man.named.html revision 9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdff
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Permission to use, copy, modify, and distribute this software for any
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - purpose with or without fee is hereby granted, provided that the above
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - copyright notice and this permission notice appear in all copies.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - PERFORMANCE OF THIS SOFTWARE.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<!-- $Id: man.named.html,v 1.109 2009/02/26 01:12:16 tbox Exp $ -->
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="next" href="man.nsupdate.html" title="nsupdate">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<a name="man.named"></a><div class="titlepage"></div>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<p><span class="application">named</span> — Internet domain name server</p>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<p><span><strong class="command">named</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is a Domain Name System (DNS) server,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync part of the BIND 9 distribution from ISC. For more
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync information on the DNS, see RFCs 1033, 1034, and 1035.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync When invoked without arguments, <span><strong class="command">named</strong></span>
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync read the default configuration file
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync <code class="filename">/etc/named.conf</code>, read any initial
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync data, and listen for queries.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync Use IPv4 only even if the host machine is capable of IPv6.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Use IPv6 only even if the host machine is capable of IPv4.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Use <em class="replaceable"><code>config-file</code></em> as the
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync configuration file instead of the default,
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync ensure that reloading the configuration file continues
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync to work after the server has changed its working
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync directory due to to a possible
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync <code class="option">directory</code> option in the configuration
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync file, <em class="replaceable"><code>config-file</code></em> should be
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync an absolute pathname.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Debugging traces from <span><strong class="command">named</strong></span> become
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync more verbose as the debug level increases.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Run the server in the foreground (i.e. do not daemonize).
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Run the server in the foreground and force all logging
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Turn on memory usage debugging flags. Possible flags are
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync <em class="replaceable"><code>size</code></em>, and
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync These correspond to the ISC_MEM_DEBUGXXXX flags described in
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Create <em class="replaceable"><code>#cpus</code></em> worker threads
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync to take advantage of multiple CPUs. If not specified,
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync <span><strong class="command">named</strong></span> will try to determine the
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync number of CPUs present and create one thread per CPU.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync If it is unable to determine the number of CPUs, a
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync single worker thread will be created.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync specified, the default is port 53.
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync Write memory usage statistics to <code class="filename">stdout</code> on exit.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync This option is mainly of interest to BIND 9 developers
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync and may be removed or changed in a future release.
4e3469ac31db1401d787d60312d2179bc09757b9vboxsync<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Allow <span><strong class="command">named</strong></span> to use up to
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync <em class="replaceable"><code>#max-socks</code></em> sockets.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync This option should be unnecessary for the vast majority
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync The use of this option could even be harmful because the
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync specified value may exceed the limitation of the
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync underlying system API.
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync It is therefore set only when the default configuration
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync causes exhaustion of file descriptors and the
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync operational environment is known to support the
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync specified number of sockets.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync Note also that the actual maximum number is normally a little
4e3469ac31db1401d787d60312d2179bc09757b9vboxsync fewer than the specified value because
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync <span><strong class="command">named</strong></span> reserves some file descriptors
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync for its internal use.
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
343a0f715a7abe21308b4a564698ab9c93473fcavboxsync to <em class="replaceable"><code>directory</code></em> after
9ac9eda1e04d193f54339eaeffe1c8b2f8ea04b1vboxsync processing the command line arguments, but before
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync reading the configuration file.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync This option should be used in conjunction with the
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync <code class="option">-u</code> option, as chrooting a process
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync running as root doesn't enhance security on most
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync systems; the way <code class="function">chroot(2)</code> is
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync defined allows a process with root privileges to
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync escape a chroot jail.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync to <em class="replaceable"><code>user</code></em> after completing
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync privileged operations, such as creating sockets that
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync listen on privileged ports.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
cd899b2444ca69566bd04cfac96828714d3bd1b0vboxsync On Linux, <span><strong class="command">named</strong></span> uses the kernel's
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync capability mechanism to drop all root privileges
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync except the ability to <code class="function">bind(2)</code> to
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync privileged port and set process resource limits.
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync Unfortunately, this means that the <code class="option">-u</code>
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync option only works when <span><strong class="command">named</strong></span> is
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync later, since previous kernels did not allow privileges
4ee5a4cd660730c997785c6cbc12881a115079e8vboxsync to be retained after <code class="function">setuid(2)</code>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Report the version number and exit.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Report the version number and build options, and exit.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Load data from <em class="replaceable"><code>cache-file</code></em> into the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync cache of the default view.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync This option must not be used. It is only of interest
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync to BIND 9 developers and may be removed or changed in a
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync future release.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync In routine operation, signals should not be used to control
cd899b2444ca69566bd04cfac96828714d3bd1b0vboxsync the nameserver; <span><strong class="command">rndc</strong></span> should be used
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Force a reload of the server.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Shut down the server.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The result of sending any other signals to the server is undefined.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <span><strong class="command">named</strong></span> configuration file is too complex
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync to describe in detail here. A complete description is provided
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The default configuration file.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="filename">/var/run/named/named.pid</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The default process-id file.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<p><span class="corpauthor">Internet Systems Consortium</span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="40%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<span class="application">named-checkzone</span>�</td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="40%" align="right" valign="top">�<span class="application">nsupdate</span>