+bufsize=B
Set the UDP message buffer size advertised using EDNS0 to
- B bytes. The maximum and
- minimum sizes of this
- buffer are 65535 and 0 respectively. Values outside this range
- are
- rounded up or down appropriately.
+ B bytes. The maximum and minimum sizes
+ of this buffer are 65535 and 0 respectively. Values outside
+ this range are rounded up or down appropriately.
+ Values other than zero will cause a EDNS query to be sent.
+edns=#
+ Specify the EDNS version to query with. Valid values
+ are 0 to 255. Setting the EDNS version will cause a
+ EDNS query to be sent. +noedns clears the
+ remembered EDNS version.
+
+[no]multilinePrint records like the SOA records in a verbose multi-line @@ -511,7 +517,7 @@
The BIND 9 implementation of dig supports @@ -557,14 +563,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
host(1), named(8), dnssec-keygen(8), @@ -572,7 +578,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
There are probably too many query options.
diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5 index d09f028ca7..63b21d862d 100644 --- a/bin/named/named.conf.5 +++ b/bin/named/named.conf.5 @@ -12,7 +12,7 @@ .\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR .\" PERFORMANCE OF THIS SOFTWARE. .\" -.\" $Id: named.conf.5,v 1.11 2005/05/19 12:34:33 marka Exp $ +.\" $Id: named.conf.5,v 1.12 2005/06/07 03:06:49 marka Exp $ .\" .hy 0 .ad l @@ -73,6 +73,7 @@ masters \fIstring\fR [ port \fIinteger\fR ] { server ( \fIipv4_address[/prefixlen]\fR | \fIipv6_address[/prefixlen]\fR ) { bogus \fIboolean\fR; edns \fIboolean\fR; + edns\-udp\-size \fIinteger\fR; provide\-ixfr \fIboolean\fR; request\-ixfr \fIboolean\fR; keys \fIserver_key\fR; diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html index cf0851ecdd..5203b11441 100644 --- a/bin/named/named.conf.html +++ b/bin/named/named.conf.html @@ -13,7 +13,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -80,6 +80,7 @@ masters server (ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {boolean;boolean;integer;boolean;boolean;server_key;
trusted-keys {
domain_name flags protocol algorithm key; ...
@@ -103,7 +104,7 @@ trusted-keys
controls {
inet ( ipv4_address | ipv6_address | * )
@@ -115,7 +116,7 @@ controls
view string optional_class {
match-clients { address_match_element; ... };
@@ -417,7 +418,7 @@ view
zone string optional_class {
type ( master | slave | stub | hint |
@@ -497,12 +498,12 @@ zone
named(8), rndc(8), BIND 9 Administrator Reference Manual. diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 0ef364eeac..60123ed303 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - +
@@ -77,23 +77,23 @@+
An alternate transfer source if the one listed in transfer-source fails and use-alt-transfer-source is set. -
An alternate transfer source if the one listed in @@ -3226,7 +3237,7 @@ query-source-v6 address * port *;
avoid-v4-udp-ports and avoid-v6-udp-ports specify a list of IPv4 and IPv6 UDP ports that will not be used as system @@ -3240,7 +3251,7 @@ query-source-v6 address * port *;
The server's usage of many system resources can be limited. Scaled values are allowed when specifying resource limits. For @@ -3300,7 +3311,7 @@ query-source-v6 address * port *;
The following options set limits on the server's resource consumption that are enforced internally by the @@ -3379,7 +3390,7 @@ query-source-v6 address * port *;
@@ -4057,6 +4068,7 @@ query-source-v6 address * port *;
[ provide-ixfr yes_or_no ; ]
[ request-ixfr yes_or_no ; ]
[ edns yes_or_no ; ]
+ [ edns-udp-size number ; ]
[ transfers number ; ]
[ transfer-format ( one-answer | many-answers ) ; ]]
[ keys { string ; [ string ; [...]] } ; ]
@@ -4140,10 +4152,17 @@ query-source-v6 address * port *;
The edns clause determines whether - the local server - will attempt to use EDNS when communicating with the remote - server. The - default is yes. + the local server will attempt to use EDNS when communicating + with the remote server. The default is yes. +
++ The edns-udp-size option sets the EDNS UDP size + that is advertised by named when querying the remote server. + Valid values are 512 to 4096 (values outside this range will be + silently adjusted). This option is useful when you wish to + advertises a different value to this server than the value you + advertise globally, for example, when there is a firewall at the + remote site that is blocking large replies.
