Doug Barton 2e5453748e Merge from vendor/bind9/dist as of the 9.4.2-P1 import, including ... the patch from ISC for lib/bind9/check.c and deletion of unused files in lib/bind. This version will by default randomize the UDP query source port (and sequence number of course) for every query. In order to take advantage of this randomization users MUST have an appropriate firewall configuration to allow UDP queries to be sent and answers to be received on random ports; and users MUST NOT specify a port number using the query-source[-v6] options. The avoid-v[46]-udp-ports options exist for users who wish to eliminate certain port numbers from being chosen by named for this purpose. See the ARM Chatper 6 for more information. Also please note, this issue applies only to UDP query ports. A random ephemeral port is always chosen for TCP queries. This issue applies primarily to name servers whose main purpose is to resolve random queries (sometimes referred to as "caching" servers, or more properly as "resolving" servers), although even an "authoritative" name server will make some queries, primarily at startup time. All users of BIND are strongly encouraged to upgrade to the latest version, and to utilize the source port randomization feature. This update addresses issues raised in: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1447 http://www.kb.cert.org/vuls/id/800113 http://tools.ietf.org/html/draft-ietf-dnsext-forgery-resilience		2008-07-12 09:38:35 +00:00
..
include	Merge from vendor/bind9/dist as of the 9.4.2-P1 import, including	2008-07-12 09:38:35 +00:00
rdata	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
acache.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
acl.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
adb.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
api	Merge from vendor/bind9/dist as of the 9.4.2-P1 import, including	2008-07-12 09:38:35 +00:00
byaddr.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
cache.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
callbacks.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
compress.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
db.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dbiterator.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dbtable.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
diff.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dispatch.c	Merge from vendor/bind9/dist as of the 9.4.2-P1 import, including	2008-07-12 09:38:35 +00:00
dlz.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dnssec.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
ds.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_api.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_internal.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_lib.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_openssl.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_parse.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_parse.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
dst_result.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
forward.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
gen-unix.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
gen.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
gssapi_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
gssapictx.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
hmac_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
journal.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
key.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
keytable.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
lib.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
log.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
lookup.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
Makefile.in	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
master.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
masterdump.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
message.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
name.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
ncache.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
nsec.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
openssl_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
openssldh_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
openssldsa_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
opensslrsa_link.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
order.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
peer.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
portlist.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rbt.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rbtdb.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rbtdb.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rbtdb64.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rbtdb64.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rcode.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdata.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdatalist.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdatalist_p.h	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdataset.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdatasetiter.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rdataslab.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
request.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
resolver.c	Merge from vendor/bind9/dist as of the 9.4.2-P1 import, including	2008-07-12 09:38:35 +00:00
result.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
rootns.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
sdb.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
sdlz.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
soa.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
ssu.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
stats.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
tcpmsg.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
time.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
timer.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
tkey.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
tsig.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
ttl.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
validator.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
version.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
view.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
xfrin.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
zone.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
zonekey.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00
zt.c	Flatten bind9 vendor work area	2008-07-12 05:00:28 +00:00