Lines Matching +full:local +full:- +full:bd +full:- +full:address
2 * smallapp/unbound-checkconf.c - config file checker for unbound.conf file.
79 #include "edns-subnet/subnet-whitelist.h"
86 printf("Usage: local-unbound-checkconf [file]\n");
89 printf("-o option print value of option to stdout.\n");
90 printf("-f output full pathname with chroot applied, eg. with -o pidfile.\n");
91 printf("-q quiet (suppress output on success).\n");
92 printf("-h show this usage help.\n");
110 char *p = fname_after_chroot(cfg->pidfile, cfg, 1);
116 if(strcmp(opt, "auto-trust-anchor-file") == 0 && final) {
117 struct config_strlist* s = cfg->auto_trust_anchor_file_list;
118 for(; s; s=s->next) {
119 char *p = fname_after_chroot(s->str, cfg, 1);
143 if(fb->startup && !(*fb->startup)(&env, 0))
144 fatal_exit("bad config during startup for %s module", fb->name);
145 if(!(*fb->init)(&env, 0))
146 fatal_exit("bad config during init for %s module", fb->name);
147 (*fb->deinit)(&env, 0);
148 if(fb->destartup)
149 (*fb->destartup)(&env, 0);
155 /** true if addr is a localhost address, 127.0.0.1 or ::1 (with maybe "@port"
165 /** check do-not-query-localhost */
169 if(cfg->donotquery_localhost) {
172 for(p=cfg->forwards; p; p=p->next) {
173 for(s=p->addrs; s; s=s->next) {
174 if(str_addr_is_localhost(s->str)) {
175 fprintf(stderr, "unbound-checkconf: warning: forward-addr: '%s' is specified for forward-zone: '%s', but do-not-query-localhost: yes means that the address will not be used for lookups.\n",
176 s->str, p->name);
180 for(p=cfg->stubs; p; p=p->next) {
181 for(s=p->addrs; s; s=s->next) {
182 if(str_addr_is_localhost(s->str)) {
183 fprintf(stderr, "unbound-checkconf: warning: stub-addr: '%s' is specified for stub-zone: '%s', but do-not-query-localhost: yes means that the address will not be used for lookups.\n",
184 s->str, p->name);
199 fatal_exit("failed local-zone, local-data configuration");
215 for(acl=cfg->acl_view; acl; acl = acl->next) {
217 if(!netblockstrtoaddr(acl->str, UNBOUND_DNS_PORT, &a, &alen,
219 fatal_exit("cannot parse access-control-view "
220 "address %s %s", acl->str, acl->str2);
222 v = views_find_view(views, acl->str2, 0);
225 "access-control-view: %s %s",
226 acl->str, acl->str2);
228 lock_rw_unlock(&v->lock);
232 for(sb=cfg->acl_tags; sb; sb = sb->next) {
233 if(!netblockstrtoaddr(sb->str, UNBOUND_DNS_PORT, &a, &alen,
235 fatal_exit("cannot parse access-control-tags "
236 "address %s", sb->str);
241 for(s3=cfg->acl_tag_actions; s3; s3 = s3->next) {
243 if(!netblockstrtoaddr(s3->str, UNBOUND_DNS_PORT, &a, &alen,
245 fatal_exit("cannot parse access-control-tag-actions "
246 "address %s %s %s",
247 s3->str, s3->str2, s3->str3);
249 if(find_tag_id(cfg, s3->str2) == -1) {
250 fatal_exit("cannot parse tag %s (define-tag it), "
251 "for access-control-tag-actions: %s %s %s",
252 s3->str2, s3->str, s3->str2, s3->str3);
254 if(!local_zone_str2type(s3->str3, &t)) {
256 " for access-control-tag-actions: %s %s %s",
257 s3->str3, s3->str, s3->str2, s3->str3);
262 for(s3=cfg->acl_tag_datas; s3; s3 = s3->next) {
267 if(!netblockstrtoaddr(s3->str, UNBOUND_DNS_PORT, &a, &alen,
269 fatal_exit("cannot parse access-control-tag-datas address %s %s '%s'",
270 s3->str, s3->str2, s3->str3);
272 if(find_tag_id(cfg, s3->str2) == -1) {
273 fatal_exit("cannot parse tag %s (define-tag it), "
