~ubuntu-branches/ubuntu/natty/bind9/natty-security

« back to all changes in this revision

Viewing changes to doc/arm/Bv9ARM.ch06.html

  • Committer: Bazaar Package Importer
  • Author(s): LaMont Jones, Internet Software Consortium, Inc
  • Date: 2010-03-17 08:06:42 UTC
  • mfrom: (1.6.6 upstream)
  • Revision ID: james.westby@ubuntu.com-20100317080642-k7us37vn1mpgagmv
Tags: 1:9.7.0.dfsg.P1-1
[Internet Software Consortium, Inc]

* 9.7.0-P1
  - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]

Show diffs side-by-side

added added

removed removed

Lines of Context:
14
14
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15
15
 - PERFORMANCE OF THIS SOFTWARE.
16
16
-->
17
 
<!-- $Id: Bv9ARM.ch06.html,v 1.249.4.4 2010/02/03 02:08:10 tbox Exp $ -->
 
17
<!-- $Id: Bv9ARM.ch06.html,v 1.249.4.4.2.1 2010/02/25 12:43:24 tbox Exp $ -->
18
18
<html>
19
19
<head>
20
20
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
78
78
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
79
79
            Usage</a></span></dt>
80
80
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
81
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588203"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
 
81
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588138"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
82
82
            Usage</a></span></dt>
83
83
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
84
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588411"><span><strong class="command">trusted-keys</strong></span> Statement Definition
 
84
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588346"><span><strong class="command">trusted-keys</strong></span> Statement Definition
85
85
            and Usage</a></span></dt>
86
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588458"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
 
86
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588393"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
87
87
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition
88
88
            and Usage</a></span></dt>
89
89
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
90
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588952"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
 
90
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2588887"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
91
91
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
92
92
            Statement Grammar</a></span></dt>
93
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590525"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
 
93
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590460"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
94
94
</dl></dd>
95
 
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2593193">Zone File</a></span></dt>
 
95
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2593196">Zone File</a></span></dt>
96
96
<dd><dl>
97
97
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
98
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2595424">Discussion of MX Records</a></span></dt>
 
98
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2595358">Discussion of MX Records</a></span></dt>
99
99
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
100
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2596039">Inverse Mapping in IPv4</a></span></dt>
101
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2596166">Other Zone File Directives</a></span></dt>
102
 
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2596439"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
 
100
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2595974">Inverse Mapping in IPv4</a></span></dt>
 
101
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2596169">Other Zone File Directives</a></span></dt>
 
102
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2596374"><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
103
103
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
104
104
</dl></dd>
105
105
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
4735
4735
<a name="tuning"></a>Tuning</h4></div></div></div>
4736
4736
<div class="variablelist"><dl>
4737
4737
<dt><span class="term"><span><strong class="command">lame-ttl</strong></span></span></dt>
4738
 
<dd><p>
 
4738
<dd>
 
4739
<p>
4739
4740
                  Sets the number of seconds to cache a
4740
4741
                  lame server indication. 0 disables caching. (This is
4741
4742
                  <span class="bold"><strong>NOT</strong></span> recommended.)
4742
4743
                  The default is <code class="literal">600</code> (10 minutes) and the
4743
4744
                  maximum value is
4744
4745
                  <code class="literal">1800</code> (30 minutes).
4745
 
                </p></dd>
 
4746
                </p>
 
4747
<p>
 
4748
                  Lame-ttl also controls the amount of time DNSSEC
 
4749
                  validation failures are cached.  There is a minimum
 
4750
                  of 30 seconds applied to bad cache entries if the
 
4751
                  lame-ttl is set to less than 30 seconds.
 
4752
                </p>
 
4753
</dd>
4746
4754
<dt><span class="term"><span><strong class="command">max-ncache-ttl</strong></span></span></dt>
4747
4755
<dd><p>
4748
4756
                  To reduce network traffic and increase performance,
5210
5218
</div>
5211
5219
<div class="sect3" lang="en">
5212
5220
<div class="titlepage"><div><div><h4 class="title">
5213
 
<a name="id2587315"></a>Content Filtering</h4></div></div></div>
 
5221
<a name="id2587318"></a>Content Filtering</h4></div></div></div>
5214
5222
<p>
5215
5223
            <acronym class="acronym">BIND</acronym> 9 provides the ability to filter
5216
5224
            out DNS responses from external DNS servers containing
5540
5548
</div>
5541
5549
<div class="sect2" lang="en">
5542
5550
<div class="titlepage"><div><div><h3 class="title">
5543
 
<a name="id2588203"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
 
5551
<a name="id2588138"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
5544
5552
            Usage</h3></div></div></div>
5545
5553
<p>
5546
5554
          The <span><strong class="command">statistics-channels</strong></span> statement
5600
5608
</div>
5601
5609
<div class="sect2" lang="en">
5602
5610
<div class="titlepage"><div><div><h3 class="title">
5603
 
<a name="id2588411"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
 
5611
<a name="id2588346"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
5604
5612
            and Usage</h3></div></div></div>
5605
5613
<p>
5606
5614
            The <span><strong class="command">trusted-keys</strong></span> statement defines
5640
5648
</div>
5641
5649
<div class="sect2" lang="en">
5642
5650
<div class="titlepage"><div><div><h3 class="title">
5643
 
<a name="id2588458"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div>
 
5651
<a name="id2588393"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div>
5644
5652
<pre class="programlisting"><span><strong class="command">managed-keys</strong></span> {
5645
5653
    <em class="replaceable"><code>string</code></em> initial-key <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ;
5646
5654
    [<span class="optional"> <em class="replaceable"><code>string</code></em> initial-key <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; [<span class="optional">...</span>]</span>]
5775
5783
</div>
5776
5784
<div class="sect2" lang="en">
5777
5785
<div class="titlepage"><div><div><h3 class="title">
5778
 
<a name="id2588952"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
 
5786
<a name="id2588887"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
5779
5787
<p>
5780
5788
            The <span><strong class="command">view</strong></span> statement is a powerful
5781
5789
            feature
6055
6063
</div>
6056
6064
<div class="sect2" lang="en">
6057
6065
<div class="titlepage"><div><div><h3 class="title">
6058
 
<a name="id2590525"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
 
6066
<a name="id2590460"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
6059
6067
<div class="sect3" lang="en">
6060
6068
<div class="titlepage"><div><div><h4 class="title">
6061
 
<a name="id2590533"></a>Zone Types</h4></div></div></div>
 
6069
<a name="id2590468"></a>Zone Types</h4></div></div></div>
6062
6070
<div class="informaltable"><table border="1">
6063
6071
<colgroup>
6064
6072
<col>
6269
6277
</div>
6270
6278
<div class="sect3" lang="en">
6271
6279
<div class="titlepage"><div><div><h4 class="title">
6272
 
<a name="id2590892"></a>Class</h4></div></div></div>
 
6280
<a name="id2590896"></a>Class</h4></div></div></div>
6273
6281
<p>
6274
6282
              The zone's name may optionally be followed by a class. If
6275
6283
              a class is not specified, class <code class="literal">IN</code> (for <code class="varname">Internet</code>),
6291
6299
</div>
6292
6300
<div class="sect3" lang="en">
6293
6301
<div class="titlepage"><div><div><h4 class="title">
6294
 
<a name="id2590994"></a>Zone Options</h4></div></div></div>
 
6302
<a name="id2590929"></a>Zone Options</h4></div></div></div>
6295
6303
<div class="variablelist"><dl>
6296
6304
<dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt>
6297
6305
<dd><p>
6962
6970
</div>
6963
6971
<div class="sect1" lang="en">
6964
6972
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
6965
 
<a name="id2593193"></a>Zone File</h2></div></div></div>
 
6973
<a name="id2593196"></a>Zone File</h2></div></div></div>
6966
6974
<div class="sect2" lang="en">
6967
6975
<div class="titlepage"><div><div><h3 class="title">
6968
6976
<a name="types_of_resource_records_and_when_to_use_them"></a>Types of Resource Records and When to Use Them</h3></div></div></div>
6975
6983
          </p>
6976
6984
<div class="sect3" lang="en">
6977
6985
<div class="titlepage"><div><div><h4 class="title">
6978
 
<a name="id2593211"></a>Resource Records</h4></div></div></div>
 
6986
<a name="id2593214"></a>Resource Records</h4></div></div></div>
6979
6987
<p>
6980
6988
              A domain name identifies a node.  Each node has a set of
6981
6989
              resource information, which may be empty.  The set of resource
7712
7720
</div>
7713
7721
<div class="sect3" lang="en">
7714
7722
<div class="titlepage"><div><div><h4 class="title">
7715
 
<a name="id2594903"></a>Textual expression of RRs</h4></div></div></div>
 
7723
<a name="id2594838"></a>Textual expression of RRs</h4></div></div></div>
7716
7724
<p>
7717
7725
              RRs are represented in binary form in the packets of the DNS
7718
7726
              protocol, and are usually represented in highly encoded form
7915
7923
</div>
7916
7924
<div class="sect2" lang="en">
7917
7925
<div class="titlepage"><div><div><h3 class="title">
7918
 
<a name="id2595424"></a>Discussion of MX Records</h3></div></div></div>
 
7926
<a name="id2595358"></a>Discussion of MX Records</h3></div></div></div>
7919
7927
<p>
7920
7928
            As described above, domain servers store information as a
7921
7929
            series of resource records, each of which contains a particular
8171
8179
</div>
8172
8180
<div class="sect2" lang="en">
8173
8181
<div class="titlepage"><div><div><h3 class="title">
8174
 
