diff --git a/FAQ b/FAQ index ed6ec56b8f..29475d47a1 100644 --- a/FAQ +++ b/FAQ @@ -92,7 +92,7 @@ Q: I'm trying to use TSIG to authenticate dynamic updates or zone rejecting the TSIG. Why? A: This may be a clock skew problem. Check that the the clocks on the - client and server are properly synchronised (e.g., using ntp). + client and server are properly synchronized (e.g., using ntp). Q: I see a log message like the following. Why? diff --git a/FAQ.xml b/FAQ.xml index cd216e6ec5..8bcd677eb1 100644 --- a/FAQ.xml +++ b/FAQ.xml @@ -220,7 +220,7 @@ view "chaos" chaos { This may be a clock skew problem. Check that the the clocks - on the client and server are properly synchronised (e.g., + on the client and server are properly synchronized (e.g., using ntp). diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index b8e462dd25..0df98fb9e2 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -123,12 +123,14 @@

Note

+

As a slave zone can also be a master to other slaves, named, by default, sends NOTIFY messages for every zone it loads. Specifying notify master-only; will cause named to only send NOTIFY for master zones that it loads. -

+

+

@@ -1050,9 +1052,11 @@ options {

Note

+

None of the keys listed in this example are valid. In particular, the root key is not valid. -

+

+

When DNSSEC validation is enabled and properly configured, the resolver will reject any answers from signed, secure zones diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index ed96615cbc..efd8ca7d55 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -3410,7 +3410,6 @@ options { queries. Caching may still occur as an effect the server's internal operation, such as NOTIFY address lookups. - See also fetch-glue above.

request-nsid

@@ -4691,13 +4690,15 @@ avoid-v6-udp-ports {};

Note

+

If you do not wish the alternate transfer source to be used, you should set use-alt-transfer-source appropriately and you should not depend upon getting an answer back to the first refresh query. -

+

+
alt-transfer-source-v6

@@ -5955,11 +5956,13 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };

Note

+

The real parent servers for these zones should disable all empty zone under the parent zone they serve. For the real root servers, this is all built-in empty zones. This will enable them to return referrals to deeper in the tree. -

+

+
empty-server

@@ -8475,7 +8478,7 @@ example.com. NS ns2.example.net. The name field is subject to DNS wildcard expansion, and this rule matches when the name being updated - name is a valid expansion of the wildcard. + is a valid expansion of the wildcard.

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 9da5f94c64..eded6c98fa 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -181,10 +181,12 @@ zone "example.com" {

Note

- Note that if the named daemon is running as an +

+ If the named daemon is running as an unprivileged user, it will not be able to bind to new restricted ports if the server is reloaded. -

+

+
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index c5fef3907b..d41334c829 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -88,7 +88,7 @@ records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed - in CVE-2015-8000. [RT #4098] + in CVE-2015-8000. [RT #40987]

  • An incorrect boundary check in the OPENPGPKEY rdatatype @@ -190,6 +190,9 @@

    Feature Changes

      +

    • + Updated the complied in addresses for H.ROOT-SERVERS.NET. +

    • Large inline-signing changes should be less disruptive. Signature generation is now done incrementally; the number diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 2b2f7bcaa6..1db8f0a241 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -49,7 +49,7 @@ records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. This flaw is disclosed - in CVE-2015-8000. [RT #4098] + in CVE-2015-8000. [RT #40987]

    • An incorrect boundary check in the OPENPGPKEY rdatatype @@ -151,6 +151,9 @@

      Feature Changes

        +

      • + Updated the complied in addresses for H.ROOT-SERVERS.NET. +

      • Large inline-signing changes should be less disruptive. Signature generation is now done incrementally; the number