man.named.html revision 919c99b7a47dadd4564eb2b48be2f59216d932fc
80833bb9a1bf25dcf19e814438a4b311d2e1f4cffuankg - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
a34684a59b60a4173c25035d0c627ef17e6dc215rpluem - Copyright (C) 2000-2003 Internet Software Consortium.
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - Permission to use, copy, modify, and distribute this software for any
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - purpose with or without fee is hereby granted, provided that the above
1337c7673efc1f80f634139fbad7cbb98a0dc657ylavic - copyright notice and this permission notice appear in all copies.
4da61833a1cbbca94094f9653fd970582b97a72etrawick - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4da61833a1cbbca94094f9653fd970582b97a72etrawick - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
4da61833a1cbbca94094f9653fd970582b97a72etrawick - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
4da61833a1cbbca94094f9653fd970582b97a72etrawick - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
4789804be088bcd86ae637a29cdb7fda25169521jailletc - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4789804be088bcd86ae637a29cdb7fda25169521jailletc - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
4789804be088bcd86ae637a29cdb7fda25169521jailletc - PERFORMANCE OF THIS SOFTWARE.
e50c3026198fd496f183cda4c32a202925476778covener<!-- $Id: man.named.html,v 1.110 2009/03/04 01:12:20 tbox Exp $ -->
5b88c8507d5ef6d0c4cfbc78230294968175b638minfrin<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
6c3b9cebb551140fbb25d58bae08b539b3802133ylavic<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
4f29b65ab4b547ad5dbe506e2d0ff5d12ead9247ylavic<link rel="next" href="man.nsupdate.html" title="nsupdate">
0a0df13b7f1f4f1a74fe295253d89ca3911b301aylavic<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
69301145375a889e7e37caf7cc7321ac0f91801erpluem<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
506bfe33206b2fece40ef25f695af39dd4130facjkaluza<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
506bfe33206b2fece40ef25f695af39dd4130facjkaluza<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
17e6c95f3b22d18acdf8380fb26a8d0e10c80767ylavic<p><span class="application">named</span> — Internet domain name server</p>
e8bd80a4bb88199d2f9a24a50345688e52d9c116ylavic<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic<p><span><strong class="command">named</strong></span>
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic is a Domain Name System (DNS) server,
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic part of the BIND 9 distribution from ISC. For more
330e16bea8fe9cace4de90c349750c03dfb1fe64ylavic information on the DNS, see RFCs 1033, 1034, and 1035.
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener When invoked without arguments, <span><strong class="command">named</strong></span>
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener read the default configuration file
d7205b1a86c51c27b71a2c458dc453fd53a261c1covener <code class="filename">/etc/named.conf</code>, read any initial
44ff304057225e944e220e981d434a046d14cf06covener data, and listen for queries.
032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand Use IPv4 only even if the host machine is capable of IPv6.
032982212dbcc7c3cce95bf89c503bb56e185ac7kbrand <code class="option">-4</code> and <code class="option">-6</code> are mutually
caad2986f81ab263f7af41467dd622dc9add17f3ylavic Use IPv6 only even if the host machine is capable of IPv4.
45a10d38e6051fd7bdf9d742aaae633d97ff02abjailletc <code class="option">-4</code> and <code class="option">-6</code> are mutually
2165214331e4afafca4048f66f303d0253d7b001covener<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
a34684a59b60a4173c25035d0c627ef17e6dc215rpluem Use <em class="replaceable"><code>config-file</code></em> as the
1e2d421a36999d292042a5539971070d54aa6c63ylavic configuration file instead of the default,
1e2d421a36999d292042a5539971070d54aa6c63ylavic ensure that reloading the configuration file continues
fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh to work after the server has changed its working
fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh directory due to to a possible
fa7ed98b9dc94c5845cf845aea0a44ecacd290c9humbedooh <code class="option">directory</code> option in the configuration
0b67eb8568cd58bb77082703951679b42cf098actrawick file, <em class="replaceable"><code>config-file</code></em> should be
0b67eb8568cd58bb77082703951679b42cf098actrawick an absolute pathname.
