head	1.60;
access;
symbols
	pkgsrc-2026Q1:1.57.0.2
	pkgsrc-2026Q1-base:1.57
	pkgsrc-2025Q4:1.51.0.2
	pkgsrc-2025Q4-base:1.51
	pkgsrc-2025Q3:1.48.0.2
	pkgsrc-2025Q3-base:1.48
	pkgsrc-2025Q2:1.47.0.14
	pkgsrc-2025Q2-base:1.47
	pkgsrc-2025Q1:1.47.0.12
	pkgsrc-2025Q1-base:1.47
	pkgsrc-2024Q4:1.47.0.10
	pkgsrc-2024Q4-base:1.47
	pkgsrc-2024Q3:1.47.0.8
	pkgsrc-2024Q3-base:1.47
	pkgsrc-2024Q2:1.47.0.6
	pkgsrc-2024Q2-base:1.47
	pkgsrc-2024Q1:1.47.0.4
	pkgsrc-2024Q1-base:1.47
	pkgsrc-2023Q4:1.47.0.2
	pkgsrc-2023Q4-base:1.47
	pkgsrc-2023Q3:1.46.0.2
	pkgsrc-2023Q3-base:1.46
	pkgsrc-2023Q2:1.43.0.6
	pkgsrc-2023Q2-base:1.43
	pkgsrc-2023Q1:1.43.0.4
	pkgsrc-2023Q1-base:1.43
	pkgsrc-2022Q4:1.43.0.2
	pkgsrc-2022Q4-base:1.43
	pkgsrc-2022Q3:1.42.0.10
	pkgsrc-2022Q3-base:1.42
	pkgsrc-2022Q2:1.42.0.8
	pkgsrc-2022Q2-base:1.42
	pkgsrc-2022Q1:1.42.0.6
	pkgsrc-2022Q1-base:1.42
	pkgsrc-2021Q4:1.42.0.4
	pkgsrc-2021Q4-base:1.42
	pkgsrc-2021Q3:1.42.0.2
	pkgsrc-2021Q3-base:1.42
	pkgsrc-2021Q2:1.41.0.6
	pkgsrc-2021Q2-base:1.41
	pkgsrc-2021Q1:1.41.0.4
	pkgsrc-2021Q1-base:1.41
	pkgsrc-2020Q4:1.41.0.2
	pkgsrc-2020Q4-base:1.41
	pkgsrc-2020Q3:1.37.0.2
	pkgsrc-2020Q3-base:1.37
	pkgsrc-2020Q2:1.36.0.2
	pkgsrc-2020Q2-base:1.36
	pkgsrc-2020Q1:1.35.0.2
	pkgsrc-2020Q1-base:1.35
	pkgsrc-2019Q4:1.33.0.8
	pkgsrc-2019Q4-base:1.33
	pkgsrc-2019Q3:1.33.0.4
	pkgsrc-2019Q3-base:1.33
	pkgsrc-2019Q2:1.33.0.2
	pkgsrc-2019Q2-base:1.33
	pkgsrc-2019Q1:1.32.0.2
	pkgsrc-2019Q1-base:1.32
	pkgsrc-2018Q4:1.31.0.2
	pkgsrc-2018Q4-base:1.31
	pkgsrc-2018Q3:1.30.0.2
	pkgsrc-2018Q3-base:1.30
	pkgsrc-2018Q2:1.29.0.2
	pkgsrc-2018Q2-base:1.29
	pkgsrc-2018Q1:1.27.0.2
	pkgsrc-2018Q1-base:1.27
	pkgsrc-2017Q4:1.25.0.6
	pkgsrc-2017Q4-base:1.25
	pkgsrc-2017Q3:1.25.0.4
	pkgsrc-2017Q3-base:1.25
	pkgsrc-2017Q2:1.23.0.2
	pkgsrc-2017Q2-base:1.23
	pkgsrc-2017Q1:1.20.0.2
	pkgsrc-2017Q1-base:1.20
	pkgsrc-2016Q4:1.18.0.14
	pkgsrc-2016Q4-base:1.18
	pkgsrc-2016Q3:1.18.0.12
	pkgsrc-2016Q3-base:1.18
	pkgsrc-2016Q2:1.18.0.10
	pkgsrc-2016Q2-base:1.18
	pkgsrc-2016Q1:1.18.0.8
	pkgsrc-2016Q1-base:1.18
	pkgsrc-2015Q4:1.18.0.6
	pkgsrc-2015Q4-base:1.18
	pkgsrc-2015Q3:1.18.0.4
	pkgsrc-2015Q3-base:1.18
	pkgsrc-2015Q2:1.18.0.2
	pkgsrc-2015Q2-base:1.18
	pkgsrc-2015Q1:1.16.0.4
	pkgsrc-2015Q1-base:1.16
	pkgsrc-2014Q4:1.16.0.2
	pkgsrc-2014Q4-base:1.16
	pkgsrc-2014Q3:1.14.0.4
	pkgsrc-2014Q3-base:1.14
	pkgsrc-2014Q2:1.14.0.2
	pkgsrc-2014Q2-base:1.14
	pkgsrc-2014Q1:1.13.0.4
	pkgsrc-2014Q1-base:1.13
	pkgsrc-2013Q4:1.13.0.2
	pkgsrc-2013Q4-base:1.13
	pkgsrc-2013Q3:1.12.0.2
	pkgsrc-2013Q3-base:1.12
	pkgsrc-2013Q2:1.11.0.2
	pkgsrc-2013Q2-base:1.11
	pkgsrc-2013Q1:1.9.0.2
	pkgsrc-2013Q1-base:1.9
	pkgsrc-2012Q4:1.8.0.2
	pkgsrc-2012Q4-base:1.8
	pkgsrc-2012Q3:1.7.0.6
	pkgsrc-2012Q3-base:1.7
	pkgsrc-2012Q2:1.7.0.4
	pkgsrc-2012Q2-base:1.7
	pkgsrc-2012Q1:1.7.0.2
	pkgsrc-2012Q1-base:1.7
	pkgsrc-2011Q4:1.6.0.16
	pkgsrc-2011Q4-base:1.6
	pkgsrc-2011Q3:1.6.0.14
	pkgsrc-2011Q3-base:1.6
	pkgsrc-2011Q2:1.6.0.12
	pkgsrc-2011Q2-base:1.6
	pkgsrc-2011Q1:1.6.0.10
	pkgsrc-2011Q1-base:1.6
	pkgsrc-2010Q4:1.6.0.8
	pkgsrc-2010Q4-base:1.6
	pkgsrc-2010Q3:1.6.0.6
	pkgsrc-2010Q3-base:1.6
	pkgsrc-2010Q2:1.6.0.4
	pkgsrc-2010Q2-base:1.6
	pkgsrc-2010Q1:1.6.0.2
	pkgsrc-2010Q1-base:1.6
	pkgsrc-2009Q4:1.5.0.2
	pkgsrc-2009Q4-base:1.5
	pkgsrc-2009Q3:1.4.0.4
	pkgsrc-2009Q3-base:1.4
	pkgsrc-2009Q2:1.4.0.2
	pkgsrc-2009Q2-base:1.4
	pkgsrc-base:1.1.1.1
	TNF:1.1.1;
locks; strict;
comment	@# @;


1.60
date	2026.05.15.09.58.59;	author adam;	state Exp;
branches;
next	1.59;
commitid	AbaMQjZsFUtxxTFG;

1.59
date	2026.05.14.16.41.49;	author ryoon;	state Exp;
branches;
next	1.58;
commitid	tKipFjQKzke3NNFG;

1.58
date	2026.04.24.17.10.41;	author wiz;	state Exp;
branches;
next	1.57;
commitid	CwHJRfzOln1zBeDG;

1.57
date	2026.03.17.13.42.39;	author wiz;	state Exp;
branches;
next	1.56;
commitid	lJ7JNjnG8koRFkyG;

1.56
date	2026.02.13.10.47.04;	author wiz;	state Exp;
branches;
next	1.55;
commitid	oJBiOEQ0RtVjJcuG;

1.55
date	2026.02.06.10.05.37;	author wiz;	state Exp;
branches;
next	1.54;
commitid	MwQEYCXeWSFvIitG;

1.54
date	2026.01.19.08.13.58;	author wiz;	state Exp;
branches;
next	1.53;
commitid	atAg8oBWpNoIGYqG;

1.53
date	2026.01.14.12.57.36;	author wiz;	state Exp;
branches;
next	1.52;
commitid	mRVqLEyNYbwWpmqG;

1.52
date	2026.01.07.08.48.25;	author wiz;	state Exp;
branches;
next	1.51;
commitid	1wQ3ICD8eebefrpG;

1.51
date	2025.12.10.08.25.17;	author wiz;	state Exp;
branches;
next	1.50;
commitid	FMnhlrbly1jc2QlG;

1.50
date	2025.10.30.08.29.57;	author wiz;	state Exp;
branches;
next	1.49;
commitid	BIKMk61SnZPBnzgG;

1.49
date	2025.09.27.09.57.33;	author wiz;	state Exp;
branches;
next	1.48;
commitid	GSXfRJoW2938VkcG;

1.48
date	2025.06.30.11.06.46;	author jperkin;	state Exp;
branches;
next	1.47;
commitid	rkRe2VskvCU4aU0G;

1.47
date	2023.10.24.22.10.30;	author wiz;	state Exp;
branches;
next	1.46;
commitid	MTsrqKm6aGrQAVJE;

1.46
date	2023.07.18.18.36.30;	author nia;	state Exp;
branches;
next	1.45;
commitid	RHsqmRdmBXQOzjxE;

1.45
date	2023.07.13.13.49.16;	author nia;	state Exp;
branches;
next	1.44;
commitid	YLzs5mHc2c0d9EwE;

1.44
date	2023.07.12.20.23.50;	author nia;	state Exp;
branches;
next	1.43;
commitid	H6Gi0E70lS3CmywE;

1.43
date	2022.09.29.12.47.31;	author jperkin;	state Exp;
branches;
next	1.42;
commitid	3p4p252o4yMJZKVD;

1.42
date	2021.09.10.11.00.27;	author nia;	state Exp;
branches;
next	1.41;
commitid	st8ib2yJxScDMo8D;

1.41
date	2020.12.14.11.18.25;	author otis;	state Exp;
branches;
next	1.40;
commitid	jkHwVQMtUGQRyHzC;

