From 4ef23ce6957fc75fc005885496d605fed48213e1 Mon Sep 17 00:00:00 2001 From: peter Date: Tue, 30 Nov 1999 02:43:11 +0000 Subject: Import bind v8.2.2.p5, minus the crypto for the time being. The bind package does have BXA export approval, but the licensing strings on the dnssafe code are a bit unpleasant. The crypto is easy to restore and bind will run without it - just without full dnssec support. Obtained from: The Internet Software Consortium (www.isc.org) --- contrib/bind/doc/bog/00title.me | 7 +- contrib/bind/doc/bog/ack.me | 6 +- contrib/bind/doc/html/acl.html | 6 +- contrib/bind/doc/html/address_list.html | 53 +- contrib/bind/doc/html/comments.html | 6 +- contrib/bind/doc/html/config.html | 30 +- contrib/bind/doc/html/controls.html | 70 + contrib/bind/doc/html/docdef.html | 18 +- contrib/bind/doc/html/example.html | 18 +- contrib/bind/doc/html/include.html | 26 +- contrib/bind/doc/html/index.html | 4 +- contrib/bind/doc/html/key.html | 27 +- contrib/bind/doc/html/logging.html | 61 +- contrib/bind/doc/html/master.html | 166 +++ contrib/bind/doc/html/options.html | 391 ++++- contrib/bind/doc/html/server.html | 17 +- contrib/bind/doc/html/trusted-keys.html | 58 + contrib/bind/doc/html/zone.html | 140 +- contrib/bind/doc/man/Makefile | 66 +- contrib/bind/doc/man/dig.1 | 5 +- contrib/bind/doc/man/dnskeygen.1 | 231 ++- contrib/bind/doc/man/dnsquery.1 | 4 +- contrib/bind/doc/man/getaddrinfo.3 | 361 +++++ contrib/bind/doc/man/getipnodebyname.3 | 231 +++ contrib/bind/doc/man/getnameinfo.3 | 103 ++ contrib/bind/doc/man/getnetent.3 | 4 +- contrib/bind/doc/man/hesiod.3 | 129 ++ contrib/bind/doc/man/inet_cidr.3 | 94 ++ contrib/bind/doc/man/irs.conf.5 | 10 +- contrib/bind/doc/man/named-bootconf.8 | 70 + contrib/bind/doc/man/named-xfer.8 | 42 +- contrib/bind/doc/man/named.8 | 25 +- contrib/bind/doc/man/named.conf.5 | 2355 +++++++++++++++++++++++++++++++ contrib/bind/doc/man/ndc.8 | 251 ++-- contrib/bind/doc/man/nsupdate.8 | 214 +++ contrib/bind/doc/man/resolver.3 | 337 ++++- contrib/bind/doc/man/resolver.5 | 47 +- contrib/bind/doc/man/tsig.3 | 240 ++++ contrib/bind/doc/notes/data | 51 + contrib/bind/doc/notes/db_names.c | 184 +++ contrib/bind/doc/notes/irp.txt | 521 +++++++ 41 files changed, 6202 insertions(+), 477 deletions(-) create mode 100644 contrib/bind/doc/html/controls.html create mode 100644 contrib/bind/doc/html/master.html create mode 100644 contrib/bind/doc/html/trusted-keys.html create mode 100644 contrib/bind/doc/man/getaddrinfo.3 create mode 100644 contrib/bind/doc/man/getipnodebyname.3 create mode 100644 contrib/bind/doc/man/getnameinfo.3 create mode 100644 contrib/bind/doc/man/hesiod.3 create mode 100644 contrib/bind/doc/man/inet_cidr.3 create mode 100644 contrib/bind/doc/man/named-bootconf.8 create mode 100644 contrib/bind/doc/man/named.conf.5 create mode 100644 contrib/bind/doc/man/nsupdate.8 create mode 100644 contrib/bind/doc/man/tsig.3 create mode 100644 contrib/bind/doc/notes/data create mode 100644 contrib/bind/doc/notes/db_names.c create mode 100644 contrib/bind/doc/notes/irp.txt (limited to 'contrib/bind/doc') diff --git a/contrib/bind/doc/bog/00title.me b/contrib/bind/doc/bog/00title.me index be95d8b..5048969 100644 --- a/contrib/bind/doc/bog/00title.me +++ b/contrib/bind/doc/bog/00title.me @@ -1,5 +1,3 @@ -.\" ++Copyright++ 1986, 1988 -.\" - .\" Copyright (c) 1986, 1988 .\" The Regents of the University of California. All rights reserved. .\" @@ -30,7 +28,7 @@ .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. -.\" - +.\" .\" Portions Copyright (c) 1993 by Digital Equipment Corporation. .\" .\" Permission to use, copy, modify, and distribute this software for any @@ -48,9 +46,6 @@ .\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS .\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS .\" SOFTWARE. -.\" - -.\" --Copyright-- -.\" .+c .(l C .sz 14 diff --git a/contrib/bind/doc/bog/ack.me b/contrib/bind/doc/bog/ack.me index 5c02c14..c9d7d85 100644 --- a/contrib/bind/doc/bog/ack.me +++ b/contrib/bind/doc/bog/ack.me @@ -1,5 +1,3 @@ -.\" ++Copyright++ 1986, 1988 -.\" - .\" Copyright (c) 1986, 1988 .\" The Regents of the University of California. All rights reserved. .\" @@ -30,7 +28,7 @@ .\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. -.\" - +.\" .\" Portions Copyright (c) 1993 by Digital Equipment Corporation. .\" .\" Permission to use, copy, modify, and distribute this software for any @@ -48,8 +46,6 @@ .\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS .\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS .\" SOFTWARE. -.\" - -.\" --Copyright-- .\" .\" @(#)ack.me .\" diff --git a/contrib/bind/doc/html/acl.html b/contrib/bind/doc/html/acl.html index cf684b4..57cf869 100644 --- a/contrib/bind/doc/html/acl.html +++ b/contrib/bind/doc/html/acl.html @@ -52,12 +52,12 @@ Allows any host on a network for which the system has an interface.

