123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327 |
- .TH PDNSD 8 "Jul 2007" "pdnsd @fullversion@" "System Administration Commands"
- .SH NAME
- \fBpdnsd\fP \- dns proxy daemon
- .SH SYNOPSIS
- \fBpdnsd\fP [\-h] [\-V] [\-s] [\-d] [\-g] [\-t] [\-p \fIfile\fR] [\-v\fIn\fR] [\-m\fIxx\fR] [\-c \fIfile\fR] [\-4] [\-6] [\-a]
- .PP
- This man page is an extract of the documentation of \fBpdnsd\fP.
- For complete, current documentation, refer to the HTML (or plain text)
- documentation (which you can find in the \fBdoc/\fP subdirectory of the
- source or in a standard documentation directory, typically
- \fB/usr/share/doc/pdnsd/\fP if you are using a binary package).
- .SH DESCRIPTION
- .PP
- \fBpdnsd\fP is a IPv6 capable proxy domain name server (DNS) which
- saves the contents of its DNS cache to the disk on exit.
- .SH OPTIONS
- .RS
- .TP
- .B \-4
- enables IPv4 support. IPv6 support is automatically
- disabled (should it be available). On by default.
- .TP
- .B \-6
- enables IPv6 support. IPv4 support is automatically
- disabled (should it be available). Off by default.
- .TP
- .B \-a
- With this option, pdnsd will try to detect automatically if
- the system supports IPv6, and fall back to IPv4 otherwise.
- .TP
- .BR \-V " or " \-\-version
- Print version information and exit.
- .TP
- \fB\-c\fP \fIFILE\fP or \fB\-\-config\-file=\fP\fIFILE\fP
- specifies that configuration is to be read from \fIFILE\fP.
- Default is \fB@sysconfdir@/pdnsd.conf\fP.
- .TP
- .BR \-d " or " \-\-daemon
- Start \fBpdnsd\fP in daemon mode (as a background process).
- .TP
- .BR \-g " or " \-\-debug
- Print some debug messages on the console or to the file
- \fBpdnsd.debug\fP in your cache directory (in daemon mode).
- .TP
- .BR \-h " or " \-\-help
- Print an option summary and exit.
- .TP
- \fB\-i\fP \fIPREFIX\fP or \fB\-\-ipv4_6_prefix=\fP\fIPREFIX\fP
- specifies the prefix pdnsd uses (when running in IPv6 mode) to map IPv4
- addresses in the configuration file to IPv6 addresses. Must be a valid IPv6
- address. Default is ::ffff:0.0.0.0
- .TP
- .B \-p \fIFILE\fP
- writes the pid the server runs as to the specified filename. Works
- only in daemon mode.
- .TP
- .B \-\-pdnsd\-user
- Print the user \fBpdnsd\fP will run as and exit.
- .TP
- .BR \-s " or " \-\-status
- enables the status control socket. Either this option should be passed
- to the command line or \fBstatus_ctl=on;\fP should be specified in the
- config file if you want to use
- .BR pdnsd\-ctl (8)
- to control \fBpdnsd\fP at runtime.
- .TP
- .BR \-t " or " \-\-tcp
- enables the TCP server thread. \fBpdnsd\fP will then serve TCP and UDP
- queries.
- .TP
- .BI \-v n
- sets the verbosity of \fBpdnsd\fP. \fIn\fP is a numeric argument
- between 0 (normal operation) to 3 (many messages for debugging).
- .TP
- .BI \-m xx
- sets the query method \fBpdnsd\fP
- uses. Possible values for \fIxx\fP are:
- .IP
- .B uo
- \- pdnsd will use UDP only. This is the fastest method, and should
- be supported by all name servers on the Internet.
- .IP
- .B to
- \- pdnsd will use TCP only. TCP queries usually take more time than
- UDP queries, but are more secure against certain attacks, where an
- attacker tries to guess your query id and to send forged answers. TCP
- queries are not supported by some name servers.
- .IP
- .B tu
- \- pdnsd will try to use TCP, and will fall back to UDP if its
- connection is refused or times out.