1.40
date	2020.11.25.16.18.16;	author otis;	state Exp;
branches;
next	1.39;
commitid	R4HWMGvnwjGBPhxC;

1.39
date	2020.10.19.14.36.56;	author otis;	state Exp;
branches;
next	1.38;
commitid	Op1sRqaaUa3AswsC;

1.38
date	2020.09.30.11.53.07;	author otis;	state Exp;
branches;
next	1.37;
commitid	1gTAzvbnDp0fa4qC;

1.37
date	2020.07.01.14.53.13;	author otis;	state Exp;
branches;
next	1.36;
commitid	ffqWZdUMjQQe4oeC;

1.36
date	2020.06.17.22.55.11;	author otis;	state Exp;
branches;
next	1.35;
commitid	fbxrrvHoADuvbDcC;

1.35
date	2020.03.17.19.07.29;	author adam;	state Exp;
branches
	1.35.2.1;
next	1.34;
commitid	73BzMguYLupsTM0C;

1.34
date	2020.01.18.21.50.23;	author jperkin;	state Exp;
branches;
next	1.33;
commitid	JW4hJgY8ZdoTFdTB;

1.33
date	2019.04.25.18.44.36;	author adam;	state Exp;
branches;
next	1.32;
commitid	UirevtGfjmpvhLkB;

1.32
date	2019.02.20.12.19.44;	author adam;	state Exp;
branches;
next	1.31;
commitid	btAbSRTr4WIMcvcB;

1.31
date	2018.11.30.12.57.41;	author adam;	state Exp;
branches;
next	1.30;
commitid	ENGkUUTbBVWX2Y1B;

1.30
date	2018.09.04.10.22.38;	author fhajny;	state Exp;
branches;
next	1.29;
commitid	BGwdIF2sN0IKZLQA;

1.29
date	2018.05.23.10.34.58;	author fhajny;	state Exp;
branches;
next	1.28;
commitid	YlpXPyi5NdbappDA;

1.28
date	2018.04.05.08.15.02;	author fhajny;	state Exp;
branches;
next	1.27;
commitid	GuWNWLwPvY9PaexA;

1.27
date	2018.01.22.19.21.46;	author fhajny;	state Exp;
branches;
next	1.26;
commitid	MsbjKL4ywBq8dUnA;

1.26
date	2018.01.02.12.23.55;	author fhajny;	state Exp;
branches;
next	1.25;
commitid	s2A0PlGQCmguxilA;

1.25
date	2017.09.03.08.53.13;	author wiz;	state Exp;
branches;
next	1.24;
commitid	EfT0kpQ2wSMtgJ5A;

1.24
date	2017.08.02.20.15.42;	author fhajny;	state Exp;
branches;
next	1.23;
commitid	Z8bqeZhZSq0q4G1A;

1.23
date	2017.06.15.07.15.57;	author fhajny;	state Exp;
branches;
next	1.22;
commitid	SJArWtDYJVTyirVz;

1.22
date	2017.05.03.08.38.44;	author jperkin;	state Exp;
branches;
next	1.21;
commitid	oXB1pxkPDlAs8VPz;

1.21
date	2017.03.31.19.41.13;	author fhajny;	state Exp;
branches;
next	1.20;
commitid	Z9MNlTCR4taERJLz;

1.20
date	2017.03.24.18.45.44;	author fhajny;	state Exp;
branches;
next	1.19;
commitid	DTGFuwhCdHfFMPKz;

1.19
date	2017.03.09.13.43.49;	author fhajny;	state Exp;
branches;
next	1.18;
commitid	7PiUjpQ9jirPASIz;

1.18
date	2015.06.10.14.40.07;	author fhajny;	state Exp;
branches;
next	1.17;
commitid	2A04GOQdAvQIpToy;

1.17
date	2015.06.10.14.22.29;	author fhajny;	state Exp;
branches;
next	1.16;
commitid	lZPE4a8fCMDDjToy;

1.16
date	2014.12.11.20.18.17;	author roy;	state Exp;
branches;
next	1.15;
commitid	97S3b9dliqM46F1y;

1.15
date	2014.10.19.22.27.47;	author alnsn;	state Exp;
branches;
next	1.14;
commitid	hi8osPxlRMvhwRUx;

1.14
date	2014.05.03.13.01.24;	author alnsn;	state Exp;
branches
	1.14.4.1;
next	1.13;
commitid	ApiuEe4xsyLVO5zx;

1.13
date	2013.10.30.06.49.54;	author dholland;	state Exp;
branches;
next	1.12;
commitid	2O1UOhJntlV5Ihbx;

1.12
date	2013.07.04.21.27.58;	author adam;	state Exp;
branches;
next	1.11;
commitid	qmESEwmyn28ymcWw;

1.11
date	2013.06.14.22.13.03;	author dholland;	state Exp;
branches;
next	1.10;
commitid	zFLi3v3T1akXfDTw;

1.10
date	2013.06.10.18.59.09;	author joerg;	state Exp;
branches;
next	1.9;
commitid	8BGfT8tao5Xdj6Tw;

1.9
date	2013.02.19.22.35.15;	author joerg;	state Exp;
branches;
next	1.8;

1.8
date	2012.10.23.17.19.00;	author asau;	state Exp;
branches;
next	1.7;

1.7
date	2012.02.28.10.49.27;	author roy;	state Exp;
branches;
next	1.6;

1.6
date	2010.01.29.13.26.45;	author roy;	state Exp;
branches;
next	1.5;

1.5
date	2009.12.23.13.00.41;	author ghen;	state Exp;
branches
	1.5.2.1;
next	1.4;

1.4
date	2009.06.30.00.07.21;	author joerg;	state Exp;
branches;
next	1.3;

1.3
date	2009.05.19.08.59.28;	author wiz;	state Exp;
branches;
next	1.2;

1.2
date	2009.04.21.22.52.37;	author roy;	state Exp;
branches;
next	1.1;

1.1
date	2009.04.21.14.16.47;	author roy;	state Exp;
branches
	1.1.1.1;
next	;

1.35.2.1
date	2020.06.25.18.21.29;	author bsiegert;	state Exp;
branches;
next	;
commitid	YvBUx5up0SEMqDdC;

1.14.4.1
date	2014.12.16.23.23.22;	author tron;	state Exp;
branches;
next	;
commitid	LzPhZrrhdpN1Yj2y;

1.5.2.1
date	2010.01.30.12.52.53;	author tron;	state Exp;
branches;
next	;

1.1.1.1
date	2009.04.21.14.16.47;	author roy;	state Exp;
branches;
next	;


desc
@@


1.60
log
@revbump for boost-libs
@
text
@# $NetBSD: Makefile,v 1.59 2026/05/14 16:41:49 ryoon Exp $

DISTNAME=	pdns-recursor-5.4.1
PKGNAME=	${DISTNAME:S/pdns/powerdns/}
PKGREVISION=	2
CATEGORIES=	net
MASTER_SITES=	https://downloads.powerdns.com/releases/
EXTRACT_SUFX=	.tar.xz

MAINTAINER=	drixter@@e-utp.net
HOMEPAGE=	https://www.powerdns.com/
COMMENT=	PowerDNS resolver/recursing nameserver
LICENSE=	gnu-gpl-v2

GNU_CONFIGURE=		yes
USE_TOOLS+=		gmake pkg-config
USE_LIBTOOL=		yes
USE_LANGUAGES=		c c++
USE_CXX_FEATURES+=	c++17
CONFIGURE_ARGS+=	--sysconfdir=${PKG_SYSCONFDIR}
CONFIGURE_ARGS+=	--with-libsodium
CONFIGURE_ARGS+=	--enable-dns-over-tls
CONFIGURE_ARGS+=	--with-boost=${BUILDLINK_PREFIX.boost-headers}

CHECK_WRKREF_SKIP+=	sbin/pdns_recursor

EGDIR=			${PREFIX}/share/examples/powerdns-recursor
CONF_FILES=		${EGDIR}/recursor.yml-dist ${PKG_SYSCONFDIR}/recursor.yml
INSTALLATION_DIRS+=	${EGDIR}
INSTALL_MAKE_FLAGS=	${MAKE_FLAGS} sysconfdir=${EGDIR}

RCD_SCRIPTS=		pdns_recursor

SMF_NAME=		pdns-recursor
SMF_METHODS=		pdns_recursor

do-build:
	cd ${WRKSRC} && ${BUILD_MAKE_CMD} ${BUILD_TARGET}

.include "cargo-depends.mk"
.include "../../devel/boost-headers/buildlink3.mk"
.include "../../devel/boost-libs/buildlink3.mk"
.include "../../devel/zlib/buildlink3.mk"
.include "../../lang/rust/cargo.mk"
.include "../../lang/lua/buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../security/libsodium/buildlink3.mk"
.include "../../devel/protobuf/buildlink3.mk"
.include "../../www/curl/buildlink3.mk"
.include "../../security/gnutls/buildlink3.mk"
.include "../../net/fstrm/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.59
log
@*: Recursive revbump from security/nettle-4.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.58 2026/04/24 17:10:41 wiz Exp $
d5 1
a5 1
PKGREVISION=	1
@


1.58
log
@net/powerdns-recursor: Update to version 5.4.1

From drixter via wip.

5.4.1
Released: 22th of April 2026
Bug Fixes
Fix PowerDNS Security Advisory 2026-03 for PowerDNS Recursor: Multiple Issues

References: pull request TBD
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.57 2026/03/17 13:42:39 wiz Exp $
d5 1
@


1.57
log
@net/powerdns-recursor: Update to version 5.4.0

From Marcin Gondek via wip.

Changelogs for 5.4.X
Before upgrading, it is advised to read the Upgrade Guide.

