nsupdate.html revision 2eeb74d1cf5355dd98f6d507a10086e16bb08c4b
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - Copyright (C) 2004-2012, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
dcbd586414fbe6a9b4355081269912c864b72991Simon Ulbricht - Copyright (C) 2000-2003 Internet Software Consortium.
98890889ffb2e8f6f722b00e265a211f13b5a861Corneliu-Claudiu Prodescu - Permission to use, copy, modify, and/or distribute this software for any
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - purpose with or without fee is hereby granted, provided that the above
d6865474d3248c1d8ed080c221c4a9548b0a4bb3Simon Ulbricht - copyright notice and this permission notice appear in all copies.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d6d21a06b12c5d5be318a722e3cec4cac50618c7Simon Ulbricht - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht - PERFORMANCE OF THIS SOFTWARE.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<meta name="generator" content="DocBook XSL Stylesheets V1.76.1">
aac93a690af05bd44beaea0d33bea1039fe508aeSimon Ulbricht<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="nsupdate">
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<a name="man.nsupdate"></a><div class="titlepage"></div>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht — Dynamic DNS update utility
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <div class="refsynopsisdiv" title="Synopsis">
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht [<code class="option">-L <em class="replaceable"><code>level</code></em></code>]
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>]
0b9b34d5c7078caabe393d9433c576613222b579Simon Ulbricht | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>]
dcbd586414fbe6a9b4355081269912c864b72991Simon Ulbricht [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>]
0425e5ed787f937a67a33d20c263fa72409bfe73Simon Ulbricht [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>]
0425e5ed787f937a67a33d20c263fa72409bfe73Simon Ulbricht [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>]
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<a name="idp61049552"></a><h2>DESCRIPTION</h2>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <p><span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht is used to submit Dynamic DNS Update requests as defined in RFC 2136
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht to a name server.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht This allows resource records to be added or removed from a zone
0425e5ed787f937a67a33d20c263fa72409bfe73Simon Ulbricht without manually editing the zone file.
0425e5ed787f937a67a33d20c263fa72409bfe73Simon Ulbricht A single update request can contain requests to add or remove more than
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht resource record.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Zones that are under dynamic control via
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht or a DHCP server should not be edited by hand.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Manual edits could
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht conflict with dynamic updates and cause data to be lost.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht The resource records that are dynamically added or removed with
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht have to be in the same zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Requests are sent to the zone's master server.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht This is identified by the MNAME field of the zone's SOA record.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Transaction signatures can be used to authenticate the Dynamic
dd0d471630e5a700970dd61448de1a0b930c5981Simon Ulbricht DNS updates. These use the TSIG resource record type described
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht in RFC 2845 or the SIG(0) record described in RFC 2535 and
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht RFC 2931 or GSS-TSIG as described in RFC 3645.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht TSIG relies on
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht a shared secret that should only be known to
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span> and the name server.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht For instance, suitable <span class="type">key</span> and
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="type">server</span> statements would be added to
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <code class="filename">/etc/named.conf</code> so that the name server
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht can associate the appropriate secret key and algorithm with
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht the IP address of the client application that will be using
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht TSIG authentication. You can use <span class="command"><strong>ddns-confgen</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht to generate suitable configuration fragments.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht uses the <code class="option">-y</code> or <code class="option">-k</code> options
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht to provide the TSIG shared secret. These options are mutually exclusive.
24483f2ee2ecec569b06242055078638df627177Simon Ulbricht SIG(0) uses public key cryptography.
24483f2ee2ecec569b06242055078638df627177Simon Ulbricht To use a SIG(0) key, the public key must be stored in a KEY
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht record in a zone served by the name server.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht GSS-TSIG uses Kerberos credentials. Standard GSS-TSIG mode
d6865474d3248c1d8ed080c221c4a9548b0a4bb3Simon Ulbricht is switched on with the <code class="option">-g</code> flag. A
d6865474d3248c1d8ed080c221c4a9548b0a4bb3Simon Ulbricht non-standards-compliant variant of GSS-TSIG used by Windows
dd0d471630e5a700970dd61448de1a0b930c5981Simon Ulbricht 2000 can be switched on with the <code class="option">-o</code> flag.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Debug mode. This provides tracing information about the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht update requests that are made and the replies received
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht from the name server.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Extra debug mode.
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht The file containing the TSIG authentication key.
