named.html revision 1224c3b69b3d18f7127aa042644936af25a2d679
220a21d38f675eb835f5758e3d23e896573aa5eaLennart Poettering - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering - Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering - Permission to use, copy, modify, and distribute this software for any
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering - purpose with or without fee is hereby granted, provided that the above
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek - copyright notice and this permission notice appear in all copies.
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4670e9d5f23fc39360c086fb58eadf8b157ee205Jan Engelhardt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek - PERFORMANCE OF THIS SOFTWARE.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<!-- $Id: named.html,v 1.26 2007/06/20 02:27:32 marka Exp $ -->
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<a name="man.named"></a><div class="titlepage"></div>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<p><span class="application">named</span> — Internet domain name server</p>
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<a name="id2543452"></a><h2>DESCRIPTION</h2>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<p><span><strong class="command">named</strong></span>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering is a Domain Name System (DNS) server,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt part of the BIND 9 distribution from ISC. For more
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering information on the DNS, see RFCs 1033, 1034, and 1035.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering When invoked without arguments, <span><strong class="command">named</strong></span>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering read the default configuration file
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="filename">/etc/named.conf</code>, read any initial
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering data, and listen for queries.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Use IPv4 only even if the host machine is capable of IPv6.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="option">-4</code> and <code class="option">-6</code> are mutually
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Use IPv6 only even if the host machine is capable of IPv4.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="option">-4</code> and <code class="option">-6</code> are mutually
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Use <em class="replaceable"><code>config-file</code></em> as the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering configuration file instead of the default,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="filename">/etc/named.conf</code>. To
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering ensure that reloading the configuration file continues
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to work after the server has changed its working
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering directory due to to a possible
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="option">directory</code> option in the configuration
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering file, <em class="replaceable"><code>config-file</code></em> should be
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering an absolute pathname.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
b97610038a122ff30e60b1996369ca4b979d8b19Kay Sievers Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Debugging traces from <span><strong class="command">named</strong></span> become
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering more verbose as the debug level increases.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Run the server in the foreground (i.e. do not daemonize).
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Run the server in the foreground and force all logging
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek Turn on memory usage debugging flags. Possible flags are
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="replaceable"><code>usage</code></em>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="replaceable"><code>trace</code></em>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="replaceable"><code>record</code></em>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="replaceable"><code>size</code></em>, and
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="replaceable"><code>mctx</code></em>.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering These correspond to the ISC_MEM_DEBUGXXXX flags described in
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="filename"><isc/mem.h></code>.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Create <em class="replaceable"><code>#cpus</code></em> worker threads
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to take advantage of multiple CPUs. If not specified,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <span><strong class="command">named</strong></span> will try to determine the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering number of CPUs present and create one thread per CPU.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering If it is unable to determine the number of CPUs, a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering single worker thread will be created.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt specified, the default is port 53.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Write memory usage statistics to <code class="filename">stdout</code> on exit.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering This option is mainly of interest to BIND 9 developers
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering and may be removed or changed in a future release.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to <em class="replaceable"><code>directory</code></em> after
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering processing the command line arguments, but before
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering reading the configuration file.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering This option should be used in conjunction with the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <code class="option">-u</code> option, as chrooting a process
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering running as root doesn't enhance security on most
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering systems; the way <code class="function">chroot(2)</code> is
b97610038a122ff30e60b1996369ca4b979d8b19Kay Sievers defined allows a process with root privileges to
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering escape a chroot jail.
270f1624022039b370b9db311f9d33492833ad24Lennart Poettering<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek to <em class="replaceable"><code>user</code></em> after completing
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek privileged operations, such as creating sockets that
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering listen on privileged ports.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering On Linux, <span><strong class="command">named</strong></span> uses the kernel's
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering capability mechanism to drop all root privileges
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering except the ability to <code class="function">bind(2)</code> to
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering privileged port and set process resource limits.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Unfortunately, this means that the <code class="option">-u</code>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering option only works when <span><strong class="command">named</strong></span> is
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek later, since previous kernels did not allow privileges
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to be retained after <code class="function">setuid(2)</code>.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek<dt><span class="term">-v</span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Report the version number and exit.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering Load data from <em class="replaceable"><code>cache-file</code></em> into the
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering cache of the default view.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering This option must not be used. It is only of interest
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering to BIND 9 developers and may be removed or changed in a
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering future release.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering In routine operation, signals should not be used to control
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering the nameserver; <span><strong class="command">rndc</strong></span> should be used
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek Force a reload of the server.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term">SIGINT, SIGTERM</span></dt>
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt Shut down the server.
1e190502e78cea1f8bcb62e6d390305c89e41e6aZbigniew Jędrzejewski-Szmek The result of sending any other signals to the server is undefined.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering The <span><strong class="command">named</strong></span> configuration file is too complex
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt to describe in detail here. A complete description is provided
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering The default configuration file.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering The default process-id file.
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
e49b5aada0df13c9e8fce7338ae34e075dd7ccd1Lennart Poettering <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
4c2413bffa7861bd3c4b3589c821ab7e0ac51c83Jan Engelhardt<p><span class="corpauthor">Internet Systems Consortium</span>