man.named.html revision dc91524e4b73ee70908a295e3f2f62305680c5c2
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames - Copyright (C) 2000-2003 Internet Software Consortium.
3ded62d7f2c9b12616d718b8c97d3044baa9ecdbjerenkrantz - Permission to use, copy, modify, and distribute this software for any
3ded62d7f2c9b12616d718b8c97d3044baa9ecdbjerenkrantz - purpose with or without fee is hereby granted, provided that the above
3ded62d7f2c9b12616d718b8c97d3044baa9ecdbjerenkrantz - copyright notice and this permission notice appear in all copies.
5a8f3bcf803321e69b226d3b98314305a68a586cjerenkrantz - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5a8f3bcf803321e69b226d3b98314305a68a586cjerenkrantz - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
08ab23ee4e41ac8587da5a3bb8d4e9c49523b0b8nd - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
08ab23ee4e41ac8587da5a3bb8d4e9c49523b0b8nd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
08ab23ee4e41ac8587da5a3bb8d4e9c49523b0b8nd - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
031acbd88cdb9051f474a38ef67ca403cb7039b3nd - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
031acbd88cdb9051f474a38ef67ca403cb7039b3nd - PERFORMANCE OF THIS SOFTWARE.
031acbd88cdb9051f474a38ef67ca403cb7039b3nd<!-- $Id: man.named.html,v 1.93 2008/10/16 01:11:18 tbox Exp $ -->
ebf6c41faad84ab037fff4f04ec987463457ef2acoar<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ebf6c41faad84ab037fff4f04ec987463457ef2acoar<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
03ed98f7f258fd6b5205c97c656f94d4db39b79ajwoolley<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ab8c0315521735c73ce16c8072f91e17c406ca5bnd<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
ab8c0315521735c73ce16c8072f91e17c406ca5bnd<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
ab8c0315521735c73ce16c8072f91e17c406ca5bnd<link rel="next" href="man.nsupdate.html" title="nsupdate">
b9e99e0d3154bbebe3e1b8d11d6c15bde79510a5nd<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ea5f8cfbb7ef1d19318f6994c26dd73c38ffd8ddjerenkrantz<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
4567cfc6a65328bd3e8dd2b758ca926b389c7058brianp<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
4567cfc6a65328bd3e8dd2b758ca926b389c7058brianp<td width="20%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
4cdc5446050c19b9d519a273a129188586e8d445jerenkrantz<a name="man.named"></a><div class="titlepage"></div>
e0b93afc77decfbc0aab461b08ee224a0af89af2rederpj<p><span class="application">named</span> — Internet domain name server</p>
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard<p><span><strong class="command">named</strong></span>
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard is a Domain Name System (DNS) server,
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard part of the BIND 9 distribution from ISC. For more
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard information on the DNS, see RFCs 1033, 1034, and 1035.
47fe07199bddec6124ab7251c6be5c6c9ac00485jerenkrantz When invoked without arguments, <span><strong class="command">named</strong></span>
6646a289c2d4778c8cd43d62b5a1cc966a356f85jerenkrantz read the default configuration file
6646a289c2d4778c8cd43d62b5a1cc966a356f85jerenkrantz <code class="filename">/etc/named.conf</code>, read any initial
6646a289c2d4778c8cd43d62b5a1cc966a356f85jerenkrantz data, and listen for queries.
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick Use IPv4 only even if the host machine is capable of IPv6.
11e365512cbf021726cd3ec3d80743f408170ff9stoddard <code class="option">-4</code> and <code class="option">-6</code> are mutually
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick Use IPv6 only even if the host machine is capable of IPv4.
2774f23eee36fdb1b30a8213bbcabe5336175e54jwoolley <code class="option">-4</code> and <code class="option">-6</code> are mutually
2774f23eee36fdb1b30a8213bbcabe5336175e54jwoolley<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
1944ddbbad413b60307d66081b022a3eee5f04cfbnicholes Use <em class="replaceable"><code>config-file</code></em> as the
1944ddbbad413b60307d66081b022a3eee5f04cfbnicholes configuration file instead of the default,
3b1dc8f8f153d7167da9e64ab44f3e90f486a458wrowe ensure that reloading the configuration file continues
3b1dc8f8f153d7167da9e64ab44f3e90f486a458wrowe to work after the server has changed its working
3b1dc8f8f153d7167da9e64ab44f3e90f486a458wrowe directory due to to a possible
3b1dc8f8f153d7167da9e64ab44f3e90f486a458wrowe <code class="option">directory</code> option in the configuration
2404b81d39a1a539f980d4808d52d23997a9e006nd file, <em class="replaceable"><code>config-file</code></em> should be
2404b81d39a1a539f980d4808d52d23997a9e006nd an absolute pathname.
a3754e9d2edd5758f94fd743b9cf9f814be80383nd<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
a3754e9d2edd5758f94fd743b9cf9f814be80383nd Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick Debugging traces from <span><strong class="command">named</strong></span> become
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick more verbose as the debug level increases.
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick Run the server in the foreground (i.e. do not daemonize).
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick Run the server in the foreground and force all logging
5c870e08d589a24283cd76a9d596120605762cbbminfrin<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt>
47d4dfaca60aff6d3c7e591bf593b3961cafcdefminfrin Turn on memory usage debugging flags. Possible flags are
c206205e2475a7a4a192eaa7190a9894f01f0631minfrin These correspond to the ISC_MEM_DEBUGXXXX flags described in
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick Create <em class="replaceable"><code>#cpus</code></em> worker threads
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick to take advantage of multiple CPUs. If not specified,
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick <span><strong class="command">named</strong></span> will try to determine the
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick number of CPUs present and create one thread per CPU.
