From: Evan Hunt <each@isc.org>
Date: Mon, 25 Feb 2013 22:35:41 +0000 (-0800)
Subject: [master] added more info to RPZ change note
X-Git-Tag: v9.10.0a1~494
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3;p=thirdparty%2Fbind9.git

[master] added more info to RPZ change note
---

diff --git a/CHANGES b/CHANGES
index 1ff2db1b6b3..56ec886834a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,7 +1,11 @@
 3496.	[placeholder]
 
-3495.	[func]		Support multiple response-policy zones, while
-			improving RPZ performance. [RT #32476]
+3495.	[func]		Support multiple response-policy zones (up to 32),
+                        while improving RPZ performance.  "response-policy"
+			syntax now includes a "min-ns-dots" clause, with
+			default 1, to exclude top-level domains from
+			NSIP and NSDNAME checking. --enable-rpz-nsip and
+                        --enable-rpz-nsdname are now the default. [RT #32251]
 
 3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
 			amplification attacks by rate-limiting substantially-