From b05bdb520d83f7ecaad708fe305268c3420be01d Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 8 Jun 2006 02:44:05 +0000 Subject: [PATCH] regen --- doc/arm/Bv9ARM.ch01.html | 4 +- doc/arm/Bv9ARM.ch03.html | 16 +- doc/arm/Bv9ARM.ch04.html | 20 +-- doc/arm/Bv9ARM.ch06.html | 256 +++++++++++++++---------------- doc/arm/Bv9ARM.ch07.html | 24 +-- doc/arm/Bv9ARM.ch08.html | 18 +-- doc/arm/Bv9ARM.ch09.html | 26 ++-- doc/arm/Bv9ARM.html | 42 ++--- doc/arm/man.dig.html | 20 +-- doc/arm/man.dnssec-keygen.html | 14 +- doc/arm/man.dnssec-signzone.html | 12 +- doc/arm/man.host.html | 10 +- doc/arm/man.named-checkconf.html | 12 +- doc/arm/man.named-checkzone.html | 12 +- doc/arm/man.named.html | 16 +- doc/arm/man.rndc-confgen.html | 12 +- doc/arm/man.rndc.conf.html | 12 +- doc/arm/man.rndc.html | 12 +- 18 files changed, 269 insertions(+), 269 deletions(-) diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index e0ef79e32a..0519dd40d6 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -482,7 +482,7 @@

The length of time for which a record may be retained in - in the cache of a caching name server is controlled by the + the cache of a caching name server is controlled by the Time To Live (TTL) field associated with each resource record.

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index edd9b03c0c..55ad53e466 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -463,7 +463,7 @@ zone "eng.example.com" { [view]]]

Suspend updates to a dynamic zone. If no zone is - specified + specified, then all zones are suspended. This allows manual edits to be made to a zone normally updated by dynamic update. It @@ -480,7 +480,7 @@ zone "eng.example.com" {

Enable updates to a frozen dynamic zone. If no zone is - specified then all frozen zones are enabled. This + specified, then all frozen zones are enabled. This causes the server to reload the zone from disk, and re-enables dynamic updates @@ -524,10 +524,10 @@ zone "eng.example.com" { [-all|-cache|-zone] [view ...]

- Dump the server's caches (default) and / or zones to + Dump the server's caches (default) and/or zones to the dump file for the specified views. If no view is - specified all + specified, all views are dumped.

stop [-p]
@@ -573,9 +573,9 @@ zone "eng.example.com" {
status

Display status of the server. - Note the number of zones includes the internal bind/CH zone + Note that the number of zones includes the internal bind/CH zone and the default ./IN - hint zone if there is not a + hint zone if there is not an explicit root zone configured.

recursing
@@ -647,7 +647,7 @@ zone "eng.example.com" { server statement.

- The key statement defines an + The key statement defines a key to be used by rndc when authenticating with diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 9fd2c47684..a26dc2dc37 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -158,7 +158,7 @@

The zone files of dynamic zones cannot normally be edited by hand because they are not guaranteed to contain the most recent - dynamic changes - those are only in the journal file. + dynamic changes — those are only in the journal file. The only way to ensure that the zone file of a dynamic zone is up to date is to run rndc stop.

@@ -328,7 +328,7 @@ site2.internal domains.
  • Look up any hostnames on the Internet.
  • -
  • Exchange mail with internal AND external people.
  • +
  • Exchange mail with both internal and external people.
  • Hosts on the Internet will be able to: @@ -489,11 +489,11 @@ nameserver 172.16.72.4

    Automatic Generation

    - The following command will generate a 128 bit (16 byte) HMAC-MD5 + The following command will generate a 128-bit (16 byte) HMAC-MD5 key as described above. Longer keys are better, but shorter keys are easier to read. Note that the maximum key length is 512 bits; - keys longer than that will be digested with MD5 to produce a 128 - bit key. + keys longer than that will be digested with MD5 to produce a + 128-bit key.

    dnssec-keygen -a hmac-md5 -b 128 -n HOST host1-host2. @@ -764,7 +764,7 @@ allow-update { key host1-host2. ;}; the only one is RSASHA1.

    - The following command will generate a 768 bit RSASHA1 key for + The following command will generate a 768-bit RSASHA1 key for the child.example zone:

    @@ -811,7 +811,7 @@ allow-update { key host1-host2. ;}; records for the zone, as well as DS for the child zones if '-d' is specified. - If '-d' is not specified then + If '-d' is not specified, then DS RRsets for the secure child zones need to be added manually.

    @@ -845,7 +845,7 @@ allow-update { key host1-host2. ;}; Configuring Servers

    To enable named to respond appropriately - to DNS requests from DNSSEC aware clients + to DNS requests from DNSSEC aware clients, dnssec-enable must be set to yes.

    @@ -895,7 +895,7 @@ trusted-keys { iA21AfUVe7u99WzTLzY3qlxDhxYQQ20FQ97S+LKUTpQcq27R7AT3/V5hRQxScI Nqwcz4jYqZD2fQdgxbcDTClU0CRBdiieyLMNzXG3"; -/* Key for out organizations forward zone */ +/* Key for our organization's forward zone */ example.com. 257 3 5 "AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM65KbhTjrW1ZaARmPhEZZe 3Y9ifgEuq7vZ/zGZUdEGNWy+JZzus0lUptwgjGwhUS1558Hb4JKUbb OTcM8pwXlj0EiX3oDFVmjHO444gLkBO UKUf/mC7HvfwYH/Be22GnC diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 7c7b39e8ae..97330a497e 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -55,7 +55,7 @@

    acl Statement Grammar
    acl Statement Definition and Usage
    -
    controls Statement Grammar
    +
    controls Statement Grammar
    controls Statement Definition and Usage
    include Statement Grammar
    @@ -77,23 +77,23 @@
    server Statement Grammar
    server Statement Definition and Usage
    -
    trusted-keys Statement Grammar
    -
    trusted-keys Statement Definition +
    trusted-keys Statement Grammar
    +
    trusted-keys Statement Definition and Usage
    view Statement Grammar
    -
    view Statement Definition and Usage
    +
    view Statement Definition and Usage
    zone Statement Grammar
    -
    zone Statement Definition and Usage
    +
    zone Statement Definition and Usage
    -
    Zone File
    +
    Zone File
    Types of Resource Records and When to Use Them
    -
    Discussion of MX Records
    +
    Discussion of MX Records
    Setting TTLs
    -
    Inverse Mapping in IPv4
    -
    Other Zone File Directives
    -
    BIND Master File Extension: the $GENERATE Directive
    +
    Inverse Mapping in IPv4
    +
    Other Zone File Directives
    +
    BIND Master File Extension: the $GENERATE Directive
    Additional File Formats
    @@ -165,7 +165,7 @@

    A named list of one or more ip_addr - with optional key_id and / or + with optional key_id and/or ip_port. A masters_list may include other masters_lists. @@ -270,7 +270,7 @@ through 65535, with values below 1024 typically restricted to use by processes running as root. - In some cases an asterisk (`*') character can be used as a + In some cases, an asterisk (`*') character can be used as a placeholder to select a random high-numbered port.

    @@ -332,7 +332,7 @@

    - A non-negative 32 bit integer + A non-negative 32-bit integer (i.e., a number between 0 and 4294967295, inclusive). Its acceptable value might further be limited by the context in which it is used. @@ -857,7 +857,7 @@

    -controls Statement Grammar

    +controls Statement Grammar
    controls {
        [ inet ( ip_addr | * ) [ port ip_port ] allow {  address_match_list  }
                     keys { key_list }; ]
    @@ -965,9 +965,9 @@
               named is running as) can access it.
               If you
               desire greater flexibility in allowing other users to access
    -          rndc commands then you need to create
    -          an
    -          rndc.conf and make it group
    +          rndc commands, then you need to create
    +          a
    +          rndc.conf file and make it group
               readable by a group
               that contains the users who should have access.
             

    @@ -1147,9 +1147,9 @@ option, then named will retain that many backup versions of the file by - renaming them when opening. For example, if you choose to keep 3 - old versions - of the file lamers.log then just + renaming them when opening. For example, if you choose to keep + three old versions + of the file lamers.log, then just before it is opened lamers.log.1 is renamed to lamers.log.2, lamers.log.0 is renamed @@ -1563,7 +1563,7 @@ category notify { null; };

    The query log entry reports the client's IP address and - port number. The + port number, and the query name, class and type. It also reports whether the Recursion Desired flag was set (+ if set, - if not set), EDNS was in use @@ -2006,7 +2006,7 @@ digits" + "tkey-domain". In most cases,

    preferred-glue

    - If specified the listed type (A or AAAA) will be emitted + If specified, the listed type (A or AAAA) will be emitted before other glue in the additional section of a query response. The default is not to preference any type (NONE). @@ -2019,7 +2019,7 @@ digits" + "tkey-domain". In most cases, exclude list.

    - Note some TLDs are NOT delegation only (e.g. "DE", "LV", "US" + Note some TLDs are not delegation only (e.g. "DE", "LV", "US" and "MUSEUM").

    @@ -2038,7 +2038,7 @@ options {
                   

    dnssec-lookaside

    - When set dnssec-lookaside + When set, dnssec-lookaside provides the validator with an alternate method to validate DNSKEY records at the @@ -2056,12 +2056,12 @@ options {

    dnssec-must-be-secure

    - Specify hierarchies which must / may not be secure (signed and + Specify hierarchies which must be or may not be secure (signed and validated). - If yes then named will only accept + If yes, then named will only accept answers if they are secure. - If no then normal dnssec validation + If no, then normal dnssec validation applies allowing for insecure answers to be accepted. The specified domain must be under a trusted-key or @@ -2097,7 +2097,7 @@ options { If yes, then the server treats all zones as if they are doing zone transfers across - a dial on demand dialup link, which can be brought up by + a dial-on-demand dialup link, which can be brought up by traffic originating from this server. This has different effects according @@ -2116,7 +2116,7 @@ options { option.

    - If the zone is a master zone then the server will send out a + If the zone is a master zone, then the server will send out a NOTIFY request to all the slaves (default). This should trigger the zone serial @@ -2600,7 +2600,7 @@ options {

    ixfr-from-differences

    - When 'yes' and the server loads a new version of a master + When yes and the server loads a new version of a master zone from its zone file or receives a new version of a slave file by a non-incremental zone transfer, it will compare the new version to the previous one and calculate a set @@ -2633,7 +2633,7 @@ options {

    This should be set when you have multiple masters for a zone and the - addresses refer to different machines. If 'yes' named will + addresses refer to different machines. If yes, named will not log when the serial number on the master is less than what named currently @@ -2641,7 +2641,7 @@ options {

    dnssec-enable

    - Enable DNSSEC support in named. Unless set to yes + Enable DNSSEC support in named. Unless set to yes, named behaves as if it does not support DNSSEC. The default is yes.

    @@ -2654,14 +2654,14 @@ options {

    dnssec-accept-expired

    - When verifying DNSSEC signatures accept expired signatures. + Accept expired signatures when verifying DNSSEC signatures. The default is no.

    querylog

    Specify whether query logging should be started when named - start. - If querylog is not specified + starts. + If querylog is not specified, then the query logging is determined by the presence of the logging category queries.

    @@ -2677,11 +2677,11 @@ options { master zones the default is fail. For slave zones the default is warn. - For answer received from the network (response) + For answers received from the network (response) the default is ignore.

