In gmane.os.openbsd.ports, you wrote:
> On 2011-05-13, Ryan McBride <mcbr...@openbsd.org> wrote:
>> This is the patch from http://ecdysis.viagenie.ca/, updated for
>> unbound-1.4.9. Needed for nat64 in pf being tested now, but also useful
>> if you're running nat64 on another box.
>
> I'd prefer to download the patchset rather than include it in filesdir:
This one's better. Don't change the default config settings (just
add the commented-out examples), and add the missing config parser
patches so you can specify dns64-prefix without an error.
$ grep dns64 /var/unbound/etc/unbound.conf
module-config: "dns64 validator iterator"
dns64-prefix: 64:ff9b::0/96
$ dig +short @::1 www.openbsd.org aaaa
64:ff9b::8ef4:c2a
OK?
If anyone is reading this from outside OpenBSD and not interested in
the ports bits but just wanting an updated dns64 patch for unbound 1.4.9,
it's at http://spacehopper.org/mirrors/unbound-1.4.9-dns64.patch.gz
Index: Makefile
===================================================================
RCS file: /cvs/ports/net/unbound/Makefile,v
retrieving revision 1.28
diff -u -p -r1.28 Makefile
--- Makefile 24 Mar 2011 20:30:42 -0000 1.28
+++ Makefile 14 May 2011 10:47:41 -0000
@@ -3,9 +3,11 @@
COMMENT= validating DNS resolver
DISTNAME= unbound-1.4.9
+REVISION= 0
CATEGORIES= net
MASTER_SITES= http://www.unbound.net/downloads/
+MASTER_SITES0= http://spacehopper.org/mirrors/
HOMEPAGE= http://www.unbound.net/
MAINTAINER= Jakob Schlyter <ja...@openbsd.org>
@@ -37,6 +39,16 @@ CONFIGURE_ARGS+= --with-ssl=/usr \
--with-conf-file=/var/unbound/etc/unbound.conf \
--with-username=_unbound
USE_GROFF = Yes
+
+FLAVORS= dns64
+FLAVOR?=
+
+.if ${FLAVOR:L:Mdns64}
+PATCHFILES= unbound-1.4.9-dns64.patch.gz:0
+PATCH_DIST_STRIP= -p1
+.else
+SUPDISTFILES= unbound-1.4.9-dns64.patch.gz:0
+.endif
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/unbound
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/unbound/distinfo,v
retrieving revision 1.19
diff -u -p -r1.19 distinfo
--- distinfo 24 Mar 2011 20:30:42 -0000 1.19
+++ distinfo 14 May 2011 10:47:41 -0000
@@ -1,5 +1,10 @@
+MD5 (unbound-1.4.9-dns64.patch.gz) = 0AOiMRttQ4YSINu9iHL3sQ==
MD5 (unbound-1.4.9.tar.gz) = cHnnUhDGVnYdOASp8qx7nw==
+RMD160 (unbound-1.4.9-dns64.patch.gz) = Ee2Qax67R7JDbjBDTpRLhoRDx3U=
RMD160 (unbound-1.4.9.tar.gz) = nDTFX3dvRQavt3XI9E34SmSFQHM=
+SHA1 (unbound-1.4.9-dns64.patch.gz) = k7ls65yzXBqUvefwV8UVluj/ZE0=
SHA1 (unbound-1.4.9.tar.gz) = 8qx7TvHRszDi3V4u7etv0ruthHg=
+SHA256 (unbound-1.4.9-dns64.patch.gz) =
PnBRP13Gg0rY0VT01vMlzXHnB9eBFzdi+zOOGkvH9NI=
SHA256 (unbound-1.4.9.tar.gz) = 2guYn+jPEOQ0gTQ4c+rt9gvvY75HPIbXPQJUt5xZFrc=
+SIZE (unbound-1.4.9-dns64.patch.gz) = 94073
SIZE (unbound-1.4.9.tar.gz) = 4470329
Index: pkg/DESCR
===================================================================
RCS file: /cvs/ports/net/unbound/pkg/DESCR,v
retrieving revision 1.1.1.1
diff -u -p -r1.1.1.1 DESCR
--- pkg/DESCR 23 May 2008 06:52:21 -0000 1.1.1.1
+++ pkg/DESCR 14 May 2011 10:47:41 -0000
@@ -1,2 +1,5 @@
Unbound is an implementation of a recursive DNS resolver, that does caching
and DNSSEC validation.
+
+Flavors:
+ dns64 Support for synthesized AAAA records for NAT64
