New BIND version released Jun-17-2004

There's 3 new releases

BIND 8.4.5 release candidate 5

Maintenance Release. nsupdate: The use of a blank line to cause a update request to be sent is deprecated. Use "send" instead.

BIND 9.2.4 release candidate 6

Maintenance release, containing fixes for a number of bugs in 9.2.3.

BIND 9.3.0 release candidate 2

BIND 9.3.0 has a number of new features over 9.2, including

DNSSEC is now DS based.
See doc/draft/draft-ietf-dnsext-dnssec-*.
DNSSEC lookaside validation.
check-names is now implemented.
rrset-order in more complete.
IPv4/IPv6 transition support, dual-stack-servers.
IXFR deltas can now be generated when loading master files, ixfr-from-differences.
It is now possible to specify the size of a journal, max-journal-size.
It is now possible to define a named set of master servers to be used in masters clause, masters.
The advertised EDNS UDP size can now be set, edns-udp-size.
allow-v6-synthesis has been obsoleted.

I was looking forward to these new features:

rndc retransfer zone [class [view]]
Retransfer a single zone without checking serial number.

rndc freeze zone [class [view]]
Suspend updates to a dynamic zone.

rndc unfreeze zone [class [view]]
Enable updates to a frozen dynamic zone and reload it.

named-checkzone can now write out the zone contents in a easily parsable format (-D and -o).

Logging has been improved!

Improved UPDATE prerequisite failure diagnostic messages.
Report the client's address when logging notify messages.
Identify recursive queries in the query log.
Report view when loading zones if it is not a standard view (_default or _bind).
Report view associated with client if it is not a standard view (_default or _bind).
Named now reports the TSIG extended error code when signature verification fails.
New categories 'update-security', 'delegation-only'.
Query log now says if the query was signed (S) or if EDNS was used (E).
Log TSIG key used w/ outgoing zone transfers.
Log that a zone transfer was covered by a TSIG.
Log successful notifies received (info). Adjust log level for failed notifies to notice.
log the reason for rejecting a server when resolving queries.
Log end of outgoing zone transfer at same level as the start of transfer is logged.
Log TSIG name on TSIG verify failure.

Other noteables

hostname.bind/txt/chaos now returns the name of the machine hosting the nameserver. This is useful in diagnosing problems with anycast servers.

Version and hostname queries can now be disabled using "version none;" and "hostname none;", respectively.

It is now possible to flush a given name from the cache(s) via 'rndc flushname name [view]'.

'rrset-order' partially works 'cyclic' and 'random' are supported.

dig, host and nslookup now use IP6.ARPA for nibble lookups. Bit string lookups are no longer attempted.

Listen-on-v6 now supports specific addresses.

remove support for bitstring labels.

ID.SERVER/CHAOS is now a built in zone. See "server-id" for how to configure.

The advertised EDNS UDP buffer size can now be set via named.conf (edns-udp-size).

$GENERATES now supports optional class and ttl.

Disable DNSSEC support by default. To enable DNSSEC specify "dnssec-enable yes;" in named.conf.

"check-names" is now implemented.