named.conf.html 46.5 KB
Newer Older
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2
<!--
Tinderbox User's avatar
Tinderbox User committed
3
 - Copyright (C) 2004-2016 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
4
 - 
Tinderbox User's avatar
Tinderbox User committed
5 6 7
 - This Source Code Form is subject to the terms of the Mozilla Public
 - License, v. 2.0. If a copy of the MPL was not distributed with this
 - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8
-->
9
<html lang="en">
Rob Austein's avatar
regen  
Rob Austein committed
10 11 12
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named.conf</title>
Tinderbox User's avatar
Tinderbox User committed
13
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
Rob Austein's avatar
regen  
Rob Austein committed
14
</head>
Tinderbox User's avatar
Tinderbox User committed
15
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
Tinderbox User's avatar
Tinderbox User committed
16
<a name="man.named.conf"></a><div class="titlepage"></div>
Tinderbox User's avatar
Tinderbox User committed
17
<div class="refnamediv">
Rob Austein's avatar
regen  
Rob Austein committed
18
<h2>Name</h2>
Tinderbox User's avatar
Tinderbox User committed
19
<p><code class="filename">named.conf</code> &#8212; configuration file for <span class="command"><strong>named</strong></span></p>
Rob Austein's avatar
regen  
Rob Austein committed
20
</div>
Tinderbox User's avatar
Tinderbox User committed
21
<div class="refsynopsisdiv">
Rob Austein's avatar
regen  
Rob Austein committed
22
<h2>Synopsis</h2>
Tinderbox User's avatar
Tinderbox User committed
23 24 25 26 27
<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
</div>
<div class="refsection">
<a name="id-1.7"></a><h2>DESCRIPTION</h2>
<p><code class="filename">named.conf</code> is the configuration file
Rob Austein's avatar
regen  
Rob Austein committed
28
      for
Tinderbox User's avatar
Tinderbox User committed
29
      <span class="command"><strong>named</strong></span>.  Statements are enclosed
Rob Austein's avatar
regen  
Rob Austein committed
30 31 32 33
      in braces and terminated with a semi-colon.  Clauses in
      the statements are also semi-colon terminated.  The usual
      comment styles are supported:
    </p>
Tinderbox User's avatar
Tinderbox User committed
34
<p>
Rob Austein's avatar
regen  
Rob Austein committed
35 36
      C style: /* */
    </p>
Tinderbox User's avatar
Tinderbox User committed
37
<p>
Rob Austein's avatar
regen  
Rob Austein committed
38 39
      C++ style: // to end of line
    </p>
Tinderbox User's avatar
Tinderbox User committed
40
<p>
Rob Austein's avatar
regen  
Rob Austein committed
41 42
      Unix style: # to end of line
    </p>
Tinderbox User's avatar
Tinderbox User committed
43 44 45 46
</div>
<div class="refsection">
<a name="id-1.8"></a><h2>ACL</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
47 48 49
acl<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
50 51 52 53
</div>
<div class="refsection">
<a name="id-1.9"></a><h2>KEY</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
54 55 56 57 58
key<em class="replaceable"><code>domain_name</code></em>{<br>
	algorithm<em class="replaceable"><code>string</code></em>;<br>
	secret<em class="replaceable"><code>string</code></em>;<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
59 60 61 62
</div>
<div class="refsection">
<a name="id-1.10"></a><h2>MASTERS</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
63 64 65 66 67
masters<em class="replaceable"><code>string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
	(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
	<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
68 69 70 71
</div>
<div class="refsection">
<a name="id-1.11"></a><h2>SERVER</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
72 73 74
server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
	bogus<em class="replaceable"><code>boolean</code></em>;<br>
	edns<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
75
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
76
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
77
	tcp-only<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
78 79 80 81 82 83 84 85 86 87 88 89 90
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	keys<em class="replaceable"><code>server_key</code></em>;<br>
	transfers<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	support-ixfr<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
91 92 93 94
</div>
<div class="refsection">
<a name="id-1.12"></a><h2>TRUSTED-KEYS</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
95
trusted-keys{<br>
Tinderbox User's avatar
Tinderbox User committed
96
	<em class="replaceable"><code>domain_name</code></em><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
Rob Austein's avatar
regen  
Rob Austein committed
97 98
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
99 100 101 102
</div>
<div class="refsection">
<a name="id-1.13"></a><h2>MANAGED-KEYS</h2>
<div class="literallayout"><p><br>
Automatic Updater's avatar
regen  
Automatic Updater committed
103
managed-keys{<br>
Tinderbox User's avatar
Tinderbox User committed
104
	<em class="replaceable"><code>domain_name</code></em><code class="constant">initial-key</code><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
105 106
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
107 108 109 110
</div>
<div class="refsection">
<a name="id-1.14"></a><h2>CONTROLS</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
111 112 113 114 115 116 117 118
controls{<br>
	inet(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>]<br>
		allow{<em class="replaceable"><code>address_match_element</code></em>;...}<br>
		[<span class="optional">keys{<em class="replaceable"><code>string</code></em>;...}</span>];<br>
