D. J. Bernstein
Internet publication
djbdns

The axfrdns-conf program

axfrdns-conf sets up a DNS zone-transfer service.

Interface

     axfrdns-conf acct logacct D tiny ip

axfrdns-conf creates a service directory D that runs axfrdns under tcpserver. The name D must start with a slash and must not contain any special characters. Normally D is /etc/axfrdns.

You can run the service under svscan by creating a symbolic link in the svscan directory:

     ln -s D /service
The service will start within five seconds, and will be restarted upon reboot. You can use svc to control the service.

axfrdns-conf arranges for tcpserver to listen for TCP connections on port 53 of ip. It sets up D/tcp in tcprules format to control access to axfrdns; initially all access is denied. It also sets up D/Makefile to compile tcp into tcp.cdb for tcpserver.

axfrdns-conf arranges for axfrdns to chroot to tiny/root and to run under the uid and gid of acct. The name tiny must start with a slash and must not contain any special characters; normally it is /etc/tinydns. The name acct must not contain any special characters.

axfrdns-conf creates an automatically rotated log directory in D/log/main. The logs are owned by logacct. The corresponding multilog processes run under the uid and gid of logacct. The name logacct must not contain any special characters.