    - The rules for legal hostnames or mail domains are derived + The rules for legal hostnames and mail domains are derived from RFC 952 and RFC 821 as modified by RFC 1123.

    check-names @@ -2737,7 +2737,7 @@ options {

    check-sibling

    - When performing integrity checks also check that + When performing integrity checks, also check that sibling glue exists. The default is yes.

    zero-no-soa-ttl
    @@ -2772,7 +2772,7 @@ options {

    -Forwarding

    +Forwarding

    The forwarding facility can be used to create a large site-wide cache on a few servers, reducing traffic over links to external @@ -2789,8 +2789,8 @@ options { This option is only meaningful if the forwarders list is not empty. A value of first, the default, causes the server to query the forwarders - first, and - if that doesn't answer the question the server will then + first — and + if that doesn't answer the question, the server will then look for the answer itself. If only is specified, the @@ -2816,7 +2816,7 @@ options {

    -Dual-stack Servers

    +Dual-stack Servers

    Dual-stack servers are used as servers of last resort to work around @@ -2828,11 +2828,11 @@ options {

    dual-stack-servers

    Specifies host names or addresses of machines with access to - both IPv4 and IPv6 transports. If a hostname is used the + both IPv4 and IPv6 transports. If a hostname is used, the server must be able to resolve the name using only the transport it has. If the machine is dual - stacked then the dual-stack-servers have no effect unless + stacked, then the dual-stack-servers have no effect unless access to a transport has been disabled on the command line (e.g. named -4).

    @@ -2976,7 +2976,7 @@ options {

    -Interfaces

    +Interfaces

    The interfaces and ports that the server will answer queries from may be specified using the listen-on option. listen-on takes @@ -3056,20 +3056,20 @@ listen-on-v6 port 1234 { !2001:db8::/32; any; };

    -Query Address

    +Query Address

    If the server doesn't know the answer to a question, it will query other name servers. query-source specifies the address and port used for such queries. For queries sent over IPv6, there is a separate query-source-v6 option. - If address is * or is omitted, + If address is * (asterisk) or is omitted, a wildcard IP address (INADDR_ANY) will be used. If port is * or is omitted, - a random unprivileged port will be used, avoid-v4-udp-ports - and avoid-v6-udp-ports can be used + a random unprivileged port will be used. The avoid-v4-udp-ports + and avoid-v6-udp-ports options can be used to prevent named - from selecting certain ports. The defaults are + from selecting certain ports. The defaults are:

    query-source address * port *;
     query-source-v6 address * port *;
    @@ -3281,7 +3281,7 @@ query-source-v6 address * port *;
     

    Note

    If you do not wish the alternate transfer source - to be used you should set + to be used, you should set use-alt-transfer-source appropriately and you should not depend upon getting a answer back to the first refresh @@ -3336,7 +3336,7 @@ query-source-v6 address * port *;

    -Bad UDP Port Lists

    +Bad UDP Port Lists

    avoid-v4-udp-ports and avoid-v6-udp-ports specify a list of IPv4 and IPv6 UDP ports that will not be used as system @@ -3350,7 +3350,7 @@ query-source-v6 address * port *;

    -Operating System Resource Limits

    +Operating System Resource Limits

    The server's usage of many system resources can be limited. Scaled values are allowed when specifying resource limits. For @@ -3409,7 +3409,7 @@ query-source-v6 address * port *;

    -Server Resource Limits

    +Server Resource Limits

    The following options set limits on the server's resource consumption that are enforced internally by the @@ -3435,7 +3435,7 @@ query-source-v6 address * port *;

    host-statistics-max

    - In BIND 8, specifies the maximum number of host statistic + In BIND 8, specifies the maximum number of host statistics entries to be kept. Not implemented in BIND 9.

    @@ -3487,7 +3487,7 @@ query-source-v6 address * port *;

    -Periodic Task Intervals

    +Periodic Task Intervals
    cleaning-interval

    @@ -3495,7 +3495,7 @@ query-source-v6 address * port *; from the cache every cleaning-interval minutes. The default is 60 minutes. The maximum value is 28 days (40320 minutes). - If set to 0, no periodic cleaning will occur. + If set to 0, no periodic cleaning will occur.

    heartbeat-interval

    @@ -3600,7 +3600,7 @@ query-source-v6 address * port *; other addresses. However, not all resolvers can do this or are correctly configured. - When a client is using a local server the sorting can be performed + When a client is using a local server, the sorting can be performed in the server, based on the client's address. This only requires configuring the name servers, not all the clients.

    @@ -3714,7 +3714,7 @@ query-source-v6 address * port *;

    If no class is specified, the default is ANY. If no type is specified, the default is ANY. - If no name is specified, the default is "*". + If no name is specified, the default is "*" (asterisk).

    The legal values for ordering are: @@ -3796,13 +3796,13 @@ query-source-v6 address * port *; Sets the number of seconds to cache a lame server indication. 0 disables caching. (This is NOT recommended.) - Default is 600 (10 minutes). - Maximum value is + The default is 600 (10 minutes) and the + maximum value is 1800 (30 minutes).

    max-ncache-ttl

    - To reduce network traffic and increase performance + To reduce network traffic and increase performance, the server stores negative answers. max-ncache-ttl is used to set a maximum retention time for these answers in the server @@ -3823,7 +3823,7 @@ query-source-v6 address * port *;

    The minimum number of root servers that is required for a request for the root servers to be - accepted. Default + accepted. The default is 2.

