Manpage of IPSEC_DNSKEY

Content-type: text/html

# IPSEC_DNSKEY

Section: Maintenance Commands (8)
Updated: 30 Sep 2002
Index Return to Main Contents

## NAME

ipsec dnskey - lookup items in DNS to help pluto (and others)

## SYNOPSIS

ipsec dnskey

ipsec dnskey --prompt

ipsec dnskey --single

ipsec dnskey --help

## DESCRIPTION

dnskey is a helper program that does DNS lookups for other programs. It implements an asynchronous interface on stdin/stdout, with an ASCII driven command language.

If stdin is a tty or if the --prompt option is given, then it issues a prompt to the user. Otherwise, it is silent, except for results.

The program will accept multiple queries concurrently, with each result being marked with the ID provided on the output. The IDs are strings.

If the --single option is given, then the program will not attempt to execute concurrent queries, but will serialize all input and output.

## QUERY LANGUAGE

There are eleven command that the program understands. This is to lookup different types of records in both the forward and reverse maps.

KEY queryid FQDN

looks up the FQDN in the DNS, returning 1 or more KEY resource records.

KEY4 queryid IPv4-address

looks up in the reverse map ( in-addr.arpa. ) for a KEY record for the given IPv4 address.

KEY6 queryid IPv6-address

looks up in the reverse map (both ip6.arpa and ip6.int
in that order) for the KEY record for the given IPv6 address.

TXT4 queryid IPv4-address

looks up in the reverse map ( in-addr.arpa. ) for a TXT record for the given IPv4 address.

TXT6 queryid IPv6-address

looks up in the reverse map (both ip6.arpa and ip6.int
in that order) for the TXT record for the given IPv6 address.

IPSECKEY4 queryid IPv4-address

looks up in the reverse map ( in-addr.arpa. ) for an IPSECKEY record for the given IPv4 address.

IPSECKEY6 queryid IPv6-address

looks up in the reverse map (both ip6.arpa and ip6.int
in that order) for the IPSECKEY record for the given IPv6 address.

OE4 queryid IPv4-address

looks up in the reverse map ( in-addr.arpa. ) for an appropriate resource record for the IPv4 address. This may involve looking for IPSECKEY, TXT or KEY resource records.

OE6 queryid IPv6-address

looks up in the reverse map (both ip6.arpa and ip6.int
in that order) for an appropriate resource record for IPv6 addresses. This may involve looking for IPSECKEY, TXT or KEY resource records.

VPN queryid FQDN

looks up in the forward map for FQDN for an appropriate resource record for VPN purposes. This is an alias for "KEY" in DNS usage. Other resolvers may treat this differently.

VPN4 queryid IPv4-address

looks up in the reverse map ( in-addr.arpa. ) for an appropriate resource record for the IPv4 for VPN purposes. This is an alias for "KEY4" in DNS usage. Other resolves may treat this differently.

OE6 queryid IPv6-address

looks up in the reverse map (both ip6.arpa and ip6.int
in that order) for an appropriate resource record for IPv6 addresses. This may involve looking for IPSECKEY, TXT or KEY resource records.

A queryid FQDN

This looks up a forward (A) resource record for FQDN.

AAAA queryid FQDN

This looks up a forward (AAAA) resource record for FQDN.

## EXAMPLE

    % ipsec dnskey --prompt --single
    dnskey> OE4 31459 1.2.3.4
    31459 START 1033404745
    31459 INFO QUERYING 3.4.5.6
    31459 INFO QUERYING 3.4.8.9
    31459 INFO GOT SOA 3.2.1.in-addr.arpa. revision 4
    31459 INFO GOT CNAME 4.3.2.1.in-addr.arpa to 4.0/26.3.2.1.in-addr.arpa.
    31459 KEY 16896 4 1 AwEAAZ7PeJW...yRAHbR
    31459 DONE
    dnskey>

## FILES

## SEE ALSO

ipsec(8), pluto(8)

## HISTORY

Written for the Linux FreeS/WAN project <http://www.freeswan.org/> by Michael Richardson <mcr@freeswan.org>

## Index

NAME
SYNOPSIS
DESCRIPTION
QUERY LANGUAGE
EXAMPLE
FILES
SEE ALSO
HISTORY

This document was created by man2html, using the manual pages.
Time: 08:20:00 GMT, January 07, 2003