named-checkzone.docbook revision c1a883f2e04d94e99c433b1f6cfd0c0338f4ed85
5cd4555ad444fd391002ae32450572054369fd42Rob Austein<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
5cd4555ad444fd391002ae32450572054369fd42Rob Austein "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein [<!ENTITY mdash "—">]>
c1a883f2e04d94e99c433b1f6cfd0c0338f4ed85Mark Andrews - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews - Copyright (C) 2000-2002 Internet Software Consortium.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington - Permission to use, copy, modify, and distribute this software for any
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington - purpose with or without fee is hereby granted, provided that the above
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington - copyright notice and this permission notice appear in all copies.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
c1a883f2e04d94e99c433b1f6cfd0c0338f4ed85Mark Andrews<!-- $Id: named-checkzone.docbook,v 1.29 2007/01/29 23:57:22 marka Exp $ -->
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <refentryinfo>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </refentryinfo>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <refentrytitle><application>named-checkzone</application></refentrytitle>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </copyright>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </copyright>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <refname><application>named-checkzone</application></refname>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <refname><application>named-compilezone</application></refname>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <refpurpose>zone file validity checking or converting tool</refpurpose>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </refnamediv>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <refsynopsisdiv>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <cmdsynopsis>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <arg><option>-M <replaceable class="parameter">mode</replaceable></option></arg>
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <arg><option>-S <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews </cmdsynopsis>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <cmdsynopsis>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <arg><option>-C <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </cmdsynopsis>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </refsynopsisdiv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein checks the syntax and integrity of a zone file. It performs the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein same checks as <command>named</command> does when loading a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein zone. This makes <command>named-checkzone</command> useful for
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein checking zone files before configuring them into a name server.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <command>named-compilezone</command> is similar to
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <command>named-checkzone</command>, but it always dumps the
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews zone contents to a specified file in a specified format.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Additionally, it applies stricter check levels by default,
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews since the dump output will be used as an actual zone file
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews When manaully specified otherwise, the check levels must at
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews least be as strict as those specified in the
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <variablelist>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Enable debugging.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Quiet mode - exit code only.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </varlistentry>
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Print the version of the <command>named-checkzone</command>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein program and exit.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson </varlistentry>
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein When loading the zone file read the journal if it exists.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <term>-c <replaceable class="parameter">class</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Specify the class of the zone. If not specified "IN" is assumed.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </varlistentry>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <varlistentry>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <term>-i <replaceable class="parameter">mode</replaceable></term>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Perform post load zone integrity checks. Possible modes are
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Mode <command>"full"</command> checks that MX records
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews hostnames). Mode <command>"local"</command> only
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews checks MX records which refer to in-zone hostnames.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Mode <command>"full"</command> checks that SRV records
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews hostnames). Mode <command>"local"</command> only
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews checks SRV records which refer to in-zone hostnames.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Mode <command>"full"</command> checks that delegation NS
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews records refer to A or AAAA record (both in-zone and out-of-zone
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews hostnames). It also checks that glue addresses records
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews in the zone match those advertised by the child.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Mode <command>"local"</command> only checks NS records which
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews refer to in-zone hostnames or that some required glue exists,
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews that is when the nameserver is in a child zone.
2c15fcdeac4c2402258867fbac24d7475ef98259Mark Andrews <command>"local-sibling"</command> disable sibling glue
2c15fcdeac4c2402258867fbac24d7475ef98259Mark Andrews checks but are otherwise the same as <command>"full"</command>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Mode <command>"none"</command> disables the checks.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews </varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <term>-f <replaceable class="parameter">format</replaceable></term>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Specify the format of the zone file.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Possible formats are <command>"text"</command> (default)
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews </varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <term>-F <replaceable class="parameter">format</replaceable></term>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Specify the format of the output file specified.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Possible formats are <command>"text"</command> (default)
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews this does not cause any effects unless it dumps the zone
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews </varlistentry>
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews <varlistentry>
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews <term>-k <replaceable class="parameter">mode</replaceable></term>
bfedbc02796ed51e63317ca458701da115a53285Mark Andrews Perform <command>"check-names"</command> checks with the
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews specified failure mode.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews (default for <command>named-compilezone</command>),
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews (default for <command>named-checkzone</command>) and
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews </varlistentry>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <varlistentry>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews <term>-m <replaceable class="parameter">mode</replaceable></term>
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews Specify whether MX records should be checked to see if they
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews are addresses. Possible modes are <command>"fail"</command>,
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews </varlistentry>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <varlistentry>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <term>-M <replaceable class="parameter">mode</replaceable></term>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews Check if a MX record refers to a CNAME.
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews </varlistentry>
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews <varlistentry>
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews <term>-n <replaceable class="parameter">mode</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Specify whether NS records should be checked to see if they
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews are addresses.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews (default for <command>named-compilezone</command>),
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews (default for <command>named-checkzone</command>) and
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews </varlistentry>
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews <varlistentry>
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews <term>-o <replaceable class="parameter">filename</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Write zone output to <filename>filename</filename>.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews This is mandatory for <command>named-compilezone</command>.
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews </varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <varlistentry>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews <term>-s <replaceable class="parameter">style</replaceable></term>
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Specify the style of the dumped zone file.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews Possible styles are <command>"full"</command> (default)
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews The full format is most suitable for processing
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews automatically by a separate script.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews On the other hand, the relative format is more
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews human-readable and is thus suitable for editing by hand.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews this does not cause any effects unless it dumps the zone
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews It also does not have any meaning if the output format
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews is not text.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews </varlistentry>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <varlistentry>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews <term>-S <replaceable class="parameter">mode</replaceable></term>
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews Check if a SRV record refers to a CNAME.
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews </varlistentry>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <varlistentry>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <term>-t <replaceable class="parameter">directory</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein chroot to <filename>directory</filename> so that
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein directives in the configuration file are processed as if
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein run by a similarly chrooted named.
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews </varlistentry>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <varlistentry>
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews <term>-w <replaceable class="parameter">directory</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein filenames in master file $INCLUDE directives work. This
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is similar to the directory clause in
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews </varlistentry>
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Dump zone file in canonical format.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews This is always enabled for <command>named-compilezone</command>.
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews </varlistentry>
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews <varlistentry>
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews <term>-W <replaceable class="parameter">mode</replaceable></term>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Specify whether to check for non-terminal wildcards.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Non-terminal wildcards are almost always the result of a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein failure to understand the wildcard matching algorithm (RFC 1034).
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Possible modes are <command>"warn"</command> (default)
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews </varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The domain name of the zone being checked.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <varlistentry>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The name of the zone file.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </varlistentry>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </variablelist>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein returns an exit status of 1 if
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein errors were detected and 0 otherwise.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington </citerefentry>,
c40265eba0c99708887d68e67901924065ba2514Brian Wellington <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <para><corpauthor>Internet Systems Consortium</corpauthor>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington - Local variables: