- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named-checkconf.html,v 1.13 2004/08/23 00:05:42 marka Exp $ -->
+<!-- $Id: named-checkconf.html,v 1.14 2005/04/03 03:31:31 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>named-checkconf</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>named-checkconf</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-v</VAR
->] [<VAR
+>-v</CODE
+>] [<CODE
CLASS="OPTION"
->-j</VAR
->] [<VAR
+>-j</CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] {filename} [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] {filename} [<CODE
CLASS="OPTION"
->-z</VAR
+>-z</CODE
>]</P
></DIV
><DIV
CLASS="VARIABLELIST"
><DL
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named-checkzone.html,v 1.18 2005/03/16 04:57:16 marka Exp $ -->
+<!-- $Id: named-checkzone.html,v 1.19 2005/04/03 03:31:31 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>named-checkzone</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>named-checkzone</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-d</VAR
->] [<VAR
+>-d</CODE
+>] [<CODE
CLASS="OPTION"
->-j</VAR
->] [<VAR
+>-j</CODE
+>] [<CODE
CLASS="OPTION"
->-q</VAR
->] [<VAR
+>-q</CODE
+>] [<CODE
CLASS="OPTION"
->-v</VAR
->] [<VAR
+>-v</CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
-></VAR
->] [<VAR
+><I
+>class</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->mode</VAR
-></VAR
->] [<VAR
+><I
+>mode</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->mode</VAR
-></VAR
->] [<VAR
+><I
+>mode</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-o <VAR
+>-o <TT
CLASS="REPLACEABLE"
->filename</VAR
-></VAR
->] [<VAR
+><I
+>filename</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-w <VAR
+>-w <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-D</VAR
->] [<VAR
+>-D</CODE
+>] [<CODE
CLASS="OPTION"
->-W <VAR
+>-W <TT
CLASS="REPLACEABLE"
->mode</VAR
-></VAR
+><I
+>mode</I
+></TT
+></CODE
>] {zonename} {filename}</P
></DIV
><DIV
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
+><I
+>class</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->mode</VAR
+><I
+>mode</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->mode</VAR
+><I
+>mode</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-o <VAR
+>-o <TT
CLASS="REPLACEABLE"
->filename</VAR
+><I
+>filename</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-w <VAR
+>-w <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-W <VAR
+>-W <TT
CLASS="REPLACEABLE"
->mode</VAR
+><I
+>mode</I
+></TT
></DT
><DD
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dig.html,v 1.18 2004/08/23 00:05:43 marka Exp $ -->
+<!-- $Id: dig.html,v 1.19 2005/04/03 03:31:32 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>dig</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>dig</B
-> [@server] [<VAR
+> [@server] [<CODE
CLASS="OPTION"
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->address</VAR
-></VAR
->] [<VAR
+><I
+>address</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
-></VAR
->] [<VAR
+><I
+>class</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-f <VAR
+>-f <TT
CLASS="REPLACEABLE"
->filename</VAR
-></VAR
->] [<VAR
+><I
+>filename</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->filename</VAR
-></VAR
->] [<VAR
+><I
+>filename</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port#</VAR
-></VAR
->] [<VAR
+><I
+>port#</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->type</VAR
-></VAR
->] [<VAR
+><I
+>type</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-x <VAR
+>-x <TT
CLASS="REPLACEABLE"
->addr</VAR
-></VAR
->] [<VAR
+><I
+>addr</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-y <VAR
+>-y <TT
CLASS="REPLACEABLE"
->name:key</VAR
-></VAR
->] [<VAR
+><I
+>name:key</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-4</VAR
->] [<VAR
+>-4</CODE
+>] [<CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
>] [name] [type] [class] [queryopt...]</P
><P
><B
CLASS="COMMAND"
>dig</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-h</VAR
+>-h</CODE
>]</P
><P
><B
> is normally used with command-line
arguments, it also has a batch mode of operation for reading lookup
requests from a file. A brief summary of its command-line arguments
-and options is printed when the <VAR
+and options is printed when the <CODE
CLASS="OPTION"
->-h</VAR
+>-h</CODE
> option is given.
Unlike earlier versions, the BIND9 implementation of
<B
>is the name or IP address of the name server to query. This can be an IPv4
address in dotted-decimal notation or an IPv6
address in colon-delimited notation. When the supplied
-<VAR
+<CODE
CLASS="PARAMETER"
->server</VAR
+>server</CODE
> argument is a hostname,
<B
CLASS="COMMAND"
>dig</B
> resolves that name before querying that name
-server. If no <VAR
+server. If no <CODE
CLASS="PARAMETER"
->server</VAR
+>server</CODE
> argument is provided,
<B
CLASS="COMMAND"
><P
>indicates what type of query is required —
ANY, A, MX, SIG, etc.
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> can be any valid query type. If no
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> argument is supplied,
<B
CLASS="COMMAND"
><H2
>OPTIONS</H2
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-b</VAR
+>-b</CODE
> option sets the source IP address of the query
-to <VAR
+to <CODE
CLASS="PARAMETER"
->address</VAR
+>address</CODE
>. This must be a valid address on
one of the host's network interfaces or "0.0.0.0" or "::". An optional port
may be specified by appending "#<port>"</P
><P
>The default query class (IN for internet) is overridden by the
-<VAR
+<CODE
CLASS="OPTION"
->-c</VAR
-> option. <VAR
+>-c</CODE
+> option. <CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
> is any valid
class, such as HS for Hesiod records or CH for CHAOSNET records.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-f</VAR
+>-f</CODE
> option makes <B
CLASS="COMMAND"
>dig </B
> operate
in batch mode by reading a list of lookup requests to process from the
-file <VAR
+file <CODE
CLASS="PARAMETER"
->filename</VAR
+>filename</CODE
>. The file contains a number of
queries, one per line. Each entry in the file should be organised in
the same way they would be presented as queries to
> using the command-line interface.</P
><P
>If a non-standard port number is to be queried, the
-<VAR
+<CODE
CLASS="OPTION"
->-p</VAR
-> option is used. <VAR
+>-p</CODE
+> option is used. <CODE
CLASS="PARAMETER"
->port#</VAR
+>port#</CODE
> is
the port number that <B
CLASS="COMMAND"
to test a name server that has been configured to listen for queries
on a non-standard port number.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-4</VAR
+>-4</CODE
> option forces <B
CLASS="COMMAND"
>dig</B
> to only
-use IPv4 query transport. The <VAR
+use IPv4 query transport. The <CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
> option forces
<B
CLASS="COMMAND"
>dig</B
> to only use IPv6 query transport.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-t</VAR
+>-t</CODE
> option sets the query type to
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>. It can be any valid query type which is
supported in BIND9. The default query type "A", unless the
-<VAR
+<CODE
CLASS="OPTION"
->-x</VAR
+>-x</CODE
> option is supplied to indicate a reverse lookup.
A zone transfer can be requested by specifying a type of AXFR. When
an incremental zone transfer (IXFR) is required,
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
-> is set to <VAR
+>type</CODE
+> is set to <TT
CLASS="LITERAL"
->ixfr=N</VAR
+>ixfr=N</TT
>.
The incremental zone transfer will contain the changes made to the zone
since the serial number in the zone's SOA record was
-<VAR
+<CODE
CLASS="PARAMETER"
->N</VAR
+>N</CODE
>.</P
><P
>Reverse lookups - mapping addresses to names - are simplified by the
-<VAR
+<CODE
CLASS="OPTION"
->-x</VAR
-> option. <VAR
+>-x</CODE
+> option. <CODE
CLASS="PARAMETER"
->addr</VAR
+>addr</CODE
> is an IPv4
address in dotted-decimal notation, or a colon-delimited IPv6 address.
When this option is used, there is no need to provide the
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
->, <VAR
+>name</CODE
+>, <CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
> and
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> arguments. <B
CLASS="COMMAND"
>dig</B
>
automatically performs a lookup for a name like
-<VAR
+<TT
CLASS="LITERAL"
->11.12.13.10.in-addr.arpa</VAR
+>11.12.13.10.in-addr.arpa</TT
> and sets the query type and
class to PTR and IN respectively. By default, IPv6 addresses are
looked up using nibble format under the IP6.ARPA domain.
To use the older RFC1886 method using the IP6.INT domain
-specify the <VAR
+specify the <CODE
CLASS="OPTION"
->-i</VAR
+>-i</CODE
> option. Bit string labels (RFC2874)
are now experimental and are not attempted.</P
><P
>dig</B
> and their
responses using transaction signatures (TSIG), specify a TSIG key file
-using the <VAR
+using the <CODE
CLASS="OPTION"
->-k</VAR
+>-k</CODE
> option. You can also specify the TSIG
-key itself on the command line using the <VAR
+key itself on the command line using the <CODE
CLASS="OPTION"
->-y</VAR
+>-y</CODE
> option;
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> is the name of the TSIG key and
-<VAR
+<CODE
CLASS="PARAMETER"
->key</VAR
+>key</CODE
> is the actual key. The key is a base-64
encoded string, typically generated by <SPAN
CLASS="CITEREFENTRY"
>(8)</SPAN
>.
-Caution should be taken when using the <VAR
+Caution should be taken when using the <CODE
CLASS="OPTION"
->-y</VAR
+>-y</CODE
> option on
multi-user systems as the key can be visible in the output from
<SPAN
and retry strategies.</P
><P
>Each query option is identified by a keyword preceded by a plus sign
-(<VAR
+(<TT
CLASS="LITERAL"
->+</VAR
+>+</TT
>). Some keywords set or reset an option. These may be preceded
-by the string <VAR
+by the string <TT
CLASS="LITERAL"
->no</VAR
+>no</TT
> to negate the meaning of that keyword. Other
keywords assign values to options like the timeout interval. They
-have the form <VAR
+have the form <CODE
CLASS="OPTION"
->+keyword=value</VAR
+>+keyword=value</CODE
>.
The query options are:
CLASS="VARIABLELIST"
><DL
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]tcp</VAR
+>+[no]tcp</CODE
></DT
><DD
><P
which case a TCP connection is used.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]vc</VAR
+>+[no]vc</CODE
></DT
><DD
><P
>Use [do not use] TCP when querying name servers. This alternate
-syntax to <VAR
+syntax to <CODE
CLASS="PARAMETER"
->+[no]tcp</VAR
+>+[no]tcp</CODE
> is provided for backwards
compatibility. The "vc" stands for "virtual circuit".</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]ignore</VAR
+>+[no]ignore</CODE
></DT
><DD
><P
default, TCP retries are performed.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+domain=somename</VAR
+>+domain=somename</CODE
></DT
><DD
><P
>Set the search list to contain the single domain
-<VAR
+<CODE
CLASS="PARAMETER"
->somename</VAR
+>somename</CODE
>, as if specified in a
<B
CLASS="COMMAND"
CLASS="FILENAME"
>/etc/resolv.conf</TT
>, and enable search list
-processing as if the <VAR
+processing as if the <CODE
CLASS="PARAMETER"
->+search</VAR
+>+search</CODE
> option were given.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]search</VAR
+>+[no]search</CODE
></DT
><DD
><P
The search list is not used by default.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]defname</VAR
+>+[no]defname</CODE
></DT
><DD
><P
->Deprecated, treated as a synonym for <VAR
+>Deprecated, treated as a synonym for <CODE
CLASS="PARAMETER"
->+[no]search</VAR
+>+[no]search</CODE
></P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]aaonly</VAR
+>+[no]aaonly</CODE
></DT
><DD
><P
>Sets the "aa" flag in the query.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]aaflag</VAR
+>+[no]aaflag</CODE
></DT
><DD
><P
->A synonym for <VAR
+>A synonym for <CODE
CLASS="PARAMETER"
->+[no]aaonly</VAR
+>+[no]aaonly</CODE
>.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]adflag</VAR
+>+[no]adflag</CODE
></DT
><DD
><P
completeness.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]cdflag</VAR
+>+[no]cdflag</CODE
></DT
><DD
><P
requests the server to not perform DNSSEC validation of responses.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]cl</VAR
+>+[no]cl</CODE
></DT
><DD
><P
>Display [do not display] the CLASS when printing the record.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]ttlid</VAR
+>+[no]ttlid</CODE
></DT
><DD
><P
>Display [do not display] the TTL when printing the record.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]recurse</VAR
+>+[no]recurse</CODE
></DT
><DD
><P
>dig</B
>
normally sends recursive queries. Recursion is automatically disabled
-when the <VAR
+when the <CODE
CLASS="PARAMETER"
->+nssearch</VAR
+>+nssearch</CODE
> or
-<VAR
+<CODE
CLASS="PARAMETER"
->+trace</VAR
+>+trace</CODE
> query options are used.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]nssearch</VAR
+>+[no]nssearch</CODE
></DT
><DD
><P
zone.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]trace</VAR
+>+[no]trace</CODE
></DT
><DD
><P
resolve the lookup.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]cmd</VAR
+>+[no]cmd</CODE
></DT
><DD
><P
been applied. This comment is printed by default.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]short</VAR
+>+[no]short</CODE
></DT
><DD
><P
verbose form.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]identify</VAR
+>+[no]identify</CODE
></DT
><DD
><P
>Show [or do not show] the IP address and port number that supplied the
-answer when the <VAR
+answer when the <CODE
CLASS="PARAMETER"
->+short</VAR
+>+short</CODE
> option is enabled. If
short form answers are requested, the default is not to show the
source address and port number of the server that provided the answer.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]comments</VAR
+>+[no]comments</CODE
></DT
><DD
><P
print comments.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]stats</VAR
+>+[no]stats</CODE
></DT
><DD
><P
to print the query statistics.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]qr</VAR
+>+[no]qr</CODE
></DT
><DD
><P
By default, the query is not printed.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]question</VAR
+>+[no]question</CODE
></DT
><DD
><P
returned. The default is to print the question section as a comment.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]answer</VAR
+>+[no]answer</CODE
></DT
><DD
><P
is to display it.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]authority</VAR
+>+[no]authority</CODE
></DT
><DD
><P
default is to display it.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]additional</VAR
+>+[no]additional</CODE
></DT
><DD
><P
The default is to display it.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]all</VAR
+>+[no]all</CODE
></DT
><DD
><P
>Set or clear all display flags.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+time=T</VAR
+>+time=T</CODE
></DT
><DD
><P
> Sets the timeout for a query to
-<VAR
+<CODE
CLASS="PARAMETER"
->T</VAR
+>T</CODE
> seconds. The default time out is 5 seconds.
-An attempt to set <VAR
+An attempt to set <CODE
CLASS="PARAMETER"
->T</VAR
+>T</CODE
> to less than 1 will result
in a query timeout of 1 second being applied.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+tries=T</VAR
+>+tries=T</CODE
></DT
><DD
><P
>Sets the number of times to try UDP queries to server to
-<VAR
+<CODE
CLASS="PARAMETER"
->T</VAR
+>T</CODE
> instead of the default, 3. If
-<VAR
+<CODE
CLASS="PARAMETER"
->T</VAR
+>T</CODE
> is less than or equal to zero, the number of
tries is silently rounded up to 1.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+retry=T</VAR
+>+retry=T</CODE
></DT
><DD
><P
>Sets the number of times to retry UDP queries to server to
-<VAR
+<CODE
CLASS="PARAMETER"
->T</VAR
+>T</CODE
> instead of the default, 2. Unlike
-<VAR
+<CODE
CLASS="PARAMETER"
->+tries</VAR
+>+tries</CODE
>, this does not include the initial
query.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+ndots=D</VAR
+>+ndots=D</CODE
></DT
><DD
><P
>Set the number of dots that have to appear in
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
-> to <VAR
+>name</CODE
+> to <CODE
CLASS="PARAMETER"
->D</VAR
+>D</CODE
> for it to be
considered absolute. The default value is that defined using the
ndots statement in <TT
>, or 1 if no
ndots statement is present. Names with fewer dots are interpreted as
relative names and will be searched for in the domains listed in the
-<VAR
+<CODE
CLASS="OPTION"
->search</VAR
-> or <VAR
+>search</CODE
+> or <CODE
CLASS="OPTION"
->domain</VAR
+>domain</CODE
> directive in
<TT
CLASS="FILENAME"
>.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+bufsize=B</VAR
+>+bufsize=B</CODE
></DT
><DD
><P
>Set the UDP message buffer size advertised using EDNS0 to
-<VAR
+<CODE
CLASS="PARAMETER"
->B</VAR
+>B</CODE
> bytes. The maximum and minimum sizes of this
buffer are 65535 and 0 respectively. Values outside this range are
rounded up or down appropriately.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]multiline</VAR
+>+[no]multiline</CODE
></DT
><DD
><P
> output.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]fail</VAR
+>+[no]fail</CODE
></DT
><DD
><P
behaviour.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]besteffort</VAR
+>+[no]besteffort</CODE
></DT
><DD
><P
The default is to not display malformed answers.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]dnssec</VAR
+>+[no]dnssec</CODE
></DT
><DD
><P
in the OPT record in the additional section of the query.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]sigchase</VAR
+>+[no]sigchase</CODE
></DT
><DD
><P
-DDIG_SIGCHASE.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+trusted-key=####</VAR
+>+trusted-key=####</CODE
></DT
><DD
><P
->Specify a trusted key to be used with <VAR
+>Specify a trusted key to be used with <CODE
CLASS="OPTION"
->+sigchase</VAR
+>+sigchase</CODE
>.
Requires dig be compiled with -DDIG_SIGCHASE.</P
></DD
><DT
-><VAR
+><CODE
CLASS="OPTION"
->+[no]topdown</VAR
+>+[no]topdown</CODE
></DT
><DD
><P
>dig </B
> supports
specifying multiple queries on the command line (in addition to
-supporting the <VAR
+supporting the <CODE
CLASS="OPTION"
->-f</VAR
+>-f</CODE
> batch file option). Each of those
queries can be supplied with its own set of flags, options and query
options.</P
><P
->In this case, each <VAR
+>In this case, each <CODE
CLASS="PARAMETER"
->query</VAR
+>query</CODE
> argument represent an
individual query in the command-line syntax described above. Each
consists of any of the standard options and flags, the name to be
can also be supplied. These global query options must precede the
first tuple of name, class, type, options, flags, and query options
supplied on the command line. Any global query options (except
-the <VAR
+the <CODE
CLASS="OPTION"
->+[no]cmd</VAR
+>+[no]cmd</CODE
> option) can be
overridden by a query-specific set of query options. For example:
<PRE
CLASS="COMMAND"
>dig</B
> could be used from the command line
-to make three lookups: an ANY query for <VAR
+to make three lookups: an ANY query for <TT
CLASS="LITERAL"
->www.isc.org</VAR
+>www.isc.org</TT
>, a
reverse lookup of 127.0.0.1 and a query for the NS records of
-<VAR
+<TT
CLASS="LITERAL"
->isc.org</VAR
+>isc.org</TT
>.
-A global query option of <VAR
+A global query option of <CODE
CLASS="PARAMETER"
->+qr</VAR
+>+qr</CODE
> is applied, so
that <B
CLASS="COMMAND"
>dig</B
> shows the initial query it made for each
lookup. The final query has a local query option of
-<VAR
+<CODE
CLASS="PARAMETER"
->+noqr</VAR
+>+noqr</CODE
> which means that <B
CLASS="COMMAND"
>dig</B
>
will not print the initial query when it looks up the NS records for
-<VAR
+<TT
CLASS="LITERAL"
->isc.org</VAR
+>isc.org</TT
>.</P
></DIV
><DIV
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: host.html,v 1.12 2004/11/11 02:06:28 marka Exp $ -->
+<!-- $Id: host.html,v 1.13 2005/04/03 03:31:32 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>host</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>host</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-aCdlnrTwv</VAR
->] [<VAR
+>-aCdlnrTwv</CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
-></VAR
->] [<VAR
+><I
+>class</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-N <VAR
+>-N <TT
CLASS="REPLACEABLE"
->ndots</VAR
-></VAR
->] [<VAR
+><I
+>ndots</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-R <VAR
+>-R <TT
CLASS="REPLACEABLE"
->number</VAR
-></VAR
->] [<VAR
+><I
+>number</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->type</VAR
-></VAR
->] [<VAR
+><I
+>type</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-W <VAR
+>-W <TT
CLASS="REPLACEABLE"
->wait</VAR
-></VAR
->] [<VAR
+><I
+>wait</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-m <VAR
+>-m <TT
CLASS="REPLACEABLE"
->flag</VAR
-></VAR
->] [<VAR
+><I
+>flag</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-4</VAR
->] [<VAR
+>-4</CODE
+>] [<CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
>] {name} [server]</P
></DIV
><DIV
>
prints a short summary of its command line arguments and options.</P
><P
-><VAR
+><CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> is the domain name that is to be looked
up. It can also be a dotted-decimal IPv4 address or a colon-delimited
IPv6 address, in which case <B
>host</B
> will by default
perform a reverse lookup for that address.
-<VAR
+<CODE
CLASS="PARAMETER"
->server</VAR
+>server</CODE
> is an optional argument which is either
the name or IP address of the name server that <B
CLASS="COMMAND"
>/etc/resolv.conf</TT
>.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-a</VAR
+>-a</CODE
> (all) option is equivalent to setting the
-<VAR
+<CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
> option and asking <B
CLASS="COMMAND"
>host</B
> to make
a query of type ANY.</P
><P
->When the <VAR
+>When the <CODE
CLASS="OPTION"
->-C</VAR
+>-C</CODE
> option is used, <B
CLASS="COMMAND"
>host</B
>
will attempt to display the SOA records for zone
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> from all the listed authoritative name
servers for that zone. The list of name servers is defined by the NS
records that are found for the zone.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-c</VAR
+>-c</CODE
> option instructs to make a DNS query of class
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>. This can be used to lookup Hesiod or
Chaosnet class resource records. The default class is IN (Internet).</P
><P
CLASS="COMMAND"
>host</B
> when the
-<VAR
+<CODE
CLASS="OPTION"
->-d</VAR
-> or <VAR
+>-d</CODE
+> or <CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
> option is used. The two
options are equivalent. They have been provided for backwards
-compatibility. In previous versions, the <VAR
+compatibility. In previous versions, the <CODE
CLASS="OPTION"
->-d</VAR
+>-d</CODE
> option
-switched on debugging traces and <VAR
+switched on debugging traces and <CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
> enabled verbose
output.</P
><P
->List mode is selected by the <VAR
+>List mode is selected by the <CODE
CLASS="OPTION"
->-l</VAR
+>-l</CODE
> option. This makes
<B
CLASS="COMMAND"
>host</B
> perform a zone transfer for zone
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
>. Transfer the zone printing out the NS, PTR
-and address records (A/AAAA). If combined with <VAR
+and address records (A/AAAA). If combined with <CODE
CLASS="OPTION"
->-a</VAR
+>-a</CODE
>
all records will be printed. </P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-i</VAR
+>-i</CODE
>
option specifies that reverse lookups of IPv6 addresses should
use the IP6.INT domain as defined in RFC1886.
The default is to use IP6.ARPA.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-N</VAR
+>-N</CODE
> option sets the number of dots that have to be
-in <VAR
+in <CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> for it to be considered absolute. The
default value is that defined using the ndots statement in
<TT
>.</P
><P
>The number of UDP retries for a lookup can be changed with the
-<VAR
+<CODE
CLASS="OPTION"
->-R</VAR
-> option. <VAR
+>-R</CODE
+> option. <CODE
CLASS="PARAMETER"
->number</VAR
+>number</CODE
> indicates
how many times <B
CLASS="COMMAND"
>host</B
> will repeat a query that does
not get answered. The default number of retries is 1. If
-<VAR
+<CODE
CLASS="PARAMETER"
->number</VAR
+>number</CODE
> is negative or zero, the number of
retries will default to 1.</P
><P
->Non-recursive queries can be made via the <VAR
+>Non-recursive queries can be made via the <CODE
CLASS="OPTION"
->-r</VAR
+>-r</CODE
> option.
Setting this option clears the <SPAN
CLASS="TYPE"
>host</B
> makes.
This should mean that the name server receiving the query will not
-attempt to resolve <VAR
+attempt to resolve <CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
>. The
-<VAR
+<CODE
CLASS="OPTION"
->-r</VAR
+>-r</CODE
> option enables <B
CLASS="COMMAND"
>host</B
CLASS="COMMAND"
>host</B
> uses UDP when making queries. The
-<VAR
+<CODE
CLASS="OPTION"
->-T</VAR
+>-T</CODE
> option makes it use a TCP connection when querying
the name server. TCP will be automatically selected for queries that
require it, such as zone transfer (AXFR) requests.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-4</VAR
+>-4</CODE
> option forces <B
CLASS="COMMAND"
>host</B
> to only
-use IPv4 query transport. The <VAR
+use IPv4 query transport. The <CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
> option forces
<B
CLASS="COMMAND"
>host</B
> to only use IPv6 query transport.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-t</VAR
+>-t</CODE
> option is used to select the query type.
