named-checkzone.html revision bf056b7184b38281c1b0bf0cf21b5982fa1a4eda
333eac96e4fb7d6901cb75e6ca7bb22b2ccb84cetrawick - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
2a6c49cfaef5979a5a06098f3ce987cd76769409manoj - Copyright (C) 2000-2002 Internet Software Consortium.
2a6c49cfaef5979a5a06098f3ce987cd76769409manoj - Permission to use, copy, modify, and distribute this software for any
5751f7da0bbdde92dedf21a6c9d743de752e310drbb - purpose with or without fee is hereby granted, provided that the above
b876b7bcf0ce3d232da723246d709e8dbbfe8762rbb - copyright notice and this permission notice appear in all copies.
cf6bf6c34c936e6a6fe731dbce4a5c3c8bf8e9a3gstein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
35330e0d79ceb8027223bbb8330a381b1f989d6etrawick - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
6f6f4a4bca281779d196acbdd5c017bb90858305trawick - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8dd4618c4709236b4ea297d7250d282e463ce2d8rbb - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
09bd86d0db1114ee23eda0a6eb76ca055877a1cftrawick - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
2deb319e6b3de239f45c16a3e9e836d44f1f7108rbb - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
bd929c73ef04789b7183b840d8db6e01d03a4d86rbb - PERFORMANCE OF THIS SOFTWARE.
2a6c49cfaef5979a5a06098f3ce987cd76769409manoj<!-- $Id: named-checkzone.html,v 1.35 2006/09/29 08:34:55 marka Exp $ -->
50298555098049d0ebddd539668502fb5b796de0wrowe<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e6cf5ec07f77ef6c65b7802d4e4d636b23566fcbgstein<meta name="generator" content="DocBook XSL Stylesheets V1.70.1">
e6cf5ec07f77ef6c65b7802d4e4d636b23566fcbgstein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
50298555098049d0ebddd539668502fb5b796de0wrowe<a name="man.named-checkzone"></a><div class="titlepage"></div>
50298555098049d0ebddd539668502fb5b796de0wrowe<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p>
447c6ce3ff08073c44f6785d5256271fcb877512wrowe<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
447c6ce3ff08073c44f6785d5256271fcb877512wrowe<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
50298555098049d0ebddd539668502fb5b796de0wrowe<p><span><strong class="command">named-checkzone</strong></span>
85cbdc16ac57fa68ce1358a308269abcd417f4d9stoddard checks the syntax and integrity of a zone file. It performs the
d208bda4a893cc81ed5d3ed1cdd7d706e012bd42stoddard same checks as <span><strong class="command">named</strong></span> does when loading a
d208bda4a893cc81ed5d3ed1cdd7d706e012bd42stoddard zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
d208bda4a893cc81ed5d3ed1cdd7d706e012bd42stoddard checking zone files before configuring them into a name server.
10b386767f6c87b45937244371cb751f0b454d16wrowe <span><strong class="command">named-compilezone</strong></span> is similar to
863ec32e13d6c9619414c48b51109f3dca99cbc6wrowe <span><strong class="command">named-checkzone</strong></span>, but it always dumps the
863ec32e13d6c9619414c48b51109f3dca99cbc6wrowe zone contents to a specified file in a specified format.
75960f20f88dad6bc67892c711c429946063d133stoddard Additionally, it applies stricter check levels by default,
75960f20f88dad6bc67892c711c429946063d133stoddard since the dump output will be used as an actual zone file
75960f20f88dad6bc67892c711c429946063d133stoddard loaded by <span><strong class="command">named</strong></span>.
75960f20f88dad6bc67892c711c429946063d133stoddard When manaully specified otherwise, the check levels must at
75960f20f88dad6bc67892c711c429946063d133stoddard least be as strict as those specified in the
75960f20f88dad6bc67892c711c429946063d133stoddard <span><strong class="command">named</strong></span> configuration file.
50298555098049d0ebddd539668502fb5b796de0wrowe Enable debugging.
f6a6245816cd866361da8c576b1f47c7a54b6610fanf Quiet mode - exit code only.
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick Print the version of the <span><strong class="command">named-checkzone</strong></span>
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick program and exit.
9eccc0a669a3e711629345b357c46acce5fefdb4gstein When loading the zone file read the journal if it exists.
750fcd3495b59eff6d4844409ae1dfb46d026059gstein<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
750fcd3495b59eff6d4844409ae1dfb46d026059gstein Specify the class of the zone. If not specified "IN" is assumed.
