pdnsd

This release has support for many additional RR types, including those needed for DNSSEC (though the resolver in pdnsd itself is not yet security aware). Caching data structures are more efficient when storing only the most commonly used RR types. Pdnsd now has support for EDNS (Extension mechanisms for DNS), enabling UDP messages larger than 512 bytes.
New configuration options allow local TXT records to be defined and provide a fix for certain types of query uptest failures. Bugs fixed include a UDP socket descriptor leak that affected FreeBSD users and an IPv6 port binding bug.

The main new feature of this version is automatic discovery of root servers. There are also some improvements in the resolver and a new default setting for the neg_rrs_pol configuration option.

This version fixes some security problems. It
contains a fix for a "dangling pointer" bug that
could cause pdnsd to crash when it received a long
reply. It also addresses some of the issues raised
in the CERT vulnerability note VU#800113 by making
source port randomization the default. This
release also fixes problems with compiling pdnsd
for the ARM architecture and for the Darwin
platform (Max OS X). There are a number of (minor)
new features, such as support for "include" files.

A bug has been fixed that caused pdnsd to handle NXDOMAIN replies inefficiently. The code that implements the ping test has been fixed for 64-bit systems. A new option can be used to give each server in a section of the configuration file an equal chance of being queried. New options make it possible to check whether the replies of name servers contain certain IP addresses and if so reject these replies. The pdnsd-ctl 'add' commands now allow multiple IP addresses to be specified for the same name. pdnsd's ability to resolve from root servers has been improved.

This release introduces a new query method: "udp_tcp". With this method, a UDP query is tried first and, if the UDP answer is truncated, the query is repeated using TCP. There is a new configuration option "use_nss", which can be turned off to prevent lengthy timeouts and stalls in certain situations. A bug has been fixed that previously could cause pdnsd to crash when started in debug mode.