{"id":3553,"date":"2022-12-20T17:08:59","date_gmt":"2022-12-20T20:08:59","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/namedcheckzone-man8-2\/"},"modified":"2022-12-20T17:08:59","modified_gmt":"2022-12-20T20:08:59","slug":"namedcheckzone-man8-2","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/namedcheckzone-man8-2\/","title":{"rendered":"NAMED−CHECKZONE (man8)"},"content":{"rendered":"

NAMED\u2212CHECKZONE<\/h1>\n

NAME<\/a>
SYNOPSIS<\/a>
DESCRIPTION<\/a>
OPTIONS<\/a>
RETURN VALUES<\/a>
SEE ALSO<\/a>
AUTHOR<\/a>
COPYRIGHT<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

named-checkzone, named-compilezone \u2212 zone file validity checking or converting tool<\/p>\n

SYNOPSIS <\/a> <\/h2>\n\n\n\n
<\/td>\n\n

named\u2212checkzone<\/b> [\u2212d<\/b>] [\u2212h<\/b>] [\u2212j<\/b>] [\u2212q<\/b>] [\u2212v<\/b>] [\u2212c\u00a0<\/b>class<\/i>] [\u2212f\u00a0<\/b>format<\/i>] [\u2212F\u00a0<\/b>format<\/i>] [\u2212J\u00a0<\/b>filename<\/i>] [\u2212i\u00a0<\/b>mode<\/i>] [\u2212k\u00a0<\/b>mode<\/i>] [\u2212m\u00a0<\/b>mode<\/i>] [\u2212M\u00a0<\/b>mode<\/i>] [\u2212n\u00a0<\/b>mode<\/i>] [\u2212l\u00a0<\/b>ttl<\/i>] [\u2212L\u00a0<\/b>serial<\/i>] [\u2212o\u00a0<\/b>filename<\/i>] [\u2212r\u00a0<\/b>mode<\/i>] [\u2212s\u00a0<\/b>style<\/i>] [\u2212S\u00a0<\/b>mode<\/i>] [\u2212t\u00a0<\/b>directory<\/i>] [\u2212T\u00a0<\/b>mode<\/i>] [\u2212w\u00a0<\/b>directory<\/i>] [\u2212D<\/b>] [\u2212W\u00a0<\/b>mode<\/i>] {zonename} {filename}<\/p>\n<\/td>\n<\/tr>\n

<\/td>\n\n

named\u2212compilezone<\/b> [\u2212d<\/b>] [\u2212j<\/b>] [\u2212q<\/b>] [\u2212v<\/b>] [\u2212c\u00a0<\/b>class<\/i>] [\u2212C\u00a0<\/b>mode<\/i>] [\u2212f\u00a0<\/b>format<\/i>] [\u2212F\u00a0<\/b>format<\/i>] [\u2212J\u00a0<\/b>filename<\/i>] [\u2212i\u00a0<\/b>mode<\/i>] [\u2212k\u00a0<\/b>mode<\/i>] [\u2212m\u00a0<\/b>mode<\/i>] [\u2212n\u00a0<\/b>mode<\/i>] [\u2212l\u00a0<\/b>ttl<\/i>] [\u2212L\u00a0<\/b>serial<\/i>] [\u2212r\u00a0<\/b>mode<\/i>] [\u2212s\u00a0<\/b>style<\/i>] [\u2212t\u00a0<\/b>directory<\/i>] [\u2212T\u00a0<\/b>mode<\/i>] [\u2212w\u00a0<\/b>directory<\/i>] [\u2212D<\/b>] [\u2212W\u00a0<\/b>mode<\/i>] {\u2212o\u00a0<\/b>filename<\/i>} {zonename} {filename}<\/p>\n<\/td>\n<\/tr>\n<\/table>\n

