mdw@git.distorted.org.uk Git - adns/blob - INSTALL

   1 INSTALLATION INSTRUCTIONS for ADNS
   2
   3 1. Read the security note below.
   4
   5 2. Standard GNU package build process:
   6    $ ./configure
   7    $ make
   8    # make install
   9
  10 Unfortunately, since this is a beta, there is no good documentation
  11 yet.  For now, use the comments in the public header file adns.h.
  12
  13
  14 You will find that adns requires a reasonably standard and up to date
  15 system.
  16
  17 In particular, the build system assumes that you have ELF shared
  18 libraries.  If you don't then please don't send me patches to support
  19 your kind of shared libraries, and don't send me patches to use
  20 libtool.  I'm not interested in supporting non-ELF shared libraries.
  21 However, if you send me an appropriate patch I'd be willing to make it
  22 easy or automatic to disable the ELF shared library arrangements.
  23
  24 The adnsresfilter utility uses `tsearch' from the C library (a la SVID
  25 and X/Open).  If your C library doesn't have tsearch you will find
  26 that configure arranges for adnsresfilter not to be built.  To rectify
  27 this, install a C library containing tsearch, such as the GNU C
  28 library.  It is best if tsearch uses an automatically-balancing tree
  29 algorithm, like the glibc version does.  Simple binary trees may
  30 perform badly.
  31
  32 You will probably find that GNU Make is required.
  33
  34
  35 IPv6 SUPPORT
  36
  37 If you build adns on a system without a definition for AF_INET6 in
  38 <netinet/in.h>, you will (probably) still be able to do lookups for
  39 IPv6 addresses, etc.  However, adns will do this by including the
  40 header file adns-in6fake.h, which contains definitions of various
  41 IPv6-related structures (those in RFC2133) which I have just made up.
  42 They may not be the same as those which a later version of your system
  43 actually includes, which means that the versions of adns built
  44 before and after IPv6 support on your platform might not be binary
  45 compatible - EVEN FOR PROGRAMS WHICH DO NOT DO IPv6 LOOKUPS !
  46
  47 On platforms with a `sa_len' field this feature will not work
  48 properly.
  49
  50
  51 SECURITY AND PERFORMANCE - AN IMPORTANT NOTE
  52
  53 adns is not a full-service resolver.  It does no caching of responses
  54 at all, and has no defence against bad nameservers or fake packets
  55 which appear to come from your real nameservers.  It relies on the
  56 full-service resolvers listed in resolv.conf to handle these tasks.
  57
  58 For secure and reasonable operation you MUST run a full-service
  59 nameserver on the same system as your adns applications, or on the
  60 same local, fully trusted network.  You MUST only list such
  61 nameservers in the adns configuration (eg resolv.conf).
  62
  63 You MUST use a firewall or other means to block packets which appear
  64 to come from these nameservers, but which were actually sent by other,
  65 untrusted, entities.
  66
  67 Furthermore, adns is not DNSSEC-aware in this version; it doesn't
  68 understand even how to ask a DNSSEC-aware nameserver to perform the
  69 DNSSEC cryptographic signature checking.
  70
  71
  72 COPYRIGHT
  73
  74 This file, INSTALL, contains installation instructions and other
  75 details for adns.
  76
  77 adns is
  78  Copyright (C) 1997-2000 Ian Jackson <ian@davenant.greenend.org.uk>
  79  Copyright (C) 1999 Tony Finch <dot@dotat.at>              [1]
  80  Copyright (C) 1991 Massachusetts Institute of Technology  [2]
  81
  82 adns is free software; you can redistribute it and/or modify it under
  83 the terms of the GNU General Public License as published by the Free
  84 Software Foundation; either version 2 of the License, or (at your
  85 option) any later version.
  86
  87 This program is distributed in the hope that it will be useful, but
  88 WITHOUT ANY WARRANTY; without even the implied warranty of
  89 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  90 General Public License for more details.
  91
  92 You should have received a copy of the GNU General Public License
  93 along with userv as the file COPYING; if not, email me at the address
  94 above or write to the Free Software Foundation, 59 Temple Place -
  95 Suite 330, Boston, MA 02111-1307, USA.
  96
  97 [1] Tony Finch holds the original copyright on
  98     client/adnslogres.c and client/fanftest.c.
  99 [2] MIT hold the original copyright on the included install-sh,
 100     which came via GNU autoconf.
 101
 102 # Local variables:
 103 # mode: text
 104 # End: