<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head><title>MaraDNS - a security-aware DNS server</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link rel="stylesheet" title="Woodson (Default)"
type="text/css" media="screen, projection" href="maradns-1.2-s.css">
<link rel="alternate stylesheet" title="Large Print"
type="text/css" media="screen, projection" href="maradns-1.2-l.css">
<link rel="stylesheet" type="text/css" media="print"
href="maradns-1.2-p.css">
<link rel="stylesheet" type="text/css" media="handheld"
href="maradns-1.2-h.css">
<script type=text/javascript src=styleswitcher.js></script>
</head>
<body>
<div align=center id=maradns-all>
<table><tr><td>
<div align=left>
<table><tr>
<td valign=top width=340>
<font id=maradns-name size="+4"><i><b>MaraDNS</b></i></font>
<br>
<div id=maradns-t>
A security-aware DNS server
</div>
</td>
<td> </td>
<td valign=top id=topright width=220>
<div align=right><table><tr><td id=trabalengua>
<i>
Erre con erre cigarro<br>
Erre con erre barril<br>
Rápido ruedan los carros<br>
En el ferrocarril<br></i>
</td></tr></table></div>
</td>
</tr></table>
<script type=text/javascript>
</script>
<div id=lefthand>
<div id=maradns-l>
<a href="index.html">Main</a>
<a href="download.html">Download</a>
<a href="notes.html">Documentation</a>
<a href="/blog">Blog</a>
<a href="changelog.html">Changelog</a>
<a href="sponsors.html">Sponsors</a>
<a href="products.html">Products</a>
</div> <!-- maradns-l -->
<script type="text/javascript">
<!--
if(isOKbrowser()) {
document.write("<p class=nocss><font size=-1>The following links that change text size will do nothing on your browser because your browser does not support CSS. This page is otherwise usable in a non-CSS browser.");
document.write("<\/font><\/p><div class=makelarge><div class=iebug>");
document.write("To make the font larger, <A href=\"#\" onclick=\"setActiveStyleSheet('Large Print');return false;\">click here<\/A><\/div><\/div><p class=makenormal>");
document.write("To see this without using a large font, <A href=\"#\" onclick=\"setActiveStyleSheet('Woodson (Default)');return false;\">click here<\/A><\/p>");
}
-->
</script>
</div>
<hr class=moyet>
<table><tr><td class=content width=596>
<div id=maradns-r>
<div id=paypal>
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but04.gif" border="0" name="submit" alt="PayPal Donate">
<input type="hidden" name="encrypted" value="-----BEGIN PKCS7-----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-----END PKCS7-----
">
</form>
</div>
<!-- end header -->
<H1>MaraDNS changelog</H1>
<p>maradns-1.4.05:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>Fix for CVE-2011-0520
<li>Deadwood updated to 3.0.02
</ul>
(2011.01.28)
</blockquote>
<p>maradns-1.4.04:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: NAPTR records now work when ~ is used to separate records
<li>NAPTR records now documented
<li>Bugfix: ANY queries now correctly work with NS referrals
<li>Example IPv6 addresses now use RFC-4193 compliant IPs
<li>Website updated to point out that Deadwood is now feature complete
and ready for beta-testing
<li>Some updates to the SQA regressions
<li>Deadwood updated to Deadwood 2.9.02
<li>Windows-only <tt>mkSecretTxt</tt> program added (*NIX users can just
type in "<tt>dd if=/dev/urandom of=secret.txt bs=64 count=1</tt>";
this gives Windows the same ability).
</ul>
(2010.07.31)
</blockquote>
<p>maradns-1.4.03:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>Patch fixing bug where an improperly terminated domain
name in a csv2 zone file terminated MaraDNS.
<li>Documentation for <tt>reject_aaaa</tt> and <tt>reject_ptr</tt> (which
have been around since 2003 but never documented until now) added.
<li>Other documentation updates
</ul>
(2010.02.02)
</blockquote>
<p>maradns-1.3.07.10:</p>
This is the previous stable branch of MaraDNS.
<blockquote>
<ul>
<li>Backport of patch fixing bug where an improperly terminated domain
name in a csv2 zone file terminated MaraDNS.
</ul>
(2010.02.02)
</blockquote>
<p>maradns-1.4.02:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>Documentation updated for 1.4 MaraDNS release.
<li>RPM spec file now builds RPM in CentOS (RHEL) 5.
<li><tt>csv2_default_zonefile</tt> was accidently broken in MaraDNS 1.4.01;
fixed.
<li>Updates to the SQA regressions; we now try some regressions that
intermittently fail in CentOS 5 up to three times before giving up.
</ul>
(2010.01.08)
</blockquote>
<p>maradns-1.4.01:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>The * character is no longer allowed in zone names.
<li>Deadwood updated to Deadwood 2.4.10
<li>Documentation update
</ul>
(2009.12.21)
</blockquote>
<p>maradns-1.3.14:</p>
This is the development branch of MaraDNS.
<blockquote>
<ul>
<li>William Summers submitted a patch to fix OpenBSD compile issues.
<li>Deadwood 2 updated to Deadwood-2.04 (with the tools also in MaraDNS
removed and the INSTALL document revised accordingly)
<li>Workaround for AFNIC (.fr) registration issues added
<li>GCC 4.3.2 compile-time warnings removed
<li>Milan Kupcevic added <tt>dns_port</tt> support to zoneserver
<li><tt>stdint.h</tt> now used for fixed-sized integers; this should make
MaraDNS easier to compile on unsupported platforms.
</ul>
(2009.08.04)
</blockquote>
<p>maradns-1.3.13:</p>
This is the development branch of MaraDNS.
<blockquote>
<ul>
<li>private_ips test revamped to work in a stock CentOS 5.2 install
<li>New parameter added <tt>notthere_ip</tt> (Sponsored by XenoBank who
offer <A href=http://xenobank.com>internet privacy</A> via a web
browser that automagically uses the TOR network for web browsing)
<li><tt>mqhash</tt> updated to also use Radio Gatun hash (in 32-bit mode).
<li>Currently unused borked_zone test added to SQA regressions
</ul>
(2009.02.13)
</blockquote>
<p>maradns-1.3.12:</p>
This is the development branch of MaraDNS.
<blockquote>
<ul>
<li>Deadwood 2 updated to version Deadwood-2.02
<li>When sending a "host not here" reply, the RD and RA bits in the
header were incorrectly set. Fixed. I would like to thank
Dr. Volker Jaenisch for not only pointing out this bug, but supplying
a patch to fix it.
<li>A compile-time warning when compiling with GCC 4.1 removed.
<li>mararc_n_verbose_query SQA regression updated to be more stable.
</ul>
(2008.09.09)
</blockquote>
<p>maradns-1.3.07.09:</p>
This is the stable branch of MaraDNS.
<blockquote>
<ul>
<li>When sending a "host not here" reply, the RD and RA bits in the
header were incorrectly set. Fixed. I would like to thank
Dr. Volker Jaenisch for not only pointing out this bug, but supplying
a patch to fix it.
<li>A compile-time warning when compiling with GCC 4.1 removed.
<li>mararc_n_verbose_query SQA regression updated to be more stable.
</ul>
Note: MaraDNS has <i>always</i> used random query IDs and source port
randomization generated using a cryptographically strong random number
generator and was never vulnerable to the "new" DNS spoofing attack.<p>
(2008.08.04)
</blockquote>
<p>maradns-1.2.12.10:</p>
This is the previous stable branch of MaraDNS; only critical bug fixes
are applied to this branch.
<blockquote>
<ul>
<li>When sending a "host not here" reply, the RD and RA bits in the
header were incorrectly set. Fixed. I would like to thank
Dr. Volker Jaenisch for not only pointing out this bug, but supplying
a patch to fix it.
</ul>
Note: MaraDNS has <i>always</i> used random query IDs and source port
randomization generated using a cryptographically strong random number
generator and was never vulnerable to the "new" DNS spoofing attack.<p>
(2008.08.04)
</blockquote>
<p>maradns-1.3.11:</p>
This is a development release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: MaraDNS should now be able to compile on Mac OS X (Darwin)
again.
<li>Some SQA test fixes: The private_ips test should now work in Fedora;
an uninitialized variable in the askmara.bug test is now initialized.
Thanks to Jean-Jacques Sarton for the bug reports and this fixes.
<li>Default maximum memory allowed to be allocated greatly increased in
order to minimize the chances of the program dying because it can not
allocate memory.
<li>Bugfix: RD value is now correctly echoed to client again
<li>Bugfix: RA bit has (generally) a reasonably sensible value, since
some embedded devices actually check this bit.
<li>TCP socket is released more quickly, allowing fast restarts of the TCP
zone server
<li>Other updates to the SQA regressions
<li>Improved cross-platform support, contributed by Jean-Jacques Sarton
<li>Some improvments to askmara.c and askmara-tcp.c
<li>Documentation typos kindly fixed by Boey Maun Suang
<li>Updates to documentation (DjbDNS is now FOSS software, man page cleanup,
etc.)
<li>Warn user if there is an unprintable control character in their zone file
</ul>
(2008.03.23)
</blockquote>
<p>maradns-1.3.07.08:</p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Some SQA test fixes: The private_ips test should now work in Fedora;
an uninitialized variable in the askmara.bug test is now initialized.
Thanks to Jean-Jacques Sarton for the bug reports and this fixes.
<li>Default maximum memory allowed to be allocated greatly increased in
order to minimize the chances of the program dying because it can not
allocate memory.
</ul>
(2007.12.25)
</blockquote>
<p>maradns-1.2.12.09:</p>
This is a stable (soon to be "previous stable") release of MaraDNS. This
will also be the last MaraDNS release to include RPM files, but 1.3 releases
always have an up-to-date .spec file.
<blockquote>
<ul>
<li>Backpot of ICANN root server list update
<li>Update to Daniel's <tt>maraconf.sh</tt> script
<li>Updates to the FAQ
<li>Bugfix: segfault when zoneserver was given bad IP in mararc file
<li>Bugfix: RD value is now correctly echoed to client again
<li>Bugfix: RA bit has (generally) a reasonably sensible value, since
some embedded devices actually check this bit.
<li>Compile warning when compiling as authoritative-only server removed.
</ul>
(2007.12.14)
</blockquote>
<p>maradns-1.3.10:</p>
This is a development release of MaraDNS.
<blockquote>
<ul>
<li><tt>deadwood-1</tt> now has TCP, IPv6, Windows, and ip-based filtering
support.
<li>Work in progress: Caching-only non-recusive DNS server in
<tt>deadwood-2</tt> directory. Not done, but the underlying
caching has has been completed, includes the ability to
delete elements not recently accessed, and can read and write
the cache to a file.
<li>Fixed bug where MaraDNS did not correctly echo the rd bit the
client sent us.
<li>The RA bit in the header is cleared when sending an authoritative
answer, and set when sending a recursive answer. Thanks to Jan Hrdonka
for the bug report.
<li>Allow there to be CSV2 zone files with nothing but SOA and NS records.
Again, thanks to Jan Hrdonka for the bug report.
<li>One of the ICANN root servers has just changed, and is updated in
the MaraDNS code.
</ul>
(2007.11.26)
</blockquote>
<p>maradns-1.3.07.07:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Fixed bug where MaraDNS did not correctly echo the rd bit the
client sent us.
<li>The RA bit in the header is cleared when sending an authoritative
answer, and set when sending a recursive answer. Thanks to Jan Hrdonka
for the bug report.
<li>Allow there to be CSV2 zone files with nothing but SOA and NS records.
Again, thanks to Jan Hrdonka for the bug report.
<li>One of the ICANN root servers has just changed, and is updated in
the MaraDNS code.
</ul>
(2007.11.26)
</blockquote>
<p>maradns-1.3.09:</p>
This is a development release of MaraDNS.
<blockquote>
<ul>
<li>New DNS load balancer added in <tt>deadwood-1</tt> directory. This is a
work in progress that will (hopefully) become a full fledged
thread-free recursive DNS server. Right now, it's only a basic UDP-only
DNS load balancer.
<li>.rpm files are no longer part of MaraDNS releases. People who wish to have
a .rpm can use the .spec file in build/ to make their own .rpm files.
<li>A script now automatically updates the .spec file
<li>Mr. Sarton has added some ipv6 support to <tt>askmara-tcp</tt> and
<tt>askmara</tt>. Note that MaraDNS needs to be compiled with authonly
support to use ipv6.
<li>Documents added: Document for Debian users telling them how to update to
a supported version of MaraDNS; MaraDNS coding style document.
<li>Documents updated: Security web page; Roadmap web page; Download web
page; COPYING file (copyright updated); mararc man page; duende man page
<li>Web page update: HTML modified so all web page documents parse in Dillo
without any reported errors.
<li>SQA tests added: Test to make sure private IPs work; tests added for most
mararc parameters
<li>SQA tests updated to not generated any visible messages except "test XXX
succeeded"
<li>askmara updated to correctly escape hash ('#') characters in TXT records
<li>It's now possible again, when <tt>debug_msg_level</tt> has a sufficiently
high level, to remotely see MaraDNS' timestamp when MaraDNS is only doing
recursion.
<li>The mararc parameter <tt>dns_port</tt> now works.
<li>AIX support contributed by Alfred Reibenschuh
</ul>
(2007.10.19)
</blockquote>
<p>maradns-1.3.07.06:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>.rpm files no longer part of MaraDNS release. People who wish to have
a .rpm can use the .spec file in build/ to make their own .rpm files.
<li>A script now automatically updates the .spec file
<li>Documents added: Document for Debian users telling them how to update to
a supported version of MaraDNS; MaraDNS coding style document.
<li>Documents updated: Security web page; Roadmap web page; Download web
page; COPYING file (copyright updated); mararc man page; duende man page
<li>Web page update: HTML modified so all web page documents parse in Dillo
without any reported errors.
<li>SQA tests added: Test to make sure private IPs work; tests added for most
mararc parameters
<li>SQA tests updated to not generated any visible messages except "test XXX
succeeded"
<li>askmara updated to correctly escape hash ('#') characters in TXT records
<li>It's now possible again, when <tt>debug_msg_level</tt> has a sufficiently
high level, to remotely see MaraDNS' timestamp when MaraDNS is only doing
recursion.
<li>The mararc parameter <tt>dns_port</tt> now works.
<li>AIX support contributed by Alfred Reibenschuh
</ul>
(2007.10.19)
</blockquote>
<p>maradns-1.3.08:</p>
This is a development release of MaraDNS, and a new branch of MaraDNS
<p>
(1.3.07 changes are limited to bugfixes, new SQA tests, and documentation
changes, and Mr. Sarton is making a lot of positive contributions improving
IPV6 performance that I can't add to the 1.3.07 branch)
<blockquote>
<ul>
<li>IPV6 support added to <tt>askmara</tt> and <tt>fetchzone</tt> by
Jean-Jacques Sarton.
<li>Support for FQDN6 records contributed by Jean-Jacques Sarton, and
documented by myself.
<li>Advocacy documented updated to be current with MaraDNS and a couple
of abandoned DNS servers; references added to support list of DjbDNS bugs.
<li>Security document updated.
<li>Tutorials updated to point out one can have the recursor use custom
name resolution for subtrees of the DNS space.
<li>SQA tests to test all mararc dictionary variables added.
<li><tt>maraconf.sh</tt> updated
<li>Support for NAPTR record added
<li>FAQ updated
<li>Tools that help me make new MaraDNS releases added to
<tt>tools/misc</tt> directory.
</ul>
(2007.09.21)
</blockquote>
<p>maradns-1.3.07.05:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Advocacy documented updated to be current with MaraDNS and a couple
of abandoned DNS servers; references added to support list of DjbDNS bugs.
<li>Security document updated.
<li>Tutorials updated to point out one can have the recursor use custom
name resolution for subtrees of the DNS space.
<li>SQA tests to test all mararc dictionary variables added.
<li><tt>maraconf.sh</tt> updated
<li>FAQ updated
</ul>
(2007.09.21)
</blockquote>
<p>maradns-1.0.41:</p>
This is a legacy release of MaraDNS.
<blockquote>
<ul>
<li>Backport of 1.3 bugfix for improper rotation of resource records.
</ul>
(2007.08.29)
</blockquote>
<p>maradns-1.2.12.08:</p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Backport of 1.3 bugfix for improper rotation of resource records.
</ul>
(2007.08.29)
</blockquote>
<p>maradns-1.3.07.04:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: Cause of improper rotation of resource records found and
fixed. I would like to thank Michael Krieger for his bug report.
<li>Cleanup: MinGW32 compile-time warnings removed
<li>Documentation: All SQA regressions now have README files; zoneserver
man page now has example mararc file
<li>Patch contributed by Joerg Sonnenberger making things easier to compile
in DragonflyBSD
<li>Install.sh directory for documentation fixed. I would like to
thank Brandon Holbrook for his bug report.
<li>SQA meta-script that runs and verifies all SQA regressions added
<li>SQA tests added: Spurious "bad query" messages, "percent" parse bug
(doesn't seem to ever have been a real bug), "noat" parse bug, Star handling
when <tt>bind_star_handling</tt> has a value of 1, improper RR rotation bug,
and making sure the example mararc file in the zoneserver man page is correct
</ul>
(2007.08.29)
</blockquote>
<p>maradns-1.2.12.07:</p>
This is a stable bugfix-only release of MaraDNS. All of these bug fixes
are backports of bugs fixed in the 1.3 branch.
<blockquote>
<ul>
<li>Bugfix: If bind_star_handling was set to 2, MaraDNS would leak
memory when the existance of another RR stopped resolution using a
star record.
<li>Bugfix: bind_star_handling, when set to 2, now appears to do the
right thing.
<li>Bugfix: Non-critical double-free() removed.
<li>Bugfix: askmara no longer goes in to an infinite loop when it
receives an invalid TXT record.
<li>Bugfix: csv2 parser now makes sure that TXT chunks are no longer
than 255 characters in all cases.
</ul>
(2007.08.16)
</blockquote>
<p>maradns-1.3.07.03:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: It is now possible to have a csv2_default_zonefile without
any other zonefiles (This was a 1.3-only bug)
<li>Bugfix: <tt>recurse_delegation</tt> now correctly works (1.3-only
bug)
<li>Cleanup: Documentation files with DOS-style newlines converted to
have UNIX-style newlines
<li>Script to update MaraDNS can now be run from a POSIX-compliant
/bin/sh, and no longer uses bash-specific syntax
<li>RFC2181 compliant truncation regression finished
<li>SQA tests added: ANY and case insensitivity, LOC records,
bind_star_handling set to 2, csv2_default_zonefile, NS delegation
tests
</ul>
(2007.08.16)
</blockquote>
<p>maradns-1.3.07.02:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: askmara no longer goes in to an infinite loop when it
receives an invalid TXT record
<li>Bugfix: csv2 parser now makes sure that TXT chunks are no longer
than 255 characters in all cases.
<li>SQA regressions added: RFC2181 compliant truncation, askmara bug,
csv2 parser long TXT chunk bug.
</ul>
(2007.06.29)
</blockquote>
<p>maradns-1.3.07.01:</p>
This is a beta testing release of MaraDNS.
<blockquote>
<ul>
<li>Documentation for the <tt>bind2csv2.py</tt> utility the converts
zone files from BIND to MaraDNS format added.
</ul>
(2007.06.21)
</blockquote>
<p>maradns-1.3.06:</p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: If <tt>bind_star_handling</tt> was set to 2, MaraDNS would
leak memory when the existance of another RR stopped resolution using a
star record.
<li>Bugfix: <tt>bind_star_handling</tt>, when set to 2, now appears to
do the right thing.
<li>Testing: Unit tests for the five memory leaks that have appeared in the
1.2/1.3 branches of MaraDNS.
<li>Bugfix: The default <tt>max_mem</tt> is now a lot bigger when we
need threads to perform recursion.
</ul>
(2007.06.19)
</blockquote>
<p>maradns-1.3.05:</p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>New mararc variable, <tt>max_mem</tt> added, that limits the amount
of memory MaraDNS will allocate.
<li>Bugfix: Whether to give a NXDOMAIN or a "not there" reply with star
records fixed to be RFC1034 and RFC4074 compliant.
<li>Bugfix: Reply for hosts not in a <tt>csv2_default_zonefile</tt> now
correctly return a "not there" instead of a NXDOMAIN (unless there is no
host of any RR type that matches the desired name).
<li>Bugfix: João Antunes Predator tool found two memory leaks.
Fixed.
