diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8 index 0096d6d63a..c7bed9fe57 100644 --- a/bin/rndc/rndc.8 +++ b/bin/rndc/rndc.8 @@ -210,9 +210,15 @@ and \fBrndc modzone\fR\&. .RE .PP -\fBdnstap\-reopen\fR +\fBdnstap ( \-reopen | \-roll \fR\fB[\fInumber\fR]\fR\fB )\fR .RS 4 -Close and re\-open DNSTAP output files\&. This allows the files to be renamed externally then to be re\-opened\&. +Close and re\-open DNSTAP output files\&. +\fBrndc dnstap \-reopen\fR +allows the output file to be renamed externally, then re\-opened\&. +\fBrndc dnstap \-roll\fR +causes the output file to be rolled automatically, similar to log files; the most recent output file has "\&.0" appended to its name; the previous most recent output file is moved to "\&.1", and so on\&. If +\fInumber\fR +is specified, then the number of backup log files is limited to that number\&. .RE .PP \fBdumpdb \fR\fB[\-all|\-cache|\-zone|\-adb|\-bad|\-fail]\fR\fB \fR\fB[\fIview \&.\&.\&.\fR]\fR diff --git a/bin/rndc/rndc.html b/bin/rndc/rndc.html index d9793afbbf..d3ee07ce7a 100644 --- a/bin/rndc/rndc.html +++ b/bin/rndc/rndc.html @@ -218,10 +218,17 @@ See also rndc addzone and rndc modzone.

-
dnstap-reopen
+
dnstap ( -reopen | -roll [number] )

- Close and re-open DNSTAP output files. This allows the files - to be renamed externally then to be re-opened. + Close and re-open DNSTAP output files. + rndc dnstap -reopen allows the output + file to be renamed externally, then re-opened. + rndc dnstap -roll causes the output file + to be rolled automatically, similar to log files; the most + recent output file has ".0" appended to its name; the + previous most recent output file is moved to ".1", and so on. + If number is specified, then the + number of backup log files is limited to that number.

dumpdb [-all|-cache|-zone|-adb|-bad|-fail] [view ...]

@@ -458,13 +465,13 @@

recursing

- Dump the list of queries named is currently - recursing on, and the list of domains to which iterative - queries are currently being sent. (The second list includes - the number of fetches currently active for the given domain, - and how many have been passed or dropped because of the - fetches-per-zone option.) -

+ Dump the list of queries named is currently + recursing on, and the list of domains to which iterative + queries are currently being sent. (The second list includes + the number of fetches currently active for the given domain, + and how many have been passed or dropped because of the + fetches-per-zone option.) +

refresh zone [class [view]]

Schedule zone maintenance for the given zone. diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index 07b044b626..83cfa8d204 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -555,6 +555,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 1e1cca4297..7faeb1191d 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -153,6 +153,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 42e2c4eb54..3ac9f626c2 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -669,6 +669,6 @@ controls { -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index c76d07ef26..94adc5fc19 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2682,6 +2682,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index b9a696087d..6294f4ac3b 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -144,6 +144,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 44994cafa8..f26b210636 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -13443,6 +13443,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index ed4af6426f..b9df4b15fa 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -378,6 +378,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 1e2a197bac..07e3a88969 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -134,6 +134,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 266effabc5..0d71005104 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -44,7 +44,7 @@

Table of Contents

-
Release Notes for BIND Version 9.11.0b1
+
Release Notes for BIND Version 9.11.0b2
Introduction
Download
@@ -61,7 +61,7 @@

-Release Notes for BIND Version 9.11.0b1

+Release Notes for BIND Version 9.11.0b2

Introduction

@@ -117,7 +117,7 @@

Security Fixes

  • - getrrsetbyname with a non absolute name could trigger a + getrrsetbyname with a non absolute name could trigger an infinite recursion bug in lwresd and named with lwres configured if when combined with a search list entry the resulting name is too long. This flaw is disclosed in @@ -238,8 +238,19 @@ a human-readable format.

    - rndc dnstap-reopen can be used reopen - dnstap output files after renaming them. + rndc dnstap -roll causes dnstap + output files to be rolled like log files -- the most recent output + file is renamed with a .0 suffix, the next + most recent with .1, etc. (Note that this + only works when dnstap output is being written + to a file, not to a UNIX domain socket.) An optional numerical + argument specifies how many backup log files to retain; if not + specified or set to 0, there is no limit. +

    +

    + rndc dnstap -reopen simply closes and reopens + the dnstap output channel without renaming + the output file.

