
        <em class="parameter"><code>hostname</code></em> and service
@@ -283,7 +283,7 @@ struct  addrinfo {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543789"></a><h2>RETURN VALUES</h2>
+<a name="id2543787"></a><h2>RETURN VALUES</h2>
  <p><code class="function">lwres_getaddrinfo()</code>
        returns zero on success or one of the error codes listed in
        <span class="citerefentry"><span class="refentrytitle">gai_strerror</span>(3)</span>
@@ -294,7 +294,7 @@ struct  addrinfo {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543827"></a><h2>SEE ALSO</h2>
+<a name="id2542118"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_getaddrinfo</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_gethostent.html b/lib/lwres/man/lwres_gethostent.html

index 3bccc48ceb84826a6a2cb41287911f95438ba330..7f6a6adad25bddd4643d87ba6197a330edf51077 100644 (file)
--- a/lib/lwres/man/lwres_gethostent.html
+++ b/lib/lwres/man/lwres_gethostent.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_gethostent.html,v 1.24.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_gethostent.html,v 1.24.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_gethostbyname, lwres_gethostbyname2, lwres_gethostbyaddr, lwres_gethostent, lwres_sethostent, lwres_endhostent, lwres_gethostbyname_r, lwres_gethostbyaddr_r, lwres_gethostent_r, lwres_sethostent_r, lwres_endhostent_r &#8212; lightweight resolver get network host entry</p>
@@ -228,7 +228,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543608"></a><h2>DESCRIPTION</h2>
+<a name="id2543606"></a><h2>DESCRIPTION</h2>
  <p>
        These functions provide hostname-to-address and
        address-to-hostname lookups by means of the lightweight resolver.
@@ -366,7 +366,7 @@ struct  hostent {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543959"></a><h2>RETURN VALUES</h2>
+<a name="id2543957"></a><h2>RETURN VALUES</h2>
  <p>
        The functions
        <code class="function">lwres_gethostbyname()</code>,
@@ -430,7 +430,7 @@ struct  hostent {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2544193"></a><h2>SEE ALSO</h2>
+<a name="id2544190"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">gethostent</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_getipnode</span>(3)</span>,
@@ -439,7 +439,7 @@ struct  hostent {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2544227"></a><h2>BUGS</h2>
+<a name="id2544225"></a><h2>BUGS</h2>
  <p><code class="function">lwres_gethostbyname()</code>,
        <code class="function">lwres_gethostbyname2()</code>,
        <code class="function">lwres_gethostbyaddr()</code>
diff --git a/lib/lwres/man/lwres_getipnode.html b/lib/lwres/man/lwres_getipnode.html

index 5d9eb9d831821306e9f1937560e74e7e9a1e2df4..f20240ef91015720cc747befbb76ca34366765bf 100644 (file)
--- a/lib/lwres/man/lwres_getipnode.html
+++ b/lib/lwres/man/lwres_getipnode.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_getipnode.html,v 1.25.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_getipnode.html,v 1.25.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_getipnodebyname, lwres_getipnodebyaddr, lwres_freehostent &#8212; lightweight resolver nodename / address translation API</p>
@@ -98,7 +98,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543431"></a><h2>DESCRIPTION</h2>
+<a name="id2543429"></a><h2>DESCRIPTION</h2>
  <p>
        These functions perform thread safe, protocol independent
        nodename-to-address and address-to-nodename
@@ -217,7 +217,7 @@ struct  hostent {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543689"></a><h2>RETURN VALUES</h2>
+<a name="id2543687"></a><h2>RETURN VALUES</h2>
  <p>
        If an error occurs,
        <code class="function">lwres_getipnodebyname()</code>
@@ -261,7 +261,7 @@ struct  hostent {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543786"></a><h2>SEE ALSO</h2>
+<a name="id2543784"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">RFC2553</span></span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_getnameinfo.html b/lib/lwres/man/lwres_getnameinfo.html

