Allow supplying the nameservers to start recursion at (per zone).
This is useful for reverse zones of RFC1918 space.
* dsa-check-bacula: exit status fix.
+ * dsa-check-hpacucli:
+ - support filtering controllers.
+ - add an option to accept no-controllers as an OK state.
+ * remove weak keys check
+ * dsa-check-dnssec-delegation
+ - handle zones with no keys that have the SEP bit.
+ - warn on all domains where parent has a non-empty DS bit that does
+ not match ours, even if we did not expect it to have one at all.
+ * dsa-check-zone-rrsig-expiration-many:
+ - expect dnssec by default now.
+ * dsa-check-zone-rrsig-expiration:
+ - in the OK message, clarify we only check sigs at the zone apex.
+ * dsa-check-dnssec-delegation:
+ - accept any ds/dnskey combination whose intersection is not empty.
+ (previously we required them to match exactly.)
-- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200