From owner-freebsd-questions@FreeBSD.ORG Mon Sep 1 10:23:53 2008 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E86B0106564A for ; Mon, 1 Sep 2008 10:23:53 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id 4B7738FC14 for ; Mon, 1 Sep 2008 10:23:53 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.2/8.14.2) with ESMTP id m81ANTB8025196; Mon, 1 Sep 2008 11:23:37 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.7.0 smtp.infracaninophile.co.uk m81ANTB8025196 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infracaninophile.co.uk; s=200708; t=1220264618; bh=hotGGY6lgU9lOz xOy7lzQhBr5Uw3ZckFTrrpOZbSDx8=; h=Message-ID:Date:From:MIME-Version: To:CC:Subject:References:In-Reply-To:Content-Type:Cc:Content-Type: Date:From:In-Reply-To:Message-ID:Mime-Version:References:To; z=Mes sage-ID:=20<48BBC29B.6070008@infracaninophile.co.uk>|Date:=20Mon,=2 001=20Sep=202008=2011:23:23=20+0100|From:=20Matthew=20Seaman=20|Organization:=20Infracaninophile|User -Agent:=20Thunderbird=202.0.0.16=20(X11/20080726)|MIME-Version:=201 .0|To:=20Grant=20Peel=20|CC:=20Lars=20Kristian sen=20,=20questions@freebsd.org|Subject:=20Re:= 20BIND=20DNS=20Patching=20on=206.1,=206.2|References:=20<2008082918 2700.M90624@thenetnow.com><20080829193718.M43174@thenetnow.com>=09< 48B89671.6000809@adventuras.no>=20<9063D8A4068C46B4979BEA249CEDCA49 @GRANT>|In-Reply-To:=20<9063D8A4068C46B4979BEA249CEDCA49@GRANT>|X-E nigmail-Version:=200.95.6|Content-Type:=20multipart/signed=3B=20mic alg=3Dpgp-sha256=3B=0D=0A=20protocol=3D"application/pgp-signature"= 3B=0D=0A=20boundary=3D"------------enigB213FEB4252EFCE691C74956"; b=H7z7Z4VKa1D5Ou82RUnMInrEggN21YICSXfl9aYiBMTpBkgRjOVS+Mof2yjaYqp6b Y4e1ENSehIX3tH+ZIeJmkFHCWKTU+/DXbk9Suz9rUcEgKxB/wYvH6iz09GeLbHzDESF yGmquj3Ub+RYySvAWL5hxRHmt7v5DDDCjWhk1YU= Message-ID: <48BBC29B.6070008@infracaninophile.co.uk> Date: Mon, 01 Sep 2008 11:23:23 +0100 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 2.0.0.16 (X11/20080726) MIME-Version: 1.0 To: Grant Peel References: <20080829182700.M90624@thenetnow.com><20080829193718.M43174@thenetnow.com> <48B89671.6000809@adventuras.no> <9063D8A4068C46B4979BEA249CEDCA49@GRANT> In-Reply-To: <9063D8A4068C46B4979BEA249CEDCA49@GRANT> X-Enigmail-Version: 0.95.6 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigB213FEB4252EFCE691C74956" X-Virus-Scanned: ClamAV 0.93.3/8125/Mon Sep 1 09:41:58 2008 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VERIFIED,NO_RELAYS autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on happy-idiot-talk.infracaninophile.co.uk Cc: Lars Kristiansen , questions@freebsd.org Subject: Re: BIND DNS Patching on 6.1, 6.2 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Sep 2008 10:23:54 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigB213FEB4252EFCE691C74956 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Grant Peel wrote: > Hi all, >=20 > Thanks to Lars I have come up with the following (to upgrade BIND for=20 > the DNS caching issue)...(short of updateing all source). >=20 > Download the latest port BIND95.9.5.x (p2 I think), 9.5.0.2 -- correct. =20 > Extract it to the ports directory, >=20 > make -DWITH_REPLACE_BASE You should get an OPTIONS dialogue here which will allow you to achieve the required result. Use 'make config' to force the issue if necessary.= > make install > make clean >=20 > Is the above correct? Yes, that will work just fine. =20 > Also, >=20 > Will the installation leave all my current (BIND) configs alone? It will not trash /etc/namedb/named.conf -- actually, I think it won't touch anything under /etc/namedb so it should 'just work' with your existing configuration. Remember to remove any 'port 53' clauses from 'query source' statements in named.conf or this will all have been for=20 nothing. If you're going to do the 'REPLACE_BASE' thing, then you should add =20 WITHOUT_BIND=3Dyes to /etc/make.conf (/etc/src.conf in 7.x and above) -- otherwise you'll revert to the system version of BIND whenever you update. There are half a dozen BIND related make flags that you can pick and choose from if= you want finer control. Alternatively, you can leave the base system as-is, install the port under /usr/local as usual, and just use variables like the following in=20 /etc/rc.conf: named_enable=3D"YES" named_program=3D"/usr/local/sbin/named" named_flags=3D"-c /etc/namedb/named.conf" This means you'll run named-2.5.0.2 from the port (which is the important= =20 bit) but unless you fiddle with your $PATH, you'll tend to get all the=20 adjunct programs like dig, host, rndc from the base system. Either way, it should all be pretty seamless. Which way you choose is a = matter of taste and convenience rather than necessity. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enigB213FEB4252EFCE691C74956 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREIAAYFAki7wqEACgkQ8Mjk52CukIwDVwCdFEsKs6m7QrKLCE1YutjnS0iI nogAn0TCs5N4IDckn9ckaRJTu2GzXxSV =aexJ -----END PGP SIGNATURE----- --------------enigB213FEB4252EFCE691C74956--