	unix<em class="replaceable"><code>unsupported</code></em>;//notimplemented<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
119 120 121 122
</div>
<div class="refsection">
<a name="id-1.15"></a><h2>LOGGING</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
123 124 125 126
logging{<br>
	channel<em class="replaceable"><code>string</code></em>{<br>
		file<em class="replaceable"><code>log_file</code></em>;<br>
		syslog<em class="replaceable"><code>optional_facility</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
127 128
		null;<br>
		stderr;<br>
Rob Austein's avatar
regen  
Rob Austein committed
129 130 131 132
		severity<em class="replaceable"><code>log_severity</code></em>;<br>
		print-time<em class="replaceable"><code>boolean</code></em>;<br>
		print-severity<em class="replaceable"><code>boolean</code></em>;<br>
		print-category<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
133
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
134 135 136
	category<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
137 138 139 140
</div>
<div class="refsection">
<a name="id-1.16"></a><h2>LWRES</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
141 142 143
lwres{<br>
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
144
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
145 146 147
	view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>;<br>
	search{<em class="replaceable"><code>string</code></em>;...};<br>
	ndots<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
148 149
	lwres-tasks<em class="replaceable"><code>integer</code></em>;<br>
	lwres-clients<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
150 151
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
152 153 154 155
</div>
<div class="refsection">
<a name="id-1.17"></a><h2>OPTIONS</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
156 157 158 159 160 161 162
options{<br>
	avoid-v4-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	avoid-v6-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	blackhole{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	coresize<em class="replaceable"><code>size</code></em>;<br>
	datasize<em class="replaceable"><code>size</code></em>;<br>
	directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
163 164 165 166
	dnstap{<em class="replaceable"><code>message_type</code></em>;...};<br>
	dnstap-output(<code class="literal">file</code>|<code class="literal">unix</code>)<em class="replaceable"><code>path_name</code></em>;<br>
	dnstap-identity(<em class="replaceable"><code>string</code></em>|<code class="literal">hostname</code>|<code class="literal">none</code>);<br>
	dnstap-version(<em class="replaceable"><code>string</code></em>|<code class="literal">none</code>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
167 168
	dump-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	files<em class="replaceable"><code>size</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
169 170 171 172 173 174 175
	fstrm-set-buffer-hint<em class="replaceable"><code>number</code></em>;<br>
	fstrm-set-flush-timeout<em class="replaceable"><code>number</code></em>;<br>
	fstrm-set-input-queue-size<em class="replaceable"><code>number</code></em>;<br>
	fstrm-set-output-notify-threshold<em class="replaceable"><code>number</code></em>;<br>
	fstrm-set-output-queue-model(<em class="replaceable"><code>mpsc</code></em>|<em class="replaceable"><code>spsc</code></em>);<br>
	fstrm-set-output-queue-size<em class="replaceable"><code>number</code></em>;<br>
	fstrm-set-reopen-interval<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
176 177 178 179 180
	heartbeat-interval<em class="replaceable"><code>integer</code></em>;<br>
	host-statistics<em class="replaceable"><code>boolean</code></em>;//notimplemented<br>
	host-statistics-max<em class="replaceable"><code>number</code></em>;//notimplemented<br>
	hostname(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	interface-interval<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
181
	keep-response-order{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
182 183 184 185 186 187 188 189
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	listen-on-v6[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-mapped-addresses<em class="replaceable"><code>boolean</code></em>;<br>
	memstatistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	pid-file(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	port<em class="replaceable"><code>integer</code></em>;<br>
	querylog<em class="replaceable"><code>boolean</code></em>;<br>
	recursing-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
190
	reserved-sockets<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
191 192 193
	random-device<em class="replaceable"><code>quoted_string</code></em>;<br>
	recursive-clients<em class="replaceable"><code>integer</code></em>;<br>
	serial-query-rate<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
194
	server-id(<em class="replaceable"><code>quoted_string</code></em>|hostname|none);<br>
Rob Austein's avatar
regen  
Rob Austein committed
195 196 197 198 199 200 201
	stacksize<em class="replaceable"><code>size</code></em>;<br>
	statistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	statistics-interval<em class="replaceable"><code>integer</code></em>;//notyetimplemented<br>
	tcp-clients<em class="replaceable"><code>integer</code></em>;<br>
	tcp-listen-queue<em class="replaceable"><code>integer</code></em>;<br>
	tkey-dhkey<em class="replaceable"><code>quoted_string</code></em><em class="replaceable"><code>integer</code></em>;<br>
	tkey-gssapi-credential<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
202
	tkey-gssapi-keytab<em class="replaceable"><code>quoted_string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
203
	tkey-domain<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
204
	transfer-message-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
