--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisccfg50.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/libisccfg50.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/rules
+++ bind9-9.6.ESV.R1+dfsg/debian/rules
@@ -0,0 +1,169 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+export DEB_BUILD_HARDENING=1
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+ifndef DEB_HOST_ARCH
+DEB_BUILD_ARCH := $(shell dpkg --print-installation-architecture)
+endif
+export arch = $(DEB_HOST_ARCH)
+
+DEB_HOST_GNU_TYPE   ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
+DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
+
+ifneq (,$(findstring debug,$(DEB_BUILD_OPTIONS)))
+DEBUG = -g
+endif
+
+ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
+OPT = 
+else
+OPT = -O2
+endif
+
+export CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -DNS_RUN_PID_DIR=0 $(DEBUG) $(OPT)
+
+configure: configure-stamp
+configure-stamp:
+	dh_testdir
+	./configure --prefix=/usr \
+		--build=$(DEB_BUILD_GNU_TYPE) \
+		--host=$(DEB_HOST_GNU_TYPE) \
+		--mandir=\$${prefix}/share/man \
+		--infodir=\$${prefix}/share/info \
+		--sysconfdir=/etc/bind \
+		--localstatedir=/var/run/bind \
+		--enable-threads \
+		--enable-largefile \
+		--with-libtool \
+		--enable-shared \
+		--enable-static \
+		--with-openssl=/usr \
+		--with-gssapi=/usr \
+		--with-gnu-ld \
+		--with-dlz-postgres=no \
+		--with-dlz-mysql=no \
+		--with-dlz-bdb=yes \
+		--with-dlz-filesystem=yes \
+		--with-dlz-ldap=yes \
+		--with-dlz-stub=yes \
+		--enable-ipv6
+	touch configure-stamp
+
+build: configure-stamp build-stamp
+build-stamp:
+	dh_testdir
+	LD_LIBRARY_PATH=$$(pwd)/lib/isc/.libs:$$(pwd)/lib/isccc/.libs:$$(pwd)/isccfg/.libs:$${LD_LIBRARY_PATH} $(MAKE)
+	touch build-stamp
+
+autofiles:
+	libtoolize --automake --copy --force
+	aclocal
+	#automake
+	autoheader
+	autoconf
+	rm -rf autom4te.cache
+
+clean:
+	dh_testdir
+	dh_testroot
+	-$(MAKE) distclean
+	find . -name \*.o -exec rm {} \;
+	rm -f build-stamp configure-stamp
+	rm -f debian/substvars lib/bind/include/isc/platform.h
+	rm -f contrib/dlz/bin/dlzbdb/Makefile contrib/dlz/drivers/rules
+	rm -f doc/arm/Bv9ARM.pdf
+	dh_clean
+
+newtemplate:
+	debconf-updatepo
+
+msgstats:
+	@cd debian/po && for i in *.po; do x=$$(msgfmt --statistics $$i 2>&1); echo $$i $$x; done; rm -f messages.mo *.po~
+
+msg-email:
+	@podebconf-report-po
+
+ETCBIND=debian/bind9/etc/bind
+ETCAPP=debian/bind9/etc/apparmor.d
+install: build
+	dh_testdir
+	dh_testroot
+	dh_clean -k
+	dh_installdirs
+	$(MAKE) install DESTDIR=`pwd`/debian/bind9
+	rm -f debian/bind9/usr/lib/*.la
+	install -c -o bin -g bin -m 444 debian/db.0 ${ETCBIND}/db.0
+	install -c -o bin -g bin -m 444 debian/db.0 ${ETCBIND}/db.255
+	install -c -o bin -g bin -m 444 debian/db.empty ${ETCBIND}
+	install -c -o bin -g bin -m 444 debian/zones.rfc1918 ${ETCBIND}
+	install -c -o bin -g bin -m 444 debian/db.127 ${ETCBIND}
+	install -c -o bin -g bin -m 444 debian/db.local ${ETCBIND}
+	install -c -o bin -g bin -m 444 debian/db.root ${ETCBIND}
+	install -c -o bin -g bin -m 440 debian/named.conf ${ETCBIND}
+	install -c -o bin -g bin -m 440 debian/named.conf.local ${ETCBIND}
+	install -c -o bin -g bin -m 440 debian/named.conf.options ${ETCBIND}
+	install -c -o bin -g bin -m 644 debian/bind9-default.md5sum debian/bind9/usr/share/bind9/
+	cp doc/arm/*.html debian/bind9-doc/usr/share/doc/bind9-doc/arm
+	install -m 644 -o root -g root debian/apparmor-profile ${ETCAPP}/usr.sbin.named
+
+	install debian/ip-up.d debian/bind9/etc/ppp/ip-up.d/bind9
+	install debian/ip-down.d debian/bind9/etc/ppp/ip-down.d/bind9
+	install debian/ip-up.d debian/bind9/etc/network/if-up.d/bind9
+	install debian/ip-down.d debian/bind9/etc/network/if-down.d/bind9
+	install -m644 debian/bind9.ufw.profile debian/bind9/etc/ufw/applications.d/bind9
+
+# Build architecture-independent files here.
+binary-indep: build install
+	dh_testdir -i
+	dh_testroot -i
+	dh_installdocs -i
+	dh_installexamples -i
+	dh_installmenu -i
+	dh_installcron -i
+	dh_installinfo -i
+	dh_installchangelogs -i # CHANGES # upstream changelog only in bind9-doc
+	dh_installchangelogs -pbind9-doc CHANGES
+	dh_link -i
+	dh_compress -i
+	dh_fixperms -i
+	dh_installdeb -i
+	for i in $$(sed -n '/^Package:/s/^.* //p' debian/control); do cat debian/vars.in >> debian/$$i.substvars; done
+	cat debian/vars.in >> debian/substvars
+	dh_gencontrol -i
+	dh_md5sums -i
+	dh_builddeb -i
+
+# Build architecture-dependent files here.
+binary-arch: build install
+	dh_testdir -a
+	dh_testroot -a
+	dh_installdocs -a
+	dh_installexamples -a
+	dh_installmenu -a
+	dh_installinit -a --no-start -- defaults 15 85
+	dh_installcron -a
+	dh_installdebconf -pbind9
+	dh_installinfo -a
+	dh_installchangelogs -a # CHANGES # upstream changelog only in bind9-doc
+	dh_install --sourcedir=debian/bind9 -a
+	(cd debian/bind9/ && rm -rf $$(cat ../*.install) )
+	rm -f debian/bind9/usr/share/man/man1/query-loc.1
+	dh_link -a
+	dh_strip -a
+	dh_compress -a
+	dh_fixperms -a
+	dh_makeshlibs -a
+	dh_installdeb -a
+	dh_shlibdeps -l"debian/libbind9-50/usr/lib:debian/libbind-dev/usr/lib:debian/libdns55/usr/lib:debian/libisc52/usr/lib:debian/libisccc50/usr/lib:debian/libisccfg50/usr/lib:debian/liblwres50/usr/lib:/usr/lib/libfakeroot" -a
+	for i in $$(sed -n '/^Package:/s/^.* //p' debian/control); do cat debian/vars.in >> debian/$$i.substvars; done
+	cat debian/vars.in >> debian/substvars
+	dh_gencontrol -a
+	dh_md5sums -a
+	dh_builddeb -a
+
+binary: binary-indep binary-arch
+.PHONY: build clean binary-indep binary-arch binary install configure
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisccfg50.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libisccfg50.install
@@ -0,0 +1 @@
+usr/lib/libisccfg.so.50*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9utils.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9utils.dirs
@@ -0,0 +1,3 @@
+usr
+usr/sbin
+usr/share/man/man8
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9-host.install
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9-host.install
@@ -0,0 +1,2 @@
+usr/bin/host
+usr/share/man/man1/host.1*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.dirs
@@ -0,0 +1,12 @@
+etc/ufw/applications.d
+etc/apparmor.d/force-complain
+etc/bind
+usr/bin
+usr/sbin
+var/cache/bind
+var/run/bind/run
+usr/share/bind9
+etc/ppp/ip-up.d
+etc/ppp/ip-down.d
+etc/network/if-up.d
+etc/network/if-down.d
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisc52.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/libisc52.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/named.conf.options
+++ bind9-9.6.ESV.R1+dfsg/debian/named.conf.options
@@ -0,0 +1,20 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	0.0.0.0;
+	// };
+
+	auth-nxdomain no;    # conform to RFC1035
+	listen-on-v6 { any; };
+};
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.postinst
@@ -0,0 +1,142 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+if [ "$1" = configure ]; then
+    lastversion="$2";
+
+    # lets give them a bind user/group in all cases.
+    getent group bind >/dev/null 2>&1 || addgroup --system bind
+    getent passwd bind >/dev/null 2>&1 ||
+	adduser --system --home /var/cache/bind --no-create-home \
+		--disabled-password --ingroup bind bind
+
+    if [ -z "$lastversion" ] || dpkg --compare-versions "$lastversion" lt 1:9.4.2-2 ; then
+	mkdir -p /var/lib/bind
+	chown root:bind /var/lib/bind
+	chmod 775 /var/lib/bind
+    fi
+
+    if [ ! -s /etc/bind/rndc.key ]; then
+	rndc-confgen -r /dev/urandom -a
+    fi
+
+    if [ -e /etc/default/bind9 ] && [ "`cat /usr/share/bind9/bind9-default.md5sum`" = "`md5sum /etc/default/bind9`" ]; then
+        config="/etc/default/bind9"
+    elif [ ! -e /etc/default/bind9 ]; then
+        config="/etc/default/bind9"
+    else 
+        config="/etc/default/bind9.dpkg-dist"
+    fi
+
+    localconf=""
+    if [ ! -f $config ]; then
+	for file in /etc/bind/named.conf /etc/bind/named.conf.local; do
+	    theirs=$(md5sum $file | sed 's/ .*$//')
+	    mine=$(dpkg --status bind9 | grep "^ $file " | sed -n 's/.* //p')
+	    if [ "$mine" != "$theirs" ]; then
+		localconf="y"
+	    fi
+	done
+	if [ -n "$localconf" ]; then
+                db_reset bind9/start-as-user
+	else
+                db_set bind9/start-as-user bind || true
+	fi
+   
+        echo '#' 
+        echo '# run resolvconf?' >> $config
+        db_get bind9/run-resolvconf
+        if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+                echo "RESOLVCONF=yes" >> $config
+        else
+                echo "RESOLVCONF=no" >> $config
+        fi
+
+        db_get bind9/start-as-user
+        USER=$RET
+        db_get bind9/different-configuration-file
+        CONFFILE=$RET
+        
+        echo '' >> /etc/default/bind9
+        echo '# startup options for the server' >> $config
+        if [ ! -z "$USER" ] && [ ! -z "$CONFFILE" ]; then
+                echo "OPTIONS=\"-u $USER -c $CONFFILE\"" >> $config
+        elif [ ! -z "$USER" ]; then
+                echo "OPTIONS=\"-u $USER\"" >> $config
+        elif [ ! -z "$CONFFILE" ]; then
+                echo "OPTIONS=\"-c $CONFFILE\"" >> $config
+        else
+                echo "OPTIONS=\"\"" >> $config
+        fi
+    else
+        db_get bind9/run-resolvconf
+         if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+	        sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2yes#g" -i $config
+        else
+	        sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2no#g" -i $config
+        fi
+        db_get bind9/start-as-user
+        if [ ! -z "$RET" ]; then
+            if [ ! -z "`grep OPTIONS $config`" ]; then
+                if [ ! -z "`grep OPTIONS $config | grep '\-u'`" ]; then
+                        sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-u[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-u $RET\3\"#g" -i $config
+                else 
+                        sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -u $RET\"#g" -i $config
+                fi
+            else
+                echo "OPTIONS=\"-u $RET\""
+            fi
+        fi
+        db_get bind9/different-configuration-file
+        if [ ! -z "$RET" ]; then
+            if [ ! -z "`grep OPTIONS $config | grep '\-c'`" ]; then
+                sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-c[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-c $RET\3\"#g" -i $config
+            else 
+                sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -c $RET\"#g" -i $config
+            fi
+        fi
+    fi
+
+    if [ "$config" = "/etc/default/bind9" ]; then
+        md5sum /etc/default/bind9 > /usr/share/bind9/bind9-default.md5sum
+    fi
+
+    # Deal with the aftermath of 9.2.1-5  - it's a hack, but hey..
+    if [ "$lastversion" = "9.2.1-5" ]; then
+	ugid=$(ls -l /etc/bind/rndc.key | awk '{print $3 $4}')
+	if [ "$ugid" = "bindbind" ]; then
+	    chown root:root /etc/bind/rndc.key
+	    chown root:bind /var/run/bind/run
+	    chown root:bind /var/cache/bind
+	fi
+    fi
+
+    uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}')
+    if [ "$uid" = "0" ]; then
+	[ -n "$localconf" ] || chown bind /etc/bind/rndc.key
+	chgrp bind /etc/bind
+	chmod g+s /etc/bind
+	chgrp bind /etc/bind/rndc.key /var/run/bind/run /var/cache/bind
+	chgrp bind /etc/bind/named.conf*
+	chmod g+r /etc/bind/rndc.key /etc/bind/named.conf*
+	chmod g+rwx /var/run/bind/run /var/cache/bind
+    fi
+
+    # Reload AppArmor profile
+    if [ -x /etc/init.d/apparmor ]; then
+        invoke-rc.d apparmor force-reload || true
+    fi
+
+    if /bin/pidof /usr/sbin/named >/dev/null 2>&1; then
+	invoke-rc.d bind9 restart
+    else
+    	invoke-rc.d bind9 start
+    fi
+fi
+
+db_stop
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/changelog
+++ bind9-9.6.ESV.R1+dfsg/debian/changelog
@@ -0,0 +1,1127 @@
+bind9 (1:9.6.ESV.R1+dfsg-0+lenny2) stable-security; urgency=medium
+
+  * Use old location of the PID files.  Closes: #585004.
+  * Log warning if openssl.cnf is not readable.
+
+ -- Florian Weimer <fw@deneb.enyo.de>  Wed, 09 Jun 2010 06:53:48 +0200
+
+bind9 (1:9.6.ESV.R1+dfsg-0+lenny1) stable-security; urgency=high
+
+  * New upstream version: BIND 9.6-ESV-R1.
+  * Restore Debian-specific feature patches.
+
+ -- Florian Weimer <fw@deneb.enyo.de>  Sun, 23 May 2010 14:45:30 +0200
+
+bind9 (1:9.6.ESV+dfsg-0+lenny1) stable-security; urgency=high
+
+  * New upstream version: BIND 9.6-ESV.
+
+ -- Florian Weimer <fw@deneb.enyo.de>  Sun, 16 May 2010 19:43:10 +0200
+
+bind9 (1:9.5.1.dfsg.P3-1+lenny1) stable-security; urgency=high
+
+  * Fix cache poisoning through additional section for secure delegations
+    (CVE-2009-4022).  Backport of ISC changes between 9.5.2 and 9.5.2-P1.
+
+ -- Florian Weimer <fw@deneb.enyo.de>  Sun, 20 Dec 2009 20:14:35 +0100
+
+bind9 (1:9.5.1.dfsg.P3-1) stable-security; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * A specially crafted update packet will cause named to exit. 
+    CVE-2009-0696, CERT VU#725188.  Closes: #538975
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 28 Jul 2009 22:48:28 -0600
+
+bind9 (1:9.5.1.dfsg.P2-1+lenny1) stable; urgency=medium
+
+  * Non-maintainer upload with permission from maintainer
+  * Upload "DNSSEC lookaside validation failed to handle unknown
+    algorithms. [RT #19479]" fix to stable
+
+ -- Florian Weimer <fw@deneb.enyo.de>  Wed, 29 Apr 2009 13:33:34 +0200
+
+bind9 (1:9.5.1.dfsg.P2-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.1-P2
+    - DNSSEC lookaside validation failed to handle unknown algorithms. [RT #19479]
+
+  [LaMont Jones]
+
+  * meta: fix override disparity
+
+  [Sven Joachim]
+
+  * meta: pass host and build into configure for hybrid build machines. 
+    Closes: #515110
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 20 Mar 2009 19:08:03 -0600
+
+bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low
+
+  * package -2 for unstable
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 09:40:18 -0600
+
+bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low
+
+  [Juhana Helovuo]
+
+  * fix atomic operations on alpha.  Closes: #512285
+
+  [Dann Frazier]
+
+  * fix atomic operations on ia64.  Closes: #520179
+
+  [LaMont Jones]
+
+  * build-conflict: libdb4.2-dev.  Closes: #515074, #507013
+
+  [localization folks]
+
+  * l10n: Basque debconf template.  Closes: #516549 (Piarres Beobide)
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 05:30:22 -0600
+
+bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low
+
+  * New upstream patch release
+    - supportable version of fix from 9.5.0.dfsg.P2-5.1
+    - CVE-2009-0025:  Closes: #511936
+    - 2475: Overly agressive cache entry removal.  Closes: #511768
+    - other bug fixes worthy of patch-release inclusion
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 26 Jan 2009 10:33:42 -0700
+
+bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided
+    by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot
+    contacted him. Closes: #496954, #501800.
+  * Remove obsolete dh_installmanpages invocation which was adding
+    unwanted manual pages to bind9. Closes: #486196.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 02 Jan 2009 16:51:42 +0000
+
+bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low
+
+  [ISC]
+
+  * 2463: IPv6 Advanced Socket API broken on linux.  LP: #249824
+
+  [Jamie Strandboge]
+
+  * apparmor: add capability sys_resource
+  * apparmor: add krb keytab access.  LP: #277370
+
+  [LaMont Jones]
+
+  * apparmor: allow proc/*/net/if_inet6 read access too.  LP: #289060
+  * apparmor: add /var/log/named/* entries.  LP: #294935
+
+  [Ben Hutchings]
+
+  * meta: Add dependency of bind9 on net-tools (ifconfig used in init script)
+  * meta: Fix bind9utils Depends.
+  * meta: fix typo in package description
+
+  [localization folks]
+
+  * l10n: add polish debconf translations.  Closes: #506856 (L)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 07 Dec 2008 21:03:29 -0700
+
+bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low
+
+  * meta: fix typo in Depends: lsb-base.  Closes: #501365
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 07 Oct 2008 17:20:11 -0600
+
+bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * enable largefile support.  Closes: #497040
+
+  [localization folks]
+
+  * l10n: Dutch translation.  Closes: #499977 (Paul Gevers)
+  * l10n: simplified chinese debconf template.  Closes: #501103 (LI Daobing)
+  * l10n: Update spanish template.  Closes: #493775 (Ignacio Mondino)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 05 Oct 2008 20:20:00 -0600
+
+bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low
+
+  [Kees Cook]
+
+  * debian/{control,rules}: enable PIE hardening (from -1ubuntu1)
+
+  [Nicolas Valcárcel]
+
+  * Add ufw integration (from -1ubuntu2)
+
+  [Dustin Kirkland]
+
+  * use pid file in init.d/bind9 status.  LP: #247084
+
+  [LaMont Jones]
+
+  * dig: add -DDIG_SIGCHASE to compile options.  LP: #257682
+  * apparmor profile: add /var/log/named
+
+  [Nikita Ofitserov]
+
+  * ipv6 support requires _GNU_SOURCE definition.  LP: #249824
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2008 23:08:36 -0600
+
+bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * default to using resolvconf if it is installed
+  * fix sonames and dependencies.  Closes: #149259, #492418
+  * Do not build-depend libcap2-dev on non-linux.  Closes: #493392
+  * drop unused query-loc manpage.  Closes: #492564
+  * lwresd: Deliver /etc/bind directory.  Closes: #490027
+  * fix query-source comment in default install
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0-P2.  Closes: #492949
+
+  [localization folks]
+
+  * l10n: Spanish debconf translation.  Closes: #492425 (Ignacio Mondino)
+  * l10n: Swedish debconf templates.  Closes: #491369 (Martin Ågren)
+  * l10n: Japanese debconf translations.  Closes: #492048 (Hideki Yamane
+    (Debian-JP))
+  * l10n: Finnish translation.  Closes: #490630 (Esko Arajärvi)
+  * l10n: Italian debconf translations.  Closes: #492587 (Alessandro Vietta)
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 02 Aug 2008 14:20:20 -0600
+
+bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
+
+  * Revert "meta: merge the mess of single-lib packages back into one large
+    one." - That way lies madness and pain.
+  * init.d/bind9: implement status function.  LP: #203169
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 21:56:58 -0600
+
+bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low
+
+  * Repackage 9.5.0.dfsg-5 with the -P1 tarball.
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 15:06:07 -0600
+
+bind9 (1:9.5.0.dfsg-5) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Randomize UDP query source ports to improve forgery resilience.
+    (CVE-2008-1447)                                                                              
+
+  [LaMont Jones]
+
+  * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean
+  * fix sonames
+  * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf
+  * meta: cleanup libbind9-41 Provides/Conflicts
+  * build: fix sonames for new libraries
+  * postinst: really restart bind/lwresd in postinst
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jul 2008 21:34:18 -0600
+
+bind9 (1:9.5.0.dfsg-4) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+  * lwresd: restart in postinst.  Closes: #486481
+  * meta: merge the mess of single-lib packages back into one large one.
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+  * build: drop .la files.  Closes: #486969
+  * build: drop the extra lib path from the library-package merge
+  * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0
+
+  [localization folks]
+
+  * l10n: German debconf translation.  Closes: #486547 (Helge Kreutzmann)
+  * l10n: Indonesian debconf translations.  Closes: #486503 (Arief S Fitrianto)
+  * l10n: Slovak po-debconf translation Closes: #488905 (helix84)
+  * l10n: Turkish debconf template.  Closes: #486479 (Mert Dirik)
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:22:05 -0600
+
+bind9 (1:9.4.2-12) unstable; urgency=low
+
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:17:53 -0600
+
+bind9 (1:9.4.2-11) unstable; urgency=low
+
+  * apparmor: add dnscvsutil package files
+  * lwresd Depends: adduser
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 17 Jun 2008 21:30:12 -0600
+
+bind9 (1:9.5.0.dfsg-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * bind9utils Depends: libbind9-40.  Closes: #486194
+  * bind9 should not deliver manpages for nonexistant binaries. 
+    Closes: #486196
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf templates translation update.  Closes: #486185
+    (Clytie Siddall)
+  * l10n: Russian debconf templates translation.  Closes: #486191 (Yuri Kozlov)
+  * l10n: Galician debconf template.  Closes: #486215 (Jacobo Tarrio)
+  * l10n: French debconf templates.  Closes: #486325 (CALARESU Luc)
+  * l10n: Czech debconf translation.  Closes: #486337 (Miroslav Kure)
+  * l10n: Updated Portuguese translation.  Closes: #486267 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 15 Jun 2008 18:25:02 -0600
+
+bind9 (1:9.5.0.dfsg-2) unstable; urgency=low
+
+  [Tim Spriggs]
+
+  * init.d: Nexenta has different ifconfig arguments
+
+  [LaMont Jones]
+
+  * templates rework from debian-l10n-english
+  * reload named when an interface goes up or down.  LP: #226495
+  * build: need to create the directories for interface restart triggering
+  * Build-Depends: libcap2-dev.  Closes: #485747
+  * Leave named running during update.  Closes: #453765
+  * Fix path to uname, cleaning up the nexenta checks.
+  * l10n: avoid double-question in templates.
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf translations.  Closes: #483911 (Clytie Siddall)
+  * l10n: Portuguese debconf translations.  Closes: #483872 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 Jun 2008 16:54:42 -0600
+
+bind9 (1:9.5.0.dfsg-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * manpages: fix references that should say /etc/bind
+  * meta: build-depend libxml2-dev for statistics support
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 31 May 2008 12:17:21 -0600
+
+bind9 (1:9.5.0.dfsg-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0 release
+
+  [LaMont Jones]
+
+  * Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+  * control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  No pgsql or mysql support yet.  LP: #227344
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 29 May 2008 22:05:19 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low
+
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  LP: #227344
+
+ -- LaMont Jones <lamont@ubuntu.com>  Tue, 27 May 2008 21:43:06 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low
+
+  * Upload what will become (maybe an ancestor of) -2 to intrepid.
+    - Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+    - control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+
+ -- LaMont Jones <lamont@ubuntu.com>  Mon, 26 May 2008 11:46:27 -0600
+
+bind9 (1:9.5.0~rc1-1) experimental; urgency=low
+
+  [Patrick Winnertz]
+
+  * postinst: make add debconf support.  Closes: #473460
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: Apparmor force-complain on upgrade without
+    existing profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * bind9utils: fix typos in .install
+  * host: manpage inaccurately describes default query.  LP: #203087
+  * apparmor: add dnscvsutil package files
+  * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1.
+  * soname: libdns41 -> 42
+  * fix typos in debconf patch, #473460
+  * cleanup more files in clean target
+  * lwresd Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 15 May 2008 17:59:54 -0600
+
+bind9 (1:9.5.0~b2-2) experimental; urgency=low
+
+  * meta: add bind9utils binary package, with various useful utilities.  Closes: #151957, #130445, #160483
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 03 Apr 2008 07:01:42 -0600
+
+bind9 (1:9.4.2-10) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: AA force-complain on upgrade without existing
+    profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * host: manpage inaccurately describes default query.  LP: #203087
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Apr 2008 22:45:57 -0600
+
+bind9 (1:9.4.2-9) unstable; urgency=low
+
+  * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
+  * apparmor: make profile match README.Debian
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 01 Apr 2008 21:13:05 -0600
+
+bind9 (1:9.4.2-8) unstable; urgency=low
+
+  [ISC]
+
+  * CVE-2008-0122: off by one error in (unused) inet_network function.
+    Closes: #462783  LP: #203476
+
+  [Michael Milligan]
+
+  * Fix min-cache-ttl and min-ncache-ttl keywords
+
+  [Jamie Strandboge]
+
+  * apparmor: force complain-mode for apparmor on certain upgrades.  LP: #203528
+  * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Mar 2008 18:35:15 -0600
+
+bind9 (1:9.4.2-7) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * Allow rw access to /var/lib/bind/* in apparmor-profile.  LP: #201954
+
+  [LaMont Jones]
