By Cricket Liu & Paul Albitz; ISBN 1−56592−512−2, 502 pages. Third Edition, September 1998. (See the catalog page for this book.) Search the text of DNS & BIND. Index Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Table of Contents Preface Chapter 1: Background Chapter 2: How Does DNS Work? Chapter 3: Where Do I Start? Chapter 4: Setting Up BIND Chapter 5: DNS and Electronic Mail Chapter 6: Configuring Hosts Chapter 7: Maintaining BIND Chapter 8: Growing Your Domain Chapter 9: Parenting Chapter 10: Advanced Features and Security Chapter 11: nslookup Chapter 12: Reading BIND Debugging Output Chapter 13: Troubleshooting DNS and BIND Chapter 14: Programming with the Resolver and Name Server Library Routines Chapter 15: Miscellaneous Appendix A: DNS Message Format and Resource Records Appendix B: Compiling and Installing BIND on a Sun Appendix C: Top−Level Domains Appendix D: Domain Registration Form Appendix E: in−addr.arpa Registration Form Appendix F: BIND Name Server and Resolver Statements Copyright © 1999 O'Reilly & Associates. All Rights Reserved. DNS & BIND 1 Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Index: Symbols and Numbers /24 network, subnetting : 9.5.2.2. /24 (class C−sized) networks * wildcard : 15.2. Wildcards @ notation 4.4.2. @ Notation A.1. Master File Format . (dot) default domain and : 6.1.1. The Default Domain ndots substatement 6.1.6. The options Directive F.2.6. options ndots (4.9.3 and later versions) root domain 1.3. The Domain Name System, in a Nutshell 2.1. The Domain Name Space 4.2.9. The Root Cache Data trailing in domain names 2.1.1. Domain Names 4.2.3. SOA Records 4.4.1. Appending Domains 13.3.6. 6. Missing Dot at the End of a Name in a DNS Database File A.1. Master File Format # (hash mark) for comments 4.3. Setting Up a BIND Configuration File 6.1.7. Comments ( ) (parentheses) 4.2.3. SOA Records A.1. Master File Format ; (semicolon) for comments : F.2.4. ; and # (4.9.3 and later versions) ; (semicolon) for comments 6.1.7. Comments A.1. Master File Format ; (semicolon) for comments : 4.3. Setting Up a BIND Configuration File /* */ comments : 4.3. Setting Up a BIND Configuration File // comments : 4.3. Setting Up a BIND Configuration File Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved. [ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ] DNS & BIND Index: Symbols and Numbers 2 Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Index: A A records 4.2.1. The db Files 4.2.5. Address and Alias Records A.1.2.1. A address queries statistic : 7.6.2. Understanding the BIND Statistics aa (authoritative answer) bit : 9.6. Good Parenting AAAA records : 15.7.5. IPv6 Addresses abbreviations in db files : 4.4. Abbreviations ABRT signal 7.1. BIND Name Server Signals 7.6.2. Understanding the BIND Statistics access to name servers : (see resolvers) rlogin and rsh fail access check : 13.6.5. rlogin and rsh to Host Fails Access Check to services, denied : 13.6.6. Access to Services Denied acl statement 10.1. Address Match Lists and ACLs F.1.15. acl (8.X.X) ACLs (access control lists) : 10.1. Address Match Lists and ACLs adding domains : 4.9. Adding More Domains hosts 7.2.1. Adding and Deleting Hosts 13.3.4. 4. Added Name to Database File, but Forgot to Add PTR Record name servers : 8.2. Adding More Name Servers slave name servers : 9.4.6. Adding a movie.edu Slave subdomains : 9.4. How to Become a Parent: Creating Subdomains additional section, DNS packet 11.6.1. Seeing the Query and Response Packets 13.2.2. How to Read a Database Dump 14.2.1. DNS Packet Format A.3.2. Answer, Authority, and Additional Section Format addresses A records : A.1.2.1. A address address match lists : 10.1. Address Match Lists and ACLs address type : 2.1.3. Resource Records administrator's : 4.2.3. SOA Records IPv6 : 15.7.5. IPv6 Addresses ISDN 15.7.3. X25, ISDN, and RT A.1.3.2. ISDN Integrated Services Digital Network address − experimental local : 4.7.3.3. Look up a local address DNS & BIND Index: A 3 loopback 4.2.8. The Loopback Address 6.1.4. The nameserver Directive mapping names to : 4.2.5. Address and Alias Records mapping to names 2.6.4. Mapping Addresses to Names 4.2.6. PTR Records in MX records : 5.3. The MX Algorithm no PTR data for 11.7.3. No PTR Data for Name Server's Address 13.3.4. 