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht Keyfiles may be in two formats: a single file containing
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht a <code class="filename">named.conf</code>-format <span class="command"><strong>key</strong></span>
761eb2b535a763e518887d72cf276f781304cf0eSimon Ulbricht statement, which may be generated automatically by
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>ddns-confgen</strong></span>, or a pair of files whose names are
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht of the format <code class="filename">K{name}.+157.+{random}.key</code> and
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <code class="filename">K{name}.+157.+{random}.private</code>, which can be
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht generated by <span class="command"><strong>dnssec-keygen</strong></span>.
8b8548df458142254941ca61bbc1e7177f7c7c08Simon Ulbricht The <code class="option">-k</code> may also be used to specify a SIG(0) key used
d6d21a06b12c5d5be318a722e3cec4cac50618c7Simon Ulbricht to authenticate Dynamic DNS update requests. In this case, the key
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder specified is not an HMAC-MD5 key.
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht Local-host only mode. This sets the server address to
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder localhost (disabling the <span class="command"><strong>server</strong></span> so that the server
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht address cannot be overridden). Connections to the local server will
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht use a TSIG key found in <code class="filename">/var/run/named/session.key</code>,
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht which is automatically generated by <span class="command"><strong>named</strong></span> if any
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht local master zone has set <span class="command"><strong>update-policy</strong></span> to
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht <span class="command"><strong>local</strong></span>. The location of this key file can be
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht overridden with the <code class="option">-k</code> option.
5a81c9ef37269e5c5bca9e3b8e4e230f293a585dSimon Ulbricht<dt><span class="term">-L <em class="replaceable"><code>level</code></em></span></dt>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Set the logging debug level. If zero, logging is disabled.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Set the port to use for connections to a name server. The
23f5a785aa582c89a0eac4e3c03fae932e8c197aSimon Ulbricht default is 53.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Print the list of private BIND-specific resource record
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht types whose format is understood
23f5a785aa582c89a0eac4e3c03fae932e8c197aSimon Ulbricht by <span class="command"><strong>nsupdate</strong></span>. See also
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<dt><span class="term">-r <em class="replaceable"><code>udpretries</code></em></span></dt>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht The number of UDP retries. The default is 3. If zero, only
c8dd144f13de2667bf3fddea71b0b22d4aa25ff1Simon Ulbricht one update request will be made.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<dt><span class="term">-R <em class="replaceable"><code>randomdev</code></em></span></dt>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Where to obtain randomness. If the operating system
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht does not provide a <code class="filename">/dev/random</code> or
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder equivalent device, the default source of randomness is keyboard
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder input. <code class="filename">randomdev</code> specifies the name of
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht a character device or file containing random data to be used
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht instead of the default. The special value
af14ce5114c39c964531ebba25cbd46cf70ecd7fSimon Ulbricht <code class="filename">keyboard</code> indicates that keyboard input
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder should be used. This option may be specified multiple times.
f9334cbadddf6e7e349b01279db9b2391d23d6b5Christian Maeder<dt><span class="term">-t <em class="replaceable"><code>timeout</code></em></span></dt>
af1369c2b9ce0cb2a290e499b1719441917c0196Simon Ulbricht The maximum time an update request can take before it is
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht aborted. The default is 300 seconds. Zero can be used to
663e95bc1a04e039893e2a5a0815358cda1170eeChristian Maeder disable the timeout.
23f5a785aa582c89a0eac4e3c03fae932e8c197aSimon Ulbricht Print the list of IANA standard resource record types
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht whose format is understood by <span class="command"><strong>nsupdate</strong></span>.
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht <span class="command"><strong>nsupdate</strong></span> will exit after the lists are
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht printed. The <code class="option">-T</code> option can be combined
1937dccb04b363364f7a7de17fdaae1d70583af9Christian Maeder with the <code class="option">-P</code> option.
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht Other types can be entered using "TYPEXXXXX" where "XXXXX" is the
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht decimal value of the type with no leading zeros. The rdata,
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht if present, will be parsed using the UNKNOWN rdata format,
1937dccb04b363364f7a7de17fdaae1d70583af9Christian Maeder (<backslash> <hash> <space> <length>
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht <space> <hexstring>).
