named.conf.html 43.4 KB
Newer Older
1
<!--
Tinderbox User's avatar
Tinderbox User committed
2
 - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
3
 - 
Automatic Updater's avatar
regen  
Automatic Updater committed
4
 - Permission to use, copy, modify, and/or distribute this software for any
5 6
 - purpose with or without fee is hereby granted, provided that the above
 - copyright notice and this permission notice appear in all copies.
Rob Austein's avatar
regen  
Rob Austein committed
7
 - 
8 9
 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
Rob Austein's avatar
regen  
Rob Austein committed
10
 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11 12 13 14 15
 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 - PERFORMANCE OF THIS SOFTWARE.
-->
Tinderbox User's avatar
Tinderbox User committed
16
<!-- $Id$ -->
Rob Austein's avatar
regen  
Rob Austein committed
17 18 19 20
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named.conf</title>
Mark Andrews's avatar
regen  
Mark Andrews committed
21
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
Rob Austein's avatar
regen  
Rob Austein committed
22 23
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
Tinderbox User's avatar
Tinderbox User committed
24
<a name="id2476274"></a><div class="titlepage"></div>
Rob Austein's avatar
regen  
Rob Austein committed
25 26 27 28 29 30 31 32 33
<div class="refnamediv">
<h2>Name</h2>
<p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
34
<a name="id2543361"></a><h2>DESCRIPTION</h2>
Rob Austein's avatar
regen  
Rob Austein committed
35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52
<p><code class="filename">named.conf</code> is the configuration file
      for
      <span><strong class="command">named</strong></span>.  Statements are enclosed
      in braces and terminated with a semi-colon.  Clauses in
      the statements are also semi-colon terminated.  The usual
      comment styles are supported:
    </p>
<p>
      C style: /* */
    </p>
<p>
      C++ style: // to end of line
    </p>
<p>
      Unix style: # to end of line
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
53
<a name="id2543388"></a><h2>ACL</h2>
Rob Austein's avatar
regen  
Rob Austein committed
54 55 56 57 58 59
<div class="literallayout"><p><br>
acl<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
60
<a name="id2543404"></a><h2>KEY</h2>
Rob Austein's avatar
regen  
Rob Austein committed
61 62 63 64 65 66 67 68
<div class="literallayout"><p><br>
key<em class="replaceable"><code>domain_name</code></em>{<br>
	algorithm<em class="replaceable"><code>string</code></em>;<br>
	secret<em class="replaceable"><code>string</code></em>;<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
69
<a name="id2543424"></a><h2>MASTERS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
70 71 72 73 74 75 76 77
<div class="literallayout"><p><br>
masters<em class="replaceable"><code>string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
	(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
	<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
78
<a name="id2543469"></a><h2>SERVER</h2>
Rob Austein's avatar
regen  
Rob Austein committed
79 80 81 82
<div class="literallayout"><p><br>
server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
	bogus<em class="replaceable"><code>boolean</code></em>;<br>
	edns<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
83
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
84
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
85 86 87 88 89 90 91 92 93 94 95 96 97 98 99
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	keys<em class="replaceable"><code>server_key</code></em>;<br>
	transfers<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	support-ixfr<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
100
<a name="id2543538"></a><h2>TRUSTED-KEYS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
101 102 103 104 105 106 107
<div class="literallayout"><p><br>
trusted-keys{<br>
	<em class="replaceable"><code>domain_name</code></em><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
108
<a name="id2543563"></a><h2>MANAGED-KEYS</h2>
Automatic Updater's avatar
regen  
Automatic Updater committed
109 110 111 112 113 114 115
<div class="literallayout"><p><br>
managed-keys{<br>
	<em class="replaceable"><code>domain_name</code></em><code class="constant">initial-key</code><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
116
<a name="id2543592"></a><h2>CONTROLS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
117 118 119 120 121 122 123 124 125 126 127
<div class="literallayout"><p><br>
controls{<br>
	inet(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>]<br>
		allow{<em class="replaceable"><code>address_match_element</code></em>;...}<br>
		[<span class="optional">keys{<em class="replaceable"><code>string</code></em>;...}</span>];<br>
	unix<em class="replaceable"><code>unsupported</code></em>;//notimplemented<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
128
<a name="id2543627"></a><h2>LOGGING</h2>
Rob Austein's avatar
regen  
Rob Austein committed
129 130 131 132 133
<div class="literallayout"><p><br>
logging{<br>
	channel<em class="replaceable"><code>string</code></em>{<br>
		file<em class="replaceable"><code>log_file</code></em>;<br>
		syslog<em class="replaceable"><code>optional_facility</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
134 135
		null;<br>
		stderr;<br>
Rob Austein's avatar
regen  
Rob Austein committed
136 137 138 139
		severity<em class="replaceable"><code>log_severity</code></em>;<br>
		print-time<em class="replaceable"><code>boolean</code></em>;<br>
		print-severity<em class="replaceable"><code>boolean</code></em>;<br>
		print-category<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
140
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
141 142 143 144 145
	category<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
146
<a name="id2543666"></a><h2>LWRES</h2>
Rob Austein's avatar
regen  
Rob Austein committed
147 148 149 150
<div class="literallayout"><p><br>
lwres{<br>
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
151
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
152 153 154 155 156 157 158
	view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>;<br>
	search{<em class="replaceable"><code>string</code></em>;...};<br>
	ndots<em class="replaceable"><code>integer</code></em>;<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
159
<a name="id2543707"></a><h2>OPTIONS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182
<div class="literallayout"><p><br>
options{<br>
	avoid-v4-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	avoid-v6-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	blackhole{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	coresize<em class="replaceable"><code>size</code></em>;<br>
	datasize<em class="replaceable"><code>size</code></em>;<br>
	directory<em class="replaceable"><code>quoted_string</code></em>;<br>
	dump-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	files<em class="replaceable"><code>size</code></em>;<br>
	heartbeat-interval<em class="replaceable"><code>integer</code></em>;<br>
	host-statistics<em class="replaceable"><code>boolean</code></em>;//notimplemented<br>
	host-statistics-max<em class="replaceable"><code>number</code></em>;//notimplemented<br>
	hostname(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	interface-interval<em class="replaceable"><code>integer</code></em>;<br>
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	listen-on-v6[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-mapped-addresses<em class="replaceable"><code>boolean</code></em>;<br>
	memstatistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	pid-file(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	port<em class="replaceable"><code>integer</code></em>;<br>
	querylog<em class="replaceable"><code>boolean</code></em>;<br>
