named.conf.5 39.6 KB
Newer Older
1
.\" Copyright (C) 2004-2018 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
2
.\" 
Tinderbox User's avatar
Tinderbox User committed
3 4 5
.\" This Source Code Form is subject to the terms of the Mozilla Public
.\" License, v. 2.0. If a copy of the MPL was not distributed with this
.\" file, You can obtain one at http://mozilla.org/MPL/2.0/.
Rob Austein's avatar
regen  
Rob Austein committed
6
.\"
Rob Austein's avatar
regen  
Rob Austein committed
7 8
.hy 0
.ad l
Tinderbox User's avatar
Tinderbox User committed
9 10
'\" t
.\"     Title: named.conf
Mark Andrews's avatar
regen  
Mark Andrews committed
11
.\"    Author: 
Tinderbox User's avatar
Tinderbox User committed
12
.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
13
.\"      Date: 2018-06-21
Mark Andrews's avatar
regen  
Mark Andrews committed
14
.\"    Manual: BIND9
Tinderbox User's avatar
Tinderbox User committed
15 16
.\"    Source: ISC
.\"  Language: English
Mark Andrews's avatar
regen  
Mark Andrews committed
17
.\"
18
.TH "NAMED\&.CONF" "5" "2018\-06\-21" "ISC" "BIND9"
Tinderbox User's avatar
Tinderbox User committed
19 20 21 22 23 24 25 26 27 28 29 30
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
Mark Andrews's avatar
regen  
Mark Andrews committed
31 32 33 34
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
Tinderbox User's avatar
Tinderbox User committed
35 36 37
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
Mark Andrews's avatar
regen  
Mark Andrews committed
38
.SH "NAME"
Tinderbox User's avatar
Tinderbox User committed
39
named.conf \- configuration file for \fBnamed\fR
Rob Austein's avatar
regen  
Rob Austein committed
40
.SH "SYNOPSIS"
Tinderbox User's avatar
Tinderbox User committed
41
.HP \w'\fBnamed\&.conf\fR\ 'u
Tinderbox User's avatar
Tinderbox User committed
42
\fBnamed\&.conf\fR
43 44
.SH "DESCRIPTION"
.PP
Tinderbox User's avatar
Tinderbox User committed
45
named\&.conf
Mark Andrews's avatar
regen  
Mark Andrews committed
46
is the configuration file for
Tinderbox User's avatar
Tinderbox User committed
47
\fBnamed\fR\&. Statements are enclosed in braces and terminated with a semi\-colon\&. Clauses in the statements are also semi\-colon terminated\&. The usual comment styles are supported:
48 49 50 51 52 53 54
.PP
C style: /* */
.PP
C++ style: // to end of line
.PP
Unix style: # to end of line
.SH "ACL"
Mark Andrews's avatar
regen  
Mark Andrews committed
55
.sp
Tinderbox User's avatar
Tinderbox User committed
56
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
57
.RS 4
Tinderbox User's avatar
Tinderbox User committed
58
.\}
59
.nf
Tinderbox User's avatar
Tinderbox User committed
60
acl \fIstring\fR { \fIaddress_match_element\fR; \&.\&.\&. };
61
.fi
Tinderbox User's avatar
Tinderbox User committed
62
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
63
.RE
Tinderbox User's avatar
Tinderbox User committed
64
.\}
Tinderbox User's avatar
Tinderbox User committed
65
.SH "CONTROLS"
Mark Andrews's avatar
regen  
Mark Andrews committed
66
.sp
Tinderbox User's avatar
Tinderbox User committed
67
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
68
.RS 4
Tinderbox User's avatar
Tinderbox User committed
69
.\}
70
.nf
Tinderbox User's avatar
Tinderbox User committed
71 72 73 74 75 76 77 78 79 80
controls {
	inet ( \fIipv4_address\fR | \fIipv6_address\fR |
	    * ) [ port ( \fIinteger\fR | * ) ] allow
	    { \fIaddress_match_element\fR; \&.\&.\&. } [
	    keys { \fIstring\fR; \&.\&.\&. } ] [ read\-only
	    \fIboolean\fR ];
	unix \fIquoted_string\fR perm \fIinteger\fR
	    owner \fIinteger\fR group \fIinteger\fR [
	    keys { \fIstring\fR; \&.\&.\&. } ] [ read\-only
	    \fIboolean\fR ];
81 82
};
.fi
Tinderbox User's avatar
Tinderbox User committed
83
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
84
.RE
Tinderbox User's avatar
Tinderbox User committed
85
.\}
Tinderbox User's avatar
Tinderbox User committed
86
.SH "DLZ"
Mark Andrews's avatar
regen  
Mark Andrews committed
87
.sp
Tinderbox User's avatar
Tinderbox User committed
88
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
89
.RS 4
Tinderbox User's avatar
Tinderbox User committed
90
.\}
91
.nf
Tinderbox User's avatar
Tinderbox User committed
92 93 94
dlz \fIstring\fR {
	database \fIstring\fR;
	search \fIboolean\fR;
95 96
};
.fi
Tinderbox User's avatar
Tinderbox User committed
97
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
98
.RE
Tinderbox User's avatar
Tinderbox User committed
99
.\}
Tinderbox User's avatar
Tinderbox User committed
100
.SH "DYNDB"
Mark Andrews's avatar
regen  
Mark Andrews committed
101
.sp
Tinderbox User's avatar
Tinderbox User committed
102
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
103
.RS 4
Tinderbox User's avatar
Tinderbox User committed
104
.\}
105
.nf
Tinderbox User's avatar
Tinderbox User committed
106 107
dyndb \fIstring\fR \fIquoted_string\fR {
    \fIunspecified\-text\fR };
108
.fi
Tinderbox User's avatar
Tinderbox User committed
109
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
110
.RE
Tinderbox User's avatar
Tinderbox User committed
111
.\}
Tinderbox User's avatar
Tinderbox User committed
112
.SH "KEY"
Mark Andrews's avatar
regen  
Mark Andrews committed
113
.sp
Tinderbox User's avatar
Tinderbox User committed
114
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
115
.RS 4
Tinderbox User's avatar
Tinderbox User committed
116
.\}
117
.nf
Tinderbox User's avatar
Tinderbox User committed
118 119 120
key \fIstring\fR {
	algorithm \fIstring\fR;
	secret \fIstring\fR;
121 122
};
.fi
Tinderbox User's avatar
Tinderbox User committed
123
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
124
.RE
Tinderbox User's avatar
Tinderbox User committed
125
.\}
Tinderbox User's avatar
Tinderbox User committed
126
.SH "LOGGING"
Automatic Updater's avatar
regen  
Automatic Updater committed
127
.sp
Tinderbox User's avatar
Tinderbox User committed
128
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
129
.RS 4
Tinderbox User's avatar
Tinderbox User committed
130
.\}
Automatic Updater's avatar
regen  
Automatic Updater committed
131
.nf
Tinderbox User's avatar
Tinderbox User committed
132 133 134 135 136 137 138 139 140 141 142 143 144 145
logging {
	category \fIstring\fR { \fIstring\fR; \&.\&.\&. };
	channel \fIstring\fR {
		buffered \fIboolean\fR;
		file \fIquoted_string\fR [ versions ( unlimited | \fIinteger\fR ) ]
		    [ size \fIsize\fR ] [ suffix ( increment | timestamp ) ];
		null;
		print\-category \fIboolean\fR;
		print\-severity \fIboolean\fR;
		print\-time ( iso8601 | iso8601\-utc | local | \fIboolean\fR );
		severity \fIlog_severity\fR;
		stderr;
		syslog [ \fIsyslog_facility\fR ];