5.4.0
Released: 9th of March 2026 with no changes since 5.4.0-rc1 except the version.

5.4.0-rc1
Released: 17th of February 2026
Improvements
Harmonize with dnsdist PR #16741 with respect to OpenTelemetry instance name.
References: pull request 16756
Coverity 1644498 Variable copied when it could be moved.
References: pull request 16784
Opentelemetry: add flags field in TRACEPARENT EDNS option.
References: pull request 16786
No longer allow passing the api-key as a query argument.
References: #16785, pull request 16790
Base64 tidy and unit test fix.
References: #16805, pull request 16817
Drop usage of libboost-system library (Chris Hofstaedtler).
References: pull request 16826
Allowed names should not include names from CNAMEs that cannot be reached (SA 2026-01).
References: pull request 16836
Limit amount of work done for a single client query in new ways (SA 2026-01).
References: pull request 16837
Limit packet and record cache entry size (SA 2026-01).
References: pull request 16838
Bug Fixes
Correctly compute DNSSEC public key exponent lengths when larger than 255.
References: pull request 16810

5.4.0-beta1
Released: 27th of January 2026
Improvements
Print irrelevant entries in cookie dump more nicely.
References: pull request 16651
Make code boost 1.66 compatible again.
References: pull request 16655
Harden SVCB record parsing.
References: pull request 16710
dnsrecords: Add RESINFO DNS Record (RFC 9606).
References: #14983, pull request 16711
Add REST interface for manipulating Open Telemetry Trace Conditions.
References: pull request 16727
Bug Fixes
Add acquire/release in broadcast pipes to fix TSAN issues seen on trixie.
References: pull request 16662, pull request 16736
Handle applicable dynamic parts of YAML-only config when reloading Lua config.
References: #16673, pull request 16709
EDNS cookies: fix timestamp handling.
References: pull request 16730

5.4.0-alpha1
Released: 16th of December 2025
Improvements
Format rust IOErrors in a nicer way instead of using the default formatter.
References: pull request 16627
Move away from rustls-pemfile including update of Rust dependencies.
References: #16606, pull request 16624
Coverity 20251203.
References: pull request 16587
Kill a handful of clang++ warnings, mostly comparing unsigned to a signed constant.
References: pull request 16588
Switch trivial usage of boost::optional to std::optional.
References: pull request 16487
Always do ANY queries using TCP.
References: pull request 16553
Rewrite all unwrap calls in web.rs.
References: pull request 16570
Run clippy when CARGO_USE_DEV and CARGO_USE_CLIPPY are set.
References: #16557, pull request 16565
Build our Rust lib in dev profile when CARGO_USE_DEV is set.
References: #16544, pull request 16546
Remove first set of unused imports (Josh Soref).
References: pull request 16447
Tidy tcounter related code.
References: pull request 16496
Spelling (Josh Soref).
References: pull request 16531
Fix mixed implicit and explicit returns (Josh Soref).
References: pull request 16530
Remove unused assignment (Josh Soref).
References: pull request 16516, pull request 16526
Remove redundant assignment (Josh Soref).
References: pull request 16515
Update to coverallsapp github-action v2.3.7 (Josh Soref).
References: #16483, pull request 16523
Remove horrible unused argument with default value (Josh Soref).
References: pull request 16495
Use immediate class parent for super (Josh Soref).
References: pull request 16502
Fix with open(…) as f: (Josh Soref).
References: #16500, pull request 16509
Improve reading of operator expression (Josh Soref).
References: pull request 16484
Use with open(…) as f: to ensure file is always closed (Josh Soref).
References: pull request 16500
Stop mixing implicit and explicit returns (Josh Soref).
References: pull request 16501
Codeql unused loop iterator name (Josh Soref).
References: pull request 16494
Fix coverity 1635199, 1643012, 1643013.
References: pull request 16497
Codeql use identifiers (Josh Soref).
References: pull request 16498
Do not mutate default values (Josh Soref).
References: pull request 16490
Only import doqclient once (Josh Soref).
References: pull request 16491
Drop unused format argument (Josh Soref).
References: pull request 16493
Use assertNotEqual (Josh Soref).
References: pull request 16492
Do not catch KeyboardInterrupt or SystemExit (Josh Soref).
References: pull request 16489
Do not call sys.exit with a void return (Josh Soref).
References: pull request 16488
Convert metrics_table.py to a module (Josh Soref).
References: pull request 16479
Switch TestRuleMetricsDefault to pass (Josh Soref).
References: pull request 16480
Codeql imprecise assert (Josh Soref).
References: pull request 16481
Drop useless lambda (Josh Soref).
References: pull request 16483
Fix duplicate key in dict literal (Josh Soref).
References: pull request 16478
Contrib/ProtobufLogger.py: Fix syntax error that crept in with 16458.
References: pull request 16476
Prep, but do not actually move to C++20.
References: #14734, pull request 16077
Implement new feature to only generate OpenTelemetry Traces on certain conditions.
References: pull request 16362
rec_control get-parameter: print runtime settings in YAML format if YAML config is active.
References: pull request 16427
Chore: Clean up unused variables (Josh Soref).
References: pull request 16454
Clean up unreachable code (Josh Soref).
References: pull request 16457
Fix try/except/as notation (Josh Soref).
References: #15336, pull request 16459
Avoid warning about mixed explicit/implicit returns (Josh Soref).
References: #16458, pull request 16460
Cleanup endianness determining code.
References: #16091, pull request 16440
Use map for getAppliedPolicyTypeAsString (Josh Soref).
References: pull request 16458
Remove options that were deprecated a long time ago.
References: pull request 16438
Remember if an answer was received over TCP in record cache.
References: pull request 16384
rec-lua-conf.* tidy.
References: pull request 16426
Don’t use a vector of string for internal public suffix list.
References: pull request 16394
Make version number in rust lib confirm to Rust specifics.
References: pull request 16392
Explicit disabling/enabling of tls-gnutls for full and least configs and packages.
References: pull request 16307
Allow selecting a specific version of Lua with meson.
References: pull request 16259
Fix a few Coverity found issues, all low severity move optimizations.
References: pull request 16308
OT tracing: define more Spans with actual duration and add more attributes.
References: pull request 16190
Allow ability to validate certificates (and more) for outgoing DoT connections.
References: pull request 16232
Move test-protozero-trace.cc to toplevel and add it in the autotools build where it was missing.
References: pull request 16220
ProtobufLogger: print OpenTelemetry IDs in hex, add proper command arg parser.
References: pull request 16219
Silence rust warning.
References: pull request 16251
Docs: Indent list (Josh Soref).
References: pull request 16236
Docs: Add trailing period (Josh Soref).
References: pull request 16237
Do not include dnsseckeeper.hh and ueberbackend.hh in rec.
References: pull request 16227
We need a usable cargo for sdist so do not download (and install) rust but use package.
References: pull request 16204
Fix a few issues reported by coverity, all minor.
References: pull request 16200
Rework command dispatcher to be table based.
References: pull request 16194
Fix release builds by updating the locked Rust lib version.
References: #16180, pull request 16188
Move help text to a table so it’s easier to maintain.
References: pull request 16175
Update the Rust library version when generating a tarball.
References: pull request 16167
Add a few fields in protobuf logs: ede, edeText and OpenTelemetryTraceID.
References: pull request 16138
Better error message when reload-yaml fails.
References: pull request 16104
Implement DNS cookie support for outgoing requests.
References: pull request 15412, pull request 16131
Update cargos for rec and dnsdist.
References: #16101, pull request 16106
Warn on passwordless webserver startup and extends docs.
References: pull request 16103
Do not hash (or compare) OpenTelemetry Trace EDNS value for packetcache.
References: pull request 16098
Some error paths do no create thread 0 so don’t join it.
References: pull request 16094
pubsuffix: tidy and use C++ strings.
References: pull request 15945
Add tc flag in answer log (zhaojs).
References: pull request 15943
Remove SLOG macro usage in rec specific code.
References: pull request 15997
Assorted tidy.
References: pull request 15949
Reorder fields of record cache entry by size (saves 8 bytes per entry on 64-bit systems).
References: pull request 15950
Bug Fixes
Do proper validation of TCP notifies.
References: pull request 16615
Ensure authRecords is empty, as handleHit checks that.
References: pull request 16614
Move g_logRPZChanges to proper spot.
References: #16572, pull request 16580
fix parsing of webserver loglevel “none”.
References: #16455, pull request 16461
Tighten delegation accept.
References: pull request 16338
Prevent a potential race condition in cache cleaning.
References: pull request 16288
Fix Boost system lib req: it is no longer a lib for boost >= 1.89.
References: #15972, pull request 15991
Rec and dnsdist: properly set up env vars for rust build.
References: #15896, pull request 15915
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.56 2026/02/13 10:47:04 wiz Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-5.4.0
@


1.56
log
@powerdns-recursor: update to 5.3.5.

Provided by Marcin Gondek in wip.

5.3.5
Released: 9th of February 2026
Bug Fixes
Fix PowerDNS Security Advisory 2026-01: Crafted zones can lead to increased resource usage in Recursor.
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	pdns-recursor-5.3.5
@


1.55
log
@*: recursive bump for nettle 4.0 shlib major bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.54 2026/01/19 08:13:58 wiz Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-5.3.4
a4 1
PKGREVISION=	1
@


1.54
log
@powerdns-recursor: update to 5.3.4.

Provided by Marcin Gondek in wip.

5.3.4
Released: 14th of January 2026
Improvements
Update cxx and related cargos and avoid uuid crate.
References: #16106, pull request 16699
Add package urls to our SBOMs.
References: #16217, pull request 16414
We need a usable cargo for sdist so download (and install) rust later.
References: pull request 16387
Update the Rust library version when generating a tarball and fix release builds by updating the locked Rust lib version.
References: #16155, #16167, #16180, #16188, #16380, #16392, pull request 16380, pull request 16381, pull request 16382, pull request 16397
Do not hash (or compare) OpenTelemetry Trace EDNS value for packetcache.
References: #16098, pull request 16378

Bug Fixes
Fix parsing of webserver loglevel "none".
References: #16461, pull request 16698
Silence rust warning.
References: #16251, pull request 16697
Some error paths do no create thread 0 so don't join it.
References: pull request 16377
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.53 2026/01/14 12:57:36 wiz Exp $
d5 1
@


1.53
log
@*: recursive bump for abseil-20260107.0 shlib version bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.52 2026/01/07 08:48:25 wiz Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-5.3.3
a4 1
PKGREVISION=	2
@


1.52
log
@*: recursive bump for icu 78.1
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.51 2025/12/10 08:25:17 wiz Exp $
d5 1
a5 1
PKGREVISION=	1
@


1.51
log
@net/powerdns-recursor: Update to version 5.3.3

Provided by Marcin Gondek in wip.

5.3.3
Released: 8th of December 2025
Bug Fixes
Fix PowerDNS Security Advisory 2025-08: Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor.
References: pull request 16618

5.3.2
Released: Never released publicly
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.50 2025/10/30 08:29:57 wiz Exp $
d5 1
@


1.50
log
@powerdns-recursor: update to 5.3.1.

