From d16e5588cc8b427324f2536652258ec55152bc32 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Sun, 3 Apr 2005 03:32:07 +0000 Subject: [PATCH] regen --- bin/check/named-checkconf.html | 34 +- bin/check/named-checkzone.html | 138 +- bin/dig/dig.html | 506 ++--- bin/dig/host.html | 242 ++- bin/dig/nslookup.html | 124 +- bin/dnssec/dnssec-keygen.html | 194 +- bin/dnssec/dnssec-signzone.html | 264 ++- bin/named/lwresd.html | 198 +- bin/named/named.conf.html | 2220 ++++++++++++------- bin/named/named.html | 218 +- bin/nsupdate/nsupdate.html | 284 +-- bin/rndc/rndc-confgen.html | 146 +- bin/rndc/rndc.conf.html | 106 +- bin/rndc/rndc.html | 164 +- doc/arm/Bv9ARM.ch01.html | 60 +- doc/arm/Bv9ARM.ch02.html | 4 +- doc/arm/Bv9ARM.ch03.html | 354 +-- doc/arm/Bv9ARM.ch04.html | 132 +- doc/arm/Bv9ARM.ch05.html | 4 +- doc/arm/Bv9ARM.ch06.html | 2614 ++++++++++++++--------- doc/arm/Bv9ARM.ch07.html | 18 +- doc/arm/Bv9ARM.ch08.html | 4 +- doc/arm/Bv9ARM.ch09.html | 16 +- doc/arm/Bv9ARM.html | 4 +- lib/lwres/man/lwres.html | 22 +- lib/lwres/man/lwres_buffer.html | 102 +- lib/lwres/man/lwres_config.html | 38 +- lib/lwres/man/lwres_context.html | 94 +- lib/lwres/man/lwres_gabn.html | 54 +- lib/lwres/man/lwres_gai_strerror.html | 10 +- lib/lwres/man/lwres_getaddrinfo.html | 70 +- lib/lwres/man/lwres_gethostent.html | 98 +- lib/lwres/man/lwres_getipnode.html | 46 +- lib/lwres/man/lwres_getnameinfo.html | 38 +- lib/lwres/man/lwres_getrrsetbyname.html | 34 +- lib/lwres/man/lwres_gnba.html | 54 +- lib/lwres/man/lwres_hstrerror.html | 14 +- lib/lwres/man/lwres_inetntop.html | 30 +- lib/lwres/man/lwres_noop.html | 54 +- lib/lwres/man/lwres_packet.html | 34 +- lib/lwres/man/lwres_resutil.html | 62 +- 41 files changed, 5371 insertions(+), 3531 deletions(-) diff --git a/bin/check/named-checkconf.html b/bin/check/named-checkconf.html index 2f392cf759..88d75aaba9 100644 --- a/bin/check/named-checkconf.html +++ b/bin/check/named-checkconf.html @@ -15,16 +15,16 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + - + named-checkconfnamed-checkconf [ [-v] [-v] [-j] [-j] [-t -t directory] {filename} [directory] {filename} [-z-z]

-t -t directorydirectory

- + - + named-checkzonenamed-checkzone [ [-d] [-d] [-j] [-j] [-q] [-q] [-v] [-v] [-c -c class] [class] [-k -k mode] [mode] [-n -n mode] [mode] [-o -o filename] [filename] [-t -t directory] [directory] [-w -w directory] [directory] [-D] [-D] [-W -W modemode] {zonename} {filename}

-c -c classclass

-k -k modemode

-n -n modemode

-o -o filenamefilename

-t -t directorydirectory

-w -w directorydirectory

-W -W modemode

- + - + digdig [@server] [ [@server] [-b -b address] [address] [-c -c class] [class] [-f -f filename] [filename] [-k -k filename] [filename] [-p -p port#] [port#] [-t -t type] [type] [-x -x addr] [addr] [-y -y name:key] [name:key] [-4] [-4] [-6-6] [name] [type] [class] [queryopt...]

dig [ [-h-h]

is normally used with command-line arguments, it also has a batch mode of operation for reading lookup requests from a file. A brief summary of its command-line arguments -and options is printed when the -h-h option is given. Unlike earlier versions, the BIND9 implementation of is the name or IP address of the name server to query. This can be an IPv4 address in dotted-decimal notation or an IPv6 address in colon-delimited notation. When the supplied -serverserver argument is a hostname, dig resolves that name before querying that name -server. If no serverserver argument is provided,

indicates what type of query is required — ANY, A, MX, SIG, etc. -typetype can be any valid query type. If no -typetype argument is supplied,

OPTIONS

The The -b-b option sets the source IP address of the query -to addressaddress. This must be a valid address on one of the host's network interfaces or "0.0.0.0" or "::". An optional port may be specified by appending "#<port>"

The default query class (IN for internet) is overridden by the --c option. -c option. classclass is any valid class, such as HS for Hesiod records or CH for CHAOSNET records.

The The -f-f option makes dig operate in batch mode by reading a list of lookup requests to process from the -file filenamefilename. The file contains a number of queries, one per line. Each entry in the file should be organised in the same way they would be presented as queries to @@ -328,12 +344,12 @@ CLASS="COMMAND" > using the command-line interface.

If a non-standard port number is to be queried, the --p option is used. -p option is used. port#port# is the port number that

The The -4-4 option forces dig to only -use IPv4 query transport. The -6-6 option forces dig to only use IPv6 query transport.

The The -t-t option sets the query type to -typetype. It can be any valid query type which is supported in BIND9. The default query type "A", unless the --x-x option is supplied to indicate a reverse lookup. A zone transfer can be requested by specifying a type of AXFR. When an incremental zone transfer (IXFR) is required, -type is set to type is set to ixfr=Nixfr=N. The incremental zone transfer will contain the changes made to the zone since the serial number in the zone's SOA record was -NN.

Reverse lookups - mapping addresses to names - are simplified by the --x option. -x option. addraddr is an IPv4 address in dotted-decimal notation, or a colon-delimited IPv6 address. When this option is used, there is no need to provide the -name, name, classclass and -typetype arguments. dig automatically performs a lookup for a name like -11.12.13.10.in-addr.arpa11.12.13.10.in-addr.arpa and sets the query type and class to PTR and IN respectively. By default, IPv6 addresses are looked up using nibble format under the IP6.ARPA domain. To use the older RFC1886 method using the IP6.INT domain -specify the -i-i option. Bit string labels (RFC2874) are now experimental and are not attempted.

dig and their responses using transaction signatures (TSIG), specify a TSIG key file -using the -k-k option. You can also specify the TSIG -key itself on the command line using the -y-y option; -namename is the name of the TSIG key and -keykey is the actual key. The key is a base-64 encoded string, typically generated by (8). -Caution should be taken when using the -y-y option on multi-user systems as the key can be visible in the output from

Each query option is identified by a keyword preceded by a plus sign -(++). Some keywords set or reset an option. These may be preceded -by the string nono to negate the meaning of that keyword. Other keywords assign values to options like the timeout interval. They -have the form +keyword=value+keyword=value. The query options are: @@ -524,9 +540,9 @@ The query options are: CLASS="VARIABLELIST" >

+[no]tcp+[no]tcp

+[no]vc+[no]vc

Use [do not use] TCP when querying name servers. This alternate -syntax to +[no]tcp+[no]tcp is provided for backwards compatibility. The "vc" stands for "virtual circuit".

+[no]ignore+[no]ignore

+domain=somename+domain=somename

Set the search list to contain the single domain -somenamesomename, as if specified in a /etc/resolv.conf, and enable search list -processing as if the +search+search option were given.

+[no]search+[no]search

+[no]defname+[no]defname

Deprecated, treated as a synonym for Deprecated, treated as a synonym for +[no]search+[no]search

+[no]aaonly+[no]aaonly

Sets the "aa" flag in the query.

+[no]aaflag+[no]aaflag

A synonym for A synonym for +[no]aaonly+[no]aaonly.

+[no]adflag+[no]adflag

+[no]cdflag+[no]cdflag

+[no]cl+[no]cl

Display [do not display] the CLASS when printing the record.

+[no]ttlid+[no]ttlid

Display [do not display] the TTL when printing the record.

+[no]recurse+[no]recurse

dig normally sends recursive queries. Recursion is automatically disabled -when the +nssearch+nssearch or -+trace+trace query options are used.

+[no]nssearch+[no]nssearch

+[no]trace+[no]trace

+[no]cmd+[no]cmd

+[no]short+[no]short

+[no]identify+[no]identify

Show [or do not show] the IP address and port number that supplied the -answer when the +short+short option is enabled. If short form answers are requested, the default is not to show the source address and port number of the server that provided the answer.

+[no]comments+[no]comments

+[no]stats+[no]stats

+[no]qr+[no]qr

+[no]question+[no]question

+[no]answer+[no]answer

+[no]authority+[no]authority

+[no]additional+[no]additional

+[no]all+[no]all

Set or clear all display flags.

+time=T+time=T

Sets the timeout for a query to -TT seconds. The default time out is 5 seconds. -An attempt to set TT to less than 1 will result in a query timeout of 1 second being applied.

+tries=T+tries=T

Sets the number of times to try UDP queries to server to -TT instead of the default, 3. If -TT is less than or equal to zero, the number of tries is silently rounded up to 1.

+retry=T+retry=T

Sets the number of times to retry UDP queries to server to -TT instead of the default, 2. Unlike -+tries+tries, this does not include the initial query.

+ndots=D+ndots=D

Set the number of dots that have to appear in -name to name to DD for it to be considered absolute. The default value is that defined using the ndots statement in , or 1 if no ndots statement is present. Names with fewer dots are interpreted as relative names and will be searched for in the domains listed in the -search or search or domaindomain directive in .