- .IP
- .B ut
- \- pdnsd will try to use UDP, and will repeat the query using TCP
- if the UDP reply was truncated (i.e. the tc bit is set).
- This is the behaviour recommended by the DNS standards.
- .PP
- Additionally, "no" can be prepended to the \-\-status, \-\-daemon, \-\-debug
- and \-\-tcp options (e.g. \-\-notcp) to reverse their effect.
- .RE
- .SH USAGE
- .PP
- \fBpdnsd\fP is usually run from a startup script. For \fBpdnsd\fP to
- work, You need to:-
- .IP
- 1. Tell your system to use \fBpdnsd\fP as the primary DNS server by
- modifying \fB/etc/resolv.conf\fP.
- .IP
- 2. Tell \fBpdnsd\fP to use an authentic source for DNS records, by
- including the IP addresses of one or more DNS servers, usually your
- ISP's DNS servers, in \fB@sysconfdir@/pdnsd.conf\fP.
- .PP
- For this, put the following line in your \fB/etc/resolv.conf\fP
- .PP
- .RS
- nameserver 127.0.0.X
- .RE
- .PP
- where X can be any number. (I use 3). Comment out all other
- entries. You should put the same value in the server_ip= line in
- \fBglobal\fP section of \fB@sysconfdir@/pdnsd.conf\fP.
- .br
- If you want to use \fBpdnsd\fP as the DNS server for a small local network,
- you should use the IP address or name of the interface connected to
- this network instead of 127.0.0.X.
- .RE
- .PP
- To tell \fBpdnsd\fP where to get DNS information from, add the
- following lines in \fB@sysconfdir@/pdnsd.conf\fP:-
- .PP
- .RS
- server {
- .br
- label= "myisp";
- ip=123.456.789.001,123.456.789.002;
- proxy_only=on;
- timeout=10;
- .br
- }
- .RE
- .PP
- Note the opening and closing braces. Add more such \fBserver\fP
- sections for each set of DNS servers you want \fBpdnsd\fP to query.
- Of course the configuration options shown here are just examples.
- More examples can be found in \fB@sysconfdir@/pdnsd.conf.sample\fP
- or the pdnsd.conf in the documentation directory.
- See the
- .BR pdnsd.conf (5)
- man page for all the possible options and their exact meaning.
- .PP
- If you use a dial up connection, remember that ppp scripts usually
- replace \fB/etc/resolv.conf\fP when connection with the ISP is
- established. You need to configure ppp (or whatever you use to
- establish a connection) so that \fB/etc/resolv.conf\fP is not replaced
- every time a connection is established. Read the documentation for the
- scripts run when your network comes up.
- .PP
- If you use pppconfig, specify `none' in the `nameservers' option in
- the `advanced' tab. If you use multiple ISPs, you should do this for
- each connection/account.
- .PP
- If you use multiple ISPs, you should tell \fBpdnsd\fP which DNS servers
- have become available by calling \fBpdnsd\-ctl\fP, the \fBpdnsd\fP
- control utility, in a script (e.g. \fB/etc/ppp/ip\-up\fP when you use pppd)
- that is run when the connection is established.
- If the addresses of the DNS servers are obtained through some type of
- dynamic configuration protocol (e.g. pppd with the usepeerdns
- option or a DHCP client), you can pass the DNS server addresses as an extra
- argument to \fBpdnsd\-ctl\fP to configure \fBpdnsd\fP at run time.
- See the
- .BR pdnsd\-ctl (8)
- man page for details.
- .SH FILES
- \fB@sysconfdir@/pdnsd.conf\fP is the pdnsd configuration file.
- The file format and configuration options are described in the
- .BR pdnsd.conf (5)
- man page. You can find examples of almost all options in
- \fB@sysconfdir@/pdnsd.conf.sample\fP.
- .PP
- \fB@cachedir@/pdnsd.cache\fP
- .PP
- \fB@cachedir@/pdnsd.status\fP is the status control socket, which must be
- enabled before you can use \fBpdnsd\-ctl\fP.
- .PP
- \fB/etc/init.d/pdnsd\fP (the name and location of the start-up script
- may be different depending on your distribution.)
