1*00b67f09SDavid van Moolenbroek<!-- 2*00b67f09SDavid van Moolenbroek - Copyright (C) 2004-2007, 2009-2014 Internet Systems Consortium, Inc. ("ISC") 3*00b67f09SDavid van Moolenbroek - Copyright (C) 2000-2002 Internet Software Consortium. 4*00b67f09SDavid van Moolenbroek - 5*00b67f09SDavid van Moolenbroek - Permission to use, copy, modify, and/or distribute this software for any 6*00b67f09SDavid van Moolenbroek - purpose with or without fee is hereby granted, provided that the above 7*00b67f09SDavid van Moolenbroek - copyright notice and this permission notice appear in all copies. 8*00b67f09SDavid van Moolenbroek - 9*00b67f09SDavid van Moolenbroek - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 10*00b67f09SDavid van Moolenbroek - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 11*00b67f09SDavid van Moolenbroek - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 12*00b67f09SDavid van Moolenbroek - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 13*00b67f09SDavid van Moolenbroek - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 14*00b67f09SDavid van Moolenbroek - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 15*00b67f09SDavid van Moolenbroek - PERFORMANCE OF THIS SOFTWARE. 16*00b67f09SDavid van Moolenbroek--> 17*00b67f09SDavid van Moolenbroek<!-- Id --> 18*00b67f09SDavid van Moolenbroek<html> 19*00b67f09SDavid van Moolenbroek<head> 20*00b67f09SDavid van Moolenbroek<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> 21*00b67f09SDavid van Moolenbroek<title>named-checkzone</title> 22*00b67f09SDavid van Moolenbroek<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> 23*00b67f09SDavid van Moolenbroek</head> 24*00b67f09SDavid van Moolenbroek<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"> 25*00b67f09SDavid van Moolenbroek<a name="man.named-checkzone"></a><div class="titlepage"></div> 26*00b67f09SDavid van Moolenbroek<div class="refnamediv"> 27*00b67f09SDavid van Moolenbroek<h2>Name</h2> 28*00b67f09SDavid van Moolenbroek<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p> 29*00b67f09SDavid van Moolenbroek</div> 30*00b67f09SDavid van Moolenbroek<div class="refsynopsisdiv"> 31*00b67f09SDavid van Moolenbroek<h2>Synopsis</h2> 32*00b67f09SDavid van Moolenbroek<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-h</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-J <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-l <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div> 33*00b67f09SDavid van Moolenbroek<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-J <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-l <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div> 34*00b67f09SDavid van Moolenbroek</div> 35*00b67f09SDavid van Moolenbroek<div class="refsect1" lang="en"> 36*00b67f09SDavid van Moolenbroek<a name="id2543784"></a><h2>DESCRIPTION</h2> 37*00b67f09SDavid van Moolenbroek<p><span><strong class="command">named-checkzone</strong></span> 38*00b67f09SDavid van Moolenbroek checks the syntax and integrity of a zone file. It performs the 39*00b67f09SDavid van Moolenbroek same checks as <span><strong class="command">named</strong></span> does when loading a 40*00b67f09SDavid van Moolenbroek zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for 41*00b67f09SDavid van Moolenbroek checking zone files before configuring them into a name server. 42*00b67f09SDavid van Moolenbroek </p> 43*00b67f09SDavid van Moolenbroek<p> 44*00b67f09SDavid van Moolenbroek <span><strong class="command">named-compilezone</strong></span> is similar to 45*00b67f09SDavid van Moolenbroek <span><strong class="command">named-checkzone</strong></span>, but it always dumps the 46*00b67f09SDavid van Moolenbroek zone contents to a specified file in a specified format. 