274 "for access-control-tag-datas: %s %s '%s'",
275 s3->str2, s3->str, s3->str2, s3->str3);
279 snprintf(buf, sizeof(buf), "%s %s", ".", s3->str3);
283 fatal_exit("cannot parse rr data [char %d] parse error %s, for access-control-tag-datas: %s %s '%s'",
284 (int)LDNS_WIREPARSE_OFFSET(res)-2,
286 s3->str, s3->str2, s3->str3);
291 /** check view and response-ip configuration */
307 fatal_exit("Could not setup per-view respip sets");
321 for(s=list; s; s=s->next) {
322 for(h=s->hosts; h; h=h->next) {
323 if(extstrtoaddr(h->str, &a, &alen, UNBOUND_DNS_PORT)) {
324 fprintf(stderr, "unbound-checkconf: warning:"
325 " %s %s: \"%s\" is an IP%s address, "
328 s->name, typ, h->str,
346 snprintf(portbuf, sizeof(portbuf), "%d", cfg->port);
348 if(cfg->num_ifs != 0) {
349 resif = (char***)calloc(cfg->num_ifs, sizeof(char**));
351 num_resif = (int*)calloc(cfg->num_ifs, sizeof(int));
354 for(i=0; i<cfg->num_ifs; i++) {
357 if(strcmp(cfg->ifs[i], cfg->ifs[i2]) == 0) {
360 cfg->ifs[i]);
363 if(!resolve_interface_names(&cfg->ifs[i], 1, NULL, &resif[i],
366 cfg->ifs[i]);
369 if(if_is_pp2(resif[i][0], portbuf, cfg->proxy_protocol_port)) {
371 cfg->dnscrypt_port)) {
375 cfg->https_port)) {
382 if(!extstrtoaddr(resif[i][j], &a, &alen, cfg->port)) {
383 if(strcmp(cfg->ifs[i], resif[i][j]) != 0)
384 fatal_exit("cannot parse interface address '%s' from the interface specified as '%s'",
385 resif[i][j], cfg->ifs[i]);
388 cfg->ifs[i]);
395 if(strcmp(cfg->ifs[i], resif[i][j]) != 0)
396 snprintf(info1, sizeof(info1), "address %s from interface: %s", resif[i][j], cfg->ifs[i]);
397 else snprintf(info1, sizeof(info1), "interface: %s", cfg->ifs[i]);
398 if(strcmp(cfg->ifs[i2], resif[i2][j2]) != 0)
399 snprintf(info2, sizeof(info2), "address %s from interface: %s", resif[i2][j2], cfg->ifs[i2]);
400 else snprintf(info2, sizeof(info2), "interface: %s", cfg->ifs[i2]);
408 for(i=0; i<cfg->num_ifs; i++) {
414 for(i=0; i<cfg->num_out_ifs; i++) {
415 if(!ipstrtoaddr(cfg->out_ifs[i], UNBOUND_DNS_PORT, &a, &alen) &&
416 !netblockstrtoaddr(cfg->out_ifs[i], UNBOUND_DNS_PORT, &a, &alen, &d)) {
417 fatal_exit("cannot parse outgoing-interface "
418 "specified as '%s'", cfg->out_ifs[i]);
420 for(j=0; j<cfg->num_out_ifs; j++) {
421 if(i!=j && strcmp(cfg->out_ifs[i], cfg->out_ifs[j])==0)
422 fatal_exit("outgoing-interface: %s present "
424 cfg->out_ifs[i]);
429 /** check interface-automatic-ports */
444 fatal_exit("interface-automatic-ports: port out of range at position %d in '%s'", (int)(now-ifautomaticports)+1, ifautomaticports);
446 fatal_exit("interface-automatic-ports: parse error at position %d in '%s'", (int)(now-ifautomaticports)+1, ifautomaticports);
459 for(acl=cfg->acls; acl; acl = acl->next) {
460 if(!netblockstrtoaddr(acl->str, UNBOUND_DNS_PORT, &a, &alen,
462 fatal_exit("cannot parse access control address %s %s",
463 acl->str, acl->str2);
476 for(tcl=cfg->tcp_connection_limits; tcl; tcl = tcl->next) {
477 if(!netblockstrtoaddr(tcl->str, UNBOUND_DNS_PORT, &a, &alen,
479 fatal_exit("cannot parse tcp connection limit address %s %s",
480 tcl->str, tcl->str2);
566 for(p=list; p; p=p->next) {
567 check_chroot_string(desc, &p->str, chrootdir, cfg);
577 for(p=list; p; p=p->next) {
579 if(strchr(p->str, '*') || strchr(p->str, '[') ||
580 strchr(p->str, '?') || strchr(p->str, '{') ||
581 strchr(p->str, '~')) {
582 char* s = p->str;
