Apply patch (requested by spz in ticket #1449): netbsd-6
authorsnj <snj@NetBSD.org>
Tue, 25 Apr 2017 19:54:07 +0000
branchnetbsd-6
changeset 257482 2be21b9dcdf6
parent 257481 31843c19b4cf
child 257483 385f35424561
Apply patch (requested by spz in ticket #1449): Update BIND to 9.9.9-P8 Security issues fixed with this update: CVE-2015-8704 CVE-2016-1285 CVE-2016-1286 CVE-2016-2775 CVE-2016-2776 CVE-2016-8864 CVE-2016-9131 CVE-2016-9147 CVE-2016-9444 CVE-2017-3135 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 The update also contains numerous bug fixes as well as changes to comply with recent RFCs.
external/bsd/bind/dist/CHANGES
external/bsd/bind/dist/COPYRIGHT
external/bsd/bind/dist/FAQ
external/bsd/bind/dist/FAQ.xml
external/bsd/bind/dist/Makefile.in
external/bsd/bind/dist/README
external/bsd/bind/dist/acconfig.h
external/bsd/bind/dist/bin/check/Makefile.in
external/bsd/bind/dist/bin/check/check-tool.c
external/bsd/bind/dist/bin/check/named-checkconf.8
external/bsd/bind/dist/bin/check/named-checkconf.c
external/bsd/bind/dist/bin/check/named-checkconf.docbook
external/bsd/bind/dist/bin/check/named-checkconf.html
external/bsd/bind/dist/bin/check/named-checkzone.8
external/bsd/bind/dist/bin/check/named-checkzone.c
external/bsd/bind/dist/bin/check/named-checkzone.docbook
external/bsd/bind/dist/bin/check/named-checkzone.html
external/bsd/bind/dist/bin/confgen/Makefile.in
external/bsd/bind/dist/bin/confgen/ddns-confgen.8
external/bsd/bind/dist/bin/confgen/ddns-confgen.docbook
external/bsd/bind/dist/bin/confgen/ddns-confgen.html
external/bsd/bind/dist/bin/confgen/keygen.c
external/bsd/bind/dist/bin/confgen/rndc-confgen.8
external/bsd/bind/dist/bin/confgen/rndc-confgen.docbook
external/bsd/bind/dist/bin/confgen/rndc-confgen.html
external/bsd/bind/dist/bin/confgen/util.c
external/bsd/bind/dist/bin/dig/Makefile.in
external/bsd/bind/dist/bin/dig/dig.1
external/bsd/bind/dist/bin/dig/dig.c
external/bsd/bind/dist/bin/dig/dig.docbook
external/bsd/bind/dist/bin/dig/dig.html
external/bsd/bind/dist/bin/dig/dighost.c
external/bsd/bind/dist/bin/dig/host.1
external/bsd/bind/dist/bin/dig/host.docbook
external/bsd/bind/dist/bin/dig/host.html
external/bsd/bind/dist/bin/dig/nslookup.1
external/bsd/bind/dist/bin/dig/nslookup.c
external/bsd/bind/dist/bin/dig/nslookup.docbook
external/bsd/bind/dist/bin/dig/nslookup.html
external/bsd/bind/dist/bin/dnssec/Makefile.in
external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.8
external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.c
external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-dsfromkey.html
external/bsd/bind/dist/bin/dnssec/dnssec-importkey.8
external/bsd/bind/dist/bin/dnssec/dnssec-importkey.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-importkey.html
external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.8
external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-keyfromlabel.html
external/bsd/bind/dist/bin/dnssec/dnssec-keygen.8
external/bsd/bind/dist/bin/dnssec/dnssec-keygen.c
external/bsd/bind/dist/bin/dnssec/dnssec-keygen.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-keygen.html
external/bsd/bind/dist/bin/dnssec/dnssec-revoke.8
external/bsd/bind/dist/bin/dnssec/dnssec-revoke.c
external/bsd/bind/dist/bin/dnssec/dnssec-revoke.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-revoke.html
external/bsd/bind/dist/bin/dnssec/dnssec-settime.8
external/bsd/bind/dist/bin/dnssec/dnssec-settime.c
external/bsd/bind/dist/bin/dnssec/dnssec-settime.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-settime.html
external/bsd/bind/dist/bin/dnssec/dnssec-signzone.8
external/bsd/bind/dist/bin/dnssec/dnssec-signzone.c
external/bsd/bind/dist/bin/dnssec/dnssec-signzone.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-signzone.html
external/bsd/bind/dist/bin/dnssec/dnssec-verify.8
external/bsd/bind/dist/bin/dnssec/dnssec-verify.docbook
external/bsd/bind/dist/bin/dnssec/dnssec-verify.html
external/bsd/bind/dist/bin/named/Makefile.in
external/bsd/bind/dist/bin/named/bind.keys.h
external/bsd/bind/dist/bin/named/client.c
external/bsd/bind/dist/bin/named/config.c
external/bsd/bind/dist/bin/named/control.c
external/bsd/bind/dist/bin/named/controlconf.c
external/bsd/bind/dist/bin/named/include/named/log.h
external/bsd/bind/dist/bin/named/include/named/lwdclient.h
external/bsd/bind/dist/bin/named/include/named/main.h
external/bsd/bind/dist/bin/named/include/named/query.h
external/bsd/bind/dist/bin/named/include/named/server.h
external/bsd/bind/dist/bin/named/interfacemgr.c
external/bsd/bind/dist/bin/named/logconf.c
external/bsd/bind/dist/bin/named/lwdclient.c
external/bsd/bind/dist/bin/named/lwdgrbn.c
external/bsd/bind/dist/bin/named/lwresd.8
external/bsd/bind/dist/bin/named/lwresd.c
external/bsd/bind/dist/bin/named/lwresd.docbook
external/bsd/bind/dist/bin/named/lwresd.html
external/bsd/bind/dist/bin/named/main.c
external/bsd/bind/dist/bin/named/named.8
external/bsd/bind/dist/bin/named/named.conf.5
external/bsd/bind/dist/bin/named/named.conf.docbook
external/bsd/bind/dist/bin/named/named.conf.html
external/bsd/bind/dist/bin/named/named.docbook
external/bsd/bind/dist/bin/named/named.html
external/bsd/bind/dist/bin/named/query.c
external/bsd/bind/dist/bin/named/server.c
external/bsd/bind/dist/bin/named/statschannel.c
external/bsd/bind/dist/bin/named/unix/include/named/os.h
external/bsd/bind/dist/bin/named/unix/os.c
external/bsd/bind/dist/bin/named/update.c
external/bsd/bind/dist/bin/named/xfrout.c
external/bsd/bind/dist/bin/nsupdate/Makefile.in
external/bsd/bind/dist/bin/nsupdate/nsupdate.1
external/bsd/bind/dist/bin/nsupdate/nsupdate.c
external/bsd/bind/dist/bin/nsupdate/nsupdate.docbook
external/bsd/bind/dist/bin/nsupdate/nsupdate.html
external/bsd/bind/dist/bin/pkcs11/openssl-0.9.8zc-patch
external/bsd/bind/dist/bin/pkcs11/openssl-0.9.8zh-patch
external/bsd/bind/dist/bin/pkcs11/openssl-1.0.0o-patch
external/bsd/bind/dist/bin/pkcs11/openssl-1.0.0t-patch
external/bsd/bind/dist/bin/pkcs11/openssl-1.0.1j-patch
external/bsd/bind/dist/bin/pkcs11/openssl-1.0.1q-patch
external/bsd/bind/dist/bin/pkcs11/openssl-1.0.2f-patch
external/bsd/bind/dist/bin/pkcs11/pkcs11-destroy.8
external/bsd/bind/dist/bin/pkcs11/pkcs11-destroy.c
external/bsd/bind/dist/bin/pkcs11/pkcs11-destroy.docbook
external/bsd/bind/dist/bin/pkcs11/pkcs11-destroy.html
external/bsd/bind/dist/bin/pkcs11/pkcs11-keygen.8
external/bsd/bind/dist/bin/pkcs11/pkcs11-keygen.c
external/bsd/bind/dist/bin/pkcs11/pkcs11-keygen.docbook
external/bsd/bind/dist/bin/pkcs11/pkcs11-keygen.html
external/bsd/bind/dist/bin/pkcs11/pkcs11-list.8
external/bsd/bind/dist/bin/pkcs11/pkcs11-list.c
external/bsd/bind/dist/bin/pkcs11/pkcs11-list.docbook
external/bsd/bind/dist/bin/pkcs11/pkcs11-list.html
external/bsd/bind/dist/bin/python/dnssec-checkds.8
external/bsd/bind/dist/bin/python/dnssec-checkds.docbook
external/bsd/bind/dist/bin/python/dnssec-checkds.html
external/bsd/bind/dist/bin/python/dnssec-checkds.py.in
external/bsd/bind/dist/bin/python/dnssec-coverage.8
external/bsd/bind/dist/bin/python/dnssec-coverage.docbook
external/bsd/bind/dist/bin/python/dnssec-coverage.html
external/bsd/bind/dist/bin/python/dnssec-coverage.py.in
external/bsd/bind/dist/bin/rndc/Makefile.in
external/bsd/bind/dist/bin/rndc/rndc.8
external/bsd/bind/dist/bin/rndc/rndc.c
external/bsd/bind/dist/bin/rndc/rndc.conf.5
external/bsd/bind/dist/bin/rndc/rndc.conf.docbook
external/bsd/bind/dist/bin/rndc/rndc.conf.html
external/bsd/bind/dist/bin/rndc/rndc.docbook
external/bsd/bind/dist/bin/rndc/rndc.html
external/bsd/bind/dist/bin/rndc/util.c
external/bsd/bind/dist/bin/tests/Makefile.in
external/bsd/bind/dist/bin/tests/adb_test.c
external/bsd/bind/dist/bin/tests/atomic/t_atomic.c
external/bsd/bind/dist/bin/tests/backtrace_test.c
external/bsd/bind/dist/bin/tests/byaddr_test.c
external/bsd/bind/dist/bin/tests/byname_test.c
external/bsd/bind/dist/bin/tests/cfg_test.c
external/bsd/bind/dist/bin/tests/compress_test.c
external/bsd/bind/dist/bin/tests/db/t_db.c
external/bsd/bind/dist/bin/tests/db_test.c
external/bsd/bind/dist/bin/tests/dst/dst_test.c
external/bsd/bind/dist/bin/tests/entropy2_test.c
external/bsd/bind/dist/bin/tests/entropy_test.c
external/bsd/bind/dist/bin/tests/fromhex.pl
external/bsd/bind/dist/bin/tests/fsaccess_test.c
external/bsd/bind/dist/bin/tests/gxba_test.c
external/bsd/bind/dist/bin/tests/gxbn_test.c
external/bsd/bind/dist/bin/tests/hash_test.c
external/bsd/bind/dist/bin/tests/inter_test.c
external/bsd/bind/dist/bin/tests/keyboard_test.c
external/bsd/bind/dist/bin/tests/lex_test.c
external/bsd/bind/dist/bin/tests/lfsr_test.c
external/bsd/bind/dist/bin/tests/log_test.c
external/bsd/bind/dist/bin/tests/lwres_test.c
external/bsd/bind/dist/bin/tests/lwresconf_test.c
external/bsd/bind/dist/bin/tests/master_test.c
external/bsd/bind/dist/bin/tests/name_test.c
external/bsd/bind/dist/bin/tests/names/t_names.c
external/bsd/bind/dist/bin/tests/net/driver.c
external/bsd/bind/dist/bin/tests/net/netaddr_multicast.c
external/bsd/bind/dist/bin/tests/nsecify.c
external/bsd/bind/dist/bin/tests/printmsg.c
external/bsd/bind/dist/bin/tests/printmsg.h
external/bsd/bind/dist/bin/tests/ratelimiter_test.c
external/bsd/bind/dist/bin/tests/rbt/t_rbt.c
external/bsd/bind/dist/bin/tests/rbt_test.c
external/bsd/bind/dist/bin/tests/rdata_test.c
external/bsd/bind/dist/bin/tests/serial_test.c
external/bsd/bind/dist/bin/tests/sig0_test.c
external/bsd/bind/dist/bin/tests/sock_test.c
external/bsd/bind/dist/bin/tests/sym_test.c
external/bsd/bind/dist/bin/tests/system/Makefile.in
external/bsd/bind/dist/bin/tests/system/README
external/bsd/bind/dist/bin/tests/system/acl/clean.sh
external/bsd/bind/dist/bin/tests/system/addzone/clean.sh
external/bsd/bind/dist/bin/tests/system/addzone/ns2/named2.conf
external/bsd/bind/dist/bin/tests/system/addzone/tests.sh
external/bsd/bind/dist/bin/tests/system/allow_query/clean.sh
external/bsd/bind/dist/bin/tests/system/autosign/clean.sh
external/bsd/bind/dist/bin/tests/system/builtin/Makefile.in
external/bsd/bind/dist/bin/tests/system/builtin/gethostname.c
external/bsd/bind/dist/bin/tests/system/builtin/tests.sh
external/bsd/bind/dist/bin/tests/system/cacheclean/clean.sh
external/bsd/bind/dist/bin/tests/system/cacheclean/tests.sh
external/bsd/bind/dist/bin/tests/system/case/clean.sh
external/bsd/bind/dist/bin/tests/system/checkconf/clean.sh
external/bsd/bind/dist/bin/tests/system/checkconf/good-acl.conf
external/bsd/bind/dist/bin/tests/system/checkconf/good-class.conf
external/bsd/bind/dist/bin/tests/system/checkconf/good.conf
external/bsd/bind/dist/bin/tests/system/checkconf/portrange-good.conf
external/bsd/bind/dist/bin/tests/system/checkconf/tests.sh
external/bsd/bind/dist/bin/tests/system/checkconf/view-class-any1.conf
external/bsd/bind/dist/bin/tests/system/checkconf/view-class-any2.conf
external/bsd/bind/dist/bin/tests/system/checkconf/view-class-in1.conf
external/bsd/bind/dist/bin/tests/system/checkconf/view-class-in2.conf
external/bsd/bind/dist/bin/tests/system/checknames/clean.sh
external/bsd/bind/dist/bin/tests/system/checkzone/clean.sh
external/bsd/bind/dist/bin/tests/system/checkzone/tests.sh
external/bsd/bind/dist/bin/tests/system/checkzone/zones/bad-dns-sd-reverse.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/bad-nsap-empty.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/bad-nsap-odd-nibble.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/bad-unspec.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/good-dns-sd-reverse.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/good-gc-msdcs.db
external/bsd/bind/dist/bin/tests/system/checkzone/zones/good-nsap.db
external/bsd/bind/dist/bin/tests/system/clean.sh
external/bsd/bind/dist/bin/tests/system/cleanall.sh
external/bsd/bind/dist/bin/tests/system/conf.sh.in
external/bsd/bind/dist/bin/tests/system/digdelv/clean.sh
external/bsd/bind/dist/bin/tests/system/digdelv/ns1/named.conf
external/bsd/bind/dist/bin/tests/system/digdelv/ns1/root.db
external/bsd/bind/dist/bin/tests/system/digdelv/ns2/example.db
external/bsd/bind/dist/bin/tests/system/digdelv/ns2/named.conf
external/bsd/bind/dist/bin/tests/system/digdelv/ns3/named.conf
external/bsd/bind/dist/bin/tests/system/digdelv/tests.sh
external/bsd/bind/dist/bin/tests/system/ditch.pl
external/bsd/bind/dist/bin/tests/system/dlz/ns1/dns-root/com/broken/dns.d/@/DNAME=10=example.net.=
external/bsd/bind/dist/bin/tests/system/dlz/ns1/dns-root/com/broken/dns.d/@/NS=10=example.com.=
external/bsd/bind/dist/bin/tests/system/dlz/ns1/dns-root/com/broken/dns.d/@/SOA=10=ns.example.com.=root.example.com.=None=None=None=None=None=
external/bsd/bind/dist/bin/tests/system/dlz/tests.sh
external/bsd/bind/dist/bin/tests/system/dlzexternal/Makefile.in
external/bsd/bind/dist/bin/tests/system/dlzexternal/clean.sh
external/bsd/bind/dist/bin/tests/system/dlzexternal/driver.c
external/bsd/bind/dist/bin/tests/system/dname/ans3/ans.pl
external/bsd/bind/dist/bin/tests/system/dname/clean.sh
external/bsd/bind/dist/bin/tests/system/dname/ns1/root.db
external/bsd/bind/dist/bin/tests/system/dname/ns2/example.db
external/bsd/bind/dist/bin/tests/system/dname/tests.sh
external/bsd/bind/dist/bin/tests/system/dns64/clean.sh
external/bsd/bind/dist/bin/tests/system/dnssec/clean.sh
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cdnskey-auto.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cdnskey-update.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cdnskey.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cds-auto.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cds-update.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/cds.secure.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/example.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/named.conf
external/bsd/bind/dist/bin/tests/system/dnssec/ns2/sign.sh
external/bsd/bind/dist/bin/tests/system/dnssec/ns3/generic.example.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns3/keyless.example.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns3/managed-future.example.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/ns3/named.conf
external/bsd/bind/dist/bin/tests/system/dnssec/ns3/sign.sh
external/bsd/bind/dist/bin/tests/system/dnssec/prereq.sh
external/bsd/bind/dist/bin/tests/system/dnssec/signer/remove.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/signer/remove2.db.in
external/bsd/bind/dist/bin/tests/system/dnssec/tests.sh
external/bsd/bind/dist/bin/tests/system/ecdsa/tests.sh
external/bsd/bind/dist/bin/tests/system/emptyzones/clean.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/Makefile.in
external/bsd/bind/dist/bin/tests/system/fetchlimit/ans4/ans.pl
external/bsd/bind/dist/bin/tests/system/fetchlimit/clean.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/fetchlimit.c
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ans4/ans.pl
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/clean.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns1/named.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns1/root.db
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns2/example.db
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns2/named.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns3/named1.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns3/named2.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns3/named3.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/ns3/root.hint
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/setup.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/lameserver/tests.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns1/named.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns1/root.db
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns2/example.db
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns2/named.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns3/named.args
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns3/named1.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns3/named2.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns3/named3.conf
external/bsd/bind/dist/bin/tests/system/fetchlimit/ns3/root.hint
external/bsd/bind/dist/bin/tests/system/fetchlimit/prereq.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/setup.sh
external/bsd/bind/dist/bin/tests/system/fetchlimit/tests.sh
external/bsd/bind/dist/bin/tests/system/filter-aaaa/Makefile.in
external/bsd/bind/dist/bin/tests/system/filter-aaaa/tests.sh
external/bsd/bind/dist/bin/tests/system/formerr/badoptoption
external/bsd/bind/dist/bin/tests/system/formerr/clean.sh
external/bsd/bind/dist/bin/tests/system/formerr/tests.sh
external/bsd/bind/dist/bin/tests/system/forward/clean.sh
external/bsd/bind/dist/bin/tests/system/forward/rfc1918-inherited.conf
external/bsd/bind/dist/bin/tests/system/forward/rfc1918-notinherited.conf
external/bsd/bind/dist/bin/tests/system/forward/tests.sh
external/bsd/bind/dist/bin/tests/system/forward/ula-inherited.conf
external/bsd/bind/dist/bin/tests/system/forward/ula-notinherited.conf
external/bsd/bind/dist/bin/tests/system/genzone.sh
external/bsd/bind/dist/bin/tests/system/glue/clean.sh
external/bsd/bind/dist/bin/tests/system/inline/clean.sh
external/bsd/bind/dist/bin/tests/system/inline/ns3/named.conf
external/bsd/bind/dist/bin/tests/system/ixfr/clean.sh
external/bsd/bind/dist/bin/tests/system/limits/clean.sh
external/bsd/bind/dist/bin/tests/system/lwresd/Makefile.in
external/bsd/bind/dist/bin/tests/system/lwresd/clean.sh
external/bsd/bind/dist/bin/tests/system/lwresd/lwtest.c
external/bsd/bind/dist/bin/tests/system/masterfile/clean.sh
external/bsd/bind/dist/bin/tests/system/masterfile/tests.sh
external/bsd/bind/dist/bin/tests/system/masterfile/zone/inheritownerafterinclude.db
external/bsd/bind/dist/bin/tests/system/masterfile/zone/inheritownerafterinclude.good
external/bsd/bind/dist/bin/tests/system/masterfile/zone/nameservers.db
external/bsd/bind/dist/bin/tests/system/masterformat/clean.sh
external/bsd/bind/dist/bin/tests/system/notify/clean.sh
external/bsd/bind/dist/bin/tests/system/nslookup/clean.sh
external/bsd/bind/dist/bin/tests/system/nsupdate/clean.sh
external/bsd/bind/dist/bin/tests/system/nsupdate/ns3/delegation.test.db.in
external/bsd/bind/dist/bin/tests/system/nsupdate/ns3/named.conf
external/bsd/bind/dist/bin/tests/system/nsupdate/ns3/sign.sh
external/bsd/bind/dist/bin/tests/system/nsupdate/prereq.sh
external/bsd/bind/dist/bin/tests/system/nsupdate/tests.sh
external/bsd/bind/dist/bin/tests/system/nsupdate/verylarge
external/bsd/bind/dist/bin/tests/system/reclimit/ans2/ans.pl
external/bsd/bind/dist/bin/tests/system/reclimit/prereq.sh
external/bsd/bind/dist/bin/tests/system/reclimit/tests.sh
external/bsd/bind/dist/bin/tests/system/redirect/clean.sh
external/bsd/bind/dist/bin/tests/system/redirect/conf/bad1.conf
external/bsd/bind/dist/bin/tests/system/redirect/conf/bad2.conf
external/bsd/bind/dist/bin/tests/system/redirect/conf/bad3.conf
external/bsd/bind/dist/bin/tests/system/resolver/clean.sh
external/bsd/bind/dist/bin/tests/system/resolver/ns1/named.conf
external/bsd/bind/dist/bin/tests/system/resolver/ns4/named.conf
external/bsd/bind/dist/bin/tests/system/resolver/ns4/root.db
external/bsd/bind/dist/bin/tests/system/resolver/ns5/named.conf
external/bsd/bind/dist/bin/tests/system/resolver/ns6/delegation-only.db
external/bsd/bind/dist/bin/tests/system/resolver/ns6/example.net.db.in
external/bsd/bind/dist/bin/tests/system/resolver/ns6/named.conf
external/bsd/bind/dist/bin/tests/system/resolver/ns7/named1.conf
external/bsd/bind/dist/bin/tests/system/resolver/ns7/named2.conf
external/bsd/bind/dist/bin/tests/system/resolver/tests.sh
external/bsd/bind/dist/bin/tests/system/rndc/clean.sh
external/bsd/bind/dist/bin/tests/system/rndc/ns4/named.conf
external/bsd/bind/dist/bin/tests/system/rndc/tests.sh
external/bsd/bind/dist/bin/tests/system/rpz/Makefile.in
external/bsd/bind/dist/bin/tests/system/rpz/ns3/base.db
external/bsd/bind/dist/bin/tests/system/rpz/tests.sh
external/bsd/bind/dist/bin/tests/system/rrl/Makefile.in
external/bsd/bind/dist/bin/tests/system/rrl/tests.sh
external/bsd/bind/dist/bin/tests/system/rrsetorder/clean.sh
external/bsd/bind/dist/bin/tests/system/rrsetorder/ns4/named.conf
external/bsd/bind/dist/bin/tests/system/rrsetorder/tests.sh
external/bsd/bind/dist/bin/tests/system/rsabigexponent/Makefile.in
external/bsd/bind/dist/bin/tests/system/rsabigexponent/bigkey.c
external/bsd/bind/dist/bin/tests/system/run.sh
external/bsd/bind/dist/bin/tests/system/runall.sh
external/bsd/bind/dist/bin/tests/system/sortlist/clean.sh
external/bsd/bind/dist/bin/tests/system/start.pl
external/bsd/bind/dist/bin/tests/system/staticstub/clean.sh
external/bsd/bind/dist/bin/tests/system/staticstub/ns2/named.conf.in
external/bsd/bind/dist/bin/tests/system/staticstub/ns3/named.conf.in
external/bsd/bind/dist/bin/tests/system/staticstub/ns3/sign.sh
external/bsd/bind/dist/bin/tests/system/staticstub/ns3/undelegated.db.in
external/bsd/bind/dist/bin/tests/system/staticstub/tests.sh
external/bsd/bind/dist/bin/tests/system/statistics/Makefile.in
external/bsd/bind/dist/bin/tests/system/statistics/clean.sh
external/bsd/bind/dist/bin/tests/system/statistics/newstats.c
external/bsd/bind/dist/bin/tests/system/statistics/ns1/named.conf
external/bsd/bind/dist/bin/tests/system/statistics/ns1/zone.db
external/bsd/bind/dist/bin/tests/system/statistics/tests.sh
external/bsd/bind/dist/bin/tests/system/statistics/xmlstats.c
external/bsd/bind/dist/bin/tests/system/stress/prereq.sh
external/bsd/bind/dist/bin/tests/system/stress/tests.sh
external/bsd/bind/dist/bin/tests/system/stub/clean.sh
external/bsd/bind/dist/bin/tests/system/tkey/Makefile.in
external/bsd/bind/dist/bin/tests/system/tkey/clean.sh
external/bsd/bind/dist/bin/tests/system/tkey/keycreate.c
