From: Evan Hunt
Date: Tue, 27 May 2008 22:07:34 +0000 (+0000)
Subject: Update for 9.4.2-P1
X-Git-Tag: v9.4.2-P1^2~2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=2ef2b4dbcf30fb4aa262f343995c7149fb7537a4;p=thirdparty%2Fbind9.git
Update for 9.4.2-P1
---
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index d829a177a3d..59b9cf59a2c 100644
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -3078,10 +3078,18 @@ listen-on-v6 port 1234 { !2001:db8::/32; any; };
a wildcard IP address (INADDR_ANY)
will be used.
If port is * or is omitted,
- a random unprivileged port will be used. The avoid-v4-udp-ports
- and avoid-v6-udp-ports options can be used
- to prevent named
- from selecting certain ports. The defaults are:
+ a random unprivileged port number is picked up and will be
+ used for each query.
+ It is generally strongly discouraged to
+ specify a particular port for the
+ query-source or
+ query-source-v6
+ options; it implicitly disables the use of randomized port numbers
+ and leads to insecure operation.
+ The avoid-v4-udp-ports
+ and avoid-v6-udp-ports options can be used
+ to prevent named
+ from selecting certain ports. The defaults are:
query-source address * port *;
query-source-v6 address * port *;