Unbound 1.0.2

Features

• Stricter filtering of messages. This means that CNAMEs and DNAMEs are handled with more paranoia, as well as the removal of more irrelevant rrsets. More discussion at patch 1.0.2 announcement.

Bug Fixes

• Fixup qtype DS validation code
• [bugzilla: 198 ]
  Fix for nicer entropy warning message, OS hints in manpage.
• [bugzilla: 201 ]
  Fix segfault on exit cleanup of the app if packets were still waiting for udp port numbers.

Unbound 1.0.1

Features

• This version features bugfixes to compile on various distributions, some options necessary to assist packaging and distribution of unbound, a couple of fixes for looking up corner cases (badly operated domains), and a cleanup of code for config file reading.
• contrib unbound.spec from Patrick Vande Walle
• mingw port with basic functionality on Windows XP and Windows Vista (single threaded, UDP, TCP, IPv4, IPv6, validation)
• Added IPv6 example prefix to AS112 default blocklist

Bug Fixes

• fixup fedora 9 compilation (in6_pktinfo definition)
• CREDITS fixup of history
• ldns-1.2.2 is ignored if installed, and builtin 1.3.0 ldns used
• lex input and unput functions not generated (compile warnings)
• update of ldns tarball to latest ldns svn.
• update of avoided ports to latest IANA allocated portlist
• fixed up statements of the form local-zone: "30.172.in-addr.arpa." nodefault, so that the trailing dot is not required.
• reported by Robert Edmonds (akamai zones), fixed so that if multiple CNAME records for a name are returned, the first is used.
• reported by Richard Doty for mail.opusnet.com, check lameness more cautiously, first check SOA record, before looking at NS record, then, additionally, check the AA bit.
• reported for newegg.com, more detailed lameness checking to distinguish AAAA lameness from qtype A lameness.
• fixup compiling on eeepc xandros linux
• fixup memory leak in root hints file reading
• fixup validation for qtype DS queries with trust anchor for the same name
• libunbound ub_resolve, fix handling of error condition during setup.
• lowered log_hex blocksize to fit through BSD syslog linesize.
• [bugzilla: 174 ]
  make test checks for ldns-testns requirement of tcp_sigpipe test
• [bugzilla: 175 ]
  call tzset before chroot to have correct timestamps in system log
• [bugzilla: 177 ]
  fixed compilation failure on opensuse, the --disable-static configure flag caused problems. Patch from Klaus Singvogel
• [bugzilla: 178 ]
  fixed unportable shell usage in configure (relied on bash)
• [bugzilla: 179 ]
  same fix as 177.
• [bugzilla: 180 ]
  fixed buffer overflow in unbound-checkconf use of strncat
• [bugzilla: 181 ]
  fixed buffer overflow in ldns (called by unbound to parse config file parts)
• [bugzilla: 183 ]
  pidfile, rundir, and chroot configure options. Also the example.conf and manual pages get the configured defaults. You can use: (or accept the defaults to /usr/local/etc/unbound/) --with-conf-file=filename --with-pidfile=filename --with-run-dir=path --with-chroot-dir=path
• [bugzilla: 184 ]
  -r option for unbound-host, read resolv.conf.
• [bugzilla: 185 ]
  --disable-shared not passed along to ldns included with unbound. Fixed so that configure parameters are passed to the subdir configure script. Fixed that ./libtool is used always, you can still override manually with ./configure libtool=mylibtool or set $libtool in the environment.

Unbound 1.0.0

Features

• This code is the public release
• Honors $DESTDIR during make install and make uninstall, useful for rpm and deb packaging.
• contrib .spec file to build RPMs with
• iana port list updated
• added IPv6 addresses for builtin root hints

Bug Fixes

• Fixup no-IPv4 problem in error callback
• No linking with -lrt if not needed
• library version now has proper version-info (Thanks Ondrej Sury)
• configure --disable-rpath performs libtool fixup
• MacOSX 10.5 /etc/hosts lines ending in %lo0 are skipped (Thanks John Dickinson)