    For more information on dnstap, see @@ -783,6 +794,6 @@

-

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 0879d3b9bd..f8a333450c 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -155,6 +155,6 @@
-

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 56063baef4..fd8ca0d953 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -497,6 +497,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 408c19637f..2cdee0214c 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -543,6 +543,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index 2eee842bda..bc37fc0a5b 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -157,6 +157,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index f2b888a9cc..abfea22d72 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -40,7 +40,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.11.0b1

+

BIND Version 9.11.0b2

@@ -250,7 +250,7 @@
A. Release Notes
-
Release Notes for BIND Version 9.11.0b1
+
Release Notes for BIND Version 9.11.0b2
Introduction
Download
@@ -400,6 +400,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index 63e7db5f46..3d428b7773 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index d21205c3b5..1be957d361 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -81,6 +81,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 8f7a9117c6..c74ec390da 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -185,6 +185,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 1195d86b9f..b4ff76ca57 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -510,6 +510,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 2afac8d0f6..88b17d1e8e 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -854,6 +854,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 134b907f58..5a725879ab 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -112,6 +112,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 131846ffdd..f44af0213e 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -229,6 +229,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index fa415d7d13..c417cdc097 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -213,6 +213,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 64463fb5d4..99fc5af917 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -187,6 +187,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 4384ecedb7..21ef0e8b09 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -391,6 +391,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 2048cc552e..98a1037771 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -465,6 +465,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index bb796ca64c..9c15c75a8f 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -134,6 +134,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 0709b20883..08edaebcbe 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -277,6 +277,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index ccd151072a..2bf9668118 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -567,6 +567,6 @@ db.example.com.signed -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index 2b69e60aad..e7401b3094 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -164,6 +164,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index 64d168e0e5..6a1988f709 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -107,6 +107,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 963d7c893b..1f5b168212 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -102,6 +102,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index c144392551..4a7d3e6e97 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -291,6 +291,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 31765c23f1..ef0bf8389b 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -112,6 +112,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index 02fac062e6..1fd2da3be2 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -253,6 +253,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index e17de6f4f0..fe0e4227bc 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -151,6 +151,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 88619e02e7..556c62bdc0 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -338,6 +338,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index a9cd2968b7..c6f4d0c148 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -102,6 +102,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index e7d2382806..730cf34e80 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -104,6 +104,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index d0538785dd..13096f060c 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -703,6 +703,6 @@ zone -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index d3cd013965..fc05f5790f 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -384,6 +384,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 93ff1f76d2..d2aaf65e69 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -103,6 +103,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index 14a5205ae8..8e968b0b7b 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -674,6 +674,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 768e6df709..271dafb006 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -223,6 +223,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 4f9e8535c5..0fae7ae65c 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -246,6 +246,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index f3ed85282b..ed0c77a92b 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -236,10 +236,17 @@ See also rndc addzone and rndc modzone.

-
dnstap-reopen
+
dnstap ( -reopen | -roll [number] )

- Close and re-open DNSTAP output files. This allows the files - to be renamed externally then to be re-opened. + Close and re-open DNSTAP output files. + rndc dnstap -reopen allows the output + file to be renamed externally, then re-opened. + rndc dnstap -roll causes the output file + to be rolled automatically, similar to log files; the most + recent output file has ".0" appended to its name; the + previous most recent output file is moved to ".1", and so on. + If number is specified, then the + number of backup log files is limited to that number.

dumpdb [-all|-cache|-zone|-adb|-bad|-fail] [view ...]

@@ -476,13 +483,13 @@

recursing

- Dump the list of queries named is currently - recursing on, and the list of domains to which iterative - queries are currently being sent. (The second list includes - the number of fetches currently active for the given domain, - and how many have been passed or dropped because of the - fetches-per-zone option.) -

+ Dump the list of queries named is currently + recursing on, and the list of domains to which iterative + queries are currently being sent. (The second list includes + the number of fetches currently active for the given domain, + and how many have been passed or dropped because of the + fetches-per-zone option.) +

refresh zone [class [view]]

Schedule zone maintenance for the given zone. @@ -787,6 +794,6 @@ -

BIND 9.11.0b1

+

BIND 9.11.0b2

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index ab748bec05..62ffc940c9 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -21,7 +21,7 @@

-Release Notes for BIND Version 9.11.0b1

+Release Notes for BIND Version 9.11.0b2

Introduction

@@ -77,7 +77,7 @@

Security Fixes

  • - getrrsetbyname with a non absolute name could trigger a + getrrsetbyname with a non absolute name could trigger an infinite recursion bug in lwresd and named with lwres configured if when combined with a search list entry the resulting name is too long. This flaw is disclosed in @@ -198,8 +198,19 @@ a human-readable format.

    - rndc dnstap-reopen can be used reopen - dnstap output files after renaming them. + rndc dnstap -roll causes dnstap + output files to be rolled like log files -- the most recent output + file is renamed with a .0 suffix, the next + most recent with .1, etc. (Note that this + only works when dnstap output is being written + to a file, not to a UNIX domain socket.) An optional numerical + argument specifies how many backup log files to retain; if not + specified or set to 0, there is no limit. +

    +

    + rndc dnstap -reopen simply closes and reopens + the dnstap output channel without renaming + the output file.

    For more information on dnstap, see diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index f505fa69c1..2b6d1302a4 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