[ BIND Config. File -| BIND Home -| ISC ]

+| BIND Home +| ISC ]

-Last Updated: $Id: acl.html,v 1.4 1998/03/21 01:03:10 halley Exp $ +Last Updated: $Id: acl.html,v 1.5 1999/09/15 20:28:00 cyarnell Exp $
diff --git a/contrib/bind/doc/html/address_list.html b/contrib/bind/doc/html/address_list.html index 894ef04..ec39138 100644 --- a/contrib/bind/doc/html/address_list.html +++ b/contrib/bind/doc/html/address_list.html @@ -14,14 +14,18 @@ 
 address_match_list    = 1*address_match_element
 
-address_match_element = [ "!" ] (ip_address / ip_prefix / acl_name / address_match_list) ";"
+address_match_element = [ "!" ] (address_match_list / ip_address / ip_prefix / acl_name / "key" key_id) ";"

Definition and Usage

 -

Address match lists are lists of elements. The elements can be any +

Address match lists are primarily used to determine access control for +various server operations. They are also used to define priorities +for querying other nameservers and to set the addresses on which +named will listen for queries. +The elements which constitute an address match list can be any of the following:

-

The ACLs "any", "none", "localhost" and "localnets" are -predefined. More information can be found in the description of the -acl statement. +

Elements can be negated with a leading exclamation mark ("!"), and +the match list names "any", "none", "localhost" and "localnets" are +predefined. More information on those names can be found in the +description of the acl statement. -

Elements can be negated with a leading "!". +

The addition of the key +clause made the name of this syntactic element something of a +misnomer, since security keys can be used to validate access without +regard to a host or network address. Nonetheless, the term "address +match list" is still used throughout the documentation.

When a given IP address or prefix is compared to an address match -list, the list is traversed in order and the first match (regardless -of negation) is used. The interpretation of a match depends on -whether the list is being used for access control or as a -topology.

+list, the list is traversed in order until an element matches. The +interpretation of a match depends on whether the list is being used +for access control, defining listen-on ports, or as a +topology, and whether the element was negated.

When used as an access control list, a non-negated match allows access and a negated match denies access. If there is no match, access is denied. The clauses allow-query, -allow-transfer and allow-update all use -address match lists like this. Similarly, the listen-on -clause can use negation to define local addresses which should not be -used to accept nameserver connections.

+allow-transfer, allow-update and +blackhole all use address match lists like this. +Similarly, the listen-on +option will cause the server to not accept queries on any of the +machine's addresses which do not match the list.

When used with the topology clause, a non-negated -match returns a distance based on its postion on the list (the closer +match returns a distance based on its position on the list (the closer the match is to the start of the list, the shorter the distance is between it and the server). A negated match will be assigned the maximum distance from the server. If there is no match, the address @@ -76,12 +89,12 @@ fall through.

