man.nsupdate.html revision c80e152862cc3e3207dc837fde7116bd4c0e4b9d
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis - Copyright (C) 2000-2018 Internet Systems Consortium, Inc. ("ISC")
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis - This Source Code Form is subject to the terms of the Mozilla Public
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis - License, v. 2.0. If a copy of the MPL was not distributed with this
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis - file, You can obtain one at http://mozilla.org/MPL/2.0/.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<link rel="next" href="man.rndc.html" title="rndc">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<table width="100%" summary="Navigation header">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<tr><th colspan="3" align="center"><span class="application">nsupdate</span></th></tr>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<a accesskey="p" href="man.named-rrchecker.html">Prev</a>�</td>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<th width="60%" align="center">Manual pages</th>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<a name="man.nsupdate"></a><div class="titlepage"></div>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis — Dynamic DNS update utility
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis [<code class="option">-L <em class="replaceable"><code>level</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>]
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<a name="id-1.14.26.7"></a><h2>DESCRIPTION</h2>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <p><span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis is used to submit Dynamic DNS Update requests as defined in RFC 2136
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis to a name server.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis This allows resource records to be added or removed from a zone
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis without manually editing the zone file.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis A single update request can contain requests to add or remove more than
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis resource record.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Zones that are under dynamic control via
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis or a DHCP server should not be edited by hand.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Manual edits could
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis conflict with dynamic updates and cause data to be lost.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The resource records that are dynamically added or removed with
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis have to be in the same zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Requests are sent to the zone's master server.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis This is identified by the MNAME field of the zone's SOA record.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Transaction signatures can be used to authenticate the Dynamic
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis DNS updates. These use the TSIG resource record type described
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis in RFC 2845 or the SIG(0) record described in RFC 2535 and
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis RFC 2931 or GSS-TSIG as described in RFC 3645.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis TSIG relies on
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis a shared secret that should only be known to
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span> and the name server.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis For instance, suitable <span class="type">key</span> and
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="type">server</span> statements would be added to
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="filename">/etc/named.conf</code> so that the name server
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis can associate the appropriate secret key and algorithm with
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis the IP address of the client application that will be using
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis TSIG authentication. You can use <span class="command"><strong>ddns-confgen</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis to generate suitable configuration fragments.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis uses the <code class="option">-y</code> or <code class="option">-k</code> options
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis to provide the TSIG shared secret. These options are mutually exclusive.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis SIG(0) uses public key cryptography.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis To use a SIG(0) key, the public key must be stored in a KEY
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis record in a zone served by the name server.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis GSS-TSIG uses Kerberos credentials. Standard GSS-TSIG mode
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis is switched on with the <code class="option">-g</code> flag. A
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis non-standards-compliant variant of GSS-TSIG used by Windows
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis 2000 can be switched on with the <code class="option">-o</code> flag.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<a name="id-1.14.26.8"></a><h2>OPTIONS</h2>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <div class="variablelist"><dl class="variablelist">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Debug mode. This provides tracing information about the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis update requests that are made and the replies received
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis from the name server.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Extra debug mode.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Force interactive mode, even when standard input is not a terminal.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The file containing the TSIG authentication key.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Keyfiles may be in two formats: a single file containing
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis a <code class="filename">named.conf</code>-format <span class="command"><strong>key</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis statement, which may be generated automatically by
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>ddns-confgen</strong></span>, or a pair of files whose names are
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis of the format <code class="filename">K{name}.+157.+{random}.key</code> and
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="filename">K{name}.+157.+{random}.private</code>, which can be
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis generated by <span class="command"><strong>dnssec-keygen</strong></span>.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The <code class="option">-k</code> may also be used to specify a SIG(0) key used
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis to authenticate Dynamic DNS update requests. In this case, the key
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis specified is not an HMAC-MD5 key.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Local-host only mode. This sets the server address to
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis localhost (disabling the <span class="command"><strong>server</strong></span> so that the server
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis address cannot be overridden). Connections to the local server will
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis use a TSIG key found in <code class="filename">/var/run/named/session.key</code>,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis which is automatically generated by <span class="command"><strong>named</strong></span> if any
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis local master zone has set <span class="command"><strong>update-policy</strong></span> to
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>local</strong></span>. The location of this key file can be
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis overridden with the <code class="option">-k</code> option.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-L <em class="replaceable"><code>level</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Set the logging debug level. If zero, logging is disabled.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Set the port to use for connections to a name server. The
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis default is 53.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Print the list of private BIND-specific resource record