	};
Automatic Updater's avatar
regen  
Automatic Updater committed
146 147
};
.fi
Tinderbox User's avatar
Tinderbox User committed
148
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
149
.RE
Tinderbox User's avatar
Tinderbox User committed
150
.\}
Tinderbox User's avatar
Tinderbox User committed
151
.SH "MANAGED-KEYS"
Mark Andrews's avatar
regen  
Mark Andrews committed
152
.sp
Tinderbox User's avatar
Tinderbox User committed
153
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
154
.RS 4
Tinderbox User's avatar
Tinderbox User committed
155
.\}
156
.nf
Tinderbox User's avatar
Tinderbox User committed
157 158
managed\-keys { \fIstring\fR \fIstring\fR \fIinteger\fR
    \fIinteger\fR \fIinteger\fR \fIquoted_string\fR; \&.\&.\&. };
159
.fi
Tinderbox User's avatar
Tinderbox User committed
160
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
161
.RE
Tinderbox User's avatar
Tinderbox User committed
162
.\}
Tinderbox User's avatar
Tinderbox User committed
163
.SH "MASTERS"
Mark Andrews's avatar
regen  
Mark Andrews committed
164
.sp
Tinderbox User's avatar
Tinderbox User committed
165
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
166
.RS 4
Tinderbox User's avatar
Tinderbox User committed
167
.\}
168
.nf
Tinderbox User's avatar
Tinderbox User committed
169 170 171 172
masters \fIstring\fR [ port \fIinteger\fR ] [ dscp
    \fIinteger\fR ] { ( \fImasters\fR | \fIipv4_address\fR [
    port \fIinteger\fR ] | \fIipv6_address\fR [ port
    \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
173
.fi
Tinderbox User's avatar
Tinderbox User committed
174
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
175
.RE
Tinderbox User's avatar
Tinderbox User committed
176
.\}
177
.SH "OPTIONS"
Mark Andrews's avatar
regen  
Mark Andrews committed
178
.sp
Tinderbox User's avatar
Tinderbox User committed
179
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
180
.RS 4
Tinderbox User's avatar
Tinderbox User committed
181
.\}
182 183
.nf
options {
Tinderbox User's avatar
Tinderbox User committed
184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208
	allow\-new\-zones \fIboolean\fR;
	allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-cache { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-cache\-on { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-recursion { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-recursion\-on { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
	also\-notify [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR |
	    \fIipv4_address\fR [ port \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
	alt\-transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
	alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR |
	    * ) ] [ dscp \fIinteger\fR ];
	attach\-cache \fIstring\fR;
	auth\-nxdomain \fIboolean\fR; // default changed
	auto\-dnssec ( allow | maintain | off );
	automatic\-interface\-scan \fIboolean\fR;
	avoid\-v4\-udp\-ports { \fIportrange\fR; \&.\&.\&. };
	avoid\-v6\-udp\-ports { \fIportrange\fR; \&.\&.\&. };
	bindkeys\-file \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
209
	blackhole { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
210 211 212 213 214
	cache\-file \fIquoted_string\fR;
	catalog\-zones { zone \fIquoted_string\fR [ default\-masters [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR | \fIipv4_address\fR [
	    port \fIinteger\fR ] | \fIipv6_address\fR [ port \fIinteger\fR ] ) [ key
	    \fIstring\fR ]; \&.\&.\&. } ] [ zone\-directory \fIquoted_string\fR ] [
Tinderbox User's avatar
Tinderbox User committed
215
	    in\-memory \fIboolean\fR ] [ min\-update\-interval \fIttlval\fR ]; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
216 217 218 219
	check\-dup\-records ( fail | warn | ignore );
	check\-integrity \fIboolean\fR;
	check\-mx ( fail | warn | ignore );
	check\-mx\-cname ( fail | warn | ignore );
220 221 222
	check\-names ( primary | master |
	    secondary | slave | response ) (
	    fail | warn | ignore );
Tinderbox User's avatar
Tinderbox User committed
223 224 225 226 227 228 229 230 231 232 233
	check\-sibling \fIboolean\fR;
	check\-spf ( warn | ignore );
	check\-srv\-cname ( fail | warn | ignore );
	check\-wildcard \fIboolean\fR;
	cleaning\-interval \fIinteger\fR;
	clients\-per\-query \fIinteger\fR;
	cookie\-algorithm ( aes | sha1 | sha256 );
	cookie\-secret \fIstring\fR;
	coresize ( default | unlimited | \fIsizeval\fR );
	datasize ( default | unlimited | \fIsizeval\fR );
	deny\-answer\-addresses { \fIaddress_match_element\fR; \&.\&.\&. } [
234 235 236
	    except\-from { \fIstring\fR; \&.\&.\&. } ];
	deny\-answer\-aliases { \fIstring\fR; \&.\&.\&. } [ except\-from { \fIstring\fR; \&.\&.\&.
	    } ];
Tinderbox User's avatar
Tinderbox User committed
237
	dialup ( notify | notify\-passive | passive | refresh | \fIboolean\fR );
238
	directory \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
239 240 241 242 243 244 245 246 247 248 249 250 251 252 253
	disable\-algorithms \fIstring\fR { \fIstring\fR;
	    \&.\&.\&. };
	disable\-ds\-digests \fIstring\fR { \fIstring\fR;
	    \&.\&.\&. };
	disable\-empty\-zone \fIstring\fR;
	dns64 \fInetprefix\fR {
		break\-dnssec \fIboolean\fR;
		clients { \fIaddress_match_element\fR; \&.\&.\&. };
		exclude { \fIaddress_match_element\fR; \&.\&.\&. };
		mapped { \fIaddress_match_element\fR; \&.\&.\&. };
		recursive\-only \fIboolean\fR;
		suffix \fIipv6_address\fR;
	};
	dns64\-contact \fIstring\fR;
	dns64\-server \fIstring\fR;
Tinderbox User's avatar
Tinderbox User committed
254
	dnskey\-sig\-validity \fIinteger\fR;
255 256
	dnsrps\-enable \fIboolean\fR;
	dnsrps\-options { \fIunspecified\-text\fR };
Tinderbox User's avatar
Tinderbox User committed
257 258 259 260 261 262 263 264 265 266
	dnssec\-accept\-expired \fIboolean\fR;
	dnssec\-dnskey\-kskonly \fIboolean\fR;
	dnssec\-enable \fIboolean\fR;
	dnssec\-loadkeys\-interval \fIinteger\fR;
	dnssec\-lookaside ( \fIstring\fR trust\-anchor
	    \fIstring\fR | auto | no );
	dnssec\-must\-be\-secure \fIstring\fR \fIboolean\fR;
	dnssec\-secure\-to\-insecure \fIboolean\fR;
	dnssec\-update\-mode ( maintain | no\-resign );
	dnssec\-validation ( yes | no | auto );
267 268 269 270 271 272
	dnstap { ( all | auth | client | forwarder | resolver ) [ ( query |
	    response ) ]; \&.\&.\&. };
	dnstap\-identity ( \fIquoted_string\fR | none | hostname );
	dnstap\-output ( file | unix ) \fIquoted_string\fR [ size ( unlimited |
	    \fIsize\fR ) ] [ versions ( unlimited | \fIinteger\fR ) ] [ suffix (
	    increment | timestamp ) ];
Tinderbox User's avatar
Tinderbox User committed
273 274 275 276 277 278
	dnstap\-version ( \fIquoted_string\fR | none );