+bufsize=B+bufsize=B

Set the UDP message buffer size advertised using EDNS0 to -BB bytes. The maximum and minimum sizes of this buffer are 65535 and 0 respectively. Values outside this range are rounded up or down appropriately.

+[no]multiline+[no]multiline

output.

+[no]fail+[no]fail

+[no]besteffort+[no]besteffort

+[no]dnssec+[no]dnssec

+[no]sigchase+[no]sigchase

+trusted-key=####+trusted-key=####

Specify a trusted key to be used with Specify a trusted key to be used with +sigchase+sigchase. Requires dig be compiled with -DDIG_SIGCHASE.

+[no]topdown+[no]topdown

dig supports specifying multiple queries on the command line (in addition to -supporting the -f-f batch file option). Each of those queries can be supplied with its own set of flags, options and query options.

In this case, each In this case, each queryquery argument represent an individual query in the command-line syntax described above. Each consists of any of the standard options and flags, the name to be @@ -1062,9 +1078,9 @@ should be applied to that query.

+[no]cmd+[no]cmd option) can be overridden by a query-specific set of query options. For example: 
dig could be used from the command line
-to make three lookups: an ANY query for www.isc.orgwww.isc.org, a
 reverse lookup of 127.0.0.1 and a query for the NS records of
-isc.orgisc.org.
 
-A global query option of +qr+qr is applied, so
 that dig shows the initial query it made for each
 lookup.  The final query has a local query option of
-+noqr+noqr which means that dig
 will not print the initial query when it looks up the NS records for
-isc.orgisc.org.
- + - + hosthost [ [-aCdlnrTwv] [-aCdlnrTwv] [-c -c class] [class] [-N -N ndots] [ndots] [-R -R number] [number] [-t -t type] [type] [-W -W wait] [wait] [-m -m flag] [flag] [-4] [-4] [-6-6] {name} [server]

prints a short summary of its command line arguments and options.

namename is the domain name that is to be looked up. It can also be a dotted-decimal IPv4 address or a colon-delimited IPv6 address, in which case host will by default perform a reverse lookup for that address. -serverserver is an optional argument which is either the name or IP address of the name server that /etc/resolv.conf.

The The -a-a (all) option is equivalent to setting the --v-v option and asking host to make a query of type ANY.

When the When the -C-C option is used, host will attempt to display the SOA records for zone -namename from all the listed authoritative name servers for that zone. The list of name servers is defined by the NS records that are found for the zone.

The The -c-c option instructs to make a DNS query of class -classclass. This can be used to lookup Hesiod or Chaosnet class resource records. The default class is IN (Internet).

host when the --d or -d or -v-v option is used. The two options are equivalent. They have been provided for backwards -compatibility. In previous versions, the -d-d option -switched on debugging traces and -v-v enabled verbose output.

List mode is selected by the List mode is selected by the -l-l option. This makes host perform a zone transfer for zone -namename. Transfer the zone printing out the NS, PTR -and address records (A/AAAA). If combined with -a-a all records will be printed.

The The -i-i option specifies that reverse lookups of IPv6 addresses should use the IP6.INT domain as defined in RFC1886. The default is to use IP6.ARPA.

The The -N-N option sets the number of dots that have to be -in namename for it to be considered absolute. The default value is that defined using the ndots statement in .

The number of UDP retries for a lookup can be changed with the --R option. -R option. numbernumber indicates how many times host will repeat a query that does not get answered. The default number of retries is 1. If -numbernumber is negative or zero, the number of retries will default to 1.

Non-recursive queries can be made via the Non-recursive queries can be made via the -r-r option. Setting this option clears the host makes. This should mean that the name server receiving the query will not -attempt to resolve namename. The --r-r option enables hosthost uses UDP when making queries. The --T-T option makes it use a TCP connection when querying the name server. TCP will be automatically selected for queries that require it, such as zone transfer (AXFR) requests.

The The -4-4 option forces host to only -use IPv4 query transport. The -6-6 option forces host to only use IPv6 query transport.

The The -t-t option is used to select the query type. -typetype can be any recognised query type: CNAME, NS, SOA, SIG, KEY, AXFR, etc. When no query type is specified, host automatically selects an appropriate query type. By default it looks for A records, but if the --C-C option was given, queries will be made for SOA -records, and if namename is a dotted-decimal IPv4 address or colon-delimited IPv6 address,

The time to wait for a reply can be controlled through the --W and -W and -w-w options. The --W-W option makes host wait for -wait seconds. If wait seconds. If waitwait is less than one, the wait interval is set to one second. When the --w-w option is used, host

The The -m-m can be used to set the memory usage debugging flags -record, record, usageusage and -tracetrace.

- + - + nslookupnslookup [ [-option-option] [name | -] [server]

server domaindomain

lserver domaindomain

Change the default server to Change the default server to domaindomain; lserver uses the initial -server to look up information about domaindomain, while serverset keyword[=value]]

class=valuevalue

[no]]debug
[no]]d2
domain=namename

Sets the search list to Sets the search list to namename.

[no]]search
port=valuevalue

Change the default TCP/UDP name server port to Change the default TCP/UDP name server port to valuevalue.

querytype=valuevalue

type=valuevalue

[no]]recurse
retry=numbernumber

timeout=numbernumber

[no]]vc
- + - + dnssec-keygendnssec-keygen {-a {-a algorithm} {-b algorithm} {-b keysize} {-n keysize} {-n nametype} [nametype} [-c -c class] [class] [-e] [-e] [-f -f flag] [flag] [-g -g generator] [generator] [-h] [-h] [-k] [-k] [-p -p protocol] [protocol] [-r -r randomdev] [randomdev] [-s -s strength] [strength] [-t -t type] [type] [-v -v levellevel] {name}

-a -a algorithmalgorithm

Selects the cryptographic algorithm. The value of - algorithmalgorithm must be one of RSAMD5 (RSA) or RSASHA1, DSA, DH (Diffie Hellman), or HMAC-MD5. These values are case insensitive. @@ -183,9 +207,11 @@ CLASS="OPTION"

-b -b keysizekeysize

-n -n nametypenametype

Specifies the owner type of the key. The value of - nametypenametype must either be ZONE (for a DNSSEC zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with a host (KEY)), USER (for a key associated with a user(KEY)) or OTHER (DNSKEY). These values are @@ -215,9 +243,11 @@ CLASS="OPTION"

-c -c classclass

-f -f flagflag

-g -g generatorgenerator

-p -p protocolprotocol

-r -r randomdevrandomdev

-s -s strengthstrength

-t -t typetype

Indicates the use of the key. Indicates the use of the key. typetype must be one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default is AUTHCONF. AUTH refers to the ability to authenticate @@ -342,9 +384,11 @@ CLASS="OPTION"

-v -v levellevel

- + - + dnssec-signzonednssec-signzone [ [-a] [-a] [-c -c class] [class] [-d -d directory] [directory] [-e -e end-time] [end-time] [-f -f output-file] [output-file] [-g] [-g] [-h] [-h] [-k -k key] [key] [-l -l domain] [domain] [-i -i interval] [interval] [-j -j jitter] [jitter] [-n -n nthreads] [nthreads] [-o -o origin] [origin] [-p] [-p] [-r -r randomdev] [randomdev] [-s -s start-time] [start-time] [-t] [-t] [-v -v level] [level] [-z-z] {zonefile} [key...]

-c -c classclass

-k -k keykey

-l -l domaindomain

-d -d directorydirectory

keyset files in - directorydirectory as the directory

-s -s start-timestart-time

start-timestart-time is specified, the current time minus 1 hour (to allow for clock skew) is used.

-e -e end-timeend-time

Specify the date and time when the generated RRSIG records - expire. As with start-timestart-time, an absolute time is indicated in YYYYMMDDHHMMSS notation. A time relative to the start time is indicated with +N, which is N seconds from the start time. A time relative to the current time is - indicated with now+N. If no end-timeend-time is specified, 30 days from the start time is used as a default.

-f -f output-fileoutput-file

-i -i intervalinterval

When a previously signed zone is passed as input, records - may be resigned. The intervalinterval option specifies the cycle interval as an offset from the current time (in seconds). If a RRSIG record expires after the @@ -346,12 +388,12 @@ CLASS="OPTION" >

The default cycle interval is one quarter of the difference between the signature end and start times. So if neither - end-time or end-time or start-timestart-time are specified, jitterjitter option specifies a jitter window that will be used to randomize the signature expire time, thus spreading incremental signature @@ -389,9 +431,11 @@ CLASS="OPTION"

-n -n ncpusncpus

-o -o originorigin

-r -r randomdevrandomdev

-v -v levellevel

- + - + lwresdlwresd [ [-C -C config-file] [config-file] [-d -d debug-level] [debug-level] [-f] [-f] [-g] [-g] [-i -i pid-file] [pid-file] [-n -n #cpus] [#cpus] [-P -P port] [port] [-p -p port] [port] [-s] [-s] [-t -t directory] [directory] [-u -u user] [user] [-v-v]

/etc/resolv.conf contains any - nameservernameserver entries, lwresd sends recursive DNS queries to those servers. This is similar to the use of forwarders in a caching name server. If no - nameservernameserver entries are present, or if forwarding fails,
-C -C config-fileconfig-file

Use Use config-fileconfig-file as the configuration file instead of the default,

-d -d debug-leveldebug-level

Set the daemon's debug level to Set the daemon's debug level to debug-leveldebug-level. Debugging traces from

-n -n #cpus#cpus

Create Create #cpus#cpus worker threads to take advantage of multiple CPUs. If not specified,

-P -P portport

Listen for lightweight resolver queries on port - portport. If not specified, the default is port 921.