index 200f93feac44f7b8981b0b6afd9679c5c1fa5602..88215ddc2d8635e41e325e0049fc3c2486a1d277 100644 (file)
--- a/lib/lwres/man/lwres_getnameinfo.html
+++ b/lib/lwres/man/lwres_getnameinfo.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_getnameinfo.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_getnameinfo.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_getnameinfo &#8212; lightweight resolver socket address structure to hostname and
@@ -82,7 +82,7 @@ int
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543393"></a><h2>DESCRIPTION</h2>
+<a name="id2543390"></a><h2>DESCRIPTION</h2>
  <p>
         This function is equivalent to the
        <span class="citerefentry"><span class="refentrytitle">getnameinfo</span>(3)</span> function defined in RFC2133.
@@ -149,13 +149,13 @@ int
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543534"></a><h2>RETURN VALUES</h2>
+<a name="id2543532"></a><h2>RETURN VALUES</h2>
  <p><code class="function">lwres_getnameinfo()</code>
        returns 0 on success or a non-zero error code if an error occurs.
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543546"></a><h2>SEE ALSO</h2>
+<a name="id2543544"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">RFC2133</span></span>,
        <span class="citerefentry"><span class="refentrytitle">getservbyport</span>(3)</span>,
        <span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
@@ -165,7 +165,7 @@ int
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543604"></a><h2>BUGS</h2>
+<a name="id2543602"></a><h2>BUGS</h2>
  <p>
        RFC2133 fails to define what the nonzero return values of
        <span class="citerefentry"><span class="refentrytitle">getnameinfo</span>(3)</span>
diff --git a/lib/lwres/man/lwres_getrrsetbyname.html b/lib/lwres/man/lwres_getrrsetbyname.html

index be8c05aa0e99e82590377d689dea54020bf26dc4..8715e5fffbdf13da422eacb51d8fd93929807217 100644 (file)
--- a/lib/lwres/man/lwres_getrrsetbyname.html
+++ b/lib/lwres/man/lwres_getrrsetbyname.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_getrrsetbyname.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_getrrsetbyname.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_getrrsetbyname, lwres_freerrset &#8212; retrieve DNS records</p>
@@ -102,7 +102,7 @@ struct  rrsetinfo {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543414"></a><h2>DESCRIPTION</h2>
+<a name="id2543412"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_getrrsetbyname()</code>
        gets a set of resource records associated with a
        <em class="parameter"><code>hostname</code></em>, <em class="parameter"><code>class</code></em>,
@@ -150,7 +150,7 @@ struct  rrsetinfo {
  <p></p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543526"></a><h2>RETURN VALUES</h2>
+<a name="id2543524"></a><h2>RETURN VALUES</h2>
  <p><code class="function">lwres_getrrsetbyname()</code>
        returns zero on success, and one of the following error codes if
        an error occurred:
@@ -184,7 +184,7 @@ struct  rrsetinfo {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543626"></a><h2>SEE ALSO</h2>
+<a name="id2543624"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>.
      </p>
  </div>
diff --git a/lib/lwres/man/lwres_gnba.html b/lib/lwres/man/lwres_gnba.html

index bd1ce6036f1d622dd55c5f4e3eb8de2055ae6004..476fd1f37492d941ec8acf8db4f0b871241d68be 100644 (file)
--- a/lib/lwres/man/lwres_gnba.html
+++ b/lib/lwres/man/lwres_gnba.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_gnba.html,v 1.24.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_gnba.html,v 1.24.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_gnbarequest_render, lwres_gnbaresponse_render, lwres_gnbarequest_parse, lwres_gnbaresponse_parse, lwres_gnbaresponse_free, lwres_gnbarequest_free &#8212; lightweight resolver getnamebyaddress message handling</p>
@@ -183,7 +183,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543525"></a><h2>DESCRIPTION</h2>
+<a name="id2543523"></a><h2>DESCRIPTION</h2>
  <p>
        These are low-level routines for creating and parsing
        lightweight resolver address-to-name lookup request and
@@ -270,7 +270,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543665"></a><h2>RETURN VALUES</h2>
+<a name="id2543662"></a><h2>RETURN VALUES</h2>
  <p>
        The getnamebyaddr opcode functions
        <code class="function">lwres_gnbarequest_render()</code>,
@@ -308,7 +308,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543731"></a><h2>SEE ALSO</h2>
+<a name="id2543729"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>.
      </p>
  </div>
diff --git a/lib/lwres/man/lwres_hstrerror.html b/lib/lwres/man/lwres_hstrerror.html