	dscp \fIinteger\fR;
	dual\-stack\-servers [ port \fIinteger\fR ] { ( \fIquoted_string\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] | \fIipv4_address\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] ); \&.\&.\&. };
Rob Austein's avatar
regen  
Rob Austein committed
279
	dump\-file \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300
	edns\-udp\-size \fIinteger\fR;
	empty\-contact \fIstring\fR;
	empty\-server \fIstring\fR;
	empty\-zones\-enable \fIboolean\fR;
	fetch\-quota\-params \fIinteger\fR \fIfixedpoint\fR \fIfixedpoint\fR \fIfixedpoint\fR;
	fetches\-per\-server \fIinteger\fR [ ( drop | fail ) ];
	fetches\-per\-zone \fIinteger\fR [ ( drop | fail ) ];
	files ( default | unlimited | \fIsizeval\fR );
	filter\-aaaa { \fIaddress_match_element\fR; \&.\&.\&. };
	filter\-aaaa\-on\-v4 ( break\-dnssec | \fIboolean\fR );
	filter\-aaaa\-on\-v6 ( break\-dnssec | \fIboolean\fR );
	flush\-zones\-on\-shutdown \fIboolean\fR;
	forward ( first | only );
	forwarders [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fIipv4_address\fR
	    | \fIipv6_address\fR ) [ port \fIinteger\fR ] [ dscp \fIinteger\fR ]; \&.\&.\&. };
	fstrm\-set\-buffer\-hint \fIinteger\fR;
	fstrm\-set\-flush\-timeout \fIinteger\fR;
	fstrm\-set\-input\-queue\-size \fIinteger\fR;
	fstrm\-set\-output\-notify\-threshold \fIinteger\fR;
	fstrm\-set\-output\-queue\-model ( mpsc | spsc );
	fstrm\-set\-output\-queue\-size \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
301
	fstrm\-set\-reopen\-interval \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
302
	geoip\-directory ( \fIquoted_string\fR | none );
303
	glue\-cache \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
304
	heartbeat\-interval \fIinteger\fR;
305
	hostname ( \fIquoted_string\fR | none );
Tinderbox User's avatar
Tinderbox User committed
306
	inline\-signing \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
307
	interface\-interval \fIttlval\fR;
308 309
	ixfr\-from\-differences ( primary | master | secondary | slave |
	    \fIboolean\fR );
Tinderbox User's avatar
Tinderbox User committed
310
	keep\-response\-order { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
311 312 313 314 315 316 317 318
	key\-directory \fIquoted_string\fR;
	lame\-ttl \fIttlval\fR;
	listen\-on [ port \fIinteger\fR ] [ dscp
	    \fIinteger\fR ] {
	    \fIaddress_match_element\fR; \&.\&.\&. };
	listen\-on\-v6 [ port \fIinteger\fR ] [ dscp
	    \fIinteger\fR ] {
	    \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
319
	lmdb\-mapsize \fIsizeval\fR;
Tinderbox User's avatar
Tinderbox User committed
320 321 322 323
	lock\-file ( \fIquoted_string\fR | none );
	managed\-keys\-directory \fIquoted_string\fR;
	masterfile\-format ( map | raw | text );
	masterfile\-style ( full | relative );
Rob Austein's avatar
regen  
Rob Austein committed
324
	match\-mapped\-addresses \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
325
	max\-cache\-size ( default | unlimited | \fIsizeval\fR | \fIpercentage\fR );
Tinderbox User's avatar
Tinderbox User committed
326
	max\-cache\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
327
	max\-clients\-per\-query \fIinteger\fR;
328
	max\-journal\-size ( default | unlimited | \fIsizeval\fR );
Tinderbox User's avatar
Tinderbox User committed
329
	max\-ncache\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
330 331 332 333 334 335
	max\-records \fIinteger\fR;
	max\-recursion\-depth \fIinteger\fR;
	max\-recursion\-queries \fIinteger\fR;
	max\-refresh\-time \fIinteger\fR;
	max\-retry\-time \fIinteger\fR;
	max\-rsa\-exponent\-size \fIinteger\fR;
336
	max\-stale\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
337 338 339 340 341 342 343
	max\-transfer\-idle\-in \fIinteger\fR;
	max\-transfer\-idle\-out \fIinteger\fR;
	max\-transfer\-time\-in \fIinteger\fR;
	max\-transfer\-time\-out \fIinteger\fR;
	max\-udp\-size \fIinteger\fR;
	max\-zone\-ttl ( unlimited | \fIttlval\fR );
	memstatistics \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
344
	memstatistics\-file \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
345 346 347 348 349 350
	message\-compression \fIboolean\fR;
	min\-refresh\-time \fIinteger\fR;
	min\-retry\-time \fIinteger\fR;
	minimal\-any \fIboolean\fR;
	minimal\-responses ( no\-auth | no\-auth\-recursive | \fIboolean\fR );
	multi\-master \fIboolean\fR;
351
	new\-zones\-directory \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
352 353 354 355 356 357 358 359 360 361 362 363 364
	no\-case\-compress { \fIaddress_match_element\fR; \&.\&.\&. };
	nocookie\-udp\-size \fIinteger\fR;
	notify ( explicit | master\-only | \fIboolean\fR );
	notify\-delay \fIinteger\fR;
	notify\-rate \fIinteger\fR;
	notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
	    [ dscp \fIinteger\fR ];
	notify\-to\-soa \fIboolean\fR;
	nta\-lifetime \fIttlval\fR;
	nta\-recheck \fIttlval\fR;
	nxdomain\-redirect \fIstring\fR;
Rob Austein's avatar
regen  
Rob Austein committed
365
	pid\-file ( \fIquoted_string\fR | none );
366
	port \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
367 368 369
	preferred\-glue \fIstring\fR;
	prefetch \fIinteger\fR [ \fIinteger\fR ];
	provide\-ixfr \fIboolean\fR;
370
	qname\-minimization ( strict | relaxed | disabled | off );
Tinderbox User's avatar
Tinderbox User committed
371 372 373 374 375 376
	query\-source ( ( [ address ] ( \fIipv4_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv4_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
	query\-source\-v6 ( ( [ address ] ( \fIipv6_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv6_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
377
	querylog \fIboolean\fR;
378
	random\-device ( \fIquoted_string\fR | none );
Tinderbox User's avatar
Tinderbox User committed
379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397
	rate\-limit {
		all\-per\-second \fIinteger\fR;
		errors\-per\-second \fIinteger\fR;
		exempt\-clients { \fIaddress_match_element\fR; \&.\&.\&. };
		ipv4\-prefix\-length \fIinteger\fR;
		ipv6\-prefix\-length \fIinteger\fR;
		log\-only \fIboolean\fR;
		max\-table\-size \fIinteger\fR;
		min\-table\-size \fIinteger\fR;
		nodata\-per\-second \fIinteger\fR;
		nxdomains\-per\-second \fIinteger\fR;
		qps\-scale \fIinteger\fR;
		referrals\-per\-second \fIinteger\fR;
		responses\-per\-second \fIinteger\fR;
		slip \fIinteger\fR;
		window \fIinteger\fR;
	};
	recursing\-file \fIquoted_string\fR;
	recursion \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
398
	recursive\-clients \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
399 400 401 402 403
	request\-expire \fIboolean\fR;
	request\-ixfr \fIboolean\fR;
	request\-nsid \fIboolean\fR;