47*00b67f09SDavid van Moolenbroek Additionally, it applies stricter check levels by default, 48*00b67f09SDavid van Moolenbroek since the dump output will be used as an actual zone file 49*00b67f09SDavid van Moolenbroek loaded by <span><strong class="command">named</strong></span>. 50*00b67f09SDavid van Moolenbroek When manually specified otherwise, the check levels must at 51*00b67f09SDavid van Moolenbroek least be as strict as those specified in the 52*00b67f09SDavid van Moolenbroek <span><strong class="command">named</strong></span> configuration file. 53*00b67f09SDavid van Moolenbroek </p> 54*00b67f09SDavid van Moolenbroek</div> 55*00b67f09SDavid van Moolenbroek<div class="refsect1" lang="en"> 56*00b67f09SDavid van Moolenbroek<a name="id2543819"></a><h2>OPTIONS</h2> 57*00b67f09SDavid van Moolenbroek<div class="variablelist"><dl> 58*00b67f09SDavid van Moolenbroek<dt><span class="term">-d</span></dt> 59*00b67f09SDavid van Moolenbroek<dd><p> 60*00b67f09SDavid van Moolenbroek Enable debugging. 61*00b67f09SDavid van Moolenbroek </p></dd> 62*00b67f09SDavid van Moolenbroek<dt><span class="term">-h</span></dt> 63*00b67f09SDavid van Moolenbroek<dd><p> 64*00b67f09SDavid van Moolenbroek Print the usage summary and exit. 65*00b67f09SDavid van Moolenbroek </p></dd> 66*00b67f09SDavid van Moolenbroek<dt><span class="term">-q</span></dt> 67*00b67f09SDavid van Moolenbroek<dd><p> 68*00b67f09SDavid van Moolenbroek Quiet mode - exit code only. 69*00b67f09SDavid van Moolenbroek </p></dd> 70*00b67f09SDavid van Moolenbroek<dt><span class="term">-v</span></dt> 71*00b67f09SDavid van Moolenbroek<dd><p> 72*00b67f09SDavid van Moolenbroek Print the version of the <span><strong class="command">named-checkzone</strong></span> 73*00b67f09SDavid van Moolenbroek program and exit. 74*00b67f09SDavid van Moolenbroek </p></dd> 75*00b67f09SDavid van Moolenbroek<dt><span class="term">-j</span></dt> 76*00b67f09SDavid van Moolenbroek<dd><p> 77*00b67f09SDavid van Moolenbroek When loading a zone file, read the journal if it exists. 78*00b67f09SDavid van Moolenbroek The journal file name is assumed to be the zone file name 79*00b67f09SDavid van Moolenbroek appended with the string <code class="filename">.jnl</code>. 80*00b67f09SDavid van Moolenbroek </p></dd> 81*00b67f09SDavid van Moolenbroek<dt><span class="term">-J <em class="replaceable"><code>filename</code></em></span></dt> 82*00b67f09SDavid van Moolenbroek<dd><p> 83*00b67f09SDavid van Moolenbroek When loading the zone file read the journal from the given 84*00b67f09SDavid van Moolenbroek file, if it exists. (Implies -j.) 85*00b67f09SDavid van Moolenbroek </p></dd> 86*00b67f09SDavid van Moolenbroek<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt> 87*00b67f09SDavid van Moolenbroek<dd><p> 88*00b67f09SDavid van Moolenbroek Specify the class of the zone. If not specified, "IN" is assumed. 89*00b67f09SDavid van Moolenbroek </p></dd> 90*00b67f09SDavid van Moolenbroek<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt> 91*00b67f09SDavid van Moolenbroek<dd> 92*00b67f09SDavid van Moolenbroek<p> 93*00b67f09SDavid van Moolenbroek Perform post-load zone integrity checks. Possible modes are 94*00b67f09SDavid van Moolenbroek <span><strong class="command">"full"</strong></span> (default), 95*00b67f09SDavid van Moolenbroek <span><strong class="command">"full-sibling"</strong></span>, 96*00b67f09SDavid van Moolenbroek <span><strong class="command">"local"</strong></span>, 97*00b67f09SDavid van Moolenbroek <span><strong class="command">"local-sibling"</strong></span> and 98*00b67f09SDavid van Moolenbroek <span><strong class="command">"none"</strong></span>. 99*00b67f09SDavid van Moolenbroek </p> 100*00b67f09SDavid van Moolenbroek<p> 101*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"full"</strong></span> checks that MX records 102*00b67f09SDavid van Moolenbroek refer to A or AAAA record (both in-zone and out-of-zone 103*00b67f09SDavid van Moolenbroek hostnames). Mode <span><strong class="command">"local"</strong></span> only 104*00b67f09SDavid van Moolenbroek checks MX records which refer to in-zone hostnames. 