ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Merge tag 'v9_11_22' into v9_11

Browse Source 
BIND 9.11.22
This commit is contained in:
Evan Hunt
2020-08-20 12:10:47 -07:00
parent 2c6693c73f 6a05a966f3
commit 15d57a425e
72 changed files with 3561 additions and 4247 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGES
+27 -8
View File
@@ -10,19 +10,38 @@
the view being deleted while nta tests are being
performed. [GL #2067]
--- 9.11.22 released ---
5481. [security] "update-policy" rules of type "subdomain" were
incorrectly treated as "zonesub" rules, which allowed
keys used in "subdomain" rules to update names outside
of the specified subdomains. The problem was fixed by
making sure "subdomain" rules are again processed as
described in the ARM. (CVE-2020-8624) [GL #2055]
5480. [security] When BIND 9 was compiled with native PKCS#11 support, it
was possible to trigger an assertion failure in code
determining the number of bits in the PKCS#11 RSA public
key with a specially crafted packet. (CVE-2020-8623)
[GL #2037]
5476. [security] It was possible to trigger an assertion failure when
verifying the response to a TSIG-signed request.
(CVE-2020-8622) [GL #2028]
5475. [bug] Wildcard RPZ passthru rules could incorrectly be
overridden by other rules that were loaded from RPZ
zones which appeared later in the "response-policy"
statement. This has been fixed. [GL #1619]
5474. [bug] dns_rdata_hip_next() failed to return ISC_R_NOMORE
when it should have. [GL !3880]
5466. [bug] Fix RPZ wildcard passthru ignored when a rejection
file would overwrite a passthru action matching some
rule in a previously loaded passthru rpz zone.
[GL #1619]
5465. [func] Fallback to built in trust-anchors, managed-keys, or
trusted-keys if the bindkeys-file (bind.keys) cannot
5465. [func] Added fallback to built-in trust-anchors, managed-keys,
or trusted-keys if the bindkeys-file (bind.keys) cannot
be parsed. [GL #1235]
5463. [bug] Address potential NULL pointer dereference on out of
5463. [bug] Address a potential NULL pointer dereference when out of
memory in dnstap.c. [GL #2010]
5462. [bug] Move LMDB locking from LMDB itself to named. [GL #1976]
README
+6
View File
@@ -342,6 +342,12 @@ BIND 9.11.21
BIND 9.11.21 is a maintenance release.
BIND 9.11.22
BIND 9.11.22 is a maintenance release, and also addresses the security
vulnerabilities disclosed in CVE-2020-8622, CVE-2020-8623, and
CVE-2020-8624.
Building BIND
Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
README.md
+6
View File
@@ -359,6 +359,12 @@ vulnerability disclosed in CVE-2020-8619.
BIND 9.11.21 is a maintenance release.
#### BIND 9.11.22
BIND 9.11.22 is a maintenance release, and also addresses the security
vulnerabilities disclosed in CVE-2020-8622, CVE-2020-8623, and
CVE-2020-8624.
### <a name="build"/> Building BIND
Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
bin/named/zoneconf.c
+2 -1
View File
@@ -239,7 +239,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
str = cfg_obj_asstring(matchtype);
CHECK(dns_ssu_mtypefromstring(str, &mtype));
if (mtype == dns_ssumatchtype_subdomain) {
if (mtype == dns_ssumatchtype_subdomain &&
strcasecmp(str, "zonesub") == 0) {
usezone = true;
}
bin/tests/system/nsupdate/ns1/named.conf.in
+12
View File
@@ -36,6 +36,16 @@ key altkey {
secret "1234abcd8765";
};
key restricted.example.nil {
algorithm hmac-md5;
secret "1234abcd8765";
};
key zonesub-key.example.nil {
algorithm hmac-md5;
secret "1234subk8765";
};
include "ddns.key";
zone "example.nil" {
@@ -44,7 +54,9 @@ zone "example.nil" {
check-integrity no;
check-mx ignore;
update-policy {
grant zonesub-key.example.nil zonesub TXT;
grant ddns-key.example.nil subdomain example.nil ANY;
grant restricted.example.nil subdomain restricted.example.nil ANY;
};
allow-transfer { any; };
};
bin/tests/system/nsupdate/tests.sh
+56 -4
View File
@@ -428,7 +428,7 @@ EOF
# this also proves that the server is still running.
$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec example.\
@10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
grep "ANSWER: 0" dig.out.ns3.$n > /dev/null || ret=1
grep "ANSWER: 0," dig.out.ns3.$n > /dev/null || ret=1
grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
[ $ret = 0 ] || { echo_i "failed"; status=1; }
@@ -443,7 +443,7 @@ EOF
$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
@10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1
grep "ANSWER: 1," dig.out.ns3.$n > /dev/null || ret=1
grep "3600.*NSEC3PARAM" dig.out.ns3.$n > /dev/null || ret=1
grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
[ $ret = 0 ] || { echo_i "failed"; status=1; }
@@ -460,7 +460,7 @@ EOF
_ret=1
for i in 0 1 2 3 4 5 6 7 8 9; do
$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then
if grep "ANSWER: 2," dig.out.ns3.$n > /dev/null; then
_ret=0
break
fi
@@ -485,7 +485,7 @@ EOF
_ret=1
for i in 0 1 2 3 4 5 6 7 8 9; do
$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then
if grep "ANSWER: 1," dig.out.ns3.$n > /dev/null; then
_ret=0
break
fi
@@ -631,6 +631,58 @@ then
echo_i "failed"; status=1
fi
n=`expr $n + 1`
ret=0
echo_i "check that 'update-policy subdomain' is properly enforced ($n)"
# "restricted.example.nil" matches "grant ... subdomain restricted.example.nil"
# and thus this UPDATE should succeed.
$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 || ret=1
server 10.53.0.1 ${PORT}
key restricted.example.nil 1234abcd8765
update add restricted.example.nil 0 IN TXT everywhere.
send
END
$DIG $DIGOPTS +tcp @10.53.0.1 restricted.example.nil TXT > dig.out.1.test$n || ret=1
grep "TXT.*everywhere" dig.out.1.test$n > /dev/null || ret=1
# "example.nil" does not match "grant ... subdomain restricted.example.nil" and
# thus this UPDATE should fail.
$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 && ret=1
server 10.53.0.1 ${PORT}
key restricted.example.nil 1234abcd8765
update add example.nil 0 IN TXT everywhere.
send
END
$DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1
grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1
[ $ret = 0 ] || { echo_i "failed"; status=1; }
n=`expr $n + 1`
ret=0
echo_i "check that 'update-policy zonesub' is properly enforced ($n)"
# grant zonesub-key.example.nil zonesub TXT;
# the A record update should be rejected as it is not in the type list
$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 && ret=1
server 10.53.0.1 ${PORT}
key zonesub-key.example.nil 1234subk8765
update add zonesub.example.nil 0 IN A 1.2.3.4
send
END
$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil A > dig.out.1.test$n || ret=1
grep "status: REFUSED" nsupdate.out1-$n > /dev/null || ret=1
grep "ANSWER: 0," dig.out.1.test$n > /dev/null || ret=1
# the TXT record update should be accepted as it is in the type list
$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 || ret=1
server 10.53.0.1 ${PORT}
key zonesub-key.example.nil 1234subk8765
update add zonesub.example.nil 0 IN TXT everywhere.
send
END
$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil TXT > dig.out.2.test$n || ret=1
grep "status: REFUSED" nsupdate.out2-$n > /dev/null && ret=1
grep "ANSWER: 1," dig.out.2.test$n > /dev/null || ret=1
grep "TXT.*everywhere" dig.out.2.test$n > /dev/null || ret=1
[ $ret = 0 ] || { echo_i "failed"; status=1; }
n=`expr $n + 1`
ret=0
echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)"
doc/arm/Bv9ARM.ch01.html
+64 -47
View File
@@ -247,9 +247,9 @@
<a name="dns_overview"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div>
<p>
The purpose of this document is to explain the installation
This document explains the installation
and upkeep of the <acronym class="acronym">BIND</acronym> (Berkeley Internet
Name Domain) software package, and we
Name Domain) software package. We
begin by reviewing the fundamentals of the Domain Name System
(<acronym class="acronym">DNS</acronym>) as they relate to <acronym class="acronym">BIND</acronym>.
</p>
@@ -308,7 +308,7 @@
<p>
For administrative purposes, the name space is partitioned into
areas called <span class="emphasis"><em>zones</em></span>, each starting at a node and
extending down to the leaf nodes or to nodes where other zones
extending down to the "leaf" nodes or to nodes where other zones
start.
The data for each zone is stored in a <span class="emphasis"><em>name server</em></span>, which answers queries about the zone using the
<span class="emphasis"><em>DNS protocol</em></span>.
@@ -368,7 +368,7 @@
<span class="emphasis"><em>terminal</em></span>, that is, has no
<span class="emphasis"><em>subdomains</em></span>. Every subdomain is a domain and
every domain except the root is also a subdomain. The terminology is
not intuitive and we suggest that you read RFCs 1033, 1034 and 1035
not intuitive and we suggest reading RFCs 1033, 1034, and 1035
to
gain a complete understanding of this difficult and subtle
topic.
@@ -377,12 +377,12 @@
<p>
Though <acronym class="acronym">BIND</acronym> is called a "domain name
server",
it deals primarily in terms of zones. The master and slave
it deals primarily in terms of zones. The "primary" and "secondary"
declarations in the <code class="filename">named.conf</code> file
specify
zones, not domains. When you ask some other site if it is willing to
be a slave server for your <span class="emphasis"><em>domain</em></span>, you are
actually asking for slave service for some collection of zones.
zones, not domains. When BIND asks some other site if it is willing to
be a secondary server for a <span class="emphasis"><em>domain</em></span>, it is
actually asking for secondary service for some collection of <span class="emphasis"><em>zones</em></span>.
</p>
</div>
@@ -408,12 +408,13 @@
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="primary_master"></a>The Primary Master</h4></div></div></div>
<a name="primary_master"></a>The Primary Server</h4></div></div></div>
<p>
The authoritative server where the master copy of the zone
The authoritative server where the main copy of the zone
data is maintained is called the
<span class="emphasis"><em>primary master</em></span> server, or simply the
<span class="emphasis"><em>primary</em></span> (or
<span class="command"><strong>master</strong></span>) server, or simply the
<span class="emphasis"><em>primary</em></span>. Typically it loads the zone
contents from some local file edited by humans or perhaps
generated mechanically from some other local file which is
@@ -423,7 +424,7 @@
</p>
<p>
In some cases, however, the master file may not be edited
In some cases, however, the zone file may not be edited
by humans at all, but may instead be the result of
<span class="emphasis"><em>dynamic update</em></span> operations.
</p>
@@ -431,22 +432,23 @@
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="slave_server"></a>Slave Servers</h4></div></div></div>
<a name="slave_server"></a>Secondary Servers</h4></div></div></div>
<p>
The other authoritative servers, the <span class="emphasis"><em>slave</em></span>
servers (also known as <span class="emphasis"><em>secondary</em></span> servers)
load the zone contents from another server using a replication
The other authoritative servers, called the
<span class="emphasis"><em>secondary</em></span>
(or <span class="command"><strong>slave</strong></span>) servers, load the zone
contents from another server using a replication
process known as a <span class="emphasis"><em>zone transfer</em></span>.
Typically the data are transferred directly from the primary
Typically the data is transferred directly from the primary
master, but it is also possible to transfer it from another
slave. In other words, a slave server may itself act as a
master to a subordinate slave server.
secondary. In other words, a secondary server may itself act as a
primary to a subordinate secondary server.
</p>
<p>
Periodically, the slave server must send a refresh query to
Periodically, the secondary server must send a refresh query to
determine whether the zone contents have been updated. This
is done by sending a query for the zone's SOA record and
is done by sending a query for the zone's Start of Authority (SOA) record and
checking whether the SERIAL field has been updated; if so,
a new transfer request is initiated. The timing of these
refresh queries is controlled by the SOA REFRESH and RETRY
@@ -459,8 +461,8 @@
<p>
If the zone data cannot be updated within the time specified
by the SOA EXPIRE option (up to a hard-coded maximum of
24 weeks) then the slave zone expires and will no longer
respond to queries.
24 weeks), the secondary zone expires and no longer
responds to queries.
</p>
</div>
@@ -469,15 +471,14 @@
<a name="stealth_server"></a>Stealth Servers</h4></div></div></div>
<p>
Usually all of the zone's authoritative servers are listed in
Usually, all of the zone's authoritative servers are listed in
NS records in the parent zone. These NS records constitute
a <span class="emphasis"><em>delegation</em></span> of the zone from the parent.
The authoritative servers are also listed in the zone file itself,
at the <span class="emphasis"><em>top level</em></span> or <span class="emphasis"><em>apex</em></span>
of the zone. You can list servers in the zone's top-level NS
records that are not in the parent's NS delegation, but you cannot
list servers in the parent's delegation that are not present at
the zone's top level.
of the zone. Servers that are not in the parent's NS delegation can be listed in the zone's top-level NS
records, but servers that are not present at
the zone's top level cannot be listed in the parent's delegation.
</p>
<p>
@@ -485,7 +486,7 @@
authoritative for a zone but is not listed in that zone's NS
records. Stealth servers can be used for keeping a local copy of
a
zone to speed up access to the zone's records or to make sure that
zone, to speed up access to the zone's records, or to make sure that
the
zone is available even if all the "official" servers for the zone
are
@@ -493,11 +494,10 @@
</p>
<p>
A configuration where the primary master server itself is a
A configuration where the primary server itself is a
stealth server is often referred to as a "hidden primary"
configuration. One use for this configuration is when the primary
master
is behind a firewall and therefore unable to communicate directly
is behind a firewall and is therefore unable to communicate directly
with the outside world.
</p>
@@ -534,7 +534,7 @@
<p>
The length of time for which a record may be retained in
the cache of a caching name server is controlled by the
Time To Live (TTL) field associated with each resource record.
Time-To-Live (TTL) field associated with each resource record.
</p>
<div class="section">
@@ -551,18 +551,35 @@
</p>
<p>
There may be one or more forwarders,
and they are queried in turn until the list is exhausted or an
answer
is found. Forwarders are typically used when you do not
wish all the servers at a given site to interact directly with the
rest of
the Internet servers. A typical scenario would involve a number
of internal <acronym class="acronym">DNS</acronym> servers and an
Internet firewall. Servers unable
to pass packets through the firewall would forward to the server
that can do it, and that server would query the Internet <acronym class="acronym">DNS</acronym> servers
on the internal server's behalf.
Forwarders are typically used when an administrator does not
wish for all the servers at a given site to interact
directly with the rest of the Internet. For example, a
common scenario is when multiple internal DNS servers are
behind an Internet firewall. Servers behind the firewall
forward their requests to the server with external access,
which queries Internet DNS servers on the internal servers'
behalf.
</p>
<p>
Another scenario (largely now superseded by Response Policy
Zones) is to send queries first to a custom server for RBL
processing before forwarding them to the wider Internet.
</p>
<p>
There may be one or more forwarders in a given setup. The
order in which the forwarders are listed in
<code class="filename">named.conf</code> does not determine the
sequence in which they are queried; rather,
<span class="command"><strong>named</strong></span> uses the response times from
previous queries to select the server that is likely to
respond the most quickly. A server that has not yet been
queried is given an initial small random response time to
ensure that it is tried at least once. Dynamic adjustment of
the recorded response times ensures that all forwarders are
queried, even those with slower response times. This
permits changes in behavior based on server responsiveness.
</p>
</div>
@@ -575,7 +592,7 @@
<p>
The <acronym class="acronym">BIND</acronym> name server can
simultaneously act as
a master for some zones, a slave for other zones, and as a caching
a primary for some zones, a secondary for other zones, and a caching
(recursive) server for a set of local clients.
</p>
@@ -616,6 +633,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch02.html
+25 -26
View File
@@ -39,7 +39,7 @@
<dt><span class="section"><a href="Bv9ARM.ch02.html#hw_req">Hardware requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#cpu_req">CPU Requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#mem_req">Memory Requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#intensive_env">Name Server Intensive Environment Issues</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#intensive_env">Name Server-Intensive Environment Issues</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#supported_os">Supported Operating Systems</a></span></dt>
</dl>
</div>
@@ -50,13 +50,13 @@
<p>
<acronym class="acronym">DNS</acronym> hardware requirements have
traditionally been quite modest.
For many installations, servers that have been pensioned off from
For many installations, servers that have been retired from
active duty have performed admirably as <acronym class="acronym">DNS</acronym> servers.
</p>
<p>
The DNSSEC features of <acronym class="acronym">BIND</acronym> 9
may prove to be quite
CPU intensive however, so organizations that make heavy use of these
However, the DNSSEC features of <acronym class="acronym">BIND</acronym> 9
may be quite
CPU-intensive, so organizations that make heavy use of these
features may wish to consider larger systems for these applications.
<acronym class="acronym">BIND</acronym> 9 is fully multithreaded, allowing
full utilization of
@@ -68,31 +68,31 @@
<a name="cpu_req"></a>CPU Requirements</h2></div></div></div>
<p>
CPU requirements for <acronym class="acronym">BIND</acronym> 9 range from
i486-class machines
for serving of static zones without caching, to enterprise-class
machines if you intend to process many dynamic updates and DNSSEC
signed zones, serving many thousands of queries per second.
i386-class machines,
for serving static zones without caching, to enterprise-class
machines to process many dynamic updates and DNSSEC-signed zones,
serving many thousands of queries per second.
</p>
</div>
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="mem_req"></a>Memory Requirements</h2></div></div></div>
<p>
The memory of the server has to be large enough to fit the
cache and zones loaded off disk. The <span class="command"><strong>max-cache-size</strong></span>
option can be used to limit the amount of memory used by the cache,
Server memory must be sufficient to hold both the
cache and the zones loaded from disk. The <span class="command"><strong>max-cache-size</strong></span>
option can limit the amount of memory used by the cache,
at the expense of reducing cache hit rates and causing more <acronym class="acronym">DNS</acronym>
traffic.
Additionally, if additional section caching
If additional section caching
(<a class="xref" href="Bv9ARM.ch06.html#acache" title="Additional Section Caching">the section called &#8220;Additional Section Caching&#8221;</a>) is enabled,
the <span class="command"><strong>max-acache-size</strong></span> option can be used to
limit the amount
of memory used by the mechanism.
It is still good practice to have enough memory to load
all zone and cache data into memory &#8212; unfortunately, the best
all zone and cache data into memory; unfortunately, the best
way
to determine this for a given installation is to watch the name server
in operation. After a few weeks the server process should reach
in operation. After a few weeks, the server process should reach
a relatively stable size where entries are expiring from the cache as
fast as they are being inserted.
</p>
@@ -101,17 +101,17 @@
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="intensive_env"></a>Name Server Intensive Environment Issues</h2></div></div></div>
<a name="intensive_env"></a>Name Server-Intensive Environment Issues</h2></div></div></div>
<p>
For name server intensive environments, there are two alternative
configurations that may be used. The first is where clients and
For name server-intensive environments, there are two
configurations that may be used. The first is one where clients and
any second-level internal name servers query a main name server, which
has enough memory to build a large cache. This approach minimizes
has enough memory to build a large cache; this approach minimizes
the bandwidth used by external name lookups. The second alternative
is to set up second-level internal name servers to make queries
independently.
In this configuration, none of the individual machines needs to
In this configuration, none of the individual machines need to
have as much memory or CPU power as in the first alternative, but
this has the disadvantage of making many more external queries,
as none of the name servers share their cached data.
@@ -123,12 +123,11 @@
<a name="supported_os"></a>Supported Operating Systems</h2></div></div></div>
<p>
ISC <acronym class="acronym">BIND</acronym> 9 compiles and runs on a large
number
of Unix-like operating systems and on
Microsoft Windows Server 2003 and 2008, and Windows XP and Vista.
ISC <acronym class="acronym">BIND</acronym> 9 compiles and runs on many
Unix-like operating systems and on
Microsoft Windows Server 2012 R2, 2016 and Windows 10.
For an up-to-date
list of supported systems, see the README file in the top level
list of supported systems, see the PLATFORMS.md file in the top-level
directory
of the BIND 9 source distribution.
</p>
@@ -151,6 +150,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch03.html
+50 -57
View File
@@ -51,7 +51,7 @@
</div>
<p>
In this chapter we provide some suggested configurations along
In this chapter we provide some suggested configurations, along
with guidelines for their use. We suggest reasonable values for
certain option settings.
</p>
@@ -69,7 +69,7 @@
name server for use by clients internal to a corporation. All
queries
from outside clients are refused using the <span class="command"><strong>allow-query</strong></span>
option. Alternatively, the same effect could be achieved using
option. The same effect can be achieved using
suitable
firewall rules.
</p>
@@ -100,8 +100,8 @@ zone "0.0.127.in-addr.arpa" {
<p>
This sample configuration is for an authoritative-only server
that is the master server for "<code class="filename">example.com</code>"
and a slave for the subdomain "<code class="filename">eng.example.com</code>".
that is the primary server for "<code class="filename">example.com</code>"
and a secondary server for the subdomain "<code class="filename">eng.example.com</code>".
</p>
<pre class="programlisting">
@@ -123,22 +123,22 @@ zone "0.0.127.in-addr.arpa" {
file "localhost.rev";
notify no;
};
// We are the master server for example.com
// We are the primary server for example.com
zone "example.com" {
type master;
file "example.com.db";
// IP addresses of slave servers allowed to
// IP addresses of secondary servers allowed to
// transfer example.com
allow-transfer {
192.168.4.14;
192.168.5.53;
};
};
// We are a slave server for eng.example.com
// We are a secondary server for eng.example.com
zone "eng.example.com" {
type slave;
file "eng.example.com.bk";
// IP address of eng.example.com master server
// IP address of eng.example.com primary server
masters { 192.168.4.12; };
};
</pre>
@@ -159,9 +159,9 @@ zone "eng.example.com" {
</p>
<p>
For example, if you have three WWW servers with network addresses
of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
following means that clients will connect to each machine one third
For example, assuming three HTTP servers with network addresses
of 10.0.0.1, 10.0.0.2, and 10.0.0.3, a set of records such as the
following means that clients will connect to each machine one-third
of the time:
</p>
@@ -283,11 +283,11 @@ zone "eng.example.com" {
</table>
</div>
<p>
When a resolver queries for these records, <acronym class="acronym">BIND</acronym> will rotate
them and respond to the query with the records in a different
order. In the example above, clients will randomly receive
When a resolver queries for these records, <acronym class="acronym">BIND</acronym> rotates
them and responds to the query with the records in a different
order. In the example above, clients randomly receive
records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
will use the first record returned and discard the rest.
use the first record returned and discard the rest.
</p>
<p>
For more detail on ordering responses, check the
@@ -307,7 +307,7 @@ zone "eng.example.com" {
<a name="tools"></a>Tools for Use With the Name Server Daemon</h3></div></div></div>
<p>
This section describes several indispensable diagnostic,
administrative and monitoring tools available to the system
administrative, and monitoring tools available to the system
administrator for controlling and debugging the name server
daemon.