</ul>
(2007.05.21)
</blockquote>
<p>maradns-1.2.12.06:</p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: Whether to give a NXDOMAIN or a "not there" reply with star
records fixed to be RFC1034 and RFC4074 compliant.
<li>Bugfix: Reply for hosts not in a <tt>csv2_default_zonefile</tt> now
correctly return a "not there" instead of a NXDOMAIN (unless there is no
host of any RR type that matches the desired name).
<li>Bugfix: João Antunes Predator tool found two memory leaks.
Fixed.
</ul>
(2007.05.17)
</blockquote>
<p>maradns-1.3.04:<p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>Remco pointed out that MaraDNS is not RFC4074 section 4.2 compliant.
Fixed.
<li>Update of recursive server to make it more robust against certain DOS
attacks.
<li>The port range that the recursive resolver binds to can now be changed
in the mararc file
<li>FAQ and SQA updates
</ul>
(2007.03.22)
</blockquote>
<p>maradns-1.0.40:<p>
This is a legacy release of MaraDNS
<blockquote>
<ul>
<li>Backport of patch to make recursive server more robust against
certain DOS attacks.
</ul>
(2007.03.05)
</blockquote>
<p>maradns-1.2.12.05:<p>
This is a stable release of MaraDNS
<blockquote>
<ul>
<li>LOC records with a precision that is a multiple of 10 now work.
<li>Memory leak found by Rani Assaf plugged.
<li>Recursive server now more robust against certain DOS attacks.
<li>Documentation updates.
</ul>
(2007.02.17)
</blockquote>
<p>maradns-1.3.03:<p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>Memory leak found by Rani Assaf plugged; SQA suite now has regression
that will find this leak.
<li>Whether to recurse when MaraDNS would otherwise give out a NS delegation
record is now a user-settable feature.
<li>Bugfix: '.' can now be a hostname by itself.
<li>Bugfix: MaraDNS now compiles with gcc 2.96 again.
<li>The version.maradns special query now works in a 100% recursive server
again (as long as admin_acl is set and gives permissions).
<li>When the tilde is used to separate records, it is no longer necessary to
have some of the WKS or LOC fields be on the same line.
<li>When the tilde is used to separate records, it is no longer possible
to have a pipe (|), hash (#), or nonprintable control character in a
TXT record. This will make parsing of csv2 files by scripts easier.
<li>When the tilde is used to separate records, multiple TXT chunks can
now be separated by whitespace. This allows for
<tt>foo.% TXT 'chunk 1' 'chunk 2'</tt> records.
<li>Documentation updates.
</ul>
(2007.02.14)
</blockquote>
<p>maradns-1.3.02:<p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>The recursive resolver can now use custom root servers for subtrees
of the DNS space; for example <tt>root_servers["local."] = "10.1.2.3"</tt>
<li>Windows port now compiles with -Os, resulting in a smaller Windows
binary (actually, when I built the 1.2.12.04 binary, I set this
parameter by hand; now it's the default Windows build flag)
<li>Windows port now uses pthreads-w32 2.8 instead of pthreads-w32 2.6
<li>csv2 parsing code updated to always allow and always ignore commented
tildes
<li>Bugfix: Star records that aren't in an authoritative zone now work
<li>MaraDNS now will not waste time trying to find authoritative records
if there are no authoritative records to find
<li>Some minor webpage updates
<li>Troubleshooting guide added to tutorial
</ul>
(2007.01.09)
</blockquote>
<p>maradns-1.3.01:
<p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>csv2 zone files now can use tildes to separate resource records.
<li>New mararc variables: <tt>upstream_port</tt> and <tt>bind_port</tt>
<li><tt>zoneserver</tt> now kills its child processes when getting a
TERM signal.
<li><tt>zoneserver</tt> now tells people the IP of failed zone transfer
attempts when <tt>verbose_level</tt> is 4 or higher.
</ul>
(2006.12.21)
</blockquote>
<p>maradns-1.2.12.04:
<p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: <tt>make debug</tt> works again. Note that <tt>make debug</tt>
<b>really</b> slows MaraDNS down.
<li><tt>ej2man</tt> now works with both Perl 5.8.0 and 5.8.8. I would like
to thank the people on comp.lang.perl.misc for their help.
<li><tt>ej2txt</tt> now works with different versions of <tt>links</tt>.
<li>Fixed bug with ANY and case sensitivity. I would like to thank Kyler
Laird for pointing out this issue.
<li>Added new mararc variable, <tt>csv2_tilde_handling</tt> that currently
does nothing but require, if set, having the value of 0. This is here
so a MaraDNS 1.2.12 mararc is compatible with some future plans I have.
<li>Added new compiler define <tt>UPSTREAM_PORT</tt> in <tt>MaraDns.h</tt>
that allows the port MaraDNS uses to connect to other nameservers to be
more easily changed.
</ul>
(2006.11.24)
</blockquote>
<p>maradns-1.2.12.03:
<p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Bugfix: MaraDNS no longer sends out incorrect "server fail" DNS messages.
This should make MaraDNS a better resolver.
<li>Bugfix: Spurious "Bad query received" messages.
<li>Some minor updates to the documentation
<li>Incomplete bind2csv2.py script added; this is a work in progress.
<li>Advocacy document is now a part of the MaraDNS.org webpage.
<li>Updates to Daniel Zilli's maraconf script.
</ul>
(2006.10.08)
</blockquote>
<p>maradns-1.2.12.02:
<p>
This is a stable release of MaraDNS.
<blockquote>
<ul>
<li>Slight cleanup to new Csv2 parsing code
<li>Bugfix: A PTR that pointed to a CNAME that pointed to a non-responsive
server would create a slightly invalid DNS packet. Fixed.
<li>Bugfix: RFC2181-compliant truncation was broken. Fixed.
<li>Updates to the old pre-1.0 testbed to run this testbed again
(MaraDNS passed with flying colors)
<li>Updates to the 1.2 testbed
<li>Updates to the stress test that sends a large number of real DNS queries
<li>FAQ entry about how to debug NS delegation problems added
<li>Updates to FAQ and documentation.
<li>Minor update to compression code to make it conform to MaraDNS coding
style.
<li>Documents advocating MaraDNS added (this is a work in progress)
<li><tt>mqhash</tt> utility documented.
<li>Various non-critical memory leaks (memory allocated once during startup
which wasn't correctly freed) and one minor error (which was not
a security problem) were detected by
<A href="http://valgrind.org/">Valgrind</A> and fixed.
<li>.pdf man page reference now uses letter size paper again.
</ul>
(2006.08.14)
</blockquote>
<p>maradns-1.2.12.01:
<p>
This is a testing release of MaraDNS.
<blockquote>
<ul>
<li>Memory leak plugged: MaraDNS' resolver was leaking about 300 bytes
whenever someone asked for a PTR that pointed to a CNAME that
didn't point to a legitimate PTR.
<li>Vlatko Kosturjak from Croatia has added <tt>chkconfig</tt> support
to the RPM spec file.
<li>Documentation on making MaraDNS a Win32 service added.
<li>Truncation of records too long to fit in a 512-byte packet now done
in a RFC2181-compliant manner.
<li>Slash commands added to csv2 zone files: '/serial', which allows the
serial for a zone file to be automatically updated whenever the zone
file is edited; '/ttl', which allows the default TTL to be changed;
'/origin', which allows the origin to be changed; '/opush' and '/opop'
which allow the origin's values to be put on a stack; and '/read',
which allows another file to be included in a zonefile.
<li>Some tidying of the Csv2 parsing code to deallocate unneeded memory
resources; this should lower MaraDNS memory usage when a large number
of csv2 zone files exist.
<li>Records stored in the authoritative half are now always marked
"authoritative" in the DNS header; records not in a zone will simply
not have NS records in the NS/AR section of the answer.
<li>Download page revamped to be faster and easier to use.
</ul>
(2006.07.26)
</blockquote>
<p>maradns-1.0.39:
<blockquote>
<ul>
<li>Backport of memory leak fix to 1.0 branch of MaraDNS
</ul>
(2006.07.24)
</blockquote>
<p>maradns-1.2.07.8:
<blockquote>
<ul>
<li>Backport of adding infomation about dangling CNAMEs to FAQ from testing
branch (see Debian bug #373781)
<li>Backport of explicit exit 0 added to MaraDNS start/stop script (Debian
bug #374655)
<li>Backport of 1.2.11 bugfix: We can now have email addresses without
@ (using . instead)
<li>Memory leak plugged: MaraDNS' resolver was leaking about 300 bytes
whenever someone asked for a PTR that pointed to a CNAME that
didn't point to a legitimate PTR.
<li>Vlatko Kosturjak from Croatia has added <tt>chkconfig</tt> support
to the RPM spec file.
</ul>
(2006.07.24)
</blockquote>
<p>maradns-1.2.11:
<blockquote>
<ul>
<li>All known RR types added to <tt>MaraDns.h</tt>
<li>Support for the following RR types added to CSV2 zone files: HINFO, WKS,
MD, MF, MB, MG, MINFO, MR, AFSDB, RP, X25, ISDN, RT, NSAP, NSAP-PTR, PX,
GPOS, and LOC.
<li>Bugfix: We can now have email addresses without @ (using . instead)
</ul>
(2006.07.18)
</blockquote>
<p>maradns-1.2.07.7:
<blockquote>
<ul>
<li>Backport of patch to work around Perl á annoyances to the stable branch.
</ul>
(2006.07.12)
</blockquote>
<p>maradns-1.2.10:
<blockquote>
<ul>
<li>Issues with á in man pages finally fixed; Perl is such a pain sometimes
<li>More timestamp types added as per Remmy's patch
<li>Information about dangling CNAME entries added to FAQ (see Debian
bug #373781)
<li>Explicit <tt>exit 0</tt> added to MaraDNS start/stop script (see Debian
bug #374655)
</ul>
(2006.06.21)
</blockquote>
<p>maradns-1.2.07.6:
<blockquote>
<ul>
<li>Backport of MaraDNS 1.2.09 Microsoft.com fix to stable branch
<li>Backport of MaraDNS 1.2.08 ej2man fix to stable branch
</ul>
(2006.06.16)
</blockquote>
<p>maradns-1.0.38:
<blockquote>
Backport of MaraDNS 1.2.09 Microsoft.com fix to legacy 1.0 branch<p>
(2006.06.16)
</blockquote>
<p>maradns-1.2.09:
<blockquote>
<ul>
<li>Recursive resolver patched to be able to process the bizarre packets
that Microsoft.com's DNS server makes.
<li>Some minor documentation cleanup.
</ul>
(2006.06.14)
</blockquote>
<p>maradns-1.2.08:
<blockquote>
<ul>
<li>Added support for RFC4408 SPF record type
<li>Added new mararc variable <tt>retry_cycles</tt>. This allows us to
contact all of the DNS servers to resolve a name before giving up.
<li>Updated ej2man to not put a literal á in man page nroff sources
(Debian's lint doesn't like this).
<li>Askmara updated to inform user of error from remote DNS server.
</ul>
(2006.06.11)
</blockquote>
<p>maradns-1.2.07.5:
<blockquote>
<ul>
<li>Bugfix: ANY queries point to star records now works
<li>pdf file problems should be fixed
</ul>
(2006.05.29)
</blockquote>
<p>maradns-1.2.07.4:
<blockquote>
<ul>
<li>Delegation NS records fixed
<li>Some minor mararc parsing bugs fixed
<li>Documentation tweaks (the webpage now validates, etc.)
</ul>
(2006.05.23)
</blockquote>
<p>maradns-1.2.07.3:
<blockquote>
<ul>
<li>MaraDNS compiles on OpenBSD (Thanks, Adam Montague, for the OpenBSD
account).
<li>MaraDNS RPM file fixed to include <tt>/etc/maradns/logger</tt> directory
that the daeminizing tool needs.
<li>Documentation updated to clarify that a single name can have more than
one IP
<li>Updated the <tt>mqhash</tt> password management utility (Next: Document
this useful little program).
<li>The binary RPM is now built on CentOS 3.7 instead of RedHat 6.2
</ul>
(2006.05.15)
</blockquote>
<p>maradns-1.0.37:
<blockquote>
This is an update for the 1.0 legacy branch of MaraDNS
<ul>
<li>Removed all example mararc files which allow any IP on the internet
to perform recursive queries (these can be used for denial of service
attacks)
</ul>
(2006.04.07)
</blockquote>
<p>maradns-1.2.03.6:
<blockquote>
Unless there is demand from MaraDNS' users, this will be the last release
for the legacy 1.2.03 branch of MaraDNS.
<ul>
<li>Backport of zoneserver startup fix from the 1.2.07 branch.
</ul>
(2006.04.07)
</blockquote>
<p>maradns-1.2.07.2:
<blockquote>
<ul>
<li>Location of Duende in the zoneserver startup script was broken. Fixed.
Thanks to Daniel Zilli for finding this.
<li>Have the server return "server fail" instead of "format error" when no
nameservers can be contacted when trying to resolve a given host name.
<li>Make the default behavior for the above case be to send out that "server
fail" message.
<li>Added Danial Zilli's wonderful Brazilian Portuguese translation of Mara's
documents and status messages.
</ul>
(2006.04.05)
</blockquote>
<p>maradns-1.2.07.1:
<blockquote>
<ul>
<li><tt>duende</tt> now always logs a message before exiting
<li>zone names are now case-insensitive.
<li>Programs in <tt>sqa/</tt> directory can compile again.
<li>Dictionary variables now must be initialized to work.
<li>Documentation updated.
</ul>
(2006.03.22)
</blockquote>
<p>maradns-1.2.03.5:
<blockquote>
<ul>
<li><tt>duende</tt> tool always logs something before exiting
<li>"Using default ICANN servers" message now has newline
<li>Broken <tt>upstream_servers</tt> example in docs fixed
</ul>
(2006.03.21)
</blockquote>
<p>maradns-1.2.06:
This is a testing (possibly unstable) release of MaraDNS.
<blockquote>
<ul>
<li>Many minor updates to the documentation.
<li>Web page HTML/CSS updated to look better in MSIE 6.
<li>New mararc variable, <tt>handle_noreply</tt>, which determines how
to inform the DNS client that no remote servers could be contacted
when trying to resolve a host name.
<li>It is now possible to send DNS error messages via the <tt>udperror()</tt>
function again.
<li>Some minor update to how log messages are output.
</ul>
(2006.03.10)
</blockquote>
<p>maradns-1.2.03.4:
<blockquote>
<ul>
<li>It is now possible to send DNS error messages via the <tt>udperror()</tt>
function again.
</ul>
(2006.03.03)
</blockquote>
<p>maradns-1.2.05:
<p>
This is a testing (possibly unstable) release of MaraDNS.
<blockquote>
<ul>
<li>Added faq entry about setting <tt>upstream_servers</tt>
<li>Removed three unimplemented (or never documented and disabled)
<tt>mararc</tt> variables: <tt>tuzona_inetd</tt>,
<tt>win9x_service</tt>, and <tt>resurrections</tt>.
<li>Out-of-bailiwick authoritative records now no longer have an
authority section.
<li>New csv2 record type "FQDN4"; this is an A record which
automatically makes the corresponding PTR record.
<li>CNAME records now mentioned in csv2 man page.
<li>Improved error message for a hostname that doesn't end in a '.' (or
'%').
<li>Added <tt>admin_acl</tt> mararc variable, to limit the IPs that
can see MaraDNS' version number (and debug information about
MaraDNS' internal state when <tt>debug_msg_level</tt> is set).
<li>Added <tt>remote_admin</tt> mararc variable, which allows
IPs listed in <tt>admin_acl</tt> to remotely change the
amount of information logged by MaraDNS. This is mainly for
debugging problems on high-traffic sites where a full log is
too large (and slows things down too much) to be practical.
</ul>
(2006.02.21)
</blockquote>
<p>maradns-1.2.03.3:
<blockquote>
<ul>
<li>MaraDNS 1.2.04 Cygwin fix patch applied to the stable branch
<li>FAQ updated to tell people how to use <tt>upstream_servers</tt>
</ul>
(2006.02.10)
</blockquote>
<p>maradns-1.2.04:
<p>
This is a testing (potentially unstable) release of MaraDNS.
<blockquote>
<ul>
<li>Cygwin fix: <tt>chroot()</tt> and <tt>setuid()</tt> do not effectively
work on Cygwin; MaraDNS updated to not use these calls in Cygwin.
This makes the Cygwin release not have all of the security of a
native UNIX version of MaraDNS.
<li>RPM updates: Spec file made current; mararc for RPM updated for MaraDNS
1.2; RPM updated by Greg Swallow to compile on CentOS 3 and 4.
<li>Updates to the recursive code to make MaraDNS run better when used
by a large ISP:
<ol>
<li>TTL determining code updated
<li>Two minor typos fixed
<li>Custodian tweaked to work better under high load
<li><tt>maxprocs</tt> can now be as high as 5000
<li><tt>min_visible_ttl</tt> mararc variable added
</ol>
</ul>
(2006.02.09)
</blockquote>
<p>maradns-1.2.03.2:
<blockquote>
<ul>
<li>Hotfix: Re-apply fix for broken Linux 2.6 kernel behavior which causes
MaraDNS to freeze.
<li>Mingw32: Have the binaries stripped
</ul>
(2006.02.02)
</blockquote>
<p>maradns-1.2.03.1:
<blockquote>
<ul>
<li>Fixed issue with ANY queries pointed out by Christian Klossek.
<li>Made <tt>bind_star_handling</tt> even more RFC-compliant: If
<tt>*.example.com.</tt> and <tt>bar.example.com.</tt> exist,
then <tt>foo.bar.example.com.</tt> should point to "not there"
instead of whatever <tt>*.example.com</tt> points at.
<li>Updated mingw32 port: Removed compile-time warnings, set up scripts
to mostly automate making the .zip file for the win32 MaraDNS binary.
<li>Updated numbering scheme to use major.minor.revision.patchlevel
for stable 1.2 releases; this allows the 1.2 branch to better have
both a testing and a stable branch.
</ul>
(2006.01.21)
</blockquote>
<p>maradns-1.2.02:
This is a beta-test potentially unstable release, since the changes
are significant enough to warrant full testing before declaring this
as stable as previous 1.2 releases of MaraDNS.
<blockquote>
<ul>
<li>Changed build process to have consistent compile-time flags in
all directories, and to allow people on unsupported platforms to
compile MaraDNS after they look at obnoxious error message.
<li>Fixed all of the compile-time warnings this change brought out.
<li>Added a new mararc variable, <tt>bind_star_handling</tt> for people
who want full BIND compatibility with star records.
<li>Documentation updates: <tt>bind_star_handling</tt> documented,
<tt>SOURCE.FILES</tt> made current.
<li>Copyright notice updated for 2006
<li>.gz tarball now optimized by Igor Pavlov and Andrea Mazzoleni's
<tt>advdef</tt> program; this reduces size of .gz tarball by about 5%
</ul>
(2006.01.02)
</blockquote>
<p>maradns-1.2.01:
<blockquote>
<ul>
<li>Added script that will (mostly) automatically explode the tarball of
the last release of MaraDNS, apply the patches, update the doc, and
make the patches part of the 1.2 release.
<li>Updated dangling CNAME document to clarify that typos can also cause
the dangling CNAME warning.
<li>Updated the tarball building process of MaraDNS to also use Igor
Pavlov's LZMA compression to make a compressed MaraDNS tarball which
is both smaller and extracts faster than the bzip2 tarball.
<li>Fixed spurious dangling CNAME warning bug which Alex Kapranoff found.
</ul>
(2006.01.01)
</blockquote>
<p>maradns-1.0.36:
<blockquote>
This is a bugfix release for the legacy 1.0 branch of MaraDNS.
<ul>
<li>A backport of the 2-line patch recently posted to the mailing list
concerning incorrect dangling CNAME warnings
</ul>
(2005.12.31)
</blockquote>
<p>maradns-1.2.00:
<blockquote>
This is the new stable release of MaraDNS, which is an update of the 1.0
branch. The 1.0 branch will be maintained for standard bugfixes until
December 21, 2007; critical security fixes, should they occur, will be
applied to the 1.0 branch until December 21, 2010.
<p>
Here are the changes from 1.1.91:
<ul>
<li>A small change to <tt>dns/Decompress.c</tt> so that MaraDNS runs on
the compiler that comes with the IBM Power version of SuSE.
<li>Minor corrections to the FAQ
<li>BINDFAIL message no longer says that there's probably another process
using port 53; there are a number of things that can trigger this error
message and the "System said" message usually explains what's really
going on.
