- IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. <
date>June 30, 2000</
date>
<
refentrytitle><
application>named</
application></
refentrytitle>
<
refmiscinfo>BIND9</
refmiscinfo>
<
refname><
application>named</
application></
refname>
<
refpurpose>Internet domain name server</
refpurpose>
<
arg><
option>-4</
option></
arg>
<
arg><
option>-6</
option></
arg>
<
arg><
option>-c <
replaceable class="parameter">config-file</
replaceable></
option></
arg>
<
arg><
option>-d <
replaceable class="parameter">debug-level</
replaceable></
option></
arg>
<
arg><
option>-f</
option></
arg>
<
arg><
option>-g</
option></
arg>
<
arg><
option>-n <
replaceable class="parameter">#cpus</
replaceable></
option></
arg>
<
arg><
option>-p <
replaceable class="parameter">port</
replaceable></
option></
arg>
<
arg><
option>-s</
option></
arg>
<
arg><
option>-t <
replaceable class="parameter">directory</
replaceable></
option></
arg>
<
arg><
option>-u <
replaceable class="parameter">user</
replaceable></
option></
arg>
<
arg><
option>-v</
option></
arg>
<
arg><
option>-x <
replaceable class="parameter">cache-file</
replaceable></
option></
arg>
<
title>DESCRIPTION</
title>
<
command>named</
command> is a Domain Name System (DNS) server,
part of the BIND 9 distribution from ISC. For more
information on the DNS, see RFCs 1033, 1034, and 1035.
When invoked without arguments, <
command>named</
command> will
read the default configuration file
data, and listen for queries.
Use IPv4 only even if the host machine is capable of IPv6.
<
option>-4</
option> and <
option>-6</
option> are mutually
Use IPv6 only even if the host machine is capable of IPv4.
<
option>-4</
option> and <
option>-6</
option> are mutually
<
term>-c <
replaceable class="parameter">config-file</
replaceable></
term>
class="parameter">config-file</
replaceable> as the
configuration file instead of the default,
ensure that reloading the configuration file continues
to work after the server has changed its working
directory due to to a possible
<
option>directory</
option> option in the configuration
class="parameter">config-file</
replaceable> should be
<
term>-d <
replaceable class="parameter">debug-level</
replaceable></
term>
Set the daemon's debug level to <
replaceable class="parameter">debug-level</
replaceable>.
Debugging traces from <
command>named</
command> become
more verbose as the debug level increases.
Run the server in the foreground (
i.e. do not daemonize).
Run the server in the foreground and force all logging
to <
filename>stderr</
filename>.
<
term>-n <
replaceable class="parameter">#cpus</
replaceable></
term>
class="parameter">#cpus</
replaceable> worker threads
to take advantage of multiple CPUs. If not specified,
<
command>named</
command> will try to determine the
number of CPUs present and create one thread per CPU.
If it is unable to determine the number of CPUs, a
single worker thread will be created.
<
term>-p <
replaceable class="parameter">port</
replaceable></
term>
Listen for queries on port <
replaceable class="parameter">port</
replaceable>. If not
specified, the default is port 53.
Write memory usage statistics to <
filename>stdout</
filename> on exit.
This option is mainly of interest to BIND 9 developers
and may be removed or changed in a future release.
<
term>-t <
replaceable class="parameter">directory</
replaceable></
term>
<
function>chroot()</
function> to <
replaceable class="parameter">directory</
replaceable> after
processing the command line arguments, but before
reading the configuration file.
This option should be used in conjunction with the
<
option>-u</
option> option, as chrooting a process
running as root doesn't enhance security on most
systems; the way <
function>chroot()</
function> is
defined allows a process with root privileges to
<
term>-u <
replaceable class="parameter">user</
replaceable></
term>
<
function>setuid()</
function> to <
replaceable class="parameter">user</
replaceable> after completing
privileged operations, such as creating sockets that
listen on privileged ports.
On Linux, <
command>named</
command> uses the kernel's
capability mechanism to drop all root privileges
except the ability to <
function>bind()</
function> to a
privileged port and set process resource limits.
Unfortunately, this means that the <
option>-u</
option>
option only works when <
command>named</
command> is run
on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
later, since previous kernels did not allow privileges
to be retained after <
function>setuid()</
function>.
Report the version number and exit.
<
term>-x <
replaceable class="parameter">cache-file</
replaceable></
term>
Load data from <
replaceable class="parameter">cache-file</
replaceable> into the
cache of the default view.
This option must not be used. It is only of interest
to BIND 9 developers and may be removed or changed in a
In routine operation, signals should not be used to control
the nameserver; <
command>rndc</
command> should be used
Force a reload of the server.
<
term>SIGINT, SIGTERM</
term>
The result of sending any other signals to the server is undefined.
<
title>CONFIGURATION</
title>
The <
command>named</
command> configuration file is too complex
to describe in detail here. A complete description is
provided in the <
citetitle>BIND 9 Administrator Reference
The default configuration file.
The default process-id file.
<
citetitle>RFC 1033</
citetitle>,
<
citetitle>RFC 1034</
citetitle>,
<
citetitle>RFC 1035</
citetitle>,
<
refentrytitle>rndc</
refentrytitle>
<
refentrytitle>lwresd</
refentrytitle>
<
citetitle>BIND 9 Administrator Reference Manual</
citetitle>.
<
corpauthor>Internet Software Consortium</
corpauthor>