</p>
@@ -316,8 +316,7 @@ zone "eng.example.com" {
<a name="diagnostic_tools"></a>Diagnostic Tools</h4></div></div></div>
<p>
The <span class="command"><strong>dig</strong></span>, <span class="command"><strong>host</strong></span>, and
<span class="command"><strong>nslookup</strong></span> programs are all command
line tools
<span class="command"><strong>nslookup</strong></span> programs are all command-line tools
for manually querying name servers. They differ in style and
output format.
</p>
@@ -329,7 +328,7 @@ zone "eng.example.com" {
<span class="command"><strong>dig</strong></span>
is the most versatile and complete of these lookup tools.
It has two modes: simple interactive
mode for a single query, and batch mode which executes a
mode for a single query, and batch mode, which executes a
query for
each in a list of several query lines. All query options are
accessible
@@ -346,7 +345,7 @@ zone "eng.example.com" {
[%<em class="replaceable"><code>comment</code></em>]
</p></div>
<p>
The usual simple use of <span class="command"><strong>dig</strong></span> will take the form
The usual simple use of <span class="command"><strong>dig</strong></span> takes the form
</p>
<p class="simpara">
<span class="command"><strong>dig @server domain query-type query-class</strong></span>
@@ -393,7 +392,7 @@ zone "eng.example.com" {
has two modes: interactive and
non-interactive. Interactive mode allows the user to
query name servers for information about various
hosts and domains or to print a list of hosts in a
hosts and domains, or to print a list of hosts in a
domain. Non-interactive mode is used to print just
the name and requested information for a host or
domain.
@@ -408,9 +407,9 @@ zone "eng.example.com" {
</p></div>
<p>
Interactive mode is entered when no arguments are given (the
default name server will be used) or when the first argument
default name server is used) or when the first argument
is a
hyphen (`-') and the second argument is the host name or
hyphen ("-") and the second argument is the host name or
Internet address
of a name server.
</p>
@@ -460,7 +459,7 @@ zone "eng.example.com" {
<dd>
<p>
The <span class="command"><strong>named-checkzone</strong></span> program
checks a master file for
checks a zone file for
syntax and consistency.
</p>
<div class="cmdsynopsis"><p>
@@ -482,7 +481,7 @@ zone "eng.example.com" {
</dt>
<dd>
<p>
Similar to <span class="command"><strong>named-checkzone,</strong></span> but
This tool is similar to <span class="command"><strong>named-checkzone,</strong></span> but
it always dumps the zone content to a specified file
(typically in a different format).
</p>
@@ -496,15 +495,9 @@ zone "eng.example.com" {
(<span class="command"><strong>rndc</strong></span>) program allows the
system
administrator to control the operation of a name server.
Since <acronym class="acronym">BIND</acronym> 9.2, <span class="command"><strong>rndc</strong></span>
supports all the commands of the BIND 8 <span class="command"><strong>ndc</strong></span>
utility except <span class="command"><strong>ndc start</strong></span> and
<span class="command"><strong>ndc restart</strong></span>, which were also
not supported in <span class="command"><strong>ndc</strong></span>'s
channel mode.
If you run <span class="command"><strong>rndc</strong></span> without any
options
it will display a usage message as follows:
If <span class="command"><strong>rndc</strong></span> is run without any
options,
it displays a usage message as follows:
</p>
<div class="cmdsynopsis"><p>
<code class="command">rndc</code>
@@ -532,7 +525,7 @@ zone "eng.example.com" {
alternate
location can be specified with the <code class="option">-c</code>
option. If the configuration file is not found,
<span class="command"><strong>rndc</strong></span> will also look in
<span class="command"><strong>rndc</strong></span> also looks in
<code class="filename">/etc/rndc.key</code> (or whatever
<code class="varname">sysconfdir</code> was defined when
the <acronym class="acronym">BIND</acronym> build was
@@ -547,10 +540,10 @@ zone "eng.example.com" {
<p>
The format of the configuration file is similar to
that of <code class="filename">named.conf</code>, but
that of <code class="filename">named.conf</code>, but is
limited to
only four statements, the <span class="command"><strong>options</strong></span>,
<span class="command"><strong>key</strong></span>, <span class="command"><strong>server</strong></span> and
only four statements: the <span class="command"><strong>options</strong></span>,
<span class="command"><strong>key</strong></span>, <span class="command"><strong>server</strong></span>, and
<span class="command"><strong>include</strong></span>
statements. These statements are what associate the
secret keys to the servers with which they are meant to
@@ -564,9 +557,9 @@ zone "eng.example.com" {
<span class="command"><strong>default-server</strong></span>, <span class="command"><strong>default-key</strong></span>,
and <span class="command"><strong>default-port</strong></span>.
<span class="command"><strong>default-server</strong></span> takes a
host name or address argument and represents the server
that will
be contacted if no <code class="option">-s</code>
host name or address argument and represents the server
that
is contacted if no <code class="option">-s</code>
option is provided on the command line.
<span class="command"><strong>default-key</strong></span> takes
the name of a key as its argument, as defined by a <span class="command"><strong>key</strong></span> statement.
@@ -594,16 +587,16 @@ zone "eng.example.com" {
The <span class="command"><strong>key</strong></span> statement has two
clauses:
<span class="command"><strong>algorithm</strong></span> and <span class="command"><strong>secret</strong></span>.
While the configuration parser will accept any string as the
While the configuration parser accepts any string as the
argument
to algorithm, currently only the strings
to <span class="command"><strong>algorithm</strong></span>, currently only the strings
"<strong class="userinput"><code>hmac-md5</code></strong>",
"<strong class="userinput"><code>hmac-sha1</code></strong>",
"<strong class="userinput"><code>hmac-sha224</code></strong>",
"<strong class="userinput"><code>hmac-sha256</code></strong>",
"<strong class="userinput"><code>hmac-sha384</code></strong>"
"<strong class="userinput"><code>hmac-sha384</code></strong>",
and "<strong class="userinput"><code>hmac-sha512</code></strong>"
have any meaning. The secret is a Base64 encoded string
have any meaning. The secret is a Base64-encoded string
as specified in RFC 3548.
</p>
@@ -642,7 +635,7 @@ options {
<p>
This file, if installed as <code class="filename">/etc/rndc.conf</code>,
would allow the command:
allows the command:
</p>
<p>
@@ -650,8 +643,8 @@ options {
</p>
<p>
to connect to 127.0.0.1 port 953 and cause the name server
to reload, if a name server on the local machine were
to connect to 127.0.0.1 port 953 and causes the name server
to reload, if a name server on the local machine is
running with
following controls statements:
</p>
@@ -664,22 +657,22 @@ controls {
</pre>
<p>
and it had an identical key statement for
and it has an identical key statement for
<code class="literal">rndc_key</code>.
</p>
<p>
Running the <span class="command"><strong>rndc-confgen</strong></span>
program will
conveniently create a <code class="filename">rndc.conf</code>
file for you, and also display the
program
conveniently creates an <code class="filename">rndc.conf</code>
file, and also displays the
corresponding <span class="command"><strong>controls</strong></span>
statement that you need to
statement needed to
add to <code class="filename">named.conf</code>.
Alternatively,
you can run <span class="command"><strong>rndc-confgen -a</strong></span>
it is possible to run <span class="command"><strong>rndc-confgen -a</strong></span>
to set up
a <code class="filename">rndc.key</code> file and not
an <code class="filename">rndc.key</code> file and not
modify
<code class="filename">named.conf</code> at all.
</p>
@@ -694,7 +687,7 @@ controls {
<div class="titlepage"><div><div><h3 class="title">
<a name="signals"></a>Signals</h3></div></div></div>
<p>
Certain UNIX signals cause the name server to take specific
Certain Unix signals cause the name server to take specific
actions, as described in the following table. These signals can
be sent using the <span class="command"><strong>kill</strong></span> command.
</p>
@@ -759,6 +752,6 @@ controls {
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch04.html
+409 -415
View File
File diff suppressed because it is too large Load Diff
doc/arm/Bv9ARM.ch05.html
+8 -14
View File
@@ -46,12 +46,12 @@
<a name="lightweight_resolver"></a>The Lightweight Resolver Library</h2></div></div></div>
<p>
Traditionally applications have been linked with a stub resolver
Traditionally, applications have been linked with a stub resolver
library that sends recursive DNS queries to a local caching name
server.
</p>
<p>
IPv6 once introduced new complexity into the resolution process,
At first, IPv6 introduced new complexity into the resolution process,
such as following A6 chains and DNAME records, and simultaneous
lookup of IPv4 and IPv6 addresses. Though most of the complexity was
then removed, these are hard or impossible
@@ -62,7 +62,7 @@
services to local clients
using a combination of a lightweight resolver library and a resolver
daemon process running on the local host. These communicate using
a simple UDP-based protocol, the "lightweight resolver protocol"
a simple UDP-based protocol, the "lightweight resolver protocol,"
that is distinct from and simpler than the full DNS protocol.
</p>
</div>
@@ -79,7 +79,7 @@
</p>
<p>
By default, applications using the lightweight resolver library will
By default, applications using the lightweight resolver library
make
UDP requests to the IPv4 loopback address (127.0.0.1) on port 921.
The
@@ -88,12 +88,6 @@
<code class="filename">/etc/resolv.conf</code>.
</p>
<p>
The daemon currently only looks in the DNS, but in the future
it may use other sources such as <code class="filename">/etc/hosts</code>,
NIS, etc.
</p>
<p>
The <span class="command"><strong>lwresd</strong></span> daemon is essentially a
caching-only name server that responds to requests using the
@@ -101,7 +95,7 @@
resolver protocol rather than the DNS protocol. Because it needs
to run on each host, it is designed to require no or minimal
configuration.
Unless configured otherwise, it uses the name servers listed on
Unless otherwise instructed, it uses the name servers listed on
<span class="command"><strong>nameserver</strong></span> lines in <code class="filename">/etc/resolv.conf</code>
as forwarders, but is also capable of doing the resolution
autonomously if
@@ -110,7 +104,7 @@
<p>
The <span class="command"><strong>lwresd</strong></span> daemon may also be
configured with a
<code class="filename">named.conf</code> style configuration file,
<code class="filename">named.conf</code>-style configuration file,
in
<code class="filename">/etc/lwresd.conf</code> by default. A name
server may also
@@ -119,7 +113,7 @@
</p>
<p>
The number of client queries that the <span class="command"><strong>lwresd</strong></span>
daemon is able to serve can be set using the
daemon serves can be set using the
<code class="option">lwres-tasks</code> and <code class="option">lwres-clients</code>
statements in the configuration.
</p>
@@ -142,6 +136,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch06.html
+1755 -2809
View File
File diff suppressed because it is too large Load Diff
doc/arm/Bv9ARM.ch07.html
+65 -65
View File
@@ -52,36 +52,36 @@
<p>
Access Control Lists (ACLs) are address match lists that
you can set up and nickname for future use in
can be set up and nicknamed for future use in
<span class="command"><strong>allow-notify</strong></span>, <span class="command"><strong>allow-query</strong></span>,
<span class="command"><strong>allow-query-on</strong></span>, <span class="command"><strong>allow-recursion</strong></span>,
<span class="command"><strong>blackhole</strong></span>, <span class="command"><strong>allow-transfer</strong></span>,
<span class="command"><strong>match-clients</strong></span>, etc.
</p>
<p>
Using ACLs allows you to have finer control over who can access
your name server, without cluttering up your config files with huge
ACLs give users finer control over who can access
the name server, without cluttering up configuration files with huge
lists of IP addresses.
</p>
<p>
It is a <span class="emphasis"><em>good idea</em></span> to use ACLs, and to
control access to your server. Limiting access to your server by
control access. Limiting access to the server by
outside parties can help prevent spoofing and denial of service
(DoS) attacks against your server.
(DoS) attacks against the server.
</p>
<p>
ACLs match clients on the basis of up to three characteristics:
1) The client's IP address; 2) the TSIG or SIG(0) key that was
used to sign the request, if any; and 3) an address prefix
encoded in an EDNS Client Subnet option, if any.
encoded in an EDNS Client-Subnet option, if any.
</p>
<p>
Here is an example of ACLs based on client addresses:
</p>
<pre class="programlisting">
// Set up an ACL named "bogusnets" that will block
// RFC1918 space and some reserved space, which is
// Set up an ACL named "bogusnets" that blocks
// RFC 1918 space and some reserved space, which is
// commonly used in spoofing attacks.
acl bogusnets {
0.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3;
@@ -120,11 +120,11 @@ zone "example.com" {
may include <code class="option">key</code> elements, which specify the
name of a TSIG or SIG(0) key, or <code class="option">ecs</code>
elements, which specify a network prefix but are only matched
if that prefix matches an EDNS client subnet option included
if that prefix matches an EDNS client-subnet option included
in the request.
</p>
<p>
The EDNS Client Subnet (ECS) option is used by a recursive
The EDNS Client-Subnet (ECS) option is used by a recursive
resolver to inform an authoritative name server of the network
address block from which the original query was received, enabling
authoritative servers to give different answers to the same
@@ -140,7 +140,7 @@ zone "example.com" {
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
<h3 class="title">Note</h3>
<p>
(Note: The authoritative ECS implementation in
(Note: the authoritative ECS implementation in
<span class="command"><strong>named</strong></span> is based on an early version of the
specification, and is known to have incompatibilities with
other implementations. It is also inefficient, requiring
@@ -157,7 +157,7 @@ zone "example.com" {
<span class="command"><strong>geoip [<span class="optional">db <em class="replaceable"><code>database</code></em></span>] <em class="replaceable"><code>field</code></em> <em class="replaceable"><code>value</code></em></strong></span>
</p>
<p>
The <em class="replaceable"><code>field</code></em> indicates which field
The <em class="replaceable"><code>field</code></em> parameter indicates which field
to search for a match. Available fields are "country",
"region", "city", "continent", "postal" (postal code),
"metro" (metro code), "area" (area code), "tz" (timezone),
@@ -169,13 +169,13 @@ zone "example.com" {
contains spaces or other special characters. An "asnum"
search for autonomous system number can be specified using
the string "ASNNNN" or the integer NNNN.
When "country" search is specified with a string is two
characters long, then it must be a standard ISO-3166-1
two-letter country code; otherwise it is interpreted as
the full name of the country. Similarly, if this is a
"region" search and the string is two characters long,
then it treated as a standard two-letter state or province
abbreviation; otherwise it treated as the full name of the
When "country" search is specified with a string that is two
characters long, it must be a standard ISO-3166-1
two-letter country code; otherwise, it is interpreted as
the full name of the country. Similarly, if
"region" is the search term and the string is two characters long,
it is treated as a standard two-letter state or province
abbreviation; otherwise, it is treated as the full name of the
state or province.
</p>
<p>
@@ -186,20 +186,20 @@ zone "example.com" {
can be answered from either the "city" or "country" databases,
so for these search types, specifying a
<em class="replaceable"><code>database</code></em>
will force the query to be answered from that database and no
forces the query to be answered from that database and no
other. If <em class="replaceable"><code>database</code></em> is not
specified, then these queries will be answered from the "city",
database if it is installed, or the "country" database if it
is installed, in that order. Valid database names are
specified, these queries are first answered from the "city"
database if it is installed, and then from the "country" database if it
is installed. Valid database names are
"country", "city", "asnum", "isp", and "domain". (If using
the legacy GeoIP API, "netspeed" and "org" databases are also
available.)
</p>
<p>
By default, if a DNS query includes an EDNS Client Subnet (ECS)
option which encodes a non-zero address prefix, then GeoIP ACLs
will be matched against that address prefix. Otherwise, they
are matched against the source address of the query. To
By default, if a DNS query includes an EDNS Client-Subnet (ECS)
option which encodes a non-zero address prefix, then GeoIP ACL
elements are matched against that address prefix. Otherwise,
they are matched against the source address of the query. To
prevent GeoIP ACLs from matching against ECS options, set
the <span class="command"><strong>geoip-use-ecs</strong></span> to <code class="literal">no</code>.
</p>
@@ -218,22 +218,22 @@ geoip org "Internet Systems Consortium";
</pre>
<p>
ACLs use a "first-match" logic rather than "best-match":
ACLs use a "first-match" logic rather than "best-match";
if an address prefix matches an ACL element, then that ACL
is considered to have matched even if a later element would
have matched more specifically. For example, the ACL
<span class="command"><strong> { 10/8; !10.0.0.1; }</strong></span> would actually
<span class="command"><strong>{ 10/8; !10.0.0.1; }</strong></span> would actually
match a query from 10.0.0.1, because the first element
indicated that the query should be accepted, and the second
indicates that the query should be accepted, and the second
element is ignored.
</p>
<p>
When using "nested" ACLs (that is, ACLs included or referenced
within other ACLs), a negative match of a nested ACL will
within other ACLs), a negative match of a nested ACL tells
the containing ACL to continue looking for matches. This
enables complex ACLs to be constructed, in which multiple
client characteristics can be checked at the same time. For
example, to construct an ACL which allows queries only when
example, to construct an ACL which allows a query only when
it originates from a particular network <span class="emphasis"><em>and</em></span>
only when it is signed with a particular key, use:
</p>
@@ -242,14 +242,14 @@ allow-query { !{ !10/8; any; }; key example; };
</pre>
<p>
Within the nested ACL, any address that is
<span class="emphasis"><em>not</em></span> in the 10/8 network prefix will
be rejected, and this will terminate processing of the
<span class="emphasis"><em>not</em></span> in the 10/8 network prefix is
rejected, which terminates processing of the
ACL. Any address that <span class="emphasis"><em>is</em></span> in the 10/8
network prefix will be accepted, but this causes a negative
network prefix is accepted, but this causes a negative
match of the nested ACL, so the containing ACL continues
processing. The query will then be accepted if it is signed
processing. The query is accepted if it is signed
by the key "example", and rejected otherwise. The ACL, then,
will only matches when <span class="emphasis"><em>both</em></span> conditions
only matches when <span class="emphasis"><em>both</em></span> conditions
are true.
</p>
</div>
@@ -260,17 +260,17 @@ allow-query { !{ !10/8; any; }; key example; };
</h2></div></div></div>
<p>
On UNIX servers, it is possible to run <acronym class="acronym">BIND</acronym>
On Unix servers, it is possible to run <acronym class="acronym">BIND</acronym>
in a <span class="emphasis"><em>chrooted</em></span> environment (using
the <span class="command"><strong>chroot()</strong></span> function) by specifying
the <code class="option">-t</code> option for <span class="command"><strong>named</strong></span>.
This can help improve system security by placing
<acronym class="acronym">BIND</acronym> in a "sandbox", which will limit
<acronym class="acronym">BIND</acronym> in a "sandbox," which limits
the damage done if a server is compromised.
</p>
<p>
Another useful feature in the UNIX version of <acronym class="acronym">BIND</acronym> is the
ability to run the daemon as an unprivileged user ( <code class="option">-u</code> <em class="replaceable"><code>user</code></em> ).
Another useful feature in the Unix version of <acronym class="acronym">BIND</acronym> is the
ability to run the daemon as an unprivileged user (<code class="option">-u</code> <em class="replaceable"><code>user</code></em>).
We suggest running as an unprivileged user when using the <span class="command"><strong>chroot</strong></span> feature.
</p>
<p>
@@ -287,23 +287,23 @@ allow-query { !{ !10/8; any; }; key example; };
<a name="chroot"></a>The <span class="command"><strong>chroot</strong></span> Environment</h3></div></div></div>
<p>
In order for a <span class="command"><strong>chroot</strong></span> environment
For a <span class="command"><strong>chroot</strong></span> environment
to work properly in a particular directory (for example,
<code class="filename">/var/named</code>), you will need to set
up an environment that includes everything
<code class="filename">/var/named</code>), the
environment must include everything
<acronym class="acronym">BIND</acronym> needs to run. From
<acronym class="acronym">BIND</acronym>'s point of view,
<code class="filename">/var/named</code> is the root of the
filesystem. You will need to adjust the values of
filesystem; the values of
options like <span class="command"><strong>directory</strong></span> and
<span class="command"><strong>pid-file</strong></span> to account for this.
<span class="command"><strong>pid-file</strong></span> must be adjusted to account for this.
</p>
<p>
Unlike with earlier versions of BIND, you typically will
<span class="emphasis"><em>not</em></span> need to compile <span class="command"><strong>named</strong></span>
statically nor install shared libraries under the new root.
However, depending on your operating system, you may need
to set up things like
Unlike with earlier versions of BIND,
<span class="command"><strong>named</strong></span> does <span class="emphasis"><em>not</em></span> typically need to be compiled
statically, nor do shared libraries need to be installed under the new root.
However, depending on the operating system, it may be necessary
to set up locations such as
<code class="filename">/dev/zero</code>,
<code class="filename">/dev/random</code>,
<code class="filename">/dev/log</code>, and
@@ -323,14 +323,14 @@ allow-query { !{ !10/8; any; }; key example; };
modification times) or the <span class="command"><strong>chown</strong></span>
utility (to
set the user id and/or group id) on files
to which you want <acronym class="acronym">BIND</acronym>
to write.
where <acronym class="acronym">BIND</acronym>
should write.
</p>
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
<h3 class="title">Note</h3>
<p>
If the <span class="command"><strong>named</strong></span> daemon is running as an
unprivileged user, it will not be able to bind to new restricted
unprivileged user, it cannot bind to new restricted
ports if the server is reloaded.
</p>
</div>
@@ -350,16 +350,16 @@ allow-query { !{ !10/8; any; }; key example; };
or
network prefix in the <span class="command"><strong>allow-update</strong></span>
zone option.
This method is insecure since the source address of the update UDP
This method is insecure, since the source address of the update UDP
packet
is easily forged. Also note that if the IP addresses allowed by the
<span class="command"><strong>allow-update</strong></span> option include the
address of a slave
server which performs forwarding of dynamic updates, the master can
address of a secondary
server which performs forwarding of dynamic updates, the primary can
be
trivially attacked by sending the update to the slave, which will
forward it to the master with its own source IP address causing the
master to approve it without question.
trivially attacked by sending the update to the secondary, which
forwards it to the primary with its own source IP address - causing the
primary to approve it without question.
</p>
<p>
@@ -368,16 +368,16 @@ allow-query { !{ !10/8; any; }; key example; };
(TSIG). That is, the <span class="command"><strong>allow-update</strong></span>
option should
list only TSIG key names, not IP addresses or network
prefixes. Alternatively, the new <span class="command"><strong>update-policy</strong></span>
prefixes. Alternatively, the <span class="command"><strong>update-policy</strong></span>
option can be used.
</p>
<p>
Some sites choose to keep all dynamically-updated DNS data
Some sites choose to keep all dynamically updated DNS data
in a subdomain and delegate that subdomain to a separate zone. This
way, the top-level zone containing critical data such as the IP
way, the top-level zone containing critical data, such as the IP
addresses
of public web and mail servers need not allow dynamic update at
of public web and mail servers, need not allow dynamic update at
all.
