Add CHANGES and release notes for [GL #2888]

diff --git a/CHANGES b/CHANGES
index f5cf53ffec91179587fdaa9b14296f3bfffc3df7..ce8f8429778131b956689b720210887a945ad151 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5715.  [func]          Add a check when the *-source(-v6) clashes with the
+                       global listening port. Such a configuration was already
+                       forbidden, but it failed silently. [GL #2888]
+
 5714.  [bug]           Remove the "adjust interface" mechanism that
                        set up a listener on interfaces where the *-source(-v6)
                        address and port were the same as the listening

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index efa5c2eb4052505e1aa58a597ff43af1225a6b26..ccdfd44b56d4bbbf53974c4fc4eebe2f9cb898d4 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -43,6 +43,18 @@ Feature Changes
 - SHA-1 CDS records are no longer used by ``dnssec-cds`` to make DS
   records. Thanks to Tony Finch. :gl:`!2946`
 
+- ``named`` and ``named-checkconf`` now issue a warning when there is a single
+  configured port in the ``query-source``, ``transfer-source``,
+  ``notify-source``, and ``parental-source``, and/or in their respective IPv6 counterparts.
+  :gl:`#2888`
+
+- ``named`` and ``named-checkconf`` now return an error when the single configured
+  port in the ``query-source``, ``transfer-source``, ``notify-source``,
+  ``parental-source``, and/or their respective IPv6 counterparts clashes with the
+  global listening port. This configuration is no longer supported as of BIND
+  9.16.0 but no error was reported, although sending UDP messages
+  (such as notifies) would fail. :gl:`#2888`
+
 Bug Fixes
 ~~~~~~~~~