bind9/EXCLUDED

3624.	[bug]		Look for 'json_object_new_int64' when looking for a
			the json library. [RT #34449]

3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]

3617.	[bug]		Named was failing to answer queries during
			"rndc reload" [RT #34098]

3616.	[bug]		Change #3613 was incomplete. [RT #34177]

3613.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]

3612.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]

3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]

3604.	[bug]		Fixed a compile-time error when building with
			JSON but not XML. [RT #33959]

3602.	[contrib]	Added DLZ Perl module, allowing Perl scripts to
			integrate with named and serve DNS data.
			(Contributed by John Eaglesham of Yahoo.)

3598.	[cleanup]	Improved portability of map file code. [RT #33820]

3597.	[bug]		Ensure automatic-resigning heaps are reconstructed
			when loading zones in map format. [RT #33381]

3596.	[port]		Updated win32 build documentation, added
			dnssec-verify. [RT #22067]

3595.	[port]		win32: Fix build problems introduced by change #3550.
			[RT #33807]

3590.	[bug]		When using RRL on recursive servers, defer
			rate-limiting until after recursion is complete;
			also, use correct rcode for slipped NXDOMAIN
			responses.  [RT #33604]

3582.	[bug]		Silence false positive warning regarding missing file
			directive for inline slave zones.  [RT #33662]

3570.	[bug]		Check internal pointers are valid when loading map
			files. [RT #33403]

3569.	[contrib]	Ported mysql DLZ driver to dynamically-loadable
			module, and added multithread support. [RT #33394]

3564.	[bug]		Improved handling of corrupted map files. [RT #33380]

3557.	[bug]		Reloading redirect zones was broken. [RT #33292]

3554.	[bug]		RRL failed to correctly rate-limit upward
			referrals and failed to count dropped error
			responses in the statistics. [RT #33225]

3551.	[bug]		resolver.querydscp[46] were uninitialized.  [RT #32686]

3545.	[bug]		RRL slip behavior was incorrect when set to 1.
			[RT #33111]

3527.	[compat]	Add a URI to allow applications to explicitly
			request a particular XML schema from the statistics
			channel, returning 404 if not supported. [RT #32481]

3523.	[contrib]	Ported filesystem and ldap DLZ drivers to
			dynamically-loadable modules, and added the
			"wildcard" module based on a contribution from
			Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]

3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]

3518.	[bug]		Increase the size of dns_rrl_key.s.rtype by one bit
			so that all dns_rrl_rtype_t enum values fit regardless
			of whether it is teated as signed or unsigned by
			the compiler. [RT #32792]

3511.	[doc]		Improve documentation of redirect zones. [RT #32756]

3507.	[bug]		Statistics channel XSL had a glitch when attempting
			to chart query data before any queries had been
			received. [RT #32620]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]

3493.	[contrib]	Added BDBHPT dynamically-lodable DLZ module,
			contributed by Mark Goldfinch. [RT #32549]

3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]

3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]

3490.	[bug]		When logging RDATA during update, truncate if it's
			too long. [RT #32365]

3489.	[bug]		--enable-developer now turns on ISC_LIST_CHECKINIT.
			When cloning a rdataset do not copy the link contents.
			[RT #32651]

3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]

3480.	[bug]		Silence logging noise when setting up zone
			statistics. [RT #32525]

3476.	[bug]		"rndc zonestatus" could report a spurious "not
			found" error on inline-signing zones. [RT #29226]

3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]

3472.	[bug]		The active-connections counter in the socket
			statistics could underflow. [RT #31747]

3471.	[bug]		The number of UDP dispatches now defaults to
			the number of CPUs even if -n has been set to
			a higher value. [RT #30964]

3469.	[bug]		Handle DLZ lookup failures more gracefully. Improve
			backward compatibility between versions of DLZ dlopen
			API. [RT #32275]

3466.	[contrib]	Corrected the DNS_CLIENTINFOMETHODS_VERSION check
			in DLZ example driver. [RT #32275]

3460.	[bug]		Only link against readline where needed. [RT #29810]

3453.	[bug]		'rndc addzone' of a zone with 'inline-signing yes;'
			failed. [RT #31960]

3434.	[bug]		Pass client info to the DLZ findzone() entry
			point in addition to lookup().  This makes it
			possible for a database to answer differently
			whether it's authoritative for a name depending
			on the address of the client.  [RT #31775]

3433.	[bug]		dlz_findzone() did not correctly handle
			ISC_R_NOMORE. [RT #31172]

3426.	[bug]		dnssec-checkds: Clearer output when records are not
			found. [RT #31968]

3423.	[bug]		"rndc signing -nsec3param" didn't accept the full
			range of possible values.  Address portability issues.
			[RT #31938]

3416.	[bug]		Named could die on shutdown if running with 128 UDP
			dispatches per interface. [RT #31743]

3414.	[bug]		Address locking issues found by Coverity. [RT #31626]

3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]

3399.	[port]		netbsd: rename 'bool' parameter to avoid namespace
			clash.  [RT #31515]

3398.	[bug]		SOA parameters were not being updated with inline
			signed zones if the zone was modified while the
			server was offline. [RT #29272]

3385.	[bug]		named-checkconf didn't detect missing master lists
			in also-notify clauses. [RT #30810]

3377.	[bug]		Removed spurious newline from NSEC3 multiline
			output. [RT #31044]

3375.	[bug]		'rndc dumpdb' failed on empty caches. [RT #30808]

3370.	[bug]		Address use after free while shutting down. [RT #30241]

3368.	[bug]		<dns/iptable.h>, <dns/private.h> and <dns/zone.h>
			were not C++ safe.

3361.	[bug]		"rndc signing -nsec3param" didn't work correctly
			when salt was set to '-' (no salt). [RT #30099]

3355.	[port]		Use more portable awk in verify system test.