Unbound 0.11

Features

• This code is public beta and ready for deployment.
• Default file locations changed to /usr/local/etc/unbound
• RTT banding (draft-forgery-resilience)
• query name checks (draft-forgery-resilience)
• random ports improved (draft-forgery-resilience)
• AD bit signaling (AD bit in query requests AD bit in reply)
• unbound tries to set ulimit(fds) if it needs to
• stats to rrdtool script in contrib (Thanks Kai Storbeck)
• FEATURES document

Bug Fixes

• Fixed so works with libevent-1.4.3+
• iterator logs spelling fixed (Thanks Koji Kobayashi)
• RFC2181 compliance improved (Thanks Jinmei Tatuya)
• DSA EVP signature decoding fixed
• chroot functionality better documented and checked (Thanks Randy Bush)
• ignore SIGPIPE from dns clients (Thanks Kai Storbeck)

Unbound 0.10

Features

• This code is public beta and ready for deployment.
• updated ldns-tarball inside source from trunk for latest NSEC3 type codes
• installation to /usr/local/sbin by default now, like other servers do
• libunbound returns the full answer packet (with signatures, additional data, NSECs ...)
• option 'use-caps-for-id: yesno', experimental implementation of draft-dns-0x20.
• default configure uses builtin event mechanism, since it is faster and usually good enough. Use libevent when you use huge outgoing port ranges.
• Various optimisations
• make test shows an indication of cache speed
• unbound-host patch (from Jan-Piet Mens) to read config file
• added contrib/ dir with an /etc/rc.d script for FreeBSD

Bug Fixes

• --prefix option for configure also changes directory: pidfile: and chroot: defaults in config file.
• fixed so you can start without a config file (will complain, but start with defaults).
• fixed read of empty lines in /etc/hosts by libunbound
• fix to install all manual pages (unbound-host and libunbound pages too)
• fixed memory leaks in libunbound (during cancellation and ub_wait).

Unbound 0.9

Features

• This code is beta and not recommended for operational deployment.
• Remade verbosity levels, new level 2.
• can answer multiple queries over one TCP stream.
• library libunbound offers a validating stub implementation.
• unbound-host uses library to validate and lookup like host
• statistics-interval: seconds option added.
• interface-automatic: option added. Experimental, uses socket options to guarantee correct source address on UDP replies. Useful for multihomed hosts.
• Memory sizes in config can be given with k, m, or g
• Prints approximation of the median from histogram
• unbound-checkconf checks for local-net misconfigurations

Bug Fixes

• Fixed roothints and keyfiles access from chrooted daemon.
• Random generator uses less entropy.

Unbound 0.8

Features

• Local zone data - serve authoritative data
• Access control list - ips that have recursion allowed
• by default blocks AS 112 (reverse local net) queries
• This code is pre-beta and not recommended for operational deployment.
• per rfc2308, replaced default max-ttl value with 1 day.

Bug Fixes

• Validation works now for non RD queries
• duplicate checking for NSECs and NSEC3s after CNAMEs
• do not downcase NSEC and RRSIG for verification. Follows draft-ietf-dnsext-dnssec-bis-updates-06.txt.

Unbound 0.7.2

Features

• bugfixes for closed beta test version, not recommended for widespread deployment

Bug Fixes

• Fixup building the source from another directory.
• Fixup failure on start due to lack of entropy.

Unbound 0.7.1

Features

• bugfixes for closed beta test version, not recommended for widespread deployment

Bug Fixes

• Fixes in make test to kill daemons more thoroughly after test
• NSEC/RRSIG not downcased, from dnssec-bis-updates draft-06
• libevent not found error nicer
• README discusses GNU make needs

Unbound 0.7

Features

• closed beta test version, not recommended for widespread deployment
• support branch for closed beta participants

Unbound 0.6

Features

• Operational features.
• Secured by default (chroot).
• Memory leaks gone, lameness detection, corner cases and various fixes
• config file checker unbound-checkconf
• root hints file supported
• ldns library tarball included in source package for ease of installation
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.5

Features

• Validation.
• Fixes to recursive iterator code.
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.4

Features

• Caching resolver.
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.3

Features

• Forwarder with RRset cache.
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.2

Features

• Basic caching forwarder
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.1

Features

• Threaded non-caching forwarder.
• This code is pre-beta and not recommended for operational deployment.

Unbound 0.0

Features

• Build environment, configure, make and a non-caching DNS forwarder.
• This code is pre-beta and not recommended for operational deployment.