BSD Ports

dns/bind920 9.20.30 FreeBSD

BIND DNS suite with updated DNSSEC and DNS64

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
07723360fc
License
MPL20
Categories
dns, net
Package size
9173.3 KiB, 23963.6 KiB installed

Description

BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are:

DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support

See the CHANGES file for more information on new features.

In the other systems

SystemPortVersion
FreeBSDdns/bind9209.20.30
DragonFlydns/bind9209.20.10
MidnightBSDdns/bind9209.20.30

Install

Binary package:

pkg install bind920

From the ports tree:

cd /usr/ports/dns/bind920/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	bind920>0:dns/bind920
LIB_DEPENDS=	libdns-9.20.30.so:dns/bind920

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest9.20.299.20.29-9.20.129.20.29
FreeBSD:14:quarterly9.20.299.20.29n/a9.20.129.20.29
FreeBSD:15:latest9.20.299.20.29n/a9.20.119.20.12
FreeBSD:15:quarterly9.20.299.20.29n/an/an/a
FreeBSD:16:latest9.20.299.20.29n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

As this port's Makefile names them.

Library 3

The full lists below include those, and their dependencies in turn.

Build dependencies 62
Run dependencies 18
Required by 1

Configuration

Options name: dns_bind

OptionDefaultDescription
DNSTAPonProvides fast passive logging of DNS messages
DOCSoffBuild and/or install documentation
FIXED_RRSEToffEnable fixed rrset ordering
GEOIPoffGeoIP IP location support
GSSAPI_BASEoffUsing ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}
GSSAPI_HEIMDALoffUsing security/heimdal (nsupdate is broken)
GSSAPI_MIToffUsing security/krb5
GSSAPI_NONEoffDisable
IDNonInternational Domain Names support
LARGE_FILEoff64-bit file support
LMDBonUse LMDB for zone management
OVERRIDECACHEoffUse the override-cache patch
QUERYTRACEoffEnable the very verbose query tracelogging
START_LATEoffStart BIND late in the boot process (see help)
STATS_JSONonEnable JSON statistics channel
STATS_XMLonEnable XML statistics channel
TCP_FASTOPENonRFC 7413 support
USES
autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl tar:xz
Service scripts
none