</p>
@@ -400,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; };
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch08.html
+36 -36
View File
@@ -37,7 +37,7 @@
<p><b>Table of Contents</b></p>
<dl class="toc">
<dt><span class="section"><a href="Bv9ARM.ch08.html#common_problems">Common Problems</a></span></dt>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2.2">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2.2">It's Not Working; How Can I Figure Out What's Wrong?</a></span></dt></dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.3">Incrementing and Changing the Serial Number</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch08.html#more_help">Where Can I Get Help?</a></span></dt>
</dl>
@@ -49,14 +49,14 @@
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
<a name="id-1.9.2.2"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div>
<a name="id-1.9.2.2"></a>It's Not Working; How Can I Figure Out What's Wrong?</h3></div></div></div>
<p>
The best solution to solving installation and
configuration issues is to take preventative measures by setting
The best solution to installation and
configuration issues is to take preventive measures by setting
up logging files beforehand. The log files provide a
source of hints and information that can be used to figure out
what went wrong and how to fix the problem.
source of hints and information that can be used to identify
what went wrong and fix the problem.
</p>
</div>
@@ -66,29 +66,29 @@
<a name="id-1.9.3"></a>Incrementing and Changing the Serial Number</h2></div></div></div>
<p>
Zone serial numbers are just numbers &#8212; they aren't
date related. A lot of people set them to a number that
Zone serial numbers are just numbers &#8212; they are not
date-related. However, many people set them to a number that
represents a date, usually of the form YYYYMMDDRR.
Occasionally they will make a mistake and set them to a
"date in the future" then try to correct them by setting
them to the "current date". This causes problems because
Occasionally they make a mistake and set the serial number to a
date in the future, then try to correct it by setting
it to the current date. This causes problems because
serial numbers are used to indicate that a zone has been
updated. If the serial number on the slave server is
lower than the serial number on the master, the slave
server will attempt to update its copy of the zone.
updated. If the serial number on the secondary server is
lower than the serial number on the primary, the secondary
server attempts to update its copy of the zone.
</p>
<p>
Setting the serial number to a lower number on the master
server than the slave server means that the slave will not perform
Setting the serial number to a lower number on the primary
server than the one on the secondary server means that the secondary will not perform
updates to its copy of the zone.
</p>
<p>
The solution to this is to add 2147483647 (2^31-1) to the
number, reload the zone and make sure all slaves have updated to
the new zone serial number, then reset the number to what you want
it to be, and reload the zone again.
number, reload the zone and make sure all secondaries have updated to
the new zone serial number, then reset it to the desired number
and reload the zone again.
</p>
</div>
@@ -97,25 +97,25 @@
<a name="more_help"></a>Where Can I Get Help?</h2></div></div></div>
<p>
The Internet Systems Consortium
(<acronym class="acronym">ISC</acronym>) offers a wide range
of support and service agreements for <acronym class="acronym">BIND</acronym> and <acronym class="acronym">DHCP</acronym> servers. Four
levels of premium support are available and each level includes
support for all <acronym class="acronym">ISC</acronym> programs,
significant discounts on products
and training, and a recognized priority on bug fixes and
non-funded feature requests. In addition, <acronym class="acronym">ISC</acronym> offers a standard
support agreement package which includes services ranging from bug
fix announcements to remote support. It also includes training in
<acronym class="acronym">BIND</acronym> and <acronym class="acronym">DHCP</acronym>.
The BIND-users mailing list, at https://lists.isc.org/mailman/listinfo/bind-users,
is an excellent resource for peer user support. In addition, <acronym class="acronym">ISC</acronym> maintains a
Knowledgebase of helpful articles at https://kb.isc.org.
</p>
<p>
To discuss arrangements for support, contact
<a class="link" href="mailto:info@isc.org" target="_top">info@isc.org</a> or visit the
<acronym class="acronym">ISC</acronym> web page at
<a class="link" href="http://www.isc.org/services/support/" target="_top">http://www.isc.org/services/support/</a>
to read more.
Internet Systems Consortium
(<acronym class="acronym">ISC</acronym>) offers annual
support agreements for <acronym class="acronym">BIND</acronym>9, ISC <acronym class="acronym">DHCP</acronym>, and Kea DHCP.
All paid support contracts include advance security notifications; some levels include
service level agreements (SLAs), premium software features, and increased priority on bug fixes
and feature requests.
</p>
<p>
Please contact
<a class="link" href="mailto:info@isc.org" target="_top">info@isc.org</a> or visit
<a class="link" href="https://www.isc.org/contact/" target="_top">https://www.isc.org/contact/</a>
for more information.
</p>
</div>
</div>
@@ -136,6 +136,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch09.html
+75 -3
View File
@@ -36,11 +36,12 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl class="toc">
<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.21</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.22</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.22">Notes for BIND 9.11.22</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.21">Notes for BIND 9.11.21</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.20">Notes for BIND 9.11.20</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.19">Notes for BIND 9.11.19</a></span></dt>
@@ -70,7 +71,7 @@
</div>
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.21</h2></div></div></div>
<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.22</h2></div></div></div>
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
@@ -128,6 +129,77 @@
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes-9.11.22"></a>Notes for BIND 9.11.22</h3></div></div></div>
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="relnotes-9.11.22-security"></a>Security Fixes</h4></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
It was possible to trigger an assertion failure when verifying the
response to a TSIG-signed request. This was disclosed in
CVE-2020-8622.
</p>
<p>
ISC would like to thank Dave Feldman, Jeff Warren, and Joel Cunningham
of Oracle for bringing this vulnerability to our attention. [GL #2028]
</p>
</li>
<li class="listitem">
<p>
When BIND 9 was compiled with native PKCS#11 support, it was possible
to trigger an assertion failure in code determining the number of bits
in the PKCS#11 RSA public key with a specially crafted packet. This
was disclosed in CVE-2020-8623.
</p>
<p>
ISC would like to thank Lyu Chiy for bringing this vulnerability to
our attention. [GL #2037]
</p>
</li>
<li class="listitem">
<p>
<span class="command"><strong>update-policy</strong></span> rules of type
<span class="command"><strong>subdomain</strong></span> were incorrectly treated as
<span class="command"><strong>zonesub</strong></span> rules, which allowed keys used in
<span class="command"><strong>subdomain</strong></span> rules to update names outside of the
specified subdomains. The problem was fixed by making sure
<span class="command"><strong>subdomain</strong></span> rules are again processed as described in
the ARM. This was disclosed in CVE-2020-8624.
</p>
<p>
ISC would like to thank Joop Boonen of credativ GmbH for bringing this
vulnerability to our attention. [GL #2055]
</p>
</li>
</ul></div>
</div>
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="relnotes-9.11.22-bugs"></a>Bug Fixes</h4></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
Wildcard RPZ passthru rules could incorrectly be overridden by other
rules that were loaded from RPZ zones which appeared later in the
<span class="command"><strong>response-policy</strong></span> statement. This has been fixed.
[GL #1619]
</p>
</li>
<li class="listitem">
<p>
LMDB locking code was revised to make <span class="command"><strong>rndc reconfig</strong></span>
work properly on FreeBSD and with LMDB &gt;= 0.9.26. [GL #1976]
</p>
</li>
</ul></div>
</div>
</div>
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes-9.11.21"></a>Notes for BIND 9.11.21</h3></div></div></div>
<div class="section">
@@ -2292,6 +2364,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch10.html
+12 -11
View File
@@ -36,8 +36,8 @@
<a name="Bv9ARM.ch10"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
</h1></div></div></div>
<p><a name="historical_dns_information"></a>
Although the "official" beginning of the Domain Name
System occurred in 1984 with the publication of RFC 920, the
Although the Domain Name
System "officially" began in 1984 with the publication of RFC 920, the
core of the new system was described in 1983 in RFCs 882 and
883. From 1984 to 1987, the ARPAnet (the precursor to today's
Internet) became a testbed of experimentation for developing the
@@ -45,14 +45,14 @@
operational network environment. New RFCs were written and
published in 1987 that modified the original documents to
incorporate improvements based on the working model. RFC 1034,
"Domain Names-Concepts and Facilities", and RFC 1035, "Domain
Names-Implementation and Specification" were published and
"Domain Names-Concepts and Facilities," and RFC 1035, "Domain
Names-Implementation and Specification," were published and
became the standards upon which all <acronym class="acronym">DNS</acronym> implementations are
built.
</p>
<p>
The first working domain name server, called "Jeeves", was
The first working domain name server, called "Jeeves," was
written in 1983-84 by Paul Mockapetris for operation on DEC
Tops-20
machines located at the University of Southern California's
@@ -73,7 +73,7 @@
Versions of <acronym class="acronym">BIND</acronym> through
4.8.3 were maintained by the Computer
Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
Painter, David Riggle and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym>
Painter, David Riggle, and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym>
project team. After that, additional work on the software package
was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
Corporation
@@ -87,7 +87,7 @@
<p>
<acronym class="acronym">BIND</acronym> versions 4.9 and 4.9.1 were
released by Digital Equipment
Corporation (now Compaq Computer Corporation). Paul Vixie, then
Corporation (which became Compaq Computer Corporation and eventually merged with Hewlett-Packard). Paul Vixie, then
a DEC employee, became <acronym class="acronym">BIND</acronym>'s
primary caretaker. He was assisted
by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
@@ -105,8 +105,8 @@
<p>
<acronym class="acronym">BIND</acronym> versions from 4.9.3 onward
have been developed and maintained
by the Internet Systems Consortium and its predecessor,
the Internet Software Consortium, with support being provided
by Internet Systems Consortium and its predecessor,
the Internet Software Consortium, with support provided
by ISC's sponsors.
</p>
<p>
@@ -127,7 +127,8 @@
<p>
<acronym class="acronym">BIND</acronym> development work is made
possible today by the sponsorship
of several corporations, and by the tireless work efforts of
of corporations who purchase professional support services from ISC
(https://www.isc.org/contact/) and/or donate to our mission, and by the tireless efforts of
numerous individuals.
</p>
</div>
@@ -148,6 +149,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch11.html
+106 -112
View File
@@ -51,15 +51,15 @@
<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h2></div></div></div>
<p>
IPv6 addresses are 128-bit identifiers for interfaces and
sets of interfaces which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate
IPv6 addresses are 128-bit identifiers, for interfaces and
sets of interfaces, which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate
scalable Internet routing. There are three types of addresses: <span class="emphasis"><em>Unicast</em></span>,
an identifier for a single interface;
<span class="emphasis"><em>Anycast</em></span>,
an identifier for a set of interfaces; and <span class="emphasis"><em>Multicast</em></span>,
an identifier for a set of interfaces. Here we describe the global
Unicast address scheme. For more information, see RFC 3587,
"Global Unicast Address Format."
"IPv6 Global Unicast Address Format."
</p>
<p>
IPv6 unicast addresses consist of a
@@ -69,12 +69,12 @@
</p>
<p>
The global routing prefix is provided by the
upstream provider or ISP, and (roughly) corresponds to the
upstream provider or ISP, and roughly corresponds to the
IPv4 <span class="emphasis"><em>network</em></span> section
of the address range.
The subnet identifier is for local subnetting, much the
same as subnetting an
The subnet identifier is for local subnetting, much
like subnetting an
IPv4 /16 network into /24 subnets.
The interface identifier is the address of an individual
@@ -83,24 +83,24 @@
</p>
<p>
The subnetting capability of IPv6 is much more flexible than
that of IPv4: subnetting can be carried out on bit boundaries,
that of IPv4; subnetting can be carried out on bit boundaries,
in much the same way as Classless InterDomain Routing
(CIDR), and the DNS PTR representation ("nibble" format)
makes setting up reverse zones easier.
</p>
<p>
The Interface Identifier must be unique on the local link,
The interface identifier must be unique on the local link,
and is usually generated automatically by the IPv6
implementation, although it is usually possible to
override the default setting if necessary. A typical IPv6
address might look like:
<span class="command"><strong>2001:db8:201:9:a00:20ff:fe81:2b32</strong></span>
<span class="command"><strong>2001:db8:201:9:a00:20ff:fe81:2b32</strong></span>.
</p>
<p>
IPv6 address specifications often contain long strings
of zeros, so the architects have included a shorthand for
specifying
them. The double colon (`::') indicates the longest possible
them. The double colon ("::") indicates the longest possible
string
of zeros that can fit, and can be used only once in an address.
</p>
@@ -119,29 +119,23 @@
the Request for Comments (RFCs)
series of technical notes. The standards themselves are defined
by the Internet Engineering Task Force (IETF) and the Internet
Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
Engineering Steering Group (IESG). RFCs can be obtained online at:
</p>
<p>
<a class="link" href="ftp://www.isi.edu/in-notes/" target="_top">
ftp://www.isi.edu/in-notes/RFC<em class="replaceable"><code>xxxx</code></em>.txt
<a class="link" href="https://datatracker.ietf.org/doc/" target="_top">
https://datatracker.ietf.org/doc/
</a>
</p>
<p>
(where <em class="replaceable"><code>xxxx</code></em> is
the number of the RFC). RFCs are also available via the Web at:
</p>
<p>
<a class="link" href="http://www.ietf.org/rfc/" target="_top">http://www.ietf.org/rfc/</a>.
</p>
<div class="bibliography">
<div class="titlepage"><div><div><h4 class="title"><a name="id-1.12.3.2.6"></a></h4></div></div></div>
<div class="titlepage"><div><div><h4 class="title"><a name="id-1.12.3.2.4"></a></h4></div></div></div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.2"></a>Standards</h3>
<a name="id-1.12.3.2.4.2"></a>Standards</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.2.2"></a><p>[<abbr class="abbrev">RFC974</abbr>]
<a name="id-1.12.3.2.4.2.2"></a><p>[<abbr class="abbrev">RFC974</abbr>]
<span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span>
<span class="title"><i>Mail Routing and the Domain System</i>. </span>
@@ -149,7 +143,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.2.3"></a><p>[<abbr class="abbrev">RFC1034</abbr>]
<a name="id-1.12.3.2.4.2.3"></a><p>[<abbr class="abbrev">RFC1034</abbr>]
<span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span>
<span class="title"><i>Domain Names &#8212; Concepts and Facilities</i>. </span>
@@ -157,7 +151,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.2.4"></a><p>[<abbr class="abbrev">RFC1035</abbr>]
<a name="id-1.12.3.2.4.2.4"></a><p>[<abbr class="abbrev">RFC1035</abbr>]
<span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span> <span class="title"><i>Domain Names &#8212; Implementation and
Specification</i>. </span>
@@ -171,7 +165,7 @@
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.2"></a><p>[<abbr class="abbrev">RFC2181</abbr>]
<a name="id-1.12.3.2.4.3.2"></a><p>[<abbr class="abbrev">RFC2181</abbr>]
<span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span>
<span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
@@ -180,7 +174,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.3"></a><p>[<abbr class="abbrev">RFC2308</abbr>]
<a name="id-1.12.3.2.4.3.3"></a><p>[<abbr class="abbrev">RFC2308</abbr>]
<span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span>
<span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
@@ -189,7 +183,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.4"></a><p>[<abbr class="abbrev">RFC1995</abbr>]
<a name="id-1.12.3.2.4.3.4"></a><p>[<abbr class="abbrev">RFC1995</abbr>]
<span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span>
<span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span>
@@ -197,7 +191,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.5"></a><p>[<abbr class="abbrev">RFC1996</abbr>]
<a name="id-1.12.3.2.4.3.5"></a><p>[<abbr class="abbrev">RFC1996</abbr>]
<span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
<span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span>
@@ -205,7 +199,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.6"></a><p>[<abbr class="abbrev">RFC2136</abbr>]
<a name="id-1.12.3.2.4.3.6"></a><p>[<abbr class="abbrev">RFC2136</abbr>]
<span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span>
<span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span>
@@ -213,7 +207,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.7"></a><p>[<abbr class="abbrev">RFC2671</abbr>]
<a name="id-1.12.3.2.4.3.7"></a><p>[<abbr class="abbrev">RFC2671</abbr>]
<span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
<span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span>
@@ -221,7 +215,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.8"></a><p>[<abbr class="abbrev">RFC2672</abbr>]
<a name="id-1.12.3.2.4.3.8"></a><p>[<abbr class="abbrev">RFC2672</abbr>]
<span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span>
<span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span>
@@ -229,7 +223,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.9"></a><p>[<abbr class="abbrev">RFC2845</abbr>]
<a name="id-1.12.3.2.4.3.9"></a><p>[<abbr class="abbrev">RFC2845</abbr>]
<span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span>
<span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span>
@@ -237,7 +231,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.10"></a><p>[<abbr class="abbrev">RFC2930</abbr>]
<a name="id-1.12.3.2.4.3.10"></a><p>[<abbr class="abbrev">RFC2930</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span>
@@ -245,7 +239,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.11"></a><p>[<abbr class="abbrev">RFC2931</abbr>]
<a name="id-1.12.3.2.4.3.11"></a><p>[<abbr class="abbrev">RFC2931</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span>
@@ -253,7 +247,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.12"></a><p>[<abbr class="abbrev">RFC3007</abbr>]
<a name="id-1.12.3.2.4.3.12"></a><p>[<abbr class="abbrev">RFC3007</abbr>]
<span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span>
<span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span>
@@ -261,7 +255,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.3.13"></a><p>[<abbr class="abbrev">RFC3645</abbr>]
<a name="id-1.12.3.2.4.3.13"></a><p>[<abbr class="abbrev">RFC3645</abbr>]
<span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span>
<span class="title"><i>Generic Security Service Algorithm for Secret
@@ -273,10 +267,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.4"></a><acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
<a name="id-1.12.3.2.4.4"></a><acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.4.2"></a><p>[<abbr class="abbrev">RFC3225</abbr>]
<a name="id-1.12.3.2.4.4.2"></a><p>[<abbr class="abbrev">RFC3225</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span>
<span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span>
@@ -284,7 +278,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.4.3"></a><p>[<abbr class="abbrev">RFC3833</abbr>]
<a name="id-1.12.3.2.4.4.3"></a><p>[<abbr class="abbrev">RFC3833</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span>
<span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span>
@@ -292,7 +286,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.4.4"></a><p>[<abbr class="abbrev">RFC4033</abbr>]
<a name="id-1.12.3.2.4.4.4"></a><p>[<abbr class="abbrev">RFC4033</abbr>]
<span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span>
<span class="title"><i>DNS Security Introduction and Requirements</i>. </span>
@@ -300,7 +294,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.4.5"></a><p>[<abbr class="abbrev">RFC4034</abbr>]
<a name="id-1.12.3.2.4.4.5"></a><p>[<abbr class="abbrev">RFC4034</abbr>]
<span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span>
<span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span>
@@ -308,7 +302,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.4.6"></a><p>[<abbr class="abbrev">RFC4035</abbr>]
<a name="id-1.12.3.2.4.4.6"></a><p>[<abbr class="abbrev">RFC4035</abbr>]
<span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span>
<span class="title"><i>Protocol Modifications for the DNS
@@ -319,11 +313,11 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.5"></a>Other Important RFCs About <acronym class="acronym">DNS</acronym>
<a name="id-1.12.3.2.4.5"></a>Other Important RFCs About <acronym class="acronym">DNS</acronym>
Implementation</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.5.2"></a><p>[<abbr class="abbrev">RFC1535</abbr>]
<a name="id-1.12.3.2.4.5.2"></a><p>[<abbr class="abbrev">RFC1535</abbr>]
<span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span>
<span class="title"><i>A Security Problem and Proposed Correction With Widely
@@ -332,7 +326,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.5.3"></a><p>[<abbr class="abbrev">RFC1536</abbr>]
<a name="id-1.12.3.2.4.5.3"></a><p>[<abbr class="abbrev">RFC1536</abbr>]
<span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span>
<span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
@@ -341,7 +335,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.5.4"></a><p>[<abbr class="abbrev">RFC1982</abbr>]
<a name="id-1.12.3.2.4.5.4"></a><p>[<abbr class="abbrev">RFC1982</abbr>]
<span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span>
<span class="title"><i>Serial Number Arithmetic</i>. </span>
@@ -349,7 +343,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.5.5"></a><p>[<abbr class="abbrev">RFC4074</abbr>]
<a name="id-1.12.3.2.4.5.5"></a><p>[<abbr class="abbrev">RFC4074</abbr>]
<span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span>
<span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
@@ -360,10 +354,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.6"></a>Resource Record Types</h3>
<a name="id-1.12.3.2.4.6"></a>Resource Record Types</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.2"></a><p>[<abbr class="abbrev">RFC1183</abbr>]
<a name="id-1.12.3.2.4.6.2"></a><p>[<abbr class="abbrev">RFC1183</abbr>]
<span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span>
<span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span>
@@ -371,7 +365,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.3"></a><p>[<abbr class="abbrev">RFC1706</abbr>]
<a name="id-1.12.3.2.4.6.3"></a><p>[<abbr class="abbrev">RFC1706</abbr>]
<span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span>
<span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span>
@@ -379,7 +373,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.4"></a><p>[<abbr class="abbrev">RFC2168</abbr>]
<a name="id-1.12.3.2.4.6.4"></a><p>[<abbr class="abbrev">RFC2168</abbr>]
<span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span>
<span class="title"><i>Resolution of Uniform Resource Identifiers using
@@ -388,7 +382,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.5"></a><p>[<abbr class="abbrev">RFC1876</abbr>]
<a name="id-1.12.3.2.4.6.5"></a><p>[<abbr class="abbrev">RFC1876</abbr>]
<span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span>
<span class="title"><i>A Means for Expressing Location Information in the
@@ -398,7 +392,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.6"></a><p>[<abbr class="abbrev">RFC2052</abbr>]
<a name="id-1.12.3.2.4.6.6"></a><p>[<abbr class="abbrev">RFC2052</abbr>]
<span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
<span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
@@ -408,7 +402,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.7"></a><p>[<abbr class="abbrev">RFC2163</abbr>]
<a name="id-1.12.3.2.4.6.7"></a><p>[<abbr class="abbrev">RFC2163</abbr>]
<span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span>
<span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
@@ -418,7 +412,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.8"></a><p>[<abbr class="abbrev">RFC2230</abbr>]
<a name="id-1.12.3.2.4.6.8"></a><p>[<abbr class="abbrev">RFC2230</abbr>]
<span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span>
<span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span>
@@ -426,7 +420,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.9"></a><p>[<abbr class="abbrev">RFC2536</abbr>]
<a name="id-1.12.3.2.4.6.9"></a><p>[<abbr class="abbrev">RFC2536</abbr>]
<span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span>
@@ -434,7 +428,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.10"></a><p>[<abbr class="abbrev">RFC2537</abbr>]
<a name="id-1.12.3.2.4.6.10"></a><p>[<abbr class="abbrev">RFC2537</abbr>]
<span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span>
@@ -442,7 +436,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.11"></a><p>[<abbr class="abbrev">RFC2538</abbr>]
<a name="id-1.12.3.2.4.6.11"></a><p>[<abbr class="abbrev">RFC2538</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span>
<span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span>
@@ -450,7 +444,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.12"></a><p>[<abbr class="abbrev">RFC2539</abbr>]
