From sam+i7tq5rg at chaosring.org  Fri Aug 17 13:38:24 2007
From: sam+i7tq5rg at chaosring.org (Sam Trenholme)
Date: Fri, 17 Aug 2007 17:38:24 +0000 (UTC)
Subject: [MARA] MaraDNS 1.2.12.07 release (stable release)
Message-ID: <20070817173824.C0B6ED754DD@mail.literati.org>

I released MaraDNS 1.2.12.07 yesterday, which is a stable release
of MaraDNS.  This is a bugfix release; a few minor bugs with MaraDNS
1.2.12.06 have been fixed with this release.

More details about this release are in the blog:

	http://www.maradns.org/blog

MaraDNS can be downloaded here:

	http://www.maradns.org/download.html

- Sam


From sam+i7tq5rg at chaosring.org  Wed Aug 29 17:42:11 2007
From: sam+i7tq5rg at chaosring.org (Sam Trenholme)
Date: Wed, 29 Aug 2007 21:42:11 +0000 (UTC)
Subject: [MARA] MaraDNS 1.2.12.08 release (stable release)
Message-ID: <20070829214211.869D6D75504@mail.literati.org>

Someone can send a specially crafted DNS packet to the DNS server that
will make an authoritative CNAME record not resolve. The workaround
to disable this denial of service is to add the following line to the
mararc file:

max_ar_chain = 2

The fix is to download MaraDNS 1.0.41/1.2.12.08/1.3.07.04,
which I just released, from the MaraDNS download page at
http://www.maradns.org/download.html or to download MaraDNS 1.2.12.08 from
the Sourceforge MaraDNS page at http://sourceforge.net/projects/maradns

All distributions are strongly encouraged to update to 1.2.12.08, or
to 1.0.41 if still using the 1.0 branch of MaraDNS. Please, remember,
1.0 users, that non-security bugfixes in MaraDNS 1.0 will no longer be
applied after December 21 of this year.

- Sam