BIND 9.7.1-P1 is now available. BIND 9.7.1-P1 is a maintenance release for BIND 9.7. BIND 9.7.1-P1 addresses two backwards compatibility issues introduced in BIND 9.7.0: 1) BIND 9.7.x expected negative responses to be in a certain format, one that matches what BIND generates. However, some non-BIND servers (including custom-created servers and load balancers) did not include everything BIND expected, so BIND returned SERVFAIL to the client. 2) BIND 9.6.x and earlier accepted authoritative answers, even if the AA (authoritative data) bit was not set. This was done to work around TLD servers that were not correctly setting this bit. In BIND 9.7.0, answers without the AA bit set resulted in SERVFAIL, even if there was an answer. BIND 9.7.1-P1 fixes the bug in issue #1 and backs out the code in issue 2 (AA bit strictness), restoring the pre-9.7.x behavior. See this article for more details: http://www.isc.org/community/blog/201007/compatibility-issues-bind-970-and-971 BIND 9.7.1-P1 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz The PGP signature of the distribution is at ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.sha256.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.sha512.asc The signature was generated with the ISC public key, which is available at . A binary kit for Windows XP and Window 2003 is at ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip The PGP signature of the binary kit for Windows XP and Window 2003 is at ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.sha512.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.sha512.asc Changes since 9.7.1. --- 9.7.1-P1 released --- 2926. [rollback] Temporarially rollback change 2748. [RT #21594] 2925. [bug] Named failed to accept uncachable negative responses from insecure zones. [RT# 21555] --- 9.7.1 released ---