584 p->str = fname_after_chroot(p->str, cfg, 1);
588 check_chroot_string(desc, &p->str, chrootdir, cfg);
629 n[sizeof(n)-1]=0;
630 for(j=0; j<sizeof(n)-1; j++) {
648 warn_hosts("stub-host", cfg->stubs);
649 warn_hosts("forward-host", cfg->forwards);
651 ifautomaticportschecks(cfg->if_automatic_ports);
655 if(cfg->verbosity < 0)
657 if(cfg->num_threads <= 0 || cfg->num_threads > 10000)
659 if(!cfg->do_ip4 && !cfg->do_ip6)
661 if(!cfg->do_ip4 && cfg->prefer_ip4)
663 if(!cfg->do_ip6 && cfg->prefer_ip6)
665 if(!cfg->do_udp && !cfg->do_tcp)
667 if(cfg->edns_buffer_size > cfg->msg_buffer_size)
668 fatal_exit("edns-buffer-size larger than msg-buffer-size, "
673 if(cfg->chrootdir && cfg->chrootdir[0] &&
674 cfg->chrootdir[strlen(cfg->chrootdir)-1] == '/')
676 cfg->chrootdir);
677 if(cfg->chrootdir && cfg->chrootdir[0] &&
678 !is_dir(cfg->chrootdir)) {
681 if(cfg->directory && cfg->directory[0]) {
682 char* ad = fname_after_chroot(cfg->directory, cfg, 0);
687 if( (cfg->chrootdir && cfg->chrootdir[0]) ||
688 (cfg->directory && cfg->directory[0])) {
689 if(cfg->pidfile && cfg->pidfile[0]) {
690 char* ad = (cfg->pidfile[0]=='/')?strdup(cfg->pidfile):
691 fname_after_chroot(cfg->pidfile, cfg, 1);
692 char* bd = basedir(ad);
693 if(bd && !is_dir(bd))
697 if(cfg->logfile && cfg->logfile[0]) {
698 char* ad = fname_after_chroot(cfg->logfile, cfg, 1);
699 char* bd = basedir(ad);
700 if(bd && !is_dir(bd))
706 check_chroot_filelist("file with root-hints",
707 cfg->root_hints, cfg->chrootdir, cfg);
708 check_chroot_filelist("trust-anchor-file",
709 cfg->trust_anchor_file_list, cfg->chrootdir, cfg);
710 check_chroot_filelist("auto-trust-anchor-file",
711 cfg->auto_trust_anchor_file_list, cfg->chrootdir, cfg);
712 check_chroot_filelist_wild("trusted-keys-file",
713 cfg->trusted_keys_file_list, cfg->chrootdir, cfg);
714 if(cfg->disable_edns_do && strstr(cfg->module_conf, "validator")
715 && (cfg->trust_anchor_file_list
716 || cfg->trust_anchor_list
717 || cfg->auto_trust_anchor_file_list
718 || cfg->trusted_keys_file_list)) {
720 if(cfg->auto_trust_anchor_file_list)
721 key = cfg->auto_trust_anchor_file_list->str;
722 if(!key && cfg->trust_anchor_file_list)
723 key = cfg->trust_anchor_file_list->str;
724 if(!key && cfg->trust_anchor_list)
725 key = cfg->trust_anchor_list->str;
726 if(!key && cfg->trusted_keys_file_list)
727 key = cfg->trusted_keys_file_list->str;
729 fatal_exit("disable-edns-do does not allow DNSSEC to work, but the validator module uses a trust anchor %s, turn off disable-edns-do or disable validation", key);
732 if(cfg->ipsecmod_enabled && strstr(cfg->module_conf, "ipsecmod")) {
734 check_chroot_string("ipsecmod-hook", &cfg->ipsecmod_hook,
735 cfg->chrootdir, cfg);
739 free(cfg->chrootdir);
740 cfg->chrootdir = NULL;
743 check_modules_exist(cfg->module_conf);
746 if(strcmp(cfg->module_conf, "iterator") != 0
747 && strcmp(cfg->module_conf, "validator iterator") != 0
748 && strcmp(cfg->module_conf, "dns64 validator iterator") != 0
749 && strcmp(cfg->module_conf, "dns64 iterator") != 0
750 && strcmp(cfg->module_conf, "respip iterator") != 0
751 && strcmp(cfg->module_conf, "respip validator iterator") != 0
752 && strcmp(cfg->module_conf, "respip dns64 validator iterator") != 0
753 && strcmp(cfg->module_conf, "respip dns64 iterator") != 0
755 && strcmp(cfg->module_conf, "python iterator") != 0
