Unbound 1.5.6rc1 maintainers prerelease

Unbound
1

Hi,

Unbound 1.5.6rc1 maintainers prerelease is available:
http://www.unbound.net/downloads/unbound-1.5.6rc1.tar.gz
sha1 b657098c3878d85e9f3f23d6c39b81aaf7ddbc1e
sha256 2aa591c91ac8f9ddcd4c6c80d0862d37ee1b08c480af5874256d4e5394c30301
pgp http://www.unbound.net/downloads/unbound-1.5.6rc1.tar.gz.asc

This release fixes a (very) sporadic segfault in the dns64 module.
Also the default for ssl-encapsulated DNS service is the temporary
port assignment from IANA for this purpose, a different port can be
entered into the configuration file if necessary.

Features
- - Default for ssl-port is port 853, the temporary port assignment for
secure domain name system traffic. If you used to rely on the older
default of port 443, you have to put a clause in unbound.conf for
that. The new value is likely going to be the standardised port number
for this traffic.
- - ANY responses include DNAME records if present, as per Evan Hunt's
remark in dnsop.

Bug Fixes
- - Fix segfault in the dns64 module in the formaterror error path.
- - Fix manpage to suggest using SIGTERM to terminate the server.
- - iana portlist update.

Best regards, Wouter

2

Hmmm.

One use of this feature was not privacy but breaking through DNS
restrictions, for which 443 has a much higher chance of working.

Also, isn't the dprive dnsotls a different protocol from what unbound
currently implements?

Paul

3

Hi,

Unbound 1.5.6 is available:
http://www.unbound.net/downloads/unbound-1.5.6.tar.gz
sha1 b1e521669d6e5a3c1baf8b71dad070e38887162b
sha256 ad3823f5895f59da9e408ea273fcf81d8a76914c18864fba256d7f140b83e404
pgp http://www.unbound.net/downloads/unbound-1.5.6.tar.gz.asc

Also, http://www.unbound.net/downloads/unbound-1.5.6.zip and
http://www.unbound.net/downloads/unbound_setup_1.5.6.exe

This release fixes a (very) sporadic segfault in the dns64 module.
Also the default for ssl-encapsulated DNS service is the temporary
port assignment from IANA for this purpose, a different port can be
entered into the configuration file if necessary.

Features
- - Default for ssl-port is port 853, the temporary port assignment for
  secure domain name system traffic. If you used to rely on the older
  default of port 443, you have to put a clause in unbound.conf for
  that. The new value is likely going to be the standardised port number
  for this traffic.
- - ANY responses include DNAME records if present, as per Evan Hunt's
  remark in dnsop.

Bug Fixes
- - Fix segfault in the dns64 module in the formaterror error path.
- - Fix manpage to suggest using SIGTERM to terminate the server.
- - iana portlist update.

Best regards, Wouter