<a name="id2596039"></a>Inverse Mapping in IPv4</h3></div></div></div>
 
8182
<a name="id2595974"></a>Inverse Mapping in IPv4</h3></div></div></div>
8175
8183
<p>
8176
8184
            Reverse name resolution (that is, translation from IP address
8177
8185
            to name) is achieved by means of the <span class="emphasis"><em>in-addr.arpa</em></span> domain
8232
8240
</div>
8233
8241
<div class="sect2" lang="en">
8234
8242
<div class="titlepage"><div><div><h3 class="title">
8235
 
<a name="id2596166"></a>Other Zone File Directives</h3></div></div></div>
 
8243
<a name="id2596169"></a>Other Zone File Directives</h3></div></div></div>
8236
8244
<p>
8237
8245
            The Master File Format was initially defined in RFC 1035 and
8238
8246
            has subsequently been extended. While the Master File Format
8247
8255
          </p>
8248
8256
<div class="sect3" lang="en">
8249
8257
<div class="titlepage"><div><div><h4 class="title">
8250
 
<a name="id2596257"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
 
8258
<a name="id2596192"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
8251
8259
<p>
8252
8260
              When used in the label (or name) field, the asperand or
8253
8261
              at-sign (@) symbol represents the current origin.
8258
8266
</div>
8259
8267
<div class="sect3" lang="en">
8260
8268
<div class="titlepage"><div><div><h4 class="title">
8261
 
<a name="id2596273"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
 
8269
<a name="id2596208"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
8262
8270
<p>
8263
8271
              Syntax: <span><strong class="command">$ORIGIN</strong></span>
8264
8272
              <em class="replaceable"><code>domain-name</code></em>
8287
8295
</div>
8288
8296
<div class="sect3" lang="en">
8289
8297
<div class="titlepage"><div><div><h4 class="title">
8290
 
<a name="id2596333"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
 
8298
<a name="id2596268"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
8291
8299
<p>
8292
8300
              Syntax: <span><strong class="command">$INCLUDE</strong></span>
8293
8301
              <em class="replaceable"><code>filename</code></em>
8323
8331
</div>
8324
8332
<div class="sect3" lang="en">
8325
8333
<div class="titlepage"><div><div><h4 class="title">
8326
 
<a name="id2596403"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
 
8334
<a name="id2596338"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
8327
8335
<p>
8328
8336
              Syntax: <span><strong class="command">$TTL</strong></span>
8329
8337
              <em class="replaceable"><code>default-ttl</code></em>
8342
8350
</div>
8343
8351
<div class="sect2" lang="en">
8344
8352
<div class="titlepage"><div><div><h3 class="title">
8345
 
<a name="id2596439"></a><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
 
8353
<a name="id2596374"></a><acronym class="acronym">BIND</acronym> Master File Extension: the  <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
8346
8354
<p>
8347
8355
            Syntax: <span><strong class="command">$GENERATE</strong></span>
8348
8356
            <em class="replaceable"><code>range</code></em>
8766
8774
          </p>
8767
8775
<div class="sect3" lang="en">
8768
8776
<div class="titlepage"><div><div><h4 class="title">
8769
 
<a name="id2597529"></a>Name Server Statistics Counters</h4></div></div></div>
 
8777
<a name="id2597464"></a>Name Server Statistics Counters</h4></div></div></div>
8770
8778
<div class="informaltable"><table border="1">
8771
8779
<colgroup>
8772
8780
<col>
9323
9331
</div>
9324
9332
<div class="sect3" lang="en">
9325
9333
<div class="titlepage"><div><div><h4 class="title">
9326
 
<a name="id2599002"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
 
9334
<a name="id2598937"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
9327
9335
<div class="informaltable"><table border="1">
9328
9336
<colgroup>
9329
9337
<col>
9477
9485
</div>
9478
9486
<div class="sect3" lang="en">
9479
9487
<div class="titlepage"><div><div><h4 class="title">
9480
 
<a name="id2599453"></a>Resolver Statistics Counters</h4></div></div></div>
 
9488
<a name="id2599388"></a>Resolver Statistics Counters</h4></div></div></div>
9481
9489
<div class="informaltable"><table border="1">
9482
9490
<colgroup>
9483
9491
<col>
9860
9868
</div>
9861
9869
<div class="sect3" lang="en">
9862
9870
<div class="titlepage"><div><div><h4 class="title">
9863
 
<a name="id2600475"></a>Socket I/O Statistics Counters</h4></div></div></div>
 
9871
<a name="id2600478"></a>Socket I/O Statistics Counters</h4></div></div></div>
9864
9872
<p>
9865
9873
              Socket I/O statistics counters are defined per socket
9866
9874
              types, which are
10015
10023
</div>
10016
10024
<div class="sect3" lang="en">
10017
10025
<div class="titlepage"><div><div><h4 class="title">
10018
 
<a name="id2600917"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
 
10026
<a name="id2600920"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
10019
10027
<p>
10020
10028
              Most statistics counters that were available
10021
10029
              in <span><strong class="command">BIND</strong></span> 8 are also supported in