4. Added Name to Database File, but Forgot to Add PTR Record queries statistic : 7.6.2. Understanding the BIND Statistics registering network numbers : 3.2.3. Checking That Your Network Is Registered searching for : 3.1.2. Finding IP Addresses shuffle address records : 10.12. Load Sharing Between Mirrored Servers sorting 4.2.5. Address and Alias Records 10.5. Name Server Address Sorting 10.5.4. Multiple Sortlist Entries X.121 : 15.7.3. X25, ISDN, and RT zero address : 6.1.4. The nameserver Directive administration Audience 7.6. Keeping Everything Running Smoothly (see also updating) avoiding bogus name servers : 10.10. Avoiding a Bogus Name Server capacity planning : 8.1.2. Capacity Planning checking delegation 9.6. Good Parenting 9.6.2. Managing Delegation 13.3.10. 10. Incorrect Subdomain Delegation common tasks with nslookup : 11.5. Common Tasks contacting administrators : 8.3. Registering Name Servers contacting domain administrator : 3.2.2.1. The us domain email address for : 4.2.3. SOA Records mail exchangers : 5.2. What's a Mail Exchanger, Again? maintenance intervals : 10.4.3. Maintenance Intervals monitoring statistics : 7.6.2. Understanding the BIND Statistics name server maintenance : 7. Maintaining BIND logging (BIND 8) : 7.5. BIND 8 Logging maintenance intervals : 10.4.3. Maintenance Intervals monitoring name servers : 7.6. Keeping Everything Running Smoothly organizing db files : 7.3. Organizing Your Files updating db files : 7.2. Updating db Files overworked servers : 8.1.2. Capacity Planning planning for disaster : 8.5.2. Recommendations preventing and handling disasters : 8.5. Planning for Disasters system tuning : 10.4. System Tuning updating named.root : 4.2.9. The Root Cache Data AFSDB records 15.7.2. AFSDB DNS & BIND Index: A 4 A.1.3.1. AFSDB Andrew File System Data Base − experimental AIX : 6.4.4. IBM's AIX aliases 1.3. The Domain Name System, in a Nutshell 4.2.5. Address and Alias Records 6.3.4. Providing Aliases 14.2.5. The _res Structure 15.1. Using CNAME Records (see also CNAME records) determining : 15.1.6. Finding Out a Host's Aliases looking up : 15.1.5. Looking Up CNAMEs multiple : 15.1.4. Multiple CNAME Records in MX records : 5.3. The MX Algorithm to other aliases : 15.1.2. CNAMEs Pointing to CNAMEs transition to subdomains : 9.7. Managing the Transition to Subdomains allow−query substatement : 10.11.2. Restricting Queries allow−transfer substatement : 10.11.3. Preventing Unauthorized Zone Transfers allow−update substatement (nsupdate) : 10.3. DNS Dynamic Update Andrew File System (AFS) 15.7.2. AFSDB A.1.3.1. AFSDB Andrew File System Data Base − experimental anonymous ftp : 13.3.4. 4. Added Name to Database File, but Forgot to Add PTR Record answer section, DNS packet 11.6.1. Seeing the Query and Response Packets 13.2.2. How to Read a Database Dump 14.2.1. DNS Packet Format A.3.2. Answer, Authority, and Additional Section Format ANY queries statistic : 7.6.2. Understanding the BIND Statistics APNIC registry : 3.2.3. Checking That Your Network Is Registered appending origin : 4.4.1. Appending Domains application gateways : 15.4.1.2. Application gateways ARIN registry 3.2.3. Checking That Your Network Is Registered E. in−addr.arpa Registration Form arpa domain 2.2.1. Top−Level Domains 9.4.5. Delegating an in−addr.arpa Zone ARPAnet : 1. Background asterisk (*) wildcard : 15.2. Wildcards