<li>Pointed out that Macintosh-style newlines break the csv2 parser's
ability to tell the user what line the error is on (This should generally
not be a practical issue, since it is uncommon for people to use this
text file format; it's too close to 1.2.00 to fix this).
<li>Update to the ej2man script so we don't have a raw accented character
in the maradns man page (we use the ROFF \('a instead)
</ul>
(2005.12.21)
</blockquote>
<p>maradns-1.1.91:
<blockquote>
This is the second release candidate for MaraDNS 1.2.
<p>
Here are the changes from 1.1.90:
<ul>
<li>Made all manpage headings all-caps, to be consistent with standard
manpage style.
<li>Updated "unsupported features" part of MaraDNS man page to point out
that 1.2 now supports more non-RFC1035 DNS features
<li>Plain text documents in a more easily found directory (doc/en/text
instead of doc/en/tutorial/text).
<li>Added a modified version of Paul Sowden and Peter-Paul Koch's
<tt>styleswitcher.js</tt> file so that people who need a large
font to read a web page can get the large font with just one click.
<li>Updated the authoritative and recursive tutorial documents to cover the
case of wanting a recursive name server to have private host names.
<li>Explicitly tell the user /etc/mararc is not being replaced during make
install process.
<li>Updated the FAQ for version 1.2 of MaraDNS.
<li>Split up the DNS introduction document and the list of all tutorials,
usage guides, and man pages.
<li>Added makefile in webpage document (now I have a one-command way of
updating the MaraDNS webpage).
<li>Spelling errors checked and corrected in all tutorial and man page
documents.
</ul>
(2005.12.14)
</blockquote>
<p>maradns-1.1.90:
<blockquote>
This is the first release candidate of MaraDNS 1.2. Should no one
report any problems with this release, this will be released, unchanged,
as MaraDNS 1.2.00 on December 21.
<p>
Here are the changes from 1.1.61:
<ul>
<li>Fixed some bugs in the ej2man script; the man pages now look nicer.
<li>Added a new EJ tag: HIBIT; this allows some EJ output to contain hi-bit
characters (such as HTML pages) while other EJ output has equivalent
content with no hi-bit
characters (such as man pages, which don't take well to non-ASCII)
<li>Fixed rendering problems with the pdf manpage reference (I updated ps2pdf
to the one from the latest 8.53 Ghostscript) and added the csv2_txt
man page to this reference (HIBIT makes this now possible).
<li>Renamed security_design.html security.html to make it clear this is
a document about MaraDNS' security.
</ul>
(2005.12.07)
</blockquote>
<p>maradns-1.1.61:
<blockquote>
<ul>
<li>Document minor updates: default value of <tt>timestamp_type</tt> is
now five (this was changed in 1.1.60); Clarify that maradns needs to
be restarted to reload zones in <A
href="http://www.maradns.org/tutorial/1.2/dnsslave.html">DNSslave</A>
document; corrected misspelled words and minor grammatical errors
in <A href="http://www.maradns.org/tutorial/1.2/quick_start.html">the
Quick Start guide</A>
<li>Mac OS X port: MaraDNS sucessfully compiles on Mac OS X (Darwin) again;
all compile-time warnings removed.
<li>MinGW32 port: Changed port to use #ifdef statements instead of a patch
to make source Win32-compatible; this allows me to make source changes
without having to constantly update the mingw32 patch.
</ul>
(2005.12.05)
</blockquote>
<p>maradns-1.1.60:
<blockquote>
<ul>
<li>Authoritative tutorial expanded and updated
<li>DNS master document written; DNS tcp document updated
<li>Procedure for making text files updated
<li>Text files for tutorial added
<li>Examples added to "dangling" document
<li>Updated spec file to include maradns.zoneserver startup script
<li>Removed OSRC (open-rsc.org doesn't resolve) and Alternic (alternic.org
owned by squatter) from example full mararc file
<li>Added document on being a DNS slave
<li>Verified that shell scripts in dnsslave document work
<li>Created document on updating from MaraDNS 1.0 to 1.2 (most of the time,
change nothing)
<li>Many other tutorial improvments
<li>Verified spelling of all tutorial documents
<li>mararc man page correction: csv1 zone files are for MaraDNS 1.0, not
1.X
<li>HR tag added to ej specification.
</ul>
(2005.12.03)
</blockquote>
<p>maradns-1.1.59:
<blockquote>
<ul>
<li>Cygwin port fix: ipv6 not compiled in authonly mode on Cygwin (Cygwin
doesn't yet have ipv6)
<li>Updated RPM-building spec file for the 1.1 branch of MaraDNS
</ul>
(2005.11.28)
</blockquote>
<p>maradns-1.1.58:
<blockquote>
<ul>
<li>Cleaned up the FreeBSD compile
<li>Cleaned up the Cygwin compile; MaraDNS compiles on Cygwin again
<li>Removed all warnings seen when compiling on Cygwin (Cygwin GCC is
a little more pedantic than Linux GCC)
<li>Updated the Mingw32 patch
<li>Fixed issue with install script (see mailing list)
</ul>
(2005.11.23)
</blockquote>
<p>maradns-1.1.57:
<blockquote>
<ul>
<li>Partial port of MaraDNS to mingw32 (can you say maradns.exe) done.
<li>Since 127.0.0.3 doesn't work on many systems, changing all loopback
examples to use the IP address 127.0.0.1; also changing Askmara's
default server address to 127.0.0.1
</ul>
(2005.11.21)
</blockquote>
<p>maradns-1.0.35:
<blockquote>
<ul>
<li>Backport of 1.1.x fix of csv1 example in documentation
<li>Backport of 1.1.x fix of MINFO RR description
<li>Backport of 1.1.x security fix.
</ul>
(2005.11.20)
</blockquote>
<p>maradns-1.1.56:
<blockquote>
<ul>
<li>SECURITY FIX: Made the RNG algorithm resistant to cache sniffing
attacks. See <A
href="http://www.maradns.org/download/patches/maradns-1.0.34-rng.patch">this
page</A> for a full description of this security issue.
<li>Modified configure script to not compile on unsupported systems.
</ul>
(2005.11.20)
</blockquote>
<p>maradns-1.1.55:
<blockquote>
<ul>
<li>This is the first Beta-test release for the up-and-coming MaraDNS 1.2
<li>Fixed description of minfo RR in DNS compression code
<li>Fixed askmara to correctly output SOA and RAW records
<li>Changed zoneserver to use select() model for handling the processing
of child process' output (thanks, Albert)
<li>Initialized some uninitialized variables (thanks again, Albert)
<li>Added Albert Lee to CREDITS file
<li>Removed perl and gawk dependencies from franky.hosts.test test (the only
thing we now need to pull from ports on FreeBSD to run this is Bash)
<li>Alpha-level SQA testing done.
</ul>
(2005.11.18)
</blockquote>
<p>maradns-1.1.54:
<blockquote>
<ul>
<li>Updated csv1tocsv2.pl and ej2man scripts to be able to use a Perl
interpreter that is not in <tt>/usr/bin</tt>
<li>Both UIDs that the zoneserver becomes are now determined by the
"maradns_uid" mararc variable.
<li>The zoneserver now uses the "maradns_gid" variable.
<li>Corrected spelling of "privileges"
</ul>
(2005.11.14)
</blockquote>
<p>maradns-1.1.53:
<blockquote>
<ul>
<li>SQA: Added scripts to help with Y2038 testing
<li>Y2038 fix: MaraDNS is now fully functional before and after the Y2038
turnover on systems with 32-bit timestamps.
<li>Update year_2038_statement; MaraDNS is now Y2038-compliant.
<li>Updated Y2038 libraries to be thread-safe
<li>Bug fix: A hostname can now be the first line in a csv2 zone file
<li>Doc fix: Fixed broken "U" record example in csv1 man page
<li>Bug fix: The zoneserver now makes upper-case domain names lower-case
<li>Bug fix: The zoneserver now correctly serves csv2 star records
</ul>
(2005.11.09)
</blockquote>
<p>maradns-1.1.52:
<blockquote>
<ul><li>Took care of segfault that only happened in FreeBSD
<li>Made non-root running of MaraDNS possible again
<li>Added FreeBSD-specific Makefiles
</ul>
(2005.11.06)
</blockquote>
<p>maradns-1.0.34:
<blockquote>
<ul><li>Hotfix: recursion works again
<li>Regression procedure added.
</ul>
(2005.10.26)
</blockquote>
<p>maradns-1.0.33:
<blockquote>
<ul>
<li>Fixed occassional crash that happens while reading zone files at
MaraDNS startup.
<li>Fixed occassional compression error which shows up in MaraDNS logs.
<li>Update man page to point out some unimplemented features will be in
1.2
</ul>
(2005.10.24)
</blockquote>
<p>maradns-1.1.51:
<blockquote>
<ul>
<li>Bug fix: hide_disclaimer is now case insensitive (any three-letter string
will now hide the disclaimer, in fact)
<li>Bug fix: Unknown mararc variable error message will not have a \012 in
it.
<li>Added PDF file which is a printable reference of MaraDNS man pages
<li>Fixed problems with synth_soa_origin and synth_soa_seria
<li>Fixed js_append.3 man page (returns 0, not JS_SUCCESS, on success)
</ul>
(2005.10.23)
</blockquote>
<p>maradns-1.1.50:
<blockquote>
<ul>
<li>Fixed a bug which caused people to see compression errors (The bug was
caused when a PTR record pointed to a non-existant record)
<li>Web design touch-up: The web page is now centered (I found the code
to force Firefox to always have a scrollbar like IE); looks better in
MacIE/IE4/Opera 5; the handheld and printing stylesheets look better.
<li>Cleanup of install script; csv2 zone file installed instead of csv1
zone file; etc.
<li>Cleanup and clarification of default mararc file
<li>Changed makefile in rng/ to keep the rng-32bit-tables.h file; this
will make things easier for people trying to cross-compile MaraDNS
<li>Made MaraDNS' default UID, GID, logger UID, and Duende chroot() directory
defined near the beginning of MaraDns.h; this will make it easier for
packagers to redefine these constants.
<li>Fixed zoneserver to have enough default values so that it works with
the included example mararc.
<li>Fixed bugs in the serving of long packets over TCP; MaraDNS can now
serve long DNS packets over TCP, breaking the 512-byte limit.
<li>askmara now correctly outputs multi-chunk TXT records (unless called with
-v)
<li>Two new mararc varables added: <tt>synth_soa_origin</tt> and
<tt>synth_soa_serial</tt>. These are here mainly so that people
who test MaraDNS 1.2 domains over at dnsreport.com can have a
synthetic SOA record that doesn't generate any errors.
</ul>
(2005.10.20)
</blockquote>
<p>maradns-1.1.49:
<blockquote>
<ul>
<li>Revised pages on the web page to have a minimum number of HTML errors.
(Let's keep the validator fairly happy)
<li>Added a new feature, <tt>long_packet_ipv4</tt>, which will allow packets
longer then 512 bytes long (compressed) to be sent from MaraDNS via
TCP (we have a list of IPs which we can send UDP packets longer than 512
bytes to; <tt>zoneserver</tt> translates these packets to
standards-conforming TCP packets). This is only enabled if MaraDNS
is compiled as an authoritative-only nameserver.
<li>MaraDNS now generates no warning when compiled with GCC 3.4.2 as both
an authoritative-only nameserver and as a recursive nameserver.
<li>MaraDNS, when compiled as an authoritative-only nameserver, now compiles
with the name maradns.authonly. The install and startup scripts have
been revised to reflect this change.
<li>Tutorial for doing DNS over TCP has been created.
<li>Updated security design document and added all known security problems
to <A href=security.html>the document</A>
<li>Updated startup script to add a script (disabled by default) which starts
up MaraDNS' zoneserver.
</ul>
(2005.10.08)
</blockquote>
<p>maradns-1.1.48:
<blockquote>
<ul>
<li>Fixed bugs in mararc processing so that a mararc file with only three
lines (four for an authoritative nameserver) works again.
<li>Updated all of the documentation to reflect the 1.1 changes
and updates to MaraDNS.
<li>Updated web page design of MaraDNS web page; the page will look almost
identical on a modern CSS browser on a PC (including IE 5/6) but will
look better on non-CSS browsers, handheld browsers, and when printed
out. Additionally, there is a "large print" style that makes the
web page more accessible.
</ul>
(2005.10.04)
</blockquote>
<p>maradns-1.1.47:
<blockquote>
<ul>
<li>Set up recursive stress test to make sure recursive resolver doesn't
leak memory nor crash (it doesn't)
<li>Working on updating the CSS for MaraDNS's web page to look better in
non-CSS browsers (Changes aren't live yet; look at mixed_css_try3)
<li>csv2 security updates:
<P>
1. The hostname for a record must be at the beginning of a line.
<P>
2. No more than one pipe (|) character is allowed between csv2 fields.
<li>Documentation updates: Recursive tutorial updated to reflect the fact
that a recursive server now only needs a 3-line mararc file.
</ul>
(2005.10.01)
</blockquote>
<p>maradns-1.1.46:
<blockquote>
<ul>
<li>Issue with recursive ANY queries resolved
<li>All compile-time warnings removed; MaraDNS now compiles with zero
warnings when compiled with -Wall
</ul>
(2005.09.25)
</blockquote>
<p>maradns-1.1.45:
<p>
<b>This release is the last 1.1.x release which adds new features to MaraDNS.
Until MaraDNS 1.2.00 is release, the only changes will be documentation
updates and bugfixes.</b>
<blockquote>
<ul>
<li>I have removed maragen until it can be updated to use the csv2 zone
files.
<li>Some doc cleanup; removing outdated documents in doc/en/misc, merging
the old changelog with the current changelog, etc.
<li>CNAME records will now give, in the answer section, the record the
CNAME record points to for any RR type, not just A (and to a limited
extent, PTR) records.
<li>ANY queries now more-or-less work with recursive queries again.
<li>Bogus SOA "not there" replies now have a narrower scope than ".".
<li>Fixed problem with empty TXT and RAW records in csv1tocsv2.pl
</ul>
(2005.09.24)
</blockquote>
<p>maradns-1.1.44:
<blockquote>
<ul>
<li>The RCODE in the DNS headers will now correctly return a NXDOMAIN as long
as there are no RRs with the given DNS name in question. Otherwise, the
RCODE returned is zero.
<li>Added a new tool in the tools directory, called csv1tocsv2.pl, which is
a Perl script that converts csv1 zone files in to csv2 zone files.
</ul>
<br>(2005.09.13)
</blockquote>
<p>maradns-1.1.43:
<blockquote>
<ul>
<li>MaraDNS 1.0.32 bugfix forward-ported to 1.1.43
<li>Duende will now output error on standard out when it dies unexpectably
</ul>
<br>(2005.08.10)
</blockquote>
<p>maradns-1.0.32:
<blockquote>Hotfix: RR rotation now works again.
<br>(2005.08.08)
</blockquote>
<p>maradns-1.0.31:
<blockquote>Two patches by Albert Lee that improve Mara's stability.
<br>(2005.08.07)
</blockquote>
<p>maradns-1.0.30:
<blockquote>
<ul>
<li>Warn the user when they have dangling CNAME records
<li>Fix bug with MX records with preferences > 255 in getzone tool
</ul>
(2005.06.30)
</blockquote>
<p>maradns-1.1.42:
<blockquote>
<ul>
<li>Removed debug information showing in hex the bind address
<li>ipv6 logging now works
<li>hide_disclaimer works again
<li>The code to handle ANY queries is essentially completely rewritten.
</ul>
(2005.06.22)
</blockquote>
<p>maradns-1.1.41:
<blockquote>
<ul>
<li>Make all example ipv6 addresses 3ffe:ffff example addresses
<li>New mararc variable: csv2_synthip_list
<li>Get the zoneserver to read ipv4_bind_addresses and csv2_synthip_list
<li>Allow spaces in ip_acl lists
<li>Document: How to set up a default zonefile
<li>Give out a bogus SOA reply when none of the servers for the domain
can be reached.
</ul>
(2005.06.12)
</blockquote>
<p>maradns-1.1.40:
<blockquote>
<ul>
<li>Warning now shown for dangling cname records
<li>bind_address now has ipv4_bind_addresses name (bind_address still works,
of course)
</ul>
(2005.06.07)
</blockquote>
<p>maradns-1.1.39:
<blockquote>
<ul>
<li>MaraDNS now has full authoritative-only ipv6 support
</ul>
(2005.06.05)
</blockquote>
<p>maradns-1.1.38:
<blockquote>
<ul>
<li>Fixed security problem with new <tt>fetchzone</tt> tool.
More details in <A
href="download/patches/maradns-1.1.37-fetchzone_security.patch">in
the maradns-1.1.37-fetchzone_security.patch file</A>
<li>Added support for <tt>dos_protection_level</tt> which will disable
certain MaraDNS features to make her respond more quickly to DNS
requests; this is useful for very highly loaded servers or for
surviving denial-of-service attacks.
<li>Wrote code to support binding to ipv6 addresses when MaraDNS is
compiled as an authoritative-only nameserver. Work on this will
continue when I get ip6 up and going on my Fedora Core 3 box.
</ul>
(2005.05.28)
</blockquote>
<p>maradns-1.1.37:
<blockquote>
<ul>
<li>Support for stars at the end of hostnames is finished.
<li>Added ability to compile MaraDNS without recursive support; this
makes the binary 20% smaller and not need the pthread library.
</ul>
(2005.05.21)
</blockquote>
<p>maradns-1.1.36:
<blockquote>
<ul>
<li>Forward-ported the MaraDNS 1.0.29 changes in to the 1.1 branch.
<li>Applied Juergen's patch so that the 1.1 branch compiles again.
<li>Added code to work around Linux' select() before the recvfrom()
in MaraDNS.c
</ul>
(2005.05.14)
</blockquote>
<p>maradns-1.0.29:
<blockquote>
This release improves how MaraDNS' recursive resolver parses packets so
that Mara can interoperate better with some stub resolvers that don't
bother looking past the header of a DNS packet.
<p>
(2005.05.13)
</blockquote>
<p>maradns-1.1.35:
<blockquote>
This release forward-ports the improvments for MaraDNS 1.0.27 and MaraDNS
1.0.28 in to the 1.1 branch.
(2005.05.06)
</blockquote>
<p>maradns-1.0.28:
<blockquote>
The reason why MaraDNS' recursive resolver has been freezing up is
because of a bug in the Linux kernel that the kernel developers are not
interested in resolving. I would like to thank Albert Lee for providing
a patch which resolves this issue.
<p>
(2005.05.06)
</blockquote>
<p>maradns-1.0.27:
<blockquote>
<ul>
<li>Patch to address possible security concern with the random number
generator.
<li>Some updates to the documentation
</ul>
(2005.05.02)
</blockquote>
<p>maradns-1.1.34:
<blockquote>
<ul>
<li>MaraDNS now supports stars at the end of hostnames. The only part of
this feature that needs to be implemented is the ability to correctly
handle the case when someone asks for a hostname or record type that the
star does not catch.
</ul>
(2005.04.30)
</blockquote>
<p>maradns-1.1.33:
<blockquote>
<ul>
<li><tt>zoneserver</tt> now supports binding to multiple IP addresses
</ul>
(2005.04.18)
</blockquote>
<p>maradns-1.1.32:
<blockquote>
<ul>
<li>Patched 1.1 branch so that it compiles on older versions of GCC again
<li>Made the ICANN list of root nameservers a default list, hardcoded in the
MaraDNS code, if the user doesn't specify root servers in their mararc
file. It is now possible to have a 3-line mararc file.
<li>Updated the quickstart guide to use the 3-line mararc example.
<li>Initialized variables that were uninitialized.
<li>Modified the mararc parser to exit on a fatal error if an unknown
mararc variable is seen.
<li>Mofified the relevent zonefile parsing code to correctly parse the
"default" zonefile (zone file with stars at end of hostnames).
</ul>
(2005.04.09)
</blockquote>
<p>maradns-1.0.26:
<blockquote>
Changes from 1.0.25:
<ul>
<li>Small patch so MaraDNS will compile on older versions of GCC again
</ul>
(2005.03.25)
</blockquote>
<p>maradns-1.1.31:
<blockquote>
Changes from 1.1.30:
<ul>
<li>Updated the zone file parser to improve (read: Make more pedantic)
parsing of hostnames with '*' characters in them.
<li>Removed all compile-time warnings.
<li>New mararc variable, csv2_default_zonefile, created.