205 206 207 208 209
	transfers-per-ns<em class="replaceable"><code>integer</code></em>;<br>
	transfers-in<em class="replaceable"><code>integer</code></em>;<br>
	transfers-out<em class="replaceable"><code>integer</code></em>;<br>
	version(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
210
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
211 212 213
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
Tinderbox User's avatar
Tinderbox User committed
214
	minimal-any<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
215
	minimal-responses(<em class="replaceable"><code>boolean</code></em>|no-auth|no-auth-recursive);<br>
Rob Austein's avatar
regen  
Rob Austein committed
216 217 218 219
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
220
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
221 222 223 224 225
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
226 227
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
228 229 230
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
231
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
232
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
233 234 235 236 237
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
238 239
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
240 241
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
242 243
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
244
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
245 246 247
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
248
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Tinderbox User's avatar
Tinderbox User committed
249 250 251 252 253 254 255 256 257 258
	catalog-zones{<br>
	zone<em class="replaceable"><code>quoted_string</code></em><br>
		[<span class="optional">default-masters<br>
		[<span class="optional">port<em class="replaceable"><code>ip_port</code></em></span>]<br>
		[<span class="optional">dscp<em class="replaceable"><code>ip_dscp</code></em></span>]<br>
		{(<em class="replaceable"><code>masters_list</code></em>|<em class="replaceable"><code>ip_addr</code></em>[<span class="optional">port<em class="replaceable"><code>ip_port</code></em></span>][<span class="optional">key<em class="replaceable"><code>key</code></em></span>]);[<span class="optional">...</span>]}</span>]<br>
	[<span class="optional">in-memory<em class="replaceable"><code>yes_or_no</code></em></span>]<br>
	[<span class="optional">min-update-interval<em class="replaceable"><code>interval</code></em></span>]<br>
	;...};<br>
	;<br>
Rob Austein's avatar
regen  
Rob Austein committed
259 260 261 262 263 264
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
265
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
266
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
267
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
268 269
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
270
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
271
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
272
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
273
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
274
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
275
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
276 277 278 279
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
Tinderbox User's avatar
Tinderbox User committed
280 281 282
		clients{<em class="replaceable"><code>acl</code></em>;};<br>
		exclude{<em class="replaceable"><code>acl</code></em>;};<br>
		mapped{<em class="replaceable"><code>acl</code></em>;};<br>
Automatic Updater's avatar
Automatic Updater committed
283 284 285 286
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
287 288 289 290 291
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
292 293 294 295 296
<br>
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
297
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
298
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
299
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
300 301 302
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
303
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
304
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
305
<br>
Tinderbox User's avatar
Tinderbox User committed
306
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
307 308 309 310
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
311
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
312
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
313 314
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
315 316 317 318 319
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
320
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
321
<br>
Rob Austein's avatar
regen  
Rob Austein committed
322
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
323
	max-records<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
324 325 326 327 328 329 330 331 332
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
333
<br>
Rob Austein's avatar
regen  
Rob Austein committed
334
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
335 336 337 338
	sig-re-signing-interval<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-nodes<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-signatures<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-type<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
339 340 341 342 343 344 345 346 347 348 349 350 351 352
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
353
	managed-keys-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
354
	auto-dnssec<code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">off</code>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
355
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
356 357
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
358
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
359