The server supports two zone transfer methods. The first, one-answer, @@ -4203,7 +4222,7 @@ query-source-v6 address * port *;
trusted-keys {
string number number number string ;
[ string number number number string ; [...]]
@@ -4212,7 +4231,7 @@ query-source-v6 address * port *;
The trusted-keys statement defines
@@ -4251,7 +4270,7 @@ query-source-v6 address * port *;
The view statement is a powerful
new feature
@@ -4423,10 +4442,10 @@ view "external" {
The zone's name may optionally be followed by a class. If
a class is not specified, class IN (for Internet),
@@ -4657,7 +4676,7 @@ view "external" {
- journal
@@ -5091,7 +5110,7 @@ view "external" {
@@ -5104,7 +5123,7 @@ view "external" {
A domain name identifies a node. Each node has a set of
resource information, which may be empty. The set of resource
@@ -5693,7 +5712,7 @@ view "external" {
RRs are represented in binary form in the packets of the DNS
protocol, and are usually represented in highly encoded form
@@ -5900,7 +5919,7 @@ view "external" {
As described above, domain servers store information as a
series of resource records, each of which contains a particular
@@ -6157,7 +6176,7 @@ view "external" {
Reverse name resolution (that is, translation from IP address
to name) is achieved by means of the in-addr.arpa domain
@@ -6218,7 +6237,7 @@ view "external" {
The Master File Format was initially defined in RFC 1035 and
has subsequently been extended. While the Master File Format
@@ -6233,7 +6252,7 @@ view "external" {
Syntax: $ORIGIN
domain-name
@@ -6261,7 +6280,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
Syntax: $INCLUDE
filename
@@ -6297,7 +6316,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
Syntax: $TTL
default-ttl
@@ -6316,7 +6335,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
Syntax: $GENERATE
range
diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index 852a6b9c05..a2a01841b3 100644
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -46,11 +46,11 @@
Table of Contents
- Access Control Lists
-- chroot and setuid (for
+
- chroot and setuid (for
UNIX servers)
- Dynamic Update Security
@@ -114,7 +114,7 @@ zone "example.com" {
On UNIX servers, it is possible to run BIND in a chrooted environment
@@ -138,7 +138,7 @@ zone "example.com" {
In order for a chroot() environment
to
@@ -166,7 +166,7 @@ zone "example.com" {
Prior to running the named daemon,
use
diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index 4a18eb8b3e..0d96001dc9 100644
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -45,18 +45,18 @@
Table of Contents
The best solution to solving installation and
configuration issues is to take preventative measures by setting
@@ -68,7 +68,7 @@
Zone serial numbers are just numbers-they aren't date
related. A lot of people set them to a number that represents a
@@ -95,7 +95,7 @@
The Internet Software Consortium
(ISC) offers a wide range
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index d9ac4ff086..21dc158674 100644
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -43,24 +43,24 @@
Table of Contents
Although the "official" beginning of the Domain Name
System occurred in 1984 with the publication of RFC 920, the
@@ -469,7 +469,7 @@
Standards
[RFC974] Mail Routing and the Domain System. January 1986.
@@ -592,11 +592,11 @@
DNS and BIND. Copyright © 1998 Sebastopol, CA: O'Reilly and Associates.
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index f1b167fc49..83b0df2567 100644
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -155,54 +155,54 @@
server Statement Grammar
server Statement Definition and
Usage
-trusted-keys Statement Grammar
-trusted-keys Statement Definition
+trusted-keys Statement Grammar
+trusted-keys Statement Definition
and Usage
view Statement Grammar
-view Statement Definition and Usage
+view Statement Definition and Usage
zone
Statement Grammar
-zone Statement Definition and Usage
+zone Statement Definition and Usage
-Zone File
+Zone File
- Types of Resource Records and When to Use Them
-- Discussion of MX Records
+- Discussion of MX Records
- Setting TTLs
-- Inverse Mapping in IPv4
-- Other Zone File Directives
-- BIND Master File Extension: the $GENERATE Directive
+- Inverse Mapping in IPv4
+- Other Zone File Directives
+- BIND Master File Extension: the $GENERATE Directive
7. BIND 9 Security Considerations
8. Troubleshooting
A. Appendices