3349.	[bug]		Change #3345 was incomplete. [RT #30233]

3345.	[bug]		Addressed race condition when removing the last item
			or inserting the first item in an ISC_QUEUE.
			[RT #29539]

3338.	[bug]		Address race condition in units tests: asyncload_zone
			and asyncload_zt. [RT #26100]

3334.	[bug]		Hold a zone table reference while performing a
			asyncronous load of a zone. [RT #28326]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3316.	[tuning]	Improved locking performance when recursing.
			[RT #28836]

3315.	[tuning]	Use multiple dispatch objects for sending upstream
			queries; this can improve performance on busy
			multiprocessor systems by reducing lock contention.
			[RT #28605]

3303.	[bug]		named could die when reloading. [RT #28606]

3296.	[bug]		Named could die with a INSIST failure in
			client.c:exit_check. [RT #28346]

3289.	[bug]		'rndc retransfer' failed for inline zones. [RT #28036]

3279.	[bug]		Hold a internal reference to the zone while performing
			a asynchronous load.  Address potential memory leak
			if the asynchronous is cancelled. [RT #27750]

3277.	[bug]		win32: isc_socket_dup is not implemented. [RT #27696]

3275.	[bug]		Corrected rndc -h output; the 'rndc sync -clean'
			option had been misspelled as '-clear'.  (To avoid
			future confusion, both options now work.) [RT #27173]

3270.	[bug]		"rndc reload" didn't reuse existing zones correctly
			when inline-signing was in use. [RT #27650]

3269.	[port]		darwin 11 and later now built threaded by default.

3265.	[bug]		Address lock order reversal with inline-signing
			support. [27557]

3264.	[bug]		Automatic regeneration of signatures in an
			inline-signing zone could stall when the server
			was restarted. [RT #27344]

3263.	[bug]		"rndc sync" did not affect the unsigned side of an
			inline-signing zone. [RT #27337]

3252.	[bug]		When master zones using inline-signing were
			updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]

3246.	[bug]		Named failed to start with a empty also-notify list.
			[RT #27087]

3245.	[bug]		Don't report a error unchanged serials unless there
			were other changes when thawing a zone with
			ixfr-fromdifferences. [RT #26845]

3243.	[port]		freebsd,netbsd,bsdi: the thread defaults were not
			being properly set.

3225.	[bug]		Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
			messages. [RT #26507]


3236.	[bug]		Backed out changes #3182 and #3202, related to

3233.	[bug]		'rndc freeze/thaw' didn't work for inline zones.
			[RT #26632]

3224.	[bug]		'rndc signing' argument parsing was broken. [RT #26684]

3223.	[bug]		'task_test privilege_drop' generated false positives.
			[RT #26766]

3222.	[cleanup]	Replace dns_journal_{get,set}_bitws with
			dns_journal_{get,set}_sourceserial. [RT #26634]

3219.	[bug]		Disable NOEDNS caching following a timeout.

3215.	[bug]		'rndc recursing' could cause a core dump.  [RT #26495]

3210.	[bug]		Canceling the oldest query due to recursive-client
			overload could trigger an assertion failure. [RT #26463]

3202.	[bug]		NOEDNS caching on timeout was too agressive.
			[RT #26416]

3184.	[bug]		named had excessive cpu usage when a redirect zone was
			configured. [RT #26013]

3182.	[bug]		Auth servers behind firewalls which block packets
			greater than 512 bytes may cause other servers to
			perform poorly. Now, adb retains edns information
			and caches noedns servers. [RT #23392/24964]

3178.	[bug]		A race condition introduced by change #3163 could
			cause an assertion failure on shutdown. [RT #26271]

3176.	[doc]		Corrected example code and added a README to the
			sample external DLZ module in contrib/dlz/example.
			[RT #26215]

3172.	[port]		darwin 10.* and freebsd [89] are now built threaded by
			default.

3168.	[bug]		Nxdomain redirection could trigger an assert with
			a ANY query. [RT #26017]

3166.	[bug]		Upgrading a zone to support inline-signing failed.
			[RT #26014]

3165.	[bug]		dnssec-signzone could generate new signatures when
			resigning, even when valid signatures were already
			present. [RT #26025]

3163.	[bug]		Use finer-grained locking in client.c to address
			concurrency problems with large numbers of threads.
			[RT #26044]

3160.	[bug]		When printing out a NSEC3 record in multiline form
			the newline was not being printed causing type codes
			to be run together. [RT #25873]

3159.	[bug]		On some platforms, named could assert on startup
			when running in a chrooted environment without
			/proc. [RT #25863]

3158.	[bug]		Recursive servers would prefer a particular UDP
			socket instead of using all available sockets.
			[RT #26038]

3136.	[func]		Add RFC 1918 reverse zones to the list of built-in
			empty zones switched on by the 'empty-zones-enable'
			option. [RT #24990]

3127.	[bug]		'rndc thaw' will now remove a zone's journal file
			if the zone serial number has been changed and
			ixfr-from-differences is not in use.  [RT #24687]

3108.	[cleanup]	dnssec-signzone: Clarified some error and
			warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
			code (use -P instead). [RT #20852]

3066.	[func]		The DLZ "dlopen" driver is now built by default,
			no longer requiring a configure option.  To
			disable it, use "configure --without-dlopen".
			(Note: driver not supported on win32.) [RT #23467]

3045.	[removed]	Replaced by change #3050.

3142.	[bug]		NAPTR is class agnostic. [RT #25429]`

3011.	[func]		Allow setting this in named.conf using the new
			'resolver-query-timeout' option, which specifies a max
			time in seconds.  0 means 'default' and anything longer
			than 30 will be silently set to 30. [RT #22852]