</ul>
(2005.03.25)
</blockquote>
<p>maradns-1.1.30:
<blockquote>
Changes from 1.1.29:
<ul>
<li>Updated tutorial and list of ICANN root servers. Cleaned up root
server lists in example mararcs (we no longer need long lines in
mararc files)
<li>Added verbose_query mararc variable
</ul>
(2005.03.16)
</blockquote>
<p>maradns-1.0.25:
<blockquote>
Changes from 1.0.24:
<ul>
<li>Upgraded the ICANN root nameservers and other elements of the
documentation
<li>MaraDNS 1.0.xx compiles with no warning when compiled with -Wall again
<li>Added verbose_query mararc variable
</ul>
(2005.03.16)
</blockquote>
<p>maradns-1.1.29:
<blockquote>
Changes from 1.1.28:
<ul>
<li>Updated macro processor to make any and all '{' characters in zone
files illegal. This will break csv2 zone files with '{' characters
currently in them.
<li>Updated install script to install duende tool and man page
<li>Updated MaraDNS startup script to use duende to invoke MaraDNS
<li>Updated the Quick Start guide and the MaraDNS man page to note
duende daemonizing tool.
<li>Added debugging output which will hopefully make the recursive server
occassionally freezing problem reproducible and fixable.
</ul>
(2005.03.05)
</blockquote>
<p>maradns-1.1.28:
<blockquote>
Changes from 1.1.27:
<ul>
<li>Fixed bug with loading of synthetic SOA records in CSV2 zone files
<li>Updated roadmap to clarify goals for 1.2/2.0 release
<li>Zoneserver sucessfully transferred a zone to Bind 8.4.6
<li>Zoneserver sucessfully transferred a zone to Bind 9.2.4
<li>Zoneserver sucessfully transferred a zone to Bind 9.3.0
<li>Documentation for Duende tool updated to point out that the directory
<tt>/etc/maradns/logger</tt> is mandatory for this tool
<li>Incorporated Juergen's patch that installs the fetchzone tool and
man page
<li>alarm() call added to zoneserver to implement TCP timeout
<li>askmara documentation cleaned up, improved
</ul>
(2005.02.26)
</blockquote>
<p>maradns-1.1.27:
<blockquote>
Changes from 1.1.26:
<ul>
<li>The recursive resolver now works again (using 64-bit Y2038-safe
timestamps, to boot).
<li>Minor updates to documentation.
</ul>
(2005.02.24)
</blockquote>
<p>maradns-1.1.26:
<blockquote>
Changes from 1.1.25:
<ul>
<li>Fixed bug where recursive server was outputting bad TTLs (I don't think
this affects 1.0.xx)
<li>Made a number of bug fixes to the zoneserver so that it correctly
serves zones (and SOA records) as a zoneserver
<li>Verified that the zoneserver works with the djbdns axfr client (axfr-get)
<li>Updated askmara's output and updated fetchzone's csv2-compatible output
</ul>
(2005.02.23)
</blockquote>
<p>maradns-1.1.25:
<blockquote>
Changes from 1.1.24:
<ul>
<li>Checked examples in TXT/RAW record documentation, making fixes to
documentation and/or code as needed.
<li>Corrected how <tt>askmara</tt> outputs TXT and raw records.
<li>Added support for asking for arbitrary record types in askmara. Updated
man page to reflect this change.
<li>Changed examples in tutorial to <i>not</i> include SOA and NS records in
example zone file; hopefully registars are no longer anal about this kind
of thing.
</ul>
(2005.02.20)
</blockquote>
<p>maradns-1.1.24:
<blockquote>
Changes from 1.1.23:
<ul>
<li>Fixed ej2man script to make correct ASCII single quotes in man pages.
<li>Added csv2_txt manual page to document TXT and RAW records.
<li>Added support for RAW (any RTYPE) records to the csv2 parser.
<li>Updated tutorial to use csv2 records.
<li>Minor updates to the web page (there was a minor blemish in the rock face
texture which I surgically removed with Gimp).
<li>Mac OS X/Darwin fix for 1.0.24 integrated in to this release.
</ul>
(2005.02.19)
</blockquote>
<p>maradns-1.1.23:
<blockquote>
Changes from 1.1.22:
<ul>
<li>Added support for TXT records to the CSV2 zone file.
<li>Added files to create the core maradns.org webpage to the documentation.
</ul>
(2005.02.16)
</blockquote>
<p>maradns-1.0.24:
<blockquote>
Changes from 1.0.23:
<ul>
<li>Fixed the build process on MacOS X so it compiles again.
<li>Fixed some non-critical typos in the configure script.
</ul>
(2005.02.15)
</blockquote>
<p>maradns-1.1.22:
<blockquote>
<b>Note: This revison changes the format of csv2 zone files from 1.1.21;
this will be the last incompatible change to csv2 zone files done. All
future changes will be backwards compatible with csv2 zone files.</b>
<ul>
<li>Fixed bug in csv2 parser where, when a newline causes a syntax
error, the error is reported at the start of the new line instead
of the end of the previous line.
<li>Made sure dnames are converted to lowercase before being put in to
the bighash
<li>Got % shortcuts to work in the new csv2 zone files
<li>csv2 records have the authority data (the NS records for
the zone) added.
<li>Synthesize ns records (have bogus names and
have the NS ips be any non-private ip address we're bound to)
if needed.
<li>Added code to synthesize a SOA record for csv2 zone files without a
SOA record.
<li>Fixed bug that % doesn't work in dlabels in the data fields of an RR
<li>There is a working example csv2 file which documents what the file does
<li>Changed askmara to output records in csv2 format
<li>Created fetchzone tool that outputs records in csv2 format
<li>ej2man and ej2txt no longer use unicode for bullets
<li>There is now a man page for csv2 and fetchzone.
<li>Fixied bug with not being able to have UTF-8 at the beginning of a
host name.
<li>fixed %-only MX exchanger bug
<li>a bind address can not be 0.0.0.0 if we have csv2 zone
files (we now have support for binding to multiple IPs; 0.0.0.0 is
a little buggy)
<li>Moved TTL to be before the rtype to be more like Bind's and Posadis'
zone files.
<li>Moved TTL in fetchzone and askmara to be before the rtype.
<li>Added support for SRV records; Sean is actually using these
<li>Got the zoneserver to work with the new csv2 zone file (this took
the lion's share of the work for the 1.1.22 release)
<li>Integrated Juergen Daubert's latest cleanup patches
</ul>
(2004.06.30)
</blockquote>
<p>maradns-1.1.21:
<blockquote>
<ul>
<li><code>show_esc_stdout</code> moved from parse/ParseCsv1.c to the
more sensible libs/JsStrOS.c.
<li>Code for parsing ipv6 addresses written (it took 355 lines to
parse stuff like "ffe:501:ffff::b:c:d"; compare this to 125 lines
for ddip_2_ip which does the ipv4 equivalent)
<li>Support for CSV2 zone files is about 80% done; combined with the
ipv6 address parsing, we're looking at 2348 new lines of code.
</ul>
(2004.06.18)
</blockquote>
<p>maradns-1.1.20:
<blockquote>
(Release 1.1.19 skipped because that was an accidental release I did last
October)
<ul>
<li>Changed tools to create utf-8 instead of Latin-1 man pages (Fedora Core
Two does <i>not</i> like Latin-1 encoded man pages).
<li>Added support for the += operator in the mararc file. This operator is
use for string concatenation. The goal (along with the csv2 file format)
is to make it so MaraDNS never needs a line longer than 80 colums in a
configuration file.
<li>Hopefully fixed bugs with mixed-case domain names.
</ul>
(2004.06.03)
</blockquote>
<p>maradns-1.1.18:
<blockquote>
This is a merge of the features present in MaraDNS 1.0.23 but not in 1.1.17
in to the 1.1.xx branch. Additionally, I have some ideas for a new zone
file format in doc/en/misc (more like, I have a full definition of a
finite state machine complete with psudo-code for processing of everything
in this new proposed zone file format). Compiles, but I don't know if
this runs.
<p>
(2004.06.01)
</blockquote>
<p>maradns-1.0.23:
<blockquote>
Changes from 1.0.22:
<ul>
<li>Corrected error where askmara incorrectly outputted MX records
<li>MaraDNS can now resolve star records when processing ANY queries
<li>The RD value in replies is now the same as the RD in the corresponding
query
<li>Fixed some typos in old changelog entries
</ul>
(2004.05.28)
</blockquote>
<p>maradns-1.0.22:
<blockquote>
Changes from 1.0.21:
<ul>
<li>Applied Juergen Daubert's patch that makes MaraDNS compile clean, even
with all warnings enabled.
<li>Added testing for the zoneserver to the SQA suite
<li>Fixed a problem where the zone server would die after serving MAXFD
zones.
</ul>
(2004.05.25)
</blockquote>
<p>maradns-1.0.21:
<blockquote>
This is MaraDNS 1.0.20 with a patch that solves an error one user reported
with the parsing of zone files.
<p>
(2004.04.13)
</blockquote>
<p>maradns-1.0.20:
<blockquote>
This is MaraDNS 1.0.18 with a patch to allow gnu.org to resolve again. This
is the "no frills, just stay stable" branch of MaraDNS.
<p>
(2003.10.02)
</blockquote>
<p>maradns-1.1.18:
<blockquote>
This is simply a new release which indicates my decision to completely
rewrite the recursive portion of MaraDNS. The old recursive code is
removed; I hope to have time to work on the new recursive code soon.
<p>
(2003.10.02)
</blockquote>
<p>maradns-1.0.19:
<blockquote>
This is a test release which addresses a number of issues people on the
list have brought up:
<ul>
<li> Doug Sampson a pointed out that the server gives out compression errors
and freezes. I have replaced the compression code with the cleaner
compression code from the 1.1.xx branch; this will hopefully address
this issue.
<li> Andrew pointed out that the zoneserver does not give out adequate
error messages when there is a problem opening up a zone file, or when
there is a fatal parse error in a zone file. I have added appropriate
error messages to the zone server.
<li>Juergen Daubert provided a patch to make Mara's compile generate less
warnings.
<li>A problem with the ORSC entries being out of date was brought up. I can
not look up the current entries (being offline), but have changed all of
the example files to use the ICANN entries by default, since ICANN is
the only root server registry who has root servers with stable enough
IPs for "set and forget" environments.
<li>I myself found some problems where timeouts for PTR and AAAA queries can
slow down poorly-written clients. As a result, MaraDNS now has the
ability to optionally instantly give dummy "not there" replies to
either PTR or AAAA queries (or both).
<li>Some minor updates and clean-up to the documentation.
</ul>
(2003.08.03)
</blockquote>
<p>maradns-1.1.17:
<blockquote>
Recursive queries now work again; fixed a place which was using a 32-bit
value to get a timestamp, when the code in question should have used a
josa_timestamp (64-bit) value.
<p>
Additionally, it is now possible to use this program as a non-root user
again.
<p>
(2003.06.13)
</blockquote>
<p>maradns-1.0.18:
<blockquote>
Cleaned up and fixed a bug in the MaraDNS startup script. Now, the only
prorcesses that will be killed will be bona fide MaraDNS processes.
<p>
(2003.05.30)
</blockquote>
<p>maradns-1.0.17:
<blockquote>
Strnlen seems to not be a portable call after all (the BSDs don't have it);
this version has a special js_strnlen call to make up for this.
<p>
(2003.04.18)
</blockquote>
<p>maradns-1.0.16:
<blockquote>
This is MaraDNS 1.0.15 declared "stable" (well, as stable as 1.0.13). The
only change from 1.0.15 is more debugging information in case an
unreproducable bug which one user reported pops up again.
<p>
(2003.03.16)
</blockquote>
<p>maradns-1.0.15:
<blockquote>
This is MaraDNS 1.0.14 with a good deal more stress testing done to
the recursive resolver. There does not appear to be any obvious memory
leaks; nor are there any stability issues with this release of MaraDNS.
That said, I am, at present, marking the release "beta" until there is
more field testing of the release.
<p>
(2003.02.28)
</blockquote>
<p>maradns-1.0.14:
<blockquote>
This is not a production release of MaraDNS. This is a beta-test release
of MaraDNS which has the ptr-over-cname fix from the 1.1.xx branch backported
to the 1.0.xx branch. In addition, the code has been modified to no longer
use strlen().
<p>
Use this code at your own risk. While I have stress-tested this code for
stability, this code has not been field tested yet.
<p>
That said, it does fix the long-standing bug with correctly resolving
PTR records which are CNAME referrals. I want to see some people help
me beta-test this, so that I can make a more general release of this
bugfix available.
<p>
(2003.02.23)
</blockquote>
<p>maradns-1.0.13:
<blockquote>
This release of MaraDNS is dedicated to the seven brave astronauts
who died this morning on the Columbia space shuttle:
<ul>
<li> Willie McCool
<li> Rick Husband
<li> Kalpana Chawla
<li> Laurel Clark
<li> Michael Anderson
<li> David Brown
<li> Ilan Ramon
</ul>
These people
died expanding the boundaries of humanity's next frontier; may
their deaths not be in vain and may humanity eventually conquer space.
<p>
This is MaraDNS 1.0.12 with a one-line bugfix for a bug the last
release of MaraDNS introduced. This only matters for people who
have zonefiles with no records in them (besides the SOA and NS records
for the domain head).
<p>
(2003.02.01)
</blockquote>
<p>maradns-1.1.16:
<blockquote>
D Richard Felker III, who knows more about the arcane mysteries of
UNIX pipes than myself, showed me how to get duende to catch the
stuff sent to standard error also.
<p>
Duende's manual page has been proffread and updated.
<p>
(2003.01.29)
</blockquote>
<p>maradns-1.1.15:
<blockquote>
I have given up, for now, on trying to catch both stdout and stderr.
</blockquote>
<p>maradns-1.1.14:
<blockquote>
The daemonizing helper has been renamed 'duende' (Spanish for 'daemon',
consistant with the Spanish theme MaraDNS has, it is said like 'dwen-deh'),
and now sets up a second child process which syslog()s all of maradns'
various messages. Also added new timestamp format with no timestamp
whatsoever to eliminate redundant timestamp when using duende helper.
<p>
(2003.01.27)
</blockquote>
<p>maradns-1.1.13:
<blockquote>
MaraDNS now has a daemonizing helper which makes MaraDNS a daemon, then
stays around. If either the daemonizing helper or MaraDNS (even
MaraDNS 1.0.xx) gets a HUP signal, MaraDNS is restarted. If either
process gets a TERM or an INT signal, both processes exit. If MaraDNS
exits for any other reason besides a HUP signal, the daemonizer
restarts MaraDNS.
<p>
(2003.01.25)
</blockquote>
<p>maradns-1.1.12:
<blockquote>
MaraDNS now has her own timestamp code which should get rid of any Y2038
problems; on systems with 32-bit time_t, the problems are pushed forward
to 2112 (and can be pushed forward indefinitely by changing only two
magic constants and recompiling). Note: This means the code only works on
systems with an int64_t; are there any significant Unix systems deployed
which people may wish to use Mara on without int64 support at this point?
<p>
(2003.01.22)
</blockquote>
<p>maradns-1.1.11:
<blockquote>
MaraDNS has support for DNS record resurrection; this means that
she can now use expired records if no DNS server can be contacted
for a given host name
<p>
(2003.01.17)
</blockquote>
<p>maradns-1.0.12:
<blockquote>
MaraDNS with the following seven patches applied:
<ul>
<li>Records with CNAMEs should resolve more nicely on slow links
(maradns-1.0.11-incomplete.cname.patch)
<li>Askmara man page updated to say default DNS server address is
127.0.0.3 (maradns-1.0.11.askmara-man.patch)
<li>Recursive server no longer wastes time with in-bailiwick glueless
NS referrals (maradns-1.0.11-bailiwick.patch)
<li>References to nslookup in the documentation have been removed, or
changed to note that nslookup is obsolete
(maradns-1.0.11.no-nslookup.patch)
<li>Fixed problem that Ray reported with empty zone files (zone files with
only SOA and NS records) (maradns-1.0.11-raybug.patch)
<li>Fixed very slight problem with how the RNG was seeded, should not affect
most installations of MaraDNS (maradns-1.0.11-rngseed.patch)
<li>Patch to work around admins who use a dot instead of an @ in the RNAME
field for SOA record (maradns-1.0.11-soamail.patch)
</ul>
(2003.01.15)
</blockquote>
<p>maradns-1.1.10:
<blockquote>
MaraDNS is now able to bind to multiple IP addresses. In addition, I
have set up a signal handler so that MaraDNS can exit with a return code
of 8 when she gets a HUP signal.
<p>
The way MaraDNS binds to multiple IP addresses is by having a socket for
each IP address, and a select() call which determines which socket
someone connected to. Since the select() has a timeout, I was able to
set up the HUP signal handler to only change a global variable.
<p>
Proper HUP signal handling will be handled by a daemonizer wrapper, which
I will write next.
<p>
(2003.01.10)
</blockquote>
<p>maradns-1.1.09:
<blockquote>
Some improvments to DNS-over-TCP:
<ul>
<li>It is now possible to have permission to only forward a query
over TCP without being able to transfer zone file.
<li>It is now possible to use an old zoneserver mararc with the new
zoneserver.
<li>The feature has now been documented (albeit only sparsely in
the mararc man page)
</ul>
(2003.01.10)
</blockquote>
<p>maradns-1.1.08:
<blockquote>
It is now possible to use zoneserver to forward TCP DNS queries to a
UDP DNS server; this gives MaraDNS full TCP DNS support.
<p>
(2003.01.07)
</blockquote>
<p>maradns-1.1.07:
<blockquote>
Not extensively tested, but following CNAMEs to PTR records now works.
<p>
(2002.12.25)
</blockquote>
<p>maradns-1.0.11:
<blockquote>
This release changes the decompressor so that it works with packets
which some zoneservers with large zone files generate.
<p>
There is also some minor revisions to the documentation.
<p>
(2002.12.17)
</blockquote>
<p>maradns-1.0.10:
<blockquote>
This release fixes a bug with the RP definition so that the
decompressor can accept a DNS packet with this RR type. In other
words, this release resolves the problem Danny saw.
<p>
In addition, I have done some documentation clean-up, fixing the
problems that Christian saw in the documentation; the most significant
change is that the root servers for various root server networks have
been updated.
<p>
(2002.11.30)
</blockquote>
<p>maradns-1.0.09:
<blockquote>
This release backports the 1.1.06 improvments to the 1.0.xx branch of
MaraDNS.
<p>
(2002.11.15)
</blockquote>
<p>maradns-1.1.06:
<blockquote>
This realease updates the FAQ, some other information, and has some
minor cleanups performed to the code.
<p>
(2002.10.24)
</blockquote>
<p>maradns-1.1.05:
<blockquote>
This release has the same decompression patch which the 1.0.08 release
has. In addition, this release has the test_zoneserver and test_getzone
tools, just in case anyone ever sees problems with getzone again.
<p>
(2002.10.05)
</blockquote>
<p>maradns-1.0.08:
<blockquote>
The release fixes the problems which getzone which Marc Schneiders and
Nikos Mavroyanopoulos reported. I would like to thank both people
for reporting these problems.
<p>
The problems were caused by the fact that the new decompression code
did not expect the kind of packets which zoneserver generate; I have patched
the new decompression code.
<p>
(2002.10.05)
</blockquote>
<p>maradns-1.1.04:
<blockquote>
This release incorporates TTL aging, and Jonathan's code which makes
this run as a Win9x service (note: BSD copyrighted code with the
obnoxious advertising clause; we may have to do something about that
before this becomes stable code)
<p>
(2002.09.01)
</blockquote>
<p>maradns-1.0.07:
<blockquote>
I would like to thank Scott Cooper for working hard to find the cause
of a bothersome crash which people have been reporting for about a
month. This release, hopefully, fixes the crashing problem once and
for all.
<p>
In addition, I have put back all of the improvments to the authoritative half
which MaraDNS between 0.9.06 and 1.0.05 had; this version undoes the
reverting I did for 1.0.06 (which I only did because problems started
popping up two days before a two-week vacation I had in México).
<p>
(2002.08.26)
</blockquote>
<p>maradns-1.0.06:
<blockquote>
Johan is seeing stability problems with MaraDNS' authoritative
half which MaraDNS 0.9.06 does not have; this patch essentially
reverts the authoritative half to what MaraDNS 0.9.06 had.
<p>
This hopefully fixes the stability problems; I am alas in a position
to properly test this.
