named-checkzone.html revision f6da30bb5447c23d880b09f601441e70c5313557
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - Copyright (C) 2000-2002 Internet Software Consortium.
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User - Permission to use, copy, modify, and distribute this software for any
ba9e87b35e561bc7354ce3f4b9685b747b7be507Tinderbox User - purpose with or without fee is hereby granted, provided that the above
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews - copyright notice and this permission notice appear in all copies.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
59663800d2ec04777dae2791dd92aa563faf94c8Evan Hunt - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
0726d872f6f36901ea09321df57084614e5bb6faTinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User - PERFORMANCE OF THIS SOFTWARE.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<!-- $Id: named-checkzone.html,v 1.40 2007/05/09 13:35:57 marka Exp $ -->
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<a name="man.named-checkzone"></a><div class="titlepage"></div>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<p><span><strong class="command">named-checkzone</strong></span>
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews checks the syntax and integrity of a zone file. It performs the
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews same checks as <span><strong class="command">named</strong></span> does when loading a
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews checking zone files before configuring them into a name server.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <span><strong class="command">named-compilezone</strong></span> is similar to
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews <span><strong class="command">named-checkzone</strong></span>, but it always dumps the
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User zone contents to a specified file in a specified format.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Additionally, it applies stricter check levels by default,
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User since the dump output will be used as an actual zone file
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews loaded by <span><strong class="command">named</strong></span>.
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt When manually specified otherwise, the check levels must at
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews least be as strict as those specified in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <span><strong class="command">named</strong></span> configuration file.
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt Enable debugging.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Quiet mode - exit code only.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User Print the version of the <span><strong class="command">named-checkzone</strong></span>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews program and exit.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews When loading the zone file read the journal if it exists.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Specify the class of the zone. If not specified "IN" is assumed.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Perform post-load zone integrity checks. Possible modes are
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User <span><strong class="command">"full"</strong></span> (default),
3ccf87473f7cf6d9faac156df38a935a238f96fdTinderbox User <span><strong class="command">"full-sibling"</strong></span>,
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews <span><strong class="command">"local"</strong></span>,
b378314925e78f21853a98cec924788ce1822c6cTinderbox User <span><strong class="command">"local-sibling"</strong></span> and
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User <span><strong class="command">"none"</strong></span>.
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt Mode <span><strong class="command">"full"</strong></span> checks that MX records
415d630b6309922caee8469384a6fab75cf05032Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews hostnames). Mode <span><strong class="command">"local"</strong></span> only
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User checks MX records which refer to in-zone hostnames.
3ccf87473f7cf6d9faac156df38a935a238f96fdTinderbox User Mode <span><strong class="command">"full"</strong></span> checks that SRV records
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews refer to A or AAAA record (both in-zone and out-of-zone
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User hostnames). Mode <span><strong class="command">"local"</strong></span> only
551e6d2414c4f47d58a9bb0b37f206f915a4f5acTinderbox User checks SRV records which refer to in-zone hostnames.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User records refer to A or AAAA record (both in-zone and out-of-zone
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User hostnames). It also checks that glue address records
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews in the zone match those advertised by the child.
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox User Mode <span><strong class="command">"local"</strong></span> only checks NS records which
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews refer to in-zone hostnames or that some required glue exists,
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User that is when the nameserver is in a child zone.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Mode <span><strong class="command">"full-sibling"</strong></span> and
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <span><strong class="command">"local-sibling"</strong></span> disable sibling glue
415d630b6309922caee8469384a6fab75cf05032Mark Andrews checks but are otherwise the same as <span><strong class="command">"full"</strong></span>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews and <span><strong class="command">"local"</strong></span> respectively.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Mode <span><strong class="command">"none"</strong></span> disables the checks.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Specify the format of the zone file.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Possible formats are <span><strong class="command">"text"</strong></span> (default)
415d630b6309922caee8469384a6fab75cf05032Mark Andrews and <span><strong class="command">"raw"</strong></span>.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Specify the format of the output file specified.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Possible formats are <span><strong class="command">"text"</strong></span> (default)
415d630b6309922caee8469384a6fab75cf05032Mark Andrews and <span><strong class="command">"raw"</strong></span>.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews For <span><strong class="command">named-checkzone</strong></span>,
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User this does not cause any effects unless it dumps the zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User Perform <span><strong class="command">"check-names"</strong></span> checks with the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specified failure mode.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews (default for <span><strong class="command">named-compilezone</strong></span>),
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <span><strong class="command">"warn"</strong></span>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (default for <span><strong class="command">named-checkzone</strong></span>) and
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews <span><strong class="command">"ignore"</strong></span>.