756 && strcmp(cfg->module_conf, "python respip iterator") != 0
757 && strcmp(cfg->module_conf, "python validator iterator") != 0
758 && strcmp(cfg->module_conf, "python respip validator iterator") != 0
759 && strcmp(cfg->module_conf, "validator python iterator") != 0
760 && strcmp(cfg->module_conf, "dns64 python iterator") != 0
761 && strcmp(cfg->module_conf, "dns64 python validator iterator") != 0
762 && strcmp(cfg->module_conf, "dns64 validator python iterator") != 0
763 && strcmp(cfg->module_conf, "python dns64 iterator") != 0
764 && strcmp(cfg->module_conf, "python dns64 validator iterator") != 0
767 && strcmp(cfg->module_conf, "dynlib iterator") != 0
768 && strcmp(cfg->module_conf, "dynlib dynlib iterator") != 0
769 && strcmp(cfg->module_conf, "dynlib dynlib dynlib iterator") != 0
770 && strcmp(cfg->module_conf, "python dynlib iterator") != 0
771 && strcmp(cfg->module_conf, "python dynlib dynlib iterator") != 0
772 && strcmp(cfg->module_conf, "python dynlib dynlib dynlib iterator") != 0
773 && strcmp(cfg->module_conf, "dynlib respip iterator") != 0
774 && strcmp(cfg->module_conf, "dynlib validator iterator") != 0
775 && strcmp(cfg->module_conf, "dynlib dynlib validator iterator") != 0
776 && strcmp(cfg->module_conf, "dynlib dynlib dynlib validator iterator") != 0
777 && strcmp(cfg->module_conf, "python dynlib validator iterator") != 0
778 && strcmp(cfg->module_conf, "python dynlib dynlib validator iterator") != 0
779 && strcmp(cfg->module_conf, "python dynlib dynlib dynlib validator iterator") != 0
780 && strcmp(cfg->module_conf, "dynlib respip validator iterator") != 0
781 && strcmp(cfg->module_conf, "validator dynlib iterator") != 0
782 && strcmp(cfg->module_conf, "dns64 dynlib iterator") != 0
783 && strcmp(cfg->module_conf, "dns64 dynlib validator iterator") != 0
784 && strcmp(cfg->module_conf, "dns64 validator dynlib iterator") != 0
785 && strcmp(cfg->module_conf, "dynlib dns64 iterator") != 0
786 && strcmp(cfg->module_conf, "dynlib dns64 validator iterator") != 0
787 && strcmp(cfg->module_conf, "dynlib dns64 cachedb iterator") != 0
788 && strcmp(cfg->module_conf, "dynlib dns64 validator cachedb iterator") != 0
789 && strcmp(cfg->module_conf, "dns64 dynlib cachedb iterator") != 0
790 && strcmp(cfg->module_conf, "dns64 dynlib validator cachedb iterator") != 0
791 && strcmp(cfg->module_conf, "dynlib cachedb iterator") != 0
792 && strcmp(cfg->module_conf, "dynlib respip cachedb iterator") != 0
793 && strcmp(cfg->module_conf, "dynlib validator cachedb iterator") != 0
794 && strcmp(cfg->module_conf, "dynlib respip validator cachedb iterator") != 0
795 && strcmp(cfg->module_conf, "cachedb dynlib iterator") != 0
796 && strcmp(cfg->module_conf, "respip cachedb dynlib iterator") != 0
797 && strcmp(cfg->module_conf, "validator cachedb dynlib iterator") != 0
798 && strcmp(cfg->module_conf, "respip validator cachedb dynlib iterator") != 0
799 && strcmp(cfg->module_conf, "validator dynlib cachedb iterator") != 0
800 && strcmp(cfg->module_conf, "respip validator dynlib cachedb iterator") != 0
801 && strcmp(cfg->module_conf, "dynlib subnetcache iterator") != 0
802 && strcmp(cfg->module_conf, "dynlib respip subnetcache iterator") != 0
803 && strcmp(cfg->module_conf, "subnetcache dynlib iterator") != 0
804 && strcmp(cfg->module_conf, "respip subnetcache dynlib iterator") != 0
