| | 1 | INSTALLATION INSTRUCTIONS for ADNS |
| | 2 | |
| | 3 | 1. Read the security note below. |
| | 4 | |
| | 5 | 2. Standard GNU package build process: |
| | 6 | $ ./configure |
| | 7 | $ make |
| | 8 | # make install |
| | 9 | |
| | 10 | Unfortunately, since this is a beta, there is no good documentation |
| | 11 | yet. For now, use the comments in the public header file adns.h. |
| | 12 | |
| | 13 | |
| | 14 | You will find that adns requires a reasonably standard and up to date |
| | 15 | system. |
| | 16 | |
| | 17 | The following platforms have been tested at at least some point and |
| | 18 | should work - please report if they don't: |
| | 19 | [adns] OS |
| | 20 | pre-1.0 Linux glibc 2.1 (actually tested on Debian 2.2). |
| | 21 | pre-1.0 FreeBSD 3.2 |
| | 22 | pre-1.0 Solaris 2.6, 2.7, 2.8 |
| | 23 | pre-1.0 HP-UX 10.20, 11.00 |
| | 24 | pre-1.0 IRIX 6.5 *not* with GCC [1], --disable-dynamic |
| | 25 | AIX no dynamic |
| | 26 | Later versions of the same OS should work too. [adns] is the latest |
| | 27 | version of adns that has been tested. Usually entries in this table |
| | 28 | mean they pass adns's own regression test, when compiled with GCC. |
| | 29 | Notes/known problems: |
| | 30 | [1] IRIX 6.5 inet_ntoa seems to break with GCC. |
| | 31 | |
| | 32 | The following platforms are known to be deficient and will not work: |
| | 33 | Solaris 2.5 Lacks vsnprintf - install glibc ? |
| | 34 | TruUnix64 (DEC UNIX 4.0f) Lacks vsnprintf - install glibc ? |
| | 35 | Please don't report these problems unless you have a nice, |
| | 36 | straightforward solution or workaround for them. |
| | 37 | |
| | 38 | In particular, the build system assumes that you have ELF shared |
| | 39 | libraries. If you don't then please don't send me patches to support |
| | 40 | your kind of shared libraries, and don't send me patches to use |
| | 41 | libtool. I'm not interested in supporting non-ELF shared libraries, |
| | 42 | and I dislike libtool. If you do not have ELF shared libraries then |
| | 43 | please use the --disable-shared configure option. |
| | 44 | |
| | 45 | The adnsresfilter utility uses `tsearch' from the C library (a la SVID |
| | 46 | and X/Open). If your C library doesn't have tsearch you will find |
| | 47 | that configure arranges for adnsresfilter not to be built. To rectify |
| | 48 | this, install a C library containing tsearch, such as the GNU C |
| | 49 | library. It is best if tsearch uses an automatically-balancing tree |
| | 50 | algorithm, like the glibc version does. Simple binary trees may |
| | 51 | perform badly. |
| | 52 | |
| | 53 | You will probably find that GNU Make is required. |
| | 54 | |
| | 55 | |
| | 56 | SECURITY AND PERFORMANCE - AN IMPORTANT NOTE |
| | 57 | |
| | 58 | adns is not a full-service resolver. It does no caching of responses |
| | 59 | at all, and has no defence against bad nameservers or fake packets |
| | 60 | which appear to come from your real nameservers. It relies on the |
| | 61 | full-service resolvers listed in resolv.conf to handle these tasks. |
| | 62 | |
| | 63 | For secure and reasonable operation you MUST run a full-service |
| | 64 | nameserver on the same system as your adns applications, or on the |
| | 65 | same local, fully trusted network. You MUST only list such |
| | 66 | nameservers in the adns configuration (eg resolv.conf). |
| | 67 | |
| | 68 | You MUST use a firewall or other means to block packets which appear |
| | 69 | to come from these nameservers, but which were actually sent by other, |
| | 70 | untrusted, entities. |
| | 71 | |
| | 72 | Furthermore, adns is not DNSSEC-aware in this version; it doesn't |
| | 73 | understand even how to ask a DNSSEC-aware nameserver to perform the |
| | 74 | DNSSEC cryptographic signature checking. |
| | 75 | |
| | 76 | |
| | 77 | COPYRIGHT |
| | 78 | |
| | 79 | This file, INSTALL, contains installation instructions and other |
| | 80 | details for adns. It is |
| | 81 | Copyright (C) 1997-2000 Ian Jackson <ian@davenant.greenend.org.uk> |
| | 82 | |
| | 83 | adns is |
| | 84 | Copyright (C) 1997-2000 Ian Jackson <ian@davenant.greenend.org.uk> |
| | 85 | Copyright (C) 1999 Tony Finch <dot@dotat.at> [1] |
| | 86 | Copyright (C) 1991 Massachusetts Institute of Technology [2] |
| | 87 | |
| | 88 | adns is free software; you can redistribute it and/or modify it under |
| | 89 | the terms of the GNU General Public License as published by the Free |
| | 90 | Software Foundation; either version 2 of the License, or (at your |
| | 91 | option) any later version. |
| | 92 | |
| | 93 | This program is distributed in the hope that it will be useful, but |
| | 94 | WITHOUT ANY WARRANTY; without even the implied warranty of |
| | 95 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| | 96 | General Public License for more details. |
| | 97 | |
| | 98 | You should have received a copy of the GNU General Public License |
| | 99 | along with adns as the file COPYING; if not, email me at the address |
| | 100 | above or write to the Free Software Foundation, 59 Temple Place - |
| | 101 | Suite 330, Boston, MA 02111-1307, USA. |
| | 102 | |
| | 103 | [1] Tony Finch holds the original copyright on |
| | 104 | client/adnslogres.c and client/fanftest.c. |
| | 105 | [2] MIT hold the original copyright on the included install-sh, |
| | 106 | which came via GNU autoconf. |
| | 107 | |
| | 108 | # Local variables: |
| | 109 | # mode: text |
| | 110 | # End: |
~mdw / adns / blame_incremental