djbwares (12) stable; urgency=low
 
  * A bug in axfrdns and tinydns-get caused by mixed C function signatures has been fixed.
  * To eliminate more compiler warnings about type mis-matches, several Bernstein byte library routines have been replaced with new mem library routines or dns_packet library routines.
  * There is now an identd server.
  
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Sun, 24 Aug 2025 10:50:02 +0100

djbwares (11) stable; urgency=low
 
  * Important changes that need special attention:
    * Because of IP version 6, setting dnscache's IPSEND environment variable to 0.0.0.0 is no longer the correct default.
      To specify that the operating system pick the sending IP address, unset the IPSEND variable, which is no longer mandatory for dnscache.
    * Because of IP version 6, the memory requirements for dnscache have increased, and may exceed some resource limits if they are tightly constrained.
      If a dnscache service fails to start, try raising its data size limit.
    * Because of EDNS0, less DNS/TCP traffic will happen but more DNS/UDP traffic will, with larger datagram sizes.
      The knowledge of how this impacts firewalls has been around since at least 2004, and it is not the problem that it was two decades ago.
  * Documentation:
    * COPYING is updated.  No legal changes; but it's not really the case that it's a few minor modifications, now.
    * minor enhencements to some of the djbdns tools's documentation
    * There is now a djbdns-client manual.
    * There are several new chapters in the Guide on timekeeping, Internet publication with publicfile, and the Domain Name System.
  * Packages:
    * FreeBSD packaging now works for at least FreeBSD version 13.
      (Credit to Rune Morling for help testing the builds on FreeBSD 13.)
      The manifest file syntax on the pkg-create(8) manual page is a falsehood, with most items given in the wrong file format and some with the wrong names, and much of how this works is educated guesswork and experimentation.
      Likewise, NetBSD's pkg_create(1) manual page does not even document two of its input files (which cause complaints by pkg_info(1) if omitted) at all.
    * There is now a mechanism for overriding the compiler auto-detection if one really must.
    * Debian package-building now builds a (not quite right) source package.
    * The command-line tools for TAI-10 work have been split out of libtai, which is now a purely "development" package, into a new taitools package.
  * Tools:
    * pickdns, obsolete for 24 years and broken by IP version 6, has been removed from the toolset.
    * httpd and geminid now impose the filesystem path length limit as an additional URL maximum length limit.
    * httpd and geminid now reject URLs with query parts.
    * Several of httpd's 5xx rejection errors are now 4xx errors, because they are really client-end problems, not server problems.
    * ftpd now supports REIN.
    * There is now a dnsns command.
    * There is now a dnsqual command.
    * dnscache, rbldns, walldns, and tinydns now support the EDNS0 mechanism for DNS/UDP packets bigger than 512 octets.
    * All of the querying tools advertise their long DNS/UDP packet support.
    * dnscache will not query for, but will use if given, IP version 6 addresses for content DNS servers.
    * All of the querying tools support IP version 6 addresses in DNSCACHEIP and /etc/resolv.conf .
    * dnscache's maximum nested gluelessness limit has been raised from 2 to 3.
      Several common domain names nowdays involve resolving intermediate names in com., org., net., and info. before getting to the final nameservers.
      This easily and regularly exceeds dnscache's old limit, which would cause it to fall back to a slower query resolution algorithm at the third level.
    * A bug that prevented tinydns/axfrdns/tinydns-get from serving up CNAME chains with capital letters in has been fixed.
    * tinydns-data now has an H convenience shorthand for the HTTPS resource record type.
      The various diagnosis tools also recognize "https" as a query type.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Thu, 21 Aug 2025 17:05:48 +0100

