da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw [<!ENTITY mdash "&#8212;">]>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

148c5f43199ca0b43fc8e3b643aab11cd66ea327Alan Wright<refentry id="man.named-checkzone">

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <refentryinfo>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <date>June 13, 2000</date>

89dc44ce9705974a8bc4a39f1e878a0491a5be61jose borrego </refentryinfo>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <refmeta>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <refentrytitle><application>named-checkzone</application></refentrytitle>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <manvolnum>8</manvolnum>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <refmiscinfo>BIND9</refmiscinfo>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross </refmeta>

b3700b074e637f8c6991b70754c88a2cfffb246bGordon Ross

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <docinfo>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <copyright>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <year>2004</year>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <year>2005</year>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <year>2006</year>

68b2bbf26c7040fea4281dcb58b81e7627e46f34Gordon Ross <holder>Internet Systems Consortium, Inc. ("ISC")</holder>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross </copyright>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <copyright>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <year>2000</year>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <year>2001</year>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <year>2002</year>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <holder>Internet Software Consortium.</holder>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </copyright>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </docinfo>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refnamediv>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refname><application>named-checkzone</application></refname>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <refname><application>named-compilezone</application></refname>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <refpurpose>zone file validity checking or converting tool</refpurpose>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </refnamediv>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <refsynopsisdiv>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <cmdsynopsis>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <command>named-checkzone</command>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <arg><option>-d</option></arg>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <arg><option>-j</option></arg>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <arg><option>-q</option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-v</option></arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>

c7e79765a5bdcd4e6f05ea8effc8c7ce07e8a37aAlexander Pyhalov <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-M <replaceable class="parameter">mode</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg><option>-S <replaceable class="parameter">mode</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>

b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-D</option></arg>

67e3a03ed4a2813074d36330f062ed6e593a4937rie <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg choice="req">zonename</arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <arg choice="req">filename</arg>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross </cmdsynopsis>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <cmdsynopsis>

12b65585e720714b31036daaa2b30eb76014048eGordon Ross <command>named-compilezone</command>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-d</option></arg>

86d7016b0051dd58772baafe5b5bcee51d560b05Gordon Ross <arg><option>-j</option></arg>

86d7016b0051dd58772baafe5b5bcee51d560b05Gordon Ross <arg><option>-q</option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-v</option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-C <replaceable class="parameter">mode</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-D</option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg choice="req">zonename</arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <arg choice="req">filename</arg>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </cmdsynopsis>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </refsynopsisdiv>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <refsect1>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <title>DESCRIPTION</title>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <para><command>named-checkzone</command>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw checks the syntax and integrity of a zone file. It performs the

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw same checks as <command>named</command> does when loading a

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw zone. This makes <command>named-checkzone</command> useful for

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw checking zone files before configuring them into a name server.

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw </para>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <para>

da6c28aaf62fa55f0fdb8004aa40f88f23bf53f0amw <command>named-compilezone</command> is similar to

9fb67ea305c66b6a297583b9b0db6796b0dfe497afshin salek ardakani - Sun Microsystems - Irvine United States <command>named-checkzone</command>, but it always dumps the

b3700b074e637f8c6991b70754c88a2cfffb246bGordon Ross zone contents to a specified file in a specified format.

b3700b074e637f8c6991b70754c88a2cfffb246bGordon Ross Additionally, it applies stricter check levels by default,

since the dump output will be used as an actual zone file

loaded by <command>named</command>.

When manaully specified otherwise, the check levels must at

least be as strict as those specified in the

<command>named</command> configuration file.

</para>

</refsect1>

<refsect1>

<title>OPTIONS</title>

<variablelist>

<varlistentry>

<term>-d</term>

<listitem>

<para>

Enable debugging.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-q</term>

<listitem>

<para>

Quiet mode - exit code only.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-v</term>

<listitem>

<para>

Print the version of the <command>named-checkzone</command>

program and exit.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-j</term>

<listitem>

<para>

When loading the zone file read the journal if it exists.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-c <replaceable class="parameter">class</replaceable></term>

<listitem>

<para>

Specify the class of the zone. If not specified "IN" is assumed.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-i <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Perform post load zone integrity checks. Possible modes are

<command>"full"</command> (default),

<command>"full-sibling"</command>,

<command>"local"</command>,

<command>"local-sibling"</command> and

<command>"none"</command>.

