2019-03-31 12:49:47 +02:00
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
.
|
|
|
|
.
|
|
|
|
.nr rst2man-indent-level 0
|
|
|
|
.
|
|
|
|
.de1 rstReportMargin
|
|
|
|
\\$1 \\n[an-margin]
|
|
|
|
level \\n[rst2man-indent-level]
|
|
|
|
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
-
|
|
|
|
\\n[rst2man-indent0]
|
|
|
|
\\n[rst2man-indent1]
|
|
|
|
\\n[rst2man-indent2]
|
|
|
|
..
|
|
|
|
.de1 INDENT
|
|
|
|
.\" .rstReportMargin pre:
|
|
|
|
. RS \\$1
|
|
|
|
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
|
|
|
|
. nr rst2man-indent-level +1
|
|
|
|
.\" .rstReportMargin post:
|
|
|
|
..
|
|
|
|
.de UNINDENT
|
|
|
|
. RE
|
|
|
|
.\" indent \\n[an-margin]
|
|
|
|
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.nr rst2man-indent-level -1
|
|
|
|
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
|
|
|
|
..
|
2021-09-16 10:57:04 +02:00
|
|
|
.TH "DELV" "1" "@RELEASE_DATE@" "@PACKAGE_VERSION@" "BIND 9"
|
|
|
|
.SH NAME
|
|
|
|
delv \- DNS lookup and validation utility
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH SYNOPSIS
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP [@server] [ [\fB\-4\fP] | [\fB\-6\fP] ] [\fB\-a\fP anchor\-file] [\fB\-b\fP address] [\fB\-c\fP class] [\fB\-d\fP level] [\fB\-i\fP] [\fB\-m\fP] [\fB\-p\fP port#] [\fB\-q\fP name] [\fB\-t\fP type] [\fB\-x\fP addr] [name] [type] [class] [queryopt...]
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP [\fB\-h\fP]
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP [\fB\-v\fP]
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP [queryopt...] [query...]
|
|
|
|
.SH DESCRIPTION
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP is a tool for sending DNS queries and validating the results,
|
2022-04-22 13:05:10 +02:00
|
|
|
using the same internal resolver and validator logic as \fI\%named\fP\&.
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
\fBdelv\fP sends to a specified name server all queries needed to
|
2019-03-31 12:49:47 +02:00
|
|
|
fetch and validate the requested data; this includes the original
|
2020-07-02 10:53:16 +02:00
|
|
|
requested query, subsequent queries to follow CNAME or DNAME chains,
|
2019-03-31 12:49:47 +02:00
|
|
|
queries for DNSKEY, and DS records to establish a chain of trust for
|
|
|
|
DNSSEC validation. It does not perform iterative resolution, but
|
|
|
|
simulates the behavior of a name server configured for DNSSEC validating
|
|
|
|
and forwarding.
|
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
By default, responses are validated using the built\-in DNSSEC trust anchor
|
2019-03-31 12:49:47 +02:00
|
|
|
for the root zone ("."). Records returned by \fBdelv\fP are either fully
|
|
|
|
validated or were not signed. If validation fails, an explanation of the
|
|
|
|
failure is included in the output; the validation process can be traced
|
|
|
|
in detail. Because \fBdelv\fP does not rely on an external server to carry
|
|
|
|
out validation, it can be used to check the validity of DNS responses in
|
|
|
|
environments where local name servers may not be trustworthy.
|
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
Unless it is told to query a specific name server, \fBdelv\fP tries
|
2019-03-31 12:49:47 +02:00
|
|
|
each of the servers listed in \fB/etc/resolv.conf\fP\&. If no usable server
|
2020-07-02 10:53:16 +02:00
|
|
|
addresses are found, \fBdelv\fP sends queries to the localhost
|
2019-03-31 12:49:47 +02:00
|
|
|
addresses (127.0.0.1 for IPv4, ::1 for IPv6).
|
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
When no command\-line arguments or options are given, \fBdelv\fP
|
|
|
|
performs an NS query for "." (the root zone).
