>Introduction </TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
>BIND Resource Requirements</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
>Nameserver Configuration</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
CLASS="option"
>-c</TT
>
- option.</P
+ option. If the configuration file is not found,
+ <B
+CLASS="command"
+>rndc</B
+> will also look in
+ <TT
+CLASS="filename"
+>/var/run/named.key</TT
+> (or wherever
+ <TT
+CLASS="varname"
+>localstatedir</TT
+> was defined when
+ the <SPAN
+CLASS="acronym"
+>BIND</SPAN
+> build was configured).
+ The <TT
+CLASS="filename"
+>named.key</TT
+> file is generated by
+ <B
+CLASS="command"
+>named</B
+> as described in
+ <A
+HREF="Bv9ARM.ch06.html#controls_statement_definition_and_usage"
+>Section 6.2.4</A
+>.</P
><P
>The format of the configuration file is similar to
that of <TT
><H2
CLASS="sect2"
><A
-NAME="AEN641"
+NAME="AEN648"
>3.4.2. Signals</A
></H2
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN645"
+NAME="AEN652"
></A
><P
></P
>Advanced Concepts</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>4.3. <A
-HREF="Bv9ARM.ch04.html#AEN705"
+HREF="Bv9ARM.ch04.html#AEN712"
>Split DNS</A
></DT
><DT
></DT
><DT
>4.5. <A
-HREF="Bv9ARM.ch04.html#AEN865"
+HREF="Bv9ARM.ch04.html#AEN872"
>TKEY</A
></DT
><DT
>4.6. <A
-HREF="Bv9ARM.ch04.html#AEN880"
+HREF="Bv9ARM.ch04.html#AEN887"
>SIG(0)</A
></DT
><DT
></DT
><DT
>4.8. <A
-HREF="Bv9ARM.ch04.html#AEN965"
+HREF="Bv9ARM.ch04.html#AEN972"
>IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
1995. See <A
HREF="Bv9ARM.ch09.html#proposed_standards"
>Proposed Standards</A
-></P
+>.</P
><P
>When acting as a master, <SPAN
CLASS="acronym"
><H1
CLASS="sect1"
><A
-NAME="AEN705"
+NAME="AEN712"
>4.3. Split DNS</A
></H1
><P
><H2
CLASS="sect2"
><A
-NAME="AEN796"
+NAME="AEN803"
>4.4.1. Generate Shared Keys for Each Pair of Hosts</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN801"
+NAME="AEN808"
>4.4.1.1. Automatic Generation</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN812"
+NAME="AEN819"
>4.4.1.2. Manual Generation</A
></H3
><P
><H2
CLASS="sect2"
><A
-NAME="AEN817"
+NAME="AEN824"
>4.4.2. Copying the Shared Secret to Both Machines</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN820"
+NAME="AEN827"
>4.4.3. Informing the Servers of the Key's Existence</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN832"
+NAME="AEN839"
>4.4.4. Instructing the Server to Use the Key</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN848"
+NAME="AEN855"
>4.4.5. TSIG Key Based Access Control</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN861"
+NAME="AEN868"
>4.4.6. Errors</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN865"
+NAME="AEN872"
>4.5. TKEY</A
></H1
><P
><H1
CLASS="sect1"
><A
-NAME="AEN880"
+NAME="AEN887"
>4.6. SIG(0)</A
></H1
><P
><H2
CLASS="sect2"
><A
-NAME="AEN897"
+NAME="AEN904"
>4.7.1. Generating Keys</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN917"
+NAME="AEN924"
>4.7.2. Creating a Keyset</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN929"
+NAME="AEN936"
>4.7.3. Signing the Child's Keyset</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN942"
+NAME="AEN949"
>4.7.4. Signing the Zone</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN958"
+NAME="AEN965"
>4.7.5. Configuring Servers</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN965"
+NAME="AEN972"
>4.8. IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
><H2
CLASS="sect2"
><A
-NAME="AEN981"
+NAME="AEN988"
>4.8.1. Address Lookups Using AAAA Records</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN986"
+NAME="AEN993"
>4.8.2. Address Lookups Using A6 Records</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN990"
+NAME="AEN997"
>4.8.2.1. A6 Chains</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN1001"
+NAME="AEN1008"
>4.8.2.2. A6 Records for DNS Servers</A
></H3
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1007"
+NAME="AEN1014"
>4.8.3. Address to Name Lookups Using Nibble Format</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1014"
+NAME="AEN1021"
>4.8.4. Address to Name Lookups Using Bitstring Format</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1021"
+NAME="AEN1028"
>4.8.5. Using DNAME for Delegation of IPv6 Reverse Addresses</A
></H2
><P
>The BIND 9 Lightweight Resolver</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>5.1. <A
-HREF="Bv9ARM.ch05.html#AEN1041"
+HREF="Bv9ARM.ch05.html#AEN1048"
>The Lightweight Resolver Library</A
></DT
><DT
><H1
CLASS="sect1"
><A
-NAME="AEN1041"
+NAME="AEN1048"
>5.1. The Lightweight Resolver Library</A
></H1
><P
>BIND 9 Configuration Reference</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>6.3. <A
-HREF="Bv9ARM.ch06.html#AEN3407"
+HREF="Bv9ARM.ch06.html#AEN3451"
>Zone File</A
></DT
></DL
><DIV
CLASS="informaltable"
><A
-NAME="AEN1083"
+NAME="AEN1090"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN1246"
+NAME="AEN1253"
>6.1.1.1. Syntax</A
></H3
><PRE
><H3
CLASS="sect3"
><A
-NAME="AEN1254"
+NAME="AEN1261"
>6.1.1.2. Definition and Usage</A
></H3
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1283"
+NAME="AEN1290"
>6.1.2. Comment Syntax</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN1288"
+NAME="AEN1295"
>6.1.2.1. Syntax</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN1297"
+NAME="AEN1304"
>6.1.2.2. Definition and Usage</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN1321"
+NAME="AEN1328"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN1390"
+NAME="AEN1397"
>6.2.1. <B
CLASS="command"
>acl</B
><DIV
CLASS="informaltable"
><A
-NAME="AEN1403"
+NAME="AEN1410"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN1432"
+NAME="AEN1439"
>6.2.3. <B
CLASS="command"
>controls</B
><H2
CLASS="sect2"
><A
-NAME="AEN1441"
+NAME="controls_statement_definition_and_usage"
>6.2.4. <B
CLASS="command"
>controls</B
must be signed by one of its specified keys to
be honored.</P
><P
+>The <B
+CLASS="command"
+>keys</B
+> clause is not strictly required.
+ If it is not present, then a random key will be generated automatically
+ and placed in a file named <TT
+CLASS="filename"
+>named.key</TT
+>, which is
+ usually in <TT
+CLASS="filename"
+>/var/run</TT
+> but will be wherever
+ <TT
+CLASS="varname"
+>localstatedir</TT
+> was specified as when
+ <SPAN
+CLASS="acronym"
+>BIND</SPAN
+> was built. <TT
+CLASS="filename"
+>named.key</TT
+>
+ contains a complete <TT
+CLASS="filename"
+>rndc.conf</TT
+>-compatible
+ configuration and is used by <B
+CLASS="command"
+>rndc</B
+> when it
+ cannot find its primary configuration file.</P
+><P
+>Similarly, <TT
+CLASS="filename"
+>named.key</TT
+> is generated when
+ no <B
+CLASS="command"
+>controls</B
+> statement is present at all. In
+ that situation it will configure a control channel to run on
+ 127.0.0.1.</P
+><P
+>There are two ways to disable the creation of
+ <TT
+CLASS="filename"
+>named.key</TT
+>. One is to ensure that all of your
+ <B
+CLASS="command"
+>inet</B
+> control channels have a <B
+CLASS="command"
+>keys</B
+>
+ clause. The other is to have a <B
+CLASS="command"
+>controls</B
+> statement
+ with no <B
+CLASS="command"
+>inet</B
+> phrases it all. The latter will
+ prevent the creation of any control channel.</P
+><P
+>The <TT
+CLASS="filename"
+>named.key</TT
+> feature was created to
+ ease the transition of systems from <SPAN
+CLASS="acronym"
+>BIND</SPAN
+> 8,
+ which did not have digital signatures on its command channel messages
+ and thus did not have a <B
+CLASS="command"
+>keys</B
+> clause. Since
+ it is only intended to allow the backward-compatible usage of
+ <SPAN
+CLASS="acronym"
+>BIND</SPAN
+> 8 configuration files, this feature does not
+ have a high degree of configurability. You cannot easily change
+ the key name or the size of the secret, so you should make a
+ <TT
+CLASS="filename"
+>rndc.conf</TT
+> with your own key if you wish to change
+ those things. The <TT
+CLASS="filename"
+>named.key</TT
+> file also has its
+ permissions set such that only the owner of the file (the user that
+ <B
+CLASS="command"
+>named</B
+> is running as) can access it. If you
+ desire greater flexibility in allowing other users to access
+ <B
+CLASS="command"
+>rndc</B
+> commands then you need to create an
+ <TT
+CLASS="filename"
+>rndc.conf</TT
+> and make it group readable by a group
+ that contains the users who should have access.</P
+><P
>The UNIX control channel type of <SPAN
CLASS="acronym"
>BIND</SPAN
><H2
CLASS="sect2"
><A
-NAME="AEN1467"
+NAME="AEN1502"
>6.2.5. <B
CLASS="command"
>include</B
><H2
CLASS="sect2"
><A
-NAME="AEN1472"
+NAME="AEN1507"
>6.2.6. <B
CLASS="command"
>include</B
><H2
CLASS="sect2"
><A
-NAME="AEN1479"
+NAME="AEN1514"
>6.2.7. <B
CLASS="command"
>key</B
><H2
CLASS="sect2"
><A
-NAME="AEN1486"
+NAME="AEN1521"
>6.2.8. <B
CLASS="command"
>key</B
><H2
CLASS="sect2"
><A
-NAME="AEN1498"
+NAME="AEN1533"
>6.2.9. <B
CLASS="command"
>logging</B
><H2
CLASS="sect2"
><A
-NAME="AEN1538"
+NAME="AEN1573"
>6.2.10. <B
CLASS="command"
>logging</B
><PRE
CLASS="programlisting"
>logging {
+ category "unmatched" { "null"; };
category "default" { "default_syslog"; "default_debug"; };
};
</PRE
><H3
CLASS="sect3"
><A
-NAME="AEN1554"
+NAME="AEN1589"
>6.2.10.1. The <B
CLASS="command"
>channel</B
><DIV
CLASS="informaltable"
><A
-NAME="AEN1658"
+NAME="AEN1693"
></A
><P
></P
><P
><B
CLASS="command"
+>unmatched</B
+></P
+></TD
+><TD
+WIDTH="322"
+ALIGN="LEFT"
+VALIGN="MIDDLE"
+><P
+>Messages that named was unable to determine the
+class of or for which there was no matching <B
+CLASS="command"
+>view</B
+>.
+A one line summary is also logged to the <B
+CLASS="command"
+>client</B
+> category.
+This category is best sent to a file or stderr, by default it is sent to
+the <B
+CLASS="command"
+>null</B
+> channel.</P
+></TD
+></TR
+><TR
+><TD
+WIDTH="110"
+ALIGN="LEFT"
+VALIGN="MIDDLE"
+><P
+><B
+CLASS="command"
>network</B
></P
></TD
><H2
CLASS="sect2"
><A
-NAME="AEN1759"
+NAME="AEN1803"
>6.2.11. <B
CLASS="command"
>lwres</B
><H2
CLASS="sect2"
><A
-NAME="AEN1783"
+NAME="AEN1827"
>6.2.12. <B
CLASS="command"
>lwres</B
><H2
CLASS="sect2"
><A
-NAME="AEN1802"
+NAME="AEN1846"
>6.2.13. <B
CLASS="command"
>options</B
><H2
CLASS="sect2"
><A
-NAME="AEN2014"
+NAME="AEN2058"
>6.2.14. <B
CLASS="command"
>options</B
><H3
CLASS="sect3"
><A
-NAME="AEN2288"
+NAME="AEN2332"
>6.2.14.2. Forwarding</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2353"
+NAME="AEN2397"
>6.2.14.4. Interfaces</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2379"
+NAME="AEN2423"