DESCRIPTION <\/a> <\/h2>\n

named\u2212checkzone<\/b> checks the syntax and integrity of a zone file. It performs the same checks as named<\/b> does when loading a zone. This makes named\u2212checkzone<\/b> useful for checking zone files before configuring them into a name server.<\/p>\n

named\u2212compilezone<\/b> is similar to named\u2212checkzone<\/b>, but it always dumps the zone contents to a specified file in a specified format. Additionally, it applies stricter check levels by default, since the dump output will be used as an actual zone file loaded by named<\/b>. When manually specified otherwise, the check levels must at least be as strict as those specified in the named<\/b> configuration file.<\/p>\n

OPTIONS <\/a> <\/h2>\n

\u2212d<\/p>\n

Enable debugging.<\/p>\n

\u2212h<\/p>\n

Print the usage summary and exit.<\/p>\n

\u2212q<\/p>\n

Quiet mode \u2212 exit code only.<\/p>\n

\u2212v<\/p>\n

Print the version of the named\u2212checkzone<\/b> program and exit.<\/p>\n

\u2212j<\/p>\n

When loading a zone file, read the journal if it exists. The journal file name is assumed to be the zone file name appended with the string .jnl.<\/p>\n

\u2212J filename<\/i><\/p>\n

When loading the zone file read the journal from the given file, if it exists. (Implies \u2212j.)<\/p>\n

\u2212c class<\/i><\/p>\n

Specify the class of the zone. If not specified, “IN” is assumed.<\/p>\n

\u2212i mode<\/i><\/p>\n

Perform post\u2212load zone integrity checks. Possible modes are “full”<\/b> (default), “full\u2212sibling”<\/b>, “local”<\/b>, “local\u2212sibling”<\/b> and “none”<\/b>.<\/p>\n

Mode “full”<\/b> checks that MX records refer to A or AAAA record (both in\u2212zone and out\u2212of\u2212zone hostnames). Mode “local”<\/b> only checks MX records which refer to in\u2212zone hostnames.<\/p>\n

Mode “full”<\/b> checks that SRV records refer to A or AAAA record (both in\u2212zone and out\u2212of\u2212zone hostnames). Mode “local”<\/b> only checks SRV records which refer to in\u2212zone hostnames.<\/p>\n

Mode “full”<\/b> checks that delegation NS records refer to A or AAAA record (both in\u2212zone and out\u2212of\u2212zone hostnames). It also checks that glue address records in the zone match those advertised by the child. Mode “local”<\/b> only checks NS records which refer to in\u2212zone hostnames or that some required glue exists, that is when the nameserver is in a child zone.<\/p>\n

Mode “full\u2212sibling”<\/b> and “local\u2212sibling”<\/b> disable sibling glue checks but are otherwise the same as “full”<\/b> and “local”<\/b> respectively.<\/p>\n

Mode “none”<\/b> disables the checks.<\/p>\n

\u2212f format<\/i><\/p>\n

Specify the format of the zone file. Possible formats are “text”<\/b> (default), “raw”<\/b>, and “map”<\/b>.<\/p>\n

\u2212F format<\/i><\/p>\n

Specify the format of the output file specified. For named\u2212checkzone<\/b>, this does not cause any effects unless it dumps the zone contents.<\/p>\n

Possible formats are “text”<\/b> (default), which is the standard textual representation of the zone, and “map”<\/b>, “raw”<\/b>, and “raw=N”<\/b>, which store the zone in a binary format for rapid loading by named<\/b>. “raw=N”<\/b> specifies the format version of the raw zone file: if N is 0, the raw file can be read by any version of named<\/b>; if N is 1, the file can be read by release 9.9.0 or higher; the default is 1.<\/p>\n

\u2212k mode<\/i><\/p>\n

Perform “check\u2212names”<\/b> checks with the specified failure mode. Possible modes are “fail”<\/b> (default for named\u2212compilezone<\/b>), “warn”<\/b> (default for named\u2212checkzone<\/b>) and “ignore”<\/b>.<\/p>\n

\u2212l ttl<\/i><\/p>\n

Sets a maximum permissible TTL for the input file. Any record with a TTL higher than this value will cause the zone to be rejected. This is similar to using the max\u2212zone\u2212ttl<\/b> option in named.conf.<\/p>\n

