named.html revision 947d37484ed01966a9e89dd27f62c1b427324dc2
7d5ac94fda90b837211dadf2585c0fe8c5dc3e5djerenkrantz - Copyright (C) 2004-2009, 2011, 2013-2015 Internet Systems Consortium, Inc. ("ISC")
c330021bf3f45cbf187fa644781e67f7e470a58awrowe - Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
62f7716b14b71603a8004434ca3536902bfb8899wrowe - Permission to use, copy, modify, and/or distribute this software for any
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - purpose with or without fee is hereby granted, provided that the above
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - copyright notice and this permission notice appear in all copies.
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe - PERFORMANCE OF THIS SOFTWARE.
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe<!-- $Id$ -->
366616a5cc6212cbf7134ccf877f965d668c6b04wrowe<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
38dc50ae00a1ea57fa41500d74f4e818747e3cefpquerna<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz<a name="man.named"></a><div class="titlepage"></div>
38dc50ae00a1ea57fa41500d74f4e818747e3cefpquerna<p><span class="application">named</span> — Internet domain name server</p>
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-D <em class="replaceable"><code>string</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-L <em class="replaceable"><code>logfile</code></em></code>] [<code class="option">-M <em class="replaceable"><code>option</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>lock-file</code></em></code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz<p><span><strong class="command">named</strong></span>
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz is a Domain Name System (DNS) server,
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz part of the BIND 9 distribution from ISC. For more
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz information on the DNS, see RFCs 1033, 1034, and 1035.
ecf8d72af432e53e4c0661fb99dfda8061507bfajerenkrantz When invoked without arguments, <span><strong class="command">named</strong></span>
d96ee8cda2799e1f2743c1603adeb4833ed0e15fslive read the default configuration file
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe <code class="filename">/etc/named.conf</code>, read any initial
62f7716b14b71603a8004434ca3536902bfb8899wrowe data, and listen for queries.
47c81da11264e8870b146dbdf3ac0384d3290ae9jerenkrantz Use IPv4 only even if the host machine is capable of IPv6.
0db0abcbe4211435c08e0c0e8f5daa278bed3524wsanchez <code class="option">-4</code> and <code class="option">-6</code> are mutually
f6a9b598f78b2e745456bfc4bbc4afd2d1572aa9stas Use IPv6 only even if the host machine is capable of IPv4.
0db0abcbe4211435c08e0c0e8f5daa278bed3524wsanchez <code class="option">-4</code> and <code class="option">-6</code> are mutually
d64eb0a76ec10c2405d14b892b0eb0f7ce27a613stas<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
d64eb0a76ec10c2405d14b892b0eb0f7ce27a613stas Use <em class="replaceable"><code>config-file</code></em> as the
f6a9b598f78b2e745456bfc4bbc4afd2d1572aa9stas configuration file instead of the default,
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz ensure that reloading the configuration file continues
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz to work after the server has changed its working
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz directory due to to a possible
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz <code class="option">directory</code> option in the configuration
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz file, <em class="replaceable"><code>config-file</code></em> should be
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz an absolute pathname.
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
7718f3d5b4da70eb063877f5300ee361435910f4nd Debugging traces from <span><strong class="command">named</strong></span> become
38d2c5d41cdb5eb28668d0290b59f8c76ae2a4bfjim more verbose as the debug level increases.
38d2c5d41cdb5eb28668d0290b59f8c76ae2a4bfjim<dt><span class="term">-D <em class="replaceable"><code>string</code></em></span></dt>
b9b0788ea79de3ee230ccb0abf93a0c2c08f6287lars Specifies a string that is used to identify a instance of
b9b0788ea79de3ee230ccb0abf93a0c2c08f6287lars <span><strong class="command">named</strong></span> in a process listing. The contents
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz of <em class="replaceable"><code>string</code></em> are
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz not examined.
1af5c0e25a649bb298e25ddfa5418fa18bdcb107aaron<dt><span class="term">-E <em class="replaceable"><code>engine-name</code></em></span></dt>
84cbf7ab5adeca6b94c462a46d74f17388b6ff6fjerenkrantz When applicable, specifies the hardware to use for
771a4d2c4ebe8debc609ed7d65938c4b72b9d4cepquerna cryptographic operations, such as a secure key store used
f4cb04eb78da02a38fcdd87489dc7b660107d55fjerenkrantz for signing.
b05930e6008f69bd323abe0c10f81f40ffd27983brianp When BIND is built with OpenSSL PKCS#11 support, this defaults
d96ee8cda2799e1f2743c1603adeb4833ed0e15fslive to the string "pkcs11", which identifies an OpenSSL engine
380584d22150608f50ca4ae8089efeb30794514ajerenkrantz that can drive a cryptographic accelerator or hardware service
d96ee8cda2799e1f2743c1603adeb4833ed0e15fslive module. When BIND is built with native PKCS#11 cryptography
0723420d6007137272f4f140ffd17035b17c1563nd (--enable-native-pkcs11), it defaults to the path of the PKCS#11
0723420d6007137272f4f140ffd17035b17c1563nd provider library specified via "--with-pkcs11".
0723420d6007137272f4f140ffd17035b17c1563nd Run the server in the foreground (i.e. do not daemonize).
0723420d6007137272f4f140ffd17035b17c1563nd Run the server in the foreground and force all logging
016f2545c9375ec7fc5e9cb70aa1ae0cace83c98jerenkrantz<dt><span class="term">-L <em class="replaceable"><code>logfile</code></em></span></dt>
016f2545c9375ec7fc5e9cb70aa1ae0cace83c98jerenkrantz Log to the file <code class="option">logfile</code> by default
016f2545c9375ec7fc5e9cb70aa1ae0cace83c98jerenkrantz instead of the system log.
016f2545c9375ec7fc5e9cb70aa1ae0cace83c98jerenkrantz<dt><span class="term">-M <em class="replaceable"><code>option</code></em></span></dt>
56afb23a30271d30e87f225cce6c69969d6dd8bbwrowe Sets the default memory context options. Currently
016f2545c9375ec7fc5e9cb70aa1ae0cace83c98jerenkrantz the only supported option is
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe which causes the internal memory manager to be bypassed
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe in favor of system-provided memory allocation functions.
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe Turn on memory usage debugging flags. Possible flags are
6362fd5c48f6b2193f5d356a9747172101b24e91jerenkrantz These correspond to the ISC_MEM_DEBUGXXXX flags described in
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe Create <em class="replaceable"><code>#cpus</code></em> worker threads
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe to take advantage of multiple CPUs. If not specified,
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe <span><strong class="command">named</strong></span> will try to determine the
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe number of CPUs present and create one thread per CPU.
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe If it is unable to determine the number of CPUs, a
b05930e6008f69bd323abe0c10f81f40ffd27983brianp single worker thread will be created.
b05930e6008f69bd323abe0c10f81f40ffd27983brianp<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
b05930e6008f69bd323abe0c10f81f40ffd27983brianp Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
4c7dab038d90d7feb67ef8ddbfacc77be8c9dbf0jwoolley specified, the default is port 53.
8c8fbb8546af54582539898be704411a60058d85trawick Write memory usage statistics to <code class="filename">stdout</code> on exit.
8c8fbb8546af54582539898be704411a60058d85trawick<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
f9b8e29cfca92cf0a996e8ab17fa1a1f447cecc7stoddard This option is mainly of interest to BIND 9 developers
a23b1c5a74208b03884c09a6f9dd5d6c97fa6415trawick and may be removed or changed in a future release.
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe Allow <span><strong class="command">named</strong></span> to use up to
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe <em class="replaceable"><code>#max-socks</code></em> sockets.
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe The default value is 4096 on systems built with default
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe configuration options, and 21000 on systems built with
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe "configure --with-tuning=large".
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe This option should be unnecessary for the vast majority
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe The use of this option could even be harmful because the
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe specified value may exceed the limitation of the
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe underlying system API.
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe It is therefore set only when the default configuration
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe causes exhaustion of file descriptors and the
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe operational environment is known to support the
db2d668e6233d8949b35ee7f9f42f444758f9ce9rbb specified number of sockets.
db2d668e6233d8949b35ee7f9f42f444758f9ce9rbb Note also that the actual maximum number is normally a little
db2d668e6233d8949b35ee7f9f42f444758f9ce9rbb fewer than the specified value because
db2d668e6233d8949b35ee7f9f42f444758f9ce9rbb <span><strong class="command">named</strong></span> reserves some file descriptors
db2d668e6233d8949b35ee7f9f42f444758f9ce9rbb for its internal use.