+
+  * Drop root-delegation comments from named.conf.  Closes: #217829, #297219
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2008 09:48:10 -0600
+
+bind9 (1:9.4.2-6) unstable; urgency=low
+
+  * Correct apparmor profile filename.  LP: #200739
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 14:28:01 -0600
+
+bind9 (1:9.4.2-5) unstable; urgency=low
+
+  * add "order random_1" support (return one random RR)
+  * Fix doc pathnames in README.Debian.  Closes: #266891
+  * Add AAAA ::1 entry to db.local.  Closes: #230088
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 13:51:28 -0600
+
+bind9 (1:9.5.0~b2-1) experimental; urgency=low
+
+  [Thiemo Seufer]
+
+  * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64}
+
+  [LaMont Jones]
+
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * manpages: fix typo errors.  Closes: #395834
+  * Makefile.in: be explicit about library paths
+  * build: Turn on GSS-TSIG support.  LP: #158197
+  * build: soname changes
+  * db.root: include AAAA RRs.  Closes: #464111
+  * soname: lib{dns,isc}40 -> 41
+  * meta: use binary:Version instead of Source-Version
+
+  [Andreas John]
+
+  * Only use capabilities if they are present.  Closes: #360339, #212226
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 23 Feb 2008 08:06:17 -0700
+
+bind9 (1:9.4.2-4) unstable; urgency=low
+
+  * incorporate ubuntu apparmor change from Jamie Strandboge,
+    with changes:
+    - Add apparmor profile, reload apparmor profile on config
+    - Add a note about apparmor to README.Debian
+    - conflicts/replaces old apparmor versions
+  * db.root: include AAAA RRs.  Closes: #464111
+  * Don't die when /var/lib/bind already exists.  LP: #191685
+  * build: turn on optimization.  Closes: #435194
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 22 Feb 2008 22:05:25 -0700
+
+bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low
+
+  * add AppArmor profile
+    + debian/apparmor-profile
+    + debian/bind9.postinst: Reload AA profile on configuration
+  * updated debian/README.Debian for note on AppArmor
+  * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we
+    should now take control
+  * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4
+    to make sure that if earlier version of apparmor-profiles gets installed
+    it won't overwrite our profile
+  * Modify Maintainer value to match the DebianMaintainerField
+    specification.
+
+ -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 13 Feb 2008 17:30:45 +0000
+
+bind9 (1:9.4.2-3) unstable; urgency=low
+
+  * don't run rndc-confgen when it's not there.  Closes: #459551
+  * control: drop use of ${Source-Version}
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 07 Jan 2008 10:16:06 -0700
+
+bind9 (1:9.4.2-2) unstable; urgency=low
+
+  * init.d: add --oknodo to start-stop-daemon.  Closes: #411881
+  * init: LSB dependency info.  Closes: #459421, #448006
+  * meta: bind9 Suggests: resolvconf.  Closes: #252285
+  * bind9: deliver /var/lib/bind directory, and document.
+    Closes: #248771, #200253, #202981, #209022
+  * lwresd: create bind user/group and rndc key if needed, at install.
+    Closes: #190742
+  * dnsutils: update long description.  Closes: #236901
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jan 2008 12:25:31 -0700
+
+bind9 (1:9.4.2-1) unstable; urgency=low
+
+  [Mike O'Connor]
+
+  * bind9.init: LSB compliance.  Closes: #448006
+
+  [Internet Software Consortium, Inc]
+
+  * New release: 9.4.2
+
+  [LaMont Jones]
+
+  * soname shifts for new release
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 17 Nov 2007 10:50:07 -0700
+
+bind9 (1:9.4.2~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Oct 2007 18:33:57 -0600
+
+bind9 (1:9.4.1-P1-4) unstable; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148  LP: #160176
+  * init.d: if there are no networks configured, error out quickly
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 08 Nov 2007 21:31:55 -0700
+
+bind9 (1:9.4.1-P1-3) unstable; urgency=low
+
+  * Only deliver upstream changes with bind9-doc
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 04 Oct 2007 08:30:55 -0600
+
+bind9 (1:9.4.1-P1-2) unstable; urgency=low
+
+  * manpages: fix typo errors.  Closes: #395834
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * bind9.NEWS: update version for ACL change doc.  Closes: #435225
+  * build: don't have dnsutils deliver man pages that it shouldn't.  LP: #82178
+  * nslookup.1: some of the manpage was not visible.  LP: #131415
+  * document git repositories
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 03 Oct 2007 01:10:59 -0600
+
+bind9 (1:9.4.1-P1-1) unstable; urgency=high
+
+  * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925 
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 26 Jul 2007 16:41:50 -0600
+
+bind9 (1:9.4.1-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Apr 2007 16:59:05 -0600
+
+bind9 (1:9.4.0-2) unstable; urgency=low
+
+  * upload to unstable
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 10 Apr 2007 11:12:16 -0600
+
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+  * New upstream version
+  * more mipsel patch.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 25 Feb 2007 11:44:11 -0700
+
+bind9 (1:9.4.0~rc2-1) experimental; urgency=low
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:26:12 -0700
+
+bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low
+
+  * add NEWS file talking about the change in defaults:
+    As of bind 9.4, allow-query-cache and allow-recursion default to the
+    builtin acls 'localnets' and 'localhost'.  If you are setting up a
+    name server for a network, you will almost certainly need to change
+    this.
+
+    The change in default has been done to make caching servers less
+    attractive as reflective amplifying targets for spoofed traffic.
+    This still leaves authoritative servers exposed.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 24 Jan 2007 09:35:06 -0700
+
+bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low
+
+  * Fix mips64.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 21 Jan 2007 15:32:27 -0700
+
+bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low
+
+  * Broken orig.tar.gz.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 23:04:05 -0700
+
+bind9 (1:9.4.0~rc1-1) experimental; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 19:00:37 -0700
+
+bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 05 Nov 2007 19:48:23 -0700
+
+bind9 (1:9.3.4-2etch1) stable-security; urgency=high
+
+  * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926)
+
+ -- Moritz Muehlenhoff <jmm@debian.org>  Tue, 24 Jul 2007 22:09:35 +0000
+
+bind9 (1:9.3.4-2) unstable; urgency=high
+
+  * Actually really do the merge of 9.3.4.  Sigh.  Closes: #408925
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 29 Jan 2007 06:09:03 -0700
+
+bind9 (1:9.3.4-1) unstable; urgency=high
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:31:09 -0700
+
+bind9 (1:9.3.3-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 12 Dec 2006 23:31:51 -0700
+
+bind9 (1:9.3.2-P1.0-1) unstable; urgency=low
+
+  * Fix README.Debian to point to the URL.  Closes: #387437
+  * Strip rfc's from orig.tar.gz.  Closes: #393359
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Mon, 16 Oct 2006 06:38:22 -0600
+
+bind9 (1:9.3.2-P1-2) unstable; urgency=low
+
+  * Fix init script output.  Closes: #354192
+    Thanks to Joey Hess for the patch.
+  * Default install should listen on ipv6 interfaces.  Closes: #382438
+
+ -- LaMont Jones <lamont@debian.org>  Sat,  9 Sep 2006 19:01:53 -0600
+
+bind9 (1:9.3.2-P1-1) unstable; urgency=high
+
+  * New upstream, fixes CVE-2006-4095 and CVE-2006-4096.
+    Closes: #386237, #386245
+  * Drop gcc-3.4 [powerpc] dependency.  Closes: #342957, #372203
+  * Add -fno-strict-aliasing for type-punned pointer aliasing issues
+    Closes: #386224
+  * Use getent in postinst instead of chown/chgrp.  Closes: #386091, #239665
+  * Drop redundant update-rc.d calls.  Closes: #356914
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  6 Sep 2006 08:07:13 -0600
+
+bind9 (1:9.3.2-2) unstable; urgency=low
+
+  * correct force-reload.  Closes: #333841
+  * Fix init.d's usage message.  Closes: #331090
+  * resolvconf tweaks.  Closes: #252232, #275412
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 16 Jan 2006 15:17:04 -0700
+
+bind9 (1:9.3.2-1) unstable; urgency=low
+
+  * New upstream
+  * use lsb-base for start/stop messages in init.d.
+  * switch to debhelper 4
+
+ -- LaMont Jones <lamont@debian.org>  Thu,  5 Jan 2006 12:29:28 -0700
+
+bind9 (1:9.3.1-2) unstable; urgency=low
+
+  * Getting good reports from experimental, uploading to sid.
+    Release team, please consider this package for sarge.  Thanks.
+  * correct pidfile name in init.d/lwresd.  Closes: #298100
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 17:46:31 -0700
+
+bind9 (1:9.3.1-1) experimental; urgency=low
+
+  * Build with gcc-3.4 on powerpc, to work around #292958.
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 11:40:06 -0700
+
+bind9 (1:9.3.1-0) experimental; urgency=low
+
+  * New upstream version.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 13 Mar 2005 21:44:57 -0700
+
+bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low
+
+  * new upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 25 Jan 2005 14:21:51 -0700
+
+bind9 (1:9.3.0-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 25 Sep 2004 21:35:46 -0600
+
+bind9 (1:9.2.4-1) unstable; urgency=high
+
+  * New upstream version.  Closes: #269157 and others.
+  * Version debhelper build-dep.  Closes: #262720
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Thu, 23 Sep 2004 09:11:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Wed,  1 Sep 2004 00:04:55 -0600
+
+bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low
+
+  * New upstream.
+  * Comment out delegation-only directives in named.conf
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  2 Aug 2004 10:00:38 -0600
+
+bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low
+
+  * New upstream release candidate
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 17 Jun 2004 19:50:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low
+
+  * New upstream release candidate
+  * Remove shared library symlinks in clean.  Closes: #243109
+  * Deal with capset being a module.  Closes: #245043, #240874, #241605
+  * deliver /var/run/bind/run in lwresd as well.  Closes: #186569
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 22 Apr 2004 12:20:05 -0600
+
+bind9 (1:9.2.3-3) unstable; urgency=low
+
+  * new IP for b.root-servers.net.  Closes: #234278
+  * Fix RC linkages to match bind8.  Closes: #218007
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  1 Mar 2004 15:00:44 -0700
+
+bind9 (1:9.2.3-2) unstable; urgency=low
+
+  * Rebuild autoconf files for mips.  Closes: #221419
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Nov 2003 06:33:34 -0700
+
+bind9 (1:9.2.3-1) unstable; urgency=low
+
+  * New upstream.
+  * cleanup zones.rfc1918/db.empty stuff.
+  * Fix Makefiles to work even if the build environment is unclean.
+    Closes: #211503
+  * Add comments about root-delegation-only to named.conf.  Closes: #212243
+  * Add resolvconf support.  Closes: #199255
+  * more SO_BSDCOMPAT hacks for linux.  Closes: #220735, #214460
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 17 Nov 2003 21:30:33 -0700
+
+bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low
+
+  * Yet another new upstream release.
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Sep 2003 09:39:50 -0600
+
+bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low
+
+  * New upstream.  Closes: #211752. #211503. #211496, #211520
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 20 Sep 2003 12:22:59 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low
+
+  * Really fix versioned depends.  Closes: #211590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 18 Sep 2003 17:29:47 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low
+
+  * Version depends for all the libraries. sigh.  Closes: #211412,#210293
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:56:36 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low
+
+  * Need a versioned depend. sigh.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:25:35 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low
+
+  * New upstream release.  Closes: #211373
+  * Remove RFC's from package, per policy.
+  * Make com and net zones delegation-only by default.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 07:15:37 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low
+
+  * A bit more cleanup of descriptions.
+  * fix package sections
+  * Fix b0rkage with dependencies.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 14 Sep 2003 09:05:10 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low
+
+  * Explicitly link libraries.  Closes: #210653
+  * Fix descriptions.  Closes: #209563, #209853, #210063
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 13 Sep 2003 19:29:05 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low
+
+  * New upstream release candidate.
+  * Quit using SO_BSDCOMPAT (why is it still in the header files??) so
+    that the kernel will shut up about it's advertised, obsolete option.
+    Closes: #201293, #204282, #205590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2003 14:44:28 -0600
+
+bind9 (1:9.2.2-2) unstable; urgency=low
+
+  * Fix libtool.m4. Closes: #183791
+  * move lib packages into Section: libs.  Closes: #184788
+  * make sure it's libssl0.9.7.  Closes: #182363
+  * Add /etc/default/lwresd.  Closes: #169727
+  * Add fakeroot dir to dh_shlibdeps.  Closes: #169622
+  * Fix rndc manpage.  Closes: #179353
+  * Deliver /usr/bin/isc-config.sh (in libbind-dev).  Closes: #178186
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2003 16:34:15 -0700
+
+bind9 (1:9.2.2-1) unstable; urgency=low
+
+  * New upstream version
+  * Document /etc/default/bind9 in init.d script.  Closes: #170267
+
+ -- LaMont Jones <lamont@debian.org>  Tue,  4 Mar 2003 22:43:58 -0700
+
+bind9 (1:9.2.1-7) unstable; urgency=low
+
+  * One more overrides disparity.
+  * Fix bashism in postinst.  Closes: #169531
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 17 Nov 2002 19:22:58 -0700
+
+bind9 (1:9.2.1-6) unstable; urgency=low
+
+  * The "I give up for now" release.
+  *   Only convert to running as bind if named.conf hasn't been modified.
+  *   Closes: #163552, #164352
+  * Fix overrides
+  * Cleanup README.Debian wrt non-root-by-default.
+  * Make sure that /var/run/bind/run exists in init.d script.  Closes: #168912
+  * New IP for j.root-servers.net.  Closes: #167818
+  * Check for 2.2.18 kernel in preinst.  Closes: #164349
+  * Move local options to /etc/default/bind9.  Closes: #169132, #163073
+  * Cleanup old bugs (fixed in -5, really).  Closes: #165864
+  * Add /etc/bind/named.conf.local, included from named.conf.  Closes: #129576
+  * Do options definitions in /etc/bind/named.conf.options, makes life
+    easier in the face of named.conf changes from upstream.
+  * Add missing Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 16 Nov 2002 17:05:45 -0700
+
+bind9 (1:9.2.1-5) unstable; urgency=low
+
+  * Run named a non-privileged user by default.  Closes: #149059
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 12 Sep 2002 16:57:37 -0600
+
+bind9 (1:9.2.1-4) unstable; urgency=low
+
+  * swap maintainer/uploader status so LaMont is primary and Bdale is backup
+  * Deal with bind/bind9 collisions better.  Closes: #149580
+  * Fix some documentation.  Closes: #151579
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  4 Sep 2002 23:25:33 -0600
+
+bind9 (1:9.2.1-3) unstable; urgency=high
+
+  * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in
+    resolver library, closes: #151342, #151431
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  1 Jul 2002 00:16:31 -0600
+
+bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high
+
+  * backport to woody (simple rebuild) since 9.2.1 resolves a security issue
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  4 Jun 2002 10:30:57 -0600
+
+bind9 (1:9.2.1-2) unstable; urgency=low
+
+  * don't include nslint man page, closes: #148695
+  * fix typo in rndc.8, closes: #139602
+  * add a section to README.Debian explaining the rndc key mode that has been
+    our default since 9.2.0-2, closes: #129849
+  * fix paths for named.conf in named.8 to reflect our default, closes: #143443
+  * upstream fixed the nsupdate man page at some point, closes: #121108
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  3 Jun 2002 15:44:37 -0600
+
+bind9 (1:9.2.1-1) unstable; urgency=medium
+
+  * new upstream version
+  * have bind9-host provide host, closes: #140174
+  * move bind9-host to priority standard since dnsutils depends on it or host,
+    and we prefer bind9-host over host.
+  * move libdns5 and libisc4 to priority standard since dnsutils depends on
+    them and is priority standard
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 30 May 2002 10:38:39 -0600
+
+bind9 (1:9.2.0-6) unstable; urgency=low
+
+  * move to US main!  Yippee!  Closes: #123969
+  * add info to README.Debian about 2.5 kernels vs --disable-linux-caps
+
+ -- Bdale Garbee <bdale@gag.com>  Sat, 23 Mar 2002 00:18:05 -0700
+
+bind9 (1:9.2.0-5) unstable; urgency=medium
+
+  * clean up various issues in the rules file
+  * make bind9-host conflict/replace old dnsutils as host does, otherwise we
+    can have problems upgrading from potato to woody, closes: #136686
+  * use /dev/urandom for rndc-confgen in postinst, it should be good enough for
+    this purpose, and will keep the postinst from blocking arbitrarily.
+    closes: #130372
+  * add fresh pointers to chroot howto to README.Debian, closes: #135774
+
+ -- Bdale Garbee <bdale@gag.com>  Sun,  3 Mar 2002 16:47:12 -0700
+
+bind9 (1:9.2.0-4) unstable; urgency=low
+
+  * bind9-host needs to conflict with host, closes: #127395
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  1 Jan 2002 20:12:14 -0700
+
+bind9 (1:9.2.0-3) unstable; urgency=low
+
+  * force removal of old diverted files, closes: #126236
+  * change priority of liblwres1 from optional to standard per ftp admins
+  * add a bind9-host package so that the 'host' provided with the BIND 9.X
+    source tree can be an alternative to the aging NIKHEF version packaged
+    separately.  Update dnsutils dependencies to depend on one of the two,
+    with preference to this one since it has fewer bugs (but fewer features,
+    too).
+
+ -- Bdale Garbee <bdale@gag.com>  Sun, 23 Dec 2001 00:59:15 -0700
+
+bind9 (1:9.2.0-2) unstable; urgency=medium
+
+  * change rc.d links to ensure daemon starts before and stops after other
+    daemons that may fail if name service is not working (bug was filed 
+    against 8.X bind packages, but is just as relevant here!)
+  * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935
+  * add a postinst to dnsutils to remove any lingering diversions from old 
+    dnsutils packages, closes: #122227
+  * not much point in delivering zone2ldap.1 since we aren't delivering 
+    zone2ldap right now (though we might someday?), closes: #124058
+  * be more verbose with shared library descriptions, closes: #123426, #123428
+  * 9.2.0 added a new rndc.key file that both named and rndc will read to 
+    obtain a shared key, and rndc-confgen will easily create this file with 
+    a unique-per-system key.  Modify named.conf and remove rndc.conf
+    to take advantage of this mechanism and stop delivering a pre-determined 
+    static key to all Debian systems (which has been a mild security risk).  
+    Create the key in postinst if the key file doesn't already exist, and 
+    remove the file in postrm if purging.
+    Closes: #86718, #87208
+
+ -- Bdale Garbee <bdale@gag.com>  Fri, 21 Dec 2001 04:04:30 -0700
+
+bind9 (1:9.2.0-1) unstable; urgency=low
+
+  * new upstream version, closes: #108243, #112266, #114250, #119506, #120657
+  * /etc/bind/rndc.conf is now a conffile
+  * minor hacks to the README.Debian since the chroot instructions it points
+    to are 8.X specific, part of addressing bug 111868.
+  * libomapi is gone, replaced by libisccc and libisccfg
+  * a few lintian-motivated cosmetic cleanups
+  * lose task-dns-server meta package, since tasksel doesn't need it now
+  * dig problem not reproducible in this version, closes: #89526
+  * named-checkconf now uses $sysconfdir, closes: #107835
+  * no longer deliver man pages for contributed binaries we're not including
+    in dnsutils, closes: #108220
+  * fix section in nslookup man page, though that's the least of the man
+    page's problems...  glitch reported is unreproducible
+    closes: #103630, #120946
+  * update libbind-dev README.Debian, closes: #121050
+
+ -- Bdale Garbee <bdale@gag.com>  Tue, 27 Nov 2001 01:41:00 -0700
+
+bind9 (1:9.1.3-1) unstable; urgency=low
+
+  * new upstream version, closes: #96483, #99824, #100647, #101568, #103429
+  * update config.sub/guess for hppa/ia64 support
+  * small init.d patch from Marco d'Itri to ease adding options on invocation
+  * stop having bind9-doc conflict/replace bind-doc since they don't really
+    conflict and there's no reason to prevent having both installed at the
+    same time, closes: #90994
+  * the CHANGES file documents fixes since 9.1.1 that probably cured the
+    reported assertion failure.  If it turns out that I'm wrong, the bug can
+    be re-opened or a new one filed.  I can't see any way to reproduce the bug 
+    in a test case here.  Closes: #99352
+  * have libbind-dev depend on the runtime library packages it delivers 
+    compile-time symlinks for, closes: #100898, #103855
+  * fix lwres man pages to source man3/* instead of * so all the page content
+    can actually be found, closes: #85450, #103865
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  9 Jul 2001 11:30:39 -0600
+
+bind9 (1:9.1.1-1) unstable; urgency=low
+
+  * new upstream release
+  * update build-depends for libssl-dev
+  * add build-depends on bison, closes: #90150, #90752, #90159
+  * split up libbind0 since libdns is changing so numbers
+  * downgrade rblcheck from a depends to a suggests, closes: #90783
+  * bind9 mkdep creates files in the current working directory, closes: #58353
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 25 Apr 2001 22:53:21 -0600
+
+bind9 (1:9.1.0-3) unstable; urgency=low
+
+  * merge patch from Zack Weinberg that solves compilation problem, and 
+    reduces the memory footprint of applications by making configure.in
+    smarter.  Closes: #86776, #86910
+  * the bind-doc package includes all relevant documentation from the bind9
+    source tree, including HTML content in /usr/share/doc/bind9-doc/arm,
+    closes: #85718
+  * default named.conf and rndc.conf to not world-readable.  This is an
+    interim step towards addressing the concerns about security raised by 
+    bugs 86718 and closes: #86836  A better long-term solution would be for
+    rndc.conf to allow includes, so that both named.conf and rndc.conf could
+    include a key file built on the fly during installation while themselves
+    retaining conffile status.  The required functionality has been requested
+    of the bind9 upstream, this will limit vulnerability in the meantime.
+  * add replaces logic to the dnsutils package to avoid complaints about the
+    delivery of nsupdate.8.gz, closes: #86759
+  * move a couple of man pages back from dnsutils to bind9 that really belong
+    there.  sigh.
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 22 Feb 2001 16:39:02 -0700
+
+bind9 (1:9.1.0-2) unstable; urgency=low
+
+  * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks!
+    + bind9:  ships with a working rndc.conf file, closes: #84572
+    + bind9:  init.d calls rndc rather than ndc on reload, closes: #85481
+    + bind9:  named.conf ships with 'key' and 'control' sections
+    + bind9:  correctly creates /var/cache/bind, closes: #85457
+    + lwresd: lwresd is split off into its own package, closes: #85627
+  * nsupdate is delivered by the dnsutils package, but the (wrong) man page 
+    was accidentally also included in the bind9 package, closes: #85717
+  * freshen config.sub and config.guess for ia64 and hppa support
+
+ -- Bdale Garbee <bdale@gag.com>  Mon, 12 Feb 2001 23:43:55 -0700
+
+bind9 (1:9.1.0-1) unstable; urgency=low
+
+  * Initial packaging of BIND 9.1.0.  Must use epoch so that meta packages 
+    retain their sequencing from the bind 8 package version stream.
+  * snarf a couple of man pages from the 8.X tree for now
+
+ -- Bdale Garbee <bdale@gag.com>  Thu,  1 Feb 2001 16:30:35 -0700
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/liblwres50.install
+++ bind9-9.6.ESV.R1+dfsg/debian/liblwres50.install
@@ -0,0 +1 @@
+usr/lib/liblwres.so.50*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.NEWS
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.NEWS
@@ -0,0 +1,14 @@
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+  As of bind 9.4, allow-query-cache and allow-recursion default to the
