named-checkzone.html revision 3a3705ef7747327df182bf8d009333d2472253d5
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC")
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000-2002 Internet Software Consortium.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Permission to use, copy, modify, and distribute this software for any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - purpose with or without fee is hereby granted, provided that the above
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - copyright notice and this permission notice appear in all copies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - PERFORMANCE OF THIS SOFTWARE.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews<!-- $Id: named-checkzone.html,v 1.24 2005/05/19 12:34:32 marka Exp $ -->
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cedb0bd0c1e3c461b7e479a16d3adfd5b150f1f4Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.68.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="id2456836"></a><div class="titlepage"></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="application">named-checkzone</span> — zone file validity checking tool</p>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span><strong class="command">named-checkzone</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks the syntax and integrity of a zone file. It performs the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein same checks as <span><strong class="command">named</strong></span> does when loading a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checking zone files before configuring them into a name server.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Enable debugging.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Quiet mode - exit code only.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Print the version of the <span><strong class="command">named-checkzone</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein program and exit.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews When loading the zone file read the journal if it exists.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews Specify the class of the zone. If not specified "IN" is assumed.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews Perform post load zone integrity checks. Possible modes are
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews <span><strong class="command">"full"</strong></span> (default),
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews <span><strong class="command">"local"</strong></span> and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"none"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Mode <span><strong class="command">"full"</strong></span> checks that MX records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein refer to A or AAAA record (both in-zone and out-of-zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hostnames). Mode <span><strong class="command">"local"</strong></span> only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks MX records which refer to in-zone hostnames.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Mode <span><strong class="command">"full"</strong></span> checks that SRV records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein refer to A or AAAA record (both in-zone and out-of-zone
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews hostnames). Mode <span><strong class="command">"local"</strong></span> only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks SRV records which refer to in-zone hostnames.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews records refer to A or AAAA record (both in-zone and out-of-zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hostnames). It also checks that glue addresses records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the zone match those advertised by the child.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews Mode <span><strong class="command">"local"</strong></span> only checks NS records which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein refer to in-zone hostnames or that some required glue exists,
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews that is when the nameserver is in a child zone.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Mode <span><strong class="command">"none"</strong></span> disables the checks.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Perform <span><strong class="command">"check-name"</strong></span> checks with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the specified failure mode.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Possible modes are <span><strong class="command">"fail"</strong></span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"warn"</strong></span> (default) and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify whether MX records should be checked to see if they
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"warn"</strong></span> (default) and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify whether NS records should be checked to see if they
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"warn"</strong></span> (default) and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Write zone output to <code class="filename">filename</code>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chroot to <code class="filename">directory</code> so that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directives in the configuration file are processed as if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein run by a similarly chrooted named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chdir to <code class="filename">directory</code> so that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filenames in master file $INCLUDE directives work. This
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is similar to the directory clause in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Dump zone file in canonical format.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify whether to check for non-terminal wildcards.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Non-terminal wildcards are almost always the result of a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure to understand the wildcard matching algorithm (RFC 1034).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Possible modes are <span><strong class="command">"warn"</strong></span> (default)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The domain name of the zone being checked.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The name of the zone file.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span><strong class="command">named-checkzone</strong></span>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews returns an exit status of 1 if
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews errors were detected and 0 otherwise.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="corpauthor">Internet Systems Consortium</span>