dns/bind918: Remove expired port

2026-06-30 dns/bind918: End of life, please migrate to a newer version of BIND9
author: Rene Ladan <rene@FreeBSD.org> 2026-06-30 20:37:03 +0000
committer: Rene Ladan <rene@FreeBSD.org> 2026-06-30 20:37:03 +0000
commit: a9bd1ecea399cb84f5de55f41fa4c84c2fa1431f (patch)
tree: 7cd516f9f52f2b1579a26055d827be57a04bb3f9
parent: 2f81ecc09dac1333d75c7f0c18c13fb236a2f42d (diff)
20 files changed, 1 insertions, 1686 deletions
diff --git a/MOVED b/MOVED
index f6a6b6aa53d0..48765ee7bd97 100644
--- a/MOVED
+++ b/MOVED
@@ -5434,3 +5434,4 @@ net-mgmt/zabbix72-java||2026-06-30|Has expired: End of life
 net-mgmt/zabbix72-frontend||2026-06-30|Has expired: End of life
 net-mgmt/zabbix72-server||2026-06-30|Has expired: End of life
 www/forgejo11|www/forgejo-lts|2026-06-30|Has expired: End of life, please switch to www/forgejo-lts
+dns/bind918||2026-06-30|Has expired: End of life, please migrate to a newer version of BIND9
diff --git a/dns/Makefile b/dns/Makefile
index 63d20832f501..03e0c525bba8 100644
--- a/dns/Makefile
+++ b/dns/Makefile
@@ -7,7 +7,6 @@
     SUBDIR += axfr2acl
     SUBDIR += bind-tools
     SUBDIR += bind9-devel
-    SUBDIR += bind918
     SUBDIR += bind920
     SUBDIR += bindgraph
     SUBDIR += blocky
diff --git a/dns/bind918/Makefile b/dns/bind918/Makefile
deleted file mode 100644
index 16bf6bed8c39..000000000000
--- a/dns/bind918/Makefile
+++ /dev/null
@@ -1,201 +0,0 @@
-# pkg-help formatted with fmt 59 63
-
-PORTNAME=	bind
-DISTVERSION=	9.18.50
-CATEGORIES=	dns net
-MASTER_SITES=	ISC/bind9/${DISTVERSION}
-PKGNAMESUFFIX=	918
-
-MAINTAINER=	mat@FreeBSD.org
-COMMENT=	BIND DNS suite with updated DNSSEC and DNS64
-WWW=		https://www.isc.org/bind/
-
-DEPRECATED=	End of life, please migrate to a newer version of BIND9
-EXPIRATION_DATE=	2026-06-30
-
-LICENSE=	MPL20
-LICENSE_FILE=	${WRKSRC}/LICENSE
-
-LIB_DEPENDS=	libnghttp2.so:www/libnghttp2 \
-		libuv.so:devel/libuv
-
-RUN_DEPENDS=	bind-tools>0:dns/bind-tools
-
-USES=		autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl \
-		tar:xz
-
-CPE_VENDOR=	isc
-CPE_VERSION=	${DISTVERSION:C/-.*//}
-.if ${DISTVERSION:M*-*}
-CPE_UPDATE=	${DISTVERSION:C/.*-//:tl}
-.endif
-
-USE_RC_SUBR=	named
-
-GNU_CONFIGURE=	yes
-GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share
-CONFIGURE_ARGS=	--disable-linux-caps \
-		--enable-dnsrps \
-		--localstatedir=/var \
-		--sysconfdir=${ETCDIR} \
-		--with-dlopen=yes \
-		--with-openssl=${OPENSSLBASE} \
-		--with-readline=libedit
-CONFIGURE_ENV=	READLINE_CFLAGS="-L${LOCALBASE}/lib"
-
-MAKE_JOBS_UNSAFE=	yes
-
-CONFLICTS=	bind9-devel bind920
-
-ETCDIR=		${PREFIX}/etc/namedb
-
-SUB_FILES=	named.conf pkg-message
-
-PORTDOCS=	*
-
-OPTIONS_DEFINE=		DNSTAP DOCS FIXED_RRSET GEOIP IDN LARGE_FILE LMDB \
-			OVERRIDECACHE QUERYTRACE START_LATE TCP_FASTOPEN
-OPTIONS_DEFAULT=	DNSTAP ${${OSREL:R} < 15:?GSSAPI_NONE:GSSAPI_BASE} IDN \
-			LMDB STATS_JSON STATS_XML TCP_FASTOPEN
-
-OPTIONS_GROUP=		STATS
-OPTIONS_GROUP_STATS=	STATS_JSON STATS_XML
-
-OPTIONS_SINGLE=		GSSAPI
-OPTIONS_SINGLE_GSSAPI=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
-
-OPTIONS_SUB=	yes
-
-DNSTAP_DESC=		Provides fast passive logging of DNS messages
-FIXED_RRSET_DESC=	Enable fixed rrset ordering
-GSSAPI_BASE_DESC=	Using ${${OSREL:R} < 15:?Heimdal in base (nsupdate is broken):MIT in base}
-GSSAPI_HEIMDAL_DESC=	Using security/heimdal (nsupdate is broken)
-GSSAPI_MIT_DESC=	Using security/krb5
-GSSAPI_NONE_DESC=	Disable
-LARGE_FILE_DESC=	64-bit file support
-LMDB_DESC=		Use LMDB for zone management
-OVERRIDECACHE_DESC=	Use the override-cache patch
-QUERYTRACE_DESC=	Enable the very verbose query tracelogging
-START_LATE_DESC=	Start BIND late in the boot process (see help)
-STATS_DESC=		Statistics channels
-STATS_JSON_DESC=	Enable JSON statistics channel
-STATS_XML_DESC=		Enable XML statistics channel
-TCP_FASTOPEN_DESC=	RFC 7413 support
-
-DNSTAP_LIB_DEPENDS=		libfstrm.so:devel/fstrm \
-				libprotobuf-c.so:devel/protobuf-c
-DNSTAP_CONFIGURE_ENABLE=	dnstap
-
-DOCS_BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR} \
-			sphinx-build:textproc/py-sphinx
-DOCS_USES=		gmake python:env
-DOCS_ALL_TARGET=	all html
-
-FIXED_RRSET_CONFIGURE_ENABLE=	fixed-rrset
-
-GEOIP_LIB_DEPENDS=	libmaxminddb.so:net/libmaxminddb
-GEOIP_CONFIGURE_ENABLE=	geoip
-GEOIP_CONFIGURE_WITH=	maxminddb
-
-GSSAPI_BASE_USES=		gssapi
-GSSAPI_BASE_CONFIGURE_ON=	${GSSAPI_CONFIGURE_ARGS} \
-				--with-gssapi="${KRB5CONFIG}"
-
-GSSAPI_HEIMDAL_USES=		gssapi:heimdal
-GSSAPI_HEIMDAL_CONFIGURE_ON=	${GSSAPI_CONFIGURE_ARGS} \
-				--with-gssapi="${KRB5CONFIG}"
-
-GSSAPI_MIT_USES=		gssapi:mit
-GSSAPI_MIT_CONFIGURE_ON=	${GSSAPI_CONFIGURE_ARGS} \
-				--with-gssapi="${KRB5CONFIG}"
-
-GSSAPI_NONE_CONFIGURE_ON=	--without-gssapi
-
-IDN_LIB_DEPENDS=	libidn2.so:dns/libidn2
-IDN_USES=		iconv
-IDN_CONFIGURE_ON=	${ICONV_CONFIGURE_BASE} \
-			--with-libidn2=${LOCALBASE}
-IDN_CONFIGURE_OFF=	--without-libidn2
-
-LARGE_FILE_CONFIGURE_ENABLE=	largefile
-
-LMDB_LIB_DEPENDS=	liblmdb.so:databases/lmdb
-LMDB_CONFIGURE_WITH=	lmdb=${LOCALBASE}
-
-OVERRIDECACHE_EXTRA_PATCHES=	${FILESDIR}/extrapatch-bind-min-override-ttl
-
-QUERYTRACE_CONFIGURE_ENABLE=	querytrace
-
-START_LATE_SUB_LIST=		NAMED_BEFORE="LOGIN" \
-				NAMED_REQUIRE="SERVERS cleanvar"
-START_LATE_SUB_LIST_OFF=	NAMED_BEFORE="SERVERS" \
-				NAMED_REQUIRE="NETWORKING ldconfig syslogd"
-
-STATS_JSON_LIB_DEPENDS=		libjson-c.so:devel/json-c
-STATS_JSON_CONFIGURE_WITH=	json-c
-STATS_JSON_LDFLAGS=		-L${LOCALBASE}/lib -ljson-c
-
-STATS_XML_USE=			GNOME=libxml2
-STATS_XML_CONFIGURE_WITH=	libxml2
-
-TCP_FASTOPEN_CONFIGURE_ENABLE=	tcp-fastopen
-
-.include <bsd.port.options.mk>
-
-.if defined(WITH_DEBUG)
-CONFIGURE_ARGS+=	--enable-developer \
-			--enable-symtable
-USES+=			perl5
-USE_PERL5=		build
-BUILD_DEPENDS+=		cmocka>0:sysutils/cmocka
-.endif
-
-.if !${PORT_OPTIONS:MDOCS}