</para>

<para>

Mode <command>"full"</command> checks that MX records

refer to A or AAAA record (both in-zone and out-of-zone

hostnames). Mode <command>"local"</command> only

checks MX records which refer to in-zone hostnames.

</para>

<para>

Mode <command>"full"</command> checks that SRV records

refer to A or AAAA record (both in-zone and out-of-zone

hostnames). Mode <command>"local"</command> only

checks SRV records which refer to in-zone hostnames.

</para>

<para>

Mode <command>"full"</command> checks that delegation NS

records refer to A or AAAA record (both in-zone and out-of-zone

hostnames). It also checks that glue addresses records

in the zone match those advertised by the child.

Mode <command>"local"</command> only checks NS records which

refer to in-zone hostnames or that some required glue exists,

that is when the nameserver is in a child zone.

</para>

<para>

Mode <command>"full-sibling"</command> and

<command>"local-sibling"</command> disable sibling glue

checks but are otherwise the same as <command>"full"</command>

and <command>"local"</command> respectively.

</para>

<para>

Mode <command>"none"</command> disables the checks.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-f <replaceable class="parameter">format</replaceable></term>

<listitem>

<para>

Specify the format of the zone file.

Possible formats are <command>"text"</command> (default)

and <command>"raw"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-F <replaceable class="parameter">format</replaceable></term>

<listitem>

<para>

Specify the format of the output file specified.

Possible formats are <command>"text"</command> (default)

and <command>"raw"</command>.

For <command>named-checkzone</command>,

this does not cause any effects unless it dumps the zone

contents.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-k <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Perform <command>"check-names"</command> checks with the

specified failure mode.

Possible modes are <command>"fail"</command>

(default for <command>named-compilezone</command>),

<command>"warn"</command>

(default for <command>named-checkzone</command>) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-m <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether MX records should be checked to see if they

are addresses. Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-M <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Check if a MX record refers to a CNAME.

Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-n <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether NS records should be checked to see if they

are addresses.

Possible modes are <command>"fail"</command>

(default for <command>named-compilezone</command>),

<command>"warn"</command>

(default for <command>named-checkzone</command>) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-o <replaceable class="parameter">filename</replaceable></term>

<listitem>

<para>

Write zone output to <filename>filename</filename>.

This is mandatory for <command>named-compilezone</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-s <replaceable class="parameter">style</replaceable></term>

<listitem>

<para>

Specify the style of the dumped zone file.

Possible styles are <command>"full"</command> (default)

and <command>"relative"</command>.

The full format is most suitable for processing

automatically by a separate script.

On the other hand, the relative format is more

human-readable and is thus suitable for editing by hand.

For <command>named-checkzone</command>

this does not cause any effects unless it dumps the zone

contents.

It also does not have any meaning if the output format

is not text.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-S <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Check if a SRV record refers to a CNAME.

Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-t <replaceable class="parameter">directory</replaceable></term>

<listitem>

<para>

chroot to <filename>directory</filename> so that

include

directives in the configuration file are processed as if

run by a similarly chrooted named.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-w <replaceable class="parameter">directory</replaceable></term>

<listitem>

<para>

chdir to <filename>directory</filename> so that

relative

filenames in master file $INCLUDE directives work. This

is similar to the directory clause in

<filename>named.conf</filename>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-D</term>

<listitem>

<para>

Dump zone file in canonical format.

This is always enabled for <command>named-compilezone</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-W <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether to check for non-terminal wildcards.

Non-terminal wildcards are almost always the result of a

failure to understand the wildcard matching algorithm (RFC 1034).

Possible modes are <command>"warn"</command> (default)

and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>zonename</term>

<listitem>

<para>

The domain name of the zone being checked.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>filename</term>

<listitem>

<para>

The name of the zone file.

</para>

</listitem>

</varlistentry>

</variablelist>

</refsect1>

<refsect1>

<title>RETURN VALUES</title>

<para><command>named-checkzone</command>

returns an exit status of 1 if

errors were detected and 0 otherwise.

</para>

</refsect1>

<refsect1>

<title>SEE ALSO</title>

<para><citerefentry>

<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citetitle>RFC 1035</citetitle>,

<citetitle>BIND 9 Administrator Reference Manual</citetitle>.

</para>

</refsect1>

<refsect1>

<title>AUTHOR</title>

<para><corpauthor>Internet Systems Consortium</corpauthor>

</para>

</refsect1>

</refentry><!--