dig.html revision 8dc5d5e460da15b2481893687cad7e5b72d0314a
803b50652fd6ad81d04d18fc04332c8a94f8fe9aAndreas Gustafsson - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and distribute this software for any
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - purpose with or without fee is hereby granted, provided that the above
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - copyright notice and this permission notice appear in all copies.
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<!-- $Id: dig.html,v 1.42 2008/05/14 01:12:07 tbox Exp $ -->
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="man.dig"></a><div class="titlepage"></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<p><span><strong class="command">dig</strong></span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User (domain information groper) is a flexible tool
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User for interrogating DNS name servers. It performs DNS lookups and
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User displays the answers that are returned from the name server(s) that
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User troubleshoot DNS problems because of its flexibility, ease of use and
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User clarity of output. Other lookup tools tend to have less functionality
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User than <span><strong class="command">dig</strong></span>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Although <span><strong class="command">dig</strong></span> is normally used with
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User arguments, it also has a batch mode of operation for reading lookup
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User requests from a file. A brief summary of its command-line arguments
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User and options is printed when the <code class="option">-h</code> option is given.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Unlike earlier versions, the BIND 9 implementation of
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User command line.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Unless it is told to query a specific name server,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">dig</strong></span> will try each of the servers listed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When no command line arguments or options are given, will perform an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NS query for "." (the root).
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="filename">${HOME}/.digrc</code>. This file is read and
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User any options in it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are applied before the command line arguments.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The IN and CH class names overlap with the IN and CH top level
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User domains names. Either use the <code class="option">-t</code> and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-c</code> options to specify the type and class or
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User use the <code class="option">-q</code> the specify the domain name or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein use "IN." and "CH." when looking up these top level domains.
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater A typical invocation of <span><strong class="command">dig</strong></span> looks like:
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<pre class="programlisting"> dig @server name type </pre>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="constant">server</code></span></dt>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater is the name or IP address of the name server to query. This can
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater address in dotted-decimal notation or an IPv6
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User address in colon-delimited notation. When the supplied
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>server</code></em> argument is a
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">dig</strong></span> resolves that name before
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User querying that name
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User server. If no <em class="parameter"><code>server</code></em>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User argument is provided,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
ed4475f3f583f6137b4ff7fea775c5363a4fdb29Automatic Updater and queries the name servers listed there. The reply from the
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater server that responds is displayed.
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater<dt><span class="term"><code class="constant">name</code></span></dt>
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater is the name of the resource record that is to be looked up.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="constant">type</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User indicates what type of query is required —
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User ANY, A, MX, SIG, etc.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <em class="parameter"><code>type</code></em> can be any valid query
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>type</code></em> argument is supplied,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">dig</strong></span> will perform a lookup for an
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The <code class="option">-b</code> option sets the source IP address of the query
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User to <em class="parameter"><code>address</code></em>. This must be a valid
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User one of the host's network interfaces or "0.0.0.0" or "::". An optional
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User may be specified by appending "#<port>"
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The default query class (IN for internet) is overridden by the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User class, such as HS for Hesiod records or CH for Chaosnet records.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User in batch mode by reading a list of lookup requests to process from the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User file <em class="parameter"><code>filename</code></em>. The file contains a
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User queries, one per line. Each entry in the file should be organized in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User the same way they would be presented as queries to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">dig</strong></span> using the command-line interface.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User If a non-standard port number is to be queried, the
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User the port number that <span><strong class="command">dig</strong></span> will send its
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User instead of the standard DNS port number 53. This option would be used
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User to test a name server that has been configured to listen for queries
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User on a non-standard port number.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User use IPv4 query transport. The <code class="option">-6</code> option forces
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The <code class="option">-t</code> option sets the query type to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>type</code></em>. It can be any valid query type
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User supported in BIND 9. The default query type is "A", unless the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">-x</code> option is supplied to indicate a reverse lookup.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User A zone transfer can be requested by specifying a type of AXFR. When
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User an incremental zone transfer (IXFR) is required,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The incremental zone transfer will contain the changes made to the zone
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User since the serial number in the zone's SOA record was
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-q</code> option sets the query name to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>name</code></em>. This useful do distinguish the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>name</code></em> from other arguments.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Reverse lookups — mapping addresses to names — are simplified by the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User address in dotted-decimal notation, or a colon-delimited IPv6 address.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User When this option is used, there is no need to provide the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User automatically performs a lookup for a name like
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User query type and
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User class to PTR and IN respectively. By default, IPv6 addresses are
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User looked up using nibble format under the IP6.ARPA domain.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User To use the older RFC1886 method using the IP6.INT domain
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User are now experimental and are not attempted.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User responses using transaction signatures (TSIG), specify a TSIG key file
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User using the <code class="option">-k</code> option. You can also specify the TSIG
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User key itself on the command line using the <code class="option">-y</code> option;
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>name</code></em> is the name of the TSIG key and
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>key</code></em> is the actual key. The key is a
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User encoded string, typically generated by
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Caution should be taken when using the <code class="option">-y</code> option on
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User multi-user systems as the key can be visible in the output from
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User or in the shell's history file. When
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User server that is queried needs to know the key and algorithm that is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User being used. In BIND, this is done by providing appropriate
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a name="id2543939"></a><h2>QUERY OPTIONS</h2>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p><span><strong class="command">dig</strong></span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User provides a number of query options which affect
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User the way in which lookups are made and the results displayed. Some of
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User these set or reset flag bits in the query header, some determine which
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User sections of the answer get printed, and others determine the timeout
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User and retry strategies.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Each query option is identified by a keyword preceded by a plus sign
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User (<code class="literal">+</code>). Some keywords set or reset an
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User option. These may be preceded
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User by the string <code class="literal">no</code> to negate the meaning of
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User that keyword. Other
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User keywords assign values to options like the timeout interval. They
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User have the form <code class="option">+keyword=value</code>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The query options are:
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Use [do not use] TCP when querying name servers. The default
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User behavior is to use UDP unless an AXFR or IXFR query is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User requested, in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User which case a TCP connection is used.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Use [do not use] TCP when querying name servers. This alternate
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User syntax to <em class="parameter"><code>+[no]tcp</code></em> is
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User provided for backwards
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User compatibility. The "vc" stands for "virtual circuit".