-p -p portport

Send DNS lookups to port Send DNS lookups to port portport. If not specified, the default is port 53. This provides a way of testing the lightweight resolver daemon with a @@ -334,18 +370,22 @@ CLASS="NOTE" >

-t -t directorydirectory

chroot() to to directorydirectory after processing the command line arguments, but before reading the configuration file. @@ -370,9 +410,9 @@ ALIGN="CENTER" ALIGN="LEFT" >

This option should be used in conjunction with the - -u-u option, as chrooting a process running as root doesn't enhance security on most systems; the way

-u -u useruser

setuid() to to useruser after completing privileged operations, such as creating sockets that listen on privileged ports. diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html index f0c0028e52..70b1a6b315 100644 --- a/bin/named/named.conf.html +++ b/bin/named/named.conf.html @@ -14,16 +14,16 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + - + named.confACL

acl acl string { string { address_match_elementaddress_match_element; ... };

KEY

key key domain_namedomain_name {
- algorithm stringstring;
- secret stringstring;
};

MASTERS

masters masters stringstring [ port port integerinteger ] {
- ( masters | masters | ipv4_addressipv4_address [port port integerinteger] |
- ipv6_addressipv6_address [port port integerinteger] ) [ key key stringstring ]; ...
};

SERVER

server ( server ( ipv4_address[/prefixlen] | ] | ipv6_address[/prefixlen]] ) {
- bogus booleanboolean;
- edns booleanboolean;
- provide-ixfr booleanboolean;
- request-ixfr booleanboolean;
- keys server_keyserver_key;
- transfers integerinteger;
transfer-format ( many-answers | one-answer );
- transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];

- support-ixfr booleanboolean; // obsolete
};

trusted-keys {
- domain_name domain_name flags flags protocol protocol algorithm algorithm keykey; ... 
};

controls {
- inet ( ipv4_address | ipv4_address | ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ]
- allow { address_match_elementaddress_match_element; ... }
[ keys { keys { stringstring; ... } ];
- unix unsupportedunsupported; // not implemented
};

logging {
- channel stringstring {
- file log_filelog_file;
- syslog optional_facilityoptional_facility;
null;
stderr;
- severity log_severitylog_severity;
- print-time booleanboolean;
- print-severity booleanboolean;
- print-category booleanboolean;
};
- category string { string { stringstring; ... };
};

lwres {
listen-on [ port port integerinteger ] {
- ( ipv4_address | ipv4_address | ipv6_addressipv6_address ) [ port port integerinteger ]; ...
};
- view string string optional_classoptional_class;
- search { stringstring; ... };
- ndots integerinteger;
};

options {
- avoid-v4-udp-ports { portport; ... };
- avoid-v6-udp-ports { portport; ... };
- blackhole { address_match_elementaddress_match_element; ... };
- coresize sizesize;
- datasize sizesize;
- directory quoted_stringquoted_string;
- dump-file quoted_stringquoted_string;
- files sizesize;
- heartbeat-interval integerinteger;
- host-statistics booleanboolean; // not implemented
- host-statistics-max numbernumber; // not implemented
- hostname ( quoted_stringquoted_string | none );
- interface-interval integerinteger;
listen-on [ port port integerinteger ] { ] { address_match_elementaddress_match_element; ... };
listen-on-v6 [ port port integerinteger ] { ] { address_match_elementaddress_match_element; ... };
- match-mapped-addresses booleanboolean;
- memstatistics-file quoted_stringquoted_string;
- pid-file ( quoted_stringquoted_string | none );
- port integerinteger;
- querylog booleanboolean;
- recursing-file quoted_stringquoted_string;
- random-device quoted_stringquoted_string;
- recursive-clients integerinteger;
- serial-query-rate integerinteger;
- server-id ( quoted_stringquoted_string | none |;
- stacksize sizesize;
- statistics-file quoted_stringquoted_string;
- statistics-interval integerinteger; // not yet implemented
- tcp-clients integerinteger;
- tcp-listen-queue integerinteger;
- tkey-dhkey quoted_string quoted_string integerinteger;
- tkey-gssapi-credential quoted_stringquoted_string;
- tkey-domain quoted_stringquoted_string;
- transfers-per-ns integerinteger;
- transfers-in integerinteger;
- transfers-out integerinteger;
- use-ixfr booleanboolean;
- version ( quoted_stringquoted_string | none );
- allow-recursion { address_match_elementaddress_match_element; ... };
- sortlist { address_match_elementaddress_match_element; ... };
- topology { address_match_elementaddress_match_element; ... }; // not implemented
- auth-nxdomain booleanboolean; // default changed
- minimal-responses booleanboolean;
- recursion booleanboolean;
rrset-order {
[ class class stringstring ] [ type type stringstring ]
[ name name quoted_stringquoted_string ] ] string string stringstring; ...
};
- provide-ixfr booleanboolean;
- request-ixfr booleanboolean;
- rfc2308-type1 booleanboolean; // not yet implemented
- additional-from-auth booleanboolean;
- additional-from-cache booleanboolean;
- query-source querysource4querysource4;
- query-source-v6 querysource6querysource6;
- cleaning-interval integerinteger;
- min-roots integerinteger; // not implemented
- lame-ttl integerinteger;
- max-ncache-ttl integerinteger;
- max-cache-ttl integerinteger;
transfer-format ( many-answers | one-answer );
- max-cache-size size_no_defaultsize_no_default;
check-names ( master | slave | response )
( fail | warn | ignore );
- cache-file quoted_stringquoted_string;
- suppress-initial-notify booleanboolean; // not yet implemented
- preferred-glue stringstring;
dual-stack-servers [ port port integerinteger ] {
- ( quoted_stringquoted_string [port port integerinteger] |
- ipv4_addressipv4_address [port port integerinteger] |
- ipv6_addressipv6_address [port port integerinteger] ); ...
}
- edns-udp-size integerinteger;
root-delegation-only [ exclude { exclude { quoted_stringquoted_string; ... } ];
- disable-algorithms string { string { stringstring; ... };
- dnssec-enable booleanboolean;
- dnssec-lookaside string trust-anchor string trust-anchor stringstring;
- dnssec-must-be-secure string string booleanboolean;

- dialup dialuptypedialuptype;
- ixfr-from-differences ixfrdiffixfrdiff;

- allow-query { address_match_elementaddress_match_element; ... };
- allow-query-cache { address_match_elementaddress_match_element; ... };
- allow-transfer { address_match_elementaddress_match_element; ... };
- allow-update { address_match_elementaddress_match_element; ... };
- allow-update-forwarding { address_match_elementaddress_match_element; ... };

- notify notifytypenotifytype;
- notify-source ( ipv4_addressipv4_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-source-v6 ( ipv6_addressipv6_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-delay secondsseconds;
also-notify [ port port integerinteger ] { ( ] { ( ipv4_address | ipv4_address | ipv6_addressipv6_address )
[ port port integerinteger ]; ... };
- allow-notify { address_match_elementaddress_match_element; ... };

forward ( first | only );
forwarders [ port port integerinteger ] {
- ( ipv4_address | ipv4_address | ipv6_addressipv6_address ) [ port port integerinteger ]; ...
};

- max-journal-size size_no_defaultsize_no_default;
- max-transfer-time-in integerinteger;
- max-transfer-time-out integerinteger;
- max-transfer-idle-in integerinteger;
- max-transfer-idle-out integerinteger;
- max-retry-time integerinteger;
- min-retry-time integerinteger;
- max-refresh-time integerinteger;
- min-refresh-time integerinteger;
- multi-master booleanboolean;
- sig-validity-interval integerinteger;

- transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];

- alt-transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- alt-transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];
- use-alt-transfer-source booleanboolean;

- zone-statistics booleanboolean;
- key-directory quoted_stringquoted_string;

- allow-v6-synthesis { address_match_elementaddress_match_element; ... }; // obsolete
- deallocate-on-exit booleanboolean; // obsolete
- fake-iquery booleanboolean; // obsolete
- fetch-glue booleanboolean; // obsolete
- has-old-clients booleanboolean; // obsolete
- maintain-ixfr-base booleanboolean; // obsolete
- max-ixfr-log-size sizesize; // obsolete
- multiple-cnames booleanboolean; // obsolete
- named-xfer quoted_stringquoted_string; // obsolete
- serial-queries integerinteger; // obsolete
- treat-cr-as-space booleanboolean; // obsolete
- use-id-pool booleanboolean; // obsolete
};

VIEW

view view string string optional_classoptional_class {
- match-clients { address_match_elementaddress_match_element; ... };
- match-destinations { address_match_elementaddress_match_element; ... };
- match-recursive-only booleanboolean;

- key stringstring {
- algorithm stringstring;
- secret stringstring;
};

- zone string string optional_classoptional_class {
...
};

- server ( ipv4_address[/prefixlen] | ] | ipv6_address[/prefixlen]] ) {
...
};

trusted-keys {
- string string integer integer integer integer integer integer quoted_stringquoted_string; ...
};

