BIND 9.7.3 Release Notes HP-UX 11i v3 (761997-001, January 2014)

Convenient syntax for already existing options like query-source, server
statement in rndc.conf
The syntax of notify-source for specifying the IP-address and port number can also be used now
for query-source.
New acl option “allow-query-cache”
New configuration option allow-query-cache is introduced to control answers to be provided
from the cache. In the previous version of BIND, BIND 9.3.2 by-default the access to the server’s
cache is available to all clients. But after the introduction of this option, the default behavior is to
restrict access to all clients. To switch on the default behavior as of BIND-9.3.2,
allow-query-cache any ; must be included in the global option statement.
Additional fields for already existing options like ixfr-from-differences
Configuration option ixfr-from-differences takes two new fields master and slave to
provided access for all masters and all slaves respectively, for using this feature. This can be set
at the view level.
Journal file names are configurable
New zone options journal is introduced in the zone statement, which can determine the filename
suffix for the journal file. Previously, it used to be “jnl” by default.
New control options for rndc like notify, sign, validation and querylog
The above new options have the following functionality:
• notify: Sends a NOTIFY signal to a particular zone.
• sign: If auto-dnssec options is enabled (i.e. not “off”). When nameserver is given this
control command, it searches the key-directory for new keys and if found resigns the zone.
• validation: Using this command DNSSEC validation can be enabled / disabled on the
fly.
• querylog: Used to enable / disable query logging on the fly.
Error messages are now more informative
The error messages in BIND 9.7.3 have been made more informative which helps to understand
the error more clearly.
Scope of some ACL (e.g. allow-update) was changed in named.conf.
In BIND 9.3, allow-update can only be set in the zone statement. In BIND 9.7.3, allow-update
can be set in the options and the view level.
New options to control behavior of DNS NOTIFY
The new options introduced for this purpose are:
• notify-delay: The delay between consecutive NOTIFY message can now be controlled
with this option
• notify master-only: New field master-only for the NOTIFY options was introduced. With
this option set, the server will send the NOTIFY message for only the master zones.
• notify-to-soa: If yes do not check the nameservers in the NS RRset against the SOA
MNAME.
10 BIND 9.7.3 release notes