	require\-server\-cookie \fIboolean\fR;
	reserved\-sockets \fIinteger\fR;
404
	resolver\-nonbackoff\-tries \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
405
	resolver\-query\-timeout \fIinteger\fR;
406
	resolver\-retry\-interval \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
407 408 409
	response\-padding { \fIaddress_match_element\fR; \&.\&.\&. } block\-size
	    \fIinteger\fR;
	response\-policy { zone \fIquoted_string\fR [ log \fIboolean\fR ] [
Tinderbox User's avatar
Tinderbox User committed
410
	    max\-policy\-ttl \fIttlval\fR ] [ min\-update\-interval \fIttlval\fR ] [
Tinderbox User's avatar
Tinderbox User committed
411 412
	    policy ( cname | disabled | drop | given | no\-op | nodata |
	    nxdomain | passthru | tcp\-only \fIquoted_string\fR ) ] [
413 414
	    recursive\-only \fIboolean\fR ] [ nsip\-enable \fIboolean\fR ] [
	    nsdname\-enable \fIboolean\fR ]; \&.\&.\&. } [ break\-dnssec \fIboolean\fR ] [
Tinderbox User's avatar
Tinderbox User committed
415
	    max\-policy\-ttl \fIttlval\fR ] [ min\-update\-interval \fIttlval\fR ] [
Tinderbox User's avatar
Tinderbox User committed
416
	    min\-ns\-dots \fIinteger\fR ] [ nsip\-wait\-recurse \fIboolean\fR ] [
417 418 419 420
	    qname\-wait\-recurse \fIboolean\fR ] [ recursive\-only \fIboolean\fR ] [
	    nsip\-enable \fIboolean\fR ] [ nsdname\-enable \fIboolean\fR ] [
	    dnsrps\-enable \fIboolean\fR ] [ dnsrps\-options { \fIunspecified\-text\fR
	    } ];
421
	root\-delegation\-only [ exclude { \fIstring\fR; \&.\&.\&. } ];
Tinderbox User's avatar
Tinderbox User committed
422
	root\-key\-sentinel \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
423 424 425 426
	rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
	    \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
	secroots\-file \fIquoted_string\fR;
	send\-cookie \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
427
	serial\-query\-rate \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
428 429 430 431 432 433 434 435 436 437 438 439
	serial\-update\-method ( date | increment | unixtime );
	server\-id ( \fIquoted_string\fR | none | hostname );
	servfail\-ttl \fIttlval\fR;
	session\-keyalg \fIstring\fR;
	session\-keyfile ( \fIquoted_string\fR | none );
	session\-keyname \fIstring\fR;
	sig\-signing\-nodes \fIinteger\fR;
	sig\-signing\-signatures \fIinteger\fR;
	sig\-signing\-type \fIinteger\fR;
	sig\-validity\-interval \fIinteger\fR [ \fIinteger\fR ];
	sortlist { \fIaddress_match_element\fR; \&.\&.\&. };
	stacksize ( default | unlimited | \fIsizeval\fR );
440 441
	stale\-answer\-enable \fIboolean\fR;
	stale\-answer\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
442
	startup\-notify\-rate \fIinteger\fR;
Rob Austein's avatar
regen  
Rob Austein committed
443
	statistics\-file \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
444
	synth\-from\-dnssec \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
445
	tcp\-advertised\-timeout \fIinteger\fR;
Rob Austein's avatar
regen  
Rob Austein committed
446
	tcp\-clients \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
447 448 449
	tcp\-idle\-timeout \fIinteger\fR;
	tcp\-initial\-timeout \fIinteger\fR;
	tcp\-keepalive\-timeout \fIinteger\fR;
Rob Austein's avatar
regen  
Rob Austein committed
450 451
	tcp\-listen\-queue \fIinteger\fR;
	tkey\-dhkey \fIquoted_string\fR \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
452
	tkey\-domain \fIquoted_string\fR;
Rob Austein's avatar
regen  
Rob Austein committed
453
	tkey\-gssapi\-credential \fIquoted_string\fR;
Automatic Updater's avatar
Automatic Updater committed
454
	tkey\-gssapi\-keytab \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
455
	transfer\-format ( many\-answers | one\-answer );
Tinderbox User's avatar
Tinderbox User committed
456
	transfer\-message\-size \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
457 458 459 460
	transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
Rob Austein's avatar
regen  
Rob Austein committed
461 462
	transfers\-in \fIinteger\fR;
	transfers\-out \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
463 464 465
	transfers\-per\-ns \fIinteger\fR;
	trust\-anchor\-telemetry \fIboolean\fR; // experimental
	try\-tcp\-refresh \fIboolean\fR;
Mark Andrews's avatar
regen  
Mark Andrews committed
466
	update\-check\-ksk \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
467
	use\-alt\-transfer\-source \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
468 469 470
	use\-v4\-udp\-ports { \fIportrange\fR; \&.\&.\&. };
	use\-v6\-udp\-ports { \fIportrange\fR; \&.\&.\&. };
	v6\-bias \fIinteger\fR;
471
	validate\-except { \fIstring\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
472
	version ( \fIquoted_string\fR | none );
Mark Andrews's avatar
regen  
Mark Andrews committed
473 474
	zero\-no\-soa\-ttl \fIboolean\fR;
	zero\-no\-soa\-ttl\-cache \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508
	zone\-statistics ( full | terse | none | \fIboolean\fR );
};
.fi
.if n \{\
.RE
.\}
.SH "SERVER"
.sp
.if n \{\
.RS 4
.\}
.nf
server \fInetprefix\fR {
	bogus \fIboolean\fR;
	edns \fIboolean\fR;
	edns\-udp\-size \fIinteger\fR;
	edns\-version \fIinteger\fR;
	keys \fIserver_key\fR;
	max\-udp\-size \fIinteger\fR;
	notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
	    [ dscp \fIinteger\fR ];
	padding \fIinteger\fR;
	provide\-ixfr \fIboolean\fR;
	query\-source ( ( [ address ] ( \fIipv4_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv4_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
	query\-source\-v6 ( ( [ address ] ( \fIipv6_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv6_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
	request\-expire \fIboolean\fR;
	request\-ixfr \fIboolean\fR;
	request\-nsid \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
509
	send\-cookie \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
510 511 512 513 514 515 516 517
	tcp\-keepalive \fIboolean\fR;
	tcp\-only \fIboolean\fR;
	transfer\-format ( many\-answers | one\-answer );
	transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
	transfers \fIinteger\fR;
518 519
};
.fi
Tinderbox User's avatar
Tinderbox User committed
520
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
521
.RE
Tinderbox User's avatar
Tinderbox User committed
522
.\}
Tinderbox User's avatar
Tinderbox User committed
523
.SH "STATISTICS-CHANNELS"
Tinderbox User's avatar
Tinderbox User committed
524 525 526 527 528 529 530 531 532 533 534 535 536 537 538
.sp
.if n \{\
.RS 4
.\}
.nf
statistics\-channels {
	inet ( \fIipv4_address\fR | \fIipv6_address\fR |
	    * ) [ port ( \fIinteger\fR | * ) ] [
	    allow { \fIaddress_match_element\fR; \&.\&.\&.