>6.2.14.5. Query Address</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2515"
+NAME="AEN2559"
>6.2.14.7. Operating System Resource Limits</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2552"
+NAME="AEN2596"
>6.2.14.8. Server Resource Limits</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN2580"
+NAME="AEN2624"
>6.2.14.9. Periodic Task Intervals</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN2668"
+NAME="AEN2712"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN2780"
+NAME="AEN2824"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN2888"
+NAME="AEN2932"
>6.2.17. <B
CLASS="command"
>trusted-keys</B
><H2
CLASS="sect2"
><A
-NAME="AEN2904"
+NAME="AEN2948"
>6.2.18. <B
CLASS="command"
>trusted-keys</B
><H2
CLASS="sect2"
><A
-NAME="AEN2912"
+NAME="AEN2956"
>6.2.19. <B
CLASS="command"
>view</B
><H2
CLASS="sect2"
><A
-NAME="AEN2926"
+NAME="AEN2970"
>6.2.20. <B
CLASS="command"
>view</B
><H2
CLASS="sect2"
><A
-NAME="AEN3073"
+NAME="AEN3117"
>6.2.22. <B
CLASS="command"
>zone</B
><H3
CLASS="sect3"
><A
-NAME="AEN3076"
+NAME="AEN3120"
>6.2.22.1. Zone Types</A
></H3
><DIV
CLASS="informaltable"
><A
-NAME="AEN3078"
+NAME="AEN3122"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN3133"
+NAME="AEN3177"
>6.2.22.2. Class</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN3143"
+NAME="AEN3187"
>6.2.22.3. Zone Options</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3377"
+NAME="AEN3421"
></A
><P
></P
><H1
CLASS="sect1"
><A
-NAME="AEN3407"
+NAME="AEN3451"
>6.3. Zone File</A
></H1
><DIV
><H3
CLASS="sect3"
><A
-NAME="AEN3412"
+NAME="AEN3456"
>6.3.1.1. Resource Records</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3418"
+NAME="AEN3462"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3450"
+NAME="AEN3494"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3562"
+NAME="AEN3606"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3578"
+NAME="AEN3622"
></A
><P
></P
><H3
CLASS="sect3"
><A
-NAME="AEN3626"
+NAME="AEN3670"
>6.3.1.2. Textual expression of RRs</A
></H3
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3633"
+NAME="AEN3677"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3699"
+NAME="AEN3743"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN3727"
+NAME="AEN3771"
>6.3.2. Discussion of MX Records</A
></H2
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3733"
+NAME="AEN3777"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3825"
+NAME="AEN3869"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN3848"
+NAME="AEN3892"
>6.3.4. Inverse Mapping in IPv4</A
></H2
><P
><DIV
CLASS="informaltable"
><A
-NAME="AEN3853"
+NAME="AEN3897"
></A
><P
></P
><H2
CLASS="sect2"
><A
-NAME="AEN3875"
+NAME="AEN3919"
>6.3.5. Other Zone File Directives</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN3882"
+NAME="AEN3926"
>6.3.5.1. The <B
CLASS="command"
>$ORIGIN</B
><H3
CLASS="sect3"
><A
-NAME="AEN3902"
+NAME="AEN3946"
>6.3.5.2. The <B
CLASS="command"
>$INCLUDE</B
><H3
CLASS="sect3"
><A
-NAME="AEN3922"
+NAME="AEN3966"
>6.3.5.3. The <B
CLASS="command"
>$TTL</B
><H2
CLASS="sect2"
><A
-NAME="AEN3933"
+NAME="AEN3977"
>6.3.6. <SPAN
CLASS="acronym"
>BIND</SPAN
><DIV
CLASS="informaltable"
><A
-NAME="AEN3953"
+NAME="AEN3997"
></A
><P
></P
>BIND 9 Security Considerations</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>7.2. <A
-HREF="Bv9ARM.ch07.html#AEN4025"
+HREF="Bv9ARM.ch07.html#AEN4069"
><B
CLASS="command"
>chroot</B
><H1
CLASS="sect1"
><A
-NAME="AEN4025"
+NAME="AEN4069"
>7.2. <B
CLASS="command"
>chroot</B
><H2
CLASS="sect2"
><A
