named-checkzone.html revision 557a0ad5156aefc96dce27978a920eadf85c9d55
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence - Copyright (C) 2000-2002 Internet Software Consortium.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff - Permission to use, copy, modify, and distribute this software for any
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff - purpose with or without fee is hereby granted, provided that the above
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff - copyright notice and this permission notice appear in all copies.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d3498432822fb487e58f8f72bb5f880dd8307d7dMichael Sawyer - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
d3498432822fb487e58f8f72bb5f880dd8307d7dMichael Sawyer - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d3498432822fb487e58f8f72bb5f880dd8307d7dMichael Sawyer - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d3498432822fb487e58f8f72bb5f880dd8307d7dMichael Sawyer - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
d3498432822fb487e58f8f72bb5f880dd8307d7dMichael Sawyer - PERFORMANCE OF THIS SOFTWARE.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence<!-- $Id: named-checkzone.html,v 1.31 2006/01/07 03:34:55 marka Exp $ -->
f9354808d122036e66e9f007a4bb12d4aa936aaeAndreas Gustafsson<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f9354808d122036e66e9f007a4bb12d4aa936aaeAndreas Gustafsson<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
58007c5fde59b756174280d26916eb27f593e6ccBob Halley<a name="man.named-checkzone"></a><div class="titlepage"></div>
58007c5fde59b756174280d26916eb27f593e6ccBob Halley<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p>
58007c5fde59b756174280d26916eb27f593e6ccBob Halley<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
58007c5fde59b756174280d26916eb27f593e6ccBob Halley<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<p><span><strong class="command">named-checkzone</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff checks the syntax and integrity of a zone file. It performs the
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff same checks as <span><strong class="command">named</strong></span> does when loading a
a55d0a9080c8ef4117d2fc27f63220a56afb2434Andreas Gustafsson zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff checking zone files before configuring them into a name server.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence <span><strong class="command">named-compilezone</strong></span> is similar to
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">named-checkzone</strong></span>, but it always dumps the
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff zone contents to a specified file in a specified format.
58007c5fde59b756174280d26916eb27f593e6ccBob Halley Additionally, it applies stricter check levels by default,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff since the dump output will be used as an actual zone file
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff loaded by <span><strong class="command">named</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff When manaully specified otherwise, the check levels must at
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff least be as strict as those specified in the
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">named</strong></span> configuration file.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence Enable debugging.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence Quiet mode - exit code only.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Print the version of the <span><strong class="command">named-checkzone</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff program and exit.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff When loading the zone file read the journal if it exists.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence Specify the class of the zone. If not specified "IN" is assumed.
58007c5fde59b756174280d26916eb27f593e6ccBob Halley<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence Perform post load zone integrity checks. Possible modes are
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"full"</strong></span> (default),
b3e3e95537943deeb232e0b0475a726b54b868bcBrian Wellington <span><strong class="command">"full-sibling"</strong></span>,
b3e3e95537943deeb232e0b0475a726b54b868bcBrian Wellington <span><strong class="command">"local"</strong></span>,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"local-sibling"</strong></span> and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"none"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"full"</strong></span> checks that MX records
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff refer to A or AAAA record (both in-zone and out-of-zone
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff hostnames). Mode <span><strong class="command">"local"</strong></span> only
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff checks MX records which refer to in-zone hostnames.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"full"</strong></span> checks that SRV records
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff refer to A or AAAA record (both in-zone and out-of-zone
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff hostnames). Mode <span><strong class="command">"local"</strong></span> only
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff checks SRV records which refer to in-zone hostnames.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff records refer to A or AAAA record (both in-zone and out-of-zone
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff hostnames). It also checks that glue addresses records
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff in the zone match those advertised by the child.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"local"</strong></span> only checks NS records which
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff refer to in-zone hostnames or that some required glue exists,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff that is when the nameserver is in a child zone.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"full-sibling"</strong></span> and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"local-sibling"</strong></span> disable sibling glue