	    } ];
};
.fi
.if n \{\
.RE
.\}
Tinderbox User's avatar
Tinderbox User committed
539
.SH "TRUSTED-KEYS"
Tinderbox User's avatar
Tinderbox User committed
540 541 542 543 544 545 546 547 548 549 550
.sp
.if n \{\
.RS 4
.\}
.nf
trusted\-keys { \fIstring\fR \fIinteger\fR \fIinteger\fR
    \fIinteger\fR \fIquoted_string\fR; \&.\&.\&. };
.fi
.if n \{\
.RE
.\}
551
.SH "VIEW"
Mark Andrews's avatar
regen  
Mark Andrews committed
552
.sp
Tinderbox User's avatar
Tinderbox User committed
553
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
554
.RS 4
Tinderbox User's avatar
Tinderbox User committed
555
.\}
556
.nf
Tinderbox User's avatar
Tinderbox User committed
557 558 559 560 561 562 563
view \fIstring\fR [ \fIclass\fR ] {
	allow\-new\-zones \fIboolean\fR;
	allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-cache { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-cache\-on { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
564 565
	allow\-recursion { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-recursion\-on { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
566 567 568 569 570 571 572 573 574 575 576
	allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
	also\-notify [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR |
	    \fIipv4_address\fR [ port \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
	alt\-transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
	alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR |
	    * ) ] [ dscp \fIinteger\fR ];
	attach\-cache \fIstring\fR;
Rob Austein's avatar
regen  
Rob Austein committed
577
	auth\-nxdomain \fIboolean\fR; // default changed
Tinderbox User's avatar
Tinderbox User committed
578 579 580 581 582 583
	auto\-dnssec ( allow | maintain | off );
	cache\-file \fIquoted_string\fR;
	catalog\-zones { zone \fIquoted_string\fR [ default\-masters [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR | \fIipv4_address\fR [
	    port \fIinteger\fR ] | \fIipv6_address\fR [ port \fIinteger\fR ] ) [ key
	    \fIstring\fR ]; \&.\&.\&. } ] [ zone\-directory \fIquoted_string\fR ] [
Tinderbox User's avatar
Tinderbox User committed
584
	    in\-memory \fIboolean\fR ] [ min\-update\-interval \fIttlval\fR ]; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
585
	check\-dup\-records ( fail | warn | ignore );
Mark Andrews's avatar
regen  
Mark Andrews committed
586
	check\-integrity \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
587
	check\-mx ( fail | warn | ignore );
Mark Andrews's avatar
regen  
Mark Andrews committed
588
	check\-mx\-cname ( fail | warn | ignore );
589 590 591
	check\-names ( primary | master |
	    secondary | slave | response ) (
	    fail | warn | ignore );
Tinderbox User's avatar
Tinderbox User committed
592 593
	check\-sibling \fIboolean\fR;
	check\-spf ( warn | ignore );
Mark Andrews's avatar
regen  
Mark Andrews committed
594
	check\-srv\-cname ( fail | warn | ignore );
Tinderbox User's avatar
Tinderbox User committed
595 596 597 598
	check\-wildcard \fIboolean\fR;
	cleaning\-interval \fIinteger\fR;
	clients\-per\-query \fIinteger\fR;
	deny\-answer\-addresses { \fIaddress_match_element\fR; \&.\&.\&. } [
599 600 601
	    except\-from { \fIstring\fR; \&.\&.\&. } ];
	deny\-answer\-aliases { \fIstring\fR; \&.\&.\&. } [ except\-from { \fIstring\fR; \&.\&.\&.
	    } ];
Tinderbox User's avatar
Tinderbox User committed
602 603 604 605 606 607 608 609 610
	dialup ( notify | notify\-passive | passive | refresh | \fIboolean\fR );
	disable\-algorithms \fIstring\fR { \fIstring\fR;
	    \&.\&.\&. };
	disable\-ds\-digests \fIstring\fR { \fIstring\fR;
	    \&.\&.\&. };
	disable\-empty\-zone \fIstring\fR;
	dlz \fIstring\fR {
		database \fIstring\fR;
		search \fIboolean\fR;
611
	};
Tinderbox User's avatar
Tinderbox User committed
612
	dns64 \fInetprefix\fR {
Automatic Updater's avatar
Automatic Updater committed
613
		break\-dnssec \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
614 615 616
		clients { \fIaddress_match_element\fR; \&.\&.\&. };
		exclude { \fIaddress_match_element\fR; \&.\&.\&. };
		mapped { \fIaddress_match_element\fR; \&.\&.\&. };
Automatic Updater's avatar
Automatic Updater committed
617 618 619
		recursive\-only \fIboolean\fR;
		suffix \fIipv6_address\fR;
	};
Tinderbox User's avatar
Tinderbox User committed
620 621
	dns64\-contact \fIstring\fR;
	dns64\-server \fIstring\fR;
Tinderbox User's avatar
Tinderbox User committed
622
	dnskey\-sig\-validity \fIinteger\fR;
623 624
	dnsrps\-enable \fIboolean\fR;
	dnsrps\-options { \fIunspecified\-text\fR };
Tinderbox User's avatar
Tinderbox User committed
625 626 627 628 629 630 631 632 633 634
	dnssec\-accept\-expired \fIboolean\fR;
	dnssec\-dnskey\-kskonly \fIboolean\fR;
	dnssec\-enable \fIboolean\fR;
	dnssec\-loadkeys\-interval \fIinteger\fR;
	dnssec\-lookaside ( \fIstring\fR trust\-anchor
	    \fIstring\fR | auto | no );
	dnssec\-must\-be\-secure \fIstring\fR \fIboolean\fR;
	dnssec\-secure\-to\-insecure \fIboolean\fR;
	dnssec\-update\-mode ( maintain | no\-resign );
	dnssec\-validation ( yes | no | auto );
635 636
	dnstap { ( all | auth | client | forwarder | resolver ) [ ( query |
	    response ) ]; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
637 638 639 640 641 642 643
	dual\-stack\-servers [ port \fIinteger\fR ] { ( \fIquoted_string\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] | \fIipv4_address\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] [ dscp \fIinteger\fR ] ); \&.\&.\&. };
	dyndb \fIstring\fR \fIquoted_string\fR {
	    \fIunspecified\-text\fR };
	edns\-udp\-size \fIinteger\fR;
Mark Andrews's avatar
regen  
Mark Andrews committed
644
	empty\-contact \fIstring\fR;
Tinderbox User's avatar
Tinderbox User committed
645
	empty\-server \fIstring\fR;
Mark Andrews's avatar
regen  
Mark Andrews committed
646
	empty\-zones\-enable \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
647 648 649 650 651 652
	fetch\-quota\-params \fIinteger\fR \fIfixedpoint\fR \fIfixedpoint\fR \fIfixedpoint\fR;
	fetches\-per\-server \fIinteger\fR [ ( drop | fail ) ];
	fetches\-per\-zone \fIinteger\fR [ ( drop | fail ) ];
	filter\-aaaa { \fIaddress_match_element\fR; \&.\&.\&. };
	filter\-aaaa\-on\-v4 ( break\-dnssec | \fIboolean\fR );
	filter\-aaaa\-on\-v6 ( break\-dnssec | \fIboolean\fR );
653
	forward ( first | only );
Tinderbox User's avatar
Tinderbox User committed
654 655
	forwarders [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fIipv4_address\fR
	    | \fIipv6_address\fR ) [ port \fIinteger\fR ] [ dscp \fIinteger\fR ]; \&.\&.\&. };
656
	glue\-cache \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
657
	inline\-signing \fIboolean\fR;
658 659
	ixfr\-from\-differences ( primary | master | secondary | slave |
	    \fIboolean\fR );
Tinderbox User's avatar
Tinderbox User committed
660 661 662
	key \fIstring\fR {
		algorithm \fIstring\fR;
