prep 9.11.4rc2

diff --git a/CHANGES b/CHANGES
index f9601af5214c000e8b8f1ab1b1cbe50a82b23a19..770c01a6f0aa2d10370cb6471fc1182ca81da4cb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+       --- 9.11.4rc2 released ---
+
 4984.  [bug]           Improve handling of very large incremental
                        zone transfers to prevent journal corruption. [GL #339]
 

diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5
index 7e3514dc3ffda23298ab61114c629600b10f7ce7..cb21f43f770bb07d7cb4f1bec0e2b25ab7645608 100644 (file)
--- a/bin/named/named.conf.5
+++ b/bin/named/named.conf.5
@@ -10,12 +10,12 @@
 .\"     Title: named.conf
 .\"    Author: 
 .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
-.\"      Date: 2017-08-15
+.\"      Date: 2018-06-21
 .\"    Manual: BIND9
 .\"    Source: ISC
 .\"  Language: English
 .\"
-.TH "NAMED\&.CONF" "5" "2017\-08\-15" "ISC" "BIND9"
+.TH "NAMED\&.CONF" "5" "2018\-06\-21" "ISC" "BIND9"
 .\" -----------------------------------------------------------------
 .\" * Define some portability stuff
 .\" -----------------------------------------------------------------
@@ -222,6 +222,7 @@ options {
            ] [ dscp \fIinteger\fR ];
        alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR |
            * ) ] [ dscp \fIinteger\fR ];
+       answer\-cookie \fIboolean\fR;
        attach\-cache \fIstring\fR;
        auth\-nxdomain \fIboolean\fR; // default changed
        auto\-dnssec ( allow | maintain | off );
@@ -425,6 +426,7 @@ options {
            min\-ns\-dots \fIinteger\fR ] [ nsip\-wait\-recurse \fIboolean\fR ] [
            qname\-wait\-recurse \fIboolean\fR ] [ recursive\-only \fIboolean\fR ];
        root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
+       root\-key\-sentinel \fIboolean\fR;
        rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
            \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
        secroots\-file \fIquoted_string\fR;
@@ -740,6 +742,7 @@ view \fIstring\fR [ \fIclass\fR ] {
            min\-ns\-dots \fIinteger\fR ] [ nsip\-wait\-recurse \fIboolean\fR ] [
            qname\-wait\-recurse \fIboolean\fR ] [ recursive\-only \fIboolean\fR ];
        root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
+       root\-key\-sentinel \fIboolean\fR;
        rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
            \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
        send\-cookie \fIboolean\fR;

diff --git a/bin/named/named.conf.docbook b/bin/named/named.conf.docbook
index cb84acf1ad28d28b0a0d3530c66c3b9b11225602..f8c94eb3d84e39b9252395fee2514a594fd37973 100644 (file)
--- a/bin/named/named.conf.docbook
+++ b/bin/named/named.conf.docbook
@@ -13,7 +13,7 @@
 
 <refentry xmlns:db="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
   <info>
-    <date>2017-08-15</date>
+    <date>2018-06-21</date>
   </info>
   <refentryinfo>
     <corpname>ISC</corpname>
@@ -210,6 +210,7 @@ options {
            ] [ dscp <replaceable>integer</replaceable> ];
        alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
            * ) ] [ dscp <replaceable>integer</replaceable> ];
+       answer-cookie <replaceable>boolean</replaceable>;
        attach-cache <replaceable>string</replaceable>;
        auth-nxdomain <replaceable>boolean</replaceable>; // default changed
        auto-dnssec ( allow | maintain | off );
@@ -413,6 +414,7 @@ options {
            min-ns-dots <replaceable>integer</replaceable> ] [ nsip-wait-recurse <replaceable>boolean</replaceable> ] [
            qname-wait-recurse <replaceable>boolean</replaceable> ] [ recursive-only <replaceable>boolean</replaceable> ];
        root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       root-key-sentinel <replaceable>boolean</replaceable>;
        rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        secroots-file <replaceable>quoted_string</replaceable>;
@@ -712,6 +714,7 @@ view <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
            min-ns-dots <replaceable>integer</replaceable> ] [ nsip-wait-recurse <replaceable>boolean</replaceable> ] [
            qname-wait-recurse <replaceable>boolean</replaceable> ] [ recursive-only <replaceable>boolean</replaceable> ];
        root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       root-key-sentinel <replaceable>boolean</replaceable>;
        rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        send-cookie <replaceable>boolean</replaceable>;

diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html
index 97173e57a18488421e23e66a3fe6ab85320bfe80..cfcfe69b83dcec49bce6ca88301dcc28221cceb3 100644 (file)
--- a/bin/named/named.conf.html
+++ b/bin/named/named.conf.html
@@ -199,6 +199,7 @@ options
            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -402,6 +403,7 @@ options
            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -705,6 +707,7 @@ view
            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>

diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index 98405e60fd241f0304307d236ae4c762712471b5..dda187880edf7116d980836f45539452c4e84616 100644 (file)
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -616,6 +616,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html
index 9edf8c343f433ea98c087b6211b27b3160185c9d..a3516476fb6577e3ead2a19670a90dd3663bb2ac 100644 (file)
--- a/doc/arm/Bv9ARM.ch02.html
+++ b/doc/arm/Bv9ARM.ch02.html
@@ -151,6 +151,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html
index 5170abc996dbd0f8251cd81842f6e9cb2c8ac74d..c9d2f069ee65cce0b6eb06db4c89615480b49901 100644 (file)
--- a/doc/arm/Bv9ARM.ch03.html
+++ b/doc/arm/Bv9ARM.ch03.html
@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html
index 2710b74077d7a07b5f36e931eed5653b9b974ec1..7720e898924171ed4332e43f719e06ce395f2fa1 100644 (file)
--- a/doc/arm/Bv9ARM.ch04.html
+++ b/doc/arm/Bv9ARM.ch04.html
@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html
index 0c941ba73dce47c5760daec8c6fe7063eb3061f6..e67579dca7fee8dae525d46fbed883ea8cf1ddcb 100644 (file)
--- a/doc/arm/Bv9ARM.ch05.html
+++ b/doc/arm/Bv9ARM.ch05.html
@@ -142,6 +142,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index 821e649312f0449803240b8e0113eaadc811b007..42402aeadd9b1a6a030b83d952a1cc331faab438 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -2446,6 +2446,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
            ] [ dscp <em class="replaceable"><code>integer</code></em> ];
        <span class="command"><strong>alt-transfer-source-v6</strong></span> ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |
            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];
+       <span class="command"><strong>answer-cookie</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>attach-cache</strong></span> <em class="replaceable"><code>string</code></em>;
        <span class="command"><strong>auth-nxdomain</strong></span> <em class="replaceable"><code>boolean</code></em>; // default changed
        <span class="command"><strong>auto-dnssec</strong></span> ( allow | maintain | off );
@@ -2649,6 +2650,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
            <span class="command"><strong>min-ns-dots</strong></span> <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [
            <span class="command"><strong>qname-wait-recurse</strong></span> <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ];
        <span class="command"><strong>root-delegation-only</strong></span> [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];
+       <span class="command"><strong>root-key-sentinel</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>rrset-order</strong></span> { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };
        <span class="command"><strong>secroots-file</strong></span> <em class="replaceable"><code>quoted_string</code></em>;
@@ -4308,19 +4310,16 @@ options {
                   options level, not per-view.
                 </p>
                 <p>
-                  <span class="command"><strong>answer-cookie</strong></span> is only available
-                  as a temporary measure, for use when
-                  <span class="command"><strong>named</strong></span> shares an IP address
-                  with other servers that do not yet support DNS
-                  COOKIE.  A mismatch between servers on the same
-                  address is not expected to cause operational
-                  problems, but the option to disable COOKIE responses
-                  so that all servers have the same behavior is
-                  provided out of an abundance of caution. DNS COOKIE
-                  is an important security mechanism and should not be
-                  disabled unless absolutely necessary.  The
-                  <span class="command"><strong>answer-cookie</strong></span> option is obsolete
-                  as of BIND 9.13.
+                  <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
+                  temporary measure, for use when <span class="command"><strong>named</strong></span>
+                  shares an IP address with other servers that do not yet
+                  support DNS COOKIE.  A mismatch between servers on the
+                  same address is not expected to cause operational
+                  problems, but the option to disable COOKIE responses so
+                  that all servers have the same behavior is provided out
+                  of an abundance of caution. DNS COOKIE is an important
+                  security mechanism, and should not be disabled unless
+                  absolutely necessary.
                 </p>
               </dd>
 <dt><span class="term"><span class="command"><strong>send-cookie</strong></span></span></dt>
@@ -14574,6 +14573,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index cfe08b0106897fac89da29626236c152ba770607..d45d22542886d7ac7b1c42bd49b354cd39e0aea8 100644 (file)
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index 26059d3aba71ce9349ba374adadeb258378fe530..6b287586e273a940fe50d12a38ecd80099d22921 100644 (file)
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -136,6 +136,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index a13f20d201de43001ca102d7514617bb94ee1310..f2038ee6b89be7e9bc4cece57d7f5d9c02794642 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -36,7 +36,7 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4rc1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
@@ -54,7 +54,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.4rc1</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.4rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -156,7 +156,7 @@
          <code class="filename">named.conf</code>. [GL #173]
        </p>
        <p>
-         <span class="command"><strong>answer-cookie</strong></span> is only available as a
+         <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
          temporary measure, for use when <span class="command"><strong>named</strong></span>
          shares an IP address with other servers that do not yet
          support DNS COOKIE.  A mismatch between servers on the
@@ -164,9 +164,8 @@
          but the option to disable COOKIE responses so that all
          servers have the same behavior is provided out of an
          abundance of caution. DNS COOKIE is an important security
-         mechanism and should not be disabled unless absolutely
-         necessary.  The <span class="command"><strong>answer-cookie</strong></span> option
-         is obsolete as of BIND 9.13.
+         mechanism, and should not be disabled unless absolutely
+         necessary.
        </p>
       </li>
 </ul></div>
@@ -212,14 +211,24 @@
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> now rejects excessively large
+         incremental (IXFR) zone transfers in order to prevent
+         possible corruption of journal files which could cause
+         <span class="command"><strong>named</strong></span> to abort when loading zones. [GL #339]
+       </p>
+      </li>
+<li class="listitem">
        <p>
          <span class="command"><strong>rndc reload</strong></span> could cause <span class="command"><strong>named</strong></span>
          to leak memory if it was invoked before the zone loading actions
          from a previous <span class="command"><strong>rndc reload</strong></span> command were
          completed. [RT #47076]
        </p>
-      </li></ul></div>
+      </li>
+</ul></div>
   </div>
 