750fcd3495b59eff6d4844409ae1dfb46d026059gstein<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
750fcd3495b59eff6d4844409ae1dfb46d026059gstein Perform post load zone integrity checks. Possible modes are
750fcd3495b59eff6d4844409ae1dfb46d026059gstein <span><strong class="command">"full"</strong></span> (default),
750fcd3495b59eff6d4844409ae1dfb46d026059gstein <span><strong class="command">"full-sibling"</strong></span>,
9eccc0a669a3e711629345b357c46acce5fefdb4gstein <span><strong class="command">"local"</strong></span>,
e9cfc70fceb74521ba0814cdc88808c7d4d00c97gstein <span><strong class="command">"local-sibling"</strong></span> and
e9cfc70fceb74521ba0814cdc88808c7d4d00c97gstein <span><strong class="command">"none"</strong></span>.
e9cfc70fceb74521ba0814cdc88808c7d4d00c97gstein Mode <span><strong class="command">"full"</strong></span> checks that MX records
26ef89f716a43048630e73f527dd2f0ee84f72c2rbb refer to A or AAAA record (both in-zone and out-of-zone
26ef89f716a43048630e73f527dd2f0ee84f72c2rbb hostnames). Mode <span><strong class="command">"local"</strong></span> only
26ef89f716a43048630e73f527dd2f0ee84f72c2rbb checks MX records which refer to in-zone hostnames.
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein Mode <span><strong class="command">"full"</strong></span> checks that SRV records
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein refer to A or AAAA record (both in-zone and out-of-zone
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein hostnames). Mode <span><strong class="command">"local"</strong></span> only
2a6c49cfaef5979a5a06098f3ce987cd76769409manoj checks SRV records which refer to in-zone hostnames.
b187d568e1507d75139ebc13ca945b38fc05d55cstoddard Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
b187d568e1507d75139ebc13ca945b38fc05d55cstoddard records refer to A or AAAA record (both in-zone and out-of-zone
1c6fb1e726ce22694de0e9a957adb67b929e5d4fstoddard hostnames). It also checks that glue addresses records
1c6fb1e726ce22694de0e9a957adb67b929e5d4fstoddard in the zone match those advertised by the child.
8bed76428f56e5c643174a2d6807c3f18016af5cbjh Mode <span><strong class="command">"local"</strong></span> only checks NS records which
8bed76428f56e5c643174a2d6807c3f18016af5cbjh refer to in-zone hostnames or that some required glue exists,
8bed76428f56e5c643174a2d6807c3f18016af5cbjh that is when the nameserver is in a child zone.
2aae6faee508221efbeaba5547ca79b7a20ef047stoddard Mode <span><strong class="command">"full-sibling"</strong></span> and
2aae6faee508221efbeaba5547ca79b7a20ef047stoddard <span><strong class="command">"local-sibling"</strong></span> disable sibling glue
10b386767f6c87b45937244371cb751f0b454d16wrowe checks but are otherwise the same as <span><strong class="command">"full"</strong></span>
10b386767f6c87b45937244371cb751f0b454d16wrowe and <span><strong class="command">"local"</strong></span> respectively.
10b386767f6c87b45937244371cb751f0b454d16wrowe Mode <span><strong class="command">"none"</strong></span> disables the checks.
10b386767f6c87b45937244371cb751f0b454d16wrowe<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
75960f20f88dad6bc67892c711c429946063d133stoddard Specify the format of the zone file.
a5ed555df952c85bc1b179f5981e8a6c54ba16e6stoddard Possible formats are <span><strong class="command">"text"</strong></span> (default)
d2f8b010487ffa990a9c268df5a25579e7291bcdrbb and <span><strong class="command">"raw"</strong></span>.
a5ed555df952c85bc1b179f5981e8a6c54ba16e6stoddard<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
0bff2f28ef945280c17099c142126178a78e1e54manoj Specify the format of the output file specified.
0bff2f28ef945280c17099c142126178a78e1e54manoj Possible formats are <span><strong class="command">"text"</strong></span> (default)
1e585ba09ea32272e63c4c39c35491e975d21d98stoddard and <span><strong class="command">"raw"</strong></span>.
0bff2f28ef945280c17099c142126178a78e1e54manoj For <span><strong class="command">named-checkzone</strong></span>,
35330e0d79ceb8027223bbb8330a381b1f989d6etrawick this does not cause any effects unless it dumps the zone
75960f20f88dad6bc67892c711c429946063d133stoddard<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
ff849e4163ed879288f0df15f78b6c9d278ec804fanf Perform <span><strong class="command">"check-names"</strong></span> checks with the
ff849e4163ed879288f0df15f78b6c9d278ec804fanf specified failure mode.
447c6ce3ff08073c44f6785d5256271fcb877512wrowe Possible modes are <span><strong class="command">"fail"</strong></span>
447c6ce3ff08073c44f6785d5256271fcb877512wrowe (default for <span><strong class="command">named-compilezone</strong></span>),
447c6ce3ff08073c44f6785d5256271fcb877512wrowe (default for <span><strong class="command">named-checkzone</strong></span>) and
447c6ce3ff08073c44f6785d5256271fcb877512wrowe <span><strong class="command">"ignore"</strong></span>.
cf6bf6c34c936e6a6fe731dbce4a5c3c8bf8e9a3gstein<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
c03566fa0156d3a1500a42e4fe539e3e0fc8a11dgstein Specify whether MX records should be checked to see if they
db3ccce11afac4fc1d4f51a65424412f7480c46cgstein are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
dd4713dc5b186f4d1be7b88f86608fdb84cbe5d5gstein <span><strong class="command">"warn"</strong></span> (default) and
0eb7ca6cf812d98c534661ac474e873a32bf6325gstein <span><strong class="command">"ignore"</strong></span>.