		secret \fIstring\fR;
663
	};
Tinderbox User's avatar
Tinderbox User committed
664 665
	key\-directory \fIquoted_string\fR;
	lame\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
666
	lmdb\-mapsize \fIsizeval\fR;
Tinderbox User's avatar
Tinderbox User committed
667 668 669 670 671 672 673 674 675
	managed\-keys { \fIstring\fR \fIstring\fR
	    \fIinteger\fR \fIinteger\fR \fIinteger\fR
	    \fIquoted_string\fR; \&.\&.\&. };
	masterfile\-format ( map | raw | text );
	masterfile\-style ( full | relative );
	match\-clients { \fIaddress_match_element\fR; \&.\&.\&. };
	match\-destinations { \fIaddress_match_element\fR; \&.\&.\&. };
	match\-recursive\-only \fIboolean\fR;
	max\-cache\-size ( default | unlimited | \fIsizeval\fR | \fIpercentage\fR );
Tinderbox User's avatar
Tinderbox User committed
676
	max\-cache\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
677
	max\-clients\-per\-query \fIinteger\fR;
678
	max\-journal\-size ( default | unlimited | \fIsizeval\fR );
Tinderbox User's avatar
Tinderbox User committed
679
	max\-ncache\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
680
	max\-records \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
681 682 683 684
	max\-recursion\-depth \fIinteger\fR;
	max\-recursion\-queries \fIinteger\fR;
	max\-refresh\-time \fIinteger\fR;
	max\-retry\-time \fIinteger\fR;
685
	max\-stale\-ttl \fIttlval\fR;
Rob Austein's avatar
regen  
Rob Austein committed
686 687
	max\-transfer\-idle\-in \fIinteger\fR;
	max\-transfer\-idle\-out \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
688 689 690 691 692
	max\-transfer\-time\-in \fIinteger\fR;
	max\-transfer\-time\-out \fIinteger\fR;
	max\-udp\-size \fIinteger\fR;
	max\-zone\-ttl ( unlimited | \fIttlval\fR );
	message\-compression \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
693
	min\-refresh\-time \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
694 695 696
	min\-retry\-time \fIinteger\fR;
	minimal\-any \fIboolean\fR;
	minimal\-responses ( no\-auth | no\-auth\-recursive | \fIboolean\fR );
Rob Austein's avatar
regen  
Rob Austein committed
697
	multi\-master \fIboolean\fR;
698
	new\-zones\-directory \fIquoted_string\fR;
Tinderbox User's avatar
Tinderbox User committed
699 700 701 702 703 704 705 706 707 708 709 710 711 712 713
	no\-case\-compress { \fIaddress_match_element\fR; \&.\&.\&. };
	nocookie\-udp\-size \fIinteger\fR;
	notify ( explicit | master\-only | \fIboolean\fR );
	notify\-delay \fIinteger\fR;
	notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
	    [ dscp \fIinteger\fR ];
	notify\-to\-soa \fIboolean\fR;
	nta\-lifetime \fIttlval\fR;
	nta\-recheck \fIttlval\fR;
	nxdomain\-redirect \fIstring\fR;
	preferred\-glue \fIstring\fR;
	prefetch \fIinteger\fR [ \fIinteger\fR ];
	provide\-ixfr \fIboolean\fR;
714
	qname\-minimization ( strict | relaxed | disabled | off );
Tinderbox User's avatar
Tinderbox User committed
715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742
	query\-source ( ( [ address ] ( \fIipv4_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv4_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
	query\-source\-v6 ( ( [ address ] ( \fIipv6_address\fR | * ) [ port (
	    \fIinteger\fR | * ) ] ) | ( [ [ address ] ( \fIipv6_address\fR | * ) ]
	    port ( \fIinteger\fR | * ) ) ) [ dscp \fIinteger\fR ];
	rate\-limit {
		all\-per\-second \fIinteger\fR;
		errors\-per\-second \fIinteger\fR;
		exempt\-clients { \fIaddress_match_element\fR; \&.\&.\&. };
		ipv4\-prefix\-length \fIinteger\fR;
		ipv6\-prefix\-length \fIinteger\fR;
		log\-only \fIboolean\fR;
		max\-table\-size \fIinteger\fR;
		min\-table\-size \fIinteger\fR;
		nodata\-per\-second \fIinteger\fR;
		nxdomains\-per\-second \fIinteger\fR;
		qps\-scale \fIinteger\fR;
		referrals\-per\-second \fIinteger\fR;
		responses\-per\-second \fIinteger\fR;
		slip \fIinteger\fR;
		window \fIinteger\fR;
	};
	recursion \fIboolean\fR;
	request\-expire \fIboolean\fR;
	request\-ixfr \fIboolean\fR;
	request\-nsid \fIboolean\fR;
	require\-server\-cookie \fIboolean\fR;
743
	resolver\-nonbackoff\-tries \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
744
	resolver\-query\-timeout \fIinteger\fR;
745
	resolver\-retry\-interval \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
746 747 748
	response\-padding { \fIaddress_match_element\fR; \&.\&.\&. } block\-size
	    \fIinteger\fR;
	response\-policy { zone \fIquoted_string\fR [ log \fIboolean\fR ] [
Tinderbox User's avatar
Tinderbox User committed
749
	    max\-policy\-ttl \fIttlval\fR ] [ min\-update\-interval \fIttlval\fR ] [
Tinderbox User's avatar
Tinderbox User committed
750 751
	    policy ( cname | disabled | drop | given | no\-op | nodata |
	    nxdomain | passthru | tcp\-only \fIquoted_string\fR ) ] [
752 753
	    recursive\-only \fIboolean\fR ] [ nsip\-enable \fIboolean\fR ] [
	    nsdname\-enable \fIboolean\fR ]; \&.\&.\&. } [ break\-dnssec \fIboolean\fR ] [
Tinderbox User's avatar
Tinderbox User committed
754
	    max\-policy\-ttl \fIttlval\fR ] [ min\-update\-interval \fIttlval\fR ] [
Tinderbox User's avatar
Tinderbox User committed
755
	    min\-ns\-dots \fIinteger\fR ] [ nsip\-wait\-recurse \fIboolean\fR ] [
756 757 758 759
	    qname\-wait\-recurse \fIboolean\fR ] [ recursive\-only \fIboolean\fR ] [
	    nsip\-enable \fIboolean\fR ] [ nsdname\-enable \fIboolean\fR ] [
	    dnsrps\-enable \fIboolean\fR ] [ dnsrps\-options { \fIunspecified\-text\fR
	    } ];
760
	root\-delegation\-only [ exclude { \fIstring\fR; \&.\&.\&. } ];
Tinderbox User's avatar
Tinderbox User committed
761
	root\-key\-sentinel \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805
	rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
	    \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
	send\-cookie \fIboolean\fR;
	serial\-update\-method ( date | increment | unixtime );
	server \fInetprefix\fR {
		bogus \fIboolean\fR;
		edns \fIboolean\fR;
		edns\-udp\-size \fIinteger\fR;
		edns\-version \fIinteger\fR;
		keys \fIserver_key\fR;
		max\-udp\-size \fIinteger\fR;
		notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | *
		    ) ] [ dscp \fIinteger\fR ];
		notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR
		    | * ) ] [ dscp \fIinteger\fR ];
		padding \fIinteger\fR;
		provide\-ixfr \fIboolean\fR;
		query\-source ( ( [ address ] ( \fIipv4_address\fR | * ) [ port
		    ( \fIinteger\fR | * ) ] ) | ( [ [ address ] (
		    \fIipv4_address\fR | * ) ] port ( \fIinteger\fR | * ) ) ) [
		    dscp \fIinteger\fR ];
		query\-source\-v6 ( ( [ address ] ( \fIipv6_address\fR | * ) [
		    port ( \fIinteger\fR | * ) ] ) | ( [ [ address ] (
		    \fIipv6_address\fR | * ) ] port ( \fIinteger\fR | * ) ) ) [
		    dscp \fIinteger\fR ];
		request\-expire \fIboolean\fR;
		request\-ixfr \fIboolean\fR;
		request\-nsid \fIboolean\fR;
		send\-cookie \fIboolean\fR;
		tcp\-keepalive \fIboolean\fR;
		tcp\-only \fIboolean\fR;