external/bsd/bind/dist/bin/tests/system/tkey/keydelete.c
external/bsd/bind/dist/bin/tests/system/tsiggss/Makefile.in
external/bsd/bind/dist/bin/tests/system/tsiggss/clean.sh
external/bsd/bind/dist/bin/tests/system/unknown/clean.sh
external/bsd/bind/dist/bin/tests/system/upforwd/clean.sh
external/bsd/bind/dist/bin/tests/system/views/clean.sh
external/bsd/bind/dist/bin/tests/system/xfer/dig1.good
external/bsd/bind/dist/bin/tests/system/xfer/dig2.good
external/bsd/bind/dist/bin/tests/system/xfer/tests.sh
external/bsd/bind/dist/bin/tests/system/xferquota/clean.sh
external/bsd/bind/dist/bin/tests/system/zero/clean.sh
external/bsd/bind/dist/bin/tests/system/zero/ns1/root.db
external/bsd/bind/dist/bin/tests/system/zero/ns2/named.conf
external/bsd/bind/dist/bin/tests/system/zero/ns2/tld.db
external/bsd/bind/dist/bin/tests/system/zero/ns4/named.conf
external/bsd/bind/dist/bin/tests/system/zero/ns4/one.tld.db
external/bsd/bind/dist/bin/tests/system/zero/tests.sh
external/bsd/bind/dist/bin/tests/system/zonechecks/clean.sh
external/bsd/bind/dist/bin/tests/task_test.c
external/bsd/bind/dist/bin/tests/tasks/t_tasks.c
external/bsd/bind/dist/bin/tests/timer_test.c
external/bsd/bind/dist/bin/tests/wire_test.c
external/bsd/bind/dist/bin/tests/zone_test.c
external/bsd/bind/dist/bin/tools/Makefile.in
external/bsd/bind/dist/bin/tools/arpaname.1
external/bsd/bind/dist/bin/tools/arpaname.c
external/bsd/bind/dist/bin/tools/arpaname.docbook
external/bsd/bind/dist/bin/tools/arpaname.html
external/bsd/bind/dist/bin/tools/genrandom.8
external/bsd/bind/dist/bin/tools/genrandom.docbook
external/bsd/bind/dist/bin/tools/genrandom.html
external/bsd/bind/dist/bin/tools/isc-hmac-fixup.8
external/bsd/bind/dist/bin/tools/isc-hmac-fixup.c
external/bsd/bind/dist/bin/tools/isc-hmac-fixup.docbook
external/bsd/bind/dist/bin/tools/isc-hmac-fixup.html
external/bsd/bind/dist/bin/tools/named-journalprint.8
external/bsd/bind/dist/bin/tools/named-journalprint.c
external/bsd/bind/dist/bin/tools/named-journalprint.docbook
external/bsd/bind/dist/bin/tools/named-journalprint.html
external/bsd/bind/dist/bin/tools/nsec3hash.8
external/bsd/bind/dist/bin/tools/nsec3hash.docbook
external/bsd/bind/dist/bin/tools/nsec3hash.html
external/bsd/bind/dist/bind.keys
external/bsd/bind/dist/config.h.in
external/bsd/bind/dist/config.h.win32
external/bsd/bind/dist/configure
external/bsd/bind/dist/configure.in
external/bsd/bind/dist/contrib/README
external/bsd/bind/dist/contrib/dlz/bin/dlzbdb/Makefile.in
external/bsd/bind/dist/contrib/dlz/config.dlz.in
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/Makefile.in
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/README
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/RELEASE_NOTES
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/aclocal.m4
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/acx_pthread.m4
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/config.guess
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/config.sub
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/configure
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/configure.in
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/contrib/queryparse/INSTALL
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/contrib/queryparse/USAGE
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/contrib/queryparse/queryparse
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/contrib/queryparse/queryparse.1
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/datafile.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/datafile.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/dns.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/dns.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/dnsperf.1
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/dnsperf.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/install-sh
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/log.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/log.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/net.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/net.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/opt.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/opt.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/os.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/os.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/resperf-report
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/resperf.1
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/resperf.c
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/util.h
external/bsd/bind/dist/contrib/dnsperf-2.1.0.0-1/version.h
external/bsd/bind/dist/contrib/perftcpdns/perftcpdns.c
external/bsd/bind/dist/contrib/query-loc-0.4.0/config.h.in
external/bsd/bind/dist/contrib/query-loc-0.4.0/configure
external/bsd/bind/dist/contrib/query-loc-0.4.0/configure.in
external/bsd/bind/dist/contrib/query-loc-0.4.0/loc.c
external/bsd/bind/dist/contrib/query-loc-0.4.0/loc.h
external/bsd/bind/dist/contrib/scripts/dnssec-keyset.sh
external/bsd/bind/dist/contrib/sdb/ldap/README.zone2ldap
external/bsd/bind/dist/contrib/sdb/ldap/zone2ldap.c
external/bsd/bind/dist/contrib/zkt/doc/rfc5011.txt
external/bsd/bind/dist/doc/Makefile.in
external/bsd/bind/dist/doc/arm/Bv9ARM-book.xml
external/bsd/bind/dist/doc/arm/Bv9ARM.ch01.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch02.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch03.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch04.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch05.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch06.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch07.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch08.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch09.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch10.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch11.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch12.html
external/bsd/bind/dist/doc/arm/Bv9ARM.ch13.html
external/bsd/bind/dist/doc/arm/Bv9ARM.conf
external/bsd/bind/dist/doc/arm/Bv9ARM.html
external/bsd/bind/dist/doc/arm/Makefile.in
external/bsd/bind/dist/doc/arm/README-SGML
external/bsd/bind/dist/doc/arm/dnssec.xml
external/bsd/bind/dist/doc/arm/latex-fixup.pl
external/bsd/bind/dist/doc/arm/libdns.xml
external/bsd/bind/dist/doc/arm/logging-categories.xml
external/bsd/bind/dist/doc/arm/man.arpaname.html
external/bsd/bind/dist/doc/arm/man.ddns-confgen.html
external/bsd/bind/dist/doc/arm/man.dig.html
external/bsd/bind/dist/doc/arm/man.dnssec-checkds.html
external/bsd/bind/dist/doc/arm/man.dnssec-coverage.html
external/bsd/bind/dist/doc/arm/man.dnssec-dsfromkey.html
external/bsd/bind/dist/doc/arm/man.dnssec-importkey.html
external/bsd/bind/dist/doc/arm/man.dnssec-keyfromlabel.html
external/bsd/bind/dist/doc/arm/man.dnssec-keygen.html
external/bsd/bind/dist/doc/arm/man.dnssec-revoke.html
external/bsd/bind/dist/doc/arm/man.dnssec-settime.html
external/bsd/bind/dist/doc/arm/man.dnssec-signzone.html
external/bsd/bind/dist/doc/arm/man.dnssec-verify.html
external/bsd/bind/dist/doc/arm/man.genrandom.html
external/bsd/bind/dist/doc/arm/man.host.html
external/bsd/bind/dist/doc/arm/man.isc-hmac-fixup.html
external/bsd/bind/dist/doc/arm/man.lwresd.html
external/bsd/bind/dist/doc/arm/man.named-checkconf.html
external/bsd/bind/dist/doc/arm/man.named-checkzone.html
external/bsd/bind/dist/doc/arm/man.named-journalprint.html
external/bsd/bind/dist/doc/arm/man.named.conf.html
external/bsd/bind/dist/doc/arm/man.named.html
external/bsd/bind/dist/doc/arm/man.nsec3hash.html
external/bsd/bind/dist/doc/arm/man.nsupdate.html
external/bsd/bind/dist/doc/arm/man.rndc-confgen.html
external/bsd/bind/dist/doc/arm/man.rndc.conf.html
external/bsd/bind/dist/doc/arm/man.rndc.html
external/bsd/bind/dist/doc/arm/managed-keys.xml
external/bsd/bind/dist/doc/arm/notes-wrapper.xml
external/bsd/bind/dist/doc/arm/notes.conf
external/bsd/bind/dist/doc/arm/notes.html
external/bsd/bind/dist/doc/arm/notes.xml
external/bsd/bind/dist/doc/arm/noteversion.xml.in
external/bsd/bind/dist/doc/arm/pkcs11.xml
external/bsd/bind/dist/doc/arm/pkgversion.xml.in
external/bsd/bind/dist/doc/arm/releaseinfo.xml.in
external/bsd/bind/dist/doc/doxygen/Makefile.in
external/bsd/bind/dist/doc/misc/options
external/bsd/bind/dist/doc/misc/rfc-compliance
external/bsd/bind/dist/doc/tex/Makefile.in
external/bsd/bind/dist/doc/tex/armstyle.sty.in
external/bsd/bind/dist/doc/tex/notestyle.sty
external/bsd/bind/dist/doc/xsl/Makefile.in
external/bsd/bind/dist/doc/xsl/arm-param.xsl
external/bsd/bind/dist/doc/xsl/copyright.xsl
external/bsd/bind/dist/doc/xsl/graphics/caution.eps
external/bsd/bind/dist/doc/xsl/graphics/important.eps
external/bsd/bind/dist/doc/xsl/graphics/note.eps
external/bsd/bind/dist/doc/xsl/graphics/tip.eps
external/bsd/bind/dist/doc/xsl/graphics/warning.eps
external/bsd/bind/dist/doc/xsl/isc-docbook-chunk.xsl.in
external/bsd/bind/dist/doc/xsl/isc-docbook-html.xsl.in
external/bsd/bind/dist/doc/xsl/isc-docbook-latex-mappings.xml
external/bsd/bind/dist/doc/xsl/isc-docbook-latex.xsl.in
external/bsd/bind/dist/doc/xsl/isc-docbook-text.xsl
external/bsd/bind/dist/doc/xsl/isc-manpage.xsl.in
external/bsd/bind/dist/doc/xsl/isc-notes-html.xsl.in
external/bsd/bind/dist/doc/xsl/isc-notes-latex.xsl.in
external/bsd/bind/dist/doc/xsl/notes-param.xsl
external/bsd/bind/dist/doc/xsl/pre-latex.xsl
external/bsd/bind/dist/isc-config.sh.1
external/bsd/bind/dist/isc-config.sh.docbook
external/bsd/bind/dist/isc-config.sh.html
external/bsd/bind/dist/isc-config.sh.in
external/bsd/bind/dist/lib/bind9/Makefile.in
external/bsd/bind/dist/lib/bind9/api
external/bsd/bind/dist/lib/bind9/check.c
external/bsd/bind/dist/lib/bind9/include/bind9/Makefile.in
external/bsd/bind/dist/lib/dns/Makefile.in
external/bsd/bind/dist/lib/dns/acache.c
external/bsd/bind/dist/lib/dns/adb.c
external/bsd/bind/dist/lib/dns/api
external/bsd/bind/dist/lib/dns/cache.c
external/bsd/bind/dist/lib/dns/callbacks.c
external/bsd/bind/dist/lib/dns/client.c
external/bsd/bind/dist/lib/dns/diff.c
external/bsd/bind/dist/lib/dns/dispatch.c
external/bsd/bind/dist/lib/dns/dlz.c
external/bsd/bind/dist/lib/dns/dnssec.c
external/bsd/bind/dist/lib/dns/dst_api.c
external/bsd/bind/dist/lib/dns/dst_openssl.h
external/bsd/bind/dist/lib/dns/dst_parse.c
external/bsd/bind/dist/lib/dns/forward.c
external/bsd/bind/dist/lib/dns/gen.c
external/bsd/bind/dist/lib/dns/gssapi_link.c
external/bsd/bind/dist/lib/dns/gssapictx.c
external/bsd/bind/dist/lib/dns/hmac_link.c
external/bsd/bind/dist/lib/dns/include/dns/Makefile.in
external/bsd/bind/dist/lib/dns/include/dns/adb.h
external/bsd/bind/dist/lib/dns/include/dns/dbiterator.h
external/bsd/bind/dist/lib/dns/include/dns/forward.h
external/bsd/bind/dist/lib/dns/include/dns/log.h
external/bsd/bind/dist/lib/dns/include/dns/message.h
external/bsd/bind/dist/lib/dns/include/dns/name.h
external/bsd/bind/dist/lib/dns/include/dns/rbt.h
external/bsd/bind/dist/lib/dns/include/dns/resolver.h
external/bsd/bind/dist/lib/dns/include/dns/result.h
external/bsd/bind/dist/lib/dns/include/dns/rrl.h
external/bsd/bind/dist/lib/dns/include/dns/stats.h
external/bsd/bind/dist/lib/dns/include/dns/types.h
external/bsd/bind/dist/lib/dns/include/dns/update.h
external/bsd/bind/dist/lib/dns/include/dns/view.h
external/bsd/bind/dist/lib/dns/include/dns/zone.h
external/bsd/bind/dist/lib/dns/include/dst/Makefile.in
external/bsd/bind/dist/lib/dns/include/dst/dst.h
external/bsd/bind/dist/lib/dns/journal.c
external/bsd/bind/dist/lib/dns/keytable.c
external/bsd/bind/dist/lib/dns/log.c
external/bsd/bind/dist/lib/dns/master.c
external/bsd/bind/dist/lib/dns/message.c
external/bsd/bind/dist/lib/dns/name.c
external/bsd/bind/dist/lib/dns/ncache.c
external/bsd/bind/dist/lib/dns/nsec.c
external/bsd/bind/dist/lib/dns/nsec3.c
external/bsd/bind/dist/lib/dns/openssl_link.c
external/bsd/bind/dist/lib/dns/openssldh_link.c
external/bsd/bind/dist/lib/dns/openssldsa_link.c
external/bsd/bind/dist/lib/dns/opensslecdsa_link.c
external/bsd/bind/dist/lib/dns/opensslgost_link.c
external/bsd/bind/dist/lib/dns/opensslrsa_link.c
external/bsd/bind/dist/lib/dns/order.c
external/bsd/bind/dist/lib/dns/private.c
external/bsd/bind/dist/lib/dns/rbt.c
external/bsd/bind/dist/lib/dns/rbtdb.c
external/bsd/bind/dist/lib/dns/rcode.c
external/bsd/bind/dist/lib/dns/rdata.c
external/bsd/bind/dist/lib/dns/rdata/any_255/tsig_250.c
external/bsd/bind/dist/lib/dns/rdata/ch_3/a_1.c
external/bsd/bind/dist/lib/dns/rdata/generic/afsdb_18.c
external/bsd/bind/dist/lib/dns/rdata/generic/avc_258.c
external/bsd/bind/dist/lib/dns/rdata/generic/avc_258.h
external/bsd/bind/dist/lib/dns/rdata/generic/caa_257.c
external/bsd/bind/dist/lib/dns/rdata/generic/cdnskey_60.c
external/bsd/bind/dist/lib/dns/rdata/generic/cdnskey_60.h
external/bsd/bind/dist/lib/dns/rdata/generic/cds_59.c
external/bsd/bind/dist/lib/dns/rdata/generic/cds_59.h
external/bsd/bind/dist/lib/dns/rdata/generic/cert_37.c
external/bsd/bind/dist/lib/dns/rdata/generic/cname_5.c
external/bsd/bind/dist/lib/dns/rdata/generic/csync_62.c
external/bsd/bind/dist/lib/dns/rdata/generic/csync_62.h
external/bsd/bind/dist/lib/dns/rdata/generic/dlv_32769.c
external/bsd/bind/dist/lib/dns/rdata/generic/dlv_32769.h
external/bsd/bind/dist/lib/dns/rdata/generic/dname_39.c
external/bsd/bind/dist/lib/dns/rdata/generic/dnskey_48.c
external/bsd/bind/dist/lib/dns/rdata/generic/dnskey_48.h
external/bsd/bind/dist/lib/dns/rdata/generic/ds_43.c
external/bsd/bind/dist/lib/dns/rdata/generic/eui48_108.c
external/bsd/bind/dist/lib/dns/rdata/generic/eui64_109.c
external/bsd/bind/dist/lib/dns/rdata/generic/gpos_27.c
external/bsd/bind/dist/lib/dns/rdata/generic/hinfo_13.c
external/bsd/bind/dist/lib/dns/rdata/generic/hip_55.c
external/bsd/bind/dist/lib/dns/rdata/generic/ipseckey_45.c
external/bsd/bind/dist/lib/dns/rdata/generic/isdn_20.c
external/bsd/bind/dist/lib/dns/rdata/generic/key_25.c
external/bsd/bind/dist/lib/dns/rdata/generic/key_25.h
external/bsd/bind/dist/lib/dns/rdata/generic/keydata_65533.c
external/bsd/bind/dist/lib/dns/rdata/generic/l32_105.c
external/bsd/bind/dist/lib/dns/rdata/generic/l64_106.c
external/bsd/bind/dist/lib/dns/rdata/generic/loc_29.c
external/bsd/bind/dist/lib/dns/rdata/generic/lp_107.c
external/bsd/bind/dist/lib/dns/rdata/generic/mb_7.c
external/bsd/bind/dist/lib/dns/rdata/generic/md_3.c
external/bsd/bind/dist/lib/dns/rdata/generic/mf_4.c
external/bsd/bind/dist/lib/dns/rdata/generic/mg_8.c
external/bsd/bind/dist/lib/dns/rdata/generic/minfo_14.c
external/bsd/bind/dist/lib/dns/rdata/generic/mr_9.c
external/bsd/bind/dist/lib/dns/rdata/generic/mx_15.c
external/bsd/bind/dist/lib/dns/rdata/generic/naptr_35.c
external/bsd/bind/dist/lib/dns/rdata/generic/nid_104.c
external/bsd/bind/dist/lib/dns/rdata/generic/ninfo_56.c
external/bsd/bind/dist/lib/dns/rdata/generic/ninfo_56.h
external/bsd/bind/dist/lib/dns/rdata/generic/ns_2.c
external/bsd/bind/dist/lib/dns/rdata/generic/nsec3_50.c
external/bsd/bind/dist/lib/dns/rdata/generic/nsec3param_51.c
external/bsd/bind/dist/lib/dns/rdata/generic/nsec_47.c
external/bsd/bind/dist/lib/dns/rdata/generic/null_10.c
external/bsd/bind/dist/lib/dns/rdata/generic/nxt_30.c
external/bsd/bind/dist/lib/dns/rdata/generic/openpgpkey_61.c
external/bsd/bind/dist/lib/dns/rdata/generic/opt_41.c
external/bsd/bind/dist/lib/dns/rdata/generic/proforma.c
external/bsd/bind/dist/lib/dns/rdata/generic/ptr_12.c
external/bsd/bind/dist/lib/dns/rdata/generic/rkey_57.c
external/bsd/bind/dist/lib/dns/rdata/generic/rkey_57.h
external/bsd/bind/dist/lib/dns/rdata/generic/rp_17.c
external/bsd/bind/dist/lib/dns/rdata/generic/rrsig_46.c
external/bsd/bind/dist/lib/dns/rdata/generic/rt_21.c
external/bsd/bind/dist/lib/dns/rdata/generic/sig_24.c
external/bsd/bind/dist/lib/dns/rdata/generic/sink_40.c
external/bsd/bind/dist/lib/dns/rdata/generic/sink_40.h
external/bsd/bind/dist/lib/dns/rdata/generic/smimea_53.c
external/bsd/bind/dist/lib/dns/rdata/generic/smimea_53.h
external/bsd/bind/dist/lib/dns/rdata/generic/soa_6.c
external/bsd/bind/dist/lib/dns/rdata/generic/spf_99.c
external/bsd/bind/dist/lib/dns/rdata/generic/sshfp_44.c
external/bsd/bind/dist/lib/dns/rdata/generic/ta_32768.c
external/bsd/bind/dist/lib/dns/rdata/generic/ta_32768.h
external/bsd/bind/dist/lib/dns/rdata/generic/talink_58.c
external/bsd/bind/dist/lib/dns/rdata/generic/talink_58.h
external/bsd/bind/dist/lib/dns/rdata/generic/tkey_249.c
external/bsd/bind/dist/lib/dns/rdata/generic/tlsa_52.c
external/bsd/bind/dist/lib/dns/rdata/generic/txt_16.c
external/bsd/bind/dist/lib/dns/rdata/generic/unspec_103.c
external/bsd/bind/dist/lib/dns/rdata/generic/uri_256.c
external/bsd/bind/dist/lib/dns/rdata/generic/x25_19.c
external/bsd/bind/dist/lib/dns/rdata/hs_4/a_1.c
external/bsd/bind/dist/lib/dns/rdata/in_1/a6_38.c
external/bsd/bind/dist/lib/dns/rdata/in_1/a_1.c
external/bsd/bind/dist/lib/dns/rdata/in_1/aaaa_28.c
external/bsd/bind/dist/lib/dns/rdata/in_1/apl_42.c
external/bsd/bind/dist/lib/dns/rdata/in_1/dhcid_49.c
external/bsd/bind/dist/lib/dns/rdata/in_1/kx_36.c
external/bsd/bind/dist/lib/dns/rdata/in_1/nsap-ptr_23.c
external/bsd/bind/dist/lib/dns/rdata/in_1/nsap_22.c
external/bsd/bind/dist/lib/dns/rdata/in_1/px_26.c
external/bsd/bind/dist/lib/dns/rdata/in_1/srv_33.c
external/bsd/bind/dist/lib/dns/rdata/in_1/wks_11.c
external/bsd/bind/dist/lib/dns/rdataset.c
external/bsd/bind/dist/lib/dns/request.c
external/bsd/bind/dist/lib/dns/resolver.c
external/bsd/bind/dist/lib/dns/result.c
external/bsd/bind/dist/lib/dns/rootns.c
external/bsd/bind/dist/lib/dns/rpz.c
external/bsd/bind/dist/lib/dns/rrl.c
external/bsd/bind/dist/lib/dns/sdb.c
external/bsd/bind/dist/lib/dns/sdlz.c
external/bsd/bind/dist/lib/dns/spnego.c
external/bsd/bind/dist/lib/dns/tcpmsg.c
external/bsd/bind/dist/lib/dns/tests/Makefile.in
external/bsd/bind/dist/lib/dns/tests/dbiterator_test.c
external/bsd/bind/dist/lib/dns/tests/dbversion_test.c
external/bsd/bind/dist/lib/dns/tests/dnstest.c
external/bsd/bind/dist/lib/dns/tests/dnstest.h
external/bsd/bind/dist/lib/dns/tests/master_test.c
external/bsd/bind/dist/lib/dns/tests/name_test.c
external/bsd/bind/dist/lib/dns/tests/rdata_test.c
external/bsd/bind/dist/lib/dns/tkey.c
external/bsd/bind/dist/lib/dns/tsig.c
external/bsd/bind/dist/lib/dns/update.c
external/bsd/bind/dist/lib/dns/view.c
external/bsd/bind/dist/lib/dns/xfrin.c
external/bsd/bind/dist/lib/dns/zone.c
external/bsd/bind/dist/lib/export/dns/Makefile.in
external/bsd/bind/dist/lib/export/dns/include/dns/Makefile.in
external/bsd/bind/dist/lib/export/dns/include/dst/Makefile.in
external/bsd/bind/dist/lib/export/irs/Makefile.in
external/bsd/bind/dist/lib/export/irs/include/irs/Makefile.in
external/bsd/bind/dist/lib/export/isc/Makefile.in
external/bsd/bind/dist/lib/export/isc/include/isc/Makefile.in
external/bsd/bind/dist/lib/export/isc/nothreads/include/isc/Makefile.in
external/bsd/bind/dist/lib/export/isc/pthreads/include/isc/Makefile.in
external/bsd/bind/dist/lib/export/isc/unix/include/isc/Makefile.in
external/bsd/bind/dist/lib/export/isccfg/Makefile.in
external/bsd/bind/dist/lib/export/isccfg/include/isccfg/Makefile.in
external/bsd/bind/dist/lib/export/samples/Makefile.in
external/bsd/bind/dist/lib/export/samples/nsprobe.c
external/bsd/bind/dist/lib/export/samples/sample-async.c
external/bsd/bind/dist/lib/export/samples/sample-gai.c
external/bsd/bind/dist/lib/export/samples/sample-request.c
external/bsd/bind/dist/lib/export/samples/sample-update.c
external/bsd/bind/dist/lib/export/samples/sample.c
external/bsd/bind/dist/lib/irs/Makefile.in
external/bsd/bind/dist/lib/irs/api
external/bsd/bind/dist/lib/irs/getaddrinfo.c
external/bsd/bind/dist/lib/irs/resconf.c
external/bsd/bind/dist/lib/isc/Makefile.in
external/bsd/bind/dist/lib/isc/alpha/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/api
external/bsd/bind/dist/lib/isc/app_api.c
external/bsd/bind/dist/lib/isc/assertions.c
external/bsd/bind/dist/lib/isc/backtrace.c
external/bsd/bind/dist/lib/isc/base32.c
external/bsd/bind/dist/lib/isc/base64.c
external/bsd/bind/dist/lib/isc/buffer.c
external/bsd/bind/dist/lib/isc/commandline.c
external/bsd/bind/dist/lib/isc/entropy.c
external/bsd/bind/dist/lib/isc/error.c
external/bsd/bind/dist/lib/isc/hash.c
external/bsd/bind/dist/lib/isc/heap.c
external/bsd/bind/dist/lib/isc/hex.c
external/bsd/bind/dist/lib/isc/hmacmd5.c
external/bsd/bind/dist/lib/isc/hmacsha.c
external/bsd/bind/dist/lib/isc/httpd.c
external/bsd/bind/dist/lib/isc/ia64/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/include/isc/app.h
external/bsd/bind/dist/lib/isc/include/isc/assertions.h
external/bsd/bind/dist/lib/isc/include/isc/error.h
external/bsd/bind/dist/lib/isc/include/isc/file.h
external/bsd/bind/dist/lib/isc/include/isc/hash.h
external/bsd/bind/dist/lib/isc/include/isc/lex.h
external/bsd/bind/dist/lib/isc/include/isc/magic.h
external/bsd/bind/dist/lib/isc/include/isc/mem.h
external/bsd/bind/dist/lib/isc/include/isc/namespace.h
external/bsd/bind/dist/lib/isc/include/isc/netaddr.h
external/bsd/bind/dist/lib/isc/include/isc/platform.h.in
external/bsd/bind/dist/lib/isc/include/isc/print.h
external/bsd/bind/dist/lib/isc/include/isc/result.h
external/bsd/bind/dist/lib/isc/include/isc/safe.h
external/bsd/bind/dist/lib/isc/include/isc/sockaddr.h
external/bsd/bind/dist/lib/isc/include/isc/socket.h
external/bsd/bind/dist/lib/isc/include/isc/util.h
external/bsd/bind/dist/lib/isc/lex.c
external/bsd/bind/dist/lib/isc/lib.c
external/bsd/bind/dist/lib/isc/md5.c
external/bsd/bind/dist/lib/isc/mem.c
external/bsd/bind/dist/lib/isc/mips/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/netaddr.c
external/bsd/bind/dist/lib/isc/noatomic/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/nothreads/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/pool.c
