BIND 9.4.2-P2-W1

BIND 9.4 is a previous major release. It is still supported, and bug fixes and security fixes will be made available as minor releases. No new features will be added.

Some of the important features of BIND 9 are:

• DNS Security
  • DNSSEC (signed zones)
    
  • TSIG (signed DNS requests)
• IP version 6
  • Answers DNS queries on IPv6 sockets
  • IPv6 resource records (AAAA, DNAME, etc.)
  • Experimental IPv6 Resolver Library
• DNS Protocol Enhancements
  • IXFR, DDNS, Notify, EDNS0
  • Improved standards conformance
• Views
  • One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others.
• Multiprocessor Support
• Improved Portability Architecture

Sun Microsystems, Inc.
Hewlett Packard
Compaq Computer Corporation
IBM
Process Software Corporation
Silicon Graphics, Inc.
Network Associates, Inc.
U.S. Defense Information Systems Agency
USENIX Association
Stichting NLNet - NLNet Foundation
Nominum, Inc.

All ISC software is signed with our OpenPGP Key

You can download ISC software either from our master site, or at a number of mirror sites across the globe.

The BIND 9 Administrator Reference Manual is included with the source distribution in DocBook XML and HTML format, in the doc/arm directory.

Some of the programs in the BIND 9 distribution have man pages under the doc/man directory. In particular, the command line options of "named" are documented in doc/man/bind/named.8. There is now also a set of man pages for the lwres library.

If you are upgrading from BIND 8, please read the migration notes in doc/misc/migration. If you are upgrading from BIND 4, read doc/misc/migration-4to9.

Frequently asked questions and their answers can be found in the FAQ.

BIND 9.5 features for the non-programmer

We've had successful builds and tests on the following systems:

• COMPAQ Tru64 UNIX 5.1B
• Fedora Core 6
• FreeBSD 4.10, 5.2.1, 6.2
• Mac OS X 10.5
• NetBSD 3.x and 4.0-beta
• OpenBSD 3.3 and up
• HP-UX 11.11
• Slackware Linux 8.1
• Solaris 8, 9, 9 (x86), 10
• Ubuntu 7.04, 7.10
• Windows NT/2000/XP/2003

  We have recent reports from the user community that a supported version of BIND will build and run on the following systems:

• AIX 4.3, 5L
• CentOS 4, 4.5, 5
• Darwin 9.0.0d1/ARM
• Debian 4
• Fedora Core 5, 7
• FreeBSD 6.1
• HP-UX 11.11, 11.23 PA
• MacOS X 10.4, 10.5
• Red Hat Enterprise Linux 4, 5
• SCO OpenServer 5.0.6
• Slackware 9, 10
• SuSE 9, 10

To build, just

./configure
make

Several environment variables that can be set before running configure will affect compilation:

CC
The C compiler to use. configure tries to figure out the right one for supported systems.

CFLAGS
C compiler flags. Defaults to include -g and/or -O2 as supported by the compiler.

STD_CINCLUDES
System header file directories. Can be used to specify where add-on thread or IPv6 support is, for example. Defaults to empty string.

STD_CDEFINES
Any additional preprocessor symbols you want defined. Defaults to empty string.

To build shared libraries, specify "--with-libtool" on the configure command line.

For the server to support DNSSEC, you need to build it with crypto support. You must have OpenSSL 0.9.5a or newer installed and specify "--with-openssl" on the configure command line. If OpenSSL is installed under a nonstandard prefix, you can tell configure where to look for it using "--with-openssl=/prefix".

To build libbind (BIND 8 resolver library), specify "--enable-libbind" on the configure command line.

On some platforms, BIND 9 can be built with multithreading support, allowing it to take advantage of multiple CPUs. You can specify whether to build a multithreaded BIND 9 by specifying "--enable-threads" or "--disable-threads" on the configure command line. The default is operating system dependent.

If your operating system has integrated support for IPv6, it will be used automatically. If you have installed KAME IPv6 separately, use "--with-kame[=PATH]" to specify its location.

