DNSPROXY(1)               BSD General Commands Manual              DNSPROXY(1)

NNAAMMEE
     ddnnsspprrooxxyy -- DNS proxy

SSYYNNOOPPSSIISS
     ddnnsspprrooxxyy [--ddhhVV] [--cc _f_i_l_e]

DDEESSCCRRIIPPTTIIOONN
     The ddnnsspprrooxxyy daemon waits for nameserver queries on a user specified
     address, dispatches these queries to authoritative and recursive name-
     servers and forwards the received answers back to the original client.

     The options are as follows:

     --cc _f_i_l_e  Read configuration from file.

     --dd       Detach from current terminal and run as background process.

     --hh       Show usage.

     --VV       Show version.

     If a client from an internal IP address does a recursive lookup the query
     is forwarded to a recursive DNS server.  Authoritative queries and
     queries coming from clients in foreign networks are forwarded to an
     authoritative DNS server.

CCOONNFFIIGGUURRAATTIIOONN FFIILLEE
     At startup ddnnsspprrooxxyy reads a configuration file specified via the -c
     option or at the default location of /etc/dnsproxy.conf.

     The following keywords are recognized:

     authoritative _I_P
     Address of the authoritative nameserver [required].

     recursive _I_P
     Address of the recursive nameserver [required].

     listen _I_P
     Local address (defaults to 0.0.0.0).

     port _n_u_m_b_e_r
     Local port number (defaults to 53).

     chroot _p_a_t_h
     A path to chroot to before starting to answer queries.

     user _n_a_m_e
     A user to change to before starting to answer queries.

     authoritative-timeout _s_e_c_o_n_d_s
     Time in seconds when authoritative queries time out (defaults to 10).

     recursive-timeout _s_e_c_o_n_d_s
     Time in seconds when recursive queries time out (defaults to 90).

     authoritative-port _n_u_m_b_e_r
     Port number on authoritative nameserver (defaults to 53).

     recursive-port _n_u_m_b_e_r
     Port number on recursive nameserver (defaults to 53).

     statistics _s_e_c_o_n_d_s
     Period between output of statistics (defaults to 3600).  Use 0 to disable
     output of statistics completely.

     internal _n_e_t_w_o_r_k
     Declare networks recognized as internal and thus eligible to do recursive
     queries. One network in CIDR notation per keyword.

   EEXXAAMMPPLLEE
           authoritative 10.1.1.1
           recursive 127.0.0.1
           recursive-port 10053
           listen 192.168.1.1
           port 53
           chroot /var/empty
           user nobody
           internal 192.168.1.0/24
           internal 127.0.0.1

SSTTAATTIISSTTIICCSS
     Every hour (by default) ddnnsspprrooxxyy logs the collected statistics about its
     usage to standard error (or syslog when running detached). Statistics
     look like

           ActiveQr AuthorQr RecursQr AllQuery Answered
           0        0        0        0        0
           TimeoutQ DroppedQ DroppedA LateAnsw HashColl
           0        0        0        0        0

     and have the following meaning:

     ActiveQr
     Number of currently active queries proxied to the servers.

     AuthorQr
     Accumulated number of authoritative queries.

     RecursQr
     Accumulated number of recursive queries.

     AllQuery
     Accumulated number of all queries ever received.

     Answered
     Accumulated number of answered queries.

     TimeoutQ
     Accumulated number of queries that did not receive an answer in time.

     DroppedQ
     Accumulated number of dropped queries (e.g. transmission errors).

     DroppedA
     Accumulated number of dropped answers.

     LateAnsw
     Accumulated number of answers received after the timeout period.

     HashColl
     Accumulated number of hash collisions in the query list.

SSEEEE AALLSSOO
     named(1)

VVEERRSSIIOONN
     This manual page describes ddnnsspprrooxxyy version 1.15.

AAUUTTHHOORRSS
     Armin Wolfermann <armin@wolfermann.org>

     The ddnnsspprrooxxyy homepage is at http://www.wolfermann.org/dnsproxy.html.

LOCAL                          November 29, 2003                         LOCAL