From 00124ad0406365d39f4b2d1011ef6a76706e9df0 Mon Sep 17 00:00:00 2001
From: Mark Andrews
Set the UDP message buffer size advertised using EDNS0 to
-
+ Specify the EDNS version to query with. Valid values
+ are 0 to 255. Setting the EDNS version will cause a
+ EDNS query to be sent.
Print records like the SOA records in a verbose multi-line
@@ -511,7 +517,7 @@
The BIND 9 implementation of dig
supports
@@ -557,14 +563,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
host(1),
named(8),
dnssec-keygen(8),
@@ -572,7 +578,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
There are probably too many query options.
named(8),
rndc(8),
BIND 9 Administrator Reference Manual.
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index 0ef364eeac..60123ed303 100644
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
+bufsize=B
B
bytes. The maximum and
- minimum sizes of this
- buffer are 65535 and 0 respectively. Values outside this range
- are
- rounded up or down appropriately.
+ B
bytes. The maximum and minimum sizes
+ of this buffer are 65535 and 0 respectively. Values outside
+ this range are rounded up or down appropriately.
+ Values other than zero will cause a EDNS query to be sent.
+edns=#
+noedns
clears the
+ remembered EDNS version.
+ +[no]multiline
MULTIPLE QUERIES
+MULTIPLE QUERIES
SEE ALSO
+SEE ALSO
BUGS
+BUGS
ipv4_address[/prefixlen]
| ipv6_address[/prefixlen]
) {
bogus boolean
;
edns boolean
;
+ edns-udp-size integer
;
provide-ixfr boolean
;
request-ixfr boolean
;
keys server_key
;
@@ -95,7 +96,7 @@ server
TRUSTED-KEYS
+TRUSTED-KEYS
trusted-keys {
domain_name
flags
protocol
algorithm
key
; ...
@@ -103,7 +104,7 @@ trusted-keys
CONTROLS
+CONTROLS
controls {
inet ( ipv4_address
| ipv6_address
| * )
@@ -115,7 +116,7 @@ controls
VIEW
+VIEW
view string
optional_class
{
match-clients { address_match_element
; ... };
@@ -417,7 +418,7 @@ view
ZONE
+ZONE
zone string
optional_class
{
type ( master | slave | stub | hint |
@@ -497,12 +498,12 @@ zone
SEE ALSO
+SEE ALSO
+
An alternate transfer source if the one listed in transfer-source fails and use-alt-transfer-source is set. -
An alternate transfer source if the one listed in @@ -3226,7 +3237,7 @@ query-source-v6 address * port *;
avoid-v4-udp-ports and avoid-v6-udp-ports specify a list of IPv4 and IPv6 UDP ports that will not be used as system @@ -3240,7 +3251,7 @@ query-source-v6 address * port *;
The server's usage of many system resources can be limited. Scaled values are allowed when specifying resource limits. For @@ -3300,7 +3311,7 @@ query-source-v6 address * port *;
The following options set limits on the server's resource consumption that are enforced internally by the @@ -3379,7 +3390,7 @@ query-source-v6 address * port *;
@@ -4057,6 +4068,7 @@ query-source-v6 address * port *;
[ provide-ixfr yes_or_no
; ]
[ request-ixfr yes_or_no
; ]
[ edns yes_or_no
; ]
+ [ edns-udp-size number
; ]
[ transfers number
; ]
[ transfer-format ( one-answer | many-answers )
; ]]
[ keys { string ; [ string ; [...]] }
; ]
@@ -4140,10 +4152,17 @@ query-source-v6 address * port *;
The edns clause determines whether - the local server - will attempt to use EDNS when communicating with the remote - server. The - default is yes. + the local server will attempt to use EDNS when communicating + with the remote server. The default is yes. +
++ The edns-udp-size option sets the EDNS UDP size + that is advertised by named when querying the remote server. + Valid values are 512 to 4096 (values outside this range will be + silently adjusted). This option is useful when you wish to + advertises a different value to this server than the value you + advertise globally, for example, when there is a firewall at the + remote site that is blocking large replies.