8d07897b52e3b7055874501f8a499e75800db206gstein<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt>
db3ccce11afac4fc1d4f51a65424412f7480c46cgstein Check if a MX record refers to a CNAME.
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick Possible modes are <span><strong class="command">"fail"</strong></span>,
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick <span><strong class="command">"warn"</strong></span> (default) and
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick <span><strong class="command">"ignore"</strong></span>.
cf6bf6c34c936e6a6fe731dbce4a5c3c8bf8e9a3gstein<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
6fa71a1bd8c61518b05f5798a7a1594c270e78afrbb Specify whether NS records should be checked to see if they
93c5cba06b623ebe8e4372e886eece12d9a80c3egstein are addresses.
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein Possible modes are <span><strong class="command">"fail"</strong></span>
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein (default for <span><strong class="command">named-compilezone</strong></span>),
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein (default for <span><strong class="command">named-checkzone</strong></span>) and
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein <span><strong class="command">"ignore"</strong></span>.
823c303d33c9e637a83d82208bcbafaf5f532d7bgstein<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
e636eba7474e0010b5c7198af1c2fe5ad8652dbbmanoj Write zone output to <code class="filename">filename</code>.
e636eba7474e0010b5c7198af1c2fe5ad8652dbbmanoj This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
531c23ff01a2489646f0a2029097013b328d935agstein<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
531c23ff01a2489646f0a2029097013b328d935agstein Specify the style of the dumped zone file.
531c23ff01a2489646f0a2029097013b328d935agstein Possible styles are <span><strong class="command">"full"</strong></span> (default)
531c23ff01a2489646f0a2029097013b328d935agstein and <span><strong class="command">"relative"</strong></span>.
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein The full format is most suitable for processing
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein automatically by a separate script.
333eac96e4fb7d6901cb75e6ca7bb22b2ccb84cetrawick On the other hand, the relative format is more
333eac96e4fb7d6901cb75e6ca7bb22b2ccb84cetrawick human-readable and is thus suitable for editing by hand.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar For <span><strong class="command">named-checkzone</strong></span>
64ad864fa0f4493eebb181e393b40a8a90beccb9coar this does not cause any effects unless it dumps the zone
64ad864fa0f4493eebb181e393b40a8a90beccb9coar It also does not have any meaning if the output format
64ad864fa0f4493eebb181e393b40a8a90beccb9coar is not text.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt>
64ad864fa0f4493eebb181e393b40a8a90beccb9coar Check if a SRV record refers to a CNAME.
28d1da9ca818f831ea491f110dafcc10f7f07050coar Possible modes are <span><strong class="command">"fail"</strong></span>,
64ad864fa0f4493eebb181e393b40a8a90beccb9coar <span><strong class="command">"warn"</strong></span> (default) and
64ad864fa0f4493eebb181e393b40a8a90beccb9coar <span><strong class="command">"ignore"</strong></span>.
28d1da9ca818f831ea491f110dafcc10f7f07050coar<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
64ad864fa0f4493eebb181e393b40a8a90beccb9coar chroot to <code class="filename">directory</code> so that
28d1da9ca818f831ea491f110dafcc10f7f07050coar directives in the configuration file are processed as if
64ad864fa0f4493eebb181e393b40a8a90beccb9coar run by a similarly chrooted named.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
28d1da9ca818f831ea491f110dafcc10f7f07050coar chdir to <code class="filename">directory</code> so that
64ad864fa0f4493eebb181e393b40a8a90beccb9coar filenames in master file $INCLUDE directives work. This
64ad864fa0f4493eebb181e393b40a8a90beccb9coar is similar to the directory clause in
28d1da9ca818f831ea491f110dafcc10f7f07050coar Dump zone file in canonical format.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar This is always enabled for <span><strong class="command">named-compilezone</strong></span>.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
64ad864fa0f4493eebb181e393b40a8a90beccb9coar Specify whether to check for non-terminal wildcards.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar Non-terminal wildcards are almost always the result of a
64ad864fa0f4493eebb181e393b40a8a90beccb9coar failure to understand the wildcard matching algorithm (RFC 1034).
64ad864fa0f4493eebb181e393b40a8a90beccb9coar Possible modes are <span><strong class="command">"warn"</strong></span> (default)
64ad864fa0f4493eebb181e393b40a8a90beccb9coar <span><strong class="command">"ignore"</strong></span>.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar The domain name of the zone being checked.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar The name of the zone file.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<p><span><strong class="command">named-checkzone</strong></span>
28d1da9ca818f831ea491f110dafcc10f7f07050coar returns an exit status of 1 if
64ad864fa0f4493eebb181e393b40a8a90beccb9coar errors were detected and 0 otherwise.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
28d1da9ca818f831ea491f110dafcc10f7f07050coar <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
64ad864fa0f4493eebb181e393b40a8a90beccb9coar<p><span class="corpauthor">Internet Systems Consortium</span>