805 && strcmp(cfg->module_conf, "dynlib subnetcache validator iterator") != 0
806 && strcmp(cfg->module_conf, "dynlib respip subnetcache validator iterator") != 0
807 && strcmp(cfg->module_conf, "subnetcache dynlib validator iterator") != 0
808 && strcmp(cfg->module_conf, "respip subnetcache dynlib validator iterator") != 0
809 && strcmp(cfg->module_conf, "subnetcache validator dynlib iterator") != 0
810 && strcmp(cfg->module_conf, "respip subnetcache validator dynlib iterator") != 0
811 && strcmp(cfg->module_conf, "dynlib ipsecmod iterator") != 0
812 && strcmp(cfg->module_conf, "dynlib ipsecmod respip iterator") != 0
813 && strcmp(cfg->module_conf, "ipsecmod dynlib iterator") != 0
814 && strcmp(cfg->module_conf, "ipsecmod dynlib respip iterator") != 0
815 && strcmp(cfg->module_conf, "ipsecmod validator iterator") != 0
816 && strcmp(cfg->module_conf, "ipsecmod respip validator iterator") != 0
817 && strcmp(cfg->module_conf, "dynlib ipsecmod validator iterator") != 0
818 && strcmp(cfg->module_conf, "dynlib ipsecmod respip validator iterator") != 0
819 && strcmp(cfg->module_conf, "ipsecmod dynlib validator iterator") != 0
820 && strcmp(cfg->module_conf, "ipsecmod dynlib respip validator iterator") != 0
821 && strcmp(cfg->module_conf, "ipsecmod validator dynlib iterator") != 0
822 && strcmp(cfg->module_conf, "ipsecmod respip validator dynlib iterator") != 0
825 && strcmp(cfg->module_conf, "validator cachedb iterator") != 0
826 && strcmp(cfg->module_conf, "respip validator cachedb iterator") != 0
827 && strcmp(cfg->module_conf, "cachedb iterator") != 0
828 && strcmp(cfg->module_conf, "respip cachedb iterator") != 0
829 && strcmp(cfg->module_conf, "dns64 validator cachedb iterator") != 0
830 && strcmp(cfg->module_conf, "dns64 cachedb iterator") != 0
833 && strcmp(cfg->module_conf, "python dns64 cachedb iterator") != 0
834 && strcmp(cfg->module_conf, "python dns64 validator cachedb iterator") != 0
835 && strcmp(cfg->module_conf, "dns64 python cachedb iterator") != 0
836 && strcmp(cfg->module_conf, "dns64 python validator cachedb iterator") != 0
837 && strcmp(cfg->module_conf, "python cachedb iterator") != 0
838 && strcmp(cfg->module_conf, "python respip cachedb iterator") != 0
839 && strcmp(cfg->module_conf, "python validator cachedb iterator") != 0
840 && strcmp(cfg->module_conf, "python respip validator cachedb iterator") != 0
841 && strcmp(cfg->module_conf, "cachedb python iterator") != 0
842 && strcmp(cfg->module_conf, "respip cachedb python iterator") != 0
843 && strcmp(cfg->module_conf, "validator cachedb python iterator") != 0
844 && strcmp(cfg->module_conf, "respip validator cachedb python iterator") != 0
845 && strcmp(cfg->module_conf, "validator python cachedb iterator") != 0
846 && strcmp(cfg->module_conf, "respip validator python cachedb iterator") != 0
849 && strcmp(cfg->module_conf, "respip subnetcache validator cachedb iterator") != 0
850 && strcmp(cfg->module_conf, "subnetcache validator cachedb iterator") != 0
853 && strcmp(cfg->module_conf, "subnetcache iterator") != 0
854 && strcmp(cfg->module_conf, "respip subnetcache iterator") != 0
855 && strcmp(cfg->module_conf, "subnetcache validator iterator") != 0
856 && strcmp(cfg->module_conf, "respip subnetcache validator iterator") != 0
857 && strcmp(cfg->module_conf, "dns64 subnetcache iterator") != 0
858 && strcmp(cfg->module_conf, "dns64 subnetcache validator iterator") != 0