-NAME="AEN4048"
+NAME="AEN4092"
>7.2.1. The <B
CLASS="command"
>chroot</B
><H2
CLASS="sect2"
><A
-NAME="AEN4066"
+NAME="AEN4110"
>7.2.2. Using the <B
CLASS="command"
>setuid</B
>Troubleshooting</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>8.1. <A
-HREF="Bv9ARM.ch08.html#AEN4087"
+HREF="Bv9ARM.ch08.html#AEN4131"
>Common Problems</A
></DT
><DT
>8.2. <A
-HREF="Bv9ARM.ch08.html#AEN4092"
+HREF="Bv9ARM.ch08.html#AEN4136"
>Incrementing and Changing the Serial Number</A
></DT
><DT
>8.3. <A
-HREF="Bv9ARM.ch08.html#AEN4097"
+HREF="Bv9ARM.ch08.html#AEN4141"
>Where Can I Get Help?</A
></DT
></DL
><H1
CLASS="sect1"
><A
-NAME="AEN4087"
+NAME="AEN4131"
>8.1. Common Problems</A
></H1
><DIV
><H2
CLASS="sect2"
><A
-NAME="AEN4089"
+NAME="AEN4133"
>8.1.1. It's not working; how can I figure out what's wrong?</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN4092"
+NAME="AEN4136"
>8.2. Incrementing and Changing the Serial Number</A
></H1
><P
><H1
CLASS="sect1"
><A
-NAME="AEN4097"
+NAME="AEN4141"
>8.3. Where Can I Get Help?</A
></H1
><P
>Appendices</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
></DT
><DT
>A.1. <A
-HREF="Bv9ARM.ch09.html#AEN4113"
+HREF="Bv9ARM.ch09.html#AEN4157"
>Acknowledgements</A
></DT
><DT
></DT
><DT
>A.3. <A
-HREF="Bv9ARM.ch09.html#AEN4154"
+HREF="Bv9ARM.ch09.html#AEN4198"
>General <SPAN
CLASS="acronym"
>DNS</SPAN
><H1
CLASS="sect1"
><A
-NAME="AEN4113"
+NAME="AEN4157"
>A.1. Acknowledgements</A
></H1
><DIV
><H2
CLASS="sect2"
><A
-NAME="AEN4115"
+NAME="AEN4159"
>A.1.1. A Brief History of the <SPAN
CLASS="acronym"
>DNS</SPAN
><H3
CLASS="sect3"
><A
-NAME="AEN4145"
+NAME="AEN4189"
>A.2.1.1. HS = hesiod</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN4150"
+NAME="AEN4194"
>A.2.1.2. CH = chaos</A
></H3
><P
><H1
CLASS="sect1"
><A
-NAME="AEN4154"
+NAME="AEN4198"
>A.3. General <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="informaltable"
><A
-NAME="AEN4165"
+NAME="AEN4209"
></A
><P
></P
<DIV
CLASS="informaltable"
><A
-NAME="AEN4234"
+NAME="AEN4278"
></A
><P
></P
><DIV
CLASS="informaltable"
><A
-NAME="AEN4289"
+NAME="AEN4333"
></A
><P
></P
</P
><H3
><A
-NAME="AEN4333"
+NAME="AEN4377"
>Bibliography</A
></H3
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4334"
+NAME="AEN4378"
>Standards</A
></H1
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4336"
+NAME="AEN4380"
></A
><P
>[RFC974] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4343"
+NAME="AEN4387"
></A
><P
>[RFC1034] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4350"
+NAME="AEN4394"
></A
><P
>[RFC1035] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4359"
+NAME="AEN4403"
></A
><P
>[RFC2181] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4367"
+NAME="AEN4411"
></A
><P
>[RFC2308] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4375"
+NAME="AEN4419"
></A
><P
>[RFC1995] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4383"
+NAME="AEN4427"
></A
><P
>[RFC1996] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4390"
+NAME="AEN4434"
></A
><P
>[RFC2136] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4407"
+NAME="AEN4451"
></A
><P
>[RFC2845] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4426"
+NAME="AEN4470"
>Proposed Standards Still Under Development</A
></H1
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4431"
+NAME="AEN4475"
></A
><P
>[RFC1886] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4443"
+NAME="AEN4487"
></A
><P
>[RFC2065] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4455"
+NAME="AEN4499"
></A
><P