external/bsd/bind/dist/lib/isc/powerpc/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/print.c
external/bsd/bind/dist/lib/isc/pthreads/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/pthreads/mutex.c
external/bsd/bind/dist/lib/isc/regex.c
external/bsd/bind/dist/lib/isc/result.c
external/bsd/bind/dist/lib/isc/rwlock.c
external/bsd/bind/dist/lib/isc/safe.c
external/bsd/bind/dist/lib/isc/sockaddr.c
external/bsd/bind/dist/lib/isc/socket_api.c
external/bsd/bind/dist/lib/isc/sparc64/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/stats.c
external/bsd/bind/dist/lib/isc/string.c
external/bsd/bind/dist/lib/isc/task.c
external/bsd/bind/dist/lib/isc/tests/Makefile.in
external/bsd/bind/dist/lib/isc/tests/hash_test.c
external/bsd/bind/dist/lib/isc/tests/print_test.c
external/bsd/bind/dist/lib/isc/tests/regex_test.c
external/bsd/bind/dist/lib/isc/tests/safe_test.c
external/bsd/bind/dist/lib/isc/tests/sockaddr_test.c
external/bsd/bind/dist/lib/isc/timer.c
external/bsd/bind/dist/lib/isc/unix/app.c
external/bsd/bind/dist/lib/isc/unix/file.c
external/bsd/bind/dist/lib/isc/unix/ifiter_ioctl.c
external/bsd/bind/dist/lib/isc/unix/ifiter_sysctl.c
external/bsd/bind/dist/lib/isc/unix/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/unix/net.c
external/bsd/bind/dist/lib/isc/unix/socket.c
external/bsd/bind/dist/lib/isc/x86_32/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/x86_32/include/isc/atomic.h
external/bsd/bind/dist/lib/isc/x86_64/include/isc/Makefile.in
external/bsd/bind/dist/lib/isc/x86_64/include/isc/atomic.h
external/bsd/bind/dist/lib/isccc/Makefile.in
external/bsd/bind/dist/lib/isccc/alist.c
external/bsd/bind/dist/lib/isccc/api
external/bsd/bind/dist/lib/isccc/cc.c
external/bsd/bind/dist/lib/isccc/include/isccc/Makefile.in
external/bsd/bind/dist/lib/isccc/sexpr.c
external/bsd/bind/dist/lib/isccfg/Makefile.in
external/bsd/bind/dist/lib/isccfg/aclconf.c
external/bsd/bind/dist/lib/isccfg/api
external/bsd/bind/dist/lib/isccfg/include/isccfg/Makefile.in
external/bsd/bind/dist/lib/isccfg/include/isccfg/cfg.h
external/bsd/bind/dist/lib/isccfg/include/isccfg/grammar.h
external/bsd/bind/dist/lib/isccfg/namedconf.c
external/bsd/bind/dist/lib/isccfg/parser.c
external/bsd/bind/dist/lib/lwres/Makefile.in
external/bsd/bind/dist/lib/lwres/api
external/bsd/bind/dist/lib/lwres/herror.c
external/bsd/bind/dist/lib/lwres/man/Makefile.in
external/bsd/bind/dist/lib/lwres/man/lwres.3
external/bsd/bind/dist/lib/lwres/man/lwres.docbook
external/bsd/bind/dist/lib/lwres/man/lwres.html
external/bsd/bind/dist/lib/lwres/man/lwres_buffer.3
external/bsd/bind/dist/lib/lwres/man/lwres_buffer.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_buffer.html
external/bsd/bind/dist/lib/lwres/man/lwres_config.3
external/bsd/bind/dist/lib/lwres/man/lwres_config.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_config.html
external/bsd/bind/dist/lib/lwres/man/lwres_context.3
external/bsd/bind/dist/lib/lwres/man/lwres_context.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_context.html
external/bsd/bind/dist/lib/lwres/man/lwres_gabn.3
external/bsd/bind/dist/lib/lwres/man/lwres_gabn.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_gabn.html
external/bsd/bind/dist/lib/lwres/man/lwres_gai_strerror.3
external/bsd/bind/dist/lib/lwres/man/lwres_gai_strerror.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_gai_strerror.html
external/bsd/bind/dist/lib/lwres/man/lwres_getaddrinfo.3
external/bsd/bind/dist/lib/lwres/man/lwres_getaddrinfo.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_getaddrinfo.html
external/bsd/bind/dist/lib/lwres/man/lwres_gethostent.3
external/bsd/bind/dist/lib/lwres/man/lwres_gethostent.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_gethostent.html
external/bsd/bind/dist/lib/lwres/man/lwres_getipnode.3
external/bsd/bind/dist/lib/lwres/man/lwres_getipnode.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_getipnode.html
external/bsd/bind/dist/lib/lwres/man/lwres_getnameinfo.3
external/bsd/bind/dist/lib/lwres/man/lwres_getnameinfo.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_getnameinfo.html
external/bsd/bind/dist/lib/lwres/man/lwres_getrrsetbyname.3
external/bsd/bind/dist/lib/lwres/man/lwres_getrrsetbyname.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_getrrsetbyname.html
external/bsd/bind/dist/lib/lwres/man/lwres_gnba.3
external/bsd/bind/dist/lib/lwres/man/lwres_gnba.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_gnba.html
external/bsd/bind/dist/lib/lwres/man/lwres_hstrerror.3
external/bsd/bind/dist/lib/lwres/man/lwres_hstrerror.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_hstrerror.html
external/bsd/bind/dist/lib/lwres/man/lwres_inetntop.3
external/bsd/bind/dist/lib/lwres/man/lwres_inetntop.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_inetntop.html
external/bsd/bind/dist/lib/lwres/man/lwres_noop.3
external/bsd/bind/dist/lib/lwres/man/lwres_noop.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_noop.html
external/bsd/bind/dist/lib/lwres/man/lwres_packet.3
external/bsd/bind/dist/lib/lwres/man/lwres_packet.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_packet.html
external/bsd/bind/dist/lib/lwres/man/lwres_resutil.3
external/bsd/bind/dist/lib/lwres/man/lwres_resutil.docbook
external/bsd/bind/dist/lib/lwres/man/lwres_resutil.html
external/bsd/bind/dist/lib/lwres/print.c
external/bsd/bind/dist/lib/lwres/tests/Makefile.in
external/bsd/bind/dist/lib/tests/include/tests/Makefile.in
external/bsd/bind/dist/make/rules.in
external/bsd/bind/dist/srcid
external/bsd/bind/dist/unit/unittest.sh.in
external/bsd/bind/dist/version
external/bsd/bind/dist/win32utils/index.html
external/bsd/bind/include/config.h
external/bsd/bind/include/dns/code.h
external/bsd/bind/include/dns/enumtype.h
external/bsd/bind/include/dns/rdatastruct.h
external/bsd/bind/include/isc/platform.h
--- a/external/bsd/bind/dist/CHANGES	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/CHANGES	Tue Apr 25 19:54:07 2017 +0000
@@ -1,24 +1,718 @@
-	--- 9.9.7-P3 released ---
+	--- 9.9.9-P8 released ---
+
+4582.	[security]	'rndc ""' could trigger a assertion failure in named.
+			(CVE-2017-3138) [RT #44924]
+
+4580.	[bug]		4578 introduced a regression when handling CNAME to
+			referral below the current domain. [RT #44850]
+
+	--- 9.9.9-P7 released ---
+
+4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
+			queries could trigger assertion failures.
+			(CVE-2017-3137) [RT #44734]
+
+4575.	[security]	DNS64 with "break-dnssec yes;" can result in an
+			assertion failure. (CVE-2017-3136) [RT #44653]
+
+4564.	[maint]		Update the built in managed keys to include the
+			upcoming root KSK. [RT #44579]
+
+	--- 9.9.9-P6 released ---
+
+4558.	[bug]		Synthesised CNAME before matching DNAME was still
+			being cached when it should not have been. [RT #44318]
+
+4557.	[security]	Combining dns64 and rpz can result in dereferencing
+			a NULL pointer (read).  (CVE-2017-3135) [RT#44434]
+
+	--- 9.9.9-P5 released ---
+
+4530.	[bug]		Change 4489 broke the handling of CNAME -> DNAME
+			in responses resulting in SERVFAIL being returned.
+			[RT #43779]
+
+4528.	[bug]		Only set the flag bits for the i/o we are waiting
+			for on EPOLLERR or EPOLLHUP. [RT #43617]
+
+4519.	[port]		win32: handle ERROR_MORE_DATA. [RT #43534]
+
+4517.	[security]	Named could mishandle authority sections that were
+			missing RRSIGs triggering an assertion failure.
+			(CVE-2016-9444) [RT # 43632]
+
+4510.	[security]	Named mishandled some responses where covering RRSIG
+			records are returned without the requested data
+			resulting in a assertion failure. (CVE-2016-9147)
+			[RT #43548]
+
+4508.	[security]	Named incorrectly tried to cache TKEY records which
+			could trigger a assertion failure when there was
+			a class mismatch. (CVE-2016-9131) [RT #43522]
+
+	--- 9.9.9-P4 released ---
+
+4489.	[security]	It was possible to trigger assertions when processing
+			a response. (CVE-2016-8864) [RT #43465]
+
+	--- 9.9.9-P3 released ---
+
+4467.	[security]	It was possible to trigger a assertion when rendering
+			a message. (CVE-2016-2776) [RT #43139]
+
+	--- 9.9.9-P2 released ---
+
+4406.	[bug]		getrrsetbyname with a non absolute name could
+			trigger an infinite recursion bug in lwresd
+			and named with lwres configured if when combined
+			with a search list entry the resulting name is
+			too long. (CVE-2016-2775) [RT #42694]
+
+4405.	[bug]		Change 4342 introduced a regression where you could
+			not remove a delegation in a NSEC3 signed zone using
+			OPTOUT via nsupdate. [RT #42702]
+
+4387.	[bug]		Change 4336 was not complete leading to SERVFAIL
+			being return as NS records expired. [RT #42683]
+
+	--- 9.9.9-P1 released ---
+
+4366.	[bug]		Address race condition when updating rbtnode bit
+			fields. [RT #42379]
+
+4363.	[port]		win32: Disable explicit triggering UAC when running
+			BINDInstall.
+
+	--- 9.9.9 released ---
+
+	--- 9.9.9rc1 released ---
+
+4347.	[port]		Corrected a build error on x86_64 Solaris. [RT #42150]
+
+4346.	[bug]		Fixed a regression introduced in change #4337 which
+			caused signed domains with revoked KSKs to fail
+			validation. [RT #42147]
+
+4345.	[contrib]	perftcpdns mishandled the return values from
+			clock_nanosleep. [RT #42131]
+
+4344.	[port]		Address openssl version differences. [RT #42059]
+
+	--- 9.9.9b2 released ---
+
+4342.	[bug]		'rndc flushtree' could fail to clean the tree if there
+			wasn't a node at the specified name. [RT #41846]
+
+4338.	[bug]		Reimplement change 4324 as it wasn't properly doing
+			all the required book keeping. [RT #41941]
+
+4337.	[bug]		The previous change exposed a latent flaw in
+			key refresh queries for managed-keys when
+			a cached DNSKEY had TTL 0. [RT #41986]
+
+4336.	[bug]		Don't emit records with zero ttl unless the records
+			were learnt with a zero ttl. [RT #41687]
+
+4335.	[bug]		zone->view could be detached too early. [RT #41942]
+
+4333.	[maint]		L.ROOT-SERVERS.NET is now 199.7.83.42 and
+			2001:500:9f::42.
+
+4331.	[func]		When loading managed signed zones detect if the
+			RRSIG's inception time is in the future and regenerate
+			the RRSIG immediately. [RT #41808]
+
+4330.	[protocol]	Identify the PAD option as "PAD" when printing out
+			a message.
+
+	--- 9.9.9b1 released ---
+
+4329.	[func]		Warn about a common misconfiguration when forwarding
+			RFC 1918 zones. [RT #41441]
+
+4328.	[performance]	Add dns_name_fromwire() benchmark test. [RT #41694]
+
+4327.	[func]		Log query and depth counters during fetches when
+			querytrace (./configure --enable-querytrace) is
+			enabled (helps in diagnosing).  [RT #41787]
+
+4326.	[protocol]	Add support for AVC. [RT #41819]
+
+4324.	[bug]		When deleting records from a zone database, interior
+			nodes could be left empty but not deleted, damaging
+			search performance afterward. [RT #40997]
+
+4323.	[bug]		Improve HTTP header processing on statschannel.
+			[RT #41674]
+
+4320.	[bug]		Insufficient memory allocation when handling
+			"none" ACL could cause an assertion failure in
+			named when parsing ACL configuration. [RT #41745]
+
+4319.	[security]	Fix resolver assertion failure due to improper
+			DNAME handling when parsing fetch reply messages.
+			(CVE-2016-1286) [RT #41753]
+
+4318.	[security]	Malformed control messages can trigger assertions
+			in named and rndc. (CVE-2016-1285) [RT #41666]
+
+4317.	[bug]		Age all unused servers on fetch timeout. [RT #41597]
+
+4315.	[bug]		Check that configured view class isn't a meta class.
+			[RT #41572].
+
+4314.	[contrib]	Added 'dnsperf-2.1.0.0-1', a set of performance
+			testing tools provided by Nominum, Inc.
+
+4313.	[bug]		Handle ns_client_replace failures in test mode.
+			[RT #41190]
+
+4312.	[bug]		dig's unknown DNS and EDNS flags (MBZ value) logging
+			was not consistent. [RT #41600]
+
+4311.	[bug]		Prevent "rndc delzone" from being used on
+			response-policy zones. [RT #41593]
+
+4310.	[performance]	Use __builtin_expect() where available to annotate
+			conditions with known behavior. [RT #41411]
+
+4308.	[func]		Added operating system details to "named -V"
+			output. [RT #41452]
+
+4306.	[maint]		Added a PKCS#11 openssl patch supporting
+			version 1.0.2f [RT #38312]
+
+4305.	[bug]		dnssec-signzone was not removing unnecessary rrsigs
+			from the zone's apex. [RT #41483]
+
+4304.	[port]		xfer system test failed as 'tail -n +value' is not
+			portable. [RT #41315]
+
+4302.	[port]		win32: fixed a build error in VS 2015. [RT #41426]
+
+4300.	[cleanup]	Added new querytrace logging. [RT #41155]
+
+4299.	[bug]		Check that exactly totallen bytes are read when
+			reading a RRset from raw files in both single read
+			and incremental modes. [RT #41402]
+
+4297.	[bug]		RPZ zones with errors could cause a crash when a
+			pointer was cleaned up twice. [RT #41518]
+
+4295.	[bug]		An unchecked result in dns_message_pseudosectiontotext()
+			could allow incorrect text formatting of EDNS EXPIRE
+			options. [RT #41437]
+
+4294.	[bug]		Fixed a regression in which "rndc stop -p" failed
+			to print the PID. [RT #41513]
+
+4293.	[bug]		Address memory leak on priming query creation failure.
+			[RT #41512]
+
+4292.	[bug]		Build lib/export/dns/gen with native compiler.
+			[RT #41502]
+
+4291.	[cleanup]	Added a required include to dns/forward.h. [RT #41474]
+
+4289.	[bug]		The server could crash due to memory being used
+			after it was freed if a zone transfer timed out.
+			[RT #41297]
+
+4288.	[bug]		Fixed a regression in resolver.c:possibly_mark()
+			which caused known-bogus servers to be queried
+			anyway. [RT #41321]
+
+4287.	[bug]		Silence an overly noisy log message when message
+			parsing fails. [RT #41374]
+
+4285.	[security]	Specific APL data could trigger a INSIST.
+			(CVE-2015-8704) [RT #41396]
+
+4283.	[bug]		OPENSSL_config is no longer re-callable. [RT #41348]
+
+4281.	[bug]		Teach dns_message_totext about BADCOOKIE. [RT #41257]
+
+4280.	[performance]	Use optimal message sizes to improve compression
+			in AXFRs. This reduces network traffic. [RT #40996]
+
+4277.	[performance]	Improve performance of the RBT, the central zone
+			datastructure: The aux hashtable was improved,
+			hash function was updated to perform more
+			uniform mapping, uppernode was added to
+			dns_rbtnode, and other cleanups and performance
+			improvements were made. [RT #41165]
+
+4276.	[protocol]	Add support for SMIMEA. [RT #40513]
+
+4274.	[performance]	Speed up typemap processing from text. [RT #41196]
+
+4272.	[bug]		dig: the +norrcomments option didn't work with +multi.
+			[RT #41234]
+
+4271.	[test]		Unit tests could deadlock in isc__taskmgr_pause().
+			[RT #41235]
+
+4270.	[security]	Update allowed OpenSSL versions as named is
+			potentially vulnerable to CVE-2015-3193.
+
+4267.	[test]		Check sdlz error handling. [RT #41142]
+
+4266.	[bug]		The sdlz driver failed to pass some errors back to
+			the caller. [RT #41142]
+
+4265.	[bug]		Address unchecked isc_mem_get calls. [RT #41187]
+
+4264.	[bug]		Check const of strchr/strrchr assignments match
+			argument's const status. [RT #41150]
+
+4262.	[bug]		Fixed a bug in epoll socket code that caused
+			sockets to not be registered for ready
+			notification in some cases, causing named to not
+			read from or write to them, resulting in what
+			appear to the user as blocked connections.
+			[RT #41067]
+
+4261.	[maint]		H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
+			[RT #40556]
+
+4260.	[security]	Insufficient testing when parsing a message allowed
+			records with an incorrect class to be be accepted,
+			triggering a REQUIRE failure when those records
+			were subsequently cached. (CVE-2015-8000) [RT #40987]
+
+4258.	[bug]		Limit rndc query message sizes to 32 KiB. This should
+			not break any legitimate rndc commands, but will
+			prevent a rogue rndc query from allocating too
+			much memory. [RT #41073]
+
+4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
+
+4256.	[bug]		Allow rndc command arguments to be quoted so as
+			to allow spaces. [RT #36665]
+
+4254.	[bug]		Address missing lock when getting zone's serial.
+			[RT #41072]
+
+4253.	[security]	Address fetch context reference count handling error
+			on socket error. (CVE-2015-8461)  [RT#40945]
+
+4248.	[performance]	Add an isc_atomic_storeq() function, use it in
+			stats counters to improve performance.
+			[RT #39972] [RT #39979]
+
+4244.	[bug]		The parser was not reporting that use-ixfr is obsolete.
+			[RT #41010]
+
+4241.	[doc]		Improved the TSIG, TKEY, and SIG(0) sections in
+			the ARM. [RT #40955]
+
+4240.	[port]		Fix LibreSSL compatibility. [RT #40977]
+
+4238.	[bug]		Don't send to servers on net zero (0.0.0.0/8).
+			[RT #40947]
+
+4237.	[doc]		Upgraded documentation toolchain to use DocBook 5
+			and dblatex. [RT #40766]
+
+4236.	[performance]	On machines with 2 or more processors (CPU), the
+			default value for the number of UDP listeners
+			has been changed to the number of detected
+			processors minus one. [RT #40761]
+
+4233.	[test]		Add tests for CDS and CDNSKEY with delegation-only.
+			[RT #40597]
+
+4232.	[contrib]	Address unchecked memory allocation calls in
+			query-loc and zone2ldap. [RT #40789]
+
+4229.	[bug]		A variable could be used uninitialized in
+			dns_update_signaturesinc. [RT #40784]
+
+4228.	[bug]		Address race condition in dns_client_destroyrestrans.
+			[RT #40605]
+
+4227.	[bug]		Silence static analysis warnings. [RT #40828]
+
+4226.	[bug]		Address a theoretical shutdown race in
+			zone.c:notify_send_queue(). [RT #38958]
+
+4225.	[port]		freebsd/openbsd:  Use '${CC} -shared' for building
+			shared libraries. [RT #39557]
+
+4221.	[bug]		Resource leak on DNS_R_NXDOMAIN in fctx_create.
+			[RT #40583]
+
+4220.	[doc]		Improve documentation for zone-statistics.
+			[RT #36955]
+
+4219.	[bug]		Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
+			EGAIN when these soft error are not retried for
+			isc_socket_send*().
+
+4217.	[protocol]	Add support for CSYNC. [RT #40532]
+
+4216.	[cleanup]	Silence static analysis warnings. [RT #40649]
+
+4215.	[bug]		nsupdate: skip to next request on GSSTKEY create
+			failure. [RT #40685]
+
+4214.	[protocol]	Add support for TALINK.  [RT #40544]
+
+4213.	[bug]		Don't reuse a cache across multiple classes.
+			[RT #40205]
+
+4210.	[cleanup]	Silence use after free false positive. [RT #40743]
+
+4208.	[bug]		Address null pointer dereferences on out of memory.
+			[RT #40764]
+
+4207.	[bug]		Handle class mismatches with raw zone files.
+			[RT #40746]
+
+4205.	[bug]		'named-checkconf -p' could include unwanted spaces
+			when printing tuples with unset optional fields.
+			[RT #40731]
+
+4204.	[bug]		'dig +trace' failed to lookup the correct type if
+			the initial root NS query was retried. [RT #40296]
+
+4202.	[bug]		isccc_cc_fromwire() could return an incorrect
+			result. [RT #40614]
+
+4201.	[func]		The default preferred-glue is now the address record
+			type of the transport the query was received
+			over.  [RT #40468]
+
+4200.	[cleanup]	win32: update BINDinstall to be BIND release
+			independent. [RT #38915]
+
+4199.	[protocol]	Add support for NINFO, RKEY, SINK, TA.
+			[RT #40545] [RT #40547] [RT #40561] [RT #40563]
+
+4198.	[doc]		Add fetch-quota-params, fetches-per-server, and
+			fetches-per-zone to doc/misc/options. [RT #40601]
+
+4196.	[doc]		Improve how "enum + other" types are documented.
+			[RT #40608]
+
+4194.	[bug]		named-checkconf -p failed to properly print a port
+			range.  [RT #40634]
+
+	--- 9.9.8 released ---
+
+	--- 9.9.8rc1 released ---
+
+4193.	[bug]		Handle broken servers that return BADVERS incorrectly.
+			[RT #40427]
+
+4192.	[bug]		The default rrset-order of random was not always being
+			applied. [RT #40456]
+
+4191.	[protocol]	Accept DNS-SD non LDH PTR records in reverse zones
+			as per RFC 6763. [RT #37889]
+
+4190.	[protocol]	Accept Active Directory gc._msdcs.<forest> name as
+			valid with check-names.  <forest> still needs to be
+			LDH. [RT #40399]
+
+4189.	[cleanup]	Don't exit on overly long tokens in named.conf.
+			[RT #40418]
+
+4188.	[bug]		Support HTTP/1.0 client properly on the statistics
+			channel. [RT #40261]
+
+4187.	[func]		When any RR type implementation doesn't
+			implement totext() for the RDATA's wire
+			representation and returns ISC_R_NOTIMPLEMENTED,
+			such RDATA is now printed in unknown
+			presentation format (RFC 3597). RR types affected
+			include LOC(29) and APL(42). [RT #40317].
+
+4183.	[cleanup]	Use timing-safe memory comparisons in cryptographic
+			code. Also, the timing-safe comparison functions have
+			been renamed to avoid possible confusion with
+			memcmp(). Thanks to Loganaden Velvindron of
+			AFRINIC. [RT #40148]
+
+4182.	[cleanup]	Use mnemonics for RR class and type comparisons.
+			[RT #40297]
+
+4181.	[bug]		Queued notify messages could be dequeued from the
+			wrong rate limiter queue. [RT #40350]
+
+4179.	[bug]		Fix double frees in getaddrinfo() in libirs.
+			[RT #40209]
+
+4178.	[bug]		Fix assertion failure in parsing UNSPEC(103) RR from
+			text. [RT #40274]
+
+4177.	[bug]		Fix assertion failure in parsing NSAP records from
+			text. [RT #40285]
+
+4176.	[bug]		Address race issues with lwresd. [RT #40284]
+
+4175.	[bug]		TKEY with GSS-API keys needed bigger buffers.
+			[RT #40333]
+
+4174.	[bug]		"dnssec-coverage -r" didn't handle time unit
+			suffixes correctly. [RT #38444]
+
+4173.	[bug]		dig +sigchase was not properly matching the trusted
+			key. [RT #40188]
+
+4172.	[bug]		Named / named-checkconf didn't handle a view of CLASS0.
+			[RT #40265]
+
+4171.	[bug]		Fixed incorrect class checks in TSIG RR
+			implementation. [RT #40287]
 