djbwares (10) stable; urgency=low
 
  * dnsqrx no longer requires the Bourne Again shell.
  * pathexec_run now treats error_notdir as an uninteresting error.
  * walldns now handles IP version 6 lookups.
  * httpd no longer supports HTTP/0.9 and HTTP/1.1 by default.
  * Human-readable IP version 4 addresses no longer permit octet values greater than 255.
  * UCSPI and publicfile functions are now in two libraries.
  * axfrdns now logs individual queries just like tinydns making it easier to track cross-transport query patterns.
  * clockspeed now works (caveats on the manual page) on ARM processors.
  * DocBook XML manual pages are now installed by the packages.
  * There is now a geminid command.
  * httpd, ftpd, geminid, and gopherd all now initialize the leap seconds table before changing root, rather than trying to do it after.
  * Most K&R function definitions have been updated to the new 1989 style.
    The 2024 clang compiler warns that K&R is going away in 2023.
  * The original IP version 4 taiclockd is now taiclock4d.
    taiclockd is a combined-stack IPv6 tool.
  * There is now a Guide.
  * Similar to the treatment of the ANY resource record type, the ANY class for DNS requests is no longer (silently) supported and treated as matching the IN class.
  * The examples in the documentation no longer use Chinese (at the time of release) IP addresses and U.S.A. military domain names.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Sun, 27 Jul 2025 04:31:07 +0100

djbwares (9) stable; urgency=low
 
  * Fixed a build problem with the leapsecs_init.3 manual page.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Mon, 18 Mar 2019 20:56:42 +0000

djbwares (8) stable; urgency=low
 
  * various minor doco corrections
  * TXT and HINFO records are now printed in a more human-accessible form.
  * httpd now uses the text/xml content type for the .xml filename extension.
  * httpd now uses the application/xhtml+xml content type for the .xhtml filename extension.
  * All manuals are now DocBook XML and the missing tcp-environ manual is now present.
  * All DNS servers now synthesise HINFO non-responses to ANY queries.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Mon, 18 Mar 2019 07:52:30 +0000

djbwares (7) stable; urgency=low
 
  * A bug in tcpserver triggered when standard input is already closed, noted by Jorge Almeida, has been fixed.
  * dnscache now has a FORWARDFIRST mode.
  * Building now works even if one has a CDPATH.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.com>  Thu, 15 Feb 2018 17:19:10 +0000

djbwares (6) stable; urgency=low
 
  * dnscache now caches SOA resource records.
  * dnscache is now more efficient at caching AAAA resource records, now caching them without explicit data lengths like it does for A resource records.
  * dnscache now returns an AAAA address for localhost.
  * ftpd now supports OPTS, FEAT, and SIZE from RFC 3659.
  * ftpd now supports EPSV from RFC 2428.
  * ftpd now supports HOST from RFC 7151 with the same virtual hosting system as httpd.
  * ftpd now interoperates better with some (definitely broken, but alas widespread) FTP ALGs that do not like a 230 response to USER or a 202 response to PASS.
  * ftpd now interoperates better with some (definitely broken, but alas widespread) WWW browsers that expect CWD to fail on non-directories.
  * ftpd now logs the type of ls/cd/dir/read command.
  * An oversight in the commentary for dnscache-showctl and tinydns-showctl with reference to the copyright licence has been fixed.
  * The tinydns-data manual page now describes S records.
  * There is now a host command.
  * dnscache logging no longer prints A, AAAA, and SRV resource records in raw hexadecimal.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Sun, 06 Aug 2017 13:08:24 +0100

djbwares (5) stable; urgency=low
 
  * Added patches to enable using SSLREMOTEIP/SSLREMOTEPORT in server tools instead of TCPREMOTEIP/TCPREMOTEPORT, when PROTO says to do so.
  * Added several DocBook XML manual pages, and added HISTORY sections to manuals.
  * ip6.int has been replaced, very belatedly, by ip6.arpa in tinydns-data and dnscache .
  * Added gopherd.
  * Removed maps.vix.com as the compiled-in default for rblsmtpd.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Thu, 30 Mar 2017 16:40:05 +0100

djbwares (4) stable; urgency=low
 
  * Added easter, yearcal, and nowutc commands from the libtai package.
  * Added the remainder of the (PD) libtai library.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Fri, 02 Dec 2016 16:57:38 +0000

djbwares (3) stable; urgency=low
 
  * Added Michael Handler's SRV patch.
  * Extended SRV support to tinydns-get and dnsq.
  * Added the tinydns mmap() leak prevention patch.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Wed, 03 Aug 2016 14:57:58 +0100

djbwares (2) stable; urgency=low
 
  * First published version.
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Wed, 03 Aug 2016 14:57:58 +0100

djbwares (1.05-bis) stable; urgency=low
 
  *
 
 -- Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM>  Fri, 16 Aug 2013 00:00:00 +0000
