man.named.html revision c4d99a62407cebca29653666ae11f87e4f56ebbc
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - Permission to use, copy, modify, and distribute this software for any
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - purpose with or without fee is hereby granted, provided that the above
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - copyright notice and this permission notice appear in all copies.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync - PERFORMANCE OF THIS SOFTWARE.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<!-- $Id: man.named.html,v 1.84 2008/08/21 01:12:04 tbox Exp $ -->
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<link rel="next" href="man.nsupdate.html" title="nsupdate">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<a name="man.named"></a><div class="titlepage"></div>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<p><span class="application">named</span> — Internet domain name server</p>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<p><span><strong class="command">named</strong></span>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync is a Domain Name System (DNS) server,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync part of the BIND 9 distribution from ISC. For more
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync information on the DNS, see RFCs 1033, 1034, and 1035.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync When invoked without arguments, <span><strong class="command">named</strong></span>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync read the default configuration file
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <code class="filename">/etc/named.conf</code>, read any initial
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync data, and listen for queries.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Use IPv4 only even if the host machine is capable of IPv6.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Use IPv6 only even if the host machine is capable of IPv4.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Use <em class="replaceable"><code>config-file</code></em> as the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync configuration file instead of the default,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync ensure that reloading the configuration file continues
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to work after the server has changed its working
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync directory due to to a possible
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <code class="option">directory</code> option in the configuration
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync file, <em class="replaceable"><code>config-file</code></em> should be
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync an absolute pathname.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Debugging traces from <span><strong class="command">named</strong></span> become
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync more verbose as the debug level increases.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Run the server in the foreground (i.e. do not daemonize).
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Run the server in the foreground and force all logging
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Turn on memory usage debugging flags. Possible flags are
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <em class="replaceable"><code>size</code></em>, and
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync These correspond to the ISC_MEM_DEBUGXXXX flags described in
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Create <em class="replaceable"><code>#cpus</code></em> worker threads
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to take advantage of multiple CPUs. If not specified,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span><strong class="command">named</strong></span> will try to determine the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync number of CPUs present and create one thread per CPU.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync If it is unable to determine the number of CPUs, a
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync single worker thread will be created.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync specified, the default is port 53.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Write memory usage statistics to <code class="filename">stdout</code> on exit.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync This option is mainly of interest to BIND 9 developers
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync and may be removed or changed in a future release.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Allow <span><strong class="command">named</strong></span> to use up to
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <em class="replaceable"><code>#max-socks</code></em> sockets.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync This option should be unnecessary for the vast majority
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync The use of this option could even be harmful because the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync specified value may exceed the limitation of the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync underlying system API.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync It is therefore set only when the default configuration
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync causes exhaustion of file descriptors and the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync operational environment is known to support the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync specified number of sockets.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Note also that the actual maximum number is normally a little
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync fewer than the specified value because
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span><strong class="command">named</strong></span> reserves some file descriptors
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync for its internal use.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to <em class="replaceable"><code>directory</code></em> after
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync processing the command line arguments, but before
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync reading the configuration file.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync This option should be used in conjunction with the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <code class="option">-u</code> option, as chrooting a process
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync running as root doesn't enhance security on most
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync systems; the way <code class="function">chroot(2)</code> is
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync defined allows a process with root privileges to
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync escape a chroot jail.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to <em class="replaceable"><code>user</code></em> after completing
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync privileged operations, such as creating sockets that
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync listen on privileged ports.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync On Linux, <span><strong class="command">named</strong></span> uses the kernel's
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync capability mechanism to drop all root privileges
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync except the ability to <code class="function">bind(2)</code> to
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync privileged port and set process resource limits.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Unfortunately, this means that the <code class="option">-u</code>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync option only works when <span><strong class="command">named</strong></span> is
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync later, since previous kernels did not allow privileges
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to be retained after <code class="function">setuid(2)</code>.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Report the version number and exit.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Load data from <em class="replaceable"><code>cache-file</code></em> into the
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync cache of the default view.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync This option must not be used. It is only of interest
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to BIND 9 developers and may be removed or changed in a
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync future release.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync In routine operation, signals should not be used to control
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync the nameserver; <span><strong class="command">rndc</strong></span> should be used
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Force a reload of the server.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync Shut down the server.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync The result of sending any other signals to the server is undefined.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync The <span><strong class="command">named</strong></span> configuration file is too complex
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync to describe in detail here. A complete description is provided
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync The default configuration file.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync The default process-id file.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<p><span class="corpauthor">Internet Systems Consortium</span>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<td width="40%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<span class="application">named-checkzone</span>�</td>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
ae9ed83297460a052aeae98394d473e83aeafd1fvboxsync<td width="40%" align="right" valign="top">�<span class="application">nsupdate</span>