By Cricket Liu & Paul Albitz; ISBN 1−56592−512−2, 502 pages.
Third Edition, September 1998.
(See the catalog page for this book.)
Search the text of DNS & BIND.
Index
Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Table of Contents
Preface
Chapter 1: Background
Chapter 2: How Does DNS Work?
Chapter 3: Where Do I Start?
Chapter 4: Setting Up BIND
Chapter 5: DNS and Electronic Mail
Chapter 6: Configuring Hosts
Chapter 7: Maintaining BIND
Chapter 8: Growing Your Domain
Chapter 9: Parenting
Chapter 10: Advanced Features and Security
Chapter 11: nslookup
Chapter 12: Reading BIND Debugging Output
Chapter 13: Troubleshooting DNS and BIND
Chapter 14: Programming with the Resolver and Name Server Library Routines
Chapter 15: Miscellaneous
Appendix A: DNS Message Format and Resource Records
Appendix B: Compiling and Installing BIND on a Sun
Appendix C: Top−Level Domains
Appendix D: Domain Registration Form
Appendix E: in−addr.arpa Registration Form
Appendix F: BIND Name Server and Resolver Statements
Copyright © 1999 O'Reilly & Associates. All Rights Reserved.
DNS & BIND

for comments : F.2.4. ; and # (4.9.3 and later versions)
; (semicolon) for comments
6.1.7. Comments
A.1. Master File Format
; (semicolon) for comments : 4.3. Setting Up a BIND Configuration File
/* */ comments : 4.3. Setting Up a BIND Configuration File
// comments : 4.3. Setting Up a BIND Configuration File
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]
DNS & BIND
Index: Symbols and Numbers 2
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: A
A records
4.2.1. The db Files
4.2.5. Address and Alias Records
A.1.2.1. A address
queries statistic : 7.6.2. Understanding the BIND Statistics
aa (authoritative answer) bit : 9.6. Good Parenting
AAAA records : 15.7.5. IPv6 Addresses
abbreviations in db files : 4.4. Abbreviations
ABRT signal
7.1. BIND Name Server Signals
7.6.2. Understanding the BIND Statistics
access
to name servers : (see resolvers)
rlogin and rsh fail access check : 13.6.5. rlogin and rsh to Host Fails Access Check
to services, denied : 13.6.6. Access to Services Denied
acl statement

6.1.4. The nameserver Directive
mapping names to : 4.2.5. Address and Alias Records
mapping to names
2.6.4. Mapping Addresses to Names
4.2.6. PTR Records
in MX records : 5.3. The MX Algorithm
no PTR data for
11.7.3. No PTR Data for Name Server's Address
13.3.4. 4. Added Name to Database File, but Forgot to Add PTR Record
queries statistic : 7.6.2. Understanding the BIND Statistics
registering network numbers : 3.2.3. Checking That Your Network Is Registered
searching for : 3.1.2. Finding IP Addresses
shuffle address records : 10.12. Load Sharing Between Mirrored Servers
sorting
4.2.5. Address and Alias Records
10.5. Name Server Address Sorting
10.5.4. Multiple Sortlist Entries
X.121 : 15.7.3. X25, ISDN, and RT
zero address : 6.1.4. The nameserver Directive
administration
Audience
7.6. Keeping Everything Running Smoothly
(see also updating)
avoiding bogus name servers : 10.10. Avoiding a Bogus Name Server
capacity planning : 8.1.2. Capacity Planning
checking delegation
9.6. Good Parenting
9.6.2. Managing Delegation
13.3.10. 10. Incorrect Subdomain Delegation
common tasks with nslookup : 11.5. Common Tasks