<a name="id-1.12.3.2.4.6.12"></a><p>[<abbr class="abbrev">RFC2539</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span>
@@ -458,7 +452,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.13"></a><p>[<abbr class="abbrev">RFC2540</abbr>]
<a name="id-1.12.3.2.4.6.13"></a><p>[<abbr class="abbrev">RFC2540</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span>
@@ -466,7 +460,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.14"></a><p>[<abbr class="abbrev">RFC2782</abbr>]
<a name="id-1.12.3.2.4.6.14"></a><p>[<abbr class="abbrev">RFC2782</abbr>]
<span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span>
<span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
@@ -476,7 +470,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.15"></a><p>[<abbr class="abbrev">RFC2915</abbr>]
<a name="id-1.12.3.2.4.6.15"></a><p>[<abbr class="abbrev">RFC2915</abbr>]
<span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span>
<span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span>
@@ -485,7 +479,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.16"></a><p>[<abbr class="abbrev">RFC3110</abbr>]
<a name="id-1.12.3.2.4.6.16"></a><p>[<abbr class="abbrev">RFC3110</abbr>]
<span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span>
@@ -493,7 +487,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.17"></a><p>[<abbr class="abbrev">RFC3123</abbr>]
<a name="id-1.12.3.2.4.6.17"></a><p>[<abbr class="abbrev">RFC3123</abbr>]
<span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span>
<span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span>
@@ -501,7 +495,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.18"></a><p>[<abbr class="abbrev">RFC3596</abbr>]
<a name="id-1.12.3.2.4.6.18"></a><p>[<abbr class="abbrev">RFC3596</abbr>]
<span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span>
<span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
@@ -510,7 +504,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.6.19"></a><p>[<abbr class="abbrev">RFC3597</abbr>]
<a name="id-1.12.3.2.4.6.19"></a><p>[<abbr class="abbrev">RFC3597</abbr>]
<span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span>
<span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span>
@@ -520,10 +514,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.7"></a><acronym class="acronym">DNS</acronym> and the Internet</h3>
<a name="id-1.12.3.2.4.7"></a><acronym class="acronym">DNS</acronym> and the Internet</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.2"></a><p>[<abbr class="abbrev">RFC1101</abbr>]
<a name="id-1.12.3.2.4.7.2"></a><p>[<abbr class="abbrev">RFC1101</abbr>]
<span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span>
<span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
@@ -532,7 +526,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.3"></a><p>[<abbr class="abbrev">RFC1123</abbr>]
<a name="id-1.12.3.2.4.7.3"></a><p>[<abbr class="abbrev">RFC1123</abbr>]
<span class="author"><span class="surname">Braden</span>. </span>
<span class="title"><i>Requirements for Internet Hosts - Application and
@@ -541,7 +535,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.4"></a><p>[<abbr class="abbrev">RFC1591</abbr>]
<a name="id-1.12.3.2.4.7.4"></a><p>[<abbr class="abbrev">RFC1591</abbr>]
<span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span>
<span class="title"><i>Domain Name System Structure and Delegation</i>. </span>
@@ -549,7 +543,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.5"></a><p>[<abbr class="abbrev">RFC2317</abbr>]
<a name="id-1.12.3.2.4.7.5"></a><p>[<abbr class="abbrev">RFC2317</abbr>]
<span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
<span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span>
@@ -557,7 +551,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.6"></a><p>[<abbr class="abbrev">RFC2826</abbr>]
<a name="id-1.12.3.2.4.7.6"></a><p>[<abbr class="abbrev">RFC2826</abbr>]
<span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span>
<span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span>
@@ -565,7 +559,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.7.7"></a><p>[<abbr class="abbrev">RFC2929</abbr>]
<a name="id-1.12.3.2.4.7.7"></a><p>[<abbr class="abbrev">RFC2929</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span>
<span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span>
@@ -575,10 +569,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.8"></a><acronym class="acronym">DNS</acronym> Operations</h3>
<a name="id-1.12.3.2.4.8"></a><acronym class="acronym">DNS</acronym> Operations</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.8.2"></a><p>[<abbr class="abbrev">RFC1033</abbr>]
<a name="id-1.12.3.2.4.8.2"></a><p>[<abbr class="abbrev">RFC1033</abbr>]
<span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span>
<span class="title"><i>Domain administrators operations guide</i>. </span>
@@ -586,7 +580,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.8.3"></a><p>[<abbr class="abbrev">RFC1537</abbr>]
<a name="id-1.12.3.2.4.8.3"></a><p>[<abbr class="abbrev">RFC1537</abbr>]
<span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span>
<span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
@@ -595,7 +589,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.8.4"></a><p>[<abbr class="abbrev">RFC1912</abbr>]
<a name="id-1.12.3.2.4.8.4"></a><p>[<abbr class="abbrev">RFC1912</abbr>]
<span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span>
<span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
@@ -604,7 +598,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.8.5"></a><p>[<abbr class="abbrev">RFC2010</abbr>]
<a name="id-1.12.3.2.4.8.5"></a><p>[<abbr class="abbrev">RFC2010</abbr>]
<span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span>
<span class="title"><i>Operational Criteria for Root Name Servers</i>. </span>
@@ -612,7 +606,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.8.6"></a><p>[<abbr class="abbrev">RFC2219</abbr>]
<a name="id-1.12.3.2.4.8.6"></a><p>[<abbr class="abbrev">RFC2219</abbr>]
<span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span>
<span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
@@ -623,10 +617,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.9"></a>Internationalized Domain Names</h3>
<a name="id-1.12.3.2.4.9"></a>Internationalized Domain Names</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.9.2"></a><p>[<abbr class="abbrev">RFC2825</abbr>]
<a name="id-1.12.3.2.4.9.2"></a><p>[<abbr class="abbrev">RFC2825</abbr>]
<span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span>
<span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
@@ -635,7 +629,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.9.3"></a><p>[<abbr class="abbrev">RFC3490</abbr>]
<a name="id-1.12.3.2.4.9.3"></a><p>[<abbr class="abbrev">RFC3490</abbr>]
<span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span>
<span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span>
@@ -643,7 +637,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.9.4"></a><p>[<abbr class="abbrev">RFC3491</abbr>]
<a name="id-1.12.3.2.4.9.4"></a><p>[<abbr class="abbrev">RFC3491</abbr>]
<span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span>
<span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span>
@@ -651,7 +645,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.9.5"></a><p>[<abbr class="abbrev">RFC3492</abbr>]
<a name="id-1.12.3.2.4.9.5"></a><p>[<abbr class="abbrev">RFC3492</abbr>]
<span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span>
<span class="title"><i>Punycode: A Bootstring encoding of Unicode
@@ -663,7 +657,7 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.10"></a>Other <acronym class="acronym">DNS</acronym>-related RFCs</h3>
<a name="id-1.12.3.2.4.10"></a>Other <acronym class="acronym">DNS</acronym>-related RFCs</h3>
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
<h3 class="title">Note</h3>
@@ -674,7 +668,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.3"></a><p>[<abbr class="abbrev">RFC1464</abbr>]
<a name="id-1.12.3.2.4.10.3"></a><p>[<abbr class="abbrev">RFC1464</abbr>]
<span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span>
<span class="title"><i>Using the Domain Name System To Store Arbitrary String
@@ -683,7 +677,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.4"></a><p>[<abbr class="abbrev">RFC1713</abbr>]
<a name="id-1.12.3.2.4.10.4"></a><p>[<abbr class="abbrev">RFC1713</abbr>]
<span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span>
<span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span>
@@ -691,7 +685,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.5"></a><p>[<abbr class="abbrev">RFC1794</abbr>]
<a name="id-1.12.3.2.4.10.5"></a><p>[<abbr class="abbrev">RFC1794</abbr>]
<span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span>
<span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
@@ -700,7 +694,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.6"></a><p>[<abbr class="abbrev">RFC2240</abbr>]
<a name="id-1.12.3.2.4.10.6"></a><p>[<abbr class="abbrev">RFC2240</abbr>]
<span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span>
<span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span>
@@ -708,7 +702,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.7"></a><p>[<abbr class="abbrev">RFC2345</abbr>]
<a name="id-1.12.3.2.4.10.7"></a><p>[<abbr class="abbrev">RFC2345</abbr>]
<span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span>
<span class="title"><i>Domain Names and Company Name Retrieval</i>. </span>
@@ -716,7 +710,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.8"></a><p>[<abbr class="abbrev">RFC2352</abbr>]
<a name="id-1.12.3.2.4.10.8"></a><p>[<abbr class="abbrev">RFC2352</abbr>]
<span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span>
<span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span>
@@ -724,7 +718,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.9"></a><p>[<abbr class="abbrev">RFC3071</abbr>]
<a name="id-1.12.3.2.4.10.9"></a><p>[<abbr class="abbrev">RFC3071</abbr>]
<span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span>
<span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span>
@@ -732,7 +726,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.10"></a><p>[<abbr class="abbrev">RFC3258</abbr>]
<a name="id-1.12.3.2.4.10.10"></a><p>[<abbr class="abbrev">RFC3258</abbr>]
<span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span>
<span class="title"><i>Distributing Authoritative Name Servers via
@@ -741,7 +735,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.10.11"></a><p>[<abbr class="abbrev">RFC3901</abbr>]
<a name="id-1.12.3.2.4.10.11"></a><p>[<abbr class="abbrev">RFC3901</abbr>]
<span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span>
<span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span>
@@ -751,10 +745,10 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.11"></a>Obsolete and Unimplemented Experimental RFC</h3>
<a name="id-1.12.3.2.4.11"></a>Obsolete and Unimplemented Experimental RFC</h3>
<div class="biblioentry">
<a name="id-1.12.3.2.6.11.2"></a><p>[<abbr class="abbrev">RFC1712</abbr>]
<a name="id-1.12.3.2.4.11.2"></a><p>[<abbr class="abbrev">RFC1712</abbr>]
<span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span>
<span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
@@ -763,7 +757,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.11.3"></a><p>[<abbr class="abbrev">RFC2673</abbr>]
<a name="id-1.12.3.2.4.11.3"></a><p>[<abbr class="abbrev">RFC2673</abbr>]
<span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span>
<span class="title"><i>Binary Labels in the Domain Name System</i>. </span>
@@ -771,7 +765,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.11.4"></a><p>[<abbr class="abbrev">RFC2874</abbr>]
<a name="id-1.12.3.2.4.11.4"></a><p>[<abbr class="abbrev">RFC2874</abbr>]
<span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span>
<span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
@@ -782,7 +776,7 @@
</div>
<div class="bibliodiv">
<h3 class="title">
<a name="id-1.12.3.2.6.12"></a>Obsoleted DNS Security RFCs</h3>
<a name="id-1.12.3.2.4.12"></a>Obsoleted DNS Security RFCs</h3>
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
<h3 class="title">Note</h3>
@@ -792,7 +786,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.3"></a><p>[<abbr class="abbrev">RFC2065</abbr>]
<a name="id-1.12.3.2.4.12.3"></a><p>[<abbr class="abbrev">RFC2065</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span>
<span class="title"><i>Domain Name System Security Extensions</i>. </span>
@@ -800,7 +794,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.4"></a><p>[<abbr class="abbrev">RFC2137</abbr>]
<a name="id-1.12.3.2.4.12.4"></a><p>[<abbr class="abbrev">RFC2137</abbr>]
<span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span>
@@ -808,7 +802,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.5"></a><p>[<abbr class="abbrev">RFC2535</abbr>]
<a name="id-1.12.3.2.4.12.5"></a><p>[<abbr class="abbrev">RFC2535</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span>
<span class="title"><i>Domain Name System Security Extensions</i>. </span>
@@ -816,7 +810,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.6"></a><p>[<abbr class="abbrev">RFC3008</abbr>]
<a name="id-1.12.3.2.4.12.6"></a><p>[<abbr class="abbrev">RFC3008</abbr>]
<span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span>
<span class="title"><i>Domain Name System Security (DNSSEC)
@@ -825,7 +819,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.7"></a><p>[<abbr class="abbrev">RFC3090</abbr>]
<a name="id-1.12.3.2.4.12.7"></a><p>[<abbr class="abbrev">RFC3090</abbr>]
<span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span>
<span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span>
@@ -833,7 +827,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.8"></a><p>[<abbr class="abbrev">RFC3445</abbr>]
<a name="id-1.12.3.2.4.12.8"></a><p>[<abbr class="abbrev">RFC3445</abbr>]
<span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span>
<span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span>
@@ -841,7 +835,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.9"></a><p>[<abbr class="abbrev">RFC3655</abbr>]
<a name="id-1.12.3.2.4.12.9"></a><p>[<abbr class="abbrev">RFC3655</abbr>]
<span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span>
<span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span>
@@ -849,7 +843,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.10"></a><p>[<abbr class="abbrev">RFC3658</abbr>]
<a name="id-1.12.3.2.4.12.10"></a><p>[<abbr class="abbrev">RFC3658</abbr>]
<span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span>
<span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span>
@@ -857,7 +851,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.11"></a><p>[<abbr class="abbrev">RFC3755</abbr>]
<a name="id-1.12.3.2.4.12.11"></a><p>[<abbr class="abbrev">RFC3755</abbr>]
<span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span>
<span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span>
@@ -865,7 +859,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.12"></a><p>[<abbr class="abbrev">RFC3757</abbr>]
<a name="id-1.12.3.2.4.12.12"></a><p>[<abbr class="abbrev">RFC3757</abbr>]
<span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span>
<span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
@@ -874,7 +868,7 @@
</p>
</div>
<div class="biblioentry">
<a name="id-1.12.3.2.6.12.13"></a><p>[<abbr class="abbrev">RFC3845</abbr>]
<a name="id-1.12.3.2.4.12.13"></a><p>[<abbr class="abbrev">RFC3845</abbr>]
<span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span>
<span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span>
@@ -935,6 +929,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch12.html
+55 -55
View File
@@ -66,7 +66,7 @@
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
The "DNS client" module. This is a higher level API that
The "DNS client" module. This is a higher-level API that
provides an interface to name resolution, single DNS transaction
with a particular server, and dynamic update. Regarding name
resolution, it supports advanced features such as DNSSEC validation
@@ -110,11 +110,11 @@
$ <strong class="userinput"><code>make install</code></strong>
</pre>
<p>
Normal installation of BIND will also install library object
Normal installation of BIND also installs library object
and header files. Root privilege is normally required.
</p>
<p>
To see how to build your own application after the installation, see
To see how to build a custom application after the installation, see
<code class="filename">lib/samples/Makefile-postinstall.in</code>.
</p>
</div>
@@ -126,9 +126,9 @@ $ <strong class="userinput"><code>make install</code></strong>
<li class="listitem">
<p>
The "fixed" RRset order is not (currently) supported in the export
library. If you want to use "fixed" RRset order for, e.g.
library. To use "fixed" RRset order for, e.g.,
<span class="command"><strong>named</strong></span> while still building the export library
even without the fixed order support, build them separately:
even without the fixed-order support, build them separately:
</p>
<pre class="screen">
$ <strong class="userinput"><code>./configure --enable-fixed-rrset <em class="replaceable"><code>[other flags, but not --enable-exportlib]</code></em></code></strong>
@@ -143,9 +143,9 @@ $ <strong class="userinput"><code>make</code></strong>
<li class="listitem">
<p>
RFC 5011 is not supported in the validating stub resolver of the
export library. In fact, it is not clear whether it should: trust
export library. In fact, it is not clear whether it should be: trust
anchors would be a system-wide configuration which would be managed
by an administrator, while the stub resolver will be used by
by an administrator, while the stub resolver is used by
ordinary applications run by a normal user.
</p>
</li>
@@ -164,9 +164,9 @@ $ <strong class="userinput"><code>make</code></strong>
<p>
The IRS library supports an "advanced" configuration file related to
the DNS library for configuration parameters that would be beyond the
the DNS library, for configuration parameters that would be beyond the
capability of the <code class="filename">resolv.conf</code> file.
Specifically, it is intended to provide DNSSEC related configuration
Specifically, it is intended to provide DNSSEC-related configuration
parameters. By default the path to this configuration file is
<code class="filename">/etc/dns.conf</code>. This module is very experimental
and the configuration syntax or library interfaces may change in
@@ -190,10 +190,10 @@ $ <strong class="userinput"><code>make</code></strong>
<a name="id-1.13.2.8.3"></a>sample: a simple stub resolver utility</h4></div></div></div>
<p>
Sends a query of a given name (of a given optional RR type) to a
This sends a query of a given name (of a given optional RR type) to a
specified recursive server and prints the result as a list of RRs.
It can also act as a validating stub resolver if a trust anchor is
given via a set of command line options.
given via a set of command-line options.
</p>
<p>
Usage: sample [options] server_address hostname
@@ -205,13 +205,13 @@ $ <strong class="userinput"><code>make</code></strong>
<dt><span class="term">-t RRtype</span></dt>
<dd>
<p>
specify the RR type of the query. The default is the A RR.
specifies the RR type of the query. The default is the A RR.
</p>
</dd>
<dt><span class="term">[-a algorithm] [-e] -k keyname -K keystring</span></dt>
<dd>
<p>
specify a command-line DNS key to validate the answer. For
specifies a command-line DNS key to validate the answer. For
example, to specify the following DNSKEY of example.com:
</p>
<div class="literallayout"><p><br>
@@ -226,27 +226,27 @@ $ <strong class="userinput"><code>make</code></strong>
<p>
-e means that this key is a zone's "key signing key" (also known
as "secure entry point").
When -a is omitted rsasha1 will be used by default.
When -a is omitted rsasha1 is used by default.
</p>
</dd>
<dt><span class="term">-s domain:alt_server_address</span></dt>
<dd>
<p>
specify a separate recursive server address for the specific
specifies a separate recursive server address for the specific
"domain". Example: -s example.com:2001:db8::1234
</p>
</dd>
<dt><span class="term">server_address</span></dt>
<dd>
<p>
an IP(v4/v6) address of the recursive server to which queries
is an IP(v4/v6) address of the recursive server to which queries
are sent.
</p>
</dd>
<dt><span class="term">hostname</span></dt>
<dd>
<p>
the domain name for the query
is the domain name for the query
</p>
</dd>
</dl></div>
@@ -256,7 +256,7 @@ $ <strong class="userinput"><code>make</code></strong>
<a name="id-1.13.2.8.4"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
<p>
Similar to "sample", but accepts a list
This is similar to "sample", but accepts a list
of (query) domain names as a separate file and resolves the names
asynchronously.</p>
<p>
@@ -267,18 +267,18 @@ $ <strong class="userinput"><code>make</code></strong>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-s server_address</span></dt>
<dd>
an IPv4 address of the recursive server to which queries are sent.
(IPv6 addresses are not supported in this implementation)
is an IPv4 address of the recursive server to which queries are sent.
(IPv6 addresses are not supported in this implementation.)
</dd>
<dt><span class="term">-t RR_type</span></dt>
<dd>
specify the RR type of the queries. The default is the A
specifies the RR type of the queries. The default is the A
RR.
</dd>
<dt><span class="term">input_file</span></dt>
<dd>
a list of domain names to be resolved. each line consists of a
single domain name. Example:
is a list of domain names to be resolved; each line consists of a
single domain name. For example:
<div class="literallayout"><p><br>
      www.example.com<br>
      mx.example.net<br>
@@ -292,8 +292,8 @@ $ <strong class="userinput"><code>make</code></strong>
<a name="id-1.13.2.8.5"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
<p>
Sends a query to a specified server, and prints the response with
minimal processing. It doesn't act as a "stub resolver": it stops
sends a query to a specified server, and prints the response with
minimal processing. It does not act as a "stub resolver": it stops
the processing once it gets any response from the server, whether
it's a referral or an alias (CNAME or DNAME) that would require
further queries to get the ultimate answer. In other words, this
@@ -309,20 +309,20 @@ $ <strong class="userinput"><code>make</code></strong>
<dt><span class="term">-t RRtype</span></dt>
<dd>
<p>
specify the RR type of the queries. The default is the A RR.
specifies the RR type of the queries. The default is the A RR.
</p>
</dd>
<dt><span class="term">server_address</span></dt>
<dd>
<p>
an IP(v4/v6) address of the recursive server to which
is an IP(v4/v6) address of the recursive server to which
the query is sent.
</p>
</dd>
<dt><span class="term">hostname</span></dt>
<dd>
<p>
the domain name for the query
is the domain name for the query
</p>
</dd>
</dl></div>
@@ -332,15 +332,15 @@ $ <strong class="userinput"><code>make</code></strong>
<a name="id-1.13.2.8.6"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
<p>
This is a test program to check <span class="command"><strong>getaddrinfo()</strong></span> and
is a test program to check <span class="command"><strong>getaddrinfo()</strong></span> and
<span class="command"><strong>getnameinfo()</strong></span> behavior. It takes a host name as an
argument, calls <span class="command"><strong>getaddrinfo()</strong></span> with the given host
name, and calls <span class="command"><strong>getnameinfo()</strong></span> with the resulting
IP addresses returned by <span class="command"><strong>getaddrinfo()</strong></span>. If the
dns.conf file exists and defines a trust anchor, the underlying
resolver will act as a validating resolver, and
resolver acts as a validating resolver, and
<span class="command"><strong>getaddrinfo()</strong></span>/<span class="command"><strong>getnameinfo()</strong></span>
will fail with an EAI_INSECUREDATA error when DNSSEC validation
fails with an EAI_INSECUREDATA error when DNSSEC validation
fails.
</p>
<p>
@@ -352,7 +352,7 @@ $ <strong class="userinput"><code>make</code></strong>
<a name="id-1.13.2.8.7"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
<p>
Accepts a single update command as a command-line argument, sends
accepts a single update command as a command-line argument, sends
an update request message to the authoritative server, and shows
the response from the server. In other words, this is a simplified
<span class="command"><strong>nsupdate</strong></span>.
@@ -367,7 +367,7 @@ $ <strong class="userinput"><code>make</code></strong>
<dt><span class="term">-a auth_server</span></dt>
<dd>
<p>
An IP address of the authoritative server that has authority
is an IP address of the authoritative server that has authority
for the zone containing the update name. This should
normally be the primary authoritative server that accepts
dynamic updates. It can also be a secondary server that is
@@ -377,23 +377,23 @@ $ <strong class="userinput"><code>make</code></strong>
<dt><span class="term">-k keyfile</span></dt>
<dd>
<p>
A TSIG key file to secure the update transaction. The
is a TSIG key file to secure the update transaction. The
keyfile format is the same as that for the nsupdate utility.
</p>
</dd>
<dt><span class="term">-p prerequisite</span></dt>
<dd>
<p>
A prerequisite for the update (only one prerequisite can be
specified). The prerequisite format is the same as that is
is a prerequisite for the update; only one prerequisite can be
specified. The prerequisite format is the same as that
accepted by the nsupdate utility.
</p>
</dd>
<dt><span class="term">-r recursive_server</span></dt>
<dd>
<p>
An IP address of a recursive server that this utility will
use. A recursive server may be necessary to identify the
is an IP address of a recursive server that this utility
uses. A recursive server may be necessary to identify the
authoritative server address to which the update request is
sent.
</p>
@@ -401,21 +401,21 @@ $ <strong class="userinput"><code>make</code></strong>
<dt><span class="term">-z zonename</span></dt>
<dd>
<p>
The domain name of the zone that contains
is the domain name of the zone that it contains.
</p>
</dd>
<dt><span class="term">(add|delete)</span></dt>
<dd>
<p>
Specify the type of update operation. Either "add" or
specifies the type of update operation. Either "add" or
"delete" must be specified.
</p>
</dd>
<dt><span class="term">"update data"</span></dt>
<dd>
<p>
Specify the data to be updated. A typical example of the
data would look like "name TTL RRtype RDATA".
specifies the data to be updated. A typical example of the
data looks like "name TTL RRtype RDATA".