<p>
(2002.07.30)
</blockquote>
<p>maradns-1.0.05:
<blockquote>
Simple one-line change which allows MaraDNS to compile on Cygwin. Calling
this release a "stable" release.
<p>
(2002.07.28)
</blockquote>
<p>maradns-1.1.02:
<blockquote>
The following improvments over MaraDNS 1.1.01:
<ul>
<li>All improvments made for MaraDNS 1.0.04 have been integrated in to the
development branch.
<li>A bug which caused MaraDNS 1.1.01 to seg fault has been fixed
<li>This version of MaraDNS now supports human-readable timestamps
</ul>
(2002.07.18)
</blockquote>
<p>maradns-1.0.04:
<blockquote>
MaraDNS 1.0.03 with the following patches:
<ul>
<li>Jon's patch which allows any arbitrary size for the debug memory
allocation checking hash.
<li>Christian's improved German translations.
<li>Franky's improvments to recursive.c
<li>Richard's changes which allow MaraDNS to compile on Cygwin (again)
</ul>
(2002.07.14)
</blockquote>
<p>maradns-1.1.01:
<blockquote>
The first (real) release of the new development tree. This is MaraDNS
1.0.02 with a new license (simple BSD-style license which will hopefully
attract developers scared off by the "Public Domain opens you up to
lawsuits" FUD) and a newly rewritten compression engine.
<p>
(2002.07.14)
</blockquote>
<p>maradns-1.0.03:
<blockquote>
Franky's second release. This contains the following improvements:
<ul>
<li>Removed the thread limit of 125 (changed it to 500
because a limit is always needed)
<li>Removed the Solaris-refuses-to-run-recursive limitation
<li>Changed the locking scheme; all memory leaks seem to vanish using
the new scheme.
<li>Fixed some minor memory leaks
</ul>
(2002.07.12)
</blockquote>
<p>maradns-1.0.02:
<blockquote>
This is a release of my own. This 1.0.01 with the following changes:
<ul>
<li>An audit was done on the decompression code. While no exploitable
security problems were found, some clean up to make things more
consistent was done.
<li>A patch which tells us the IP from which a packet the decompresser
didn't like was sent.
<li>A patch which shows us the packet before decompressing it at a
sufficiently high log level.
<li>A patch which fixes a bug when the last record in the DNS packet
had a rdlength of 0; the decompressor previously erroneously rejected
these packets.
</ul>
(2002.06.30)
</blockquote>
<p>maradns-1.0.01:
<blockquote>
This is Franky's first release. Mainly, some more minor memory leaks
plugged.
<p>
The only changes I made were some touch ups to the documentation, and
added a copy of Franky's GPG key signed with the MaraDNS signing key.
<p>
(2002.06.26)
</blockquote>
<p>maradns-0.5.33:
<blockquote>
Now that 1.0.00 is released, I am deprecating the 0.5.xx branch.
The only updates to this branch will be to fix bugs worth disclosing
on Bugtraq. In other words, security bugs.
<p>
If anyone wants to maintain this branch of MaraDNS, let me know.
<p>
This release back ports some cleanup I did with dns/Queries.c which
also applies to the 0.5.xx branch.
<p>
(2002.06.21)
</blockquote>
<p>maradns-1.0.00: (released as close to 2002's solstice as possible)
<blockquote>
It's here. Happy solstice everyone!
<p>
MaraDNS 0.9.92 with the following patches:
<ul>
<li>Yet another memleak patch
<li>Patch which properly initializes the header data structure
<li>Franky patch (modified) to fix things up
<li>Neale's maragen added to the tree
</ul>
(2002.06.21)
</blockquote>
<p>maradns-0.9.92: (1.0 release candidate 2)
<blockquote><p>
MaraDNS 0.9.91 with the following patches:
<ul>
<li>Neale's patch which fixes a small problem in the install.sh script
<li>Franky's patch which fixes up the locks
<li>My patch to a possible memory leak that Franky found
</ul>
(2002.06.15)
</blockquote>
<p>maradns-0.9.91: (1.0 release candidate 1)
<blockquote><p>
MaraDNS 0.9.39 with the following patches:
<ul>
<li>Franky's patch which fixes a problem with the thread locking
(The "Small Fix" patch)
<li>Patch which fixes the recent rcode problems
<li>Patch which limits the number of threads to 125
<li>Patch which removes compile-time warnings
<li>Patch which adds note in documtation that MaraDNS doesn't
handle in-bailiwick glueless NS referrals very well.
</ul>
(2002.06.12)
</blockquote>
<p>maradns-0.9.39:
<blockquote><p>
MaraDNS 0.9.38 with the following patches:
<ul>
<li>Franky's patch which reworks some of the locks. Seems to mimimize
the thread overlap problems.
<li>Patch which warns us if we unlock when there is no thread locked.
<li>Patch which plugs a memory leak in Decompress.c.
</ul>
(2002.06.10)
</blockquote>
<p>maradns-0.9.38:
<blockquote><p>
Added code to check the pthread locking status and to exit if
it doesn't return a sucessful exit code.
<p>
Removed timestamp format which allows us to see the PID; this
was only needed for debugging purposes.
<p>
Added comment in the MaraDNS source explaining why 200 is
a reasonable maximum number of threads; that is about how
many simutanious threads the underlying pthread library
can handle.
<p>
(2002.06.08)
</blockquote>
<p>maradns-0.9.37:
<blockquote><p>
This is MaraDNS 0.9.36 with the following patches:
<ul><li>
maradns-0.9.36.dotafter.patch: Fixes problems with the "dot after .com"
<li>maradns-0.9.36.decompress.patch: Fixes problems decompressing
TXT records
<li>maradns-0.9.36.cleanup.patch: Clean up recursive code; stops
potential release of lock
<li>maradns-0.9.36.bind.patch: MaraDNS now tries 10 times to bind to
a port; should make her handle medium-to-high loads better
<li>maradns-0.9.36.showpid.patch: Gives new option to show_timestamp
to show the process ID.
</ul>
Also: Minor doc change (to document the new timestamp format);
updated RPM spec, changelog, and download page
<p>
(2002.06.07)
</blockquote>
<p>maradns-0.9.36:
<blockquote><p>
The new decompression code now works. Enabling it so people can
test it.
<p>
(2002.06.05)
</blockquote>
<p>maradns-0.9.35:
<blockquote><p>
Improved RPM spec files
<p>
The new decompression code is finished, but is not fully debugged yet (so it
is disabled for this release).
<p>
Code cleanups which should resolve the infinite loops Franky is seeing
<p>
(2002.06.04)
</blockquote>
<p>maradns-0.9.34:
<blockquote><p>
Yet another debug release; numerous small bug fixes and cleanups.
MaraDNS now builds correctly when the locale of outputted messages
is set to Spanish or German again. A bug where MaraDNS would crash
in a certain very unusual case has been fixed.
<p>
(2002.05.31)
</blockquote>
<p>maradns-0.9.33:
<blockquote><p>
Another debug release; numerous small bug fixes. The most notable
is the plugging of what appears to be the last memory leak in
the recursive code; hopefully all I have to do for 1.0.00 at this
point is the new decompression code and the release candidates.
<p>
(2002.05.21)
</blockquote>
<p>maradns-0.9.32:
<blockquote><p>
Another debug release; the code which keeps track of unallocated memory
has been redone. Now memory leak tracking causes a minimum of slowdown
when running MaraDNS; and the code works again.
<p>
In addition, some minor touchups have been done to the code.
<p>
(2002.05.19)
</blockquote>
<p>maradns-0.9.31:
<blockquote><p>
Begin work on new decompression code (still using old decompression code
until new code is complete)
<p>
Fixing open socket leaks in recursive code, and case-sensitivity issues
in the askmara code.
<p>
(2002.05.18)
</blockquote>
<p>maradns-0.9.30:
<blockquote><p>
Another bug fix release: Fixed bug where RRs with obscenely long TTLs
would "wrap around" and end up having a negative TTL (causing the record
to be promptly erased from the cache). Now the maximum TTL is two years
long.
<p>
Added a little more in the way of debugging messages to try to get
to the bottom of the temporary freeze-ups that Franky is seeing.
<p>
(2002.05.17)
</blockquote>
<p>maradns-0.9.29:
<blockquote><p>
Bug fix release: Fix bug where hosts that were in bailiwick were, at times,
rejected as being out of bailiwick.
<p>
(2002.05.15)
</blockquote>
<p>maradns-0.9.28:
<blockquote><p>
Added new level of verbosity, 4, which records every time we add or remove
a record from the cache
<p>
(2002.05.13)
</blockquote>
<p>maradns-0.9.27:
<blockquote><p>
timestamp_type feature added; it is now easy for people
to add new timestamp types; this seems to be a popular
request ever since MaraDNS had added timestamps.
<p>
(2002.05.10)
</blockquote>
<p>maradns-0.5.32:
<blockquote><p>
Backport of fixes to compression code to the 0.5.xx branch.
<p>
(2002.05.10)
</blockquote>
<p>maradns-0.9.26:
<blockquote><p>
Hot fix: The compression code was completely broken in MaraDNS 0.9.25
because I accidently made an integer which needs to be signed
unsigned. Fixed.
<p>
(2002.05.09)
</blockquote>
<p>maradns-0.9.25:
<blockquote><p>
Bug fix: I finally have gotten to the bottom of the compression problems
MaraDNS was having with news.com.com; this release fixes the problems,
hopefully once and for all.
<p>
I also have a document which describes some of the function calls
the new decompression code will have.
<p>
(2002.05.09)
</blockquote>
<p>maradns-0.9.24:
<blockquote><p>
Bug fixes:
<ul>
<li>
DNS records with a TTL of less than 30 seconds now have a
visible TTL of 30 seconds. This is to work around stub resolvers (such
as Mozilla's stub resolver) which can not resolve RRs with extremely
short TTLs.
<li>
Lines which are too long in mararc files now return a properly formatted
error message.
</ul>
I have begun work on the new decompressor; however no changes have been
made to the actual compression code yet. However, there are now
documents that specify how the new decompression will work and header
files which the new decompression code will use.
<p>
(2002.05.08)
</blockquote>
<p>maradns-0.9.23:
<blockquote><p>
Bug fix: The mara.startup script now points to the same file location
as the default install.location. Note that the startup script needs
to be changed if moving the install location.
<p>
Updated spec and patch file to build RPM for the current MaraDNS
build; it has been too long since the last RPM release.
<p>
Trivia: Cinco de Mayo celebrates a battle that Mexico won in 1862
in Puebla, Mexico (I visited the site of the battle several times
when I was down there; it is a beautiful eucalyptus forest, having a
beautiful fountain and planetarium) against the French. As it turned out,
the French won the war, but Mexico won that one battle, which has been
celebrated since then. Also, with the exception of Puebla, Cinco de
Mayo is not a big holiday in Mexico; only in the US.
<p>
(2002.05.05; Cinco de Mayo)
</blockquote>
<p>maradns-0.9.22:
<blockquote><p>
Created list of issues to be resolved before the 1.0 release of MaraDNS;
once these are done, I will start a 0.99.x branch; which I will
publically announce.
<p>
Added kludge to work around unreproducable problems where the
compressor can not always compress a DNS packet
<p>
Added link to glassary entries in the tutorial every time the
tutorial intoduces a new term.
<p>
(2002.05.04)
</blockquote>
<p>maradns-0.9.21:
<blockquote><p>
Fixed bug where the minimum TTL for CNAME entires could not be
separately set.
<p>
Added stub resolver which generates unix timestamps as bogus A
records; used for testing.
<p>
Added FAQ entry about MaraDNS' time stamp format.
<p>
(2002.05.02)
</blockquote>
<p>maradns-0.9.20:
<blockquote><p>
Changed udperror so that it will tell us from where udperror was called;
this will hopefully help me fix the news.com.com problems MaraDNS is
having.
<p>
Added time stamp
to some logged requests and added source IP
logging.
<p>
Added the ability for a remote query to get MaraDNS' internal timestamp;
this is only enabled at obscenely high levels of debug_msg_level, since
it is a security risk (there are attacks which are more effective if we
know the target's clock value).
<p>
Minimum TTL and Minimum TTL for CNAME records is now user-customizable.
<p>
(2002.04.24)
</blockquote>
<p>maradns-0.9.19:
<blockquote><p>
Added download.html to maradns.org web pages which are converted here;
this allows the pages which change most frequently on maradns.org to
be changed offline.
<p>
Added FAQ Q&A about a problem that someone was having; hopefully the
next user with the problem will be able to use this information.
<p>
Added incomplete ej2dbk converter which converts from ej to docbook.
This is incomplete; after MaraDNS 1.0 I will add code which closes open
tags and what not so the generated docbook is 100% legal.
<p>
(2002.04.16)
</blockquote>
<p>maradns-0.9.18:
<blockquote><p>
Fixed a bug in askmara where non-ASCII characters were not properly replaced
by escape sequences.
<p>
Updated EJ documentation tools so that they can now generate webpages
in the same format as the web pages on www.maradns.org.
<p>
(2002.03.25)
</blockquote>
<p>maradns-0.9.17:
<blockquote><p>
Added a minor new feature (since it was trivial to add, and since it is a
feature which greatly expands the functionality that MaraDNS has):
<tt>upstream_servers</tt>. This allows MaraDNS to be used to contact
other recursive servers when run in recursive mode.
<p>
Further bugfixing and revision of the debug.hostname tool; it now will
not get stuck in endless loops trying to resolve a given hostname.
<p>
(2002.03.14)
</blockquote>
<p>maradns-0.9.16:
<blockquote><p>
Converted encoding of all files in the MaraDNS source tree from ISO 8859-1
to UTF-8 (with the exception of one file in the utf8 directory which is
<i>supposed</i> to be ISO 8859-1 data). Fixed EJ tools so that they can work
on a current (as of early 2002;
RedHat 7.2) Linux system using the UTF-8 encoding without undue hassle.
<p>
Fixed bug in debug.hostname where it would not resolve host names in certain
circumstances.
<p>
(2002.03.12)
</blockquote>
<p>maradns-0.9.15:
<blockquote><p>
Added '-n' option to askmara so askmara can send the same kinds of DNS
queries that recursive DNS servers send out (DNS queries that do not ask
for recursion)
<p>
Fixed bug where 'make install' would overwrite /etc/rc.d/init.d/maradns
<p>
Changed maxprocs limit to 200 and made it so exceeding maxprocs does not
cause MaraDNS to stop; instead maxprocs is reset to 200.
<p>
(2002.03.06)
</blockquote>
<p>maradns-0.9.14:
<blockquote><p>
Rewrote debug.hostname tool; this will allow me to set up the testbed
to find the more obscure MaraDNS bugs.
<p>
(2002.03.03)
</blockquote>
<p>maradns-0.9.13:
<blockquote><p>
Fixed bug where debug_msg_level could only be changed if recursion was
enabled.
<p>
Changed stress testing simulation to simulate network lag in processing
DNS replies.
<p>
Made maxprocs have a hard limit of 100; making maxprocs have a value of 400
results in MaraDNS hanging on Linux systems.
<p>
(2002.02.25)
</blockquote>
<p>maradns-0.9.12:
<blockquote><p>
Cleanups performed so that all files to be audited to be compiled with
-Wall enabled without generating any warnings.
<p>
Fixed ej2txt so that it no longer generates utf-8 quotes.
<p>
(2002.02.19)
</blockquote>
<p>maradns-0.9.11:
<blockquote><p>
Fixed bug where CNAME records obtained from the cache would not work
with stub resolvers, since the code changed the question in the question
section of the reply.
<p>
'make debug' now works again.
<p>
(2002.02.11)
</blockquote>
<p>maradns-0.9.10:
<blockquote><p>
Fixed bug of case where there is a CNAME record, and something happened
when trying to get an A record for the CNAME record. Previously, MaraDNS
would think the CNAME record had no A record until the CNAME record was
purged from the cache. Now, MaraDNS is smart enough to store CNAME
records with an A record of "a 'no such host' reply was found when we
looked for an A record"; and CNAME records without any corresponding A
record only stay in the cache for 30 seconds.
<p>
If data is already in the cache for a given record, and the data has not
expired, then there is no need to spawn a thread to process the record;
now MaraDNS no longer does this. This should result in greater stability
and less memory usage, since many operating systems do threads poorly.
<p>
askmara now can have a user-defined timeout
<p>
compile flags changed from -g to -O2
<p>
(2002.02.11)
</blockquote>
<p>maradns-0.9.09:
<blockquote><p>
Added data_structures.ej document, which describes the internal data
structures that MaraDNS uses.
<p>
Updated the mararc man page to describe the new debug_msg_level
variable
<p>
Added files needed to make MaraDNS RPM files in the build/ directory.
<p>
(2002.01.27)
</blockquote>
<p>maradns-0.9.08:
<blockquote><p>
Fixed another bug in the ej2man script; it now correctly zaps blockquotes
inside ul.../ul lists.
<p>
Made changelog an ej-compatible document; this allows the changelog
to be an ASCII text file instead of an HTML file which a lot of
UNIX-heads will prefer.
<p>
Verified that MaraDNS 0.9.07 compiles on Darwin (a.k.a. Mac OS X) "out of
the box"; this means that MaraDNS now compiles "out of the box" on
Solaris; Linux; and Darwin. It also <i>should</i> compile on Cygwin; alas
I do not have a working cygwin setup to verify this on. Between these four
OSes, we cover all of the major flavors of UNIX: Linux is a little
of everything; Solaris is a "System V" UNIX; Darwin is a BSD UNIX clone;
and Cygwin is a pure POSIX implementation.
<p>
(2002.01.25)
</blockquote><p>
<p>maradns-0.9.07:
<blockquote><p>
Added new runtime parameter which can be seen when debug messages are
enabled: The number of elements in the DNS cache.
<p>
Added Makefile template which is a generate Makefile for systems which
do not have flock() support; make this Makefile the default
Makefile (instead of the Linux Makefile).
<p>
(2002.01.24)
</blockquote><p>
<p>maradns-0.9.06:
<blockquote><p>
Fixed bug in maradns startup script where the script would not correctly
restart the MaraDNS processes.
<p>
New mararc parameter added: debug_msg_level; this sets the level of
information we can get about a running MaraDNS process by sending special
DNS queries to MaraDNS.
<p>
(2002.01.23)
</blockquote><p>
<p>maradns-0.9.05:
<blockquote><p>
Revamping of the build process; placing most build-related files in a
directory named "build"; MaraDNS now compiles and installs cleanly on
Solaris; MaraDNS now has a system startup script which MaraDNS invokes at
system startup time.
<p>
(2002.01.21)
</blockquote><p>
<p>maradns-0.9.04:
<blockquote><p>
Another documentation fix. Added new EJ tag: DTWIDTH
<p>
This version now compiles on Solaris; and should compile on Darwin.
<p>
(2002.01.18)
</blockquote><p>
<p>maradns-0.9.03:
<blockquote><p>
Integrated Christian's spelling corrections and German translations in
to the MaraDNS documentation.
<p>
Minor bugfixes with the ej2man script.
<p>
(2002.01.17)
</blockquote><p>
<p>maradns-0.9.02:
<blockquote><p>Document reorganization: MaraDNS now uses a new document format, EJ
(which I created myself for MaraDNS documentation usage), which can
be converted in to HTML documents, text documents, or in to man page
sources. By having a stramlined documentation format, MaraDNS'
documentation will be easier to manage, and easier to translate.
<p>
Since the ej format allows other files to be embedded in documents,
this eliminates having to revise multiple versions of the same document
<p>
(2002.01.16)
</blockquote><p>
<p>maradns-0.5.31:
<blockquote><p>
Backporting of compression security patch to the MaraDNS 0.5.xx branch.
<p>
(2002.01.10)
</blockquote><p>
<p>maradns-0.9.01:
<blockquote><p>
Fixed security problem with the compression code which I found when
performing an audit on the code. Other cleanup of the compression
code.
<p>
Updated the French documentation.
<p>
Added some more information to the MaraDNS tutorial.
<p>
Added (currently untested) Darwin (a.k.a. MacOS X) support.
<p>
(2002.01.10)
</blockquote><p>
<p>maradns-0.9.00:
<blockquote><p>
Plugged some memory leaks in the recursive code.
<p>
Added Thomas Seyrat's French translation of the documentation
<p>
Completed the tutorial
<p>
Fixed bug where the zoneserver needed the mararc file specified to start.
<p>
Updated documentation
<p>
(2002.01.06)
</blockquote><p>
<p>maradns-0.8.99a:
<blockquote><p>
OK, so I was wrong about the first post-0.8.99 release being MaraDNS
0.9.00.