105*00b67f09SDavid van Moolenbroek </p> 106*00b67f09SDavid van Moolenbroek<p> 107*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"full"</strong></span> checks that SRV records 108*00b67f09SDavid van Moolenbroek refer to A or AAAA record (both in-zone and out-of-zone 109*00b67f09SDavid van Moolenbroek hostnames). Mode <span><strong class="command">"local"</strong></span> only 110*00b67f09SDavid van Moolenbroek checks SRV records which refer to in-zone hostnames. 111*00b67f09SDavid van Moolenbroek </p> 112*00b67f09SDavid van Moolenbroek<p> 113*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"full"</strong></span> checks that delegation NS 114*00b67f09SDavid van Moolenbroek records refer to A or AAAA record (both in-zone and out-of-zone 115*00b67f09SDavid van Moolenbroek hostnames). It also checks that glue address records 116*00b67f09SDavid van Moolenbroek in the zone match those advertised by the child. 117*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"local"</strong></span> only checks NS records which 118*00b67f09SDavid van Moolenbroek refer to in-zone hostnames or that some required glue exists, 119*00b67f09SDavid van Moolenbroek that is when the nameserver is in a child zone. 120*00b67f09SDavid van Moolenbroek </p> 121*00b67f09SDavid van Moolenbroek<p> 122*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"full-sibling"</strong></span> and 123*00b67f09SDavid van Moolenbroek <span><strong class="command">"local-sibling"</strong></span> disable sibling glue 124*00b67f09SDavid van Moolenbroek checks but are otherwise the same as <span><strong class="command">"full"</strong></span> 125*00b67f09SDavid van Moolenbroek and <span><strong class="command">"local"</strong></span> respectively. 126*00b67f09SDavid van Moolenbroek </p> 127*00b67f09SDavid van Moolenbroek<p> 128*00b67f09SDavid van Moolenbroek Mode <span><strong class="command">"none"</strong></span> disables the checks. 129*00b67f09SDavid van Moolenbroek </p> 130*00b67f09SDavid van Moolenbroek</dd> 131*00b67f09SDavid van Moolenbroek<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt> 132*00b67f09SDavid van Moolenbroek<dd><p> 133*00b67f09SDavid van Moolenbroek Specify the format of the zone file. 134*00b67f09SDavid van Moolenbroek Possible formats are <span><strong class="command">"text"</strong></span> (default), 135*00b67f09SDavid van Moolenbroek <span><strong class="command">"raw"</strong></span>, and <span><strong class="command">"map"</strong></span>. 136*00b67f09SDavid van Moolenbroek </p></dd> 137*00b67f09SDavid van Moolenbroek<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt> 138*00b67f09SDavid van Moolenbroek<dd> 139*00b67f09SDavid van Moolenbroek<p> 140*00b67f09SDavid van Moolenbroek Specify the format of the output file specified. 141*00b67f09SDavid van Moolenbroek For <span><strong class="command">named-checkzone</strong></span>, 142*00b67f09SDavid van Moolenbroek this does not cause any effects unless it dumps the zone 143*00b67f09SDavid van Moolenbroek contents. 144*00b67f09SDavid van Moolenbroek </p> 145*00b67f09SDavid van Moolenbroek<p> 146*00b67f09SDavid van Moolenbroek Possible formats are <span><strong class="command">"text"</strong></span> (default), 147*00b67f09SDavid van Moolenbroek which is the standard textual representation of the zone, 148*00b67f09SDavid van Moolenbroek and <span><strong class="command">"map"</strong></span>, <span><strong class="command">"raw"</strong></span>, 149*00b67f09SDavid van Moolenbroek and <span><strong class="command">"raw=N"</strong></span>, which store the zone in a 150*00b67f09SDavid van Moolenbroek binary format for rapid loading by <span><strong class="command">named</strong></span>. 