[nsd-users] NSD 3.2.0 released

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear NSD users,

We have released a new version of NSD. It contains some new features,
hence, the version number is updated to v3.2.0.

You can download it at nlnetlabs.nl:
	http://www.nlnetlabs.nl/downloads/nsd/nsd-3.2.0.tar.gz

SHA1 checksum: 7cc37fdd10f4ad78ed58d4e1a304a4496ebaefe7

*IMPORTANT*: Due to a fix in the zone update process, the ixfr.db has a
new format. When you are planning to upgrade to NSD 3.2.x release, make
sure to process the old ixfr.db before starting the new release (by
running nsdc patch). For more information, please read the RELNOTES.

The new features include some long outstanding requests, such as
configuring the outgoing ip address and port for notifies and zone
requests (Bugzilla 148) and hmac-sha1/sha256 support for TSIG (Bugzilla
130).

Hope you like it,

Matthijs Mekking
NLnet Labs


RELNOTES:

OPERATIONAL NOTES:
- - Format of ixfr.db has changed. When you are planning an upgrade to the
  new NSD release, make sure to process the old ixfr.db before starting
  the new release (by running nsdc patch).
- - IXFR is transmitted over TCP by default instead of UDP. If you want to
  continue the use of IXFR/UDP, please modify your zone configuration
  file to:
	request-xfr: UDP 1.2.3.4 tsigkey
  We strongly recommend to enable TSIG if you send IXFR over UDP.
  When all masters fail to transmit IXFR/UDP, slave will fallback to
  IXFR/TCP and eventually AXFR/TCP.
- - nsd-patch prints errors to stderr instead of stdout.

BUG FIXES:
- - Only normalize dnames in rdatas when rrtype is listed in RFC 4034,
  section 6.2: Canonical RR Form, following
  draft-ietf-dnsext-dnssec-bis-updates (affects RRSIG and NSEC records).
- - Typo in zonec manpage.
- - Bugfix in log_finalize.
- - Fix race condition between nsdc patch and server reload.

FEATURES:
- - AXFR/TCP fallback in case of failing IXFR zone transfers.
- - RFC 4635: support for hmac-sha1 and hmac-sha256 TSIG algorithm
  identifiers, "Bugfix #130".
- - Configure the source ip-address for notifies (master) and zone
  requests (slave) in nsd.conf, "Bugfix #148".
- - nsd-notify and nsd-xfer allow you to configure the outgoing
  hostname and source port, in addition to the source address.
- - Additional debug and verbose log messages.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJGCr9IXqNzxRs6egRAlbYAJ4k28AvrR4QV4gnzbOvKzhCxS+HbACfSnFf
4DZ8+aTBDl3QPUpochnGy2A=
=7blH
-----END PGP SIGNATURE-----