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> can be any recognised query type: CNAME,
NS, SOA, SIG, KEY, AXFR, etc. When no query type is specified,
<B
>host</B
> automatically selects an appropriate query
type. By default it looks for A records, but if the
-<VAR
+<CODE
CLASS="OPTION"
->-C</VAR
+>-C</CODE
> option was given, queries will be made for SOA
-records, and if <VAR
+records, and if <CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> is a dotted-decimal IPv4
address or colon-delimited IPv6 address, <B
CLASS="COMMAND"
starting serial number (e.g. -t IXFR=12345678).</P
><P
>The time to wait for a reply can be controlled through the
-<VAR
+<CODE
CLASS="OPTION"
->-W</VAR
-> and <VAR
+>-W</CODE
+> and <CODE
CLASS="OPTION"
->-w</VAR
+>-w</CODE
> options. The
-<VAR
+<CODE
CLASS="OPTION"
->-W</VAR
+>-W</CODE
> option makes <B
CLASS="COMMAND"
>host</B
> wait for
-<VAR
+<CODE
CLASS="PARAMETER"
->wait</VAR
-> seconds. If <VAR
+>wait</CODE
+> seconds. If <CODE
CLASS="PARAMETER"
->wait</VAR
+>wait</CODE
>
is less than one, the wait interval is set to one second. When the
-<VAR
+<CODE
CLASS="OPTION"
->-w</VAR
+>-w</CODE
> option is used, <B
CLASS="COMMAND"
>host</B
will be set to the number of seconds given by the hardware's maximum
value for an integer quantity.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-m</VAR
+>-m</CODE
> can be used to set the memory usage debugging flags
-<VAR
+<CODE
CLASS="PARAMETER"
->record</VAR
->, <VAR
+>record</CODE
+>, <CODE
CLASS="PARAMETER"
->usage</VAR
+>usage</CODE
> and
-<VAR
+<CODE
CLASS="PARAMETER"
->trace</VAR
+>trace</CODE
>. </P
></DIV
><DIV
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: nslookup.html,v 1.3 2004/08/23 00:05:43 marka Exp $ -->
+<!-- $Id: nslookup.html,v 1.4 2005/04/03 03:31:32 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>nslookup</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>nslookup</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-option</VAR
+>-option</CODE
>] [name | -] [server]</P
></DIV
><DIV
><CODE
CLASS="CONSTANT"
>server</CODE
-> <VAR
+> <TT
CLASS="REPLACEABLE"
->domain</VAR
+><I
+>domain</I
+></TT
></DT
><DD
><P
><CODE
CLASS="CONSTANT"
>lserver</CODE
-> <VAR
+> <TT
CLASS="REPLACEABLE"
->domain</VAR
+><I
+>domain</I
+></TT
></DT
><DD
><P
->Change the default server to <VAR
+>Change the default server to <TT
CLASS="REPLACEABLE"
->domain</VAR
+><I
+>domain</I
+></TT
>; <CODE
CLASS="CONSTANT"
>lserver</CODE
> uses the initial
-server to look up information about <VAR
+server to look up information about <TT
CLASS="REPLACEABLE"
->domain</VAR
+><I
+>domain</I
+></TT
>, while <CODE
CLASS="CONSTANT"
>server</CODE
><CODE
CLASS="CONSTANT"
>set</CODE
-> <VAR
+> <TT
CLASS="REPLACEABLE"
+><I
>keyword[<SPAN
CLASS="OPTIONAL"
>=value</SPAN
->]</VAR
+>]</I
+></TT
></DT
><DD
><P
><CODE
CLASS="CONSTANT"
>class=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->value</VAR
+><I
+>value</I
+></TT
></DT
><DD
><P
><DT
><CODE
CLASS="CONSTANT"
-><VAR
+><TT
CLASS="REPLACEABLE"
+><I
>[<SPAN
CLASS="OPTIONAL"
>no</SPAN
->]</VAR
+>]</I
+></TT
>debug</CODE
></DT
><DD
><DT
><CODE
CLASS="CONSTANT"
-><VAR
+><TT
CLASS="REPLACEABLE"
+><I
>[<SPAN
CLASS="OPTIONAL"
>no</SPAN
->]</VAR
+>]</I
+></TT
>d2</CODE
></DT
><DD
><CODE
CLASS="CONSTANT"
>domain=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->name</VAR
+><I
+>name</I
+></TT
></DT
><DD
><P
-> Sets the search list to <VAR
+> Sets the search list to <TT
CLASS="REPLACEABLE"
->name</VAR
+><I
+>name</I
+></TT
>.
</P
></DD
><DT
><CODE
CLASS="CONSTANT"
-><VAR
+><TT
CLASS="REPLACEABLE"
+><I
>[<SPAN
CLASS="OPTIONAL"
>no</SPAN
->]</VAR
+>]</I
+></TT
>search</CODE
></DT
><DD
><CODE
CLASS="CONSTANT"
>port=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->value</VAR
+><I
+>value</I
+></TT
></DT
><DD
><P
-> Change the default TCP/UDP name server port to <VAR
+> Change the default TCP/UDP name server port to <TT
CLASS="REPLACEABLE"
->value</VAR
+><I
+>value</I
+></TT
>.
</P
><P
><CODE
CLASS="CONSTANT"
>querytype=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->value</VAR
+><I
+>value</I
+></TT
></DT
><DD
><P
><CODE
CLASS="CONSTANT"
>type=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->value</VAR
+><I
+>value</I
+></TT
></DT
><DD
><P
><DT
><CODE
CLASS="CONSTANT"
-><VAR
+><TT
CLASS="REPLACEABLE"
+><I
>[<SPAN
CLASS="OPTIONAL"
>no</SPAN
->]</VAR
+>]</I
+></TT
>recurse</CODE
></DT
><DD
><CODE
CLASS="CONSTANT"
>retry=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->number</VAR
+><I
+>number</I
+></TT
></DT
><DD
><P
><CODE
CLASS="CONSTANT"
>timeout=</CODE
-><VAR
+><TT
CLASS="REPLACEABLE"
->number</VAR
+><I
+>number</I
+></TT
></DT
><DD
><P
><DT
><CODE
CLASS="CONSTANT"
-><VAR
+><TT
CLASS="REPLACEABLE"
+><I
>[<SPAN
CLASS="OPTIONAL"
>no</SPAN
->]</VAR
+>]</I
+></TT
>vc</CODE
></DT
><DD
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-keygen.html,v 1.14 2004/08/23 00:05:44 marka Exp $ -->
+<!-- $Id: dnssec-keygen.html,v 1.15 2005/04/03 03:31:32 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>dnssec-keygen</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>dnssec-keygen</B
-> {-a <VAR
+> {-a <TT
CLASS="REPLACEABLE"
->algorithm</VAR
->} {-b <VAR
+><I
+>algorithm</I
+></TT
+>} {-b <TT
CLASS="REPLACEABLE"
->keysize</VAR
->} {-n <VAR
+><I
+>keysize</I
+></TT
+>} {-n <TT
CLASS="REPLACEABLE"
->nametype</VAR
->} [<VAR
+><I
+>nametype</I
+></TT
+>} [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
-></VAR
->] [<VAR
+><I
+>class</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-e</VAR
->] [<VAR
+>-e</CODE
+>] [<CODE
CLASS="OPTION"
->-f <VAR
+>-f <TT
CLASS="REPLACEABLE"
->flag</VAR
-></VAR
->] [<VAR
+><I
+>flag</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-g <VAR
+>-g <TT
CLASS="REPLACEABLE"
->generator</VAR
-></VAR
->] [<VAR
+><I
+>generator</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-h</VAR
->] [<VAR
+>-h</CODE
+>] [<CODE
CLASS="OPTION"
->-k</VAR
->] [<VAR
+>-k</CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->protocol</VAR
-></VAR
->] [<VAR
+><I
+>protocol</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomdev</VAR
-></VAR
->] [<VAR
+><I
+>randomdev</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->strength</VAR
-></VAR
->] [<VAR
+><I
+>strength</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->type</VAR
-></VAR
->] [<VAR
+><I
+>type</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-v <VAR
+>-v <TT
CLASS="REPLACEABLE"
->level</VAR
-></VAR
+><I
+>level</I
+></TT
+></CODE
>] {name}</P
></DIV
><DIV
CLASS="VARIABLELIST"
><DL
><DT
->-a <VAR
+>-a <TT
CLASS="REPLACEABLE"
->algorithm</VAR
+><I
+>algorithm</I
+></TT
></DT
><DD
><P
> Selects the cryptographic algorithm. The value of
- <VAR
+ <CODE
CLASS="OPTION"
->algorithm</VAR
+>algorithm</CODE
> must be one of RSAMD5 (RSA) or RSASHA1,
DSA, DH (Diffie Hellman), or HMAC-MD5. These values
are case insensitive.
</P
></DD
><DT
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->keysize</VAR
+><I
+>keysize</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->nametype</VAR
+><I
+>nametype</I
+></TT
></DT
><DD
><P
> Specifies the owner type of the key. The value of
- <VAR
+ <CODE
CLASS="OPTION"
->nametype</VAR
+>nametype</CODE
> must either be ZONE (for a DNSSEC
zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with a host (KEY)),
USER (for a key associated with a user(KEY)) or OTHER (DNSKEY). These values are
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
+><I
+>class</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-f <VAR
+>-f <TT
CLASS="REPLACEABLE"
->flag</VAR
+><I
+>flag</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-g <VAR
+>-g <TT
CLASS="REPLACEABLE"
->generator</VAR
+><I
+>generator</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->protocol</VAR
+><I
+>protocol</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomdev</VAR
+><I
+>randomdev</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->strength</VAR
+><I
+>strength</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->type</VAR
+><I
+>type</I
+></TT
></DT
><DD
><P
-> Indicates the use of the key. <VAR
+> Indicates the use of the key. <CODE
CLASS="OPTION"
->type</VAR
+>type</CODE
> must be
one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default
is AUTHCONF. AUTH refers to the ability to authenticate
</P
></DD
><DT
->-v <VAR
+>-v <TT
CLASS="REPLACEABLE"
->level</VAR
+><I
+>level</I
+></TT
></DT
><DD
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-signzone.html,v 1.15 2005/03/23 04:27:46 marka Exp $ -->
+<!-- $Id: dnssec-signzone.html,v 1.16 2005/04/03 03:31:32 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>dnssec-signzone</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>dnssec-signzone</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-a</VAR
->] [<VAR
+>-a</CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
-></VAR
->] [<VAR
+><I
+>class</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-e <VAR
+>-e <TT
CLASS="REPLACEABLE"
->end-time</VAR
-></VAR
->] [<VAR
+><I
+>end-time</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-f <VAR
+>-f <TT
CLASS="REPLACEABLE"
->output-file</VAR
-></VAR
->] [<VAR
+><I
+>output-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-g</VAR
->] [<VAR
+>-g</CODE
+>] [<CODE
CLASS="OPTION"
->-h</VAR
->] [<VAR
+>-h</CODE
+>] [<CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->key</VAR
-></VAR
->] [<VAR
+><I
+>key</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-l <VAR
+>-l <TT
CLASS="REPLACEABLE"
->domain</VAR
-></VAR
->] [<VAR
+><I
+>domain</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-i <VAR
+>-i <TT
CLASS="REPLACEABLE"
->interval</VAR
-></VAR
->] [<VAR
+><I
+>interval</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-j <VAR
+>-j <TT
CLASS="REPLACEABLE"
->jitter</VAR
-></VAR
->] [<VAR
+><I
+>jitter</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->nthreads</VAR
-></VAR
->] [<VAR
+><I
+>nthreads</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-o <VAR
+>-o <TT
CLASS="REPLACEABLE"
->origin</VAR
-></VAR
->] [<VAR
+><I
+>origin</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p</VAR
->] [<VAR
+>-p</CODE
+>] [<CODE
CLASS="OPTION"
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomdev</VAR
-></VAR
->] [<VAR
+><I
+>randomdev</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->start-time</VAR
-></VAR
->] [<VAR
+><I
+>start-time</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t</VAR
->] [<VAR
+>-t</CODE
+>] [<CODE
CLASS="OPTION"
->-v <VAR
+>-v <TT
CLASS="REPLACEABLE"
->level</VAR
-></VAR
->] [<VAR
+><I
+>level</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-z</VAR
+>-z</CODE
>] {zonefile} [key...]</P
></DIV
><DIV
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->class</VAR
+><I
+>class</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->key</VAR
+><I
+>key</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-l <VAR
+>-l <TT
CLASS="REPLACEABLE"
->domain</VAR
+><I
+>domain</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
CLASS="FILENAME"
>keyset</TT
> files in
- <VAR
+ <CODE
CLASS="OPTION"
->directory</VAR
+>directory</CODE
> as the directory
</P
></DD
</P
></DD
><DT
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->start-time</VAR
+><I
+>start-time</I
+></TT
></DT
><DD
><P
in YYYYMMDDHHMMSS notation; 20000530144500 denotes
14:45:00 UTC on May 30th, 2000. A relative start time is
indicated by +N, which is N seconds from the current time.
- If no <VAR
+ If no <CODE
CLASS="OPTION"
->start-time</VAR
+>start-time</CODE
> is specified, the current
time minus 1 hour (to allow for clock skew) is used.
</P
></DD
><DT
->-e <VAR
+>-e <TT
CLASS="REPLACEABLE"
->end-time</VAR
+><I
+>end-time</I
+></TT
></DT
><DD
><P
> Specify the date and time when the generated RRSIG records
- expire. As with <VAR
+ expire. As with <CODE
CLASS="OPTION"
->start-time</VAR
+>start-time</CODE
>, an absolute
time is indicated in YYYYMMDDHHMMSS notation. A time relative
to the start time is indicated with +N, which is N seconds from
the start time. A time relative to the current time is
- indicated with now+N. If no <VAR
+ indicated with now+N. If no <CODE
CLASS="OPTION"
->end-time</VAR
+>end-time</CODE
> is
specified, 30 days from the start time is used as a default.
</P
></DD
><DT
->-f <VAR
+>-f <TT
CLASS="REPLACEABLE"
->output-file</VAR
+><I
+>output-file</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-i <VAR
+>-i <TT
CLASS="REPLACEABLE"
->interval</VAR
+><I
+>interval</I
+></TT
></DT
><DD
><P
> When a previously signed zone is passed as input, records
- may be resigned. The <VAR
+ may be resigned. The <CODE
CLASS="OPTION"
->interval</VAR
+>interval</CODE
> option
specifies the cycle interval as an offset from the current
time (in seconds). If a RRSIG record expires after the
><P
> The default cycle interval is one quarter of the difference
between the signature end and start times. So if neither
- <VAR
+ <CODE
CLASS="OPTION"
->end-time</VAR
-> or <VAR
+>end-time</CODE
+> or <CODE
CLASS="OPTION"
->start-time</VAR
+>start-time</CODE
>
are specified, <B
CLASS="COMMAND"
simultaneously. If the zone is incrementally signed, i.e.
a previously signed zone is passed as input to the signer,
all expired signatures has to be regenerated at about the
- same time. The <VAR
+ same time. The <CODE
CLASS="OPTION"
->jitter</VAR
+>jitter</CODE
> option specifies a
jitter window that will be used to randomize the signature
expire time, thus spreading incremental signature
</P
></DD
><DT
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->ncpus</VAR
+><I
+>ncpus</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-o <VAR
+>-o <TT
CLASS="REPLACEABLE"
->origin</VAR
+><I
+>origin</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomdev</VAR
+><I
+>randomdev</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-v <VAR
+>-v <TT
CLASS="REPLACEABLE"
->level</VAR
+><I
+>level</I
+></TT
></DT
><DD
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwresd.html,v 1.9 2004/08/23 00:05:44 marka Exp $ -->
+<!-- $Id: lwresd.html,v 1.10 2005/04/03 03:31:33 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwresd</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>lwresd</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-C <VAR
+>-C <TT
CLASS="REPLACEABLE"
->config-file</VAR
-></VAR
->] [<VAR
+><I
+>config-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->debug-level</VAR
-></VAR
->] [<VAR
+><I
+>debug-level</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-f</VAR
->] [<VAR
+>-f</CODE
+>] [<CODE
CLASS="OPTION"
->-g</VAR
->] [<VAR
+>-g</CODE
+>] [<CODE
CLASS="OPTION"
->-i <VAR
+>-i <TT
CLASS="REPLACEABLE"
->pid-file</VAR
-></VAR
->] [<VAR
+><I
+>pid-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->#cpus</VAR
-></VAR
->] [<VAR
+><I
+>#cpus</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-P <VAR
+>-P <TT
CLASS="REPLACEABLE"
->port</VAR
-></VAR
->] [<VAR
+><I
+>port</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
-></VAR
->] [<VAR
+><I
+>port</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s</VAR
->] [<VAR
+>-s</CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
-></VAR
->] [<VAR
+><I
+>user</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
>]</P
></DIV
><DIV
CLASS="FILENAME"
>/etc/resolv.conf</TT
> contains any
- <VAR
+ <CODE
CLASS="OPTION"
->nameserver</VAR
+>nameserver</CODE
> entries, <B
CLASS="COMMAND"
>lwresd</B
>
sends recursive DNS queries to those servers. This is similar
to the use of forwarders in a caching name server. If no
- <VAR
+ <CODE
CLASS="OPTION"
->nameserver</VAR
+>nameserver</CODE
> entries are present, or if
forwarding fails, <B
CLASS="COMMAND"
CLASS="VARIABLELIST"
><DL
><DT
->-C <VAR
+>-C <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
></DT
><DD
><P
-> Use <VAR
+> Use <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
> as the
configuration file instead of the default,
<TT
</P
></DD
><DT
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->debug-level</VAR
+><I
+>debug-level</I
+></TT
></DT
><DD
><P
-> Set the daemon's debug level to <VAR
+> Set the daemon's debug level to <TT
CLASS="REPLACEABLE"
->debug-level</VAR
+><I
+>debug-level</I
+></TT
>.
Debugging traces from <B
CLASS="COMMAND"
</P
></DD
><DT
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->#cpus</VAR
+><I
+>#cpus</I
+></TT
></DT
><DD
><P
-> Create <VAR
+> Create <TT
CLASS="REPLACEABLE"
->#cpus</VAR
+><I
+>#cpus</I
+></TT
> worker threads
to take advantage of multiple CPUs. If not specified,
<B
</P
></DD
><DT
->-P <VAR
+>-P <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
></DT
><DD
><P
> Listen for lightweight resolver queries on port
- <VAR
+ <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
>. If
not specified, the default is port 921.
</P
></DD
><DT
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
></DT
><DD
><P
-> Send DNS lookups to port <VAR
+> Send DNS lookups to port <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
>. If not
specified, the default is port 53. This provides a
way of testing the lightweight resolver daemon with a
></DIV
></DD
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
> <CODE
CLASS="FUNCTION"
>chroot()</CODE
-> to <VAR
+> to <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
> after
processing the command line arguments, but before
reading the configuration file.
ALIGN="LEFT"
><P
> This option should be used in conjunction with the
- <VAR
+ <CODE
CLASS="OPTION"
->-u</VAR
+>-u</CODE
> option, as chrooting a process
running as root doesn't enhance security on most
systems; the way <CODE
></DIV
></DD
><DT
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
+><I
+>user</I
+></TT
></DT
><DD
><P
> <CODE
CLASS="FUNCTION"
>setuid()</CODE
-> to <VAR
+> to <TT
CLASS="REPLACEABLE"
->user</VAR
+><I
+>user</I
+></TT
> after completing
privileged operations, such as creating sockets that
listen on privileged ports.
