man.named.html revision b05bdb520d83f7ecaad708fe305268c3420be01d
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - Copyright (C) 2000-2003 Internet Software Consortium.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - Permission to use, copy, modify, and distribute this software for any
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - purpose with or without fee is hereby granted, provided that the above
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - copyright notice and this permission notice appear in all copies.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm - PERFORMANCE OF THIS SOFTWARE.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<!-- $Id: man.named.html,v 1.32 2006/06/08 02:44:05 marka Exp $ -->
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<p><span class="application">named</span> — Internet domain name server</p>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm is a Domain Name System (DNS) server,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm part of the BIND 9 distribution from ISC. For more
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm information on the DNS, see RFCs 1033, 1034, and 1035.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm When invoked without arguments, <span><strong class="command">named</strong></span>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm read the default configuration file
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <code class="filename">/etc/named.conf</code>, read any initial
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm data, and listen for queries.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Use IPv4 only even if the host machine is capable of IPv6.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <code class="option">-4</code> and <code class="option">-6</code> are mutually
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm exclusive.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Use IPv6 only even if the host machine is capable of IPv4.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <code class="option">-4</code> and <code class="option">-6</code> are mutually
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm exclusive.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Use <em class="replaceable"><code>config-file</code></em> as the
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm configuration file instead of the default,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm ensure that reloading the configuration file continues
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to work after the server has changed its working
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm directory due to to a possible
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <code class="option">directory</code> option in the configuration
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm file, <em class="replaceable"><code>config-file</code></em> should be
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm an absolute pathname.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Debugging traces from <span><strong class="command">named</strong></span> become
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm more verbose as the debug level increases.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Run the server in the foreground (i.e. do not daemonize).
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Run the server in the foreground and force all logging
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Create <em class="replaceable"><code>#cpus</code></em> worker threads
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to take advantage of multiple CPUs. If not specified,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <span><strong class="command">named</strong></span> will try to determine the
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm number of CPUs present and create one thread per CPU.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm If it is unable to determine the number of CPUs, a
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm single worker thread will be created.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm specified, the default is port 53.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Write memory usage statistics to <code class="filename">stdout</code> on exit.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm This option is mainly of interest to BIND 9 developers
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm and may be removed or changed in a future release.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to <em class="replaceable"><code>directory</code></em> after
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm processing the command line arguments, but before
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm reading the configuration file.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm This option should be used in conjunction with the
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <code class="option">-u</code> option, as chrooting a process
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm running as root doesn't enhance security on most
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm systems; the way <code class="function">chroot()</code> is
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm defined allows a process with root privileges to
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm escape a chroot jail.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to <em class="replaceable"><code>user</code></em> after completing
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm privileged operations, such as creating sockets that
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm listen on privileged ports.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm On Linux, <span><strong class="command">named</strong></span> uses the kernel's
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm capability mechanism to drop all root privileges
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm except the ability to <code class="function">bind()</code> to
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm privileged port and set process resource limits.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Unfortunately, this means that the <code class="option">-u</code>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm option only works when <span><strong class="command">named</strong></span> is
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm later, since previous kernels did not allow privileges
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to be retained after <code class="function">setuid()</code>.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Report the version number and exit.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Load data from <em class="replaceable"><code>cache-file</code></em> into the
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm cache of the default view.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm This option must not be used. It is only of interest
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to BIND 9 developers and may be removed or changed in a
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm future release.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm In routine operation, signals should not be used to control
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm the nameserver; <span><strong class="command">rndc</strong></span> should be used
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Force a reload of the server.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm Shut down the server.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm The result of sending any other signals to the server is undefined.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm The <span><strong class="command">named</strong></span> configuration file is too complex
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm to describe in detail here. A complete description is provided
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm The default configuration file.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm The default process-id file.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<p><span class="corpauthor">Internet Systems Consortium</span>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="40%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="40%" align="left" valign="top"><span class="application">named-checkzone</span>�</td>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
88f8b78a88cbdc6d8c1af5c3e54bc49d25095c98gm<td width="40%" align="right" valign="top">�<span class="application">rndc</span></td>