Provided by Marcin Gondek in wip.

5.3.1
Released: 22nd of October 2025
Bug Fixes
Fix PowerDNS Security Advisory 2025-06: Crafted delegations or IP fragments can poison cached delegations in Recursor.
References: pull request 16339

5.3.0
Released: 28th of August 2025
Improvements
Path.unlink(True) requires python 3.8, rewrite so it works on older versions.
References: #16011, pull request 16027
Include proper file in bridge.hh to avoid a case of creating a smart pointer to an incomplete class.
References: #16021, pull request 16026
Bug Fixes
Check for pubsuffix.cc presence when building with autotools, followup to #15782.
References: #16010, pull request 16028

5.3.0-rc1
Released: 21st of August 2025
Improvements
Move back to a single debian control file.
References: #15934, pull request 15986
Put lib.rs into dist tarball.
References: #15938, pull request 15983
Recursor/auth: remove obsolete pre install files.
References: #15802, pull request 15982
Bug Fixes
Fix Boost system lib dependency: it is no longer available since 1.89.
References: #15972, #15991, pull request 15993
Add back parent span attributes, they were lost in #15756.
References: #15974, #15981, pull request 15985
If an RPZ hit has a custom CNAME record, we should try harder to follow it.
References: #15893, pull request 15984

5.3.0-beta1
Released: 24th of July 2025
New Features
Add Lua hooks to dump and restore measured nameserver speed table.
References: pull request 15803
Improvements
Add version and an alignment byte to the EDNS record for OpenTelemetry data.
References: pull request 15887, pull request 15888
Bug Fixes
Chain and harden ECS enabled queries. (PowerDNS Security Advisory 2025-04: A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts).
References: pull request 15848

5.3.0-alpha2
Released: 9th of July 2025
Improvements
Allow forcing TCP from preoutquery() (elenril).
References: pull request 15759
Add el-10 target, based on rockylinux:10 for now.
References: pull request 15639
Clang-tidy: replace lock_guard with scoped_lock (Rosen Penev)
References: pull request 15788
Only download pub suffix list if pubsuffix.cc is not available.
References: pull request 15782
Fix Coverity issues and add release() to FDWrapper.
References: pull request 15756, pull request 15766
Start to listen on ::1 by default, but don’t consider it an error if that fails.
References: pull request 15758
Bug Fixes
Don't let rust code and handler use thread pipes simultaneously.
References: pull request 15752
Fix sysconfdir in debian packages built by meson.
References: #15723, pull request 15746

5.3.0-alpha1
Released: 25th of June 2025
Improvements
Add facility to generate trace data in OpenTelemetry format.
References: pull request 15668
Implement stop command as alias for quit(-nicely).
References: #15674, pull request 15686
Avoid implicit truncating cast of inception skew.
References: pull request 15715
Two Coverity issues, the truncation is meant to be.
References: pull request 15700
Introduce aliases for camelCase field names in config file.
References: #15059, pull request 15692
Fix negativetrustanchor.server CH TXT query processing (disabled by default).
References: #15660, pull request 15661
Build el-9 package with luajit on arm64.
References: pull request 15626
Rec: build packages using meson.
References: pull request 15592 15628 15636
Start building packages for trixie.
References: pull request 15596
Use Rust 1.87.0 when building our packages.
References: pull request 15584
Upgrade to protozero 1.8.0.
References: pull request 15525
Add a Lua function to get the config dir and name.
References: pull request 15435
Fix a difference between record-cache hit and miss in some ServFail results.
References: pull request 15396
Rec: [meson] make nod a feature instead of a boolean
References: pull request 15373
When CARGO_TARGET_DIR is set the generated C++ files end up in a different location.
References: pull request 15369
Fix generation of recursor config if PDNS_RECURSOR_API_KEY is set.
References: #15367, pull request 15368
Meson systemd cleanup.
References: pull request 15309
Add libcap feature and sync build-and-test-all options with autotools variants.
References: pull request 15293
Export ffi symbols so they become available to Lua.
References: pull request 15292 15307
Fix libsnmp define.
References: pull request 15272
More consistency in logging statements generated in web server code.
References: pull request 15273
Make sure t_tcpClientCounts is always initialized.
References: pull request 15261
Fix a few gcc warnings on trixie.
References: pull request 15260
Tidy of structured logging related files.
References: pull request 15217
Use meson to generate docs (html + pdf)
References: pull request 15169
Reload proxy settings on rec_control reload-acls.
References: #14096, pull request 15167
Store thread id in info object, makes a few methods less error prone.
References: pull request 15216
Switch back to serde_yaml.
References: #15202, pull request 15203
Add two missing includes.
References: #15179, pull request 15192
Minor Coverity issues.
References: pull request 15168 15157
Add meson install target and fix meson dist issues after new way of generating man pages was merged.
References: pull request 15161
Fix cxx include dir.
References: pull request 15154
Move to embedded web service written in Rust supporting multiple listen addresses and TLS.
References: pull request 15114
Make quit-nicely wait on actual quit and start using it for stopping by systemd.
References: pull request 14976
Check bounds of rcode stats counter index (safe right now).
References: pull request 15139
Clang-tidy: use std::min/max (Rosen Penev).
References: pull request 14954
Tidy credentials.??.
References: pull request 15066
Rec: New Coverity Variable copied when it could be moved cases
References: pull request 15050 15057
EDNSSubnetOpts refactoring
References: #13704, pull request 15040
Compute size estimate for record cache allocated size.
References: pull request 15038
Dedup records.
References: #14120, pull request 14617
Store authority recs and signatures as shared pointers to const data.
References: pull request 14985 15017
If the full CNAME chain leading to the answer is cached, indicate that.
References: #14918, pull request 14973
Bug Fixes
When using ZoneToCache, do not store non-auth data if the name is subject to recursive forwarding.
References: #15651, pull request 15652
Force some files to be regenerated when table.py changes.
References: pull request 15546
Strip quotes meson adds from SYSCONFDIR (and two other config values).
References: pull request 15437
Delete temp file on failure to dump RPZ file.
References: pull request 15033
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	pdns-recursor-5.3.1
@


1.49
log
@*: recursive bump for boost 1.89
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.48 2025/06/30 11:06:46 jperkin Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.9.9
a4 1
PKGREVISION=	1
d6 2
a7 2
MASTER_SITES=	http://downloads.powerdns.com/releases/
EXTRACT_SUFX=	.tar.bz2
d9 1
a9 1
MAINTAINER=	pkgsrc-users@@NetBSD.org
d14 3
d19 11
a29 6
USE_TOOLS+=		gmake pkg-config
GNU_CONFIGURE=		yes
CONFIGURE_ARGS+=	--without-net-snmp

# currently not portable
CONFIGURE_ENV.NetBSD+=	ac_cv_search_pthread_setaffinity_np=no
d36 2
a37 11
EGDIR=			${PREFIX}/share/examples/pdns-recursor

INSTALL_MAKE_FLAGS+=	sysconfdir=${EGDIR}

CONF_FILES+=		${EGDIR}/recursor.conf-dist \
			${PKG_SYSCONFDIR}/recursor.conf

.include "../../mk/compiler.mk"
.if !empty(PKGSRC_COMPILER:Mclang)
CXXFLAGS+=	-Wno-c++11-narrowing
.endif
d39 1
d41 3
d46 5
a50 2
.include "../../mk/atomic64.mk"
.include "../../mk/pthread.buildlink3.mk"
@


1.48
log
@powerdns-recursor: Update to 4.9.9.

Explicitly not going past 5.0 as that requires Rust, and should probably be
separated out into its own package.  Too many changes to list since 4.7.3,
please see the following URLs:

  https://doc.powerdns.com/recursor/changelog/4.7.html
  https://doc.powerdns.com/recursor/changelog/4.8.html
  https://doc.powerdns.com/recursor/changelog/4.9.html
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.47 2023/10/24 22:10:30 wiz Exp $
d5 1
@


1.47
log
@*: bump for openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.46 2023/07/18 18:36:30 nia Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.7.3
a4 1
PKGREVISION=	1
@


1.46
log
@net: Adapt packages to USE_(CC|CXX)_FEATURES where possible
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.45 2023/07/13 13:49:16 nia Exp $
d5 1
@


1.45
log
@*: Remove all instances of GCC_REQD where my name is the most recent
in 'cvs annotate' (part 2)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.44 2023/07/12 20:23:50 nia Exp $
d14 2
a15 1
USE_LANGUAGES=		c c++11
d19 1
@


1.44
log
@powerdns-recursor: Require a compiler with support for C++17 features.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.43 2022/09/29 12:47:31 jperkin Exp $
a20 3
# "A compiler with support for C++17 language features is required."
GCC_REQD+=		7

@


1.43
log
@powerdns-recursor: Update to 4.7.3.

The changelogs are very long and unwieldly, even trying to use the raw versions
as they're written in RST, so please see the following URLs for the full list
of changes (which are very many) since 4.4.2:

  https://doc.powerdns.com/recursor/changelog/4.7.html
  https://doc.powerdns.com/recursor/changelog/4.6.html
  https://doc.powerdns.com/recursor/changelog/4.5.html
  https://doc.powerdns.com/recursor/changelog/4.4.html
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.42 2021/09/10 11:00:27 nia Exp $
d21 3
@


1.42
log
@powerdns-recursor: needs atomic64
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.41 2020/12/14 11:18:25 otis Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.4.2
@


1.41
log
@net/powerdns-recursor: Update to 4.4.2

Changelog:
Released: 14th of December 2020

* Improvements:
  - UUID: Use the non-cryptographic variant of the boost::uuid.
  - Keep a cached, valid entry over a fresher Bogus one.
  - Ensure socket-dir matches runtime directory on old systemd
  - Move to several distinct Bogus states, for easier debugging.
  - Do not chase CNAME during qname minimization step 4.

* Bug Fixes:
  - Untangle the validation/resolving qnames and qtypes.
  - APL records: fix endianness problem.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.40 2020/11/25 16:18:16 otis Exp $
d41 1
@


1.40
log
@net/powerdns-recursor: Update to 4.4.1

Changelog:
Released: 25th of November 2020

* Improvements:
  - Allow to specify a name in getMetric() that is used for Prometheus export
    only.