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named.conf.html,v 1.9 2005/01/17 01:55:05 marka Exp $ -->
+<!-- $Id: named.conf.html,v 1.10 2005/04/03 03:31:33 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>named.conf</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>ACL</H2
><P
CLASS="LITERALLAYOUT"
->acl <VAR
+>acl <TT
CLASS="REPLACEABLE"
->string</VAR
-> { <VAR
+><I
+>string</I
+></TT
+> { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br> </P
></DIV
><DIV
>KEY</H2
><P
CLASS="LITERALLAYOUT"
->key <VAR
+>key <TT
CLASS="REPLACEABLE"
->domain_name</VAR
+><I
+>domain_name</I
+></TT
> {<br>
- algorithm <VAR
+ algorithm <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
- secret <VAR
+ secret <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
};</P
></DIV
>MASTERS</H2
><P
CLASS="LITERALLAYOUT"
->masters <VAR
+>masters <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->masters</VAR
-> | <VAR
+><I
+>masters</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] ) [<SPAN
CLASS="OPTIONAL"
-> key <VAR
+> key <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>]; ...<br>
};</P
>SERVER</H2
><P
CLASS="LITERALLAYOUT"
->server ( <VAR
+>server ( <TT
CLASS="REPLACEABLE"
+><I
>ipv4_address[<SPAN
CLASS="OPTIONAL"
>/prefixlen</SPAN
->]</VAR
-> | <VAR
+>]</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
+><I
>ipv6_address[<SPAN
CLASS="OPTIONAL"
>/prefixlen</SPAN
->]</VAR
+>]</I
+></TT
> ) {<br>
- bogus <VAR
+ bogus <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- edns <VAR
+ edns <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- provide-ixfr <VAR
+ provide-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- request-ixfr <VAR
+ request-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- keys <VAR
+ keys <TT
CLASS="REPLACEABLE"
->server_key</VAR
+><I
+>server_key</I
+></TT
>;<br>
- transfers <VAR
+ transfers <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
transfer-format ( many-answers | one-answer );<br>
- transfer-source ( <VAR
+ transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- transfer-source-v6 ( <VAR
+ transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
<br>
- support-ixfr <VAR
+ support-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
};</P
></DIV
><P
CLASS="LITERALLAYOUT"
>trusted-keys {<br>
- <VAR
-CLASS="REPLACEABLE"
->domain_name</VAR
-> <VAR
-CLASS="REPLACEABLE"
->flags</VAR
-> <VAR
-CLASS="REPLACEABLE"
->protocol</VAR
-> <VAR
-CLASS="REPLACEABLE"
->algorithm</VAR
-> <VAR
-CLASS="REPLACEABLE"
->key</VAR
+ <TT
+CLASS="REPLACEABLE"
+><I
+>domain_name</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>flags</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>protocol</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>algorithm</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>key</I
+></TT
>; ... <br>
};</P
></DIV
><P
CLASS="LITERALLAYOUT"
>controls {<br>
- inet ( <VAR
+ inet ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>]<br>
- allow { <VAR
+ allow { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... }<br>
[<SPAN
CLASS="OPTIONAL"
-> keys { <VAR
+> keys { <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ... } </SPAN
>];<br>
- unix <VAR
+ unix <TT
CLASS="REPLACEABLE"
->unsupported</VAR
+><I
+>unsupported</I
+></TT
>; // not implemented<br>
};</P
></DIV
><P
CLASS="LITERALLAYOUT"
>logging {<br>
- channel <VAR
+ channel <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> {<br>
- file <VAR
+ file <TT
CLASS="REPLACEABLE"
->log_file</VAR
+><I
+>log_file</I
+></TT
>;<br>
- syslog <VAR
+ syslog <TT
CLASS="REPLACEABLE"
->optional_facility</VAR
+><I
+>optional_facility</I
+></TT
>;<br>
null;<br>
stderr;<br>
- severity <VAR
+ severity <TT
CLASS="REPLACEABLE"
->log_severity</VAR
+><I
+>log_severity</I
+></TT
>;<br>
- print-time <VAR
+ print-time <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- print-severity <VAR
+ print-severity <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- print-category <VAR
+ print-category <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
};<br>
- category <VAR
+ category <TT
CLASS="REPLACEABLE"
->string</VAR
-> { <VAR
+><I
+>string</I
+></TT
+> { <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ... };<br>
};</P
></DIV
>lwres {<br>
listen-on [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> ) [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ...<br>
};<br>
- view <VAR
+ view <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->optional_class</VAR
+><I
+>optional_class</I
+></TT
>;<br>
- search { <VAR
+ search { <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ... };<br>
- ndots <VAR
+ ndots <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
};</P
></DIV
><P
CLASS="LITERALLAYOUT"
>options {<br>
- avoid-v4-udp-ports { <VAR
+ avoid-v4-udp-ports { <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
>; ... };<br>
- avoid-v6-udp-ports { <VAR
+ avoid-v6-udp-ports { <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
>; ... };<br>
- blackhole { <VAR
+ blackhole { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- coresize <VAR
+ coresize <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>;<br>
- datasize <VAR
+ datasize <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>;<br>
- directory <VAR
+ directory <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- dump-file <VAR
+ dump-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- files <VAR
+ files <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>;<br>
- heartbeat-interval <VAR
+ heartbeat-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- host-statistics <VAR
+ host-statistics <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // not implemented<br>
- host-statistics-max <VAR
+ host-statistics-max <TT
CLASS="REPLACEABLE"
->number</VAR
+><I
+>number</I
+></TT
>; // not implemented<br>
- hostname ( <VAR
+ hostname ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> | none );<br>
- interface-interval <VAR
+ interface-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
listen-on [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
->] { <VAR
+>] { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
listen-on-v6 [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
->] { <VAR
+>] { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- match-mapped-addresses <VAR
+ match-mapped-addresses <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- memstatistics-file <VAR
+ memstatistics-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- pid-file ( <VAR
+ pid-file ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> | none );<br>
- port <VAR
+ port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- querylog <VAR
+ querylog <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- recursing-file <VAR
+ recursing-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- random-device <VAR
+ random-device <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- recursive-clients <VAR
+ recursive-clients <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- serial-query-rate <VAR
+ serial-query-rate <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- server-id ( <VAR
+ server-id ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> | none |;<br>
- stacksize <VAR
+ stacksize <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>;<br>
- statistics-file <VAR
+ statistics-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- statistics-interval <VAR
+ statistics-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>; // not yet implemented<br>
- tcp-clients <VAR
+ tcp-clients <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- tcp-listen-queue <VAR
+ tcp-listen-queue <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- tkey-dhkey <VAR
+ tkey-dhkey <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
-> <VAR
+><I
+>quoted_string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- tkey-gssapi-credential <VAR
+ tkey-gssapi-credential <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- tkey-domain <VAR
+ tkey-domain <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- transfers-per-ns <VAR
+ transfers-per-ns <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- transfers-in <VAR
+ transfers-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- transfers-out <VAR
+ transfers-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- use-ixfr <VAR
+ use-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- version ( <VAR
+ version ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> | none );<br>
- allow-recursion { <VAR
+ allow-recursion { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- sortlist { <VAR
+ sortlist { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- topology { <VAR
+ topology { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... }; // not implemented<br>
- auth-nxdomain <VAR
+ auth-nxdomain <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // default changed<br>
- minimal-responses <VAR
+ minimal-responses <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- recursion <VAR
+ recursion <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
rrset-order {<br>
[<SPAN
CLASS="OPTIONAL"
-> class <VAR
+> class <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>] [<SPAN
CLASS="OPTIONAL"
-> type <VAR
+> type <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>]<br>
[<SPAN
CLASS="OPTIONAL"
-> name <VAR
+> name <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> </SPAN
->] <VAR
+>] <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ...<br>
};<br>
- provide-ixfr <VAR
+ provide-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- request-ixfr <VAR
+ request-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- rfc2308-type1 <VAR
+ rfc2308-type1 <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // not yet implemented<br>
- additional-from-auth <VAR
+ additional-from-auth <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- additional-from-cache <VAR
+ additional-from-cache <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- query-source <VAR
+ query-source <TT
CLASS="REPLACEABLE"
->querysource4</VAR
+><I
+>querysource4</I
+></TT
>;<br>
- query-source-v6 <VAR
+ query-source-v6 <TT
CLASS="REPLACEABLE"
->querysource6</VAR
+><I
+>querysource6</I
+></TT
>;<br>
- cleaning-interval <VAR
+ cleaning-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-roots <VAR
+ min-roots <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>; // not implemented<br>
- lame-ttl <VAR
+ lame-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-ncache-ttl <VAR
+ max-ncache-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-cache-ttl <VAR
+ max-cache-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
transfer-format ( many-answers | one-answer );<br>
- max-cache-size <VAR
+ max-cache-size <TT
CLASS="REPLACEABLE"
->size_no_default</VAR
+><I
+>size_no_default</I
+></TT
>;<br>
check-names ( master | slave | response )<br>
( fail | warn | ignore );<br>
- cache-file <VAR
+ cache-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- suppress-initial-notify <VAR
+ suppress-initial-notify <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // not yet implemented<br>
- preferred-glue <VAR
+ preferred-glue <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
dual-stack-servers [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] ); ...<br>
}<br>
- edns-udp-size <VAR
+ edns-udp-size <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
root-delegation-only [<SPAN
CLASS="OPTIONAL"
-> exclude { <VAR
+> exclude { <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>; ... } </SPAN
>];<br>
- disable-algorithms <VAR
+ disable-algorithms <TT
CLASS="REPLACEABLE"
->string</VAR
-> { <VAR
+><I
+>string</I
+></TT
+> { <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ... };<br>
- dnssec-enable <VAR
+ dnssec-enable <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- dnssec-lookaside <VAR
+ dnssec-lookaside <TT
CLASS="REPLACEABLE"
->string</VAR
-> trust-anchor <VAR
+><I
+>string</I
+></TT
+> trust-anchor <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
- dnssec-must-be-secure <VAR
+ dnssec-must-be-secure <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
<br>
- dialup <VAR
+ dialup <TT
CLASS="REPLACEABLE"
->dialuptype</VAR
+><I
+>dialuptype</I
+></TT
>;<br>
- ixfr-from-differences <VAR
+ ixfr-from-differences <TT
CLASS="REPLACEABLE"
->ixfrdiff</VAR
+><I
+>ixfrdiff</I
+></TT
>;<br>
<br>
- allow-query { <VAR
+ allow-query { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-query-cache { <VAR
+ allow-query-cache { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-transfer { <VAR
+ allow-transfer { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update { <VAR
+ allow-update { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update-forwarding { <VAR
+ allow-update-forwarding { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
<br>
- notify <VAR
+ notify <TT
CLASS="REPLACEABLE"
->notifytype</VAR
+><I
+>notifytype</I
+></TT
>;<br>
- notify-source ( <VAR
+ notify-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-source-v6 ( <VAR
+ notify-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-delay <VAR
+ notify-delay <TT
CLASS="REPLACEABLE"
->seconds</VAR
+><I
+>seconds</I
+></TT
>;<br>
also-notify [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> )<br>
[<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ... };<br>
- allow-notify { <VAR
+ allow-notify { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
<br>
forward ( first | only );<br>
forwarders [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> ) [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ...<br>
};<br>
<br>
- max-journal-size <VAR
+ max-journal-size <TT
CLASS="REPLACEABLE"
->size_no_default</VAR
+><I
+>size_no_default</I
+></TT
>;<br>
- max-transfer-time-in <VAR
+ max-transfer-time-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-time-out <VAR
+ max-transfer-time-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-in <VAR
+ max-transfer-idle-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-out <VAR
+ max-transfer-idle-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-retry-time <VAR
+ max-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-retry-time <VAR
+ min-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-refresh-time <VAR
+ max-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-refresh-time <VAR
+ min-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- multi-master <VAR
+ multi-master <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- sig-validity-interval <VAR
+ sig-validity-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
<br>
- transfer-source ( <VAR
+ transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- transfer-source-v6 ( <VAR
+ transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
<br>
- alt-transfer-source ( <VAR
+ alt-transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- alt-transfer-source-v6 ( <VAR
+ alt-transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- use-alt-transfer-source <VAR
+ use-alt-transfer-source <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
<br>
- zone-statistics <VAR
+ zone-statistics <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- key-directory <VAR
+ key-directory <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
<br>
- allow-v6-synthesis { <VAR
+ allow-v6-synthesis { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... }; // obsolete<br>
- deallocate-on-exit <VAR
+ deallocate-on-exit <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- fake-iquery <VAR
+ fake-iquery <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- fetch-glue <VAR
+ fetch-glue <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- has-old-clients <VAR
+ has-old-clients <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- maintain-ixfr-base <VAR
+ maintain-ixfr-base <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- max-ixfr-log-size <VAR
+ max-ixfr-log-size <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>; // obsolete<br>
- multiple-cnames <VAR
+ multiple-cnames <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- named-xfer <VAR
+ named-xfer <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>; // obsolete<br>
- serial-queries <VAR
+ serial-queries <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>; // obsolete<br>
- treat-cr-as-space <VAR
+ treat-cr-as-space <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- use-id-pool <VAR
+ use-id-pool <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
};</P
></DIV
>VIEW</H2
><P
CLASS="LITERALLAYOUT"
->view <VAR
+>view <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->optional_class</VAR
+><I
+>optional_class</I
+></TT
> {<br>
- match-clients { <VAR
+ match-clients { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- match-destinations { <VAR
+ match-destinations { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- match-recursive-only <VAR
+ match-recursive-only <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
<br>
- key <VAR
+ key <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> {<br>
- algorithm <VAR
+ algorithm <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
- secret <VAR
+ secret <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
};<br>
<br>
- zone <VAR
+ zone <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->optional_class</VAR
+><I
+>optional_class</I
+></TT
> {<br>
...<br>
};<br>
<br>
- server ( <VAR
+ server ( <TT
CLASS="REPLACEABLE"
+><I
>ipv4_address[<SPAN
CLASS="OPTIONAL"
>/prefixlen</SPAN
->]</VAR
-> | <VAR
+>]</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
+><I
>ipv6_address[<SPAN
CLASS="OPTIONAL"
>/prefixlen</SPAN
->]</VAR
+>]</I
+></TT
> ) {<br>
...<br>
};<br>
<br>
trusted-keys {<br>
- <VAR
-CLASS="REPLACEABLE"
->string</VAR
-> <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->quoted_string</VAR
+ <TT
+CLASS="REPLACEABLE"
+><I
+>string</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
>; ...<br>
};<br>
<br>
- allow-recursion { <VAR
+ allow-recursion { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- sortlist { <VAR
+ sortlist { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- topology { <VAR
+ topology { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... }; // not implemented<br>
- auth-nxdomain <VAR
+ auth-nxdomain <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // default changed<br>
- minimal-responses <VAR
+ minimal-responses <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- recursion <VAR
+ recursion <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
rrset-order {<br>
[<SPAN
CLASS="OPTIONAL"
-> class <VAR
+> class <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>] [<SPAN
CLASS="OPTIONAL"
-> type <VAR
+> type <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>]<br>
[<SPAN
CLASS="OPTIONAL"
-> name <VAR
+> name <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> </SPAN
->] <VAR
+>] <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ...<br>
};<br>
- provide-ixfr <VAR
+ provide-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- request-ixfr <VAR
+ request-ixfr <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- rfc2308-type1 <VAR
+ rfc2308-type1 <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // not yet implemented<br>
- additional-from-auth <VAR
+ additional-from-auth <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- additional-from-cache <VAR
+ additional-from-cache <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- query-source <VAR
+ query-source <TT
CLASS="REPLACEABLE"
->querysource4</VAR
+><I
+>querysource4</I
+></TT
>;<br>
- query-source-v6 <VAR
+ query-source-v6 <TT
CLASS="REPLACEABLE"
->querysource6</VAR
+><I
+>querysource6</I
+></TT
>;<br>
- cleaning-interval <VAR
+ cleaning-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-roots <VAR
+ min-roots <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>; // not implemented<br>
- lame-ttl <VAR
+ lame-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-ncache-ttl <VAR
+ max-ncache-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-cache-ttl <VAR
+ max-cache-ttl <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
transfer-format ( many-answers | one-answer );<br>
- max-cache-size <VAR
+ max-cache-size <TT
CLASS="REPLACEABLE"
->size_no_default</VAR
+><I
+>size_no_default</I
+></TT
>;<br>
check-names ( master | slave | response )<br>
( fail | warn | ignore );<br>
- cache-file <VAR
+ cache-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
- suppress-initial-notify <VAR
+ suppress-initial-notify <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // not yet implemented<br>
- preferred-glue <VAR
+ preferred-glue <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
dual-stack-servers [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] ); ...<br>
};<br>
- edns-udp-size <VAR
+ edns-udp-size <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
root-delegation-only [<SPAN
CLASS="OPTIONAL"
-> exclude { <VAR
+> exclude { <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>; ... } </SPAN
>];<br>
- disable-algorithms <VAR
+ disable-algorithms <TT
CLASS="REPLACEABLE"
->string</VAR
-> { <VAR
+><I
+>string</I
+></TT
+> { <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>; ... };<br>
- dnssec-enable <VAR
+ dnssec-enable <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- dnssec-lookaside <VAR
+ dnssec-lookaside <TT
CLASS="REPLACEABLE"
->string</VAR
-> trust-anchor <VAR
+><I
+>string</I
+></TT
+> trust-anchor <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
<br>
- dnssec-must-be-secure <VAR
+ dnssec-must-be-secure <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- dialup <VAR
+ dialup <TT
CLASS="REPLACEABLE"
->dialuptype</VAR
+><I
+>dialuptype</I
+></TT
>;<br>
- ixfr-from-differences <VAR
+ ixfr-from-differences <TT
CLASS="REPLACEABLE"
->ixfrdiff</VAR
+><I
+>ixfrdiff</I
+></TT
>;<br>
<br>
- allow-query { <VAR
+ allow-query { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-query-cache { <VAR
+ allow-query-cache { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-transfer { <VAR
+ allow-transfer { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update { <VAR
+ allow-update { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update-forwarding { <VAR
+ allow-update-forwarding { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
<br>
- notify <VAR
+ notify <TT
CLASS="REPLACEABLE"
->notifytype</VAR
+><I
+>notifytype</I
+></TT
>;<br>
- notify-source ( <VAR
+ notify-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-source-v6 ( <VAR
+ notify-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-delay <VAR
+ notify-delay <TT
CLASS="REPLACEABLE"
->seconds</VAR
+><I
+>seconds</I
+></TT
>;<br>
also-notify [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> )<br>
[<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ... };<br>
- allow-notify { <VAR
+ allow-notify { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
<br>
forward ( first | only );<br>
forwarders [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> ) [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ...<br>
};<br>
<br>
- max-journal-size <VAR
+ max-journal-size <TT
CLASS="REPLACEABLE"
->size_no_default</VAR
+><I
+>size_no_default</I
+></TT
>;<br>
- max-transfer-time-in <VAR
+ max-transfer-time-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-time-out <VAR
+ max-transfer-time-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-in <VAR
+ max-transfer-idle-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-out <VAR
+ max-transfer-idle-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-retry-time <VAR
+ max-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-retry-time <VAR
+ min-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-refresh-time <VAR
+ max-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-refresh-time <VAR
+ min-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- multi-master <VAR
+ multi-master <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- sig-validity-interval <VAR
+ sig-validity-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
<br>
- transfer-source ( <VAR
+ transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- transfer-source-v6 ( <VAR
+ transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
<br>
- alt-transfer-source ( <VAR
+ alt-transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- alt-transfer-source-v6 ( <VAR
+ alt-transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- use-alt-transfer-source <VAR
+ use-alt-transfer-source <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
<br>
- zone-statistics <VAR
+ zone-statistics <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- key-directory <VAR
+ key-directory <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
<br>
- allow-v6-synthesis { <VAR
+ allow-v6-synthesis { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... }; // obsolete<br>
- fetch-glue <VAR
+ fetch-glue <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- maintain-ixfr-base <VAR
+ maintain-ixfr-base <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- max-ixfr-log-size <VAR
+ max-ixfr-log-size <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>; // obsolete<br>
};</P
></DIV
>ZONE</H2
><P
CLASS="LITERALLAYOUT"
->zone <VAR
+>zone <TT
CLASS="REPLACEABLE"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="REPLACEABLE"
->optional_class</VAR
+><I
+>optional_class</I
+></TT
> {<br>
type ( master | slave | stub | hint |<br>
forward | delegation-only );<br>
- file <VAR
+ file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
<br>
masters [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->masters</VAR
+><I
+>masters</I
+></TT
> |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
->port <VAR
+>port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
></SPAN
>] |<br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] ) [<SPAN
CLASS="OPTIONAL"
-> key <VAR
+> key <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
> </SPAN
>]; ...<br>
};<br>
<br>
- database <VAR
+ database <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
>;<br>
- delegation-only <VAR
+ delegation-only <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
check-names ( fail | warn | ignore );<br>
- dialup <VAR
+ dialup <TT
CLASS="REPLACEABLE"
->dialuptype</VAR
+><I
+>dialuptype</I
+></TT
>;<br>
- ixfr-from-differences <VAR
+ ixfr-from-differences <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- journal <VAR
+ journal <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
<br>
- allow-query { <VAR
+ allow-query { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-transfer { <VAR
+ allow-transfer { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update { <VAR
+ allow-update { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
- allow-update-forwarding { <VAR
+ allow-update-forwarding { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
update-policy {<br>
- ( grant | deny ) <VAR
+ ( grant | deny ) <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
><br>
- ( name | subdomain | wildcard | self ) <VAR
+ ( name | subdomain | wildcard | self ) <TT
CLASS="REPLACEABLE"
->string</VAR
+><I
+>string</I
+></TT
><br>
- <VAR
+ <TT
CLASS="REPLACEABLE"
->rrtypelist</VAR
+><I
+>rrtypelist</I
+></TT
>; ...<br>
};<br>
<br>
- notify <VAR
+ notify <TT
CLASS="REPLACEABLE"
->notifytype</VAR
+><I
+>notifytype</I
+></TT
>;<br>
- notify-source ( <VAR
+ notify-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-source-v6 ( <VAR
+ notify-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * ) [<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- notify-delay <VAR
+ notify-delay <TT
CLASS="REPLACEABLE"
->seconds</VAR
+><I
+>seconds</I
+></TT
>;<br>
also-notify [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> )<br>
[<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ... };<br>
- allow-notify { <VAR
+ allow-notify { <TT
CLASS="REPLACEABLE"
->address_match_element</VAR
+><I
+>address_match_element</I
+></TT
>; ... };<br>
<br>
forward ( first | only );<br>
forwarders [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>] {<br>
- ( <VAR
+ ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
-> | <VAR
+><I
+>ipv4_address</I
+></TT
+> | <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> ) [<SPAN
CLASS="OPTIONAL"
-> port <VAR
+> port <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> </SPAN
>]; ...<br>
};<br>
<br>
- max-journal-size <VAR
+ max-journal-size <TT
CLASS="REPLACEABLE"
->size_no_default</VAR
+><I
+>size_no_default</I
+></TT
>;<br>
- max-transfer-time-in <VAR
+ max-transfer-time-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-time-out <VAR
+ max-transfer-time-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-in <VAR
+ max-transfer-idle-in <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-transfer-idle-out <VAR
+ max-transfer-idle-out <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-retry-time <VAR
+ max-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-retry-time <VAR
+ min-retry-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- max-refresh-time <VAR
+ max-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- min-refresh-time <VAR
+ min-refresh-time <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
- multi-master <VAR
+ multi-master <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- sig-validity-interval <VAR
+ sig-validity-interval <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
>;<br>
<br>
- transfer-source ( <VAR
+ transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- transfer-source-v6 ( <VAR
+ transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
<br>
- alt-transfer-source ( <VAR
+ alt-transfer-source ( <TT
CLASS="REPLACEABLE"
->ipv4_address</VAR
+><I
+>ipv4_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- alt-transfer-source-v6 ( <VAR
+ alt-transfer-source-v6 ( <TT
CLASS="REPLACEABLE"
->ipv6_address</VAR
+><I
+>ipv6_address</I
+></TT
> | * )<br>
[<SPAN
CLASS="OPTIONAL"
-> port ( <VAR
+> port ( <TT
CLASS="REPLACEABLE"
->integer</VAR
+><I
+>integer</I
+></TT
> | * ) </SPAN
>];<br>
- use-alt-transfer-source <VAR
+ use-alt-transfer-source <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
<br>
- zone-statistics <VAR
+ zone-statistics <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>;<br>
- key-directory <VAR
+ key-directory <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>;<br>
<br>
- ixfr-base <VAR
+ ixfr-base <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>; // obsolete<br>
- ixfr-tmp-file <VAR
+ ixfr-tmp-file <TT
CLASS="REPLACEABLE"
->quoted_string</VAR
+><I
+>quoted_string</I
+></TT
>; // obsolete<br>
- maintain-ixfr-base <VAR
+ maintain-ixfr-base <TT
CLASS="REPLACEABLE"
->boolean</VAR
+><I
+>boolean</I
+></TT
>; // obsolete<br>
- max-ixfr-log-size <VAR
+ max-ixfr-log-size <TT
CLASS="REPLACEABLE"
->size</VAR
+><I
+>size</I
+></TT
>; // obsolete<br>
- pubkey <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->integer</VAR
-> <VAR
-CLASS="REPLACEABLE"
->quoted_string</VAR
+ pubkey <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>integer</I
+></TT
+> <TT
+CLASS="REPLACEABLE"
+><I
+>quoted_string</I
+></TT
>; // obsolete<br>
};</P
></DIV
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named.html,v 1.10 2004/08/23 00:05:45 marka Exp $ -->
+<!-- $Id: named.html,v 1.11 2005/04/03 03:31:33 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>named</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>named</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-4</VAR
->] [<VAR
+>-4</CODE
+>] [<CODE
CLASS="OPTION"
->-6</VAR
->] [<VAR
+>-6</CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->config-file</VAR
-></VAR
->] [<VAR
+><I
+>config-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->debug-level</VAR
-></VAR
->] [<VAR
+><I
+>debug-level</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-f</VAR
->] [<VAR
+>-f</CODE
+>] [<CODE
CLASS="OPTION"
->-g</VAR
->] [<VAR
+>-g</CODE
+>] [<CODE
CLASS="OPTION"
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->#cpus</VAR
-></VAR
->] [<VAR
+><I
+>#cpus</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
-></VAR
->] [<VAR
+><I
+>port</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s</VAR
->] [<VAR
+>-s</CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
-></VAR
->] [<VAR
+><I
+>directory</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
-></VAR
->] [<VAR
+><I
+>user</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-v</VAR
->] [<VAR
+>-v</CODE
+>] [<CODE
CLASS="OPTION"
->-x <VAR
+>-x <TT
CLASS="REPLACEABLE"
->cache-file</VAR
-></VAR
+><I
+>cache-file</I
+></TT
+></CODE
>]</P
></DIV
><DIV
><DD
><P
> Use IPv4 only even if the host machine is capable of IPv6.
- <VAR
+ <CODE
CLASS="OPTION"
->-4</VAR
-> and <VAR
+>-4</CODE
+> and <CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
> are mutually
exclusive.
</P
><DD
><P
> Use IPv6 only even if the host machine is capable of IPv4.
- <VAR
+ <CODE
CLASS="OPTION"
->-4</VAR
-> and <VAR
+>-4</CODE
+> and <CODE
CLASS="OPTION"
->-6</VAR
+>-6</CODE
> are mutually
exclusive.
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
></DT
><DD
><P
-> Use <VAR
+> Use <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
> as the
configuration file instead of the default,
<TT
ensure that reloading the configuration file continues
to work after the server has changed its working
directory due to to a possible
- <VAR
+ <CODE
CLASS="OPTION"
->directory</VAR
+>directory</CODE
> option in the configuration
- file, <VAR
+ file, <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
> should be
an absolute pathname.
</P
></DD
><DT
->-d <VAR
+>-d <TT
CLASS="REPLACEABLE"
->debug-level</VAR
+><I
+>debug-level</I
+></TT
></DT
><DD
><P
-> Set the daemon's debug level to <VAR
+> Set the daemon's debug level to <TT
CLASS="REPLACEABLE"
->debug-level</VAR
+><I
+>debug-level</I
+></TT
>.
Debugging traces from <B
CLASS="COMMAND"
</P
></DD
><DT
->-n <VAR
+>-n <TT
CLASS="REPLACEABLE"
->#cpus</VAR
+><I
+>#cpus</I
+></TT
></DT
><DD
><P
-> Create <VAR
+> Create <TT
CLASS="REPLACEABLE"
->#cpus</VAR
+><I
+>#cpus</I
+></TT
> worker threads
to take advantage of multiple CPUs. If not specified,
<B
</P
></DD
><DT
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
></DT
><DD
><P
-> Listen for queries on port <VAR
+> Listen for queries on port <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
>. If not
specified, the default is port 53.