+  builtin acls 'localnets' and 'localhost'.  If you are setting up a
+  name server for a network, you will almost certainly need to change
+  this.
+
+  The change in default has been done to make caching servers less
+  attractive as reflective amplifying targets for spoofed traffic.
+  This still leaves authoritative servers exposed.
+
+  The best fix is for full BCP 38 deployment to remove spoofed traffic.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 03 Oct 2007 00:52:44 -0600
--- bind9-9.6.ESV.R1+dfsg.orig/debian/ip-up.d
+++ bind9-9.6.ESV.R1+dfsg/debian/ip-up.d
@@ -0,0 +1,15 @@
+#!/bin/sh -e
+# Called when a new interface comes up
+# Written by LaMont Jones <lamont@debian.org>
+
+# kick named as needed
+
+# If /usr isn't mounted yet, silently bail.
+if [ ! -d /usr/sbin ]; then
+	exit 0
+fi
+
+# if named is running, reconfig it.
+rndc reconfig >/dev/null 2>&1 || true
+
+exit 0
--- bind9-9.6.ESV.R1+dfsg.orig/debian/db.empty
+++ bind9-9.6.ESV.R1+dfsg/debian/db.empty
@@ -0,0 +1,14 @@
+; BIND reverse data file for empty rfc1918 zone
+;
+; DO NOT EDIT THIS FILE - it is used for multiple zones.
+; Instead, copy it, edit named.conf, and use that copy.
+;
+$TTL	86400
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			  86400 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libdns55.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/libdns55.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.init
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.init
@@ -0,0 +1,128 @@
+#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:          bind9
+# Required-Start:    $remote_fs
+# Required-Stop:     $remote_fs
+# Should-Start:      $network $syslog
+# Should-Stop:       $network $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Start and stop bind9
+# Description:       bind9 is a Domain Name Server (DNS)
+#        which translates ip addresses to and from internet names
+### END INIT INFO
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+# for a chrooted server: "-u bind -t /var/lib/named"
+# Don't modify this line, change or create /etc/default/bind9.
+OPTIONS=""
+RESOLVCONF=no
+
+test -f /etc/default/bind9 && . /etc/default/bind9
+
+test -x /usr/sbin/rndc || exit 0
+
+. /lib/lsb/init-functions
+DISTRO=$(lsb_release -is 2>/dev/null || echo Debian)
+PIDFILE=/var/run/bind/run/named.pid
+
+check_network() {
+    if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then
+	IFCONFIG_OPTS="-au"
+    else
+	IFCONFIG_OPTS=""
+    fi
+    if [ -z "$(/sbin/ifconfig $IFCONFIG_OPTS)" ]; then
+       #log_action_msg "No networks configured."
+       return 1
+    fi
+    return 0
+}
+
+case "$1" in
+    start)
+	log_daemon_msg "Starting domain name service..." "bind9"
+
+	modprobe capability >/dev/null 2>&1 || true
+
+	# dirs under /var/run can go away on reboots.
+	mkdir -p /var/run/bind/run
+	chmod 775 /var/run/bind/run
+	chown root:bind /var/run/bind/run >/dev/null 2>&1 || true
+
+	if [ ! -x /usr/sbin/named ]; then
+	    log_action_msg "named binary missing - not starting"
+	    log_end_msg 1
+	    exit 1
+	fi
+
+	if ! check_network; then
+	    log_end_msg 1
+	    exit 1
+	fi
+
+	if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \
+		--pidfile ${PIDFILE} -- $OPTIONS; then
+	    if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+		echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named
+	    fi
+	    log_end_msg 0
+	else
+	    log_end_msg 1
+	fi
+    ;;
+
+    stop)
+	log_daemon_msg "Stopping domain name service..." "bind9"
+	if ! check_network; then
+	    log_end_msg 1
+	    exit 1
+	fi
+
+	if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+	    /sbin/resolvconf -d lo.named
+	fi
+	pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}')
+	if [ -n "$pid" ]; then
+	  while kill -0 $pid 2>/dev/null; do
+	    log_progress_msg "waiting for pid $pid to die"
+	    sleep 1
+	  done
+	fi
+	log_end_msg $?
+    ;;
+
+    reload|force-reload)
+	log_daemon_msg "Reloading domain name service..." "bind9"
+	if ! check_network; then
+	    log_end_msg 1
+	    exit 1
+	fi
+
+	/usr/sbin/rndc reload >/dev/null
+	log_end_msg $?
+    ;;
+
+    restart)
+	if ! check_network; then
+	    exit 1
+	fi
+
+	$0 stop
+	$0 start
+    ;;
+    
+    status)
+    	ret=0
+	status_of_proc -p ${PIDFILE} /usr/sbin/named bind9 2>/dev/null || ret=$?
+	;;
+
+    *)
+	log_action_msg "Usage: /etc/init.d/bind9 {start|stop|reload|restart|force-reload|status}"
+	exit 1
+    ;;
+esac
+
+exit 0
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.ufw.profile
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.ufw.profile
@@ -0,0 +1,5 @@
+[Bind9]
+title=Internet Domain Name Server
+description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server.
+ports=53
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libdns55.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libdns55.install
@@ -0,0 +1 @@
+usr/lib/libdns.so.55*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/named.conf.local
+++ bind9-9.6.ESV.R1+dfsg/debian/named.conf.local
@@ -0,0 +1,8 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9-host.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9-host.dirs
@@ -0,0 +1,2 @@
+usr/bin
+usr/share/man/man1
--- bind9-9.6.ESV.R1+dfsg.orig/debian/dnsutils.install
+++ bind9-9.6.ESV.R1+dfsg/debian/dnsutils.install
@@ -0,0 +1,6 @@
+usr/bin/dig
+usr/bin/nslookup
+usr/bin/nsupdate
+usr/share/man/man1/dig.1*
+usr/share/man/man1/nslookup.1*
+usr/share/man/man1/nsupdate.1*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/copyright
+++ bind9-9.6.ESV.R1+dfsg/debian/copyright
@@ -0,0 +1,27 @@
+This package was debianized by Bdale Garbee <bdale@gag.com> on
+Tue, 12 Dec 2000 02:42:56 -0700.
+
+It was downloaded from http://www.isc.org/products/BIND/ and can be fetched
+from git with:
+    git clone git://git.debian.org/users/lamont/bind9.git
+ISC releases can be cloned from git with:
+    git clone git://git.debian.org/users/lamont/bind9-isc.git
+
+Upstream Author: Internet Software Consortium
+
+Copyright:
+
+Copyright (C) 1996-2001  Internet Software Consortium.
+
+Permission to use, copy, modify, and distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
+DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
+INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
+FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
+NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
+WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/db.root
+++ bind9-9.6.ESV.R1+dfsg/debian/db.root
@@ -0,0 +1,85 @@
+;       This file holds the information on root name servers needed to
+;       initialize cache of Internet domain name servers
+;       (e.g. reference this file in the "cache  .  <file>"
+;       configuration file of BIND domain name servers).
+;
+;       This file is made available by InterNIC 
+;       under anonymous FTP as
+;           file                /domain/named.root
+;           on server           FTP.INTERNIC.NET
+;       -OR-                    RS.INTERNIC.NET
+;
+;       last update:    Feb 04, 2008
+;       related version of root zone:   2008020400
+;
+; formerly NS.INTERNIC.NET
+;
+.                        3600000  IN  NS    A.ROOT-SERVERS.NET.
+A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
+A.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:BA3E::2:30
+;
+; formerly NS1.ISI.EDU
+;
+.                        3600000      NS    B.ROOT-SERVERS.NET.
+B.ROOT-SERVERS.NET.      3600000      A     192.228.79.201
+;
+; formerly C.PSI.NET
+;
+.                        3600000      NS    C.ROOT-SERVERS.NET.
+C.ROOT-SERVERS.NET.      3600000      A     192.33.4.12
+;
+; formerly TERP.UMD.EDU
+;
+.                        3600000      NS    D.ROOT-SERVERS.NET.
+D.ROOT-SERVERS.NET.      3600000      A     128.8.10.90
+;
+; formerly NS.NASA.GOV
+;
+.                        3600000      NS    E.ROOT-SERVERS.NET.
+E.ROOT-SERVERS.NET.      3600000      A     192.203.230.10
+;
+; formerly NS.ISC.ORG
+;
+.                        3600000      NS    F.ROOT-SERVERS.NET.
+F.ROOT-SERVERS.NET.      3600000      A     192.5.5.241
+F.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2f::f
+;
+; formerly NS.NIC.DDN.MIL
+;
+.                        3600000      NS    G.ROOT-SERVERS.NET.
+G.ROOT-SERVERS.NET.      3600000      A     192.112.36.4
+;
+; formerly AOS.ARL.ARMY.MIL
+;
+.                        3600000      NS    H.ROOT-SERVERS.NET.
+H.ROOT-SERVERS.NET.      3600000      A     128.63.2.53
+H.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:1::803f:235
+;
+; formerly NIC.NORDU.NET
+;
+.                        3600000      NS    I.ROOT-SERVERS.NET.
+I.ROOT-SERVERS.NET.      3600000      A     192.36.148.17
+;
+; operated by VeriSign, Inc.
+;
+.                        3600000      NS    J.ROOT-SERVERS.NET.
+J.ROOT-SERVERS.NET.      3600000      A     192.58.128.30
+J.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:C27::2:30
+;
+; operated by RIPE NCC
+;
+.                        3600000      NS    K.ROOT-SERVERS.NET.
+K.ROOT-SERVERS.NET.      3600000      A     193.0.14.129 
+K.ROOT-SERVERS.NET.      3600000      AAAA  2001:7fd::1
+;
+; operated by ICANN
+;
+.                        3600000      NS    L.ROOT-SERVERS.NET.
+L.ROOT-SERVERS.NET.      3600000      A     199.7.83.42
+;
+; operated by WIDE
+;
+.                        3600000      NS    M.ROOT-SERVERS.NET.
+M.ROOT-SERVERS.NET.      3600000      A     202.12.27.33
+M.ROOT-SERVERS.NET.      3600000      AAAA  2001:dc3::35
+; End of File
--- bind9-9.6.ESV.R1+dfsg.orig/debian/liblwres50.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/liblwres50.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9utils.install
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9utils.install
@@ -0,0 +1,14 @@
+usr/sbin/dnssec-keygen
+usr/sbin/dnssec-signzone
+usr/sbin/named-checkconf
+usr/sbin/named-checkzone
+usr/sbin/named-compilezone
+usr/sbin/rndc
+usr/sbin/rndc-confgen
+usr/share/man/man8/dnssec-keygen.8
+usr/share/man/man8/dnssec-signzone.8
+usr/share/man/man8/named-checkconf.8
+usr/share/man/man8/named-checkzone.8
+usr/share/man/man8/named-compilezone.8
+usr/share/man/man8/rndc-confgen.8
+usr/share/man/man8/rndc.8
--- bind9-9.6.ESV.R1+dfsg.orig/debian/db.0
+++ bind9-9.6.ESV.R1+dfsg/debian/db.0
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/db.127
+++ bind9-9.6.ESV.R1+dfsg/debian/db.127
@@ -0,0 +1,13 @@
+;
+; BIND reverse data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+1.0.0	IN	PTR	localhost.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/named.conf
+++ bind9-9.6.ESV.R1+dfsg/debian/named.conf
@@ -0,0 +1,40 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+
+// prime the server with knowledge of the root servers
+zone "." {
+	type hint;
+	file "/etc/bind/db.root";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+	type master;
+	file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.255";
+};
+
+include "/etc/bind/named.conf.local";
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libbind-dev.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libbind-dev.install
@@ -0,0 +1,15 @@
+usr/include
+usr/lib/libbind9.a
+usr/lib/libbind9.so
+usr/lib/libdns.a
+usr/lib/libdns.so
+usr/lib/libisc.a
+usr/lib/libisc.so
+usr/lib/liblwres.a
+usr/lib/liblwres.so
+usr/lib/libisccc.a
+usr/lib/libisccc.so
+usr/lib/libisccfg.a
+usr/lib/libisccfg.so
+usr/share/man/man3
+usr/bin/isc-config.sh
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libbind9-50.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libbind9-50.install
@@ -0,0 +1 @@
+usr/lib/libbind9.so.50*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/lwresd.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/lwresd.dirs
@@ -0,0 +1,5 @@
+etc/bind
+usr/sbin
+usr/share/man/man8
+usr/share/doc/lwresd
+var/run/bind/run
--- bind9-9.6.ESV.R1+dfsg.orig/debian/lwresd.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/lwresd.postinst
@@ -0,0 +1,40 @@
+#!/bin/sh
+set -e
+
+#DEBHELPER#
+
+case "$1" in
+    configure)
+	OLDVERSION="$2"
+	# see below
+	;;
+
+    abort-upgrade)
+	exit 0
+	;;
+
+    abort-remove|abort-deconfigure)
+	exit 0
+	;;
+
+    *)
+	echo "postinst called with unknown argument \`$1'" >&2
+	exit 1
+	;;
+esac
+
+# lets give them a bind user/group in all cases.
+getent group bind >/dev/null 2>&1 || addgroup --system bind
+getent passwd bind >/dev/null 2>&1 ||
+    adduser --system --home /var/cache/bind --no-create-home \
+	    --disabled-password --ingroup bind bind
+
+if [ ! -s /etc/bind/rndc.key ] && [ -x /usr/sbin/rndc-confgen ]; then
+    /usr/sbin/rndc-confgen -r /dev/urandom -a
+fi
+
+if /bin/pidof /usr/sbin/lwresd >/dev/null 2>&1; then
+    invoke-rc.d lwresd restart
+else
+    invoke-rc.d lwresd start
+fi
--- bind9-9.6.ESV.R1+dfsg.orig/debian/control
+++ bind9-9.6.ESV.R1+dfsg/debian/control
@@ -0,0 +1,169 @@
+Source: bind9
+Section: net
+Priority: optional
+Maintainer: LaMont Jones <lamont@debian.org>
+Uploaders: Bdale Garbee <bdale@gag.com>
+Build-Depends: libkrb5-dev, debhelper (>= 5), libssl-dev, libtool, bison, libdb-dev, libldap2-dev, libxml2-dev, libcap2-dev [!kfreebsd-i386 !kfreebsd-amd64 !hurd-i386], hardening-wrapper
+Build-Conflicts: libdb4.2-dev
+Standards-Version: 3.7.3.0
+XS-Vcs-Browser: http://git.debian.org/?p=users/lamont/bind9.git
+XS-Vcs-Git: git://git.debian.org/~lamont/bind9.git
+
+Package: bind9
+Architecture: any
+Depends: ${shlibs:Depends}, debconf | debconf-2.0, netbase, adduser, libdns55 (=${binary:Version}), libisccfg50 (=${binary:Version}), libisc52 (=${binary:Version}), libisccc50 (=${binary:Version}), lsb-base (>= 3.2-14), bind9utils (=${binary:Version}), liblwres50 (=${binary:Version}), libbind9-50 (=${binary:Version}), net-tools
+Conflicts: bind, apparmor-profiles (<< 2.1+1075-0ubuntu4)
+Replaces: bind, dnsutils (<< 1:9.1.0-3), apparmor-profiles (<< 2.1+1075-0ubuntu4)
+Suggests: dnsutils, bind9-doc, resolvconf, ufw
+Description: Internet Domain Name Server
+ ${Description}
+ .
+ This package provides the server and related configuration files.
+
+Package: bind9utils
+Architecture: any
+Replaces: bind9 (<= 1:9.5.0~b2-1)
+Depends: ${shlibs:Depends}
+Description: Utilities for BIND
+ This package provides various utilities that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-doc
+Architecture: all
+Section: doc
+Description: Documentation for BIND
+ This package provides various documents that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-host
+Priority: standard
+Architecture: any
+Depends: ${shlibs:Depends}, libdns55 (=${binary:Version}), libisccfg50 (=${binary:Version}), libisc52 (=${binary:Version}), liblwres50 (=${binary:Version}), libbind9-50 (=${binary:Version})
+Conflicts: host, dnsutils (<< 1:9.0.0)
+Replaces: dnsutils (<< 1:9.0.0)
+Provides: host
+Description: Version of 'host' bundled with BIND 9.X
+ This package provides the 'host' program in the form that is bundled with
+ the BIND 9.X sources.  This version differs from the one provided in the
+ package called host, which is from NIKHEF, and has a similar but different
+ set of features/options.
+
+Package: libbind-dev
+Section: libdevel
+Architecture: any
+Conflicts: bind-dev
+Replaces: bind-dev
+Depends: libbind9-50 (= ${binary:Version}), liblwres50 (= ${binary:Version}) 
+Description: Static Libraries and Headers used by BIND
+ This package delivers archive-style libraries, header files, and API man
+ pages for libbind, libdns, libisc, and liblwres.  These are only needed 
+ if you want to compile other packages that need more nameserver API than the 
+ resolver code provided in libc.
+
+Package: libbind9-50
+Section: libs
+Priority: standard
+Architecture: any
+Conflicts: libbind0, libbind9-41
+Replaces: libbind0
+Depends: ${shlibs:Depends}, libdns55 (=${binary:Version}), libisccfg50 (=${binary:Version}), libisc52 (=${binary:Version})
+Description: BIND9 Shared Library used by BIND
+ ${Description}
+ .
+ This package delivers the libbind9 shared library used by BIND's daemons and
+ clients.
+
+Package: libdns55
+Section: libs
+Priority: standard
+Architecture: any
+Conflicts: libbind0, libbind9-41
+Replaces: libbind0
+Depends: ${shlibs:Depends}, libisc52 (=${binary:Version})
+Description: DNS Shared Library used by BIND
+ ${Description}
+ .
+ This package delivers the libdns shared library used by BIND's daemons and
+ clients.
+
+Package: libisc52
+Section: libs
+Priority: standard
+Architecture: any
+Conflicts: libbind0, libbind9-41
+Replaces: libbind0
+Depends: ${shlibs:Depends}
+Description: ISC Shared Library used by BIND
+ ${Description}
+ .
+ This package delivers the libisc shared library used by BIND's daemons and
+ clients.
+
+Package: liblwres50
+Section: libs
+Priority: standard
+Architecture: any
+Replaces: libbind0
+Conflicts: libbind0
+Depends: ${shlibs:Depends}
+Description: Lightweight Resolver Library used by BIND
+ ${Description}
+ .
+ This package delivers the liblwres shared library used by BIND's daemons
+ and clients.
+
+Package: libisccc50
+Section: libs
+Priority: standard
+Architecture: any
+Conflicts: libbind0, libbind9-41
+Replaces: libbind0
+Depends: ${shlibs:Depends}, libisc52 (=${binary:Version})
+Description: Command Channel Library used by BIND
+ ${Description}
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccfg50
+Section: libs
+Priority: standard
+Architecture: any
+Conflicts: libbind0, libbind9-41
+Replaces: libbind0
+Depends: ${shlibs:Depends}, libdns55 (=${binary:Version}), libisccc50 (=${binary:Version}), libisc52 (=${binary:Version})
+Description: Config File Handling Library used by BIND
+ ${Description}
+ .
+ This package delivers the libisccfg shared library used by BIND's daemons
+ and clients to read and write ISC-style configuration files like named.conf
+ and rndc.conf.
+
+Package: dnsutils
+Priority: standard
+Architecture: any
+Depends: ${shlibs:Depends}, bind9-host | host, libdns55 (=${binary:Version}), libisccfg50 (=${binary:Version}), libisc52 (=${binary:Version}), liblwres50 (=${binary:Version}), libbind9-50 (=${binary:Version})
+Suggests: rblcheck
+Conflicts: netstd (<< 2.00)
+Replaces: bind, bind9 (<< 1:9.1.0-3)
+Description: Clients provided with BIND
+ ${Description}
+ .
+ This package delivers various client programs related to DNS that are 
+ derived from the BIND source tree.
+ .
+  - dig - query the DNS in various ways
+  - nslookup - the older way to do it
+  - nsupdate - perform dynamic updates (See RFC2136)
+
+Package: lwresd
+Architecture: any
+Depends: ${shlibs:Depends}, adduser, libdns55 (=${binary:Version}), libisccfg50 (=${binary:Version}), libisccc50 (=${binary:Version}), libisc52 (=${binary:Version}), liblwres50 (=${binary:Version}), libbind9-50 (=${binary:Version})
+Recommends: libnss-lwres
+Suggests: bind9utils
+Description: Lightweight Resolver Daemon
+ lwresd is the daemon providing name lookup services to clients that use
+ the BIND 9 lightweight resolver library.  It is essentially a stripped-
+ down, caching-only name server that answers queries using the BIND 9
+ lightweight resolver protocol rather than the DNS protocol.
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9-doc.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9-doc.dirs
@@ -0,0 +1 @@
+usr/share/doc/bind9-doc/arm
--- bind9-9.6.ESV.R1+dfsg.orig/debian/nslookup.1
+++ bind9-9.6.ESV.R1+dfsg/debian/nslookup.1
@@ -0,0 +1,536 @@
+.\"
+.\" ++Copyright++ 1985, 1989
+.\" -
+.\" Copyright (c) 1985, 1989
+.\"    The Regents of the University of California.  All rights reserved.
+.\" 
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\"    notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\"    notice, this list of conditions and the following disclaimer in the
+.\"    documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\"    must display the following acknowledgement:
+.\" 	This product includes software developed by the University of
+.\" 	California, Berkeley and its contributors.
+.\" 4. Neither the name of the University nor the names of its contributors
+.\"    may be used to endorse or promote products derived from this software
+.\"    without specific prior written permission.
+.\" 
+.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+.\" SUCH DAMAGE.
+.\" -
+.\" Portions Copyright (c) 1993 by Digital Equipment Corporation.
+.\" 
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies, and that
+.\" the name of Digital Equipment Corporation not be used in advertising or
+.\" publicity pertaining to distribution of the document or software without
+.\" specific, written prior permission.
+.\" 
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
+.\" WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
+.\" OF MERCHANTABILITY AND FITNESS.   IN NO EVENT SHALL DIGITAL EQUIPMENT
+.\" CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
+.\" DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
+.\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
+.\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
+.\" SOFTWARE.
+.\" -
+.\" --Copyright--
+.\"
+.\"	@(#)nslookup.8	5.3 (Berkeley) 6/24/90
+.\"
+.Dd June 24, 1990
+.Dt NSLOOKUP 1
+.Os BSD 4
+.Sh NAME
+.Nm nslookup 
+.Nd query Internet name servers interactively
+.Sh SYNOPSIS
+.Nm nslookup
+.Op Fl option Ar ...
+.Op Ar host-to-find | Fl Op Ar server
+.Sh DESCRIPTION
+.Ic Nslookup
+is a program to query Internet domain name servers. 
+.Ic Nslookup 
+has two modes: interactive and non-interactive.
+Interactive mode allows the user to query name servers for
+information about various hosts and domains or to print a list of hosts 
+in a domain. 
+Non-interactive mode is used to print just the name and requested information
+for a host or domain.
+.Sh ARGUMENTS
+Interactive mode is entered in the following cases:
+.Bl -tag -width "a)  " 
+.It a)
+when no arguments are given (the default name server will be used),
+.It b)
+when the first argument is a hyphen (-) and the second argument
+is the host name or Internet address of a name server.
+.El
+.Pp
+Non-interactive mode is used when the name or Internet address 
+of the host to be looked up
+is given as the first argument. The optional second argument specifies
+the host name or address of a name server.
+.Pp
+The options listed under the 
+.Dq Li set 
+command below can be specified in
+the 
+.Pa .nslookuprc 
+file in the user's home directory if they are listed 
+one per line.  Options can also be specified
+on the command line if they precede the arguments and are prefixed with
+a hyphen.  For example, to change the default query type to host information,
+and the initial timeout to 10 seconds, type:
+.Bd -literal -offset indent
+	nslookup -query=hinfo  -timeout=10
+.Ed
+.Sh INTERACTIVE COMMANDS
+Commands may be interrupted at any time by typing a control-C.
+To exit, type a control-D 
+.Pq Dv EOF 
+or type 
+.Li exit .
+The command line length must be less than 256 characters.
+To treat a built-in command as a host name, 
+precede it with an escape character 
+.Pq .&\\ . 
+.Sy N.B.:  An unrecognized command will be interpreted as a host name.
+.Bl -tag -width "lserver" 
+.It Ar host Op Ar server
+Look up information for 
+.Ar host 
+using the current default server or using 
+.Ar server , 
+if specified.
+If 
+.Ar host 
+is an Internet address and the query type is 
+.Dv A 
+or 
+.Dv PTR , 
+the name of the host is returned.
+If 
+.Ar host 
+is a name and does not have a trailing period, the default 
+domain name is appended to the name.  (This behavior depends on the state of the
+.Ic set
+options 
+.Ic domain , srchlist , defname , 
+and 
+.Ic search . )
+.Pp
+To look up a host not in the current domain, append a period to 
+the name.
+.It Ic server Ar domain
+.It Ic lserver Ar domain
+Change the default server to 
+.Ar domain ; 
+.Ic lserver 
+uses the initial server to look up information about 
+.Ar domain ,
+while 
+.Ic server
+uses the current default server. 
+If an authoritative answer can't be found, the names of servers
+that might have the answer are returned.
+.It Ic root
+Changes the default server to the server for the root of the domain name space.
+Currently, the host 
+.Li ns.internic.net 
+is used.
+(This command is a synonym for 
+.Dq Ic lserver ns.internic.net . )
+The name of the root server can be changed with the 
+.Dq Ic set root 
+command.
+.It Xo Ic finger Op Ar name 
+.Op Ic > Ar filename
+.Xc
+.It Xo Ic finger Op Ar name 
+.Op Ic >> Ar filename
+.Xc
+Connects with the finger server on the current host. 
+The current host is defined when a previous lookup for a host
+was successful and returned address information (see the 
+.Dq Ic set querytype=A 
+command).
+The 
+.Ar name 
+is optional. 
+.Ic > 
+and 
+.Ic >> 
+can be used to redirect output in the usual manner.
+.It Xo Ic ls Op Ar option 
+.Ar domain Op Ic > Ar filename
+.Xc
+.It Xo Ic ls Op Ar option 
+.Ar domain Op Ic >> Ar filename
+.Xc
+List the information available for 
+.Ar domain , 
+optionally creating or appending to 
+.Ar filename .
+The default output contains host names and their Internet addresses. 
+.Ar Option 
+can be one of the following:
+.Bl -tag -width "-a  "
+.It Fl t Ar querytype
+lists all records of the specified type (see 
+.Ar querytype 
+below).
+.It Fl a
+lists aliases of hosts in the domain;
