Could pdns-recursor be made to compile with a specific path where the binary should be installed? I'd like mine installing to /usr/local/sbin/ as opposed to /usr/sbin
On 5 April 2013 10:55, Peter van Dijk <[email protected]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi everybody, > > Release Candidate 4 of the PowerDNS Recursor 3.5 is available from: > > source: http://powerdnssec.org/downloads/pdns-recursor-3.5-rc4.tar.bz2 > semistatic packages: http://powerdnssec.org/downloads/packages/ > RHEL5/6 native: > http://www.monshouwer.eu/download/3rd_party/pdns-recursor/rc4/ > > You are cordially invited to (carefully) test this Release Candidate for > correct behaviour. > > RC3 was skipped because the ever vigilant Winfried Angele spotted an > issue with it even before we had fully released it! > > Full release notes, with clickable links, are available from: > http://doc.powerdns.com/changelog.html#changelog-recursor-3-5 > > Here is a text-only version: > > This is a stability, security and bugfix update to 3.3/3.3.1. It contains > important fixes for slightly broken domain names, which your users expect > to > work anyhow. > > [Note] Note > Because a semi-sanctioned 3.4-pre was distributed for a long time, > and > people have come to call that 3.4, we are skipping an actual 3.4 > release > to avoid confusion. > > Changes between RC3 (unreleased) and RC4: > > * Winfried Angele spotted, even before release, that r3132 in RC3 broke > outgoing IPv6 queries. We are grateful for his attention to detail! > Fixed > in r3141. > > Changes between RC2 and RC3 (unreleased): > > * Use private temp dir when running under systemd, thanks Morten Stevens > and > Ruben Kerkhof. Change in r3105. > > * NSD mistakenly compresses labels for RP and other types, violating a > MUST > in RFC 3597. Recursor does not decompress these labels, violating a > SHOULD > in RF3597. We now decompress these labels, and reportedly NSD will stop > compressing them. Reported by Jan-Piet Mens, fixed in r3109. > > * When forwarding to another recursor, we would handle responses to ANY > queries incorrectly. Spotted by Jan-Piet Mens, fixed in r3116, closes > ticket 704. > > * Our local-nets definition (used as a default for some settings) now > includes the networks from RFC 3927 and RFC 6598. Reported by Maik > Zumstrull, fixed in r3122. > > * The RC1 change to stop using ANY queries to get A+AAAA for name > servers in > one go had a 5% performance impact. This impact is corrected in r3132. > Thanks to Winfried Angele for measuring and reporting this. Closees > ticket > 710. > > * New command 'rec_control dump-nsspeeds' will dump our NS speeds > (latency) > cache. Code in r3131. > > Changes between RC1 and RC2: > > * While Recursor 3.3 was not vulnerable to the specific attack noted in > 'Ghost Domain Names: Revoked Yet Still Resolvable', further > investigation > showed that a variant of the attack could work. This was fixed in > r3085. > This should also close the slightly bogus CVE-2012-1193. Closes ticket > 668. > > * The auth-can-lower-ttl flag was removed, as it did not have any effect > in > most situations, and thus did not operate as advertised. We now always > comply with the related parts of RFC 2181. Change in r3092, closing > ticket > 88. > > Changes below are in RC1 (and up). > > New features: > > * The local zone server now understands wilcards, code in commit 2062. > > * The Lua postresolve and nodata hooks, that had been distributed as a > '3.3-hooks' snapshot earlier, have been merged. Code in commit 2309. > > * A new feature, rec_control trace-regex allows the tracing of lookups > for > specific names. Code in commit 3044, commit 3073. > > * A new setting, export-etc-hosts-suffix, adds a configurable suffix to > names > imported from /etc/hosts. Code in commit 2544, commit 2545. > > Improvements: > > * We now throttle queries that don't work less agressively, code in > commit > 1766. > > * Various