		transfer\-format ( many\-answers | one\-answer );
		transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR |
		    * ) ] [ dscp \fIinteger\fR ];
		transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port (
		    \fIinteger\fR | * ) ] [ dscp \fIinteger\fR ];
		transfers \fIinteger\fR;
	};
	servfail\-ttl \fIttlval\fR;
	sig\-signing\-nodes \fIinteger\fR;
	sig\-signing\-signatures \fIinteger\fR;
	sig\-signing\-type \fIinteger\fR;
	sig\-validity\-interval \fIinteger\fR [ \fIinteger\fR ];
	sortlist { \fIaddress_match_element\fR; \&.\&.\&. };
806 807
	stale\-answer\-enable \fIboolean\fR;
	stale\-answer\-ttl \fIttlval\fR;
Tinderbox User's avatar
Tinderbox User committed
808
	synth\-from\-dnssec \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
809 810 811 812 813 814 815 816 817
	transfer\-format ( many\-answers | one\-answer );
	transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
	trust\-anchor\-telemetry \fIboolean\fR; // experimental
	trusted\-keys { \fIstring\fR \fIinteger\fR
	    \fIinteger\fR \fIinteger\fR \fIquoted_string\fR;
	    \&.\&.\&. };
Mark Andrews's avatar
regen  
Mark Andrews committed
818
	try\-tcp\-refresh \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
819 820 821
	update\-check\-ksk \fIboolean\fR;
	use\-alt\-transfer\-source \fIboolean\fR;
	v6\-bias \fIinteger\fR;
822
	validate\-except { \fIstring\fR; \&.\&.\&. };
Mark Andrews's avatar
regen  
Mark Andrews committed
823 824
	zero\-no\-soa\-ttl \fIboolean\fR;
	zero\-no\-soa\-ttl\-cache \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854
	zone \fIstring\fR [ \fIclass\fR ] {
		allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
		allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
		allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
		allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
		allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
		allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
		also\-notify [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { (
		    \fImasters\fR | \fIipv4_address\fR [ port \fIinteger\fR ] |
		    \fIipv6_address\fR [ port \fIinteger\fR ] ) [ key \fIstring\fR ];
		    \&.\&.\&. };
		alt\-transfer\-source ( \fIipv4_address\fR | * ) [ port (
		    \fIinteger\fR | * ) ] [ dscp \fIinteger\fR ];
		alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port (
		    \fIinteger\fR | * ) ] [ dscp \fIinteger\fR ];
		auto\-dnssec ( allow | maintain | off );
		check\-dup\-records ( fail | warn | ignore );
		check\-integrity \fIboolean\fR;
		check\-mx ( fail | warn | ignore );
		check\-mx\-cname ( fail | warn | ignore );
		check\-names ( fail | warn | ignore );
		check\-sibling \fIboolean\fR;
		check\-spf ( warn | ignore );
		check\-srv\-cname ( fail | warn | ignore );
		check\-wildcard \fIboolean\fR;
		database \fIstring\fR;
		delegation\-only \fIboolean\fR;
		dialup ( notify | notify\-passive | passive | refresh |
		    \fIboolean\fR );
		dlz \fIstring\fR;
Tinderbox User's avatar
Tinderbox User committed
855
		dnskey\-sig\-validity \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875
		dnssec\-dnskey\-kskonly \fIboolean\fR;
		dnssec\-loadkeys\-interval \fIinteger\fR;
		dnssec\-secure\-to\-insecure \fIboolean\fR;
		dnssec\-update\-mode ( maintain | no\-resign );
		file \fIquoted_string\fR;
		forward ( first | only );
		forwarders [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { (
		    \fIipv4_address\fR | \fIipv6_address\fR ) [ port \fIinteger\fR ] [
		    dscp \fIinteger\fR ]; \&.\&.\&. };
		in\-view \fIstring\fR;
		inline\-signing \fIboolean\fR;
		ixfr\-from\-differences \fIboolean\fR;
		journal \fIquoted_string\fR;
		key\-directory \fIquoted_string\fR;
		masterfile\-format ( map | raw | text );
		masterfile\-style ( full | relative );
		masters [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR
		    | \fIipv4_address\fR [ port \fIinteger\fR ] | \fIipv6_address\fR [
		    port \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
		max\-ixfr\-log\-size ( default | unlimited |
876
		max\-journal\-size ( default | unlimited | \fIsizeval\fR );
Tinderbox User's avatar
Tinderbox User committed
877 878 879 880 881 882 883 884 885 886
		max\-records \fIinteger\fR;
		max\-refresh\-time \fIinteger\fR;
		max\-retry\-time \fIinteger\fR;
		max\-transfer\-idle\-in \fIinteger\fR;
		max\-transfer\-idle\-out \fIinteger\fR;
		max\-transfer\-time\-in \fIinteger\fR;
		max\-transfer\-time\-out \fIinteger\fR;
		max\-zone\-ttl ( unlimited | \fIttlval\fR );
		min\-refresh\-time \fIinteger\fR;
		min\-retry\-time \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
887
		mirror \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903
		multi\-master \fIboolean\fR;
		notify ( explicit | master\-only | \fIboolean\fR );
		notify\-delay \fIinteger\fR;
		notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | *
		    ) ] [ dscp \fIinteger\fR ];
		notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR
		    | * ) ] [ dscp \fIinteger\fR ];
		notify\-to\-soa \fIboolean\fR;
		pubkey \fIinteger\fR
		    \fIinteger\fR
		    \fIinteger\fR
		request\-expire \fIboolean\fR;
		request\-ixfr \fIboolean\fR;
		serial\-update\-method ( date | increment | unixtime );
		server\-addresses { ( \fIipv4_address\fR | \fIipv6_address\fR ) [
		    port \fIinteger\fR ]; \&.\&.\&. };
904
		server\-names { \fIstring\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
905 906 907 908 909 910 911 912 913
		sig\-signing\-nodes \fIinteger\fR;
		sig\-signing\-signatures \fIinteger\fR;
		sig\-signing\-type \fIinteger\fR;
		sig\-validity\-interval \fIinteger\fR [ \fIinteger\fR ];
		transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR |
		    * ) ] [ dscp \fIinteger\fR ];
		transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port (
		    \fIinteger\fR | * ) ] [ dscp \fIinteger\fR ];
		try\-tcp\-refresh \fIboolean\fR;
914 915 916
		type ( primary | master | secondary | slave |
		    delegation\-only | forward | hint | redirect |
		    static\-stub | stub );
Tinderbox User's avatar
Tinderbox User committed
917 918 919 920 921 922 923 924 925 926 927
		update\-check\-ksk \fIboolean\fR;
		update\-policy ( local | { ( deny | grant ) \fIstring\fR (
		    6to4\-self | external | krb5\-self | krb5\-subdomain |
		    ms\-self | ms\-subdomain | name | self | selfsub |
		    selfwild | subdomain | tcp\-self | wildcard | zonesub )
		    [ \fIstring\fR ] \fIrrtypelist\fR; \&.\&.\&. };
		use\-alt\-transfer\-source \fIboolean\fR;
		zero\-no\-soa\-ttl \fIboolean\fR;
		zone\-statistics ( full | terse | none | \fIboolean\fR );
	};
	zone\-statistics ( full | terse | none | \fIboolean\fR );
928 929
};
.fi
Tinderbox User's avatar
Tinderbox User committed
930
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
931
.RE
Tinderbox User's avatar
Tinderbox User committed
932
.\}
933
.SH "ZONE"
Mark Andrews's avatar
regen  
