gitea_admin
released this
2026-07-01 19:58:26 +00:00
| 26 commits to main since this release
Added
- The Debian/RPM packages now install a systemd service. The recursive
resolver ships as zdns-recursor.service — hardened (DynamicUser, only
CAP_NET_BIND_SERVICE, ProtectSystem=strict, NoNewPrivileges) — with a
default config at /etc/zdns/recursor.conf. The safe default binds
127.0.0.1:5300 (never an open resolver, no clash with systemd-resolved on
:53); set listen=0.0.0.0:53 to serve a network (the unit already grants the
privileged-port capability). apt install zdns / dnf install zdns now enable
and start the recursor. Unit, config, and maintainer scripts live in packaging/.
Added
edns/clampUdpPayloadSize: a test exercising the RFC 6891 EDNS0 UDP
requestor's payload-size clamp branches — a value below the 512-byte floor
clamps up to 512, a value above the 4096-byte ceiling clamps down to 4096,
and an in-range value passes through unchanged. The clamp bounds were
previously unpinned, so an off-by-one at either edge would have passed
silently.
Downloads