The Linux Manuals (man pages) document is an important part of Linux documents. Linux Manuals are organized as several sections. Each section has a group of commands for a specific area in Linux usage, administration or development.
do-release-upgrade – upgrade operating system to latest release Synopsis do-release-upgrade [options] Description Upgrade the operating system to the latest release from the command-line. This is the preferred command if the machine has no graphic environment or if the machine is to be upgraded over a remote connection. Options -h, –help show help message and exit…
dnstop – displays various tables of DNS traffic on your network Synopsis [-46apsQR ] [-b expression ] [-i address ] [-f filter ] [-r interval ] [device ] [savefile ] Description is a small tool to listen on device or to parse the file savefile and collect and print statistics on the local network’s DNS…
dnsspoof – forge replies to DNS address / pointer queries Synopsis dnsspoof [-i interface] [-f hostsfile] [expression] Description dnsspoof forges replies to arbitrary DNS address / pointer queries on the LAN. This is useful in bypassing hostname-based access controls, or in implementing a variety of man-in-the-middle attacks. Options -i interface Specify the interface to use….
dnssec_trigger_selinux – Security Enhanced Linux Policy for the dnssec_trigger processes Description Security-Enhanced Linux secures the dnssec_trigger processes via flexible mandatory access control. The dnssec_trigger processes execute with the dnssec_trigger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
dnssec_selinux – Security Enhanced Linux Policy for the dnssec processes Description Security-Enhanced Linux secures the dnssec processes via flexible mandatory access control. Nsswitch Domain File Contexts SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to lsP Policy governs…
dnssec-verify – DNSSEC zone verification tool Synopsis dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-x] [-z] {zonefile} Description dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete. Options -c class Specifies the DNS class of the zone….
dnssec-trigger, dnssec-triggerd, dnssec-trigger-panel, dnssec-trigger-control, dnssec-trigger-control-setup, dnssec-trigger.conf – check DNS servers for DNSSEC support and adjust to compensate. Synopsis dnssec-triggerd [-d] [-v] [-u] [-c file] dnssec-trigger-control [-c file] [-s ip[@port] ] command [arguments] dnssec-trigger-panel [-d] [-c file] Description The dnssec-trigger programs steer unbound(8) towards DNSSEC capable DNS servers. A DHCP hook installed on the system calls…
dnssec-signzone – DNSSEC zone signing tool Synopsis dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] [-K directory] [-k key] [-L serial] [-l domain] [-i interval] [-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] [-p] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-X extended end-time] [-x] [-z] [-3 salt] [-H iterations] [-A] {zonefile} [key…] Description dnssec-signzone signs a zone. It generates NSEC and…
dnssec-settime – Set the key timing metadata for a DNSSEC key Synopsis dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-h] [-v level] [-E engine] {keyfile} Description dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, -A, -R, -I, and -D options. The metadata can then be…
dnssec-revoke – Set the REVOKED bit on a DNSSEC key Synopsis dnssec-revoke [-hr] [-v level] [-K directory] [-E engine] [-f] [-R] {keyfile} Description dnssec-revoke reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files containing the now-revoked key. Options -h Emit usage message…
dnssec-keygen – DNSSEC key generation tool Synopsis dnssec-keygen [-a algorithm] [-b keysize] [-n nametype] [-3] [-A date/offset] [-C] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] [-I date/offset] [-i interval] [-K directory] [-L ttl] [-k] [-P date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] [-s strength] [-t type] [-v level] [-z] {name} Description dnssec-keygen generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can…
dnssec-keyfromlabel – DNSSEC key generation tool Synopsis dnssec-keyfromlabel {-l label} [-3] [-a algorithm] [-A date/offset] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-k] [-K directory] [-L ttl] [-n nametype] [-P date/offset] [-p protocol] [-R date/offset] [-t type] [-v level] [-y] {name} Description dnssec-keyfromlabel gets keys with the given label from a crypto hardware and builds key files for DNSSEC (Secure DNS), as defined in RFC 2535 and…
dnssec-importkey – Import DNSKEY records from external systems so they can be managed. Synopsis dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-D date/offset] [-h] [-v level] [-V] {keyfile} dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-D date/offset] [-h] [-v level] [-V] [dnsname] Description dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY record may be read from an…
dnssec-dsfromkey – DNSSEC DS RR generation tool Synopsis dnssec-dsfromkey [-v level] [-1] [-2] [-a alg] [-l domain] [-T TTL] {keyfile} dnssec-dsfromkey {-s} [-1] [-2] [-a alg] [-K directory] [-l domain] [-s] [-c class] [-T TTL] [-f file] [-A] [-v level] {dnsname} Description dnssec-dsfromkey outputs the Delegation Signer (DS) resource record (RR), as defined in RFC 3658 and RFC 4509, for the given key(s). Options -1 Use…
dnssec-coverage – checks future DNSKEY coverage for a zone Synopsis dnssec-coverage [-K directory] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] [-c compilezone path] [zone] Description dnssec-coverage verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set properly to ensure no future lapses in DNSSEC coverage. If zone is specified, then…
dnssec-checkds – A DNSSEC delegation consistency checking tool. Synopsis dnssec-checkds [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} dnssec-dsfromkey [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} Description dnssec-checkds verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) resource records for keys in a specified zone. Options -f file If a file is specified,…
dnsmasq_selinux – Security Enhanced Linux Policy for the dnsmasq processes Description Security-Enhanced Linux secures the dnsmasq processes via flexible mandatory access control. The dnsmasq processes execute with the dnsmasq_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
dnsmasq – A lightweight DHCP and caching DNS server. Synopsis dnsmasq [OPTION]… Description dnsmasq is a lightweight DNS, TFTP, PXE, router advertisement and DHCP server. It is intended to provide coupled DNS and DHCP service to a LAN. Dnsmasq accepts DNS queries and either answers them from a small, local, cache or forwards them to…
dnscrypt-proxy – A DNSCrypt forwarder Synopsis dnscrypt-proxy [options] Description dnscrypt-proxy accepts DNS requests, authenticates and encrypts them using dnscrypt and forwards them to a remote dnscrypt-enabled resolver. Replies from the resolver are expected to be authenticated or else they will be discarded. The proxy verifies the replies, decrypts them, and transparently forwards them to the…
dnscache – djbdns DNS cache daemon. Synopsis dnscache [OPTIONS] Description dnscache is used to map a domain name to its IP address and vice versa. Upon invocation, dnscache reads from its configuration file and listens on TCP/UDP port 53 for incoming requests. Typically dnscache accepts incoming requests only from localhost(127.0.0.1). To accept requests from external…