Mark Andrews committed
934
.sp
Tinderbox User's avatar
Tinderbox User committed
935
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
936
.RS 4
Tinderbox User's avatar
Tinderbox User committed
937
.\}
938
.nf
Tinderbox User's avatar
Tinderbox User committed
939 940
zone \fIstring\fR [ \fIclass\fR ] {
	allow\-notify { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
941 942 943 944 945
	allow\-query { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-query\-on { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-transfer { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update { \fIaddress_match_element\fR; \&.\&.\&. };
	allow\-update\-forwarding { \fIaddress_match_element\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966
	also\-notify [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR |
	    \fIipv4_address\fR [ port \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
	alt\-transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
	alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR |
	    * ) ] [ dscp \fIinteger\fR ];
	auto\-dnssec ( allow | maintain | off );
	check\-dup\-records ( fail | warn | ignore );
	check\-integrity \fIboolean\fR;
	check\-mx ( fail | warn | ignore );
	check\-mx\-cname ( fail | warn | ignore );
	check\-names ( fail | warn | ignore );
	check\-sibling \fIboolean\fR;
	check\-spf ( warn | ignore );
	check\-srv\-cname ( fail | warn | ignore );
	check\-wildcard \fIboolean\fR;
	database \fIstring\fR;
	delegation\-only \fIboolean\fR;
	dialup ( notify | notify\-passive | passive | refresh | \fIboolean\fR );
	dlz \fIstring\fR;
Tinderbox User's avatar
Tinderbox User committed
967
	dnskey\-sig\-validity \fIinteger\fR;
Automatic Updater's avatar
regen  
Automatic Updater committed
968
	dnssec\-dnskey\-kskonly \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
969 970 971 972
	dnssec\-loadkeys\-interval \fIinteger\fR;
	dnssec\-secure\-to\-insecure \fIboolean\fR;
	dnssec\-update\-mode ( maintain | no\-resign );
	file \fIquoted_string\fR;
973
	forward ( first | only );
Tinderbox User's avatar
Tinderbox User committed
974 975 976 977 978 979 980 981 982 983 984 985
	forwarders [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fIipv4_address\fR
	    | \fIipv6_address\fR ) [ port \fIinteger\fR ] [ dscp \fIinteger\fR ]; \&.\&.\&. };
	in\-view \fIstring\fR;
	inline\-signing \fIboolean\fR;
	ixfr\-from\-differences \fIboolean\fR;
	journal \fIquoted_string\fR;
	key\-directory \fIquoted_string\fR;
	masterfile\-format ( map | raw | text );
	masterfile\-style ( full | relative );
	masters [ port \fIinteger\fR ] [ dscp \fIinteger\fR ] { ( \fImasters\fR |
	    \fIipv4_address\fR [ port \fIinteger\fR ] | \fIipv6_address\fR [ port
	    \fIinteger\fR ] ) [ key \fIstring\fR ]; \&.\&.\&. };
986
	max\-journal\-size ( default | unlimited | \fIsizeval\fR );
Tinderbox User's avatar
Tinderbox User committed
987
	max\-records \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
988 989
	max\-refresh\-time \fIinteger\fR;
	max\-retry\-time \fIinteger\fR;
Rob Austein's avatar
regen  
Rob Austein committed
990 991
	max\-transfer\-idle\-in \fIinteger\fR;
	max\-transfer\-idle\-out \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
992 993 994
	max\-transfer\-time\-in \fIinteger\fR;
	max\-transfer\-time\-out \fIinteger\fR;
	max\-zone\-ttl ( unlimited | \fIttlval\fR );
Rob Austein's avatar
regen  
Rob Austein committed
995
	min\-refresh\-time \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
996
	min\-retry\-time \fIinteger\fR;
Tinderbox User's avatar
Tinderbox User committed
997
	mirror \fIboolean\fR;
Rob Austein's avatar
regen  
Rob Austein committed
998
	multi\-master \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
999 1000 1001 1002 1003 1004 1005 1006 1007
	notify ( explicit | master\-only | \fIboolean\fR );
	notify\-delay \fIinteger\fR;
	notify\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	notify\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * ) ]
	    [ dscp \fIinteger\fR ];
	notify\-to\-soa \fIboolean\fR;
	pubkey \fIinteger\fR \fIinteger\fR
	request\-expire \fIboolean\fR;
Automatic Updater's avatar
Automatic Updater committed
1008
	request\-ixfr \fIboolean\fR;
Tinderbox User's avatar
Tinderbox User committed
1009 1010 1011
	serial\-update\-method ( date | increment | unixtime );
	server\-addresses { ( \fIipv4_address\fR | \fIipv6_address\fR ) [ port
	    \fIinteger\fR ]; \&.\&.\&. };
1012
	server\-names { \fIstring\fR; \&.\&.\&. };
Tinderbox User's avatar
Tinderbox User committed
1013 1014 1015 1016 1017 1018 1019 1020
	sig\-signing\-nodes \fIinteger\fR;
	sig\-signing\-signatures \fIinteger\fR;
	sig\-signing\-type \fIinteger\fR;
	sig\-validity\-interval \fIinteger\fR [ \fIinteger\fR ];
	transfer\-source ( \fIipv4_address\fR | * ) [ port ( \fIinteger\fR | * ) ] [
	    dscp \fIinteger\fR ];
	transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR | * )
	    ] [ dscp \fIinteger\fR ];
Mark Andrews's avatar
regen  
Mark Andrews committed
1021
	try\-tcp\-refresh \fIboolean\fR;
1022 1023
	type ( primary | master | secondary | slave | delegation\-only |
	    forward | hint | redirect | static\-stub | stub );
Tinderbox User's avatar
Tinderbox User committed
1024 1025 1026 1027 1028 1029 1030 1031
	update\-check\-ksk \fIboolean\fR;
	update\-policy ( local | { ( deny | grant ) \fIstring\fR ( 6to4\-self |
	    external | krb5\-self | krb5\-subdomain | ms\-self | ms\-subdomain
	    | name | self | selfsub | selfwild | subdomain | tcp\-self |
	    wildcard | zonesub ) [ \fIstring\fR ] \fIrrtypelist\fR; \&.\&.\&. };
	use\-alt\-transfer\-source \fIboolean\fR;
	zero\-no\-soa\-ttl \fIboolean\fR;
	zone\-statistics ( full | terse | none | \fIboolean\fR );
1032 1033
};
.fi
Tinderbox User's avatar
Tinderbox User committed
1034
.if n \{\
Mark Andrews's avatar
regen  
Mark Andrews committed
1035
.RE
Tinderbox User's avatar
Tinderbox User committed
1036
.\}
1037 1038
.SH "FILES"
.PP
Tinderbox User's avatar
Tinderbox User committed
1039
/etc/named\&.conf
1040 1041
.SH "SEE ALSO"
.PP
Tinderbox User's avatar
Tinderbox User committed
1042
\fBddns-confgen\fR(8),
Mark Andrews's avatar
regen  
Mark Andrews committed
1043
\fBnamed\fR(8),
Tinderbox User's avatar
Tinderbox User committed
1044
\fBnamed-checkconf\fR(8),
Mark Andrews's avatar
regen  
Mark Andrews committed
1045
\fBrndc\fR(8),
Tinderbox User's avatar
Tinderbox User committed
1046
\fBrndc-confgen\fR(8),
Tinderbox User's avatar
Tinderbox User committed
1047 1048 1049 1050
BIND 9 Administrator Reference Manual\&.
.SH "AUTHOR"
.PP
\fBInternet Systems Consortium, Inc\&.\fR
Mark Andrews's avatar
regen  
Mark Andrews committed
1051
.SH "COPYRIGHT"
Tinderbox User's avatar
Tinderbox User committed
1052
.br
1053
Copyright \(co 2004-2018 Internet Systems Consortium, Inc. ("ISC")
Mark Andrews's avatar
regen  
Mark Andrews committed
1054
.br