* Bug Fixes:
  - Do not add request to a wait chain that’s already processed or being
    processed.
  - Avoid a CNAME loop detection issue with DNS64
  - Do not send overly long NOD lookups.
  - If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  - Fix the processing of answers generated from gettag.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.39 2020/10/19 14:36:56 otis Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.4.1
@


1.39
log
@net/powerdns-recursor: Update to 4.4.0

Changelog for 4.4.0:
Released: 19th of October 2020
Bug Fixes
  - Backport of CVE-2020-25829: Cache pollution.

Changelog for 4.4.0-rc2:
Released: 6th of October 2020
Improvements:
  - Don’t parse any config with –version.
  - Expose typed cache flush via Web API.
  - Log when going Bogus because of a missing SOA in authority.
  - Raise an exception on invalid content in unknown record.
Bug Fixes:
  - When deciding if we are auth in the local auth or forwarding case, DS is
	special.
  - Fix wipe-cache-typed.
  - Watch the descriptor again after an out-of-order read timeout.

Changelog for 4.4.0-rc1:
Released: 21st of September 2020
Bug Fixes:
  - Only do QName Minimization for the names inside a forwarded domain.
  - Fix the parsing of dont-throttle-netmasks in the presence of
	dont-throttle-names.

Changelog for 4.4.0-beta1:
Released: 31st of August 2020
Improvements:
  - Store RPZ trigger and hit in appliedPolicy and protobuf message and log
	them in the trace log.
  - Apply filtering policies (RPZ) on CNAME chains as well.
  - Fix warning: initialized lambda captures are a C++14 extension.
  - Clean some coverity reported cases of exceptions thrown but not caught.
  - Export record cache lock (contention) stats via the various channels.
  - Allow multiple local data records when doing RPZ IP matching.
  - Replace the use of ‘1’ by QClass::IN to improve readability.
  - Avoid name clashes on Solaris derived systems.
Bug Fixes:
  - Allow some more depth headroom for the no-qname-minimization fallback case.
  - If we have an NS in cache, use it in the forwarder case.
  - Disable outgoing v4 when query-local-address has no v4 addresses.
  - Resize hostname to final size in getCarbonHostname() (Aki Tuomi).

Changelog for 4.4.0-alpha2:
Released: 20th of July 2020
Improvements:
  - Check that DNSKEYs have the zone flag set.
  - Remove redundant toLogString() calls (Chris Hofstaedtler).
  - Stop cluttering the global namespace with validation states.
  - Use explicit flag for the specific version of c++ we’re targeting.
  - Use new operator to print states.
  - Refuse QType 0 right away, based on rfc6895 section 3.1.
  - Specify a storage type for validation states.
  - Common TCP write problems should only be logged if wanted.
  - Dump the authority records of a negative cache entry as well.
  - Alternative way to do “skip cname check” for DS and DNSKEY records
  - Control stack depth when priming.
  - Add version ‘statistic’ to prometheus.
  - Cleanup cache cleaner pruneCollection function.
  - RPZ policy should override gettag_ffi answer by default.
  - Don’t copy the records when scanning for CNAME loops.
  - Do not use using namespace std; .
  - More sophisticated CNAME loop detection.
  - Use std::string_view when available (Rosen Penev).
  - Make sure we can install unsigned packages.
  - Clarify docs (Josh Soref).
  - Ensure runtime dirs for virtual services differ.
  - Builder: improve shipped config files (Chris Hofstaedtler).
  - Less negatives in error messages improves readability.
  - Boost 1.73 moved boost::bind placeholders to the placeholders namespace.
  - Fix useless copies in loop reported by clang++ 10.
  - NetmaskTree: do not test node for null, the loop guarantees node is not
	null.
  - Wrap pthread objects
  - Get rid of a naked pointer in the /dev/poll event multiplexer.
  - Random engine.
Bug Fixes:
  - Update proxy-protocol.cc (ihsinme).
  - Kill an signed vs unsigned warning on OpenBSD.
  - Don’t validate a NXD with a NSEC proving that the name is an ENT.
  - Fix three shared cache issues.
  - Limit the TTL of RRSIG records as well.
  - Avoid throwing an exception in Logger::log().

Changelog for 4.4.0-alpha1:
Released: 22th of April 2020
New Features:
  - Implement native DNS64 support, without Lua.
  - Add custom tags to RPZ hits.
  - Allow attaching a ‘routing’ tag string to a query in lua code and use that
	tag in the record cache when appropriate.
  - Share record cache between threads.
  - Add support for Proxy Protocol between dnsdist and the recursor.
Improvements:
  - Fix warnings with llvm10 and -Wrange-loop-construct (Kirill Ponomarev).
  - Fix compilation without deprecated OpenSSL APIs (Rosen Penev).
  - Detect {Libre,Open}SSL functions availability during configure.
  - Better handling of reconnections in Remote Logger.
  - Add ‘queue full’ metrics for our remote logger, log at debug only.
  - Update boost.m4
  - Keep a masked network in the Netmask class.
  - Replace include guard ifdef/define with pragma once (Chris Hofstaedtler).
  - YaHTTP: Support bracketed IPv6 addresses
  - Rework NetmaskTree for better CPU and memory efficiency (Stephan Bosch).
  - RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.
  - Add ‘IO wait’ and ‘steal’ metrics on Linux.
  - DNSName: Don’t call strlen() when the length is already known.
  - Fix build with gcc-10 (Sander Hoentjen).
Bug Fixes
  - Fix compilation of the ports event multiplexer.
  - Init zone’s d_priority field.
  - QName Minimization sometimes uses 1 label too many.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.38 2020/09/30 11:53:07 otis Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.4.0
@


1.38
log
@net/powerdns-recursor: Update to 4.3.4

Changelog for 4.3.4:
Released: 8th of September 2020
* Improvements:
  - Ensure runtime dirs for virtual services differ.

* Bug Fixes:
  - Allow some more depth headroom for the no-qname-minimization fallback case
  - Resize hostname to final size in getCarbonHostname().

Changelog for 4.3.3:
Released: 17th of July 2020
* Bug Fixes:
  - Validate cached DNSKEYs against the DSs, not the RRSIGs only.
  - Ignore cache-only for DNSKEYs and DS retrieval.
  - A ServFail while retrieving DS/DNSKEY records is just that.
  - Refuse DS records received from child zones.
  - Better exception handling in houseKeeping/handlePolicyHit.
  - Take initial refresh time from loaded zone.

pkgsrc-specific changes:
  - Move pdns socket directory to /var/run/pdns-recursor
    to reduce diff
  - Introduce SMF method script that also creates the
    socket directory on platforms where /var/run is not
    persistent (i.e. swap or tmpfs-mounted)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.37 2020/07/01 14:53:13 otis Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.3.4
@


1.37
log
@net/powerdns-recursor: Update to 4.3.2

Changes since 4.3.1:

* Released:
  - 1st of July 2020

* Improvements:
  - Defer the NOD lookup until after the response has been sent.
  - CNAME loop detection.

* Bug fixes:
  - Backport of CVE-2020-14196: Enforce webserver ACL.
  - Copy the negative cache entry before validating it.
  - Fix compilation of the ports event multiplexer.
  - Fix the handling of DS queries for the root.
  - Fix RPZ removals when an update has several deltas.
  - Fix compilation on systems that do not define HOST_NAME_MAX.
  - Fix build with gcc-10.Â

* misc.:
  - Correct depth increments.
  - Limit the TTL of RRSIG records as well
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.36 2020/06/17 22:55:11 otis Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.3.2
d21 4
a24 1
RCD_SCRIPTS+=		pdns_recursor
@


1.36
log
@net/powerdns-recursor: Update to 4.3.1

Changelog since 4.3.0:

* Released:
  - 19th of May 2020

* Improvements:
  - Add ubuntu focal target.

* Bug Fixes:
  - Backport of security fixes for:
    - CVE-2020-10995
    - CVE-2020-12244
    - CVE-2020-10030
  - avoid a crash when loading an invalid RPZ.
  - RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.

* misc:
  - Update boost.m4.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.35 2020/03/17 19:07:29 adam Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.3.1
@


1.35
log
@powerdns-recursor: updated to 4.3.0

4.3.0
Improvements
Only log qname parsing errors when ‘log-common-errors’ is set.
Update copyright year.

4.2.1
Improvements
Add CentOS 8 as builder target
Update boost.m4
Add deviceName field to protobuf messages
Test improvements
Builder: add raspbian-buster target

Bug Fixes
Purge map of failed auths periodically by keeping a last changed timestamp.
Prime NS records of root-servers.net parent (.net)
Issue with “zz” abbreviation for IPv6 RPZ triggers
Basic validation of $GENERATE parameters
Fix inverse handler registration logic for SNMP.

4.2.0
Improvements
Clear CMSG_SPACE(sizeof(data)) in cmsghdr to appease valgrind

Bug Fixes
Make sure we always compile with BOOST_CB_ENABLE_DEBUG set to 0
Limit compression pointers to 14 bits

misc
Fix the export of only outgoing queries or incoming responses
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.34 2020/01/18 21:50:23 jperkin Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.3.0
@


1.35.2.1
log
@Pullup ticket #6248 - requested by otis
net/powerdns-recursor: security fix

Revisions pulled up:
- net/powerdns-recursor/Makefile                                1.36
- net/powerdns-recursor/distinfo                                1.32
- net/powerdns-recursor/patches/patch-iputils.hh                deleted
- net/powerdns-recursor/patches/patch-misc.cc                   1.1
- net/powerdns-recursor/patches/patch-misc.hh                   1.1
- net/powerdns-recursor/patches/patch-pdns__recursor.cc         1.6
- net/powerdns-recursor/patches/patch-rec-carbon.cc             1.1
- net/powerdns-recursor/patches/patch-rec__control.cc           1.1
- net/powerdns-recursor/patches/patch-webserver.cc              1.1
- net/powerdns-recursor/patches/patch-ws-recursor.cc            1.1

---
   Module Name:    pkgsrc
   Committed By:   otis
   Date:           Wed Jun 17 22:55:11 UTC 2020

   Modified Files:
           pkgsrc/net/powerdns-recursor: Makefile distinfo
   Added Files:
           pkgsrc/net/powerdns-recursor/patches: patch-misc.cc patch-misc.hh
               patch-pdns__recursor.cc patch-rec-carbon.cc patch-rec__control.cc
               patch-webserver.cc patch-ws-recursor.cc
   Removed Files:
           pkgsrc/net/powerdns-recursor/patches: patch-iputils.hh

   Log Message:
   net/powerdns-recursor: Update to 4.3.1

   Changelog since 4.3.0:

   * Released:
     - 19th of May 2020

   * Improvements:
     - Add ubuntu focal target.

