named-checkzone.docbook revision 728a9bec1fe3a56fedfd672e7f34d2d82631d1d7
5cd4555ad444fd391002ae32450572054369fd42Rob Austein<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.0//EN"
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews "http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd"
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<!ENTITY mdash "—">]>
724df78acd95dc0f313bc2b80a099f7ecd48b620Tinderbox User - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC")
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - Copyright (C) 2000-2002 Internet Software Consortium.
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - Permission to use, copy, modify, and distribute this software for any
f202f2587b9ba4753afba49b796f599cc12b4d0fAndreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
f202f2587b9ba4753afba49b796f599cc12b4d0fAndreas Gustafsson - copyright notice and this permission notice appear in all copies.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews<!-- $Id: named-checkzone.docbook,v 1.21 2005/06/20 01:09:42 marka Exp $ -->
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <refentryinfo>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </refentryinfo>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <refentrytitle><application>named-checkzone</application></refentrytitle>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </copyright>
5c6b95ba1b2e35f8dd6b0a7f25aacba91fff3aa2Tinderbox User <refname><application>named-checkzone</application></refname>
1124950b35ae05a12e804e670607fe5ba775cb4aTinderbox User <refname><application>named-compilezone</application></refname>
724df78acd95dc0f313bc2b80a099f7ecd48b620Tinderbox User <refpurpose>zone file validity checking or converting tool</refpurpose>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </refnamediv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <refsynopsisdiv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <cmdsynopsis>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </cmdsynopsis>
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews <cmdsynopsis>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </cmdsynopsis>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </refsynopsisdiv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein checks the syntax and integrity of a zone file. It performs the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein same checks as <command>named</command> does when loading a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zone. This makes <command>named-checkzone</command> useful for
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein checking zone files before configuring them into a name server.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <command>named-compilezone</command> is similar to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <command>named-checkzone</command>, but it always dumps the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zone contents to a specified file in a specified format.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Additionally, it applies stricter check levels by default,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein since the dump output will be used as an actual zone file
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews When manaully specified otherwise, the check levels must at
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein least be as strict as those specified in the
8012d70ea4906ba739036cc9903cb0ac0fc72e9fJeremy C. Reed <variablelist>
3b9d9ad58b2d85a10960819f5c7a4606b33e9ab2Evan Hunt <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Enable debugging.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Quiet mode - exit code only.
065c66d9bf1c349600027bb50e3759a3736f73abMark Andrews </varlistentry>
79a1c7502d0d1c5e654d9892c948d0123c3b3e2fEvan Hunt <varlistentry>
065c66d9bf1c349600027bb50e3759a3736f73abMark Andrews Print the version of the <command>named-checkzone</command>
065c66d9bf1c349600027bb50e3759a3736f73abMark Andrews program and exit.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein When loading the zone file read the journal if it exists.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <term>-c <replaceable class="parameter">class</replaceable></term>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Specify the class of the zone. If not specified "IN" is assumed.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews </varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <term>-i <replaceable class="parameter">mode</replaceable></term>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Perform post load zone integrity checks. Possible modes are
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Mode <command>"full"</command> checks that MX records
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews hostnames). Mode <command>"local"</command> only
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews checks MX records which refer to in-zone hostnames.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Mode <command>"full"</command> checks that SRV records
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews hostnames). Mode <command>"local"</command> only
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews checks SRV records which refer to in-zone hostnames.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Mode <command>"full"</command> checks that delegation NS
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews records refer to A or AAAA record (both in-zone and out-of-zone
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews hostnames). It also checks that glue addresses records
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews in the zone match those advertised by the child.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Mode <command>"local"</command> only checks NS records which
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews refer to in-zone hostnames or that some required glue exists,
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews that is when the nameserver is in a child zone.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews Mode <command>"none"</command> disables the checks.
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews </varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <varlistentry>
0af902c0df86a1ddfa54f68b4cf0fab7b469d4e7Mark Andrews <term>-f <replaceable class="parameter">format</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Specify the format of the zone file.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Possible formats are <command>"text"</command> (default)
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <term>-F <replaceable class="parameter">format</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Specify the format of the output file specified.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Possible formats are <command>"text"</command> (default)
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt this does not cause any effects unless it dumps the zone
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-k <replaceable class="parameter">mode</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Perform <command>"check-name"</command> checks with the
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt specified failure mode.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt (default for <command>named-compilezone</command>),
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews (default for <command>named-checkzone</command>) and
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <term>-m <replaceable class="parameter">mode</replaceable></term>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt Specify whether MX records should be checked to see if they
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews are addresses. Possible modes are <command>"fail"</command>,
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-n <replaceable class="parameter">mode</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Specify whether NS records should be checked to see if they
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews are addresses.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt (default for <command>named-compilezone</command>),
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt (default for <command>named-checkzone</command>) and
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-o <replaceable class="parameter">filename</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Write zone output to <filename>filename</filename>.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt This is mandatory for <command>named-compilezone</command>.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-s <replaceable class="parameter">style</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Specify the style of the dumped zone file.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews Possible styles are <command>"full"</command> (default)
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt The full format is most suitable for processing
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt automatically by a separate script.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt On the other hand, the default format is more
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt human-readable and is thus suitable for editing by hand.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt this does not cause any effects unless it dumps the zone
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt It also does not have any meaning if the output format
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt is not text.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-t <replaceable class="parameter">directory</replaceable></term>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews chroot to <filename>directory</filename> so that
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt directives in the configuration file are processed as if
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt run by a similarly chrooted named.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <term>-w <replaceable class="parameter">directory</replaceable></term>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt filenames in master file $INCLUDE directives work. This
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt is similar to the directory clause in
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt Dump zone file in canonical format.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt This is always enabled for <command>named-compilezone</command>.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <term>-W <replaceable class="parameter">mode</replaceable></term>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt Specify whether to check for non-terminal wildcards.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt Non-terminal wildcards are almost always the result of a
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt failure to understand the wildcard matching algorithm (RFC 1034).
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt Possible modes are <command>"warn"</command> (default)
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt The domain name of the zone being checked.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt The name of the zone file.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews </varlistentry>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </variablelist>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt returns an exit status of 1 if
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt errors were detected and 0 otherwise.
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt </citerefentry>,
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt <para><corpauthor>Internet Systems Consortium</corpauthor>
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt - Local variables:
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt - mode: sgml