5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China [<!ENTITY mdash "&#8212;">]>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China<refentry id="man.named-checkzone">

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refentryinfo>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <date>June 13, 2000</date>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </refentryinfo>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refmeta>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refentrytitle><application>named-checkzone</application></refentrytitle>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <manvolnum>8</manvolnum>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refmiscinfo>BIND9</refmiscinfo>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </refmeta>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <docinfo>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <copyright>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2004</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2005</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2006</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2007</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2009</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2010</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <holder>Internet Systems Consortium, Inc. ("ISC")</holder>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </copyright>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <copyright>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2000</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2001</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <year>2002</year>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <holder>Internet Software Consortium.</holder>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </copyright>

0c6eaab480b44a0c790ad94e7cb6084792411de9Hans Rosenfeld </docinfo>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refnamediv>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refname><application>named-checkzone</application></refname>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refname><application>named-compilezone</application></refname>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refpurpose>zone file validity checking or converting tool</refpurpose>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </refnamediv>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refsynopsisdiv>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <cmdsynopsis>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <command>named-checkzone</command>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-d</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-h</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-j</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-q</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-v</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>

7014882c6a3672fd0e5d60200af8643ae53c5928Richard Lowe <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>

7014882c6a3672fd0e5d60200af8643ae53c5928Richard Lowe <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>

7014882c6a3672fd0e5d60200af8643ae53c5928Richard Lowe <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>

7014882c6a3672fd0e5d60200af8643ae53c5928Richard Lowe <arg><option>-M <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-o <replaceable class="parameter">filename</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-r <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-S <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-D</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg choice="req">zonename</arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg choice="req">filename</arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </cmdsynopsis>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <cmdsynopsis>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <command>named-compilezone</command>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-d</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-j</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-q</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-v</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-C <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-F <replaceable class="parameter">format</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-i <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-k <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-m <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-n <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-r <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-s <replaceable class="parameter">style</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-t <replaceable class="parameter">directory</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-w <replaceable class="parameter">directory</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-D</option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg><option>-W <replaceable class="parameter">mode</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg choice="req"><option>-o <replaceable class="parameter">filename</replaceable></option></arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg choice="req">zonename</arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <arg choice="req">filename</arg>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </cmdsynopsis>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </refsynopsisdiv>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refsect1>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <title>DESCRIPTION</title>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <para><command>named-checkzone</command>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China checks the syntax and integrity of a zone file. It performs the

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China same checks as <command>named</command> does when loading a

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China zone. This makes <command>named-checkzone</command> useful for

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China checking zone files before configuring them into a name server.

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </para>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <para>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <command>named-compilezone</command> is similar to

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <command>named-checkzone</command>, but it always dumps the

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China zone contents to a specified file in a specified format.

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China Additionally, it applies stricter check levels by default,

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China since the dump output will be used as an actual zone file

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China loaded by <command>named</command>.

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China When manually specified otherwise, the check levels must at

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China least be as strict as those specified in the

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <command>named</command> configuration file.

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </para>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China </refsect1>

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China

5b5046010dc014958659914f953b1197da4054acjiang wu - Sun Microsystems - Beijing China <refsect1>

<title>OPTIONS</title>

<variablelist>

<varlistentry>

<term>-d</term>

<listitem>

<para>

Enable debugging.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-h</term>

<listitem>

<para>

Print the usage summary and exit.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-q</term>

<listitem>

<para>

Quiet mode - exit code only.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-v</term>

<listitem>

<para>

Print the version of the <command>named-checkzone</command>

program and exit.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-j</term>

<listitem>

<para>

When loading the zone file read the journal if it exists.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-c <replaceable class="parameter">class</replaceable></term>

<listitem>

<para>

Specify the class of the zone. If not specified, "IN" is assumed.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-i <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Perform post-load zone integrity checks. Possible modes are

<command>"full"</command> (default),

<command>"full-sibling"</command>,

<command>"local"</command>,

<command>"local-sibling"</command> and

<command>"none"</command>.

</para>

<para>

Mode <command>"full"</command> checks that MX records

refer to A or AAAA record (both in-zone and out-of-zone

hostnames). Mode <command>"local"</command> only

checks MX records which refer to in-zone hostnames.

</para>

<para>

Mode <command>"full"</command> checks that SRV records

refer to A or AAAA record (both in-zone and out-of-zone

hostnames). Mode <command>"local"</command> only

checks SRV records which refer to in-zone hostnames.

</para>

<para>

Mode <command>"full"</command> checks that delegation NS

records refer to A or AAAA record (both in-zone and out-of-zone

hostnames). It also checks that glue address records

in the zone match those advertised by the child.