- allow-recursion { address_match_elementaddress_match_element; ... };
- sortlist { address_match_elementaddress_match_element; ... };
- topology { address_match_elementaddress_match_element; ... }; // not implemented
- auth-nxdomain booleanboolean; // default changed
- minimal-responses booleanboolean;
- recursion booleanboolean;
rrset-order {
[ class class stringstring ] [ type type stringstring ]
[ name name quoted_stringquoted_string ] ] string string stringstring; ...
};
- provide-ixfr booleanboolean;
- request-ixfr booleanboolean;
- rfc2308-type1 booleanboolean; // not yet implemented
- additional-from-auth booleanboolean;
- additional-from-cache booleanboolean;
- query-source querysource4querysource4;
- query-source-v6 querysource6querysource6;
- cleaning-interval integerinteger;
- min-roots integerinteger; // not implemented
- lame-ttl integerinteger;
- max-ncache-ttl integerinteger;
- max-cache-ttl integerinteger;
transfer-format ( many-answers | one-answer );
- max-cache-size size_no_defaultsize_no_default;
check-names ( master | slave | response )
( fail | warn | ignore );
- cache-file quoted_stringquoted_string;
- suppress-initial-notify booleanboolean; // not yet implemented
- preferred-glue stringstring;
dual-stack-servers [ port port integerinteger ] {
- ( quoted_stringquoted_string [port port integerinteger] |
- ipv4_addressipv4_address [port port integerinteger] |
- ipv6_addressipv6_address [port port integerinteger] ); ...
};
- edns-udp-size integerinteger;
root-delegation-only [ exclude { exclude { quoted_stringquoted_string; ... } ];
- disable-algorithms string { string { stringstring; ... };
- dnssec-enable booleanboolean;
- dnssec-lookaside string trust-anchor string trust-anchor stringstring;

- dnssec-must-be-secure string string booleanboolean;
- dialup dialuptypedialuptype;
- ixfr-from-differences ixfrdiffixfrdiff;

- allow-query { address_match_elementaddress_match_element; ... };
- allow-query-cache { address_match_elementaddress_match_element; ... };
- allow-transfer { address_match_elementaddress_match_element; ... };
- allow-update { address_match_elementaddress_match_element; ... };
- allow-update-forwarding { address_match_elementaddress_match_element; ... };

- notify notifytypenotifytype;
- notify-source ( ipv4_addressipv4_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-source-v6 ( ipv6_addressipv6_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-delay secondsseconds;
also-notify [ port port integerinteger ] { ( ] { ( ipv4_address | ipv4_address | ipv6_addressipv6_address )
[ port port integerinteger ]; ... };
- allow-notify { address_match_elementaddress_match_element; ... };

forward ( first | only );
forwarders [ port port integerinteger ] {
- ( ipv4_address | ipv4_address | ipv6_addressipv6_address ) [ port port integerinteger ]; ...
};

- max-journal-size size_no_defaultsize_no_default;
- max-transfer-time-in integerinteger;
- max-transfer-time-out integerinteger;
- max-transfer-idle-in integerinteger;
- max-transfer-idle-out integerinteger;
- max-retry-time integerinteger;
- min-retry-time integerinteger;
- max-refresh-time integerinteger;
- min-refresh-time integerinteger;
- multi-master booleanboolean;
- sig-validity-interval integerinteger;

- transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];

- alt-transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- alt-transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];
- use-alt-transfer-source booleanboolean;

- zone-statistics booleanboolean;
- key-directory quoted_stringquoted_string;

- allow-v6-synthesis { address_match_elementaddress_match_element; ... }; // obsolete
- fetch-glue booleanboolean; // obsolete
- maintain-ixfr-base booleanboolean; // obsolete
- max-ixfr-log-size sizesize; // obsolete
};

ZONE

zone zone string string optional_classoptional_class {
type ( master | slave | stub | hint |
forward | delegation-only );
- file quoted_stringquoted_string;

masters [ port port integerinteger ] {
- ( mastersmasters |
- ipv4_addressipv4_address [port port integerinteger] |
- ipv6_addressipv6_address [ port port integerinteger ] ) [ key key stringstring ]; ...
};

- database stringstring;
- delegation-only booleanboolean;
check-names ( fail | warn | ignore );
- dialup dialuptypedialuptype;
- ixfr-from-differences booleanboolean;
- journal quoted_stringquoted_string;

- allow-query { address_match_elementaddress_match_element; ... };
- allow-transfer { address_match_elementaddress_match_element; ... };
- allow-update { address_match_elementaddress_match_element; ... };
- allow-update-forwarding { address_match_elementaddress_match_element; ... };
update-policy {
- ( grant | deny ) stringstring
- ( name | subdomain | wildcard | self ) stringstring
- rrtypelistrrtypelist; ...
};

- notify notifytypenotifytype;
- notify-source ( ipv4_addressipv4_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-source-v6 ( ipv6_addressipv6_address | * ) [ port ( port ( integerinteger | * ) ];
- notify-delay secondsseconds;
also-notify [ port port integerinteger ] { ( ] { ( ipv4_address | ipv4_address | ipv6_addressipv6_address )
[ port port integerinteger ]; ... };
- allow-notify { address_match_elementaddress_match_element; ... };

forward ( first | only );
forwarders [ port port integerinteger ] {
- ( ipv4_address | ipv4_address | ipv6_addressipv6_address ) [ port port integerinteger ]; ...
};

- max-journal-size size_no_defaultsize_no_default;
- max-transfer-time-in integerinteger;
- max-transfer-time-out integerinteger;
- max-transfer-idle-in integerinteger;
- max-transfer-idle-out integerinteger;
- max-retry-time integerinteger;
- min-retry-time integerinteger;
- max-refresh-time integerinteger;
- min-refresh-time integerinteger;
- multi-master booleanboolean;
- sig-validity-interval integerinteger;

- transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];

- alt-transfer-source ( ipv4_addressipv4_address | * )
[ port ( port ( integerinteger | * ) ];
- alt-transfer-source-v6 ( ipv6_addressipv6_address | * )
[ port ( port ( integerinteger | * ) ];
- use-alt-transfer-source booleanboolean;

- zone-statistics booleanboolean;
- key-directory quoted_stringquoted_string;

- ixfr-base quoted_stringquoted_string; // obsolete
- ixfr-tmp-file quoted_stringquoted_string; // obsolete
- maintain-ixfr-base booleanboolean; // obsolete
- max-ixfr-log-size sizesize; // obsolete
- pubkey integer integer integer integer integer integer quoted_stringquoted_string; // obsolete
};

- + - + namednamed [ [-4] [-4] [-6] [-6] [-c -c config-file] [config-file] [-d -d debug-level] [debug-level] [-f] [-f] [-g] [-g] [-n -n #cpus] [#cpus] [-p -p port] [port] [-s] [-s] [-t -t directory] [directory] [-u -u user] [user] [-v] [-v] [-x -x cache-filecache-file]

Use IPv4 only even if the host machine is capable of IPv6. - -4 and -4 and -6-6 are mutually exclusive.

Use IPv6 only even if the host machine is capable of IPv4. - -4 and -4 and -6-6 are mutually exclusive.

-c -c config-fileconfig-file

Use Use config-fileconfig-file as the configuration file instead of the default, directorydirectory option in the configuration - file, config-fileconfig-file should be an absolute pathname.

-d -d debug-leveldebug-level

Set the daemon's debug level to Set the daemon's debug level to debug-leveldebug-level. Debugging traces from

-n -n #cpus#cpus

Create Create #cpus#cpus worker threads to take advantage of multiple CPUs. If not specified,

-p -p portport

Listen for queries on port Listen for queries on port portport. If not specified, the default is port 53.

-t -t directorydirectory

chroot() to to directorydirectory after processing the command line arguments, but before reading the configuration file. @@ -354,9 +390,9 @@ ALIGN="CENTER" ALIGN="LEFT" >

This option should be used in conjunction with the - -u-u option, as chrooting a process running as root doesn't enhance security on most systems; the way

-u -u useruser

setuid() to to useruser after completing privileged operations, such as creating sockets that listen on privileged ports. @@ -405,9 +445,9 @@ CLASS="FUNCTION" >bind() to a privileged port and set process resource limits. - Unfortunately, this means that the -u-u option only works when

-x -x cache-filecache-file

Load data from Load data from cache-filecache-file into the cache of the default view.

- + - + nsupdatensupdate [ [-d] [-d] [-y -y keyname:secret | keyname:secret | -k -k keyfile] [keyfile] [-t -t timeout] [timeout] [-u -u udptimeout] [udptimeout] [-r -r udpretries] [udpretries] [-v-v] [filename]

The --d-d option makes nsupdate uses the --y-y or --k-k option (with an HMAC-MD5 key) to provide the shared secret needed to generate a TSIG record for authenticating Dynamic DNS update requests. These options are mutually exclusive. With the --k-k option, nsupdate reads the shared secret from the file -keyfilekeyfile, whose name is of the form K{name}.+157.+{random}.key must also be present. When the --y-y option is used, a signature is generated from -keyname:secret.keyname:secret. -keynamekeyname is the name of the key, and -secretsecret is the base64 encoded shared secret. Use of the --y-y option is discouraged because the shared secret is supplied as a command line argument in clear text. @@ -270,9 +280,9 @@ CLASS="REFENTRYTITLE" > or in a history file maintained by the user's shell.

The The -k-k may also be used to specify a SIG(0) key used to authenticate Dynamic DNS update requests. In this case, the key specified is not an HMAC-MD5 key.

-v-v option makes

The The -t-t option sets the maximum time a update request can take before it is aborted. The default is 300 seconds. Zero can be used to disable the timeout.

The The -u-u option sets the UDP retry interval. The default is 3 seconds. If zero the interval will be computed from the timeout interval and number of UDP retries.

