HP TCP/IP Services for OpenVMS
Management

Part 2
Part 2	BIND
Chapter 6
6	Configuring and Managing BIND Version 9
6.1	Key Concepts
6.1.1	How the Resolver and Name Server Work Together
6.1.2	Common BIND Configurations
6.1.2.1	Master Servers
6.1.2.2	Slave Servers
6.1.2.3	Caching-Only Servers
6.1.2.4	Forwarder Servers
6.2	Security Considerations
6.2.1	Access Control Lists
6.2.2	Dynamic Update Security
6.2.3	TSIG
6.2.4	TKEY
6.2.5	SIG(0)
6.2.6	DNSSEC
6.2.6.1	DNSSEC Restrictions
6.3	Migrating from BIND Version 4 to BIND Version 9
6.3.1	Navigating Two Different BIND Environments
6.4	BIND Service Startup and Shutdown
6.5	Configuring the BIND Server
6.5.1	Configuration File Elements
6.5.2	Address Match Lists
6.5.3	Configuration File Format
6.5.3.1	The ACL Statement
6.5.3.2	The CONTROLS Statement
6.5.3.3	The INCLUDE Statement
6.5.3.4	The KEY Statement
6.5.3.5	The LOGGING Statement
6.5.3.5.1	The Channel Phrase
6.5.3.5.2	The Category Phrase
6.5.3.6	The MASTERS Statement
6.5.3.7	The OPTIONS Statement
6.5.3.7.1	Boolean Options
6.5.3.7.2	Forwarding Options
6.5.3.7.3	Dual-stack Servers
6.5.3.7.4	Access Control Options
6.5.3.7.5	Interfaces Options
6.5.3.7.6	The Query Address Options
6.5.3.7.7	Zone Transfer Options
6.5.3.7.8	Bad UDP Port Lists
6.5.3.7.9	Server Resource Limits
6.5.3.7.10	Periodic Task Intervals Options
6.5.3.7.11	The TOPOLOGY Statement
6.5.3.7.12	The SORTLIST Statement
6.5.3.7.13	RRset Ordering
6.5.3.7.14	Tuning Options
6.5.3.7.15	Built-in Server Information Zone
6.5.3.7.16	The Statistics File
6.5.3.8	The SERVER Statement
6.5.3.9	The TRUSTED-KEYS Statement
6.5.3.10	The VIEW Statement
6.5.3.11	The ZONE Statement
6.5.3.11.1	Type of Zone
6.5.3.11.2	The Zone Class
6.5.3.11.3	Zone Options
6.5.4	IPv6 Support in BIND Version 9
6.5.4.1	Address Lookups Using AAAA Records
6.5.4.2	Address-to-Name Lookups Using Nibble Format
6.5.5	DNS Notify
6.5.6	Incremental Zone Transfers (IXFR)
6.5.7	Dynamic Updates
6.5.7.1	The Journal File
6.5.7.2	Dynamic Update Policies
6.5.7.3	Creating Updates Manually
6.5.8	Configuring Cluster Failover and Redundancy
6.5.8.1	Changing the BIND Database
6.6	Populating the BIND Server Databases
6.6.1	Using Existing Databases
6.6.2	Manually Editing Zone Files
6.6.2.1	Setting TTLs
6.6.2.2	Zone File Directives
6.6.3	Saving Backup Copies of Zone Data
6.6.4	Sample Database Files
6.6.4.1	Local Loopback
6.6.4.2	Hint File
6.6.4.3	Forward Translation File
6.6.4.4	Reverse Translation File
6.7	Examining Name Server Statistics
6.8	Configuring BIND with the SET CONFIGURATION Command
6.8.1	Setting Up a Master Name Server
6.8.2	Setting Up a Secondary (Slave) Name Server
6.8.3	Setting Up a Cache-Only Server
6.8.4	Setting Up a Forwarder Name Server
6.9	Configuring the BIND Resolver
6.9.1	Changing the Default Configuration Using the TCP/IP Management Command Interface
6.9.2	Examples
6.9.3	Configuring the Resolver Using RESOLV.CONF
6.9.3.1	Specifying Nameservers With IPv6 Addresses
6.9.3.2	Resolver Default Retry and Timeout
6.9.4	Resolver Default Search Behavior
6.9.5	Resolver Search Behavior in Earlier Releases
6.9.6	Setting the Resolver's Domain Search List
6.9.6.1	Setting the Search List with TCP/IP Management Commands
6.9.6.2	Setting the Search List with TCP/IP Management Commands
6.10	BIND Server Administrative Tools
Command 1	bind_checkconf
Command 2	bind_checkzone
Command 3	dnssec_keygen
Command 4	dnssec_signzone
Command 5	rndc
Command 6	rndc_confgen
Command 7	nsupdate
6.11	BIND Version 9 Restrictions
6.12	Solving Bind Server Problems
6.12.1	BIND Server Diagnostic Tools
Command 8	dig
Command 9	host
6.12.2	Using NSLOOKUP to Query a Name Server
6.12.3	Solving Specific Name Server Problems
6.12.3.1	Server Not Responding