5d12baef135b5d3cb94745e007a1575398469724jerenkrantz<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
b865daaa4ef731a7066ee6d97e2aae36c7743939jerenkrantz to <em class="replaceable"><code>directory</code></em> after
b865daaa4ef731a7066ee6d97e2aae36c7743939jerenkrantz processing the command line arguments, but before
f881b8be216de36c6b964324c772450bca38a4e6trawick reading the configuration file.
f881b8be216de36c6b964324c772450bca38a4e6trawick<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
0bcb1fe39dfaacf9745b6633f5cc9ebc8e2596caaaron This option should be used in conjunction with the
0bcb1fe39dfaacf9745b6633f5cc9ebc8e2596caaaron <code class="option">-u</code> option, as chrooting a process
0bcb1fe39dfaacf9745b6633f5cc9ebc8e2596caaaron running as root doesn't enhance security on most
0bcb1fe39dfaacf9745b6633f5cc9ebc8e2596caaaron systems; the way <code class="function">chroot(2)</code> is
33f5961d34a8b5390cebad0543b3ebe67830e5d7jerenkrantz defined allows a process with root privileges to
33f5961d34a8b5390cebad0543b3ebe67830e5d7jerenkrantz escape a chroot jail.
33f5961d34a8b5390cebad0543b3ebe67830e5d7jerenkrantz<dt><span class="term">-U <em class="replaceable"><code>#listeners</code></em></span></dt>
ff42f83cbf31893bcde9712332a8e5ee970f6a74trawick Use <em class="replaceable"><code>#listeners</code></em>
ff42f83cbf31893bcde9712332a8e5ee970f6a74trawick worker threads to listen for incoming UDP packets on each
33f5961d34a8b5390cebad0543b3ebe67830e5d7jerenkrantz address. If not specified, <span><strong class="command">named</strong></span> will
54e1babd5a5a56c576eeeace54110150769cc916coar calculate a default value based on the number of detected
54e1babd5a5a56c576eeeace54110150769cc916coar CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
54e1babd5a5a56c576eeeace54110150769cc916coar detected CPUs divided by 2 for values higher than 4.
54e1babd5a5a56c576eeeace54110150769cc916coar If <code class="option">-n</code> has been set to a higher value than
54e1babd5a5a56c576eeeace54110150769cc916coar the number of detected CPUs, then <code class="option">-U</code> may
54e1babd5a5a56c576eeeace54110150769cc916coar be increased as high as that value, but no higher.
54e1babd5a5a56c576eeeace54110150769cc916coar<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
54e1babd5a5a56c576eeeace54110150769cc916coar to <em class="replaceable"><code>user</code></em> after completing
54e1babd5a5a56c576eeeace54110150769cc916coar privileged operations, such as creating sockets that
54e1babd5a5a56c576eeeace54110150769cc916coar listen on privileged ports.
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
949aa7bba7f804faa8e6b08cad42a98fc0255d85jerenkrantz On Linux, <span><strong class="command">named</strong></span> uses the kernel's
949aa7bba7f804faa8e6b08cad42a98fc0255d85jerenkrantz capability mechanism to drop all root privileges
949aa7bba7f804faa8e6b08cad42a98fc0255d85jerenkrantz except the ability to <code class="function">bind(2)</code> to
949aa7bba7f804faa8e6b08cad42a98fc0255d85jerenkrantz privileged port and set process resource limits.
949aa7bba7f804faa8e6b08cad42a98fc0255d85jerenkrantz Unfortunately, this means that the <code class="option">-u</code>
2b93f4e3bba84578a57e5edcdb510071d2e79ed9pquerna option only works when <span><strong class="command">named</strong></span> is
07021d9f405849228b859d9fb4b877f20e4fbba3jerenkrantz on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
4ca13a5e126946272f02637e268a8e09193c553ecoar later, since previous kernels did not allow privileges
4ca13a5e126946272f02637e268a8e09193c553ecoar to be retained after <code class="function">setuid(2)</code>.
48c0c81cd6fabac9d3386406d97633780365b839coar Report the version number and exit.