<p>
This is simply MaraDNS 0.8.99 with a 2-line patch which fixes a problem where
MaraDNS 0.8.99 would crash.
<p>
(2001.12.17)
</blockquote><p>
<p>maradns-0.8.99:
<blockquote><p>
Since I found a some security problems when working on the
MaraDNS-0.9.00 release, I am making this release available
which appears to addresses the security problems.
<p>
Changes since 0.8.35:
<UL>
<LI> Jaakko's patch, in a modified form, has been applied.
<LI> Documentation touchups.
<LI> Askmara timeout increased.
<LI> Solaris recursive support dropped until I can get my hands on my
Solaris CDs (and a PC to install Solaris on) in January (Solaris still
has bugs which do not exist in Linux).
<LI> Updated test bed to handle NS referrals which point nowhere
<LI> Found and fixed a bug where MaraDNS would not close UDP connections
when sendto returned an error
<LI> Fixed a problem that mhash_put_data had, where the DNS cache could become
inconsistant in certain circumstances.
<LI> Fixed two other spots in recursive.c (in two of the add_closer routines)
which could have potentially caused inconsistant data in the cache.
<LI> Got remove.rng to work again.
</UL>
<p>
I have changed the version number to maradns-0.8.99 to
reflect the fact that the next release will almost certaintly be
MaraDNS 0.9.00.
<p>
(2001.12.08)
</blockquote><p>
<p>maradns-0.8.35:
<blockquote><p>
Made the stress tests in sqa/testbed more extensive; they now crash
recursive MaraDNS versions up to and including 0.8.33.
<p>
Found and plugged some memory leaks that MaraDNS had.
<p>
Verified that MaraDNS can handle the stress tests--MaraDNS was able
to handle 80.000 queries without crashing, and without growing
after 10.000 or so queries were processed.
<p>
(2001.11.17)
</blockquote><p>
<p>maradns-0.8.34:
<blockquote><p>
Found and removed another crash-inducing bug.
<p>
Modified <TT>askmara</TT> so that it generates somewhat
csv1-compatible output. Also modified the <TT>debug.hostname</TT> tool
so that it can handle the new askmara output.
<p>
(2001.11.16)
</blockquote><p>
<p>maradns-0.8.33:
<blockquote><p>
Yipee! No, I'm not talking about the fact that the evil Taliban
are no longer in control of Kabul. I am talking about the fact that
I found and removed another crasher bug in MaraDNS.
<p>
I hope that this is the last crasher bug. Time to cross my fingers.
<p>
(2001.11.13)
</blockquote><p>
<p>maradns-0.8.32:
<blockquote><p>
This is the third beta test candidate for the recursive MaraDNS, since
people are reporting serious stability problems with MaraDNS 0.8.30 and
MaraDNS 0.8.31. While I am unable to reporduce the problems offline,
I was able to reproduce the problem online (but only intermittently), and
found some iffy-looking code which may be the root of the problem.
<p>
This program passes all offline stress tests.
<p>
Also added an entry to the FAQ which answers an unrelated question
posted to the mailing list, and added the changelog to the list of files
placed in the MaraDNS doc directory when a 'make install' is performed.
<p>
(2001.11.13)
</blockquote><p>
<p>maradns-0.8.31:
<blockquote><p>
This is the second beta test candidate for the recursive MaraDNS, since
I found some bugs after releasing MaraDNS 0.8.30. See the release notes
for MaraDNS 0.8.30 for more on the beta starus of MaraDNS.
<p>
Looking through the source code of the revamped hash structure, I found
a routine which was not revamped. This would cause a bug in the case
of having two or more zone files which happen to hash to the same
value--only one of the zone files would load. Fixed. I also deleted
some routines which were based on the old hash structure.
<p>
I have modified MaraDNS so the csv1 hash no longer needs to be
initialized, since the csv1 hash does nothing but waste memory in
recursive-only MaraDNS configurations.
<p>
I have added another parameter: timeout_seconds, which is how long to wait
for a remote DNS server to reply. This is mainly useful for slow
networks which need more than two seconds to get a reply from a DNS
server. Note that the larger this is, the slower MaraDNS answers queries
when a DNS server doesn't respond to DNS requests.
<p>
In addition, I have begun work on the tutorial, which currently
describes how to use MaraDNS in recursive mode, and gives an overview
of DNS.
<p>
(2001.11.12)
</blockquote><p>
<p>maradns-0.8.30:
<blockquote><p>
This is a beta test candidate for the recursive version of MaraDNS. Which
means that the only changes I will make between now and the first beta
release are essential bug fixes (e.g. bugs not mentioned in the man page),
and a basic DNS tutorial, since I have received two emails of the
form "I don't know how to do this DNS stuff, and could use some help".
<p>
The bad news is that, because of the excess of greedy lawyers in the US, I
have added the legal disclaimer to all of the man pages for MaraDNS, and,
in addition, the legal disclaimer appears when MaraDNS is started.
<p>
The good news is that it is possible to have MaraDNS not show the legal
disclaimer when opening up; MaraDNS tells you how to do this when showing the
disclaimer.
<p>
The better news is that I have done a major revamping of the MaraHash
structure. This structure is a structure that can both handle records
being added, and being removed from the hash. MaraDNS, as far as I can
tell from my offline tests, is now a great deal more stable as a result.
<p>
In addition, I found another memory leak in the recursive code, which I
have plugged.
<p>
I have also performed some more documentation touch-ups.
<p>
(2001.11.10)
</blockquote><p>
<p>maradns-0.8.29:
<blockquote><p>
OK, this is a "band-aid" release of MaraDNS. As I was debugging the problem
with MaraDNS crashing with the new custodian, I discovered that the hash
code is fundamentally broken. Hence, I need to a major revamp to the
hash code. In short, the hash needs to have each hash spot point to
a linked list of elements.
<p>
In the meantime, I performed a band-aid fix to the hash that,
while not fixing the problem, makes the problem slightly less bothersome.
This is an interim release until I can really fix the problem this
weekend.
<p>
Updated the FAQ to reflect the slightly changed procedure for joinging the
MaraDNS mailing list ("subscribe" now has to be in the subject line when
one wants to join the list).
<p>
(2001.11.08)
</blockquote><p>
<p>maradns-0.8.28:
<blockquote><p>
I fixed a bug in the fila-handling code where chains of records were not
being correctly put at the top of the list.
<p>
I am still receiving reports that MaraDNS freezes up after running for
a while. I am unable to reproduce this problem. I have carefully checked
the recursive code for potential deadlocks, finding none.
<p>
I suspect that there is a certain query which causes thie problem.
Theirfore, I have added the ability for MaraDNS to log all queries she
receives in human-readable format if verbose_level is three or higher.
<p>
While this results in some really huge logs, this will hopefully allow
me to pin down exactly which query causes MaraDNS to lock up, allowing me
to see where MaraDNS locks up, allowing me to resolve the issue.
<p>
(2001.10.31)
</blockquote><p>
<p>maradns-0.8.27:
<blockquote><p>
I have added a lot of code which creates a circular linked list. This
circular linked list is used by the custodian to erase elements from
the cache which have not been recently accessed.
<p>
The psudo-random number generator has been renamed to 'rng', and modified
to be a hash-only primitive. MaraDNS no longer has any code which can be
directly used for cryptographic purposes. Of course, the compression
function of the hash/prng is invertable, and can be used as a stream cipher,
but such is the case for all secure hash functions and secure PRNGs.
<p>
Added a list of features I will not add to the 1.x release of MaraDNS to
the MaraDNS man page.
<p>
The default max_glueless_level is now 10, because some real-world hosts
need a max_glueless_level this high.
<p>
(2001.10.31)
</blockquote><p>
<p>maradns-0.8.26:
<blockquote><p>
I have updated the 0QuickStart file to be current with the present
state of MaraDNS.
<p>
The Linux makefile now supports "make debug", useful for making a build
with verbose debugging output.
<p>
Now that I have some decent *roff documentation, I have done some
improvments to the formatting of the man pages. Not only do the man pages
look a little more attractive on the tty terminal, the man pages also
look good when made postscript man pages (troff -man -Tps foo.1 > foo.ps).
<p>
In addition, since the -man macros are not documented anywhere on the
internet, I have somewhat deciphered the tmac.an macro set, and written
up some documentation describing all of the -man macros.
(2001.10.15)
</blockquote><p>
<p>maradns-0.8.25:
<blockquote><p>
I have done an audit and an overhaul of how MaraDNS calls locks in the
recursive code. Hopefully, this will resolve the issues with MaraDNS
freezing after running for a few days.
<p>
In addition, the recursive resolver now is better able to handle
instances where a NS record points to a list of IPs.
<p>
More documentation updates. The man page for maradns now has a guide on
how to set up a firewall to allow maradns packets through, and a list of
known issues where MaraDNS breaks the DNS spec.
<p>
The crypto-emasculated version of MaraDNS no longer binds the source port
of outgoing UDP queries. This is because the underlying OS may generate
secure source port numbers when the source port is not specified in the
application.
<p>
(2001.10.12)
</blockquote><p>
<p>maradns-0.8.24:
<blockquote><p>
I have created a tool, called <TT>debug.hostname</TT> in the tools directory,
which gives a very verbose trace trying to look up a given hostname.
This will hopefully help me to debug and fix problematical hostnames.
<p>
I have also created a tool, called <TT>faq2man</TT> which converts
the HTML faq in to a format suitable for embedding in to a man page.
This makes the FAQ section of the MaraDNS man page more attractive
<p>
I have made the maximum glueless level user-configurable, since it looks
like some hosts do not resolve with the old hard-wired default of 4. I
have also made the maximum number of queries performed total in a
recursive lookup user-configurable
<p>
I have added more helpful error messages which tell the user what to
fix in their mararc file if MaraDNS can not initialize the DNS cache or
the random number seed. The init_cache() and init_crypto()
failed error messages should not be visible any more.
<p>
Documentation update: There is now a man page description of the mararc
file. The CREDITS and FAQ files have been updated, in addition to almost
all man pages. For example, I have gotten rid of the two or three pages
of ugly troff syntax that Perl's pod2man program generates in the Man pages
which had this.
<p>
<TT>make</TT> run without <TT>./configure</TT> now works again.
<p>
Since MaraDNS used to act in a different manner than Python 1.5.2 with
respect to multiple declations of the same index of the same dictionary
variable, I have changed MaraDNS so that she exits with a fatal error
should this occur, showing the user the line with the problem.
<p>
Made the error message which pops up when a csv1 zone file pointer is
incorrectly formatted more helpful.
<p>
There was a minor security weakness with the PRNG which would pop up if
the seed was a fixed file, two copies of MaraDNS used the same seed
file, and the two files were started at the same time. This has been fixed.
The seed is now exclusive-ored with the process ID before generating numbers.
<p>
More trimming of unused routines in the AES code. The AES code now only
supports encryption with a 128-bit key and block size in ECB mode--the
only way we use AES in MaraDNS.
<p>
For people who can not legally have any kind of cryptography in their
code (French citizens, etc.), there is now a script in the <TT>tools</TT>
directory, <TT>remove.aes</TT> which removes all crypto code. Note that,
while the main MaraDNS suite will still compile after running this, some
programs in the <TT>tools/misc</TT>, <TT>test</TT> and <TT>sqa</TT>
directories will no longer compile. <TT>make</TT> still works, of
course. Note that removing this code does make MaraDNS more suspectable
to a spoofing attack.
<p>(2001.10.08)
</blockquote><p>
<p>maradns-0.8.23:
<blockquote><p>
Star records which point to CNAMEs are now completely supported.
<p>
Christophe Colle pointed out that the reason MaraDNS was leaking memory
when making threads on Solaris was because MaraDNS was not using
pthread_attr_destroy. Hopefully, adding this will make MaraDNS
<i>not</i> leak on Solaris.
<p>
Improvment to the "make install" process: The default configuration
looks for local man pages in <tt>/usr/local/share/man</tt> if
<tt>/usr/local/man</tt> doesn't exist. This is to get around some
Linux distributions which don't have <tt>/usr/local/man</tt>
<p>
Minor security tweak to the routine that generates the 16-bit secure
psudo-random number.
<p>
The AES hasher now correctly generates a 128-version of the hash specified
in Bram Cohen's proposed AES hash standard. Thanks to Bram for providing
test vectors for the 256-version of the hash.
<p>
maradns --version now also includes the build system and date
<p>
(2001.09.27)
</blockquote><p>
<p>maradns-0.5.30:
<blockquote><p>
Two bugs have been fixed: A bug where a UDP error message normally did
not have the correct query ID, and a bug where, in certain cases, MaraDNS
would return a UDP error instead of a SOA "not there" reply.
<p>
Also, the documentation has been updated. (2001.09.25)
</blockquote><p>
<p>maradns-0.8.22:
<blockquote><p>
Document reorganization: I am starting to move the formats of the data files
to separate man pages. This will make each man page smaller and more
convenient to use.
<p>
Improved CNAME support: MaraDNS now has partial support for star records
that point to a CNAME.
<p>
Less code in the aes directory: I now have a program which generates the
AES tables during the build process, since the code to generate those
tables is a good deal smaller than the tables themselves. There is no
slowdown, since it is a one-time calculation done during the build process.
<p>
maradns --version (and zoneserver --version) now do the right thing:
Print out the version number and exit
<p>
The installer now removes the zoneserver and the maradns server before
installing the new ones to get around the "text file busy" problem.
<p>
There was a subtle bug with returning "not there" SOA replies and
case insensitivity. This bug has now been fixed. This bugfix also
needs to be folded back in to the 0.5.xx branch.
<p>
It is now possible to change the class of the query with the getzone client
if possible. Next: Document this new feature. (2001.09.24)
</blockquote><p>
<p>maradns-0.8.21:
<blockquote><p>
<p>
First, the bad news.
<p>
There is a known issue with MaraDNS having memory leaks when used as a
recursive nameserver on the Solaris operating system. This problem
does not exist in Linux. Since I do not have ready access to a Solaris
box to develop on, I can not resolve this issue. Until a Solaris developer
steps up to bat and fixes this for me, I am forced to disable recursive DNS
serving under Solaris.
<p>
I should have ready access to a Solaris again in December,
when I return to the United States. I have CDs of Solaris eight up
there, in addition to friends with Solaris boxes.
<p>
Now, the good news.
<p>
I have updated the example mararc files to be consistant with the
documentation. In particular, I now have two "out of the box" working
mararc files. One for authoritative name serving, and another for
recursive nameserving.
<p>
I have also updated the installer script to return an error if the
directories to put the MaraDNS files in do not exist. In addition,
MaraDNS will install all of the MaraDNS documentation in the directory
specified by the variable DOCS in install.locations.
<p>
Finally, I have updated the FAQ, the man pages, the mararc.format
documentation, and am working on making separate man pages which describe
csv1 zone files and the mararc file. (2001.09.20)
</blockquote><p>
<p>maradns-0.8.20:
<blockquote><p>
When doing some tests with the AES engine in MaraDNS, I found that
I inadvertently created a minor security problem w.r.t. ASCII nulls in
the AES key. Basically, an "out of the box" MaraDNS configuration had
a 1 in 16 chance of the aes key not having a full 128 bits of entropy.
<p>
I also corrected a minor fault in the aes128 hasher (it
did not previously fully follow the spec, since it counted bytes, not bits),
a minor fault with the top-level Makefile (which did not clean up
tools/misc with a make clean), and did some minor manpage clean-up.
(2001.09.18)
</blockquote><p>
<p>maradns-0.8.19:
<blockquote><p>
Updated the CREDITS file. If you have contributed to MaraDNS in any way,
no matter how small, and are not in this file, please let me know so I can
credit you.
<p>
Removed references to routines in the aes/ directory which
MaraDNS and aes128 do not use. The aes code is now encrypt-only.
<p>
Added a test, based on Brian Gladman's AES reference code, which verified
that the AES routines are working correctly.
<p>
Some cleanup, corrections, and revisions of the man pages. I figured out
how to turn off hyphenation and justifaction for man pages, and have hence
disabled these in all of the MaraDNS man pages.
<p>
Streamlining of the build process: <TT>./configure; make; make install</TT>
now does "the right thing". In addition, <TT>make uninstall</TT> also
automagically does the right thing.
<p>
<STRONG>Important:</STRONG> <TT>make install</TT>
now, by default, installs files in <TT>/usr/local/sbin</TT>,
<TT>/usr/local/bin</TT>, and man pages in <TT>/usr/local/man</TT>. If one
has previous installs of MaraDNS in other locations, please change the
<TT>install.sh</TT> script to the desired location of the MaraDNS files.
(2001.09.17)
</blockquote><p>
<p>maradns-0.8.18:
<blockquote><p>
Added code which keeps track of allocated memory, allowing me to hunt down
and eliminate memory leaks. Found four memory leaks in the recursive code:
<UL>
<LI> in_bailiwick did not properly destroy the tempory string "get"
<LI> When a
negative answer was given, query_nameserver did not correctly deallocate
some temporary strings
<LI> recurse_call did not correctly deallocate the temporary string used
for glueless queries
<LI> The code that set up the root nameservers in the cache had two strings
which were used to help set up the root nameservers. This strings were not
deallocated after being used. This was a one-time, and not continuous, leak.
</UL>
(2001.09.15)
</blockquote><p>
<p>maradns-0.8.17:
<blockquote><p>
Incorperated a modified form of Franky's patch which adds the max_tcp_procs
kvar to the program. Added some non-DNS releated tools to the "tools"
directory. Clean up of the documentation. (2001.08.28)
</blockquote><p>
<p>maradns-0.8.16:
<blockquote><p>
More regression testing: Added test where it sends an answer to a server.
If the server replies, this is considered an error condition. Cleaned up
the recursive code (got rid of some XXX to dos): Mainly, MaraDNS sends an
error if she can not spawn a thread. Documentation reorganized. (2001.08.16)
</blockquote><p>
<p>maradns-0.8.15:
<blockquote><p>
Made an 'asktest' program which will be used for regression testing.
(2001.08.15)
</blockquote><p>
<p>maradns-0.8.14:
<blockquote><p>
Added support for a counter that counts the children in the Zone server.
(2001.08.13)
</blockquote><p>
<p>maradns-0.8.13:
<blockquote><p>
Askmara doesn't display debug messages which can mess up terminals to the
end user any more.<p>
When an element in the cache is overwritten, the new data is now added
to the cache.<p>
New feature: MaraDNS can now blacklist spammer-friendly DNS servers.
<p>
(2001.08.12)
</blockquote><p>
<p>maradns-0.8.12:
<blockquote><p>
Fixed bug in udperror which caused it to spit back the wrong query ID. <P>
Added code to use a counter to count the number of threads. If we have more
than maxprocs threads going on at the same time, we refuse to launch a thread.
<P>Cached data now will go through round-robin rotates.
<P>MaraDNS now compiles again when the locale is set to Spanish (though
I still need more Spanish translations. Maybe when I am in México, I can
get help down there)
(2001.08.11)
</blockquote><p>
<p>maradns-0.5.29:
<blockquote><p>
Backported some bug fixes with zone file handling back to the "stable"
authoritative-only branch of MaraDNS. (2001.08.10)
</blockquote><p>
<p>maradns-0.8.11:
<blockquote><p>
Improved handling of CNAME records in the cache. BSD-dependent routines
(which are currently unused in MaraDNS) are not compiled if we are compiling
on a Solaris box. (2001.08.08)
</blockquote><p>
<p>maradns-0.8.10:
<blockquote><p>
I have redone the makefile in the rijndael directory, some some makes
(notably, the one NetBSD has) did not like the original Makefile.
Marked some unreproducable bugs as unreproducable.
(2001.08.07)
</blockquote><p>
<p>maradns-0.8.09:
<blockquote><p>
After much work (handling lame delegations better and fixing a bug in
<tt>substring_issame_case</tt>), I have managed to get the host name
linuxemu.retrofaction.com to resolve.
<p>
Completely unreleated to MaraDNS, I have added a SirCam filter to the
tools directory.