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH SIMPLE USAGE
|
|
|
|
.sp
|
|
|
|
A typical invocation of \fBdelv\fP looks like:
|
|
|
|
.INDENT 0.0
|
|
|
|
.INDENT 3.5
|
|
|
|
.sp
|
|
|
|
.nf
|
|
|
|
.ft C
|
|
|
|
delv @server name type
|
|
|
|
.ft P
|
|
|
|
.fi
|
|
|
|
.UNINDENT
|
|
|
|
.UNINDENT
|
|
|
|
.sp
|
|
|
|
where:
|
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B server
|
2019-03-31 12:49:47 +02:00
|
|
|
is the name or IP address of the name server to query. This can be an
|
|
|
|
IPv4 address in dotted\-decimal notation or an IPv6 address in
|
|
|
|
colon\-delimited notation. When the supplied \fBserver\fP argument is a
|
|
|
|
hostname, \fBdelv\fP resolves that name before querying that name
|
|
|
|
server (note, however, that this initial lookup is \fInot\fP validated by
|
|
|
|
DNSSEC).
|
|
|
|
.sp
|
|
|
|
If no \fBserver\fP argument is provided, \fBdelv\fP consults
|
|
|
|
\fB/etc/resolv.conf\fP; if an address is found there, it queries the
|
2022-03-02 16:54:31 +01:00
|
|
|
name server at that address. If either of the \fI\%\-4\fP or \fI\%\-6\fP
|
2020-07-02 10:53:16 +02:00
|
|
|
options is in use, then only addresses for the corresponding
|
|
|
|
transport are tried. If no usable addresses are found, \fBdelv\fP
|
|
|
|
sends queries to the localhost addresses (127.0.0.1 for IPv4, ::1
|
2019-03-31 12:49:47 +02:00
|
|
|
for IPv6).
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B name
|
2019-03-31 12:49:47 +02:00
|
|
|
is the domain name to be looked up.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B type
|
2020-07-02 10:53:16 +02:00
|
|
|
indicates what type of query is required \- ANY, A, MX, etc.
|
2019-03-31 12:49:47 +02:00
|
|
|
\fBtype\fP can be any valid query type. If no \fBtype\fP argument is
|
2020-07-02 10:53:16 +02:00
|
|
|
supplied, \fBdelv\fP performs a lookup for an A record.
|
2019-03-31 12:49:47 +02:00
|
|
|
.UNINDENT
|
|
|
|
.SH OPTIONS
|
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-a anchor\-file
|
2020-07-02 10:53:16 +02:00
|
|
|
This option specifies a file from which to read DNSSEC trust anchors. The default
|
2022-01-24 12:13:24 +01:00
|
|
|
is \fB@sysconfdir@/bind.keys\fP, which is included with BIND 9 and contains one
|
2019-03-31 12:49:47 +02:00
|
|
|
or more trust anchors for the root zone (".").
|
|
|
|
.sp
|
|
|
|
Keys that do not match the root zone name are ignored. An alternate
|
2022-04-25 18:12:17 +02:00
|
|
|
key name can be specified using the \fI\%+root\fP option.
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
Note: When reading the trust anchor file, \fBdelv\fP treats \fBtrust\-anchors\fP,
|
|
|
|
\fBinitial\-key\fP, and \fBstatic\-key\fP identically. That is, for a managed key,
|
2019-03-31 12:49:47 +02:00
|
|
|
it is the \fIinitial\fP key that is trusted; \fI\%RFC 5011\fP key management is not
|
2020-07-02 10:53:16 +02:00
|
|
|
supported. \fBdelv\fP does not consult the managed\-keys database maintained by
|
2022-04-22 13:05:10 +02:00
|
|
|
\fI\%named\fP, which means that if either of the keys in \fB@sysconfdir@/bind.keys\fP is
|
2022-01-24 12:13:24 +01:00
|
|
|
revoked and rolled over, \fB@sysconfdir@/bind.keys\fP must be updated to
|
2019-03-31 12:49:47 +02:00
|
|
|
use DNSSEC validation in \fBdelv\fP\&.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-b address
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the source IP address of the query to \fBaddress\fP\&. This must be
|
|
|
|
a valid address on one of the host\(aqs network interfaces, or \fB0.0.0.0\fP,
|
|
|
|
or \fB::\fP\&. An optional source port may be specified by appending
|
|
|
|
\fB#<port>\fP
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-c class
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the query class for the requested data. Currently, only class
|
2019-03-31 12:49:47 +02:00
|
|
|
"IN" is supported in \fBdelv\fP and any other value is ignored.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-d level
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the systemwide debug level to \fBlevel\fP\&. The allowed range is
|
2019-03-31 12:49:47 +02:00
|
|
|
from 0 to 99. The default is 0 (no debugging). Debugging traces from
|
|
|
|
\fBdelv\fP become more verbose as the debug level increases. See the
|
2022-04-25 18:12:17 +02:00
|
|
|
\fI\%+mtrace\fP, \fI\%+rtrace\fP, and \fI\%+vtrace\fP options below for
|
2019-03-31 12:49:47 +02:00
|
|
|
additional debugging details.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-h
|
2020-07-02 10:53:16 +02:00
|
|
|
This option displays the \fBdelv\fP help usage output and exits.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-i
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets insecure mode, which disables internal DNSSEC validation. (Note,
|
|
|
|
however, that this does not set the CD bit on upstream queries. If the
|
|
|
|
server being queried is performing DNSSEC validation, then it does
|
2019-03-31 12:49:47 +02:00
|
|
|
not return invalid data; this can cause \fBdelv\fP to time out. When it
|
|
|
|
is necessary to examine invalid data to debug a DNSSEC problem, use
|
2022-04-25 18:12:17 +02:00
|
|
|
\fI\%dig +cd\fP\&.)
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-m
|
2020-07-02 10:53:16 +02:00
|
|
|
This option enables memory usage debugging.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-p port#
|
2020-07-02 10:53:16 +02:00
|
|
|
This option specifies a destination port to use for queries, instead of the
|
|
|
|
standard DNS port number 53. This option is used with a name
|
2019-03-31 12:49:47 +02:00
|
|
|
server that has been configured to listen for queries on a
|
|
|
|
non\-standard port number.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-q name
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the query name to \fBname\fP\&. While the query name can be
|
2022-03-02 16:54:31 +01:00
|
|
|
specified without using the \fI\%\-q\fP option, it is sometimes necessary to
|
2019-03-31 12:49:47 +02:00
|
|
|
disambiguate names from types or classes (for example, when looking
|
|
|
|
up the name "ns", which could be misinterpreted as the type NS, or
|
|
|
|
"ch", which could be misinterpreted as class CH).
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-t type
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the query type to \fBtype\fP, which can be any valid query type
|
2019-03-31 12:49:47 +02:00
|
|
|
supported in BIND 9 except for zone transfer types AXFR and IXFR. As
|
2022-03-02 16:54:31 +01:00
|
|
|
with \fI\%\-q\fP, this is useful to distinguish query\-name types or classes
|
2020-07-02 10:53:16 +02:00
|
|
|
when they are ambiguous. It is sometimes necessary to disambiguate
|
2019-03-31 12:49:47 +02:00
|
|
|
names from types.
|
|
|
|
.sp
|
2022-03-02 16:54:31 +01:00
|
|
|
The default query type is "A", unless the \fI\%\-x\fP option is supplied
|
2019-03-31 12:49:47 +02:00
|
|
|
to indicate a reverse lookup, in which case it is "PTR".
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-v
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints the \fBdelv\fP version and exits.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-x addr
|
2020-07-02 10:53:16 +02:00
|
|
|
This option performs a reverse lookup, mapping an address to a name. \fBaddr\fP
|
2019-03-31 12:49:47 +02:00
|
|
|
is an IPv4 address in dotted\-decimal notation, or a colon\-delimited
|
2022-03-02 16:54:31 +01:00
|
|
|
IPv6 address. When \fI\%\-x\fP is used, there is no need to provide the
|
2020-07-02 10:53:16 +02:00
|
|
|
\fBname\fP or \fBtype\fP arguments; \fBdelv\fP automatically performs a
|
2019-03-31 12:49:47 +02:00
|
|
|
lookup for a name like \fB11.12.13.10.in\-addr.arpa\fP and sets the
|
|
|
|
query type to PTR. IPv6 addresses are looked up using nibble format
|
|
|
|
under the IP6.ARPA domain.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-4
|
2020-07-02 10:53:16 +02:00
|
|
|
This option forces \fBdelv\fP to only use IPv4.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-6
|
2020-07-02 10:53:16 +02:00
|
|
|
This option forces \fBdelv\fP to only use IPv6.
|
2019-03-31 12:49:47 +02:00
|
|
|
.UNINDENT
|
|
|
|
.SH QUERY OPTIONS
|
|
|
|
.sp
|
|
|
|
\fBdelv\fP provides a number of query options which affect the way results
|
|
|
|
are displayed, and in some cases the way lookups are performed.