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Ignore truncation in UDP responses instead of retrying with TCP.
281ed127e3ed6c7e07792c19c3bc4562f71cfa90Tinderbox User default, TCP retries are performed.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Set the search list to contain the single domain
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>somename</code></em>, as if specified in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">domain</strong></span> directive in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="filename">/etc/resolv.conf</code>, and enable
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User processing as if the <em class="parameter"><code>+search</code></em>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User option were given.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]search</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Use [do not use] the search list defined by the searchlist or
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User directive in <code class="filename">resolv.conf</code> (if
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The search list is not used by default.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Perform [do not perform] a search showing intermediate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the "aa" flag in the query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set [do not set] the AD (authentic data) bit in the query. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein currently has a standard meaning only in responses, not in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein but the ability to set the bit in the query is provided for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein completeness.
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Set [do not set] the CD (checking disabled) bit in the query.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User requests the server to not perform DNSSEC validation of
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Display [do not display] the CLASS when printing the record.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Display [do not display] the TTL when printing the record.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Toggle the setting of the RD (recursion desired) bit in the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User This bit is set by default, which means <span><strong class="command">dig</strong></span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User normally sends recursive queries. Recursion is automatically
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User when the <em class="parameter"><code>+nssearch</code></em> or
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>+trace</code></em> query options are
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User When this option is set, <span><strong class="command">dig</strong></span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User attempts to find the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User authoritative name servers for the zone containing the name
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User looked up and display the SOA record that each name server has
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Toggle tracing of the delegation path from the root name servers
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User the name being looked up. Tracing is disabled by default. When
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User tracing is enabled, <span><strong class="command">dig</strong></span> makes
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User iterative queries to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User resolve the name being looked up. It will follow referrals from
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User root servers, showing the answer from each server that was used
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User resolve the lookup.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Toggles the printing of the initial comment in the output
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User the version of <span><strong class="command">dig</strong></span> and the query
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User options that have
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User been applied. This comment is printed by default.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]short</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Provide a terse answer. The default is to print the answer in a
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews verbose form.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Show [or do not show] the IP address and port number that
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User answer when the <em class="parameter"><code>+short</code></em> option
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User is enabled. If
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User short form answers are requested, the default is not to show the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User source address and port number of the server that provided the
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Toggle the display of comment lines in the output. The default
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User print comments.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater This query option toggles the printing of statistics: when the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User was made, the size of the reply and so on. The default
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User to print the query statistics.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Print [do not print] the query as it is sent.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User By default, the query is not printed.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]question</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Print [do not print] the question section of a query when an
281ed127e3ed6c7e07792c19c3bc4562f71cfa90Tinderbox User returned. The default is to print the question section as a
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
7c6b9b263898daf28d657f65dbd75c330ca4aa13Automatic Updater Display [do not display] the answer section of a reply. The
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User is to display it.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
24abfe433efd98bb2099b867fb14d049b2f1f531Tinderbox User Display [do not display] the authority section of a reply. The
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User default is to display it.
7c6b9b263898daf28d657f65dbd75c330ca4aa13Automatic Updater<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Display [do not display] the additional section of a reply.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The default is to display it.
