man.named.html revision df6faef67126d1277b0f21defd41c54994bf6fcf
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - Copyright (C) 2000-2003 Internet Software Consortium.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - Permission to use, copy, modify, and distribute this software for any
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - purpose with or without fee is hereby granted, provided that the above
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - copyright notice and this permission notice appear in all copies.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk - PERFORMANCE OF THIS SOFTWARE.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<!-- $Id: man.named.html,v 1.28 2006/05/03 02:27:23 marka Exp $ -->
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
dff2cc5646d4437ab9e0cb1dcb59da65462a5938jeff.schenk<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<link rel="prev" href="man.named-checkzone.html" title="named-checkzone">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<link rel="next" href="man.rndc.html" title="rndc">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<a name="man.named"></a><div class="titlepage"></div>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<p><span class="application">named</span> — Internet domain name server</p>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<p><span><strong class="command">named</strong></span>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk is a Domain Name System (DNS) server,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk part of the BIND 9 distribution from ISC. For more
dff2cc5646d4437ab9e0cb1dcb59da65462a5938jeff.schenk information on the DNS, see RFCs 1033, 1034, and 1035.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk When invoked without arguments, <span><strong class="command">named</strong></span>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk read the default configuration file
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="filename">/etc/named.conf</code>, read any initial
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk data, and listen for queries.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Use IPv4 only even if the host machine is capable of IPv6.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="option">-4</code> and <code class="option">-6</code> are mutually
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Use IPv6 only even if the host machine is capable of IPv4.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="option">-4</code> and <code class="option">-6</code> are mutually
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Use <em class="replaceable"><code>config-file</code></em> as the
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk configuration file instead of the default,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="filename">/etc/named.conf</code>. To
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk ensure that reloading the configuration file continues
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to work after the server has changed its working
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk directory due to to a possible
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="option">directory</code> option in the configuration
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk file, <em class="replaceable"><code>config-file</code></em> should be
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk an absolute pathname.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Debugging traces from <span><strong class="command">named</strong></span> become
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk more verbose as the debug level increases.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Run the server in the foreground (i.e. do not daemonize).
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Run the server in the foreground and force all logging
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Create <em class="replaceable"><code>#cpus</code></em> worker threads
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to take advantage of multiple CPUs. If not specified,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <span><strong class="command">named</strong></span> will try to determine the
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk number of CPUs present and create one thread per CPU.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk If it is unable to determine the number of CPUs, a
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk single worker thread will be created.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Listen for queries on port <em class="replaceable"><code>port</code></em>. If not
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk specified, the default is port 53.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Write memory usage statistics to <code class="filename">stdout</code> on exit.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk This option is mainly of interest to BIND 9 developers
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk and may be removed or changed in a future release.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to <em class="replaceable"><code>directory</code></em> after
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk processing the command line arguments, but before
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk reading the configuration file.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk This option should be used in conjunction with the
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <code class="option">-u</code> option, as chrooting a process
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk running as root doesn't enhance security on most
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk systems; the way <code class="function">chroot()</code> is
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk defined allows a process with root privileges to
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk escape a chroot jail.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to <em class="replaceable"><code>user</code></em> after completing
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk privileged operations, such as creating sockets that
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk listen on privileged ports.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk On Linux, <span><strong class="command">named</strong></span> uses the kernel's
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk capability mechanism to drop all root privileges
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk except the ability to <code class="function">bind()</code> to
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk privileged port and set process resource limits.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Unfortunately, this means that the <code class="option">-u</code>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk option only works when <span><strong class="command">named</strong></span> is
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk later, since previous kernels did not allow privileges
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to be retained after <code class="function">setuid()</code>.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Report the version number and exit.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Load data from <em class="replaceable"><code>cache-file</code></em> into the
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk cache of the default view.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;">
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk This option must not be used. It is only of interest
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to BIND 9 developers and may be removed or changed in a
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk future release.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk In routine operation, signals should not be used to control
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk the nameserver; <span><strong class="command">rndc</strong></span> should be used
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Force a reload of the server.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term">SIGINT, SIGTERM</span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk Shut down the server.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk The result of sending any other signals to the server is undefined.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk The <span><strong class="command">named</strong></span> configuration file is too complex
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk to describe in detail here. A complete description is provided
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk The default configuration file.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk The default process-id file.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<p><span class="corpauthor">Internet Systems Consortium</span>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="40%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="40%" align="left" valign="top"><span class="application">named-checkzone</span>�</td>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
5b64d5d44892834ba97f003080f3467299b7c5c5jeff.schenk<td width="40%" align="right" valign="top">�<span class="application">rndc</span></td>