    @@ -3871,11 +3871,11 @@ query-source-v6 address * port *;
    edns-udp-size

    - Sets the advertised EDNS UDP buffer size. Valid + Sets the advertised EDNS UDP buffer size in bytes. Valid values are 512 to 4096 (values outside this range will be silently adjusted). The default value is 4096. The usual reason for setting edns-udp-size to - a non default value it to get UDP answers to pass + a non-default value it to get UDP answers to pass through broken firewalls that block fragmented packets and/or block UDP packets that are greater than 512 bytes. @@ -3883,10 +3883,10 @@ query-source-v6 address * port *;

    max-udp-size

    Sets the maximum EDNS UDP message size named will - send. Valid values are 512 to 4096 (values outside + send in bytes. Valid values are 512 to 4096 (values outside this range will be silently adjusted). The default value is 4096. The usual reason for setting - max-udp-size to a non default value it to get UDP + max-udp-size to a non-default value is to get UDP answers to pass through broken firewalls that block fragmented packets and/or block UDP packets that are greater than 512 bytes. @@ -3898,7 +3898,7 @@ query-source-v6 address * port *; The default value is text, which is the standard textual representation. Files in other formats than text are typically expected - to be generated by the named-compilezone. + to be generated by the named-compilezone tool. Note that when a zone file in a different format than text is loaded, named may omit some of the checks which would be performed for a @@ -3931,20 +3931,20 @@ query-source-v6 address * port *;

    This value should reflect how many queries come in for a given name in the time it takes to resolve that name. - If the number of queries exceed this value named will + If the number of queries exceed this value, named will assume that it is dealing with a non-responsive zone and will drop additional queries. If it gets a response - after dropping queries it will raise the estimate. The + after dropping queries, it will raise the estimate. The estimate will then be lowered in 20 minutes if it has remained unchanged.

    - If clients-per-query is set to zero + If clients-per-query is set to zero, then there is no limit on the number of clients per query and no queries will be dropped.

    - If max-clients-per-query is set to zero + If max-clients-per-query is set to zero, then there is no upper bound other than imposed by recursive-clients.

    @@ -4071,7 +4071,7 @@ query-source-v6 address * port *; views of class IN. Disabled empty zones are only inherited from options if there are no disabled empty zones specified at the view level. To override the options list of disabled - zones you can disable the root zone at the view level, for example: + zones, you can disable the root zone at the view level, for example:

                 disable-empty-zone ".";
    @@ -4079,7 +4079,7 @@ query-source-v6 address * port *;
     

    - If you are using the address ranges covered here you should + If you are using the address ranges covered here, you should already have reverse zones covering the addresses you use. In practice this appears to not be the case with many queries being made to the infrustructure servers for names in these @@ -4091,30 +4091,30 @@ query-source-v6 address * port *;

    Note

    The real parent servers for these zones should disable all empty zone under the parent zone they serve. For the real - root servers this is all built in empty zones. This will + root servers, this is all built in empty zones. This will enable them to return referrals to deeper in the tree.
    empty-server

    Specify what server name will appear in the returned - SOA record for empty zones. If none is specified then + SOA record for empty zones. If none is specified, then the zone's name will be used.

    empty-contact

    Specify what contact name will appear in the returned - SOA record for empty zones. If none is specified then + SOA record for empty zones. If none is specified, then "." will be used.

    empty-zones-enable

    - Enable / disable all empty zones. By default they + Enable or disable all empty zones. By default they are enabled.

    disable-empty-zone

    - Disable a indiviual empty zones. By default none are + Disable individual empty zones. By default none are disabled. This option can be specified multiple times.

    @@ -4321,15 +4321,14 @@ query-source-v6 address * port *; based algorithm, every acache-cleaning-interval minutes. The default is 60 minutes. - If set to 0, no periodic cleaning will occur. + If set to 0, no periodic cleaning will occur.

    max-acache-size

    - The maximum amount of memory to use for the server's acache, - in bytes. + The maximum amount of memory in bytes to use for the server's acache. When the amount of data in the acache reaches this limit, the server - will clean more aggressivly so that the limit is not + will clean more aggressively so that the limit is not exceeded. In a server with multiple views, the limit applies separately to the @@ -4372,7 +4371,7 @@ query-source-v6 address * port *; The server statement defines characteristics to be associated with a remote name server. If a prefix length is - specified then a range of servers is covered. Only the most + specified, then a range of servers is covered. Only the most specific server clause applies regardless of the order in named.conf. @@ -4445,7 +4444,7 @@ query-source-v6 address * port *;

    The edns-udp-size option sets the EDNS UDP size that is advertised by named when querying the remote server. - Valid values are 512 to 4096 (values outside this range will be + Valid values are 512 to 4096 bytes (values outside this range will be silently adjusted). This option is useful when you wish to advertises a different value to this server than the value you advertise globally, for example, when there is a firewall at the @@ -4454,7 +4453,7 @@ query-source-v6 address * port *;

    The max-udp-size option sets the maximum EDNS UDP message size named will send. Valid - values are 512 to 4096 (values outside this range will + values are 512 to 4096 bytes (values outside this range will be silently adjusted). This option is useful when you know that there is a firewall that is blocking large replies from named. @@ -4509,7 +4508,7 @@ query-source-v6 address * port *; Similarly, for an IPv6 remote server, only transfer-source-v6 can be specified. - Form more details, see the description of + For more details, see the description of transfer-source and transfer-source-v6 in the section called “Zone Transfers”. @@ -4535,7 +4534,7 @@ query-source-v6 address * port *;

    -trusted-keys Statement Grammar

    +trusted-keys Statement Grammar
    trusted-keys {
         string number number number string ;
         [ string number number number string ; [...]]
    @@ -4544,7 +4543,7 @@ query-source-v6 address * port *;
     
     

    -trusted-keys Statement Definition +trusted-keys Statement Definition and Usage

    The trusted-keys statement defines @@ -4562,7 +4561,7 @@ query-source-v6 address * port *; trusted-keys are deemed to exist regardless of what parent zones say. Similarly for all keys listed in trusted-keys only those keys are - used to validate the DNSKEY RRset. The parents DS RRset + used to validate the DNSKEY RRset. The parent's DS RRset will not be used.