auth−nxdomain substatement : 13.5.7. Other Name Servers Don't Cache Your Negative Answers authenticated name server : 15.7.2. AFSDB authority 4.2.3. SOA Records (see also SOA records) aa bit : 9.6. Good Parenting nslookup answers : 11.5.2. Authoritative Versus Nonauthoritative Answers SOA records 3.2.1. Where in the World Do I Fit? 3.2.2.1. The us domain 4.2.1. The db Files 4.2.3. SOA Records DNS & BIND Index: A 5 4.8.4. SOA Values acceptable characters for : 4.5. Host Name Checking (BIND 4.9.4 and Later Versions) unauthorized zone transfers : 10.11.3. Preventing Unauthorized Zone Transfers zones : 2.4. Name Servers and Zones authority section, DNS packet 11.6.1. Seeing the Query and Response Packets 13.2.2. How to Read a Database Dump 14.2.1. DNS Packet Format A.3.2. Answer, Authority, and Additional Section Format authorization files : 6.3.3. Updating .rhosts, hosts.equiv, etc. AXFR queries statistic : 7.6.2. Understanding the BIND Statistics Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved. [ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ] DNS & BIND Index: A 6 Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Index: B backups battery power : 8.5.2. Recommendations name servers 6.1.4. The nameserver Directive 6.2.2. Local Name Server serial number and 7.2.3. Starting Over with a New Serial Number 7.6.1. Common Syslog Messages zone data : 4.8.2. Backup Files zone transfers and : 7.6.1. Common Syslog Messages bastion host : 15.4.6.1. The bastion host BIND (Berkeley Internet Name Domain) compiling and installing : B. Compiling and Installing BIND on a Sun configuration file : (see boot file) directives and resolvers (list) : F.1. BIND Name Server Boot File Statements firewalls and : 15.4. DNS and Internet Firewalls history of : 1.4. The History of BIND name server maintainence : 7. Maintaining BIND logging (BIND 8) : 7.5. BIND 8 Logging monitoring name servers : 7.6. Keeping Everything Running Smoothly organizing db files : 7.3. Organizing Your Files updating db files : 7.2. Updating db Files name server signals : 7.1. BIND Name Server Signals obtaining source code 3.1. Getting BIND B.1. Get the Source Code resources for : 3.1.1. Handy Mailing Lists and Usenet Newsgroups running as non−root user : 10.11.4. Running BIND as a Non−Root User statistics : 7.6.2. Understanding the BIND Statistics versions of Versions 3.1. Getting BIND 10.11.1. BIND Version 15.4.2. A Bad Example interoperability problems : 13.5. Interoperability and Version Problems transitions between : 13.4. Transition Problems bind−users mailing list 3.1.1. Handy Mailing Lists and Usenet Newsgroups 4.2.9. The Root Cache Data bind−workers mailing list : 3.1.1. Handy Mailing Lists and Usenet Newsgroups bogus name servers, avoiding : 10.10. Avoiding a Bogus Name Server bogusns directive DNS & BIND Index: B 7 10.10. Avoiding a Bogus Name Server F.1.13. bogusns (4.9.3) Boolean options, nslookup : 11.3. Option Settings boot file (BIND configuration file) 4.2. Setting Up DNS Data 4.3. Setting Up a BIND Configuration File 7.3. Organizing Your Files 7.3.2. Changing the Origin in a Database File directives F.1.14. check−names (4.9.4) F.1.19. options (8.X.X) F.1.21. zone (8.X.X) directives for (list) : F.1. BIND Name Server Boot File Statements syntax errors in : 13.3.5. 5. Syntax Error in the Conf File or DNS Database File BSD UNIX operating system : 1.1. A (Very) Brief History of the Internet bstat utility : 7.6.2. Understanding the BIND Statistics Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved. [ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ] DNS & BIND Index: B 8 Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z Index: C C programming 14.2. C Programming with the Resolver Library Routines 14.3.6. A Perl Version of check_soa C−style and C++−style comments : 4.3. Setting Up a BIND Configuration File cache directive 15.4.4.4. The db.root file F.1.4. cache caching 2.7. Caching 2.7.1. Time to Live caching−only name servers 8.2.2. Caching−Only Servers 8.3. Registering Name Servers cleaning interval : 10.4.3.1. Cleaning interval corrupted 13.6.8. Name Server Keeps Loading Old Data 13.6.8.4. What have I got? forwarders and : 10.7. Building Up a Large Site−wide Cache with Forwarders missing cache data : 13.3.7. 