The The -r-r option sets the number of UDP retries. The default is 3. If zero only one update request will be made.

nsupdate reads input from -filenamefilename or standard input. Each command is supplied on exactly one line of input. @@ -371,9 +381,9 @@ CLASS="COMMAND" >

Sends all dynamic update requests to the name server -servernameservername. When no server statement is provided, portport is the port number on -servernameservername where the dynamic update requests get sent. If no port number is specified, the default DNS port number of 53 is @@ -406,9 +416,9 @@ CLASS="COMMAND" >

Sends all dynamic update requests using the local -addressaddress. When no local statement is provided, @@ -417,9 +427,9 @@ CLASS="COMMAND" >nsupdate will send updates using an address and port chosen by the system. -portport can additionally be used to make requests come from a specific port. If no port number is specified, the system will assign one.

Specifies that all updates are to be made to the zone -zonenamezonename. If no -zonezone statement is provided,

Specify the default class. -If no classclass is specified the default class is -ININ.

Specifies that all updates are to be TSIG signed using the -keyname keyname keysecretkeysecret pair. The key command overrides any key specified on the command line via --y or -y or -k-k.

Requires that no resource record of any type exists with name -domain-namedomain-name.

Requires that -domain-namedomain-name exists (has as at least one resource record, of any type).

Requires that no resource record exists of the specified -typetype, -classclass and -domain-namedomain-name. If -classclass is omitted, IN (internet) is assumed.

This requires that a resource record of the specified -typetype, -classclass and -domain-namedomain-name must exist. If -classclass is omitted, IN (internet) is assumed.

The -datadata from each set of prerequisites of this form sharing a common -typetype, -classclass, and -domain-namedomain-name are combined to form a set of RRs. This set of RRs must exactly match the set of RRs existing in the zone at the given -typetype, -classclass, and -domain-namedomain-name. The -datadata are written in the standard text representation of the resource record's RDATA.

Deletes any resource records named -domain-namedomain-name. If -typetype and -datadata is provided, only matching resource records will be removed. The internet class is assumed if -classclass is not supplied. The -ttlttl is ignored, and is only allowed for compatibility.

Adds a new resource record with the specified -ttlttl, -classclass and -datadata.

- + - + rndc-confgenrndc-confgen [ [-a] [-a] [-b -b keysize] [keysize] [-c -c keyfile] [keyfile] [-h] [-h] [-k -k keyname] [keyname] [-p -p port] [port] [-r -r randomfile] [randomfile] [-s -s address] [address] [-t -t chrootdir] [chrootdir] [-u -u useruser]

/etc (or whatever - sysconfdirsysconfdir was specified as when
-b -b keysizekeysize

-c -c keyfilekeyfile

-k -k keynamekeyname

-p -p portport

-r -r randomfilerandomfile

-s -s addressaddress

-t -t chrootdirchrootdir

-u -u useruser

- + - + rndc.conf

The The optionsoptions statement contains five clauses. - The default-serverdefault-server clause is followed by the name or address of a name server. This host will be used when no name server is given as an argument to rndc. The . The default-keydefault-key clause is followed by the name of a key which is identified by - a keykey statement. If no - keyidkeyid is provided on the rndc command line, - and no keykey clause is found in a matching - serverserver statement, this default key will be used to authenticate the server's commands and responses. The - default-portdefault-port clause is followed by the port to connect to on the remote name server. If no - portport option is provided on the rndc command - line, and no portport clause is found in a - matching serverserver statement, this default port will be used to connect. - The default-source-addressdefault-source-address and - default-source-address-v6default-source-address-v6 clauses which can be used to set the IPv4 and IPv6 source addresses respectively.

After the After the serverserver keyword, the server statement includes a string which is the hostname or address for a name server. The statement has three possible clauses: - key, key, portport and - addressesaddresses. The key name must match the name of a key statement in the file. The port number - specifies the port to connect to. If an addressesaddresses clause is supplied these addresses will be used instead of the server name. Each address can take a optional port. - If an source-address or source-address or source-address-v6source-address-v6 of supplied then these will be used to specify the IPv4 and IPv6 source addresses respectively.

The The keykey statement begins with an identifying string, the name of the key. The statement has two clauses. - algorithmalgorithm identifies the encryption algorithm for rndc.conf file, including the randomly generated key, will be written to the standard - output. Commented out keykey and - controlscontrols statements for named.conf. - See the sections on the controlscontrols statement in the BIND 9 Administrator Reference Manual for details.

- + - + rndcrndc [ [-b -b source-address] [source-address] [-c -c config-file] [config-file] [-k -k key-file] [key-file] [-s -s server] [server] [-p -p port] [port] [-V] [-V] [-y -y key_idkey_id] {command}

-b -b source-addresssource-address

Use Use source-addresssource-address as the source address for the connection to the server. Multiple instances are permitted to allow setting of both @@ -187,15 +203,19 @@ CLASS="REPLACEABLE"

-c -c config-fileconfig-file

Use Use config-fileconfig-file as the configuration file instead of the default,

-k -k key-filekey-file

Use Use key-filekey-file as the key file instead of the default, /etc/rndc.key will be used to authenticate - commands sent to the server if the config-fileconfig-file does not exist.

-s -s serverserver

serverserver is the name or address of the server which matches a server statement in the configuration file for @@ -254,16 +284,20 @@ CLASS="COMMAND"

-p -p portport

Send commands to TCP port - portport instead of BIND 9's default control channel port, 953.

-y -y keyidkeyid

Use the key Use the key keyidkeyid from the configuration file. - keyidkeyid must be known by named with the same algorithm and secret string in order for control message validation to succeed. - If no keyidkeyid is specified,

There is currently no way to provide the shared secret for a - key_idkey_id without using the configuration file.

+ Introduction

Fixed WidthFixed Width

Fixed WidthFixed Width

Example, Inc. could be -mail.example.commail.example.com, -where comcom is the top level domain to which -ourhost.example.comourhost.example.com belongs, -exampleexample is -a subdomain of comcom, and -ourhostourhost is the name of the host.

For instance, consider the For instance, consider the example.comexample.com domain which includes names -such as host.aaa.example.comhost.aaa.example.com and -host.bbb.example.comhost.bbb.example.com even though -the example.comexample.com zone includes -only delegations for the aaa.example.comaaa.example.com and -bbb.example.combbb.example.com zones. A zone can map exactly to a single domain, but could also include only part of a domain, the rest of which could be delegated to other diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index e7b38428cd..d30ea46e1e 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -1,11 +1,11 @@ - + BIND Resource Requirements + Name Server Configuration

wwwwww

600600

ININ

AA

10.0.0.110.0.0.1

600600

ININ

AA

10.0.0.210.0.0.2

600600

ININ

AA

10.0.0.310.0.0.3

dig [@ [@server] server] domain [domain [query-type] [query-type] [query-class] [+query-class] [+query-option] [-query-option] [-dig-option] [%dig-option] [%commentcomment]

The usual simple use of dig will take the form

host [-aCdlrTwv] [-c [-aCdlrTwv] [-c class] [-N class] [-N ndots] [-t ndots] [-t type] [-W type] [-W timeout] [-R timeout] [-R retries] retries] hostname [hostname [serverserver]

For more information and a list of available commands and @@ -560,9 +588,11 @@ the name and requested information for a host or domain.

nslookup [-option...] [ [-option...] [host-to-findhost-to-find | - [server]]

Interactive mode is entered when no arguments are given (the @@ -625,12 +655,16 @@ CLASS="filename" >named-checkconf [-t [-t directory] [directory] [filenamefilename]

named-checkzone [-djqvD] [-c [-djqvD] [-c class] [-o class] [-o output] [-t output] [-t directory] [-w directory] [-w directory] [-k directory] [-k (ignore|warn|fail)] [-n (ignore|warn|fail)] [-n (ignore|warn|fail)] (ignore|warn|fail)] zone [zone [filenamefilename]

rndc [-c [-c config] [-s config] [-s server] [-p server] [-p port] [-y port] [-y key] key] command [command [commandcommand...]

reload reload zonezone [classclass [viewview]]
refresh refresh zonezone [classclass [viewview]]
retransfer retransfer zonezone [classclass [viewview]]
freeze freeze zonezone [classclass [viewview]]
unfreeze unfreeze zonezone [classclass [viewview]]
trace trace levellevel
/etc/rndc.conf, but an alternate -location can be specified with the -c-c option. If the configuration file is not found, /etc/rndc.key (or whatever -sysconfdirsysconfdir was defined when the default-server takes a host name or address argument and represents the server that will -be contacted if no -s-s option is provided on the command line.

and it had an identical key statement for -rndc_keyrndc_key.

Running the + Advanced DNS Featuresrndc freeze rndc freeze zonezone. This will also remove the zone's rndc unfreeze rndc unfreeze zonezone to reload the changed zone and re-enable dynamic updates.

Example, Inc. -(example.comexample.com) has several corporate sites that have an internal network with reserved Internet Protocol (IP) space and an external demilitarized zone (DMZ), @@ -489,9 +493,9 @@ internal hosts.

Here's an example of a wildcard MX record:

*   IN MX 10 external1.example.com.*   IN MX 10 external1.example.com.

Now that they accept mail on behalf of anything in the internal @@ -528,24 +532,24 @@ internal clients will now be able to:

The maximum number of simultaneous recursive lookups the server will perform on behalf of clients. The default is -10001000. Because each recursing client uses a fair bit of memory, on the order of 20 kilobytes, the value of the

The maximum number of simultaneous client TCP connections that the server will accept. -The default is 100100.

unlimitedunlimited, meaning that records are purged from the cache only when their TTLs expire.

[ class class class_nameclass_name ][ type type type_nametype_name ][ name name "domain_name""domain_name"] - order orderingordering

will cause any responses for type A records in class IN that -have "host.example.comhost.example.com" as a suffix, to always be returned in random order. All other records are returned in cyclic order.