    @@ -4587,7 +4586,7 @@ query-source-v6 address * port *;

    -view Statement Definition and Usage

    +view Statement Definition and Usage

    The view statement is a powerful feature @@ -4670,7 +4669,7 @@ query-source-v6 address * port *;

    Here is an example of a typical split DNS setup implemented - using view statements. + using view statements:

    view "internal" {
           // This should match our internal networks.
    @@ -4839,10 +4838,10 @@ zone zone_name [
     

    -zone Statement Definition and Usage

    +zone Statement Definition and Usage

    -Zone Types

    +Zone Types
    @@ -4898,7 +4897,7 @@ zone zone_name [example.com might place the zone contents into a file called @@ -4993,8 +4992,8 @@ zone zone_name [forward option - (that is, "forward first - to", then "forward only", or vice versa, but want to + (that is, "forward first" + to, then "forward only", or vice versa, but want to use the same servers as set globally) you need to re-specify the global forwarders. @@ -5030,14 +5029,14 @@ zone zone_name [ @@ -5561,7 +5560,7 @@ zone zone_name [

    -Zone File

    +Zone File

    Types of Resource Records and When to Use Them

    @@ -5574,7 +5573,7 @@ zone zone_name [

    -Resource Records

    +Resource Records

    A domain name identifies a node. Each node has a set of resource information, which may be empty. The set of resource @@ -5614,7 +5613,7 @@ zone zone_name [

    @@ -5627,8 +5626,8 @@ zone zone_name [ @@ -5898,7 +5897,7 @@ zone zone_name [

    Identifies a mail exchange for the domain with - a 16 bit preference value (lower is better) + a 16-bit preference value (lower is better) followed by the host name of the mail exchange. Described in RFC 974, RFC 1035.

    @@ -6225,7 +6224,7 @@ zone zone_name [

    -Textual expression of RRs

    +Textual expression of RRs

    RRs are represented in binary form in the packets of the DNS protocol, and are usually represented in highly encoded form @@ -6369,13 +6368,13 @@ zone zone_name [

    - This is used to enforce the delegation only + This is used to enforce the delegation-only status of infrastructure zones (e.g. COM, NET, ORG). Any answer that - is received without a explicit or implicit delegation + is received without an explicit or implicit delegation in the authority section will be treated as NXDOMAIN. This does not apply to the zone - apex. This SHOULD NOT be applied to leaf zones. + apex. This should not be applied to leaf zones.

    delegation-only has no @@ -5051,7 +5050,7 @@ zone zone_name [

    -Class

    +Class

    The zone's name may optionally be followed by a class. If a class is not specified, class IN (for Internet), @@ -5073,7 +5072,7 @@ zone zone_name [

    -Zone Options

    +Zone Options
    allow-notify

    @@ -5203,7 +5202,7 @@ zone zone_name [delegation-only

    The flag only applies to hint and stub zones. If set - to yes then the zone will also be + to yes, then the zone will also be treated as if it is also a delegation-only type zone.

    @@ -5219,7 +5218,7 @@ zone zone_name [

    Used to override the list of global forwarders. If it is not specified in a zone of type forward, - no forwarding is done for the zone; the global options are + no forwarding is done for the zone and the global options are not used.

    ixfr-base
    @@ -5506,7 +5505,7 @@ zone zone_name [identity would - be specified as * in + be specified as * (an asterisk) in this case.

    - An encoded 16 bit value that specifies + An encoded 16-bit value that specifies the type of the resource record.

    - The time to live of the RR. This field - is a 32 bit integer in units of seconds, and is + The time-to-live of the RR. This field + is a 32-bit integer in units of seconds, and is primarily used by resolvers when they cache RRs. The TTL describes how long a RR can @@ -5644,7 +5643,7 @@ zone zone_name [

    - An encoded 16 bit value that identifies + An encoded 16-bit value that identifies a protocol family or instance of a protocol.

    - The MX RRs have an RDATA section which consists of a 16 bit + The MX RRs have an RDATA section which consists of a 16-bit number followed by a domain name. The address RRs use a standard - IP address format to contain a 32 bit internet address. + IP address format to contain a 32-bit internet address.

    - This example shows six RRs, with two RRs at each of three + The above example shows six RRs, with two RRs at each of three domain names.

    @@ -6428,7 +6427,7 @@ zone zone_name [

    -Discussion of MX Records

    +Discussion of MX Records

    As described above, domain servers store information as a series of resource records, each of which contains a particular @@ -6615,7 +6614,7 @@ zone zone_name [

    Setting TTLs

    - The time to live of the RR field is a 32 bit integer represented + The time-to-live of the RR field is a 32-bit integer represented in units of seconds, and is primarily used by resolvers when they cache RRs. The TTL describes how long a RR can be cached before it should be discarded. The following three types of TTL are @@ -6686,7 +6685,7 @@ zone zone_name [

    -Inverse Mapping in IPv4

    +Inverse Mapping in IPv4

    Reverse name resolution (that is, translation from IP address to name) is achieved by means of the in-addr.arpa domain @@ -6747,7 +6746,7 @@ zone zone_name [

    -Other Zone File Directives

    +Other Zone File Directives

    The Master File Format was initially defined in RFC 1035 and has subsequently been extended. While the Master File Format @@ -6762,7 +6761,7 @@ zone zone_name [

    -The $ORIGIN Directive

    +The $ORIGIN Directive

    Syntax: $ORIGIN domain-name @@ -6790,7 +6789,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.

    -The $INCLUDE Directive

    +The $INCLUDE Directive

    Syntax: $INCLUDE filename @@ -6826,7 +6825,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.

    -The $TTL Directive

    +The $TTL Directive

    Syntax: $TTL default-ttl @@ -6845,7 +6844,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.