-CONFIGURE_ENV+=	ac_cv_path_SPHINX_BUILD=
-.endif
-
-.include <bsd.port.pre.mk>
-
-.if ${SSL_DEFAULT} == base
-SUB_LIST+=	ENGINES=/usr/lib/engines
-.else
-SUB_LIST+=	ENGINES=${LOCALBASE}/lib/engines
-.endif
-
-post-patch:
-.for FILE in check/named-checkconf.rst named/named.rst nsupdate/nsupdate.rst \
-	rndc/rndc.rst
-	@${REINPLACE_CMD} -e 's#/etc/named.conf#${ETCDIR}/named.conf#g' \
-		-e 's#/etc/rndc.conf#${ETCDIR}/rndc.conf#g' \
-		-e "s#/var\/run\/named\/named.pid#/var/run/named/pid#" \
-		${WRKSRC}/bin/${FILE}
-.endfor
-
-regen-patches:
-	cd ${.CURDIR} ; \
-		make clean ; \
-		mv files/extrapatch-bind-min-override-ttl files/patch-bind-min-override-ttl ; \
-		make extract do-patch makepatch BATCH= NO_IGNORE= PATCH_DEBUG=yes EXTRA_PATCHES= || : ; \
-		mv files/patch-bind-min-override-ttl files/extrapatch-bind-min-override-ttl
-
-post-install:
-	${MKDIR} ${STAGEDIR}${PREFIX}/etc/mtree
-	${MKDIR} ${STAGEDIR}${ETCDIR}
-.  for i in dynamic primary secondary working
-	@${MKDIR} ${STAGEDIR}${ETCDIR}/$i
-.  endfor
-	${INSTALL_DATA} ${WRKDIR}/named.conf ${STAGEDIR}${ETCDIR}/named.conf.sample
-	${INSTALL_DATA} ${FILESDIR}/named.root ${STAGEDIR}${ETCDIR}
-	${INSTALL_DATA} ${FILESDIR}/empty.db ${STAGEDIR}${ETCDIR}/primary
-	${INSTALL_DATA} ${FILESDIR}/localhost-forward.db ${STAGEDIR}${ETCDIR}/primary
-	${INSTALL_DATA} ${FILESDIR}/localhost-reverse.db ${STAGEDIR}${ETCDIR}/primary
-	${INSTALL_DATA} ${FILESDIR}/BIND.chroot.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.dist.sample
-	${INSTALL_DATA} ${FILESDIR}/BIND.chroot.local.dist ${STAGEDIR}${PREFIX}/etc/mtree/BIND.chroot.local.dist.sample
-	${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/*.so ${STAGEDIR}${PREFIX}/lib/bind/*.so
-
-post-install-DOCS-on:
-	${MKDIR} ${STAGEDIR}${DOCSDIR}/arm
-	${INSTALL_DATA} ${WRKSRC}/README.md ${STAGEDIR}${DOCSDIR}
-	cd ${WRKSRC}/doc/arm/_build/html && ${COPYTREE_SHARE} . ${STAGEDIR}${DOCSDIR}/arm
-
-.include <bsd.port.post.mk>
diff --git a/dns/bind918/distinfo b/dns/bind918/distinfo
deleted file mode 100644
index 543987465256..000000000000
--- a/dns/bind918/distinfo
+++ /dev/null
@@ -1,3 +0,0 @@
-TIMESTAMP = 1781874126
-SHA256 (bind-9.18.50.tar.xz) = a24f93be94712a8c11752294410f2f8a2510ec7fdc931d207fc61cdf30e54f4d
-SIZE (bind-9.18.50.tar.xz) = 5479148
diff --git a/dns/bind918/files/BIND.chroot.dist b/dns/bind918/files/BIND.chroot.dist
deleted file mode 100644
index 5616dd712f6b..000000000000
--- a/dns/bind918/files/BIND.chroot.dist
+++ /dev/null
@@ -1,24 +0,0 @@
-# mtree -deU -f files/BIND.chroot.dist -p tmp
-# mtree -cjnb -k uname,gname,mode -p tmp
-
-/set type=file uname=root gname=wheel mode=0755
-.               type=dir
-    dev             type=dir mode=0555
-    ..
-    etc             type=dir
-    ..
-    tmp             type=dir mode=01777
-    ..
-/set type=file uname=bind gname=bind mode=0755
-    var             type=dir uname=root gname=wheel
-        dump            type=dir
-        ..
-        log             type=dir
-        ..
-        run             type=dir
-            named           type=dir
-            ..
-        ..
-        stats           type=dir
-        ..
-    ..
diff --git a/dns/bind918/files/BIND.chroot.local.dist b/dns/bind918/files/BIND.chroot.local.dist
deleted file mode 100644
index ba248df5c430..000000000000
--- a/dns/bind918/files/BIND.chroot.local.dist
+++ /dev/null
@@ -1,18 +0,0 @@
-# mtree -deU -f files/BIND.etc.dist -p tmp
-# mtree -cjnb -k uname,gname,mode -p tmp
-
-/set type=file uname=root gname=wheel mode=0755
-.               type=dir
-    etc             type=dir
-/set type=file uname=bind gname=wheel mode=0755
-        namedb          type=dir uname=root
-            dynamic         type=dir
-            ..
-            primary         type=dir uname=root
-            ..
-            secondary       type=dir
-            ..
-            working         type=dir
-            ..
-        ..
-    ..
diff --git a/dns/bind918/files/empty.db b/dns/bind918/files/empty.db
deleted file mode 100644
index 30870e74342f..000000000000
--- a/dns/bind918/files/empty.db
+++ /dev/null
@@ -1,8 +0,0 @@
-$TTL 3h
-@ SOA @ nobody.localhost. 42 1d 12h 1w 3h
-	; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
-@	NS	@
-
-; Silence a BIND warning
-@	A	127.0.0.1
diff --git a/dns/bind918/files/extrapatch-bind-min-override-ttl b/dns/bind918/files/extrapatch-bind-min-override-ttl
deleted file mode 100644
index ef1518eea49f..000000000000
--- a/dns/bind918/files/extrapatch-bind-min-override-ttl
+++ /dev/null
@@ -1,74 +0,0 @@
-Add the override-cache-ttl feature.
-
---- bin/named/config.c.orig	2026-05-08 14:51:45 UTC
-+++ bin/named/config.c
-@@ -186,6 +186,7 @@ options {\n\
- 	notify-source *;\n\
- 	notify-source-v6 *;\n\
- 	nsec3-test-zone no;\n\
-+	override-cache-ttl 0; /* do not override */\n\
- 	parental-source *;\n\
- 	parental-source-v6 *;\n\
- 	provide-ixfr true;\n\
---- bin/named/server.c.orig	2026-05-08 14:51:45 UTC
-+++ bin/named/server.c
-@@ -4752,6 +4752,11 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewl
- 	}
- 
- 	obj = NULL;
-+	result = named_config_get(maps, "override-cache-ttl", &obj);
-+	INSIST(result == ISC_R_SUCCESS);
-+	view->overridecachettl = cfg_obj_asduration(obj);
-+
-+	obj = NULL;
- 	result = named_config_get(maps, "max-cache-ttl", &obj);
- 	INSIST(result == ISC_R_SUCCESS);
- 	view->maxcachettl = cfg_obj_asduration(obj);
---- doc/arm/reference.rst.orig	2026-05-08 14:51:45 UTC
-+++ doc/arm/reference.rst
-@@ -4405,6 +4405,10 @@ Tuning
-    cannot exceed 7 days and is silently truncated to 7 days if set to a
-    greater value.
- 
-+.. namedconf:statement:: override-cache-ttl
-+
-+   Enforce the configure cache TTL override.
-+
- .. namedconf:statement:: max-cache-ttl
-    :tags: server
-    :short: Specifies the maximum time (in seconds) that the server caches ordinary (positive) answers.