7. Missing Cache Data negative 12.4. The Resolver Search Algorithm and Negative Caching 13.5.7. Other Name Servers Don't Cache Your Negative Answers root cache data : 4.2.9. The Root Cache Data TTL (time to live) 2.7.1. Time to Live 4.2.9. The Root Cache Data 4.8.4. SOA Values 8.4. Changing TTLs 10.12. Load Sharing Between Mirrored Servers "cannot set resource limits" message : 7.6.1. Common Syslog Messages canonical names : (see CNAME records) canonicalization 4.2.5. Address and Alias Records 6.3.2. Electronic Mail capacity planning : 8.1.2. Capacity Planning case sensitivity 4.2.1. The db Files A.1.1. Character Case categories of data (logging) 7.5. BIND 8 Logging 7.5.3. Category Details chaining : (see recursive resolution) DNS & BIND Index: C 9 channels (logging) : 7.5. BIND 8 Logging Chaosnet class : 2.1.3. Resource Records character strings : A.4.1.3. Character string check_del utility 9.6. Good Parenting 9.6.1. Using check_del check−names directive : F.1.14. check−names (4.9.4) check_soa program (example) 14.2.8. A Sample Program: check_soa 14.3.6. A Perl Version of check_soa checking delegation 9.6. Good Parenting 9.6.2. Managing Delegation 13.3.9. 9. Missing Subdomain Delegation host names : 4.5. Host Name Checking (BIND 4.9.4 and Later Versions) zone (debugging example) : 12.3.4. A Slave Name Server Checking Its Zone (Debug Level 1) children : (see parenting) chroot command : 10.11.4. Running BIND as a Non−Root User CIDR (classless inter−domain routing) : 3.2.3. Checking That Your Network Is Registered city−level domains : 3.2.2.1. The us domain class A and B networks, subnetting : 9.5.2.1. Class A and B networks class C networks, subnetting : 9.5.2.2. /24 (class C−sized) networks CLASS fields (db files) : A.1.5. Classes classes : A.1.5. Classes class option, nslookup : 11.3. Option Settings internet : 2.1.3. Resource Records unusual : 7.6.1. Common Syslog Messages classless inter−domain routing (CIDR) : 3.2.3. Checking That Your Network Is Registered cleaning interval : 10.4.3.1. Cleaning interval closest known name servers : 2.6.2. Recursion cname data category (logging) : 7.5.3. Category Details CNAME records 4.2.1. The db Files 4.2.5. Address and Alias Records 7.6.1. Common Syslog Messages 15.1. Using CNAME Records 15.1.6. Finding Out a Host's Aliases A.1.2.2. CNAME canonical name (see also aliases) chaining : 15.1.2. CNAMEs Pointing to CNAMEs "Looked for PTR, Found CNAME" : 13.5.4. Resolver Reports Looked for PTR, Found CNAME looking up : 15.1.5. Looking Up CNAMEs queries statistic : 7.6.2. Understanding the BIND Statistics transition to subdomains : 9.7. Managing the Transition to Subdomains code, BIND source 3.1. Getting BIND B.1. Get the Source Code collisions : 1.2.1. The History of the Domain Name System com domain : 2.2.1. Top−Level Domains command−line debugging : 12.2.1. Debugging Command−Line Option DNS & BIND Index: C 10 [...]