0b67eb8568cd58bb77082703951679b42cf098actrawick<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
fb1985a97912b25ec6564c73e610a31e5fc6e25fcovener Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
09c87c777bed1655621bb20e1c46cb6b1a63279dcovener Debugging traces from <span><strong class="command">named</strong></span> become
6502b7b32f980cc2093bb3ebce37e5e4dc68fba4ylavic more verbose as the debug level increases.
c1a63b8fad09c419c1a64f75993feb8a343a6801ylavic Run the server in the foreground (i.e. do not daemonize).
e466c40e1801982602ee0200c9e8b61cc148742djailletc Run the server in the foreground and force all logging
457468b82e59d01eba00dd9d0817309c8f5e414ejim<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
04983e3bd1754764eec7d6bb772fe3b0bf391771jorton Turn on memory usage debugging flags. Possible flags are
49dacedb6c387b786b7911082ff35121a45f414bcovener These correspond to the ISC_MEM_DEBUGXXXX flags described in
cfd9415521847b2f9394fad04fb701cfb955f503rjung<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe Create <em class="replaceable"><code>#cpus</code></em> worker threads
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe to take advantage of multiple CPUs. If not specified,
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe <span><strong class="command">named</strong></span> will try to determine the
28c31fb73c1264bd1d0ff932573677030b024c7dwrowe number of CPUs present and create one thread per CPU.
8491e0600f69b0405e156ea8a419653c065c645bcovener If it is unable to determine the number of CPUs, a
63b9f1f5880391261705f696d7d65507bbe9ace3covener single worker thread will be created.
63b9f1f5880391261705f696d7d65507bbe9ace3covener<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
49dacedb6c387b786b7911082ff35121a45f414bcovener Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
49dacedb6c387b786b7911082ff35121a45f414bcovener specified, the default is port 53.
3c990331fc6702119e4f5b8ba9eae3021aea5265jim Write memory usage statistics to <code class="filename">stdout</code> on exit.
fc42512879dd0504532f52fe5d0d0383dda96a1eniq<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq This option is mainly of interest to BIND 9 developers
0451df5dc50fa5d8b3e07d92ee6a92e36a1181a5niq and may be removed or changed in a future release.
da0442c0440caef34706e2c2f3af05cb65921cc0jailletc<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
06b8f183140c8e02e0974e938a05078b511d1603covener Allow <span><strong class="command">named</strong></span> to use up to
15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem <em class="replaceable"><code>#max-socks</code></em> sockets.
259878293a997ff49f5ddfc53d3739cbdc25444ecovener<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
15890c9306ba98f6fc243e15a3c4778ddc7d773erpluem This option should be unnecessary for the vast majority
b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin The use of this option could even be harmful because the
b54b024c06a19926832d77d40ba35ad8c41e4d3dminfrin specified value may exceed the limitation of the
65967d05f839dbf27cf91d91fa79585eeae19660minfrin underlying system API.
65967d05f839dbf27cf91d91fa79585eeae19660minfrin It is therefore set only when the default configuration
65967d05f839dbf27cf91d91fa79585eeae19660minfrin causes exhaustion of file descriptors and the
65967d05f839dbf27cf91d91fa79585eeae19660minfrin operational environment is known to support the
8152945ae46857b170cb227e79bb799f4fc7710dminfrin specified number of sockets.
8152945ae46857b170cb227e79bb799f4fc7710dminfrin Note also that the actual maximum number is normally a little
8152945ae46857b170cb227e79bb799f4fc7710dminfrin fewer than the specified value because
8152945ae46857b170cb227e79bb799f4fc7710dminfrin <span><strong class="command">named</strong></span> reserves some file descriptors
75f5c2db254c0167a0e396254460de09b775d203trawick for its internal use.
4f0358189bfa57b8e75bd6b94db264302a8f336amrumph<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick to <em class="replaceable"><code>directory</code></em> after
5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick processing the command line arguments, but before
5716f9c6daa92dde5f2f9d11ed63f7c9549c223atrawick reading the configuration file.
54d750a84a175d8e338880514d440773eb986b50covener<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
54d750a84a175d8e338880514d440773eb986b50covener This option should be used in conjunction with the
54d750a84a175d8e338880514d440773eb986b50covener <code class="option">-u</code> option, as chrooting a process
54d750a84a175d8e338880514d440773eb986b50covener running as root doesn't enhance security on most
54d750a84a175d8e338880514d440773eb986b50covener systems; the way <code class="function">chroot(2)</code> is
7a3aa12f0eda24793ee26d6a179bd53132e9dae8covener defined allows a process with root privileges to
54d750a84a175d8e338880514d440773eb986b50covener escape a chroot jail.