Mode <command>"local"</command> only checks NS records which

refer to in-zone hostnames or that some required glue exists,

that is when the nameserver is in a child zone.

</para>

<para>

Mode <command>"full-sibling"</command> and

<command>"local-sibling"</command> disable sibling glue

checks but are otherwise the same as <command>"full"</command>

and <command>"local"</command> respectively.

</para>

<para>

Mode <command>"none"</command> disables the checks.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-f <replaceable class="parameter">format</replaceable></term>

<listitem>

<para>

Specify the format of the zone file.

Possible formats are <command>"text"</command> (default)

and <command>"raw"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-F <replaceable class="parameter">format</replaceable></term>

<listitem>

<para>

Specify the format of the output file specified.

For <command>named-checkzone</command>,

this does not cause any effects unless it dumps the zone

contents.

</para>

<para>

Possible formats are <command>"text"</command> (default)

and <command>"raw"</command> or <command>"raw=N"</command>,

which store the zone in a binary format for rapid loading

by <command>named</command>. <command>"raw=N"</command>

specifies the format version of the raw zone file: if N

is 0, the raw file can be read by any version of

<command>named</command>; if N is 1, the file can be read

by release 9.9.0 or higher. The default is 1.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-k <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Perform <command>"check-names"</command> checks with the

specified failure mode.

Possible modes are <command>"fail"</command>

(default for <command>named-compilezone</command>),

<command>"warn"</command>

(default for <command>named-checkzone</command>) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-m <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether MX records should be checked to see if they

are addresses. Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-M <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Check if a MX record refers to a CNAME.

Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-n <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether NS records should be checked to see if they

are addresses.

Possible modes are <command>"fail"</command>

(default for <command>named-compilezone</command>),

<command>"warn"</command>

(default for <command>named-checkzone</command>) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-o <replaceable class="parameter">filename</replaceable></term>

<listitem>

<para>

Write zone output to <filename>filename</filename>.

If <filename>filename</filename> is <filename>-</filename> then

write to standard out.

This is mandatory for <command>named-compilezone</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-r <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Check for records that are treated as different by DNSSEC but

are semantically equal in plain DNS.

Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-s <replaceable class="parameter">style</replaceable></term>

<listitem>

<para>

Specify the style of the dumped zone file.

Possible styles are <command>"full"</command> (default)

and <command>"relative"</command>.

The full format is most suitable for processing

automatically by a separate script.

On the other hand, the relative format is more

human-readable and is thus suitable for editing by hand.

For <command>named-checkzone</command>

this does not cause any effects unless it dumps the zone

contents.

It also does not have any meaning if the output format

is not text.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-S <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Check if a SRV record refers to a CNAME.

Possible modes are <command>"fail"</command>,

<command>"warn"</command> (default) and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-t <replaceable class="parameter">directory</replaceable></term>

<listitem>

<para>

Chroot to <filename>directory</filename> so that

include

directives in the configuration file are processed as if

run by a similarly chrooted named.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-w <replaceable class="parameter">directory</replaceable></term>

<listitem>

<para>

chdir to <filename>directory</filename> so that

relative

filenames in master file $INCLUDE directives work. This

is similar to the directory clause in

<filename>named.conf</filename>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-D</term>

<listitem>

<para>

Dump zone file in canonical format.

This is always enabled for <command>named-compilezone</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>-W <replaceable class="parameter">mode</replaceable></term>

<listitem>

<para>

Specify whether to check for non-terminal wildcards.

Non-terminal wildcards are almost always the result of a

failure to understand the wildcard matching algorithm (RFC 1034).

Possible modes are <command>"warn"</command> (default)

and

<command>"ignore"</command>.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>zonename</term>

<listitem>

<para>

The domain name of the zone being checked.

</para>

</listitem>

</varlistentry>

<varlistentry>

<term>filename</term>

<listitem>

<para>

The name of the zone file.

</para>

</listitem>

</varlistentry>

</variablelist>

</refsect1>

<refsect1>

<title>RETURN VALUES</title>

<para><command>named-checkzone</command>

returns an exit status of 1 if

errors were detected and 0 otherwise.

</para>

</refsect1>

<refsect1>

<title>SEE ALSO</title>

<para><citerefentry>

<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citetitle>RFC 1035</citetitle>,

<citetitle>BIND 9 Administrator Reference Manual</citetitle>.

</para>

</refsect1>

<refsect1>

<title>AUTHOR</title>

<para><corpauthor>Internet Systems Consortium</corpauthor>

</para>

</refsect1>

</refentry><!--