named-checkzone

, named-compilezone

- zone file validity checking or converting tool

Synopsis

named-checkzone [-Ddhjqv] [-c class] [-F format] [-f format]
     [-i mode] [-k mode] [-M mode] [-m mode] [-n mode]
     [-o filename] [-S mode] [-s style] [-t directory]
     [-W mode] [-w directory] zonename filename

named-compilezone [-Ddjqv] [-C mode] [-c class] [-F format]
     [-f format] [-i mode] [-k mode] [-m mode] [-n mode]
     [-o filename] [-s style] [-t directory]
     [-W mode] [-w directory] zonename filename

Description

The named-checkzone utility checks the syntax and integrity of a zone file. It performs the same checks as named(1M) does when loading a zone. The named-checkzone utility is useful for checking zone files before configuring them into a name server.

named-compilezone is similar to named-checkzone, differing in that it always dumps the zone contents to a specified file in a specified format. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by named(1M). Unless manually specified otherwise, the check levels must be at least as strict as those specified in the named configuration file.

Options

For either or both utilities, the following options are supported:

-c class

Specify the class of the zone. If not specified, “IN” is assumed.

-D

Dump zone file in canonical format.

-d

Enable debugging.

-F format

Specify the format of the output file specified. Possible formats are text (default) and raw. For named-checkzone, this does not cause any effects unless it dumps the zone contents.

-f format

Specify the format of the zone file. Possible formats are text (default) and raw.

-h

Display usage message for named-checkzone.

-i mode

Perform post-load zone integrity checks. Possible modes are full (default), full-sibling, local, local-sibling, and none.

Mode full checks that MX records refer to the A or AAAA record (both in-zone and out-of-zone hostnames). Mode local checks only MX records that refer to in-zone hostnames.

Mode full checks that SRV records refer to the A or AAAA record (both in-zone and out-of-zone hostnames). Mode local checks only SRV records that refer to in-zone hostnames.

Mode full checks that delegation NS records refer to A or AAAA record (both in-zone and out-of-zone hostnames). It also checks that glue address records in the zone match those advertised by the child. Mode local checks only NS records that refer to in-zone hostnames or check that some required glue exists, that is, when the nameserver is in a child zone.

Mode full-sibling and local-sibling disable sibling glue checks, but are otherwise the same as full and local, respectively.

Mode none disables the checks.

-k mode

Perform “check-name” checks with the specified failure mode. Possible modes are fail (default for named-compilezone), warn (default for named-checkzone) and ignore.

-j

Read the journal, if it exists, when loading the zone file.

-M mode

Check if an MX record refers to a CNAME. Possible modes are fail, warn (default) and ignore.

-m mode

Specify whether MX records should be checked to see if they are addresses. Possible modes are fail, warn (default) and ignore.

-n mode

Specify whether NS records should be checked to see if they are addresses. Possible modes are fail (default for named-compilezone), warn (default for named-checkzone) and ignore.

-o filename

Write zone output to filename. If filename is - (a hyphen), then write to standard out. The hyphen mandatory for named-compilezone

-q

Run in quiet mode, reporting only the exit status.

-S mode

Check if a SRV record refers to a CNAME. Possible modes are fail, warn (default) and ignore.

-s style

Specify the style of the dumped zone file. Possible styles are full (default) and relative. The full format is most suitable for processing automatically by a separate script. The relative format is more human-readable and is thus suitable for editing by hand. For named-checkzone this option does not cause any effects unless it dumps the zone contents. It also has no effect if the output format is not text.

-t directory

chroot to directory so that include directives in the configuration file are processed as if run by a similarly chrooted named.

-v

Print the version of the named-checkzone program and exit.

-W mode

Specify whether to check for non-terminal wildcards. Non-terminal wildcards are almost always the result of a failure to understand the wildcard matching algorithm (RFC 1034). Possible modes are warn (default) and ignore.

-w directory

chdir to directory so that relative filenames in master file $INCLUDE directives work. This is similar to the directory clause in named.conf.

Operands

The following operands are supported:

filename

The name of the zone file.

zonename

The domain name of the zone being checked.

Exit Status

0

No errors were detected.

1

An error was detected.

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

named(1M), named-checkconf(1M), attributes(5)

RFC 1035

See the BIND 9 Administrator's Reference Manual. As of the date of publication of this man page, this document is available at https://www.isc.org/software/bind/documentation.