83b50288fa7d306324bba68832011ea08f5c7832covener<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
5f066f496cd9f20a2a701255bc67d44e7cb46daetrawick to <em class="replaceable"><code>user</code></em> after completing
2e15620d724fb8e3a5be183b917359a2fd6e9468covener privileged operations, such as creating sockets that
2e15620d724fb8e3a5be183b917359a2fd6e9468covener listen on privileged ports.
2e15620d724fb8e3a5be183b917359a2fd6e9468covener<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener On Linux, <span><strong class="command">named</strong></span> uses the kernel's
1b988c41ee505962781d110a3e4c2c90f1ea0aa4covener capability mechanism to drop all root privileges
b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener except the ability to <code class="function">bind(2)</code> to
b8efdc95bec9cf089aa1be0bfd07d46aa1137a7acovener privileged port and set process resource limits.
f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd Unfortunately, this means that the <code class="option">-u</code>
f06e7c4b1bce6b6491e5de0b7998d3f5696b293dchrisd option only works when <span><strong class="command">named</strong></span> is
179565be4043d7e5f9161aa75271fa0a001866d9covener on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
179565be4043d7e5f9161aa75271fa0a001866d9covener later, since previous kernels did not allow privileges
179565be4043d7e5f9161aa75271fa0a001866d9covener to be retained after <code class="function">setuid(2)</code>.
7b7430e701e9a31ce809da7c220bb8dfcf68c86etrawick Report the version number and exit.
ccc20788c1e5fc973f36df634399c89acb70deaejerenkrantz Report the version number and build options, and exit.
273e512f20f262e5e2aa8e0e83371d1929fb76adjkaluza<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
efe780dcf13b2b95effabf897d694d8f23feac74trawick Load data from <em class="replaceable"><code>cache-file</code></em> into the
fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin cache of the default view.
fe83f60b41477b14a37edcfcd1f7f5c5a1ebfe44minfrin<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
993d1261a278d7322bccef219101220b7b4fb8c5jkaluza This option must not be used. It is only of interest
ba050a6f942b9fa0e81ed73437588005c569655ccovener to BIND 9 developers and may be removed or changed in a
ba050a6f942b9fa0e81ed73437588005c569655ccovener future release.
efe780dcf13b2b95effabf897d694d8f23feac74trawick In routine operation, signals should not be used to control
793214f67dede32edfd9ee96c664ead04d175cbbjfclere the nameserver; <span><strong class="command">rndc</strong></span> should be used
249d09d51808cb7981af99762c3b3736ca126cd5jkaluza Force a reload of the server.
56589be3d7a3e9343370df240010c6928cc78b39jkaluza Shut down the server.
77ca16c5676da23155311e13cee61e7eaba9fa3ejailletc The result of sending any other signals to the server is undefined.
4d12805e6c18253040223ea637acd6b3b3c18f60jorton The <span><strong class="command">named</strong></span> configuration file is too complex
4d12805e6c18253040223ea637acd6b3b3c18f60jorton to describe in detail here. A complete description is provided
85eacfc96a04547ef25aabbc06440039715084c2jorton <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
cb666b29f81df1d11d65002250153353568021fccovener<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
6a80c3c6f4b8ea7ba5e89402b8b779b09ce020e0covener The default configuration file.
6a80c3c6f4b8ea7ba5e89402b8b779b09ce020e0covener<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
75a230a728338d84dcfe81edd375352f34de22d0covener The default process-id file.
65a4e663b82f8bce28ac22ab2edfd7502de36998sf <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
65a4e663b82f8bce28ac22ab2edfd7502de36998sf <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
65a4e663b82f8bce28ac22ab2edfd7502de36998sf <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
65a4e663b82f8bce28ac22ab2edfd7502de36998sf <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
c7de1955eb0eaeabf7042902476397692672d549sf <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
74e7f6c55fd67b10cb400b3f6d1dc718a303d944minfrin <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
a511a29faf2ff7ead3b67680154a624effb31aafminfrin<p><span class="corpauthor">Internet Systems Consortium</span>
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
6d601599d3d65df0410eae6e573e75b2dbfb1fb4minfrin<td width="40%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
ef82e8fa164e0a1f8b813f7deb6b7ead96018c94niq<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
26c5829347f6a355c00f1ba0301d575056b69536niq<td width="40%" align="right" valign="top">�<span class="application">nsupdate</span>