NOT recommended.) -Default is 600600 (10 minutes). Maximum value is -18001800 (30 minutes).

max-ncache-ttl is is 1080010800 seconds (3 hours). Section 4.2) -will expire. The default is 3030 days. The maximum value is 10 years (3660 days). The signature inception time is unconditionally set to one hour before the current time @@ -7357,9 +7749,9 @@ NAME="builtin" >

The server provides some helpful diagnostic information through a number of built-in zones under the -pseudo-top-level-domain bindbind in the

The version the server should report -via a query of the name version.bindversion.bind with type unlimitedunlimited, meaning that entries are purged from acache only at the periodic cleaning time. 

server server ip_addr[/prefixlen]] {
     [ bogus  bogus yes_or_noyes_or_no ; ]
     [ provide-ixfr  provide-ixfr yes_or_noyes_or_no ; ]
     [ request-ixfr  request-ixfr yes_or_noyes_or_no ; ]
     [ edns  edns yes_or_noyes_or_no ; ]
     [ transfers  transfers numbernumber ; ]
     [ transfer-format  transfer-format ( one-answer | many-answers )( one-answer | many-answers ) ; ]]
     [ keys  keys { string ; [ string ; [...]] }] } ; ]
     [ transfer-source ( transfer-source (ip4_addrip4_addr | *) [port port ip_portip_port] ; ]
     [ transfer-source-v6 ( transfer-source-v6 (ip6_addrip6_addr | *) [port port ip_portip_port] ; ]
@@ -8159,39 +8575,59 @@ CLASS="command"
 >
trusted-keys {
-    string string number number number number number number stringstring ;
     [  string string number number number number number number stringstring ; [...
view view view_nameview_name 
       [classclass] {
-      match-clients { address_match_listaddress_match_list } ;
-      match-destinations { address_match_listaddress_match_list } ;
-      match-recursive-only yes_or_noyes_or_no ;
       [  view_optionview_option; ...]
       [  zone_statementzone_statement; ...]
 };
@@ -8317,17 +8767,17 @@ CLASS="command"
 > statement defines a view of the
 DNS namespace that will be seen by a subset of clients.  A client matches
 a view if its source IP address matches the 
-address_match_listaddress_match_list of the view's
 match-clients clause and its destination IP address matches
-the address_match_listaddress_match_list of the view's
 
zone zone zone_namezone_name [classclass] [ allow-notify {  allow-notify { address_match_listaddress_match_list } ; ]
     [ allow-query {  allow-query { address_match_listaddress_match_list } ; ]
     [ allow-transfer {  allow-transfer { address_match_listaddress_match_list } ; ]
     [ allow-update {  allow-update { address_match_listaddress_match_list } ; ]
     [ update-policy {  update-policy { update_policy_ruleupdate_policy_rule [...]
     [ allow-update-forwarding {  allow-update-forwarding { address_match_listaddress_match_list } ; ]
     [ also-notify {  also-notify { ip_addrip_addr [port port ip_portip_port] ; [  ip_addrip_addr [port port ip_portip_port] ; ... ] }; ]
     [ check-wildcard  check-wildcard yes_or_noyes_or_no; ]
     [ dialup  dialup dialup_optiondialup_option ; ]
     [ delegation-only  delegation-only yes_or_noyes_or_no ; ]
     [ file  file stringstring ; ]
     [ journal  journal stringstring ; ]
     []
     [ forwarders {  forwarders { ip_addrip_addr [port port ip_portip_port] ; [  ip_addrip_addr [port port ip_portip_port] ; ... ] }; ]
     [ ixfr-base  ixfr-base stringstring ; ]
     [ ixfr-tmp-file  ixfr-tmp-file stringstring ; ]
     [ maintain-ixfr-base  maintain-ixfr-base yes_or_noyes_or_no ; ]
     [ masters [port port ip_portip_port] { ( ] { ( masters_list | masters_list | ip_addrip_addr [port port ip_portip_port] [key key keykey] ) ; []
     [ max-ixfr-log-size  max-ixfr-log-size numbernumber ; ]
     [ max-transfer-idle-in  max-transfer-idle-in numbernumber ; ]
     [ max-transfer-idle-out  max-transfer-idle-out numbernumber ; ]
     [ max-transfer-time-in  max-transfer-time-in numbernumber ; ]
     [ max-transfer-time-out  max-transfer-time-out numbernumber ; ]
     [ notify  notify yes_or_no | yes_or_no | explicit | explicit | master-onlymaster-only ; ]
     [ pubkey  pubkey number number number number number number stringstring ; ]
     [ transfer-source ( transfer-source (ip4_addrip4_addr | *) [port port ip_portip_port] ; ]
     [ transfer-source-v6 ( transfer-source-v6 (ip6_addrip6_addr | *) [port port ip_portip_port] ; ]
     [ alt-transfer-source ( alt-transfer-source (ip4_addrip4_addr | *) [port port ip_portip_port] ; ]
     [ alt-transfer-source-v6 ( alt-transfer-source-v6 (ip6_addrip6_addr | *) [port port ip_portip_port] ; ]
     [ use-alt-transfer-source  use-alt-transfer-source yes_or_noyes_or_no; ]
     [ notify-source ( notify-source (ip4_addrip4_addr | *) [port port ip_portip_port] ; ]
     [ notify-source-v6 ( notify-source-v6 (ip6_addrip6_addr | *) [port port ip_portip_port] ; ]
     [ zone-statistics  zone-statistics yes_or_noyes_or_no ; ]
     [ sig-validity-interval  sig-validity-interval numbernumber ; ]
     [ database  database stringstring ; ]
     [ min-refresh-time  min-refresh-time numbernumber ; ]
     [ max-refresh-time  max-refresh-time numbernumber ; ]
     [ min-retry-time  min-retry-time numbernumber ; ]
     [ max-retry-time  max-retry-time numbernumber ; ]
     [ multi-master  multi-master yes_or_noyes_or_no ; ]
     [ key-directory  key-directory path_namepath_name; ]
 
@@ -8973,9 +9549,9 @@ CLASS="CALSTABLE"
 >
mastermaster
slaveslave
example.comexample.com might place
 the zone contents into a file called
 
stubstub
10.in-addr.arpa10.in-addr.arpa
 to use a set of internal name servers as the authoritative
 servers for that domain.
forwardforward
hinthint
delegation-onlydelegation-only

 
delegation-onlydelegation-only has no effect on answers received
 from forwarders.
The zone's name may optionally be followed by a class. If
-a class is not specified, class IN (for IN (for InternetInternet),
 is assumed. This is correct for the vast majority of cases.
The The hesiodhesiod class is
 named for an information service from MIT's Project Athena. It is
 used to share information about various systems databases, such
 as users, groups, printers and so on. The keyword 
-HSHS is
 a synonym for hesiod.
Another MIT development is CHAOSnet, a LAN protocol created
-in the mid-1970s. Zone data for it can be specified with the CHAOSCHAOS class.
notify is
 active for this zone. The set of machines that will receive a 
-DNS NOTIFYDNS NOTIFY message
 for this zone is made up of all the listed name servers (other than
 the primary master) for the zone plus any IP addresses specified
@@ -9954,20 +10530,28 @@ CLASS="command"
 > | deny )  ) identity identity nametype nametype namename [  typestypes ]
 
identityidentity field specifies a
 wildcard name, it is subject to DNS wildcard expansion, so the rule will apply
-to multiple identities.  The identityidentity field must
 contain a fully qualified domain name.
The The nametypenametype field has 4 values:
-name, name, subdomainsubdomain,
-wildcard, and wildcard, and selfself.
 
namename
Exact-match semantics.  This rule matches when the
 name being updated is identical to the contents of the
-namename field.
subdomainsubdomain
This rule matches when the name being updated
 is a subdomain of, or identical to, the contents of the
-namename field.
wildcardwildcard
The The namename field is
 subject to DNS wildcard expansion, and this rule matches when the name
 being updated name is a valid expansion of the wildcard.
selfself
This rule matches when the name being updated
-matches the contents of the identityidentity field.
-The namename field is ignored, but should be
-the same as the identityidentity field.  The
-selfself nametype is most useful when allowing using
 one key per name to update, where the key has the same name as the name
-to be updated.  The identityidentity would be
 specified as 
In all cases, the In all cases, the namename field must
 specify a fully qualified domain name.

CHAOSnet, a LAN protocol created at MIT in the mid-1970s.
 Rarely used for its historical purpose, but reused for BIND's
 built-in server information zones, e.g.,
-version.bindversion.bind.
 