\u2212L serial<\/i><\/p>\n

When compiling a zone to “raw” or “map” format, set the “source serial” value in the header to the specified serial number. (This is expected to be used primarily for testing purposes.)<\/p>\n

\u2212m mode<\/i><\/p>\n

Specify whether MX records should be checked to see if they are addresses. Possible modes are “fail”<\/b>, “warn”<\/b> (default) and “ignore”<\/b>.<\/p>\n

\u2212M mode<\/i><\/p>\n

Check if a MX record refers to a CNAME. Possible modes are “fail”<\/b>, “warn”<\/b> (default) and “ignore”<\/b>.<\/p>\n

\u2212n mode<\/i><\/p>\n

Specify whether NS records should be checked to see if they are addresses. Possible modes are “fail”<\/b> (default for named\u2212compilezone<\/b>), “warn”<\/b> (default for named\u2212checkzone<\/b>) and “ignore”<\/b>.<\/p>\n

\u2212o filename<\/i><\/p>\n

Write zone output to filename. If filename is \u2212 then write to standard out. This is mandatory for named\u2212compilezone<\/b>.<\/p>\n

\u2212r mode<\/i><\/p>\n

Check for records that are treated as different by DNSSEC but are semantically equal in plain DNS. Possible modes are “fail”<\/b>, “warn”<\/b> (default) and “ignore”<\/b>.<\/p>\n

\u2212s style<\/i><\/p>\n

Specify the style of the dumped zone file. Possible styles are “full”<\/b> (default) and “relative”<\/b>. The full format is most suitable for processing automatically by a separate script. On the other hand, the relative format is more human\u2212readable and is thus suitable for editing by hand. For named\u2212checkzone<\/b> this does not cause any effects unless it dumps the zone contents. It also does not have any meaning if the output format is not text.<\/p>\n

\u2212S mode<\/i><\/p>\n

Check if a SRV record refers to a CNAME. Possible modes are “fail”<\/b>, “warn”<\/b> (default) and “ignore”<\/b>.<\/p>\n

\u2212t directory<\/i><\/p>\n

Chroot to directory so that include directives in the configuration file are processed as if run by a similarly chrooted named<\/b>.<\/p>\n

\u2212T mode<\/i><\/p>\n

Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF\u2212formatted TXT record is not also present. Possible modes are “warn”<\/b> (default), “ignore”<\/b>.<\/p>\n

\u2212w directory<\/i><\/p>\n

chdir to directory so that relative filenames in master file $INCLUDE directives work. This is similar to the directory clause in named.conf.<\/p>\n

\u2212D<\/p>\n

Dump zone file in canonical format. This is always enabled for named\u2212compilezone<\/b>.<\/p>\n

\u2212W mode<\/i><\/p>\n

Specify whether to check for non\u2212terminal wildcards. Non\u2212terminal wildcards are almost always the result of a failure to understand the wildcard matching algorithm (RFC 1034). Possible modes are “warn”<\/b> (default) and “ignore”<\/b>.<\/p>\n

zonename<\/p>\n

The domain name of the zone being checked.<\/p>\n

filename<\/p>\n

The name of the zone file.<\/p>\n

RETURN VALUES <\/a> <\/h2>\n

named\u2212checkzone<\/b> returns an exit status of 1 if errors were detected and 0 otherwise.<\/p>\n

SEE ALSO <\/a> <\/h2>\n

named<\/b>(8), named-checkconf<\/b>(8), RFC 1035, BIND 9 Administrator Reference Manual.<\/p>\n

AUTHOR <\/a> <\/h2>\n

Internet Systems Consortium, Inc.<\/b><\/p>\n

COPYRIGHT <\/a> <\/h2>\n

Copyright \u00a9 2000-2002, 2004-2007, 2009-2016, 2018-2021 Internet Systems Consortium, Inc. (“ISC”)<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

named-checkzone, named-compilezone \u2212 zone file validity checking or converting tool <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,673],"class_list":["post-3553","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-named-compilezone"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3553"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3553\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}