</P
></DIV
></DD
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
></DT
><DD
><P
> <CODE
CLASS="FUNCTION"
>chroot()</CODE
-> to <VAR
+> to <TT
CLASS="REPLACEABLE"
->directory</VAR
+><I
+>directory</I
+></TT
> after
processing the command line arguments, but before
reading the configuration file.
ALIGN="LEFT"
><P
> This option should be used in conjunction with the
- <VAR
+ <CODE
CLASS="OPTION"
->-u</VAR
+>-u</CODE
> option, as chrooting a process
running as root doesn't enhance security on most
systems; the way <CODE
></DIV
></DD
><DT
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
+><I
+>user</I
+></TT
></DT
><DD
><P
> <CODE
CLASS="FUNCTION"
>setuid()</CODE
-> to <VAR
+> to <TT
CLASS="REPLACEABLE"
->user</VAR
+><I
+>user</I
+></TT
> after completing
privileged operations, such as creating sockets that
listen on privileged ports.
>bind()</CODE
> to a
privileged port and set process resource limits.
- Unfortunately, this means that the <VAR
+ Unfortunately, this means that the <CODE
CLASS="OPTION"
->-u</VAR
+>-u</CODE
>
option only works when <B
CLASS="COMMAND"
</P
></DD
><DT
->-x <VAR
+>-x <TT
CLASS="REPLACEABLE"
->cache-file</VAR
+><I
+>cache-file</I
+></TT
></DT
><DD
><P
-> Load data from <VAR
+> Load data from <TT
CLASS="REPLACEABLE"
->cache-file</VAR
+><I
+>cache-file</I
+></TT
> into the
cache of the default view.
</P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: nsupdate.html,v 1.17 2004/08/23 00:05:45 marka Exp $ -->
+<!-- $Id: nsupdate.html,v 1.18 2005/04/03 03:31:33 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>nsupdate</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>nsupdate</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-d</VAR
->] [<VAR
+>-d</CODE
+>] [<CODE
CLASS="OPTION"
->-y <VAR
+>-y <TT
CLASS="REPLACEABLE"
->keyname:secret</VAR
-></VAR
-> | <VAR
+><I
+>keyname:secret</I
+></TT
+></CODE
+> | <CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->keyfile</VAR
-></VAR
->] [<VAR
+><I
+>keyfile</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->timeout</VAR
-></VAR
->] [<VAR
+><I
+>timeout</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->udptimeout</VAR
-></VAR
->] [<VAR
+><I
+>udptimeout</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->udpretries</VAR
-></VAR
->] [<VAR
+><I
+>udpretries</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
>] [filename]</P
></DIV
><DIV
This is identified by the MNAME field of the zone's SOA record.</P
><P
>The
-<VAR
+<CODE
CLASS="OPTION"
->-d</VAR
+>-d</CODE
>
option makes
<B
>nsupdate</B
>
uses the
-<VAR
+<CODE
CLASS="OPTION"
->-y</VAR
+>-y</CODE
>
or
-<VAR
+<CODE
CLASS="OPTION"
->-k</VAR
+>-k</CODE
>
option (with an HMAC-MD5 key) to provide the shared secret needed to generate
a TSIG record for authenticating Dynamic DNS update requests.
These options are mutually exclusive.
With the
-<VAR
+<CODE
CLASS="OPTION"
->-k</VAR
+>-k</CODE
>
option,
<B
>nsupdate</B
>
reads the shared secret from the file
-<VAR
+<CODE
CLASS="PARAMETER"
->keyfile</VAR
+>keyfile</CODE
>,
whose name is of the form
<TT
>K{name}.+157.+{random}.key</TT
>
must also be present. When the
-<VAR
+<CODE
CLASS="OPTION"
->-y</VAR
+>-y</CODE
>
option is used, a signature is generated from
-<VAR
+<CODE
CLASS="PARAMETER"
->keyname:secret.</VAR
+>keyname:secret.</CODE
>
-<VAR
+<CODE
CLASS="PARAMETER"
->keyname</VAR
+>keyname</CODE
>
is the name of the key,
and
-<VAR
+<CODE
CLASS="PARAMETER"
->secret</VAR
+>secret</CODE
>
is the base64 encoded shared secret.
Use of the
-<VAR
+<CODE
CLASS="OPTION"
->-y</VAR
+>-y</CODE
>
option is discouraged because the shared secret is supplied as a command
line argument in clear text.
>
or in a history file maintained by the user's shell.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-k</VAR
+>-k</CODE
> may also be used to specify a SIG(0) key used
to authenticate Dynamic DNS update requests. In this case, the key
specified is not an HMAC-MD5 key.</P
uses UDP to send update requests to the name server unless they are too
large to fit in a UDP request in which case TCP will be used.
The
-<VAR
+<CODE
CLASS="OPTION"
->-v</VAR
+>-v</CODE
>
option makes
<B
use a TCP connection.
This may be preferable when a batch of update requests is made.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-t</VAR
+>-t</CODE
> option sets the maximum time a update request can
take before it is aborted. The default is 300 seconds. Zero can be used
to disable the timeout.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-u</VAR
+>-u</CODE
> option sets the UDP retry interval. The default is
3 seconds. If zero the interval will be computed from the timeout interval
and number of UDP retries.</P
><P
->The <VAR
+>The <CODE
CLASS="OPTION"
->-r</VAR
+>-r</CODE
> option sets the number of UDP retries. The default is
3. If zero only one update request will be made.</P
></DIV
>nsupdate</B
>
reads input from
-<VAR
+<CODE
CLASS="PARAMETER"
->filename</VAR
+>filename</CODE
>
or standard input.
Each command is supplied on exactly one line of input.
><DD
><P
>Sends all dynamic update requests to the name server
-<VAR
+<CODE
CLASS="PARAMETER"
->servername</VAR
+>servername</CODE
>.
When no server statement is provided,
<B
will send updates to the master server of the correct zone.
The MNAME field of that zone's SOA record will identify the master
server for that zone.
-<VAR
+<CODE
CLASS="PARAMETER"
->port</VAR
+>port</CODE
>
is the port number on
-<VAR
+<CODE
CLASS="PARAMETER"
->servername</VAR
+>servername</CODE
>
where the dynamic update requests get sent.
If no port number is specified, the default DNS port number of 53 is
><DD
><P
>Sends all dynamic update requests using the local
-<VAR
+<CODE
CLASS="PARAMETER"
->address</VAR
+>address</CODE
>.
When no local statement is provided,
>nsupdate</B
>
will send updates using an address and port chosen by the system.
-<VAR
+<CODE
CLASS="PARAMETER"
->port</VAR
+>port</CODE
>
can additionally be used to make requests come from a specific port.
If no port number is specified, the system will assign one. </P
><DD
><P
>Specifies that all updates are to be made to the zone
-<VAR
+<CODE
CLASS="PARAMETER"
->zonename</VAR
+>zonename</CODE
>.
If no
-<VAR
+<CODE
CLASS="PARAMETER"
->zone</VAR
+>zone</CODE
>
statement is provided,
<B
><DD
><P
>Specify the default class.
-If no <VAR
+If no <CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
> is specified the default class is
-<VAR
+<CODE
CLASS="PARAMETER"
->IN</VAR
+>IN</CODE
>.</P
></DD
><DT
><DD
><P
>Specifies that all updates are to be TSIG signed using the
-<VAR
+<CODE
CLASS="PARAMETER"
->keyname</VAR
-> <VAR
+>keyname</CODE
+> <CODE
CLASS="PARAMETER"
->keysecret</VAR
+>keysecret</CODE
> pair.
The <B
CLASS="COMMAND"
>key</B
> command
overrides any key specified on the command line via
-<VAR
+<CODE
CLASS="OPTION"
->-y</VAR
-> or <VAR
+>-y</CODE
+> or <CODE
CLASS="OPTION"
->-k</VAR
+>-k</CODE
>.</P
></DD
><DT
><DD
><P
>Requires that no resource record of any type exists with name
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>.</P
></DD
><DT
><DD
><P
>Requires that
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>
exists (has as at least one resource record, of any type).</P
></DD
><DD
><P
>Requires that no resource record exists of the specified
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>.
If
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
is omitted, IN (internet) is assumed.</P
></DD
><DD
><P
>This requires that a resource record of the specified
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>
must exist.
If
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
is omitted, IN (internet) is assumed.</P
></DD
><DD
><P
>The
-<VAR
+<CODE
CLASS="PARAMETER"
->data</VAR
+>data</CODE
>
from each set of prerequisites of this form
sharing a common
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>,
and
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>
are combined to form a set of RRs. This set of RRs must
exactly match the set of RRs existing in the zone at the
given
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>,
and
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>.
The
-<VAR
+<CODE
CLASS="PARAMETER"
->data</VAR
+>data</CODE
>
are written in the standard text representation of the resource record's
RDATA.</P
><DD
><P
>Deletes any resource records named
-<VAR
+<CODE
CLASS="PARAMETER"
->domain-name</VAR
+>domain-name</CODE
>.
If
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->data</VAR
+>data</CODE
>
is provided, only matching resource records will be removed.
The internet class is assumed if
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
is not supplied. The
-<VAR
+<CODE
CLASS="PARAMETER"
->ttl</VAR
+>ttl</CODE
>
is ignored, and is only allowed for compatibility.</P
></DD
><DD
><P
>Adds a new resource record with the specified
-<VAR
+<CODE
CLASS="PARAMETER"
->ttl</VAR
+>ttl</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->data</VAR
+>data</CODE
>.</P
></DD
><DT
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc-confgen.html,v 1.12 2004/08/23 00:05:45 marka Exp $ -->
+<!-- $Id: rndc-confgen.html,v 1.13 2005/04/03 03:31:34 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>rndc-confgen</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>rndc-confgen</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-a</VAR
->] [<VAR
+>-a</CODE
+>] [<CODE
CLASS="OPTION"
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->keysize</VAR
-></VAR
->] [<VAR
+><I
+>keysize</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->keyfile</VAR
-></VAR
->] [<VAR
+><I
+>keyfile</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-h</VAR
->] [<VAR
+>-h</CODE
+>] [<CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->keyname</VAR
-></VAR
->] [<VAR
+><I
+>keyname</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
-></VAR
->] [<VAR
+><I
+>port</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomfile</VAR
-></VAR
->] [<VAR
+><I
+>randomfile</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->address</VAR
-></VAR
->] [<VAR
+><I
+>address</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->chrootdir</VAR
-></VAR
->] [<VAR
+><I
+>chrootdir</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
-></VAR
+><I
+>user</I
+></TT
+></CODE
>]</P
></DIV
><DIV
CLASS="FILENAME"
>/etc</TT
> (or whatever
- <VAR
+ <CODE
CLASS="VARNAME"
->sysconfdir</VAR
+>sysconfdir</CODE
>
was specified as when <ACRONYM
CLASS="ACRONYM"
</P
></DD
><DT
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->keysize</VAR
+><I
+>keysize</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->keyfile</VAR
+><I
+>keyfile</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->keyname</VAR
+><I
+>keyname</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-r <VAR
+>-r <TT
CLASS="REPLACEABLE"
->randomfile</VAR
+><I
+>randomfile</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->address</VAR
+><I
+>address</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-t <VAR
+>-t <TT
CLASS="REPLACEABLE"
->chrootdir</VAR
+><I
+>chrootdir</I
+></TT
></DT
><DD
><P
</P
></DD
><DT
->-u <VAR
+>-u <TT
CLASS="REPLACEABLE"
->user</VAR
+><I
+>user</I
+></TT
></DT
><DD
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc.conf.html,v 1.12 2004/08/23 00:05:45 marka Exp $ -->
+<!-- $Id: rndc.conf.html,v 1.13 2005/04/03 03:31:34 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>rndc.conf</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
and a key statement.
</P
><P
-> The <VAR
+> The <CODE
CLASS="OPTION"
->options</VAR
+>options</CODE
> statement contains five clauses.
- The <VAR
+ The <CODE
CLASS="OPTION"
->default-server</VAR
+>default-server</CODE
> clause is followed by the
name or address of a name server. This host will be used when
no name server is given as an argument to
<B
CLASS="COMMAND"
>rndc</B
->. The <VAR
+>. The <CODE
CLASS="OPTION"
->default-key</VAR
+>default-key</CODE
>
clause is followed by the name of a key which is identified by
- a <VAR
+ a <CODE
CLASS="OPTION"
->key</VAR
+>key</CODE
> statement. If no
- <VAR
+ <CODE
CLASS="OPTION"
->keyid</VAR
+>keyid</CODE
> is provided on the rndc command line,
- and no <VAR
+ and no <CODE
CLASS="OPTION"
->key</VAR
+>key</CODE
> clause is found in a matching
- <VAR
+ <CODE
CLASS="OPTION"
->server</VAR
+>server</CODE
> statement, this default key will be
used to authenticate the server's commands and responses. The
- <VAR
+ <CODE
CLASS="OPTION"
->default-port</VAR
+>default-port</CODE
> clause is followed by the port
to connect to on the remote name server. If no
- <VAR
+ <CODE
CLASS="OPTION"
->port</VAR
+>port</CODE
> option is provided on the rndc command
- line, and no <VAR
+ line, and no <CODE
CLASS="OPTION"
->port</VAR
+>port</CODE
> clause is found in a
- matching <VAR
+ matching <CODE
CLASS="OPTION"
->server</VAR
+>server</CODE
> statement, this default port
will be used to connect.
- The <VAR
+ The <CODE
CLASS="OPTION"
->default-source-address</VAR
+>default-source-address</CODE
> and
- <VAR
+ <CODE
CLASS="OPTION"
->default-source-address-v6</VAR
+>default-source-address-v6</CODE
> clauses which
can be used to set the IPv4 and IPv6 source addresses
respectively.
</P
><P
-> After the <VAR
+> After the <CODE
CLASS="OPTION"
->server</VAR
+>server</CODE
> keyword, the server
statement includes a string which is the hostname or address
for a name server. The statement has three possible clauses:
- <VAR
+ <CODE
CLASS="OPTION"
->key</VAR
->, <VAR
+>key</CODE
+>, <CODE
CLASS="OPTION"
->port</VAR
+>port</CODE
> and
- <VAR
+ <CODE
CLASS="OPTION"
->addresses</VAR
+>addresses</CODE
>. The key name must match the
name of a key statement in the file. The port number
- specifies the port to connect to. If an <VAR
+ specifies the port to connect to. If an <CODE
CLASS="OPTION"
->addresses</VAR
+>addresses</CODE
>
clause is supplied these addresses will be used instead of
the server name. Each address can take a optional port.
- If an <VAR
+ If an <CODE
CLASS="OPTION"
->source-address</VAR
-> or <VAR
+>source-address</CODE
+> or <CODE
CLASS="OPTION"
->source-address-v6</VAR
+>source-address-v6</CODE
>
of supplied then these will be used to specify the IPv4 and IPv6
source addresses respectively.
</P
><P
-> The <VAR
+> The <CODE
CLASS="OPTION"
->key</VAR
+>key</CODE
> statement begins with an identifying
string, the name of the key. The statement has two clauses.
- <VAR
+ <CODE
CLASS="OPTION"
->algorithm</VAR
+>algorithm</CODE
> identifies the encryption algorithm
for <B
CLASS="COMMAND"
>rndc.conf</TT
> file, including the
randomly generated key, will be written to the standard
- output. Commented out <VAR
+ output. Commented out <CODE
CLASS="OPTION"
->key</VAR
+>key</CODE
> and
- <VAR
+ <CODE
CLASS="OPTION"
->controls</VAR
+>controls</CODE
> statements for
<TT
CLASS="FILENAME"
CLASS="FILENAME"
>named.conf</TT
>.
- See the sections on the <VAR
+ See the sections on the <CODE
CLASS="OPTION"
->controls</VAR
+>controls</CODE
> statement in the
BIND 9 Administrator Reference Manual for details.
</P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc.html,v 1.13 2004/08/23 00:05:45 marka Exp $ -->
+<!-- $Id: rndc.html,v 1.14 2005/04/03 03:31:34 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>rndc</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
><B
CLASS="COMMAND"
>rndc</B
-> [<VAR
+> [<CODE
CLASS="OPTION"
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->source-address</VAR
-></VAR
->] [<VAR
+><I
+>source-address</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->config-file</VAR
-></VAR
->] [<VAR
+><I
+>config-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->key-file</VAR
-></VAR
->] [<VAR
+><I
+>key-file</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->server</VAR
-></VAR
->] [<VAR
+><I
+>server</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
-></VAR
->] [<VAR
+><I
+>port</I
+></TT
+></CODE
+>] [<CODE
CLASS="OPTION"
->-V</VAR
->] [<VAR
+>-V</CODE
+>] [<CODE
CLASS="OPTION"
->-y <VAR
+>-y <TT
CLASS="REPLACEABLE"
->key_id</VAR
-></VAR
+><I
+>key_id</I
+></TT
+></CODE
>] {command}</P
></DIV
><DIV
CLASS="VARIABLELIST"
><DL
><DT
->-b <VAR
+>-b <TT
CLASS="REPLACEABLE"
->source-address</VAR
+><I
+>source-address</I
+></TT
></DT
><DD
><P
-> Use <VAR
+> Use <TT
CLASS="REPLACEABLE"
->source-address</VAR
+><I
+>source-address</I
+></TT
>
as the source address for the connection to the server.
Multiple instances are permitted to allow setting of both
</P
></DD
><DT
->-c <VAR
+>-c <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
></DT
><DD
><P
-> Use <VAR
+> Use <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
>
as the configuration file instead of the default,
<TT
</P
></DD
><DT
->-k <VAR
+>-k <TT
CLASS="REPLACEABLE"
->key-file</VAR
+><I
+>key-file</I
+></TT
></DT
><DD
><P
-> Use <VAR
+> Use <TT
CLASS="REPLACEABLE"
->key-file</VAR
+><I
+>key-file</I
+></TT
>
as the key file instead of the default,
<TT
CLASS="FILENAME"
>/etc/rndc.key</TT
> will be used to authenticate
- commands sent to the server if the <VAR
+ commands sent to the server if the <TT
CLASS="REPLACEABLE"
->config-file</VAR
+><I
+>config-file</I
+></TT
>
does not exist.
</P
></DD
><DT
->-s <VAR
+>-s <TT
CLASS="REPLACEABLE"
->server</VAR
+><I
+>server</I
+></TT
></DT
><DD
><P
-> <VAR
+> <TT
CLASS="REPLACEABLE"
->server</VAR
+><I
+>server</I
+></TT
> is
the name or address of the server which matches a
server statement in the configuration file for
</P
></DD
><DT
->-p <VAR
+>-p <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
></DT
><DD
><P
> Send commands to TCP port
- <VAR
+ <TT
CLASS="REPLACEABLE"
->port</VAR
+><I
+>port</I
+></TT
> instead
of BIND 9's default control channel port, 953.
</P
</P
></DD
><DT
->-y <VAR
+>-y <TT
CLASS="REPLACEABLE"
->keyid</VAR
+><I
+>keyid</I
+></TT
></DT
><DD
><P
-> Use the key <VAR
+> Use the key <TT
CLASS="REPLACEABLE"
->keyid</VAR
+><I
+>keyid</I
+></TT
>
from the configuration file.
- <VAR
+ <TT
CLASS="REPLACEABLE"
->keyid</VAR
+><I
+>keyid</I
+></TT
> must be
known by named with the same algorithm and secret string
in order for control message validation to succeed.
- If no <VAR
+ If no <TT
CLASS="REPLACEABLE"
->keyid</VAR
+><I
+>keyid</I
+></TT
>
is specified, <B
CLASS="COMMAND"
</P
><P
> There is currently no way to provide the shared secret for a
- <VAR
+ <CODE
CLASS="OPTION"
->key_id</VAR
+>key_id</CODE
> without using the configuration file.
</P
><P
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Introduction </TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->Fixed Width</VAR
+>Fixed Width</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->Fixed Width</VAR
+>Fixed Width</CODE
></P
></TD
></TR
>Example, Inc.</I
></SPAN
> could be
-<VAR
+<TT
CLASS="literal"
->mail.example.com</VAR
+>mail.example.com</TT
>,
-where <VAR
+where <TT
CLASS="literal"
->com</VAR
+>com</TT
> is the
top level domain to which
-<VAR
+<TT
CLASS="literal"
->ourhost.example.com</VAR
+>ourhost.example.com</TT
> belongs,
-<VAR
+<TT
CLASS="literal"
->example</VAR
+>example</TT
> is
-a subdomain of <VAR
+a subdomain of <TT
CLASS="literal"
->com</VAR
+>com</TT
>, and
-<VAR
+<TT
CLASS="literal"
->ourhost</VAR
+>ourhost</TT
> is the
name of the host.</P
><P
parent zone, which should be matched by equivalent NS records at
the root of the delegated zone.</P
><P
->For instance, consider the <VAR
+>For instance, consider the <TT
CLASS="literal"
->example.com</VAR
+>example.com</TT
>
domain which includes names
-such as <VAR
+such as <TT
CLASS="literal"
->host.aaa.example.com</VAR
+>host.aaa.example.com</TT
> and
-<VAR
+<TT
CLASS="literal"
->host.bbb.example.com</VAR
+>host.bbb.example.com</TT
> even though
-the <VAR
+the <TT
CLASS="literal"
->example.com</VAR
+>example.com</TT
> zone includes
-only delegations for the <VAR
+only delegations for the <TT
CLASS="literal"
->aaa.example.com</VAR
+>aaa.example.com</TT
> and
-<VAR
+<TT
CLASS="literal"
->bbb.example.com</VAR
+>bbb.example.com</TT
> zones. A zone can map
exactly to a single domain, but could also include only part of a
domain, the rest of which could be delegated to other
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>BIND Resource Requirements</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Name Server Configuration</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->www</VAR
+>www</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->600</VAR
+>600</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.1</VAR
+>10.0.0.1</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->600</VAR
+>600</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.2</VAR
+>10.0.0.2</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->600</VAR
+>600</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.3</VAR
+>10.0.0.3</TT
></P
></TD
></TR
><B
CLASS="command"
>dig</B
-> [@<VAR
+> [@<TT
CLASS="replaceable"
->server</VAR
->] <VAR
+><I
+>server</I
+></TT
+>] <TT
CLASS="replaceable"
->domain</VAR
-> [<VAR
+><I
+>domain</I
+></TT
+> [<TT
CLASS="replaceable"
->query-type</VAR
->] [<VAR
+><I
+>query-type</I
+></TT
+>] [<TT
CLASS="replaceable"
->query-class</VAR
->] [+<VAR
+><I
+>query-class</I
+></TT
+>] [+<TT
CLASS="replaceable"
->query-option</VAR
->] [-<VAR
+><I
+>query-option</I
+></TT
+>] [-<TT
CLASS="replaceable"
->dig-option</VAR
->] [%<VAR
+><I
+>dig-option</I
+></TT
+>] [%<TT
CLASS="replaceable"
->comment</VAR
+><I
+>comment</I
+></TT
>]</P
><P
>The usual simple use of dig will take the form</P
><B
CLASS="command"
>host</B
-> [-aCdlrTwv] [-c <VAR
+> [-aCdlrTwv] [-c <TT
CLASS="replaceable"
->class</VAR
->] [-N <VAR
+><I
+>class</I
+></TT
+>] [-N <TT
CLASS="replaceable"
->ndots</VAR
->] [-t <VAR
+><I
+>ndots</I
+></TT
+>] [-t <TT
CLASS="replaceable"
->type</VAR
->] [-W <VAR
+><I
+>type</I
+></TT
+>] [-W <TT
CLASS="replaceable"
->timeout</VAR
->] [-R <VAR
+><I
+>timeout</I
+></TT
+>] [-R <TT
CLASS="replaceable"
->retries</VAR
->] <VAR
+><I
+>retries</I
+></TT
+>] <TT
CLASS="replaceable"
->hostname</VAR
-> [<VAR
+><I
+>hostname</I
+></TT
+> [<TT
CLASS="replaceable"
->server</VAR
+><I
+>server</I
+></TT
>]</P
><P
>For more information and a list of available commands and
><B
CLASS="command"
>nslookup</B
-> [-option...] [<VAR
+> [-option...] [<TT
CLASS="replaceable"
->host-to-find</VAR
+><I
+>host-to-find</I
+></TT
> | - [server]]</P
><P
>Interactive mode is entered when no arguments are given (the
><B
CLASS="command"
>named-checkconf</B
-> [-t <VAR
+> [-t <TT
CLASS="replaceable"
->directory</VAR
->] [<VAR
+><I
+>directory</I
+></TT
+>] [<TT
CLASS="replaceable"
->filename</VAR
+><I
+>filename</I
+></TT
>]</P
></DD
><DT
><B
CLASS="command"
>named-checkzone</B
-> [-djqvD] [-c <VAR
+> [-djqvD] [-c <TT
CLASS="replaceable"
->class</VAR
->] [-o <VAR
+><I
+>class</I
+></TT
+>] [-o <TT
CLASS="replaceable"
->output</VAR
->] [-t <VAR
+><I
+>output</I
+></TT
+>] [-t <TT
CLASS="replaceable"
->directory</VAR
->] [-w <VAR
+><I
+>directory</I
+></TT
+>] [-w <TT
CLASS="replaceable"
->directory</VAR
->] [-k <VAR
+><I
+>directory</I
+></TT
+>] [-k <TT
CLASS="replaceable"
->(ignore|warn|fail)</VAR
->] [-n <VAR
+><I
+>(ignore|warn|fail)</I
+></TT
+>] [-n <TT
CLASS="replaceable"
->(ignore|warn|fail)</VAR
->] <VAR
+><I
+>(ignore|warn|fail)</I
+></TT
+>] <TT
CLASS="replaceable"
->zone</VAR
-> [<VAR
+><I
+>zone</I
+></TT
+> [<TT
CLASS="replaceable"
->filename</VAR
+><I
+>filename</I
+></TT
>]</P
></DD
><DT
><B
CLASS="command"
>rndc</B
-> [-c <VAR
+> [-c <TT
CLASS="replaceable"
->config</VAR
->] [-s <VAR
+><I
+>config</I
+></TT
+>] [-s <TT
CLASS="replaceable"
->server</VAR
->] [-p <VAR
+><I
+>server</I
+></TT
+>] [-p <TT
CLASS="replaceable"
->port</VAR
->] [-y <VAR
+><I
+>port</I
+></TT
+>] [-y <TT
CLASS="replaceable"
->key</VAR
->] <VAR
+><I
+>key</I
+></TT
+>] <TT
CLASS="replaceable"
->command</VAR
-> [<VAR
+><I
+>command</I
+></TT
+> [<TT
CLASS="replaceable"
->command</VAR
+><I
+>command</I
+></TT
>...]</P
><P
><B
><DT
><KBD
CLASS="userinput"
->reload <VAR
+>reload <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->view</VAR
+><I
+>view</I
+></TT
></SPAN
>]</SPAN
>]</KBD
><DT
><KBD
CLASS="userinput"
->refresh <VAR
+>refresh <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->view</VAR
+><I
+>view</I
+></TT
></SPAN
>]</SPAN
>]</KBD
><DT
><KBD
CLASS="userinput"
->retransfer <VAR
+>retransfer <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->view</VAR
+><I
+>view</I
+></TT
></SPAN
>]</SPAN
>]</KBD
><DT
><KBD
CLASS="userinput"
->freeze <VAR
+>freeze <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->view</VAR
+><I
+>view</I
+></TT
></SPAN
>]</SPAN
>]</KBD
><DT
><KBD
CLASS="userinput"
->unfreeze <VAR
+>unfreeze <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->view</VAR
+><I
+>view</I
+></TT
></SPAN
>]</SPAN
>]</KBD
><DT
><KBD
CLASS="userinput"
->trace <VAR
+>trace <TT
CLASS="replaceable"
->level</VAR
+><I
+>level</I
+></TT
></KBD
></DT
><DD
CLASS="filename"
>/etc/rndc.conf</TT
>, but an alternate
-location can be specified with the <VAR
+location can be specified with the <CODE
CLASS="option"
->-c</VAR
+>-c</CODE
>
option. If the configuration file is not found,
<B
CLASS="filename"
>/etc/rndc.key</TT
> (or whatever
-<VAR
+<CODE
CLASS="varname"
->sysconfdir</VAR
+>sysconfdir</CODE
> was defined when
the <ACRONYM
CLASS="acronym"
>default-server</B
> takes a
host name or address argument and represents the server that will
-be contacted if no <VAR
+be contacted if no <CODE
CLASS="option"
->-s</VAR
+>-s</CODE
>
option is provided on the command line.