   * Bug Fixes:
     - Backport of security fixes for:
       - CVE-2020-10995
       - CVE-2020-12244
       - CVE-2020-10030
     - avoid a crash when loading an invalid RPZ.
     - RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.

   * misc:
     - Update boost.m4.
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	pdns-recursor-4.3.1
@


1.34
log
@*: Recursive revision bump for openssl 1.1.1.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.33 2019/04/25 18:44:36 adam Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.1.12
a4 1
PKGREVISION=	1
a24 2
PTHREAD_AUTO_VARS=	yes

@


1.33
log
@powerdns-recursor: updated to 4.1.12

4.1.12
Improvements
Provide CPU usage statistics per thread (worker & distributor).
Use a bounded load-balancing algo to distribute queries.
Implement a configurable ECS cache limit so responses with an ECS scope more specific than a certain threshold and a TTL smaller than a specific threshold are not inserted into the records cache at all.

Bug Fixes
Correctly interpret an empty AXFR response to an IXFR query.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.32 2019/02/20 12:19:44 adam Exp $
d5 1
@


1.32
log
@powerdns-recursor: updated to 4.1.11

4.1.11
Since Spectre/Meltdown, system calls have become more expensive. This made exporting a very high number of protobuf messages costly, which is addressed in this release by reducing the number of sycalls per message.

Improvements
Add an option to export only responses over protobuf to the Lua protobufServer() directive.
Reduce systemcall usage in protobuf logging.


4.1.10
This release fixes a bug when trying to build PowerDNS Recursor with protobuf support disabled, thus this release is only relevant to people building PowerDNS Recursor from source and not if you’re installing it as a package from our repositories.

Bug Fixes
PowerDNS Recursor release 4.1.9 introduced a call to the Lua ipfilter() hook that required access to the DNS header, but the corresponding variable was only declared when protobuf support had been enabled.


4.1.9
This release fixes Security Advisory 2019-01 and Security Advisory 2019-02 that were recently discovered, affecting PowerDNS Recursor:
CVE-2019-3806, 2019-01: from 4.1.4 up to and including 4.1.8 ;
CVE-2019-3807, 2019-02: from 4.1.0 up to and including 4.1.8.

The issues are:
CVE-2019-3806, 2019-01: Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua ;
CVE-2019-3807, 2019-02: records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.

Improvements
Try another worker before failing if the first pipe was full
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.31 2018/11/30 12:57:41 adam Exp $
d3 1
a3 1
DISTNAME=	pdns-recursor-4.1.11
@


1.31
log
@powerdns-recursor: updated to 4.1.8

Recursor 4.1.8
Crafted query can cause a denial of service (CVE-2018-16855)


Recursor 4.1.7
Revert ‘Keep the EDNS status of a server on FormErr with EDNS’
Refuse queries for all meta-types


Recursor 4.1.6
Revert “rec: Authority records in AA=1 CNAME answer are authoritative”.


Recursor 4.1.5

PowerDNS Security Advisory 2018-04 (CVE-2018-10851)
PowerDNS Security Advisory 2018-06 (CVE-2018-14626)
PowerDNS Security Advisory 2018-07 (CVE-2018-14644)

Improvements
Add pdnslog to lua configuration scripts (Chris Hofstaedtler)
Fix compilation with libressl 2.7.0+
Export outgoing ECS value and server ID in protobuf (if any)
Switch to devtoolset 7 for el6
Allow the signature inception to be off by a number of seconds (Kees Monshouwer)

Bug Fixes
Crafted answer can cause a denial of service (CVE-2018-10851)
Packet cache pollution via crafted query (CVE-2018-14626)
Crafted query for meta-types can cause a denial of service (CVE-2018-14644)
Delay the creation of rpz threads until we have dropped privileges
Cleanup the netmask trees used for the ecs index on removals
Make sure that the ecs scope from the auth is < to the source
Authority records in aa=1 cname answer are authoritative
Avoid a memory leak in catch-all exception handler
Don’t require authoritative answers for forward-recurse zones
Release memory in case of error in the openssl ecdsa constructor
Convert a few uses to toLogString to print DNSName’s that may be empty in a safer manner
Avoid a crash on DEC Alpha systems
Clear all caches on (N)TA changes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.30 2018/09/04 10:22:38 fhajny Exp $
d3 2
a4 1
DISTNAME=	pdns-recursor-4.1.8
d18 2
@


1.30
log
@net/powerdns-recursor: Update to 4.1.4.

Improvements

- Split pdns_enable_unit_tests.
- Add a new max-udp-queries-per-round setting.
- Fix warnings reported by gcc 8.1.0.
- Tests: replace awk command by perl.
- Allow the snmp thread to retrieve statistics.

Bug Fixes

- Don’t account chained queries more than once.
- Make rec_control respect include-dir.
- Load lua scripts only in worker threads.
- Purge all auth/forward zone data including subtree.
@
text
@d1 1
a1 2
# $NetBSD: Makefile,v 1.29 2018/05/23 10:34:58 fhajny Exp $
#
d3 9
a11 9
DISTNAME=		pdns-recursor-4.1.4
CATEGORIES=		net
MASTER_SITES=		http://downloads.powerdns.com/releases/
EXTRACT_SUFX=		.tar.bz2

MAINTAINER=		pkgsrc-users@@NetBSD.org
HOMEPAGE=		https://www.powerdns.com/
COMMENT=		PowerDNS resolver/recursing nameserver
LICENSE=		gnu-gpl-v2
a12 1
GNU_CONFIGURE=		yes
d15 2
@


1.29
log
@net/powerdns-recursor: Update to 4.1.3.

Improvements
- Add a subtree option to the API cache flush endpoint.
- Use a separate, non-blocking pipe to distribute queries.
- Move carbon/webserver/control/stats handling to a separate thread.
- Add _raw versions for QName / ComboAddresses to the FFI API.
- Update copyright years to 2018
- Fix a warning on botan >= 2.5.0.

Bug Fixes
- Count a lookup into an internal auth zone as a cache miss.
- Don’t increase the DNSSEC validations counters when running with
  process-no-validate.
- Respect the AXFR timeout while connecting to the RPZ server.
- Increase MTasker stacksize to avoid crash in exception unwinding
- Use the SyncRes time in our unit tests when checking cache validity
- Add -rdynamic to C{,XX}FLAGS when we build with LuaJIT.
- Delay the loading of RPZ zones until the parsing is done, fixing a
  race condition.
- Reorder includes to avoid boost L conflict.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.28 2018/04/05 08:15:02 fhajny Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.1.3
@


1.28
log
@net/powerdns-recursor: Update to 4.1.2.

New Features
- Add FFI version of gettag().

Improvements
- Add the option to set the AXFR timeout for RPZs.
- IXFR: correct behavior of dealing with DNS Name with multiple
  records and speed up IXFR transaction.
- Add RPZ statistics endpoint to the API.

Bug Fixes
- Retry loading RPZ zones from server when they fail initially.
- Fix ECS-based cache entry refresh code.
- Fix ECS-specific NS AAAA not being returned from the cache.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.27 2018/01/22 19:21:46 fhajny Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.1.2
@


1.27
log
@Update net/powerdns-recursor to 4.1.1.

Improvements
- Don't process records for another class than IN

Bug Fixes
- Correctly handle ancestor delegation NSEC{,3} for children.
  (CVE-2018-1000003)
- Fix the computation of the closest encloser for positive answers.
- Pass the correct buffer size to arecvfrom().
- Fix to make primeHints threadsafe, otherwise there's a small chance
  on startup that the root-server IPs will be incorrect.
- Don't validate signature for "glue" CNAME, since anything else than
  the initial CNAME can't be considered authoritative.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.26 2018/01/02 12:23:55 fhajny Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.1.1
@


1.26
log
@Update net/powerdns-recursor to 4.1.0.
Lua support no longer optional.

PowerDNS Recursor 4.1.0
===========================================================

- Improved DNSSEC support
- Improved documentation
- Improved RPZ support
- Improved EDNS Client Subnet support
- Support for Botan 2.x (and removal of support for Botan 1.10)
- SNMP support
- Lua engine has gained access to more parts of the recursor
- CPU affinity can now be specified
- TCP Fast Open support
- New performance metrics

Full changelog:

  https://doc.powerdns.com/recursor/changelog/4.1.html


PowerDNS Recursor 4.0.7
===========================================================

- Insufficient validation of DNSSEC signatures (CVE-2017-15090)
- Cross-Site Scripting in the web interface (CVE-2017-15092)
- Configuration file injection in the API (CVE-2017-15093)
- Memory leak in DNSSEC parsing (CVE-2017-15094)

Bug fixes
- Update rec_control manpage
- Check in the detected OpenSSL/libcrypto for ECDSA
- Make more specific Netmasks < to less specific ones
- Fix validation at the exact RRSIG inception or expiration time
- Lowercase all outgoing qnames when lowercase-outgoing is set
- Fix libatomic detection on ppc64
- Edit configname definition to include the 'config-name' argument

Improvements
- Extract nested exception from Luawrapper
- Use explicit yes for default-enabled settings
- Throw an error when lua-conf-file can't be loaded
- get-remote-ring's "other" report should only have two items.
- PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet
  mask
- Only increase no-packet-error on the first read
- Add support for Botan 2.x
- Add more information to recursor cache dumps
- Fix typo in two log messages
- Add help text on autodetecting systemd support
- Be more resilient with broken auths
- Remove pdns.PASS and pdns.TRUNCATE
- Improve dnsbulktest experience in travis for more robustness
- Create socket-dir from init-script
- b.root renumbering, effective 2017-10-24
- Don't retry security polling too often when it fails
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.25 2017/09/03 08:53:13 wiz Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.1.0
@


1.25
log
@Follow some redirects.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.24 2017/08/02 20:15:42 fhajny Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.0.6
a33 2
.include "options.mk"

d35 1
@


1.24
log
@Update net/powerdns-recursor to 4.0.6

Bug fixes
- Use the incoming ECS for cache lookup if use-incoming-edns-subnet is
  set
- when making a netmask from a comboaddress, we neglected to zero the
  port. This could lead to a proliferation of netmasks.
- Don't take the initial ECS source for a scope one if EDNS is off
- also set d_requestor without Lua: the ECS logic needs it
- Fix IXFR skipping the additions part of the last sequence
- Treat requestor's payload size lower than 512 as equal to 512
- make URI integers 16 bits, fixes ticket #5443
- unbreak quoting

Improvements
- EDNS Client Subnet becomes compatible with the packet cache, using
  the existing variable answer facility.
- Remove just enough entries from the cache, not one more than asked
- Move expired cache entries to the front so they are expunged
- changed IPv6 addr of b.root-servers.net
- e.root-servers.net has IPv6 now
- hello decaf signers (ED25519 and ED448)
- don't use the libdecaf ed25519 signer when libsodium is enabled
  (Kees Monshouwer)
- do not hash the message in the ed25519 signer (Kees Monshouwer)
- Disable use-incoming-edns-subnet by default
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.23 2017/06/15 07:15:57 fhajny Exp $
d10 1
a10 1
HOMEPAGE=		http://www.powerdns.com/
@


1.23
log
@Update net/powerdns-recursor to 4.0.5.