   <div class="section">
@@ -262,6 +271,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index 51e1158a75ca7b716bd7ef15fef093c4bd4fe453..b30a84ffa60b090941e5ddb41df434a64479182e 100644 (file)
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html
index 5dec487781e2ce7a6569d10099aae469aa047d35..dd9bab9b785fe993ce70f03ae2361e4533cae4e6 100644 (file)
--- a/doc/arm/Bv9ARM.ch11.html
+++ b/doc/arm/Bv9ARM.ch11.html
@@ -914,6 +914,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html
index 5f3577050e499cfe7621636df25f02f3fa543369..2d4b469952579d09458699680406878845fa2d1c 100644 (file)
--- a/doc/arm/Bv9ARM.ch12.html
+++ b/doc/arm/Bv9ARM.ch12.html
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html
index a93cb3e18b64cdb88640c3c42e0662e34813a5b1..a06f2dfe250d46b99956755e498ebf4655043fcd 100644 (file)
--- a/doc/arm/Bv9ARM.ch13.html
+++ b/doc/arm/Bv9ARM.ch13.html
@@ -213,6 +213,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index c45afdbcd9aa5435c8091d9815624e97dae9870b..dc1245a0f54779a7f993b36abe51541e8b3ea9fd 100644 (file)
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.11.4rc1</p></div>
+<div><p class="releaseinfo">BIND Version 9.11.4rc2</p></div>
 <div><p class="copyright">Copyright © 2000-2018 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
@@ -241,7 +241,7 @@
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4rc1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.4rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
@@ -443,6 +443,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index 955027f100a53abd617718dbf07de859c28f34c6..267e3c1cc37b162efd032ce0c3f0ee4e2e2aaf50 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ

diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 2aa0c0ea12fb05457e1b7db397f6a5e36c4ff428..2c44007e35ad6bbe5bc99f45374a0ceeaec0317f 100644 (file)
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -91,6 +91,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index bd7dc15fba0ae7c2906d1f8f5516511edc0c947c..b70be78ff2a634b1c2ad7ccf7d83539a39eaef2f 100644 (file)
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -236,6 +236,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html
index 373a9494189c052e6125de75fdf7ea96bde8a5ac..d201a3cbf2fecbe6c70a40a5b9da3b62de61ae9a 100644 (file)
--- a/doc/arm/man.delv.html
+++ b/doc/arm/man.delv.html
@@ -624,6 +624,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 3e073d9e3a6dc5c4dde3bf4fa90388b2a7b0813c..a5add223f30fa7917f1cd76d4c1a561bbc1cef96 100644 (file)
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -1108,6 +1108,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 390b33ee59826f4d1641e15d13c4b5dabf678962..bd6a4dc4a333c061e2504ce054c7c00b2a04350c 100644 (file)
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index e030a71cda801645c7cca273981bd0cc2dcf33f0..6f4a98e6919fc5bdafcab1d178127c1778dfac1a 100644 (file)
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -270,6 +270,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index e932737b9b4fe636b5650d51c3b557564618bafb..f84451600ec9c21ee549b257de9e9c51a3ccca8e 100644 (file)
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -289,6 +289,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html
index 9ea768cbf76fb8b8ce60960c8b5bdcb5f85c2dcd..9bdeff4fd2053a15f27a251acd461158f1447be2 100644 (file)
--- a/doc/arm/man.dnssec-importkey.html
+++ b/doc/arm/man.dnssec-importkey.html
@@ -250,6 +250,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index b0fd463b1d61ba8a401987814f37b4436b287aa8..c977e8a19c3426ce90ec58737bf8904d791817e5 100644 (file)
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -492,6 +492,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index 3d3c0d8687f7cb871c675741c1ab4e782bae4810..c598db0eb7e93f58b0cfb3aa43fd2f0169db9dc8 100644 (file)
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -579,6 +579,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html
index 7483c47a136b444be987f03acfab73c60f7a35d2..cfa0b13b2875be9a75dacf81eeccfe560481a56f 100644 (file)
--- a/doc/arm/man.dnssec-keymgr.html
+++ b/doc/arm/man.dnssec-keymgr.html
@@ -398,6 +398,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index 0565d25e5be602b199f2c748554f36a8f6d7aa05..a620ea9d7089b6dc67a9ca0293551f9c21378ee0 100644 (file)
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -171,6 +171,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index 3a05282ff549a1d9ad8e2193c7ed15602353a354..35ca5a20b4122d13ee829d4de3a44cbb1f9aecb7 100644 (file)
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -349,6 +349,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index b13f1ba08ff9ee4a0ce8a7a37d2f94e9d7212d42..ffc4b5db78c12aea5ee04adae4404b62f9db2934 100644 (file)
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -708,6 +708,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index bd3b8c2267513e6fb3e8761e89704a41833ab996..2e35c4581f0a75f95b4b18e6080d09b51f2ece1a 100644 (file)
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -202,6 +202,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html
index 1134ca57a0ab3b11c8a95af25bccc51efc9ac24b..ac59018277b8b572e12055e1e3508eb2aa1c20ac 100644 (file)
--- a/doc/arm/man.dnstap-read.html
+++ b/doc/arm/man.dnstap-read.html
@@ -134,6 +134,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html
index c9447b10ac5668b6b8d332d5346bbdac7df56ce5..3bcdd5535a20933b907d67f6e490e517b5ef3eeb 100644 (file)
--- a/doc/arm/man.genrandom.html
+++ b/doc/arm/man.genrandom.html
@@ -127,6 +127,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index 749b4813f56d7b443451471030165a3c34f115d9..5ea361f7c4987325c15ba08bcd334c4b72a08efd 100644 (file)
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -366,6 +366,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html
index 2c9c4d9fc3e969e59bd492af5801f00785bb0167..1ade3f5ecc21a8e9c59dead157ac397cdaa753fc 100644 (file)
--- a/doc/arm/man.isc-hmac-fixup.html
+++ b/doc/arm/man.isc-hmac-fixup.html
@@ -126,6 +126,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html
index bd4f94044cd64397468c443fa9e2bc42763460c6..4d17b2c3269b2fc26557531816f6a40e37edebf1 100644 (file)
--- a/doc/arm/man.lwresd.html
+++ b/doc/arm/man.lwresd.html
@@ -329,6 +329,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html
index 3f86da27b1a3a2e75ab34df6d3f91de62fdfdca0..0927b7b5b15f0f22ea3a2cb6edd19f09712fa5ab 100644 (file)
--- a/doc/arm/man.mdig.html