ISI.EDU.ISI.EDU.
MXMX
10 VENERA.ISI.EDU.10 VENERA.ISI.EDU.
MXMX
10 VAXA.ISI.EDU10 VAXA.ISI.EDU
VENERA.ISI.EDUVENERA.ISI.EDU
AA
128.9.0.32128.9.0.32
AA
10.1.0.5210.1.0.52
VAXA.ISI.EDUVAXA.ISI.EDU
AA
10.2.0.2710.2.0.27
AA
128.9.0.33128.9.0.33
XX.LCS.MIT.EDU. INXX.LCS.MIT.EDU. IN
AA
10.0.0.4410.0.0.44
CHCH
AA
MIT.EDU. 2420MIT.EDU. 2420
This example shows two addresses for This example shows two addresses for XX.LCS.MIT.EDUXX.LCS.MIT.EDU,
 each of a different class.
example.com.example.com.
ININ
MXMX
1010
mail.example.com.mail.example.com.
ININ
MXMX
1010
mail2.example.com.mail2.example.com.
ININ
MXMX
2020
mail.backup.org.mail.backup.org.
mail.example.com.mail.example.com.
ININ
AA
10.0.0.110.0.0.1
mail2.example.com.mail2.example.com.
ININ
AA
10.0.0.210.0.0.2
For example:
Mail delivery will be attempted to Mail delivery will be attempted to mail.example.commail.example.com and
-mail2.example.commail2.example.com (in
-any order), and if neither of those succeed, delivery to mail.backup.orgmail.backup.org will
 be attempted.
All of these TTLs default to units of seconds, though units
-can be explicitly specified, for example, 1h30m1h30m. 
$ORIGIN$ORIGIN
2.1.10.in-addr.arpa2.1.10.in-addr.arpa
33
IN PTR foo.example.com.IN PTR foo.example.com.
$ORIGIN
 domain-namedomain-name [  commentcomment]
$ORIGIN < <zone-namezone-name>. argument if it is not absolute.
$ORIGIN example.com.
-WWW     CNAME   MAIN-SERVER
is equivalent to
WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
$INCLUDE
-filenamefilename [

originorigin ] [  commentcomment ]
$TTL
-default-ttldefault-ttl [

commentcomment ]
Syntax: $GENERATE  range range lhslhs [ttlttl] [classclass] ] type type rhsrhs [  commentcomment ]
$ORIGIN 0.0.192.IN-ADDR.ARPA.
 $GENERATE 1-2 0 NS SERVER$.EXAMPLE.
-$GENERATE 1-127 $ CNAME $.0
is equivalent to
0.0.0.192.IN-ADDR.ARPA NS SERVER1.EXAMPLE.
 0.0.0.192.IN-ADDR.ARPA. NS SERVER2.EXAMPLE.
@@ -11657,7 +12291,7 @@ CLASS="literal"
 2.0.0.192.IN-ADDR.ARPA. CNAME 2.0.0.0.192.IN-ADDR.ARPA.
 ...
 127.0.0.192.IN-ADDR.ARPA. CNAME 127.0.0.0.192.IN-ADDR.ARPA.
-

+
 BIND 9 Security Considerationschroot()) by specifying the ") by specifying the "-t-t"
 option. This can help improve system security by placing BIND is the
-ability to run the daemon as an unprivileged user ( -u -u useruser ).
 We suggest running as an unprivileged user when using the 
+
 Troubleshooting
+
 Appendicesftp://www.isi.edu/in-notes/RFCftp://www.isi.edu/in-notes/RFCxxxxxx.txt (where  (where xxxxxx is
 the number of the RFC). RFCs are also available via the Web at
 
+
 BIND 9 Administrator Reference Manual
 
-
+
 
-
+
 lwreslwres_lwres_.
 To define the standard names, applications must include the
 header file
@@ -142,9 +142,9 @@ CLASS="FILENAME"
 >
 which contains macro definitions mapping the standard function names
 into
-lwres_lwres_
 prefixed ones.  Operating system vendors who integrate the lwres
 library into their base distributions should rename the functions
@@ -201,9 +201,9 @@ sequence of actions.
lwres_packet_t,
-called pktpkt below.
(2) Set lwres_packet_t (also called  (also called pktpkt, below)
 as well as a data specific type, such as 
 
-
+
 
-
+
 lwres_bufferThese functions provide bounds checked access to a region of memory
 where data is being read or written.
 They are based on, and similar to, the
-isc_buffer_isc_buffer_
 functions in the ISC library.
lwres_buffer_t
-*b*b
 and assocates it with the memory region of size
-lengthlength
 bytes starting at location
-base.base.
lwres_buffer_invalidate()
 marks the buffer
-*b*b
 as invalid.  Invalidating a buffer after use is not required,
 but makes it possible to catch its possible accidental use.

 respectively increase and decrease the used space in
 buffer
-*b*b
 by
-nn
 bytes.
 lwres_buffer_first
 makes the consumed region of buffer
-*p*p
 empty by setting
 lwres_buffer_forward()
 increases the consumed region of buffer
-*b*b
 by
-nn
 bytes, checking for overflow.
 Similarly,
@@ -441,14 +441,14 @@ CLASS="FUNCTION"
 >lwres_buffer_back()
 decreases buffer
-bb's
 consumed region by
-nn
 bytes and checks for underflow.
lwres_buffer_getuint8()
 reads an unsigned 8-bit integer from
-*b*b
 and returns it.
 lwres_buffer_putuint8()
 writes the unsigned 8-bit integer
-valval
 to buffer
-*b*b.

 except that they respectively read an unsigned 16-bit or 32-bit integer 
 in network byte order from
-bb.
 Similarly,
 lwres_buffer_putuint32()
 writes the unsigned 16-bit or 32-bit integer
-valval
 to buffer
-bb,
 in network byte order.
lwres_buffer_putmem()
 copies
-lengthlength
 bytes of memory at
-basebase
 to
-bb.
 Conversely,
 lwres_buffer_getmem()
 copies
-lengthlength
 bytes of memory from
-bb
 to
-basebase.

 
-
+
 
-
+
 lwres_configlwres_conf_t
 structure for lightweight resolver context
-ctxctx.
lwres_conf_t
 structure in resolver context
-ctxctx.
lwres_conf_parse()
 opens the file
-filenamefilename
 and parses it to initialise the resolver context
-ctxctx's
 lwres_conf_t
 structure for resolver context
-ctxctx
 to the
 FILE
-fpfp.
LWRES_R_SUCCESS
 if it successfully read and parsed
-filenamefilename.
 It returns
 LWRES_R_FAILURE
 if
-filenamefilename
 could not be opened or contained incorrect
 resolver statements.

 
-
+
 
-
+
 lwres_contextlwres_context_t
 is returned through
-contextpcontextp,
 
 a pointer to a
@@ -172,25 +172,25 @@ CLASS="TYPE"
 >
When the lightweight resolver needs to perform dynamic memory
 allocation, it will call
-malloc_functionmalloc_function
 to allocate memory and
-free_functionfree_function
 
 to free it.  If 
-malloc_functionmalloc_function
 and
-free_functionfree_function
 
 are NULL, memory is allocated using
@@ -205,36 +205,36 @@ CLASS="REFENTRYTITLE"
 >.
 
 It is not permitted to have a NULL
-malloc_functionmalloc_function
 and a non-NULL
-free_functionfree_function
 or vice versa.
-argarg
 is passed as the first parameter to the memory
 allocation functions.  
 If
-malloc_functionmalloc_function
 and
-free_functionfree_function
 are NULL,
-argarg
 
 is unused and should be passed as NULL.

 
 and returned via
-*contextp*contextp.
,
 
 closing its socket.
-contextpcontextp
 is a pointer to a pointer to the context that is to be destroyed.
 The pointer will be set to NULL when the context has been destroyed.
lwres_context_initserial()
 sets the serial number for context
-*ctx*ctx
 to
-serialserial.
 
 lwres_context_allocmem()
 allocates
-lenlen
 bytes of memory and if successful returns a pointer to the allocated
 storage.
@@ -338,14 +338,14 @@ CLASS="FUNCTION"
 >lwres_context_freemem()
 frees
-lenlen
 bytes of space starting at location
-memmem.
lwres_context_sendrecv()
 performs I/O for the context
-ctxctx.
 
 Data are read and written from the context's socket.
 It writes data from
-sendbasesendbase
 — typically a lightweight resolver query packet —
 and waits for a reply which is copied to the receive buffer at
-recvbaserecvbase.
 
 The number of bytes that were written to this receive buffer is
 returned in
-*recvd_len*recvd_len.

 
-
+
 
-
+
 lwres_gabnlwres_gabnrequest_render()
 uses resolver context
-ctxctx
 to convert getaddrbyname request structure
-reqreq
 to canonical format.
 The packet header structure
-pktpkt
 is initialised and transferred to
 buffer
-bb.
 
 The contents of
-*req*req
 are then appended to the buffer in canonical format.
 lwres_gabnrequest_parse()
 uses context
-ctxctx
 to convert the contents of packet
-pktpkt
 to a
 
 structure.
 Buffer
-bb
 provides space to be used for storing this structure.
 When the function succeeds, the resulting
@@ -254,9 +254,9 @@ CLASS="TYPE"
 >lwres_gabnrequest_t
 is made available through
-*structp*structp.
 
 lwres_gabnrequest_free()
 release the memory in resolver context
-ctxctx
 that was allocated to the
 lwres_gabnrequest_t
 structures referenced via
-structpstructp.
 
 Any memory associated with ancillary buffers and strings for those
@@ -351,9 +351,9 @@ CLASS="ERRORCODE"
 >LWRES_R_UNEXPECTEDEND
 is returned if the available space in the buffer
-bb
 is too small to accommodate the packet header or the
 
 
-
+
 
-
+
 lwres_gai_strerrorinvalid error code is returned if
-ecodeecode
 is out of range.

 
-
+
 
-
+
 lwres_getaddrinfolwres_getaddrinfo()
 is used to get a list of IP addresses and port numbers for host
-hostnamehostname
 and service
-servnameservname.
 
 The function is the lightweight resolver's implementation of
@@ -132,14 +132,14 @@ CLASS="FUNCTION"
 >getaddrinfo()
 as defined in RFC2133.
-hostnamehostname
 and
-servnameservname
 are pointers to null-terminated
 strings or
@@ -148,15 +148,15 @@ CLASS="TYPE"
 >NULL.
 