index fce6c318eb8e2a7441f3f33b1ac8e6ce2a4fc569..2e77451590b73f54e8af6656b265930eb1735c31 100644 (file)
--- a/lib/lwres/man/lwres_hstrerror.html
+++ b/lib/lwres/man/lwres_hstrerror.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_hstrerror.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_hstrerror.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_herror, lwres_hstrerror &#8212; lightweight resolver error message generation</p>
@@ -50,7 +50,7 @@ const char *
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543379"></a><h2>DESCRIPTION</h2>
+<a name="id2543377"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_herror()</code>
        prints the string <em class="parameter"><code>s</code></em> on
        <span class="type">stderr</span> followed by the string generated by
@@ -84,7 +84,7 @@ const char *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543497"></a><h2>RETURN VALUES</h2>
+<a name="id2543495"></a><h2>RETURN VALUES</h2>
  <p>
        The string <span class="errorname">Unknown resolver error</span> is returned by
        <code class="function">lwres_hstrerror()</code>
@@ -94,7 +94,7 @@ const char *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543517"></a><h2>SEE ALSO</h2>
+<a name="id2543515"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">herror</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_hstrerror</span>(3)</span>.
diff --git a/lib/lwres/man/lwres_inetntop.html b/lib/lwres/man/lwres_inetntop.html

index 37bd95fdbc466e167df02624f1b0cbea62d11f7d..4358c1b31cc3058d2c848080bb373b72191ec832 100644 (file)
--- a/lib/lwres/man/lwres_inetntop.html
+++ b/lib/lwres/man/lwres_inetntop.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_inetntop.html,v 1.23.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_inetntop.html,v 1.23.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_net_ntop &#8212; lightweight resolver IP address presentation</p>
@@ -62,7 +62,7 @@ const char *
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543379"></a><h2>DESCRIPTION</h2>
+<a name="id2543377"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_net_ntop()</code>
        converts an IP address of protocol family
        <em class="parameter"><code>af</code></em> &#8212; IPv4 or IPv6 &#8212; at
@@ -80,7 +80,7 @@ const char *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543411"></a><h2>RETURN VALUES</h2>
+<a name="id2543409"></a><h2>RETURN VALUES</h2>
  <p>
        If successful, the function returns <em class="parameter"><code>dst</code></em>:
        a pointer to a string containing the presentation format of the
@@ -93,7 +93,7 @@ const char *
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543444"></a><h2>SEE ALSO</h2>
+<a name="id2543442"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">RFC1884</span></span>,
        <span class="citerefentry"><span class="refentrytitle">inet_ntop</span>(3)</span>,
        <span class="citerefentry"><span class="refentrytitle">errno</span>(3)</span>.
diff --git a/lib/lwres/man/lwres_noop.html b/lib/lwres/man/lwres_noop.html