[ BIND Config. File -| BIND Home -| ISC ]

+| BIND Home +| ISC ]

-Last Updated: $Id: address_list.html,v 1.5 1998/03/21 01:03:10 halley Exp $ +Last Updated: $Id: address_list.html,v 1.8 1999/09/15 20:28:00 cyarnell Exp $
diff --git a/contrib/bind/doc/html/comments.html b/contrib/bind/doc/html/comments.html index 8ada6b0..a064c1c 100644 --- a/contrib/bind/doc/html/comments.html +++ b/contrib/bind/doc/html/comments.html @@ -73,12 +73,12 @@ statement.

[ BIND Config. File -| BIND Home -| ISC ]

+| BIND Home +| ISC ]

-Last Updated: $Id: comments.html,v 1.4 1998/03/21 01:03:11 halley Exp $ +Last Updated: $Id: comments.html,v 1.5 1999/09/15 20:28:00 cyarnell Exp $
diff --git a/contrib/bind/doc/html/config.html b/contrib/bind/doc/html/config.html index dd8e0b4..97f3a1b 100644 --- a/contrib/bind/doc/html/config.html +++ b/contrib/bind/doc/html/config.html @@ -47,13 +47,22 @@ specifies what the server logs, and where the log messages are sent
options
-controls global server configuation options and sets defaults for other +controls global server configuration options and sets defaults for other statements +
controls +
+declares control channels to be used by the ndc utility +
server
sets certain configuration options on a per-server basis +
trusted-keys +
+defines DNSSEC keys that are preconfigured into the server and implicitly +trusted +
zone
defines a zone @@ -62,22 +71,27 @@ defines a zone

The logging and options statements may only occur once per configuration. -

Comments

+

Comments

+ +The BIND 8 comment syntax allows for +comments to appear anywhere that whitespace may appear in a BIND +configuration file. To appeal to programmers of all kinds, they can +be written in C, C++, or shell/perl constructs.

Converting from BIND 4.9.x

-

BIND 4.9.x configuration files can be converted to the new format -by using src/bin/named/named-bootconf.pl, a perl script that -is part of the BIND 8.1 source kit. +

BIND 4.9.x configuration files can be converted to the new format by +using src/bin/named/named-bootconf, a shell script that is part of +the BIND 8.2.x source kits.

-

[ BIND Home -| ISC ]

+

[ BIND Home +| ISC ]

-Last Updated: $Id: config.html,v 1.4 1998/03/21 01:03:11 halley Exp $ +Last Updated: $Id: config.html,v 1.10 1999/09/15 20:28:01 cyarnell Exp $
diff --git a/contrib/bind/doc/html/controls.html b/contrib/bind/doc/html/controls.html new file mode 100644 index 0000000..9261926 --- /dev/null +++ b/contrib/bind/doc/html/controls.html @@ -0,0 +1,70 @@ + + + + BIND controls Statement + + + +

BIND Configuration File Guide--controls Statement

+ +
+ +

Syntax

 + +
+controls {
+  [ inet ip_addr
+    port ip_port
+    allow { address_match_list; }; ]
+  [ unix path_name
+    perm number
+    owner number
+    group number; ]
+};
+
+ +
+ +

Definition and Usage

 + +

The controls statement declares control channels +to be used by system +administrators to affect the operation of the local name server. These +control channels are used by the ndc utility to send commands +to and retrieve non-DNS results from a name server.

+ +

A unix control channel is a FIFO in the file system, +and access to it is +controlled by normal file system permissions. +It is created by named with the specified file mode bits (see +the chmod(1) manual page), user and group owner. +Note that, unlike chmod, the mode bits specified for +perm will normally have a leading 0 so the number +is interpreted as octal. Also note that the user and group +ownership specified as owner and group +must be given as numbers, not names. +It is recommended that the +permissions be restricted to administrative personnel only, or else any +user on the system might be able to manage the local name server.

+ +

An inet control channel is a TCP/IP socket accessible +to the Internet, created at the specified ip_port on the +specified ip_addr. +Modern telnet clients are capable of speaking directly to these +sockets, and the control protocol is ARPAnet-style text. It is recommended +that 127.0.0.1 be the only ip_addr used, and this only if you +trust all non-privileged users on the local host to manage your name +server.

