man.named.html revision cedb0bd0c1e3c461b7e479a16d3adfd5b150f1f4
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC")
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - Permission to use, copy, modify, and distribute this software for any
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - purpose with or without fee is hereby granted, provided that the above
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - copyright notice and this permission notice appear in all copies.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
4e9f070a55a9ab37758f11adff5ca15d0498bcffvboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4e9f070a55a9ab37758f11adff5ca15d0498bcffvboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync - PERFORMANCE OF THIS SOFTWARE.
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync<!-- $Id: man.named.html,v 1.9 2005/10/13 03:14:04 marka Exp $ -->
e2f182ec6538ad3eec9aab9c682296e044063200vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e85b92d4df013df97a72864a412eb94eb3f70acevboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
7c465e80d0699fab71706c8a013a3327ec7034dcvboxsync<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
b9c7eaa5e444d11199b5fceda5662dc5e7452f70vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
b9c7eaa5e444d11199b5fceda5662dc5e7452f70vboxsync<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
9d60c2d3e53e65bb430517a9b7335061bc508b09vboxsync<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
9d60c2d3e53e65bb430517a9b7335061bc508b09vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
34f95fc7cf8cd158233f0596a26e88d588226271vboxsync<a name="man.named"></a><div class="titlepage"></div>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<p><span class="application">named</span> — Internet domain name server</p>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<p><span><strong class="command">named</strong></span>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is a Domain Name System (DNS) server,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync part of the BIND 9 distribution from ISC. For more
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync information on the DNS, see RFCs 1033, 1034, and 1035.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync When invoked without arguments, <span><strong class="command">named</strong></span>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync read the default configuration file
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <code class="filename">/etc/named.conf</code>, read any initial
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync data, and listen for queries.
49ad08ab15f3b96d2d5ba5134a0506dd7b27fdf1vboxsync Use IPv4 only even if the host machine is capable of IPv6.
49ad08ab15f3b96d2d5ba5134a0506dd7b27fdf1vboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Use IPv6 only even if the host machine is capable of IPv4.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <code class="option">-4</code> and <code class="option">-6</code> are mutually
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Use <em class="replaceable"><code>config-file</code></em> as the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configuration file instead of the default,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ensure that reloading the configuration file continues
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to work after the server has changed its working
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync directory due to to a possible
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <code class="option">directory</code> option in the configuration
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync file, <em class="replaceable"><code>config-file</code></em> should be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync an absolute pathname.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Debugging traces from <span><strong class="command">named</strong></span> become
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync more verbose as the debug level increases.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Run the server in the foreground (i.e. do not daemonize).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Run the server in the foreground and force all logging
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Create <em class="replaceable"><code>#cpus</code></em> worker threads
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to take advantage of multiple CPUs. If not specified,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <span><strong class="command">named</strong></span> will try to determine the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync number of CPUs present and create one thread per CPU.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync If it is unable to determine the number of CPUs, a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync single worker thread will be created.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specified, the default is port 53.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Write memory usage statistics to <code class="filename">stdout</code> on exit.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync This option is mainly of interest to BIND 9 developers
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and may be removed or changed in a future release.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to <em class="replaceable"><code>directory</code></em> after
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync processing the command line arguments, but before
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync reading the configuration file.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
a82a728a5cd1d52145a3ca7406d8e84ba6e5b2d2vboxsync This option should be used in conjunction with the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <code class="option">-u</code> option, as chrooting a process
a82a728a5cd1d52145a3ca7406d8e84ba6e5b2d2vboxsync running as root doesn't enhance security on most
a82a728a5cd1d52145a3ca7406d8e84ba6e5b2d2vboxsync systems; the way <code class="function">chroot()</code> is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync defined allows a process with root privileges to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync escape a chroot jail.
bf5c9a8b30aeef751e52cfe8a66250caab2fd6a2vboxsync<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
bf5c9a8b30aeef751e52cfe8a66250caab2fd6a2vboxsync to <em class="replaceable"><code>user</code></em> after completing
7e032664d31552364e83b411950d6e7c96b0b880vboxsync privileged operations, such as creating sockets that
f22cba796fd7499bf85058671a1af7cbe491c622vboxsync listen on privileged ports.
71c944130c141978d2c36c720ff831a2105a63d0vboxsync<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
10183353efa12aa94e0f3dc78e0f1c47f7928e8dvboxsync On Linux, <span><strong class="command">named</strong></span> uses the kernel's
ca551aca153d6df494985b5281c573ba2e3eb474vboxsync capability mechanism to drop all root privileges
af8d59d05d72f134aeea62712f1286b369807d52vboxsync except the ability to <code class="function">bind()</code> to
af8d59d05d72f134aeea62712f1286b369807d52vboxsync privileged port and set process resource limits.
c113f3435253eb5c01a17f6b599c280d505663f7vboxsync Unfortunately, this means that the <code class="option">-u</code>
c12885bf3de22fa504a7b9ddc41473b485d9ab25vboxsync option only works when <span><strong class="command">named</strong></span> is
c113f3435253eb5c01a17f6b599c280d505663f7vboxsync on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
28471851c9621fb51b7968142cce9791928d65d1vboxsync later, since previous kernels did not allow privileges
28471851c9621fb51b7968142cce9791928d65d1vboxsync to be retained after <code class="function">setuid()</code>.