determining : 15.1.6. Finding Out a Host's Aliases
looking up : 15.1.5. Looking Up CNAMEs
multiple : 15.1.4. Multiple CNAME Records
in MX records : 5.3. The MX Algorithm
to other aliases : 15.1.2. CNAMEs Pointing to CNAMEs
transition to subdomains : 9.7. Managing the Transition to Subdomains
allow−query substatement : 10.11.2. Restricting Queries
allow−transfer substatement : 10.11.3. Preventing Unauthorized Zone Transfers
allow−update substatement (nsupdate) : 10.3. DNS Dynamic Update
Andrew File System (AFS)
15.7.2. AFSDB
A.1.3.1. AFSDB Andrew File System Data Base − experimental
anonymous ftp : 13.3.4. 4. Added Name to Database File, but Forgot to Add PTR Record
answer section, DNS packet
11.6.1. Seeing the Query and Response Packets
13.2.2. How to Read a Database Dump
14.2.1. DNS Packet Format
A.3.2. Answer, Authority, and Additional Section Format
ANY queries statistic : 7.6.2. Understanding the BIND Statistics
APNIC registry : 3.2.3. Checking That Your Network Is Registered
appending origin : 4.4.1. Appending Domains
application gateways : 15.4.1.2. Application gateways
ARIN registry
3.2.3. Checking That Your Network Is Registered
E. in−addr.arpa Registration Form
arpa domain
2.2.1. Top−Level Domains
9.4.5. Delegating an in−addr.arpa Zone
ARPAnet : 1. Background
asterisk (*) wildcard : 15.2. Wildcards

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: B
backups
battery power : 8.5.2. Recommendations
name servers
6.1.4. The nameserver Directive
6.2.2. Local Name Server
serial number and
7.2.3. Starting Over with a New Serial Number
7.6.1. Common Syslog Messages
zone data : 4.8.2. Backup Files
zone transfers and : 7.6.1. Common Syslog Messages
bastion host : 15.4.6.1. The bastion host
BIND (Berkeley Internet Name Domain)
compiling and installing : B. Compiling and Installing BIND on a Sun
configuration file : (see boot file)
directives and resolvers (list) : F.1. BIND Name Server Boot File Statements
firewalls and : 15.4. DNS and Internet Firewalls
history of : 1.4. The History of BIND
name server maintainence : 7. Maintaining BIND
logging (BIND 8) : 7.5. BIND 8 Logging
monitoring name servers : 7.6. Keeping Everything Running Smoothly
organizing db files : 7.3. Organizing Your Files
updating db files : 7.2. Updating db Files
name server signals : 7.1. BIND Name Server Signals
obtaining source code
3.1. Getting BIND
B.1. Get the Source Code
resources for : 3.1.1. Handy Mailing Lists and Usenet Newsgroups
running as non−root user : 10.11.4. Running BIND as a Non−Root User

BSD UNIX operating system : 1.1. A (Very) Brief History of the Internet
bstat utility : 7.6.2. Understanding the BIND Statistics
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]
DNS & BIND
Index: B 8
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: C
C programming
14.2. C Programming with the Resolver Library Routines
14.3.6. A Perl Version of check_soa
C−style and C++−style comments : 4.3. Setting Up a BIND Configuration File
cache directive
15.4.4.4. The db.root file
F.1.4. cache
caching
2.7. Caching
2.7.1. Time to Live
caching−only name servers
8.2.2. Caching−Only Servers
8.3. Registering Name Servers
cleaning interval : 10.4.3.1. Cleaning interval
corrupted
13.6.8. Name Server Keeps Loading Old Data
13.6.8.4. What have I got?
forwarders and : 10.7. Building Up a Large Site−wide Cache with Forwarders
missing cache data : 13.3.7. 7. Missing Cache Data
negative
12.4. The Resolver Search Algorithm and Negative Caching

check_soa program (example)
14.2.8. A Sample Program: check_soa
14.3.6. A Perl Version of check_soa
checking
delegation
9.6. Good Parenting
9.6.2. Managing Delegation
13.3.9. 9. Missing Subdomain Delegation
host names : 4.5. Host Name Checking (BIND 4.9.4 and Later Versions)
zone (debugging example) : 12.3.4. A Slave Name Server Checking Its Zone (Debug Level 1)
children : (see parenting)
chroot command : 10.11.4. Running BIND as a Non−Root User
CIDR (classless inter−domain routing) : 3.2.3. Checking That Your Network Is Registered
city−level domains : 3.2.2.1. The us domain
class A and B networks, subnetting : 9.5.2.1. Class A and B networks
class C networks, subnetting : 9.5.2.2. /24 (class C−sized) networks
CLASS fields (db files) : A.1.5. Classes
classes : A.1.5. Classes
class option, nslookup : 11.3. Option Settings
internet : 2.1.3. Resource Records
unusual : 7.6.1. Common Syslog Messages
classless inter−domain routing (CIDR) : 3.2.3. Checking That Your Network Is Registered
cleaning interval : 10.4.3.1. Cleaning interval
closest known name servers : 2.6.2. Recursion
cname data category (logging) : 7.5.3. Category Details
CNAME records
4.2.1. The db Files
4.2.5. Address and Alias Records
7.6.1. Common Syslog Messages
15.1. Using CNAME Records