Enhancements
- Add the 2017 DNSSEC root key
- Add support for RPZ wildcarded target names.
- Speed up RPZ zone loading and add a zoneSizeHint parameter to
  rpzFile and rpzMaster for faster reloads
- Make the RPZ summary consistent and log additions/removals at debug
  level, not info
- Update Ed25519 algorithm number and mnemonic and hook up to the
  Recursor
- Add use-incoming-edns-subnet option to process and pass along ECS
  and fix some ECS bugs in the process
- Refuse to start with chroot set in a systemd env
- Handle exceptions raised by closesocket() to prevent process
  termination
- Document missing top-pub-queries and top-pub-servfail-queries
  commands for rec_control
- IPv6 address for g.root-servers.net added
- Log outgoing queries / incoming responses via protobuf

Bug fixes
- Correctly lowercase the TSIG algorithm name in hash computation
- Clear the RPZ NS IP table when clearing the policy, this prevents
  false positives
- Fix cache-only queries against a forward-zone
- Only delegate if NSes are below apex in auth-zones
- Remove hardcoding of port 53 for TCP/IP forwarded zones in recursor
- Make sure labelsToAdd is not empty in getZoneCuts()
- Wait until after daemonizing to start the outgoing protobuf thread,
  prevents hangs when the protobuf server is not available
- Ensure (re)priming the root never fails
- Don't age the root, fixes a regression from 3.x
- Fix exception when sending a protobuf message for an empty question
- LuaWrapper: Allow embedded NULs in strings received from Lua
- Fix coredumps on illumos/SmartOS
- StateHolder: Allocate (and copy if needed) before taking the lock
- SuffixMatchNode: Fix insertion issue for an existing node
- Fix negative port detection for IPv6 addresses on 32-bit systems
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.22 2017/05/03 08:38:44 jperkin Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-4.0.5
@


1.22
log
@Convert CXXFLAGS setting C++ standard to USE_LANGUAGES.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2017/03/31 19:41:13 fhajny Exp $
d4 1
a4 2
DISTNAME=		pdns-recursor-4.0.4
PKGREVISION=		1
@


1.21
log
@powerdns-recursor also needs the segfault fix for SunOS. PKGREVISION++
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2017/03/24 18:45:44 fhajny Exp $
d16 1
a16 1
USE_LANGUAGES=		c c++
d32 1
a32 1
CXXFLAGS+=	-std=c++11 -Wno-c++11-narrowing
@


1.20
log
@Requires pkg-config to build properly
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2017/03/09 13:43:49 fhajny Exp $
d5 1
@


1.19
log
@Update net/powerdns-recursor to 4.0.4.

PowerDNS Recursor 4.0.4
=======================

Change highlights include:

- Check TSIG signature on IXFR (Security Advisory 2016-04)
- Don't parse spurious RRs in queries when we don't need them
  (Security Advisory 2016-02)
- Add 'max-recursion-depth' to limit the number of internal recursion
- Wait until after daemonizing to start the RPZ and protobuf threads
- On RPZ customPolicy, follow the resulting CNAME
- Make the negcache forwarded zones aware
- Cache records for zones that were delegated to from a forwarded zone
- DNSSEC: don't go bogus on zero configured DSs
- DNSSEC: NSEC3 optout and Bogus insecure forward fixes
- DNSSEC: Handle CNAMEs at the apex of secure zones to other secure
  zones

PowerDNS Recursor 4.0.3
=======================

Bug fixes
- Call gettag() for TCP queries
- Fix the use of an uninitialized filtering policy
- Parse query-local-address before lua-config-file
- Fix accessing an empty policyCustom, policyName from Lua
- ComboAddress: don't allow invalid ports
- Fix RPZ default policy not being applied over IXFR
- DNSSEC: Actually follow RFC 7646 §2.1
- Add boost context ldflags so freebsd builds can find the libs
- Ignore NS records in a RPZ zone received over IXFR
- Fix build with OpenSSL 1.1.0 final
- Don't validate when a Lua hook took the query
- Fix a protobuf regression (requestor/responder mix-up)

Additions and Enhancements
- Support Boost 1.61+ fcontext
- Add Lua binding for DNSRecord::d_place

PowerDNS Recursor 4.0.2
=======================

Bug fixes
- Set dq.rcode before calling postresolve
- Honor PIE flags.
- Fix build with LibreSSL, for which OPENSSL_VERSION_NUMBER is
  irrelevant
- Don't shuffle CNAME records. (thanks to Gert van Dijk for the
  extensive bug report!)
- Fix delegation-only

Additions and enhancements
- Respect the timeout when connecting to a protobuf server
- allow newDN to take a DNSName in; document missing methods
- expose SMN toString to lua
- Anonymize the protobuf ECS value as well (thanks to Kai Storbeck of
  XS4All for finding this)
- Allow Lua access to the result of the Policy Engine decision, skip
  RPZ, finish RPZ implementation
- Remove unused DNSPacket::d_qlen
- RPZ: Use query-local-address(6) by default (thanks to Oli Schacher
  of switch.ch for the feature request)
- Move the root DNSSEC data to a header file

PowerDNS Recursor 4.0.1
=======================

Bug fixes
- Improve DNSSEC record skipping for non dnssec queries (Kees
  Monshouwer)
- Don't validate zones from the local auth store, go one level down
  while validating when there is a CNAME
- Don't go bogus on islands of security
- Check all possible chains for Insecures
- Don't go Bogus on a CNAME at the apex
- RPZ: default policy should also override local data RRs
- Fix a crash when the next name in a chained query is empty and
  rec_control current-queries is invoked

Improvements
- OpenSSL 1.1.0 support (Christian Hofstaedtler)
- Fix warnings with gcc on musl-libc (James Taylor)
- Also validate on +DO
- Fail to start when the lua-dns-script does not exist
- Add more Netmask methods for Lua (Aki Tuomi)
- Validate DNSSEC for security polling
- Turn on root-nx-trust by default and log-common-errors=off
- Allow for multiple trust anchors per zone
- Fix compilation warning when building without Protobuf

PowerDNS Recursor 4.0.0
=======================

- Moved to C++ 2011, a cleaner more powerful version of C++ that has
  allowed us to improve the quality of implementation in many places.
- Implemented dedicated infrastructure for dealing with DNS names that
  is fully "DNS Native" and needs less escaping and unescaping.
- Switched to binary storage of DNS records in all places.
- Moved ACLs to a dedicated Netmask Tree.
- Implemented a version of RCU for configuration changes
- Instrumented our use of the memory allocator, reduced number of
  malloc calls substantially.
- The Lua hook infrastructure was redone using LuaWrapper; old scripts
  will no longer work, but new scripts are easier to write under the
  new interface.
- DNSSEC processing: if you ask for DNSSEC records, you will get them.
- DNSSEC validation: if so configured, PowerDNS perform DNSSEC
  validation of your answers.
- Completely revamped Lua scripting API that is "DNSName" native and
  therefore far less error prone, and likely faster for most commonly
  used scenarios.
- New asynchronous per-domain, per-ip address, query engine.
- RPZ (from file, over AXFR or IXFR) support.
- All caches can now be wiped on suffixes, because of canonical
  ordering.
- Many, many more relevant performance metrics, including upstream
  authoritative performance measurements.
- EDNS Client Subnet support, including cache awareness of
  subnet-varying answers.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2015/06/10 14:40:07 fhajny Exp $
d16 1
a16 1
USE_TOOLS+=		gmake
@


1.18
log
@Update net/powerdns-recursor to 3.7.3 (previous commit was 3.7.2).

PowerDNS Recursor 3.7.3
- Limit the maximum length of a qname
- pdnssec: check for glue and delegations in parent zones
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2015/06/10 14:22:29 fhajny Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-3.7.3
d14 1
a14 1
HAS_CONFIGURE=		yes
d22 1
a22 1
BUILD_MAKE_FLAGS+=	SYSCONFDIR=${PKG_SYSCONFDIR} OPTFLAGS=
d24 1
a24 2
INSTALL_MAKE_FLAGS+=	BINDIR=${PREFIX}/bin SBINDIR=${PREFIX}/sbin
INSTALL_MAKE_FLAGS+=	SYSCONFDIR=${EGDIR} MANDIR=${PREFIX}/${PKGMANDIR}
a35 7
post-extract:
	${LN} -s FreeBSD.inc ${WRKSRC}/sysdeps/NetBSD.inc

post-build:
	${CP} ${WRKSRC}/pdns_recursor.1 ${WRKSRC}/pdns_recursor.8
	${CP} ${WRKSRC}/rec_control.1 ${WRKSRC}/rec_control.8

d37 2
@


1.17
log
@Update net/powerdns-recursor to 3.7.3.
Add SMF support.
Defuzz patches.

PowerDNS Recursor 3.7.3
- Limit the maximum length of a qname
- pdnssec: check for glue and delegations in parent zones

PowerDNS Recursor 3.7.2
- Fix handling of forward references in label compressed packets;
  fixes CVE-2015-1868.
- Minor improvements and bugfixes.