-hostnamehostname
 is either a host name or a numeric host address string: a dotted decimal
 IPv4 address or an IPv6 address.
-servnameservname
 is either a decimal port number or a service name as listed in
 /etc/services.
hintshints
 is an optional pointer to a
 *hints*hints:
 
 
hostnamehostname
 is a
 AI_NUMERICHOST
 it indicates that
-hostnamehostname
 should be treated as a numeric string defining an IPv4 or IPv6 address
 and no name resolution should be attempted.
struct addrinfo passed
-via hintshints must be zero.
A A hintshints of NULLlwres_getaddrinfo(),
-*res*res
 is a pointer to a linked list of one or more
 lwres_freeaddrinfo().
-aiai
 is a pointer to a
 
 if an error occurs.
 If both
-hostnamehostname
 and
-servnameservname
 are
 
 
-
+
 
-
+
 lwres_gethostentlwres_gethostbyname2() look up the hostname
-namename.
 lwres_gethostbyname2() looks for an
-address of protocol family afaf: either
 lwres_gethostbyaddr().
-addraddr is an address of length
-lenlen bytes and protocol family
-typetype — PF_INETlwres_gethostbyname_r() is a thread-safe function
 for forward lookups.  If an error occurs, an error code is returned in
-*error*error.
-resbufresbuf is a pointer to a struct
@@ -405,13 +405,13 @@ hostentlwres_gethostbyname_r() .
-bufbuf is a buffer of length
-lenlen bytes which is used to store the
 struct
 hostent returned in  returned in resbufresbuf.
 Successful calls to lwres_gethostbyname_r()
-return resbufresbuf,
 which is a pointer to the lwres_gethostbyaddr_r() is a thread-safe function
-that performs a reverse lookup of address addraddr
-which is lenlen bytes long and is of protocol
-family typetype — PF_INETPF_INET6.  If an error occurs, the error code is returned
-in *error*error.  The other function parameters are
 identical to those in lwres_gethostbyname_r().
-resbufresbuf is a pointer to a struct
@@ -487,13 +487,13 @@ hostentlwres_gethostbyaddr_r().
-bufbuf is a buffer of length
-lenlen bytes which is used to store the
 struct
 hostent returned in  returned in resbufresbuf.  Successful
 calls to lwres_gethostbyaddr_r() return
-resbufresbuf, which is a pointer to the
 lwres_gethostbyaddr_r() return
-resbufresbuf, a pointer to the struct
@@ -656,9 +656,9 @@ hostentNULL if the lookups fail or if  if the lookups fail or if bufbuf
 was too small to hold the list of addresses and names referenced by
 the struct
 hostent.  If .  If bufbuf was too small, both
 
 
-
+
 
-
+
 lwres_getipnodelwres_getipnodebyname()
 looks up addresses of protocol family
-afaf
 
 for the hostname
-namename.
 
 The
-flagsflags
 parameter contains ORed flag bits to 
 specify the types of addresses that are searched
@@ -232,9 +232,9 @@ CLASS="CONSTANT"
 >
This is used with an
-afaf
 of AF_INET6, and causes IPv4 addresses to be returned as IPv4-mapped
 IPv6 addresses.
This is used with an
-afaf
 of AF_INET6, and causes all known addresses (IPv6 and IPv4) to be returned.
 If AI_V4MAPPED is also set, the IPv4 addresses are return as mapped
@@ -295,19 +295,19 @@ CLASS="FUNCTION"
 >
 performs a reverse lookup
 of address
-srcsrc
 which is
-lenlen
 bytes long.
-afaf
 denotes the protocol family, typically
 struct hostent
 pointer
-hehe.
 
 Any memory allocated for the
@@ -377,9 +377,9 @@ CLASS="FUNCTION"
 >lwres_getipnodebyaddr()
 set
-*error_num*error_num
 to an appropriate error code and the function returns a
 
 
-
+
 
-
+
 lwres_getnameinfostruct sockaddr  sasa which is
-salensalen bytes long.  The hostname is of length
-hostlenhostlen and is returned via
-*host.*host. The maximum length of the hostname is
 1025 bytes: .
 The name of the service associated with the port number in
-sa is returned in sa is returned in *serv.*serv.
-It is servlenservlen bytes long.  The maximum length
 of the service name is NI_MAXSERV - 32 bytes.
 The  The flagsflags argument sets the following
 bits:
 

 
-
+
 
-
+
 lwres_getrrsetbynamelwres_getrrsetbyname()
 gets a set of resource records associated with a
-hostnamehostname,
 
-classclass,
 
 and
-typetype.
 
-hostnamehostname
 is
 a pointer a to null-terminated string.  The
-flagsflags
 field is currently unused and must be zero.
lwres_getrrsetbyname(),
 
-*res*res
 is a pointer to an
 lwres_freerrset().
 
-rrsetrrset
 is a pointer to a
 
 
-
+
 
-
+
 lwres_gnbalwres_gnbarequest_render()
 uses resolver context
-ctxctx
 to convert getnamebyaddr request structure
-reqreq
 to canonical format.
 The packet header structure
-pktpkt
 is initialised and transferred to
 buffer
-bb.
 The contents of
-*req*req
 are then appended to the buffer in canonical format.
 lwres_gnbarequest_parse()
 uses context
-ctxctx
 to convert the contents of packet
-pktpkt
 to a
 
 structure.
 Buffer
-bb
 provides space to be used for storing this structure.
 When the function succeeds, the resulting
@@ -246,9 +246,9 @@ CLASS="TYPE"
 >lwres_gnbarequest_t
 is made available through
-*structp*structp.
 lwres_gnbarequest_free()
 release the memory in resolver context
-ctxctx
 that was allocated to the
 lwres_gnbarequest_t
 structures referenced via
-structpstructp.
 Any memory associated with ancillary buffers and strings for those
 structures is also discarded.
LWRES_R_UNEXPECTEDEND
 is returned if the available space in the buffer
-bb
 is too small to accommodate the packet header or the
 
 
-
+
 
-
+
 lwres_hstrerrorlwres_herror() prints the string
-ss on stderrlwres_hstrerror() returns an appropriate string
-for the error code gievn by errerr.  The values of
 the error codes and messages are as follows:
 
diff --git a/lib/lwres/man/lwres_inetntop.html b/lib/lwres/man/lwres_inetntop.html
index b359c01466..7588bf1edf 100644
--- a/lib/lwres/man/lwres_inetntop.html
+++ b/lib/lwres/man/lwres_inetntop.html
@@ -15,16 +15,16 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-
+
 
-
+
 lwres_inetntoplwres_net_ntop() converts an IP address of
-protocol family afaf — IPv4 or IPv6 —
-at location srcsrc from network format to its
 conventional representation as a string.  For IPv4 addresses, that
 string would be a dotted-decimal.  An IPv6 address would be
 represented in colon notation as described in RFC1884.
The generated string is copied to The generated string is copied to dstdst provided
-sizesize indicates it is long enough to store the
 ASCII representation of the address.
RETURN VALUES
If successful, the function returns If successful, the function returns dstdst:
 a pointer to a string containing the presentation format of the
 address.  EAFNOSUPPORT if
-the protocol family given in afaf is not
 supported.

 
-
+
 
-
+
 lwres_nooplwres_nooprequest_render() uses resolver
-context ctxctx to convert no-op request structure
-reqreq to canonical format.  The packet header
-structure pktpkt is initialised and transferred to
-buffer bb.  The contents of
-*req*req are then appended to the buffer in
 canonical format.  lwres_nooprequest_parse() uses context
-ctxctx to convert the contents of packet
-pktpkt to a lwres_nooprequest_t
-structure.  Buffer bb provides space to be used
 for storing this structure.  When the function succeeds, the resulting
 lwres_nooprequest_t is made available through
-*structp*structp.
 lwres_nooprequest_free() release the memory in
-resolver context ctxctx that was allocated to the
 lwres_nooprequest_t
-structures referenced via structpstructp.
LWRES_R_UNEXPECTEDEND
 is returned if the available space in the buffer
-bb
 is too small to accommodate the packet header or the
 
 
-
+
 
-
+
 lwres_packetlwres_lwpacket_t  *pkt*pkt in network
 byte order to the lightweight resolver buffer,
-*b*b.
lwres_lwpacket_parseheader() performs the
 converse operation.  It transfers data in network byte order from
-buffer *b*b to resolver packet
-*pkt*pkt.  The contents of the buffer
-bb should correspond to a
 LWRES_R_SUCCESS.  If there is insufficient
-space to copy data between the buffer *b*b and
-lightweight resolver packet *pkt*pkt both functions
 return 
 
-
+
 
-
+
 lwres_resutillwres_string_parse() retrieves a DNS-encoded
 string starting the current pointer of lightweight resolver buffer
-bb: i.e.  b->current.
 When the function returns, the address of the first byte of the
-encoded string is returned via *c*c and the
-length of that string is given by *len*len.  The
 buffer's current pointer is advanced to point at the character
 following the string length, the encoded string, and the trailing
@@ -138,9 +138,9 @@ CLASS="TYPE"
 CLASS="FUNCTION"
 >lwres_addr_parse() extracts an address from the
-buffer bb.  The buffer's current pointer
 lwres_getaddrsbyname() to perform foward lookups.
-Hostname namename is looked up using the resolver
-context ctxctx for memory allocation.
-addrtypesaddrtypes is a bitmask indicating which type of
 addresses are to be looked up.  Current values for this bitmask are
 LWRES_ADDRTYPE_V6 for IPv6 addresses.  Results of the
-lookup are returned in *structp*structp.
lwres_getnamebyaddr() performs reverse lookups.
-Resolver context ctxctx is used for memory
 allocation.  The address type is indicated by
-addrtypeaddrtype: LWRES_ADDRTYPE_V4LWRES_ADDRTYPE_V6.  The address to be looked up is given
-by addraddr and its length is
-addrlenaddrlen bytes.  The result of the function call
-is made available through *structp*structp.
LWRES_R_NOTFOUND
 if the hostname
-namename
 could not be found.