[rbldnsd] Announce: rbldnsd-0.992 release
Michael Tokarev
mjt at tls.msk.ru
Sun Mar 7 02:06:30 MSK 2004
Version 0.992 of rbldnsd, a nameserver for running
a DNSBL, is available. There are quite some new
features, and (mostly cosmetic) bugfixes since 0.991.
Highlights in this release:
- continue processing queries during reloads. For
this, rbldnds forks off the child process that
process queries while parent performs the reload.
Requires 2x more memory (changed datasets will be
doubled during reloads). -f option (not enabled
by default).
- new -s option: write short statistic summaries into
given file, to help obtaining data for tools like RRD.
Note old meaning of this option is now gone, but it
wasn't used (i hope) anyway. This may be an incompat
change for your setup.
Other features:
- feature: allow easy turning on/off individual NS
records in $NS line, by prefixing unused nameservers
with minus sign (-)
- feature: new dataset, ip4tset, very simplified ip4set.
Only accepts bare IP addresses, no netranges, no
exceptions, but requires 2x less memory and is faster.
- feature: extended -t option, allow minttl and maxttl
to be specified (to set constraints for TTLs found
in data files). New syntax is -t defttl:minttl:maxttl,
with everything optional (so -t defttl works too, as
well as -t ::1d).
Other changes and bugfixes:
- bugfix: fix -d (master-format dump) for generic dataset
- bugfix: remove usage of NI_WITHSCOPEID (it was used for
unknown reason anyway and broke on latest solaris)
- #define _LARGEFILE64_SOURCE and use O_LARGEFILE if
defined in rbldnsd.c to be able to write larger
logfiles. Dunno whenever it will actually help,
but it at least works on linux.
- format of syslog statistic logging changed slightly,
it is a bit less verbose now too (and less confusing)
- feature/expectation_fix: add an ability to specify A
but inherit default TXT value for an entry:
entry :addr: - specific A, no TXT
entry :addr - specific A, default TXT
- cleanup: remove redundrand CNAMEs from master-file
dump in ip4set
Experimental:
- new "lazy mode", similar to BIND9 "minimal-answers",
when rbldnsd does not fill out AUTH section in replies.
This means that it does not insert nameserver information
to outgoing packets unless especially asked to (query
type is either ANY or NS made for the base zone DN).
This way, replies are much smaller, but nameserver info
propagates slowly.
To enable this mode, specify -a option in command line.
Please note both the mode itself and the option are
experimental and very likely will be changed in future
(before 1.0 release). I'm thinking about making this
"lazy mode" the default, with -a turning "non-lazy
mode" back, or maybe controlled per zone. I don't
yet know how various caches will behave and how
practical usage of this "lazy mode" will be.
Recommendation to upgrade.
There is no reason to upgrade, unless you want
to use any features introduced in this release,
or some bugfixes are critical for your setup.
As usual, sources (and binaries for some platforms)
are available at http://www.corpit.ru/mjt/rbldnsd.html
Enjoy.
/mjt
More information about the rbldnsd
mailing list