From: Ondřej Surý <ondrej@isc.org>
Date: Tue, 14 Sep 2021 13:19:01 +0000 (+0200)
Subject: Add CHANGES and release notes for [GL #2888]
X-Git-Tag: v9.17.19~42^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bba5e98734c49bdd2c570517f2dc2f0f61c65221;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for [GL #2888]
---

diff --git a/CHANGES b/CHANGES
index f5cf53ffec9..ce8f8429778 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5715.	[func]		Add a check when the *-source(-v6) clashes with the
+			global listening port. Such a configuration was already
+			forbidden, but it failed silently. [GL #2888]
+
 5714.	[bug]		Remove the "adjust interface" mechanism that
 			set up a listener on interfaces where the *-source(-v6)
 			address and port were the same as the listening
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index efa5c2eb405..ccdfd44b56d 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -43,6 +43,18 @@ Feature Changes
 - SHA-1 CDS records are no longer used by ``dnssec-cds`` to make DS
   records. Thanks to Tony Finch. :gl:`!2946`
 
+- ``named`` and ``named-checkconf`` now issue a warning when there is a single
+  configured port in the ``query-source``, ``transfer-source``,
+  ``notify-source``, and ``parental-source``, and/or in their respective IPv6 counterparts.
+  :gl:`#2888`
+
+- ``named`` and ``named-checkconf`` now return an error when the single configured
+  port in the ``query-source``, ``transfer-source``, ``notify-source``,
+  ``parental-source``, and/or their respective IPv6 counterparts clashes with the
+  global listening port. This configuration is no longer supported as of BIND
+  9.16.0 but no error was reported, although sending UDP messages
+  (such as notifies) would fail. :gl:`#2888`
+
 Bug Fixes
 ~~~~~~~~~