65660c22133e6de16f9ece7b36ac6423014b20aaChristian Maeder<dt><span class="term">-u <em class="replaceable"><code>udptimeout</code></em></span></dt>
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht The UDP retry interval. The default is 3 seconds. If zero,
1937dccb04b363364f7a7de17fdaae1d70583af9Christian Maeder the interval will be computed from the timeout interval and
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht number of UDP retries.
af14ce5114c39c964531ebba25cbd46cf70ecd7fSimon Ulbricht Use TCP even for small update requests.
1937dccb04b363364f7a7de17fdaae1d70583af9Christian Maeder By default, <span class="command"><strong>nsupdate</strong></span>
af14ce5114c39c964531ebba25cbd46cf70ecd7fSimon Ulbricht uses UDP to send update requests to the name server unless they are too
af14ce5114c39c964531ebba25cbd46cf70ecd7fSimon Ulbricht large to fit in a UDP request in which case TCP will be used.
7295fc55bb16da7bc967fdf6d63cdfd03b061127Simon Ulbricht TCP may be preferable when a batch of update requests is made.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Print the version number and exit.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Literal TSIG authentication key.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>keyname</code></em> is the name of the key, and
d6865474d3248c1d8ed080c221c4a9548b0a4bb3Simon Ulbricht <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht valid choices are <code class="literal">hmac-md5</code>,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
d6865474d3248c1d8ed080c221c4a9548b0a4bb3Simon Ulbricht is not specified, the default is <code class="literal">hmac-md5</code>.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht NOTE: Use of the <code class="option">-y</code> option is discouraged because the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht shared secret is supplied as a command line argument in clear text.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht This may be visible in the output from
af1369c2b9ce0cb2a290e499b1719441917c0196Simon Ulbricht or in a history file maintained by the user's shell.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <div class="refsection" title="INPUT FORMAT">
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht<a name="idp61114576"></a><h2>INPUT FORMAT</h2>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <p><span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht reads input from
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>filename</code></em>
dd0d471630e5a700970dd61448de1a0b930c5981Simon Ulbricht or standard input.
dd0d471630e5a700970dd61448de1a0b930c5981Simon Ulbricht Each command is supplied on exactly one line of input.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Some commands are for administrative purposes.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht The others are either update instructions or prerequisite checks on the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht contents of the zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht These checks set conditions that some name or set of
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht resource records (RRset) either exists or is absent from the zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht These conditions must be met if the entire update request is to succeed.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Updates will be rejected if the tests for the prerequisite conditions
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Every update request consists of zero or more prerequisites
1937dccb04b363364f7a7de17fdaae1d70583af9Christian Maeder and zero or more updates.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht This allows a suitably authenticated update request to proceed if some
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht specified resource records are present or missing from the zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht A blank input line (or the <span class="command"><strong>send</strong></span> command)
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht accumulated commands to be sent as one Dynamic DNS update request to the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht The command formats and their meaning are as follows:
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>server</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Sends all dynamic update requests to the name server
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>servername</code></em>.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht When no server statement is provided,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht will send updates to the master server of the correct zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht The MNAME field of that zone's SOA record will identify the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht server for that zone.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht is the port number on
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>servername</code></em>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht where the dynamic update requests get sent.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht If no port number is specified, the default DNS port number of
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>local</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Sends all dynamic update requests using the local
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <em class="parameter"><code>address</code></em>.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht When no local statement is provided,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht will send updates using an address and port chosen by the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht can additionally be used to make requests come from a specific
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht If no port number is specified, the system will assign one.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>zone</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Specifies that all updates are to be made to the zone
faa53f457a1847053529e6cdeda3586329815392Simon Ulbricht <em class="parameter"><code>zonename</code></em>.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht statement is provided,
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>nsupdate</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht will attempt determine the correct zone to update based on the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht rest of the input.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>class</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Specify the default class.
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht If no <em class="parameter"><code>class</code></em> is specified, the
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht default class is
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht <span class="command"><strong>ttl</strong></span>
366c3a899de56473bd4e714c5079d7a873411605Simon Ulbricht Specify the default time to live for records to be added.
<em class="parameter"><code>keyname</code></em> <em class="parameter"><code>secret</code></em> pair.
<span class="command"><strong>[<span class="optional">update</span>] del[<span class="optional">ete</span>]</strong></span>
> update delete oldhost.example.com A
> update add newhost.example.com 86400 A 172.16.1.1
> prereq nxdomain nickname.example.com