---- lib/dns/include/dns/view.h.orig	2026-05-08 14:51:45 UTC
-+++ lib/dns/include/dns/view.h
-@@ -157,6 +157,7 @@ struct dns_view {
- 	bool		      requestnsid;
- 	bool		      sendcookie;
- 	dns_ttl_t	      maxcachettl;
-+	dns_ttl_t	      overridecachettl;
- 	dns_ttl_t	      maxncachettl;
- 	dns_ttl_t	      mincachettl;
- 	dns_ttl_t	      minncachettl;
---- lib/dns/resolver.c.orig	2026-05-08 14:51:45 UTC
-+++ lib/dns/resolver.c
-@@ -6418,6 +6418,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_mes
- 		}
- 
- 		/*
-+		 * Enforce the configure cache TTL override.
-+		 */
-+                if (res->view->overridecachettl)
-+                        rdataset->ttl = res->view->overridecachettl;
-+
-+		/*
- 		 * Enforce the configure maximum cache TTL.
- 		 */
- 		if (rdataset->ttl > res->view->maxcachettl) {
---- lib/isccfg/namedconf.c.orig	2026-05-08 14:51:45 UTC
-+++ lib/isccfg/namedconf.c
-@@ -2098,6 +2098,7 @@ static cfg_clausedef_t view_clauses[] = {
- #endif /* ifdef HAVE_LMDB */
- 	{ "max-acache-size", NULL, CFG_CLAUSEFLAG_ANCIENT },
- 	{ "max-cache-size", &cfg_type_sizeorpercent, 0 },
-+	{ "override-cache-ttl", &cfg_type_duration, 0 },
- 	{ "max-cache-ttl", &cfg_type_duration, 0 },
- 	{ "max-clients-per-query", &cfg_type_uint32, 0 },
- 	{ "max-ncache-ttl", &cfg_type_duration, 0 },
diff --git a/dns/bind918/files/localhost-forward.db b/dns/bind918/files/localhost-forward.db
deleted file mode 100644
index fdd2e9ce4bee..000000000000
--- a/dns/bind918/files/localhost-forward.db
+++ /dev/null
@@ -1,8 +0,0 @@
-$TTL 3h
-localhost. SOA localhost. nobody.localhost. 42 1d 12h 1w 3h
-	; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
-	NS	localhost.
-
-	A	127.0.0.1
-	AAAA	::1
diff --git a/dns/bind918/files/localhost-reverse.db b/dns/bind918/files/localhost-reverse.db
deleted file mode 100644
index 376e94fa94a8..000000000000
--- a/dns/bind918/files/localhost-reverse.db
+++ /dev/null
@@ -1,10 +0,0 @@
-$TTL 3h
-@ SOA localhost. nobody.localhost. 42 1d 12h 1w 3h
-	; Serial, Refresh, Retry, Expire, Neg. cache TTL
-
-	NS	localhost.
-
-1.0.0	PTR	localhost.
-
-1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR localhost.
-
diff --git a/dns/bind918/files/named.conf.in b/dns/bind918/files/named.conf.in
deleted file mode 100644
index 53704771a136..000000000000
--- a/dns/bind918/files/named.conf.in
+++ /dev/null
@@ -1,378 +0,0 @@
-// Refer to the named.conf(5) and named(8) man pages, and the documentation
-// in /usr/local/share/doc/bind for more details.
-//
-// If you are going to set up an authoritative server, make sure you
-// understand the hairy details of how DNS works.  Even with
-// simple mistakes, you can break connectivity for affected parties,
-// or cause huge amounts of useless Internet traffic.
-
-options {
-	// All file and path names are relative to the chroot directory,
-	// if any, and should be fully qualified.
-	directory	"%%ETCDIR%%/working";
-	pid-file	"/var/run/named/pid";
-	dump-file	"/var/dump/named_dump.db";
-	statistics-file	"/var/stats/named.stats";
-
-// If named is being used only as a local resolver, this is a safe default.
-// For named to be accessible to the network, comment this option, specify
-// the proper IP address, or delete this option.
-	listen-on	{ 127.0.0.1; };
-
-// If you have IPv6 enabled on this system, uncomment this option for
-// use as a local resolver.  To give access to the network, specify
-// an IPv6 address, or the keyword "any".
-//	listen-on-v6	{ ::1; };
-
-// These zones are already covered by the empty zones listed below.
-// If you remove the related empty zones below, comment these lines out.
-	disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";
-	disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
-	disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
-
-// If you've got a DNS server around at your upstream provider, enter
-// its IP address here, and enable the line below.  This will make you
-// benefit from its cache, thus reduce overall DNS traffic in the Internet.
-/*
-	forwarders {
-		127.0.0.1;
-	};
-*/
-
-// If the 'forwarders' clause is not empty the default is to 'forward first'
-// which will fall back to sending a query from your local server if the name
-// servers in 'forwarders' do not have the answer.  Alternatively you can
-// force your name server to never initiate queries of its own by enabling the
-// following line:
-//	forward only;
-
-// If you wish to have forwarding configured automatically based on
-// the entries in /etc/resolv.conf, uncomment the following line and
-// set named_auto_forward=yes in /etc/rc.conf.  You can also enable
-// named_auto_forward_only (the effect of which is described above).
-//	include "%%ETCDIR%%/auto_forward.conf";
-
-	/*
-	   Modern versions of BIND use a random UDP port for each outgoing
-	   query by default in order to dramatically reduce the possibility
-	   of cache poisoning.  All users are strongly encouraged to utilize
-	   this feature, and to configure their firewalls to accommodate it.
-
-	   AS A LAST RESORT in order to get around a restrictive firewall
-	   policy you can try enabling the option below.  Use of this option
-	   will significantly reduce your ability to withstand cache poisoning
-	   attacks, and should be avoided if at all possible.
-
-	   Replace NNNNN in the example with a number between 49160 and 65530.
-	*/
-	// query-source address * port NNNNN;
-};
-
-// If you enable a local name server, don't forget to enter 127.0.0.1
-// first in your /etc/resolv.conf so this server will be queried.
-// Also, make sure to enable it in /etc/rc.conf.
-
-// The traditional root hints mechanism. Use this, OR the secondary zones below.
-zone "." { type hint; file "%%ETCDIR%%/named.root"; };
-
-/*	Slaving the following zones from the root name servers has some
-	significant advantages:
-	1. Faster local resolution for your users
-	2. No spurious traffic will be sent from your network to the roots
-	3. Greater resilience to any potential root server failure/DDoS
-
-	On the other hand, this method requires more monitoring than the
-	hints file to be sure that an unexpected failure mode has not
-	incapacitated your server.  Name servers that are serving a lot
-	of clients will benefit more from this approach than individual
-	hosts.  Use with caution.
-
-	To use this mechanism, uncomment the entries below, and comment
-	the hint zone above.