</p>
</dd>
</dl></div>
@@ -452,7 +452,7 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
<a name="id-1.13.2.8.8"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
<p>
Checks a set of domains to see the name servers of the domains
checks a set of domains to ensure the name servers of the domains
behave correctly in terms of RFC 4074. This is included in the set
of sample programs to show how the export library can be used in a
DNS-related application.
@@ -467,21 +467,21 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
<dt><span class="term">-d</span></dt>
<dd>
<p>
Run in "debug" mode. With this option nsprobe will dump
every RRs it receives.
runs in "debug" mode. With this option, nsprobe dumps
every RR it receives.
</p>
</dd>
<dt><span class="term">-v</span></dt>
<dd>
<p>
Increase verbosity of other normal log messages. This can be
increases verbosity of other normal log messages. This can be
specified multiple times.
</p>
</dd>
<dt><span class="term">-c cache_address</span></dt>
<dd>
<p>
Specify an IP address of a recursive (caching) name server.
specifies an IP address of a recursive (caching) name server.
nsprobe uses this server to get the NS RRset of each domain
and the A and/or AAAA RRsets for the name servers. The
default value is 127.0.0.1.
@@ -490,14 +490,14 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
<dt><span class="term">input_file</span></dt>
<dd>
<p>
A file name containing a list of domain (zone) names to be
probed. when omitted the standard input will be used. Each
line of the input file specifies a single domain name such as
"example.com". In general this domain name must be the apex
name of some DNS zone (unlike normal "host names" such as
"www.example.com"). nsprobe first identifies the NS RRsets
is a file name containing a list of domain (zone) names to be
probed. when omitted the standard input is used. Each
line of the input file specifies a single domain name, such as
"example.com". In general, this domain name must be the apex
name of some DNS zone, unlike normal "host names" such as
"www.example.com". nsprobe first identifies the NS RRsets
for the given domain name, and sends A and AAAA queries to
these servers for some "widely used" names under the zone;
these servers for some widely used names under the zone;
specifically, adding "www" and "ftp" to the zone name.
</p>
</dd>
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.ch13.html
+43 -42
View File
@@ -14,7 +14,7 @@
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="prev" href="Bv9ARM.ch12.html" title="Appendix D. BIND 9 DNS Library Support">
<link rel="next" href="man.dig.html" title="dig">
<link rel="next" href="man.arpaname.html" title="arpaname">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -24,7 +24,7 @@
<td width="20%" align="left">
<a accesskey="p" href="Bv9ARM.ch12.html">Prev</a> </td>
<th width="60%" align="center"> </th>
<td width="20%" align="right"> <a accesskey="n" href="man.dig.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.arpaname.html">Next</a>
</td>
</tr>
</table>
@@ -40,19 +40,16 @@
<p><b>Table of Contents</b></p>
<dl class="toc">
<dt>
<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
<span class="refentrytitle"><a href="man.arpaname.html"><span class="application">arpaname</span></a></span><span class="refpurpose"> &#8212; translate IP addresses to the corresponding ARPA names</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.mdig.html"><span class="application">mdig</span></a></span><span class="refpurpose"> &#8212; DNS pipelined lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
<span class="refentrytitle"><a href="man.ddns-confgen.html"><span class="application">ddns-confgen</span></a></span><span class="refpurpose"> &#8212; ddns key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.delv.html">delv</a></span><span class="refpurpose"> &#8212; DNS lookup and validation utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nslookup.html">nslookup</a></span><span class="refpurpose"> &#8212; query Internet name servers interactively</span>
<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> &#8212; DNSSEC delegation consistency checking tool</span>
@@ -88,13 +85,22 @@
<span class="refentrytitle"><a href="man.dnssec-verify.html"><span class="application">dnssec-verify</span></a></span><span class="refpurpose"> &#8212; DNSSEC zone verification tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnstap-read.html"><span class="application">dnstap-read</span></a></span><span class="refpurpose"> &#8212; print dnstap data in human-readable form</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.genrandom.html"><span class="application">genrandom</span></a></span><span class="refpurpose"> &#8212; generate a file containing random data</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.isc-hmac-fixup.html"><span class="application">isc-hmac-fixup</span></a></span><span class="refpurpose"> &#8212; fixes HMAC keys generated by older versions of BIND</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.lwresd.html"><span class="application">lwresd</span></a></span><span class="refpurpose"> &#8212; lightweight resolver daemon</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> &#8212; Internet domain name server</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named.conf.html"><code class="filename">named.conf</code></a></span><span class="refpurpose"> &#8212; configuration file for <span class="command"><strong>named</strong></span></span>
<span class="refentrytitle"><a href="man.mdig.html"><span class="application">mdig</span></a></span><span class="refpurpose"> &#8212; DNS pipelined lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named-checkconf.html"><span class="application">named-checkconf</span></a></span><span class="refpurpose"> &#8212; named configuration file syntax checking tool</span>
@@ -114,47 +120,41 @@
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> &#8212; syntax checker for individual DNS resource records</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> &#8212; Dynamic DNS update utility</span>
<span class="refentrytitle"><a href="man.named.conf.html"><code class="filename">named.conf</code></a></span><span class="refpurpose"> &#8212; configuration file for <span class="command"><strong>named</strong></span></span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> &#8212; name server control utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> &#8212; rndc configuration file</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> &#8212; rndc key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.ddns-confgen.html"><span class="application">ddns-confgen</span></a></span><span class="refpurpose"> &#8212; ddns key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.arpaname.html"><span class="application">arpaname</span></a></span><span class="refpurpose"> &#8212; translate IP addresses to the corresponding ARPA names</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnstap-read.html"><span class="application">dnstap-read</span></a></span><span class="refpurpose"> &#8212; print dnstap data in human-readable form</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.genrandom.html"><span class="application">genrandom</span></a></span><span class="refpurpose"> &#8212; generate a file containing random data</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.isc-hmac-fixup.html"><span class="application">isc-hmac-fixup</span></a></span><span class="refpurpose"> &#8212; fixes HMAC keys generated by older versions of BIND</span>
<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> &#8212; Internet domain name server</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nsec3hash.html"><span class="application">nsec3hash</span></a></span><span class="refpurpose"> &#8212; generate NSEC3 hash</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-destroy.html"><span class="application">pkcs11-destroy</span></a></span><span class="refpurpose"> &#8212; destroy PKCS#11 objects</span>
<span class="refentrytitle"><a href="man.nslookup.html">nslookup</a></span><span class="refpurpose"> &#8212; query Internet name servers interactively</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-list.html"><span class="application">pkcs11-list</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 objects</span>
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> &#8212; Dynamic DNS update utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-destroy.html"><span class="application">pkcs11-destroy</span></a></span><span class="refpurpose"> &#8212; destroy PKCS#11 objects</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-keygen.html"><span class="application">pkcs11-keygen</span></a></span><span class="refpurpose"> &#8212; generate keys on a PKCS#11 device</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-list.html"><span class="application">pkcs11-list</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 objects</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-tokens.html"><span class="application">pkcs11-tokens</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 available tokens</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> &#8212; rndc key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> &#8212; rndc configuration file</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> &#8212; name server control utility</span>
</dt>
</dl>
</div>
@@ -185,8 +185,8 @@
@@ -203,16 +203,17 @@
<td width="40%" align="left">
<a accesskey="p" href="Bv9ARM.ch12.html">Prev</a> </td>
<td width="20%" align="center"> </td>
<td width="40%" align="right"> <a accesskey="n" href="man.dig.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.arpaname.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">Appendix D. BIND 9 DNS Library Support </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> dig</td>
<td width="40%" align="right" valign="top"> <span class="application">arpaname</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.html
+62 -61
View File
@@ -32,7 +32,7 @@
<div>
<div><h1 class="title">
<a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
<div><p class="releaseinfo">BIND Version 9.11.21</p></div>
<div><p class="releaseinfo">BIND Version 9.11.22</p></div>
<div><p class="copyright">Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")</p></div>
</div>
<hr>
@@ -60,7 +60,7 @@
<dt><span class="section"><a href="Bv9ARM.ch02.html#hw_req">Hardware requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#cpu_req">CPU Requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#mem_req">Memory Requirements</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#intensive_env">Name Server Intensive Environment Issues</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#intensive_env">Name Server-Intensive Environment Issues</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch02.html#supported_os">Supported Operating Systems</a></span></dt>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch03.html">3. Name Server Configuration</a></span></dt>
@@ -81,14 +81,14 @@
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#notify">Notify</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch04.html#journal">The Journal File</a></span></dt></dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#split_dns">Split DNS</a></span></dt>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch04.html#split_dns_sample">Example split DNS setup</a></span></dt></dl></dd>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch04.html#split_dns_sample">Example Split DNS Setup</a></span></dt></dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.5">Generating a Shared Key</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.6">Loading A New Key</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.6">Loading a New Key</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.7">Instructing the Server to Use a Key</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.8">TSIG-Based Access Control</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.6.9">Errors</a></span></dt>
@@ -99,22 +99,22 @@
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dnssec_keys">Generating Keys</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dnssec_signing">Signing the Zone</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dnssec_config">Configuring Servers</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dnssec_config">Configuring Servers for DNSSEC</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.2">Converting from insecure to secure</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.7">Dynamic DNS update method</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.15">Fully automatic zone signing</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.24">Private-type records</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.31">DNSKEY rollovers</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.33">Dynamic DNS update method</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.38">Automatic key rollovers</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.40">NSEC3PARAM rollovers via UPDATE</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.42">Converting from NSEC to NSEC3</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.44">Converting from NSEC3 to NSEC</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.46">Converting from secure to insecure</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.50">Periodic re-signing</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.7">Dynamic DNS Update Method</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.15">Fully Automatic Zone Signing</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.24">Private Type Records</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.31">DNSKEY Rollovers</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.33">Dynamic DNS Update Method</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.38">Automatic Key Rollovers</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.40">NSEC3PARAM Rollovers via UPDATE</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.42">Converting From NSEC to NSEC3</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.44">Converting From NSEC3 to NSEC</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.46">Converting From Secure to Insecure</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.50">Periodic Re-signing</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.10.52">NSEC3 and OPTOUT</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt>
@@ -122,7 +122,7 @@
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.11.3">Validating Resolver</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.11.4">Authoritative Server</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#pkcs11">PKCS#11 (Cryptoki) support</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#pkcs11">PKCS#11 (Cryptoki) Support</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.12.6">Prerequisites</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.12.7">Native PKCS#11</a></span></dt>
@@ -137,7 +137,7 @@
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.13.6">Configuring DLZ</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.13.7">Sample DLZ Driver</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dyndb-info">DynDB (Dynamic Database)</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#dyndb-info">Dynamic Database (DynDB)</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.14.5">Configuring DynDB</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.14.6">Sample DynDB Module</a></span></dt>
@@ -146,12 +146,12 @@
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.15.4">Principle of Operation</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.15.5">Configuring Catalog Zones</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.15.6">Catalog Zone format</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.15.6">Catalog Zone Format</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch04.html#ipv6">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.16.6">Address Lookups Using AAAA Records</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.16.7">Address to Name Lookups Using Nibble Format</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch04.html#id-1.5.16.7">Address-to-Name Lookups Using Nibble Format</a></span></dt>
</dl></dd>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch05.html">5. The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</a></span></dt>
@@ -213,10 +213,10 @@
<dt><span class="section"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#ipv4_reverse">Inverse Mapping in IPv4</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#zone_directives">Other Zone File Directives</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#generate_directive"><acronym class="acronym">BIND</acronym> Master File Extension: the <span class="command"><strong>$GENERATE</strong></span> Directive</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#generate_directive"><acronym class="acronym">BIND</acronym> Primary File Extension: the <span class="command"><strong>$GENERATE</strong></span> Directive</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
</dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#statistics">BIND 9 Statistics</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch06.html#statsfile">The Statistics File</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch06.html#statistics_counters">Statistics Counters</a></span></dt>
@@ -235,17 +235,18 @@
<dt><span class="chapter"><a href="Bv9ARM.ch08.html">8. Troubleshooting</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch08.html#common_problems">Common Problems</a></span></dt>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2.2">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
<dd><dl><dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2.2">It's Not Working; How Can I Figure Out What's Wrong?</a></span></dt></dl></dd>
<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.3">Incrementing and Changing the Serial Number</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch08.html#more_help">Where Can I Get Help?</a></span></dt>
</dl></dd>
<dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.21</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.22</a></span></dt>
<dd><dl>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.22">Notes for BIND 9.11.22</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.21">Notes for BIND 9.11.21</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.20">Notes for BIND 9.11.20</a></span></dt>
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.19">Notes for BIND 9.11.19</a></span></dt>
@@ -297,19 +298,16 @@
<dt><span class="reference"><a href="Bv9ARM.ch13.html">I. Manual pages</a></span></dt>
<dd><dl>
<dt>
<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
<span class="refentrytitle"><a href="man.arpaname.html"><span class="application">arpaname</span></a></span><span class="refpurpose"> &#8212; translate IP addresses to the corresponding ARPA names</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.mdig.html"><span class="application">mdig</span></a></span><span class="refpurpose"> &#8212; DNS pipelined lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
<span class="refentrytitle"><a href="man.ddns-confgen.html"><span class="application">ddns-confgen</span></a></span><span class="refpurpose"> &#8212; ddns key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.delv.html">delv</a></span><span class="refpurpose"> &#8212; DNS lookup and validation utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nslookup.html">nslookup</a></span><span class="refpurpose"> &#8212; query Internet name servers interactively</span>
<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> &#8212; DNSSEC delegation consistency checking tool</span>
@@ -345,13 +343,22 @@
<span class="refentrytitle"><a href="man.dnssec-verify.html"><span class="application">dnssec-verify</span></a></span><span class="refpurpose"> &#8212; DNSSEC zone verification tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnstap-read.html"><span class="application">dnstap-read</span></a></span><span class="refpurpose"> &#8212; print dnstap data in human-readable form</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.genrandom.html"><span class="application">genrandom</span></a></span><span class="refpurpose"> &#8212; generate a file containing random data</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> &#8212; DNS lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.isc-hmac-fixup.html"><span class="application">isc-hmac-fixup</span></a></span><span class="refpurpose"> &#8212; fixes HMAC keys generated by older versions of BIND</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.lwresd.html"><span class="application">lwresd</span></a></span><span class="refpurpose"> &#8212; lightweight resolver daemon</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> &#8212; Internet domain name server</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named.conf.html"><code class="filename">named.conf</code></a></span><span class="refpurpose"> &#8212; configuration file for <span class="command"><strong>named</strong></span></span>
<span class="refentrytitle"><a href="man.mdig.html"><span class="application">mdig</span></a></span><span class="refpurpose"> &#8212; DNS pipelined lookup utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.named-checkconf.html"><span class="application">named-checkconf</span></a></span><span class="refpurpose"> &#8212; named configuration file syntax checking tool</span>
@@ -371,47 +378,41 @@
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> &#8212; syntax checker for individual DNS resource records</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> &#8212; Dynamic DNS update utility</span>
<span class="refentrytitle"><a href="man.named.conf.html"><code class="filename">named.conf</code></a></span><span class="refpurpose"> &#8212; configuration file for <span class="command"><strong>named</strong></span></span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> &#8212; name server control utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> &#8212; rndc configuration file</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> &#8212; rndc key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.ddns-confgen.html"><span class="application">ddns-confgen</span></a></span><span class="refpurpose"> &#8212; ddns key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.arpaname.html"><span class="application">arpaname</span></a></span><span class="refpurpose"> &#8212; translate IP addresses to the corresponding ARPA names</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.dnstap-read.html"><span class="application">dnstap-read</span></a></span><span class="refpurpose"> &#8212; print dnstap data in human-readable form</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.genrandom.html"><span class="application">genrandom</span></a></span><span class="refpurpose"> &#8212; generate a file containing random data</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.isc-hmac-fixup.html"><span class="application">isc-hmac-fixup</span></a></span><span class="refpurpose"> &#8212; fixes HMAC keys generated by older versions of BIND</span>
<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> &#8212; Internet domain name server</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.nsec3hash.html"><span class="application">nsec3hash</span></a></span><span class="refpurpose"> &#8212; generate NSEC3 hash</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-destroy.html"><span class="application">pkcs11-destroy</span></a></span><span class="refpurpose"> &#8212; destroy PKCS#11 objects</span>
<span class="refentrytitle"><a href="man.nslookup.html">nslookup</a></span><span class="refpurpose"> &#8212; query Internet name servers interactively</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-list.html"><span class="application">pkcs11-list</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 objects</span>
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> &#8212; Dynamic DNS update utility</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-destroy.html"><span class="application">pkcs11-destroy</span></a></span><span class="refpurpose"> &#8212; destroy PKCS#11 objects</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-keygen.html"><span class="application">pkcs11-keygen</span></a></span><span class="refpurpose"> &#8212; generate keys on a PKCS#11 device</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-list.html"><span class="application">pkcs11-list</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 objects</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.pkcs11-tokens.html"><span class="application">pkcs11-tokens</span></a></span><span class="refpurpose"> &#8212; list PKCS#11 available tokens</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> &#8212; rndc key generation tool</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> &#8212; rndc configuration file</span>
</dt>
<dt>
<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> &#8212; name server control utility</span>
</dt>
</dl></dd>
</dl>
</div>
@@ -459,6 +460,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/Bv9ARM.pdf
BIN
View File
Binary file not shown.
doc/arm/man.arpaname.html
+11 -12
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.ddns-confgen.html" title="ddns-confgen">
<link rel="next" href="man.dnstap-read.html" title="dnstap-read">
<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="next" href="man.ddns-confgen.html" title="ddns-confgen">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">arpaname</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.ddns-confgen.html">Prev</a> </td>
<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.dnstap-read.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.ddns-confgen.html">Next</a>
</td>
</tr>
</table>
@@ -55,7 +55,7 @@
</div>
<div class="refsection">
<a name="id-1.14.31.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.2.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>arpaname</strong></span> translates IP addresses (IPv4 and
@@ -64,7 +64,7 @@
</div>
<div class="refsection">
<a name="id-1.14.31.8"></a><h2>SEE ALSO</h2>
<a name="id-1.14.2.8"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
@@ -77,20 +77,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.ddns-confgen.html">Prev</a> </td>
<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.dnstap-read.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.ddns-confgen.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">ddns-confgen</span> </td>
<td width="40%" align="left" valign="top">Manual pages </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">dnstap-read</span>
<td width="40%" align="right" valign="top"> <span class="application">ddns-confgen</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.ddns-confgen.html
+12 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.rndc-confgen.html" title="rndc-confgen">
<link rel="next" href="man.arpaname.html" title="arpaname">
<link rel="prev" href="man.arpaname.html" title="arpaname">
<link rel="next" href="man.delv.html" title="delv">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">ddns-confgen</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.rndc-confgen.html">Prev</a> </td>
<a accesskey="p" href="man.arpaname.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.arpaname.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.delv.html">Next</a>
</td>
</tr>
</table>
@@ -71,7 +71,7 @@
</div>
<div class="refsection">
<a name="id-1.14.30.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.3.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>tsig-keygen</strong></span> and <span class="command"><strong>ddns-confgen</strong></span>
@@ -112,7 +112,7 @@
</div>
<div class="refsection">
<a name="id-1.14.30.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.3.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -201,7 +201,7 @@
</div>
<div class="refsection">
<a name="id-1.14.30.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.3.9"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">nsupdate</span>(1)
@@ -222,20 +222,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.rndc-confgen.html">Prev</a> </td>
<a accesskey="p" href="man.arpaname.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.arpaname.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.delv.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">rndc-confgen</span> </td>
<span class="application">arpaname</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">arpaname</span>
</td>
<td width="40%" align="right" valign="top"> delv</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.delv.html
+16 -15
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.host.html" title="host">
<link rel="next" href="man.nslookup.html" title="nslookup">
<link rel="prev" href="man.ddns-confgen.html" title="ddns-confgen">
<link rel="next" href="man.dig.html" title="dig">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center">delv</th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.host.html">Prev</a> </td>
<a accesskey="p" href="man.ddns-confgen.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.nslookup.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.dig.html">Next</a>
</td>
</tr>
</table>
@@ -90,7 +90,7 @@
</div>
<div class="refsection">
<a name="id-1.14.5.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.4.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>delv</strong></span>
is a tool for sending
@@ -134,7 +134,7 @@
</div>
<div class="refsection">
<a name="id-1.14.5.8"></a><h2>SIMPLE USAGE</h2>
<a name="id-1.14.4.8"></a><h2>SIMPLE USAGE</h2>
<p>
@@ -197,7 +197,7 @@
</div>
<div class="refsection">
<a name="id-1.14.5.9"></a><h2>OPTIONS</h2>
<a name="id-1.14.4.9"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-a <em class="replaceable"><code>anchor-file</code></em></span></dt>
@@ -358,7 +358,7 @@
</div>
<div class="refsection">
<a name="id-1.14.5.10"></a><h2>QUERY OPTIONS</h2>
<a name="id-1.14.4.10"></a><h2>QUERY OPTIONS</h2>
<p><span class="command"><strong>delv</strong></span>
@@ -583,14 +583,14 @@
</div>
<div class="refsection">
<a name="id-1.14.5.11"></a><h2>FILES</h2>
<a name="id-1.14.4.11"></a><h2>FILES</h2>
<p><code class="filename">/etc/bind.keys</code></p>
<p><code class="filename">/etc/resolv.conf</code></p>
</div>
<div class="refsection">
<a name="id-1.14.5.12"></a><h2>SEE ALSO</h2>
<a name="id-1.14.4.12"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dig</span>(1)
@@ -612,18 +612,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.host.html">Prev</a> </td>
<a accesskey="p" href="man.ddns-confgen.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.nslookup.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.dig.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">host </td>
<td width="40%" align="left" valign="top">
<span class="application">ddns-confgen</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> nslookup</td>
<td width="40%" align="right" valign="top"> dig</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dig.html
+18 -18
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="next" href="man.mdig.html" title="mdig">
<link rel="prev" href="man.delv.html" title="delv">
<link rel="next" href="man.dnssec-checkds.html" title="dnssec-checkds">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center">dig</th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a> </td>
<a accesskey="p" href="man.delv.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.mdig.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.dnssec-checkds.html">Next</a>
</td>
</tr>
</table>
@@ -86,7 +86,7 @@
</div>
<div class="refsection">
<a name="id-1.14.2.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.5.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dig</strong></span> is a flexible tool
for interrogating DNS name servers. It performs DNS lookups and
@@ -141,7 +141,7 @@
</div>
<div class="refsection">
<a name="id-1.14.2.8"></a><h2>SIMPLE USAGE</h2>
<a name="id-1.14.5.8"></a><h2>SIMPLE USAGE</h2>
<p>
@@ -202,7 +202,7 @@
</div>
<div class="refsection">
<a name="id-1.14.2.9"></a><h2>OPTIONS</h2>
<a name="id-1.14.5.9"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -384,7 +384,7 @@
</div>
<div class="refsection">
<a name="id-1.14.2.10"></a><h2>QUERY OPTIONS</h2>
<a name="id-1.14.5.10"></a><h2>QUERY OPTIONS</h2>
<p><span class="command"><strong>dig</strong></span>
@@ -1022,7 +1022,7 @@
</div>
<div class="refsection">
<a name="id-1.14.2.11"></a><h2>MULTIPLE QUERIES</h2>
<a name="id-1.14.5.11"></a><h2>MULTIPLE QUERIES</h2>
<p>
@@ -1074,7 +1074,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</div>
<div class="refsection">
<a name="id-1.14.2.12"></a><h2>IDN SUPPORT</h2>
<a name="id-1.14.5.12"></a><h2>IDN SUPPORT</h2>
<p>
If <span class="command"><strong>dig</strong></span> has been built with IDN (internationalized
@@ -1089,7 +1089,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</div>
<div class="refsection">
<a name="id-1.14.2.13"></a><h2>FILES</h2>
<a name="id-1.14.5.13"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
@@ -1098,7 +1098,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</div>
<div class="refsection">
<a name="id-1.14.2.14"></a><h2>SEE ALSO</h2>
<a name="id-1.14.5.14"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">delv</span>(1)
@@ -1117,7 +1117,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</div>
<div class="refsection">
<a name="id-1.14.2.15"></a><h2>BUGS</h2>
<a name="id-1.14.5.15"></a><h2>BUGS</h2>
<p>
There are probably too many query options.