859 && strcmp(cfg->module_conf, "dns64 subnetcache respip iterator") != 0
860 && strcmp(cfg->module_conf, "dns64 subnetcache respip validator iterator") != 0
863 && strcmp(cfg->module_conf, "python subnetcache iterator") != 0
864 && strcmp(cfg->module_conf, "python respip subnetcache iterator") != 0
865 && strcmp(cfg->module_conf, "subnetcache python iterator") != 0
866 && strcmp(cfg->module_conf, "respip subnetcache python iterator") != 0
867 && strcmp(cfg->module_conf, "python subnetcache validator iterator") != 0
868 && strcmp(cfg->module_conf, "python respip subnetcache validator iterator") != 0
869 && strcmp(cfg->module_conf, "subnetcache python validator iterator") != 0
870 && strcmp(cfg->module_conf, "respip subnetcache python validator iterator") != 0
871 && strcmp(cfg->module_conf, "subnetcache validator python iterator") != 0
872 && strcmp(cfg->module_conf, "respip subnetcache validator python iterator") != 0
875 && strcmp(cfg->module_conf, "ipsecmod iterator") != 0
876 && strcmp(cfg->module_conf, "ipsecmod respip iterator") != 0
877 && strcmp(cfg->module_conf, "ipsecmod validator iterator") != 0
878 && strcmp(cfg->module_conf, "ipsecmod respip validator iterator") != 0
881 && strcmp(cfg->module_conf, "python ipsecmod iterator") != 0
882 && strcmp(cfg->module_conf, "python ipsecmod respip iterator") != 0
883 && strcmp(cfg->module_conf, "ipsecmod python iterator") != 0
884 && strcmp(cfg->module_conf, "ipsecmod python respip iterator") != 0
885 && strcmp(cfg->module_conf, "ipsecmod validator iterator") != 0
886 && strcmp(cfg->module_conf, "ipsecmod respip validator iterator") != 0
887 && strcmp(cfg->module_conf, "python ipsecmod validator iterator") != 0
888 && strcmp(cfg->module_conf, "python ipsecmod respip validator iterator") != 0
889 && strcmp(cfg->module_conf, "ipsecmod python validator iterator") != 0
890 && strcmp(cfg->module_conf, "ipsecmod python respip validator iterator") != 0
891 && strcmp(cfg->module_conf, "ipsecmod validator python iterator") != 0
892 && strcmp(cfg->module_conf, "ipsecmod respip validator python iterator") != 0
895 && strcmp(cfg->module_conf, "validator ipset iterator") != 0
896 && strcmp(cfg->module_conf, "validator ipset respip iterator") != 0
897 && strcmp(cfg->module_conf, "ipset iterator") != 0
898 && strcmp(cfg->module_conf, "ipset respip iterator") != 0
902 cfg->module_conf);
906 if(cfg->username && cfg->username[0]) {
907 if(getpwnam(cfg->username) == NULL)
908 fatal_exit("user '%s' does not exist.", cfg->username);
914 if(cfg->remote_control_enable && options_remote_is_address(cfg)
915 && cfg->control_use_cert) {
916 check_chroot_string("server-key-file", &cfg->server_key_file,
917 cfg->chrootdir, cfg);
918 check_chroot_string("server-cert-file", &cfg->server_cert_file,
919 cfg->chrootdir, cfg);
920 if(!is_file(cfg->control_key_file))
921 fatal_exit("control-key-file: \"%s\" does not exist",
922 cfg->control_key_file);
923 if(!is_file(cfg->control_cert_file))
924 fatal_exit("control-cert-file: \"%s\" does not exist",
925 cfg->control_cert_file);
988 if(oldwd[0] && chdir(oldwd) == -1)
999 if(strstr(cfg->module_conf, "python"))
1005 if(!quiet) { printf("unbound-checkconf: no errors in %s\n", cfgfile); }
1024 log_ident_set("unbound-checkconf");
1032 while( (c=getopt(argc, argv, "fhqo:")) != -1) {
1049 argc -= optind;