 4170.	[security]	An incorrect boundary check in the OPENPGPKEY
 			rdatatype could trigger an assertion failure.
 			(CVE-2015-5986) [RT #40286]
 
+4169.	[test]		Added a 'wire_test -d' option to read input as
+			raw binary data, for use as a fuzzing harness.
+			[RT #40312]
+
 4168.	[security]	A buffer accounting error could trigger an
-			assertion failure when parsing certain malformed 
+			assertion failure when parsing certain malformed
 			DNSSEC keys. (CVE-2015-5722) [RT #40212]
 
-	--- 9.9.7-P2 released ---
+	--- 9.9.8b1 released ---
 
 4165.	[security]	A failure to reset a value to NULL in tkey.c could
 			result in an assertion failure. (CVE-2015-5477)
 			[RT #40046]
 
-	--- 9.9.7-P1 released ---
-
-4138.	[bug]		An uninitialized value in validator.c could result
+4164.	[bug]		Don't rename slave files and journals on out of memory.
+			[RT #40033]
+
+4163.	[bug]		Address compiler warnings. [RT #40024]
+
+4162.	[bug]		httpdmgr->flags was not being initialized. [RT #40017]
+
+4159.	[cleanup]	Alphabetize dig's help output. [RT #39966]
+
+4158.	[protocol]	Support the printing of EDNS COOKIE and EXPIRE options.
+			[RT #39928]
+
+4154.	[bug]		A OPT record should be included with the FORMERR
+			response when there is a malformed EDNS option.
+			[RT #39647]
+
+4153.	[bug]		Check that non significant ECS bits are zero on
+			receipt. [RT #39647]
+
+4151.	[bug]		'rndc flush' could cause a deadlock. [RT #39835]
+
+4150.	[bug]		win32: listen-on-v6 { any; }; was not working.  Apply
+			minimal fix.  [RT #39667]
+
+4149.	[bug]		Fixed a race condition in the getaddrinfo()
+			implementation in libirs. [RT #39899]
+
+4148.	[bug]		Fix a bug when printing zone names with '/' character
+			in XML and JSON statistics output. [RT #39873]
+
+4147.	[bug]		Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
+			was returning referrals rather than nodata responses
+			when the AAAA records were filtered.  [RT #39843]
+
+4146.	[bug]		Address reference leak that could prevent a clean
+			shutdown. [RT #37125]
+
+4145.	[bug]		Not all unassociated adb entries where being printed.
+			[RT #37125]
+
+4143.	[bug]		serial-query-rate was not effective for notify.
+			[RT #39858]
+
+4142.	[bug]		rndc addzone with view specified saved NZF config
+			that could not be read back by named. This has now
+			been fixed. [RT #39845]
+
+4138.	[security]	An uninitialized value in validator.c could result
 			in an assertion failure. (CVE-2015-4620) [RT #39795]
 
+4137.	[bug]		Make rndc reconfig report configuration errors the
+			same way rndc reload does. [RT #39635]
+
+4132.	[cleanup]	dig: added +rd as a synonym for +recurse,
+			added +class as an unabbreviated alternative
+			to +cl. [RT #39686]
+
+4130.	[bug]		The compatibility shim for *printf() misprinted some
+			large numbers. [RT #39586]
+
+4129.	[port]		Address API changes in OpenSSL 1.1.0. [RT #39532]
+
+4128.	[bug]		Address issues raised by Coverity 7.6. [RT #39537]
+
+4127.	[protocol]	CDS and CDNSKEY need to be signed by the key signing
+			key as per RFC 7344, Section 4.1. [RT #37215]
+
+4123.	[port]		Added %z (size_t) format options to the portable
+			internal printf/sprintf implementation. [RT #39586]
+
+4118.	[bug]		Teach isc-config.sh about irs. [RT #39213]
+
+4117.	[protocol]	Add EMPTY.AS112.ARPA as per RFC 7534.
+
+4113.	[test]		Check for Net::DNS is some system test
+			prerequisites. [RT #39369]
+
+4112.	[bug]		Named failed to load when "root-delegation-only"
+			was used without a list of domains to exclude.
+			[RT #39380]
+
+4111.	[doc]		Alphabetize rndc man page. [RT #39360]
+
+4110.	[bug]		Address memory leaks / null pointer dereferences
+			on out of memory. [RT #39310]
+
+4109.	[port]		linux: support reading the local port range from
+			net.ipv4.ip_local_port_range. [RT # 39379]
+
+4107.	[bug]		Address potential deadlock when updating zone content.
+			[RT #39269]
+
+4106.	[port]		Improve readline support. [RT #38938]
+
+4105.	[port]		Misc fixes for Microsoft Visual Studio
+			2015 CTP6 in 64 bit mode. [RT #39308]
+
+4104.	[bug]		Address uninitialized elements. [RT #39252]
+
+4102.	[bug]		Fix a use after free bug introduced in change
+			#4094.  [RT #39281]
+
+4101.	[bug]		dig: the +split option didn't work with +short.
+			[RT #39291]
+
+4100.	[bug]		Inherited owernames on the line immediately following
+			a $INCLUDE were not working.  [RT #39268]
+
+4099.	[port]		clang: make unknown commandline options hard errors
+			when determining what options are supported.
+			[RT #39273]
+
+4098.	[bug]		Address use-after-free issue when using a
+			predecessor key with dnssec-settime. [RT #39272]
+
+4097.	[func]		Add additional logging about xfrin transfer status.
+			[RT #39170]
+
+4096.	[bug]		Fix a use after free of query->sendevent.
+			[RT #39132]
+
+4094.	[bug]		A race during shutdown or reconfiguration could
+			cause an assertion in mem.c. [RT #38979]
+
+4091.	[cleanup]	Some cleanups in isc mem code. [RT #38896]
+
+4090.	[bug]		Fix a crash while parsing malformed CAA RRs in
+			presentation format, i.e., from text such as
+			from master files. Thanks to John Van de
+			Meulebrouck Brendgard for discovering and
+			reporting this problem. [RT #39003]
+
+4089.	[bug]		Send notifies immediately for slave zones during
+			startup. [RT #38843]
+
+4088.	[port]		Fixed errors when building with libressl. [RT #38899]
+
+4087.	[bug]		Fix a crash due to use-after-free due to sequencing
+			of tasks actions. [RT #38495]
+
+4085.	[bug]		ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
+			[RT #38828]
+
+4084.	[bug]		Fix a possible race in updating stats counters.
+			[RT #38826]
+
+4082.	[bug]		Incrementally sign large inline zone deltas.
+			[RT #37927]
+
+4081.	[cleanup]	Use dns_rdatalist_init consistently. [RT #38759]
+
+4077.	[test]		Add static-stub regression test for DS NXDOMAIN
+			return making the static stub disappear. [RT #38564]
+
+4076.	[bug]		Named could crash on shutdown with outstanding
+			reload / reconfig events. [RT #38622]
+
+4075.	[bug]		Increase nsupdate's input buffer to accomodate
+			very large RRs. [RT #38689]
+
+4074.	[cleanup]	Cleaned up more warnings from gcc -Wshadow. [RT #38708]
+
+4073.	[cleanup]	Add libjson-c version number reporting to
+			"named -V"; normalize version number formatting.
+			[RT #38056]
+
+4072.	[func]		Add a --enable-querytrace configure switch for
+			very verbose query trace logging. (This option
+			has a negative performance impact and should be
+			used only for debugging.) [RT #37520]
+
+4070.	[bug]		Fix a segfault in nslookup in a query such as
+			"nslookup isc.org AMS.SNS-PB.ISC.ORG -all".
+			[RT #38548]
+
+4069.	[doc]		Reorganize options in the nsupdate man page.
+			[RT #38515]
+
+4067.	[cleanup]	Reduce noise from RRL when query logging is
+			disabled. [RT #38648]
+
+4066.	[doc]		Reorganize options in the dig man page. [RT #38516]
+
+4064.	[contrib]	dnssec-keyset.sh: Generates a specified number
+			of DNSSEC keys with timing set to implement a
+			pre-publication key rollover strategy. Thanks
+			to Jeffry A. Spain. [RT #38459]
+
+4063.	[bug]		Asynchronous zone loads were not handled
+			correctly when the zone load was already in
+			progress; this could trigger a crash in zt.c.
+			[RT #37573]
+
+4062.	[bug]		Fix an out-of-bounds read in RPZ code. If the
+			read succeeded, it doesn't result in a bug
+			during operation. If the read failed, named
+			could segfault. [RT #38559]
+
+3938.	[func]		Added quotas to be used in recursive resolvers
+			that are under high query load for names in zones
+			whose authoritative servers are nonresponsive or
+			are experiencing a denial of service attack.
+
+			- "fetches-per-server" limits the number of
+			  simultaneous queries that can be sent to any
+			  single authoritative server.  The configured
+			  value is a starting point; it is automatically
+			  adjusted downward if the server is partially or
+			  completely non-responsive. The algorithm used to
+			  adjust the quota can be configured via the
+			  "fetch-quota-params" option.
+			- "fetches-per-zone" limits the number of
+			  simultaneous queries that can be sent for names
+			  within a single domain.  (Note: Unlike
+			  "fetches-per-server", this value is not
+			  self-tuning.)
+			- New stats counters have been added to count
+			  queries spilled due to these quotas.
+
+			These options are not available by default;
+			use "configure --enable-fetchlimit" (or
+			--enable-developer) to include them in the build.
+
+			See the ARM for details of these options. [RT #37125]
+
+3937.	[func]		Added some debug logging to better indicate the
+			conditions causing SERVFAILs when resolving.
+			[RT #35538]
+
 	--- 9.9.7 released ---
 
 	--- 9.9.7rc2 released ---
@@ -26,7 +720,7 @@
 4061.	[bug]		Handle timeout in legacy system test. [RT #38573]
 
 4060.	[bug]		dns_rdata_freestruct could be called on a
-			uninitialised structure when handling a error.
+			uninitialized structure when handling a error.
 			[RT #38568]
 
 4059.	[bug]		Addressed valgrind warnings. [RT #38549]
--- a/external/bsd/bind/dist/COPYRIGHT	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/COPYRIGHT	Tue Apr 25 19:54:07 2017 +0000
@@ -1,4 +1,4 @@
-Copyright (C) 2004-2015  Internet Systems Consortium, Inc. ("ISC")
+Copyright (C) 2004-2017  Internet Systems Consortium, Inc. ("ISC")
 Copyright (C) 1996-2003  Internet Software Consortium.
 
 Permission to use, copy, modify, and/or distribute this software for any
--- a/external/bsd/bind/dist/FAQ	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/FAQ	Tue Apr 25 19:54:07 2017 +0000
@@ -1,10 +1,6 @@
-Frequently Asked Questions about BIND 9
-
-Copyright  2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
+Copyright ? 2000-2010, 2013-2016 Internet Systems Consortium, Inc.
 ("ISC")
 
-Copyright  2000-2003 Internet Software Consortium.
-
 -----------------------------------------------------------------------
 
 1. Compilation and Installation Questions
@@ -94,7 +90,7 @@
    rejecting the TSIG. Why?
 
 A: This may be a clock skew problem. Check that the the clocks on the
-   client and server are properly synchronised (e.g., using ntp).
+   client and server are properly synchronized (e.g., using ntp).
 
 Q: I see a log message like the following. Why?
 