>[RFC2137] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4463"
+NAME="AEN4507"
>Other Important RFCs About <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4466"
+NAME="AEN4510"
></A
><P
>[RFC1535] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4474"
+NAME="AEN4518"
></A
><P
>[RFC1536] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4495"
+NAME="AEN4539"
></A
><P
>[RFC1982] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4506"
+NAME="AEN4550"
>Resource Record Types</A
></H1
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4508"
+NAME="AEN4552"
></A
><P
>[RFC1183] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4526"
+NAME="AEN4570"
></A
><P
>[RFC1706] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4538"
+NAME="AEN4582"
></A
><P
>[RFC2168] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4549"
+NAME="AEN4593"
></A
><P
>[RFC1876] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4566"
+NAME="AEN4610"
></A
><P
>[RFC2052] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4578"
+NAME="AEN4622"
></A
><P
>[RFC2163] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4586"
+NAME="AEN4630"
></A
><P
>[RFC2230] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4594"
+NAME="AEN4638"
><SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4597"
+NAME="AEN4641"
></A
><P
>[RFC1101] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4605"
+NAME="AEN4649"
></A
><P
>[RFC1123] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4612"
+NAME="AEN4656"
></A
><P
>[RFC1591] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4619"
+NAME="AEN4663"
></A
><P
>[RFC2317] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4633"
+NAME="AEN4677"
><SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4636"
+NAME="AEN4680"
></A
><P
>[RFC1537] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4644"
+NAME="AEN4688"
></A
><P
>[RFC1912] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4652"
+NAME="AEN4696"
></A
><P
>[RFC1912] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4660"
+NAME="AEN4704"
></A
><P
>[RFC2010] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4671"
+NAME="AEN4715"
></A
><P
>[RFC2219] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4683"
+NAME="AEN4727"
>Other <SPAN
CLASS="acronym"
>DNS</SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4689"
+NAME="AEN4733"
></A
><P
>[RFC1464] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4696"
+NAME="AEN4740"
></A
><P
>[RFC1713] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4704"
+NAME="AEN4748"
></A
><P
>[RFC1794] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4712"
+NAME="AEN4756"
></A
><P
>[RFC2240] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4719"
+NAME="AEN4763"
></A
><P
>[RFC2345] <SPAN
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4733"
+NAME="AEN4777"
></A
><P
>[RFC2352] <SPAN
><H1
CLASS="bibliodiv"
><A
-NAME="AEN4740"
+NAME="AEN4784"
>Obsolete and Unimplemented Experimental RRs</A
></H1
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4742"
+NAME="AEN4786"
></A
><P
>[RFC1712] <SPAN
><H2
CLASS="sect2"
><A
-NAME="AEN4763"
+NAME="AEN4807"
>A.4.3. Other Documents About <SPAN
CLASS="acronym"
>BIND</SPAN
></P
><H3
><A
-NAME="AEN4767"
+NAME="AEN4811"
>Bibliography</A
></H3
><DIV
CLASS="biblioentry"
><A
-NAME="AEN4768"
+NAME="AEN4812"
></A
><P
><SPAN
>BIND 9 Administrator Reference Manual</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.61
+CONTENT="Modular DocBook HTML Stylesheet Version 1.64
"><LINK
REL="NEXT"
TITLE="Introduction "