    -BIND Master File Extension: the $GENERATE Directive

    +BIND Master File Extension: the $GENERATE Directive

    Syntax: $GENERATE range @@ -6890,7 +6889,7 @@ $GENERATE 1-127 $ CNAME $.0

    This can be one of two forms: start-stop - or start-stop/step. If the first form is used then step + or start-stop/step. If the first form is used, then step is set to 1. All of start, stop and step must be positive.

    @@ -6904,6 +6903,7 @@ $GENERATE 1-127 $ CNAME $.0

    lhs describes the owner name of the resource records to be created. Any single $ + (dollar sign) symbols within the lhs side are replaced by the iterator value. @@ -6921,7 +6921,7 @@ $GENERATE 1-127 $ CNAME $.0

    ${offset[,width[,base]]}. For example, ${-20,3,d} subtracts 20 from the current value, prints the - result as a decimal in a zero padded field of + result as a decimal in a zero-padded field of width 3. Available output forms are decimal @@ -6935,7 +6935,7 @@ $GENERATE 1-127 $ CNAME $.0
    to the name.

    - For compatibility with earlier versions $$ is still + For compatibility with earlier versions, $$ is still recognized as indicating a literal $ in the output.

    diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 7a9bbc0269..37a423bcdc 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -46,10 +46,10 @@

    Table of Contents

    Access Control Lists
    -
    chroot and setuid
    +
    chroot and setuid
    -
    The chroot Environment
    -
    Using the setuid Function
    +
    The chroot Environment
    +
    Using the setuid Function
    Dynamic Update Security
    @@ -72,7 +72,7 @@

    It is a good idea to use ACLs, and to control access to your server. Limiting access to your server by - outside parties can help prevent spoofing and DoS attacks against + outside parties can help prevent spoofing and denial of service (DoS) attacks against your server.

    @@ -118,10 +118,10 @@ zone "example.com" {

    -chroot and setuid

    +chroot and setuid

    On UNIX servers, it is possible to run BIND in a chrooted environment - (chroot()) by specifying the "-t" + (using the chroot() function) by specifying the "-t" option. This can help improve system security by placing BIND in a "sandbox", which will limit the damage done if a server is compromised. @@ -132,7 +132,7 @@ zone "example.com" { We suggest running as an unprivileged user when using the chroot feature.

    - Here is an example command line to load BIND in a chroot() sandbox, + Here is an example command line to load BIND in a chroot sandbox, /var/named, and to run named setuid to user 202:

    @@ -141,7 +141,7 @@ zone "example.com" {

    -The chroot Environment

    +The chroot Environment

    In order for a chroot environment to @@ -169,7 +169,7 @@ zone "example.com" {

    -Using the setuid Function

    +Using the setuid Function

    Prior to running the named daemon, use @@ -195,7 +195,7 @@ zone "example.com" {

    Access to the dynamic update facility should be strictly limited. In earlier versions of - BIND the only way to do this was + BIND, the only way to do this was based on the IP address of the host requesting the update, by listing an IP address or @@ -222,7 +222,7 @@ zone "example.com" { option can be used.

    - Some sites choose to keep all dynamically updated DNS data + Some sites choose to keep all dynamically-updated DNS data in a subdomain and delegate that subdomain to a separate zone. This way, the top-level zone containing critical data such as the IP addresses diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 65161dc65f..550d3a48a4 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -45,18 +45,18 @@

    Table of Contents

    -
    Common Problems
    -
    It's not working; how can I figure out what's wrong?
    -
    Incrementing and Changing the Serial Number
    -
    Where Can I Get Help?
    +
    Common Problems
    +
    It's not working; how can I figure out what's wrong?
    +
    Incrementing and Changing the Serial Number
    +
    Where Can I Get Help?

    -Common Problems

    +Common Problems

    -It's not working; how can I figure out what's wrong?

    +It's not working; how can I figure out what's wrong?

    The best solution to solving installation and configuration issues is to take preventative measures by setting @@ -68,7 +68,7 @@

    -Incrementing and Changing the Serial Number

    +Incrementing and Changing the Serial Number

    Zone serial numbers are just numbers-they aren't date related. A lot of people set them to a number that represents a @@ -95,7 +95,7 @@

    -Where Can I Get Help?

    +Where Can I Get Help?

    The Internet Systems Consortium (ISC) offers a wide range diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 512d6bcef6..86702fa8c3 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -45,21 +45,21 @@

    Table of Contents

    -
    Acknowledgments
    +
    Acknowledgments
    A Brief History of the DNS and BIND
    -
    General DNS Reference Information
    +
    General DNS Reference Information
    IPv6 addresses (AAAA)
    Bibliography (and Suggested Reading)
    Request for Comments (RFCs)
    Internet Drafts
    -
    Other Documents About BIND
    +
    Other Documents About BIND

    -Acknowledgments

    +Acknowledgments

    A Brief History of the DNS and BIND

    @@ -69,7 +69,7 @@ core of the new system was described in 1983 in RFCs 882 and 883. From 1984 to 1987, the ARPAnet (the precursor to today's Internet) became a testbed of experimentation for developing the - new naming/addressing scheme in an rapidly expanding, + new naming/addressing scheme in a rapidly expanding, operational network environment. New RFCs were written and published in 1987 that modified the original documents to incorporate improvements based on the working model. RFC 1034, @@ -116,7 +116,7 @@ released by Digital Equipment Corporation (now Compaq Computer Corporation). Paul Vixie, then a DEC employee, became BIND's - primary caretaker. Paul was assisted + primary caretaker. He was assisted by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan Beecher, Andrew Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat @@ -124,7 +124,7 @@ Wolfhugel, and others.

    - BIND Version 4.9.2 was sponsored by + BIND version 4.9.2 was sponsored by Vixie Enterprises. Paul Vixie became BIND's principal architect/programmer. @@ -148,7 +148,7 @@

    -General DNS Reference Information

    +General DNS Reference Information

    IPv6 addresses (AAAA)

    @@ -235,7 +235,7 @@

    -Bibliography

    +Bibliography

    Standards

    [RFC974] C. Partridge. Mail Routing and the Domain System. January 1986.