--- a/external/bsd/bind/dist/FAQ.xml	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/FAQ.xml	Tue Apr 25 19:54:07 2017 +0000
@@ -1,7 +1,5 @@
-<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
-       "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" []>
 <!--
- - Copyright (C) 2004-2010, 2013, 2014  Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2010, 2013-2016  Internet Systems Consortium, Inc. ("ISC")
  - Copyright (C) 2000-2003  Internet Software Consortium.
  -
  - Permission to use, copy, modify, and/or distribute this software for any
@@ -17,10 +15,9 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<!-- Id: FAQ.xml,v 1.54 2010/01/19 23:48:55 tbox Exp  -->
+<!-- Converted by db4-upgrade version 1.0 -->
+<article xmlns="http://docbook.org/ns/docbook" version="5.0" class="faq">
 
-<article class="faq">
-  <title>Frequently Asked Questions about BIND 9</title>
   <articleinfo>
     <copyright>
       <year>2004</year>
@@ -32,6 +29,8 @@
       <year>2010</year>
       <year>2013</year>
       <year>2014</year>
+      <year>2015</year>
+      <year>2016</year>
       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
     </copyright>
     <copyright>
@@ -42,10 +41,10 @@
       <holder>Internet Software Consortium.</holder>
     </copyright>
   </articleinfo>
-  <qandaset defaultlabel='qanda'>
-	  
-    <qandadiv><title>Compilation and Installation Questions</title>	  
-    
+  <qandaset defaultlabel="qanda">
+
+    <qandadiv><title>Compilation and Installation Questions</title>
+
     <qandaentry>
       <question>
 	<para>
@@ -61,7 +60,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -70,7 +69,7 @@
       </question>
       <answer>
 	<para>
-	  Short Answer: No. 
+	  Short Answer: No.
 	</para>
 	<para>
 	  Long Answer: There really isn't a default configuration which fits
@@ -93,9 +92,9 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     </qandadiv> <!-- Compilation and Installation Questions -->
-	    
+
     <qandadiv><title>Configuration and Setup Questions</title>
 
     <qandaentry>
@@ -125,7 +124,7 @@
 	</informalexample>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <!-- configuration -->
       <question>
@@ -223,7 +222,7 @@
       <answer>
 	<para>
 	  This may be a clock skew problem.  Check that the the clocks
-	  on the client and server are properly synchronised (e.g.,
+	  on the client and server are properly synchronized (e.g.,
 	  using ntp).
 	</para>
       </answer>
@@ -251,7 +250,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -266,7 +265,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -359,7 +358,7 @@
 	</informalexample>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -392,7 +391,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -416,7 +415,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -501,7 +500,7 @@
 	  You are running chrooted (-t) and have not supplied local timezone
 	  information in the chroot area.
 	</para>
-	<simplelist>
+	<simplelist type="vert">
 	  <member>FreeBSD: /etc/localtime</member>
 	  <member>Solaris: /etc/TIMEZONE and /usr/share/lib/zoneinfo</member>
 	  <member>OSF: /etc/zoneinfo/localtime</member>
@@ -511,7 +510,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -551,7 +550,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -603,7 +602,7 @@
 	</informalexample>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -694,9 +693,9 @@
 </programlisting>
       </answer>
     </qandaentry>
-    
+
     </qandadiv> <!-- Configuration and Setup Questions -->
-    
+
     <qandadiv><title>Operations Questions</title>
 
     <qandaentry>
@@ -768,7 +767,7 @@
     </qandadiv> <!-- Operations Questions -->
 
     <qandadiv><title>General Questions</title>
-	    
+
     <qandaentry>
       <question>
 	<para>
@@ -807,14 +806,13 @@
 	  of sending dynamic update requests to DNS servers without
 	  being specifically configured to do so.  If the update
 	  requests are coming from a Windows 2000 machine, see
-	  <ulink
-	   url="http://support.microsoft.com/support/kb/articles/q246/8/04.asp">
-  &lt;http://support.microsoft.com/support/kb/articles/q246/8/04.asp&gt;</ulink>
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://support.microsoft.com/support/kb/articles/q246/8/04.asp">
+  &lt;http://support.microsoft.com/support/kb/articles/q246/8/04.asp&gt;</link>
 	  for information about how to turn them off.
 	</para>
       </answer>
     </qandaentry>
-	    
+
     <qandaentry>
       <question>
 	<para>
@@ -849,7 +847,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -867,7 +865,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -883,7 +881,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -910,7 +908,7 @@
       </answer>
     </qandaentry>
 
-    <qandaentry>	    
+    <qandaentry>
       <question>
 	<para>
 	  I don't get RRSIG's returned when I use "dig +dnssec".
@@ -922,7 +920,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -959,7 +957,7 @@
 	  usage rules and are leaking queries to the Internet.  You
 	  should establish your own zones for these addresses to prevent
 	  you querying the Internet's name servers for these addresses.
-	  Please see <ulink url="http://as112.net/">&lt;http://as112.net/&gt;</ulink>
+	  Please see <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://as112.net/">&lt;http://as112.net/&gt;</link>
 	  for details of the problems you are causing and the counter
 	  measures that have had to be deployed.
 	</para>
@@ -1006,7 +1004,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -1083,9 +1081,9 @@
     </qandaentry>
 
     </qandadiv> <!-- General Questions -->
-    
+
     <qandadiv><title>Operating-System Specific Questions</title>
-	    
+
     <qandadiv><title>HPUX</title>
 
     <qandaentry>
@@ -1113,9 +1111,9 @@
     </qandadiv> <!-- HPUX -->
 
     <qandadiv><title>Linux</title>
-	    
+
     <qandaentry>
-      <question> 
+      <question>
 	<para>
 	  Why do I get the following errors:
 <programlisting>general: errno2result.c:109: unexpected error:
@@ -1129,7 +1127,7 @@
 	</para>
 	<para>
 	  See:
-	  <ulink url="http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2">&lt;http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2&gt;</ulink>
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2">&lt;http://marc.theaimsgroup.com/?l=linux-netdev&amp;m=113081708031466&amp;w=2&gt;</link>
 	</para>
       </answer>
     </qandaentry>
@@ -1146,9 +1144,9 @@
 	  non-blocking is ignored.  It is reported that setting
 	  xfrm_larval_drop to 1 helps but this may have negative side effects.
 	  See:
-<ulink url="https://bugzilla.redhat.com/show_bug.cgi?id=427629">&lt;https://bugzilla.redhat.com/show_bug.cgi?id=427629&gt;</ulink>
+<link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://bugzilla.redhat.com/show_bug.cgi?id=427629">&lt;https://bugzilla.redhat.com/show_bug.cgi?id=427629&gt;</link>
 	  and
-<ulink url="http://lkml.org/lkml/2007/12/4/260">&lt;http://lkml.org/lkml/2007/12/4/260&gt;</ulink>.
+<link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://lkml.org/lkml/2007/12/4/260">&lt;http://lkml.org/lkml/2007/12/4/260&gt;</link>.
 	</para>
 	<para>
 	xfrm_larval_drop can be set to 1 by the following procedure:
@@ -1178,7 +1176,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -1197,7 +1195,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -1218,7 +1216,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -1244,8 +1242,7 @@
 
 	<para>
 	   Red Hat have adopted the National Security Agency's
-	   SELinux security policy (see <ulink
-   url="http://www.nsa.gov/selinux">&lt;http://www.nsa.gov/selinux&gt;</ulink>)
+	   SELinux security policy (see <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://www.nsa.gov/selinux">&lt;http://www.nsa.gov/selinux&gt;</link>)
 	   and recommendations for BIND security , which are more
 	   secure than running named in a chroot and make use of
 	   the bind-chroot environment unnecessary .
@@ -1279,7 +1276,7 @@
 	  able to write or create files except in the directories
 	  above, with SELinux in Enforcing mode.
 	</para>
-  
+
 	<para>
 	  So, to allow named to update slave or DDNS zone files,
 	  it is best to locate them in $ROOTDIR/var/named/slaves,
@@ -1290,7 +1287,7 @@
 	type slave;
 	file "slaves/slave.zone.db";
 	...
-};   
+};
 zone "ddns.zone." IN  {
 	type master;
 	allow-updates {...};
@@ -1323,13 +1320,13 @@
 	  system-config-securitylevel GUI, using the 'setsebool'
 	  command, or in /etc/selinux/targeted/booleans.
 	</para>
-  
+
 	<para>
 	  You can disable SELinux protection for named entirely by
 	  setting the 'named_disable_trans=1' SELinux tunable boolean
 	  parameter.
 	</para>
-    
+
 	<para>
 	  The SELinux named policy defines these SELinux contexts for named:
 	  <informalexample>
@@ -1340,7 +1337,7 @@
 	    </programlisting>
 	  </informalexample>
 	</para>
-   
+
 	<para>
 	  If you want to retain use of the SELinux policy for named,
 	  and put named files in different locations, you can do
@@ -1358,7 +1355,7 @@
 	    </programlisting>
 	  </informalexample>
 	</para>
-  
+
 	<para>
 	  To create a custom modifiable named data location, e.g.
 	  '/var/log/named' for a log file, do:
@@ -1368,7 +1365,7 @@
 	    </programlisting>
 	  </informalexample>
 	</para>
-   
+
 	<para>
    To create a custom zone file location, e.g. /root/zones/, do:
 	  <informalexample>
@@ -1377,7 +1374,7 @@
 	    </programlisting>
 	  </informalexample>
 	</para>
-  
+
 	<para>
 	  See these man-pages for more information : selinux(8),
 	  named_selinux(8), chcon(1), setsebool(8)
@@ -1403,8 +1400,8 @@
       </question>
       <answer>
 	<para>
-	  Ubuntu uses AppArmor <ulink url="http://en.wikipedia.org/wiki/AppArmor">
-          &lt;http://en.wikipedia.org/wiki/AppArmor&gt;</ulink> in
+	  Ubuntu uses AppArmor <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://en.wikipedia.org/wiki/AppArmor">
+          &lt;http://en.wikipedia.org/wiki/AppArmor&gt;</link> in
 	  addition to normal file system permissions to protect the system.
 	</para>
 	<para>
@@ -1438,11 +1435,11 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     </qandadiv> <!-- Linux -->
-    
+
     <qandadiv><title>Windows</title>
-	    
+
     <qandaentry>
       <question>
 	<para>
@@ -1463,7 +1460,7 @@
 	</para>
       </answer>
     </qandaentry>
-    
+
     <qandaentry>
       <question>
 	<para>
@@ -1489,11 +1486,11 @@
 	</informalexample>
       </answer>
     </qandaentry>
-	    
+
     </qandadiv> <!-- Windows -->
-    
+
     <qandadiv><title>FreeBSD</title>
-	    
+
     <qandaentry>
       <question>
 	<para>
@@ -1513,16 +1510,16 @@
 	</informalexample>
 	<para>
 	  See also
-	  <ulink url="http://people.freebsd.org/~dougb/randomness.html">
-	  &lt;http://people.freebsd.org/~dougb/randomness.html&gt;</ulink>.
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://people.freebsd.org/~dougb/randomness.html">
+	  &lt;http://people.freebsd.org/~dougb/randomness.html&gt;</link>.
 	</para>
       </answer>
     </qandaentry>
-    
+
     </qandadiv> <!-- FreeBSD -->
-    
+
     <qandadiv><title>Solaris</title>
-	    
+
     <qandaentry>
       <question>
 	<para>
@@ -1534,15 +1531,14 @@
 	  Sun has a blog entry describing how to do this.
 	</para>
 	<para>
-	  <ulink
-	  url="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris">
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris">
 	 &lt;http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris&gt;
-	  </ulink>
+	  </link>
 	</para>
       </answer>
     </qandaentry>
-    
-    </qandadiv>
+
+    </qandadiv> <!-- Solaris -->
 
     <qandadiv><title>Apple Mac OS X</title>
 
@@ -1558,7 +1554,7 @@
 	</para>
 	<informalexample>
 	  <programlisting>
-% sudo rndc-confgen  > /etc/rndc.conf</programlisting>
+% sudo rndc-confgen  &gt; /etc/rndc.conf</programlisting>
 	</informalexample>
 	<para>
 	  Copy the key statement from /etc/rndc.conf into /etc/rndc.key, e.g.:
@@ -1606,8 +1602,8 @@
       </answer>
     </qandaentry>
 
-    </qandadiv>
-    
+    </qandadiv> <!-- Apple Mac OS X -->
+
     </qandadiv> <!-- Operating-System Specific Questions -->
 
   </qandaset>
--- a/external/bsd/bind/dist/Makefile.in	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/Makefile.in	Tue Apr 25 19:54:07 2017 +0000
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2009, 2011-2014  Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2009, 2011-2015  Internet Systems Consortium, Inc. ("ISC")
 # Copyright (C) 1998-2002  Internet Software Consortium.
 #
 # Permission to use, copy, modify, and/or distribute this software for any
@@ -19,7 +19,7 @@
 VPATH =		@srcdir@
 top_srcdir =	@top_srcdir@
 
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
 
 SUBDIRS =	make unit lib bin doc @LIBEXPORT@
 TARGETS =
@@ -32,6 +32,9 @@
 
 @BIND9_MAKE_RULES@
 
+newrr:
+	cd lib/dns; ${MAKE} newrr
+
 distclean::
 	rm -f config.cache config.h config.log config.status TAGS
 	rm -f libtool isc-config.sh configure.lineno
--- a/external/bsd/bind/dist/README	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/README	Tue Apr 25 19:54:07 2017 +0000
@@ -51,20 +51,79 @@
         For up-to-date release notes and errata, see
         http://www.isc.org/software/bind9/releasenotes
 
-BIND 9.9.7-P3
+BIND 9.9.9-P7
+
+	This version contains fixes for CVE-2017-3136 and CVE-2017-3137,
+	and updates the built in trusted keys for the root zone.
+
+BIND 9.9.9-P6
+
+	This version contains a fix for CVE-2017-3135, and a bug fix
+	for a regression in CNAME/DNAME caching that was introduced
+	in an earlier security release.
+
+BIND 9.9.9-P5
+
+	This version contains fixes for CVE-2016-9131, CVE-2016-9147,
+	CVE-2016-9444 and CVE-2016-9778.
+
+BIND 9.9.9-P4
 
-	BIND 9.9.7-P3 is a security release addressing the flaws
-	described in CVE-2015-5722 and CVE-2015-5986.
+	This version contains a fix for CVE-2016-8864.
+
+BIND 9.9.9-P3
+
+	This version contains a fix for CVE-2016-2776.
+
+BIND 9.9.9-P2
 
-BIND 9.9.7-P2
+	This version contains a fix for CVE-2016-2775 and addresses
+	two regressions introduced with BIND 9.9.9.
+
+BIND 9.9.9-P1
+
+	This version contains two urgent fixes to BIND 9.9.9:
+	1) Windows installation was failing without manual updating
+	   of BINDinstall's attributes.
+	2) A race condition was causing instability in the rbt
+	   tree state.
 
-       BIND 9.9.7-P2 is a security release addressing the flaw
-       described in CVE-2015-5477.
+BIND 9.9.9
+
+	BIND 9.9.9 is a maintenance release and addresses bugs found
+	in BIND 9.9.8 and earlier, as well as the security flaws
+	described in CVE-2015-8000, CVE-2015-8461, CVE-2015-8704,
+	CVE-2016-1285, and CVE-2016-1286.
+
+BIND 9.9.8
+
+	BIND 9.9.8 is a maintenance release and addresses bugs
+	found in BIND 9.9.7 and earlier, as well as the security
+	flaws described in CVE-2015-4620, CVE-2015-5477,
+	CVE-2015-5722, and CVE-2015-5986.
+
+	It also makes the following new features available via a
+	compile-time option:
 
-BIND 9.9.7-P1
+	- New "fetchlimit" quotas are now available for the use of
+	  recursive resolvers that are are under high query load for
+	  domains whose authoritative servers are nonresponsive or are
+	  experiencing a denial of service attack.
 
-       BIND 9.9.7-P1 is a security release addressing the flaw
-       described in CVE-2015-4620.
+	  + "fetches-per-server" limits the number of simultaneous queries
+	    that can be sent to any single authoritative server.  The
+	    configured value is a starting point; it is automatically
+	    adjusted downward if the server is partially or completely
+	    non-responsive. The algorithm used to adjust the quota can be
+	    configured via the "fetch-quota-params" option.
+	  + "fetches-per-zone" limits the number of simultaneous queries
+	    that can be sent for names within a single domain.  (Note:
+	    Unlike "fetches-per-server", this value is not self-tuning.)
+	  + New stats counters have been added to count
+	    queries spilled due to these quotas.
+
+	  NOTE: These options are NOT built in by default; use
+	  "configure --enable-fetchlimit" to enable them.
 
 BIND 9.9.7
 
@@ -276,7 +335,7 @@
 	a nonstandard prefix, you can tell configure where to
 	look for it using "--with-openssl=/prefix".
 
-	On some platforms it is necessary to explictly request large
+	On some platforms it is necessary to explicitly request large
 	file support to handle files bigger than 2GB.  This can be
 	done by "--enable-largefile" on the configure command line.
 
@@ -388,7 +447,9 @@
 			  server addresses and keys
 
 	   [tuning]	  Changes to built-in configuration defaults
-	   		  and constants to improve performanceo
+			  and constants to improve performance
+
+	   [performance]  Other changes to improve server performance
 
 	   [protocol]	  Updates to the DNS protocol such as new
 			  RR types
--- a/external/bsd/bind/dist/acconfig.h	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/acconfig.h	Tue Apr 25 19:54:07 2017 +0000
@@ -1,7 +1,7 @@
-/*	$NetBSD: acconfig.h,v 1.4.6.3 2014/12/25 17:53:58 msaitoh Exp $	*/
+/*	$NetBSD: acconfig.h,v 1.4.6.4 2017/04/25 19:54:07 snj Exp $	*/
 
 /*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014, 2016  Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1999-2003  Internet Software Consortium.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
@@ -151,3 +151,6 @@
 
 /* Define if threads need PTHREAD_SCOPE_SYSTEM */
 #undef NEED_PTHREAD_SCOPE_SYSTEM
+
+/* Define to 1 if you have the uname library function. */
+#undef HAVE_UNAME
--- a/external/bsd/bind/dist/bin/check/Makefile.in	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/Makefile.in	Tue Apr 25 19:54:07 2017 +0000
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2007, 2009, 2012, 2014  Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2007, 2009, 2012, 2014, 2015  Internet Systems Consortium, Inc. ("ISC")
 # Copyright (C) 2000-2003  Internet Software Consortium.
 #
 # Permission to use, copy, modify, and/or distribute this software for any
@@ -19,7 +19,7 @@
 VPATH =		@srcdir@
 top_srcdir =	@top_srcdir@
 
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
 
 @BIND9_MAKE_INCLUDES@
 
--- a/external/bsd/bind/dist/bin/check/check-tool.c	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/check-tool.c	Tue Apr 25 19:54:07 2017 +0000
@@ -1,7 +1,7 @@
-/*	$NetBSD: check-tool.c,v 1.2.6.3 2014/12/25 17:53:59 msaitoh Exp $	*/
+/*	$NetBSD: check-tool.c,v 1.2.6.4 2017/04/25 19:54:09 snj Exp $	*/
 
 /*
- * Copyright (C) 2004-2012  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2012, 2015  Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 2000-2002  Internet Software Consortium.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
@@ -35,6 +35,7 @@
 #include <isc/mem.h>
 #include <isc/netdb.h>
 #include <isc/net.h>
+#include <isc/print.h>
 #include <isc/region.h>
 #include <isc/stdio.h>
 #include <isc/string.h>
--- a/external/bsd/bind/dist/bin/check/named-checkconf.8	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkconf.8	Tue Apr 25 19:54:07 2017 +0000
@@ -1,6 +1,6 @@
-.\"	$NetBSD: named-checkconf.8,v 1.2.6.2 2014/12/25 17:53:59 msaitoh Exp $
+.\"	$NetBSD: named-checkconf.8,v 1.2.6.3 2017/04/25 19:54:09 snj Exp $
 .\"
-.\" Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
 .\" Copyright (C) 2000-2002 Internet Software Consortium.
 .\" 
 .\" Permission to use, copy, modify, and/or distribute this software for any
@@ -15,115 +15,131 @@
 .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 .\" PERFORMANCE OF THIS SOFTWARE.
 .\"
-.\" Id
-.\"
 .hy 0
 .ad l
-.\"     Title: named\-checkconf
+'\" t
+.\"     Title: named-checkconf
 .\"    Author: 
-.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\"      Date: January 10, 2014
+.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
+.\"      Date: 2014-01-10
 .\"    Manual: BIND9
-.\"    Source: BIND9
+.\"    Source: ISC
+.\"  Language: English
 .\"
-.TH "NAMED\-CHECKCONF" "8" "January 10, 2014" "BIND9" "BIND9"
+.TH "NAMED\-CHECKCONF" "8" "2014\-01\-10" "ISC" "BIND9"
+.\" -----------------------------------------------------------------
+.\" * Define some portability stuff
+.\" -----------------------------------------------------------------
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.\" http://bugs.debian.org/507673
+.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.ie \n(.g .ds Aq \(aq
+.el       .ds Aq '
+.\" -----------------------------------------------------------------
+.\" * set default formatting
+.\" -----------------------------------------------------------------
 .\" disable hyphenation
 .nh
 .\" disable justification (adjust text to left margin only)
 .ad l
+.\" -----------------------------------------------------------------
+.\" * MAIN CONTENT STARTS HERE *
+.\" -----------------------------------------------------------------
 .SH "NAME"
-named\-checkconf \- named configuration file syntax checking tool
+named-checkconf \- named configuration file syntax checking tool
 .SH "SYNOPSIS"
-.HP 16
+.HP \w'\fBnamed\-checkconf\fR\ 'u
 \fBnamed\-checkconf\fR [\fB\-h\fR] [\fB\-v\fR] [\fB\-j\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] {filename} [\fB\-p\fR] [\fB\-x\fR] [\fB\-z\fR]
 .SH "DESCRIPTION"
 .PP
 \fBnamed\-checkconf\fR
 checks the syntax, but not the semantics, of a
 \fBnamed\fR
-configuration file. The file is parsed and checked for syntax errors, along with all files included by it. If no file is specified,
-\fI/etc/named.conf\fR
-is read by default.
+configuration file\&. The file is parsed and checked for syntax errors, along with all files included by it\&. If no file is specified,
+/etc/named\&.conf
+is read by default\&.
 .PP
 Note: files that
 \fBnamed\fR
 reads in separate parser contexts, such as
-\fIrndc.key\fR
+rndc\&.key
 and
-\fIbind.keys\fR, are not automatically read by
-\fBnamed\-checkconf\fR. Configuration errors in these files may cause
+bind\&.keys, are not automatically read by
+\fBnamed\-checkconf\fR\&. Configuration errors in these files may cause
 \fBnamed\fR
 to fail to run, even if
 \fBnamed\-checkconf\fR
-was successful.
+was successful\&.
 \fBnamed\-checkconf\fR
-can be run on these files explicitly, however.
+can be run on these files explicitly, however\&.
 .SH "OPTIONS"
 .PP
 \-h
 .RS 4
-Print the usage summary and exit.
+Print the usage summary and exit\&.
 .RE
 .PP
 \-t \fIdirectory\fR
 .RS 4
 Chroot to
-\fIdirectory\fR
-so that include directives in the configuration file are processed as if run by a similarly chrooted named.
+directory
+so that include directives in the configuration file are processed as if run by a similarly chrooted named\&.
 .RE
 .PP
 \-v
 .RS 4
 Print the version of the
 \fBnamed\-checkconf\fR
-program and exit.
+program and exit\&.
 .RE
 .PP
 \-p
 .RS 4
 Print out the
-\fInamed.conf\fR
-and included files in canonical form if no errors were detected.
+named\&.conf
+and included files in canonical form if no errors were detected\&.
 .RE
 .PP
 \-x
 .RS 4
-When printing the configuration files in canonical form, obscure shared secrets by replacing them with strings of question marks ('?'). This allows the contents of
-\fInamed.conf\fR
-and related files to be shared \(em for example, when submitting bug reports \(em without compromising private data. This option cannot be used without
-\fB\-p\fR.
+When printing the configuration files in canonical form, obscure shared secrets by replacing them with strings of question marks (\*(Aq?\*(Aq)\&. This allows the contents of
+named\&.conf
+and related files to be shared \(em for example, when submitting bug reports \(em without compromising private data\&. This option cannot be used without
+\fB\-p\fR\&.
 .RE
 .PP
 \-z
 .RS 4
 Perform a test load of all master zones found in
-\fInamed.conf\fR.
+named\&.conf\&.
 .RE
 .PP
 \-j
 .RS 4
-When loading a zonefile read the journal if it exists.
+When loading a zonefile read the journal if it exists\&.
 .RE
 .PP
 filename
 .RS 4
-The name of the configuration file to be checked. If not specified, it defaults to
-\fI/etc/named.conf\fR.
+The name of the configuration file to be checked\&. If not specified, it defaults to
+/etc/named\&.conf\&.
 .RE
 .SH "RETURN VALUES"
 .PP
 \fBnamed\-checkconf\fR
-returns an exit status of 1 if errors were detected and 0 otherwise.
+returns an exit status of 1 if errors were detected and 0 otherwise\&.
 .SH "SEE ALSO"
 .PP
 \fBnamed\fR(8),
-\fBnamed\-checkzone\fR(8),
-BIND 9 Administrator Reference Manual.
+\fBnamed-checkzone\fR(8),
+BIND 9 Administrator Reference Manual\&.
 .SH "AUTHOR"
 .PP
-Internet Systems Consortium
+\fBInternet Systems Consortium, Inc\&.\fR
 .SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+.br
+Copyright \(co 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
 .br
-Copyright \(co 2000\-2002 Internet Software Consortium.
+Copyright \(co 2000-2002 Internet Software Consortium.
 .br
--- a/external/bsd/bind/dist/bin/check/named-checkconf.c	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkconf.c	Tue Apr 25 19:54:07 2017 +0000
@@ -1,7 +1,7 @@
-/*	$NetBSD: named-checkconf.c,v 1.3.4.3 2015/11/15 19:09:09 bouyer Exp $	*/
+/*	$NetBSD: named-checkconf.c,v 1.3.4.4 2017/04/25 19:54:09 snj Exp $	*/
 