index c8fad5d3703301e1609890b8a8a2ee2f772523ea..62aa19a463ed92257457c289d34ecc76958ae749 100644 (file)
--- a/lib/lwres/man/lwres_noop.html
+++ b/lib/lwres/man/lwres_noop.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_noop.html,v 1.25.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_noop.html,v 1.25.418.1.10.1 2010/03/03 22:06:39 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_nooprequest_render, lwres_noopresponse_render, lwres_nooprequest_parse, lwres_noopresponse_parse, lwres_noopresponse_free, lwres_nooprequest_free &#8212; lightweight resolver no-op message handling</p>
@@ -179,7 +179,7 @@ void
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543522"></a><h2>DESCRIPTION</h2>
+<a name="id2543520"></a><h2>DESCRIPTION</h2>
  <p>
        These are low-level routines for creating and parsing
        lightweight resolver no-op request and response messages.
@@ -270,7 +270,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543672"></a><h2>RETURN VALUES</h2>
+<a name="id2543670"></a><h2>RETURN VALUES</h2>
  <p>
        The no-op opcode functions
        <code class="function">lwres_nooprequest_render()</code>,
@@ -309,7 +309,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543738"></a><h2>SEE ALSO</h2>
+<a name="id2543736"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>
      </p>
  </div>
diff --git a/lib/lwres/man/lwres_packet.html b/lib/lwres/man/lwres_packet.html

index 17aed04dcd2a30d37585478325490acea00970f7..7f2f67b780094c66786533f39fa272cf4be5465c 100644 (file)
--- a/lib/lwres/man/lwres_packet.html
+++ b/lib/lwres/man/lwres_packet.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_packet.html,v 1.26.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_packet.html,v 1.26.418.1.10.1 2010/03/03 22:06:40 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_lwpacket_renderheader, lwres_lwpacket_parseheader &#8212; lightweight resolver packet handling functions</p>
@@ -66,7 +66,7 @@ lwres_result_t
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543389"></a><h2>DESCRIPTION</h2>
+<a name="id2543387"></a><h2>DESCRIPTION</h2>
  <p>
        These functions rely on a
        <span class="type">struct lwres_lwpacket</span>
@@ -219,7 +219,7 @@ struct lwres_lwpacket {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543706"></a><h2>RETURN VALUES</h2>
+<a name="id2543704"></a><h2>RETURN VALUES</h2>
  <p>
        Successful calls to
        <code class="function">lwres_lwpacket_renderheader()</code> and
diff --git a/lib/lwres/man/lwres_resutil.html b/lib/lwres/man/lwres_resutil.html

index 3cde25b7917bd3797897d028e2b56dfb4ebdbba2..e649965419854b2c825a6bab5b48220c3d90a2db 100644 (file)
--- a/lib/lwres/man/lwres_resutil.html
+++ b/lib/lwres/man/lwres_resutil.html
@@ -14,7 +14,7 @@
   - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
   - PERFORMANCE OF THIS SOFTWARE.
  -->
-<!-- $Id: lwres_resutil.html,v 1.25.418.1 2009/07/11 01:55:21 tbox Exp $ -->
+<!-- $Id: lwres_resutil.html,v 1.25.418.1.10.1 2010/03/03 22:06:40 marka Exp $ -->
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
@@ -22,7 +22,7 @@
  <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  </head>
  <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476275"></a><div class="titlepage"></div>
+<a name="id2476267"></a><div class="titlepage"></div>
  <div class="refnamediv">
  <h2>Name</h2>
  <p>lwres_string_parse, lwres_addr_parse, lwres_getaddrsbyname, lwres_getnamebyaddr &#8212; lightweight resolver utility functions</p>
@@ -134,7 +134,7 @@ lwres_result_t
  </div>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543466"></a><h2>DESCRIPTION</h2>
+<a name="id2543464"></a><h2>DESCRIPTION</h2>
  <p><code class="function">lwres_string_parse()</code>
        retrieves a DNS-encoded string starting the current pointer of
        lightweight resolver buffer <em class="parameter"><code>b</code></em>: i.e.
@@ -210,7 +210,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543605"></a><h2>RETURN VALUES</h2>
+<a name="id2543603"></a><h2>RETURN VALUES</h2>
  <p>
        Successful calls to
        <code class="function">lwres_string_parse()</code>
@@ -248,7 +248,7 @@ typedef struct {
      </p>
  </div>
  <div class="refsect1" lang="en">
-<a name="id2543676"></a><h2>SEE ALSO</h2>
+<a name="id2543674"></a><h2>SEE ALSO</h2>
  <p><span class="citerefentry"><span class="refentrytitle">lwres_buffer</span>(3)</span>,
  