	automatic-interface-scan<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
360 361 362 363 364 365 366
<br>
	cookie-algorithm(<em class="replaceable"><code>aes</code></em>|<em class="replaceable"><code>sha1</code></em>|<em class="replaceable"><code>sha256</code></em>);<br>
	cookie-secret<em class="replaceable"><code>string</code></em>;<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
367 368 369 370 371 372
	deny-answer-addresses{<br>
		<em class="replaceable"><code>address_match_list</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
	deny-answer-aliases{<br>
		<em class="replaceable"><code>namelist</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
373 374
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
375 376 377 378 379 380 381 382 383 384 385 386 387
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	deallocate-on-exit<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fake-iquery<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	has-old-clients<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	multiple-cnames<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	named-xfer<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	serial-queries<em class="replaceable"><code>integer</code></em>;//obsolete<br>
	treat-cr-as-space<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	use-id-pool<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
Tinderbox User's avatar
Tinderbox User committed
388
	use-ixfr<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
Rob Austein's avatar
regen  
Rob Austein committed
389 390
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
391 392 393 394
</div>
<div class="refsection">
<a name="id-1.18"></a><h2>VIEW</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
395 396 397 398 399 400 401 402
view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
	match-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-destinations{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	key<em class="replaceable"><code>string</code></em>{<br>
		algorithm<em class="replaceable"><code>string</code></em>;<br>
		secret<em class="replaceable"><code>string</code></em>;<br>
403
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
404
<br>
Rob Austein's avatar
regen  
Rob Austein committed
405
	zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
406 407
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
408
<br>
Rob Austein's avatar
regen  
Rob Austein committed
409
	server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
410 411
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
412
<br>
Rob Austein's avatar
regen  
Rob Austein committed
413
	trusted-keys{<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
414 415
		<em class="replaceable"><code>string</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;<br>
		[<span class="optional">...</span>]<br>
416
	};<br>
Tinderbox User's avatar
Tinderbox User committed
417 418 419 420 421
<br>
	managed-keys{<br>
		<em class="replaceable"><code>domain_name</code></em><code class="constant">initial-key</code><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;<br>
		[<span class="optional">...</span>]<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
422
<br>
Rob Austein's avatar
regen  
Rob Austein committed
423
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
424
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
425 426 427
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
Tinderbox User's avatar
Tinderbox User committed
428
	minimal-any<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
429 430 431 432 433
	minimal-responses<em class="replaceable"><code>boolean</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
434
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
435 436 437 438 439
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
440 441
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
442 443 444
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
445
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
446
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
447 448 449 450 451
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
452 453
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
454 455
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
456 457
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
458
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
459 460 461
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
462
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Rob Austein's avatar
regen  
Rob Austein committed
463 464 465 466 467 468
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
469
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
470
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
471
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
472 473
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
474
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
475
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
476
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
477
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
478
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
479
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
480 481 482 483
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
Tinderbox User's avatar
Tinderbox User committed
484 485 486
		clients{<em class="replaceable"><code>acl</code></em>;};<br>
		exclude{<em class="replaceable"><code>acl</code></em>;};<br>
		mapped{<em class="replaceable"><code>acl</code></em>;};<br>
Automatic Updater's avatar
Automatic Updater committed
487 488 489 490
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
491 492 493 494 495 496
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
497 498 499 500
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
501
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