+++ b/doc/arm/man.mdig.html
@@ -609,6 +609,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index 39846b47c235a120b7aa7d8c9965f933d5075283..f3e463c395efb476480b38fa6da074f065d3ea8d 100644 (file)
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -192,6 +192,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 0bc243e0d377abd74ad7393594f872a3cb9584af..395109aa61bda04b5c4b1303fc5fe8721582cfc0 100644 (file)
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -463,6 +463,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index 996759f6ff36f34ae0791d21e1858445fbda0e08..e248adcf2fd39907fac3a2949b5d00e4364e0f66 100644 (file)
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -117,6 +117,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html
index 6e7e31284b403be88688976b9a9cf77cbb13a1c5..783acf4e28a27020ff9560ec6364c91f454102eb 100644 (file)
--- a/doc/arm/man.named-nzd2nzf.html
+++ b/doc/arm/man.named-nzd2nzf.html
@@ -119,6 +119,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html
index 2e3691883bd95b3a24a5a6fae5b67ebb1f2cf1a7..7b61f3b4cdc8afb491f32d304a73f0e63a148b32 100644 (file)
--- a/doc/arm/man.named-rrchecker.html
+++ b/doc/arm/man.named-rrchecker.html
@@ -121,6 +121,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html
index e91839129ef8dea64cd9212e7c6ecf85d2381399..2c6e28973803eaaa844a805f833aa9ec0dd0cfb4 100644 (file)
--- a/doc/arm/man.named.conf.html
+++ b/doc/arm/man.named.conf.html
@@ -217,6 +217,7 @@ options
            ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -420,6 +421,7 @@ options
            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -723,6 +725,7 @@ view
            min-ns-dots <em class="replaceable"><code>integer</code></em> ] [ nsip-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [<br>
            qname-wait-recurse <em class="replaceable"><code>boolean</code></em> ] [ recursive-only <em class="replaceable"><code>boolean</code></em> ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
@@ -1032,6 +1035,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index 4eecdfb6ee113597306f75c246a535e005b57e22..fb59ed6c09be21c5b0f615db66597374b8134234 100644 (file)
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -490,6 +490,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index 61638477e2aec5753a0255e782a4f6ffafd54de8..11b36e41a27e920b7ed343d5ea4bcfc895790f45 100644 (file)
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -131,6 +131,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html
index 53eb1d854f35411656b1cfdb0064e9bc846b3234..2f43655001a93f4e44dd079d02a7d877ec520d39 100644 (file)
--- a/doc/arm/man.nslookup.html
+++ b/doc/arm/man.nslookup.html
@@ -419,6 +419,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 224d8b9766ff7755973ce20ae3a8c9aec5034a9f..73f2586451db0850ad55ae1d6562f22aec709481 100644 (file)
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -817,6 +817,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html
index a25f2efa284a0262783baf3beb7c63d722575dc7..0390a46c9407cbd163943edd20048a6c7072bdf8 100644 (file)
--- a/doc/arm/man.pkcs11-destroy.html
+++ b/doc/arm/man.pkcs11-destroy.html
@@ -162,6 +162,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html
index 30f88b8a2be4ebf6bbc1ba6e620852bc9c34aaaf..b45d894a51ff081fac33a6635d2d55a6e3f5b9ab 100644 (file)
--- a/doc/arm/man.pkcs11-keygen.html
+++ b/doc/arm/man.pkcs11-keygen.html
@@ -200,6 +200,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html
index 387c93e2965083254377ebe85a13bf0453177c0a..531dd432563513940d98bfbd725d92be39cb7b18 100644 (file)
--- a/doc/arm/man.pkcs11-list.html
+++ b/doc/arm/man.pkcs11-list.html
@@ -158,6 +158,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html
index 49d8caff0f1de0d1d3e248a590e6719c33a10b6a..8db31f8d5468f3144cd0c43cd9e83aeb6d60fa6c 100644 (file)
--- a/doc/arm/man.pkcs11-tokens.html
+++ b/doc/arm/man.pkcs11-tokens.html
@@ -119,6 +119,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index d0a88209fc6404bb681d2e08416facdd6a53acac..627aedce085d2c1220d10a725d6de1bbdb07f1e9 100644 (file)
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -277,6 +277,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index 9102faf18c177f0a1474e036d4e033069b49bca6..f3b0b85342cece01e46c5c49d07d45bac96ab0c9 100644 (file)
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -268,6 +268,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index 568b02b8f8f866f95450402d1aadad9005bb1d5c..6a50533af85ff14c435eac3e75463a5eb90b45ca 100644 (file)
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -889,6 +889,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc1 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.4rc2 (Extended Support Version)</p>
 </body>
 </html>

