man.named.html revision 3b4098640dd85040270f39b9a5ee5e22de99d3d6
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - Copyright (C) 2000-2003 Internet Software Consortium.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - Permission to use, copy, modify, and distribute this software for any
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - purpose with or without fee is hereby granted, provided that the above
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - copyright notice and this permission notice appear in all copies.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
2e545ce2450a9953665f701bb05350f0d3f26275nd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor - PERFORMANCE OF THIS SOFTWARE.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<!-- $Id: man.named.html,v 1.13 2006/01/06 01:55:39 marka Exp $ -->
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
3f08db06526d6901aa08c110b5bc7dde6bc39905nd<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<p><span class="application">named</span> — Internet domain name server</p>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<p><span><strong class="command">named</strong></span>
e40d2af13fd7ff120eda49cd327c68fbc16443e8sf is a Domain Name System (DNS) server,
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor part of the BIND 9 distribution from ISC. For more
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor information on the DNS, see RFCs 1033, 1034, and 1035.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor When invoked without arguments, <span><strong class="command">named</strong></span>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor read the default configuration file
ffb01336be79c64046b636e59fa8ddca8ec029edsf <code class="filename">/etc/named.conf</code>, read any initial
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor data, and listen for queries.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor Use IPv4 only even if the host machine is capable of IPv6.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor <code class="option">-4</code> and <code class="option">-6</code> are mutually
df135dbebadfdf65d0c45e181d6c19b84d17b7c6sf exclusive.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor Use IPv6 only even if the host machine is capable of IPv4.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor <code class="option">-4</code> and <code class="option">-6</code> are mutually
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor Use <em class="replaceable"><code>config-file</code></em> as the
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor configuration file instead of the default,
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor ensure that reloading the configuration file continues
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor to work after the server has changed its working
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor directory due to to a possible
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor <code class="option">directory</code> option in the configuration
48c64aeceef385e19025b384bd719b2a9789592dnd file, <em class="replaceable"><code>config-file</code></em> should be
48c64aeceef385e19025b384bd719b2a9789592dnd an absolute pathname.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
1462ff536f1b939bb337766b2056109c29664c4erbowen Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
1462ff536f1b939bb337766b2056109c29664c4erbowen Debugging traces from <span><strong class="command">named</strong></span> become
1462ff536f1b939bb337766b2056109c29664c4erbowen more verbose as the debug level increases.
1462ff536f1b939bb337766b2056109c29664c4erbowen Run the server in the foreground (i.e. do not daemonize).
25f8d56998acb95d39c62c489d72b92d8d29b765humbedooh Run the server in the foreground and force all logging
25f8d56998acb95d39c62c489d72b92d8d29b765humbedooh<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
65a611af7093423efb91e5794b8887a527d4cf63trawick Create <em class="replaceable"><code>#cpus</code></em> worker threads
65a611af7093423efb91e5794b8887a527d4cf63trawick to take advantage of multiple CPUs. If not specified,
65a611af7093423efb91e5794b8887a527d4cf63trawick <span><strong class="command">named</strong></span> will try to determine the
65a611af7093423efb91e5794b8887a527d4cf63trawick number of CPUs present and create one thread per CPU.
65a611af7093423efb91e5794b8887a527d4cf63trawick If it is unable to determine the number of CPUs, a
65a611af7093423efb91e5794b8887a527d4cf63trawick single worker thread will be created.
65a611af7093423efb91e5794b8887a527d4cf63trawick<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
65a611af7093423efb91e5794b8887a527d4cf63trawick Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor specified, the default is port 53.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor Write memory usage statistics to <code class="filename">stdout</code> on exit.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor This option is mainly of interest to BIND 9 developers
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor and may be removed or changed in a future release.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor to <em class="replaceable"><code>directory</code></em> after
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor processing the command line arguments, but before
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor reading the configuration file.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor This option should be used in conjunction with the
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor <code class="option">-u</code> option, as chrooting a process
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor running as root doesn't enhance security on most
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor systems; the way <code class="function">chroot()</code> is
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor defined allows a process with root privileges to
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor escape a chroot jail.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor to <em class="replaceable"><code>user</code></em> after completing
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor privileged operations, such as creating sockets that
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor listen on privileged ports.
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e40d2af13fd7ff120eda49cd327c68fbc16443e8sf On Linux, <span><strong class="command">named</strong></span> uses the kernel's
1462ff536f1b939bb337766b2056109c29664c4erbowen capability mechanism to drop all root privileges
1462ff536f1b939bb337766b2056109c29664c4erbowen except the ability to <code class="function">bind()</code> to
e40d2af13fd7ff120eda49cd327c68fbc16443e8sf privileged port and set process resource limits.
e40d2af13fd7ff120eda49cd327c68fbc16443e8sf Unfortunately, this means that the <code class="option">-u</code>
e40d2af13fd7ff120eda49cd327c68fbc16443e8sf option only works when <span><strong class="command">named</strong></span> is
1462ff536f1b939bb337766b2056109c29664c4erbowen on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
1462ff536f1b939bb337766b2056109c29664c4erbowen later, since previous kernels did not allow privileges
1462ff536f1b939bb337766b2056109c29664c4erbowen to be retained after <code class="function">setuid()</code>.
1462ff536f1b939bb337766b2056109c29664c4erbowen Report the version number and exit.
1462ff536f1b939bb337766b2056109c29664c4erbowen<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
1462ff536f1b939bb337766b2056109c29664c4erbowen Load data from <em class="replaceable"><code>cache-file</code></em> into the
1462ff536f1b939bb337766b2056109c29664c4erbowen cache of the default view.
1462ff536f1b939bb337766b2056109c29664c4erbowen<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
1462ff536f1b939bb337766b2056109c29664c4erbowen This option must not be used. It is only of interest
737a1f4117ce00c29a1b78b93db08e4a273ab2edtrawick to BIND 9 developers and may be removed or changed in a
737a1f4117ce00c29a1b78b93db08e4a273ab2edtrawick future release.
1462ff536f1b939bb337766b2056109c29664c4erbowen In routine operation, signals should not be used to control
1462ff536f1b939bb337766b2056109c29664c4erbowen the nameserver; <span><strong class="command">rndc</strong></span> should be used
1462ff536f1b939bb337766b2056109c29664c4erbowen Force a reload of the server.
1462ff536f1b939bb337766b2056109c29664c4erbowen Shut down the server.
1462ff536f1b939bb337766b2056109c29664c4erbowen The result of sending any other signals to the server is undefined.
f086b4b402fa9a2fefc7dda85de2a3cc1cd0a654rjung The <span><strong class="command">named</strong></span> configuration file is too complex
727872d18412fc021f03969b8641810d8896820bhumbedooh to describe in detail here. A complete description is provided
727872d18412fc021f03969b8641810d8896820bhumbedooh <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
0d0ba3a410038e179b695446bb149cce6264e0abnd<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
ac082aefa89416cbdc9a1836eaf3bed9698201c8humbedooh The default configuration file.
0d0ba3a410038e179b695446bb149cce6264e0abnd<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
727872d18412fc021f03969b8641810d8896820bhumbedooh The default process-id file.
7fec19672a491661b2fe4b29f685bc7f4efa64d4nd <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
cc8190433d13f5e9de618c5d7f10c824c0c1919cgryzor <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,