BIND 9.2.2-P2 is now available.

BIND 9.2.2-P2 is now available.

In response to high demand from our users, ISC is releasing a patch for BIND
to support the declaration of "delegation-only" zones in caching/recursive
name servers. Briefly, a zone which has been declared "delegation-only" will
be effectively limited to containing NS RRs for subdomains, but no actual
data outside its apex (for example, its SOA RR and apex NS RRset). This can
be used to filter out "wildcard" or "synthesized" data from NAT boxes or from
authoritative name servers whose undelegated (in-zone) data is of no interest.

BIND 9.2.2-P2 can be downloaded from

ftp://ftp.isc.org/isc/bind9/9.2.2-P2....2.2-P2.tar.gz

The PGP signature of the distribution is at

ftp://ftp.isc.org/isc/bind9/9.2.2-P2...-P2.tar.gz.asc

The signature was generated with the ISC public key, which is
available at <http://www.isc.org/ISC/isckey.txt>.

Top of CHANGES

--- 9.2.2-P2 released ---

1509. [bug] Hint zones should accept delegation-only. Forward
zone should not accept delegation-only.

1508. [bug] Don't apply delegation-only checks to answers from
forwarders.

1507. [bug] Handle BIND 8 style returns to NS queries to parents
when making delegation-only checks.

1506. [bug] Wrong return type for dns_view_isdelegationonly().

--- 9.2.2-P1 released ---

1504. [func] New zone type "delegation-only".

--- 9.2.2 released ---