named.conf.html 44.2 KB
Newer Older
1
<!--
Tinderbox User's avatar
Tinderbox User committed
2
 - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
3
 - 
Automatic Updater's avatar
regen  
Automatic Updater committed
4
 - Permission to use, copy, modify, and/or distribute this software for any
5 6
 - purpose with or without fee is hereby granted, provided that the above
 - copyright notice and this permission notice appear in all copies.
Rob Austein's avatar
regen  
Rob Austein committed
7
 - 
8 9
 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
Rob Austein's avatar
regen  
Rob Austein committed
10
 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11 12 13 14 15
 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 - PERFORMANCE OF THIS SOFTWARE.
-->
Tinderbox User's avatar
Tinderbox User committed
16
<!-- $Id$ -->
Rob Austein's avatar
regen  
Rob Austein committed
17 18 19 20
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named.conf</title>
Mark Andrews's avatar
regen  
Mark Andrews committed
21
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
Rob Austein's avatar
regen  
Rob Austein committed
22 23
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
Tinderbox User's avatar
Tinderbox User committed
24
<a name="man.named.conf"></a><div class="titlepage"></div>
Rob Austein's avatar
regen  
Rob Austein committed
25 26
<div class="refnamediv">
<h2>Name</h2>
Tinderbox User's avatar
Tinderbox User committed
27
<p><code class="filename">named.conf</code> &#8212; configuration file for <span><strong class="command">named</strong></span></p>
Rob Austein's avatar
regen  
Rob Austein committed
28 29 30 31 32 33
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
34
<a name="id2543379"></a><h2>DESCRIPTION</h2>
Rob Austein's avatar
regen  
Rob Austein committed
35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52
<p><code class="filename">named.conf</code> is the configuration file
      for
      <span><strong class="command">named</strong></span>.  Statements are enclosed
      in braces and terminated with a semi-colon.  Clauses in
      the statements are also semi-colon terminated.  The usual
      comment styles are supported:
    </p>
<p>
      C style: /* */
    </p>
<p>
      C++ style: // to end of line
    </p>
<p>
      Unix style: # to end of line
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
53
<a name="id2543406"></a><h2>ACL</h2>
Rob Austein's avatar
regen  
Rob Austein committed
54 55 56 57 58 59
<div class="literallayout"><p><br>
acl<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
60
<a name="id2543422"></a><h2>KEY</h2>
Rob Austein's avatar
regen  
Rob Austein committed
61 62 63 64 65 66 67 68
<div class="literallayout"><p><br>
key<em class="replaceable"><code>domain_name</code></em>{<br>
	algorithm<em class="replaceable"><code>string</code></em>;<br>
	secret<em class="replaceable"><code>string</code></em>;<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
69
<a name="id2543442"></a><h2>MASTERS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
70 71 72 73 74 75 76 77
<div class="literallayout"><p><br>
masters<em class="replaceable"><code>string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
	(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
	<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
78
<a name="id2543488"></a><h2>SERVER</h2>
Rob Austein's avatar
regen  
Rob Austein committed
79 80 81 82
<div class="literallayout"><p><br>
server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
	bogus<em class="replaceable"><code>boolean</code></em>;<br>
	edns<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
83
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
84
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
85
	tcp-only<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
86 87 88 89 90 91 92 93 94 95 96 97 98 99 100
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	keys<em class="replaceable"><code>server_key</code></em>;<br>
	transfers<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	support-ixfr<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
101
<a name="id2543559"></a><h2>TRUSTED-KEYS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
102 103
<div class="literallayout"><p><br>
trusted-keys{<br>
Tinderbox User's avatar
Tinderbox User committed
104
	<em class="replaceable"><code>domain_name</code></em><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
Rob Austein's avatar
regen  
Rob Austein committed
105 106 107 108
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
109
<a name="id2543585"></a><h2>MANAGED-KEYS</h2>
Automatic Updater's avatar
regen  
Automatic Updater committed
110 111
<div class="literallayout"><p><br>
managed-keys{<br>
Tinderbox User's avatar
Tinderbox User committed
112
	<em class="replaceable"><code>domain_name</code></em><code class="constant">initial-key</code><em class="replaceable"><code>flags</code></em><em class="replaceable"><code>protocol</code></em><em class="replaceable"><code>algorithm</code></em><em class="replaceable"><code>key</code></em>;...<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
113 114 115 116
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
117
<a name="id2543613"></a><h2>CONTROLS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
118 119 120 121 122 123 124 125 126 127 128
<div class="literallayout"><p><br>
controls{<br>
	inet(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>]<br>
		allow{<em class="replaceable"><code>address_match_element</code></em>;...}<br>
		[<span class="optional">keys{<em class="replaceable"><code>string</code></em>;...}</span>];<br>
	unix<em class="replaceable"><code>unsupported</code></em>;//notimplemented<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
129
<a name="id2543649"></a><h2>LOGGING</h2>
Rob Austein's avatar
regen  
Rob Austein committed
130 131 132 133 134
<div class="literallayout"><p><br>
logging{<br>
	channel<em class="replaceable"><code>string</code></em>{<br>
		file<em class="replaceable"><code>log_file</code></em>;<br>
		syslog<em class="replaceable"><code>optional_facility</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
135 136
		null;<br>
		stderr;<br>
Rob Austein's avatar
regen  
Rob Austein committed
137 138 139 140
		severity<em class="replaceable"><code>log_severity</code></em>;<br>
		print-time<em class="replaceable"><code>boolean</code></em>;<br>
		print-severity<em class="replaceable"><code>boolean</code></em>;<br>
		print-category<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
141
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
142 143 144 145 146
	category<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
147
<a name="id2543687"></a><h2>LWRES</h2>
Rob Austein's avatar
regen  
Rob Austein committed
148 149 150 151
<div class="literallayout"><p><br>
lwres{<br>
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
152
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
153 154 155
	view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>;<br>
	search{<em class="replaceable"><code>string</code></em>;...};<br>
	ndots<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
156 157
	lwres-tasks<em class="replaceable"><code>integer</code></em>;<br>
	lwres-clients<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
158 159 160 161
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
162
<a name="id2543735"></a><h2>OPTIONS</h2>
Rob Austein's avatar
regen  
Rob Austein committed
163 164 165 166 167 168 169 170 171 172 173 174 175 176 177
<div class="literallayout"><p><br>
options{<br>
	avoid-v4-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	avoid-v6-udp-ports{<em class="replaceable"><code>port</code></em>;...};<br>