151*00b67f09SDavid van Moolenbroek <span><strong class="command">"raw=N"</strong></span> specifies the format version of 152*00b67f09SDavid van Moolenbroek the raw zone file: if N is 0, the raw file can be read by 153*00b67f09SDavid van Moolenbroek any version of <span><strong class="command">named</strong></span>; if N is 1, the file 154*00b67f09SDavid van Moolenbroek can be read by release 9.9.0 or higher; the default is 1. 155*00b67f09SDavid van Moolenbroek </p> 156*00b67f09SDavid van Moolenbroek</dd> 157*00b67f09SDavid van Moolenbroek<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt> 158*00b67f09SDavid van Moolenbroek<dd><p> 159*00b67f09SDavid van Moolenbroek Perform <span><strong class="command">"check-names"</strong></span> checks with the 160*00b67f09SDavid van Moolenbroek specified failure mode. 161*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"fail"</strong></span> 162*00b67f09SDavid van Moolenbroek (default for <span><strong class="command">named-compilezone</strong></span>), 163*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> 164*00b67f09SDavid van Moolenbroek (default for <span><strong class="command">named-checkzone</strong></span>) and 165*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 166*00b67f09SDavid van Moolenbroek </p></dd> 167*00b67f09SDavid van Moolenbroek<dt><span class="term">-l <em class="replaceable"><code>ttl</code></em></span></dt> 168*00b67f09SDavid van Moolenbroek<dd><p> 169*00b67f09SDavid van Moolenbroek Sets a maximum permissible TTL for the input file. 170*00b67f09SDavid van Moolenbroek Any record with a TTL higher than this value will cause 171*00b67f09SDavid van Moolenbroek the zone to be rejected. This is similar to using the 172*00b67f09SDavid van Moolenbroek <span><strong class="command">max-zone-ttl</strong></span> option in 173*00b67f09SDavid van Moolenbroek <code class="filename">named.conf</code>. 174*00b67f09SDavid van Moolenbroek </p></dd> 175*00b67f09SDavid van Moolenbroek<dt><span class="term">-L <em class="replaceable"><code>serial</code></em></span></dt> 176*00b67f09SDavid van Moolenbroek<dd><p> 177*00b67f09SDavid van Moolenbroek When compiling a zone to "raw" or "map" format, set the 178*00b67f09SDavid van Moolenbroek "source serial" value in the header to the specified serial 179*00b67f09SDavid van Moolenbroek number. (This is expected to be used primarily for testing 180*00b67f09SDavid van Moolenbroek purposes.) 181*00b67f09SDavid van Moolenbroek </p></dd> 182*00b67f09SDavid van Moolenbroek<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt> 183*00b67f09SDavid van Moolenbroek<dd><p> 184*00b67f09SDavid van Moolenbroek Specify whether MX records should be checked to see if they 185*00b67f09SDavid van Moolenbroek are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>, 186*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> (default) and 187*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 188*00b67f09SDavid van Moolenbroek </p></dd> 189*00b67f09SDavid van Moolenbroek<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt> 190*00b67f09SDavid van Moolenbroek<dd><p> 191*00b67f09SDavid van Moolenbroek Check if a MX record refers to a CNAME. 192*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"fail"</strong></span>, 193*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> (default) and 194*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 195*00b67f09SDavid van Moolenbroek </p></dd> 196*00b67f09SDavid van Moolenbroek<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt> 197*00b67f09SDavid van Moolenbroek<dd><p> 198*00b67f09SDavid van Moolenbroek Specify whether NS records should be checked to see if they 199*00b67f09SDavid van Moolenbroek are addresses. 