<B
</PRE
><P
>and it had an identical key statement for
-<VAR
+<TT
CLASS="literal"
->rndc_key</VAR
+>rndc_key</TT
>.</P
><P
>Running the <B
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Advanced DNS Features</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
to the zone using
<B
CLASS="command"
->rndc freeze <VAR
+>rndc freeze <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
></B
>.
This will also remove the zone's <TT
and update the master file. Edit the zone file. Run
<B
CLASS="command"
->rndc unfreeze <VAR
+>rndc unfreeze <TT
CLASS="replaceable"
->zone</VAR
+><I
+>zone</I
+></TT
></B
>
to reload the changed zone and re-enable dynamic updates.</P
>Example, Inc.</I
></SPAN
>
-(<VAR
+(<TT
CLASS="literal"
->example.com</VAR
+>example.com</TT
>)
has several corporate sites that have an internal network with reserved
Internet Protocol (IP) space and an external demilitarized zone (DMZ),
>Here's an example of a wildcard MX record:</P
><PRE
CLASS="programlisting"
-><VAR
+><TT
CLASS="literal"
->* IN MX 10 external1.example.com.</VAR
+>* IN MX 10 external1.example.com.</TT
></PRE
><P
>Now that they accept mail on behalf of anything in the internal
><UL
><LI
><P
->Look up any hostnames in the <VAR
+>Look up any hostnames in the <TT
CLASS="literal"
->site1</VAR
+>site1</TT
> and
-<VAR
+<TT
CLASS="literal"
->site2.example.com</VAR
+>site2.example.com</TT
> zones.</P
></LI
><LI
><P
->Look up any hostnames in the <VAR
+>Look up any hostnames in the <TT
CLASS="literal"
->site1.internal</VAR
+>site1.internal</TT
> and
-<VAR
+<TT
CLASS="literal"
->site2.internal</VAR
+>site2.internal</TT
> domains.</P
></LI
><LI
><UL
><LI
><P
->Look up any hostnames in the <VAR
+>Look up any hostnames in the <TT
CLASS="literal"
->site1</VAR
+>site1</TT
> and
-<VAR
+<TT
CLASS="literal"
->site2.example.com</VAR
+>site2.example.com</TT
> zones.</P
></LI
><LI
><P
->Exchange mail with anyone in the <VAR
+>Exchange mail with anyone in the <TT
CLASS="literal"
->site1</VAR
+>site1</TT
> and
-<VAR
+<TT
CLASS="literal"
->site2.example.com</VAR
+>site2.example.com</TT
> zones.</P
></LI
></UL
>
acl internals { 172.16.72.0/24; 192.168.1.0/24; };
-acl externals { <VAR
+acl externals { <CODE
CLASS="varname"
->bastion-ips-go-here</VAR
+>bastion-ips-go-here</CODE
>; };
options {
...
forward only;
forwarders { // forward to external servers
- <VAR
+ <CODE
CLASS="varname"
->bastion-ips-go-here</VAR
+>bastion-ips-go-here</CODE
>;
};
allow-transfer { none; }; // sample allow-transfer (no one)
CLASS="command"
>nsupdate</B
>
- program supports TSIG via the <VAR
+ program supports TSIG via the <CODE
CLASS="option"
->-k</VAR
+>-k</CODE
> and
- <VAR
+ <CODE
CLASS="option"
->-y</VAR
+>-y</CODE
> command line options.</P
><DIV
CLASS="sect2"
>Khost1-host2.+157+00000.private</TT
>.
Nothing directly uses this file, but the base-64 encoded string
-following "<VAR
+following "<TT
CLASS="literal"
->Key:</VAR
+>Key:</TT
>"
can be extracted from the file and used as a shared secret:</P
><PRE
CLASS="programlisting"
>Key: La/E5CjG9O+os1jq0a2jdA==</PRE
><P
->The string "<VAR
+>The string "<TT
CLASS="literal"
->La/E5CjG9O+os1jq0a2jdA==</VAR
+>La/E5CjG9O+os1jq0a2jdA==</TT
>" can
be used as the shared secret.</P
></DIV
> 9 ships
with several tools
that are used in this process, which are explained in more detail
- below. In all cases, the <VAR
+ below. In all cases, the <CODE
CLASS="option"
->-h</VAR
+>-h</CODE
> option prints a
full list of parameters. Note that the DNSSEC tools require the
keyset files to be in the working directory or the
- directory specified by the <VAR
+ directory specified by the <CODE
CLASS="option"
->-h</VAR
+>-h</CODE
> option, and
that the tools shipped with BIND 9.2.x and earlier are not compatible
with the current ones.</P
the parent and/or child zone to transmit keys. A zone's security
status must be indicated by the parent zone for a DNSSEC capable
resolver to trust its data. This is done through the presense
- or absence of a <VAR
+ or absence of a <TT
CLASS="literal"
->DS</VAR
+>DS</TT
> record at the delegation
point.</P
><P
>keyset</TT
> files corresponding
to secure subzones should be present. The zone signer will
- generate <VAR
+ generate <TT
CLASS="literal"
->NSEC</VAR
-> and <VAR
+>NSEC</TT
+> and <TT
CLASS="literal"
->RRSIG</VAR
+>RRSIG</TT
>
- records for the zone, as well as <VAR
+ records for the zone, as well as <TT
CLASS="literal"
->DS</VAR
+>DS</TT
> for
- the child zones if <VAR
+ the child zones if <TT
CLASS="literal"
->'-d'</VAR
+>'-d'</TT
> is specified.
- If <VAR
+ If <TT
CLASS="literal"
->'-d'</VAR
+>'-d'</TT
> is not specified then DS RRsets for
the secure child zones need to be added manually.</P
><P
> will also produce a
keyset and dsset files and optionally a dlvset file. These
are used to provide the parent zone administators with the
- <VAR
+ <TT
CLASS="literal"
->DNSKEYs</VAR
-> (or their corresponding <VAR
+>DNSKEYs</TT
+> (or their corresponding <TT
CLASS="literal"
->DS</VAR
+>DS</TT
>
records) that are the secure entry point to the zone.</P
></DIV
><P
>It is recommended that IPv4-in-IPv6 mapped addresses not
be used. If a host has an IPv4 address, use an A record, not
- a AAAA, with <VAR
+ a AAAA, with <TT
CLASS="literal"
->::ffff:192.168.42.1</VAR
+>::ffff:192.168.42.1</TT
> as the
address.</P
></DIV
><P
>When looking up an address in nibble format, the address
components are simply reversed, just as in IPv4, and
- <VAR
+ <TT
CLASS="literal"
->ip6.arpa.</VAR
+>ip6.arpa.</TT
> is appended to the resulting name.
For example, the following would provide reverse name lookup for
a host with address
- <VAR
+ <TT
CLASS="literal"
->2001:db8::1</VAR
+>2001:db8::1</TT
>.</P
><PRE
CLASS="programlisting"
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>The BIND 9 Lightweight Resolver</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>BIND 9 Configuration Reference</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->acl_name</VAR
+>acl_name</CODE
></P
></TD
><TD
><P
->The name of an <VAR
+>The name of an <CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
> as
defined by the <B
CLASS="command"
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
></P
></TD
><TD
><P
->A list of one or more <VAR
+>A list of one or more <CODE
CLASS="varname"
->ip_addr</VAR
+>ip_addr</CODE
>,
-<VAR
+<CODE
CLASS="varname"
->ip_prefix</VAR
->, <VAR
+>ip_prefix</CODE
+>, <CODE
CLASS="varname"
->key_id</VAR
+>key_id</CODE
>,
-or <VAR
+or <CODE
CLASS="varname"
->acl_name</VAR
+>acl_name</CODE
> elements, see
<A
HREF="Bv9ARM.ch06.html#address_match_lists"
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->domain_name</VAR
+>domain_name</CODE
></P
></TD
><TD
><P
>A quoted string which will be used as
-a DNS name, for example "<VAR
+a DNS name, for example "<TT
CLASS="literal"
->my.test.domain</VAR
+>my.test.domain</TT
>".</P
></TD
></TR
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->dotted_decimal</VAR
+>dotted_decimal</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->ip4_addr</VAR
+>ip4_addr</CODE
></P
></TD
><TD
><P
>An IPv4 address with exactly four elements
-in <VAR
+in <CODE
CLASS="varname"
->dotted_decimal</VAR
+>dotted_decimal</CODE
> notation.</P
></TD
></TR
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->ip6_addr</VAR
+>ip6_addr</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->ip_addr</VAR
+>ip_addr</CODE
></P
></TD
><TD
><P
->An <VAR
+>An <CODE
CLASS="varname"
->ip4_addr</VAR
-> or <VAR
+>ip4_addr</CODE
+> or <CODE
CLASS="varname"
->ip6_addr</VAR
+>ip6_addr</CODE
>.</P
></TD
></TR
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->ip_port</VAR
+>ip_port</CODE
></P
></TD
><TD
><P
->An IP port <VAR
+>An IP port <CODE
CLASS="varname"
->number</VAR
+>number</CODE
>.
-<VAR
+<CODE
CLASS="varname"
->number</VAR
+>number</CODE
> is limited to 0 through 65535, with values
below 1024 typically restricted to use by processes running as root.
In some cases an asterisk (`*') character can be used as a placeholder to
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->ip_prefix</VAR
+>ip_prefix</CODE
></P
></TD
><TD
><P
->An IP network specified as an <VAR
+>An IP network specified as an <CODE
CLASS="varname"
->ip_addr</VAR
+>ip_addr</CODE
>,
followed by a slash (`/') and then the number of bits in the netmask.
-Trailing zeros in a <VAR
+Trailing zeros in a <CODE
CLASS="varname"
->ip_addr</VAR
+>ip_addr</CODE
> may omitted.
For example, <B
CLASS="command"
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->key_id</VAR
+>key_id</CODE
></P
></TD
><TD
><P
->A <VAR
+>A <CODE
CLASS="varname"
->domain_name</VAR
+>domain_name</CODE
> representing
the name of a shared key, to be used for transaction security.</P
></TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->key_list</VAR
+>key_list</CODE
></P
></TD
><TD
><P
->A list of one or more <VAR
+>A list of one or more <CODE
CLASS="varname"
->key_id</VAR
+>key_id</CODE
>s,
separated by semicolons and ending with a semicolon.</P
></TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->number</VAR
+>number</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->path_name</VAR
+>path_name</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->size_spec</VAR
+>size_spec</CODE
></P
></TD
><TD
>default</KBD
>.</P
><P
-> An <VAR
+> An <CODE
CLASS="varname"
->unlimited</VAR
-> <VAR
+>unlimited</CODE
+> <CODE
CLASS="varname"
->size_spec</VAR
+>size_spec</CODE
> requests unlimited
-use, or the maximum available amount. A <VAR
+use, or the maximum available amount. A <CODE
CLASS="varname"
->default size_spec</VAR
+>default size_spec</CODE
> uses
the limit that was in force when the server was started.</P
><P
->A <VAR
+>A <CODE
CLASS="varname"
->number</VAR
+>number</CODE
> can
optionally be followed by a scaling factor: <KBD
CLASS="userinput"
<P
>The value must be representable as a 64-bit unsigned integer
(0 to 18446744073709551615, inclusive).
-Using <VAR
+Using <CODE
CLASS="varname"
->unlimited</VAR
+>unlimited</CODE
> is the best way
to safely set a really large number.</P
></TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->yes_or_no</VAR
+>yes_or_no</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->dialup_option</VAR
+>dialup_option</CODE
></P
></TD
><TD
></H3
><PRE
CLASS="programlisting"
-><VAR
+><CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
> = address_match_list_element ;
[<SPAN
CLASS="optional"
> address_match_list_element; ... </SPAN
>]
-<VAR
+<CODE
CLASS="varname"
->address_match_list_element</VAR
+>address_match_list_element</CODE
> = [<SPAN
CLASS="optional"
> ! </SPAN
></P
><P
>Shell-style (or perl-style, if you prefer) comments start
-with the character <VAR
+with the character <TT
CLASS="literal"
->#</VAR
+>#</TT
> (number sign) and continue to the end of the
physical line, as in C++ comments.</P
><P
inet ( ip_addr | * ) [<SPAN
CLASS="optional"
> port ip_port </SPAN
->] allow { <VAR
+>] allow { <TT
CLASS="replaceable"
-> address_match_list </VAR
+><I
+> address_match_list </I
+></TT
> }
- keys { <VAR
+ keys { <TT
CLASS="replaceable"
-> key_list </VAR
+><I
+> key_list </I
+></TT
> };
[<SPAN
CLASS="optional"
CLASS="command"
>ip_addr</B
>
- of <VAR
+ of <TT
CLASS="literal"
->*</VAR
+>*</TT
> is interpreted as the IPv4 wildcard
address; connections will be accepted on any of the system's
IPv4 addresses. To listen on the IPv6 wildcard address,
use an <B
CLASS="command"
>ip_addr</B
-> of <VAR
+> of <TT
CLASS="literal"
->::</VAR
+>::</TT
>.
If you will only use <B
CLASS="command"
>rndc</B
> on the local host,
- using the loopback address (<VAR
+ using the loopback address (<TT
CLASS="literal"
->127.0.0.1</VAR
+>127.0.0.1</TT
>
- or <VAR
+ or <TT
CLASS="literal"
->::1</VAR
+>::1</TT
>) is recommended for maximum
security.
</P
><P
> If no port is specified, port 953
- is used. "<VAR
+ is used. "<TT
CLASS="literal"
->*</VAR
+>*</TT
>" cannot be used for
<B
CLASS="command"
<TT
CLASS="filename"
>/etc</TT
-> (or whatever <VAR
+> (or whatever <CODE
CLASS="varname"
->sysconfdir</VAR
+>sysconfdir</CODE
>
was specified as when <ACRONYM
CLASS="acronym"
></H2
><PRE
CLASS="programlisting"
->include <VAR
+>include <TT
CLASS="replaceable"
->filename</VAR
+><I
+>filename</I
+></TT
>;</PRE
></DIV
><DIV
></H2
><PRE
CLASS="programlisting"
->key <VAR
+>key <TT
CLASS="replaceable"
->key_id</VAR
+><I
+>key_id</I
+></TT
> {
- algorithm <VAR
+ algorithm <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
>;
- secret <VAR
+ secret <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
>;
};
</PRE
must be defined at the top level.
</P
><P
->The <VAR
+>The <TT
CLASS="replaceable"
->key_id</VAR
+><I
+>key_id</I
+></TT
>, also known as the
key name, is a domain name uniquely identifying the key. It can
be used in a <B
verify that incoming requests have been signed with a key
matching this name, algorithm, and secret.</P
><P
->The <VAR
+>The <TT
CLASS="replaceable"
->algorithm_id</VAR
+><I
+>algorithm_id</I
+></TT
> is a string
that specifies a security/authentication algorithm. The only
algorithm currently supported with TSIG authentication is
-<VAR
+<TT
CLASS="literal"
->hmac-md5</VAR
+>hmac-md5</TT
>. The
-<VAR
+<TT
CLASS="replaceable"
->secret_string</VAR
+><I
+>secret_string</I
+></TT
> is the secret to be
used by the algorithm, and is treated as a base-64 encoded
string.</P
[ <B
CLASS="command"
>channel</B
-> <VAR
+> <TT
CLASS="replaceable"
->channel_name</VAR
+><I
+>channel_name</I
+></TT
> {
( <B
CLASS="command"
>file</B
-> <VAR
+> <TT
CLASS="replaceable"
->path name</VAR
+><I
+>path name</I
+></TT
>
[ <B
CLASS="command"
>versions</B
-> ( <VAR
+> ( <TT
CLASS="replaceable"
->number</VAR
-> | <VAR
+><I
+>number</I
+></TT
+> | <TT
CLASS="literal"
->unlimited</VAR
+>unlimited</TT
> ) ]
[ <B
CLASS="command"
>size</B
-> <VAR
+> <TT
CLASS="replaceable"
->size spec</VAR
+><I
+>size spec</I
+></TT
> ]
| <B
CLASS="command"
>syslog</B
-> <VAR
+> <TT
CLASS="replaceable"
->syslog_facility</VAR
+><I
+>syslog_facility</I
+></TT
>
| <B
CLASS="command"
[ <B
CLASS="command"
>severity</B
-> (<VAR
+> (<CODE
CLASS="option"
->critical</VAR
-> | <VAR
+>critical</CODE
+> | <CODE
CLASS="option"
->error</VAR
-> | <VAR
+>error</CODE
+> | <CODE
CLASS="option"
->warning</VAR
-> | <VAR
+>warning</CODE
+> | <CODE
CLASS="option"
->notice</VAR
+>notice</CODE
> |
- <VAR
+ <CODE
CLASS="option"
->info</VAR
-> | <VAR
+>info</CODE
+> | <CODE
CLASS="option"
->debug</VAR
-> [ <VAR
+>debug</CODE
+> [ <TT
CLASS="replaceable"
->level</VAR
-> ] | <VAR
+><I
+>level</I
+></TT
+> ] | <CODE
CLASS="option"
->dynamic</VAR
+>dynamic</CODE
> ); ]
[ <B
CLASS="command"
>print-category</B
-> <VAR
+> <CODE
CLASS="option"
->yes</VAR
-> or <VAR
+>yes</CODE
+> or <CODE
CLASS="option"
->no</VAR
+>no</CODE
>; ]
[ <B
CLASS="command"
>print-severity</B
-> <VAR
+> <CODE
CLASS="option"
->yes</VAR
-> or <VAR
+>yes</CODE
+> or <CODE
CLASS="option"
->no</VAR
+>no</CODE
>; ]
[ <B
CLASS="command"
>print-time</B
-> <VAR
+> <CODE
CLASS="option"
->yes</VAR
-> or <VAR
+>yes</CODE
+> or <CODE
CLASS="option"
->no</VAR
+>no</CODE
>; ]
}; ]
[ <B
CLASS="command"
>category</B
-> <VAR
+> <TT
CLASS="replaceable"
->category_name</VAR
+><I
+>category_name</I
+></TT
> {
- <VAR
+ <TT
CLASS="replaceable"
->channel_name</VAR
-> ; [ <VAR
+><I
+>channel_name</I
+></TT
+> ; [ <TT
CLASS="replaceable"
->channel_nam</VAR
+><I
+>channel_nam</I
+></TT
>e ; ... ]
}; ]
...