 /*
- * Copyright (C) 2004-2007, 2009-2014  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2016  Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1999-2002  Internet Software Consortium.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
@@ -33,6 +33,7 @@
 #include <isc/hash.h>
 #include <isc/log.h>
 #include <isc/mem.h>
+#include <isc/print.h>
 #include <isc/result.h>
 #include <isc/string.h>
 #include <isc/util.h>
@@ -422,15 +423,27 @@
 	return (result);
 }
 
+static isc_result_t
+config_getclass(const cfg_obj_t *classobj, dns_rdataclass_t defclass,
+		dns_rdataclass_t *classp)
+{
+	isc_textregion_t r;
+
+	if (!cfg_obj_isstring(classobj)) {
+		*classp = defclass;
+		return (ISC_R_SUCCESS);
+	}
+	DE_CONST(cfg_obj_asstring(classobj), r.base);
+	r.length = strlen(r.base);
+	return (dns_rdataclass_fromtext(classp, &r));
+}
 
 /*% load zones from the configuration */
 static isc_result_t
 load_zones_fromconfig(const cfg_obj_t *config, isc_mem_t *mctx) {
 	const cfg_listelt_t *element;
-	const cfg_obj_t *classobj;
 	const cfg_obj_t *views;
 	const cfg_obj_t *vconfig;
-	const char *vclass;
 	isc_result_t result = ISC_R_SUCCESS;
 	isc_result_t tresult;
 
@@ -441,17 +454,24 @@
 	     element != NULL;
 	     element = cfg_list_next(element))
 	{
+		const cfg_obj_t *classobj;
+		dns_rdataclass_t viewclass;
 		const char *vname;
+		char buf[sizeof("CLASS65535")];
 
-		vclass = "IN";
 		vconfig = cfg_listelt_value(element);
-		if (vconfig != NULL) {
-			classobj = cfg_tuple_get(vconfig, "class");
-			if (cfg_obj_isstring(classobj))
-				vclass = cfg_obj_asstring(classobj);
-		}
+		if (vconfig == NULL)
+			continue;
+
+		classobj = cfg_tuple_get(vconfig, "class");
+		CHECK(config_getclass(classobj, dns_rdataclass_in,
+					 &viewclass));
+		if (dns_rdataclass_ismeta(viewclass))
+			CHECK(ISC_R_FAILURE);
+
+		dns_rdataclass_format(viewclass, buf, sizeof(buf));
 		vname = cfg_obj_asstring(cfg_tuple_get(vconfig, "name"));
-		tresult = configure_view(vclass, vname, config, vconfig, mctx);
+		tresult = configure_view(buf, vname, config, vconfig, mctx);
 		if (tresult != ISC_R_SUCCESS)
 			result = tresult;
 	}
@@ -461,6 +481,8 @@
 		if (tresult != ISC_R_SUCCESS)
 			result = tresult;
 	}
+
+cleanup:
 	return (result);
 }
 
--- a/external/bsd/bind/dist/bin/check/named-checkconf.docbook	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkconf.docbook	Tue Apr 25 19:54:07 2017 +0000
@@ -1,8 +1,7 @@
-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
-               "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
-	       [<!ENTITY mdash "&#8212;">]>
+<!DOCTYPE book [
+<!ENTITY mdash "&#8212;">]>
 <!--
- - Copyright (C) 2004, 2005, 2007, 2009, 2014  Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015  Internet Systems Consortium, Inc. ("ISC")
  - Copyright (C) 2000-2002  Internet Software Consortium.
  -
  - Permission to use, copy, modify, and/or distribute this software for any
@@ -18,9 +17,14 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<refentry id="man.named-checkconf">
+<!-- Converted by db4-upgrade version 1.0 -->
+<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named-checkconf">
+  <info>
+    <date>2014-01-10</date>
+  </info>
   <refentryinfo>
-    <date>January 10, 2014</date>
+    <corpname>ISC</corpname>
+    <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
   </refentryinfo>
 
   <refmeta>
@@ -36,6 +40,7 @@
       <year>2007</year>
       <year>2009</year>
       <year>2014</year>
+      <year>2015</year>
       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
     </copyright>
     <copyright>
@@ -52,21 +57,21 @@
   </refnamediv>
 
   <refsynopsisdiv>
-    <cmdsynopsis>
+    <cmdsynopsis sepchar=" ">
       <command>named-checkconf</command>
-      <arg><option>-h</option></arg>
-      <arg><option>-v</option></arg>
-      <arg><option>-j</option></arg>
-      <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
-      <arg choice="req">filename</arg>
-      <arg><option>-p</option></arg>
-      <arg><option>-x</option></arg>
-      <arg><option>-z</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-h</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-v</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-j</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
+      <arg choice="req" rep="norepeat">filename</arg>
+      <arg choice="opt" rep="norepeat"><option>-p</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-x</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-z</option></arg>
     </cmdsynopsis>
   </refsynopsisdiv>
 
-  <refsect1>
-    <title>DESCRIPTION</title>
+  <refsection><info><title>DESCRIPTION</title></info>
+
     <para><command>named-checkconf</command>
       checks the syntax, but not the semantics, of a
       <command>named</command> configuration file.  The file is parsed
@@ -84,10 +89,10 @@
       successful.  <command>named-checkconf</command> can be run
       on these files explicitly, however.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>OPTIONS</title>
+  <refsection><info><title>OPTIONS</title></info>
+
 
     <variablelist>
       <varlistentry>
@@ -176,18 +181,18 @@
 
     </variablelist>
 
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>RETURN VALUES</title>
+  <refsection><info><title>RETURN VALUES</title></info>
+
     <para><command>named-checkconf</command>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>SEE ALSO</title>
+  <refsection><info><title>SEE ALSO</title></info>
+
     <para><citerefentry>
         <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
       </citerefentry>,
@@ -196,16 +201,5 @@
       </citerefentry>,
       <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
     </para>
-  </refsect1>
-
-  <refsect1>
-    <title>AUTHOR</title>
-    <para><corpauthor>Internet Systems Consortium</corpauthor>
-    </para>
-  </refsect1>
-
-</refentry><!--
- - Local variables:
- - mode: sgml
- - End:
--->
+  </refsection>
+</refentry>
--- a/external/bsd/bind/dist/bin/check/named-checkconf.html	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkconf.html	Tue Apr 25 19:54:07 2017 +0000
@@ -1,5 +1,5 @@
 <!--
- - Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
  - Copyright (C) 2000-2002 Internet Software Consortium.
  - 
  - Permission to use, copy, modify, and/or distribute this software for any
@@ -14,14 +14,13 @@
  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  - PERFORMANCE OF THIS SOFTWARE.
 -->
-<!-- Id -->
 <html>
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
 <title>named-checkconf</title>
-<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
+<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
 </head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
+<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
 <a name="man.named-checkconf"></a><div class="titlepage"></div>
 <div class="refnamediv">
 <h2>Name</h2>
@@ -31,29 +30,29 @@
 <h2>Synopsis</h2>
 <div class="cmdsynopsis"><p><code class="command">named-checkconf</code>  [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-x</code>] [<code class="option">-z</code>]</p></div>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543411"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">named-checkconf</strong></span>
+<div class="refsection">
+<a name="id-1.7"></a><h2>DESCRIPTION</h2>
+<p><span class="command"><strong>named-checkconf</strong></span>
       checks the syntax, but not the semantics, of a
-      <span><strong class="command">named</strong></span> configuration file.  The file is parsed
+      <span class="command"><strong>named</strong></span> configuration file.  The file is parsed
       and checked for syntax errors, along with all files included by it.
       If no file is specified, <code class="filename">/etc/named.conf</code> is read
       by default.
     </p>
 <p>
-      Note: files that <span><strong class="command">named</strong></span> reads in separate
+      Note: files that <span class="command"><strong>named</strong></span> reads in separate
       parser contexts, such as <code class="filename">rndc.key</code> and
       <code class="filename">bind.keys</code>, are not automatically read
-      by <span><strong class="command">named-checkconf</strong></span>.  Configuration
-      errors in these files may cause <span><strong class="command">named</strong></span> to
-      fail to run, even if <span><strong class="command">named-checkconf</strong></span> was
-      successful.  <span><strong class="command">named-checkconf</strong></span> can be run
+      by <span class="command"><strong>named-checkconf</strong></span>.  Configuration
+      errors in these files may cause <span class="command"><strong>named</strong></span> to
+      fail to run, even if <span class="command"><strong>named-checkconf</strong></span> was
+      successful.  <span class="command"><strong>named-checkconf</strong></span> can be run
       on these files explicitly, however.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543460"></a><h2>OPTIONS</h2>
-<div class="variablelist"><dl>
+<div class="refsection">
+<a name="id-1.8"></a><h2>OPTIONS</h2>
+<div class="variablelist"><dl class="variablelist">
 <dt><span class="term">-h</span></dt>
 <dd><p>
             Print the usage summary and exit.
@@ -66,7 +65,7 @@
           </p></dd>
 <dt><span class="term">-v</span></dt>
 <dd><p>
-            Print the version of the <span><strong class="command">named-checkconf</strong></span>
+            Print the version of the <span class="command"><strong>named-checkconf</strong></span>
             program and exit.
           </p></dd>
 <dt><span class="term">-p</span></dt>
@@ -100,24 +99,19 @@
           </p></dd>
 </dl></div>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543604"></a><h2>RETURN VALUES</h2>
-<p><span><strong class="command">named-checkconf</strong></span>
+<div class="refsection">
+<a name="id-1.9"></a><h2>RETURN VALUES</h2>
+<p><span class="command"><strong>named-checkconf</strong></span>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543616"></a><h2>SEE ALSO</h2>
+<div class="refsection">
+<a name="id-1.10"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543645"></a><h2>AUTHOR</h2>
-<p><span class="corpauthor">Internet Systems Consortium</span>
-    </p>
-</div>
 </div></body>
 </html>
--- a/external/bsd/bind/dist/bin/check/named-checkzone.8	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkzone.8	Tue Apr 25 19:54:07 2017 +0000
@@ -1,6 +1,6 @@
-.\"	$NetBSD: named-checkzone.8,v 1.2.6.2 2014/12/25 17:53:59 msaitoh Exp $
+.\"	$NetBSD: named-checkzone.8,v 1.2.6.3 2017/04/25 19:54:09 snj Exp $
 .\"
-.\" Copyright (C) 2004-2007, 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2007, 2009-2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
 .\" Copyright (C) 2000-2002 Internet Software Consortium.
 .\" 
 .\" Permission to use, copy, modify, and/or distribute this software for any
@@ -15,106 +15,121 @@
 .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 .\" PERFORMANCE OF THIS SOFTWARE.
 .\"
-.\" Id
-.\"
 .hy 0
 .ad l
-.\"     Title: named\-checkzone
+'\" t
+.\"     Title: named-checkzone
 .\"    Author: 
-.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\"      Date: April 29, 2013
+.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
+.\"      Date: 2013-04-29
 .\"    Manual: BIND9
-.\"    Source: BIND9
+.\"    Source: ISC
+.\"  Language: English
 .\"
-.TH "NAMED\-CHECKZONE" "8" "April 29, 2013" "BIND9" "BIND9"
+.TH "NAMED\-CHECKZONE" "8" "2013\-04\-29" "ISC" "BIND9"
+.\" -----------------------------------------------------------------
+.\" * Define some portability stuff
+.\" -----------------------------------------------------------------
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.\" http://bugs.debian.org/507673
+.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.ie \n(.g .ds Aq \(aq
+.el       .ds Aq '
+.\" -----------------------------------------------------------------
+.\" * set default formatting
+.\" -----------------------------------------------------------------
 .\" disable hyphenation
 .nh
 .\" disable justification (adjust text to left margin only)
 .ad l
+.\" -----------------------------------------------------------------
+.\" * MAIN CONTENT STARTS HERE *
+.\" -----------------------------------------------------------------
 .SH "NAME"
-named\-checkzone, named\-compilezone \- zone file validity checking or converting tool
+named-checkzone, named-compilezone \- zone file validity checking or converting tool
 .SH "SYNOPSIS"
-.HP 16
+.HP \w'\fBnamed\-checkzone\fR\ 'u
 \fBnamed\-checkzone\fR [\fB\-d\fR] [\fB\-h\fR] [\fB\-j\fR] [\fB\-q\fR] [\fB\-v\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-f\ \fR\fB\fIformat\fR\fR] [\fB\-F\ \fR\fB\fIformat\fR\fR] [\fB\-i\ \fR\fB\fImode\fR\fR] [\fB\-k\ \fR\fB\fImode\fR\fR] [\fB\-m\ \fR\fB\fImode\fR\fR] [\fB\-M\ \fR\fB\fImode\fR\fR] [\fB\-n\ \fR\fB\fImode\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-o\ \fR\fB\fIfilename\fR\fR] [\fB\-r\ \fR\fB\fImode\fR\fR] [\fB\-s\ \fR\fB\fIstyle\fR\fR] [\fB\-S\ \fR\fB\fImode\fR\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] [\fB\-T\ \fR\fB\fImode\fR\fR] [\fB\-w\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-W\ \fR\fB\fImode\fR\fR] {zonename} {filename}
-.HP 18
+.HP \w'\fBnamed\-compilezone\fR\ 'u
 \fBnamed\-compilezone\fR [\fB\-d\fR] [\fB\-j\fR] [\fB\-q\fR] [\fB\-v\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-C\ \fR\fB\fImode\fR\fR] [\fB\-f\ \fR\fB\fIformat\fR\fR] [\fB\-F\ \fR\fB\fIformat\fR\fR] [\fB\-i\ \fR\fB\fImode\fR\fR] [\fB\-k\ \fR\fB\fImode\fR\fR] [\fB\-m\ \fR\fB\fImode\fR\fR] [\fB\-n\ \fR\fB\fImode\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-r\ \fR\fB\fImode\fR\fR] [\fB\-s\ \fR\fB\fIstyle\fR\fR] [\fB\-t\ \fR\fB\fIdirectory\fR\fR] [\fB\-T\ \fR\fB\fImode\fR\fR] [\fB\-w\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-W\ \fR\fB\fImode\fR\fR] {\fB\-o\ \fR\fB\fIfilename\fR\fR} {zonename} {filename}
 .SH "DESCRIPTION"
 .PP
 \fBnamed\-checkzone\fR
-checks the syntax and integrity of a zone file. It performs the same checks as
+checks the syntax and integrity of a zone file\&. It performs the same checks as
 \fBnamed\fR
-does when loading a zone. This makes
+does when loading a zone\&. This makes
 \fBnamed\-checkzone\fR
-useful for checking zone files before configuring them into a name server.
+useful for checking zone files before configuring them into a name server\&.
 .PP
 \fBnamed\-compilezone\fR
 is similar to
-\fBnamed\-checkzone\fR, but it always dumps the zone contents to a specified file in a specified format. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by
-\fBnamed\fR. When manually specified otherwise, the check levels must at least be as strict as those specified in the
+\fBnamed\-checkzone\fR, but it always dumps the zone contents to a specified file in a specified format\&. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by
+\fBnamed\fR\&. When manually specified otherwise, the check levels must at least be as strict as those specified in the
 \fBnamed\fR
-configuration file.
+configuration file\&.
 .SH "OPTIONS"
 .PP
 \-d
 .RS 4
-Enable debugging.
+Enable debugging\&.
 .RE
 .PP
 \-h
 .RS 4
-Print the usage summary and exit.
+Print the usage summary and exit\&.
 .RE
 .PP
 \-q
 .RS 4
-Quiet mode \- exit code only.
+Quiet mode \- exit code only\&.
 .RE
 .PP
 \-v
 .RS 4
 Print the version of the
 \fBnamed\-checkzone\fR
-program and exit.
+program and exit\&.
 .RE
 .PP
 \-j
 .RS 4
-When loading the zone file read the journal if it exists.
+When loading the zone file read the journal if it exists\&.
 .RE
 .PP
 \-c \fIclass\fR
 .RS 4
-Specify the class of the zone. If not specified, "IN" is assumed.
+Specify the class of the zone\&. If not specified, "IN" is assumed\&.
 .RE
 .PP
 \-i \fImode\fR
 .RS 4
-Perform post\-load zone integrity checks. Possible modes are
+Perform post\-load zone integrity checks\&. Possible modes are
 \fB"full"\fR
 (default),
 \fB"full\-sibling"\fR,
 \fB"local"\fR,
 \fB"local\-sibling"\fR
 and
-\fB"none"\fR.
+\fB"none"\fR\&.
 .sp
 Mode
 \fB"full"\fR
-checks that MX records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). Mode
+checks that MX records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. Mode
 \fB"local"\fR
-only checks MX records which refer to in\-zone hostnames.
+only checks MX records which refer to in\-zone hostnames\&.
 .sp
 Mode
 \fB"full"\fR
-checks that SRV records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). Mode
+checks that SRV records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. Mode
 \fB"local"\fR
-only checks SRV records which refer to in\-zone hostnames.
+only checks SRV records which refer to in\-zone hostnames\&.
 .sp
 Mode
 \fB"full"\fR
-checks that delegation NS records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames). It also checks that glue address records in the zone match those advertised by the child. Mode
+checks that delegation NS records refer to A or AAAA record (both in\-zone and out\-of\-zone hostnames)\&. It also checks that glue address records in the zone match those advertised by the child\&. Mode
 \fB"local"\fR
-only checks NS records which refer to in\-zone hostnames or that some required glue exists, that is when the nameserver is in a child zone.
+only checks NS records which refer to in\-zone hostnames or that some required glue exists, that is when the nameserver is in a child zone\&.
 .sp
 Mode
 \fB"full\-sibling"\fR
@@ -124,25 +139,25 @@
 \fB"full"\fR
 and
 \fB"local"\fR
-respectively.
+respectively\&.
 .sp
 Mode
 \fB"none"\fR
-disables the checks.
+disables the checks\&.
 .RE
 .PP
 \-f \fIformat\fR
 .RS 4
-Specify the format of the zone file. Possible formats are
+Specify the format of the zone file\&. Possible formats are
 \fB"text"\fR
 (default) and
-\fB"raw"\fR.
+\fB"raw"\fR\&.
 .RE
 .PP
 \-F \fIformat\fR
 .RS 4
-Specify the format of the output file specified. For
-\fBnamed\-checkzone\fR, this does not cause any effects unless it dumps the zone contents.
+Specify the format of the output file specified\&. For
+\fBnamed\-checkzone\fR, this does not cause any effects unless it dumps the zone contents\&.
 .sp
 Possible formats are
 \fB"text"\fR
@@ -150,161 +165,162 @@
 \fB"raw"\fR
 or
 \fB"raw=N"\fR, which store the zone in a binary format for rapid loading by
-\fBnamed\fR.
+\fBnamed\fR\&.
 \fB"raw=N"\fR
 specifies the format version of the raw zone file: if N is 0, the raw file can be read by any version of
-\fBnamed\fR; if N is 1, the file can be read by release 9.9.0 or higher. The default is 1.
+\fBnamed\fR; if N is 1, the file can be read by release 9\&.9\&.0 or higher\&. The default is 1\&.
 .RE
 .PP
 \-k \fImode\fR
 .RS 4
 Perform
 \fB"check\-names"\fR
-checks with the specified failure mode. Possible modes are
+checks with the specified failure mode\&. Possible modes are
 \fB"fail"\fR
 (default for
 \fBnamed\-compilezone\fR),
 \fB"warn"\fR
 (default for
 \fBnamed\-checkzone\fR) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-L \fIserial\fR
 .RS 4
-When compiling a zone to 'raw' format, set the "source serial" value in the header to the specified serial number. (This is expected to be used primarily for testing purposes.)
+When compiling a zone to \*(Aqraw\*(Aq format, set the "source serial" value in the header to the specified serial number\&. (This is expected to be used primarily for testing purposes\&.)
 .RE
 .PP
 \-m \fImode\fR
 .RS 4
-Specify whether MX records should be checked to see if they are addresses. Possible modes are
+Specify whether MX records should be checked to see if they are addresses\&. Possible modes are
 \fB"fail"\fR,
 \fB"warn"\fR
 (default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-M \fImode\fR
 .RS 4
-Check if a MX record refers to a CNAME. Possible modes are
+Check if a MX record refers to a CNAME\&. Possible modes are
 \fB"fail"\fR,
 \fB"warn"\fR
 (default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-n \fImode\fR
 .RS 4
-Specify whether NS records should be checked to see if they are addresses. Possible modes are
+Specify whether NS records should be checked to see if they are addresses\&. Possible modes are
 \fB"fail"\fR
 (default for
 \fBnamed\-compilezone\fR),
 \fB"warn"\fR
 (default for
 \fBnamed\-checkzone\fR) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-o \fIfilename\fR
 .RS 4
 Write zone output to
-\fIfilename\fR. If
-\fIfilename\fR
+filename\&. If
+filename
 is
-\fI\-\fR
-then write to standard out. This is mandatory for
-\fBnamed\-compilezone\fR.
+\-
+then write to standard out\&. This is mandatory for
+\fBnamed\-compilezone\fR\&.
 .RE
 .PP
 \-r \fImode\fR
 .RS 4
-Check for records that are treated as different by DNSSEC but are semantically equal in plain DNS. Possible modes are
+Check for records that are treated as different by DNSSEC but are semantically equal in plain DNS\&. Possible modes are
 \fB"fail"\fR,
 \fB"warn"\fR
 (default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-s \fIstyle\fR
 .RS 4
-Specify the style of the dumped zone file. Possible styles are
+Specify the style of the dumped zone file\&. Possible styles are
 \fB"full"\fR
 (default) and
-\fB"relative"\fR. The full format is most suitable for processing automatically by a separate script. On the other hand, the relative format is more human\-readable and is thus suitable for editing by hand. For
+\fB"relative"\fR\&. The full format is most suitable for processing automatically by a separate script\&. On the other hand, the relative format is more human\-readable and is thus suitable for editing by hand\&. For
 \fBnamed\-checkzone\fR
-this does not cause any effects unless it dumps the zone contents. It also does not have any meaning if the output format is not text.
+this does not cause any effects unless it dumps the zone contents\&. It also does not have any meaning if the output format is not text\&.
 .RE
 .PP
 \-S \fImode\fR
 .RS 4
-Check if a SRV record refers to a CNAME. Possible modes are
+Check if a SRV record refers to a CNAME\&. Possible modes are
 \fB"fail"\fR,
 \fB"warn"\fR
 (default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-t \fIdirectory\fR
 .RS 4
 Chroot to
-\fIdirectory\fR
-so that include directives in the configuration file are processed as if run by a similarly chrooted named.
+directory
+so that include directives in the configuration file are processed as if run by a similarly chrooted named\&.
 .RE
 .PP
 \-T \fImode\fR
 .RS 4
-Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF\-formatted TXT record is not also present. Possible modes are
+Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF\-formatted TXT record is not also present\&. Possible modes are
 \fB"warn"\fR
 (default),
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 \-w \fIdirectory\fR
 .RS 4
 chdir to
-\fIdirectory\fR
-so that relative filenames in master file $INCLUDE directives work. This is similar to the directory clause in
-\fInamed.conf\fR.
+directory
+so that relative filenames in master file $INCLUDE directives work\&. This is similar to the directory clause in
+named\&.conf\&.
 .RE
 .PP
 \-D
 .RS 4
-Dump zone file in canonical format. This is always enabled for
-\fBnamed\-compilezone\fR.
+Dump zone file in canonical format\&. This is always enabled for
+\fBnamed\-compilezone\fR\&.
 .RE
 .PP
 \-W \fImode\fR
 .RS 4
-Specify whether to check for non\-terminal wildcards. Non\-terminal wildcards are almost always the result of a failure to understand the wildcard matching algorithm (RFC 1034). Possible modes are
+Specify whether to check for non\-terminal wildcards\&. Non\-terminal wildcards are almost always the result of a failure to understand the wildcard matching algorithm (RFC 1034)\&. Possible modes are
 \fB"warn"\fR
 (default) and
-\fB"ignore"\fR.
+\fB"ignore"\fR\&.
 .RE
 .PP
 zonename
 .RS 4
-The domain name of the zone being checked.
+The domain name of the zone being checked\&.
 .RE
 .PP
 filename
 .RS 4
-The name of the zone file.
+The name of the zone file\&.
 .RE
 .SH "RETURN VALUES"
 .PP
 \fBnamed\-checkzone\fR
-returns an exit status of 1 if errors were detected and 0 otherwise.
+returns an exit status of 1 if errors were detected and 0 otherwise\&.
 .SH "SEE ALSO"
 .PP
 \fBnamed\fR(8),
-\fBnamed\-checkconf\fR(8),
+\fBnamed-checkconf\fR(8),
 RFC 1035,
-BIND 9 Administrator Reference Manual.
+BIND 9 Administrator Reference Manual\&.
 .SH "AUTHOR"
 .PP
-Internet Systems Consortium
+\fBInternet Systems Consortium, Inc\&.\fR
 .SH "COPYRIGHT"
-Copyright \(co 2004\-2007, 2009\-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
+.br
+Copyright \(co 2004-2007, 2009-2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
 .br
-Copyright \(co 2000\-2002 Internet Software Consortium.
+Copyright \(co 2000-2002 Internet Software Consortium.
 .br
--- a/external/bsd/bind/dist/bin/check/named-checkzone.c	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkzone.c	Tue Apr 25 19:54:07 2017 +0000
@@ -1,7 +1,7 @@
-/*	$NetBSD: named-checkzone.c,v 1.2.6.2 2014/12/25 17:53:59 msaitoh Exp $	*/
+/*	$NetBSD: named-checkzone.c,v 1.2.6.3 2017/04/25 19:54:09 snj Exp $	*/
 