200*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"fail"</strong></span> 201*00b67f09SDavid van Moolenbroek (default for <span><strong class="command">named-compilezone</strong></span>), 202*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> 203*00b67f09SDavid van Moolenbroek (default for <span><strong class="command">named-checkzone</strong></span>) and 204*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 205*00b67f09SDavid van Moolenbroek </p></dd> 206*00b67f09SDavid van Moolenbroek<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt> 207*00b67f09SDavid van Moolenbroek<dd><p> 208*00b67f09SDavid van Moolenbroek Write zone output to <code class="filename">filename</code>. 209*00b67f09SDavid van Moolenbroek If <code class="filename">filename</code> is <code class="filename">-</code> then 210*00b67f09SDavid van Moolenbroek write to standard out. 211*00b67f09SDavid van Moolenbroek This is mandatory for <span><strong class="command">named-compilezone</strong></span>. 212*00b67f09SDavid van Moolenbroek </p></dd> 213*00b67f09SDavid van Moolenbroek<dt><span class="term">-r <em class="replaceable"><code>mode</code></em></span></dt> 214*00b67f09SDavid van Moolenbroek<dd><p> 215*00b67f09SDavid van Moolenbroek Check for records that are treated as different by DNSSEC but 216*00b67f09SDavid van Moolenbroek are semantically equal in plain DNS. 217*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"fail"</strong></span>, 218*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> (default) and 219*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 220*00b67f09SDavid van Moolenbroek </p></dd> 221*00b67f09SDavid van Moolenbroek<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt> 222*00b67f09SDavid van Moolenbroek<dd><p> 223*00b67f09SDavid van Moolenbroek Specify the style of the dumped zone file. 224*00b67f09SDavid van Moolenbroek Possible styles are <span><strong class="command">"full"</strong></span> (default) 225*00b67f09SDavid van Moolenbroek and <span><strong class="command">"relative"</strong></span>. 226*00b67f09SDavid van Moolenbroek The full format is most suitable for processing 227*00b67f09SDavid van Moolenbroek automatically by a separate script. 228*00b67f09SDavid van Moolenbroek On the other hand, the relative format is more 229*00b67f09SDavid van Moolenbroek human-readable and is thus suitable for editing by hand. 230*00b67f09SDavid van Moolenbroek For <span><strong class="command">named-checkzone</strong></span> 231*00b67f09SDavid van Moolenbroek this does not cause any effects unless it dumps the zone 232*00b67f09SDavid van Moolenbroek contents. 233*00b67f09SDavid van Moolenbroek It also does not have any meaning if the output format 234*00b67f09SDavid van Moolenbroek is not text. 235*00b67f09SDavid van Moolenbroek </p></dd> 236*00b67f09SDavid van Moolenbroek<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt> 237*00b67f09SDavid van Moolenbroek<dd><p> 238*00b67f09SDavid van Moolenbroek Check if a SRV record refers to a CNAME. 239*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"fail"</strong></span>, 240*00b67f09SDavid van Moolenbroek <span><strong class="command">"warn"</strong></span> (default) and 241*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 242*00b67f09SDavid van Moolenbroek </p></dd> 243*00b67f09SDavid van Moolenbroek<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt> 244*00b67f09SDavid van Moolenbroek<dd><p> 245*00b67f09SDavid van Moolenbroek Chroot to <code class="filename">directory</code> so that 246*00b67f09SDavid van Moolenbroek include 247*00b67f09SDavid van Moolenbroek directives in the configuration file are processed as if 248*00b67f09SDavid van Moolenbroek run by a similarly chrooted named. 249*00b67f09SDavid van Moolenbroek </p></dd> 250*00b67f09SDavid van Moolenbroek<dt><span class="term">-T <em class="replaceable"><code>mode</code></em></span></dt> 251*00b67f09SDavid van Moolenbroek<dd><p> 252*00b67f09SDavid van Moolenbroek Check if Sender Policy Framework (SPF) records exist 253*00b67f09SDavid van Moolenbroek and issues a warning if an SPF-formatted TXT record is 254*00b67f09SDavid van Moolenbroek not also present. Possible modes are <span><strong class="command">"warn"</strong></span> 255*00b67f09SDavid van Moolenbroek (default), <span><strong class="command">"ignore"</strong></span>. 