	recursing-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
183
	reserved-sockets<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
184 185 186 187 188 189 190 191 192 193 194
	random-device<em class="replaceable"><code>quoted_string</code></em>;<br>
	recursive-clients<em class="replaceable"><code>integer</code></em>;<br>
	serial-query-rate<em class="replaceable"><code>integer</code></em>;<br>
	server-id(<em class="replaceable"><code>quoted_string</code></em>|none|;<br>
	stacksize<em class="replaceable"><code>size</code></em>;<br>
	statistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	statistics-interval<em class="replaceable"><code>integer</code></em>;//notyetimplemented<br>
	tcp-clients<em class="replaceable"><code>integer</code></em>;<br>
	tcp-listen-queue<em class="replaceable"><code>integer</code></em>;<br>
	tkey-dhkey<em class="replaceable"><code>quoted_string</code></em><em class="replaceable"><code>integer</code></em>;<br>
	tkey-gssapi-credential<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
195
	tkey-gssapi-keytab<em class="replaceable"><code>quoted_string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
196 197 198 199 200 201 202
	tkey-domain<em class="replaceable"><code>quoted_string</code></em>;<br>
	transfers-per-ns<em class="replaceable"><code>integer</code></em>;<br>
	transfers-in<em class="replaceable"><code>integer</code></em>;<br>
	transfers-out<em class="replaceable"><code>integer</code></em>;<br>
	use-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	version(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
203
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
204 205 206 207 208 209 210 211
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	minimal-responses<em class="replaceable"><code>boolean</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
212
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
213 214 215 216 217
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
218 219
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
220 221 222
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
223
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
224
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
225 226 227 228 229
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
230 231
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
232 233
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
234 235
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
236
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
237 238 239
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
240
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Rob Austein's avatar
regen  
Rob Austein committed
241 242 243 244 245 246
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
247
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
248
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
249
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
250 251
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
252
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
253
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
254
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
255
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
256
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
257
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
258 259 260 261 262 263 264 265 266 267 268
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
		clients{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		exclude{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		mapped{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
269 270 271 272 273
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
274 275 276 277 278
<br>
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
279
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
280
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
281
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
282 283 284
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
285
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
286
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
287
<br>
Tinderbox User's avatar
Tinderbox User committed
288
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
289 290 291 292
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
293
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
294
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
295 296
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
297 298 299 300 301
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
302
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
303
<br>
Rob Austein's avatar
regen  
Rob Austein committed
304 305 306 307 308 309 310 311 312 313
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
314
<br>
Rob Austein's avatar
regen  
Rob Austein committed
315
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
316 317 318 319
	sig-re-signing-interval<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-nodes<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-signatures<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-type<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
320 321 322 323 324 325 326 327 328 329 330 331 332 333
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
334
	managed-keys-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
335
	auto-dnssec<code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">create</code>|<code class="constant">off</code>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
336
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
337 338
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
339
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
340 341 342 343 344 345
	deny-answer-addresses{<br>
		<em class="replaceable"><code>address_match_list</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
	deny-answer-aliases{<br>
		<em class="replaceable"><code>namelist</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
346 347
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	deallocate-on-exit<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fake-iquery<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	has-old-clients<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	multiple-cnames<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	named-xfer<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	serial-queries<em class="replaceable"><code>integer</code></em>;//obsolete<br>
	treat-cr-as-space<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	use-id-pool<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
365
<a name="id2544595"></a><h2>VIEW</h2>
Rob Austein's avatar
regen  
Rob Austein committed
366 367 368 369 370 371 372 373 374
<div class="literallayout"><p><br>
view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
	match-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-destinations{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	key<em class="replaceable"><code>string</code></em>{<br>
		algorithm<em class="replaceable"><code>string</code></em>;<br>
		secret<em class="replaceable"><code>string</code></em>;<br>
375
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
376
<br>
Rob Austein's avatar
regen  
Rob Austein committed
377
	zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
378 379
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
380
<br>
Rob Austein's avatar
regen  
Rob Austein committed
381
	server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
382 383
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
384
<br>
Rob Austein's avatar
regen  
Rob Austein committed
385
	trusted-keys{<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
386 387
		<em class="replaceable"><code>string</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;<br>
		[<span class="optional">...</span>]<br>
388
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
389
<br>
Rob Austein's avatar
regen  
Rob Austein committed
