named-checkzone.html revision 5a4557e8de2951a2796676b5ec4b6a90caa5be14
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC")
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000-2002 Internet Software Consortium.
c40265eba0c99708887d68e67901924065ba2514Brian Wellington - Permission to use, copy, modify, and distribute this software for any
c40265eba0c99708887d68e67901924065ba2514Brian Wellington - purpose with or without fee is hereby granted, provided that the above
c40265eba0c99708887d68e67901924065ba2514Brian Wellington - copyright notice and this permission notice appear in all copies.
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<!-- $Id: named-checkzone.html,v 1.27 2005/07/19 06:12:14 marka Exp $ -->
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta name="generator" content="DocBook XSL Stylesheets V1.68.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<a name="man.named-checkzone"></a><div class="titlepage"></div>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span><strong class="command">named-checkzone</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checks the syntax and integrity of a zone file. It performs the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein same checks as <span><strong class="command">named</strong></span> does when loading a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checking zone files before configuring them into a name server.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews <span><strong class="command">named-compilezone</strong></span> is similar to
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews <span><strong class="command">named-checkzone</strong></span>, but it always dumps the
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews zone contents to a specified file in a specified format.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Additionally, it applies stricter check levels by default,
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews since the dump output will be used as an actual zone file
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews loaded by <span><strong class="command">named</strong></span>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews When manaully specified otherwise, the check levels must at
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews least be as strict as those specified in the
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews <span><strong class="command">named</strong></span> configuration file.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Enable debugging.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Quiet mode - exit code only.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Print the version of the <span><strong class="command">named-checkzone</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein program and exit.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When loading the zone file read the journal if it exists.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify the class of the zone. If not specified "IN" is assumed.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Perform post load zone integrity checks. Possible modes are
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews <span><strong class="command">"full"</strong></span> (default),
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews <span><strong class="command">"local"</strong></span> and
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews <span><strong class="command">"none"</strong></span>.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Mode <span><strong class="command">"full"</strong></span> checks that MX records
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews hostnames). Mode <span><strong class="command">"local"</strong></span> only
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews checks MX records which refer to in-zone hostnames.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Mode <span><strong class="command">"full"</strong></span> checks that SRV records
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews hostnames). Mode <span><strong class="command">"local"</strong></span> only
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews checks SRV records which refer to in-zone hostnames.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews records refer to A or AAAA record (both in-zone and out-of-zone
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews hostnames). It also checks that glue addresses records
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews in the zone match those advertised by the child.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Mode <span><strong class="command">"local"</strong></span> only checks NS records which
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews refer to in-zone hostnames or that some required glue exists,
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews that is when the nameserver is in a child zone.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Mode <span><strong class="command">"none"</strong></span> disables the checks.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Specify the format of the zone file.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Possible formats are <span><strong class="command">"text"</strong></span> (default)
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews and <span><strong class="command">"raw"</strong></span>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Specify the format of the output file specified.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Possible formats are <span><strong class="command">"text"</strong></span> (default)
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews and <span><strong class="command">"raw"</strong></span>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews For <span><strong class="command">named-checkzone</strong></span>,
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews this does not cause any effects unless it dumps the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Perform <span><strong class="command">"check-name"</strong></span> checks with the
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews specified failure mode.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews (default for <span><strong class="command">named-compilezone</strong></span>),
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews <span><strong class="command">"warn"</strong></span>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews (default for <span><strong class="command">named-checkzone</strong></span>) and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews Specify whether MX records should be checked to see if they
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews <span><strong class="command">"warn"</strong></span> (default) and
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify whether NS records should be checked to see if they
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews are addresses.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews (default for <span><strong class="command">named-compilezone</strong></span>),
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews <span><strong class="command">"warn"</strong></span>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews (default for <span><strong class="command">named-checkzone</strong></span>) and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Write zone output to <code class="filename">filename</code>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Specify the style of the dumped zone file.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews Possible styles are <span><strong class="command">"full"</strong></span> (default)
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews and <span><strong class="command">"default"</strong></span>.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews The full format is most suitable for processing
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews automatically by a separate script.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews On the other hand, the default format is more
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews human-readable and is thus suitable for editing by hand.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews For <span><strong class="command">named-checkzone</strong></span>
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews this does not cause any effects unless it dumps the zone
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews It also does not have any meaning if the output format
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews is not text.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chroot to <code class="filename">directory</code> so that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directives in the configuration file are processed as if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein run by a similarly chrooted named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chdir to <code class="filename">directory</code> so that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein filenames in master file $INCLUDE directives work. This
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is similar to the directory clause in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Dump zone file in canonical format.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews This is always enabled for <span><strong class="command">named-compilezone</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specify whether to check for non-terminal wildcards.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Non-terminal wildcards are almost always the result of a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure to understand the wildcard matching algorithm (RFC 1034).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Possible modes are <span><strong class="command">"warn"</strong></span> (default)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">"ignore"</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The domain name of the zone being checked.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The name of the zone file.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span><strong class="command">named-checkzone</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein returns an exit status of 1 if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein errors were detected and 0 otherwise.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="corpauthor">Internet Systems Consortium</span>