+synonym for 
+.Dq Fl t Dv CNAME .
+.It Fl d
+lists all records for the domain;
+synonym for 
+.Dq Fl t Dv ANY .
+.It Fl h
+lists CPU and operating system information for the domain;
+synonym for 
+.Dq Fl t Dv HINFO .
+.It Fl s
+lists well-known services of hosts in the domain;
+synonym for 
+.Dq Fl t Dv WKS .
+.El
+.Pp
+When output is directed to a file, hash marks are printed for every
+50 records received from the server.
+.It Ic view Ar filename
+Sorts and lists the output of previous 
+.Ic ls 
+command(s) with 
+.Xr more @CMD_EXT@ .
+.It Ic help
+.It Ic ?
+Prints a brief summary of commands.
+.It Ic exit
+Exits the program.
+.It Xo Ic set Ar keyword 
+.Ns Op = Ns Ar value
+.Xc
+This command is used to change state information that affects the lookups.
+Valid keywords are:
+.Bl -tag -width "class=v"
+.It Ic all
+Prints the current values of the frequently-used options to 
+.Ic set .
+Information about the  current default server and host is also printed.
+.It Ic class= Ns Ar value
+Change the query class to one of:
+.Bl -tag -width "HESIOD  "
+.It Dv IN
+the Internet class
+.It Dv CHAOS
+the Chaos class
+.It Dv HESIOD
+the MIT Athena Hesiod class
+.It Dv ANY
+wildcard (any of the above)
+.El
+.Pp
+The class specifies the protocol group of the information.
+.Pp
+(Default = 
+.Dv IN ; 
+abbreviation = 
+.Ic cl )
+.It Xo Op Ic no 
+.Ns Ic debug
+.Xc
+Turn debugging mode on.  A lot more information is printed about the
+packet sent to the server and the resulting answer.
+.Pp
+(Default = 
+.Ic nodebug ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic deb )
+.Xc
+.It Xo Op Ic no 
+.Ns Ic d2
+.Xc
+Turn exhaustive debugging mode on.
+Essentially all fields of every packet are printed.
+.Pp
+(Default = 
+.Ic nod2 )
+.It Ic domain= Ns Ar name
+Change the default domain name to 
+.Ar name . 
+The default domain name is appended to a lookup request depending on the
+state of the 
+.Ic defname 
+and 
+.Ic search 
+options.
+The domain search list contains the parents of the default domain if it has 
+at least two components in its name. 
+For example, if the default domain
+is CC.Berkeley.EDU, the search list is CC.Berkeley.EDU and Berkeley.EDU.
+Use the 
+.Dq Ic set srchlist 
+command to specify a different list.
+Use the 
+.Dq Ic set all 
+command to display the list.
+.Pp
+(Default = value from 
+.Xr hostname @CMD_EXT@ , 
+.Pa /etc/resolv.conf ,
+or 
+.Ev LOCALDOMAIN;
+abbreviation = 
+.Ic do )
+.It Ic srchlist= Ns Ar name1/name2/...
+Change the default domain name to 
+.Ar name1 
+and the domain search list
+to 
+.Ar name1 , name2 , 
+etc.  A maximum of 6 names separated by slashes (/)
+can be specified.
+For example,
+.Bd -literal -offset indent
+set srchlist=lcs.MIT.EDU/ai.MIT.EDU/MIT.EDU
+.Ed
+.Pp
+sets the domain to lcs.MIT.EDU and the search list to the three names.
+This command overrides the
+default domain name and search list of the 
+.Dq Ic set domain 
+command.
+Use the 
+.Dq Ic set all 
+command to display the list.
+.Pp
+(Default = value based on 
+.Xr hostname @CMD_EXT@ , 
+.Pa /etc/resolv.conf ,
+or 
+.Ev LOCALDOMAIN;
+abbreviation = 
+.Ic srchl )
+.It Xo Op Ic no
+.Ns Ic defname
+.Xc
+If set, append the default domain name to a single-component lookup request 
+(i.e., one that does not contain a period).
+.Pp
+(Default = 
+.Ic defname ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic defname )
+.Xc
+.It Xo Op Ic no 
+.Ns Ic search
+.Xc
+If the lookup request contains at least one period but 
+.Em doesn't 
+end with a trailing period, append the domain names in the domain search list
+to the request until an answer is received.
+.Pp
+(Default = 
+.Ic search ; 
+abbreviation = 
+.Xo Op Ic no 
+.Ns Ic sea )
+.Xc
+.It Ic port= Ns Ar value
+Change the default TCP/UDP name server port to 
+.Ar value .
+.Pp
+(Default = 53; 
+abbreviation = 
+.Ic \&po )
+.It Ic querytype= Ns Ar value
+.It Ic type= Ns Ar value
+Change the type of information query to one of:
+.Bl -tag -width "HINFO   "
+.It Dv A
+the host's Internet address.
+.It Dv CNAME
+the canonical name for an alias.
+.It Dv HINFO
+the host CPU and operating system type.
+.It Dv MINFO
+the mailbox or mail list information.
+.It Dv MX
+the mail exchanger.
+.It Dv NS
+the name server for the named zone.
+.It Dv PTR
+the host name if the query is an Internet address;
+otherwise, the pointer to other information.
+.It Dv SOA
+the domain's 
+.Dq start-of-authority 
+information.
+.It Dv TXT
+the text information.
+.It Dv UINFO
+the user information.
+.It Dv WKS
+the supported well-known services.
+.El
+.Pp
+Other types 
+.Pq Dv ANY, AXFR, MB, MD, MF, NULL 
+are described in the RFC-1035 document.
+.Pp
+(Default = 
+.Dv A ; 
+abbreviations = 
+.Ic q , ty )
+.It Xo Op Ic no
+.Ns Ic recurse
+.Xc
+Tell the name server to query other servers if it does not have the
+information.
+.Pp
+(Default = 
+.Ic recurse ; 
+abbreviation =
+.Xo Op Ic no
+.Ns Ic rec )
+.Xc
+.It Ic retry= Ns Ar number
+Set the number of retries to 
+.Ar number .
+When a reply to a request is not received within a certain 
+amount of time (changed with 
+.Dq Ic set timeout ) , 
+the timeout period is doubled and the request is resent. 
+The retry value controls how many times a request is resent before giving up.
+.Pp
+(Default = 4, abbreviation = 
+.Ic ret )
+.It Ic root= Ns Ar host
+Change the name of the root server to 
+.Ar host . 
+This affects the 
+.Dq Ic root 
+command. 
+.Pp
+(Default = 
+.Ic ns.internic.net. ;
+abbreviation = 
+.Ic ro )
+.It Ic timeout= Ns Ar number
+Change the initial timeout interval for waiting for a reply to 
+.Ar number 
+seconds. Each retry doubles the timeout period.
+.Pp
+(Default = 5 seconds; abbreviation = 
+.Ic ti )
+.It Xo Op Ic no
+.Ns Ic vc
+.Xc
+Always use a virtual circuit when sending requests to the server.
+.Pp
+(Default = 
+.Ic novc ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic v )
+.Xc
+.It Xo Op Ic no
+.Ns Ic ignoretc
+.Xc 
+Ignore packet truncation errors.
+.Pp
+(Default = 
+.Ic noignoretc ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic ig )
+.Xc 
+.El
+.El
+.Sh DIAGNOSTICS
+If the lookup request was not successful, an error message is printed.
+Possible errors are:
+.Bl -tag -width "Timed"
+.It Li Timed out
+The server did not respond to a request after a certain amount of
+time (changed with 
+.Dq Ic set timeout= Ns Ar value ) 
+and a certain number of retries (changed with 
+.Dq Ic set retry= Ns Ar value ) .
+.It Li \&No response from server
+No name server is running on the server machine.
+.It Li \&No records
+The server does not have resource records of the current query type for the
+host, although the host name is valid.
+The query type is specified with the 
+.Dq Ic set querytype 
+command.
+.It Li Non-existent domain
+The host or domain name does not exist.
+.It Li Connection refused
+.It Li Network is unreachable
+The connection to the name or finger server could not be made 
+at the current time.
+This error commonly occurs with 
+.Ic ls 
+and 
+.Ic finger 
+requests. 
+.It Li Server failure
+The name server found an internal inconsistency in its database
+and could not return a valid answer.
+.It Li Refused
+The name server refused to service the request.
+.It Li Format error
+The name server found that the request packet was not in the proper format.
+It may indicate an error in 
+.Nm nslookup .
+.El
+.Sh FILES
+.Bl -tag -width "/usr/share/misc/nslookup.helpXXX" -compact
+.It Pa /etc/resolv.conf
+initial domain name and name server addresses
+.It Pa $HOME/.nslookuprc
+user's initial options
+.It Pa /usr/share/misc/nslookup.help
+summary of commands
+.El
+.Sh ENVIRONMENT
+.Bl -tag -width "HOSTALIASESXXXX" -compact
+.It Ev HOSTALIASES
+file containing host aliases
+.It Ev LOCALDOMAIN
+overrides default domain
+.El
+.Sh SEE ALSO
+.Xr @INDOT@named @SYS_OPS_EXT@ ,
+.Xr resolver @LIB_NETWORK_EXT@ , 
+.Xr resolver @FORMAT_EXT@ ;
+RFC-1034,
+.Dq Domain Names - Concepts and Facilities ;
+RFC-1035,
+.Dq Domain Names - Implementation and Specification .
+.Sh AUTHOR
+Andrew Cherenson
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.preinst
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.preinst
@@ -0,0 +1,44 @@
+#!/bin/sh
+# pre install script for the Debian bind9 package
+
+set -e
+
+# Check if we are upgrading while running a kernel before 2.2.18. If so abort
+# immediately since we don't support those kernels anymore.
+if [ "$1" = "upgrade" ] && dpkg --compare-versions "`uname -r`" lt 2.2.18 ; then
+        cat <<EOF
+ERROR: you are running a pre-2.2.18 kernel on this machine. Recent
+versions of bind9 no longer support those kernels.
+To prevent breaking nameservices on this system bind9 upgrade will abort.
+EOF
+        exit 1
+fi
+
+APP_PROFILE="usr.sbin.named"
+APP_CONFFILE="/etc/apparmor.d/$APP_PROFILE"
+APP_COMPLAIN="/etc/apparmor.d/force-complain/$APP_PROFILE"
+if [ "$1" = "upgrade" ]; then
+    mkdir -p `dirname $APP_COMPLAIN` 2>/dev/null || true
+    if dpkg --compare-versions $2 lt 1:9.3.4-2ubuntu2 ; then
+        # force-complain for pre-apparmor upgrades
+        ln -sf $APP_CONFFILE $APP_COMPLAIN
+    elif dpkg --compare-versions $2 lt 1:9.4.2-3ubuntu1 ; then
+        if [ -e "$APP_CONFFILE" ]; then
+            md5sum="`md5sum \"$APP_CONFFILE\" | sed -e \"s/ .*//\"`"
+            pkg_md5sum="`sed -n -e \"/^Conffiles:/,/^[^ ]/{\\\\' $APP_CONFFILE'{s/.* //;p}}\" /var/lib/dpkg/status`"
+            if [ "$md5sum" = "$pkg_md5sum" ]; then
+		# force-complain when upgrade from pre-shipped profile and an existing
+                # profile is same as in conffiles
+                ln -sf $APP_CONFFILE $APP_COMPLAIN
+            fi
+        else
+            # force-complain on upgrade from pre-shipped profile and
+            # there is no existing profile
+            ln -sf $APP_CONFFILE $APP_COMPLAIN
+        fi
+    fi
+fi
+
+
+#DEBHELPER#
+exit 0
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9-doc.docs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9-doc.docs
@@ -0,0 +1 @@
+doc/misc
--- bind9-9.6.ESV.R1+dfsg.orig/debian/README.Debian
+++ bind9-9.6.ESV.R1+dfsg/debian/README.Debian
@@ -0,0 +1,169 @@
+Upgrading from BIND 8.X:
+-----------------------
+
+If you are upgrading an authoritative server from BIND 8.X, please install
+the bind9-doc package and read /usr/share/doc/bind9-doc/misc/migration.gz,
+which contains a set of notes from the BIND maintainers on what changed
+that is likely to need your attention during an upgrade.
+
+
+Upgrading from earlier bind9 packages:
+-------------------------------------
+
+If you installed an early version of the Debian bind9 packages, prior to 
+version 1:9.2.0-2 to be more precise, you may have an /etc/bind/rndc.conf 
+configuration file still on your system.  There's nothing wrong with that,
+and if you've explicitly configured keys for using rndc you may well want to
+leave things exactly as they are!
+
+However, since 9.2.0 BIND 9.X has supported an rndc.key file that both named
+and rndc will read to obtain a shared key for rndc use against a daemon on 
+the same host.  The rndc-confgen program will easily create a suitable key
+file.  To take advantage of this mechanism, you may want to:
+
+	remove the /etc/bind/rndc.conf file
+	remove the rndc key specification in the /etc/bind/named.conf file
+
+	rndc-confgen -r /dev/urandom -a
+
+Alternatively, you can 'purge' the bind9 packages and reinstall them and you
+will end up with the new behavior since it is now the default.
+
+This is more secure than using a static key that isn't generated on a per-host
+basis, and is an easy alternative to more complex key schemes if you only need
+to use rndc to talk to named on the same host.
+
+
+Known Issues:
+------------
+
+I've had a report that lwresd, at least, fails to work with some recent 2.5
+kernels.  If you see something in your logs like 
+
+	loading configuration from '/etc/bind/lwresd.conf'
+	none:0: open: /etc/bind/lwresd.conf: permission denied
+
+Try rebuilding with --disable-linux-caps added to the configure call in the 
+rules file.  I'm hoping this is a temporary problem in the 2.5 kernel series,
+but we'll see.
+
+
+Configuration Schema:
+--------------------
+
+The Debian BIND package ships with a config that will work for the majority 
+of leaf servers with no user input required.
+
+The named configuration file named.conf is located in /etc/bind, so that all 
+static configuration files relating to bind are in one place.  If you really 
+really don't want named.conf in /etc/bind, then the best way to handle it is 
+probably to replace /etc/bind/named.conf with a symlink to the location you 
+want to use.  You could also use an option to named in the init.d script,
+but that only works for named, not for things like ndc.
+
+Zone data files for the root servers, and the forward and reverse localhost
+zones are also provided in /etc/bind.
+
+The working directory for named is now /var/cache/bind.  Thus, any transient
+files generated by named, such as database files for zones the daemon is
+secondary for, will be written to the /var filesystem, where they belong.
+
+To make this work, the named.conf provided uses explicitly fully-qualified
+pathnames to reference the files in /etc/bind. 
+
+Unlike previous BIND packages for Debian, the named.conf and provided db.*
+files are tagged as conffiles.  Thus, if you just want a "caching mostly"
+server configuration for a server that does not need to be authoritative for
+anything else, you can run the provided configuration as-is.  If you want to
+hack on named.conf, or even the init.d fragment, you can feel free to.  Future
+package upgrades will treat your configuration changes sanely, as all Debian
+packages should.
+
+While you are free to craft whatever structure you wish for servers which need
+to be authoritative for additional zones, what we suggest is that you put the
+db files for any zones you are master for in /etc/bind (perhaps even in a
+subdirectory structure depending on complexity), using full pathnames in the
+named.conf file.  Any zones you are secondary for should be configured in
+named.conf with simple filenames (relative to /var/cache/bind), so the data
+files will be stored in BIND's working directory (defaults to /var/cache/bind).
+Zones subject to automatic updates via DHCP should be stored in /var/lib/bind,
+and specified with full pathnames.
+
+
+Running Chroot'ed:
+-----------------
+
+Several users have asked for Debian BIND to run in a "chroot jail".  There are
+various issues associated with making this the default configuration for the
+package in Debian.  In the meantime, reasonable instructions on how to do
+this yourself are available on the web from:
+
+	http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html
+
+
+Running Non-Root:
+-----------------
+
+Recent versions of named can be invoked with options that specify a non-root
+user and/or group for named.  Read the named man page for more information.
+Note that when running named as a user other than root, it will not be able
+to find new interfaces that appear dynamically, such as during a PCMCIA card
+insertion, or if you're running some flavors of IPSEC and/or IP over IP
+tunnels.  If you cannot live with those limitations, feel free to edit the
+/etc/init.d/bind9 script to change the invocation of named.
+
+The default is now to run as the user 'bind' (which is automatically created
+in the group 'bind', if it doesn't exist), unless named.conf has been changed.
+To change this, edit /etc/default/bind9
+
+Please note that 'ndc restart' doesn't honor all the original command line
+options to named, so we explicitly don't use it in the init.d script provided
+with the package, and you should be careful about using it if you decide to
+run named non-root.
+
+
+PPP Control Script:
+-----------------
+
+Unfortunately, 'ndc reload' will not honor any command line options that were 
+fed to named on the initial invocation.  If you can live with that, and
+want to wiggle your DNS configuration when your PPP link goes up or down, the
+following script fragment from Francesco Potorti` <pot@gnu.org> may be helpful
+to you:
+   
+   I suggest adding this as bot /etc/ppp/ip-up.d/bind and
+   /etc/ppp/ip-down.d/bind:
+   
+   ================================================================
+   #!/bin/sh
+   if [ -x /usr/sbin/ndc -a -x /usr/sbin/named ]
+   then
+           /usr/sbin/ndc reload > /dev/null
+   fi
+   ================================================================
+   
+   This should cause no harm in any case, and should be helpful in these
+   cases:
+   - you configure bind as a forwarder.  When ppp is down, it cannot access
+     the network.  As soon as ppp is up, it is forced by the script to try
+     again, and it succeeds.
+   - someone writes a clever script that, coupled with the `usepeerdns'
+     command of pppd, makes a forwarding-only bind use the right servers by
+     rewriting the configuration file after ppp goes up.  Then the script
+     above makes bind reload the configuration.
+   
+   Now, someone should write that clever script :-)
+   
+   By the way, this is a  badly wanted feature, that should help setting up
+   a ppp connection automatically.   Currently, setting up a ppp connection
+   is much easier on a windows system than on linux, and there is really no
+   reason why it should be so, given that all the tools are there.
+
+
+Apparmor Profile
+----------------
+If your system uses apparmor, please note that the shipped enforcing profile
+works with the default installation, and changes in your configuration may
+require changes to the installed apparmor profile. Please see
+https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this
+software.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisccc50.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/libisccc50.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libbind-dev.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/libbind-dev.dirs
@@ -0,0 +1,2 @@
+usr/include
+usr/lib
--- bind9-9.6.ESV.R1+dfsg.orig/debian/lwresd.install
+++ bind9-9.6.ESV.R1+dfsg/debian/lwresd.install
@@ -0,0 +1,2 @@
+usr/sbin/lwresd
+usr/share/man/man8/lwresd.8*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/apparmor-profile
+++ bind9-9.6.ESV.R1+dfsg/debian/apparmor-profile
@@ -0,0 +1,43 @@
+# vim:syntax=apparmor
+# Last Modified: Fri Jun  1 16:43:22 2007
+#include <tunables/global>
+
+/usr/sbin/named {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+
+  capability net_bind_service,
+  capability setgid,
+  capability setuid,
+  capability sys_chroot,
+  capability sys_resource,
+
+  # /etc/bind should be read-only for bind
+  # /var/lib/bind is for dynamically updated zone (and journal) files.
+  # /var/cache/bind is for slave/stub data, since we're not the origin of it.
+  # See /usr/share/doc/bind9/README.Debian.gz
+  /etc/bind/** r,
+  /var/lib/bind/** rw,
+  /var/lib/bind/ rw,
+  /var/cache/bind/** rw,
+  /var/cache/bind/ rw,
+
+  # gssapi
+  /etc/krb5.keytab kr,
+  /etc/bind/krb5.keytab kr,
+
+  # dnscvsutil package
+  /var/lib/dnscvsutil/compiled/** rw,
+
+  /proc/net/if_inet6 r,
+  /proc/*/net/if_inet6 r,
+  /usr/sbin/named mr,
+  /var/run/bind/run/named.pid w,
+  # support for resolvconf
+  /var/run/bind/named.options r,
+
+  # some people like to put logs in /var/log/named/ instead of having
+  # syslog do the heavy lifting.
+  /var/log/named/** rw,
+  /var/log/named/ rw,
+}
--- bind9-9.6.ESV.R1+dfsg.orig/debian/vars.in
+++ bind9-9.6.ESV.R1+dfsg/debian/vars.in
@@ -0,0 +1 @@
+Description=The Berkeley Internet Name Domain (BIND) implements an Internet domain${Newline} name server.  BIND is the most widely-used name server software on the${Newline} Internet, and is supported by the Internet Software Consortium, www.isc.org.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.docs
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.docs
@@ -0,0 +1,2 @@
+FAQ
+README
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.postrm
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.postrm
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+if [ "$1" = "purge" ]
+then
+	rm -f /etc/bind/rndc.key /etc/default/bind9
+	rmdir /etc/bind >/dev/null 2>&1 || true
+        rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true
+fi
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/dnsutils.dirs
+++ bind9-9.6.ESV.R1+dfsg/debian/dnsutils.dirs
@@ -0,0 +1,3 @@
+usr/bin
+usr/share/doc/dnsutils
+usr/share/man/man1
--- bind9-9.6.ESV.R1+dfsg.orig/debian/db.local
+++ bind9-9.6.ESV.R1+dfsg/debian/db.local
@@ -0,0 +1,14 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+@	IN	A	127.0.0.1
+@	IN	AAAA	::1
--- bind9-9.6.ESV.R1+dfsg.orig/debian/compat
+++ bind9-9.6.ESV.R1+dfsg/debian/compat
@@ -0,0 +1 @@
+5
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9.config
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9.config
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+set -e 
+
+. /usr/share/debconf/confmodule
+
+db_input low bind9/start-as-user || true
+db_go
+
+db_input low bind9/different-configuration-file || true
+db_go
+
+db_input low bind9/run-resolvconf || true
+db_go
--- bind9-9.6.ESV.R1+dfsg.orig/debian/lwresd.init
+++ bind9-9.6.ESV.R1+dfsg/debian/lwresd.init
@@ -0,0 +1,66 @@
+#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:          lwresd
+# Required-Start:    $remote_fs
+# Should-Start:	     $syslog $network
+# Required-Stop:     $remote_fs
+# Should-Stop:	     $syslog $network
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Start and stop the Lightweight Resolver Daemon.
+### END INIT INFO
+
+. /lib/lsb/init-functions
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+NAME=lwresd
+DAEMON=/usr/sbin/lwresd
+
+# Don't modify this line, change or create /etc/default/lwresd.
+OPTIONS=""
+
+test -f /etc/default/lwresd && . /etc/default/lwresd
+
+test -x $DAEMON || exit 0
+
+case "$1" in
+    start)
+	modprobe capability >/dev/null 2>&1 || true
+
+	# dirs under /var/run can go away on reboots.
+	mkdir -p /var/run/bind/run
+	chmod 775 /var/run/bind/run
+	chown root:bind /var/run/bind/run >/dev/null 2>&1 || true
+
+	log_daemon_msg "Starting domain name service" $NAME
+	if start-stop-daemon --start --quiet --exec $DAEMON  -- $OPTIONS; then
+	    log_end_msg 0
+	else
+	    log_end_msg 1
+	fi
+    ;;
+
+    stop)
+	log_daemon_msg "Stopping domain name service" $NAME
+	if start-stop-daemon --stop --quiet  \
+	    --pidfile /var/run/bind/run/$NAME.pid --exec $DAEMON; then
+	    log_end_msg 0
+	else
+	    log_end_msg 1
+	fi
+    ;;
+
+    restart|force-reload)
+	$0 stop
+	sleep 2
+	$0 start
+    ;;
+    
+    *)
+	log_action_msg "Usage: /etc/init.d/$NAME {start|stop|restart|force-reload}"
+	exit 1
+    ;;
+esac
+
+exit 0
--- bind9-9.6.ESV.R1+dfsg.orig/debian/templates
+++ bind9-9.6.ESV.R1+dfsg/debian/templates
@@ -0,0 +1,21 @@
+Template: bind9/start-as-user
+Type: string
+Default: bind
+_Description: User account for running the BIND9 daemon:
+ The default is to run the BIND9 daemon (named) under the 'bind'
+ user account. To use a different account, please enter the
+ appropriate username.
+
+Template: bind9/different-configuration-file
+Type: string
+_Description: Other startup options for named:
+ Please provide any additional options (other than username) that should
+ be passed to the BIND9 daemon (named) on startup.
+
+Template: bind9/run-resolvconf
+Type: boolean
+Default: true
+_Description: Should resolv.conf settings be overridden?
+ Please choose whether the resolver should be forced to use the
+ local BIND9 daemon (named) rather than what the current connection
+ recommends, when this machine moves around.
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libbind-dev.README.Debian
+++ bind9-9.6.ESV.R1+dfsg/debian/libbind-dev.README.Debian
@@ -0,0 +1,9 @@
+The include files for BIND are in /usr/include/{isc,dns,dst,lwres}.  If 
+you're compiling something that uses them, use something like 
+
+	'-I/usr/include/isc' 
+
+and so on in the call to the compiler to pick up the BIND versions before 
+the normal system versions for files that have conflicting filenames.
+
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/zones.rfc1918
+++ bind9-9.6.ESV.R1+dfsg/debian/zones.rfc1918
@@ -0,0 +1,20 @@
+zone "10.in-addr.arpa"      { type master; file "/etc/bind/db.empty"; };
+ 
+zone "16.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "17.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "18.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "19.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "20.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "21.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "22.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "23.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "24.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "25.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "26.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "27.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "28.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "29.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "30.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "31.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+
+zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libbind9-50.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/libbind9-50.postinst
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisccc50.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libisccc50.install
@@ -0,0 +1 @@
+usr/lib/libisccc.so.50*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/bind9-default.md5sum
+++ bind9-9.6.ESV.R1+dfsg/debian/bind9-default.md5sum
@@ -0,0 +1 @@
+1229a956d3c6ca11fa344d69f082d7ca  /etc/default/bind9
--- bind9-9.6.ESV.R1+dfsg.orig/debian/dnsutils.postinst
+++ bind9-9.6.ESV.R1+dfsg/debian/dnsutils.postinst
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set -e
+
+if [ "$1" = configure ]; then
+	for i in `dpkg-divert --list dnsutils | awk '{ print $3 }'`
+	do
+		rm -f $i.bind
+		dpkg-divert --remove $i
+	done
+fi
+
+#DEBHELPER#
--- bind9-9.6.ESV.R1+dfsg.orig/debian/ip-down.d
+++ bind9-9.6.ESV.R1+dfsg/debian/ip-down.d
@@ -0,0 +1,15 @@
+#!/bin/sh -e
+# Called when an interface disconnects
+# Written by LaMont Jones <lamont@debian.org>
+
+# kick named as needed
+
+# If /usr isn't mounted yet, silently bail.
+if [ ! -d /usr/sbin ]; then
+	exit 0
+fi
+
+# if named is running, reconfig it.
+rndc reconfig >/dev/null 2>&1 || true
+
+exit 0
--- bind9-9.6.ESV.R1+dfsg.orig/debian/mk-dfsg.sh
+++ bind9-9.6.ESV.R1+dfsg/debian/mk-dfsg.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+# Remove all RFCs and Internet-drafts, which tend to be non-free.
+rm doc/rfc/* doc/draft/*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/libisc52.install
+++ bind9-9.6.ESV.R1+dfsg/debian/libisc52.install
@@ -0,0 +1 @@
+usr/lib/libisc.so.50*
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/fr.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/fr.po
@@ -0,0 +1,68 @@
+# Translation of bind9 debconf templates to French
+# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com>
+# This file is distributed under the same license as the bind9 package.
+# CALARESU Luc <luc.calaresu@gmail.com>, 2008.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 14:26+0200\n"
+"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n"
+"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Identifiant pour l'exécution du démon de BIND9 :"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant "
+"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez "
+"l'indiquer ici."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Autres options à transmettre pour « named » :"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui "
+"doit être transmise au démarrage du démon de BIND9 (« named »)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Faut-il écraser les paramètres de resolv.conf ?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local "
+"(« named ») plutôt que les paramètres recommandés pour la connexion actuelle, "
+"lorsque cette machine est déplacée."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/eu.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/eu.po
@@ -0,0 +1,68 @@
+# translation of eu.po to Euskara
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Piarres Beobide <pi@beobide.net>, 2009.
+msgid ""
+msgstr ""
+"Project-Id-Version: eu\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2009-02-22 10:36+0100\n"
+"Last-Translator: Piarres Beobide <pi@beobide.net>\n"
+"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 exekutatuko duen erabiltzaile kontua:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin "
+"exekutatzea da. Beste kontu bat erabiltzeko, idatzi dagokion "
+"erabiltzaile-izena"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Beste abio aukera batzuek named-rentzat:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera "
+"gehigarriak (erabiltzaile-izenaz beste)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf ezarpenak gainidatzi behar al dira?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala erabiltzeko "
+"ekipo hau mugitzen ari denean konexioak gomendatzen dionaren ordez."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/fi.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/fi.po
@@ -0,0 +1,49 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"POT-Creation-Date: \n"
+"PO-Revision-Date: 2008-07-13 08:08-0000\n"
+"Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
+"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Finnish\n"
+"X-Poedit-Country: FINLAND\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ohjelman named muut käynnistysvalitsimet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-taustaohjelmalle (named) tulisi antaa käynnistyksessä."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun konetta siirrellään eri paikkoihin."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/templates.pot
+++ bind9-9.6.ESV.R1+dfsg/debian/po/templates.pot
@@ -0,0 +1,60 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/zh_CN.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/zh_CN.po
@@ -0,0 +1,59 @@
+# Chinese translations for bind package.
+# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind package.
+# LI Daobing <lidaobing@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-10-04 14:36+0800\n"
+"Last-Translator: LI Daobing <lidaobing@gmail.com>\n"
+"Language-Team: Chinese (simplified)\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "运行 BIND9 服务的用户账号:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr "缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的用户名。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "named 的其他启动选项:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "是否覆盖 resolv.conf 的设置?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr "请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推荐的域名解析服务器, 特别是当机器需要移动时。"
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/vi.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/vi.po
@@ -0,0 +1,65 @@
+# Vietnamese translation for Bind 9.
+# Copyright © 2008 Free Software Foundation, Inc.
+# Clytie Siddall <clytie@riverland.net.au>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 15:35+0930\n"
+"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
+"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: LocFactoryEditor 1.7b3\n"
+
+#: ../templates:1001
+#. Type: string
+#. Description
+msgid "User account for running the BIND9 daemon:"
+msgstr "Tài khoản người dùng để chạy trình nền BIND9:"
+
+#: ../templates:1001
+#. Type: string
+#. Description
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr "Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind ». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp."
+
+#: ../templates:2001
+#. Type: string
+#. Description
+msgid "Other startup options for named:"
+msgstr "Tùy chọn khởi chạy khác cần đặt tên:"
+
+#: ../templates:2001
+#. Type: string
+#. Description
+#| msgid ""
+#| "Please enter here the options which should be passed to the bind9-daemon "
+#| "on startup."
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi cho trình nền BIND9 vào lúc khởi chạy."
+
+#: ../templates:3001
+#. Type: boolean
+#. Description
+#| msgid "Should resolvconf be executed on startup?"
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?"
+
+#: ../templates:3001
+#. Type: boolean
+#. Description
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr "Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/de.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/de.po
@@ -0,0 +1,83 @@
+# Translation of bind9 debconf templates to German
+# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008.
+# This file is distributed under the same license as the bind9 package.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-16 20:22+0200\n"
+"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
+"Language-Team: de <debian-l10n-german@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=iso-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardm��ig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers "
+"�bind� betrieben. Um ein anderes Benutzerkonto auszuw�hlen, geben Sie bitte "
+"den entsprechenden Benutzernamen ein."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Weitere Optionen f�r den Start des Named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Bitte geben Sie hier die zus�tzlichen Optionen (au�er dem Benutzernamen) ein, "
+"die dem Bind9-Daemon (Named) beim Starten �bergeben werden sollen."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Bitte w�hlen Sie aus, ob der Namensaufl�ser (Resolver) dazu gezwungen werden "
+"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen "
+"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird."
+
+#~ msgid "Options that should be passed at startup to bind9"
+#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen"
+
+#~ msgid "which user should bind9 run as?"
+#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?"
+
+#~ msgid ""
+#~ "The default is to start bind9 as bind user, if you would  like to change "
+#~ "that, please give here the username as which  bind9 should start as."
+#~ msgstr ""
+#~ "Standardm��ig startet Bind9 unter der Benutzerkennung �bind�. Falls Sie "
+#~ "dies �ndern m�chten geben Sie hier bitte den Benutzernamen ein, unter "
+#~ "dessen Kennung Bind9 starten soll."
+
+#~ msgid "Should resolvconf run when bind9 starts up?"
+#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?"
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/cs.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/cs.po
@@ -0,0 +1,66 @@
+# Czech translation of bind9 debconf messages.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Miroslav Kure <kurem@debian.cz>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 14:38+0200\n"
+"Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
+"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Uživatelský účet pro běh daemona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele "
+"„bind“. Pro použití jiného účtu zadejte jeho jméno."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Další spouštěcí parametry pro named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se "
+"mají předat daemonu BINDu9 (named) při každém spuštění."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má se přepsat nastavení v resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal "
+"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální "
+"připojení."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/nl.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/nl.po
@@ -0,0 +1,71 @@
+# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch
+# translation of bind9 debconf template to Dutch
+# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+#
+# Paul Gevers <paul@climbing.nl>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-09-17 21:15-0500\n"
+"Last-Translator: Paul Gevers <paul@climbing.nl>\n"
+"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de "
+"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier de "
+"geschikte gebruikersnaam invullen."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andere opstartopties voor 'named':"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het opstarten "
+"meegeven aan 'named', de BIND9 achtergronddienst?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 achtergronddienst "
+"(named), in plaats van de aanbevelingen van de huidige connectie. Bijvoorbeeld, "
+"wanneer deze computer veel verplaatst wordt."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/gl.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/gl.po
@@ -0,0 +1,65 @@
+# Galician translation of bind9's debconf templates
+# This file is distributed under the same license as the bind9 package.
+# Jacobo Tarrio <jtarrio@debian.org>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:36+0100\n"
+"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n"
+"Language-Team: Galician <proxecto@trasno.net>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuario que executa o servizo de BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta "
+"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opcións de inicio para named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban "
+"pasar ao servizo de BIND9 (named) no inicio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Quere substituír a configuración de resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local "
+"(named) no canto do que recomenda a conexión actual, cando esta máquina "
+"estea en movemento."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/sk.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/sk.po
@@ -0,0 +1,53 @@
+# Slovak translation of bind9
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Ivan Masár <helix84@centrum.sk>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Ivan Masár <helix84@centrum.sk>\n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Používateľský účet démona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak chcete použiť iný účet, prosím zadajte príslušný názov účtu."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ďalšie spúšťacie voľby pre named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať démonovi BIND9 (named) pri spustení."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má sa nastaviť priorita pred resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa umiestnenie tohto počítača mení."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/pl.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/pl.po
@@ -0,0 +1,67 @@
+# debconf templates for bind9 package
+# Polish translation
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+# Łukasz Paździora <lukpaz@gmail.com>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-11-24 18:30+0100\n"
+"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n"
+"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Konto użytkownika, jako który powinien działać BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. "
+"Aby użyć innego konta podaj inną nazwę użytkownika."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Inne opcje startowe dla named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny "
+"zostać podane demonowi BIND9 (named) przy starcie."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna "
+"usługa BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien "
+"korzystać z zalecanych ustawień aktualnego połączenia."
\ No newline at end of file
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/id.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/id.po
@@ -0,0 +1,54 @@
+# Translation of BIND9/debconf into Bahasa Indonesia
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Arief S Fitrianto <arief@gurame.fisika.ui.ac.id>, 2008
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 debconf.po\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-16 20:55+0700\n"
+"Last-Translator: Arief S Fitrianto <arief@gurame.fisika.ui.ac.id>\n"
+"Language-Team: Bahasa Indonesia <debian-l10n-id@gurame.fisika.ui.ac.id>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=iso-8859-1\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Bahasa Indonesia\n"
+"X-Poedit-Country: Indonesia\n"
+"X-Poedit-SourceCharset: iso-8859-1\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Akun pengguna untuk menjalankan server BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Server BIND9 (named) biasanya dijalankan dengan akun pengguna 'bind'. Bila ingin menggunakan pengguna lain, silakan masukkan nama pengguna tersebut."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Pilihan lain untuk menjalankan named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Silakan masukkan pilihan tambahan (selain nama pengguna) yang harus dijalankan oleh server BIND9 (named) saat mulai."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Haruskan konfigurasi resolv.conf ditimpa?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Mohon tentukan apakah resolver harus dipaksa menggunakan server BIND9 local (named) atau sesuai acuan koneksi saat ini ketika mesin ini dipindahkan."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/ja.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/ja.po
@@ -0,0 +1,66 @@
+# Copyright (C) 2008 LaMont Jones <lamont@debian.org>
+# This file is distributed under the same license as the bind9 package.
+# Hideki Yamane <henrich@debian.or.jp>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-22 00:03+0900\n"
+"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
+"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 デーモンの動作に使うユーザアカウント:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作します。"
+"異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "起動時に named に指定するオプション:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを"
+"入力してください。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf の設定を上書きしますか?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うようにする"
+"か、現在の接続先で推奨されるネームサーバを使うようにするかを選んでください。"
+
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/tr.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/tr.po
@@ -0,0 +1,55 @@
+# turkish translation of bind9 debconf template
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# Mert Dirik <mertdirik@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 23:31+0200\n"
+"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n"
+"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Poedit-Language: Turkish\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz hesabın adını girin."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "'named'in kullanacağı diğer başlatma seçenekleri:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı adı dışındaki ek seçenekleri yazın."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "'resolv.conf' ayarları ezilmeli mi (override)?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya zorlanması gerekip gerekmediğini seçin."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/it.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/it.po
@@ -0,0 +1,61 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Alex <animainvendita@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-27 16:10+0200\n"
+"Last-Translator: Alex <animainvendita@gmail.com>\n"
+"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Account utente con cui eseguire il demone BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr "L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account utente, inserire il nome corrispondente."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Altre opzioni di avvio per named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr "Inserire qualsiasi opzione addizionale (differente dal nome utente) che dovrebbe essere inviata al demone BIND9 (named) durante l'avvio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr "Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il demone BIND9 locale (named) non utilizzando i server raccomandati dalla connessione attiva."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/POTFILES.in
+++ bind9-9.6.ESV.R1+dfsg/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] templates
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/es.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/es.po
@@ -0,0 +1,85 @@
+# bind9 translation to spanish
+# Copyright (C) 2008 Software in the Public Interest
+# This file is distributed under the same license as the bind9 package.
+# Changes:
+# - Initial translation
+# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008
+# Traductores, si no conoce el formato PO, merece la pena leer la 
+# documentación de gettext, especialmente las secciones dedicadas a este
+# formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+# - El proyecto de traducción de Debian al español
+# http://www.debian.org/intl/spanish
+# especialmente las notas de traducción en
+# http://www.debian.org/intl/spanish/notas
+# - La guía de traducción de po's de debconf:
+# /usr/share/doc/po-debconf/README-trans
+# o http://www.debian.org/intl/l10n/po-debconf/README-trans
+# 
+# 
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-08 20:18-0300\n"
+"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n"
+"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Cuenta de usuario que ejecuta el demonio BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es "
+"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de "
+"usuario apropiado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Otras opciones de inicio para «named»:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Ingrese cualquier opción adicional (además del nombre de usuario) que "
+"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del "
+"sistema."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique si se debería forzar al cliente a utilizar el demonio BIND9 («named») "
+"local en lugar de lo que la conexión actual recomiende, cuando este equipo "
+"este en movimiento."
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/sv.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/sv.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+#
+# Martin Ågren <martin.agren@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-18 19:24+0200\n"
+"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n"
+"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Användarkonto att köra BIND9-demonen under:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. "
+"För att använda ett annat konto, var vänlig ange användarnamnet."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Övriga uppstartsval för named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska "
+"skickas till BIND9-demonen (named) vid uppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Ska resolv.conf-inställningar hoppas över?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-demonen "
+"(named) snarare än vad den aktuella uppkopplingen rekommenderar när den här "
+"maskinen flyttar runt."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/ru.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/ru.po
@@ -0,0 +1,69 @@
+# translation of ru.po to Russian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Yuri Kozlov <kozlov.y@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:08+0400\n"
+"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n"
+"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Учётная запись для запуска службы BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"По умолчанию, служба BIND9 (файл named) запускается с правами учётной "
+"записи 'bind'. Если вы хотите использовать другую учётную запись, то "
+"введите это имя здесь."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Другие параметры запуска named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Укажите любые дополнительные параметры (кроме имени учётной записи), которые "
+"нужно передать службе BIND9 (файлу named) при запуске."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Переписать настройки resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Укажите, хотите ли вы, чтобы определитель имён машины использовал "
+"локальную службу BIND9 (named), а не настройки имеющегося подключения."
+
--- bind9-9.6.ESV.R1+dfsg.orig/debian/po/pt.po
+++ bind9-9.6.ESV.R1+dfsg/debian/po/pt.po
@@ -0,0 +1,76 @@
+# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese
+# Copyright (C) 2008 Américo Monteiro
+# This file is distributed under the same license as the bind9 package.
+#
+# Américo Monteiro <a_monteiro@netcabo.pt>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:55+0100\n"
+"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n"
+"Language-Team: Portuguese <traduz@debianpt.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de utilizador para correr o deamon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+#| msgid ""
+#| "The default is to start bind9 as bind user, if you would  like to change "
+#| "that, please give here the username as which  bind9 should start as."
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador "
+"'bind'. Para usar uma conta diferente, por favor indique o nome de utilizador "
+"apropriado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de arranque para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+#| msgid ""
+#| "Please enter here the options which should be passed to the bind9-daemon "
+#| "on startup."
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) que "
+"deverão ser enviadas ao deamon BIND9 (named) durante o arranque. "
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+#| msgid "Should resolvconf be executed on startup?"
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Devem as configurações de resolv.conf ser substituidas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon "
+"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta "
+"máquina está ligada."
+
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/rdataset.c
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/rdataset.c
@@ -276,6 +276,7 @@
 #define MAX_SHUFFLE	32
 #define WANT_FIXED(r)	(((r)->attributes & DNS_RDATASETATTR_FIXEDORDER) != 0)
 #define WANT_RANDOM(r)	(((r)->attributes & DNS_RDATASETATTR_RANDOMIZE) != 0)
+#define WANT_SINGLE(r)	(((r)->attributes & DNS_RDATASETATTR_SINGLE) != 0)
 