    @@ -380,7 +380,7 @@ and Renumbering. July 2000.

    -

    Obsoleted DNS Security RFC

    +

    Obsoleted DNS Security RFCs

    Note

    @@ -420,11 +420,11 @@

    -Other Documents About BIND

    +Other Documents About BIND

    -Bibliography

    +Bibliography

    Paul Albitz and Cricket Liu. DNS and BIND. Copyright © 1998 Sebastopol, CA: O'Reilly and Associates.

    diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index ba814558c6..d737943534 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -133,7 +133,7 @@
    acl Statement Grammar
    acl Statement Definition and Usage
    -
    controls Statement Grammar
    +
    controls Statement Grammar
    controls Statement Definition and Usage
    include Statement Grammar
    @@ -155,54 +155,54 @@
    server Statement Grammar
    server Statement Definition and Usage
    -
    trusted-keys Statement Grammar
    -
    trusted-keys Statement Definition +
    trusted-keys Statement Grammar
    +
    trusted-keys Statement Definition and Usage
    view Statement Grammar
    -
    view Statement Definition and Usage
    +
    view Statement Definition and Usage
    zone Statement Grammar
    -
    zone Statement Definition and Usage
    +
    zone Statement Definition and Usage
    -
    Zone File
    +
    Zone File
    Types of Resource Records and When to Use Them
    -
    Discussion of MX Records
    +
    Discussion of MX Records
    Setting TTLs
    -
    Inverse Mapping in IPv4
    -
    Other Zone File Directives
    -
    BIND Master File Extension: the $GENERATE Directive
    +
    Inverse Mapping in IPv4
    +
    Other Zone File Directives
    +
    BIND Master File Extension: the $GENERATE Directive
    Additional File Formats
    7. BIND 9 Security Considerations
    Access Control Lists
    -
    chroot and setuid
    +
    chroot and setuid
    -
    The chroot Environment
    -
    Using the setuid Function
    +
    The chroot Environment
    +
    Using the setuid Function
    Dynamic Update Security
    8. Troubleshooting
    -
    Common Problems
    -
    It's not working; how can I figure out what's wrong?
    -
    Incrementing and Changing the Serial Number
    -
    Where Can I Get Help?
    +
    Common Problems
    +
    It's not working; how can I figure out what's wrong?
    +
    Incrementing and Changing the Serial Number
    +
    Where Can I Get Help?
    A. Appendices
    -
    Acknowledgments
    +
    Acknowledgments
    A Brief History of the DNS and BIND
    -
    General DNS Reference Information
    +
    General DNS Reference Information
    IPv6 addresses (AAAA)
    Bibliography (and Suggested Reading)
    Request for Comments (RFCs)
    Internet Drafts
    -
    Other Documents About BIND
    +
    Other Documents About BIND
    I. Manual pages
    diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 4ee12d3970..b879338228 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -52,7 +52,7 @@

    dig [global-queryopt...] [query...]

    -

    DESCRIPTION

    +

    DESCRIPTION

    dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and @@ -91,7 +91,7 @@

    -

    SIMPLE USAGE

    +

    SIMPLE USAGE

    A typical invocation of dig looks like:

    @@ -137,7 +137,7 @@

    -

    OPTIONS

    +

    OPTIONS

    The -b option sets the source IP address of the query to address. This must be a valid @@ -237,7 +237,7 @@

    -

    QUERY OPTIONS

    +

    QUERY OPTIONS

    dig provides a number of query options which affect the way in which lookups are made and the results displayed. Some of @@ -556,7 +556,7 @@

    -

    MULTIPLE QUERIES

    +

    MULTIPLE QUERIES

    The BIND 9 implementation of dig supports @@ -602,7 +602,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr

    -

    IDN SUPPORT

    +

    IDN SUPPORT

    If dig has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -616,14 +616,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr

    -

    FILES

    +

    FILES

    /etc/resolv.conf

    ${HOME}/.digrc

    -

    SEE ALSO

    +

    SEE ALSO

    host(1), named(8), dnssec-keygen(8), @@ -631,7 +631,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr

    -

    BUGS

    +

    BUGS

    There are probably too many query options.

    diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 5e3566e9f9..d466e50947 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    dnssec-keygen {-a algorithm} {-b keysize} {-n nametype} [-c class] [-e] [-f flag] [-g generator] [-h] [-k] [-p protocol] [-r randomdev] [-s strength] [-t type] [-v level] {name}

    -

    DESCRIPTION

    +

    DESCRIPTION

    dnssec-keygen generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC <TBA\>. It can also generate keys for use with @@ -58,7 +58,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -a algorithm
    @@ -166,7 +166,7 @@
    -

    GENERATED KEYS

    +

    GENERATED KEYS

    When dnssec-keygen completes successfully, @@ -212,7 +212,7 @@

    -

    EXAMPLE

    +

    EXAMPLE

    To generate a 768-bit DSA key for the domain example.com, the following command would be @@ -233,7 +233,7 @@

    -

    SEE ALSO

    +

    SEE ALSO

    dnssec-signzone(8), BIND 9 Administrator Reference Manual, RFC 2535, @@ -242,7 +242,7 @@

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 0d75d096a1..2b30755cb2 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    dnssec-signzone [-a] [-c class] [-d directory] [-e end-time] [-f output-file] [-g] [-h] [-k key] [-l domain] [-i interval] [-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-p] [-r randomdev] [-s start-time] [-t] [-v level] [-z] {zonefile} [key...]