(2001.08.03)
</blockquote><p>
<p>maradns-0.8.08:
<blockquote><p>
More bug swatting: <UL>
<LI>The problem that was causing www.fairytale-abuse.com to not resolve
is fixed. (Better lame delegation handling)
<LI>The problem that was causing www.cs.cmu.edu and
www.roaringpenguin.com to not resolve is fixed (Better case
sensitivity handling)
</UL>
(2001.07.28)
</blockquote><p>
<p>maradns-0.8.07:
<blockquote><p>
Fixed the zoneserver so it too only answers questions. Fixed two bugs in
the getzone client: One where it would handle MX records incorrectly,
another where it would hand the root zone incorrectly (this bug was actually
in the Queries.c file). (2001.07.27)
</blockquote><p>
<p>maradns-0.8.06:
<blockquote><p>
We now check to make sure we only answer questions. (2001.07.18)
</blockquote><p>
<p>maradns-0.8.05:
<blockquote><p>
Added support for multiple root name servers. Also changed the example
mararc file to have the root servers for eight different top level
domain registries listed. (2001.07.16)
</blockquote><p>
<p>maradns-0.5.27:
<blockquote><p>
Back porting bug fixes to the authoritative-only branch of MaraDNS.
(2001.07.15)
</blockquote><p>
<p>maradns-0.8.04:
<blockquote><p>
MaraDNS now sucessfully compiles on Solaris. Thanks to
Franky Van Liedekerke for providing the pointers on how to do this,
and to Danny for access to a Solaris machine to compile MaraDNS on.
(2001.07.14)
</blockquote><p>
<p>maradns-0.8.03:
<blockquote><p>
Solaris support added, but does not fully work, added disclaimer, improved
code which drops group privileges.
(2001.07.13)
</blockquote><p>
<p>maradns-0.8.02:
<blockquote><p>
Another bug fix: If a zone did not have a record of a given type at the
"top" of the zone, MaraDNS would attempt to perform recursion instead of
returning a SOA record in the authority section. Fixed. Also needs to
be fixed in the 0.5.xx branch. Thanks to D Richard Felker III for
finding the bug. (2001.07.10)
</blockquote><p>
<p>maradns-0.8.01:
<blockquote><p>
Touch up bug fix: MaraDNS failed to close open file descripters when reading
zone files. Fixed. Also needs to be fixed in the 0.5.xx series.
Thanks to Boris Manojlovic for finding the bug.
(2001.07.09)
</blockquote><p>
<p>maradns-0.5.26:
<blockquote><p>
Fixed a couple of long-standing bugs found while debugging the recursive
version of MaraDNS:
<ul>
<li>Fixed a subtle bug in the DNS compression code that would only
show up in certain rare circumstances.
<li>Fixed a bug in the handling of ANY DNS queries.
</ul>
(2001.07.08)
</blockquote><p>
<p>maradns-0.8.00:
<blockquote><p>
This is the first alpha release of the recursive nameserver. I fixed a bug
in the compression code, and fixed another bug which was causing problems with
glueless name server entries. (2001.07.08)
</blockquote><p>
<p>maradns-0.7.22:
<blockquote><p>
www.monty.de now successfully resolves; fixed bug where the custodian
could potentially erase the root name server entry, making MaraDNS
non-functional as a root nameserver until restarted. (2001.07.07)
</blockquote><p>
<p>maradns-0.7.21:
<blockquote><p>
Type ANY queries now work for recursive queries. Finally. (2001.07.06)
</blockquote><p>
<p>maradns-0.7.20:
<blockquote><p>
Another late night double feature MaraDNS show. There was a really nasty
bug which Jaakko pointed out to me. I found the culprit, and fixed the bug.
(2001.07.04)
</blockquote><p>
<p>maradns-0.7.19:
<blockquote><p>
Begun work on some of the infastructure changes needed to make MaraDNS
sucessfully resolve recursive ANY queries. Added maradns_gid support.
Other pieces of code cleanup, primarily better handling of RR_ANY when
acting as an authoritative nameserver (should I fold these changes in to
a 0.5.26 release eventually?). (2001.07.04)
</blockquote><p>
<p>maradns-0.7.18:
<blockquote><p>
Re-arranging of the engine that returns an answer from the cache. We check
the cache expire of a "host not here" reply. Updated the documentation so
that it is the 0.5.25 documentation with the recursive stuff added as
needed. (2001.07.01)
</blockquote><p>
<p>maradns-0.7.17:
<blockquote><p>
We now choose a random DNS server to query when we are looking for an
answer. (2001.07.01)
</blockquote><p>
<p>maradns-0.7.16:
<blockquote><p>
Updated documentation to include information on how to set up a recursive
nameserver. Fixed bug where multiple levels of CNAME indirection were not
being properly followed. It is now possible to go to www.imdb.com or
groups.yahoo.com (both cases of multiple levels of CNAME indirection).
(2001.06.30)
</blockquote><p>
<p>maradns-0.7.15:
<blockquote><p>
I have added support for negative caching: If a given host name
does not exist, the program sends a "not here" to the stub resolver.
I also fixed a bug which was causing out-of-bailiwock queries to not work.
(Having to do with the case-sensitivity issue). Next: Getting www.monty.de
to work, caching ANY replies. (2001.06.28)
</blockquote><p>
<p>maradns-0.7.14:
<blockquote><p>
MaraDNS now works as a recursive nameserver again. The root nameserver
is now user-configurable. CNAME returns queries in a form that a stub
resolver can now understand. (2001.06.25)
</blockquote><p>
<p>maradns-0.7.13:
<blockquote><p>
After much tinkering with the code, I have managed to make it so that
a CNAME record in the cache returns the corresponding A record (note: only
one A record!) along with the CNAME record. This should allow hosts like
www.yahoo.com to work when this is used as a stub resolver. (2001.06.24)
</blockquote><p>
<p>maradns-0.7.12:
<blockquote><p>
More work done on plugging memory leaks. Working on code that will
determine the ip for a given CNAME record, since stub resolvers are not
smart enough to do a second A query themselves when they see a CNAME
record. Also some minor cleanups that Franky Van Liedekerke
suggested. (2001.06.22)
</blockquote><p>
<p>maradns-0.7.11:
<blockquote><p>
Finished work on the custodian. Now, I need to make sure the custodian
works. Also fixed CNAME support so it now works, plugged a couple more
memory leaks, and revised the offline testbed to have a CNAME record.
(2001.06.21)
</blockquote><p>
<p>maradns-0.7.10:
<blockquote><p>
Bigfixes: I have plugged some memory leaks, and added code which will
(hopefully) allow recursive queries to cname records to work.
I have also done some more work on the "custodian" code.
(2001.06.21)
</blockquote><p>
<p>maradns-0.7.09:
<blockquote><p>
Bugfix release: MaraDNS now closes the sockets that she opens when
performing recursive queries. This stops the open sockets from piling
up. Also, I have begun work on the "custodian" code: Code the reduces
the number of elements in the cache when the user-defined cache runs
low on space. (2001.06.20)
</blockquote><p>
<p>maradns-0.7.08:
<blockquote><p>
I have made the RNG truly random, and I have added code to the resolution
algorithm which allows it to perform recursive queries when the only
authoritative records are NS delegation records. Also, updates to the
todo list. Changed cc to gcc in all the makefiles to make
MaraDNS more Solaris-friendly. (2001.06.20)
</blockquote><p>
<p>maradns-0.7.07:
<blockquote><p>
I have added ACLs which limit who is allowed to make recursive queries.
I have also begun work on making the random number seed truly random.
(2001.06.19)
</blockquote><p>
<p>maradns-0.7.06:
<blockquote><p>
I have updated the non-recursive code to use code from MaraDNS 0.5.25,
which adds a number of features from there (round robin rotation, etc.)
I have alos made a list of things which need to be done before I can
make this a beta candidate for a 1.0 release. In addition, the code now
makes sure that the query ID we receive is the same one we sent out.
I have also started work on a CREDITS file, updated the FAQ, and added
a couple of interesting (if not MaraDNS-specific) Perl scripts to the
archive.
(2001.06.17)
</blockquote><p>
<p>maradns-0.7.05:
<blockquote><p>
The DNS server now has a psudo-random number generator which uses the
Rijndael algorithm. This PRNG randomizes both the query ID and (I believe)
the source port of any and all DNS queries. This PNRG now needs to become
secure (by setting up either a random or a user-defined Rijndael key)
(2001.06.16)
</blockquote><p>
<p>maradns-0.7.04:
<blockquote><p>
There were some bugs in the RR expire code. I have found those bugs,
fixed them, and now cache expirery should work. (2001.06.12)
</blockquote><p>
<p>maradns-0.7.03:
<blockquote><p>
This release has implemented the ability to expire records from the cache.
All Name server records have a fixed expire of 1 day (this can be changed
by changing one #define in recursive.c), but all other records have an
expire time based on the TTL of the record. <b>I have not yet tested
DNS RR expire</b>.
(2001.06.11)
</blockquote><p>
<p>maradns-0.7.02:
<blockquote><p>
Milestone: This is the first release of MaraDNS that works as a recursive
nameserver with the real root nameservers. Fix: Changing only the case of
the first nameserver, add negative caching, then start adding security
(good RNG for the query ID and source port, recursive ACL), then start
making the root servers customizable (including being able to have different
TLDs have different root servers). (2001.06.11)
</blockquote><p>
<p>maradns-0.7.01:
<blockquote><p>
Beginning work on making MaraDNS both case-insensitive and able to preserve
case. (2001.06.06)
</blockquote><p>
<p>maradns-0.7.00:
<blockquote><p>
Albert Prats kindly provided Spanish translations for various text files.
To get MaraDNS to compile in Spanish instead of English, type in
<tt>./locale.es</tt> before compiling MaraDNS.
<p>
MaraDNS now can handle gluelessness. I am bumping up the minor version
number to reflect that MaraDNS now has recursive nameserving capabilities,
albeit without some security features. Next: Work on cache flushing and
security.
(2001.06.03)
</blockquote><p>
<p>maradns-0.6.21:
<blockquote><p>
Now, if one of the IP nameservers is bad, we will try the next nameserver
in the chain. Next: Add the code to handle out-of-bailiwick nameservers
(2001.06.01)
</blockquote><p>
<p>maradns-0.6.20:
<blockquote><p>
Two big improvments: 1) The recursive resolver can now handle multiple
A records (MaraDNS deliberately ignores NS and AR records. Note that it is
a good idea to give out the corresponding A record for a CNAME record
[To do]) 2) There is now code which makes a local copy of the chain
of NS records in an authoritative-only section, which will allow me to
make thread-safe code which will query other nameservers, should a given
nameserver not function (e.g. Someone changed a computer's IP. In the
three weeks it can take Network Solutions to update the records on the
root nameservers, we still want to be able to reach the domain in question
by using the other listed nameserver for the domain)
</blockquote><p>
<p>maradns-0.6.19:
<blockquote><p>
Not only did I get to spend some time with my family this memorial day
weekend, I also was able to get Linux up and going on my new laptop. Took
two installs, but everything except SSL in Konqueror now works.
I also, now that the new laptop is (mostly) up and going, have gotten
a chance to work on MaraDNS. This new laptop, since it has a working battery,
should speed up MaraDNS development--I can now work on MaraDNS on the train.
The latest version is able to go to a remote server and give us an
incomplete answer (only one RR) based on what the remote server tells us.
(2001.05.29)
</blockquote><p>
<p>maradns-0.6.18:
<blockquote><p>
Some minor bugfixes and tweaks: The nameserver will now query name servers
until it is able to find an answer, then it will go in a loop.
(2001.05.24)
</blockquote><p>
<p>maradns-0.6.17:
<blockquote><p>
A fairly significant milestone: This version of MaraDNS is able to read data
from an authoritative nameserver, and, based on that data, determine the IP
of a nameserver closer to the answer we are looking for. (2001.05.21)
</blockquote><p>
<p>maradns-0.5.24:
<blockquote><p>
Two minor bug fixes: The erre-con-erre-cigarro.maradns.org query will work,
even if authoritative nameservers for the root are set up; MaraDNS now
will run on systems which do not support the setrlimit system call, such
as the GNU Hurd. (2001.05.21)
</blockquote><p>
<p>maradns-0.5.23:
<blockquote><p>
Three bug fixes: MaraDNS now works with RRs for the root namserver (MaraDNS,
in fact, can now be a nameserver for the root), the askmara tool now has
a timeout (and can ask questions about the root nameserver), and the output
that MaraDNS generates is unbuffered. (2001.05.19)
</blockquote><p>
<p>maradns-0.6.16:
<blockquote><p>
I have added a lot more debugging stuff as I hunt down why it is RRs are
not being added to the dns RR cache. I think I am pretty close to pinning
it down, and hope tomorrow's release can add RRs to the big cache.
(2001.05.18)
</blockquote><p>
<p>maradns-0.6.15:
<blockquote><p>
I added a simple interactive debugger which lets me see the state of
the DNS cache hash table. Looks like the data from the server is not
being added to the cache. Next: FInd out why not. (2001.05.17)
</blockquote><p>
<p>maradns-0.6.14:
<blockquote><p>
An unexpected event forcing me to go home late yesterday caused there
not to be a release of MaraDNS yesterday.<p>
Fixed bug where it was not correctly appending the class to the server
that it was querying. Temporarily disabled the actual threading while
development work on the recurseor continues. Next: Make sure that
the cache is properly seeded from data from authoritative nameservers.
(2001.05.17)
</blockquote><p>
<p>maradns-0.6.13:
<blockquote><p>
Fixed bug where it was choosing the wrong IP to query. Automated
the process of setting up a testbed (which is completely self-contained),
so I can debug this on a variety of machines. Next: Fix the timeout bug.
(2001.05.15)
</blockquote><p>
<p>maradns-0.6.12:
<blockquote><p>
MaraDNS compiles again. Now, I need to go through all the code and
iron out all of the bugs. Testbed of MaraDNS configuration files
added. (2001.05.14)
</blockquote><p>
<p>maradns-0.6.11:
<blockquote><p>
More work on the recursive stuff done. (2001.05.13)
</blockquote><p>
<p>maradns-0.6.10:
<blockquote><p>
More work on the recursive stuff done. (2001.05.12)
</blockquote><p>
<p>maradns-0.5.22:
<blockquote><p>
Bugfix release: non-0 opcodes now correctly return a "NOT IMPLEMENTED" error
message. Also, some minor cleanup in the documentation: star records
(*.example.com, etc.) are now documented. (2001.05.10)
</blockquote><p>
<p>maradns-0.6.09:
<blockquote><p>
add_closer_jsddip, add_closer_js, and add_closer_jsip now have a third
argument: Whether to overwrite or append to already existing data in the
cache. Since the autoconf stuff doesn't work with the development
branch, I got rid of it for now. Once this code gets stable, one of the
Debian packagers can feel free to add the autoconf stuff again.
(2001.05.10)
</blockquote><p>
<p>maradns-0.6.08:
<blockquote><p>
Added in_bailiwick and cmp_dnames functions to recursive.c
(2001.05.09)
</blockquote><p>
<p>maradns-0.5.21:
<blockquote><p>
Feature enhancment: Added round-robin rotation of records and limits to the
number of records that can be displayed for a given answer to MaraDNS.
This will be the last feature enhancment for the 0.5.xx tree. All changes
in the 0.5.xx tree will now be bug fixes. Now, back to work
on the 0.6.xx series, starting off with integrating the 0.5.xx
changes. (2001.05.07)
</blockquote><p>
<p>maradns-0.5.20:
<blockquote><p>
Feature enhancment: We now make sure that the same AR record does not
show up twice in the AR section. Thanks to Phil Homewood for pointing
out this problem. (2001.05.06)
</blockquote><p>
<p>maradns-0.5.19:
<blockquote><p>
Bugfix release: We now follow chains of records in the AR section.
The authoritative bit for an "RR_ALL" request is now determined by
the authoritative bit in the first RR found. Thanks to Phil Homewood
for finding these bugs. (2001.05.06)
</blockquote><p>
<p>maradns-0.6.07:
<blockquote><p>
The askmara tool now uses select() to time out after three seconds.
Added a lot of code to the recursive lookup. I now send a query to
the remote server, and receive the reponse. Next: Code to process the
response and add the data to the local cache. (2001.05.06)
</blockquote><p>
<p>maradns-0.6.06:
<blockquote><p>
The recursive code now sucessfully seeds a root nameserver in to the cache.
Next: Code to query and get the response form that nameserver.
(2001.05.05)
</blockquote><p>
<p>maradns-0.6.05:
<blockquote><p>
Heavy debugging of the recursive stuff going on. It is not fixed, but I
wanted to post something, however miniscule, before going to bed.
(2001.05.04)
</blockquote><p>
<p>maradns-0.5.18:
<blockquote><p>
Addded new feature: default_rrany_set, which is used to change the
RRs returned when a RR_ANY query is sent to the MaraDNS server. Thanks
to Phil Homewood who pointed out that this is sometimes needed.
(2001.05.03)
</blockquote><p>
<p>maradns-0.6.04:
<blockquote><p>
recursive text documented updated to reflect changes I made on the train.
Some other cleanup. (2001.05.02)
</blockquote><p>
<p>maradns-0.6.03:
<blockquote><p>
Wrote up document detailing the recursive algorithm that MaraDNS'
recursive resolver will use. Integrated the 0.5.17 bugfixes in to the
development tree. (2001.05.01)
</blockquote><p>
<p>maradns-0.5.17:
<blockquote><p>
Fixed bug in MaraDNS' handling of zone transfers where the response
is a single big RR instead of multiple small RRs. Some other small
bugfixes. (2001.04.30)
</blockquote><p>
<p>maradns-0.6.02:
<blockquote><p>
I have the general structure of how I want to do the recursive name
serving in place. The devil, however, is in the details.
(2001.04.28)
</blockquote><p>
<p>maradns-0.6.01:
<blockquote><p>
Fixes in MaraDNS-0.5.16 incorporated in to development branch. Slowly
making progress on the recursive code. (2001.04.26)
</blockquote><p>
<p>maradns-0.5.16:
<blockquote><p>
Fixed bug in the zoneserver's handling of replies longer than 255 octets in
length. Fixed problem in manpage and updated man page. Special thanks to
Phil Homewood for finding problems the zone server was having.
(2001.04.26)
</blockquote><p>
<p>maradns-0.6.00:
<blockquote><p>
Work on making MaraDNS recursive begins. (2001.04.26)
</blockquote><p>
<p>maradns-0.5.15:
<blockquote><p>
Fatal error messages caused by failed system calls now show the user the
error message that the system gave, in addition to MaraDNS' error
message. (2001.04.26)
</blockquote><p>
<p>maradns-0.5.14:
<blockquote><p>
Added "no_fingerprint" feature which minimizes the
MaraDNS-specific features, making it more difficult
to determine which DNS server one is running. (2001.04.23)
</blockquote><p>
<p>maradns-0.5.13:
<blockquote><p>Manpage for maradns added. (2001.04.22)</blockquote><p>
<p>
maradns-0.5.12:
<blockquote><p>
Added better support for CNAME records: If the CNAME record
points to an A record, and we have the A record "on file",
MaraDNS will add the CNAME record to the ar section of the
reply. Also added support for getting the version number
for maradns via a 'erre-con-erre-cigarro.maradns.org.'
TXT query. Set things up so we can both a autoconf-based
and a non-autoconf-based build process, and we can switch
between the two.
Next: Branch off to development again, because I need to
get the zone server multithreaded. (2001.04.22)
</blockquote><p>
<p>
maradns-0.5.11: <blockquote><p>Tollef Fog Heen generously ran autoconf for MaraDNS. The
build process now consists of './configure;make'".
(2001.04.21)
</blockquote><p>
<p>maradns-0.5.10:
<blockquote><p>Code cleanup: I added -Wall as an option in the libs, dns,
and server directories. Cleanup of all the warnings that
-Wall generated. Added /etc/mararc and
/var/maradns/db.example.com to RPM file. (2001.04.20)
</blockquote><p>
<p>
maradns-0.5.09:
<blockquote><p>
The server crashes were causes by pointers that were
not correctly initialized to zero. The pointers causing
the crash have been initialized, and hopefully this one
will be crashproof. Next: Look for other incorrectly
initialized variables. (2001.04.20)
</blockquote><p>
<p>
maradns-0.5.08:
<blockquote><p>
Begin a "stable" brach for the only-authoritative
non-threaded nameserver. Changed compiler option from
-g to -O2. Made RPM of MaraDNS-0.5.08. (2001.04.19)
</blockquote><p>
<p>
maradns-0.5.07:
<blockquote><p>
Plugged some memory leaks in the zoneserver which, while
not currently a problem, could have been a problem if
I had started coding threads before plugging the memory
leaks. Some of the leaks were is the js_string library,
so that code base is a lot cleaner now. Made the
functions in ParseCsv1.c thread-safe. My friend Fatma
generously supplied a German translation of the error
strings in MaraDNS_en.h--we now have a MaraDNS_de.h which,
while not perfect, will be appreciated by the Germans.