Message after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

Files

Manual pages 14
  • ddns-confgen(8)
  • filter-a(8)
  • filter-aaaa(8)
  • named(8)
  • named-checkconf(1)
  • named-checkzone(1)
  • named-compilezone(1)
  • named-journalprint(1)
  • named-nzd2nzf(1)
  • named.conf(5)
  • rndc(8)
  • rndc-confgen(8)
  • rndc.conf(5)
  • tsig-keygen(8)
pkg-plist 274
  • bin/named-checkconf
  • bin/named-checkzone
  • bin/named-compilezone
  • bin/named-journalprint
  • bin/named-nzd2nzf
  • @sample etc/mtree/BIND.chroot.dist.sample
  • @sample etc/mtree/BIND.chroot.local.dist.sample
  • @sample etc/bind920/named.conf.sample
  • etc/bind920/named.root
  • etc/bind920/primary/empty.db
  • etc/bind920/primary/localhost-forward.db
  • etc/bind920/primary/localhost-reverse.db
  • include/dns/acl.h
  • include/dns/adb.h
  • include/dns/badcache.h
  • include/dns/bit.h
  • include/dns/byaddr.h
  • include/dns/cache.h
  • include/dns/callbacks.h
  • include/dns/catz.h
  • include/dns/cert.h
  • include/dns/client.h
  • include/dns/clientinfo.h
  • include/dns/compress.h
  • include/dns/db.h
  • include/dns/dbiterator.h
  • include/dns/diff.h
  • include/dns/dispatch.h
  • include/dns/dlz.h
  • include/dns/dlz_dlopen.h
  • include/dns/dns64.h
  • include/dns/dnsrps.h
  • include/dns/dnssec.h
  • include/dns/dnstap.h
  • include/dns/ds.h
  • include/dns/dsdigest.h
  • include/dns/dsync.h
  • include/dns/dyndb.h
  • include/dns/ecs.h
  • include/dns/ede.h
  • include/dns/edns.h
  • include/dns/enumclass.h
  • include/dns/enumtype.h
  • include/dns/fixedname.h
  • include/dns/forward.h
  • include/dns/geoip.h
  • include/dns/ipkeylist.h
  • include/dns/iptable.h
  • include/dns/journal.h
  • include/dns/kasp.h
  • include/dns/keydata.h
  • include/dns/keyflags.h
  • include/dns/keymgr.h
  • include/dns/keystore.h
  • include/dns/keytable.h
  • include/dns/keyvalues.h
  • include/dns/librpz.h
  • include/dns/log.h
  • include/dns/master.h
  • include/dns/masterdump.h
  • include/dns/message.h
  • include/dns/name.h
  • include/dns/nametree.h
  • include/dns/ncache.h
  • include/dns/nsec.h
  • include/dns/nsec3.h
  • include/dns/nta.h
  • include/dns/opcode.h
  • include/dns/order.h
  • include/dns/peer.h
  • include/dns/private.h
  • include/dns/qp.h
  • include/dns/rbt.h
  • include/dns/rcode.h
  • include/dns/rdata.h
  • include/dns/rdataclass.h
  • include/dns/rdatalist.h
  • include/dns/rdataset.h
  • include/dns/rdatasetiter.h
  • include/dns/rdataslab.h
  • include/dns/rdatastruct.h
  • include/dns/rdatatype.h
  • include/dns/remote.h
  • include/dns/request.h
  • include/dns/resolver.h
  • include/dns/result.h
  • include/dns/rootns.h
  • include/dns/rpz.h
  • include/dns/rriterator.h
  • include/dns/rrl.h
  • include/dns/sdlz.h
  • include/dns/secalg.h
  • include/dns/secproto.h
  • include/dns/skr.h
  • include/dns/soa.h
  • include/dns/ssu.h
  • include/dns/stats.h
  • include/dns/time.h
  • include/dns/tkey.h
  • include/dns/trace.h

The first 100 are listed.

distinfo 1
FileSizeSHA256
bind-9.20.30.tar.xz6.004232e+069e1443a40a72a30272cbc3196d020a6b2e26937111c83e59e101e82e1e3b4fef
Master sites 1
  • ISC/bind9/9.20.30

Commit history 8

DateCommitCreditsLog message
07723360fc Mathieu Arnold dns/bind920: update to 9.20.30
Changes: https://downloads.isc.org/isc/bind9/9.20.30/doc/arm/html/notes.html#notes-for-bind-9-20-30 Security: CVE-2026-19630 CVE-2026-94300 CVE-2026-96888 CVE-2026-97313
85ba298b7e Baptiste Daroussin databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are incompatibles as well. Rename or relocate everything databases/lmdb0 installs so that it no longer overlaps with databases/lmdb: - the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0 - the header is include/lmdb0/lmdb.h - the linker name is liblmdb0.so, the shared object keeps its ABI name liblmdb.so.0 so already linked programs are unaffected - the pkg-config file is lmdb0.pc A compatibility prefix holding the previous layout is also installed under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that build systems which expect to find lmdb.h and -llmdb relative to a single directory only need a path change. Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease …
0768760099 Mathieu Arnold *: pet portfmt
076689704f Mathieu Arnold dns/bind920: update to 9.20.29
Changes: https://downloads.isc.org/isc/bind9/9.20.29/doc/arm/html/notes.html#notes-for-bind-9-20-28 Security: CVE-2026-19668 CVE-2026-19033 CVE-2026-77119 CVE-2026-19941 CVE-2026-19666 CVE-2026-19667 CVE-2026-19662 CVE-2026-75029 CVE-2026-77692 CVE-2026-81736 CVE-2026-76163 CVE-2026-78301 CVE-2026-80274 CVE-2026-81563
0760935063 Mathieu Arnold dns/bind9*: building with heimdal is broken on 15+

The latest 5 of 8 in the history this site was built from.