... (see resource records) when to use : 1.5 Must I Use DNS? WINS and : 15.9 DNS and WINS X.500 directory system vs : 15.8 DNS Versus X.500 DNS client : 6.1.4 The nameserver Directive DNS NOTIFY 3.1 Getting BIND 10.2 DNS NOTIFY (Zone Change Notification) DNS UPDATE : 3.1 Getting BIND documentation BIND : 3.1.1 Handy Mailing Lists and Usenet Newsgroups DNS : Preface firewalls : 15.4.1 Types of Firewall Software... Database Dump named.pid file : 7.1 BIND Name Server Signals moving : 7.4 Changing BIND 8 System File Locations named.root file : 4.2.9 The Root Cache Data named.run file 7.5 BIND 8 Logging 12.2 Turning On Debugging named.stats file : 7.6.2 Understanding the BIND Statistics moving : 7.4 Changing BIND 8 System File Locations Index: N 33 DNS & BIND named−xfer program 7.1 BIND Name Server Signals 13.2.1 How... Category Details configuration file, BIND : (see boot file) configuration syntax, BIND : 3.1 Getting BIND configuring 9.6 Good Parenting 9.6.2 Managing Delegation channels (logging) : 7.5 BIND 8 Logging dialup connections : 15.5 Dialup Connections firewalls : 15.4 DNS and Internet Firewalls hosts to use DNS : 6 Configuring Hosts consequences of : 6.3 Minimizing Pain and Suffering vendor−specific differences.. .DNS & BIND comments in BIND configuration files 4.3 Setting Up a BIND Configuration File 6.1.7 Comments in db files : 4.2.2 Comments compiling BIND : B Compiling and Installing BIND on a Sun compressing domain names 14.2.3 Domain Name Compression 14.2.6 The Name Server Library Routines compression,... firewalls : 15.4 DNS and Internet Firewalls first−level domains : (see top−level domains) format db files : A.1 Master File Format logging channels : 7.5.2.5 Data formatting for all channels packet 11.6.1 Seeing the Query and Response Packets 14.2.1 DNS Packet Format packet message : A.2 DNS Message resource record data : A.4.1 Data Format FORMERR responses : 7.6.2 Understanding the BIND Statistics... (see HINFO records) Index: H 22 DNS & BIND mail exchangers 5.1 MX Records 5.2 What's a Mail Exchanger, Again? multihomed 4.2.4 NS Records 4.2.5 Address and Alias Records 10.5 Name Server Address Sorting name checking : 4.5 Host Name Checking (BIND 4.9.4 and Later Versions) network interface interval : 10.4.3.2 Interface interval statistics for : 7.6.2 Understanding the BIND Statistics hosts file empty... Minimizing Pain and Suffering database files : (see db files) disasters : 8.5 Planning for Disasters documentation on : Preface firewalls and : 15.4 DNS and Internet Firewalls fundamentals of : 1.3 The Domain Name System, in a Nutshell history of : 1.2.1 The History of the Domain Name System NIS with : 6.4.1.2 Using DNS with NIS packet format 11.6.1 Seeing the Query and Response Packets 14.2.1 DNS Packet... Name in a DNS Database File A.1 Master File Format dotted−octet representation : 2.6.4 Mapping Addresses to Names dump, database : 13.2.2 How to Read a Database Dump DUN (Dial−Up Networking) 6.4.9 Windows 95 15.5 Dialup Connections Dunlap, Kevin : 1.4 The History of BIND duplicate queries : 7.6.2 Understanding the BIND Statistics dynamic update facility : 10.3 DNS Dynamic Update Dynamic Update standard... /dev/null file : 10.11.4 Running BIND as a Non−Root User dial−on−demand connections : 15.5.2 Dial−on−Demand dialup connections 6.4.9 Windows 95 15.5 Dialup Connections dig utility : 7.2.6 Keeping db.cache Current Digital UNIX : 6.4.5 Digital's Digital UNIX Index: D 13 DNS & BIND directives 6.1.8 A Note on the 4.9 Resolver Directives (see also under specific directive) list of : F.1 BIND Name Server Boot File... search Directive F.2.1 domain NIS and : 6.4.1.2 Using DNS with NIS domain name space : 2.1 The Domain Name Space CIDR and : 3.2.3 Checking That Your Network Is Registered Internet 2.2 The Internet Domain Name Space 2.2.1 Top−Level Domains shadow namespace : 15.4.6 A Shadow Namespace Index: D 14 DNS & BIND visibility of : 15.4.6 A Shadow Namespace Domain Name System : (see DNS) domain names 1.3 The Domain . BIND 10.2. DNS NOTIFY (Zone Change Notification) DNS UPDATE : 3.1. Getting BIND documentation BIND : 3.1.1. Handy Mailing Lists and Usenet Newsgroups DNS. Must I Use DNS? WINS and : 15.9. DNS and WINS X.500 directory system vs. : 15.8. DNS Versus X.500 DNS client : 6.1.4. The nameserver Directive DNS NOTIFY 3.1.