improvements in tolerance against broken auths, code in commit > 1996 > , commit 2188, commit 3074 (thanks Winfried). > > * Additional processing is now optional, and disabled by default. > Presumably > this yields a performance improvement. Change in commit 2542. > > * rec_control reload-lua-script now reports errors. Code in commit 2627, > closing ticket 278. > > * rec_control help now lists commands. Code in commit 2628. > > * rec_control wipe-cache now also wipes the recursor's packet cache. > Code in > commit 2880 from ticket 333. > > * Morten Stevens contributed a systemd file. Import in commit 2966, now > part > of the recursor tarball. > > * commit 2990 updates the address of D.root-servers.net. > > * Winfried Angele implemented and documented the ipv6-questions metric. > Merge > in commit 3034, closing ticket 619. > > * We no longer use ANY to get A+AAAA for nameservers, because some auth > operators have decided to break ANY lookups. As a bonus, we now track > v4 > and v6 latency separately. Change in commit 3064. > > Bugs fixed: > > * Some unaligned memory access was corrected, code in commit 2060, commit > 2122, commit 2123, which would cause problems on UltraSPARC. > > * Garbage encountered during reload-acls could cause crashes. Fixed in > commit > 2323, closing ticket 330. > > * The recursor would lose its root hints in a very rare situation. > Corrected > in commit 2380. > > * We did not always drop supplemental groups while dropping privileges. > Reported by David Black of Atlassian, fixed in commit 2524. > > * Cache aging would sometimes get confused when we had a mix of expired > and > non-expired records in cache. Spotted and fixed by Winfried Angele in > commit 3068, closing ticket 438. > > * rec_control reload-acl no longer ignores arguments. Fix in commit 3037, > closing ticket 490. > > * Since we re-parse our commandline in rec_control we've been doubling > the > commands on the commandline, causing weird output. Reported by Winfried > Angele. Fixed in commit 2992, closing ticket 618. This issue was not > present in any officially released versions. > > * commit 2879 drops some spurious stderr logging from Lua scripts, and > makes > sure 'place' is always valid. > > * We would sometimes refuse to resolve domains with just one nameserver > living at the apex. Fixed in commit 2817. > > * We would sometimes stick RRs in the wrong parts of response packets. > Fixed > in commit 2625. > > * The ACL parser was too liberal, sometimes causing recursors to be very > open. Fixed in commit 2629, closing ticket 331. > > * rec_control now honours socket-dir from recursor.conf. Fixed in commit > 2630 > . > > * When traversing CNAME chains, sometimes we would end up with multiple > SOAs > in the result. Fixed in commit 2633. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.17 (Darwin) > Comment: GPGTools - http://gpgtools.org > > iQIcBAEBAgAGBQJRXoMoAAoJENz1E/p+7RnzyJEP/AmXqDNnypJg87lTvdRzM857 > vN78yBCGSZ/pPFaJOXwxvYXRPLw41VIJHnf7x2XKm+S0l0wtIm2ptGwXM1gNdTM1 > GtWIGfFDS2H+UchG3DkMCqo/DhFD9jblKaRI7VlcYTLKyvSm5KDSsB+uwC5p1+CE > xbpQmbM6hwMmhn7Hw307uYvWWOHAcJim2KnWzBPDvdRDCqaZaTKO/E1nDPdCl9Bm > dUDX3fkPWOg8o2vX+RkU3fh11O7TL2Q8sP48SB0VCD9NKBY3ZDstGPy+cJreYZmc > yPj6nynWh6DVjq88wDucAZ1RZlPkUj1zj4EsYkBdNyN/7SF0vKQlnApNjWlZXna9 > EVYHiuPmsra7aEuvFCd3QNvtsOQ68ZkiRRe/M11Lv0NcJkzDwNPcrA8HsK8eY47Q > t1N0IoP1N4L9i6VDSk2dpNfRMVCElGKmV+83M/grMvH49RMOcWxLLB0ywUQQ+4JM > Atzu4UUHrWPaVbbQbMm82LYk3HULcQtOZKxXpi9GA7gLSdFcogcnDP+vBj5irTDN > r2pWpooL9aFemXHfZc4Z8DDfCZQVeuZqaUmtVYihp4/tVepww+74ADa8gXlJw8Ii > rLJHsTMlZM4OKK0kpepuUuvN6u4iUDIqD9gw+kXoJPBO/4Oa3AiPAP1DEmqPxfDd > ZH1h+srjJWod5vhMh9Bo > =LZ8N > -----END PGP SIGNATURE----- > > _______________________________________________ > Pdns-users mailing list > [email protected] > http://mailman.powerdns.com/mailman/listinfo/pdns-users > -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."
_______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