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index c17059fb3efcc7ed692f6bae3f11d8efc6c08a1f..14648f6b46f8b351cf72237ecddfc3d09efbcf8a 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -15,7 +15,7 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.11.4rc1</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.11.4rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -117,7 +117,7 @@
          <code class="filename">named.conf</code>. [GL #173]
        </p>
        <p>
-         <span class="command"><strong>answer-cookie</strong></span> is only available as a
+         <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
          temporary measure, for use when <span class="command"><strong>named</strong></span>
          shares an IP address with other servers that do not yet
          support DNS COOKIE.  A mismatch between servers on the
@@ -125,9 +125,8 @@
          but the option to disable COOKIE responses so that all
          servers have the same behavior is provided out of an
          abundance of caution. DNS COOKIE is an important security
-         mechanism and should not be disabled unless absolutely
-         necessary.  The <span class="command"><strong>answer-cookie</strong></span> option
-         is obsolete as of BIND 9.13.
+         mechanism, and should not be disabled unless absolutely
+         necessary.
        </p>
       </li>
 </ul></div>
@@ -173,14 +172,24 @@
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> now rejects excessively large
+         incremental (IXFR) zone transfers in order to prevent
+         possible corruption of journal files which could cause
+         <span class="command"><strong>named</strong></span> to abort when loading zones. [GL #339]
+       </p>
+      </li>
+<li class="listitem">
        <p>
          <span class="command"><strong>rndc reload</strong></span> could cause <span class="command"><strong>named</strong></span>
          to leak memory if it was invoked before the zone loading actions
          from a previous <span class="command"><strong>rndc reload</strong></span> command were
          completed. [RT #47076]
        </p>
-      </li></ul></div>
+      </li>
+</ul></div>
   </div>
 
