Make axfrdns work with BIND9 slaves who use IXFR by Luc Pardon

IXFR patch which makes axfrdns work with BIND9 slaves using IXFR.

This patch was originally posted by Luc Pardon and can be downloaded at:

http://www.fefe.de/dns/djbdns-1.05-ixfr.diff.gz

Signed-off-by: Giam Teck Choon <giamteckchoon@gmail.com>
Allow any client to access dnscache by Uwe Ohse

A little patch for dnscache to allow it to assume that clients are allowed to
query (which is useful if you allow or deny access to your dns server by some
other method, like packet filtering).

http://ohse.de/uwe/patches/dnscache-0.61.okclient.patch

Signed-off-by: Giam Teck Choon <giamteckchoon@gmail.com>
Making dnscache ignore referral responses in "forwardonly" mode by Jonathan de Boyne Pollard

There is a problem with dnscache when it is in "forwardonly" mode that permits
the creation of a proxy loop.

http://homepage.ntlworld.com/jonathan.deboynepollard/FGA/djbdns-problems.html#dnscache-proxy-loop

This patch modifies the behaviour of dnscache such that "forwardonly" mode is
fully enforced. Referrals will not be followed, and only the servers listed in
servers/* will be queried.

http://homepage.ntlworld.com/jonathan.deboynepollard/Softwares/djbdns/dnscache-strict-forwardonly.patch

With this patch, eliminating proxy loops is purely a local administrative
matter. The DNS administrator is responsible for ensuring that dnscache is not
configured to forward back to itself (either directly or indirectly, via other
forwarding proxy DNS servers), by ensuring that

* the IP address in ${IP},
* the IP addresses of any other forwarding proxy DNS servers, and
* any equivalent addresses

are not listed in any of the servers/* files.

Signed-off-by: Giam Teck Choon <giamteckchoon@gmail.com>