 struct towire_sort {
 	int key;
@@ -410,6 +411,9 @@
 					sorted[i].key = 0; /* Unused */
 				sorted[i].rdata = &shuffled[i];
 			}
+			if (count > 1 && WANT_SINGLE(rdataset)) {
+				count = 1;
+			}
 		} else {
 			/*
 			 * "Cyclic" order.
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/resolver.c
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/resolver.c
@@ -435,7 +435,8 @@
 static isc_result_t ncache_adderesult(dns_message_t *message,
 				      dns_db_t *cache, dns_dbnode_t *node,
 				      dns_rdatatype_t covers,
-				      isc_stdtime_t now, dns_ttl_t maxttl,
+				      isc_stdtime_t now,
+				      dns_ttl_t minttl, dns_ttl_t maxttl,
 				      isc_boolean_t optout,
 				      dns_rdataset_t *ardataset,
 				      isc_result_t *eresultp);
@@ -4106,7 +4107,9 @@
 			ttl = 0;
 
 		result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
-					   covers, now, ttl, vevent->optout,
+					   covers, now,
+					   fctx->res->view->minncachettl, ttl,
+					   vevent->optout,
 					   ardataset, &eresult);
 		if (result != ISC_R_SUCCESS)
 			goto noanswer_response;
@@ -4396,6 +4399,12 @@
 			rdataset->ttl = res->view->maxcachettl;
 
