man.named.html revision 6bf6622b7b9053dc52527478473b572f042c4b5b
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - Copyright (C) 2000-2003 Internet Software Consortium.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - Permission to use, copy, modify, and distribute this software for any
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - purpose with or without fee is hereby granted, provided that the above
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - copyright notice and this permission notice appear in all copies.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen - PERFORMANCE OF THIS SOFTWARE.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<!-- $Id: man.named.html,v 1.31 2006/06/04 23:38:17 marka Exp $ -->
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<link rel="next" href="man.rndc.html" title="rndc">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f6c0407545ee77d4647c8cd912e3156b0a48e2f1Timo Sirainen<table width="100%" summary="Navigation header">
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen<th width="60%" align="center">Manual pages</th>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<a name="man.named"></a><div class="titlepage"></div>
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen<p><span class="application">named</span> — Internet domain name server</p>
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen<p><span><strong class="command">named</strong></span>
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen is a Domain Name System (DNS) server,
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen part of the BIND 9 distribution from ISC. For more
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen information on the DNS, see RFCs 1033, 1034, and 1035.
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen When invoked without arguments, <span><strong class="command">named</strong></span>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen read the default configuration file
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen <code class="filename">/etc/named.conf</code>, read any initial
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen data, and listen for queries.
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen Use IPv4 only even if the host machine is capable of IPv6.
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen <code class="option">-4</code> and <code class="option">-6</code> are mutually
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen Use IPv6 only even if the host machine is capable of IPv4.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen <code class="option">-4</code> and <code class="option">-6</code> are mutually
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Use <em class="replaceable"><code>config-file</code></em> as the
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen configuration file instead of the default,
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen <code class="filename">/etc/named.conf</code>. To
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen ensure that reloading the configuration file continues
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen to work after the server has changed its working
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen directory due to to a possible
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen <code class="option">directory</code> option in the configuration
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen file, <em class="replaceable"><code>config-file</code></em> should be
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen an absolute pathname.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Debugging traces from <span><strong class="command">named</strong></span> become
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen more verbose as the debug level increases.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Run the server in the foreground (i.e. do not daemonize).
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen Run the server in the foreground and force all logging
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen Create <em class="replaceable"><code>#cpus</code></em> worker threads
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen to take advantage of multiple CPUs. If not specified,
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen <span><strong class="command">named</strong></span> will try to determine the
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen number of CPUs present and create one thread per CPU.
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen If it is unable to determine the number of CPUs, a
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen single worker thread will be created.
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen specified, the default is port 53.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Write memory usage statistics to <code class="filename">stdout</code> on exit.
ec096c8a0f52a4bb5d12aa9afe1a576368aa8094Timo Sirainen<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen This option is mainly of interest to BIND 9 developers
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen and may be removed or changed in a future release.
4dc5662260a63669054cd0dc1bac2ccab3fa2ae7Timo Sirainen<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen to <em class="replaceable"><code>directory</code></em> after
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen processing the command line arguments, but before
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen reading the configuration file.
0a3d3ca7db7cbdc947ccabe740c40561b3f5c066Timo Sirainen<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen This option should be used in conjunction with the
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen <code class="option">-u</code> option, as chrooting a process
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen running as root doesn't enhance security on most
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen systems; the way <code class="function">chroot()</code> is
1964dbea138cb4a213b1bce1eeee68992b18829aTimo Sirainen defined allows a process with root privileges to
1964dbea138cb4a213b1bce1eeee68992b18829aTimo Sirainen escape a chroot jail.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen to <em class="replaceable"><code>user</code></em> after completing
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen privileged operations, such as creating sockets that
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen listen on privileged ports.
a40f21e8239a87a8fab2648955b0f568908ca8b5Timo Sirainen<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
35565557e05721a761132cec2ba1d93acacb6c14Timo Sirainen On Linux, <span><strong class="command">named</strong></span> uses the kernel's
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen capability mechanism to drop all root privileges
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen except the ability to <code class="function">bind()</code> to
dcc76bb1e1bb287e3e71e6a39a7ca207fab0eaa8Timo Sirainen privileged port and set process resource limits.
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen Unfortunately, this means that the <code class="option">-u</code>
6a029ebed745994ce2e5f64182d8b5c8f10d53d6Timo Sirainen option only works when <span><strong class="command">named</strong></span> is