"make install" will install "named" and the various BIND 9 libraries. By default, installation is into /usr/local, but this can be changed with the "--prefix" option when running "configure".

You may specify the option "--sysconfdir" to set the directory where configuration files like "named.conf" go by default, and "--localstatedir" to set the default parent directory of "run/named.pid". For backwards compatibility with BIND 8, --sysconfdir defaults to "/etc" and --localstatedir defaults to "/var" if no --prefix option is given. If there is a --prefix option, sysconfdir defaults to "$prefix/etc" and localstatedir defaults to "$prefix/var".

To see additional configure options, run "configure --help". Note that the help message does not reflect the BIND 8 compatibility defaults for sysconfdir and localstatedir.

If you're planning on making changes to the BIND 9 source, you should also "make depend". If you're using Emacs, you might find "make tags" helpful.

Building with gcc is not supported, unless gcc is the vendor's usual compiler (e.g. the various BSD systems, Linux).

Known compiler issues:

• gcc-3.2.1 and gcc-3.1.1 is known to cause problems with solaris-x86.
• gcc prior to gcc-3.2.3 ultrasparc generates incorrect code at -02.
• gcc-3.3.5 powerpc generates incorrect code at -02.
• Irix, MipsPRO 7.3.1m is known to cause problems.

A limited test suite can be run with "make test". Many of the tests require you to configure a set of virtual IP addresses on your system, and some require Perl; see bin/tests/system/README for details.

	    BIND 9.4.2-P2-W1 is now available.

This is a WINDOWS-SPECIFIC update to the second security patch for BIND
9.4.2.  It addresses long-standing scalability issues in the socket code
for Windows that were exposed by the changes in BIND 9.4.2-P1 and -P2.

This release contains no code changes that are not specific to the Windows
operating system.  It will compile and run correctly on all supported
platforms, but there is no need to upgrade from P2 to P2-W1 unless you
are running BIND on Windows.

NOTE: Effective immediately, the Windows 2000 and Windows NT operating
systems are no longer supported.  This release has been tested and is
supported on Windows 2003, Windows XP, and Windows 2008.

BIND 9.4.2-P2-W1 can be downloaded from

    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/bind-9.4.2-P2-W1.tar.gz

The PGP signature of the distribution is at

    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/bind-9.4.2-P2-W1.tar.gz.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/bind-9.4.2-P2-W1.tar.gz.sha256.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/bind-9.4.2-P2-W1.tar.gz.sha512.asc

The signature was generated with the ISC public key, which is
available at <http://www.isc.org/about/openpgp/pgpkey2006.txt>.

A binary kit for Windows XP, Windows 2003 and Windows 2008 is at

    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.zip
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.debug.zip

The PGP signature of the binary kit for Windows XP, Windows 2003, and
Windows 2008 is at
        
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.zip.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.zip.sha256.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.zip.sha512.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.debug.zip.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.debug.zip.sha256.asc
    ftp://ftp.isc.org/isc/bind9/9.4.2-P2-W1/BIND9.4.2-P2-W1.debug.zip.sha512.asc

Changes since 9.4.2-P2:

	--- 9.4.2-P2-W1 released ---

2432.	[bug]		More Windows socket handling improvements.  Stop
			using I/O events and use IO Completion Ports
			throughout.  Rewrite the receive path logic to make
			it easier to support multiple simultaneous
			requestrs in the future.  Add stricter consistency
                        checking as a compile-time option (define
                        ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).

2420.	[bug]		Windows socket handling cleanup.  Let the io
			completion event send out cancelled read/write
			done events, which keeps us from writing to memeory
			we no longer have ownership of.  Add debugging
			socket_log() function.  Rework TCP socket handling
			to not leak sockets.

To join the BIND Users mailing list, send mail to: bind-users-request@isc.org.

If you're planning on making changes to the BIND 9 source code, you might want to join the BIND Workers mailing list. Send mail to: bind-workers-request@isc.org