 /*
- * Copyright (C) 2004-2013  Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2013, 2015  Internet Systems Consortium, Inc. ("ISC")
  * Copyright (C) 1999-2003  Internet Software Consortium.
  *
  * Permission to use, copy, modify, and/or distribute this software for any
@@ -32,6 +32,7 @@
 #include <isc/hash.h>
 #include <isc/log.h>
 #include <isc/mem.h>
+#include <isc/print.h>
 #include <isc/socket.h>
 #include <isc/string.h>
 #include <isc/task.h>
@@ -59,7 +60,7 @@
 dns_zonetype_t zonetype = dns_zone_master;
 static int dumpzone = 0;
 static const char *output_filename;
-static char *prog_name = NULL;
+static const char *prog_name = NULL;
 static const dns_master_style_t *outputstyle = NULL;
 static enum { progmode_check, progmode_compile } progmode;
 
--- a/external/bsd/bind/dist/bin/check/named-checkzone.docbook	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkzone.docbook	Tue Apr 25 19:54:07 2017 +0000
@@ -1,8 +1,5 @@
-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
-               "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
-	       [<!ENTITY mdash "&#8212;">]>
 <!--
- - Copyright (C) 2004-2007, 2009-2011, 2013, 2014  Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2007, 2009-2011, 2013-2015  Internet Systems Consortium, Inc. ("ISC")
  - Copyright (C) 2000-2002  Internet Software Consortium.
  -
  - Permission to use, copy, modify, and/or distribute this software for any
@@ -18,9 +15,14 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<refentry id="man.named-checkzone">
+<!-- Converted by db4-upgrade version 1.0 -->
+<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named-checkzone">
+  <info>
+    <date>2013-04-29</date>
+  </info>
   <refentryinfo>
-    <date>April 29, 2013</date>
+    <corpname>ISC</corpname>
+    <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
   </refentryinfo>
 
   <refmeta>
@@ -40,6 +42,7 @@
       <year>2011</year>
       <year>2013</year>
       <year>2014</year>
+      <year>2015</year>
       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
     </copyright>
     <copyright>
@@ -57,64 +60,64 @@
   </refnamediv>
 
   <refsynopsisdiv>
-    <cmdsynopsis>
+    <cmdsynopsis sepchar=" ">
       <command>named-checkzone</command>
-      <arg><option>-d</option></arg>
-      <arg><option>-h</option></arg>
-      <arg><option>-j</option></arg>
-      <arg><option>-q</option></arg>
-      <arg><option>-v</option></arg>
-      <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
-      <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
-      <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
-      <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-M <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-L <replaceable class="parameter">serial</replaceable></option></arg>
-      <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
-      <arg><option>-r <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
-      <arg><option>-S <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
-      <arg><option>-T <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
-      <arg><option>-D</option></arg>
-      <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg choice="req">zonename</arg>
-      <arg choice="req">filename</arg>
+      <arg choice="opt" rep="norepeat"><option>-d</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-h</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-j</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-q</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-v</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-c <replaceable class="parameter">class</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-f <replaceable class="parameter">format</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-F <replaceable class="parameter">format</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-M <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-L <replaceable class="parameter">serial</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-r <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-s <replaceable class="parameter">style</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-S <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-T <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-D</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="req" rep="norepeat">zonename</arg>
+      <arg choice="req" rep="norepeat">filename</arg>
     </cmdsynopsis>
-    <cmdsynopsis>
+    <cmdsynopsis sepchar=" ">
       <command>named-compilezone</command>
-      <arg><option>-d</option></arg>
-      <arg><option>-j</option></arg>
-      <arg><option>-q</option></arg>
-      <arg><option>-v</option></arg>
-      <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
-      <arg><option>-C <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
-      <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
-      <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-L <replaceable class="parameter">serial</replaceable></option></arg>
-      <arg><option>-r <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
-      <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
-      <arg><option>-T <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
-      <arg><option>-D</option></arg>
-      <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
-      <arg choice="req"><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
-      <arg choice="req">zonename</arg>
-      <arg choice="req">filename</arg>
+      <arg choice="opt" rep="norepeat"><option>-d</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-j</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-q</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-v</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-c <replaceable class="parameter">class</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-C <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-f <replaceable class="parameter">format</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-F <replaceable class="parameter">format</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-L <replaceable class="parameter">serial</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-r <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-s <replaceable class="parameter">style</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-T <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-D</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
+      <arg choice="req" rep="norepeat"><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
+      <arg choice="req" rep="norepeat">zonename</arg>
+      <arg choice="req" rep="norepeat">filename</arg>
     </cmdsynopsis>
   </refsynopsisdiv>
 
-  <refsect1>
-    <title>DESCRIPTION</title>
+  <refsection><info><title>DESCRIPTION</title></info>
+
     <para><command>named-checkzone</command>
       checks the syntax and integrity of a zone file.  It performs the
       same checks as <command>named</command> does when loading a
@@ -132,10 +135,10 @@
         least be as strict as those specified in the
 	<command>named</command> configuration file.
      </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>OPTIONS</title>
+  <refsection><info><title>OPTIONS</title></info>
+
 
     <variablelist>
       <varlistentry>
@@ -289,7 +292,7 @@
         <term>-L <replaceable class="parameter">serial</replaceable></term>
         <listitem>
           <para>
-            When compiling a zone to 'raw' format, set the "source serial" 
+            When compiling a zone to 'raw' format, set the "source serial"
             value in the header to the specified serial number.  (This is
             expected to be used primarily for testing purposes.)
           </para>
@@ -352,7 +355,7 @@
         <listitem>
 	  <para>
             Check for records that are treated as different by DNSSEC but
-	    are semantically equal in plain DNS.  
+	    are semantically equal in plain DNS.
             Possible modes are <command>"fail"</command>,
             <command>"warn"</command> (default) and
             <command>"ignore"</command>.
@@ -473,37 +476,27 @@
 
     </variablelist>
 
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>RETURN VALUES</title>
+  <refsection><info><title>RETURN VALUES</title></info>
+
     <para><command>named-checkzone</command>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>SEE ALSO</title>
+  <refsection><info><title>SEE ALSO</title></info>
+
     <para><citerefentry>
         <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
       </citerefentry>,
       <citerefentry>
-        <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>  
+        <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
       </citerefentry>,
       <citetitle>RFC 1035</citetitle>,
       <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>AUTHOR</title>
-    <para><corpauthor>Internet Systems Consortium</corpauthor>
-    </para>
-  </refsect1>
-
-</refentry><!--
- - Local variables:
- - mode: sgml
- - End:
--->
+</refentry>
--- a/external/bsd/bind/dist/bin/check/named-checkzone.html	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/check/named-checkzone.html	Tue Apr 25 19:54:07 2017 +0000
@@ -1,5 +1,5 @@
 <!--
- - Copyright (C) 2004-2007, 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2007, 2009-2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
  - Copyright (C) 2000-2002 Internet Software Consortium.
  - 
  - Permission to use, copy, modify, and/or distribute this software for any
@@ -14,14 +14,13 @@
  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  - PERFORMANCE OF THIS SOFTWARE.
 -->
-<!-- Id -->
 <html>
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
 <title>named-checkzone</title>
-<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
+<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
 </head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
+<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
 <a name="man.named-checkzone"></a><div class="titlepage"></div>
 <div class="refnamediv">
 <h2>Name</h2>
@@ -32,29 +31,29 @@
 <div class="cmdsynopsis"><p><code class="command">named-checkzone</code>  [<code class="option">-d</code>] [<code class="option">-h</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
 <div class="cmdsynopsis"><p><code class="command">named-compilezone</code>  [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543747"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">named-checkzone</strong></span>
+<div class="refsection">
+<a name="id-1.7"></a><h2>DESCRIPTION</h2>
+<p><span class="command"><strong>named-checkzone</strong></span>
       checks the syntax and integrity of a zone file.  It performs the
-      same checks as <span><strong class="command">named</strong></span> does when loading a
-      zone.  This makes <span><strong class="command">named-checkzone</strong></span> useful for
+      same checks as <span class="command"><strong>named</strong></span> does when loading a
+      zone.  This makes <span class="command"><strong>named-checkzone</strong></span> useful for
       checking zone files before configuring them into a name server.
     </p>
 <p>
-        <span><strong class="command">named-compilezone</strong></span> is similar to
-	<span><strong class="command">named-checkzone</strong></span>, but it always dumps the
+        <span class="command"><strong>named-compilezone</strong></span> is similar to
+	<span class="command"><strong>named-checkzone</strong></span>, but it always dumps the
         zone contents to a specified file in a specified format.
 	Additionally, it applies stricter check levels by default,
         since the dump output will be used as an actual zone file
-	loaded by <span><strong class="command">named</strong></span>.
+	loaded by <span class="command"><strong>named</strong></span>.
 	When manually specified otherwise, the check levels must at
         least be as strict as those specified in the
-	<span><strong class="command">named</strong></span> configuration file.
+	<span class="command"><strong>named</strong></span> configuration file.
      </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543782"></a><h2>OPTIONS</h2>
-<div class="variablelist"><dl>
+<div class="refsection">
+<a name="id-1.8"></a><h2>OPTIONS</h2>
+<div class="variablelist"><dl class="variablelist">
 <dt><span class="term">-d</span></dt>
 <dd><p>
             Enable debugging.
@@ -69,7 +68,7 @@
           </p></dd>
 <dt><span class="term">-v</span></dt>
 <dd><p>
-            Print the version of the <span><strong class="command">named-checkzone</strong></span>
+            Print the version of the <span class="command"><strong>named-checkzone</strong></span>
             program and exit.
           </p></dd>
 <dt><span class="term">-j</span></dt>
@@ -84,133 +83,133 @@
 <dd>
 <p>
 	      Perform post-load zone integrity checks.  Possible modes are
-	      <span><strong class="command">"full"</strong></span> (default),
-	      <span><strong class="command">"full-sibling"</strong></span>,
-	      <span><strong class="command">"local"</strong></span>,
-	      <span><strong class="command">"local-sibling"</strong></span> and
-	      <span><strong class="command">"none"</strong></span>.
+	      <span class="command"><strong>"full"</strong></span> (default),
+	      <span class="command"><strong>"full-sibling"</strong></span>,
+	      <span class="command"><strong>"local"</strong></span>,
+	      <span class="command"><strong>"local-sibling"</strong></span> and
+	      <span class="command"><strong>"none"</strong></span>.
 	  </p>
 <p>
-	      Mode <span><strong class="command">"full"</strong></span> checks that MX records
+	      Mode <span class="command"><strong>"full"</strong></span> checks that MX records
 	      refer to A or AAAA record (both in-zone and out-of-zone
-	      hostnames).  Mode <span><strong class="command">"local"</strong></span> only
+	      hostnames).  Mode <span class="command"><strong>"local"</strong></span> only
 	      checks MX records which refer to in-zone hostnames.
 	  </p>
 <p>
-	      Mode <span><strong class="command">"full"</strong></span> checks that SRV records
+	      Mode <span class="command"><strong>"full"</strong></span> checks that SRV records
 	      refer to A or AAAA record (both in-zone and out-of-zone
-	      hostnames).  Mode <span><strong class="command">"local"</strong></span> only
+	      hostnames).  Mode <span class="command"><strong>"local"</strong></span> only
 	      checks SRV records which refer to in-zone hostnames.
 	  </p>
 <p>
-	      Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
+	      Mode <span class="command"><strong>"full"</strong></span> checks that delegation NS
 	      records refer to A or AAAA record (both in-zone and out-of-zone
 	      hostnames).  It also checks that glue address records
 	      in the zone match those advertised by the child.
-	      Mode <span><strong class="command">"local"</strong></span> only checks NS records which
+	      Mode <span class="command"><strong>"local"</strong></span> only checks NS records which
 	      refer to in-zone hostnames or that some required glue exists,
 	      that is when the nameserver is in a child zone.
 	  </p>
 <p>
-	      Mode <span><strong class="command">"full-sibling"</strong></span> and
-	      <span><strong class="command">"local-sibling"</strong></span> disable sibling glue
-	      checks but are otherwise the same as <span><strong class="command">"full"</strong></span>
-	      and <span><strong class="command">"local"</strong></span> respectively.
+	      Mode <span class="command"><strong>"full-sibling"</strong></span> and
+	      <span class="command"><strong>"local-sibling"</strong></span> disable sibling glue
+	      checks but are otherwise the same as <span class="command"><strong>"full"</strong></span>
+	      and <span class="command"><strong>"local"</strong></span> respectively.
 	  </p>
 <p>
-	      Mode <span><strong class="command">"none"</strong></span> disables the checks.
+	      Mode <span class="command"><strong>"none"</strong></span> disables the checks.
 	  </p>
 </dd>
 <dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
 <dd><p>
 	    Specify the format of the zone file.
-	    Possible formats are <span><strong class="command">"text"</strong></span> (default)
-	    and <span><strong class="command">"raw"</strong></span>.
+	    Possible formats are <span class="command"><strong>"text"</strong></span> (default)
+	    and <span class="command"><strong>"raw"</strong></span>.
 	  </p></dd>
 <dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
 <dd>
 <p>
 	    Specify the format of the output file specified.
-	    For <span><strong class="command">named-checkzone</strong></span>,
+	    For <span class="command"><strong>named-checkzone</strong></span>,
 	    this does not cause any effects unless it dumps the zone
 	    contents.
 	  </p>
 <p>
-	    Possible formats are <span><strong class="command">"text"</strong></span> (default)
-	    and <span><strong class="command">"raw"</strong></span> or <span><strong class="command">"raw=N"</strong></span>,
+	    Possible formats are <span class="command"><strong>"text"</strong></span> (default)
+	    and <span class="command"><strong>"raw"</strong></span> or <span class="command"><strong>"raw=N"</strong></span>,
             which store the zone in a binary format for rapid loading
-            by <span><strong class="command">named</strong></span>.  <span><strong class="command">"raw=N"</strong></span>
+            by <span class="command"><strong>named</strong></span>.  <span class="command"><strong>"raw=N"</strong></span>
             specifies the format version of the raw zone file: if N
             is 0, the raw file can be read by any version of
-            <span><strong class="command">named</strong></span>; if N is 1, the file can be read
+            <span class="command"><strong>named</strong></span>; if N is 1, the file can be read
             by release 9.9.0 or higher.  The default is 1.
 	  </p>
 </dd>
 <dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
-            Perform <span><strong class="command">"check-names"</strong></span> checks with the
+            Perform <span class="command"><strong>"check-names"</strong></span> checks with the
 	    specified failure mode.
-            Possible modes are <span><strong class="command">"fail"</strong></span>
-	    (default for <span><strong class="command">named-compilezone</strong></span>),
-            <span><strong class="command">"warn"</strong></span>
-	    (default for <span><strong class="command">named-checkzone</strong></span>) and
-            <span><strong class="command">"ignore"</strong></span>.
+            Possible modes are <span class="command"><strong>"fail"</strong></span>
+	    (default for <span class="command"><strong>named-compilezone</strong></span>),
+            <span class="command"><strong>"warn"</strong></span>
+	    (default for <span class="command"><strong>named-checkzone</strong></span>) and
+            <span class="command"><strong>"ignore"</strong></span>.
           </p></dd>
 <dt><span class="term">-L <em class="replaceable"><code>serial</code></em></span></dt>
 <dd><p>
-            When compiling a zone to 'raw' format, set the "source serial" 
+            When compiling a zone to 'raw' format, set the "source serial"
             value in the header to the specified serial number.  (This is
             expected to be used primarily for testing purposes.)
           </p></dd>
 <dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
             Specify whether MX records should be checked to see if they
-            are addresses.  Possible modes are <span><strong class="command">"fail"</strong></span>,
-            <span><strong class="command">"warn"</strong></span> (default) and
-            <span><strong class="command">"ignore"</strong></span>.
+            are addresses.  Possible modes are <span class="command"><strong>"fail"</strong></span>,
+            <span class="command"><strong>"warn"</strong></span> (default) and
+            <span class="command"><strong>"ignore"</strong></span>.
           </p></dd>
 <dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
 	    Check if a MX record refers to a CNAME.
-            Possible modes are <span><strong class="command">"fail"</strong></span>,
-            <span><strong class="command">"warn"</strong></span> (default) and
-            <span><strong class="command">"ignore"</strong></span>.
+            Possible modes are <span class="command"><strong>"fail"</strong></span>,
+            <span class="command"><strong>"warn"</strong></span> (default) and
+            <span class="command"><strong>"ignore"</strong></span>.
 	  </p></dd>
 <dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
             Specify whether NS records should be checked to see if they
             are addresses.
-	    Possible modes are <span><strong class="command">"fail"</strong></span>
-	    (default for <span><strong class="command">named-compilezone</strong></span>),
-            <span><strong class="command">"warn"</strong></span>
-	    (default for <span><strong class="command">named-checkzone</strong></span>) and
-            <span><strong class="command">"ignore"</strong></span>.
+	    Possible modes are <span class="command"><strong>"fail"</strong></span>
+	    (default for <span class="command"><strong>named-compilezone</strong></span>),
+            <span class="command"><strong>"warn"</strong></span>
+	    (default for <span class="command"><strong>named-checkzone</strong></span>) and
+            <span class="command"><strong>"ignore"</strong></span>.
           </p></dd>
 <dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
 <dd><p>
             Write zone output to <code class="filename">filename</code>.
 	    If <code class="filename">filename</code> is <code class="filename">-</code> then
 	    write to standard out.
-	    This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
+	    This is mandatory for <span class="command"><strong>named-compilezone</strong></span>.
           </p></dd>
 <dt><span class="term">-r <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
             Check for records that are treated as different by DNSSEC but
-	    are semantically equal in plain DNS.  
-            Possible modes are <span><strong class="command">"fail"</strong></span>,
-            <span><strong class="command">"warn"</strong></span> (default) and
-            <span><strong class="command">"ignore"</strong></span>.
+	    are semantically equal in plain DNS.
+            Possible modes are <span class="command"><strong>"fail"</strong></span>,
+            <span class="command"><strong>"warn"</strong></span> (default) and
+            <span class="command"><strong>"ignore"</strong></span>.
 	  </p></dd>
 <dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
 <dd><p>
 	    Specify the style of the dumped zone file.
-	    Possible styles are <span><strong class="command">"full"</strong></span> (default)
-	    and <span><strong class="command">"relative"</strong></span>.
+	    Possible styles are <span class="command"><strong>"full"</strong></span> (default)
+	    and <span class="command"><strong>"relative"</strong></span>.
 	    The full format is most suitable for processing
 	    automatically by a separate script.
 	    On the other hand, the relative format is more
 	    human-readable and is thus suitable for editing by hand.
-	    For <span><strong class="command">named-checkzone</strong></span>
+	    For <span class="command"><strong>named-checkzone</strong></span>
 	    this does not cause any effects unless it dumps the zone
 	    contents.
 	    It also does not have any meaning if the output format
@@ -219,9 +218,9 @@
 <dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
 	    Check if a SRV record refers to a CNAME.
-            Possible modes are <span><strong class="command">"fail"</strong></span>,
-            <span><strong class="command">"warn"</strong></span> (default) and
-            <span><strong class="command">"ignore"</strong></span>.
+            Possible modes are <span class="command"><strong>"fail"</strong></span>,
+            <span class="command"><strong>"warn"</strong></span> (default) and
+            <span class="command"><strong>"ignore"</strong></span>.
 	  </p></dd>
 <dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
 <dd><p>
@@ -234,8 +233,8 @@
 <dd><p>
 	    Check if Sender Policy Framework (SPF) records exist
 	    and issues a warning if an SPF-formatted TXT record is
-	    not also present.  Possible modes are <span><strong class="command">"warn"</strong></span>
-	    (default), <span><strong class="command">"ignore"</strong></span>.
+	    not also present.  Possible modes are <span class="command"><strong>"warn"</strong></span>
+	    (default), <span class="command"><strong>"ignore"</strong></span>.
 	  </p></dd>
 <dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
 <dd><p>
@@ -248,16 +247,16 @@
 <dt><span class="term">-D</span></dt>
 <dd><p>
             Dump zone file in canonical format.
-	    This is always enabled for <span><strong class="command">named-compilezone</strong></span>.
+	    This is always enabled for <span class="command"><strong>named-compilezone</strong></span>.
           </p></dd>
 <dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
 <dd><p>
             Specify whether to check for non-terminal wildcards.
             Non-terminal wildcards are almost always the result of a
             failure to understand the wildcard matching algorithm (RFC 1034).
-            Possible modes are <span><strong class="command">"warn"</strong></span> (default)
+            Possible modes are <span class="command"><strong>"warn"</strong></span> (default)
             and
-            <span><strong class="command">"ignore"</strong></span>.
+            <span class="command"><strong>"ignore"</strong></span>.
           </p></dd>
 <dt><span class="term">zonename</span></dt>
 <dd><p>
@@ -269,25 +268,20 @@
           </p></dd>
 </dl></div>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2544622"></a><h2>RETURN VALUES</h2>
-<p><span><strong class="command">named-checkzone</strong></span>
+<div class="refsection">
+<a name="id-1.9"></a><h2>RETURN VALUES</h2>
+<p><span class="command"><strong>named-checkzone</strong></span>
       returns an exit status of 1 if
       errors were detected and 0 otherwise.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2544634"></a><h2>SEE ALSO</h2>
+<div class="refsection">
+<a name="id-1.10"></a><h2>SEE ALSO</h2>
 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
       <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
       <em class="citetitle">RFC 1035</em>,
       <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2544667"></a><h2>AUTHOR</h2>
-<p><span class="corpauthor">Internet Systems Consortium</span>
-    </p>
-</div>
 </div></body>
 </html>
--- a/external/bsd/bind/dist/bin/confgen/Makefile.in	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/confgen/Makefile.in	Tue Apr 25 19:54:07 2017 +0000
@@ -1,4 +1,4 @@
-# Copyright (C) 2009, 2012  Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2009, 2012, 2015  Internet Systems Consortium, Inc. ("ISC")
 #
 # Permission to use, copy, modify, and/or distribute this software for any
 # purpose with or without fee is hereby granted, provided that the above
@@ -18,7 +18,7 @@
 VPATH =		@srcdir@
 top_srcdir =	@top_srcdir@
 
