In this release there is a fix for long downtime after connectivity
loss, which was a longstanding unsolved issue. Features for tcp, TCP
Fast Open and timeout pressure to close connections when the tcp
connections are getting full. Option to use ipv6 /64 for extra entropy.
Features
- Create a pkg-config file for libunbound in contrib.
- TCP Fast open patch from Sara Dickinson.
- Finegrained localzone control with define-tag, access-control-tag,
access-control-tag-action, access-control-tag-data, local-zone-tag, and
local-zone-override. And added types always_transparent, always_refuse,
always_nxdomain with that.
- If more than half of tcp connections are in use, a shorter timeout
is used (200 msec, vs 2 minutes) to pressure tcp for new connects.
- [bugzilla: 787 ] Fix#787: outgoing-interface netblock/64 ipv6
option to use linux freebind to use 64bits of entropy for every query
with random local part.
- For #787: prefer-ip6 option for unbound.conf prefers to send
upstream queries to ipv6 servers.
- Add default root hints for IPv6 E.ROOT-SERVERS.NET, 2001:500:a8::e.
- keep debug symbols in windows build.
PR: 213043
Submitted by: maintainer
Changelog:
20160911
Bugfix (introduced: Postfix 3.0): the SMTP daemon did not
reset a previous session's command counts before rejecting
a client that exceeds request or concurrency rates. File:
smtpd/smtpd.c.
20160917
Bugfix (introduced: Postfix 3.0): the unionmap did not
propagate table lookup errors. Based on patch by Roel van
Meer. Files: util/dict_union.c, util/dict_union_test.*.
20160925
Workaround (problem introduced: Postfix 2.11): to avoid
false "not found" errors with MySQL map queries that contain
UTF8-encoded text, specify "option_group = client" in Postfix
MySQL configuration files. This will be the default setting
with Postfix 3.2 and later.
THere were 5 new programs built and installed by both the client and
the server. This is not a unique case. Previously they were allocated
to the client and removed by the post-install target of the server. In
this case, they've already been allocated to the server, so we need a
new post-install target for the client to remove them from the stage
directory so stage-QA checks pass.
While here, remove the now-unnecessary DragonFly configure argument
and change the backtick in a comment to an apostrophe to avoid the
makefile being interpreted as a shell script by some editors. Also
remove redundant forward slashes on the server post-install target.
Approved by: just-fix-it
The intent was to check for GSSAPI BASE option set on FreeBSD 9, but
the effect was an IGNORE set for all non-FreeBSD platforms. Fix the
logic to its original intent under the just-fix-it blanket.
PR: 210545
Submitted by: Dave Cottlehuber <dch@skunkwerks.at>
Riemann-C-client is a C client library for the Riemann monitoring system,
providing a convenient and simple API, high test coverage and a copyleft
license, along with API and ABI stability.
https://github.com/algernon/riemann-c-client/#readme
PR: 212079
In collaboration wtih: Peter Czanik (CzP) <peter.czanik@balabit.com>
To support current sysutils/syslog-ng-devel.
Approved by: yerenkow@gmail.com (maintainer)
Yesterday I released v0.17, but discovered that that version and all
previous versions did not yet build on macOS Sierra. Fixing that, I've
released v0.18. For FreeBSD, it should be identical to v0.17, but at
least ensures that portscout remains silent.
SUMMARY:
Some features, such as multi master check option that does not upgrade
from the first master that answers, but picks the best one.
Additional section handling for type SRV. And bug fixes.
FEATURES:
- multi-master-check: yes can be used to check all masters for the
last version, using the higher version from the configured masters,
from Manabu Sonoda.
- Support RR type OPENPGPKEY from RFC 7929.
- Can config key algorithms with the digest name, eg. 'sha256'.
- configure --disable-radix-tree for about 15% lower memory usage.
- for type SRV add A/AAAA to the additional section (if possible),
just like we already do for type MX.
- more extensible edns option handling.
BUG FIXES:
- Fix compile warnings about unused result from write and strtol.
and signcompare in minmax retrytime.
- Fix#812: fix that make depend fails after distribution.
- Fix#817: xfrd update failed loop.
- Add robustness against unallocated data in nsec3 trees.
- Fix README spelling error of BSD license (reported by Joerg Jung).
- Fix multimaster for not tried full zone transfer for a expired zone.
- Fix#827: fix compile with openssl 1.1.0 with api=1.1.0.
PR: 213021
Submitted by: maintainer
- update to 0.10.10
- pass maintainership to submitter
- expand python version to 2.7+ because since this release pcapy now
supports both python branches
PR: 213105
Submitted by: Mageirias Anastasios <anastasios@mageirias.com>
See also https://groups.google.com/forum/#!topic/vim_use/66crU745cFc
- Mark as MAKE_JOBS_UNSAFE (thanks to Mat for the log):
make[2]: "/wrkdirs/usr/ports/editors/vim/work/vim-8.0.0019/src/po/Makefile" line 4: Could not find ../auto/config.mk
make[2]: Fatal errors encountered -- cannot continue
PR: 197214 [1]
Submitted by: jjuanino gmail
PYTHON_REL is defined in bsd.port.pre.mk, so this unlikely to ever have
worked unless defined via make.conf. Note, USES=python only supports
overriding PYTHON_VERSION apart from DEFAULT_VERSIONS=python*.
$ make -V PYTHON_VERSION PYTHON_REL=3500
python2.7
$ PYTHON_REL=3500 make -V PYTHON_REL
2712
$ make -V PYTHON_REL PYTHON_VERSION=python3.5
3502
PR: 204519 (for tracking)
- Add LICENSE_FILE
- Configure script is generated by GNU tools
- Use @sample for configuration file instead of
deprecated @unexec, remove part of pkg-message
about copying config file, it's done automatically now
- Regenerate patches with make makepatch
Version 2.9j of WWWOFFLE released : Sat 23 Mar 2016
---------------------------------------------------
Bug Fixes
Fix to remove compilation warnings for [gs]etres[ug]id() functions.
Don't delete newlines from within quoted strings when modifying HTML.
Accept 'Transfer-Encoding: Chunked' instead of '... chunked'.
Increase the socket backlog to queue requests better.
Documentation changes for mailing lists, web-page and e-mail addresses.
Accept data from servers that use gzip encoding but don't send the tail.
Improve the error messages for gnutls problems. [*]
Some gnutls fixes and improvements. [*]
Fix an error with chunked encoding and compression from slow servers.
Fix HTML (and CSS) parsing problems related to media types.
Improvements:
Increase the root certificate and fake certificates to 2048 bits. [*]
Change the certificate hash function to SHA256 (SHA1 is deprecated). [*]
Use the SNI TLS extension for incoming and outgoing https connections. [*]
*NOTE* *These only apply if WWWOFFLE is compiled with SSL/https support*
PR: 212831 (based on) [1]
Submitted by: Jochen Neumeister [1]