502
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
503
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
504 505 506
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
507
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
508
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
509
<br>
Tinderbox User's avatar
Tinderbox User committed
510
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
511 512 513 514
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
515
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
516
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
517 518
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
519 520 521 522 523
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
524
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
525
<br>
Rob Austein's avatar
regen  
Rob Austein committed
526
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
527
	max-records<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
551
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
552
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
553 554
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
555
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
556 557 558 559
<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
560 561 562 563 564 565 566
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
567 568 569 570
</div>
<div class="refsection">
<a name="id-1.19"></a><h2>ZONE</h2>
<div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
571
zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
Automatic Updater's avatar
Automatic Updater committed
572
	type(master|slave|stub|hint|redirect|<br>
Rob Austein's avatar
regen  
Rob Austein committed
573 574 575 576 577 578 579
		forward|delegation-only);<br>
	file<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
	masters[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>masters</code></em>|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
580 581
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
582 583 584
	database<em class="replaceable"><code>string</code></em>;<br>
	delegation-only<em class="replaceable"><code>boolean</code></em>;<br>
	check-names(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
585
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
586 587 588
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Rob Austein's avatar
regen  
Rob Austein committed
589 590 591
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>boolean</code></em>;<br>
	journal<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
592
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
593
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
594 595
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
596
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
597 598 599
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
600
	update-policy<em class="replaceable"><code>local</code></em>|<em class="replaceable"><code>{<br>
Rob Austein's avatar
regen  
Rob Austein committed
601
		(grant|deny)<em class="replaceable"><code>string</code></em><br>
Mark Andrews's avatar
regen  
Mark Andrews committed
602
		(name|subdomain|wildcard|self|selfsub|selfwild|<br>
Tinderbox User's avatar
Tinderbox User committed
603
		krb5-self|ms-self|krb5-subdomain|ms-subdomain|<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
604 605 606 607
		tcp-self|zonesub|6to4-self)<em class="replaceable"><code>string</code></em><br>
		<em class="replaceable"><code>rrtypelist</code></em>;<br>
		[<span class="optional">...</span>]<br>
	}</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
608
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
609
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
610
<br>
Tinderbox User's avatar
Tinderbox User committed
611
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
612 613 614 615
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
616
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
617
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
618 619
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
620 621 622 623 624
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
625 626
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
627
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
628
	max-records<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
629 630 631 632 633 634 635 636 637
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
638
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
639 640 641 642 643 644 645 646 647 648 649 650 651 652
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
653
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
654
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
655 656
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
657 658 659 660 661 662 663 664
<br>
	ixfr-base<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	ixfr-tmp-file<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	pubkey<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
665 666 667 668
</div>
<div class="refsection">
<a name="id-1.20"></a><h2>FILES</h2>
<p><code class="filename">/etc/named.conf</code>
Rob Austein's avatar
regen  
Rob Austein committed
669
    </p>
Tinderbox User's avatar
Tinderbox User committed
670 671 672 673 674 675
</div>
<div class="refsection">
<a name="id-1.21"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
      <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
      <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
Mark Andrews's avatar
regen  
Mark Andrews committed
676
      <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
Rob Austein's avatar
regen  
Rob Austein committed
677
    </p>
Tinderbox User's avatar
Tinderbox User committed
678
</div>
Rob Austein's avatar
regen  
Rob Austein committed
679 680
</div></body>
</html>