></DT
><DT
>3.4.2. <A
-HREF="Bv9ARM.ch03.html#AEN641"
+HREF="Bv9ARM.ch03.html#AEN648"
>Signals</A
></DT
></DL
></DT
><DT
>4.3. <A
-HREF="Bv9ARM.ch04.html#AEN705"
+HREF="Bv9ARM.ch04.html#AEN712"
>Split DNS</A
></DT
><DT
><DL
><DT
>4.4.1. <A
-HREF="Bv9ARM.ch04.html#AEN796"
+HREF="Bv9ARM.ch04.html#AEN803"
>Generate Shared Keys for Each Pair of Hosts</A
></DT
><DT
>4.4.2. <A
-HREF="Bv9ARM.ch04.html#AEN817"
+HREF="Bv9ARM.ch04.html#AEN824"
>Copying the Shared Secret to Both Machines</A
></DT
><DT
>4.4.3. <A
-HREF="Bv9ARM.ch04.html#AEN820"
+HREF="Bv9ARM.ch04.html#AEN827"
>Informing the Servers of the Key's Existence</A
></DT
><DT
>4.4.4. <A
-HREF="Bv9ARM.ch04.html#AEN832"
+HREF="Bv9ARM.ch04.html#AEN839"
>Instructing the Server to Use the Key</A
></DT
><DT
>4.4.5. <A
-HREF="Bv9ARM.ch04.html#AEN848"
+HREF="Bv9ARM.ch04.html#AEN855"
>TSIG Key Based Access Control</A
></DT
><DT
>4.4.6. <A
-HREF="Bv9ARM.ch04.html#AEN861"
+HREF="Bv9ARM.ch04.html#AEN868"
>Errors</A
></DT
></DL
></DD
><DT
>4.5. <A
-HREF="Bv9ARM.ch04.html#AEN865"
+HREF="Bv9ARM.ch04.html#AEN872"
>TKEY</A
></DT
><DT
>4.6. <A
-HREF="Bv9ARM.ch04.html#AEN880"
+HREF="Bv9ARM.ch04.html#AEN887"
>SIG(0)</A
></DT
><DT
><DL
><DT
>4.7.1. <A
-HREF="Bv9ARM.ch04.html#AEN897"
+HREF="Bv9ARM.ch04.html#AEN904"
>Generating Keys</A
></DT
><DT
>4.7.2. <A
-HREF="Bv9ARM.ch04.html#AEN917"
+HREF="Bv9ARM.ch04.html#AEN924"
>Creating a Keyset</A
></DT
><DT
>4.7.3. <A
-HREF="Bv9ARM.ch04.html#AEN929"
+HREF="Bv9ARM.ch04.html#AEN936"
>Signing the Child's Keyset</A
></DT
><DT
>4.7.4. <A
-HREF="Bv9ARM.ch04.html#AEN942"
+HREF="Bv9ARM.ch04.html#AEN949"
>Signing the Zone</A
></DT
><DT
>4.7.5. <A
-HREF="Bv9ARM.ch04.html#AEN958"
+HREF="Bv9ARM.ch04.html#AEN965"
>Configuring Servers</A
></DT
></DL
></DD
><DT
>4.8. <A
-HREF="Bv9ARM.ch04.html#AEN965"
+HREF="Bv9ARM.ch04.html#AEN972"
>IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
><DL
><DT
>4.8.1. <A
-HREF="Bv9ARM.ch04.html#AEN981"
+HREF="Bv9ARM.ch04.html#AEN988"
>Address Lookups Using AAAA Records</A
></DT
><DT
>4.8.2. <A
-HREF="Bv9ARM.ch04.html#AEN986"
+HREF="Bv9ARM.ch04.html#AEN993"
>Address Lookups Using A6 Records</A
></DT
><DT
>4.8.3. <A
-HREF="Bv9ARM.ch04.html#AEN1007"
+HREF="Bv9ARM.ch04.html#AEN1014"
>Address to Name Lookups Using Nibble Format</A
></DT
><DT
>4.8.4. <A
-HREF="Bv9ARM.ch04.html#AEN1014"
+HREF="Bv9ARM.ch04.html#AEN1021"
>Address to Name Lookups Using Bitstring Format</A
></DT
><DT
>4.8.5. <A
-HREF="Bv9ARM.ch04.html#AEN1021"
+HREF="Bv9ARM.ch04.html#AEN1028"
>Using DNAME for Delegation of IPv6 Reverse Addresses</A
></DT
></DL
><DL
><DT
>5.1. <A
-HREF="Bv9ARM.ch05.html#AEN1041"
+HREF="Bv9ARM.ch05.html#AEN1048"
>The Lightweight Resolver Library</A
></DT
><DT
></DT
><DT
>6.1.2. <A
-HREF="Bv9ARM.ch06.html#AEN1283"
+HREF="Bv9ARM.ch06.html#AEN1290"
>Comment Syntax</A
></DT
></DL
><DL
><DT
>6.2.1. <A
-HREF="Bv9ARM.ch06.html#AEN1390"
+HREF="Bv9ARM.ch06.html#AEN1397"
><B
CLASS="command"
>acl</B
></DT
><DT
>6.2.3. <A
-HREF="Bv9ARM.ch06.html#AEN1432"
+HREF="Bv9ARM.ch06.html#AEN1439"
><B
CLASS="command"
>controls</B
></DT
><DT
>6.2.4. <A
-HREF="Bv9ARM.ch06.html#AEN1441"
+HREF="Bv9ARM.ch06.html#controls_statement_definition_and_usage"
><B
CLASS="command"
>controls</B
></DT
><DT
>6.2.5. <A
-HREF="Bv9ARM.ch06.html#AEN1467"
+HREF="Bv9ARM.ch06.html#AEN1502"
><B
CLASS="command"
>include</B
></DT
><DT
>6.2.6. <A
-HREF="Bv9ARM.ch06.html#AEN1472"
+HREF="Bv9ARM.ch06.html#AEN1507"
><B
CLASS="command"
>include</B
></DT
><DT
>6.2.7. <A
-HREF="Bv9ARM.ch06.html#AEN1479"
+HREF="Bv9ARM.ch06.html#AEN1514"