> statement
was parsed. When the server is starting up, all logging messages
regarding syntax errors in the configuration file go to the default
-channels, or to standard error if the "<VAR
+channels, or to standard error if the "<CODE
CLASS="option"
->-g</VAR
+>-g</CODE
>" option
was specified.</P
><DIV
CLASS="command"
>named</B
> server
-with the <VAR
+with the <CODE
CLASS="option"
->-d</VAR
+>-d</CODE
> flag followed by a positive integer,
or by running <B
CLASS="command"
>
in the server's working directory.</P
><P
->For security reasons, when the "<VAR
+>For security reasons, when the "<CODE
CLASS="option"
->-u</VAR
+>-u</CODE
>"
command line option is used, the <TT
CLASS="filename"
>named</B
> is
starting up and still running as root is discarded. If you need
-to capture this output, you must run the server with the "<VAR
+to capture this output, you must run the server with the "<CODE
CLASS="option"
->-g</VAR
+>-g</CODE
>"
option and redirect standard error to a file.</P
><P
> {
[<SPAN
CLASS="optional"
-> listen-on { <VAR
+> listen-on { <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; ... </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> view <VAR
+> view <TT
CLASS="replaceable"
->view_name</VAR
+><I
+>view_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> search { <VAR
+> search { <TT
CLASS="replaceable"
->domain_name</VAR
+><I
+>domain_name</I
+></TT
> ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->domain_name</VAR
+><I
+>domain_name</I
+></TT
> ; ... </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> ndots <VAR
+> ndots <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
};
> <B
CLASS="command"
>masters</B
-> <VAR
+> <TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="replaceable"
->masters_list</VAR
-> | <VAR
+><I
+>masters_list</I
+></TT
+> | <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] [<SPAN
CLASS="optional"
->key <VAR
+>key <TT
CLASS="replaceable"
->key</VAR
+><I
+>key</I
+></TT
></SPAN
>] ) ; [<SPAN
CLASS="optional"
>options {
[<SPAN
CLASS="optional"
-> version <VAR
+> version <TT
CLASS="replaceable"
->version_string</VAR
+><I
+>version_string</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> hostname <VAR
+> hostname <TT
CLASS="replaceable"
->hostname_string</VAR
+><I
+>hostname_string</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> server-id <VAR
+> server-id <TT
CLASS="replaceable"
->server_id_string</VAR
+><I
+>server_id_string</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> directory <VAR
+> directory <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> key-directory <VAR
+> key-directory <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> named-xfer <VAR
+> named-xfer <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> tkey-domain <VAR
+> tkey-domain <TT
CLASS="replaceable"
->domainname</VAR
+><I
+>domainname</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> tkey-dhkey <VAR
+> tkey-dhkey <TT
CLASS="replaceable"
->key_name</VAR
-> <VAR
+><I
+>key_name</I
+></TT
+> <TT
CLASS="replaceable"
->key_tag</VAR
+><I
+>key_tag</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dump-file <VAR
+> dump-file <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> memstatistics-file <VAR
+> memstatistics-file <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> pid-file <VAR
+> pid-file <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> statistics-file <VAR
+> statistics-file <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> zone-statistics <VAR
+> zone-statistics <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> auth-nxdomain <VAR
+> auth-nxdomain <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> deallocate-on-exit <VAR
+> deallocate-on-exit <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dialup <VAR
+> dialup <TT
CLASS="replaceable"
->dialup_option</VAR
+><I
+>dialup_option</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> fake-iquery <VAR
+> fake-iquery <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> fetch-glue <VAR
+> fetch-glue <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> flush-zones-on-shutdown <VAR
+> flush-zones-on-shutdown <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> has-old-clients <VAR
+> has-old-clients <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> host-statistics <VAR
+> host-statistics <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> host-statistics-max <VAR
+> host-statistics-max <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> minimal-responses <VAR
+> minimal-responses <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> multiple-cnames <VAR
+> multiple-cnames <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify <VAR
+> notify <TT
CLASS="replaceable"
->yes_or_no</VAR
-> | <VAR
+><I
+>yes_or_no</I
+></TT
+> | <TT
CLASS="replaceable"
->explicit</VAR
-> | <VAR
+><I
+>explicit</I
+></TT
+> | <TT
CLASS="replaceable"
->master-only</VAR
+><I
+>master-only</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> recursion <VAR
+> recursion <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> rfc2308-type1 <VAR
+> rfc2308-type1 <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> use-id-pool <VAR
+> use-id-pool <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> maintain-ixfr-base <VAR
+> maintain-ixfr-base <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dnssec-enable <VAR
+> dnssec-enable <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dnssec-lookaside <VAR
+> dnssec-lookaside <TT
CLASS="replaceable"
->domain</VAR
-> trust-anchor <VAR
+><I
+>domain</I
+></TT
+> trust-anchor <TT
CLASS="replaceable"
->domain</VAR
+><I
+>domain</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dnssec-must-be-secure <VAR
+> dnssec-must-be-secure <TT
CLASS="replaceable"
->domain yes_or_no</VAR
+><I
+>domain yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> forward ( <VAR
+> forward ( <TT
CLASS="replaceable"
->only</VAR
-> | <VAR
+><I
+>only</I
+></TT
+> | <TT
CLASS="replaceable"
->first</VAR
+><I
+>first</I
+></TT
> ); </SPAN
>]
[<SPAN
CLASS="optional"
-> forwarders { <VAR
+> forwarders { <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; ... </SPAN
>] }; </SPAN
CLASS="optional"
> dual-stack-servers [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="replaceable"
->domain_name</VAR
+><I
+>domain_name</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
->] | <VAR
+>] | <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ) ; ... }; </SPAN
>]
[<SPAN
CLASS="optional"
-> check-names ( <VAR
+> check-names ( <TT
CLASS="replaceable"
->master</VAR
-> | <VAR
+><I
+>master</I
+></TT
+> | <TT
CLASS="replaceable"
->slave</VAR
-> | <VAR
+><I
+>slave</I
+></TT
+> | <TT
CLASS="replaceable"
->response</VAR
-> )( <VAR
+><I
+>response</I
+></TT
+> )( <TT
CLASS="replaceable"
->warn</VAR
-> | <VAR
+><I
+>warn</I
+></TT
+> | <TT
CLASS="replaceable"
->fail</VAR
-> | <VAR
+><I
+>fail</I
+></TT
+> | <TT
CLASS="replaceable"
->ignore</VAR
+><I
+>ignore</I
+></TT
> ); </SPAN
>]
[<SPAN
CLASS="optional"
-> check-wildcard <VAR
+> check-wildcard <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-notify { <VAR
+> allow-notify { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-query { <VAR
+> allow-query { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-query-cache { <VAR
+> allow-query-cache { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-transfer { <VAR
+> allow-transfer { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-recursion { <VAR
+> allow-recursion { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-update { <VAR
+> allow-update { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-update-forwarding { <VAR
+> allow-update-forwarding { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-v6-synthesis { <VAR
+> allow-v6-synthesis { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> blackhole { <VAR
+> blackhole { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> avoid-v4-udp-ports { <VAR
+> avoid-v4-udp-ports { <TT
CLASS="replaceable"
->port_list</VAR
+><I
+>port_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> avoid-v6-udp-ports { <VAR
+> avoid-v6-udp-ports { <TT
CLASS="replaceable"
->port_list</VAR
+><I
+>port_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
> listen-on [<SPAN
CLASS="optional"
-> port <VAR
+> port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
> </SPAN
->] { <VAR
+>] { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
> listen-on-v6 [<SPAN
CLASS="optional"
-> port <VAR
+> port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
> </SPAN
->] { <VAR
+>] { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }; </SPAN
>]
[<SPAN
CLASS="optional"
-> query-source ( ( <VAR
+> query-source ( ( <TT
CLASS="replaceable"
->ip4_addr</VAR
-> | <VAR
+><I
+>ip4_addr</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) [<SPAN
CLASS="optional"
-> port ( <VAR
+> port ( <TT
CLASS="replaceable"
->ip_port</VAR
-> | <VAR
+><I
+>ip_port</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] | [<SPAN
CLASS="optional"
-> address ( <VAR
+> address ( <TT
CLASS="replaceable"
->ip4_addr</VAR
-> | <VAR
+><I
+>ip4_addr</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] [<SPAN
CLASS="optional"
-> port ( <VAR
+> port ( <TT
CLASS="replaceable"
->ip_port</VAR
-> | <VAR
+><I
+>ip_port</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] ) ; </SPAN
>]
[<SPAN
CLASS="optional"
-> query-source-v6 ( ( <VAR
+> query-source-v6 ( ( <TT
CLASS="replaceable"
->ip6_addr</VAR
-> | <VAR
+><I
+>ip6_addr</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) [<SPAN
CLASS="optional"
-> port ( <VAR
+> port ( <TT
CLASS="replaceable"
->ip_port</VAR
-> | <VAR
+><I
+>ip_port</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] | [<SPAN
CLASS="optional"
-> address ( <VAR
+> address ( <TT
CLASS="replaceable"
->ip6_addr</VAR
-> | <VAR
+><I
+>ip6_addr</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] [<SPAN
CLASS="optional"
-> port ( <VAR
+> port ( <TT
CLASS="replaceable"
->ip_port</VAR
-> | <VAR
+><I
+>ip_port</I
+></TT
+> | <TT
CLASS="replaceable"
->*</VAR
+><I
+>*</I
+></TT
> ) </SPAN
>] ) ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-time-in <VAR
+> max-transfer-time-in <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-time-out <VAR
+> max-transfer-time-out <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-idle-in <VAR
+> max-transfer-idle-in <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-idle-out <VAR
+> max-transfer-idle-out <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> tcp-clients <VAR
+> tcp-clients <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> recursive-clients <VAR
+> recursive-clients <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> serial-query-rate <VAR
+> serial-query-rate <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> serial-queries <VAR
+> serial-queries <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> tcp-listen-queue <VAR
+> tcp-listen-queue <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-format <VAR
+> transfer-format <TT
CLASS="replaceable"
->( one-answer | many-answers )</VAR
+><I
+>( one-answer | many-answers )</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfers-in <VAR
+> transfers-in <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfers-out <VAR
+> transfers-out <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfers-per-ns <VAR
+> transfers-per-ns <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source (<VAR
+> transfer-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source-v6 (<VAR
+> transfer-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> alt-transfer-source (<VAR
+> alt-transfer-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> alt-transfer-source-v6 (<VAR
+> alt-transfer-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> use-alt-transfer-source <VAR
+> use-alt-transfer-source <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify-source (<VAR
+> notify-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify-source-v6 (<VAR
+> notify-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> also-notify { <VAR
+> also-notify { <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; ... </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-ixfr-log-size <VAR
+> max-ixfr-log-size <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-journal-size <VAR
+> max-journal-size <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> coresize <VAR
+> coresize <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> datasize <VAR
+> datasize <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> files <VAR
+> files <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> stacksize <VAR
+> stacksize <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> cleaning-interval <VAR
+> cleaning-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> heartbeat-interval <VAR
+> heartbeat-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> interface-interval <VAR
+> interface-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> statistics-interval <VAR
+> statistics-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> topology { <VAR
+> topology { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }</SPAN
>];
[<SPAN
CLASS="optional"
-> sortlist { <VAR
+> sortlist { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> }</SPAN
>];
[<SPAN
CLASS="optional"
-> rrset-order { <VAR
+> rrset-order { <TT
CLASS="replaceable"
->order_spec</VAR
+><I
+>order_spec</I
+></TT
> ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->order_spec</VAR
+><I
+>order_spec</I
+></TT
> ; ... </SPAN
>] </SPAN
>] };
[<SPAN
CLASS="optional"
-> lame-ttl <VAR
+> lame-ttl <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-ncache-ttl <VAR
+> max-ncache-ttl <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-cache-ttl <VAR
+> max-cache-ttl <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> sig-validity-interval <VAR
+> sig-validity-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> min-roots <VAR
+> min-roots <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> use-ixfr <VAR
+> use-ixfr <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> provide-ixfr <VAR
+> provide-ixfr <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> request-ixfr <VAR
+> request-ixfr <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> treat-cr-as-space <VAR
+> treat-cr-as-space <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> min-refresh-time <VAR
+> min-refresh-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-refresh-time <VAR
+> max-refresh-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> min-retry-time <VAR
+> min-retry-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-retry-time <VAR
+> max-retry-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> port <VAR
+> port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> additional-from-auth <VAR
+> additional-from-auth <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> additional-from-cache <VAR
+> additional-from-cache <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> random-device <VAR
+> random-device <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-cache-size <VAR
+> max-cache-size <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> match-mapped-addresses <VAR
+> match-mapped-addresses <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> preferred-glue ( <VAR
+> preferred-glue ( <TT
CLASS="replaceable"
->A</VAR
-> | <VAR
+><I
+>A</I
+></TT
+> | <TT
CLASS="replaceable"
->AAAA</VAR
-> | <VAR
+><I
+>AAAA</I
+></TT
+> | <TT
CLASS="replaceable"
->NONE</VAR
+><I
+>NONE</I
+></TT
> ); </SPAN
>]
[<SPAN
CLASS="optional"
-> edns-udp-size <VAR
+> edns-udp-size <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
> root-delegation-only [<SPAN
CLASS="optional"
-> exclude { <VAR
+> exclude { <TT
CLASS="replaceable"
->namelist</VAR
+><I
+>namelist</I
+></TT
> } </SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> querylog <VAR
+> querylog <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> disable-algorithms <VAR
+> disable-algorithms <TT
CLASS="replaceable"
->domain</VAR
-> { <VAR
+><I
+>domain</I
+></TT
+> { <TT
CLASS="replaceable"
->algorithm</VAR
+><I
+>algorithm</I
+></TT
>; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->algorithm</VAR
+><I
+>algorithm</I
+></TT
>; </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> use-additional-cache <VAR
+> use-additional-cache <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> acache-cleaning-interval <VAR
+> acache-cleaning-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-acache-size <VAR
+> max-acache-size <TT
CLASS="replaceable"
->size_spec</VAR
+><I
+>size_spec</I
+></TT
> ; </SPAN
>]
};
>TKEY</B
> exchange, it may or may not specify
the desired name for the key. If present, the name of the shared
-key will be "<VAR
+key will be "<CODE
CLASS="varname"
->client specified part</VAR
+>client specified part</CODE
>" +
-"<VAR
+"<CODE
CLASS="varname"
->tkey-domain</VAR
+>tkey-domain</CODE
>".
-Otherwise, the name of the shared key will be "<VAR
+Otherwise, the name of the shared key will be "<CODE
CLASS="varname"
>random hex
-digits</VAR
->" + "<VAR
+digits</CODE
+>" + "<CODE
CLASS="varname"
->tkey-domain</VAR
+>tkey-domain</CODE
>". In most cases,
the <B
CLASS="command"
otherwise be provided in the additional section.
</P
><P
-> For example, if a query asks for an MX record for host <VAR
+> For example, if a query asks for an MX record for host <TT
CLASS="literal"
->foo.example.com</VAR
+>foo.example.com</TT
>,
-and the record found is "<VAR
+and the record found is "<TT
CLASS="literal"
->MX 10 mail.example.net</VAR
+>MX 10 mail.example.net</TT
>", normally the address
-records (A and AAAA) for <VAR
+records (A and AAAA) for <TT
CLASS="literal"
->mail.example.net</VAR
+>mail.example.net</TT
> will be provided as well,
if known, even though they are not in the example.com zone.
Setting these options to <B
><DD
><P
>This option is only meaningful if the
-forwarders list is not empty. A value of <VAR
+forwarders list is not empty. A value of <CODE
CLASS="varname"
->first</VAR
+>first</CODE
>,
the default, causes the server to query the forwarders first, and
if that doesn't answer the question the server will then look for
-the answer itself. If <VAR
+the answer itself. If <CODE
CLASS="varname"
->only</VAR
+>only</CODE
> is specified, the
server will only query the forwarders.
</P
CLASS="command"
>listen-on</B
> takes
-an optional port, and an <VAR
+an optional port, and an <CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
>.
The server will listen on all interfaces allowed by the address
match list. If a port is not specified, port 53 will be used.</P
CLASS="programlisting"
>{ any; }</PRE
> is specified
-as the <VAR
+as the <CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
> for the
<B
CLASS="command"
><DD
><P
>The maximum number of inbound zone transfers
-that can be running concurrently. The default value is <VAR
+that can be running concurrently. The default value is <TT
CLASS="literal"
->10</VAR
+>10</TT
>.
Increasing <B
CLASS="command"
><P
>The maximum number of outbound zone transfers
that can be running concurrently. Zone transfer requests in excess
-of the limit will be refused. The default value is <VAR
+of the limit will be refused. The default value is <TT
CLASS="literal"
->10</VAR
+>10</TT
>.</P
></DD
><DT
><P
>The maximum number of inbound zone transfers
that can be concurrently transferring from a given remote name server.
-The default value is <VAR
+The default value is <TT
CLASS="literal"
->2</VAR
+>2</TT
>. Increasing <B
CLASS="command"
>transfers-per-ns</B
><DD
><P
>The maximum size of a core dump. The default
-is <VAR
+is <TT
CLASS="literal"
->default</VAR
+>default</TT
>.</P
></DD
><DT
><DD
><P
>The maximum amount of data memory the server
-may use. The default is <VAR
+may use. The default is <TT
CLASS="literal"
->default</VAR
+>default</TT
>.
This is a hard limit on server memory usage.
If the server attempts to allocate memory in excess of this
><DD
><P
>The maximum number of files the server
-may have open concurrently. The default is <VAR
+may have open concurrently. The default is <TT
CLASS="literal"
->unlimited</VAR
+>unlimited</TT
>.
</P
></DD
><DD
><P
>The maximum amount of stack memory the server
-may use. The default is <VAR
+may use. The default is <TT
CLASS="literal"
->default</VAR
+>default</TT
>.</P
></DD
></DL
>). When the journal file approaches
the specified size, some of the oldest transactions in the journal
will be automatically removed. The default is
-<VAR
+<TT
CLASS="literal"
->unlimited</VAR
+>unlimited</TT
>.</P
></DD
><DT
><P
>The maximum number of simultaneous recursive lookups
the server will perform on behalf of clients. The default is
-<VAR
+<TT
CLASS="literal"
->1000</VAR
+>1000</TT
>. Because each recursing client uses a fair
bit of memory, on the order of 20 kilobytes, the value of the
<B
><P
>The maximum number of simultaneous client TCP
connections that the server will accept.
-The default is <VAR
+The default is <TT
CLASS="literal"
->100</VAR
+>100</TT
>.</P
></DD
><DT
reaches this limit, the server will cause records to expire
prematurely so that the limit is not exceeded. In a server with
multiple views, the limit applies separately to the cache of each
-view. The default is <VAR
+view. The default is <TT
CLASS="literal"
->unlimited</VAR
+>unlimited</TT
>, meaning that
records are purged from the cache only when their TTLs expire.
</P
CLASS="programlisting"
>[<SPAN
CLASS="optional"
-> class <VAR
+> class <TT
CLASS="replaceable"
->class_name</VAR
+><I
+>class_name</I
+></TT
> </SPAN
>][<SPAN
CLASS="optional"
-> type <VAR
+> type <TT
CLASS="replaceable"
->type_name</VAR
+><I
+>type_name</I
+></TT
> </SPAN
>][<SPAN
CLASS="optional"
-> name <VAR
+> name <TT
CLASS="replaceable"
->"domain_name"</VAR
+><I
+>"domain_name"</I
+></TT
></SPAN
>]
- order <VAR
+ order <TT
CLASS="replaceable"
->ordering</VAR
+><I
+>ordering</I
+></TT
>
</PRE
><P
</PRE
><P
>will cause any responses for type A records in class IN that
-have "<VAR
+have "<TT
CLASS="literal"
->host.example.com</VAR
+>host.example.com</TT
>" as a suffix, to always be returned
in random order. All other records are returned in cyclic order.</P
><P
>NOT</B
></SPAN
> recommended.)
-Default is <VAR
+Default is <TT
CLASS="literal"
->600</VAR
+>600</TT
> (10 minutes). Maximum value is
-<VAR
+<TT
CLASS="literal"
->1800</VAR
+>1800</TT
> (30 minutes).</P
></DD
><DT
<B
CLASS="command"
>max-ncache-ttl</B
-> is <VAR
+> is <TT
CLASS="literal"
->10800</VAR
+>10800</TT
> seconds (3 hours).
<B
CLASS="command"
HREF="Bv9ARM.ch04.html#dynamic_update"
>Section 4.2</A
>)
-will expire. The default is <VAR
+will expire. The default is <TT
CLASS="literal"
->30</VAR
+>30</TT
> days.
The maximum value is 10 years (3660 days). The signature
inception time is unconditionally set to one hour before the current time
><P
>The server provides some helpful diagnostic information
through a number of built-in zones under the
-pseudo-top-level-domain <VAR
+pseudo-top-level-domain <TT
CLASS="literal"
->bind</VAR
+>bind</TT
> in the
<B
CLASS="command"
><DD
><P
>The version the server should report
-via a query of the name <VAR
+via a query of the name <TT
CLASS="literal"
->version.bind</VAR
+>version.bind</TT
>
with type <B
CLASS="command"
will cause more aggressive cleaning so that the limit is not exceeded.
In a server with multiple views, the limit applies separately to the
acache of each view.
-The default is <VAR
+The default is <TT
CLASS="literal"
->unlimited</VAR
+>unlimited</TT
>, meaning that
entries are purged from acache only at the periodic cleaning time.
</P
></H2
><PRE
CLASS="programlisting"
->server <VAR
+>server <TT
CLASS="replaceable"
+><I
>ip_addr[<SPAN
CLASS="optional"
>/prefixlen</SPAN
->]</VAR
+>]</I
+></TT
> {
[<SPAN
CLASS="optional"
-> bogus <VAR
+> bogus <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> provide-ixfr <VAR
+> provide-ixfr <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> request-ixfr <VAR
+> request-ixfr <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> edns <VAR
+> edns <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfers <VAR
+> transfers <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-format <VAR
+> transfer-format <TT
CLASS="replaceable"
->( one-answer | many-answers )</VAR
+><I
+>( one-answer | many-answers )</I
+></TT
> ; ]</SPAN
>]
[<SPAN
CLASS="optional"
-> keys <VAR
+> keys <TT
CLASS="replaceable"
+><I
>{ string ; [<SPAN
CLASS="optional"
> string ; [<SPAN
CLASS="optional"
>...</SPAN
>]</SPAN
->] }</VAR
+>] }</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source (<VAR
+> transfer-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source-v6 (<VAR
+> transfer-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
><PRE
CLASS="programlisting"
>trusted-keys {
- <VAR
+ <TT
CLASS="replaceable"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ;
[<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->string</VAR
-> <VAR
+><I
+>string</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; [<SPAN
CLASS="optional"
>...</SPAN
></H2
><PRE
CLASS="programlisting"
->view <VAR
+>view <TT
CLASS="replaceable"
->view_name</VAR
+><I
+>view_name</I
+></TT
>
[<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
></SPAN
>] {
- match-clients { <VAR
+ match-clients { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ;
- match-destinations { <VAR
+ match-destinations { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ;
- match-recursive-only <VAR
+ match-recursive-only <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ;
[<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->view_option</VAR
+><I
+>view_option</I
+></TT
>; ...</SPAN
>]
[<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->zone_statement</VAR
+><I
+>zone_statement</I
+></TT
>; ...</SPAN
>]
};
> statement defines a view of the
DNS namespace that will be seen by a subset of clients. A client matches
a view if its source IP address matches the
-<VAR
+<CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
> of the view's
<B
CLASS="command"
>match-clients</B
> clause and its destination IP address matches
-the <VAR
+the <CODE
CLASS="varname"
->address_match_list</VAR
+>address_match_list</CODE
> of the view's
<B
CLASS="command"
></H2
><PRE
CLASS="programlisting"
->zone <VAR
+>zone <TT
CLASS="replaceable"
->zone_name</VAR
+><I
+>zone_name</I
+></TT
> [<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
></SPAN
>] [<SPAN
CLASS="optional"
type ( master | slave | hint | stub | forward | delegation-only ) ;
[<SPAN
CLASS="optional"
-> allow-notify { <VAR
+> allow-notify { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-query { <VAR
+> allow-query { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-transfer { <VAR
+> allow-transfer { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ; </SPAN
>]
[<SPAN
CLASS="optional"
-> allow-update { <VAR
+> allow-update { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ; </SPAN
>]
[<SPAN
CLASS="optional"
-> update-policy { <VAR
+> update-policy { <TT
CLASS="replaceable"
->update_policy_rule</VAR
+><I
+>update_policy_rule</I
+></TT
> [<SPAN
CLASS="optional"
>...</SPAN
>]
[<SPAN
CLASS="optional"
-> allow-update-forwarding { <VAR
+> allow-update-forwarding { <TT
CLASS="replaceable"
->address_match_list</VAR
+><I
+>address_match_list</I
+></TT
> } ; </SPAN
>]
[<SPAN
CLASS="optional"
-> also-notify { <VAR
+> also-notify { <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; ... </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> check-wildcard <VAR
+> check-wildcard <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> dialup <VAR
+> dialup <TT
CLASS="replaceable"
->dialup_option</VAR
+><I
+>dialup_option</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> delegation-only <VAR
+> delegation-only <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> file <VAR
+> file <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> journal <VAR
+> journal <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
>]
[<SPAN
CLASS="optional"
-> forwarders { <VAR
+> forwarders { <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; ... </SPAN
>] }; </SPAN
>]
[<SPAN
CLASS="optional"
-> ixfr-base <VAR
+> ixfr-base <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> ixfr-tmp-file <VAR
+> ixfr-tmp-file <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> maintain-ixfr-base <VAR
+> maintain-ixfr-base <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
> masters [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
->] { ( <VAR
+>] { ( <TT
CLASS="replaceable"
->masters_list</VAR
-> | <VAR
+><I
+>masters_list</I
+></TT
+> | <TT
CLASS="replaceable"
->ip_addr</VAR
+><I
+>ip_addr</I
+></TT
> [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] [<SPAN
CLASS="optional"
->key <VAR
+>key <TT
CLASS="replaceable"
->key</VAR
+><I
+>key</I
+></TT
></SPAN
>] ) ; [<SPAN
CLASS="optional"
>]
[<SPAN
CLASS="optional"
-> max-ixfr-log-size <VAR
+> max-ixfr-log-size <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-idle-in <VAR
+> max-transfer-idle-in <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-idle-out <VAR
+> max-transfer-idle-out <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-time-in <VAR
+> max-transfer-time-in <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-transfer-time-out <VAR
+> max-transfer-time-out <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify <VAR
+> notify <TT
CLASS="replaceable"
->yes_or_no</VAR
-> | <VAR
+><I
+>yes_or_no</I
+></TT
+> | <TT
CLASS="replaceable"
->explicit</VAR
-> | <VAR
+><I
+>explicit</I
+></TT
+> | <TT
CLASS="replaceable"
->master-only</VAR
+><I
+>master-only</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> pubkey <VAR
+> pubkey <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->number</VAR
-> <VAR
+><I
+>number</I
+></TT
+> <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source (<VAR
+> transfer-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> transfer-source-v6 (<VAR
+> transfer-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> alt-transfer-source (<VAR
+> alt-transfer-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> alt-transfer-source-v6 (<VAR
+> alt-transfer-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> use-alt-transfer-source <VAR
+> use-alt-transfer-source <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
>; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify-source (<VAR
+> notify-source (<TT
CLASS="replaceable"
->ip4_addr</VAR
+><I
+>ip4_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> notify-source-v6 (<VAR
+> notify-source-v6 (<TT
CLASS="replaceable"
->ip6_addr</VAR
+><I
+>ip6_addr</I
+></TT
> | <CODE
CLASS="constant"
>*</CODE
>) [<SPAN
CLASS="optional"
->port <VAR
+>port <TT
CLASS="replaceable"
->ip_port</VAR
+><I
+>ip_port</I
+></TT
></SPAN
>] ; </SPAN
>]
[<SPAN
CLASS="optional"
-> zone-statistics <VAR
+> zone-statistics <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> sig-validity-interval <VAR
+> sig-validity-interval <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> database <VAR
+> database <TT
CLASS="replaceable"
->string</VAR
+><I
+>string</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> min-refresh-time <VAR
+> min-refresh-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-refresh-time <VAR
+> max-refresh-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> min-retry-time <VAR
+> min-retry-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> max-retry-time <VAR
+> max-retry-time <TT
CLASS="replaceable"
->number</VAR
+><I
+>number</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> multi-master <VAR
+> multi-master <TT
CLASS="replaceable"
->yes_or_no</VAR
+><I
+>yes_or_no</I
+></TT
> ; </SPAN
>]
[<SPAN
CLASS="optional"
-> key-directory <VAR
+> key-directory <TT
CLASS="replaceable"
->path_name</VAR
+><I
+>path_name</I
+></TT
>; </SPAN
>]
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->master</VAR
+>master</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->slave</VAR
+>slave</CODE
></P
></TD
><TD
a needless waste of bandwidth. Note that for large numbers (in the
tens or hundreds of thousands) of zones per server, it is best to
use a two level naming scheme for zone file names. For example,
-a slave server for the zone <VAR
+a slave server for the zone <TT
CLASS="literal"
->example.com</VAR
+>example.com</TT
> might place
the zone contents into a file called
<TT
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->stub</VAR
+>stub</CODE
></P
></TD
><TD
of a given domain to use a particular set of authoritative servers.