@@ -1130,19 +1130,19 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a> </td>
<a accesskey="p" href="man.delv.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.mdig.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.dnssec-checkds.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">Manual pages </td>
<td width="40%" align="left" valign="top">delv </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">mdig</span>
<td width="40%" align="right" valign="top"> <span class="application">dnssec-checkds</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-checkds.html
+8 -8
View File
@@ -13,7 +13,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.nslookup.html" title="nslookup">
<link rel="prev" href="man.dig.html" title="dig">
<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -22,7 +22,7 @@
<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.nslookup.html">Prev</a> </td>
<a accesskey="p" href="man.dig.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
@@ -68,7 +68,7 @@
</div>
<div class="refsection">
<a name="id-1.14.7.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.6.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-checkds</strong></span>
verifies the correctness of Delegation Signer (DS) or DNSSEC
@@ -78,7 +78,7 @@
</div>
<div class="refsection">
<a name="id-1.14.7.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.6.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -115,7 +115,7 @@
</div>
<div class="refsection">
<a name="id-1.14.7.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.6.9"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-dsfromkey</span>(8)
@@ -135,19 +135,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.nslookup.html">Prev</a> </td>
<a accesskey="p" href="man.dig.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">nslookup </td>
<td width="40%" align="left" valign="top">dig </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">dnssec-coverage</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-coverage.html
+4 -4
View File
@@ -65,7 +65,7 @@
</div>
<div class="refsection">
<a name="id-1.14.8.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.7.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-coverage</strong></span>
verifies that the DNSSEC keys for a given zone or a set of zones
@@ -95,7 +95,7 @@
</div>
<div class="refsection">
<a name="id-1.14.8.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.7.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -232,7 +232,7 @@
</div>
<div class="refsection">
<a name="id-1.14.8.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.7.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -270,6 +270,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-dsfromkey.html
+7 -7
View File
@@ -111,7 +111,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.8.7"></a><h2>DESCRIPTION</h2>
<p>
The <span class="command"><strong>dnssec-dsfromkey</strong></span> command outputs DS (Delegation
@@ -147,7 +147,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.8.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-1</span></dt>
@@ -273,7 +273,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.9"></a><h2>EXAMPLE</h2>
<a name="id-1.14.8.9"></a><h2>EXAMPLE</h2>
<p>
To build the SHA-256 DS RR from the
@@ -291,7 +291,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.10"></a><h2>FILES</h2>
<a name="id-1.14.8.10"></a><h2>FILES</h2>
<p>
The keyfile can be designated by the key identification
@@ -307,7 +307,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.11"></a><h2>CAVEAT</h2>
<a name="id-1.14.8.11"></a><h2>CAVEAT</h2>
<p>
A keyfile error can give a "file not found" even if the file exists.
@@ -315,7 +315,7 @@
</div>
<div class="refsection">
<a name="id-1.14.9.12"></a><h2>SEE ALSO</h2>
<a name="id-1.14.8.12"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -352,6 +352,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-importkey.html
+6 -6
View File
@@ -79,7 +79,7 @@
</div>
<div class="refsection">
<a name="id-1.14.10.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.9.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-importkey</strong></span>
reads a public DNSKEY record and generates a pair of
@@ -101,7 +101,7 @@
</div>
<div class="refsection">
<a name="id-1.14.10.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.9.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -157,7 +157,7 @@
</div>
<div class="refsection">
<a name="id-1.14.10.9"></a><h2>TIMING OPTIONS</h2>
<a name="id-1.14.9.9"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
@@ -206,7 +206,7 @@
</div>
<div class="refsection">
<a name="id-1.14.10.10"></a><h2>FILES</h2>
<a name="id-1.14.9.10"></a><h2>FILES</h2>
<p>
A keyfile can be designed by the key identification
@@ -217,7 +217,7 @@
</div>
<div class="refsection">
<a name="id-1.14.10.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.9.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -250,6 +250,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-keyfromlabel.html
+6 -6
View File
@@ -81,7 +81,7 @@
</div>
<div class="refsection">
<a name="id-1.14.11.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.10.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-keyfromlabel</strong></span>
generates a key pair of files that referencing a key object stored
@@ -99,7 +99,7 @@
</div>
<div class="refsection">
<a name="id-1.14.11.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.10.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -309,7 +309,7 @@
</div>
<div class="refsection">
<a name="id-1.14.11.9"></a><h2>TIMING OPTIONS</h2>
<a name="id-1.14.10.9"></a><h2>TIMING OPTIONS</h2>
<p>
@@ -409,7 +409,7 @@
</div>
<div class="refsection">
<a name="id-1.14.11.10"></a><h2>GENERATED KEY FILES</h2>
<a name="id-1.14.10.10"></a><h2>GENERATED KEY FILES</h2>
<p>
When <span class="command"><strong>dnssec-keyfromlabel</strong></span> completes
@@ -456,7 +456,7 @@
</div>
<div class="refsection">
<a name="id-1.14.11.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.10.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -490,6 +490,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-keygen.html
+7 -7
View File
@@ -86,7 +86,7 @@
</div>
<div class="refsection">
<a name="id-1.14.12.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.11.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-keygen</strong></span>
generates keys for DNSSEC (Secure DNS), as defined in RFC 2535
@@ -102,7 +102,7 @@
</div>
<div class="refsection">
<a name="id-1.14.12.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.11.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -365,7 +365,7 @@
</div>
<div class="refsection">
<a name="id-1.14.12.9"></a><h2>TIMING OPTIONS</h2>
<a name="id-1.14.11.9"></a><h2>TIMING OPTIONS</h2>
<p>
@@ -468,7 +468,7 @@
<div class="refsection">
<a name="id-1.14.12.10"></a><h2>GENERATED KEYS</h2>
<a name="id-1.14.11.10"></a><h2>GENERATED KEYS</h2>
<p>
When <span class="command"><strong>dnssec-keygen</strong></span> completes
@@ -522,7 +522,7 @@
</div>
<div class="refsection">
<a name="id-1.14.12.11"></a><h2>EXAMPLE</h2>
<a name="id-1.14.11.11"></a><h2>EXAMPLE</h2>
<p>
To generate a 768-bit DSA key for the domain
@@ -551,7 +551,7 @@
</div>
<div class="refsection">
<a name="id-1.14.12.12"></a><h2>SEE ALSO</h2>
<a name="id-1.14.11.12"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-signzone</span>(8)
@@ -583,6 +583,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-keymgr.html
+6 -6
View File
@@ -66,7 +66,7 @@
</div>
<div class="refsection">
<a name="id-1.14.13.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.12.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>dnssec-keymgr</strong></span> is a high level Python wrapper
to facilitate the key rollover process for zones handled by
@@ -124,7 +124,7 @@
</div>
<div class="refsection">
<a name="id-1.14.13.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.12.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-c <em class="replaceable"><code>file</code></em></span></dt>
<dd>
@@ -219,7 +219,7 @@
</div>
<div class="refsection">
<a name="id-1.14.13.9"></a><h2>POLICY CONFIGURATION</h2>
<a name="id-1.14.12.9"></a><h2>POLICY CONFIGURATION</h2>
<p>
The <code class="filename">dnssec-policy.conf</code> file can specify three kinds
of policies:
@@ -357,7 +357,7 @@
</div>
<div class="refsection">
<a name="id-1.14.13.10"></a><h2>REMAINING WORK</h2>
<a name="id-1.14.12.10"></a><h2>REMAINING WORK</h2>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
@@ -379,7 +379,7 @@
</div>
<div class="refsection">
<a name="id-1.14.13.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.12.11"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
<span class="refentrytitle">dnssec-coverage</span>(8)
@@ -416,6 +416,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-revoke.html
+4 -4
View File
@@ -63,7 +63,7 @@
</div>
<div class="refsection">
<a name="id-1.14.14.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.13.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-revoke</strong></span>
reads a DNSSEC key file, sets the REVOKED bit on the key as defined
@@ -73,7 +73,7 @@
</div>
<div class="refsection">
<a name="id-1.14.14.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.13.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -141,7 +141,7 @@
</div>
<div class="refsection">
<a name="id-1.14.14.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.13.9"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -171,6 +171,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-settime.html
+6 -6
View File
@@ -72,7 +72,7 @@
</div>
<div class="refsection">
<a name="id-1.14.15.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.14.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-settime</strong></span>
reads a DNSSEC private key file and sets the key timing metadata
@@ -100,7 +100,7 @@
</div>
<div class="refsection">
<a name="id-1.14.15.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.14.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -172,7 +172,7 @@
</div>
<div class="refsection">
<a name="id-1.14.15.9"></a><h2>TIMING OPTIONS</h2>
<a name="id-1.14.14.9"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
@@ -280,7 +280,7 @@
</div>
<div class="refsection">
<a name="id-1.14.15.10"></a><h2>PRINTING OPTIONS</h2>
<a name="id-1.14.14.10"></a><h2>PRINTING OPTIONS</h2>
<p>
<span class="command"><strong>dnssec-settime</strong></span> can also be used to print the
@@ -316,7 +316,7 @@
</div>
<div class="refsection">
<a name="id-1.14.15.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.14.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -349,6 +349,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-signzone.html
+5 -5
View File
@@ -95,7 +95,7 @@
</div>
<div class="refsection">
<a name="id-1.14.16.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.15.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-signzone</strong></span>
signs a zone. It generates
@@ -108,7 +108,7 @@
</div>
<div class="refsection">
<a name="id-1.14.16.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.15.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -646,7 +646,7 @@
</div>
<div class="refsection">
<a name="id-1.14.16.9"></a><h2>EXAMPLE</h2>
<a name="id-1.14.15.9"></a><h2>EXAMPLE</h2>
<p>
The following command signs the <strong class="userinput"><code>example.com</code></strong>
@@ -678,7 +678,7 @@ db.example.com.signed
</div>
<div class="refsection">
<a name="id-1.14.16.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.15.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dnssec-keygen</span>(8)
@@ -708,6 +708,6 @@ db.example.com.signed
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnssec-verify.html
+8 -8
View File
@@ -14,7 +14,7 @@
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.dnssec-signzone.html" title="dnssec-signzone">
<link rel="next" href="man.lwresd.html" title="lwresd">
<link rel="next" href="man.dnstap-read.html" title="dnstap-read">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -24,7 +24,7 @@
<td width="20%" align="left">
<a accesskey="p" href="man.dnssec-signzone.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.lwresd.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.dnstap-read.html">Next</a>
</td>
</tr>
</table>
@@ -64,7 +64,7 @@
</div>
<div class="refsection">
<a name="id-1.14.17.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.16.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>dnssec-verify</strong></span>
verifies that a zone is fully signed for each algorithm found
@@ -74,7 +74,7 @@
</div>
<div class="refsection">
<a name="id-1.14.17.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.16.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -171,7 +171,7 @@
</div>
<div class="refsection">
<a name="id-1.14.17.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.16.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -190,18 +190,18 @@
<td width="40%" align="left">
<a accesskey="p" href="man.dnssec-signzone.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.lwresd.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.dnstap-read.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">dnssec-signzone</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">lwresd</span>
<td width="40%" align="right" valign="top"> <span class="application">dnstap-read</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.dnstap-read.html
+8 -8
View File
@@ -13,7 +13,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.arpaname.html" title="arpaname">
<link rel="prev" href="man.dnssec-verify.html" title="dnssec-verify">
<link rel="next" href="man.genrandom.html" title="genrandom">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -22,7 +22,7 @@
<tr><th colspan="3" align="center"><span class="application">dnstap-read</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.arpaname.html">Prev</a> </td>
<a accesskey="p" href="man.dnssec-verify.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.genrandom.html">Next</a>
</td>
@@ -59,7 +59,7 @@
</div>
<div class="refsection">
<a name="id-1.14.32.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.17.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>dnstap-read</strong></span>
@@ -72,7 +72,7 @@
</div>
<div class="refsection">
<a name="id-1.14.32.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.17.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -101,7 +101,7 @@
</div>
<div class="refsection">
<a name="id-1.14.32.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.17.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -120,20 +120,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.arpaname.html">Prev</a> </td>
<a accesskey="p" href="man.dnssec-verify.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.genrandom.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">arpaname</span> </td>
<span class="application">dnssec-verify</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">genrandom</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.genrandom.html
+8 -9
View File
@@ -14,7 +14,7 @@
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.dnstap-read.html" title="dnstap-read">
<link rel="next" href="man.isc-hmac-fixup.html" title="isc-hmac-fixup">
<link rel="next" href="man.host.html" title="host">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -24,7 +24,7 @@
<td width="20%" align="left">
<a accesskey="p" href="man.dnstap-read.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.isc-hmac-fixup.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.host.html">Next</a>
</td>
</tr>
</table>
@@ -58,7 +58,7 @@
</div>
<div class="refsection">
<a name="id-1.14.33.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.18.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>genrandom</strong></span>
@@ -69,7 +69,7 @@
</div>
<div class="refsection">
<a name="id-1.14.33.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.18.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt>
@@ -95,7 +95,7 @@
</div>
<div class="refsection">
<a name="id-1.14.33.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.18.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -115,18 +115,17 @@
<td width="40%" align="left">
<a accesskey="p" href="man.dnstap-read.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.isc-hmac-fixup.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.host.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">dnstap-read</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">isc-hmac-fixup</span>
</td>
<td width="40%" align="right" valign="top"> host</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.host.html
+15 -14
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.mdig.html" title="mdig">
<link rel="next" href="man.delv.html" title="delv">
<link rel="prev" href="man.genrandom.html" title="genrandom">
<link rel="next" href="man.isc-hmac-fixup.html" title="isc-hmac-fixup">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center">host</th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.mdig.html">Prev</a> </td>
<a accesskey="p" href="man.genrandom.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.delv.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.isc-hmac-fixup.html">Next</a>
</td>
</tr>
</table>
@@ -71,7 +71,7 @@
</div>
<div class="refsection">
<a name="id-1.14.4.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.19.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>host</strong></span>
@@ -98,7 +98,7 @@
</div>
<div class="refsection">
<a name="id-1.14.4.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.19.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-4</span></dt>
@@ -320,7 +320,7 @@
</div>
<div class="refsection">
<a name="id-1.14.4.9"></a><h2>IDN SUPPORT</h2>
<a name="id-1.14.19.9"></a><h2>IDN SUPPORT</h2>
<p>
If <span class="command"><strong>host</strong></span> has been built with IDN (internationalized
@@ -336,14 +336,14 @@
</div>
<div class="refsection">
<a name="id-1.14.4.10"></a><h2>FILES</h2>
<a name="id-1.14.19.10"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
<div class="refsection">
<a name="id-1.14.4.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.19.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dig</span>(1)
@@ -360,19 +360,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.mdig.html">Prev</a> </td>
<a accesskey="p" href="man.genrandom.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.delv.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.isc-hmac-fixup.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">mdig</span> </td>
<span class="application">genrandom</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> delv</td>
<td width="40%" align="right" valign="top"> <span class="application">isc-hmac-fixup</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.isc-hmac-fixup.html
+12 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.genrandom.html" title="genrandom">
<link rel="next" href="man.nsec3hash.html" title="nsec3hash">
<link rel="prev" href="man.host.html" title="host">
<link rel="next" href="man.lwresd.html" title="lwresd">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">isc-hmac-fixup</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.genrandom.html">Prev</a> </td>
<a accesskey="p" href="man.host.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.nsec3hash.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.lwresd.html">Next</a>
</td>
</tr>
</table>
@@ -57,7 +57,7 @@
</div>
<div class="refsection">
<a name="id-1.14.34.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.20.7"></a><h2>DESCRIPTION</h2>
<p>
Versions of BIND 9 up to and including BIND 9.6 had a bug causing
@@ -85,7 +85,7 @@
</div>
<div class="refsection">
<a name="id-1.14.34.8"></a><h2>SECURITY CONSIDERATIONS</h2>
<a name="id-1.14.20.8"></a><h2>SECURITY CONSIDERATIONS</h2>
<p>
Secrets that have been converted by <span class="command"><strong>isc-hmac-fixup</strong></span>
@@ -98,7 +98,7 @@
</div>
<div class="refsection">
<a name="id-1.14.34.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.20.9"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -112,20 +112,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.genrandom.html">Prev</a> </td>
<a accesskey="p" href="man.host.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.nsec3hash.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.lwresd.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">genrandom</span> </td>
<td width="40%" align="left" valign="top">host </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">nsec3hash</span>
<td width="40%" align="right" valign="top"> <span class="application">lwresd</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.lwresd.html
+13 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.dnssec-verify.html" title="dnssec-verify">
<link rel="next" href="man.named.html" title="named">
<link rel="prev" href="man.isc-hmac-fixup.html" title="isc-hmac-fixup">
<link rel="next" href="man.mdig.html" title="mdig">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">lwresd</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.dnssec-verify.html">Prev</a> </td>
<a accesskey="p" href="man.isc-hmac-fixup.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.mdig.html">Next</a>
</td>
</tr>
</table>
@@ -73,7 +73,7 @@
</div>
<div class="refsection">
<a name="id-1.14.18.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.21.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>lwresd</strong></span>
@@ -112,7 +112,7 @@
</div>
<div class="refsection">
<a name="id-1.14.18.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.21.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -274,7 +274,7 @@
</div>
<div class="refsection">
<a name="id-1.14.18.9"></a><h2>FILES</h2>
<a name="id-1.14.21.9"></a><h2>FILES</h2>
<div class="variablelist"><dl class="variablelist">
@@ -295,7 +295,7 @@
</div>
<div class="refsection">
<a name="id-1.14.18.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.21.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">named</span>(8)
@@ -315,20 +315,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.dnssec-verify.html">Prev</a> </td>
<a accesskey="p" href="man.isc-hmac-fixup.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.mdig.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">dnssec-verify</span> </td>
<span class="application">isc-hmac-fixup</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">named</span>
<td width="40%" align="right" valign="top"> <span class="application">mdig</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.mdig.html
+16 -14
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.dig.html" title="dig">
<link rel="next" href="man.host.html" title="host">
<link rel="prev" href="man.lwresd.html" title="lwresd">
<link rel="next" href="man.named-checkconf.html" title="named-checkconf">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">mdig</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.dig.html">Prev</a> </td>
<a accesskey="p" href="man.lwresd.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.host.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
</td>
</tr>
</table>
@@ -84,7 +84,7 @@
</div>
<div class="refsection">
<a name="id-1.14.3.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.22.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>mdig</strong></span>
is a multiple/pipelined query version of <span class="command"><strong>dig</strong></span>:
@@ -134,7 +134,7 @@
</div>
<div class="refsection">
<a name="id-1.14.3.8"></a><h2>ANYWHERE OPTIONS</h2>
<a name="id-1.14.22.8"></a><h2>ANYWHERE OPTIONS</h2>
<p>
@@ -158,7 +158,7 @@
</div>
<div class="refsection">
<a name="id-1.14.3.9"></a><h2>GLOBAL OPTIONS</h2>
<a name="id-1.14.22.9"></a><h2>GLOBAL OPTIONS</h2>
<p>
@@ -358,7 +358,7 @@
</div>
<div class="refsection">
<a name="id-1.14.3.10"></a><h2>LOCAL OPTIONS</h2>
<a name="id-1.14.22.10"></a><h2>LOCAL OPTIONS</h2>
<p>
@@ -583,7 +583,7 @@
</div>
<div class="refsection">
<a name="id-1.14.3.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.22.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dig</span>(1)
@@ -597,18 +597,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.dig.html">Prev</a> </td>
<a accesskey="p" href="man.lwresd.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.host.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">dig </td>
<td width="40%" align="left" valign="top">
<span class="application">lwresd</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> host</td>
<td width="40%" align="right" valign="top"> <span class="application">named-checkconf</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named-checkconf.html
+9 -9
View File
@@ -13,7 +13,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.named.conf.html" title="named.conf">
<link rel="prev" href="man.mdig.html" title="mdig">
<link rel="next" href="man.named-checkzone.html" title="named-checkzone">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
@@ -22,7 +22,7 @@
<tr><th colspan="3" align="center"><span class="application">named-checkconf</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.named.conf.html">Prev</a> </td>
<a accesskey="p" href="man.mdig.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.named-checkzone.html">Next</a>
</td>
@@ -61,7 +61,7 @@
</div>
<div class="refsection">
<a name="id-1.14.21.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.23.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>named-checkconf</strong></span>
checks the syntax, but not the semantics, of a
@@ -83,7 +83,7 @@
</div>
<div class="refsection">
<a name="id-1.14.21.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.23.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-h</span></dt>
@@ -152,7 +152,7 @@
</div>
<div class="refsection">
<a name="id-1.14.21.9"></a><h2>RETURN VALUES</h2>
<a name="id-1.14.23.9"></a><h2>RETURN VALUES</h2>
<p><span class="command"><strong>named-checkconf</strong></span>
returns an exit status of 1 if
@@ -161,7 +161,7 @@
</div>
<div class="refsection">
<a name="id-1.14.21.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.23.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">named</span>(8)
@@ -178,20 +178,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.named.conf.html">Prev</a> </td>
<a accesskey="p" href="man.mdig.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.named-checkzone.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<code class="filename">named.conf</code> </td>
<span class="application">mdig</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">named-checkzone</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named-checkzone.html
+5 -5
View File
@@ -111,7 +111,7 @@
</div>
<div class="refsection">
<a name="id-1.14.22.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.24.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>named-checkzone</strong></span>
checks the syntax and integrity of a zone file. It performs the
@@ -133,7 +133,7 @@
</div>
<div class="refsection">
<a name="id-1.14.22.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.24.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -421,7 +421,7 @@
</div>
<div class="refsection">
<a name="id-1.14.22.9"></a><h2>RETURN VALUES</h2>
<a name="id-1.14.24.9"></a><h2>RETURN VALUES</h2>
<p><span class="command"><strong>named-checkzone</strong></span>
returns an exit status of 1 if
@@ -430,7 +430,7 @@
</div>
<div class="refsection">
<a name="id-1.14.22.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.24.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">named</span>(8)
@@ -463,6 +463,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named-journalprint.html
+3 -3
View File
@@ -56,7 +56,7 @@
</div>
<div class="refsection">
<a name="id-1.14.23.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.25.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>named-journalprint</strong></span>
@@ -84,7 +84,7 @@
</div>
<div class="refsection">
<a name="id-1.14.23.8"></a><h2>SEE ALSO</h2>
<a name="id-1.14.25.8"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -117,6 +117,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named-nzd2nzf.html
+5 -5
View File
@@ -57,7 +57,7 @@
</div>
<div class="refsect1">
<a name="id-1.14.24.6"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.26.6"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>named-nzd2nzf</strong></span> converts an NZD database to NZF
@@ -71,7 +71,7 @@
</div>
<div class="refsect1">
<a name="id-1.14.24.7"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.26.7"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">filename</span></dt>
@@ -85,7 +85,7 @@
</div>
<div class="refsect1">
<a name="id-1.14.24.8"></a><h2>SEE ALSO</h2>
<a name="id-1.14.26.8"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>
@@ -93,7 +93,7 @@
</div>
<div class="refsect1">
<a name="id-1.14.24.9"></a><h2>AUTHOR</h2>
<a name="id-1.14.26.9"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
@@ -119,6 +119,6 @@
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named-rrchecker.html
+7 -7
View File
@@ -14,7 +14,7 @@
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.named-nzd2nzf.html" title="named-nzd2nzf">
<link rel="next" href="man.nsupdate.html" title="nsupdate">
<link rel="next" href="man.named.conf.html" title="named.conf">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -24,7 +24,7 @@
<td width="20%" align="left">
<a accesskey="p" href="man.named-nzd2nzf.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.nsupdate.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.named.conf.html">Next</a>
</td>
</tr>
</table>
@@ -60,7 +60,7 @@
</div>
<div class="refsection">
<a name="id-1.14.25.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.27.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>named-rrchecker</strong></span>
read a individual DNS resource record from standard input and checks if it
@@ -90,7 +90,7 @@
</div>
<div class="refsection">
<a name="id-1.14.25.8"></a><h2>SEE ALSO</h2>
<a name="id-1.14.27.8"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">RFC 1034</em>,
@@ -109,18 +109,18 @@
<td width="40%" align="left">