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick If it is unable to determine the number of CPUs, a
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick single worker thread will be created.
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe specified, the default is port 53.
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick Write memory usage statistics to <code class="filename">stdout</code> on exit.
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick This option is mainly of interest to BIND 9 developers
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick and may be removed or changed in a future release.
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe<dt><span class="term">-S <em class="replaceable"><code>#max-socks</code></em></span></dt>
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe Allow <span><strong class="command">named</strong></span> to use up to
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe <em class="replaceable"><code>#max-socks</code></em> sockets.
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe This option should be unnecessary for the vast majority
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe The use of this option could even be harmful because the
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe specified value may exceed the limitation of the
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe underlying system API.
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe It is therefore set only when the default configuration
e199d79647c689a85951f19b08a08082263f4df8brianp causes exhaustion of file descriptors and the
e199d79647c689a85951f19b08a08082263f4df8brianp operational environment is known to support the
e199d79647c689a85951f19b08a08082263f4df8brianp specified number of sockets.
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe Note also that the actual maximum number is normally a little
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe fewer than the specified value because
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe <span><strong class="command">named</strong></span> reserves some file descriptors
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe for its internal use.
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe to <em class="replaceable"><code>directory</code></em> after
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe processing the command line arguments, but before
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe reading the configuration file.
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick This option should be used in conjunction with the
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick <code class="option">-u</code> option, as chrooting a process
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick running as root doesn't enhance security on most
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj systems; the way <code class="function">chroot(2)</code> is
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj defined allows a process with root privileges to
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj escape a chroot jail.
58eb8d7cca552570577aa8b636349a695ff193datrawick<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
58eb8d7cca552570577aa8b636349a695ff193datrawick to <em class="replaceable"><code>user</code></em> after completing
ecf435f0c6379df7ed83285d5597fc9aa39c6f6dbrianp privileged operations, such as creating sockets that
ecf435f0c6379df7ed83285d5597fc9aa39c6f6dbrianp listen on privileged ports.
ecf435f0c6379df7ed83285d5597fc9aa39c6f6dbrianp<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
480f2a1b2fb27a8284e66e60a5bbaee6bc1ccb04trawick On Linux, <span><strong class="command">named</strong></span> uses the kernel's
480f2a1b2fb27a8284e66e60a5bbaee6bc1ccb04trawick capability mechanism to drop all root privileges
acc9093ae1f3c97acc635bd5b2c7c0969da21183trawick except the ability to <code class="function">bind(2)</code> to
acc9093ae1f3c97acc635bd5b2c7c0969da21183trawick privileged port and set process resource limits.
2fa5f4c38890220c6ea439317e7dcb9e8b3c76f7jwoolley Unfortunately, this means that the <code class="option">-u</code>
2fa5f4c38890220c6ea439317e7dcb9e8b3c76f7jwoolley option only works when <span><strong class="command">named</strong></span> is
95d00ea81131488769296fa5765ed745cbf45207trawick on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
95d00ea81131488769296fa5765ed745cbf45207trawick later, since previous kernels did not allow privileges
95d00ea81131488769296fa5765ed745cbf45207trawick to be retained after <code class="function">setuid(2)</code>.
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj Report the version number and exit.
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj Report the version number and build options, and exit.
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
84854ca5d35fb9f101da948858097c88457eece8coar Load data from <em class="replaceable"><code>cache-file</code></em> into the
84854ca5d35fb9f101da948858097c88457eece8coar cache of the default view.
84854ca5d35fb9f101da948858097c88457eece8coar<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
30990c446eca5b0d16d42171a6b30da9456ff6b4trawick This option must not be used. It is only of interest
0fd9de72e2a1be5a6134ee70703324be80d816b7trawick to BIND 9 developers and may be removed or changed in a
0fd9de72e2a1be5a6134ee70703324be80d816b7trawick future release.
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe In routine operation, signals should not be used to control
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe the nameserver; <span><strong class="command">rndc</strong></span> should be used
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe Force a reload of the server.
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe Shut down the server.
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj The result of sending any other signals to the server is undefined.
7f481efe04fdc4da7a447c14be62c155cbe00ddbbrianp The <span><strong class="command">named</strong></span> configuration file is too complex
7f481efe04fdc4da7a447c14be62c155cbe00ddbbrianp to describe in detail here. A complete description is provided
9ed34e5219ab3506ccfd2ca58751ce4c81b263a8rederpj <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
d401ff3af66624a7023460054519070a025d31cfwrowe<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
d401ff3af66624a7023460054519070a025d31cfwrowe The default configuration file.
e65b56dc229f063425fac589002e34c8246ad878trawick<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
e65b56dc229f063425fac589002e34c8246ad878trawick The default process-id file.
ae3d212043d50288748fe9fdf0aa1a3e8f2ff3a6wrowe <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
ae3d212043d50288748fe9fdf0aa1a3e8f2ff3a6wrowe <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
2a6e98ba4ffa30ded5d8831664c5cb2a170a56b6coar<p><span class="corpauthor">Internet Systems Consortium</span>
2fd0edbd8b2f47a8458322bedd3b82f825faf336trawick<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
2fd0edbd8b2f47a8458322bedd3b82f825faf336trawick<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
2fd0edbd8b2f47a8458322bedd3b82f825faf336trawick<td width="40%" align="right">�<a accesskey="n" href="man.nsupdate.html">Next</a>
39021cf8b495cdb94013ca73531ccb32658fb793rederpj<span class="application">named-checkzone</span>�</td>
39021cf8b495cdb94013ca73531ccb32658fb793rederpj<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
39021cf8b495cdb94013ca73531ccb32658fb793rederpj<td width="40%" align="right" valign="top">�<span class="application">nsupdate</span>