        <span class="citerefentry"><span class="refentrytitle">lwres_gabn</span>(3)</span>.
diff --git a/util/copyrights b/util/copyrights

index 1e62a655e19de1350d50f040147ff128925556d2..076455a6f557cec81afc9e78c74ce0f85037e427 100644 (file)
--- a/util/copyrights
+++ b/util/copyrights
@@ -158,7 +158,7 @@
  ./bin/named/named.html                         HTML    DOCBOOK
  ./bin/named/notify.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007
  ./bin/named/query.c                            C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
-./bin/named/server.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./bin/named/server.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./bin/named/sortlist.c                         C       2000,2001,2004,2005,2006,2007
  ./bin/named/statschannel.c                     C       2008,2009,2010
  ./bin/named/tkeyconf.c                         C       1999,2000,2001,2004,2005,2006,2007
@@ -1678,13 +1678,13 @@
  ./lib/dns/include/dns/rdata.h                  C       1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
  ./lib/dns/include/dns/rdataclass.h             C       1998,1999,2000,2001,2004,2005,2006,2007
  ./lib/dns/include/dns/rdatalist.h              C       1999,2000,2001,2004,2005,2006,2007,2008
-./lib/dns/include/dns/rdataset.h               C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/include/dns/rdataset.h               C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/include/dns/rdatasetiter.h           C       1999,2000,2001,2004,2005,2006,2007
  ./lib/dns/include/dns/rdataslab.h              C       1999,2000,2001,2002,2004,2005,2006,2007,2008
  ./lib/dns/include/dns/rdatatype.h              C       1998,1999,2000,2001,2004,2005,2006,2007,2008
  ./lib/dns/include/dns/request.h                        C       2000,2001,2002,2004,2005,2006,2007,2009
-./lib/dns/include/dns/resolver.h               C       1999,2000,2001,2003,2004,2005,2006,2007,2008,2009
-./lib/dns/include/dns/result.h                 C       1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008
+./lib/dns/include/dns/resolver.h               C       1999,2000,2001,2003,2004,2005,2006,2007,2008,2009,2010
+./lib/dns/include/dns/result.h                 C       1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2010
  ./lib/dns/include/dns/rootns.h                 C       1999,2000,2001,2004,2005,2006,2007
  ./lib/dns/include/dns/sdb.h                    C       2000,2001,2004,2005,2006,2007,2009
  ./lib/dns/include/dns/sdlz.h                   C.PORTION       1999,2000,2001,2005,2006,2007,2009
@@ -1700,7 +1700,7 @@
  ./lib/dns/include/dns/tsig.h                   C       1999,2000,2001,2002,2004,2005,2006,2007
  ./lib/dns/include/dns/ttl.h                    C       1999,2000,2001,2004,2005,2006,2007
  ./lib/dns/include/dns/types.h                  C       1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
-./lib/dns/include/dns/validator.h              C       2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/include/dns/validator.h              C       2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/include/dns/version.h                        C       2001,2004,2005,2006,2007
  ./lib/dns/include/dns/view.h                   C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
  ./lib/dns/include/dns/xfrin.h                  C       1999,2000,2001,2003,2004,2005,2006,2007,2009
@@ -1724,7 +1724,7 @@
  ./lib/dns/masterdump.c                         C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
  ./lib/dns/message.c                            C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
  ./lib/dns/name.c                               C       1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008
-./lib/dns/ncache.c                             C       1999,2000,2001,2002,2003,2004,2005,2007,2008
+./lib/dns/ncache.c                             C       1999,2000,2001,2002,2003,2004,2005,2007,2008,2010
  ./lib/dns/nsec.c                               C       1999,2000,2001,2003,2004,2005,2007,2008,2009
  ./lib/dns/nsec3.c                              C       2006,2008,2009