<a accesskey="p" href="man.named-nzd2nzf.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.nsupdate.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.named.conf.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">named-nzd2nzf</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">nsupdate</span>
<td width="40%" align="right" valign="top"> <code class="filename">named.conf</code>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named.conf.html
+27 -27
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.named.html" title="named">
<link rel="next" href="man.named-checkconf.html" title="named-checkconf">
<link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
<link rel="next" href="man.named.html" title="named">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><code class="filename">named.conf</code></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.named.html">Prev</a> </td>
<a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
</td>
</tr>
</table>
@@ -55,7 +55,7 @@
</div>
<div class="refsection">
<a name="id-1.14.20.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.28.7"></a><h2>DESCRIPTION</h2>
<p><code class="filename">named.conf</code> is the configuration file
for
@@ -76,7 +76,7 @@
</div>
<div class="refsection">
<a name="id-1.14.20.8"></a><h2>ACL</h2>
<a name="id-1.14.28.8"></a><h2>ACL</h2>
<div class="literallayout"><p><br>
acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
@@ -84,7 +84,7 @@ acl
</div>
<div class="refsection">
<a name="id-1.14.20.9"></a><h2>CONTROLS</h2>
<a name="id-1.14.28.9"></a><h2>CONTROLS</h2>
<div class="literallayout"><p><br>
controls {<br>
@@ -102,7 +102,7 @@ controls
</div>
<div class="refsection">
<a name="id-1.14.20.10"></a><h2>DLZ</h2>
<a name="id-1.14.28.10"></a><h2>DLZ</h2>
<div class="literallayout"><p><br>
dlz <em class="replaceable"><code>string</code></em> {<br>
@@ -113,7 +113,7 @@ dlz
</div>
<div class="refsection">
<a name="id-1.14.20.11"></a><h2>DYNDB</h2>
<a name="id-1.14.28.11"></a><h2>DYNDB</h2>
<div class="literallayout"><p><br>
dyndb <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>quoted_string</code></em> {<br>
@@ -122,7 +122,7 @@ dyndb
</div>
<div class="refsection">
<a name="id-1.14.20.12"></a><h2>KEY</h2>
<a name="id-1.14.28.12"></a><h2>KEY</h2>
<div class="literallayout"><p><br>
key <em class="replaceable"><code>string</code></em> {<br>
@@ -133,7 +133,7 @@ key
</div>
<div class="refsection">
<a name="id-1.14.20.13"></a><h2>LOGGING</h2>
<a name="id-1.14.28.13"></a><h2>LOGGING</h2>
<div class="literallayout"><p><br>
logging {<br>
@@ -155,7 +155,7 @@ logging
</div>
<div class="refsection">
<a name="id-1.14.20.14"></a><h2>LWRES</h2>
<a name="id-1.14.28.14"></a><h2>LWRES</h2>
<div class="literallayout"><p><br>
lwres {<br>
@@ -171,7 +171,7 @@ lwres
</div>
<div class="refsection">
<a name="id-1.14.20.15"></a><h2>MANAGED-KEYS</h2>
<a name="id-1.14.28.15"></a><h2>MANAGED-KEYS</h2>
<div class="literallayout"><p><br>
managed-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
@@ -180,7 +180,7 @@ managed-keys
</div>
<div class="refsection">
<a name="id-1.14.20.16"></a><h2>MASTERS</h2>
<a name="id-1.14.28.16"></a><h2>MASTERS</h2>
<div class="literallayout"><p><br>
masters <em class="replaceable"><code>string</code></em> [ port <em class="replaceable"><code>integer</code></em> ] [ dscp<br>
@@ -191,7 +191,7 @@ masters
</div>
<div class="refsection">
<a name="id-1.14.20.17"></a><h2>OPTIONS</h2>
<a name="id-1.14.28.17"></a><h2>OPTIONS</h2>
<div class="literallayout"><p><br>
options {<br>
@@ -472,7 +472,7 @@ options
</div>
<div class="refsection">
<a name="id-1.14.20.18"></a><h2>SERVER</h2>
<a name="id-1.14.28.18"></a><h2>SERVER</h2>
<div class="literallayout"><p><br>
server <em class="replaceable"><code>netprefix</code></em> {<br>
@@ -509,7 +509,7 @@ server
</div>
<div class="refsection">
<a name="id-1.14.20.19"></a><h2>STATISTICS-CHANNELS</h2>
<a name="id-1.14.28.19"></a><h2>STATISTICS-CHANNELS</h2>
<div class="literallayout"><p><br>
statistics-channels {<br>
@@ -522,7 +522,7 @@ statistics-channels
</div>
<div class="refsection">
<a name="id-1.14.20.20"></a><h2>TRUSTED-KEYS</h2>
<a name="id-1.14.28.20"></a><h2>TRUSTED-KEYS</h2>
<div class="literallayout"><p><br>
trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
@@ -531,7 +531,7 @@ trusted-keys
</div>
<div class="refsection">
<a name="id-1.14.20.21"></a><h2>VIEW</h2>
<a name="id-1.14.28.21"></a><h2>VIEW</h2>
<div class="literallayout"><p><br>
view <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
@@ -887,7 +887,7 @@ view
</div>
<div class="refsection">
<a name="id-1.14.20.22"></a><h2>ZONE</h2>
<a name="id-1.14.28.22"></a><h2>ZONE</h2>
<div class="literallayout"><p><br>
zone <em class="replaceable"><code>string</code></em> [ <em class="replaceable"><code>class</code></em> ] {<br>
@@ -986,14 +986,14 @@ zone
</div>
<div class="refsection">
<a name="id-1.14.20.23"></a><h2>FILES</h2>
<a name="id-1.14.28.23"></a><h2>FILES</h2>
<p><code class="filename">/etc/named.conf</code>
</p>
</div>
<div class="refsection">
<a name="id-1.14.20.24"></a><h2>SEE ALSO</h2>
<a name="id-1.14.28.24"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">ddns-confgen</span>(8)
@@ -1020,20 +1020,20 @@ zone
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.named.html">Prev</a> </td>
<a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.named-checkconf.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.named.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">named</span> </td>
<span class="application">named-rrchecker</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">named-checkconf</span>
<td width="40%" align="right" valign="top"> <span class="application">named</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.named.html
+15 -15
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.lwresd.html" title="lwresd">
<link rel="next" href="man.named.conf.html" title="named.conf">
<link rel="prev" href="man.named.conf.html" title="named.conf">
<link rel="next" href="man.nsec3hash.html" title="nsec3hash">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">named</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.lwresd.html">Prev</a> </td>
<a accesskey="p" href="man.named.conf.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.named.conf.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.nsec3hash.html">Next</a>
</td>
</tr>
</table>
@@ -79,7 +79,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.29.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>named</strong></span>
is a Domain Name System (DNS) server,
@@ -96,7 +96,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.29.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -369,7 +369,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.9"></a><h2>SIGNALS</h2>
<a name="id-1.14.29.9"></a><h2>SIGNALS</h2>
<p>
In routine operation, signals should not be used to control
@@ -399,7 +399,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.10"></a><h2>CONFIGURATION</h2>
<a name="id-1.14.29.10"></a><h2>CONFIGURATION</h2>
<p>
The <span class="command"><strong>named</strong></span> configuration file is too complex
@@ -420,7 +420,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.11"></a><h2>FILES</h2>
<a name="id-1.14.29.11"></a><h2>FILES</h2>
<div class="variablelist"><dl class="variablelist">
@@ -441,7 +441,7 @@
</div>
<div class="refsection">
<a name="id-1.14.19.12"></a><h2>SEE ALSO</h2>
<a name="id-1.14.29.12"></a><h2>SEE ALSO</h2>
<p><em class="citetitle">RFC 1033</em>,
<em class="citetitle">RFC 1034</em>,
@@ -476,20 +476,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.lwresd.html">Prev</a> </td>
<a accesskey="p" href="man.named.conf.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.named.conf.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.nsec3hash.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">lwresd</span> </td>
<code class="filename">named.conf</code> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <code class="filename">named.conf</code>
<td width="40%" align="right" valign="top"> <span class="application">nsec3hash</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.nsec3hash.html
+12 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.isc-hmac-fixup.html" title="isc-hmac-fixup">
<link rel="next" href="man.pkcs11-destroy.html" title="pkcs11-destroy">
<link rel="prev" href="man.named.html" title="named">
<link rel="next" href="man.nslookup.html" title="nslookup">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">nsec3hash</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.isc-hmac-fixup.html">Prev</a> </td>
<a accesskey="p" href="man.named.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-destroy.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.nslookup.html">Next</a>
</td>
</tr>
</table>
@@ -59,7 +59,7 @@
</div>
<div class="refsection">
<a name="id-1.14.35.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.30.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>nsec3hash</strong></span> generates an NSEC3 hash based on
@@ -69,7 +69,7 @@
</div>
<div class="refsection">
<a name="id-1.14.35.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.30.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">salt</span></dt>
@@ -103,7 +103,7 @@
</div>
<div class="refsection">
<a name="id-1.14.35.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.30.9"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -117,20 +117,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.isc-hmac-fixup.html">Prev</a> </td>
<a accesskey="p" href="man.named.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-destroy.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.nslookup.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">isc-hmac-fixup</span> </td>
<span class="application">named</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-destroy</span>
</td>
<td width="40%" align="right" valign="top"> nslookup</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.nslookup.html
+17 -16
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.delv.html" title="delv">
<link rel="next" href="man.dnssec-checkds.html" title="dnssec-checkds">
<link rel="prev" href="man.nsec3hash.html" title="nsec3hash">
<link rel="next" href="man.nsupdate.html" title="nsupdate">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center">nslookup</th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.delv.html">Prev</a> </td>
<a accesskey="p" href="man.nsec3hash.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.dnssec-checkds.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.nsupdate.html">Next</a>
</td>
</tr>
</table>
@@ -58,7 +58,7 @@
</div>
<div class="refsection">
<a name="id-1.14.6.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.31.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>Nslookup</strong></span>
is a program to query Internet domain name servers. <span class="command"><strong>Nslookup</strong></span>
@@ -72,7 +72,7 @@
</div>
<div class="refsection">
<a name="id-1.14.6.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.31.8"></a><h2>ARGUMENTS</h2>
<p>
Interactive mode is entered in the following cases:
@@ -121,7 +121,7 @@ nslookup -query=hinfo -timeout=10
</div>
<div class="refsection">
<a name="id-1.14.6.9"></a><h2>INTERACTIVE COMMANDS</h2>
<a name="id-1.14.31.9"></a><h2>INTERACTIVE COMMANDS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term"><code class="constant">host</code> [<span class="optional">server</span>]</span></dt>
@@ -378,7 +378,7 @@ nslookup -query=hinfo -timeout=10
</div>
<div class="refsection">
<a name="id-1.14.6.10"></a><h2>RETURN VALUES</h2>
<a name="id-1.14.31.10"></a><h2>RETURN VALUES</h2>
<p>
<span class="command"><strong>nslookup</strong></span> returns with an exit status of 1
if any query failed, and 0 otherwise.
@@ -386,7 +386,7 @@ nslookup -query=hinfo -timeout=10
</div>
<div class="refsection">
<a name="id-1.14.6.11"></a><h2>IDN SUPPORT</h2>
<a name="id-1.14.31.11"></a><h2>IDN SUPPORT</h2>
<p>
If <span class="command"><strong>nslookup</strong></span> has been built with IDN (internationalized
@@ -403,14 +403,14 @@ nslookup -query=hinfo -timeout=10
</div>
<div class="refsection">
<a name="id-1.14.6.12"></a><h2>FILES</h2>
<a name="id-1.14.31.12"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
<div class="refsection">
<a name="id-1.14.6.13"></a><h2>SEE ALSO</h2>
<a name="id-1.14.31.13"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">dig</span>(1)
@@ -429,19 +429,20 @@ nslookup -query=hinfo -timeout=10
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.delv.html">Prev</a> </td>
<a accesskey="p" href="man.nsec3hash.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.dnssec-checkds.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.nsupdate.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">delv </td>
<td width="40%" align="left" valign="top">
<span class="application">nsec3hash</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">dnssec-checkds</span>
<td width="40%" align="right" valign="top"> <span class="application">nsupdate</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.nsupdate.html
+16 -17
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.named-rrchecker.html" title="named-rrchecker">
<link rel="next" href="man.rndc.html" title="rndc">
<link rel="prev" href="man.nslookup.html" title="nslookup">
<link rel="next" href="man.pkcs11-destroy.html" title="pkcs11-destroy">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">nsupdate</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
<a accesskey="p" href="man.nslookup.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-destroy.html">Next</a>
</td>
</tr>
</table>
@@ -74,7 +74,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.32.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>nsupdate</strong></span>
is used to submit Dynamic DNS Update requests as defined in RFC 2136
@@ -134,7 +134,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.32.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -306,7 +306,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.9"></a><h2>INPUT FORMAT</h2>
<a name="id-1.14.32.9"></a><h2>INPUT FORMAT</h2>
<p><span class="command"><strong>nsupdate</strong></span>
reads input from
@@ -670,7 +670,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.10"></a><h2>EXAMPLES</h2>
<a name="id-1.14.32.10"></a><h2>EXAMPLES</h2>
<p>
The examples below show how
@@ -726,7 +726,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.11"></a><h2>FILES</h2>
<a name="id-1.14.32.11"></a><h2>FILES</h2>
<div class="variablelist"><dl class="variablelist">
@@ -764,7 +764,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.12"></a><h2>SEE ALSO</h2>
<a name="id-1.14.32.12"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">RFC 2136</em>,
@@ -787,7 +787,7 @@
</div>
<div class="refsection">
<a name="id-1.14.26.13"></a><h2>BUGS</h2>
<a name="id-1.14.32.13"></a><h2>BUGS</h2>
<p>
The TSIG key is redundantly stored in two separate files.
@@ -803,20 +803,19 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.named-rrchecker.html">Prev</a> </td>
<a accesskey="p" href="man.nslookup.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-destroy.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">named-rrchecker</span> </td>
<td width="40%" align="left" valign="top">nslookup </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">rndc</span>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-destroy</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.pkcs11-destroy.html
+12 -12
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.nsec3hash.html" title="nsec3hash">
<link rel="next" href="man.pkcs11-list.html" title="pkcs11-list">
<link rel="prev" href="man.nsupdate.html" title="nsupdate">
<link rel="next" href="man.pkcs11-keygen.html" title="pkcs11-keygen">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">pkcs11-destroy</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.nsec3hash.html">Prev</a> </td>
<a accesskey="p" href="man.nsupdate.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-list.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-keygen.html">Next</a>
</td>
</tr>
</table>
@@ -63,7 +63,7 @@
</div>
<div class="refsection">
<a name="id-1.14.36.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.33.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>pkcs11-destroy</strong></span> destroys keys stored in a
@@ -78,7 +78,7 @@
</div>
<div class="refsection">
<a name="id-1.14.36.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.33.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-m <em class="replaceable"><code>module</code></em></span></dt>
@@ -127,7 +127,7 @@
</div>
<div class="refsection">
<a name="id-1.14.36.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.33.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -148,20 +148,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.nsec3hash.html">Prev</a> </td>
<a accesskey="p" href="man.nsupdate.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-list.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-keygen.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">nsec3hash</span> </td>
<span class="application">nsupdate</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-list</span>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-keygen</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.pkcs11-keygen.html
+12 -12
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.pkcs11-list.html" title="pkcs11-list">
<link rel="next" href="man.pkcs11-tokens.html" title="pkcs11-tokens">
<link rel="prev" href="man.pkcs11-destroy.html" title="pkcs11-destroy">
<link rel="next" href="man.pkcs11-list.html" title="pkcs11-list">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">pkcs11-keygen</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.pkcs11-list.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-destroy.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-tokens.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-list.html">Next</a>
</td>
</tr>
</table>
@@ -66,7 +66,7 @@
</div>
<div class="refsection">
<a name="id-1.14.38.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.34.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>pkcs11-keygen</strong></span> causes a PKCS#11 device to generate
@@ -76,7 +76,7 @@
</div>
<div class="refsection">
<a name="id-1.14.38.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.34.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
@@ -162,7 +162,7 @@
</div>
<div class="refsection">
<a name="id-1.14.38.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.34.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -186,20 +186,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.pkcs11-list.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-destroy.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-tokens.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-list.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">pkcs11-list</span> </td>
<span class="application">pkcs11-destroy</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-tokens</span>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-list</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.pkcs11-list.html
+12 -12
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.pkcs11-destroy.html" title="pkcs11-destroy">
<link rel="next" href="man.pkcs11-keygen.html" title="pkcs11-keygen">
<link rel="prev" href="man.pkcs11-keygen.html" title="pkcs11-keygen">
<link rel="next" href="man.pkcs11-tokens.html" title="pkcs11-tokens">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">pkcs11-list</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.pkcs11-destroy.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-keygen.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-keygen.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.pkcs11-tokens.html">Next</a>
</td>
</tr>
</table>
@@ -61,7 +61,7 @@
</div>
<div class="refsection">
<a name="id-1.14.37.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.35.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>pkcs11-list</strong></span>
@@ -75,7 +75,7 @@
</div>
<div class="refsection">
<a name="id-1.14.37.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.35.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-P</span></dt>
@@ -123,7 +123,7 @@
</div>
<div class="refsection">
<a name="id-1.14.37.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.35.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -144,20 +144,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.pkcs11-destroy.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-keygen.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-keygen.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.pkcs11-tokens.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">pkcs11-destroy</span> </td>
<span class="application">pkcs11-keygen</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-keygen</span>
<td width="40%" align="right" valign="top"> <span class="application">pkcs11-tokens</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.pkcs11-tokens.html
+15 -11
View File
@@ -13,7 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.pkcs11-keygen.html" title="pkcs11-keygen">
<link rel="prev" href="man.pkcs11-list.html" title="pkcs11-list">
<link rel="next" href="man.rndc-confgen.html" title="rndc-confgen">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -21,9 +22,10 @@
<tr><th colspan="3" align="center"><span class="application">pkcs11-tokens</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.pkcs11-keygen.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-list.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> </td>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc-confgen.html">Next</a>
</td>
</tr>
</table>
<hr>
@@ -55,7 +57,7 @@
</div>
<div class="refsection">
<a name="id-1.14.39.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.36.7"></a><h2>DESCRIPTION</h2>
<p>
<span class="command"><strong>pkcs11-tokens</strong></span>
@@ -65,7 +67,7 @@
</div>
<div class="refsection">
<a name="id-1.14.39.8"></a><h2>ARGUMENTS</h2>
<a name="id-1.14.36.8"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl class="variablelist">
<dt><span class="term">-m <em class="replaceable"><code>module</code></em></span></dt>
@@ -86,7 +88,7 @@
</div>
<div class="refsection">
<a name="id-1.14.39.9"></a><h2>SEE ALSO</h2>
<a name="id-1.14.36.9"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry">
@@ -107,18 +109,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.pkcs11-keygen.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-list.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> </td>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc-confgen.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">pkcs11-keygen</span> </td>
<span class="application">pkcs11-list</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> </td>
<td width="40%" align="right" valign="top"> <span class="application">rndc-confgen</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.rndc-confgen.html
+13 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.rndc.conf.html" title="rndc.conf">
<link rel="next" href="man.ddns-confgen.html" title="ddns-confgen">
<link rel="prev" href="man.pkcs11-tokens.html" title="pkcs11-tokens">
<link rel="next" href="man.rndc.conf.html" title="rndc.conf">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><span class="application">rndc-confgen</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.rndc.conf.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-tokens.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.ddns-confgen.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc.conf.html">Next</a>
</td>
</tr>
</table>
@@ -66,7 +66,7 @@
</div>
<div class="refsection">
<a name="id-1.14.29.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.37.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>rndc-confgen</strong></span>
generates configuration files
@@ -85,7 +85,7 @@
</div>
<div class="refsection">
<a name="id-1.14.29.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.37.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -223,7 +223,7 @@
</div>
<div class="refsection">
<a name="id-1.14.29.9"></a><h2>EXAMPLES</h2>
<a name="id-1.14.37.9"></a><h2>EXAMPLES</h2>
<p>
To allow <span class="command"><strong>rndc</strong></span> to be used with
@@ -242,7 +242,7 @@
</div>
<div class="refsection">
<a name="id-1.14.29.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.37.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">rndc</span>(8)
@@ -263,20 +263,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.rndc.conf.html">Prev</a> </td>
<a accesskey="p" href="man.pkcs11-tokens.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.ddns-confgen.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc.conf.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<code class="filename">rndc.conf</code> </td>
<span class="application">pkcs11-tokens</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">ddns-confgen</span>
<td width="40%" align="right" valign="top"> <code class="filename">rndc.conf</code>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.rndc.conf.html
+13 -13
View File
@@ -13,8 +13,8 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.rndc.html" title="rndc">
<link rel="next" href="man.rndc-confgen.html" title="rndc-confgen">
<link rel="prev" href="man.rndc-confgen.html" title="rndc-confgen">
<link rel="next" href="man.rndc.html" title="rndc">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,9 +22,9 @@
<tr><th colspan="3" align="center"><code class="filename">rndc.conf</code></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.rndc.html">Prev</a> </td>
<a accesskey="p" href="man.rndc-confgen.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc-confgen.html">Next</a>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc.html">Next</a>
</td>
</tr>
</table>
@@ -55,7 +55,7 @@
</div>
<div class="refsection">
<a name="id-1.14.28.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.38.7"></a><h2>DESCRIPTION</h2>
<p><code class="filename">rndc.conf</code> is the configuration file
for <span class="command"><strong>rndc</strong></span>, the BIND 9 name server control
@@ -143,7 +143,7 @@
</div>
<div class="refsection">
<a name="id-1.14.28.8"></a><h2>EXAMPLE</h2>
<a name="id-1.14.38.8"></a><h2>EXAMPLE</h2>
<pre class="programlisting">
@@ -221,7 +221,7 @@
</div>
<div class="refsection">
<a name="id-1.14.28.9"></a><h2>NAME SERVER CONFIGURATION</h2>
<a name="id-1.14.38.9"></a><h2>NAME SERVER CONFIGURATION</h2>
<p>
The name server must be configured to accept rndc connections and
@@ -233,7 +233,7 @@
</div>
<div class="refsection">
<a name="id-1.14.28.10"></a><h2>SEE ALSO</h2>
<a name="id-1.14.38.10"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">rndc</span>(8)
@@ -254,20 +254,20 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.rndc.html">Prev</a> </td>
<a accesskey="p" href="man.rndc-confgen.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc-confgen.html">Next</a>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">rndc</span> </td>
<span class="application">rndc-confgen</span> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <span class="application">rndc-confgen</span>
<td width="40%" align="right" valign="top"> <span class="application">rndc</span>
</td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/man.rndc.html
+13 -17
View File
@@ -13,8 +13,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
<link rel="prev" href="man.nsupdate.html" title="nsupdate">
<link rel="next" href="man.rndc.conf.html" title="rndc.conf">
<link rel="prev" href="man.rndc.conf.html" title="rndc.conf">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
@@ -22,10 +21,9 @@
<tr><th colspan="3" align="center"><span class="application">rndc</span></th></tr>
<tr>
<td width="20%" align="left">
<a accesskey="p" href="man.nsupdate.html">Prev</a> </td>
<a accesskey="p" href="man.rndc.conf.html">Prev</a> </td>
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"> <a accesskey="n" href="man.rndc.conf.html">Next</a>
</td>
<td width="20%" align="right"> </td>
</tr>
</table>
<hr>
@@ -65,7 +63,7 @@
</div>
<div class="refsection">
<a name="id-1.14.27.7"></a><h2>DESCRIPTION</h2>
<a name="id-1.14.39.7"></a><h2>DESCRIPTION</h2>
<p><span class="command"><strong>rndc</strong></span>
controls the operation of a name
@@ -98,7 +96,7 @@
</div>
<div class="refsection">
<a name="id-1.14.27.8"></a><h2>OPTIONS</h2>
<a name="id-1.14.39.8"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl class="variablelist">
@@ -196,7 +194,7 @@
</div>
<div class="refsection">
<a name="id-1.14.27.9"></a><h2>COMMANDS</h2>
<a name="id-1.14.39.9"></a><h2>COMMANDS</h2>
<p>
A list of commands supported by <span class="command"><strong>rndc</strong></span> can
@@ -841,7 +839,7 @@
</div>
<div class="refsection">
<a name="id-1.14.27.10"></a><h2>LIMITATIONS</h2>
<a name="id-1.14.39.10"></a><h2>LIMITATIONS</h2>
<p>
There is currently no way to provide the shared secret for a
@@ -853,7 +851,7 @@
</div>
<div class="refsection">
<a name="id-1.14.27.11"></a><h2>SEE ALSO</h2>
<a name="id-1.14.39.11"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry">
<span class="refentrytitle">rndc.conf</span>(5)
@@ -880,20 +878,18 @@
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="man.nsupdate.html">Prev</a> </td>
<a accesskey="p" href="man.rndc.conf.html">Prev</a> </td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
<td width="40%" align="right"> <a accesskey="n" href="man.rndc.conf.html">Next</a>
</td>
<td width="40%" align="right"> </td>
</tr>
<tr>
<td width="40%" align="left" valign="top">
<span class="application">nsupdate</span> </td>
<code class="filename">rndc.conf</code> </td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"> <code class="filename">rndc.conf</code>
</td>
<td width="40%" align="right" valign="top"> </td>
</tr>
</table>
</div>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.22 (Extended Support Version)</p>
</body>
</html>
doc/arm/notes-9.11.22.xml
+36 -15
View File
@@ -15,38 +15,59 @@
<itemizedlist>
<listitem>
<para>
None.