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis types whose format is understood
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis by <span class="command"><strong>nsupdate</strong></span>. See also
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis the <code class="option">-T</code> option.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-r <em class="replaceable"><code>udpretries</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The number of UDP retries. The default is 3. If zero, only
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis one update request will be made.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-R <em class="replaceable"><code>randomdev</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Where to obtain randomness. If the operating system
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis does not provide a <code class="filename">/dev/random</code> or
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis equivalent device, the default source of randomness is keyboard
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis input. <code class="filename">randomdev</code> specifies the name of
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis a character device or file containing random data to be used
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis instead of the default. The special value
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="filename">keyboard</code> indicates that keyboard input
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis should be used. This option may be specified multiple times.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-t <em class="replaceable"><code>timeout</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The maximum time an update request can take before it is
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis aborted. The default is 300 seconds. Zero can be used to
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis disable the timeout.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Print the list of IANA standard resource record types
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis whose format is understood by <span class="command"><strong>nsupdate</strong></span>.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span> will exit after the lists are
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis printed. The <code class="option">-T</code> option can be combined
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis with the <code class="option">-P</code> option.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Other types can be entered using "TYPEXXXXX" where "XXXXX" is the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis decimal value of the type with no leading zeros. The rdata,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis if present, will be parsed using the UNKNOWN rdata format,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis (<backslash> <hash> <space> <length>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <space> <hexstring>).
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-u <em class="replaceable"><code>udptimeout</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The UDP retry interval. The default is 3 seconds. If zero,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis the interval will be computed from the timeout interval and
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis number of UDP retries.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Use TCP even for small update requests.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis By default, <span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis uses UDP to send update requests to the name server unless they are too
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis large to fit in a UDP request in which case TCP will be used.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis TCP may be preferable when a batch of update requests is made.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Print the version number and exit.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Literal TSIG authentication key.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>keyname</code></em> is the name of the key, and
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis valid choices are <code class="literal">hmac-md5</code>,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis is not specified, the default is <code class="literal">hmac-md5</code>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis or if MD5 was disabled <code class="literal">hmac-sha256</code>.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis NOTE: Use of the <code class="option">-y</code> option is discouraged because the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis shared secret is supplied as a command line argument in clear text.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis This may be visible in the output from
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis or in a history file maintained by the user's shell.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<a name="id-1.14.26.9"></a><h2>INPUT FORMAT</h2>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <p><span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis reads input from
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>filename</code></em>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis or standard input.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Each command is supplied on exactly one line of input.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Some commands are for administrative purposes.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The others are either update instructions or prerequisite checks on the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis contents of the zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis These checks set conditions that some name or set of
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis resource records (RRset) either exists or is absent from the zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis These conditions must be met if the entire update request is to succeed.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Updates will be rejected if the tests for the prerequisite conditions
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Every update request consists of zero or more prerequisites
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis and zero or more updates.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis This allows a suitably authenticated update request to proceed if some
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis specified resource records are present or missing from the zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis A blank input line (or the <span class="command"><strong>send</strong></span> command)
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis accumulated commands to be sent as one Dynamic DNS update request to the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The command formats and their meaning are as follows:
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis<div class="variablelist"><dl class="variablelist">
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>server</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis Sends all dynamic update requests to the name server
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>servername</code></em>.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis When no server statement is provided,
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>nsupdate</strong></span>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis will send updates to the master server of the correct zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis The MNAME field of that zone's SOA record will identify the
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis server for that zone.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>port</code></em>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis is the port number on
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <em class="parameter"><code>servername</code></em>
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis where the dynamic update requests get sent.
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis If no port number is specified, the default DNS port number of
25c28e83beb90e7c80452a7c818c5e6f73a07dc8Piotr Jasiukajtis <span class="command"><strong>local</strong></span>
<em class="parameter"><code>keyname</code></em> <em class="parameter"><code>secret</code></em> pair.
<span class="command"><strong>[<span class="optional">update</span>] del[<span class="optional">ete</span>]</strong></span>
> update delete oldhost.example.com A
> update add newhost.example.com 86400 A 172.16.1.1
> prereq nxdomain nickname.example.com
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.3rc2 (Extended Support Version)</p>