  ./lib/dns/openssl_link.c                       C.NAI   1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
@@ -1735,7 +1735,7 @@
  ./lib/dns/peer.c                               C       2000,2001,2003,2004,2005,2006,2007,2008
  ./lib/dns/portlist.c                           C       2003,2004,2005,2006,2007
  ./lib/dns/rbt.c                                        C       1999,2000,2001,2002,2003,2004,2005,2007,2008,2009
-./lib/dns/rbtdb.c                              C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/rbtdb.c                              C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/rbtdb.h                              C       1999,2000,2001,2004,2005,2007
  ./lib/dns/rbtdb64.c                            C       1999,2000,2001,2004,2005,2007
  ./lib/dns/rbtdb64.h                            C       1999,2000,2001,2004,2005,2007
@@ -1853,17 +1853,17 @@
  ./lib/dns/rdata/in_1/wks_11.h                  C       1999,2000,2001,2004,2007
  ./lib/dns/rdata/rdatastructpre.h               C       1999,2000,2001,2004,2007
  ./lib/dns/rdata/rdatastructsuf.h               C       1999,2000,2001,2004,2007
-./lib/dns/rdatalist.c                          C       1999,2000,2001,2003,2004,2005,2007,2008
+./lib/dns/rdatalist.c                          C       1999,2000,2001,2003,2004,2005,2007,2008,2010
  ./lib/dns/rdatalist_p.h                                C       2000,2001,2004,2005,2007,2008
-./lib/dns/rdataset.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/rdataset.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/rdatasetiter.c                       C       1999,2000,2001,2004,2005,2007
-./lib/dns/rdataslab.c                          C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/rdataslab.c                          C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/request.c                            C       2000,2001,2002,2004,2005,2006,2007,2008,2009
  ./lib/dns/resolver.c                           C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
-./lib/dns/result.c                             C       1998,1999,2000,2001,2002,2003,2004,2005,2007,2008
+./lib/dns/result.c                             C       1998,1999,2000,2001,2002,2003,2004,2005,2007,2008,2010
  ./lib/dns/rootns.c                             C       1999,2000,2001,2002,2004,2005,2007,2008
-./lib/dns/sdb.c                                        C       2000,2001,2003,2004,2005,2006,2007,2008,2009
-./lib/dns/sdlz.c                               C.PORTION       1999,2000,2001,2005,2006,2007,2008,2009
+./lib/dns/sdb.c                                        C       2000,2001,2003,2004,2005,2006,2007,2008,2009,2010
+./lib/dns/sdlz.c                               C.PORTION       1999,2000,2001,2005,2006,2007,2008,2009,2010
  ./lib/dns/soa.c                                        C       2000,2001,2004,2005,2007
  ./lib/dns/spnego.asn1                          X       2006
  ./lib/dns/spnego.c                             C       2006,2007,2008,2009
@@ -1878,9 +1878,9 @@
  ./lib/dns/tkey.c                               C       1999,2000,2001,2003,2004,2005,2006,2007,2008
  ./lib/dns/tsig.c                               C       1999,2000,2001,2002,2004,2005,2006,2007,2008
  ./lib/dns/ttl.c                                        C       1999,2000,2001,2004,2005,2007
-./lib/dns/validator.c                          C       2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/validator.c                          C       2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/version.c                            C       1998,1999,2000,2001,2004,2005,2007
-./lib/dns/view.c                               C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009
+./lib/dns/view.c                               C       1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010
  ./lib/dns/win32/DLLMain.c                      C       2001,2004,2007
  ./lib/dns/win32/gen.dsp                                X       2001
  ./lib/dns/win32/gen.dsw                                X       2001
diff --git a/version b/version

