Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
NSEC(1)			    General Commands Manual		       NSEC(1)

NAME
       nsec -- generate	NSEC records for a zone

SYNOPSIS
       nsec [zonefile]

DESCRIPTION
       nsec writes DNSSEC NSEC records for a zone to standard output.

       The  records  are  generated  for the zone described in zonefile, which
       must be in the format described by RFC 1035.

       An NSEC record lists the	record types available at a  particular	 name,
       and  the	 next  valid name in the zone.	It is used to fill in the gaps
       between the valid records in a zone and is returned alongside its  sig-
       nature  in  NXDOMAIN  responses	to  prove the absence of the requested
       record.

OPTIONS
       None.

EXAMPLES
       Generate	NSEC records for the example.com zone:

	     $ nsec example.com.zone
	     example.com.    1200    IN	     NSEC    ns1.example.com. A	NS SOA RRSIG NSEC DNSKEY
	     ns1.example.com.	     1200    IN	     NSEC    example.com. A RRSIG NSEC

SEE ALSO
       dnskey(1), ds(1), rrsig(1), tlsa(1)

FreeBSD	ports 15.0		 May 10, 2021			       NSEC(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=nsec&sektion=1&manpath=FreeBSD+Ports+15.0>

home | help