For example, the caching name servers on a private network using
RFC1981 addressing may be configured with stub zones for
-<VAR
+<TT
CLASS="literal"
->10.in-addr.arpa</VAR
+>10.in-addr.arpa</TT
>
to use a set of internal name servers as the authoritative
servers for that domain.</P
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->forward</VAR
+>forward</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->hint</VAR
+>hint</CODE
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->delegation-only</VAR
+>delegation-only</CODE
></P
></TD
><TD
apex. This SHOULD NOT be applied to leaf zones.</P
>
<P
-><VAR
+><CODE
CLASS="varname"
->delegation-only</VAR
+>delegation-only</CODE
> has no effect on answers received
from forwarders.</P
></TD
></H3
><P
>The zone's name may optionally be followed by a class. If
-a class is not specified, class <VAR
+a class is not specified, class <TT
CLASS="literal"
->IN</VAR
-> (for <VAR
+>IN</TT
+> (for <CODE
CLASS="varname"
->Internet</VAR
+>Internet</CODE
>),
is assumed. This is correct for the vast majority of cases.</P
><P
->The <VAR
+>The <TT
CLASS="literal"
->hesiod</VAR
+>hesiod</TT
> class is
named for an information service from MIT's Project Athena. It is
used to share information about various systems databases, such
as users, groups, printers and so on. The keyword
-<VAR
+<TT
CLASS="literal"
->HS</VAR
+>HS</TT
> is
a synonym for hesiod.</P
><P
>Another MIT development is CHAOSnet, a LAN protocol created
-in the mid-1970s. Zone data for it can be specified with the <VAR
+in the mid-1970s. Zone data for it can be specified with the <TT
CLASS="literal"
->CHAOS</VAR
+>CHAOS</TT
> class.</P
></DIV
><DIV
>notify</B
> is
active for this zone. The set of machines that will receive a
-<VAR
+<TT
CLASS="literal"
->DNS NOTIFY</VAR
+>DNS NOTIFY</TT
> message
for this zone is made up of all the listed name servers (other than
the primary master) for the zone plus any IP addresses specified
> | <B
CLASS="command"
>deny</B
-> ) <VAR
+> ) <TT
CLASS="replaceable"
->identity</VAR
-> <VAR
+><I
+>identity</I
+></TT
+> <TT
CLASS="replaceable"
->nametype</VAR
-> <VAR
+><I
+>nametype</I
+></TT
+> <TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->types</VAR
+><I
+>types</I
+></TT
> </SPAN
>]
</PRE
is the name of the TSIG or SIG(0) key used to sign the update request. When a
TKEY exchange has been used to create a shared secret, the identity of the
shared secret is the same as the identity of the key used to authenticate the
-TKEY exchange. When the <VAR
+TKEY exchange. When the <TT
CLASS="replaceable"
->identity</VAR
+><I
+>identity</I
+></TT
> field specifies a
wildcard name, it is subject to DNS wildcard expansion, so the rule will apply
-to multiple identities. The <VAR
+to multiple identities. The <TT
CLASS="replaceable"
->identity</VAR
+><I
+>identity</I
+></TT
> field must
contain a fully qualified domain name.</P
><P
->The <VAR
+>The <TT
CLASS="replaceable"
->nametype</VAR
+><I
+>nametype</I
+></TT
> field has 4 values:
-<VAR
+<CODE
CLASS="varname"
->name</VAR
->, <VAR
+>name</CODE
+>, <CODE
CLASS="varname"
->subdomain</VAR
+>subdomain</CODE
>,
-<VAR
+<CODE
CLASS="varname"
->wildcard</VAR
->, and <VAR
+>wildcard</CODE
+>, and <CODE
CLASS="varname"
->self</VAR
+>self</CODE
>.
</P
><DIV
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->name</VAR
+>name</CODE
></P
></TD
><TD
><P
>Exact-match semantics. This rule matches when the
name being updated is identical to the contents of the
-<VAR
+<TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> field.</P
></TD
></TR
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->subdomain</VAR
+>subdomain</CODE
></P
></TD
><TD
><P
>This rule matches when the name being updated
is a subdomain of, or identical to, the contents of the
-<VAR
+<TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> field.</P
></TD
></TR
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->wildcard</VAR
+>wildcard</CODE
></P
></TD
><TD
><P
->The <VAR
+>The <TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> field is
subject to DNS wildcard expansion, and this rule matches when the name
being updated name is a valid expansion of the wildcard.</P
><TR
><TD
><P
-><VAR
+><CODE
CLASS="varname"
->self</VAR
+>self</CODE
></P
></TD
><TD
><P
>This rule matches when the name being updated
-matches the contents of the <VAR
+matches the contents of the <TT
CLASS="replaceable"
->identity</VAR
+><I
+>identity</I
+></TT
> field.
-The <VAR
+The <TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> field is ignored, but should be
-the same as the <VAR
+the same as the <TT
CLASS="replaceable"
->identity</VAR
+><I
+>identity</I
+></TT
> field. The
-<VAR
+<CODE
CLASS="varname"
->self</VAR
+>self</CODE
> nametype is most useful when allowing using
one key per name to update, where the key has the same name as the name
-to be updated. The <VAR
+to be updated. The <TT
CLASS="replaceable"
->identity</VAR
+><I
+>identity</I
+></TT
> would be
specified as <CODE
CLASS="constant"
></P
></DIV
><P
->In all cases, the <VAR
+>In all cases, the <TT
CLASS="replaceable"
->name</VAR
+><I
+>name</I
+></TT
> field must
specify a fully qualified domain name.</P
><P
> CHAOSnet, a LAN protocol created at MIT in the mid-1970s.
Rarely used for its historical purpose, but reused for BIND's
built-in server information zones, e.g.,
-<VAR
+<TT
CLASS="literal"
->version.bind</VAR
+>version.bind</TT
>.
</P
></TD
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->ISI.EDU.</VAR
+>ISI.EDU.</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MX</VAR
+>MX</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10 VENERA.ISI.EDU.</VAR
+>10 VENERA.ISI.EDU.</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MX</VAR
+>MX</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10 VAXA.ISI.EDU</VAR
+>10 VAXA.ISI.EDU</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->VENERA.ISI.EDU</VAR
+>VENERA.ISI.EDU</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->128.9.0.32</VAR
+>128.9.0.32</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.1.0.52</VAR
+>10.1.0.52</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->VAXA.ISI.EDU</VAR
+>VAXA.ISI.EDU</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.2.0.27</VAR
+>10.2.0.27</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->128.9.0.33</VAR
+>128.9.0.33</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->XX.LCS.MIT.EDU. IN</VAR
+>XX.LCS.MIT.EDU. IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.44</VAR
+>10.0.0.44</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->CH</VAR
+>CH</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MIT.EDU. 2420</VAR
+>MIT.EDU. 2420</TT
></P
></TD
></TR
></P
></DIV
><P
->This example shows two addresses for <VAR
+>This example shows two addresses for <TT
CLASS="literal"
->XX.LCS.MIT.EDU</VAR
+>XX.LCS.MIT.EDU</TT
>,
each of a different class.</P
></DIV
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->example.com.</VAR
+>example.com.</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MX</VAR
+>MX</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10</VAR
+>10</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->mail.example.com.</VAR
+>mail.example.com.</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MX</VAR
+>MX</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10</VAR
+>10</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->mail2.example.com.</VAR
+>mail2.example.com.</TT
></P
></TD
></TR
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->MX</VAR
+>MX</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->20</VAR
+>20</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->mail.backup.org.</VAR
+>mail.backup.org.</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->mail.example.com.</VAR
+>mail.example.com.</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.1</VAR
+>10.0.0.1</TT
></P
></TD
><TD
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->mail2.example.com.</VAR
+>mail2.example.com.</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN</VAR
+>IN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->A</VAR
+>A</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->10.0.0.2</VAR
+>10.0.0.2</TT
></P
></TD
><TD
><P
>For example:</P
><P
->Mail delivery will be attempted to <VAR
+>Mail delivery will be attempted to <TT
CLASS="literal"
->mail.example.com</VAR
+>mail.example.com</TT
> and
-<VAR
+<TT
CLASS="literal"
->mail2.example.com</VAR
+>mail2.example.com</TT
> (in
-any order), and if neither of those succeed, delivery to <VAR
+any order), and if neither of those succeed, delivery to <TT
CLASS="literal"
->mail.backup.org</VAR
+>mail.backup.org</TT
> will
be attempted.</P
></DIV
></DIV
><P
>All of these TTLs default to units of seconds, though units
-can be explicitly specified, for example, <VAR
+can be explicitly specified, for example, <TT
CLASS="literal"
->1h30m</VAR
+>1h30m</TT
>. </P
></DIV
><DIV
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->$ORIGIN</VAR
+>$ORIGIN</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->2.1.10.in-addr.arpa</VAR
+>2.1.10.in-addr.arpa</TT
></P
></TD
></TR
><TR
><TD
><P
-><VAR
+><TT
CLASS="literal"
->3</VAR
+>3</TT
></P
></TD
><TD
><P
-><VAR
+><TT
CLASS="literal"
->IN PTR foo.example.com.</VAR
+>IN PTR foo.example.com.</TT
></P
></TD
></TR
CLASS="command"
>$ORIGIN
</B
-><VAR
+><TT
CLASS="replaceable"
->domain-name</VAR
+><I
+>domain-name</I
+></TT
> [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->comment</VAR
+><I
+>comment</I
+></TT
></SPAN
>]</P
><P
in there is an implicit <B
CLASS="command"
>$ORIGIN</B
-> <<VAR
+> <<CODE
CLASS="varname"
->zone-name</VAR
+>zone-name</CODE
>><B
CLASS="command"
>.</B
> argument if it is not absolute.</P
><PRE
CLASS="programlisting"
-><VAR
+><TT
CLASS="literal"
>$ORIGIN example.com.
-WWW CNAME MAIN-SERVER</VAR
+WWW CNAME MAIN-SERVER</TT
></PRE
><P
>is equivalent to</P
><PRE
CLASS="programlisting"
-><VAR
+><TT
CLASS="literal"
->WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.</VAR
+>WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.</TT
></PRE
></DIV
><DIV
CLASS="command"
>$INCLUDE</B
>
-<VAR
+<TT
CLASS="replaceable"
->filename</VAR
+><I
+>filename</I
+></TT
> [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->origin</VAR
+><I
+>origin</I
+></TT
> </SPAN
>] [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->comment</VAR
+><I
+>comment</I
+></TT
> </SPAN
>]</P
><P
CLASS="command"
>$TTL</B
>
-<VAR
+<TT
CLASS="replaceable"
->default-ttl</VAR
+><I
+>default-ttl</I
+></TT
> [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->comment</VAR
+><I
+>comment</I
+></TT
> </SPAN
>]</P
><P
>Syntax: <B
CLASS="command"
>$GENERATE</B
-> <VAR
+> <TT
CLASS="replaceable"
->range</VAR
-> <VAR
+><I
+>range</I
+></TT
+> <TT
CLASS="replaceable"
->lhs</VAR
+><I
+>lhs</I
+></TT
> [<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->ttl</VAR
+><I
+>ttl</I
+></TT
></SPAN
>] [<SPAN
CLASS="optional"
-><VAR
+><TT
CLASS="replaceable"
->class</VAR
+><I
+>class</I
+></TT
></SPAN
->] <VAR
+>] <TT
CLASS="replaceable"
->type</VAR
-> <VAR
+><I
+>type</I
+></TT
+> <TT
CLASS="replaceable"
->rhs</VAR
+><I
+>rhs</I
+></TT
> [<SPAN
CLASS="optional"
-> <VAR
+> <TT
CLASS="replaceable"
->comment</VAR
+><I
+>comment</I
+></TT
> </SPAN
>]</P
><P
delegation.</P
><PRE
CLASS="programlisting"
-><VAR
+><TT
CLASS="literal"
>$ORIGIN 0.0.192.IN-ADDR.ARPA.
$GENERATE 1-2 0 NS SERVER$.EXAMPLE.
-$GENERATE 1-127 $ CNAME $.0</VAR
+$GENERATE 1-127 $ CNAME $.0</TT
></PRE
><P
>is equivalent to</P
><PRE
CLASS="programlisting"
-><VAR
+><TT
CLASS="literal"
>0.0.0.192.IN-ADDR.ARPA NS SERVER1.EXAMPLE.
0.0.0.192.IN-ADDR.ARPA. NS SERVER2.EXAMPLE.
2.0.0.192.IN-ADDR.ARPA. CNAME 2.0.0.0.192.IN-ADDR.ARPA.
...
127.0.0.192.IN-ADDR.ARPA. CNAME 127.0.0.0.192.IN-ADDR.ARPA.
-</VAR
+</TT
></PRE
><DIV
CLASS="informaltable"
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>BIND 9 Security Considerations</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
(<B
CLASS="command"
>chroot()</B
->) by specifying the "<VAR
+>) by specifying the "<CODE
CLASS="option"
->-t</VAR
+>-t</CODE
>"
option. This can help improve system security by placing <ACRONYM
CLASS="acronym"
CLASS="acronym"
>BIND</ACRONYM
> is the
-ability to run the daemon as an unprivileged user ( <VAR
+ability to run the daemon as an unprivileged user ( <CODE
CLASS="option"
->-u</VAR
-> <VAR
+>-u</CODE
+> <TT
CLASS="replaceable"
->user</VAR
+><I
+>user</I
+></TT
> ).
We suggest running as an unprivileged user when using the <B
CLASS="command"
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Troubleshooting</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Appendices</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="BIND 9 Administrator Reference Manual"
HREF="Bv9ARM.html"><LINK
<A
HREF="ftp://www.isi.edu/in-notes/"
TARGET="_top"
->ftp://www.isi.edu/in-notes/RFC<VAR
+>ftp://www.isi.edu/in-notes/RFC<TT
CLASS="replaceable"
->xxx</VAR
+><I
+>xxx</I
+></TT
>.txt</A
-> (where <VAR
+> (where <TT
CLASS="replaceable"
->xxx</VAR
+><I
+>xxx</I
+></TT
> is
the number of the RFC). RFCs are also available via the Web at
<A
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>BIND 9 Administrator Reference Manual</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="NEXT"
TITLE="Introduction "
HREF="Bv9ARM.ch01.html"></HEAD
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres.html,v 1.8 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres.html,v 1.9 2005/04/03 03:31:35 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
functions are all supported. To allow the lwres library to coexist
with system libraries that define functions of the same name,
the library defines these functions with names prefixed by
-<VAR
+<TT
CLASS="LITERAL"
->lwres_</VAR
+>lwres_</TT
>.
To define the standard names, applications must include the
header file
>
which contains macro definitions mapping the standard function names
into
-<VAR
+<TT
CLASS="LITERAL"
->lwres_</VAR
+>lwres_</TT
>
prefixed ones. Operating system vendors who integrate the lwres
library into their base distributions should rename the functions
CLASS="TYPE"
>lwres_packet_t</SPAN
>,
-called <VAR
+called <CODE
CLASS="VARNAME"
->pkt</VAR
+>pkt</CODE
> below.</P
><P
>(2) Set <CODE
unmarshall it. This returns a <SPAN
CLASS="TYPE"
>lwres_packet_t</SPAN
-> (also called <VAR
+> (also called <CODE
CLASS="VARNAME"
->pkt</VAR
+>pkt</CODE
>, below)
as well as a data specific type, such as <SPAN
CLASS="TYPE"
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_buffer.html,v 1.8 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_buffer.html,v 1.9 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_buffer</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>These functions provide bounds checked access to a region of memory
where data is being read or written.
They are based on, and similar to, the
-<VAR
+<TT
CLASS="LITERAL"
->isc_buffer_</VAR
+>isc_buffer_</TT
>
functions in the ISC library.</P
><P
CLASS="TYPE"
>lwres_buffer_t</SPAN
>
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>
and assocates it with the memory region of size
-<VAR
+<CODE
CLASS="PARAMETER"
->length</VAR
+>length</CODE
>
bytes starting at location
-<VAR
+<CODE
CLASS="PARAMETER"
->base.</VAR
+>base.</CODE
></P
><P
><CODE
>lwres_buffer_invalidate()</CODE
>
marks the buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>
as invalid. Invalidating a buffer after use is not required,
but makes it possible to catch its possible accidental use.</P
>
respectively increase and decrease the used space in
buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>
by
-<VAR
+<CODE
CLASS="PARAMETER"
->n</VAR
+>n</CODE
>
bytes.
<CODE
>lwres_buffer_first</CODE
>
makes the consumed region of buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->*p</VAR
+>*p</CODE
>
empty by setting
<CODE
>lwres_buffer_forward()</CODE
>
increases the consumed region of buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>
by
-<VAR
+<CODE
CLASS="PARAMETER"
->n</VAR
+>n</CODE
>
bytes, checking for overflow.
Similarly,
>lwres_buffer_back()</CODE
>
decreases buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>'s
consumed region by
-<VAR
+<CODE
CLASS="PARAMETER"
->n</VAR
+>n</CODE
>
bytes and checks for underflow.</P
><P
>lwres_buffer_getuint8()</CODE
>
reads an unsigned 8-bit integer from
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>
and returns it.
<CODE
>lwres_buffer_putuint8()</CODE
>
writes the unsigned 8-bit integer
-<VAR
+<CODE
CLASS="PARAMETER"
->val</VAR
+>val</CODE
>
to buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>.</P
><P
><CODE
>
except that they respectively read an unsigned 16-bit or 32-bit integer
in network byte order from
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>.
Similarly,
<CODE
>lwres_buffer_putuint32()</CODE
>
writes the unsigned 16-bit or 32-bit integer
-<VAR
+<CODE
CLASS="PARAMETER"
->val</VAR
+>val</CODE
>
to buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>,
in network byte order.</P
><P
>lwres_buffer_putmem()</CODE
>
copies
-<VAR
+<CODE
CLASS="PARAMETER"
->length</VAR
+>length</CODE
>
bytes of memory at
-<VAR
+<CODE
CLASS="PARAMETER"
->base</VAR
+>base</CODE
>
to
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>.
Conversely,
<CODE
>lwres_buffer_getmem()</CODE
>
copies
-<VAR
+<CODE
CLASS="PARAMETER"
->length</VAR
+>length</CODE
>
bytes of memory from
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>
to
-<VAR
+<CODE
CLASS="PARAMETER"
->base</VAR
+>base</CODE
>.</P
></DIV
></BODY
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_config.html,v 1.8 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_config.html,v 1.9 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_config</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_conf_t</SPAN
>
structure for lightweight resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>.</P
><P
><CODE
>lwres_conf_t</SPAN
>
structure in resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>.</P
><P
><CODE
>lwres_conf_parse()</CODE
>
opens the file
-<VAR
+<CODE
CLASS="PARAMETER"
->filename</VAR
+>filename</CODE
>
and parses it to initialise the resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>'s
<SPAN
CLASS="TYPE"
>lwres_conf_t</SPAN
>
structure for resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>
to the
<SPAN
CLASS="TYPE"
>FILE</SPAN
>
-<VAR
+<CODE
CLASS="PARAMETER"
->fp</VAR
+>fp</CODE
>.</P
></DIV
><DIV
>LWRES_R_SUCCESS</SPAN
>
if it successfully read and parsed
-<VAR
+<CODE
CLASS="PARAMETER"
->filename</VAR
+>filename</CODE
>.
It returns
<SPAN
>LWRES_R_FAILURE</SPAN
>
if
-<VAR
+<CODE
CLASS="PARAMETER"
->filename</VAR
+>filename</CODE
>
could not be opened or contained incorrect
resolver statements.</P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_context.html,v 1.10 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_context.html,v 1.11 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_context</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_context_t</SPAN
>
is returned through
-<VAR
+<CODE
CLASS="PARAMETER"
->contextp</VAR
+>contextp</CODE
>,
a pointer to a
><P
>When the lightweight resolver needs to perform dynamic memory
allocation, it will call
-<VAR
+<CODE
CLASS="PARAMETER"
->malloc_function</VAR
+>malloc_function</CODE
>
to allocate memory and
-<VAR
+<CODE
CLASS="PARAMETER"
->free_function</VAR
+>free_function</CODE
>
to free it. If
-<VAR
+<CODE
CLASS="PARAMETER"
->malloc_function</VAR
+>malloc_function</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->free_function</VAR
+>free_function</CODE
>
are NULL, memory is allocated using
>.
It is not permitted to have a NULL
-<VAR
+<CODE
CLASS="PARAMETER"
->malloc_function</VAR
+>malloc_function</CODE
>
and a non-NULL
-<VAR
+<CODE
CLASS="PARAMETER"
->free_function</VAR
+>free_function</CODE
>
or vice versa.
-<VAR
+<CODE
CLASS="PARAMETER"
->arg</VAR
+>arg</CODE
>
is passed as the first parameter to the memory
allocation functions.
If
-<VAR
+<CODE
CLASS="PARAMETER"
->malloc_function</VAR
+>malloc_function</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->free_function</VAR
+>free_function</CODE
>
are NULL,
-<VAR
+<CODE
CLASS="PARAMETER"
->arg</VAR
+>arg</CODE
>
is unused and should be passed as NULL.</P
>
and returned via
-<VAR
+<CODE
CLASS="PARAMETER"
->*contextp</VAR
+>*contextp</CODE
>. </P
><P
><CODE
>,
closing its socket.
-<VAR
+<CODE
CLASS="PARAMETER"
->contextp</VAR
+>contextp</CODE
>
is a pointer to a pointer to the context that is to be destroyed.