390
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
391
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
392 393 394 395 396 397 398 399
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	minimal-responses<em class="replaceable"><code>boolean</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
400
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
401 402 403 404 405
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
406 407
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
408 409 410
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
411
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
412
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
413 414 415 416 417
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
418 419
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
420 421
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
422 423
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
424
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
425 426 427
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
428
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Rob Austein's avatar
regen  
Rob Austein committed
429 430 431 432 433 434
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
435
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
436
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
437
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
438 439
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
440
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
441
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
442
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
443
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
444
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
445
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
446 447 448 449 450 451 452 453 454 455 456
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
		clients{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		exclude{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		mapped{<font color="red">&lt;replacable&gt;acl&lt;/replacable&gt;</font>;};<br>
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
457 458 459 460 461 462
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
463 464 465 466
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
467
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
468
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
469
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
470 471 472
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
473
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
474
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
475
<br>
Tinderbox User's avatar
Tinderbox User committed
476
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
477 478 479 480
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
481
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
482
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
483 484
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
485 486 487 488 489
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
490
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
491
<br>
Rob Austein's avatar
regen  
Rob Austein committed
492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
516
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
517
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
518 519
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
520
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
521 522 523 524 525 526 527 528 529
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
530
<a name="id2545317"></a><h2>ZONE</h2>
Rob Austein's avatar
regen  
Rob Austein committed
531 532
<div class="literallayout"><p><br>
zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
Automatic Updater's avatar
Automatic Updater committed
533
	type(master|slave|stub|hint|redirect|<br>
Rob Austein's avatar
regen  
Rob Austein committed
534 535 536 537 538 539 540
		forward|delegation-only);<br>
	file<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
	masters[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>masters</code></em>|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
541 542
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
543 544 545
	database<em class="replaceable"><code>string</code></em>;<br>
	delegation-only<em class="replaceable"><code>boolean</code></em>;<br>
	check-names(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
546
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
547 548 549
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Rob Austein's avatar
regen  
Rob Austein committed
550 551 552
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>boolean</code></em>;<br>
	journal<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
553
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
554
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
555 556
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
557
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
558 559 560
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
561
	update-policy<em class="replaceable"><code>local</code></em>|<em class="replaceable"><code>{<br>
Rob Austein's avatar
regen  
Rob Austein committed
562
		(grant|deny)<em class="replaceable"><code>string</code></em><br>
Mark Andrews's avatar
regen  
Mark Andrews committed
563 564
		(name|subdomain|wildcard|self|selfsub|selfwild|<br>
krb5-self|ms-self|krb5-subdomain|ms-subdomain|<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
565 566 567 568
		tcp-self|zonesub|6to4-self)<em class="replaceable"><code>string</code></em><br>
		<em class="replaceable"><code>rrtypelist</code></em>;<br>
		[<span class="optional">...</span>]<br>
	}</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
569
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
570
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
571
<br>
Tinderbox User's avatar
Tinderbox User committed
572
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
573 574 575 576
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
577
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
578
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
579 580
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
581 582 583 584 585
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
586 587
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
588 589 590 591 592 593 594 595 596 597
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
598
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
599 600 601 602 603 604 605 606 607 608 609 610 611 612
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
613
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
614
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
615 616
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
617 618 619 620 621 622 623 624 625 626
<br>
	ixfr-base<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	ixfr-tmp-file<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	pubkey<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
627
<a name="id2545706"></a><h2>FILES</h2>
Rob Austein's avatar
regen  
Rob Austein committed
628 629 630 631
<p><code class="filename">/etc/named.conf</code>
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
632
<a name="id2545718"></a><h2>SEE ALSO</h2>
Rob Austein's avatar
regen  
Rob Austein committed
633
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
Mark Andrews's avatar
regen  
Mark Andrews committed
634
      <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
Rob Austein's avatar
regen  
Rob Austein committed
635
      <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
Mark Andrews's avatar
regen  
Mark Andrews committed
636
      <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
Rob Austein's avatar
regen  
Rob Austein committed
637 638 639 640
    </p>
</div>
</div></body>
</html>