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff checks but are otherwise the same as <span><strong class="command">"full"</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff and <span><strong class="command">"local"</strong></span> respectively.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Mode <span><strong class="command">"none"</strong></span> disables the checks.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify the format of the zone file.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Possible formats are <span><strong class="command">"text"</strong></span> (default)
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff and <span><strong class="command">"raw"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify the format of the output file specified.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Possible formats are <span><strong class="command">"text"</strong></span> (default)
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff and <span><strong class="command">"raw"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff For <span><strong class="command">named-checkzone</strong></span>,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff this does not cause any effects unless it dumps the zone
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Perform <span><strong class="command">"check-name"</strong></span> checks with the
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff specified failure mode.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Possible modes are <span><strong class="command">"fail"</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff (default for <span><strong class="command">named-compilezone</strong></span>),
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"warn"</strong></span>
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence (default for <span><strong class="command">named-checkzone</strong></span>) and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify whether MX records should be checked to see if they
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"warn"</strong></span> (default) and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Check if a MX record refers to a CNAME.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Possible modes are <span><strong class="command">"fail"</strong></span>,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"warn"</strong></span> (default) and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify whether NS records should be checked to see if they
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff are addresses.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Possible modes are <span><strong class="command">"fail"</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff (default for <span><strong class="command">named-compilezone</strong></span>),
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"warn"</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff (default for <span><strong class="command">named-checkzone</strong></span>) and
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Write zone output to <code class="filename">filename</code>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify the style of the dumped zone file.
003b1f94e87eefb11c75366d6a48bc630858e56cAndreas Gustafsson Possible styles are <span><strong class="command">"full"</strong></span> (default)
58007c5fde59b756174280d26916eb27f593e6ccBob Halley and <span><strong class="command">"default"</strong></span>.
b9c829dc8fb7339d929ac12c6d768b3ab86bcd13Mark Andrews The full format is most suitable for processing
a721540f2096879e0e1d4448dd4c87b62e7aefd8Michael Graff automatically by a separate script.
a1ed420875df8a6956f32d84538a7f0740e6951fAndreas Gustafsson On the other hand, the default format is more
58007c5fde59b756174280d26916eb27f593e6ccBob Halley human-readable and is thus suitable for editing by hand.
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence For <span><strong class="command">named-checkzone</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff this does not cause any effects unless it dumps the zone
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff It also does not have any meaning if the output format
58007c5fde59b756174280d26916eb27f593e6ccBob Halley is not text.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Check if a SRV record refers to a CNAME.
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence Possible modes are <span><strong class="command">"fail"</strong></span>,
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence <span><strong class="command">"warn"</strong></span> (default) and
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff chroot to <code class="filename">directory</code> so that
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff directives in the configuration file are processed as if
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence run by a similarly chrooted named.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence chdir to <code class="filename">directory</code> so that
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff filenames in master file $INCLUDE directives work. This
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff is similar to the directory clause in
582952026017aee8b5fb8ada625165c579f7807bDavid Lawrence Dump zone file in canonical format.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff This is always enabled for <span><strong class="command">named-compilezone</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Specify whether to check for non-terminal wildcards.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff Non-terminal wildcards are almost always the result of a
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff failure to understand the wildcard matching algorithm (RFC 1034).
615f17d0171dd807c6803b25a255a8ea2051fbd4David Lawrence Possible modes are <span><strong class="command">"warn"</strong></span> (default)
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <span><strong class="command">"ignore"</strong></span>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff The domain name of the zone being checked.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff The name of the zone file.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<p><span><strong class="command">named-checkzone</strong></span>
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff returns an exit status of 1 if
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff errors were detected and 0 otherwise.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5a0ffa97751ef1ff29d1bf9d7f332eeb9f8edc21Michael Graff<p><span class="corpauthor">Internet Systems Consortium</span>