The pointer will be set to NULL when the context has been destroyed.</P
>lwres_context_initserial()</CODE
>
sets the serial number for context
-<VAR
+<CODE
CLASS="PARAMETER"
->*ctx</VAR
+>*ctx</CODE
>
to
-<VAR
+<CODE
CLASS="PARAMETER"
->serial</VAR
+>serial</CODE
>.
<CODE
>lwres_context_allocmem()</CODE
>
allocates
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
>
bytes of memory and if successful returns a pointer to the allocated
storage.
>lwres_context_freemem()</CODE
>
frees
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
>
bytes of space starting at location
-<VAR
+<CODE
CLASS="PARAMETER"
->mem</VAR
+>mem</CODE
>. </P
><P
><CODE
>lwres_context_sendrecv()</CODE
>
performs I/O for the context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>.
Data are read and written from the context's socket.
It writes data from
-<VAR
+<CODE
CLASS="PARAMETER"
->sendbase</VAR
+>sendbase</CODE
>
— typically a lightweight resolver query packet —
and waits for a reply which is copied to the receive buffer at
-<VAR
+<CODE
CLASS="PARAMETER"
->recvbase</VAR
+>recvbase</CODE
>.
The number of bytes that were written to this receive buffer is
returned in
-<VAR
+<CODE
CLASS="PARAMETER"
->*recvd_len</VAR
+>*recvd_len</CODE
>. </P
></DIV
><DIV
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gabn.html,v 1.10 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_gabn.html,v 1.11 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_gabn</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_gabnrequest_render()</CODE
>
uses resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>
to convert getaddrbyname request structure
-<VAR
+<CODE
CLASS="PARAMETER"
->req</VAR
+>req</CODE
>
to canonical format.
The packet header structure
-<VAR
+<CODE
CLASS="PARAMETER"
->pkt</VAR
+>pkt</CODE
>
is initialised and transferred to
buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>.
The contents of
-<VAR
+<CODE
CLASS="PARAMETER"
->*req</VAR
+>*req</CODE
>
are then appended to the buffer in canonical format.
<CODE
>lwres_gabnrequest_parse()</CODE
>
uses context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>
to convert the contents of packet
-<VAR
+<CODE
CLASS="PARAMETER"
->pkt</VAR
+>pkt</CODE
>
to a
<SPAN
>
structure.
Buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>
provides space to be used for storing this structure.
When the function succeeds, the resulting
>lwres_gabnrequest_t</SPAN
>
is made available through
-<VAR
+<CODE
CLASS="PARAMETER"
->*structp</VAR
+>*structp</CODE
>.
<CODE
>lwres_gabnrequest_free()</CODE
>
release the memory in resolver context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
>
that was allocated to the
<SPAN
>lwres_gabnrequest_t</SPAN
>
structures referenced via
-<VAR
+<CODE
CLASS="PARAMETER"
->structp</VAR
+>structp</CODE
>.
Any memory associated with ancillary buffers and strings for those
>LWRES_R_UNEXPECTEDEND</SPAN
>
is returned if the available space in the buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>
is too small to accommodate the packet header or the
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gai_strerror.html,v 1.9 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_gai_strerror.html,v 1.10 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_gai_strerror</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
CLASS="ERRORNAME"
>invalid error code</SPAN
> is returned if
-<VAR
+<CODE
CLASS="PARAMETER"
->ecode</VAR
+>ecode</CODE
>
is out of range.</P
><P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getaddrinfo.html,v 1.13 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_getaddrinfo.html,v 1.14 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_getaddrinfo</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_getaddrinfo()</CODE
>
is used to get a list of IP addresses and port numbers for host
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
and service
-<VAR
+<CODE
CLASS="PARAMETER"
->servname</VAR
+>servname</CODE
>.
The function is the lightweight resolver's implementation of
>getaddrinfo()</CODE
>
as defined in RFC2133.
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->servname</VAR
+>servname</CODE
>
are pointers to null-terminated
strings or
>NULL</SPAN
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
is either a host name or a numeric host address string: a dotted decimal
IPv4 address or an IPv6 address.
-<VAR
+<CODE
CLASS="PARAMETER"
->servname</VAR
+>servname</CODE
>
is either a decimal port number or a service name as listed in
<TT
>/etc/services</TT
>.</P
><P
-><VAR
+><CODE
CLASS="PARAMETER"
->hints</VAR
+>hints</CODE
>
is an optional pointer to a
<SPAN
This structure can be used to provide hints concerning the type of socket
that the caller supports or wishes to use.
The caller can supply the following structure elements in
-<VAR
+<CODE
CLASS="PARAMETER"
->*hints</VAR
+>*hints</CODE
>:
<P
if a connectionless protocol was chosen.
The IP address portion of the socket address structure will be
set to the loopback address if
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
is a
<SPAN
>AI_NUMERICHOST</SPAN
>
it indicates that
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
should be treated as a numeric string defining an IPv4 or IPv6 address
and no name resolution should be attempted.</P
CLASS="TYPE"
>struct addrinfo</SPAN
> passed
-via <VAR
+via <CODE
CLASS="PARAMETER"
->hints</VAR
+>hints</CODE
> must be zero.</P
><P
->A <VAR
+>A <CODE
CLASS="PARAMETER"
->hints</VAR
+>hints</CODE
> of <SPAN
CLASS="TYPE"
>NULL</SPAN
CLASS="FUNCTION"
>lwres_getaddrinfo()</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->*res</VAR
+>*res</CODE
>
is a pointer to a linked list of one or more
<SPAN
CLASS="FUNCTION"
>lwres_freeaddrinfo()</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->ai</VAR
+>ai</CODE
>
is a pointer to a
<SPAN
>
if an error occurs.
If both
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
and
-<VAR
+<CODE
CLASS="PARAMETER"
->servname</VAR
+>servname</CODE
>
are
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gethostent.html,v 1.12 2004/08/23 00:05:47 marka Exp $ -->
+<!-- $Id: lwres_gethostent.html,v 1.13 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_gethostent</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
CLASS="FUNCTION"
>lwres_gethostbyname2()</CODE
> look up the hostname
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
>.
<CODE
CLASS="FUNCTION"
CLASS="FUNCTION"
>lwres_gethostbyname2()</CODE
> looks for an
-address of protocol family <VAR
+address of protocol family <CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
>: either
<SPAN
CLASS="TYPE"
CLASS="FUNCTION"
>lwres_gethostbyaddr()</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->addr</VAR
+>addr</CODE
> is an address of length
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
> bytes and protocol family
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> — <SPAN
CLASS="TYPE"
>PF_INET</SPAN
>lwres_gethostbyname_r()</CODE
> is a thread-safe function
for forward lookups. If an error occurs, an error code is returned in
-<VAR
+<CODE
CLASS="PARAMETER"
->*error</VAR
+>*error</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
> is a pointer to a <SPAN
CLASS="TYPE"
>struct
CLASS="FUNCTION"
>lwres_gethostbyname_r()</CODE
> .
-<VAR
+<CODE
CLASS="PARAMETER"
->buf</VAR
+>buf</CODE
> is a buffer of length
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
> bytes which is used to store the
<CODE
CLASS="CONSTANT"
CLASS="TYPE"
>struct
hostent</SPAN
-> returned in <VAR
+> returned in <CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
>.
Successful calls to <CODE
CLASS="FUNCTION"
>lwres_gethostbyname_r()</CODE
>
-return <VAR
+return <CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
>,
which is a pointer to the <SPAN
CLASS="TYPE"
CLASS="FUNCTION"
>lwres_gethostbyaddr_r()</CODE
> is a thread-safe function
-that performs a reverse lookup of address <VAR
+that performs a reverse lookup of address <CODE
CLASS="PARAMETER"
->addr</VAR
+>addr</CODE
>
-which is <VAR
+which is <CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
> bytes long and is of protocol
-family <VAR
+family <CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
> — <SPAN
CLASS="TYPE"
>PF_INET</SPAN
CLASS="TYPE"
>PF_INET6</SPAN
>. If an error occurs, the error code is returned
-in <VAR
+in <CODE
CLASS="PARAMETER"
->*error</VAR
+>*error</CODE
>. The other function parameters are
identical to those in <CODE
CLASS="FUNCTION"
>lwres_gethostbyname_r()</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
> is a pointer to a <SPAN
CLASS="TYPE"
>struct
CLASS="FUNCTION"
>lwres_gethostbyaddr_r()</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->buf</VAR
+>buf</CODE
> is a buffer of length
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
> bytes which is used to store the
<CODE
CLASS="CONSTANT"
CLASS="TYPE"
>struct
hostent</SPAN
-> returned in <VAR
+> returned in <CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
>. Successful
calls to <CODE
CLASS="FUNCTION"
>lwres_gethostbyaddr_r()</CODE
> return
-<VAR
+<CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
>, which is a pointer to the
<CODE
CLASS="FUNCTION"
CLASS="FUNCTION"
>lwres_gethostbyaddr_r()</CODE
> return
-<VAR
+<CODE
CLASS="PARAMETER"
->resbuf</VAR
+>resbuf</CODE
>, a pointer to the <SPAN
CLASS="TYPE"
>struct
<SPAN
CLASS="TYPE"
>NULL</SPAN
-> if the lookups fail or if <VAR
+> if the lookups fail or if <CODE
CLASS="PARAMETER"
->buf</VAR
+>buf</CODE
>
was too small to hold the list of addresses and names referenced by
the <CODE
CLASS="TYPE"
>struct
hostent</SPAN
->. If <VAR
+>. If <CODE
CLASS="PARAMETER"
->buf</VAR
+>buf</CODE
> was too small, both
<CODE
CLASS="FUNCTION"
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getipnode.html,v 1.12 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_getipnode.html,v 1.13 2005/04/03 03:31:36 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_getipnode</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_getipnodebyname()</CODE
>
looks up addresses of protocol family
-<VAR
+<CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
>
for the hostname
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
>.
The
-<VAR
+<CODE
CLASS="PARAMETER"
->flags</VAR
+>flags</CODE
>
parameter contains ORed flag bits to
specify the types of addresses that are searched
><DD
><P
>This is used with an
-<VAR
+<CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
>
of AF_INET6, and causes IPv4 addresses to be returned as IPv4-mapped
IPv6 addresses.</P
><DD
><P
>This is used with an
-<VAR
+<CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
>
of AF_INET6, and causes all known addresses (IPv6 and IPv4) to be returned.
If AI_V4MAPPED is also set, the IPv4 addresses are return as mapped
>
performs a reverse lookup
of address
-<VAR
+<CODE
CLASS="PARAMETER"
->src</VAR
+>src</CODE
>
which is
-<VAR
+<CODE
CLASS="PARAMETER"
->len</VAR
+>len</CODE
>
bytes long.
-<VAR
+<CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
>
denotes the protocol family, typically
<SPAN
>struct hostent</SPAN
>
pointer
-<VAR
+<CODE
CLASS="PARAMETER"
->he</VAR
+>he</CODE
>.
Any memory allocated for the
>lwres_getipnodebyaddr()</CODE
>
set
-<VAR
+<CODE
CLASS="PARAMETER"
->*error_num</VAR
+>*error_num</CODE
>
to an appropriate error code and the function returns a
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getnameinfo.html,v 1.9 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_getnameinfo.html,v 1.10 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_getnameinfo</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
<SPAN
CLASS="TYPE"
>struct sockaddr</SPAN
-> <VAR
+> <CODE
CLASS="PARAMETER"
->sa</VAR
+>sa</CODE
> which is
-<VAR
+<CODE
CLASS="PARAMETER"
->salen</VAR
+>salen</CODE
> bytes long. The hostname is of length
-<VAR
+<CODE
CLASS="PARAMETER"
->hostlen</VAR
+>hostlen</CODE
> and is returned via
-<VAR
+<CODE
CLASS="PARAMETER"
->*host.</VAR
+>*host.</CODE
> The maximum length of the hostname is
1025 bytes: <CODE
CLASS="CONSTANT"
>.</P
><P
> The name of the service associated with the port number in
-<VAR
+<CODE
CLASS="PARAMETER"
->sa</VAR
-> is returned in <VAR
+>sa</CODE
+> is returned in <CODE
CLASS="PARAMETER"
->*serv.</VAR
+>*serv.</CODE
>
-It is <VAR
+It is <CODE
CLASS="PARAMETER"
->servlen</VAR
+>servlen</CODE
> bytes long. The maximum length
of the service name is <CODE
CLASS="CONSTANT"
>NI_MAXSERV</CODE
> - 32 bytes.</P
><P
-> The <VAR
+> The <CODE
CLASS="PARAMETER"
->flags</VAR
+>flags</CODE
> argument sets the following
bits:
<P
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getrrsetbyname.html,v 1.9 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_getrrsetbyname.html,v 1.10 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_getrrsetbyname</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_getrrsetbyname()</CODE
>
gets a set of resource records associated with a
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->class</VAR
+>class</CODE
>,
and
-<VAR
+<CODE
CLASS="PARAMETER"
->type</VAR
+>type</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->hostname</VAR
+>hostname</CODE
>
is
a pointer a to null-terminated string. The
-<VAR
+<CODE
CLASS="PARAMETER"
->flags</VAR
+>flags</CODE
>
field is currently unused and must be zero.</P
><P
>lwres_getrrsetbyname()</CODE
>,
-<VAR
+<CODE
CLASS="PARAMETER"
->*res</VAR
+>*res</CODE
>
is a pointer to an
<SPAN
>lwres_freerrset()</CODE
>.
-<VAR
+<CODE
CLASS="PARAMETER"
->rrset</VAR
+>rrset</CODE
>
is a pointer to a
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gnba.html,v 1.10 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_gnba.html,v 1.11 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_gnba</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_gnbarequest_render()</CODE
>
uses resolver context
-<VAR
+<CODE
CLASS="VARNAME"
->ctx</VAR
+>ctx</CODE
>
to convert getnamebyaddr request structure
-<VAR
+<CODE
CLASS="VARNAME"
->req</VAR
+>req</CODE
>
to canonical format.
The packet header structure
-<VAR
+<CODE
CLASS="VARNAME"
->pkt</VAR
+>pkt</CODE
>
is initialised and transferred to
buffer
-<VAR
+<CODE
CLASS="VARNAME"
->b</VAR
+>b</CODE
>.
The contents of
-<VAR
+<CODE
CLASS="VARNAME"
->*req</VAR
+>*req</CODE
>
are then appended to the buffer in canonical format.
<CODE
>lwres_gnbarequest_parse()</CODE
>
uses context
-<VAR
+<CODE
CLASS="VARNAME"
->ctx</VAR
+>ctx</CODE
>
to convert the contents of packet
-<VAR
+<CODE
CLASS="VARNAME"
->pkt</VAR
+>pkt</CODE
>
to a
<SPAN
>
structure.
Buffer
-<VAR
+<CODE
CLASS="VARNAME"
->b</VAR
+>b</CODE
>
provides space to be used for storing this structure.
When the function succeeds, the resulting
>lwres_gnbarequest_t</SPAN
>
is made available through
-<VAR
+<CODE
CLASS="VARNAME"
->*structp</VAR
+>*structp</CODE
>.
<CODE
CLASS="FUNCTION"
>lwres_gnbarequest_free()</CODE
>
release the memory in resolver context
-<VAR
+<CODE
CLASS="VARNAME"
->ctx</VAR
+>ctx</CODE
>
that was allocated to the
<SPAN
>lwres_gnbarequest_t</SPAN
>
structures referenced via
-<VAR
+<CODE
CLASS="VARNAME"
->structp</VAR
+>structp</CODE
>.
Any memory associated with ancillary buffers and strings for those
structures is also discarded.</P
>LWRES_R_UNEXPECTEDEND</SPAN
>
is returned if the available space in the buffer
-<VAR
+<CODE
CLASS="VARNAME"
->b</VAR
+>b</CODE
>
is too small to accommodate the packet header or the
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_hstrerror.html,v 1.9 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_hstrerror.html,v 1.10 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_hstrerror</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
CLASS="FUNCTION"
>lwres_herror()</CODE
> prints the string
-<VAR
+<CODE
CLASS="PARAMETER"
->s</VAR
+>s</CODE
> on <SPAN
CLASS="TYPE"
>stderr</SPAN
CLASS="FUNCTION"
>lwres_hstrerror()</CODE
> returns an appropriate string
-for the error code gievn by <VAR
+for the error code gievn by <CODE
CLASS="PARAMETER"
->err</VAR
+>err</CODE
>. The values of
the error codes and messages are as follows:
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_inetntop.html,v 1.9 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_inetntop.html,v 1.10 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_inetntop</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
CLASS="FUNCTION"
>lwres_net_ntop()</CODE
> converts an IP address of
-protocol family <VAR
+protocol family <CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
> — IPv4 or IPv6 —
-at location <VAR
+at location <CODE
CLASS="PARAMETER"
->src</VAR
+>src</CODE
> from network format to its
conventional representation as a string. For IPv4 addresses, that
string would be a dotted-decimal. An IPv6 address would be
represented in colon notation as described in RFC1884.</P
><P
->The generated string is copied to <VAR
+>The generated string is copied to <CODE
CLASS="PARAMETER"
->dst</VAR
+>dst</CODE
> provided
-<VAR
+<CODE
CLASS="PARAMETER"
->size</VAR
+>size</CODE
> indicates it is long enough to store the
ASCII representation of the address.</P
></DIV
><H2
>RETURN VALUES</H2
><P
->If successful, the function returns <VAR
+>If successful, the function returns <CODE
CLASS="PARAMETER"
->dst</VAR
+>dst</CODE
>:
a pointer to a string containing the presentation format of the
address. <CODE
CLASS="ERRORCODE"
>EAFNOSUPPORT</SPAN
> if
-the protocol family given in <VAR
+the protocol family given in <CODE
CLASS="PARAMETER"
->af</VAR
+>af</CODE
> is not
supported.</P
></DIV
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_noop.html,v 1.11 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_noop.html,v 1.12 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_noop</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
CLASS="FUNCTION"
>lwres_nooprequest_render()</CODE
> uses resolver
-context <VAR
+context <CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
> to convert no-op request structure
-<VAR
+<CODE
CLASS="PARAMETER"
->req</VAR
+>req</CODE
> to canonical format. The packet header
-structure <VAR
+structure <CODE
CLASS="PARAMETER"
->pkt</VAR
+>pkt</CODE
> is initialised and transferred to
-buffer <VAR
+buffer <CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>. The contents of
-<VAR
+<CODE
CLASS="PARAMETER"
->*req</VAR
+>*req</CODE
> are then appended to the buffer in
canonical format. <CODE
CLASS="FUNCTION"
CLASS="FUNCTION"
>lwres_nooprequest_parse()</CODE
> uses context
-<VAR
+<CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
> to convert the contents of packet
-<VAR
+<CODE
CLASS="PARAMETER"
->pkt</VAR
+>pkt</CODE
> to a <SPAN
CLASS="TYPE"
>lwres_nooprequest_t</SPAN
>
-structure. Buffer <VAR
+structure. Buffer <CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
> provides space to be used
for storing this structure. When the function succeeds, the resulting
<SPAN
CLASS="TYPE"
>lwres_nooprequest_t</SPAN
> is made available through
-<VAR
+<CODE
CLASS="PARAMETER"
->*structp</VAR
+>*structp</CODE
>.
<CODE
CLASS="FUNCTION"
CLASS="FUNCTION"
>lwres_nooprequest_free()</CODE
> release the memory in
-resolver context <VAR
+resolver context <CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
> that was allocated to the
<SPAN
CLASS="TYPE"
CLASS="TYPE"
>lwres_nooprequest_t</SPAN
>
-structures referenced via <VAR
+structures referenced via <CODE
CLASS="PARAMETER"
->structp</VAR
+>structp</CODE
>.</P
></DIV
><DIV
>LWRES_R_UNEXPECTEDEND</SPAN
>
is returned if the available space in the buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>
is too small to accommodate the packet header or the
<SPAN
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_packet.html,v 1.12 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_packet.html,v 1.13 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_packet</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
<SPAN
CLASS="TYPE"
>lwres_lwpacket_t</SPAN
-> <VAR
+> <CODE
CLASS="PARAMETER"
->*pkt</VAR
+>*pkt</CODE
> in network
byte order to the lightweight resolver buffer,
-<VAR
+<CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
>.</P
><P
><CODE
>lwres_lwpacket_parseheader()</CODE
> performs the
converse operation. It transfers data in network byte order from
-buffer <VAR
+buffer <CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
> to resolver packet
-<VAR
+<CODE
CLASS="PARAMETER"
->*pkt</VAR
+>*pkt</CODE
>. The contents of the buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
> should correspond to a
<SPAN
CLASS="TYPE"
CLASS="ERRORCODE"
>LWRES_R_SUCCESS</SPAN
>. If there is insufficient
-space to copy data between the buffer <VAR
+space to copy data between the buffer <CODE
CLASS="PARAMETER"
->*b</VAR
+>*b</CODE
> and
-lightweight resolver packet <VAR
+lightweight resolver packet <CODE
CLASS="PARAMETER"
->*pkt</VAR
+>*pkt</CODE
> both functions
return <SPAN
CLASS="ERRORCODE"
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_resutil.html,v 1.12 2004/08/23 00:05:48 marka Exp $ -->
+<!-- $Id: lwres_resutil.html,v 1.13 2005/04/03 03:31:37 marka Exp $ -->
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>lwres_resutil</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.7"></HEAD
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
><BODY
CLASS="REFENTRY"
BGCOLOR="#FFFFFF"
>lwres_string_parse()</CODE
> retrieves a DNS-encoded
string starting the current pointer of lightweight resolver buffer
-<VAR
+<CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>: i.e. <CODE
CLASS="CONSTANT"
>b->current</CODE
>.
When the function returns, the address of the first byte of the
-encoded string is returned via <VAR
+encoded string is returned via <CODE
CLASS="PARAMETER"
->*c</VAR
+>*c</CODE
> and the
-length of that string is given by <VAR
+length of that string is given by <CODE
CLASS="PARAMETER"
->*len</VAR
+>*len</CODE
>. The
buffer's current pointer is advanced to point at the character
following the string length, the encoded string, and the trailing
CLASS="FUNCTION"
>lwres_addr_parse()</CODE
> extracts an address from the
-buffer <VAR
+buffer <CODE
CLASS="PARAMETER"
->b</VAR
+>b</CODE
>. The buffer's current pointer
<CODE
CLASS="CONSTANT"
CLASS="FUNCTION"
>lwres_getaddrsbyname()</CODE
> to perform foward lookups.
-Hostname <VAR
+Hostname <CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
> is looked up using the resolver
-context <VAR
+context <CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
> for memory allocation.
-<VAR
+<CODE
CLASS="PARAMETER"
->addrtypes</VAR
+>addrtypes</CODE
> is a bitmask indicating which type of
addresses are to be looked up. Current values for this bitmask are
<SPAN
CLASS="TYPE"
>LWRES_ADDRTYPE_V6</SPAN
> for IPv6 addresses. Results of the
-lookup are returned in <VAR
+lookup are returned in <CODE
CLASS="PARAMETER"
->*structp</VAR
+>*structp</CODE
>.</P
><P
><CODE
CLASS="FUNCTION"
>lwres_getnamebyaddr()</CODE
> performs reverse lookups.
-Resolver context <VAR
+Resolver context <CODE
CLASS="PARAMETER"
->ctx</VAR
+>ctx</CODE
> is used for memory
allocation. The address type is indicated by
-<VAR
+<CODE
CLASS="PARAMETER"
->addrtype</VAR
+>addrtype</CODE
>: <SPAN
CLASS="TYPE"
>LWRES_ADDRTYPE_V4</SPAN
CLASS="TYPE"
>LWRES_ADDRTYPE_V6</SPAN
>. The address to be looked up is given
-by <VAR
+by <CODE
CLASS="PARAMETER"
->addr</VAR
+>addr</CODE
> and its length is
-<VAR
+<CODE
CLASS="PARAMETER"
->addrlen</VAR
+>addrlen</CODE
> bytes. The result of the function call
-is made available through <VAR
+is made available through <CODE
CLASS="PARAMETER"
->*structp</VAR
+>*structp</CODE
>.</P
></DIV
><DIV
>LWRES_R_NOTFOUND</SPAN
>
if the hostname
-<VAR
+<CODE
CLASS="PARAMETER"
->name</VAR
+>name</CODE
>
could not be found.</P
><P
projects / thirdparty / bind9.git / commitdiff