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
 
 @BIND9_MAKE_INCLUDES@
 
@@ -74,11 +74,11 @@
 ddns-confgen.@O@: ddns-confgen.c
 	${LIBTOOL_MODE_COMPILE} ${CC} ${ALL_CFLAGS} -c ${srcdir}/ddns-confgen.c
 
-rndc-confgen@EXEEXT@: rndc-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS} ${CONFDEPLIBS} 
+rndc-confgen@EXEEXT@: rndc-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS} ${CONFDEPLIBS}
 	export BASEOBJS="rndc-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS}"; \
 	${FINALBUILDCMD}
 
-ddns-confgen@EXEEXT@: ddns-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS} ${CONFDEPLIBS} 
+ddns-confgen@EXEEXT@: ddns-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS} ${CONFDEPLIBS}
 	export BASEOBJS="ddns-confgen.@O@ util.@O@ keygen.@O@ ${UOBJS}"; \
 	${FINALBUILDCMD}
 
--- a/external/bsd/bind/dist/bin/confgen/ddns-confgen.8	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/confgen/ddns-confgen.8	Tue Apr 25 19:54:07 2017 +0000
@@ -1,6 +1,6 @@
-.\"	$NetBSD: ddns-confgen.8,v 1.2.6.2 2014/12/25 17:54:00 msaitoh Exp $
+.\"	$NetBSD: ddns-confgen.8,v 1.2.6.3 2017/04/25 19:54:09 snj Exp $
 .\"
-.\" Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
 .\" 
 .\" Permission to use, copy, modify, and/or distribute this software for any
 .\" purpose with or without fee is hereby granted, provided that the above
@@ -14,26 +14,41 @@
 .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 .\" PERFORMANCE OF THIS SOFTWARE.
 .\"
-.\" Id
-.\"
 .hy 0
 .ad l
-.\"     Title: ddns\-confgen
+'\" t
+.\"     Title: ddns-confgen
 .\"    Author: 
-.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\"      Date: September 18, 2009
+.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
+.\"      Date: 2009-09-18
 .\"    Manual: BIND9
-.\"    Source: BIND9
+.\"    Source: ISC
+.\"  Language: English
 .\"
-.TH "DDNS\-CONFGEN" "8" "September 18, 2009" "BIND9" "BIND9"
+.TH "DDNS\-CONFGEN" "8" "2009\-09\-18" "ISC" "BIND9"
+.\" -----------------------------------------------------------------
+.\" * Define some portability stuff
+.\" -----------------------------------------------------------------
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.\" http://bugs.debian.org/507673
+.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
+.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+.ie \n(.g .ds Aq \(aq
+.el       .ds Aq '
+.\" -----------------------------------------------------------------
+.\" * set default formatting
+.\" -----------------------------------------------------------------
 .\" disable hyphenation
 .nh
 .\" disable justification (adjust text to left margin only)
 .ad l
+.\" -----------------------------------------------------------------
+.\" * MAIN CONTENT STARTS HERE *
+.\" -----------------------------------------------------------------
 .SH "NAME"
-ddns\-confgen \- ddns key generation tool
+ddns-confgen \- ddns key generation tool
 .SH "SYNOPSIS"
-.HP 13
+.HP \w'\fBddns\-confgen\fR\ 'u
 \fBddns\-confgen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-h\fR] [\fB\-k\ \fR\fB\fIkeyname\fR\fR] [\fB\-r\ \fR\fB\fIrandomfile\fR\fR] [\-s\ \fIname\fR | \-z\ \fIzone\fR] [\fB\-q\fR] [name]
 .SH "DESCRIPTION"
 .PP
@@ -41,46 +56,46 @@
 generates a key for use by
 \fBnsupdate\fR
 and
-\fBnamed\fR. It simplifies configuration of dynamic zones by generating a key and providing the
+\fBnamed\fR\&. It simplifies configuration of dynamic zones by generating a key and providing the
 \fBnsupdate\fR
 and
-\fBnamed.conf\fR
+\fBnamed\&.conf\fR
 syntax that will be needed to use it, including an example
 \fBupdate\-policy\fR
-statement.
+statement\&.
 .PP
 If a domain name is specified on the command line, it will be used in the name of the generated key and in the sample
-\fBnamed.conf\fR
-syntax. For example,
-\fBddns\-confgen example.com\fR
-would generate a key called "ddns\-key.example.com", and sample
-\fBnamed.conf\fR
-command that could be used in the zone definition for "example.com".
+\fBnamed\&.conf\fR
+syntax\&. For example,
+\fBddns\-confgen example\&.com\fR
+would generate a key called "ddns\-key\&.example\&.com", and sample
+\fBnamed\&.conf\fR
+command that could be used in the zone definition for "example\&.com"\&.
 .PP
 Note that
 \fBnamed\fR
 itself can configure a local DDNS key for use with
-\fBnsupdate \-l\fR.
+\fBnsupdate \-l\fR\&.
 \fBddns\-confgen\fR
 is only needed when a more elaborate configuration is required: for instance, if
 \fBnsupdate\fR
-is to be used from a remote system.
+is to be used from a remote system\&.
 .SH "OPTIONS"
 .PP
 \-a \fIalgorithm\fR
 .RS 4
-Specifies the algorithm to use for the TSIG key. Available choices are: hmac\-md5, hmac\-sha1, hmac\-sha224, hmac\-sha256, hmac\-sha384 and hmac\-sha512. The default is hmac\-sha256.
+Specifies the algorithm to use for the TSIG key\&. Available choices are: hmac\-md5, hmac\-sha1, hmac\-sha224, hmac\-sha256, hmac\-sha384 and hmac\-sha512\&. The default is hmac\-sha256\&.
 .RE
 .PP
 \-h
 .RS 4
 Prints a short summary of the options and arguments to
-\fBddns\-confgen\fR.
+\fBddns\-confgen\fR\&.
 .RE
 .PP
 \-k \fIkeyname\fR
 .RS 4
-Specifies the key name of the DDNS authentication key. The default is
+Specifies the key name of the DDNS authentication key\&. The default is
 \fBddns\-key\fR
 when neither the
 \fB\-s\fR
@@ -88,58 +103,59 @@
 \fB\-z\fR
 option is specified; otherwise, the default is
 \fBddns\-key\fR
-as a separate label followed by the argument of the option, e.g.,
-\fBddns\-key.example.com.\fR
-The key name must have the format of a valid domain name, consisting of letters, digits, hyphens and periods.
+as a separate label followed by the argument of the option, e\&.g\&.,
+\fBddns\-key\&.example\&.com\&.\fR
+The key name must have the format of a valid domain name, consisting of letters, digits, hyphens and periods\&.
 .RE
 .PP
 \-q
 .RS 4
-Quiet mode: Print only the key, with no explanatory text or usage examples.
+Quiet mode: Print only the key, with no explanatory text or usage examples\&.
 .RE
 .PP
 \-r \fIrandomfile\fR
 .RS 4
-Specifies a source of random data for generating the authorization. If the operating system does not provide a
-\fI/dev/random\fR
-or equivalent device, the default source of randomness is keyboard input.
-\fIrandomdev\fR
-specifies the name of a character device or file containing random data to be used instead of the default. The special value
-\fIkeyboard\fR
-indicates that keyboard input should be used.
+Specifies a source of random data for generating the authorization\&. If the operating system does not provide a
+/dev/random
+or equivalent device, the default source of randomness is keyboard input\&.
+randomdev
+specifies the name of a character device or file containing random data to be used instead of the default\&. The special value
+keyboard
+indicates that keyboard input should be used\&.
 .RE
 .PP
 \-s \fIname\fR
 .RS 4
 Single host mode: The example
-\fBnamed.conf\fR
+\fBnamed\&.conf\fR
 text shows how to set an update policy for the specified
 \fIname\fR
-using the "name" nametype. The default key name is ddns\-key.\fIname\fR. Note that the "self" nametype cannot be used, since the name to be updated may differ from the key name. This option cannot be used with the
+using the "name" nametype\&. The default key name is ddns\-key\&.\fIname\fR\&. Note that the "self" nametype cannot be used, since the name to be updated may differ from the key name\&. This option cannot be used with the
 \fB\-z\fR
-option.
+option\&.
 .RE
 .PP
 \-z \fIzone\fR
 .RS 4
 zone mode: The example
-\fBnamed.conf\fR
+\fBnamed\&.conf\fR
 text shows how to set an update policy for the specified
 \fIzone\fR
 using the "zonesub" nametype, allowing updates to all subdomain names within that
-\fIzone\fR. This option cannot be used with the
+\fIzone\fR\&. This option cannot be used with the
 \fB\-s\fR
-option.
+option\&.
 .RE
 .SH "SEE ALSO"
 .PP
 \fBnsupdate\fR(1),
 \fBnamed.conf\fR(5),
 \fBnamed\fR(8),
-BIND 9 Administrator Reference Manual.
+BIND 9 Administrator Reference Manual\&.
 .SH "AUTHOR"
 .PP
-Internet Systems Consortium
+\fBInternet Systems Consortium, Inc\&.\fR
 .SH "COPYRIGHT"
-Copyright \(co 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
 .br
+Copyright \(co 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
+.br
--- a/external/bsd/bind/dist/bin/confgen/ddns-confgen.docbook	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/confgen/ddns-confgen.docbook	Tue Apr 25 19:54:07 2017 +0000
@@ -1,8 +1,5 @@
-<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
-	       "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
-	       [<!ENTITY mdash "&#8212;">]>
 <!--
- - Copyright (C) 2009, 2014  Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014, 2015  Internet Systems Consortium, Inc. ("ISC")
  -
  - Permission to use, copy, modify, and/or distribute this software for any
  - purpose with or without fee is hereby granted, provided that the above
@@ -17,9 +14,14 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<refentry id="man.ddns-confgen">
+<!-- Converted by db4-upgrade version 1.0 -->
+<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.ddns-confgen">
+  <info>
+    <date>2009-09-18</date>
+  </info>
   <refentryinfo>
-    <date>September 18, 2009</date>
+    <corpname>ISC</corpname>
+    <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
   </refentryinfo>
 
   <refmeta>
@@ -37,28 +39,29 @@
     <copyright>
       <year>2009</year>
       <year>2014</year>
+      <year>2015</year>
       <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
     </copyright>
   </docinfo>
 
   <refsynopsisdiv>
-    <cmdsynopsis>
+    <cmdsynopsis sepchar=" ">
       <command>ddns-confgen</command>
-      <arg><option>-a <replaceable class="parameter">algorithm</replaceable></option></arg>
-      <arg><option>-h</option></arg>
-      <arg><option>-k <replaceable class="parameter">keyname</replaceable></option></arg>
-      <arg><option>-r <replaceable class="parameter">randomfile</replaceable></option></arg>
-      <group>
-        <arg choice="plain">-s <replaceable class="parameter">name</replaceable></arg>
-        <arg choice="plain">-z <replaceable class="parameter">zone</replaceable></arg>
+      <arg choice="opt" rep="norepeat"><option>-a <replaceable class="parameter">algorithm</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-h</option></arg>
+      <arg choice="opt" rep="norepeat"><option>-k <replaceable class="parameter">keyname</replaceable></option></arg>
+      <arg choice="opt" rep="norepeat"><option>-r <replaceable class="parameter">randomfile</replaceable></option></arg>
+      <group choice="opt" rep="norepeat">
+        <arg choice="plain" rep="norepeat">-s <replaceable class="parameter">name</replaceable></arg>
+        <arg choice="plain" rep="norepeat">-z <replaceable class="parameter">zone</replaceable></arg>
       </group>
-      <arg><option>-q</option></arg>
-      <arg choice="opt">name</arg>
+      <arg choice="opt" rep="norepeat"><option>-q</option></arg>
+      <arg choice="opt" rep="norepeat">name</arg>
     </cmdsynopsis>
   </refsynopsisdiv>
 
-  <refsect1>
-    <title>DESCRIPTION</title>
+  <refsection><info><title>DESCRIPTION</title></info>
+
     <para><command>ddns-confgen</command>
       generates a key for use by <command>nsupdate</command>
       and <command>named</command>.  It simplifies configuration
@@ -81,14 +84,14 @@
     <para>
       Note that <command>named</command> itself can configure a
       local DDNS key for use with <command>nsupdate -l</command>.
-      <command>ddns-confgen</command> is only needed when a 
+      <command>ddns-confgen</command> is only needed when a
       more elaborate configuration is required: for instance, if
       <command>nsupdate</command> is to be used from a remote system.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>OPTIONS</title>
+  <refsection><info><title>OPTIONS</title></info>
+
 
     <variablelist>
       <varlistentry>
@@ -188,10 +191,10 @@
 	</listitem>
       </varlistentry>
     </variablelist>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>SEE ALSO</title>
+  <refsection><info><title>SEE ALSO</title></info>
+
     <para><citerefentry>
 	<refentrytitle>nsupdate</refentrytitle><manvolnum>1</manvolnum>
       </citerefentry>,
@@ -203,16 +206,6 @@
       </citerefentry>,
       <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
     </para>
-  </refsect1>
+  </refsection>
 
-  <refsect1>
-    <title>AUTHOR</title>
-    <para><corpauthor>Internet Systems Consortium</corpauthor>
-    </para>
-  </refsect1>
-
-</refentry><!--
- - Local variables:
- - mode: sgml
- - End:
--->
+</refentry>
--- a/external/bsd/bind/dist/bin/confgen/ddns-confgen.html	Sat Mar 25 17:58:44 2017 +0000
+++ b/external/bsd/bind/dist/bin/confgen/ddns-confgen.html	Tue Apr 25 19:54:07 2017 +0000
@@ -1,5 +1,5 @@
 <!--
- - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
  - 
  - Permission to use, copy, modify, and/or distribute this software for any
  - purpose with or without fee is hereby granted, provided that the above
@@ -13,14 +13,13 @@
  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  - PERFORMANCE OF THIS SOFTWARE.
 -->
-<!-- Id -->
 <html>
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
 <title>ddns-confgen</title>
-<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
+<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
 </head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
+<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
 <a name="man.ddns-confgen"></a><div class="titlepage"></div>
 <div class="refnamediv">
 <h2>Name</h2>
@@ -30,36 +29,36 @@
 <h2>Synopsis</h2>
 <div class="cmdsynopsis"><p><code class="command">ddns-confgen</code>  [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em>  |   -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543406"></a><h2>DESCRIPTION</h2>
-<p><span><strong class="command">ddns-confgen</strong></span>
-      generates a key for use by <span><strong class="command">nsupdate</strong></span>
-      and <span><strong class="command">named</strong></span>.  It simplifies configuration
+<div class="refsection">
+<a name="id-1.7"></a><h2>DESCRIPTION</h2>
+<p><span class="command"><strong>ddns-confgen</strong></span>
+      generates a key for use by <span class="command"><strong>nsupdate</strong></span>
+      and <span class="command"><strong>named</strong></span>.  It simplifies configuration
       of dynamic zones by generating a key and providing the
-      <span><strong class="command">nsupdate</strong></span> and <span><strong class="command">named.conf</strong></span>
+      <span class="command"><strong>nsupdate</strong></span> and <span class="command"><strong>named.conf</strong></span>
       syntax that will be needed to use it, including an example
-      <span><strong class="command">update-policy</strong></span> statement.
+      <span class="command"><strong>update-policy</strong></span> statement.
     </p>
 <p>
       If a domain name is specified on the command line, it will
       be used in the name of the generated key and in the sample
-      <span><strong class="command">named.conf</strong></span> syntax.  For example,
-      <span><strong class="command">ddns-confgen example.com</strong></span> would
+      <span class="command"><strong>named.conf</strong></span> syntax.  For example,
+      <span class="command"><strong>ddns-confgen example.com</strong></span> would
       generate a key called "ddns-key.example.com", and sample
-      <span><strong class="command">named.conf</strong></span> command that could be used
+      <span class="command"><strong>named.conf</strong></span> command that could be used
       in the zone definition for "example.com".
     </p>
 <p>
-      Note that <span><strong class="command">named</strong></span> itself can configure a
-      local DDNS key for use with <span><strong class="command">nsupdate -l</strong></span>.
-      <span><strong class="command">ddns-confgen</strong></span> is only needed when a 
+      Note that <span class="command"><strong>named</strong></span> itself can configure a
+      local DDNS key for use with <span class="command"><strong>nsupdate -l</strong></span>.
+      <span class="command"><strong>ddns-confgen</strong></span> is only needed when a
       more elaborate configuration is required: for instance, if
-      <span><strong class="command">nsupdate</strong></span> is to be used from a remote system.
+      <span class="command"><strong>nsupdate</strong></span> is to be used from a remote system.
     </p>
 </div>
-<div class="refsect1" lang="en">
-<a name="id2543466"></a><h2>OPTIONS</h2>
-<div class="variablelist"><dl>
+<div class="refsection">
+<a name="id-1.8"></a><h2>OPTIONS</h2>
+<div class="variablelist"><dl class="variablelist">
 <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
 <dd><p>