BIND 9.2.2-P1 is now available. In response to high demand from our users, ISC is releasing a patch for BIND to support the declaration of "delegation-only" zones in caching/recursive name servers. Briefly, a zone which has been declared "delegation-only" will be effectively limited to containing NS RRs for subdomains, but no actual data outside its apex (for example, its SOA RR and apex NS RRset). This can be used to filter out "wildcard" or "synthesized" data from NAT boxes or from authoritative name servers whose undelegated (in-zone) data is of no interest.
BIND 9.2.2-P1 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.2.2/patch.9.2.2-P1 The PGP signature of the distribution is at ftp://ftp.isc.org/isc/bind9/9.2.2/patch.9.2.2-P1.asc The signature was generated with the ISC public key, which is available at <http://www.isc.org/ISC/isckey.txt>. To apply patch.9.2.2-P1 first download BIND 9.2.2, extact the contents then apply the patch using the patch(1) command. e.g. gunzip < bind-9.2.2.tar.gz | tar xf - cd bind-9.2.2 patch -p1 < ../patch.9.2.2-P1 BIND 9.2.2 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.2.2/bind-9.2.2.tar.gz The PGP signature of the distribution is at ftp://ftp.isc.org/isc/bind9/9.2.2/bind-9.2.2.tar.gz.asc ----- End forwarded message ----- -- Key fingerprint = C549 46E1 1B75 116E 3321 BC0A E502 9457 319E B340 RFC822: [EMAIL PROTECTED] || [EMAIL PROTECTED] << www.NetBSD.org ---------------------------------------------- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/