    -

    DESCRIPTION

    +

    DESCRIPTION

    dnssec-signzone signs a zone. It generates NSEC and RRSIG records and produces a signed version of the @@ -61,7 +61,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -a

    @@ -257,7 +257,7 @@

    -

    EXAMPLE

    +

    EXAMPLE

    The following command signs the example.com zone with the DSA key generated in the dnssec-keygen @@ -283,14 +283,14 @@

    -

    SEE ALSO

    +

    SEE ALSO

    dnssec-keygen(8), BIND 9 Administrator Reference Manual, RFC 2535.

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 8e35f729f3..d02f1660db 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    host [-aCdlnrsTwv] [-c class] [-N ndots] [-R number] [-t type] [-W wait] [-m flag] [-4] [-6] {name} [server]

    -

    DESCRIPTION

    +

    DESCRIPTION

    host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. @@ -202,7 +202,7 @@

    -

    IDN SUPPORT

    +

    IDN SUPPORT

    If host has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -216,12 +216,12 @@

    -

    FILES

    +

    FILES

    /etc/resolv.conf

    -

    SEE ALSO

    +

    SEE ALSO

    dig(1), named(8).

    diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 617276b037..3047bebdfa 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,14 +50,14 @@

    named-checkconf [-v] [-j] [-t directory] {filename} [-z]

    -

    DESCRIPTION

    +

    DESCRIPTION

    named-checkconf checks the syntax, but not the semantics, of a named configuration file.

    -

    OPTIONS

    +

    OPTIONS

    -t directory

    @@ -88,20 +88,20 @@

    -

    RETURN VALUES

    +

    RETURN VALUES

    named-checkconf returns an exit status of 1 if errors were detected and 0 otherwise.

    -

    SEE ALSO

    +

    SEE ALSO

    named(8), BIND 9 Administrator Reference Manual.

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 6e3749f65a..7627e7c611 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -51,7 +51,7 @@

    named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-i mode] [-k mode] [-m mode] [-n mode] [-o filename] [-s style] [-t directory] [-w directory] [-D] [-W mode] {zonename} {filename}

    -

    DESCRIPTION

    +

    DESCRIPTION

    named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does when loading a @@ -71,7 +71,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -d

    @@ -251,21 +251,21 @@

    -

    RETURN VALUES

    +

    RETURN VALUES

    named-checkzone returns an exit status of 1 if errors were detected and 0 otherwise.

    -

    SEE ALSO

    +

    SEE ALSO

    named(8), RFC 1035, BIND 9 Administrator Reference Manual.

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index ddb4f89f09..d15aeb54b4 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    named [-4] [-6] [-c config-file] [-d debug-level] [-f] [-g] [-n #cpus] [-p port] [-s] [-t directory] [-u user] [-v] [-x cache-file]

    -

    DESCRIPTION

    +

    DESCRIPTION

    named is a Domain Name System (DNS) server, part of the BIND 9 distribution from ISC. For more @@ -65,7 +65,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -4

    @@ -198,7 +198,7 @@

    -

    SIGNALS

    +

    SIGNALS

    In routine operation, signals should not be used to control the nameserver; rndc should be used @@ -219,7 +219,7 @@

    -

    CONFIGURATION

    +

    CONFIGURATION

    The named configuration file is too complex to describe in detail here. A complete description is provided @@ -228,7 +228,7 @@

    -

    FILES

    +

    FILES

    /etc/named.conf

    @@ -241,7 +241,7 @@

    -

    SEE ALSO

    +

    SEE ALSO

    RFC 1033, RFC 1034, RFC 1035, @@ -252,7 +252,7 @@

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 559bc98859..8786ddf032 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -48,7 +48,7 @@

    rndc-confgen [-a] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-r randomfile] [-s address] [-t chrootdir] [-u user]

    -

    DESCRIPTION

    +

    DESCRIPTION

    rndc-confgen generates configuration files for rndc. It can be used as a @@ -64,7 +64,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -a
    @@ -171,7 +171,7 @@
    -

    EXAMPLES

    +

    EXAMPLES

    To allow rndc to be used with no manual configuration, run @@ -188,7 +188,7 @@

    -

    SEE ALSO

    +

    SEE ALSO

    rndc(8), rndc.conf(5), named(8), @@ -196,7 +196,7 @@

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 84d0ac3d78..a25f78ddc3 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    rndc.conf

    -

    DESCRIPTION

    +

    DESCRIPTION

    rndc.conf is the configuration file for rndc, the BIND 9 name server control utility. This file has a similar structure and syntax to @@ -135,7 +135,7 @@

    -

    EXAMPLE

    +

    EXAMPLE

           options {
             default-server  localhost;
    @@ -209,7 +209,7 @@
         

    -

    NAME SERVER CONFIGURATION

    +

    NAME SERVER CONFIGURATION

    The name server must be configured to accept rndc connections and to recognize the key specified in the rndc.conf @@ -219,7 +219,7 @@

    -

    SEE ALSO

    +

    SEE ALSO

    rndc(8), rndc-confgen(8), mmencode(1), @@ -227,7 +227,7 @@

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium

    diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index b2b4aabaf8..a37a8e2df5 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -14,7 +14,7 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> - + @@ -50,7 +50,7 @@

    rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-V] [-y key_id] {command}

    -

    DESCRIPTION

    +

    DESCRIPTION

    rndc controls the operation of a name server. It supersedes the ndc utility @@ -79,7 +79,7 @@

    -

    OPTIONS

    +

    OPTIONS

    -b source-address

    @@ -152,7 +152,7 @@

    -

    LIMITATIONS

    +

    LIMITATIONS

    rndc does not yet support all the commands of the BIND 8 ndc utility. @@ -166,7 +166,7 @@

    -

    SEE ALSO

    +

    SEE ALSO

    rndc.conf(5), named(8), named.conf(5) @@ -175,7 +175,7 @@

    -

    AUTHOR

    +

    AUTHOR

    Internet Systems Consortium