|
|
|
|
.sp
|
|
|
|
Each query option is identified by a keyword preceded by a plus sign
|
|
|
|
(\fB+\fP). Some keywords set or reset an option. These may be preceded by
|
|
|
|
the string \fBno\fP to negate the meaning of that keyword. Other keywords
|
|
|
|
assign values to options like the timeout interval. They have the form
|
|
|
|
\fB+keyword=value\fP\&. The query options are:
|
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +cdflag, +nocdflag
|
2020-07-02 10:53:16 +02:00
|
|
|
This option controls whether to set the CD (checking disabled) bit in queries
|
2019-03-31 12:49:47 +02:00
|
|
|
sent by \fBdelv\fP\&. This may be useful when troubleshooting DNSSEC
|
|
|
|
problems from behind a validating resolver. A validating resolver
|
2020-07-02 10:53:16 +02:00
|
|
|
blocks invalid responses, making it difficult to retrieve them
|
|
|
|
for analysis. Setting the CD flag on queries causes the resolver
|
2019-03-31 12:49:47 +02:00
|
|
|
to return invalid responses, which \fBdelv\fP can then validate
|
|
|
|
internally and report the errors in detail.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +class, +noclass
|
2020-07-02 10:53:16 +02:00
|
|
|
This option controls whether to display the CLASS when printing a record. The
|
2019-03-31 12:49:47 +02:00
|
|
|
default is to display the CLASS.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +ttl, +nottl
|
2020-07-02 10:53:16 +02:00
|
|
|
This option controls whether to display the TTL when printing a record. The
|
2019-03-31 12:49:47 +02:00
|
|
|
default is to display the TTL.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +rtrace, +nortrace
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles resolver fetch logging. This reports the name and type of each
|
2019-03-31 12:49:47 +02:00
|
|
|
query sent by \fBdelv\fP in the process of carrying out the resolution
|
2020-07-02 10:53:16 +02:00
|
|
|
and validation process, including the original query
|
2019-03-31 12:49:47 +02:00
|
|
|
and all subsequent queries to follow CNAMEs and to establish a chain
|
|
|
|
of trust for DNSSEC validation.
|
|
|
|
.sp
|
|
|
|
This is equivalent to setting the debug level to 1 in the "resolver"
|
|
|
|
logging category. Setting the systemwide debug level to 1 using the
|
2022-03-02 16:54:31 +01:00
|
|
|
\fI\%\-d\fP option produces the same output, but affects other
|
2020-07-02 10:53:16 +02:00
|
|
|
logging categories as well.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +mtrace, +nomtrace
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles message logging. This produces a detailed dump of the
|
2019-03-31 12:49:47 +02:00
|
|
|
responses received by \fBdelv\fP in the process of carrying out the
|
|
|
|
resolution and validation process.
|
|
|
|
.sp
|
|
|
|
This is equivalent to setting the debug level to 10 for the "packets"
|
|
|
|
module of the "resolver" logging category. Setting the systemwide
|
2022-03-02 16:54:31 +01:00
|
|
|
debug level to 10 using the \fI\%\-d\fP option produces the same
|
2020-07-02 10:53:16 +02:00
|
|
|
output, but affects other logging categories as well.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +vtrace, +novtrace
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles validation logging. This shows the internal process of the
|
2019-03-31 12:49:47 +02:00
|
|
|
validator as it determines whether an answer is validly signed,
|
|
|
|
unsigned, or invalid.
|
|
|
|
.sp
|
|
|
|
This is equivalent to setting the debug level to 3 for the
|
|
|
|
"validator" module of the "dnssec" logging category. Setting the
|
2022-03-02 16:54:31 +01:00
|
|
|
systemwide debug level to 3 using the \fI\%\-d\fP option produces the
|
2020-07-02 10:53:16 +02:00
|
|
|
same output, but affects other logging categories as well.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +short, +noshort
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles between verbose and terse answers. The default is to print the answer in a
|
2019-03-31 12:49:47 +02:00
|
|
|
verbose form.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +comments, +nocomments
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles the display of comment lines in the output. The default is to
|
2019-03-31 12:49:47 +02:00
|
|
|
print comments.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +rrcomments, +norrcomments
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles the display of per\-record comments in the output (for example,
|
2019-03-31 12:49:47 +02:00
|
|
|
human\-readable key information about DNSKEY records). The default is
|
|
|
|
to print per\-record comments.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +crypto, +nocrypto
|
2020-07-02 10:53:16 +02:00
|
|
|
This option toggles the display of cryptographic fields in DNSSEC records. The
|
|
|
|
contents of these fields are unnecessary to debug most DNSSEC
|
2019-03-31 12:49:47 +02:00
|
|
|
validation failures and removing them makes it easier to see the
|
2020-07-02 10:53:16 +02:00
|
|
|
common failures. The default is to display the fields. When omitted,
|
|
|
|
they are replaced by the string \fB[omitted]\fP or, in the DNSKEY case, the
|
|
|
|
key ID is displayed as the replacement, e.g. \fB[ key id = value ]\fP\&.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +trust, +notrust
|
2020-07-02 10:53:16 +02:00
|
|
|
This option controls whether to display the trust level when printing a record.