 		/*
+		 * Enforce configured minimum cache TTL.
+		 */
+		if (rdataset->ttl < res->view->mincachettl)
+			rdataset->ttl = res->view->mincachettl;
+
+		/*
 		 * If this RRset is in a secure domain, is in bailiwick,
 		 * and is not glue, attempt DNSSEC validation.	(We do not
 		 * attempt to validate glue or out-of-bailiwick data--even
@@ -4687,7 +4696,8 @@
  */
 static isc_result_t
 ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
-		  dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
+		  dns_rdatatype_t covers, isc_stdtime_t now,
+		  dns_ttl_t minttl, dns_ttl_t maxttl,
 		  isc_boolean_t optout, dns_rdataset_t *ardataset,
 		  isc_result_t *eresultp)
 {
@@ -4699,7 +4709,7 @@
 		ardataset = &rdataset;
 	}
 	result = dns_ncache_addoptout(message, cache, node, covers, now,
-				     maxttl, optout, ardataset);
+				      minttl, maxttl, optout, ardataset);
 	if (result == DNS_R_UNCHANGED || result == ISC_R_SUCCESS) {
 		/*
 		 * If the cache now contains a negative entry and we
@@ -4864,7 +4874,9 @@
 		ttl = 0;
 
 	result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
-				   covers, now, ttl, ISC_FALSE,
+				   covers, now,
+				   fctx->res->view->minncachettl, ttl,
+				   ISC_FALSE,
 				   ardataset, &eresult);
 	if (result != ISC_R_SUCCESS)
 		goto unlock;
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/Makefile.in
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/Makefile.in
@@ -43,7 +43,7 @@
 
