[MaraDNS] MaraDNS security update

Sam Trenholme maradns at gmail.com
Sun Jan 25 10:31:14 PST 2015


I have made three MaraDNS and Deadwood releases with an important security
update.

The issue is CERT VU#264212.  I have also incorporated other bug fixes.

==Deadwood 3.2.06 released==

* Security update: Better protection against malicious NS tarpits
* Removed two warnings generated by GCC 4.8.2
* Return the correct ID in SERVER FAIL errors
* Log a message when a RFC1918 IP is blocked from resolving
* Deadwood now ignores the CD and AD bits as defined in RFC2535 section 6.1
* SERVER FAILs no longer incorrectly sent when Deadwood gets a
  glueless NS referral
* The MacOS and Linux Makefiles now should make version.h correctly

==MaraDNS 2.0.10 released==

* Deadwood updated to 3.2.06 (security fix)
* Zoneserver now compiles and runs in Cygwin

==MaraDNS 1.4.15 released==

This is the legacy branch of MaraDNS. Please upgrade to MaraDNS 2.
This will probably be the final MaraDNS 1 release; all MaraDNS
1 support ends on June 21, 2015.

* Deadwood updated to 3.2.06
* Security update: max_glueless_level now defaults to 4 instead of 10

==Where to download==

http://maradns.samiam.org/download.html

https://github.com/samboy/MaraDNS

https://sourceforge.net/projects/maradns/


More information about the List mailing list