9.6. Good Parenting
9.6.2. Managing Delegation
channels (logging) : 7.5. BIND 8 Logging
dialup connections : 15.5. Dialup Connections
firewalls : 15.4. DNS and Internet Firewalls
hosts to use DNS : 6. Configuring Hosts
consequences of : 6.3. Minimizing Pain and Suffering
vendor−specific differences : 6.4. Vendor−Specific Options
name servers : 6.1.4.1. One name server configured
resolvers
6.2. Sample Resolver Configurations
9.4.2. Creating and Delegating a Subdomain
vendor−specific : 6.4.10. Windows NT
connectivity
5.2. What's a Mail Exchanger, Again?
8.1.1. Where Do I Put My Name Servers?
13.3.3. 3. Slave Server Can't Load Zone Data
dialup connections : 15.5. Dialup Connections
loss of : 13.3.8. 8. Loss of Network Connectivity
consistency in domain naming
1.2.1. The History of the Domain Name System
2.4. Name Servers and Zones
core size limit : 10.4.2.3. Changing the core size limit
cost of registering domains : 3.2.4. Registering with Your Parent
CPU load : 8.1.2. Capacity Planning
creating : (see adding)
credibility measures : 13.2.2. How to Read a Database Dump
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]

shortcuts (abbreviations) : 4.4. Abbreviations
syntax errors in : 13.3.5. 5. Syntax Error in the Conf File or DNS Database File
updating : 7.2. Updating db Files
db.cache file, updating : 7.2.6. Keeping db.cache Current
db.root file : 15.4.4.4. The db.root file
debug option (nslookup)
11.3. Option Settings
11.6.1. Seeing the Query and Response Packets
debug severity level (logging) : 7.5. BIND 8 Logging
debug substatement
6.1.6. The options Directive
F.2.7. options debug (4.9.3 and later versions)
debugging
8.1.2. Capacity Planning
12. Reading BIND Debugging Output
interpreting output : 12.3. Reading Debugging Output
DNS & BIND
Index: D 12
levels of : 12.1. Debugging Levels
named−xfer program : 13.2.1. How to Use named−xfer
nslookup and : 11.3. Option Settings
resolver
6.1.6. The options Directive
14.2.5. The _res Structure
turning on : 12.2. Turning On Debugging
decimal serial numbers : 7.2.2. SOA Serial Numbers
default data category (logging)
7.5. BIND 8 Logging
7.5.3. Category Details
default domain

aliases : 9.7.1. Removing Parent Aliases
hosts : 7.2.1. Adding and Deleting Hosts
/dev/null file : 10.11.4. Running BIND as a Non−Root User
dial−on−demand connections : 15.5.2. Dial−on−Demand
dialup connections
6.4.9. Windows 95
15.5. Dialup Connections
dig utility : 7.2.6. Keeping db.cache Current
Digital UNIX : 6.4.5. Digital's Digital UNIX
DNS & BIND
Index: D 13
directives
6.1.8. A Note on the 4.9 Resolver Directives
(see also under specific directive)
list of : F.1. BIND Name Server Boot File Statements
resolver
6.1. The Resolver
6.1.8. A Note on the 4.9 Resolver Directives
directories, organizing db files in : 7.3.1. Using Several Directories
directory directive : F.1. BIND Name Server Boot File Statements
disabled UDP checksums : 13.5.5. Name Server Startup Fails Because UDP Checksums Disabled
disasters, preventing and handling : 8.5. Planning for Disasters
distfile file : 8.2.1. Primary Master and Slave Servers
dname parameter (res_search) : 14.2.4. The Resolver Library Routines
DNS (Domain Name System)
configuring hosts for : 6. Configuring Hosts
consequences of : 6.3. Minimizing Pain and Suffering
database files : (see db files)
disasters : 8.5. Planning for Disasters
documentation on : Preface