   <div class="section">

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf
index 1a5491f832a460255dcc867095c8098fa254c274..67c0eedf33418e2ee2f3a8d1af22170b88d8ecf4 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ

diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt
index abdab2f4149fda0df7d6ed6e70bdf1ea9f7a5aff..fbc2687be5dd9c3bc5f65c9231cc44b162dfd0fc 100644 (file)
--- a/doc/arm/notes.txt
+++ b/doc/arm/notes.txt
@@ -1,4 +1,4 @@
-Release Notes for BIND Version 9.11.4rc1
+Release Notes for BIND Version 9.11.4rc2
 
 Introduction
 
@@ -59,14 +59,14 @@ New Features
     present in the request. To prevent a cookie being returned, add
     answer-cookie no; to named.conf. [GL #173]
 
-    answer-cookie is only available as a temporary measure, for use when
+    answer-cookie no is only intended as a temporary measure, for use when
     named shares an IP address with other servers that do not yet support
     DNS COOKIE. A mismatch between servers on the same address is not
     expected to cause operational problems, but the option to disable
     COOKIE responses so that all servers have the same behavior is
     provided out of an abundance of caution. DNS COOKIE is an important
-    security mechanism and should not be disabled unless absolutely
-    necessary. The answer-cookie option is obsolete as of BIND 9.13.
+    security mechanism, and should not be disabled unless absolutely
+    necessary.
 
 Removed Features
 
@@ -86,6 +86,10 @@ Feature Changes
 
 Bug Fixes
 
+  * named now rejects excessively large incremental (IXFR) zone transfers
+    in order to prevent possible corruption of journal files which could
+    cause named to abort when loading zones. [GL #339]
+
   * rndc reload could cause named to leak memory if it was invoked before
     the zone loading actions from a previous rndc reload command were
     completed. [RT #47076]

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 528ae6da7adb1563c732128c39e8a7657ea6dad6..220a20e696d99a1f5c44e9dc9913c36bba457e65 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -109,7 +109,7 @@
          <filename>named.conf</filename>. [GL #173]
        </para>
        <para>
-         <command>answer-cookie</command> is only available as a
+         <command>answer-cookie no</command> is only intended as a
          temporary measure, for use when <command>named</command>
          shares an IP address with other servers that do not yet
          support DNS COOKIE.  A mismatch between servers on the
@@ -117,7 +117,7 @@
          but the option to disable COOKIE responses so that all
          servers have the same behavior is provided out of an
          abundance of caution. DNS COOKIE is an important security
-         mechanism and should not be disabled unless absolutely
+         mechanism, and should not be disabled unless absolutely
          necessary.
        </para>
       </listitem>
@@ -134,26 +134,6 @@
          using (now obsolete) idnkit-1 library.
        </para>
       </listitem>
-      <listitem>
-       <para>
-         Add the ability to not return a DNS COOKIE option when one
-         is present in the request.  To prevent a cookie being returned
-         add <command>answer-cookie no;</command> to
-         <filename>named.conf</filename>. [GL #173]
-       </para>
-       <para>
-         <command>answer-cookie no</command> is only intended as a
-         temporary measure, for use when <command>named</command>
-         shares an IP address with other servers that do not yet
-         support DNS COOKIE.  A mismatch between servers on the
-         same address is not expected to cause operational problems,
-         but the option to disable COOKIE responses so that all
-         servers have the same behavior is provided out of an
-         abundance of caution. DNS COOKIE is an important security
-         mechanism, and should not be disabled unless absolutely
-         necessary.
-       </para>
-      </listitem>
     </itemizedlist>
   </section>
 