-
-	As documented at http://dns.icann.org/services/axfr/ these zones:
-	"." (the root), ARPA, IN-ADDR.ARPA, IP6.ARPA, and a few others
-	are available for AXFR from these servers on IPv4 and IPv6:
-	xfr.lax.dns.icann.org, xfr.cjr.dns.icann.org
-*/
-/*
-zone "." {
-	type secondary;
-	file "%%ETCDIR%%/secondary/root.secondary";
-	primaries {
-		192.0.32.132;           // lax.xfr.dns.icann.org
-		2620:0:2d0:202::132;    // lax.xfr.dns.icann.org
-		192.0.47.132;           // iad.xfr.dns.icann.org
-		2620:0:2830:202::132;   // iad.xfr.dns.icann.org
-	};
-	notify no;
-};
-zone "arpa" {
-	type secondary;
-	file "%%ETCDIR%%/secondary/arpa.secondary";
-	primaries {
-		192.0.32.132;           // lax.xfr.dns.icann.org
-		2620:0:2d0:202::132;    // lax.xfr.dns.icann.org
-		192.0.47.132;           // iad.xfr.dns.icann.org
-		2620:0:2830:202::132;   // iad.xfr.dns.icann.org
-	};
-	notify no;
-};
-zone "in-addr.arpa" {
-	type secondary;
-	file "%%ETCDIR%%/secondary/in-addr.arpa.secondary";
-	primaries {
-		192.0.32.132;           // lax.xfr.dns.icann.org
-		2620:0:2d0:202::132;    // lax.xfr.dns.icann.org
-		192.0.47.132;           // iad.xfr.dns.icann.org
-		2620:0:2830:202::132;   // iad.xfr.dns.icann.org
-	};
-	notify no;
-};
-zone "ip6.arpa" {
-	type secondary;
-	file "%%ETCDIR%%/secondary/ip6.arpa.secondary";
-	primaries {
-		192.0.32.132;           // lax.xfr.dns.icann.org
-		2620:0:2d0:202::132;    // lax.xfr.dns.icann.org
-		192.0.47.132;           // iad.xfr.dns.icann.org
-		2620:0:2830:202::132;   // iad.xfr.dns.icann.org
-	};
-	notify no;
-};
-*/
-
-/*	Serving the following zones locally will prevent any queries
-	for these zones leaving your network and going to the root
-	name servers.  This has two significant advantages:
-	1. Faster local resolution for your users
-	2. No spurious traffic will be sent from your network to the roots
-*/
-// RFCs 1912, 5735 and 6303 (and BCP 32 for localhost)
-zone "localhost"	{ type primary; file "%%ETCDIR%%/primary/localhost-forward.db"; };
-zone "127.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/localhost-reverse.db"; };
-zone "255.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// RFC 1912-style zone for IPv6 localhost address (RFC 6303)
-zone "0.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/localhost-reverse.db"; };
-
-// "This" Network (RFCs 1912, 5735 and 6303)
-zone "0.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// Private Use Networks (RFCs 1918, 5735 and 6303)
-zone "10.in-addr.arpa"	   { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "16.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "17.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "18.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "19.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "20.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "21.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "22.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "23.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "24.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "25.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "26.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "27.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "28.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "29.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "30.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "31.172.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "168.192.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// Shared Address Space (RFC 6598)
-zone "64.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "65.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "66.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "67.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "68.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "69.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "70.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "71.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "72.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "73.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "74.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "75.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "76.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "77.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "78.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "79.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "80.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "81.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "82.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "83.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "84.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "85.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "86.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "87.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "88.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "89.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "90.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "91.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "92.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "93.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "94.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "95.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "96.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "97.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "98.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "99.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "100.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "101.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "102.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "103.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "104.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "105.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "106.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "107.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "108.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "109.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "110.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "111.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "112.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "113.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "114.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "115.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "116.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "117.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "118.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "119.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "120.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "121.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "122.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "123.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "124.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "125.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "126.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "127.100.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// Link-local/APIPA (RFCs 3927, 5735 and 6303)
-zone "254.169.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IETF protocol assignments (RFCs 5735 and 5736)
-zone "0.0.192.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// TEST-NET-[1-3] for Documentation (RFCs 5735, 5737 and 6303)
-zone "2.0.192.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "100.51.198.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "113.0.203.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IPv6 Example Range for Documentation (RFCs 3849 and 6303)
-zone "8.b.d.0.1.0.0.2.ip6.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// Router Benchmark Testing (RFCs 2544 and 5735)
-zone "18.198.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "19.198.in-addr.arpa" { type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IANA Reserved - Old Class E Space (RFC 5735)
-zone "240.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "241.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "242.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "243.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "244.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "245.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "246.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "247.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "248.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "249.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "250.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "251.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "252.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "253.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "254.in-addr.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IPv6 Unassigned Addresses (RFC 4291)
-zone "1.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "3.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "4.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "5.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "6.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "7.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "8.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "9.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "a.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "b.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "c.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "d.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "e.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "0.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "1.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "2.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "3.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "4.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "5.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "6.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "7.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "8.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "9.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "a.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "b.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "0.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "1.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "2.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "3.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "4.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "5.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "6.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "7.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IPv6 ULA (RFCs 4193 and 6303)
-zone "c.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "d.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IPv6 Link Local (RFCs 4291 and 6303)
-zone "8.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "9.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "a.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "b.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IPv6 Deprecated Site-Local Addresses (RFCs 3879 and 6303)
-zone "c.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "d.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "e.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-zone "f.e.f.ip6.arpa"	{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// IP6.INT is Deprecated (RFC 4159)
-zone "ip6.int"		{ type primary; file "%%ETCDIR%%/primary/empty.db"; };
-
-// NB: Do not use the IP addresses below, they are faked, and only
-// serve demonstration/documentation purposes!
-//
-// Example secondary zone config entries.  It can be convenient to become
-// a secondary at least for the zone your own domain is in.  Ask
-// your network administrator for the IP address of the responsible
-// primary name server.
-//
-// Do not forget to include the reverse lookup zone!
-// This is named after the first bytes of the IP address, in reverse
-// order, with ".IN-ADDR.ARPA" appended, or ".IP6.ARPA" for IPv6.
-//
-// Before starting to set up a primary zone, make sure you fully
-// understand how DNS and BIND work.  There are sometimes
-// non-obvious pitfalls.  Setting up a secondary zone is usually simpler.
-//
-// NB: Don't blindly enable the examples below. :-)  Use actual names
-// and addresses instead.
-
-/* An example dynamic zone
-key "exampleorgkey" {
-	algorithm hmac-md5;
-	secret "sf87HJqjkqh8ac87a02lla==";
-};
-zone "example.org" {
-	type primary;
-	allow-update {
-		key "exampleorgkey";
-	};
-	file "%%ETCDIR%%/dynamic/example.org";
-};
-*/
-
-/* Example of a secondary reverse zone
-zone "1.168.192.in-addr.arpa" {
-	type secondary;
-	file "%%ETCDIR%%/secondary/1.168.192.in-addr.arpa";
-	primaries {
-		192.168.1.1;
-	};
-};
-*/
diff --git a/dns/bind918/files/named.in b/dns/bind918/files/named.in
deleted file mode 100644
index 651fc3e5dd26..000000000000
--- a/dns/bind918/files/named.in
+++ /dev/null
@@ -1,453 +0,0 @@
-#!/bin/sh
-
-# PROVIDE: named
-# REQUIRE: %%NAMED_REQUIRE%%
-# BEFORE: %%NAMED_BEFORE%%
-# KEYWORD: shutdown
-
-#
-# Add the following lines to /etc/rc.conf to enable BIND:
-# named_enable (bool):		    Run named, the DNS server (or NO).
-# named_program (str):		    Path to named, if you want a different one.
-# named_conf (str):		    Path to the configuration file
-# named_flags (str):		    Use this for flags OTHER than -u and -c
-# named_uid (str):		    User to run named as
-# named_chrootdir (str):	    Chroot directory (or "" not to auto-chroot it)
-#				    Historically, was /var/named
-# named_chroot_autoupdate (bool):   Automatically install/update chrooted
-# 				    components of named.
-# named_symlink_enable (bool):	    Symlink the chrooted pid file
-# named_wait (bool):		    Wait for working name service before exiting
-# named_wait_host (str):	    Hostname to check if named_wait is enabled
-# named_auto_forward (str):	    Set up forwarders from /etc/resolv.conf
-# named_auto_forward_only (str):    Do "forward only" instead of "forward first"
-#
-
-. /etc/rc.subr
-
-name=named
-desc="named BIND startup script"
-rcvar=named_enable
-
-load_rc_config ${name}
-
-extra_commands=reload
-
-start_precmd=named_prestart
-start_postcmd=named_poststart
-reload_cmd=named_reload
-stop_cmd=named_stop
-stop_postcmd=named_poststop
-
-named_enable=${named_enable:-"NO"}
-named_program=${named_program:-"%%PREFIX%%/sbin/named"}
-named_conf=${named_conf:-"%%ETCDIR%%/named.conf"}
-named_flags=${named_flags:-""}
-named_uid=${named_uid:-"bind"}
-named_chrootdir=${named_chrootdir:-""}
-named_chroot_autoupdate=${named_chroot_autoupdate:-"YES"}
-named_symlink_enable=${named_symlink_enable:-"YES"}
-named_wait=${named_wait:-"NO"}
-named_wait_host=${named_wait_host:-"localhost"}
-named_auto_forward=${named_auto_forward:-"NO"}
-named_auto_forward_only=${named_auto_forward_only:-"NO"}
-named_svcj_options=${named_svcj_options:-"net_basic"}
-
-# Not configuration variables but having them here keeps rclint happy
-required_dirs="${named_chrootdir}"
-_named_confdirroot="${named_conf%/*}"
-_named_confdir="${named_chrootdir}${_named_confdirroot}"
-_named_program_root="${named_program%/sbin/named}"
-_openssl_engines="%%ENGINES%%"
-
-# Needed if named.conf and rndc.conf are moved or if rndc.conf is used
-rndc_conf=${rndc_conf:-"$_named_confdir/rndc.conf"}
-rndc_key=${rndc_key:-"$_named_confdir/rndc.key"}
-
-# If running in a chroot cage, ensure that the appropriate files
-# exist inside the cage, as well as helper symlinks into the cage
-# from outside.
