man.named.html revision 89bc48260b64a8859ae717e9e5bae380e275fef4
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - Copyright (C) 2000-2003 Internet Software Consortium.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - Permission to use, copy, modify, and distribute this software for any
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - purpose with or without fee is hereby granted, provided that the above
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - copyright notice and this permission notice appear in all copies.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
e50df6c711553f98103f1e0802f7de8c59be7cddslive - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
e50df6c711553f98103f1e0802f7de8c59be7cddslive - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
c449ffd09c6af936695e858cff98916215ff76bckess - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
e50df6c711553f98103f1e0802f7de8c59be7cddslive - PERFORMANCE OF THIS SOFTWARE.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<!-- $Id: man.named.html,v 1.42 2007/02/02 04:33:37 marka Exp $ -->
e50df6c711553f98103f1e0802f7de8c59be7cddslive<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
19e48954d3cfb4f573a99866b0071b6aaa62723ckess<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
3f2fa24c621652779fd6706116a35b49c6dc26cand<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<a name="man.named"></a><div class="titlepage"></div>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<p><span class="application">named</span> — Internet domain name server</p>
e50df6c711553f98103f1e0802f7de8c59be7cddslive<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<p><span><strong class="command">named</strong></span>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele is a Domain Name System (DNS) server,
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele part of the BIND 9 distribution from ISC. For more
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele information on the DNS, see RFCs 1033, 1034, and 1035.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele When invoked without arguments, <span><strong class="command">named</strong></span>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele read the default configuration file
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele <code class="filename">/etc/named.conf</code>, read any initial
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele data, and listen for queries.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Use IPv4 only even if the host machine is capable of IPv6.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele <code class="option">-4</code> and <code class="option">-6</code> are mutually
19e48954d3cfb4f573a99866b0071b6aaa62723ckess Use IPv6 only even if the host machine is capable of IPv4.
e50df6c711553f98103f1e0802f7de8c59be7cddslive <code class="option">-4</code> and <code class="option">-6</code> are mutually
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
19e48954d3cfb4f573a99866b0071b6aaa62723ckess Use <em class="replaceable"><code>config-file</code></em> as the
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele configuration file instead of the default,
e50df6c711553f98103f1e0802f7de8c59be7cddslive ensure that reloading the configuration file continues
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele to work after the server has changed its working
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele directory due to to a possible
19e48954d3cfb4f573a99866b0071b6aaa62723ckess <code class="option">directory</code> option in the configuration
19e48954d3cfb4f573a99866b0071b6aaa62723ckess file, <em class="replaceable"><code>config-file</code></em> should be
19e48954d3cfb4f573a99866b0071b6aaa62723ckess an absolute pathname.
e50df6c711553f98103f1e0802f7de8c59be7cddslive<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
e50df6c711553f98103f1e0802f7de8c59be7cddslive Debugging traces from <span><strong class="command">named</strong></span> become
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele more verbose as the debug level increases.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Run the server in the foreground (i.e. do not daemonize).
e50df6c711553f98103f1e0802f7de8c59be7cddslive Run the server in the foreground and force all logging
e50df6c711553f98103f1e0802f7de8c59be7cddslive<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
e50df6c711553f98103f1e0802f7de8c59be7cddslive Create <em class="replaceable"><code>#cpus</code></em> worker threads
e50df6c711553f98103f1e0802f7de8c59be7cddslive to take advantage of multiple CPUs. If not specified,
e50df6c711553f98103f1e0802f7de8c59be7cddslive <span><strong class="command">named</strong></span> will try to determine the
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele number of CPUs present and create one thread per CPU.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele If it is unable to determine the number of CPUs, a
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele single worker thread will be created.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
e50df6c711553f98103f1e0802f7de8c59be7cddslive specified, the default is port 53.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Write memory usage statistics to <code class="filename">stdout</code> on exit.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele This option is mainly of interest to BIND 9 developers
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele and may be removed or changed in a future release.
e50df6c711553f98103f1e0802f7de8c59be7cddslive<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
e50df6c711553f98103f1e0802f7de8c59be7cddslive to <em class="replaceable"><code>directory</code></em> after
e50df6c711553f98103f1e0802f7de8c59be7cddslive processing the command line arguments, but before
e50df6c711553f98103f1e0802f7de8c59be7cddslive reading the configuration file.
e50df6c711553f98103f1e0802f7de8c59be7cddslive<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
e50df6c711553f98103f1e0802f7de8c59be7cddslive This option should be used in conjunction with the
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele <code class="option">-u</code> option, as chrooting a process
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele running as root doesn't enhance security on most
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele systems; the way <code class="function">chroot()</code> is
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele defined allows a process with root privileges to
e50df6c711553f98103f1e0802f7de8c59be7cddslive escape a chroot jail.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele to <em class="replaceable"><code>user</code></em> after completing
19e48954d3cfb4f573a99866b0071b6aaa62723ckess privileged operations, such as creating sockets that
19e48954d3cfb4f573a99866b0071b6aaa62723ckess listen on privileged ports.
e50df6c711553f98103f1e0802f7de8c59be7cddslive<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e50df6c711553f98103f1e0802f7de8c59be7cddslive On Linux, <span><strong class="command">named</strong></span> uses the kernel's
e50df6c711553f98103f1e0802f7de8c59be7cddslive capability mechanism to drop all root privileges
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele except the ability to <code class="function">bind()</code> to
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele privileged port and set process resource limits.
e50df6c711553f98103f1e0802f7de8c59be7cddslive Unfortunately, this means that the <code class="option">-u</code>
e50df6c711553f98103f1e0802f7de8c59be7cddslive option only works when <span><strong class="command">named</strong></span> is
e50df6c711553f98103f1e0802f7de8c59be7cddslive on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
e50df6c711553f98103f1e0802f7de8c59be7cddslive later, since previous kernels did not allow privileges
19e48954d3cfb4f573a99866b0071b6aaa62723ckess to be retained after <code class="function">setuid()</code>.
e50df6c711553f98103f1e0802f7de8c59be7cddslive Report the version number and exit.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Load data from <em class="replaceable"><code>cache-file</code></em> into the
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele cache of the default view.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele This option must not be used. It is only of interest
19e48954d3cfb4f573a99866b0071b6aaa62723ckess to BIND 9 developers and may be removed or changed in a
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele future release.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele In routine operation, signals should not be used to control
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele the nameserver; <span><strong class="command">rndc</strong></span> should be used
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Force a reload of the server.
252b32956857ad89fc9ee708c4c6eb36097a647cerikabele Shut down the server.