48c0c81cd6fabac9d3386406d97633780365b839coar Report the version number and build options, and exit.
4ca13a5e126946272f02637e268a8e09193c553ecoar<dt><span class="term">-X <em class="replaceable"><code>lock-file</code></em></span></dt>
b84f66c93f820824b1d5455181f55598b766319cwrowe Acquire a lock on the specified file at runtime; this
b84f66c93f820824b1d5455181f55598b766319cwrowe helps to prevent duplicate <span><strong class="command">named</strong></span> instances
b84f66c93f820824b1d5455181f55598b766319cwrowe from running simultaneously.
7fe18c15b669db9d191859695901dc4fcf3829dawrowe Use of this option overrides the <span><strong class="command">lock-file</strong></span>
7fe18c15b669db9d191859695901dc4fcf3829dawrowe If set to <code class="literal">none</code>, the lock file check
cc22a72861c58dda7f3768613aec864e4c4e0353striker is disabled.
cc22a72861c58dda7f3768613aec864e4c4e0353striker<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
60d567a0c2aae815ee6fc20c0d65032bea52c92cwrowe Load data from <em class="replaceable"><code>cache-file</code></em> into the
60d567a0c2aae815ee6fc20c0d65032bea52c92cwrowe cache of the default view.
f610c7c704235bc327dbe9b62982f5b3f8e30a77wrowe<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
2fb49a1d25f38421a68d31b4cbb5d9293fdeafbewrowe This option must not be used. It is only of interest
60d567a0c2aae815ee6fc20c0d65032bea52c92cwrowe to BIND 9 developers and may be removed or changed in a
19cbe4d7b7c931723e7249de6829bf965a1fee72stoddard future release.
0bff2f28ef945280c17099c142126178a78e1e54manoj In routine operation, signals should not be used to control
35330e0d79ceb8027223bbb8330a381b1f989d6etrawick the nameserver; <span><strong class="command">rndc</strong></span> should be used
e0427bf8e52a8fb920cb8b6adb5cdb3b6535b7fecoar Force a reload of the server.
6758b07b4b79f898b0f56375016cea7da0bfb495wrowe Shut down the server.
db3ccce11afac4fc1d4f51a65424412f7480c46cgstein The result of sending any other signals to the server is undefined.
db3ccce11afac4fc1d4f51a65424412f7480c46cgstein The <span><strong class="command">named</strong></span> configuration file is too complex
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick to describe in detail here. A complete description is provided
79d5106a9b65b956d646f5daae4b94bc79e315b8trawick <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
cf6bf6c34c936e6a6fe731dbce4a5c3c8bf8e9a3gstein <span><strong class="command">named</strong></span> inherits the <code class="function">umask</code>
b3b4e853e4958357ee2d50e2fe41effecfde9eedwrowe (file creation mode mask) from the parent process. If files
93c5cba06b623ebe8e4372e886eece12d9a80c3egstein created by <span><strong class="command">named</strong></span>, such as journal files,
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein need to have custom permissions, the <code class="function">umask</code>
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein should be set explicitly in the script used to start the
14cccaddba3a9263cf0d0ddc311e18f3e3dc9b0fgstein <span><strong class="command">named</strong></span> process.
e636eba7474e0010b5c7198af1c2fe5ad8652dbbmanoj<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
e636eba7474e0010b5c7198af1c2fe5ad8652dbbmanoj The default configuration file.
281da4c02cf40c663298ded7e4e5b913a8f8b814gstein<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
2f728b2e8555fee1b7cc11e886488692f2575fbddougm The default process-id file.
21e01f13f717faeca3e498d7d9c9b4d3af98ae27trawick <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
21e01f13f717faeca3e498d7d9c9b4d3af98ae27trawick <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
ddd44b06b04507cae083c52451e28f54f0bdb5afstoddard <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
05cd8b63829a8a9047076ffbce8dd6cd1cb2db92thommay <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
05cd8b63829a8a9047076ffbce8dd6cd1cb2db92thommay <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
05cd8b63829a8a9047076ffbce8dd6cd1cb2db92thommay <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
05cd8b63829a8a9047076ffbce8dd6cd1cb2db92thommay<p><span class="corpauthor">Internet Systems Consortium</span>