index 5559b5cc6cc67ef1b43f048bb2d7d5af8e99e313..dd70948fd73b230302477dd7220a14c956d791be 100644 (file)
--- a/version
+++ b/version
@@ -1,10 +1,10 @@
-# $Id: version,v 1.43.12.8 2010/02/18 03:34:50 marka Exp $
+# $Id: version,v 1.43.12.8.4.1 2010/03/03 22:06:36 marka Exp $
  # 
  # This file must follow /bin/sh rules.  It is imported directly via
  # configure.
  #
  MAJORVER=9
  MINORVER=6
-PATCHVER=2
-RELEASETYPE= 
+PATCHVER=
+RELEASETYPE=-ESV
  RELEASEVER=
author	Mark Andrews <marka@isc.org>
	Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)
committer	Mark Andrews <marka@isc.org>
	Wed, 3 Mar 2010 22:06:40 +0000 (22:06 +0000)
CHANGES		patch \| blob \| blame \| history
README		patch \| blob \| blame \| history
bin/named/server.c		patch \| blob \| blame \| history
doc/arm/Bv9ARM-book.xml		patch \| blob \| blame \| history
doc/arm/Bv9ARM.ch06.html		patch \| blob \| blame \| history
doc/arm/Bv9ARM.ch07.html		patch \| blob \| blame \| history
doc/arm/Bv9ARM.ch08.html		patch \| blob \| blame \| history
doc/arm/Bv9ARM.ch09.html		patch \| blob \| blame \| history
doc/arm/Bv9ARM.html		patch \| blob \| blame \| history
doc/arm/man.dig.html		patch \| blob \| blame \| history
doc/arm/man.dnssec-dsfromkey.html		patch \| blob \| blame \| history
doc/arm/man.dnssec-keyfromlabel.html		patch \| blob \| blame \| history
doc/arm/man.dnssec-keygen.html		patch \| blob \| blame \| history
doc/arm/man.dnssec-signzone.html		patch \| blob \| blame \| history
doc/arm/man.host.html		patch \| blob \| blame \| history
doc/arm/man.named-checkconf.html		patch \| blob \| blame \| history
doc/arm/man.named-checkzone.html		patch \| blob \| blame \| history
doc/arm/man.named.html		patch \| blob \| blame \| history
doc/arm/man.nsupdate.html		patch \| blob \| blame \| history
doc/arm/man.rndc-confgen.html		patch \| blob \| blame \| history
doc/arm/man.rndc.conf.html		patch \| blob \| blame \| history
doc/arm/man.rndc.html		patch \| blob \| blame \| history
lib/dns/api		patch \| blob \| blame \| history
lib/dns/include/dns/rdataset.h		patch \| blob \| blame \| history
lib/dns/include/dns/resolver.h		patch \| blob \| blame \| history
lib/dns/include/dns/result.h		patch \| blob \| blame \| history
lib/dns/include/dns/validator.h		patch \| blob \| blame \| history
lib/dns/ncache.c		patch \| blob \| blame \| history
lib/dns/rbtdb.c		patch \| blob \| blame \| history
lib/dns/rdatalist.c		patch \| blob \| blame \| history
lib/dns/rdataset.c		patch \| blob \| blame \| history
lib/dns/rdataslab.c		patch \| blob \| blame \| history
lib/dns/resolver.c		patch \| blob \| blame \| history
lib/dns/result.c		patch \| blob \| blame \| history
lib/dns/sdb.c		patch \| blob \| blame \| history
lib/dns/sdlz.c		patch \| blob \| blame \| history
lib/dns/validator.c		patch \| blob \| blame \| history
lib/dns/view.c		patch \| blob \| blame \| history
lib/dns/win32/libdns.def		patch \| blob \| blame \| history
lib/lwres/man/lwres.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_buffer.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_config.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_context.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_gabn.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_gai_strerror.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_getaddrinfo.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_gethostent.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_getipnode.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_getnameinfo.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_getrrsetbyname.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_gnba.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_hstrerror.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_inetntop.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_noop.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_packet.html		patch \| blob \| blame \| history
lib/lwres/man/lwres_resutil.html		patch \| blob \| blame \| history
util/copyrights		patch \| blob \| blame \| history
version		patch \| blob \| blame \| history