Chapter 6. Networking

bind now contains new root zone KSK

Because of the DNS Security Extensions (DNSSEC) Key Signing Key (KSK) rollover in October 2017, a new key tag has been added to the bind package with an updated root server and a trust anchor. Having an up-to-date KSK is essential for ensuring that validating DNS resolvers continue to function correctly following the rollover. (BZ#1452639)

The iptables-services package now support /etc/sysctl.d

With this update, the init scripts of the iptables or ip6tables services now recognize the configuration files in the /etc/sysctl.d directory as well as the /etc/sysctl.conf file itself. As a result, the user-provided sysctl settings stored in /etc/sysctl.d/ are now correctly taken into account when the iptables service is restarted. (BZ#1459673)