PowerDNS Recursor 3.7.1
- New root-nx-trust flag makes PowerDNS generalize NXDOMAIN responses
  from the root-servers
- getregisteredname() for Lua, which turns 'www.bbc.co.uk' into 'bbc.co.uk'
- Lua preoutquery filter
- Lua IP-based filter (ipfilter) before parsing packets
- iputils class for Lua, to quickly process IP addresses and netmasks
  in their native format
- getregisteredname function for Lua, to find the registered domain
  for a given name
- Various new ringbuffers: top-servfail-remotes, top-largeanswer-remotes,
  top-servfail-queries
- Minor improvements and bugfixes.

PowerDNS Recursor 3.6.2
- Minor improvements and bugfixes.

PowerDNS Recursor 3.6.1
- Fix for a crash under a specific sequence of packets.

PowerDNS Recursor 3.6.0
- Implement minimum-ttl-override config setting, plus runtime configurability
  via 'rec_control set-minimum-ttl'.
- Lots of work on the JSON API, which is exposed via Aki Tuomi's 'yahttp'.
- Lua modules can now use 'pdnslog(INFO..')
- Adopt any-to-tcp feature to the recursor.
- Implement built-in statistics dumper using the 'carbon' protocol, which
  is also understood by metronome (our mini-graphite). Use 'carbon-server',
  'carbon-ourname' and 'carbon-interval' settings.
- New setting 'udp-truncation-threshold' to configure from how many bytes
  we should truncate. commit a09a8ce.
- Proper support for CHaos class for CHAOS TXT queries.
- Added support for Lua scripts to drop queries w/o further processing.
- Kevin Holly added qtype statistics to recursor and rec_control.
- Add support for include-files in configuration, also reload ACLs and zones
  defined in them.
- Paulo Anes contributed server-down-max-fails which helps combat
  Recursive DNS based amplification attacks.
- Implement "followCNAMERecords" feature in the Lua hooks.
- Minor improvements and bugfixes.

PowerDNS Recursor 3.5.3
- This is a bugfix and performance update to 3.5.2. It brings serious
  performance improvements for dual stack users.

PowerDNS Recursor 3.5.2
- This is a stability and bugfix update to 3.5.1. It contains important
  fixes that improve operation for certain domains.

PowerDNS Recursor 3.5.1
- This is a stability and bugfix update to 3.5.

PowerDNS Recursor 3.5
- The local zone server now understands wildcards.
- The Lua postresolve and nodata hooks.
- A new feature, rec_control trace-regex allows the tracing of lookups
  for specific names
- A new setting, export-etc-hosts-search-suffix, adds a configurable
  suffix to names imported from /etc/hosts
- Minor improvements & bugfixes

PowerDNS Recursor 3.3.1
- Small number of important fixes, adds some memory usage statistics,
  but no new features
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2014/12/11 20:18:17 roy Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-3.7.2
d37 1
a37 1
pre-configure:
d39 4
a42 2
	${MV} ${WRKSRC}/pdns_recursor.1 ${WRKSRC}/pdns_recursor.8
	${MV} ${WRKSRC}/rec_control.1 ${WRKSRC}/rec_control.8
@


1.16
log
@Add upstream patch to fix CVE-2014-8601.
Remove myself as maintainer.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2014/10/19 22:27:47 alnsn Exp $
d4 1
a4 2
DISTNAME=		pdns-recursor-3.3
PKGREVISION=		5
d14 1
a14 3
MAKE_JOBS_SAFE=		no

USE_TOOLS=		gmake
d16 1
d22 1
a22 1
BUILD_MAKE_FLAGS+=	CONFIGDIR=${PKG_SYSCONFDIR} OPTFLAGS=
d25 1
a25 1
INSTALL_MAKE_FLAGS+=	CONFIGDIR=${EGDIR} MANDIR=${PREFIX}/${PKGMANDIR}
a29 6
SUBST_CLASSES+=			whitespace
SUBST_STAGE.whitespace=		pre-configure
SUBST_MESSAGE.whitespace=	Fixing C++ semantic whitespace.
SUBST_FILES.whitespace=		pdns_recursor.cc
SUBST_SED.whitespace=		-e 's|"VERSION"|" VERSION "|'

d37 1
a37 4
post-patch:
	${SED} -e "s:/etc/powerdns:${PKG_SYSCONFDIR}:" \
		${WRKSRC}/config.h >${WRKSRC}/config.h.new
	${MV} ${WRKSRC}/config.h.new ${WRKSRC}/config.h
@


1.15
log
@Revbump after lang/lua51 update.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2014/05/03 13:01:24 alnsn Exp $
d5 1
a5 1
PKGREVISION=		4
d10 1
a10 1
MAINTAINER=		roy@@NetBSD.org
@


1.14
log
@Adapt to Lua multiversion support.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2013/10/30 06:49:54 dholland Exp $
d5 1
a5 1
PKGREVISION=		3
@


1.14.4.1
log
@Pullup ticket #4573 - requested by roy
net/powerdns-recursor: security patch

Revisions pulled up:
- net/powerdns-recursor/Makefile                                1.16
- net/powerdns-recursor/distinfo                                1.12
- net/powerdns-recursor/patches/patch-CVE-2014-8601             1.1

---
   Module Name:    pkgsrc
   Committed By:   roy
   Date:           Thu Dec 11 20:18:17 UTC 2014

   Modified Files:
           pkgsrc/net/powerdns-recursor: Makefile distinfo
   Added Files:
           pkgsrc/net/powerdns-recursor/patches: patch-CVE-2014-8601

   Log Message:
   Add upstream patch to fix CVE-2014-8601.
   Remove myself as maintainer.
@
text
@d1 1
a1 1
# $NetBSD$
d5 1
a5 1
PKGREVISION=		5
d10 1
a10 1
MAINTAINER=		pkgsrc-users@@NetBSD.org
@


1.13
log
@Bump PKGREVISION of packages whose Lua depends changed form, but whose
own PKGNAME is unchanged.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2013/07/04 21:27:58 adam Exp $
d5 1
a5 1
PKGREVISION=		2
@


1.12
log
@Revbump after updating lang/lua to 5.2.2.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2013/06/14 22:13:03 dholland Exp $
d5 1
a5 1
PKGREVISION=		1
@


1.11
log
@Patch up C++ semantic whitespace.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2013/06/10 18:59:09 joerg Exp $
d5 1
@


1.10
log
@Be more explicit of what version of tuple and shared_ptr is meant.
Disable warnings for narrowing with C++11.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2013/02/19 22:35:15 joerg Exp $
d31 6
@


1.9
log
@Request C++11 when building with clang.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2012/10/23 17:19:00 asau Exp $
d33 1
a33 1
CXXFLAGS+=	-std=c++11
@


1.8
log
@Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2012/02/28 10:49:27 roy Exp $
d31 5
a35 1
.include "../../mk/bsd.prefs.mk"
@


1.7
log
@Bump to 3.3, changes include:
* Many threading changes for greater perfomance
* Can now make TCP/IP queries to remote IPv6 addresses
* Domains can be forwarded to IPv6 addresses
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2010/01/29 13:26:45 roy Exp $
a17 1
PKG_DESTDIR_SUPPORT=	user-destdir
@


1.6
log
@Update to recursor-3.1.7.2
Changes from 3.1.7 include:
* Fixed CVE-2009-4009 and CVE-2009-4010
* Improved error messages when parsing zones
* Resilience against whitespace in configuration
* Performance increase
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2009/12/23 13:00:41 ghen Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-3.1.7.2
@


1.5
log
@Add option for Lua scripting support in pdns_recursor,
see http://doc.powerdns.com/recursor-scripting.html

Disabled by default, so no revbump.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2009/06/30 00:07:21 joerg Exp $
d4 1
a4 1
DISTNAME=		pdns-recursor-3.1.7
@


1.5.2.1
log
@Pullup ticket #2981 - requested by roy
powerdns-recursor: security update

Revisions pulled up:
- net/powerdns-recursor/Makefile			1.6
- net/powerdns-recursor/distinfo			1.4
- net/powerdns-recursor/patches/patch-ac		delete
- net/powerdns-recursor/patches/patch-ad		delete
- net/powerdns-recursor/patches/patch-ae		1.2
- net/powerdns-recursor/patches/patch-af		1.2
---
Module Name:    pkgsrc
Committed By:   roy
Date:           Fri Jan 29 13:26:45 UTC 2010

Modified Files:
        pkgsrc/net/powerdns-recursor: Makefile distinfo
        pkgsrc/net/powerdns-recursor/patches: patch-ae patch-af
Removed Files:
        pkgsrc/net/powerdns-recursor/patches: patch-ac

Log Message:
Update to recursor-3.1.7.2
Changes from 3.1.7 include:
* Fixed CVE-2009-4009 and CVE-2009-4010
* Improved error messages when parsing zones
* Resilience against whitespace in configuration
* Performance increase
---
Module Name:    pkgsrc
Committed By:   roy
Date:           Fri Jan 29 13:27:54 UTC 2010

Removed Files:
        pkgsrc/net/powerdns-recursor/patches: patch-ad

Log Message:
Punt stale file
@
text
@d1 1
a1 1
# $NetBSD$
d4 1
a4 1
DISTNAME=		pdns-recursor-3.1.7.2
@


1.4
log
@Mark packages as MAKE_JOBS_SAFE=no that failed in a bulk build with
MAKE_JOBS=2 and worked without.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2009/05/19 08:59:28 wiz Exp $
d32 3
@


1.3
log
@Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENT
block). Uncomment some commented out LICENSE lines while here.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2009/04/21 22:52:37 roy Exp $
d14 2
@


1.2
log
@Get kqueue support working
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1.1.1 2009/04/21 14:16:47 roy Exp $
a5 1
LICENSE=		gnu-gpl-v2
d12 1
@


1.1
log
@Initial revision
@
text
@d1 1
a1 1
# $NetBSD$
d34 1
a34 2
	@@# TODO Make kqueue work
	@@#${LN} -s FreeBSD.inc ${WRKSRC}/sysdeps/NetBSD.inc
@


1.1.1.1
log
@Import pdns_recursor-3.1.7
Based on the WIP version by pkgsrc@@blackmouse.biz

The PowerDNS recursor is part of the source tarball of the main PowerDNS
distribution, but it is released separately. Starting from the version 3.0
pre-releases, there are zero known bugs or issues with the recursor. It is
known to power the resolving needs of over 2 million internet connections.

PowerDNS recursor can gets names from /etc/hosts.
@
text
@@