-#
-# As this is called after the is_running and required_dir checks
-# are made in run_rc_command(), we can safely assume ${named_chrootdir}
-# exists and named isn't running at this point (unless forcestart
-# is used).
-#
-chroot_autoupdate()
-{
-	local file
-
-	# If it's the first time around, fiddle with things and move the
-	# current configuration to the chroot.
-	if [ -d ${_named_confdirroot} -a ! -d ${_named_confdir} ]; then
-		warn "named chroot: Moving current configuration in the chroot!"
-		install -d ${_named_confdir%/*}
-		mv ${_named_confdirroot} ${_named_confdir}
-	fi
-
-	# Create (or update) the chroot directory structure
-	#
-	if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.dist ]; then
-		mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.dist \
-		    -p ${named_chrootdir}
-	else
-		warn "%%PREFIX%%/etc/mtree/BIND.chroot.dist missing,"
-		warn "${named_chrootdir} directory structure not updated"
-	fi
-	if [ -r %%PREFIX%%/etc/mtree/BIND.chroot.local.dist ]; then
-		mkdir -p ${named_chrootdir}%%PREFIX%%
-		mtree -deU -f %%PREFIX%%/etc/mtree/BIND.chroot.local.dist \
-		    -p ${named_chrootdir}%%PREFIX%%
-	else
-		warn "%%PREFIX%%/etc/mtree/BIND.chroot.local.dist missing,"
-		warn "${named_chrootdir}%%PREFIX%% directory structure not updated"
-	fi
-
-	# Create (or update) the configuration directory symlink
-	#
-	if [ ! -L "${_named_confdirroot}" ]; then
-		if [ -d "${_named_confdirroot}" ]; then
-			warn "named chroot: ${_named_confdirroot} is a directory!"
-		elif [ -e "${_named_confdirroot}" ]; then
-			warn "named chroot: ${_named_confdirroot} exists!"
-		else
-			ln -s ${_named_confdir} ${_named_confdirroot}
-		fi
-	else
-		# Make sure it points to the right place.
-		ln -shf ${_named_confdir} ${_named_confdirroot}
-	fi
-
-	# Mount a devfs in the chroot directory if needed
-	#
-	if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then
-		umount ${named_chrootdir}/dev 2>/dev/null
-		devfs_domount ${named_chrootdir}/dev devfsrules_hide_all
-		devfs -m ${named_chrootdir}/dev rule apply path null unhide
-		devfs -m ${named_chrootdir}/dev rule apply path random unhide
-	else
-		if [ -c ${named_chrootdir}/dev/null -a \
-		    -c ${named_chrootdir}/dev/random ]; then
-			info "named chroot: using pre-mounted devfs."
-		else
-			err 1 "named chroot: devfs cannot be mounted from " \
-				"within a jail. Thus a chrooted named cannot " \
-				"be run from within a jail.  Either mount the " \
-				"devfs with null and random from the host, or " \
-				"run named without chrooting it, set " \
-				"named_chrootdir=\"\" in /etc/rc.conf."
-		fi
-	fi
-
-	# The OpenSSL engines and BIND9 plugins should be present in the
-	# chroot, named loads them after chrooting.
-	null_mount_or_copy ${_openssl_engines}
-	null_mount_or_copy %%PREFIX%%/lib/bind
-
-	# Copy and/or update key files to the chroot /etc
-	#
-	for file in localtime protocols services; do
-		if [ -r /etc/${file} ] && \
-			! cmp -s /etc/${file} "${named_chrootdir}/etc/${file}"; then
-			cp -p /etc/${file} "${named_chrootdir}/etc/${file}"
-		fi
-	done
-}
-
-# Make symlinks to the correct pid file
-#
-make_symlinks()
-{
-	checkyesno named_symlink_enable &&
-	    ln -fs "${named_chrootdir}${pidfile}" ${pidfile} &&
-	    ln -fs "${named_chrootdir}${sessionkeyfile}" ${sessionkeyfile}
-}
-
-named_poststart()
-{
-	make_symlinks
-
-	if checkyesno named_wait; then
-		until ${_named_program_root}/bin/host ${named_wait_host} >/dev/null 2>&1; do
-			echo "	Waiting for nameserver to resolve ${named_wait_host}"
-			sleep 1
-		done
-	fi
-}
-
-named_reload()
-{
-	# This is a one line function, but ${named_program} is not defined early
-	# enough to be there when the reload_cmd variable is defined up there.
-	rndc reload
-}
-
-find_pidfile()
-{
-	if get_pidfile_from_conf pid-file ${named_conf}; then
-		pidfile="${_pidfile_from_conf}"
-	else
-		pidfile="/var/run/named/pid"
-	fi
-}
-
-find_sessionkeyfile()
-{
-	if get_pidfile_from_conf session-keyfile ${named_conf}; then
-		sessionkeyfile="${_pidfile_from_conf}"
-	else
-		sessionkeyfile="/var/run/named/session.key"
-	fi
-}
-
-named_stop()
-{
-	find_pidfile
-
-	# This duplicates an undesirably large amount of code from the stop
-	# routine in rc.subr in order to use rndc to shut down the process,
-	# and to give it a second chance in case rndc fails.
-	rc_pid=$(check_pidfile ${pidfile} ${command})
-	if [ -z "${rc_pid}" ]; then
-		[ -n "${rc_fast}" ] && return 0
-		_run_rc_notrunning
-		return 1
-	fi
-	echo 'Stopping named.'
-	if rndc stop; then
-		wait_for_pids ${rc_pid}
-	else
-		echo -n 'rndc failed, trying kill: '
-		kill -TERM ${rc_pid}
-		wait_for_pids ${rc_pid}
-	fi
-}
-
-named_poststop()
-{
-	if [ -n "${named_chrootdir}" ]; then
-		null_umount %%PREFIX%%/lib/bind
-		null_umount ${_openssl_engines}
-		if [ -c ${named_chrootdir}/dev/null ]; then
-			# unmount /dev
-			if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ]; then
-				umount ${named_chrootdir}/dev 2>/dev/null || true
-			else
-				warn "named chroot:" \
-					"cannot unmount devfs from inside jail!"
-			fi
-		fi
-	fi
-}
-
-can_mount()
-{
-	local kld
-	kld=$1
-	if ! load_kld $kld; then
-		return 1
-	fi
-	if [ `${SYSCTL_N} security.jail.jailed` -eq 0 ] ||
-		[ `${SYSCTL_N} security.jail.mount_allowed` -eq 1 ] ||
-		[ `${SYSCTL_N} security.jail.mount_${kld}_allowed` -eq 1 ] ; then
-		return 0
-	fi
-	return 1
-}
-
-null_mount_or_copy()
-{
-	local dir
-	dir=$1
-
-	if [ -d ${dir} ]; then
-		mkdir -p ${named_chrootdir}${dir}
-		if can_mount nullfs ; then
-			mount -t nullfs ${dir} ${named_chrootdir}${dir}
-		else
-			warn "named chroot: cannot nullfs mount OpenSSL" \
-				"engines into the chroot, will copy the shared" \
-				"libraries instead."
-			cp -f ${dir}/*.so ${named_chrootdir}${dir}
-		fi
-	fi
-}
-
-null_umount()
-{
-	local dir
-	dir=$1
-
-	if [ -d ${dir} ]; then
-		if can_mount nullfs; then
-			umount ${named_chrootdir}${dir}
-		fi
-	fi
-}
-
-create_file()
-{
-	if [ -e "$1" ]; then
-		unlink $1
-	fi
-	install -o root -g wheel -m 0644 /dev/null $1
-}
-
-rndc()
-{
-	if [ -z "${rndc_flags}" ]; then
-		if [ -s "${rndc_conf}" ] ; then
-			rndc_flags="-c ${rndc_conf}"
-		elif [ -s "${rndc_key}" ] ; then
-			rndc_flags="-k ${rndc_key}"
-		else
-			rndc_flags=""
-		fi
-	fi
-
-	${_named_program_root}/sbin/rndc ${rndc_flags} "$@"
-}
-
-named_prestart()
-{
-	# Is the user using a sandbox?
