Just wanted to say congrats to Bert and everyone who worked on this! The ability to script is huge; there are too many companies out there that charge thousand upon thousands of dollars for a boxed solution, including 'special' hardware, to filter out malware domains and NXDOMAIN redirection, when all people really need now is this latest release of pdns ;)<div>
<br></div><div>Take care-</div><div><br></div><div>Chet</div><div><br><div class="gmail_quote">On Wed, Jun 25, 2008 at 4:12 AM, bert hubert <<a href="mailto:bert.hubert@netherlabs.nl">bert.hubert@netherlabs.nl</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Available on:<br>
<a href="http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.tar.bz2" target="_blank">http://downloads.powerdns.com/releases/pdns-recursor-3.1.7.tar.bz2</a><br>
<a href="http://downloads.powerdns.com/releases/deb/pdns-recursor_3.1.7-1_i386.deb" target="_blank">http://downloads.powerdns.com/releases/deb/pdns-recursor_3.1.7-1_i386.deb</a><br>
<a href="http://downloads.powerdns.com/releases/deb/pdns-recursor_3.1.7-1_amd64.deb" target="_blank">http://downloads.powerdns.com/releases/deb/pdns-recursor_3.1.7-1_amd64.deb</a><br>
<br>
<a href="http://downloads.powerdns.com/releases/rpm/pdns-recursor-3.1.7-1.i386.rpm" target="_blank">http://downloads.powerdns.com/releases/rpm/pdns-recursor-3.1.7-1.i386.rpm</a><br>
<a href="http://downloads.powerdns.com/releases/rpm/pdns-recursor-3.1.7-1.x86_64.rpm" target="_blank">http://downloads.powerdns.com/releases/rpm/pdns-recursor-3.1.7-1.x86_64.rpm</a><br>
<br>
Release notes (clickable version on <a href="http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-7" target="_blank">http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-1-7</a> )<br>
<br>
This version contains powerful scripting abilities, allowing operators to<br>
modify DNS responses in many interesting ways. Among other things, these<br>
abilities can be used to filter out malware domains, to perform load<br>
balancing, to comply with legal and other requirements and finally, to<br>
implement 'NXDOMAIN' redirection.<br>
<br>
It is hoped that the addition of Lua scripting will enable responsible DNS<br>
modification for those that need it.<br>
<br>
For more details about the Lua scripting, which can be modified, loaded<br>
and unloaded at runtime, see Section 12.6. Many thanks are due to the #lua<br>
irc channel, for excellent near-realtime Lua support. In addition, a<br>
number of PowerDNS users have been enthousiastically testing prereleases<br>
of the scripting support, and have found and solved many issues.<br>
<br>
In addition, 3.1.7 fixes a number of bugs:<br>
<br>
* In 3.1.5 and 3.1.6, an authoritative server could continue to renew<br>
its authority, even though a domain had been delegated to other<br>
servers in the meantime.<br>
<br>
In the rare cases where this happened, and the old servers were not<br>
shut down, the observed effect is that users were fed outdated data.<br>
<br>
Bug spotted and analysed by Darren Gamble, fix in commit 1182 and<br>
commit 1183.<br>
<br>
* Thanks to long time PowerDNS contributor Stefan Arentz, for the first<br>
time, Mac OS X 10.5 users can compile and run the PowerDNS Recursor!<br>
Patch in commit 1185.<br>
<br>
* Sten Spans spotted that for outgoing TCP/IP queries, the<br>
query-local-address setting was not honored. Fixed in commit 1190.<br>
<br>
* rec_control wipe-cache now also wipes domains from the negative cache,<br>
hurrying up the expiry of negatively cached records. Suggested by<br>
Simon Kirby, implemented in commit 1204.<br>
<br>
* When a forwarder server is configured for a domain, using the<br>
forward-zones setting, this server IP address was filtered using the<br>
dont-query setting, which is generally not what is desired: the server<br>
to which queries are forwarded will often live in private IP space,<br>
and the operator should be trusted to know what he is doing. Reported<br>
and argued by Simon Kirby, fix in commit 1211.<br>
<br>
* Marcus Rueckert of OpenSUSE reported that very recent gcc versions<br>
emitted a (correct) warning on an overly complicated line in<br>
syncres.cc, fixed in commit 1189.<br>
<br>
* Stefan Schmidt discovered that the netmask matching code, used by the<br>
new Lua scripts, but also by all other parts of PowerDNS, had problems<br>
with explicit '/32' matches. Fixed in commit 1205.<br>
<font color="#888888"><br>
<br>
--<br>
<a href="http://www.PowerDNS.com" target="_blank">http://www.PowerDNS.com</a> Open source, database driven DNS Software<br>
<a href="http://netherlabs.nl" target="_blank">http://netherlabs.nl</a> Open and Closed source services<br>
_______________________________________________<br>
Pdns-dev mailing list<br>
<a href="mailto:Pdns-dev@mailman.powerdns.com">Pdns-dev@mailman.powerdns.com</a><br>
<a href="http://mailman.powerdns.com/mailman/listinfo/pdns-dev" target="_blank">http://mailman.powerdns.com/mailman/listinfo/pdns-dev</a><br>
</font></blockquote></div><br><br clear="all"><br>-- <br>----------------------------------------<br>chet nichols III<br><a href="mailto:chet.nichols@gmail.com">chet.nichols@gmail.com</a><br>aim: chet / twitter: chet<br>
<a href="http://chetnichols.org">http://chetnichols.org</a><br>----------------------------------------
</div>