+ +
+ +

[ BIND Config. File +| BIND Home +| ISC ]

+ +
+
+Last Updated: $Id: controls.html,v 1.4 1999/09/15 20:28:01 cyarnell Exp $ +
+ + diff --git a/contrib/bind/doc/html/docdef.html b/contrib/bind/doc/html/docdef.html index da0c9d5..0885c1f 100644 --- a/contrib/bind/doc/html/docdef.html +++ b/contrib/bind/doc/html/docdef.html @@ -23,8 +23,8 @@ as defined by the acl statement.
address_match_list
-A list of one or more ip_address, ip_prefix or -acl_name elements, as described in the +A list of one or more ip_address, ip_prefix +key_id or acl_name elements, as described in the Address Match Lists section.
dotted-decimal @@ -52,7 +52,8 @@ An IP address in with exactly four elements in
An IP port number. number is limited to 0 through 65535, with values below 1024 typically restricted to -root-owned processes. +root-owned processes. In some cases an asterisk (``*'') character +can be used as a placeholder to select a random high-numbered port.
ip_prefix
@@ -62,6 +63,11 @@ the network 127.0.0.0 with netmask 255.0.0.0. 1.2.3.0/24 is network 1.2.3.0 with netmask 255.255.255.0. +
key_id +
+A string representing the name of a shared key, to be used for transaction +security. +
number
A non-negative integer with an entire range limited by the range of a @@ -101,12 +107,12 @@ numbers 1 and 0.

[ BIND Config. File -| BIND Home -| ISC ]

+| BIND Home +| ISC ]

-Last Updated: $Id: docdef.html,v 1.4 1998/03/21 01:03:12 halley Exp $ +Last Updated: $Id: docdef.html,v 1.8 1999/09/15 20:28:01 cyarnell Exp $
diff --git a/contrib/bind/doc/html/example.html b/contrib/bind/doc/html/example.html index 729b980..a147828 100644 --- a/contrib/bind/doc/html/example.html +++ b/contrib/bind/doc/html/example.html @@ -15,13 +15,18 @@ * A simple BIND 8 configuration */ +logging { + category lame-servers { null; }; + category cname { null; }; +}; + options { directory "/var/named"; }; -logging { - category lame-servers { null; }; - category cname { null; }; +controls { + inet * port 52 allow { localnets; }; // a BAD idea + unix "/var/run/ndc" perm 0600 owner 0 group 0; // the default }; zone "isc.org" in { @@ -42,18 +47,19 @@ zone "." in { zone "0.0.127.in-addr.arpa" in { type master; + notify no; file "master/127.0.0"; };
-

[ BIND Home -| ISC ]

+

[ BIND Home +| ISC ]

-Last Updated: $Id: example.html,v 1.1 1997/05/06 22:11:31 vixie Exp $ +Last Updated: $Id: example.html,v 1.5 1999/09/15 20:28:01 cyarnell Exp $
diff --git a/contrib/bind/doc/html/include.html b/contrib/bind/doc/html/include.html index 4184210..421d97b 100644 --- a/contrib/bind/doc/html/include.html +++ b/contrib/bind/doc/html/include.html @@ -11,7 +11,9 @@

Syntax

 -

include path_name;

+
+include path_name;
+
@@ -20,16 +22,18 @@

The include statement inserts the specified file at the point that the include statement is encountered. It cannot be used within another statement, though, so a line such as -acl internal_hosts { "include internal_hosts.acl" } is -not allowed.

+
+acl internal_hosts { include "internal_hosts.acl"; };
+
+is not allowed.

Use include to break the configuration up into -easily-managed chunks. For example:

+easily-managed chunks. For example: - +
+include "/etc/security/keys.bind";
+include "/etc/acls.bind";
+

could be used at the top of a BIND configuration file in order to include any ACL or key information.

@@ -42,12 +46,12 @@ comment.

[ BIND Config. File -| BIND Home -| ISC ]

+| BIND Home +| ISC ]

-Last Updated: $Id: include.html,v 1.5 1998/03/21 01:03:12 halley Exp $ +Last Updated: $Id: include.html,v 1.7 1999/09/15 20:28:01 cyarnell Exp $
diff --git a/contrib/bind/doc/html/index.html b/contrib/bind/doc/html/index.html index ca8c73c..f19464b 100644 --- a/contrib/bind/doc/html/index.html +++ b/contrib/bind/doc/html/index.html @@ -26,6 +26,8 @@ updates that may be specified on a zone-by-zone basis

Configuration File Guide

+

Master File Format

+

Kits