The server supports two zone transfer methods. The first, one-answer, @@ -4203,7 +4222,7 @@ query-source-v6 address * port *;
trusted-keys {string
number
number
number
string
; [string
number
number
number
string
; [...]] @@ -4212,7 +4231,7 @@ query-source-v6 address * port *;The trusted-keys statement defines @@ -4251,7 +4270,7 @@ query-source-v6 address * port *;
The view statement is a powerful new feature @@ -4423,10 +4442,10 @@ view "external" {
@@ -4635,7 +4654,7 @@ view "external" { The zone's name may optionally be followed by a class. If a class is not specified, class
IN
(forInternet
), @@ -4657,7 +4676,7 @@ view "external" {
- journal
@@ -5091,7 +5110,7 @@ view "external" {
@@ -5104,7 +5123,7 @@ view "external" {A domain name identifies a node. Each node has a set of resource information, which may be empty. The set of resource @@ -5693,7 +5712,7 @@ view "external" {
RRs are represented in binary form in the packets of the DNS protocol, and are usually represented in highly encoded form @@ -5900,7 +5919,7 @@ view "external" {
As described above, domain servers store information as a series of resource records, each of which contains a particular @@ -6157,7 +6176,7 @@ view "external" {
Reverse name resolution (that is, translation from IP address to name) is achieved by means of the in-addr.arpa domain @@ -6218,7 +6237,7 @@ view "external" {
The Master File Format was initially defined in RFC 1035 and has subsequently been extended. While the Master File Format @@ -6233,7 +6252,7 @@ view "external" {
Syntax: $ORIGIN
domain-name
@@ -6261,7 +6280,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.Syntax: $INCLUDE
filename
@@ -6297,7 +6316,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.Syntax: $TTL
default-ttl
@@ -6316,7 +6335,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.Syntax: $GENERATE
@@ -46,11 +46,11 @@range
diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 852a6b9c05..a2a01841b3 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - +Table of Contents
@@ -114,7 +114,7 @@ zone "example.com" {
- Access Control Lists
-- chroot and setuid (for +
- chroot and setuid (for UNIX servers)
- Dynamic Update Security
On UNIX servers, it is possible to run BIND in a chrooted environment @@ -138,7 +138,7 @@ zone "example.com" {
In order for a chroot() environment to @@ -166,7 +166,7 @@ zone "example.com" {
Prior to running the named daemon, use diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 4a18eb8b3e..0d96001dc9 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - +
@@ -45,18 +45,18 @@Table of Contents
The best solution to solving installation and configuration issues is to take preventative measures by setting @@ -68,7 +68,7 @@
Zone serial numbers are just numbers-they aren't date related. A lot of people set them to a number that represents a @@ -95,7 +95,7 @@
The Internet Software Consortium (ISC) offers a wide range diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index d9ac4ff086..21dc158674 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - +
@@ -43,24 +43,24 @@Table of Contents
Although the "official" beginning of the Domain Name System occurred in 1984 with the publication of RFC 920, the @@ -469,7 +469,7 @@
Standards
@@ -592,11 +592,11 @@[RFC974] Mail Routing and the Domain System. January 1986.
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index f1b167fc49..83b0df2567 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -155,54 +155,54 @@DNS and BIND. Copyright © 1998 Sebastopol, CA: O'Reilly and Associates.
server Statement Grammar server Statement Definition and Usage -trusted-keys Statement Grammar -trusted-keys Statement Definition + trusted-keys Statement Grammar +trusted-keys Statement Definition and Usage view Statement Grammar -view Statement Definition and Usage +view Statement Definition and Usage zone Statement Grammar -zone Statement Definition and Usage +zone Statement Definition and Usage -Zone File +Zone File
- Types of Resource Records and When to Use Them
-- Discussion of MX Records
+- Discussion of MX Records
- Setting TTLs
-- Inverse Mapping in IPv4
-- Other Zone File Directives
-- BIND Master File Extension: the $GENERATE Directive
+- Inverse Mapping in IPv4
+- Other Zone File Directives
+- BIND Master File Extension: the $GENERATE Directive
7. BIND 9 Security Considerations 8. Troubleshooting A. Appendices