diff --git a/doc/arm/options.grammar.xml b/doc/arm/options.grammar.xml
index bccc6eeaa0474053eb25c4a1654e00f3b13d0ec1..16d332ad66faabc0a7ebaab5cb3e092481f5f43b 100644 (file)
--- a/doc/arm/options.grammar.xml
+++ b/doc/arm/options.grammar.xml
@@ -35,6 +35,7 @@
            ] [ dscp <replaceable>integer</replaceable> ];
        <command>alt-transfer-source-v6</command> ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
            * ) ] [ dscp <replaceable>integer</replaceable> ];
+       <command>answer-cookie</command> <replaceable>boolean</replaceable>;
        <command>attach-cache</command> <replaceable>string</replaceable>;
        <command>auth-nxdomain</command> <replaceable>boolean</replaceable>; // default changed
        <command>auto-dnssec</command> ( allow | maintain | off );
@@ -238,6 +239,7 @@
            <command>min-ns-dots</command> <replaceable>integer</replaceable> ] [ nsip-wait-recurse <replaceable>boolean</replaceable> ] [
            <command>qname-wait-recurse</command> <replaceable>boolean</replaceable> ] [ recursive-only <replaceable>boolean</replaceable> ];
        <command>root-delegation-only</command> [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       <command>root-key-sentinel</command> <replaceable>boolean</replaceable>;
        <command>rrset-order</command> { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        <command>secroots-file</command> <replaceable>quoted_string</replaceable>;

diff --git a/lib/bind9/api b/lib/bind9/api
index 530ab103ca75dffb370645db849a719ede3b0ca0..0f454b5e2270ac4c1dfc6c4a65232c1626638afe 100644 (file)
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 160
-LIBREVISION = 7
+LIBREVISION = 8
 LIBAGE = 0

diff --git a/lib/dns/api b/lib/dns/api
index c19bf0dc1c95c32e41d9237a817a2b452f63f608..e89674a0f7faf1d88af009916f3fb1df15b0fce4 100644 (file)
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1102
+LIBINTERFACE = 1103
 LIBREVISION = 0
-LIBAGE = 0
+LIBAGE = 1

diff --git a/lib/isc/api b/lib/isc/api
index 369bbafa3a16b36b4de96c5417eaf76180365d60..8cdd04666fd1e2b1d524a83b80e0fdeebda6cbe8 100644 (file)
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 169
-LIBREVISION = 2
+LIBREVISION = 3
 LIBAGE = 0

diff --git a/lib/isc/tests/Atffile b/lib/isc/tests/Atffile
index 506c656e8fc3427cb7d025a90b40b4c97c26fad3..8681844d41152ef9ddf61ebd3ed333ab81852258 100644 (file)
--- a/lib/isc/tests/Atffile
+++ b/lib/isc/tests/Atffile
@@ -29,5 +29,5 @@ tp: socket_test
 tp: symtab_test
 tp: task_test
 tp: taskpool_test
-tp: timer_test
 tp: time_test
+tp: timer_test

diff --git a/lib/isccfg/api b/lib/isccfg/api
index 82129c690ea3731c619687425f0df1b75fc128dd..5da02bc2d46799f17f0c900ea9f6f7f4cdc3b987 100644 (file)
--- a/lib/isccfg/api
+++ b/lib/isccfg/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 162
-LIBREVISION = 0
+LIBREVISION = 1
 LIBAGE = 2

diff --git a/version b/version
index b5cc75fe195f0981dded825af52fe2860d7b3034..f895690fdbc55bce8d256e31eabfab68a8903471 100644 (file)
--- a/version
+++ b/version
@@ -7,5 +7,5 @@ MAJORVER=9
 MINORVER=11
 PATCHVER=4
 RELEASETYPE=rc
-RELEASEVER=1
+RELEASEVER=2
 EXTENSIONS=