><B
CLASS="command"
>key</B
></DT
><DT
>6.2.8. <A
-HREF="Bv9ARM.ch06.html#AEN1486"
+HREF="Bv9ARM.ch06.html#AEN1521"
><B
CLASS="command"
>key</B
></DT
><DT
>6.2.9. <A
-HREF="Bv9ARM.ch06.html#AEN1498"
+HREF="Bv9ARM.ch06.html#AEN1533"
><B
CLASS="command"
>logging</B
></DT
><DT
>6.2.10. <A
-HREF="Bv9ARM.ch06.html#AEN1538"
+HREF="Bv9ARM.ch06.html#AEN1573"
><B
CLASS="command"
>logging</B
></DT
><DT
>6.2.11. <A
-HREF="Bv9ARM.ch06.html#AEN1759"
+HREF="Bv9ARM.ch06.html#AEN1803"
><B
CLASS="command"
>lwres</B
></DT
><DT
>6.2.12. <A
-HREF="Bv9ARM.ch06.html#AEN1783"
+HREF="Bv9ARM.ch06.html#AEN1827"
><B
CLASS="command"
>lwres</B
></DT
><DT
>6.2.13. <A
-HREF="Bv9ARM.ch06.html#AEN1802"
+HREF="Bv9ARM.ch06.html#AEN1846"
><B
CLASS="command"
>options</B
></DT
><DT
>6.2.14. <A
-HREF="Bv9ARM.ch06.html#AEN2014"
+HREF="Bv9ARM.ch06.html#AEN2058"
><B
CLASS="command"
>options</B
></DT
><DT
>6.2.17. <A
-HREF="Bv9ARM.ch06.html#AEN2888"
+HREF="Bv9ARM.ch06.html#AEN2932"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.18. <A
-HREF="Bv9ARM.ch06.html#AEN2904"
+HREF="Bv9ARM.ch06.html#AEN2948"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.19. <A
-HREF="Bv9ARM.ch06.html#AEN2912"
+HREF="Bv9ARM.ch06.html#AEN2956"
><B
CLASS="command"
>view</B
></DT
><DT
>6.2.20. <A
-HREF="Bv9ARM.ch06.html#AEN2926"
+HREF="Bv9ARM.ch06.html#AEN2970"
><B
CLASS="command"
>view</B
></DT
><DT
>6.2.22. <A
-HREF="Bv9ARM.ch06.html#AEN3073"
+HREF="Bv9ARM.ch06.html#AEN3117"
><B
CLASS="command"
>zone</B
></DD
><DT
>6.3. <A
-HREF="Bv9ARM.ch06.html#AEN3407"
+HREF="Bv9ARM.ch06.html#AEN3451"
>Zone File</A
></DT
><DD
></DT
><DT
>6.3.2. <A
-HREF="Bv9ARM.ch06.html#AEN3727"
+HREF="Bv9ARM.ch06.html#AEN3771"
>Discussion of MX Records</A
></DT
><DT
></DT
><DT
>6.3.4. <A
-HREF="Bv9ARM.ch06.html#AEN3848"
+HREF="Bv9ARM.ch06.html#AEN3892"
>Inverse Mapping in IPv4</A
></DT
><DT
>6.3.5. <A
-HREF="Bv9ARM.ch06.html#AEN3875"
+HREF="Bv9ARM.ch06.html#AEN3919"
>Other Zone File Directives</A
></DT
><DT
>6.3.6. <A
-HREF="Bv9ARM.ch06.html#AEN3933"
+HREF="Bv9ARM.ch06.html#AEN3977"
><SPAN
CLASS="acronym"
>BIND</SPAN
></DT
><DT
>7.2. <A
-HREF="Bv9ARM.ch07.html#AEN4025"
+HREF="Bv9ARM.ch07.html#AEN4069"
><B
CLASS="command"
>chroot</B
><DL
><DT
>7.2.1. <A
-HREF="Bv9ARM.ch07.html#AEN4048"
+HREF="Bv9ARM.ch07.html#AEN4092"
>The <B
CLASS="command"
>chroot</B
></DT
><DT
>7.2.2. <A
-HREF="Bv9ARM.ch07.html#AEN4066"
+HREF="Bv9ARM.ch07.html#AEN4110"
>Using the <B
CLASS="command"
>setuid</B
><DL
><DT
>8.1. <A
-HREF="Bv9ARM.ch08.html#AEN4087"
+HREF="Bv9ARM.ch08.html#AEN4131"
>Common Problems</A
></DT
><DD
><DL
><DT
>8.1.1. <A
-HREF="Bv9ARM.ch08.html#AEN4089"
+HREF="Bv9ARM.ch08.html#AEN4133"
>It's not working; how can I figure out what's wrong?</A
></DT
></DL
></DD
><DT
>8.2. <A
-HREF="Bv9ARM.ch08.html#AEN4092"
+HREF="Bv9ARM.ch08.html#AEN4136"
>Incrementing and Changing the Serial Number</A
></DT
><DT
>8.3. <A
-HREF="Bv9ARM.ch08.html#AEN4097"
+HREF="Bv9ARM.ch08.html#AEN4141"
>Where Can I Get Help?</A
></DT
></DL
><DL
><DT
>A.1. <A
-HREF="Bv9ARM.ch09.html#AEN4113"
+HREF="Bv9ARM.ch09.html#AEN4157"
>Acknowledgements</A
></DT
><DD
><DL
><DT
>A.1.1. <A
-HREF="Bv9ARM.ch09.html#AEN4115"
+HREF="Bv9ARM.ch09.html#AEN4159"
>A Brief History of the <SPAN
CLASS="acronym"
>DNS</SPAN
></DD
><DT
>A.3. <A
-HREF="Bv9ARM.ch09.html#AEN4154"
+HREF="Bv9ARM.ch09.html#AEN4198"
>General <SPAN
CLASS="acronym"
>DNS</SPAN
></DT
><DT
>A.4.3. <A
-HREF="Bv9ARM.ch09.html#AEN4763"
+HREF="Bv9ARM.ch09.html#AEN4807"
>Other Documents About <SPAN
CLASS="acronym"
>BIND</SPAN