bind9 bind 9.18.18

[Bruce Dubbs]

New point version.

[Douglas R. Reno]

Notes for BIND 9.18.18

Feature Changes

When a primary server for a zone responds to an SOA query, but the subsequent TCP connection required to transfer the zone is refused, that server is marked as temporarily unreachable. This now also happens if the TCP connection attempt times out, preventing too many zones from queuing up on an unreachable server and allowing the refresh process to move on to the next configured primary more quickly.

The dialup and heartbeat-interval options have been deprecated and will be removed in a future BIND 9 release.

Bug Fixes

Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed.

Setting dnssec-policy to insecure prevented zones containing resource records with a TTL value larger than 86400 seconds (1 day) from being loaded. This has been fixed by ignoring the TTL values in the zone and using a value of 604800 seconds (1 week) as the maximum zone TTL in key rollover timing calculations.

Known Issues

There are no new known issues with this release. See above for a list of all known issues affecting this BIND 9 branch.

[Douglas R. Reno]

Fixed at 0116db666ad8f1d8df6d962fb4e5f8cc2c207740