2.2.1. Top−Level Domains
shadow namespace : 15.4.6. A Shadow Namespace
DNS & BIND
Index: D 14
visibility of : 15.4.6. A Shadow Namespace
Domain Name System : (see DNS)
domain names
1.3. The Domain Name System, in a Nutshell
2.1.1. Domain Names
A.4.1.1. Domain name
abbreviations : 4.4. Abbreviations
aliases : (see aliases)
checking host names : 4.5. Host Name Checking (BIND 4.9.4 and Later Versions)
choosing
3.2. Choosing a Domain Name
9.3. What to Name Your Children
collisions : 1.2.1. The History of the Domain Name System
compressing/expanding
14.2.3. Domain Name Compression
14.2.6. The Name Server Library Routines
consistency of
1.2.1. The History of the Domain Name System
2.4. Name Servers and Zones
fully qualified (FQDNs)
2.1.1. Domain Names
6.1.2. The Search List
geographic : (see geographic domain names)
how to read : 2.2.3. Reading Domain Names
local, can't be looked up : 13.6.1. Local Name Can't Be Looked Up
mail exchangers

4.7.3.1. Initialize the default domain name
6.1.1. The Default Domain
11.3. Option Settings
13.3.12. 12. Default Domain Not Set
delegating
2.3. Delegation
2.4.1. Delegating Domains
13.3.9. 9. Missing Subdomain Delegation
15.4.4.3. in−addr.arpa delegation
old information : 13.6.8.1. Old delegation information
email to specific : 15.4.4.8. Mail to specific Internet domains
getting information on
3.2.1. Where in the World Do I Fit?
3.2.2.1. The us domain
in−addr.arpa
3.2.4. Registering with Your Parent
15.4.4.3. in−addr.arpa delegation
E. in−addr.arpa Registration Form
delegating : 9.4.5. Delegating an in−addr.arpa Zone
incorrect delegation : 13.6.5. rlogin and rsh to Host Fails Access Check
subdomains of : 9.5. Subdomains of in−addr.arpa Domains
international : (see geographic domain names)
levels of : 2.1.2. Domains
non−U.S. : 2.2.2. Further Down
"nonexistent domain" message : 11.7.3. No PTR Data for Name Server's Address
parenting : 9. Parenting
checking delegation : 9.6. Good Parenting
creating subdomains : 9.4. How to Become a Parent: Creating Subdomains
managing transition to subdomains : 9.7. Managing the Transition to Subdomains
naming subdomains : 9.3. What to Name Your Children

4.2.3. SOA Records
4.4.1. Appending Domains
13.3.6. 6. Missing Dot at the End of a Name in a DNS Database File
A.1. Master File Format
dotted−octet representation : 2.6.4. Mapping Addresses to Names
dump, database : 13.2.2. How to Read a Database Dump
DUN (Dial−Up Networking)
6.4.9. Windows 95
15.5. Dialup Connections
Dunlap, Kevin : 1.4. The History of BIND
duplicate queries : 7.6.2. Understanding the BIND Statistics
dynamic update facility : 10.3. DNS Dynamic Update
Dynamic Update standard : 3.1. Getting BIND
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]
DNS & BIND
Index: D 17
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: E
edu domain : 2.2.1. Top−Level Domains
electronic mail : 5. DNS and Electronic Mail
administrator's address : 4.2.3. SOA Records
DNS and : 6.3.2. Electronic Mail
mail exchangers
5.1. MX Records
5.2. What's a Mail Exchanger, Again?
MX records : 5.1. MX Records
routing loops : 5.3. The MX Algorithm
from within firewalls : 15.4.4.7. Mail from internal hosts to the Internet