-	#
-	if [ -n "${named_chrootdir}" ]; then
-		rc_flags="${rc_flags} -t ${named_chrootdir}"
-		checkyesno named_chroot_autoupdate && chroot_autoupdate
-
-		case "${altlog_proglist}" in
-		  *named*)
-		    ;;
-		  *)
-		    warn 'Using chroot without setting altlog_proglist, logging may not'
-		    warn 'work correctly.  Run sysrc altlog_proglist+=named'
-		    ;;
-		esac
-	else
-		named_symlink_enable=NO
-	fi
-
-	find_pidfile
-	find_sessionkeyfile
-
-	if [ -n "${named_pidfile}" ]; then
-		warn 'named_pidfile: now determined from the conf file'
-	fi
-
-	if [ -n "${named_sessionkeyfile}" ]; then
-		warn 'named_sessionkeyfile: now determined from the conf file'
-	fi
-
-	piddir=`/usr/bin/dirname ${pidfile}`
-	if [ ! -d ${piddir} ]; then
-		install -d -o ${named_uid} -g ${named_uid} ${piddir}
-	fi
-
-	sessionkeydir=`/usr/bin/dirname ${sessionkeyfile}`
-	if [ ! -d ${sessionkeydir} ]; then
-		install -d -o ${named_uid} -g ${named_uid} ${sessionkeydir}
-	fi
-
-	command_args="-u ${named_uid:=root} -c ${named_conf} ${command_args}"
-
-	local line nsip firstns
-
-	# Create an rndc.key file for the user if none exists
-	#
-	confgen_command="${_named_program_root}/sbin/rndc-confgen -a -b256 -u ${named_uid} \
-	    -c ${_named_confdir}/rndc.key"
-	if [ -s "${_named_confdir}/rndc.conf" ]; then
-		unset confgen_command
-	fi
-	if [ -s "${_named_confdir}/rndc.key" ]; then
-		case `stat -f%Su ${_named_confdir}/rndc.key` in
-		root|${named_uid}) ;;
-		*) ${confgen_command} ;;
-		esac
-	else
-		${confgen_command}
-	fi
-
-	local checkconf
-
-	checkconf="${_named_program_root}/bin/named-checkconf"
-	if ! checkyesno named_chroot_autoupdate && [ -n "${named_chrootdir}" ]; then
-		checkconf="${checkconf} -t ${named_chrootdir}"
-	fi
-
-	# Create a forwarder configuration based on /etc/resolv.conf
-	if checkyesno named_auto_forward; then
-		if [ ! -s /etc/resolv.conf ]; then
-			warn "named_auto_forward enabled, but no /etc/resolv.conf"
-
-			# Empty the file in case it is included in named.conf
-			[ -s "${_named_confdir}/auto_forward.conf" ] &&
-			    create_file ${_named_confdir}/auto_forward.conf
-
-			${checkconf} ${named_conf} ||
-			    err 3 'named-checkconf for ${named_conf} failed'
-			return
-		fi
-
-		create_file /var/run/naf-resolv.conf
-		create_file /var/run/auto_forward.conf
-
-		echo '	forwarders {' > /var/run/auto_forward.conf
-
-		while read line; do
-			case "${line}" in
-			'nameserver '*|'nameserver	'*)
-				nsip=${line##nameserver[         ]}
-
-				if [ -z "${firstns}" ]; then
-					if [ ! "${nsip}" = '127.0.0.1' ]; then
-						echo 'nameserver 127.0.0.1'
-						echo "		${nsip};" >> /var/run/auto_forward.conf
-					fi
-
-					firstns=1
-				else
-					[ "${nsip}" = '127.0.0.1' ] && continue
-					echo "		${nsip};" >> /var/run/auto_forward.conf
-				fi
-				;;
-			esac
-
-			echo ${line}
-		done < /etc/resolv.conf > /var/run/naf-resolv.conf
-
-		echo '	};' >> /var/run/auto_forward.conf
-		echo '' >> /var/run/auto_forward.conf
-		if checkyesno named_auto_forward_only; then
-			echo "	forward only;" >> /var/run/auto_forward.conf
-		else
-			echo "	forward first;" >> /var/run/auto_forward.conf
-		fi
-
-		if cmp -s /etc/resolv.conf /var/run/naf-resolv.conf; then
-			unlink /var/run/naf-resolv.conf
-		else
-			[ -e /etc/resolv.conf ] && unlink /etc/resolv.conf
-			mv /var/run/naf-resolv.conf /etc/resolv.conf
-		fi
-
-		if cmp -s ${_named_confdir}/auto_forward.conf \
-		    /var/run/auto_forward.conf; then
-			unlink /var/run/auto_forward.conf
-		else
-			[ -e "${_named_confdir}/auto_forward.conf" ] &&
-			    unlink ${_named_confdir}/auto_forward.conf
-			mv /var/run/auto_forward.conf \
-			    ${_named_confdir}/auto_forward.conf
-		fi
-	else
-		# Empty the file in case it is included in named.conf
-		[ -s "${_named_confdir}/auto_forward.conf" ] &&
-		    create_file ${_named_confdir}/auto_forward.conf
-	fi
-
-	${checkconf} ${named_conf} || err 3 "named-checkconf for ${named_conf} failed"
-}
-
-run_rc_command "$1"
diff --git a/dns/bind918/files/named.root b/dns/bind918/files/named.root
deleted file mode 100644
index 77cf1e35c5bb..000000000000
--- a/dns/bind918/files/named.root
+++ /dev/null
@@ -1,92 +0,0 @@
-;       This file holds the information on root name servers needed to 
-;       initialize cache of Internet domain name servers
-;       (e.g. reference this file in the "cache  .  <file>"
-;       configuration file of BIND domain name servers). 
-; 
-;       This file is made available by InterNIC 
-;       under anonymous FTP as
-;           file                /domain/named.cache 
-;           on server           FTP.INTERNIC.NET
-;       -OR-                    RS.INTERNIC.NET
-;
-;       last update:     January 24, 2024
-;       related version of root zone:     2024012401
-; 
-; FORMERLY NS.INTERNIC.NET 
-;
-.                        3600000      NS    A.ROOT-SERVERS.NET.
-A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
-A.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:ba3e::2:30
-; 
-; FORMERLY NS1.ISI.EDU 
-;
-.                        3600000      NS    B.ROOT-SERVERS.NET.
-B.ROOT-SERVERS.NET.      3600000      A     170.247.170.2
-B.ROOT-SERVERS.NET.      3600000      AAAA  2801:1b8:10::b
-; 
-; FORMERLY C.PSI.NET 
-;
-.                        3600000      NS    C.ROOT-SERVERS.NET.
-C.ROOT-SERVERS.NET.      3600000      A     192.33.4.12
-C.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2::c
-; 
-; FORMERLY TERP.UMD.EDU 
-;
-.                        3600000      NS    D.ROOT-SERVERS.NET.
-D.ROOT-SERVERS.NET.      3600000      A     199.7.91.13
-D.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2d::d
-; 
-; FORMERLY NS.NASA.GOV
-;
-.                        3600000      NS    E.ROOT-SERVERS.NET.
-E.ROOT-SERVERS.NET.      3600000      A     192.203.230.10
-E.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:a8::e
-; 
-; FORMERLY NS.ISC.ORG
-;
-.                        3600000      NS    F.ROOT-SERVERS.NET.
-F.ROOT-SERVERS.NET.      3600000      A     192.5.5.241
-F.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2f::f
-; 
-; FORMERLY NS.NIC.DDN.MIL
-;
-.                        3600000      NS    G.ROOT-SERVERS.NET.
-G.ROOT-SERVERS.NET.      3600000      A     192.112.36.4
-G.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:12::d0d
-; 
-; FORMERLY AOS.ARL.ARMY.MIL
-;
-.                        3600000      NS    H.ROOT-SERVERS.NET.
-H.ROOT-SERVERS.NET.      3600000      A     198.97.190.53
-H.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:1::53
-; 
-; FORMERLY NIC.NORDU.NET
-;
-.                        3600000      NS    I.ROOT-SERVERS.NET.
-I.ROOT-SERVERS.NET.      3600000      A     192.36.148.17
-I.ROOT-SERVERS.NET.      3600000      AAAA  2001:7fe::53
-; 
-; OPERATED BY VERISIGN, INC.
-;
-.                        3600000      NS    J.ROOT-SERVERS.NET.
-J.ROOT-SERVERS.NET.      3600000      A     192.58.128.30
-J.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:c27::2:30
-; 
-; OPERATED BY RIPE NCC
-;
-.                        3600000      NS    K.ROOT-SERVERS.NET.
-K.ROOT-SERVERS.NET.      3600000      A     193.0.14.129
-K.ROOT-SERVERS.NET.      3600000      AAAA  2001:7fd::1
-; 
-; OPERATED BY ICANN
-;
-.                        3600000      NS    L.ROOT-SERVERS.NET.
-L.ROOT-SERVERS.NET.      3600000      A     199.7.83.42
-L.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:9f::42
-; 
-; OPERATED BY WIDE
-;
-.                        3600000      NS    M.ROOT-SERVERS.NET.
