X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=chiark-utils.git;a=blobdiff_plain;f=scripts%2Fnamed-conf.8;h=450c4c4142e9773f800630876aae49f2ea34936c;hp=89833a1392e9a56e32d5f85529409e0c13c6e028;hb=02b64fd81edc8a7cd109eb9cdecc41eb48501735;hpb=d9b9590be406d6c7488d8140b9b7d22db12f3499 diff --git a/scripts/named-conf.8 b/scripts/named-conf.8 index 89833a1..450c4c4 100644 --- a/scripts/named-conf.8 +++ b/scripts/named-conf.8 @@ -45,6 +45,11 @@ no new configuration file for the nameserver will be made. .SS ADDITIONAL OPTIONS .TP +.BR \-A | \-\-all +Checks even zones known to be broken. Ie, ignores the +.B ? +zone style modifier in the configuration. +.TP \fB\-C\fP|\-\-config \fIconfig\-file\fP Use .I config\-file @@ -83,9 +88,10 @@ is to avoid gluelessness. .TP .BR \-l | \-\-local Only checks for mistakes which are the responsibility of the local -administrator. This means that for secondary and stealth zones we -only check that we're slaving from the right place. For primary zones -all checks are still done. It is a mistake to specify +administrator (to fix or get fixed). This means that for published +and stealth zones we only check that we're slaving from the right +place and that any names and addresses for ourself are right. For +primary zones all checks are still done. It is a mistake to specify .B \-l with foreign zones (zones supplied explictly on the command line but not relevant to the local server); doing so produces a warning. @@ -123,7 +129,7 @@ Equivalent to both with the same set of names. .TP \fBslave\-dir\fP \fIdirectory\fP [[\fIprefix\fP] \fIsuffix\fP] -Specifies the directory in which slave (secondary and stealth) +Specifies the directory in which slave (published and stealth) zonefiles should be placed. The default .I directory is @@ -169,14 +175,14 @@ directive. .SS ZONE DIRECTIVES These directives specify one or more zones. .TP -\fBprimary\fP \fIzone\fP \fIfilename\fP +.BR primary [ * | ? "] \fIzone filename\fP" Specifies that this server is supposed to be the primary nameserver for .I zone and that the zone data is to be found in .IR filename . .TP -\fBprimary-dir\fP \fIdirectory\fP [[\fIprefix\fP] \fIsuffix\fP] +.BR primary\-dir [ * | ? "] \fIdirectory\fP [[\fIprefix\fP] \fIsuffix\fP]" Search .I directory for files whose names match the glob pattern @@ -191,13 +197,30 @@ the default for .I prefix is empty. .TP -\fBsecondary\fP \fIzone\fP \fIorigin\-addr\fP -Specifies that this server is supposed to be a published secondary for -the zone in question. +.BR published [ * | ? "] \fIzone origin\-addr\fP" +Specifies that this server is supposed to be a published slave +nameserver for the zone in question. .TP -\fBstealth\fP \fIzone\fP \fIserver\-addr ...\fP +.BR stealth [ * | ? "] \fIzone server\-addr ...\fP" Specifies that this server is supposed to be an unpublished secondary (aka stealth secondary) for the zone in question. +.SS ZONE DIRECTIVE STYLE MODIFIERS +Each of the zone directives may optionally be followed by one of the +following characters: +.TP +.B * +Indicates that the zone is unofficial, ie that it is not delegated as +part of the global Internet DNS and that no attempt should be made to +find the superzone and check delegations. Note that unofficial, local +zones should be created with caution. They should be in parts of the +namespace which are reserved for private use, or belong to the actual +zone maintainer. +.TP +.B ? +Indicates that the zone is known to be broken and no checks should be +carried out on it, unless the +.B \-A +option is specified. .SS OTHER DIRECTIVES .TP \fBinclude\fP \fIfile\fP @@ -231,7 +254,7 @@ Our zone configuration: For .B primary zones, the SOA origin should be one of the names specified with .BR self\-soa " (or " self ). For -.B secondary +.B published zones, the address should be that of the SOA origin. For .B stealth zones, the address should be that of the SOA origin or one of the