(2001.04.18)
</blockquote><p>
<p>
maradns-0.5.06:
<blockquote><p>
The zone server for MaraDNS can now be run from inetd.
Due to the security implications of this (MaraDNS' IP-based
ACLs stop working when run from inetd), this will be an
undocumented feature. (2001.04.18)
</blockquote><p>
<p>
maradns-0.5.05:
<BLOCKQUOTE><p>
Phil Homewood generously supplied a patch that makes this
compile on FreeBSD. In addition, he fixed a bug in the
Makefile in dns/Makefile which made it so bobbit.c
compiles instead of using the Linux-specific object file
(Which I didn't catch, since make clean didn't remove it
and make didn't recreate it). I also fixed a bug in
getzone.c which was introduced when I put the string
literals in a language-specific file. (2001.04.17)
</BLOCKQUOTE><p>
<p>
maradns-0.5.04:
<BLOCKQUOTE><p> Added more support for dotted decimal IPs in NS, CNAME, and
MX records. Added handles for code which will warn the user
of the presence of these dotted-decimal IP records. Fixed
bug where js_copy was not returning an appropriate value on
success (2001.04.17)
</BLOCKQUOTE><p>
<p>maradns-0.5.03:
<BLOCKQUOTE><p>
If a "give me all records for a given hostname" query appears,
MaraDNS will now look for a CNAME with the same hostname,
returning only that if found (and she will only look for a
CNAME if an A and MX were not found), and if A, MX, and
CNAME records are not found, MaraDNS will see if the person
entered a dotted decimal ip and respond appropriately.
(2001.04.16)
</BLOCKQUOTE><p>
<P>maradns-0.5.02:
<BLOCKQUOTE><p>
Most of the text messages that MaraDNS' various utilities
generate have been moved to separate files, which will make
localization easier. (2001.04.16)
</BLOCKQUOTE><p>
<p>
maradns-0.5.01: Bugfix: Since mail exchangers routinely ask for "all records"
queries (to get both A and MX records), I have hacked MaraDNS
to deliver A and MX records if a request for all records
is received. I still need to code the case of a request for
"all records" pointing to a CNAME, though. Also, I have
added a benchmark tool which times a DNS server by sending
50,000 queries to the server in question as quickly as
possible. (2001.04.13)
<p>
maradns-0.5.00: The UDP server no longer fork()s off processes to process
queries. I performed a mild stress test, where MaraDNS was
processing 81 queries a second for over an hour--MaraDNS
performed beautifully--memory usage did not increase, and
queries were fast during this test. I am making this
release the stable branch. Next: Get string literals out
of the code. (2001.04.12)
<p>
maradns-0.4.04: More bug fixes: Plugged potential memory leaks in
js_buf_getline. Fixed bug where the last line of a
csv1 file was not read. Fixed makefile so that it cleans
files in new location of the zonefile stuff--it's now in
a directory called "tuzona". Next: Go from a multi-process
model to a single process model. (2001.04.12)
<p>
maradns-0.4.03: Bugfix: The zone server is now hacked up to give a
plausable-looking answer to a SOA request on the TCP port.
As a result, BIND 4 and BIND 8 will now transfer zones from
the maradns zoneserver. (2001.04.12)
<p>
maradns-0.4.02: Bigfix: Hacked zoneserver so that it can work as a zone server
in cases where the zone transfer client asks for the SOA
record before downloading the zone. Also: Added the ability
to verbosely log invalid queries sent to the DNS server,
and to have a log level of 0 make MaraDNS give out no logs
whatsoever. Next: Fix bug where the last line of a csv1
file is not parsed. (2001.04.12)
<p>
maradns-0.4.01: Bugfix: Fixed bug where SOA records were not properly loaded
when we have multiple zones. (2001.04.11)
<p>
maradns-0.4.00: Stable branch: This is the stable branch of MaraDNS, which
will only be updated with security fixes. Made zoneserver
check the query type, and drop connection on anything
besides AXFR and IXFR (Hack: The zone server treats an IXFR
exactly like an AXFR). Also cleaned up the error
handling in the zone and udp server code in preparation to
make maradns multithreaded. (2001.04.11)
<p>
maradns-0.3.06: Security fix: The zone transfer client now checks for and
disables any out-of-baliwick records it finds when performing
a zone transfer. Feature enhancment: Maradns now has a
working zone transfer server. (2001.04.10)
<p>
maradns-0.3.05: An entire parsing engine which processes ip-based ACLs has
been created, complete with recursive aliases. Zoneserver
now only needs the code that reads the client's request
and send them the zone they ask for (as long as they have
access). (2001.04.08)
<p>
maradns-0.3.04: TXT, A, and MX records are now "pretty printed" when downloaded
from a foreign zone. All seven RR types supported by MaraDNS
are now pretty printed. Fixed bug with the handling of
"umbrella" NS records. Fixed bug with the handling of high
serial numbers and extra-long TTL values. Next: the AXFR
server. (2001.04.04)
<p>
maradns-0.3.03: The getzone program in tcp now generates working, albeit
ugly (too many RR types are still marked 'U'), MaraDNS zone
files based on the data from a zone transfer. Also found and
fixed other bugs the popped up when stressing the various
queries routines with a full Zone transfer. Unreleated
to MaraDNS per se, MaraDNS now has a `real' web page. (Thanks,
Leo!) (2001.04.04)
<p>
maradns-0.3.02: Added support for truncating headers. Began work on getzone
zone transfer client. (2001.04.03)
<p>
maradns-0.3.01: Fixed bug where the MX preference changed on DNS compressing
and DNS decompressing. (2001.04.01)
<p>
maradns-0.3.00: The DNS compression routines now work. Also set up the server
to return "Not implemented" to the unimplemented requests for
zone transfers and the unimplemented requests for all RRs
attached to a hostname. (2001.04.01)
<p>
maradns-0.2.10: My theory is that they made DNS comprssion so difficult to
implement out of fear that anyone would be crazy enough to
write their own DNS server. Continued work on the compression
routines. (2001.03.31)
<p>
maradns-0.2.09: Moved check for star records attached to CNAME or to NS RRs
in the CSV1 parser, where it belongs. Added support for
"notfound" reply. Next: RFC1035 compression (ugh).
(2001.03.29)
<p>
maradns-0.2.08: Added support for ddip addresses (An IP query for '127.1.1.1'
gives the IP '127.1.1.1'). Added almost full support for
star records. Only these somewhat silly star record cases are
not supported: Star records pointing to CNAMEs and to NSs
records. Added code that warns the user if they try to add
an unsupported star record type. Next: The code to give
out a "notfound" reply. (2001.03.28)
<p>
maradns-0.2.07: Fixed bug in MaraDNS' handling of case folding. Added some
support for star records. (2001.03.27)
<p>
maradns-0.2.06: A and CNAME queries are now case-insensitive. Changed
the bs_process routine to have domain-labels converted to
their lower-case format before octal processing is done
(so we can still have 'A' in a domain label with '\101')
Returns NS delegation if we asked for a host in a
sub-delegated domain. (2001.03.27)
<p>
maradns-0.2.05: Cleaned up the makefile so that we don't have compiled
binaries in any of the directories after a "make clean" is
performed. Added support for CNAME and limited NS record
support. (2001.03.26)
<p>
maradns-0.2.04: New security feature: Maxprocs, which is a mandatory way
of limiting the resources MaraDNS uses. Added fix.perms
tool. (2001.03.26)
<p>
maradns-0.2.03: I have made the directory structure a little cleaner. The
only problem I have now is that multiple Makefiles have to
be changed if I add a new object file. I also have improved
the way MaraDNS cleans up after her children. (2001.03.26)
<p>
maradns-0.2.02: Now, MaraDNS correctly returns NS records and AN records for
every query where it has NS and AN records in its local
database. While I wait for the clows at NSI to figure
out why we can't make maradns.com and maradns.org use
ns.maradns.com and ns.maradns.org as name servers for
both domains, I can test things with www.z.maradns.org
(2001.03.25)
<p>
maradns-0.2.01: Bugfix: SOA lines can now have percent escape sequences in
them. (2001.03.25)
<p>
maradns-0.2.00: Incremented minor number in light of the fact MaraDNS now
actually resolves, albeit in a very limited fashion. Added
some QuickStart notes, and added the ability for uint16s and
uint32s to be added directly to the end of a JS_STRING
object. (2001.03.25)
<p>
maradns-0.1.40: MaraDNS now resolves hosts. It doesn't handle a lot
of cases where the resolution is not an exact match
(NS records for stuff below us, star records, etc.) nor
does it give us NS or AN records, nor the IP for a Cname
record (if applicable), but at least MaraDNS is finally
resolving. To do: js_string function for adding uint16s
and uin32s in a single fell swoop, and real name resolution.
(2001.03.25)
<p>
maradns-0.1.39: At this point, MaraDNS binds to a port and listens to
incoming data. Next: Actually process the data that
she gets (2001.03.24)
<p>
maradns-0.1.38: Added the code that adds pointers to the corresponding A
records for MX, NS, and CNAME records. (2001.03.23)
<p>
maradns-0.1.37: Placed the code that converts star records in a more sensible
location. Added a new element in the rr answer which is
a pointer to the query string (we need this so we can tell
the resolver both the question and the answer with the NS
records, and which IP addresses go with which answers in
the AR records) (2001.03.21)
<p>
maradns-0.1.36: Now we convert star records (record which start off with
a * label) to an EDNS-style format MaraDNS uses for its
internal hash of RRs (2001.03.19)
<p>
maradns-0.1.35: Verified that records are placed in the bug hash correctly.
Next: We can now start making this a working DNS server.
Bind to the port, answering UDP queries using a simple
forking model. (2001.03.18)
<p>
maradns-0.1.34: Added some more security features: It now chroot's and
changes the uid if it is run as root. Also made a function
that adds a RR to the end of a chain of RRs before the first
NS RR. (2001.03.17)
<p>
maradns-0.1.33: Plugged up some memory leaks in MaraHash.c. Added a lot
of code which starts populating the big hash with data.
(2001.03.17)
<p>
maradns-0.1.32: More work on the the populate+bighash routine. Now, when
a syntax error is encountered, MaraDNS makes a best-faith
effort to continue processing zone files. (2001.03.16)
<p>
maradns-0.1.31: Additional work on that routine. Now, it correctly make
sure that we add the NS records for the zone before the
NS records, and also fixed some other bugs in this
routine. Next: Make add_rr_to_bighash really check the
authority of a record and and data to the big hash
(2001.03.15)
<p>
maradns-0.1.30: Worked on the routine to fill up the "big hash" with the
appropriate data. Now, I need to replace the "dummy"
add_rr_to_bighash with a routine that adds the appropriate
rr to the big hash (if appropriate). (2001.03.14)
<p>
maradns-0.1.29: Installed a new verison of Linux on my Laptop (Esware 2.0r2,
a Spanish RedHat clone with the 2.4 kernel). Begun work
on MaraDNS.c. Next: continue work on MaraDNS.c
(2001.03.13)
<p>
maradns-0.1.28: Made all of the string literals in ParseMaraRc.c labels which
point to entries in ParseMaraRc_en.h. Wrote and documented
Perl script which automates this kind of work.
I did the same with ParseCsv1.c (ParseCsv1_en.h).
(2001.03.11)
<p>
maradns-0.1.27: Pasted in read/write/setup kvar code from the code that
parsed the kiwirc file in the kiwi2 anti-spam package.
Modified mararc code so that it can parse both simple
strings and dictionaries (Assosciative arrays)
Next: The code that populates the DNS lookup hash based on
the data read from the mararc file. (2001.03.11)
<p>
maradns-0.1.26: Made the code that parses mararc lines a little more
senisible. It's still hackish, but is somewhat pedantic
about what kind of syntax it accepts, returning errors
when wrong syntax is given to it. (2001.03.10)
<p>
maradns-0.1.25: Added support for % in csv1 file. Revised csv1.format
document. Next: figure out a way to store "star records"
in the hash table in such a way as to not step on the
EDNS standards. And implement that method. (2001.03.09)
<p>
maradns-0.1.24: Added support for MX and "Unknown" (user-specified query
type) data types. Added support for '\xxx'-style escape
sequences, making it possible to have arbitrary data in
the csv1 zone file. (2001.03.08)
<p>
maradns-0.1.23: Changed js_atoi to return unsigned integers. Added support
for TXT and SOA records. Tested to make sure error
correction looks good. Next: PTR shorthand, more efficient
Makefile. (2001.03.07)
<p>
maradns-0.1.22: Split off some of the routines in other files to new .c
files: ParseCsv1.c and Utf8.c. Created js_addbyte routine.
Added csv1test and example_csv1 files to test the csv1
parsing routines. Created js_changebyte routine.
ParseCsv1 routine now parses all data types except for the
SOA datatype. Next: SOA datatype, shortcut for PTR datatype.
(2001.03.07)
<p>
maradns-0.1.21: Wrote utf8test to test the ability to convert ISO 8859-1
strings to UTF-8 strings. Found minor bug in code, fixed,
and now ISO 8859-1 strings are correctly copied. I had to
set up X and recompile xterm to support all this. Cleaned
up the comments in the js_notmatch_offset code (they were
never cleaned up from the Kiwi days). Clean up of some
code in Queries.c. Wrote about half of the line parsing
code for parsing csv1 lines. csv1 format doc clean
up. (2001.03.07)
<p>
maradns-0.1.20: I have decided that MaraDNS will use UTF-8 to support
international characters in domain names. I have added
the draft RFC for UTF8 domain names and a description of
UTF8 in the docs. In terms of code, we now have code
that converts ISO 8859-1 to UTF-8. In addition, I have
written up a couple of documents describing the csv1
non-standard Zone file format, and how MaraDNS will
resolve a domain name. (2001.03.06)
<p>
maradns-0.1.19: Added routines to handle getting all of the keys of a hash
in series (in the semi-random order they are in the hash
table). Corrected errors in parseline code, it now
works with foo["bar"] = "baz" lines and no longer considers
foo["bar"] = baz legal. foo["bar"] = 1 is still legal.
(2001.03.04)
<p>
maradns-0.1.18: More ParseMaraRC hacking (this this is a real hack.
A really bad hack. At least the elegant js_string lib
stops it from being a security problem). It now has
routines that can fill up an assosciative array based
on user-specified keys and values. Next: Routine that
reads the rc file, and, based on the data there, begins
reading zone files. The zone files will then be read in
turn, and then populate a hash. (2001.03.03)
<p>
maradns-0.1.17: More ParseMaraRC.c hacking. Now, it can parse
'foo = {}', 'foo["bar"] = "baz"', and 'foo = "bar"'.
Next: Write the routine to read an entire maradnsrc (maybe
we should just call this mararc) and fill up the hash
table with the names of all of the zones. (2001.03.03)
<p>
maradns-0.1.16: Modified js_anq_chars handle just numerics. Made it
correctly handle just alphabetics. Renamed 'ctest' to
'askmara'. Rewrote askmara.c to have all labels in
another file (askmara_labels_en.h), to make translation
easier. (2001.03.02)
<p>
maradns-0.1.15: Continuing the retooling of code from the KiwiSpam package
to use assosciative arrays in ParseMaraRC.c. Yes, this whole
parser is a hack instead of a proper parser. Right now, the
single line parser groks foo["bar"] = baz. Next: get it
to grok foo = {} (2001.03.01)
<p>
maradns-0.1.14: Beginning the retooling of code from the KiwiSpam package
to use assosciative arrays in ParseMaraRC.c. This will
be a fairly extensive code rewrite, considering the code I am
modding is somewhat hacky itself. (2001.03.01)
<p>
maradns-0.1.13: Fixed bug where ctest resolver program did not print out SOA
replies (2001.02.28)
<p>
maradns-0.1.12: Added support for TXT in ctest resolver code. Made ctest code
more hardy--it validates all input and returns an error if
there is a problem at any point.
(2001.02.27)
<p>
maradns-0.1.11: Support for MX and SOA, and a number of other formats that
may have compressed data in them now added to the
decompression routine. ctest now can parse any RR that
MaraDNS fully supports except TXT (A, NS, SOA, MX, CNAME,
HINFO), and is now a rather verbose dig replacment. Got
rid of the cruft variables in the decompression routine.
Next: Have a routine to decode TXT data.
(2001.02.27)
<p>
maradns-0.1.10: You know how to handle buggy code? Rewirte the code so
that it is simpler and less buggy. A lot of the overhead
I had was not needed to keep things secure. The docs
on how MaraDNS handles decompression have been revised
also. RFC1035 decompression now works, still need to
add MX and SOA, and possibly support for other data types
that get compressed (SRV, the obscure RFC1035 datatypes,
etc.) Also, get rid of some of the cruft variables in the
decompression code. (2001.02.26)
<p>
maradns-0.1.09: Had a good weekend. Got to see a friend of mine and his wife
get baptised. Continued work on decompress_data. It is
still buggy, but I am working out the bugs. (2001.02.26)
<p>
maradns-0.1.08: Added read_rr_h. Also began work on decompress_data
(Ugh. rfc1035 compression is horrible.) (2001.02.22)
<p>
maradns-0.1.07: Fixed potential overflow in rtest (probably never exploitable)
Discovered that DNS servers do not support QDCOUNT > 1 in DNS
queries. Made notes in "doc" about this. (2001.02.21)
<p>
maradns-0.1.06: ctest now sends correctly formed DNS queries to a DNS server
(2001.02.21)
<p>
maradns-0.1.05: Added hname_2rfc1035, which does the reverse of
hname_translate. Beginning work on ctest, which is a
test DNS client, to see what kind of replies we get
from DNS servers. (2001.02.21)
<p>
maradns-0.1.04: Debugged routines in Query.c that convert a RFC1035 question
in to a query. Added routine that converts a RFC1035 domain
name (with class) in to a dotted-decimal hostname.
(2001.02.20)
<p>
maradns-0.1.03: Began work on debugging routines in Query. Time to go to
work (2001.02.20)
<p>
maradns-0.1.02: Wrote first (test-only) server that listens on port 53.
Using this server to determine what kind of data resolvers
ask for. (2001.02.20)
<p>
maradns-0.1.01: Added some more RFC1035 data to MaraDns.h (2001.02.20)
<p>
maradns-0.1.00: Begin work on handlers to handle various data types that
RFC1035 has. (2001.02.20)
<p>
maradns-0.0.08: Added js_anq_chars, js_alpha_chars, and js_an_chars to
JsStrCP object. (2001.02.19)
<p>
maradns-0.0.07: Good morning! Added mtuple_new, mtuple_put, and mtuple_get
functions. Fixed bug where mhash_inc would allow a return
value of 0. Fixed Makefile so make clean cleans up mtest
binary. Added bounds testing to mhash_resize hashtable size.
Time to eat breakfast. (2001.02.19)
<p>
maradns-0.0.06: Added mara_tuple support and verified that hash collisions
are properly handled. Time to go to evening church recital.
(2001.02.18)
<p>
maradns-0.0.05: Corrected mhash_resize to blank out the hash we resize to.
Create mtest.c program to test the creation of hash
elements. Time to get ready for church. (2001.02.18)
<p>
maradns-0.0.04: We now properly handle the case of trying to add an
element already there (return an error), and have
more error checking to make sure we don't crash
because of corrupt hash data. Added an interactive
test which lets the user interactively add, delete, and
view hash elements. Time to go to bed (2001.02.18)
<p>
maradns-0.0.03: Some more work has been done. mhash_undef_js and
mhash_resize functions written and compile. (2001.02.18)
<p>
maradns-0.0.02: MaraHash functions--assosciative array methods utilizing
a hash--have been set up. This has the functions
mhash_create, mhash_js, mhash_inc, mhash_put,
mhash_get, mhash_undef, mhash_put_js, and mhash_get_js.
Debugging done--these functions can perform basic
get/put operatins with elements in an assosciative
array. (2001.02.18)
<p>
maradns-0.0.01: First version of MaraDNS package. Added iso-8859-1 support
to JsStr routines. Added js_qappend and js_qprepend
functions there. In addition to js_qfgrep. All tested
functions work and are without error. (2001.02.17)
<p>
</div>
</td></table>
</div>
</td></table>
</div>
</body>
</html>
distrib
>
Mageia
>
4
>
i586
>
media
>
core-release
>
by-pkgid
>
07a81589bb2c4aa5e88f35a4a345a184
>
files
>
349