-M.ROOT-SERVERS.NET.      3600000      A     202.12.27.33
-M.ROOT-SERVERS.NET.      3600000      AAAA  2001:dc3::35
-; End of file
diff --git a/dns/bind918/files/patch-bin_named_include_named_globals.h b/dns/bind918/files/patch-bin_named_include_named_globals.h
deleted file mode 100644
index 5e997fac3d8c..000000000000
--- a/dns/bind918/files/patch-bin_named_include_named_globals.h
+++ /dev/null
@@ -1,13 +0,0 @@
-We reference the pid file as being run/named/pid everywere else.
-
---- bin/named/include/named/globals.h.orig	2024-12-03 13:00:51 UTC
-+++ bin/named/include/named/globals.h
-@@ -130,7 +130,7 @@ EXTERN bool named_g_forcelock		   INIT(false);
- 
- #if NAMED_RUN_PID_DIR
- EXTERN const char *named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR "/run/named/"
--								   "named.pid");
-+								   "pid");
- #else  /* if NAMED_RUN_PID_DIR */
- EXTERN const char *named_g_defaultpidfile INIT(NAMED_LOCALSTATEDIR "/run/"
- 								   "named.pid");
diff --git a/dns/bind918/files/patch-configure.ac b/dns/bind918/files/patch-configure.ac
deleted file mode 100644
index a5d7ab563b46..000000000000
--- a/dns/bind918/files/patch-configure.ac
+++ /dev/null
@@ -1,13 +0,0 @@
-automake has warnings, it is ok here.
-
---- configure.ac.orig	2022-03-07 08:05:16 UTC
-+++ configure.ac
-@@ -48,7 +48,7 @@ AC_CANONICAL_HOST
- AC_CANONICAL_TARGET
- 
- AC_CONFIG_SRCDIR([bin/named/main.c])
--AM_INIT_AUTOMAKE([1.14 tar-pax foreign subdir-objects dist-xz no-dist-gzip -Wall -Werror])
-+AM_INIT_AUTOMAKE([1.14 tar-pax foreign subdir-objects dist-xz no-dist-gzip -Wall])
- AM_SILENT_RULES([yes])
- AM_EXTRA_RECURSIVE_TARGETS([test unit doc])
- 
diff --git a/dns/bind918/files/patch-no-bind-tools b/dns/bind918/files/patch-no-bind-tools
deleted file mode 100644
index a79c4832e4de..000000000000
--- a/dns/bind918/files/patch-no-bind-tools
+++ /dev/null
@@ -1,44 +0,0 @@
-Exclude the "tools" from building and installing.
-
---- bin/Makefile.am.orig	2021-09-17 07:10:48 UTC
-+++ bin/Makefile.am
-@@ -1 +1 @@
--SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen tests plugins
-+SUBDIRS = named rndc tools check confgen tests plugins
---- bin/tools/Makefile.am.orig	2021-09-17 07:10:48 UTC
-+++ bin/tools/Makefile.am
-@@ -9,11 +9,7 @@ LDADD +=			\
- 	$(LIBISC_LIBS)
- 
- bin_PROGRAMS =			\
--	arpaname		\
--	mdig			\
--	named-journalprint	\
--	named-rrchecker		\
--	nsec3hash
-+	named-journalprint
- 
- arpaname_LDADD =		\
- 	$(LIBISC_LIBS)
-@@ -27,21 +23,6 @@
- 	$(LIBISCCFG_LIBS)	\
- 	$(LIBDNS_LIBS)		\
- 	$(LIBISC_LIBS)
--
--if HAVE_DNSTAP
--bin_PROGRAMS +=			\
--	dnstap-read
--
--dnstap_read_CPPFLAGS =		\
--	$(AM_CPPFLAGS)		\
--	$(DNSTAP_CFLAGS)	\
--	-I$(top_builddir)/lib/dns
--
--dnstap_read_LDADD =		\
--	$(LIBDNS_LIBS)		\
--	$(LIBISC_LIBS)		\
--	$(DNSTAP_LIBS)
--endif
- 
- if HAVE_LMDB
- bin_PROGRAMS +=			\
diff --git a/dns/bind918/files/pkg-message.in b/dns/bind918/files/pkg-message.in
deleted file mode 100644
index 1150a96522ff..000000000000
--- a/dns/bind918/files/pkg-message.in
+++ /dev/null
@@ -1,22 +0,0 @@
-[
-{
-# %!fmt 59 63
-  message: <<EOT
-BIND requires configuration of rndc, including a "secret"
-key.  The easiest, and most secure way to configure rndc is
-to run 'rndc-confgen -a' to generate the proper conf file,
-with a new random key, and appropriate file permissions.
-
-The %%PREFIX%%/etc/rc.d/named script will do that for you.
-
-If using syslog to log the BIND9 activity, and using a
-chroot'ed installation, you will need to tell syslog to install
-a log socket in the BIND9 chroot by running:
-
-  # sysrc altlog_proglist+=named
-
-And then restarting syslogd with: service syslogd restart
-EOT
-  type: install
-}
-]
diff --git a/dns/bind918/pkg-descr b/dns/bind918/pkg-descr
deleted file mode 100644
index 0563e65ca320..000000000000
--- a/dns/bind918/pkg-descr
+++ /dev/null
@@ -1,13 +0,0 @@
-BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND
-architecture.  Some of the important features of BIND 9 are:
-
-DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests)
-IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA)
-     Experimental IPv6 Resolver Library
-DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0
-     Improved standards conformance
-Views: One server process can provide multiple "views" of the DNS namespace,
-     e.g. an "inside" view to certain clients, and an "outside" view to others.
-Multiprocessor Support
-
-See the CHANGES file for more information on new features.
diff --git a/dns/bind918/pkg-help b/dns/bind918/pkg-help
deleted file mode 100644
index 55cdb63c117c..000000000000
--- a/dns/bind918/pkg-help
+++ /dev/null
@@ -1,14 +0,0 @@
-                            GOST
-If using a chrooted instance of BIND on FreeBSD 8.x and 9.x,
-the OpenSSL engines MUST be accessible from within the chroot.
-If BIND is chrooted in /var/named, this can be achieved by
-either copying content of /usr/local/lib/engines into
-/var/named/usr/local/lib/engines, or by creating that directory
-and adding this line to /etc/fstab:
-/usr/local/lib/engines  /var/named/usr/local/lib/engines nullfs ro 0 0
-
-
-                         START_LATE
-Most of the time, BIND needs to start early in the boot
-process.  Enable this if BIND starts too early for you and
-you need it to start later.