7c6b9b263898daf28d657f65dbd75c330ca4aa13Automatic Updater<dt><span class="term"><code class="option">+[no]all</code></span></dt>
24abfe433efd98bb2099b867fb14d049b2f1f531Tinderbox User Set or clear all display flags.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+time=T</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Sets the timeout for a query to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>T</code></em> seconds. The default
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User timeout is 5 seconds.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User An attempt to set <em class="parameter"><code>T</code></em> to less
7c6b9b263898daf28d657f65dbd75c330ca4aa13Automatic Updater than 1 will result
7c6b9b263898daf28d657f65dbd75c330ca4aa13Automatic Updater in a query timeout of 1 second being applied.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="option">+tries=T</code></span></dt>
b68a2d272b958eb2c40cce59ee33e71c5f5f521bTinderbox User Sets the number of times to try UDP queries to server to
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <em class="parameter"><code>T</code></em> instead of the default, 3.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>T</code></em> is less than or equal to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User zero, the number of
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User tries is silently rounded up to 1.
b68a2d272b958eb2c40cce59ee33e71c5f5f521bTinderbox User<dt><span class="term"><code class="option">+retry=T</code></span></dt>
b68a2d272b958eb2c40cce59ee33e71c5f5f521bTinderbox User Sets the number of times to retry UDP queries to server to
b68a2d272b958eb2c40cce59ee33e71c5f5f521bTinderbox User <em class="parameter"><code>T</code></em> instead of the default, 2.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>+tries</code></em>, this does not include
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Set the number of dots that have to appear in
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User considered absolute. The default value is that defined using
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews ndots statement is present. Names with fewer dots are
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User interpreted as
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User relative names and will be searched for in the domains listed in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="option">search</code> or <code class="option">domain</code> directive in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="filename">/etc/resolv.conf</code>.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Set the UDP message buffer size advertised using EDNS0 to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews of this buffer are 65535 and 0 respectively. Values outside
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User this range are rounded up or down appropriately.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Values other than zero will cause a EDNS query to be sent.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+edns=#</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Specify the EDNS version to query with. Valid values
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User are 0 to 255. Setting the EDNS version will cause a
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User EDNS query to be sent. <code class="option">+noedns</code> clears the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User remembered EDNS version.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Print records like the SOA records in a verbose multi-line
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User format with human-readable comments. The default is to print
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User each record on a single line, to facilitate machine parsing
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User of the <span><strong class="command">dig</strong></span> output.
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Do not try the next server if you receive a SERVFAIL. The
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to not try the next server which is the reverse of normal stub
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Attempt to display the contents of messages which are malformed.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The default is to not display malformed answers.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Requests DNSSEC records be sent by setting the DNSSEC OK bit
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User in the OPT record in the additional section of the query.
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Chase DNSSEC signature chains. Requires dig be compiled with
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User -DDIG_SIGCHASE.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Specifies a file containing trusted keys to be used with
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="option">+sigchase</code>. Each DNSKEY record must be
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User on its own line.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User If not specified <span><strong class="command">dig</strong></span> will look for
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="filename">/etc/trusted-key.key</code> then
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <code class="filename">trusted-key.key</code> in the current directory.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Requires dig be compiled with -DDIG_SIGCHASE.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User When chasing DNSSEC signature chains perform a top-down
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User Requires dig be compiled with -DDIG_SIGCHASE.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Include an EDNS name server ID request when sending a query.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<a name="id2545142"></a><h2>MULTIPLE QUERIES</h2>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The BIND 9 implementation of <span><strong class="command">dig </strong></span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User specifying multiple queries on the command line (in addition to
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User supporting the <code class="option">-f</code> batch file option). Each of those
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User queries can be supplied with its own set of flags, options and query
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User In this case, each <em class="parameter"><code>query</code></em> argument
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User individual query in the command-line syntax described above. Each
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User consists of any of the standard options and flags, the name to be
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User looked up, an optional query type and class and any query options that
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User should be applied to that query.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User A global set of query options, which should be applied to all queries,
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User can also be supplied. These global query options must precede the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User first tuple of name, class, type, options, flags, and query options
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User supplied on the command line. Any global query options (except
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User the <code class="option">+[no]cmd</code> option) can be
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User overridden by a query-specific set of query options. For example:
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox Userdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User shows how <span><strong class="command">dig</strong></span> could be used from the
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User reverse lookup of 127.0.0.1 and a query for the NS records of
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User A global query option of <em class="parameter"><code>+qr</code></em> is
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User that <span><strong class="command">dig</strong></span> shows the initial query it made
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User lookup. The final query has a local query option of
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User will not print the initial query when it looks up the NS records for
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User domain name) support, it can accept and display non-ASCII domain names.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User <span><strong class="command">dig</strong></span> appropriately converts character encoding of
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User domain name before sending a request to DNS server or displaying a
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User reply from the server.
69f175fc57a578dd85c1548ed3f34284321f9d3aMark Andrews If you'd like to turn off the IDN support for some reason, defines
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User the <code class="envar">IDN_DISABLE</code> environment variable.
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User The IDN support is disabled if the variable is set when
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">dig</strong></span> runs.
731cc132f22dbc9e0ecd7035dce314a61076d31bAutomatic Updater<p><code class="filename">/etc/resolv.conf</code>
548a24c3d36837aa5f0e64f7bb8c7308909ffa89Tinderbox User<p><code class="filename">${HOME}/.digrc</code>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox User <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox User There are probably too many query options.