|
2019-03-31 12:49:47 +02:00
|
|
|
The default is to display the trust level.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +split[=W], +nosplit
|
2020-07-02 10:53:16 +02:00
|
|
|
This option splits long hex\- or base64\-formatted fields in resource records into
|
2019-03-31 12:49:47 +02:00
|
|
|
chunks of \fBW\fP characters (where \fBW\fP is rounded up to the nearest
|
|
|
|
multiple of 4). \fB+nosplit\fP or \fB+split=0\fP causes fields not to be
|
|
|
|
split at all. The default is 56 characters, or 44 characters when
|
|
|
|
multiline mode is active.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +all, +noall
|
2022-04-25 18:12:17 +02:00
|
|
|
This option sets or clears the display options \fI\%+comments\fP,
|
|
|
|
\fI\%+rrcomments\fP, and \fI\%+trust\fP as a group.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +multiline, +nomultiline
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints long records (such as RRSIG, DNSKEY, and SOA records) in a
|
2019-03-31 12:49:47 +02:00
|
|
|
verbose multi\-line format with human\-readable comments. The default
|
|
|
|
is to print each record on a single line, to facilitate machine
|
|
|
|
parsing of the \fBdelv\fP output.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +dnssec, +nodnssec
|
2020-07-02 10:53:16 +02:00
|
|
|
This option indicates whether to display RRSIG records in the \fBdelv\fP output.
|
2022-04-22 13:05:10 +02:00
|
|
|
The default is to do so. Note that (unlike in \fI\%dig\fP) this does
|
2020-07-02 10:53:16 +02:00
|
|
|
\fInot\fP control whether to request DNSSEC records or to
|
2019-03-31 12:49:47 +02:00
|
|
|
validate them. DNSSEC records are always requested, and validation
|
2022-03-02 16:54:31 +01:00
|
|
|
always occurs unless suppressed by the use of \fI\%\-i\fP or
|
2022-04-25 18:12:17 +02:00
|
|
|
\fI\%+noroot\fP\&.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +root[=ROOT], +noroot
|
2020-07-02 10:53:16 +02:00
|
|
|
This option indicates whether to perform conventional DNSSEC validation, and if so,
|
2019-03-31 12:49:47 +02:00
|
|
|
specifies the name of a trust anchor. The default is to validate using a
|
|
|
|
trust anchor of "." (the root zone), for which there is a built\-in key. If
|
2022-03-02 16:54:31 +01:00
|
|
|
specifying a different trust anchor, then \fI\%\-a\fP must be used to specify a
|
2019-03-31 12:49:47 +02:00
|
|
|
file containing the key.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +tcp, +notcp
|
2020-07-02 10:53:16 +02:00
|
|
|
This option controls whether to use TCP when sending queries. The default is to
|
2019-03-31 12:49:47 +02:00
|
|
|
use UDP unless a truncated response has been received.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +unknownformat, +nounknownformat
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints all RDATA in unknown RR\-type presentation format (\fI\%RFC 3597\fP).
|
2019-03-31 12:49:47 +02:00
|
|
|
The default is to print RDATA for known types in the type\(aqs
|
|
|
|
presentation format.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-04-25 16:28:02 +02:00
|
|
|
.B +yaml, +noyaml
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints response data in YAML format.
|
2019-03-31 12:49:47 +02:00
|
|
|
.UNINDENT
|
|
|
|
.SH FILES
|
|
|
|
.sp
|
2022-01-24 12:13:24 +01:00
|
|
|
\fB@sysconfdir@/bind.keys\fP
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
|
|
|
\fB/etc/resolv.conf\fP
|
|
|
|
.SH SEE ALSO
|
|
|
|
.sp
|
2022-04-22 13:05:10 +02:00
|
|
|
\fI\%dig(1)\fP, \fI\%named(8)\fP, \fI\%RFC 4034\fP, \fI\%RFC 4035\fP, \fI\%RFC 4431\fP, \fI\%RFC 5074\fP, \fI\%RFC 5155\fP\&.
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH AUTHOR
|
|
|
|
Internet Systems Consortium
|
|
|
|
.SH COPYRIGHT
|
2022-01-03 10:29:49 +01:00
|
|
|
2022, Internet Systems Consortium
|
2019-03-31 12:49:47 +02:00
|
|
|
.\" Generated by docutils manpage writer.
|
|
|
|
.
|