diff --git a/dns/bind918/pkg-plist b/dns/bind918/pkg-plist
deleted file mode 100644
index f9b034d61bac..000000000000
--- a/dns/bind918/pkg-plist
+++ /dev/null
@@ -1,297 +0,0 @@
-bin/named-checkconf
-bin/named-checkzone
-bin/named-compilezone
-bin/named-journalprint
-%%LMDB%%bin/named-nzd2nzf
-@sample etc/mtree/BIND.chroot.dist.sample
-@sample etc/mtree/BIND.chroot.local.dist.sample
-%%ETCDIR%%/bind.keys
-%%ETCDIR%%/primary/empty.db
-%%ETCDIR%%/primary/localhost-forward.db
-%%ETCDIR%%/primary/localhost-reverse.db
-@sample %%ETCDIR%%/named.conf.sample
-%%ETCDIR%%/named.root
-include/bind9/check.h
-include/bind9/getaddresses.h
-include/dns/acl.h
-include/dns/adb.h
-include/dns/badcache.h
-include/dns/bit.h
-include/dns/byaddr.h
-include/dns/cache.h
-include/dns/callbacks.h
-include/dns/catz.h
-include/dns/cert.h
-include/dns/client.h
-include/dns/clientinfo.h
-include/dns/compress.h
-include/dns/db.h
-include/dns/dbiterator.h
-include/dns/diff.h
-include/dns/dispatch.h
-include/dns/dlz.h
-include/dns/dlz_dlopen.h
-include/dns/dns64.h
-include/dns/dnsrps.h
-include/dns/dnssec.h
-include/dns/dnstap.h
-include/dns/ds.h
-include/dns/dsdigest.h
-include/dns/dsync.h
-include/dns/dyndb.h
-include/dns/ecs.h
-include/dns/edns.h
-include/dns/enumclass.h
-include/dns/enumtype.h
-include/dns/events.h
-include/dns/fixedname.h
-include/dns/forward.h
-include/dns/geoip.h
-include/dns/ipkeylist.h
-include/dns/iptable.h
-include/dns/journal.h
-include/dns/kasp.h
-include/dns/keydata.h
-include/dns/keyflags.h
-include/dns/keymgr.h
-include/dns/keytable.h
-include/dns/keyvalues.h
-include/dns/librpz.h
-include/dns/log.h
-include/dns/lookup.h
-include/dns/master.h
-include/dns/masterdump.h
-include/dns/message.h
-include/dns/name.h
-include/dns/ncache.h
-include/dns/nsec.h
-include/dns/nsec3.h
-include/dns/nta.h
-include/dns/opcode.h
-include/dns/order.h
-include/dns/peer.h
-include/dns/private.h
-include/dns/rbt.h
-include/dns/rcode.h
-include/dns/rdata.h
-include/dns/rdataclass.h
-include/dns/rdatalist.h
-include/dns/rdataset.h
-include/dns/rdatasetiter.h
-include/dns/rdataslab.h
-include/dns/rdatastruct.h
-include/dns/rdatatype.h
-include/dns/request.h
-include/dns/resolver.h
-include/dns/result.h
-include/dns/rootns.h
-include/dns/rpz.h
-include/dns/rriterator.h
-include/dns/rrl.h
-include/dns/sdb.h
-include/dns/sdlz.h
-include/dns/secalg.h
-include/dns/secproto.h
-include/dns/soa.h
-include/dns/ssu.h
-include/dns/stats.h
-include/dns/time.h
-include/dns/tkey.h
-include/dns/transport.h
-include/dns/tsec.h
-include/dns/tsig.h
-include/dns/ttl.h
-include/dns/types.h
-include/dns/update.h
-include/dns/validator.h
-include/dns/view.h
-include/dns/xfrin.h
-include/dns/zone.h
-include/dns/zonekey.h
-include/dns/zoneverify.h
-include/dns/zt.h
-include/dst/dst.h
-include/dst/gssapi.h
-include/irs/resconf.h
-include/isc/aes.h
-include/isc/align.h
-include/isc/app.h
-include/isc/assertions.h
-include/isc/astack.h
-include/isc/atomic.h
-include/isc/attributes.h
-include/isc/backtrace.h
-include/isc/barrier.h
-include/isc/base32.h
-include/isc/base64.h
-include/isc/buffer.h
-include/isc/cmocka.h
-include/isc/commandline.h
-include/isc/condition.h
-include/isc/counter.h
-include/isc/crc64.h
-include/isc/deprecated.h
-include/isc/dir.h
-include/isc/endian.h
-include/isc/errno.h
-include/isc/error.h
-include/isc/event.h
-include/isc/eventclass.h
-include/isc/file.h
-include/isc/formatcheck.h
-include/isc/fuzz.h
-include/isc/glob.h
-include/isc/hash.h
-include/isc/heap.h
-include/isc/hex.h
-include/isc/hmac.h
-include/isc/ht.h
-include/isc/httpd.h
-include/isc/interfaceiter.h
-include/isc/iterated_hash.h
-include/isc/lang.h
-include/isc/lex.h
-include/isc/list.h
-include/isc/log.h
-include/isc/magic.h
-include/isc/managers.h
-include/isc/md.h
-include/isc/mem.h
-include/isc/meminfo.h
-include/isc/mutex.h
-include/isc/mutexblock.h
-include/isc/net.h
-include/isc/netaddr.h
-include/isc/netdb.h
-include/isc/netmgr.h
-include/isc/netscope.h
-include/isc/nonce.h
-include/isc/offset.h
-include/isc/once.h
-include/isc/os.h
-include/isc/parseint.h
-include/isc/pool.h
-include/isc/portset.h
-include/isc/print.h
-include/isc/quota.h
-include/isc/radix.h
-include/isc/random.h
-include/isc/ratelimiter.h
-include/isc/refcount.h
-include/isc/regex.h
-include/isc/region.h
-include/isc/resource.h
-include/isc/result.h
-include/isc/rwlock.h
-include/isc/safe.h
-include/isc/serial.h
-include/isc/siphash.h
-include/isc/sockaddr.h
-include/isc/stat.h
-include/isc/stats.h
-include/isc/stdatomic.h
-include/isc/stdio.h
-include/isc/stdtime.h
-include/isc/strerr.h
-include/isc/string.h
-include/isc/symtab.h
-include/isc/syslog.h
-include/isc/task.h
-include/isc/taskpool.h
-include/isc/thread.h
-include/isc/time.h
-include/isc/timer.h
-include/isc/tls.h
-include/isc/tm.h
-include/isc/types.h
-include/isc/url.h
-include/isc/utf8.h
-include/isc/util.h
-include/isccc/alist.h
-include/isccc/base64.h
-include/isccc/cc.h
-include/isccc/ccmsg.h
-include/isccc/events.h
-include/isccc/sexpr.h
-include/isccc/symtab.h
-include/isccc/symtype.h
-include/isccc/types.h
-include/isccc/util.h
-include/isccfg/aclconf.h
-include/isccfg/cfg.h
-include/isccfg/duration.h
-include/isccfg/grammar.h
-include/isccfg/kaspconf.h
-include/isccfg/log.h
-include/isccfg/namedconf.h
-include/ns/client.h
-include/ns/events.h
-include/ns/hooks.h
-include/ns/interfacemgr.h
-include/ns/listenlist.h
-include/ns/log.h
-include/ns/notify.h
-include/ns/query.h
-include/ns/server.h
-include/ns/sortlist.h
-include/ns/stats.h
-include/ns/types.h
-include/ns/update.h
-include/ns/xfrout.h
-lib/bind/filter-a.so
-lib/bind/filter-aaaa.so
-lib/libbind9.so
-lib/libbind9-9.18.50.so
-lib/libdns.so
-lib/libdns-9.18.50.so
-lib/libirs.so
-lib/libirs-9.18.50.so
-lib/libisc.so
-lib/libisc-9.18.50.so
-lib/libisccc.so
-lib/libisccc-9.18.50.so
-lib/libisccfg.so
-lib/libisccfg-9.18.50.so
-lib/libns.so
-lib/libns-9.18.50.so
-@comment share/man/man1/arpaname.1.gz
-@comment share/man/man1/delv.1.gz
-@comment share/man/man1/dig.1.gz
-@comment share/man/man1/dnssec-cds.1.gz
-@comment share/man/man1/dnssec-dsfromkey.1.gz
-@comment share/man/man1/dnssec-importkey.1.gz
-@comment share/man/man1/dnssec-keyfromlabel.1.gz
-@comment share/man/man1/dnssec-keygen.1.gz
-@comment share/man/man1/dnssec-revoke.1.gz
-@comment share/man/man1/dnssec-settime.1.gz
-@comment share/man/man1/dnssec-signzone.1.gz
-@comment share/man/man1/dnssec-verify.1.gz
-@comment share/man/man1/dnstap-read.1.gz
-@comment share/man/man1/host.1.gz
-@comment share/man/man1/mdig.1.gz
-share/man/man1/named-checkconf.1.gz
-share/man/man1/named-checkzone.1.gz
-share/man/man1/named-compilezone.1.gz
-share/man/man1/named-journalprint.1.gz
-%%LMDB%%share/man/man1/named-nzd2nzf.1.gz
-@comment share/man/man1/named-rrchecker.1.gz
-@comment share/man/man1/nsec3hash.1.gz
-@comment share/man/man1/nslookup.1.gz
-@comment share/man/man1/nsupdate.1.gz
-share/man/man5/named.conf.5.gz
-share/man/man5/rndc.conf.5.gz
-share/man/man8/ddns-confgen.8.gz
-share/man/man8/filter-a.8.gz
-share/man/man8/filter-aaaa.8.gz
-share/man/man8/named.8.gz
-share/man/man8/rndc-confgen.8.gz
-share/man/man8/rndc.8.gz
-share/man/man8/tsig-keygen.8.gz
-sbin/ddns-confgen
-sbin/named
-sbin/rndc
-sbin/rndc-confgen
-sbin/tsig-keygen
-@dir(bind,bind,) %%ETCDIR%%/dynamic
-@dir(bind,bind,) %%ETCDIR%%/secondary
-@dir(bind,bind,) %%ETCDIR%%/working
author	Rene Ladan <rene@FreeBSD.org>	2026-06-30 20:37:03 +0000
committer	Rene Ladan <rene@FreeBSD.org>	2026-06-30 20:37:03 +0000
commit	a9bd1ecea399cb84f5de55f41fa4c84c2fa1431f (patch)
tree	7cd516f9f52f2b1579a26055d827be57a04bb3f9
parent	2f81ecc09dac1333d75c7f0c18c13fb236a2f42d (diff)