- .PP
- \fB/etc/resolv.conf\fP
- .PP
- \fB/etc/defaults/pdnsd\fP contains additional parameters or options
- which may be passed to pdnsd at boot time. This saves the hassle of
- fiddling with initscripts (not available on all distributions).
- .SH BUGS
- .PP
- The verbosity option
- .BI -v n
- presently does not seem to have much effect on the amount of debug output.
- .br
- Report any remaining bugs to the authors.
- .SH CONFORMING TO
- .PP
- \fBpdnsd\fP should comply with RFCs 1034 and 1035. As of version
- 1.0.0, RFC compliance has been improved and pdnsd is now believed (or
- hoped?) to be fully RFC compatible. It completely follows RFC 2181
- (except for one minor issue in the FreeBSD port, see the
- documentation).
- .PP
- It does \fINOT\fP support the following features, of which most are
- marked optional, experimental or obsolete in these RFCs:
- .IP
- \(bu Inverse queries
- .IP
- \(bu Status queries
- .IP
- \(bu Completion queries
- .IP
- \(bu Namespaces other than IN (Internet)
- .IP
- \(bu AXFR and IXFR queries (whole zone transfers); since pdnsd does not maintain zones, that should not violate the standard
- .PP
- The following record types, that are extensions to the original DNS
- standard, are supported if given as options at compile time. (if you
- do not need them, you do not need to compile support for them into
- pdnsd and save cache and executable space):
- .IP
- \(bu RP (responsible person, RFC 1183)
- .IP
- \(bu AFSDB (AFS database location, RFC 1183)
- .IP
- \(bu X25 (X25 address, RFC 1183)
- .IP
- \(bu ISDN (ISDN number/address, RFC 1183)
- .IP
- \(bu RT (route through, RFC 1183)
- .IP
- \(bu NSAP (Network Service Access Protocol address , RFC 1348)
- .IP
- \(bu PX (X.400/RFC822 mapping information, RFC 1995)
- .IP
- \(bu GPOS (geographic position, deprecated)
- .IP
- \(bu AAAA (IPv6 address, RFC 1886)
- .IP
- \(bu LOC (location, RFC 1876)
- .IP
- \(bu EID (Nimrod EID)
- .IP
- \(bu NIMLOC (Nimrod locator)
- .IP
- \(bu SRV (service record, RFC 2782)
- .IP
- \(bu ATMA (ATM address)
- .IP
- \(bu NAPTR (URI mapping, RFC 2168)
- .IP
- \(bu KX (key exchange, RFC 2230)
- .SH SEE ALSO
- .PP
- .BR pdnsd\-ctl (8),
- .BR pdnsd.conf (5),
- .BR pppconfig (8),
- .BR resolv.conf (5)
- .PP
- More documentation is available in the \fBdoc/\fP subdirectory of the source,
- or in \fB/usr/share/doc/pdnsd/\fP if you are using a binary package.
- .SH AUTHORS
- \fBpdnsd\fP was originally written by Thomas Moestl,
- .UR
- <tmoestl@gmx.net>,
- .UE
- and was extensively revised by Paul A. Rombouts
- .UR
- <p.a.rombouts@home.nl>
- .UE
- (for versions 1.1.8b1\-par and later).
- .PP
- Several others have contributed to \fBpdnsd\fP; see files in the
- source or \fB/usr/share/doc/pdnsd/\fP directory.
- .PP
- This man page was written by Mahesh T. Pai
- .UR
- <paivakil@yahoo.co.in>
- .UE
- using the documents in \fB/usr/share/docs/pdnsd/\fP directory for Debian,
- but can be used on other distributions too.
- .PP
- Last revised: 22 Jul 2007 by Paul A. Rombouts.
- .SH COPYRIGHT
- .PP
- This man page is a part of the pdnsd package, and may be distributed
- in original or modified form under terms of the GNU General Public
- License, as published by the Free Software Foundation; either version
- 3, or (at your option) any later version.
- .PP
- You can find a copy of the GNU GPL in the file \fBCOPYING\fP in the source
- or the \fB/usr/share/common\-licenses/\fP directory if you are using a
- Debian system.
|