It was possible to trigger an assertion failure when verifying the
response to a TSIG-signed request. This was disclosed in
CVE-2020-8622.
</para>
<para>
ISC would like to thank Dave Feldman, Jeff Warren, and Joel Cunningham
of Oracle for bringing this vulnerability to our attention. [GL #2028]
</para>
</listitem>
</itemizedlist>
</section>
<section xml:id="relnotes-9.11.22-known"><info><title>Known Issues</title></info>
<itemizedlist>
<listitem>
<para>
None.
When BIND 9 was compiled with native PKCS#11 support, it was possible
to trigger an assertion failure in code determining the number of bits
in the PKCS#11 RSA public key with a specially crafted packet. This
was disclosed in CVE-2020-8623.
</para>
<para>
ISC would like to thank Lyu Chiy for bringing this vulnerability to
our attention. [GL #2037]
</para>
</listitem>
</itemizedlist>
</section>
<section xml:id="relnotes-9.11.22-changes"><info><title>Feature Changes</title></info>
<itemizedlist>
<listitem>
<para>
None.
<command>update-policy</command> rules of type
<command>subdomain</command> were incorrectly treated as
<command>zonesub</command> rules, which allowed keys used in
<command>subdomain</command> rules to update names outside of the
specified subdomains. The problem was fixed by making sure
<command>subdomain</command> rules are again processed as described in
the ARM. This was disclosed in CVE-2020-8624.
</para>
<para>
ISC would like to thank Joop Boonen of credativ GmbH for bringing this
vulnerability to our attention. [GL #2055]
</para>
</listitem>
</itemizedlist>
</section>
<section xml:id="relnotes-9.11.22-bugs"><info><title>Bug Fixes</title></info>
<itemizedlist>
<listitem>
<para>
None.
Wildcard RPZ passthru rules could incorrectly be overridden by other
rules that were loaded from RPZ zones which appeared later in the
<command>response-policy</command> statement. This has been fixed.
[GL #1619]
</para>
</listitem>
<listitem>
<para>
LMDB locking code was revised to make <command>rndc reconfig</command>
work properly on FreeBSD and with LMDB >= 0.9.26. [GL #1976]
</para>
</listitem>
</itemizedlist>
doc/arm/notes.html
+72 -1
View File
@@ -15,7 +15,7 @@
<div class="section">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
<a name="id-1.2"></a>Release Notes for BIND Version 9.11.21</h2></div></div></div>
<a name="id-1.2"></a>Release Notes for BIND Version 9.11.22</h2></div></div></div>
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
@@ -73,6 +73,77 @@
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes-9.11.22"></a>Notes for BIND 9.11.22</h3></div></div></div>
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="relnotes-9.11.22-security"></a>Security Fixes</h4></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
It was possible to trigger an assertion failure when verifying the
response to a TSIG-signed request. This was disclosed in
CVE-2020-8622.
</p>
<p>
ISC would like to thank Dave Feldman, Jeff Warren, and Joel Cunningham
of Oracle for bringing this vulnerability to our attention. [GL #2028]
</p>
</li>
<li class="listitem">
<p>
When BIND 9 was compiled with native PKCS#11 support, it was possible
to trigger an assertion failure in code determining the number of bits
in the PKCS#11 RSA public key with a specially crafted packet. This
was disclosed in CVE-2020-8623.
</p>
<p>
ISC would like to thank Lyu Chiy for bringing this vulnerability to
our attention. [GL #2037]
</p>
</li>
<li class="listitem">
<p>
<span class="command"><strong>update-policy</strong></span> rules of type
<span class="command"><strong>subdomain</strong></span> were incorrectly treated as
<span class="command"><strong>zonesub</strong></span> rules, which allowed keys used in
<span class="command"><strong>subdomain</strong></span> rules to update names outside of the
specified subdomains. The problem was fixed by making sure
<span class="command"><strong>subdomain</strong></span> rules are again processed as described in
the ARM. This was disclosed in CVE-2020-8624.
</p>
<p>
ISC would like to thank Joop Boonen of credativ GmbH for bringing this
vulnerability to our attention. [GL #2055]
</p>
</li>
</ul></div>
</div>
<div class="section">
<div class="titlepage"><div><div><h4 class="title">
<a name="relnotes-9.11.22-bugs"></a>Bug Fixes</h4></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
Wildcard RPZ passthru rules could incorrectly be overridden by other
rules that were loaded from RPZ zones which appeared later in the
<span class="command"><strong>response-policy</strong></span> statement. This has been fixed.
[GL #1619]
</p>
</li>
<li class="listitem">
<p>
LMDB locking code was revised to make <span class="command"><strong>rndc reconfig</strong></span>
work properly on FreeBSD and with LMDB &gt;= 0.9.26. [GL #1976]
</p>
</li>
</ul></div>
</div>
</div>
<div class="section">
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes-9.11.21"></a>Notes for BIND 9.11.21</h3></div></div></div>
<div class="section">
doc/arm/notes.pdf
BIN
View File
Binary file not shown.
doc/arm/notes.txt
+38 -1
View File
@@ -1,4 +1,4 @@
Release Notes for BIND Version 9.11.21
Release Notes for BIND Version 9.11.22
Introduction
@@ -36,6 +36,43 @@ Those unsure whether or not the license change affects their use of BIND,
or who wish to discuss how to comply with the license may contact ISC at
https://www.isc.org/mission/contact/.
Notes for BIND 9.11.22
Security Fixes
• It was possible to trigger an assertion failure when verifying the
response to a TSIG-signed request. This was disclosed in
CVE-2020-8622.
ISC would like to thank Dave Feldman, Jeff Warren, and Joel Cunningham
of Oracle for bringing this vulnerability to our attention. [GL #2028]
• When BIND 9 was compiled with native PKCS#11 support, it was possible
to trigger an assertion failure in code determining the number of bits
in the PKCS#11 RSA public key with a specially crafted packet. This
was disclosed in CVE-2020-8623.
ISC would like to thank Lyu Chiy for bringing this vulnerability to
our attention. [GL #2037]
• update-policy rules of type subdomain were incorrectly treated as
zonesub rules, which allowed keys used in subdomain rules to update
names outside of the specified subdomains. The problem was fixed by
making sure subdomain rules are again processed as described in the
ARM. This was disclosed in CVE-2020-8624.
ISC would like to thank Joop Boonen of credativ GmbH for bringing this
vulnerability to our attention. [GL #2055]
Bug Fixes
• Wildcard RPZ passthru rules could incorrectly be overridden by other
rules that were loaded from RPZ zones which appeared later in the
response-policy statement. This has been fixed. [GL #1619]
• LMDB locking code was revised to make rndc reconfig work properly on
FreeBSD and with LMDB >= 0.9.26. [GL #1976]
Notes for BIND 9.11.21
Bug Fixes
lib/dns/api
+1 -1
View File
@@ -9,5 +9,5 @@
# 9.11: 160-169,1100-1199
# 9.12: 1200-1299
LIBINTERFACE = 1110
LIBREVISION = 4
LIBREVISION = 5
LIBAGE = 0
lib/dns/message.c
+13 -11
View File
@@ -1712,6 +1712,19 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
msg->header_ok = 0;
msg->question_ok = 0;
if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0) {
isc_buffer_usedregion(&origsource, &msg->saved);
} else {
msg->saved.length = isc_buffer_usedlength(&origsource);
msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
if (msg->saved.base == NULL) {
return (ISC_R_NOMEMORY);
}
memmove(msg->saved.base, isc_buffer_base(&origsource),
msg->saved.length);
msg->free_saved = 1;
}
isc_buffer_remainingregion(source, &r);
if (r.length < DNS_MESSAGE_HEADERLEN)
return (ISC_R_UNEXPECTEDEND);
@@ -1787,17 +1800,6 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
}
truncated:
if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0)
isc_buffer_usedregion(&origsource, &msg->saved);
else {
msg->saved.length = isc_buffer_usedlength(&origsource);
msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
if (msg->saved.base == NULL)
return (ISC_R_NOMEMORY);
memmove(msg->saved.base, isc_buffer_base(&origsource),
msg->saved.length);
msg->free_saved = 1;
}
if (ret == ISC_R_UNEXPECTEDEND && ignore_tc)
return (DNS_R_RECOVERABLE);
lib/dns/pkcs11dh_link.c
+13 -2
View File
@@ -748,6 +748,7 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
CK_BYTE *prime = NULL, *base = NULL, *pub = NULL;
CK_ATTRIBUTE *attr;
int special = 0;
unsigned int bits;
isc_result_t result;
isc_buffer_remainingregion(data, &r);
@@ -852,7 +853,11 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
pub = r.base;
isc_region_consume(&r, publen);
key->key_size = pk11_numbits(prime, plen_);
result = pk11_numbits(prime, plen_, &bits);
if (result != ISC_R_SUCCESS) {
goto cleanup;
}
key->key_size = bits;
dh->repr = (CK_ATTRIBUTE *) isc_mem_get(key->mctx, sizeof(*attr) * 3);
if (dh->repr == NULL)
@@ -1012,6 +1017,7 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
dst_private_t priv;
isc_result_t ret;
int i;
unsigned int bits;
pk11_object_t *dh = NULL;
CK_ATTRIBUTE *attr;
isc_mem_t *mctx;
@@ -1082,7 +1088,12 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
attr = pk11_attribute_bytype(dh, CKA_PRIME);
INSIST(attr != NULL);
key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
return (ISC_R_SUCCESS);
lib/dns/pkcs11dsa_link.c
+7 -1
View File
@@ -983,6 +983,7 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
dst_private_t priv;
isc_result_t ret;
int i;
unsigned int bits;
pk11_object_t *dsa = NULL;
CK_ATTRIBUTE *attr;
isc_mem_t *mctx = key->mctx;
@@ -1072,7 +1073,12 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
attr = pk11_attribute_bytype(dsa, CKA_PRIME);
INSIST(attr != NULL);
key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
return (ISC_R_SUCCESS);
lib/dns/pkcs11rsa_link.c
+60 -19
View File
@@ -332,6 +332,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
key->key_alg == DST_ALG_RSASHA256 ||
key->key_alg == DST_ALG_RSASHA512);
#endif
REQUIRE(maxbits <= RSA_MAX_PUBEXP_BITS);
/*
* Reject incorrect RSA key lengths.
@@ -376,6 +377,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
for (attr = pk11_attribute_first(rsa);
attr != NULL;
attr = pk11_attribute_next(rsa, attr))
{
switch (attr->type) {
case CKA_MODULUS:
INSIST(keyTemplate[5].type == attr->type);
@@ -396,12 +398,16 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
memmove(keyTemplate[6].pValue, attr->pValue,
attr->ulValueLen);
keyTemplate[6].ulValueLen = attr->ulValueLen;
if (pk11_numbits(attr->pValue,
attr->ulValueLen) > maxbits &&
maxbits != 0)
unsigned int bits;
ret = pk11_numbits(attr->pValue, attr->ulValueLen,
&bits);
if (ret != ISC_R_SUCCESS ||
(bits > maxbits && maxbits != 0)) {
DST_RET(DST_R_VERIFYFAILURE);
}
break;
}
}
pk11_ctx->object = CK_INVALID_HANDLE;
pk11_ctx->ontoken = false;
PK11_RET(pkcs_C_CreateObject,
@@ -1072,6 +1078,7 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
keyTemplate[5].ulValueLen = attr->ulValueLen;
break;
case CKA_PUBLIC_EXPONENT:
unsigned int bits;
INSIST(keyTemplate[6].type == attr->type);
keyTemplate[6].pValue = isc_mem_get(dctx->mctx,
attr->ulValueLen);
@@ -1080,10 +1087,12 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
memmove(keyTemplate[6].pValue, attr->pValue,
attr->ulValueLen);
keyTemplate[6].ulValueLen = attr->ulValueLen;
if (pk11_numbits(attr->pValue,
attr->ulValueLen)
> RSA_MAX_PUBEXP_BITS)
ret = pk11_numbits(attr->pValue, attr->ulValueLen,
&bits);
if (ret != ISC_R_SUCCESS || bits > RSA_MAX_PUBEXP_BITS)
{
DST_RET(DST_R_VERIFYFAILURE);
}
break;
}
pk11_ctx->object = CK_INVALID_HANDLE;
@@ -1461,6 +1470,8 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
CK_BYTE *exponent = NULL, *modulus = NULL;
CK_ATTRIBUTE *attr;
unsigned int length;
unsigned int bits;
isc_result_t ret = ISC_R_SUCCESS;
isc_buffer_remainingregion(data, &r);
if (r.length == 0)
@@ -1478,9 +1489,7 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
if (e_bytes == 0) {
if (r.length < 2) {
isc_safe_memwipe(rsa, sizeof(*rsa));
isc_mem_put(key->mctx, rsa, sizeof(*rsa));
return (DST_R_INVALIDPUBLICKEY);
DST_RET(DST_R_INVALIDPUBLICKEY);
}
e_bytes = (*r.base) << 8;
isc_region_consume(&r, 1);
@@ -1489,16 +1498,18 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
}
if (r.length < e_bytes) {
isc_safe_memwipe(rsa, sizeof(*rsa));
isc_mem_put(key->mctx, rsa, sizeof(*rsa));
return (DST_R_INVALIDPUBLICKEY);
DST_RET(DST_R_INVALIDPUBLICKEY);
}
exponent = r.base;
isc_region_consume(&r, e_bytes);
modulus = r.base;
mod_bytes = r.length;
key->key_size = pk11_numbits(modulus, mod_bytes);
ret = pk11_numbits(modulus, mod_bytes, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
isc_buffer_forward(data, length);
@@ -1548,9 +1559,12 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
rsa->repr,
rsa->attrcnt * sizeof(*attr));
}
ret = ISC_R_NOMEMORY;
err:
isc_safe_memwipe(rsa, sizeof(*rsa));
isc_mem_put(key->mctx, rsa, sizeof(*rsa));
return (ISC_R_NOMEMORY);
return (ret);
}
static isc_result_t
@@ -1729,6 +1743,7 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
pk11_object_t *pubrsa;
pk11_context_t *pk11_ctx = NULL;
isc_result_t ret;
unsigned int bits;
if (label == NULL)
return (DST_R_NOENGINE);
@@ -1815,7 +1830,11 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
INSIST(attr != NULL);
key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
return (ISC_R_SUCCESS);
@@ -1901,6 +1920,7 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
CK_ATTRIBUTE *attr;
isc_mem_t *mctx = key->mctx;
const char *engine = NULL, *label = NULL;
unsigned int bits;
/* read private key file */
ret = dst__privstruct_parse(key, DST_ALG_RSA, lexer, mctx, &priv);
@@ -2044,12 +2064,22 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
INSIST(attr != NULL);
key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
INSIST(attr != NULL);
if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
if (bits > RSA_MAX_PUBEXP_BITS) {
DST_RET(ISC_R_RANGE);
}
dst__privstruct_free(&priv, mctx);
isc_safe_memwipe(&priv, sizeof(priv));
@@ -2084,6 +2114,7 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
pk11_context_t *pk11_ctx = NULL;
isc_result_t ret;
unsigned int i;
unsigned int bits;
UNUSED(pin);
@@ -2178,12 +2209,22 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
INSIST(attr != NULL);
if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
if (bits > RSA_MAX_PUBEXP_BITS) {
DST_RET(ISC_R_RANGE);
}
attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
INSIST(attr != NULL);
key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
if (ret != ISC_R_SUCCESS) {
goto err;
}
key->key_size = bits;
pk11_return_session(pk11_ctx);
isc_safe_memwipe(pk11_ctx, sizeof(*pk11_ctx));
lib/isc/api
+3 -3
View File
@@ -8,6 +8,6 @@
# 9.10-sub: 180-189
# 9.11: 160-169,1100-1199
# 9.12: 1200-1299
LIBINTERFACE = 1106
LIBREVISION = 1
LIBAGE = 1
LIBINTERFACE = 1107
LIBREVISION = 0
LIBAGE = 0
lib/isc/include/pk11/internal.h
+2 -1
View File
@@ -25,7 +25,8 @@ void pk11_mem_put(void *ptr, size_t size);
CK_SLOT_ID pk11_get_best_token(pk11_optype_t optype);
unsigned int pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt);
isc_result_t
pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits);
CK_ATTRIBUTE *pk11_attribute_first(const pk11_object_t *obj);
lib/isc/pk11.c
+39 -22
View File
@@ -962,13 +962,15 @@ pk11_get_best_token(pk11_optype_t optype) {
return (token->slotid);
}
unsigned int
pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
isc_result_t
pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits) {
unsigned int bitcnt, i;
CK_BYTE top;
if (bytecnt == 0)
return (0);
if (bytecnt == 0) {
*bits = 0;
return (ISC_R_SUCCESS);
}
bitcnt = bytecnt * 8;
for (i = 0; i < bytecnt; i++) {
top = data[i];
@@ -976,26 +978,41 @@ pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
bitcnt -= 8;
continue;
}
if (top & 0x80)
return (bitcnt);
if (top & 0x40)
return (bitcnt - 1);
if (top & 0x20)
return (bitcnt - 2);
if (top & 0x10)
return (bitcnt - 3);
if (top & 0x08)
return (bitcnt - 4);
if (top & 0x04)
return (bitcnt - 5);
if (top & 0x02)
return (bitcnt - 6);
if (top & 0x01)
return (bitcnt - 7);
if (top & 0x80) {
*bits = bitcnt;
return (ISC_R_SUCCESS);
}
if (top & 0x40) {
*bits = bitcnt - 1;
return (ISC_R_SUCCESS);
}
if (top & 0x20) {
*bits = bitcnt - 2;
return (ISC_R_SUCCESS);
}
if (top & 0x10) {
*bits = bitcnt - 3;
return (ISC_R_SUCCESS);
}
if (top & 0x08) {
*bits = bitcnt - 4;
return (ISC_R_SUCCESS);
}
if (top & 0x04) {
*bits = bitcnt - 5;
return (ISC_R_SUCCESS);
}
if (top & 0x02) {
*bits = bitcnt - 6;
return (ISC_R_SUCCESS);
}
if (top & 0x01) {
*bits = bitcnt - 7;
return (ISC_R_SUCCESS);
}
break;
}
INSIST(0);
ISC_UNREACHABLE();
return (ISC_R_RANGE);
}
CK_ATTRIBUTE *
version
+1 -1
View File
@@ -5,7 +5,7 @@ PRODUCT=BIND
DESCRIPTION="(Extended Support Version)"
MAJORVER=9
MINORVER=11
PATCHVER=21
PATCHVER=22
RELEASETYPE=
RELEASEVER=
EXTENSIONS=