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox User<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont Specify whether MX records should be checked to see if they
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox User <span><strong class="command">"warn"</strong></span> (default) and
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews <span><strong class="command">"ignore"</strong></span>.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Check if a MX record refers to a CNAME.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>,
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews <span><strong class="command">"warn"</strong></span> (default) and
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User <span><strong class="command">"ignore"</strong></span>.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
2b7254075b883d70852a2757210793603085a0f1Tinderbox User Specify whether NS records should be checked to see if they
66317da170ed35b08f5847db2d48b225826327cbTinderbox User are addresses.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews (default for <span><strong class="command">named-compilezone</strong></span>),
b625bdae12277225b076a002dd4af80902529181Tinderbox User <span><strong class="command">"warn"</strong></span>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (default for <span><strong class="command">named-checkzone</strong></span>) and
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews <span><strong class="command">"ignore"</strong></span>.
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater Write zone output to <code class="filename">filename</code>.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater Specify the style of the dumped zone file.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Possible styles are <span><strong class="command">"full"</strong></span> (default)
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews and <span><strong class="command">"relative"</strong></span>.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User The full format is most suitable for processing
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews automatically by a separate script.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews On the other hand, the relative format is more
fa0326cc2cf428f67575b6ba3b97b528a31b0010Tinderbox User human-readable and is thus suitable for editing by hand.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews For <span><strong class="command">named-checkzone</strong></span>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews this does not cause any effects unless it dumps the zone
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews It also does not have any meaning if the output format
415d630b6309922caee8469384a6fab75cf05032Mark Andrews is not text.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt>
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User Check if a SRV record refers to a CNAME.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Possible modes are <span><strong class="command">"fail"</strong></span>,
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <span><strong class="command">"warn"</strong></span> (default) and
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <span><strong class="command">"ignore"</strong></span>.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Chroot to <code class="filename">directory</code> so that
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater directives in the configuration file are processed as if
415d630b6309922caee8469384a6fab75cf05032Mark Andrews run by a similarly chrooted named.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews chdir to <code class="filename">directory</code> so that
415d630b6309922caee8469384a6fab75cf05032Mark Andrews filenames in master file $INCLUDE directives work. This
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews is similar to the directory clause in
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Dump zone file in canonical format.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews This is always enabled for <span><strong class="command">named-compilezone</strong></span>.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt>
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox User Specify whether to check for non-terminal wildcards.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Non-terminal wildcards are almost always the result of a
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews failure to understand the wildcard matching algorithm (RFC 1034).
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User Possible modes are <span><strong class="command">"warn"</strong></span> (default)
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User <span><strong class="command">"ignore"</strong></span>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The domain name of the zone being checked.
fab54780409846f7c71f6026d665f18c77c649efTinderbox User The name of the zone file.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span><strong class="command">named-checkzone</strong></span>
98240f34c38524fd6d0db5a42b9d47cd95ec0fa1Tinderbox User returns an exit status of 1 if
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt errors were detected and 0 otherwise.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
98240f34c38524fd6d0db5a42b9d47cd95ec0fa1Tinderbox User <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span class="corpauthor">Internet Systems Consortium</span>