exhaustive database search : (see inverse queries)
expanding domain name : 14.2.6. The Name Server Library Routines
DNS & BIND
Index: E 18
expire value
4.8.4. SOA Values
8.4.1. Changing Other SOA Values
expiring cached data
2.7.1. Time to Live
4.2.9. The Root Cache Data
4.8.4. SOA Values
changing TTL : 8.4. Changing TTLs
load sharing and : 10.12. Load Sharing Between Mirrored Servers
exports file : 6.3.1. Differences in Service Behavior
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]
DNS & BIND
Index: E 19
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: F
fake−iquery substatement : F.1.10.5. options fake−iquery
fetch−glue substatement
10.9. A Nonrecursive Name Server
10.11.5. Delegated Name Server Configuration
file channels (logging) : 7.5.2.1. File channels
file descriptors
7.6.1. Common Syslog Messages
12.3.1. Name Server Startup (Debug Level 1)
filtering packets (firewalls) : 15.4.1.1. Packet filters

gateways : 15.4.1.2. Application gateways
gcc compiler settings for BIND : B.3. Use the Proper Compiler Settings
generic top−level domains
2.2.1. Top−Level Domains
3.2.2.2. The generic top−level domains
geographic domain names
2.2.2. Further Down
3.2.1. Where in the World Do I Fit?
choosing : 3.2.1. Where in the World Do I Fit?
list of : C. Top−Level Domains
global positioning : 15.7.4. Location
glue records
9.4.4. On the movie.edu Primary Master
13.6.8.2. Unnecessary glue data
gov domain : 2.2.1. Top−Level Domains
gTLDs (generic top−level domains)
2.2.1. Top−Level Domains
3.2.2.2. The generic top−level domains
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.
[ Library Home | DNS & BIND | TCP/IP | sendmail | sendmail Reference | Firewalls | Practical Security ]
DNS & BIND
Index: G 21
Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z
Index: H
h2n utility
4.6. Tools
7.2.5. Generating the BIND Database from the Host Tables
13.3.1. 1. Forgot to Increment Serial Number
h_errno variable : 14.2.4. The Resolver Library Routines

consequences of : 6.3. Minimizing Pain and Suffering
vendor−specific UNIX systems : 6.4. Vendor−Specific Options
CPU load on : 8.1.2. Capacity Planning
determining aliases of : 15.1.6. Finding Out a Host's Aliases
disambiguating : 6.3.3. Updating .rhosts, hosts.equiv, etc.
generating db files : (see h2n utility)
information records : (see HINFO records)
DNS & BIND
Index: H 22
mail exchangers
5.1. MX Records
5.2. What's a Mail Exchanger, Again?
multihomed
4.2.4. NS Records
4.2.5. Address and Alias Records
10.5. Name Server Address Sorting
name checking : 4.5. Host Name Checking (BIND 4.9.4 and Later Versions)
network interface interval : 10.4.3.2. Interface interval
statistics for : 7.6.2. Understanding the BIND Statistics
hosts file
empty : 6.4.1.3. Ignoring NIS
power outages and : 8.6.2. Longer Outages (Days)
hosts.equiv file : 6.3.3. Updating .rhosts, hosts.equiv, etc.
HOSTS.TXT file
1.2.1. The History of the Domain Name System
15.6. Network Names and Numbers
HP−UX : 6.4.3. HP's HP−UX
HS (Hesiod) class : 2.1.3. Resource Records
HUP signal
7.1. BIND Name Server Signals

initializing
default domain : 4.7.3.1. Initialize the default domain name
name server (debugging example) : 12.3.1. Name Server Startup (Debug Level 1)
insist data category (logging) : 7.5.3. Category Details
installing BIND : B. Compiling and Installing BIND on a Sun
int domain : 2.2.1. Top−Level Domains
INT signal
7.1. BIND Name Server Signals
13.2.2. How to Read a Database Dump
integer serial numbers : 7.2.2. SOA Serial Numbers
Integrated Services Digital Network (ISDN) : 15.7.3. X25, ISDN, and RT
interactive nslookup : 11.2. Interactive Versus Noninteractive
interface interval : 10.4.3.2. Interface interval
internal root servers : 15.4.4. Internal Roots
internationalization : 2.2.1. Top−Level Domains
geographic domain names
2.2.2. Further Down
3.2.1. Where in the World Do I Fit?
choosing : 3.2.1. Where in the World Do I Fit?
list of : C. Top−Level Domains
DNS & BIND
Index: I 24
Internet
dialup connections
6.4.9. Windows 95
15.5. Dialup Connections
domain name space
2.2. The Internet Domain Name Space
2.2.1. Top−Level Domains
firewalls : 15.4. DNS and Internet Firewalls