256*00b67f09SDavid van Moolenbroek </p></dd> 257*00b67f09SDavid van Moolenbroek<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt> 258*00b67f09SDavid van Moolenbroek<dd><p> 259*00b67f09SDavid van Moolenbroek chdir to <code class="filename">directory</code> so that 260*00b67f09SDavid van Moolenbroek relative 261*00b67f09SDavid van Moolenbroek filenames in master file $INCLUDE directives work. This 262*00b67f09SDavid van Moolenbroek is similar to the directory clause in 263*00b67f09SDavid van Moolenbroek <code class="filename">named.conf</code>. 264*00b67f09SDavid van Moolenbroek </p></dd> 265*00b67f09SDavid van Moolenbroek<dt><span class="term">-D</span></dt> 266*00b67f09SDavid van Moolenbroek<dd><p> 267*00b67f09SDavid van Moolenbroek Dump zone file in canonical format. 268*00b67f09SDavid van Moolenbroek This is always enabled for <span><strong class="command">named-compilezone</strong></span>. 269*00b67f09SDavid van Moolenbroek </p></dd> 270*00b67f09SDavid van Moolenbroek<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt> 271*00b67f09SDavid van Moolenbroek<dd><p> 272*00b67f09SDavid van Moolenbroek Specify whether to check for non-terminal wildcards. 273*00b67f09SDavid van Moolenbroek Non-terminal wildcards are almost always the result of a 274*00b67f09SDavid van Moolenbroek failure to understand the wildcard matching algorithm (RFC 1034). 275*00b67f09SDavid van Moolenbroek Possible modes are <span><strong class="command">"warn"</strong></span> (default) 276*00b67f09SDavid van Moolenbroek and 277*00b67f09SDavid van Moolenbroek <span><strong class="command">"ignore"</strong></span>. 278*00b67f09SDavid van Moolenbroek </p></dd> 279*00b67f09SDavid van Moolenbroek<dt><span class="term">zonename</span></dt> 280*00b67f09SDavid van Moolenbroek<dd><p> 281*00b67f09SDavid van Moolenbroek The domain name of the zone being checked. 282*00b67f09SDavid van Moolenbroek </p></dd> 283*00b67f09SDavid van Moolenbroek<dt><span class="term">filename</span></dt> 284*00b67f09SDavid van Moolenbroek<dd><p> 285*00b67f09SDavid van Moolenbroek The name of the zone file. 286*00b67f09SDavid van Moolenbroek </p></dd> 287*00b67f09SDavid van Moolenbroek</dl></div> 288*00b67f09SDavid van Moolenbroek</div> 289*00b67f09SDavid van Moolenbroek<div class="refsect1" lang="en"> 290*00b67f09SDavid van Moolenbroek<a name="id2544710"></a><h2>RETURN VALUES</h2> 291*00b67f09SDavid van Moolenbroek<p><span><strong class="command">named-checkzone</strong></span> 292*00b67f09SDavid van Moolenbroek returns an exit status of 1 if 293*00b67f09SDavid van Moolenbroek errors were detected and 0 otherwise. 294*00b67f09SDavid van Moolenbroek </p> 295*00b67f09SDavid van Moolenbroek</div> 296*00b67f09SDavid van Moolenbroek<div class="refsect1" lang="en"> 297*00b67f09SDavid van Moolenbroek<a name="id2544722"></a><h2>SEE ALSO</h2> 298*00b67f09SDavid van Moolenbroek<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, 299*00b67f09SDavid van Moolenbroek <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>, 300*00b67f09SDavid van Moolenbroek <em class="citetitle">RFC 1035</em>, 301*00b67f09SDavid van Moolenbroek <em class="citetitle">BIND 9 Administrator Reference Manual</em>. 302*00b67f09SDavid van Moolenbroek </p> 303*00b67f09SDavid van Moolenbroek</div> 304*00b67f09SDavid van Moolenbroek<div class="refsect1" lang="en"> 305*00b67f09SDavid van Moolenbroek<a name="id2544755"></a><h2>AUTHOR</h2> 306*00b67f09SDavid van Moolenbroek<p><span class="corpauthor">Internet Systems Consortium</span> 307*00b67f09SDavid van Moolenbroek </p> 308*00b67f09SDavid van Moolenbroek</div> 309*00b67f09SDavid van Moolenbroek</div></body> 310*00b67f09SDavid van Moolenbroek</html> 311