Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Contact Us
Online Help
Domain Status
Man Pages

Virtual Servers

Topology Map

Server Agreement
Year 2038

USA Flag



Man Pages

Manual Reference Pages  -  AXFR2ACL (1)

.ds Aq ’


axfr2acl - create a BIND ACL containing "A" records from a set of zones



axfr2acl [options]


<B>Axfr2aclB> collects all <B>AB> records from a set of supplied DNS zones and writes out a DNS ACL containing all of them. If possible, the addresses are compressed into CIDRs. The resulting list is sorted lexicographically.

The resulting ACL is normally written to a file, either as a list of CIDRs or as a BIND <B>aclB> statement, if the ACL name is given. In both cases, the file is sutable for inclusion in the BIND configuration file. If the file already exists when the command is invoked, its contents is recorded and is used subsequently to determine whether it has changed. The utility will actually modify the output file only if the constructed list differs from the one it contained initially. It will also avoid running zone transfers if the serial records of all involved zones did not change since the last run.

The program exits with code 0 if the file is up to date, 1 if it has successfully updated the file, 2 if some error ocurred and 3 if the command line usage was incorrect.


The following option control the output:
<B>--aclB>=name Format output as a <B>bindB> ACL statement with the given name.
<B>--commentB>=string Print string as the heading comment to the output. The argument can consist of multiple lines. A # sign will be printed before each of them.
<B>--outfileB>=FILE, <B>-oB> FILE Write the result to FILE, instead of the default netlist.
The following options control the selection of DNS zones and initial contents of the output list:
<B>--add-networkB>=arg Add given CIDRs to the output list. Argument is a comma-separated list of CIDRs.
<B>--from-fileB>=FILE, <B>-TB> FILE Populate the output list with CIDRs read from FILE. The file must list each CIDR on a separate line. Empty lines and comments (introduced by # sign) are ignored.
<B>--zonesB>=zonelist, <B>-zB> zonelist Defines a list of zones to query. Zonelist is a comma-separated list of zone names.
Options controlling log and debug output:
<B>--log-fileB>=FILE, <B>-lB> FILE Write diagnostic output to FILE, instead of standard error.
<B>--debugB>[=spec[,spec...]], <B>-dB>[spec[,spec...]] Set debugging level. Spec is either <B>categoryB> or <B>categoryB>=<B>levelB>, <B>categoryB> is a debugging category name and <B>levelB> is a decimal verbosity level. Valid categories are: GENERAL and DNS.
<B>--dry-runB>, <B>-nB> Don’t create output file. Instead print the result on the standard output.
Informational options:
<B>--helpB>, <B>-hB> Shows a terse help summary and exit.
<B>--manB> Prints the manual page and exits.


The program reads its configuration from one of the following locations:
<B>a.B> The file name given by AXFR2ACL_CONF environment variable (if set)
<B>b.B> <B>~B>/.axfr2acl.conf
<B>c.B> /etc/axfr2acl.conf
The first existing file from this list is used. It is an error, if the <B>B>$AXFR2ACL_CONF<B>B> variable is set, but points to a file that does not exist. It is not an error, if <B>B>$AXFR2ACL_CONF<B>B> is not set and neither of the two remaining files exist. It is, however, an error if any of these file exists, but is not readable.

The configuration file uses a usual UNIX configuration format. Empty lines and UNIX comments are ignored. Each non-empty line is either an option name, or option assignment, i.e. <B>optB>=<B>valB>, with any amount of optional whitespace around the equals sign. Valid option names are the same as the long command line options, but without the leading <B>--B>. For example:

  zones =,
  acl = mynets
  add-network =
  outfile =


AXFR2ACL_CONF The name of the configuration file to read, instead of the default /etc/axfr2acl.conf.




Sergey Poznyakoff <>
Search for    or go to Top of page |  Section 1 |  Main Index

perl v5.20.3 AXFR2ACL (1) 2012-07-07

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.