man.named-checkzone.html revision 43b94483957d3168796a816ed86cf097518817dc
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - Copyright (C) 2000-2003 Internet Software Consortium.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - Permission to use, copy, modify, and/or distribute this software for any
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - purpose with or without fee is hereby granted, provided that the above
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - copyright notice and this permission notice appear in all copies.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes - PERFORMANCE OF THIS SOFTWARE.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<!-- $Id$ -->
70953fb44a7140fe206c3a5f011e24209c8c5c6abnicholes<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
16b55a35cff91315d261d1baa776138af465c4e4fuankg<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<link rel="prev" href="man.named-checkconf.html" title="named-checkconf">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<link rel="next" href="man.named.html" title="named">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<tr><th colspan="3" align="center"><span class="application">named-checkzone</span></th></tr>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<a accesskey="p" href="man.named-checkconf.html">Prev</a>�</td>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<td width="20%" align="right">�<a accesskey="n" href="man.named.html">Next</a>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<a name="man.named-checkzone"></a><div class="titlepage"></div>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-h</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-J <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-J <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<p><span><strong class="command">named-checkzone</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes checks the syntax and integrity of a zone file. It performs the
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes same checks as <span><strong class="command">named</strong></span> does when loading a
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes checking zone files before configuring them into a name server.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">named-compilezone</strong></span> is similar to
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">named-checkzone</strong></span>, but it always dumps the
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes zone contents to a specified file in a specified format.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Additionally, it applies stricter check levels by default,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes since the dump output will be used as an actual zone file
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes loaded by <span><strong class="command">named</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes When manually specified otherwise, the check levels must at
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes least be as strict as those specified in the
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">named</strong></span> configuration file.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Enable debugging.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Print the usage summary and exit.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Quiet mode - exit code only.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Print the version of the <span><strong class="command">named-checkzone</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes program and exit.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes When loading a zone file, read the journal if it exists.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes The journal file name is assumed to be the zone file name
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg appended with the string <code class="filename">.jnl</code>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-J <em class="replaceable"><code>filename</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes When loading the zone file read the journal from the given
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes file, if it exists. (Implies -j.)
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Specify the class of the zone. If not specified, "IN" is assumed.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Perform post-load zone integrity checks. Possible modes are
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg <span><strong class="command">"full"</strong></span> (default),
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"full-sibling"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"local"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"local-sibling"</strong></span> and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"none"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"full"</strong></span> checks that MX records
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes refer to A or AAAA record (both in-zone and out-of-zone
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes hostnames). Mode <span><strong class="command">"local"</strong></span> only
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes checks MX records which refer to in-zone hostnames.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"full"</strong></span> checks that SRV records
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes refer to A or AAAA record (both in-zone and out-of-zone
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes hostnames). Mode <span><strong class="command">"local"</strong></span> only
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes checks SRV records which refer to in-zone hostnames.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"full"</strong></span> checks that delegation NS
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes records refer to A or AAAA record (both in-zone and out-of-zone
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes hostnames). It also checks that glue address records
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes in the zone match those advertised by the child.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"local"</strong></span> only checks NS records which
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes refer to in-zone hostnames or that some required glue exists,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes that is when the nameserver is in a child zone.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"full-sibling"</strong></span> and
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg <span><strong class="command">"local-sibling"</strong></span> disable sibling glue
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes checks but are otherwise the same as <span><strong class="command">"full"</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes and <span><strong class="command">"local"</strong></span> respectively.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Mode <span><strong class="command">"none"</strong></span> disables the checks.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Specify the format of the zone file.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible formats are <span><strong class="command">"text"</strong></span> (default),
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"raw"</strong></span>, and <span><strong class="command">"map"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Specify the format of the output file specified.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes For <span><strong class="command">named-checkzone</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes this does not cause any effects unless it dumps the zone
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible formats are <span><strong class="command">"text"</strong></span> (default),
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes which is the standard textual representation of the zone,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes and <span><strong class="command">"map"</strong></span>, <span><strong class="command">"raw"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes and <span><strong class="command">"raw=N"</strong></span>, which store the zone in a
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes binary format for rapid loading by <span><strong class="command">named</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"raw=N"</strong></span> specifies the format version of
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes the raw zone file: if N is 0, the raw file can be read by
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes any version of <span><strong class="command">named</strong></span>; if N is 1, the file
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes can be read by release 9.9.0 or higher; the default is 1.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Perform <span><strong class="command">"check-names"</strong></span> checks with the
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes specified failure mode.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible modes are <span><strong class="command">"fail"</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes (default for <span><strong class="command">named-compilezone</strong></span>),
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"warn"</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes (default for <span><strong class="command">named-checkzone</strong></span>) and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"ignore"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-L <em class="replaceable"><code>serial</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes When compiling a zone to "raw" or "map" format, set the
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes "source serial" value in the header to the specified serial
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg number. (This is expected to be used primarily for testing
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Specify whether MX records should be checked to see if they
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"warn"</strong></span> (default) and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"ignore"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Check if a MX record refers to a CNAME.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible modes are <span><strong class="command">"fail"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"warn"</strong></span> (default) and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"ignore"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt>
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg Specify whether NS records should be checked to see if they
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg are addresses.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible modes are <span><strong class="command">"fail"</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes (default for <span><strong class="command">named-compilezone</strong></span>),
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"warn"</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes (default for <span><strong class="command">named-checkzone</strong></span>) and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"ignore"</strong></span>.
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Write zone output to <code class="filename">filename</code>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes If <code class="filename">filename</code> is <code class="filename">-</code> then
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes write to standard out.
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg This is mandatory for <span><strong class="command">named-compilezone</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-r <em class="replaceable"><code>mode</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Check for records that are treated as different by DNSSEC but
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes are semantically equal in plain DNS.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible modes are <span><strong class="command">"fail"</strong></span>,
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"warn"</strong></span> (default) and
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes <span><strong class="command">"ignore"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Specify the style of the dumped zone file.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes Possible styles are <span><strong class="command">"full"</strong></span> (default)
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes and <span><strong class="command">"relative"</strong></span>.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes The full format is most suitable for processing
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes automatically by a separate script.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes On the other hand, the relative format is more
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes human-readable and is thus suitable for editing by hand.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes For <span><strong class="command">named-checkzone</strong></span>
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes this does not cause any effects unless it dumps the zone
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes It also does not have any meaning if the output format
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes is not text.
3c937b528ca923d5b51e63def9f888af4a77bb40bnicholes<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt>
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg Check if a SRV record refers to a CNAME.