 ISCDEPLIBS =	../../lib/isc/libisc.@A@
 
-LIBS =		@LIBS@
+LIBS =		@LIBS@ -L../../lib/isc -lcrypto
 
 # Alphabetically
 
@@ -123,6 +123,7 @@
 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libdns.la -rpath ${libdir} \
 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
 		${OBJS} ${ISCLIBS} @DNS_CRYPTO_LIBS@ ${LIBS}
+	ln -sf .libs/libdns.so .
 
 timestamp: libdns.@A@
 	touch timestamp
@@ -137,6 +138,7 @@
 	rm -f libdns.@A@ timestamp
 	rm -f gen code.h include/dns/enumtype.h include/dns/enumclass.h
 	rm -f include/dns/rdatastruct.h
+	rm -f libdns.so
 
 newrr::
 	rm -f code.h include/dns/enumtype.h include/dns/enumclass.h
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/order.c
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/order.c
@@ -89,6 +89,7 @@
 	REQUIRE(DNS_ORDER_VALID(order));
 	REQUIRE(mode == DNS_RDATASETATTR_RANDOMIZE ||
 	        mode == DNS_RDATASETATTR_FIXEDORDER ||
+		mode == (DNS_RDATASETATTR_RANDOMIZE|DNS_RDATASETATTR_SINGLE) ||
 		mode == 0 /* DNS_RDATASETATTR_CYCLIC */ );
 
 	ent = isc_mem_get(order->mctx, sizeof(*ent));
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/openssl_link.c
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/openssl_link.c
@@ -48,12 +48,16 @@
 #include "dst_internal.h"
 #include "dst_openssl.h"
 
+#include <dns/log.h>
+
 #include <openssl/err.h>
 #include <openssl/rand.h>
 #include <openssl/evp.h>
 #include <openssl/conf.h>
 #include <openssl/crypto.h>
 
+#include <unistd.h>
+
 #if defined(CRYPTO_LOCK_ENGINE) && (OPENSSL_VERSION_NUMBER >= 0x0090707f)
 #define USE_ENGINE 1
 #endif
@@ -188,7 +192,19 @@
 	rm->pseudorand = entropy_getpseudo;
 	rm->status = entropy_status;
 #ifdef USE_ENGINE
+	const char *cnf_path = "/usr/lib/ssl/openssl.cnf";
+	if (access(cnf_path, R_OK) == -1 && errno != ENOENT) {
+		isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
+			      DNS_LOGMODULE_CONFIG, ISC_LOG_CRITICAL,
+			      "The OpenSSL configuration file %s exists, "
+			      "but it is not readable.", cnf_path);
+		isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
+			      DNS_LOGMODULE_CONFIG, ISC_LOG_CRITICAL,
+			      "The process may terminate without further "
+			      "notice.");
+	}
 	OPENSSL_config(NULL);
+
 #ifdef USE_PKCS11
 #ifndef PKCS11_SO_PATH
 #define PKCS11_SO_PATH		"/usr/local/lib/engines/engine_pkcs11.so"
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/ncache.c
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/ncache.c
@@ -92,17 +92,19 @@
 
 isc_result_t
 dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
-	       dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
+	       dns_rdatatype_t covers, isc_stdtime_t now,
+	       dns_ttl_t minttl, dns_ttl_t maxttl,
 	       dns_rdataset_t *addedrdataset)
 {
-	return (dns_ncache_addoptout(message, cache, node, covers, now, maxttl,
-				    ISC_FALSE, addedrdataset));
+	return (dns_ncache_addoptout(message, cache, node, covers, now,
+				     minttl, maxttl,
+				     ISC_FALSE, addedrdataset));
 }
 
 isc_result_t
 dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
 		     dns_dbnode_t *node, dns_rdatatype_t covers,
-		     isc_stdtime_t now, dns_ttl_t maxttl,
+		     isc_stdtime_t now, dns_ttl_t minttl, dns_ttl_t maxttl,
 		     isc_boolean_t optout, dns_rdataset_t *addedrdataset)
 {
 	isc_result_t result;
@@ -170,6 +172,8 @@
 				    type == dns_rdatatype_nsec3) {
 					if (ttl > rdataset->ttl)
 						ttl = rdataset->ttl;
+					if (ttl < minttl)
+						ttl = minttl;
 					if (trust > rdataset->trust)
 						trust = rdataset->trust;
 					/*
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/include/dns/ncache.h
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/include/dns/ncache.h
@@ -61,12 +61,13 @@
 
 isc_result_t
 dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
-	       dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
+	       dns_rdatatype_t covers, isc_stdtime_t now,
+	       dns_ttl_t minttl, dns_ttl_t maxttl,
 	       dns_rdataset_t *addedrdataset);
 isc_result_t
 dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
 		     dns_dbnode_t *node, dns_rdatatype_t covers,
-		     isc_stdtime_t now, dns_ttl_t maxttl,
+		     isc_stdtime_t now, dns_ttl_t minttl, dns_ttl_t maxttl,
 		     isc_boolean_t optout, dns_rdataset_t *addedrdataset);
 /*%<
  * Convert the authority data from 'message' into a negative cache
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/include/dns/view.h
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/include/dns/view.h
@@ -132,6 +132,8 @@
 	isc_boolean_t			requestnsid;
 	dns_ttl_t			maxcachettl;
 	dns_ttl_t			maxncachettl;
+	dns_ttl_t			mincachettl;
+	dns_ttl_t			minncachettl;
 	in_port_t			dstport;
 	dns_aclenv_t			aclenv;
 	dns_rdatatype_t			preferred_glue;
--- bind9-9.6.ESV.R1+dfsg.orig/lib/dns/include/dns/rdataset.h
+++ bind9-9.6.ESV.R1+dfsg/lib/dns/include/dns/rdataset.h
@@ -204,6 +204,8 @@
 #define DNS_RDATASETATTR_CLOSEST	0x00080000
 #define DNS_RDATASETATTR_OPTOUT		0x00100000	/*%< OPTOUT proof */
 
+#define DNS_RDATASETATTR_SINGLE		0x10000000	/* Only return 1 answer */
+
 /*%
  * _OMITDNSSEC:
  * 	Omit DNSSEC records when rendering ncache records.
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isccfg/Makefile.in
+++ bind9-9.6.ESV.R1+dfsg/lib/isccfg/Makefile.in
@@ -38,7 +38,7 @@
 ISCDEPLIBS =	../../lib/isc/libisc.@A@
 ISCCFGDEPLIBS =	libisccfg.@A@
 
-LIBS =		@LIBS@
+LIBS =		@LIBS@ -L../dns -L../isc -L../isccc
 
 SUBDIRS =	include
 
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isccfg/namedconf.c
+++ bind9-9.6.ESV.R1+dfsg/lib/isccfg/namedconf.c
@@ -825,6 +825,8 @@
 	{ "max-clients-per-query", &cfg_type_uint32, 0 },
 	{ "max-ncache-ttl", &cfg_type_uint32, 0 },
 	{ "max-udp-size", &cfg_type_uint32, 0 },
+	{ "min-cache-ttl", &cfg_type_uint32, 0 },
+	{ "min-ncache-ttl", &cfg_type_uint32, 0 },
 	{ "min-roots", &cfg_type_uint32, CFG_CLAUSEFLAG_NOTIMP },
 	{ "minimal-responses", &cfg_type_boolean, 0 },
 	{ "preferred-glue", &cfg_type_astring, 0 },
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isccc/Makefile.in
+++ bind9-9.6.ESV.R1+dfsg/lib/isccc/Makefile.in
@@ -36,7 +36,7 @@
 ISCDEPLIBS =	../../lib/isc/libisc.@A@
 ISCCCDEPLIBS =	libisccc.@A@
 
-LIBS =		@LIBS@
+LIBS =		@LIBS@ -L../../lib/isc
 
 SUBDIRS =	include
 
@@ -72,6 +72,7 @@
 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisccc.la -rpath ${libdir} \
 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
 		${OBJS} ${LIBS} ${ISCLIBS}
+	ln -sf .libs/libisccc.so .
 
 timestamp: libisccc.@A@
 	touch timestamp
@@ -83,4 +84,4 @@
 	${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libisccc.@A@ ${DESTDIR}${libdir}
 
 clean distclean::
-	rm -f libisccc.@A@ timestamp
+	rm -f libisccc.@A@ timestamp libisccc.so 
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isc/Makefile.in
+++ bind9-9.6.ESV.R1+dfsg/lib/isc/Makefile.in
@@ -102,6 +102,7 @@
 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc.la -rpath ${libdir} \
 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
 		${OBJS} ${LIBS}
+	ln -sf .libs/libisc.so .
 
 timestamp: libisc.@A@
 	touch timestamp
@@ -113,4 +114,4 @@
 	${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libisc.@A@ ${DESTDIR}${libdir}
 
 clean distclean::
-	rm -f libisc.@A@ libisc.la timestamp
+	rm -f libisc.@A@ libisc.la timestamp libisc.so
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isc/mips/include/isc/atomic.h
+++ bind9-9.6.ESV.R1+dfsg/lib/isc/mips/include/isc/atomic.h
@@ -31,18 +31,20 @@
 isc_atomic_xadd(isc_int32_t *p, int val) {
 	isc_int32_t orig;
 
-	/* add is a cheat, since MIPS has no mov instruction */
-	__asm__ volatile (
-	    "1:"
-	    "ll $3, %1\n"
-	    "add %0, $0, $3\n"
-	    "add $3, $3, %2\n"
-	    "sc $3, %1\n"
-	    "beq $3, 0, 1b"
-	    : "=&r"(orig)
-	    : "m"(*p), "r"(val)
-	    : "memory", "$3"
-		);
+	__asm__ __volatile__ (
+	"	.set	push		\n"
+	"	.set	mips2		\n"
+	"	.set	noreorder	\n"
+	"	.set	noat		\n"
+	"1:	ll	$1, %1		\n"
+	"	addu	%0, $1, %2	\n"
+	"	sc	%0, %1		\n"
+	"	beqz	%0, 1b		\n"
+	"	 addu	%0, $1, %2	\n"
+	"	.set	pop		\n"
+	: "=&r" (orig), "+R" (*p)
+	: "r" (val)
+	: "memory");
 
 	return (orig);
 }
@@ -52,16 +54,7 @@
  */
 static inline void
 isc_atomic_store(isc_int32_t *p, isc_int32_t val) {
-	__asm__ volatile (
-	    "1:"
-	    "ll $3, %0\n"
-	    "add $3, $0, %1\n"
-	    "sc $3, %0\n"
-	    "beq $3, 0, 1b"
-	    :
-	    : "m"(*p), "r"(val)
-	    : "memory", "$3"
-		);
+	*p = val;
 }
 
 /*
@@ -72,20 +65,23 @@
 static inline isc_int32_t
 isc_atomic_cmpxchg(isc_int32_t *p, int cmpval, int val) {
 	isc_int32_t orig;
+	isc_int32_t tmp;
 
-	__asm__ volatile(
-	    "1:"
-	    "ll $3, %1\n"
-	    "add %0, $0, $3\n"
-	    "bne $3, %2, 2f\n"
-	    "add $3, $0, %3\n"
-	    "sc $3, %1\n"
-	    "beq $3, 0, 1b\n"
-	    "2:"
-	    : "=&r"(orig)
-	    : "m"(*p), "r"(cmpval), "r"(val)
-	    : "memory", "$3"
-		);
+	__asm__ __volatile__ (
+	"	.set	push		\n"
+	"	.set	mips2		\n"
+	"	.set	noreorder	\n"
+	"	.set	noat		\n"
+	"1:	ll	$1, %1		\n"
+	"	bne	$1, %3, 2f	\n"
+	"	 move	%2, %4		\n"
+	"	sc	%2, %1		\n"
+	"	beqz	%2, 1b		\n"
+	"2:	 move	%0, $1		\n"
+	"	.set	pop		\n"
+	: "=&r"(orig), "+R" (*p), "=r" (tmp)
+	: "r"(cmpval), "r"(val)
+	: "memory");
 
 	return (orig);
 }
--- bind9-9.6.ESV.R1+dfsg.orig/lib/isc/ia64/include/isc/atomic.h
+++ bind9-9.6.ESV.R1+dfsg/lib/isc/ia64/include/isc/atomic.h
@@ -42,6 +42,7 @@
 		swapped = prev + val;
 		__asm__ volatile(
 			"mov ar.ccv=%2;"
+			";;"
 			"cmpxchg4.acq %0=%4,%3,ar.ccv"
 			: "=r" (swapped), "=m" (*p)
 			: "r" (prev), "r" (swapped), "m" (*p)
--- bind9-9.6.ESV.R1+dfsg.orig/lib/bind9/check.c
+++ bind9-9.6.ESV.R1+dfsg/lib/bind9/check.c
@@ -128,6 +128,7 @@
 			    "compilation time");
 #endif
 	} else if (strcasecmp(cfg_obj_asstring(obj), "random") != 0 &&
+		   strcasecmp(cfg_obj_asstring(obj), "random_1") != 0 &&
 		   strcasecmp(cfg_obj_asstring(obj), "cyclic") != 0) {
 		cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
 			    "rrset-order: invalid order '%s'",
--- bind9-9.6.ESV.R1+dfsg.orig/bin/named/server.c
+++ bind9-9.6.ESV.R1+dfsg/bin/named/server.c
@@ -690,6 +690,8 @@
 		mode = DNS_RDATASETATTR_FIXEDORDER;
 	else if (!strcasecmp(str, "random"))
 		mode = DNS_RDATASETATTR_RANDOMIZE;
+	else if (!strcasecmp(str, "random_1"))
+		mode = DNS_RDATASETATTR_RANDOMIZE|DNS_RDATASETATTR_SINGLE;
 	else if (!strcasecmp(str, "cyclic"))
 		mode = 0;
 	else
@@ -1778,6 +1780,18 @@
 		CHECK(mustbesecure(obj, view->resolver));
 
 	obj = NULL;
+	result = ns_config_get(maps, "min-cache-ttl", &obj);
+	INSIST(result == ISC_R_SUCCESS);
+	view->mincachettl = cfg_obj_asuint32(obj);
+
+	obj = NULL;
+	result = ns_config_get(maps, "min-ncache-ttl", &obj);
+	INSIST(result == ISC_R_SUCCESS);
+	view->minncachettl = cfg_obj_asuint32(obj);
+	if (view->maxncachettl > 7 * 24 * 3600)
+		view->maxncachettl = 7 * 24 * 3600;
+
+	obj = NULL;
 	result = ns_config_get(maps, "preferred-glue", &obj);
 	if (result == ISC_R_SUCCESS) {
 		str = cfg_obj_asstring(obj);
--- bind9-9.6.ESV.R1+dfsg.orig/bin/named/config.c
+++ bind9-9.6.ESV.R1+dfsg/bin/named/config.c
@@ -130,6 +130,8 @@
 	lame-ttl 600;\n\
 	max-ncache-ttl 10800; /* 3 hours */\n\
 	max-cache-ttl 604800; /* 1 week */\n\
+	min-ncache-ttl 0; /* 0 hours */\n\
+	min-cache-ttl 0; /* 0 seconds */\n\
 	transfer-format many-answers;\n\
 	max-cache-size 0;\n\
 	check-names master fail;\n\
--- bind9-9.6.ESV.R1+dfsg.orig/bin/tests/named.conf
+++ bind9-9.6.ESV.R1+dfsg/bin/tests/named.conf
@@ -54,6 +54,7 @@
 	memstatistics-file "named.memstats";	// _PATH_MEMSTATS
 
 	max-cache-ttl 999;
+	min-cache-ttl 666;
 	auth-nxdomain yes;		// always set AA on NXDOMAIN.
 					// don't set this to 'no' unless
 					// you know what you're doing -- older
@@ -155,6 +156,7 @@
 	min-refresh-time 777;
  
 	max-ncache-ttl 333;
+	min-ncache-ttl 222;
 	min-roots 15;
 	serial-queries 34;
 