	blackhole{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	coresize<em class="replaceable"><code>size</code></em>;<br>
	datasize<em class="replaceable"><code>size</code></em>;<br>
	directory<em class="replaceable"><code>quoted_string</code></em>;<br>
	dump-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	files<em class="replaceable"><code>size</code></em>;<br>
	heartbeat-interval<em class="replaceable"><code>integer</code></em>;<br>
	host-statistics<em class="replaceable"><code>boolean</code></em>;//notimplemented<br>
	host-statistics-max<em class="replaceable"><code>number</code></em>;//notimplemented<br>
	hostname(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	interface-interval<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
178
	keep-response-order{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
179 180 181 182 183 184 185 186
	listen-on[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	listen-on-v6[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-mapped-addresses<em class="replaceable"><code>boolean</code></em>;<br>
	memstatistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	pid-file(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	port<em class="replaceable"><code>integer</code></em>;<br>
	querylog<em class="replaceable"><code>boolean</code></em>;<br>
	recursing-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
187
	reserved-sockets<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
188 189 190
	random-device<em class="replaceable"><code>quoted_string</code></em>;<br>
	recursive-clients<em class="replaceable"><code>integer</code></em>;<br>
	serial-query-rate<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
191
	server-id(<em class="replaceable"><code>quoted_string</code></em>|hostname|none);<br>
Rob Austein's avatar
regen  
Rob Austein committed
192 193 194 195 196 197 198
	stacksize<em class="replaceable"><code>size</code></em>;<br>
	statistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	statistics-interval<em class="replaceable"><code>integer</code></em>;//notyetimplemented<br>
	tcp-clients<em class="replaceable"><code>integer</code></em>;<br>
	tcp-listen-queue<em class="replaceable"><code>integer</code></em>;<br>
	tkey-dhkey<em class="replaceable"><code>quoted_string</code></em><em class="replaceable"><code>integer</code></em>;<br>
	tkey-gssapi-credential<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
199
	tkey-gssapi-keytab<em class="replaceable"><code>quoted_string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
200 201 202 203 204 205 206
	tkey-domain<em class="replaceable"><code>quoted_string</code></em>;<br>
	transfers-per-ns<em class="replaceable"><code>integer</code></em>;<br>
	transfers-in<em class="replaceable"><code>integer</code></em>;<br>
	transfers-out<em class="replaceable"><code>integer</code></em>;<br>
	use-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	version(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
207
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
208 209 210 211 212 213 214 215
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	minimal-responses<em class="replaceable"><code>boolean</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
216
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
217 218 219 220 221
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
222 223
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
224 225 226
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
227
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
228
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
229 230 231 232 233
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
234 235
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
236 237
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
238 239
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
240
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
241 242 243
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
244
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Rob Austein's avatar
regen  
Rob Austein committed
245 246 247 248 249 250
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
251
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
252
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
253
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
254 255
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
256
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
257
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
258
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
259
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
260
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
261
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
262 263 264 265
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
Tinderbox User's avatar
Tinderbox User committed
266 267 268
		clients{<em class="replaceable"><code>acl</code></em>;};<br>
		exclude{<em class="replaceable"><code>acl</code></em>;};<br>
		mapped{<em class="replaceable"><code>acl</code></em>;};<br>
Automatic Updater's avatar
Automatic Updater committed
269 270 271 272
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
273 274 275 276 277
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
278 279 280 281 282
<br>
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
283
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
284
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
285
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
286 287 288
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
289
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
290
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
291
<br>
Tinderbox User's avatar
Tinderbox User committed
292
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
293 294 295 296
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
297
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
298
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
299 300
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
301 302 303 304 305
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
306
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
307
<br>
Rob Austein's avatar
regen  
Rob Austein committed
308 309 310 311 312 313 314 315 316 317
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
318
<br>
Rob Austein's avatar
regen  
Rob Austein committed
319
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
320 321 322 323
	sig-re-signing-interval<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-nodes<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-signatures<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-type<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
324 325 326 327 328 329 330 331 332 333 334 335 336 337
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
338
	managed-keys-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
339
	auto-dnssec<code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">off</code>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
340
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
341 342
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
343
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
344 345 346 347 348 349 350
<br>
	cookie-algorithm(<em class="replaceable"><code>aes</code></em>|<em class="replaceable"><code>sha1</code></em>|<em class="replaceable"><code>sha256</code></em>);<br>
	cookie-secret<em class="replaceable"><code>string</code></em>;<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
351 352 353 354 355 356
	deny-answer-addresses{<br>
		<em class="replaceable"><code>address_match_list</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
	deny-answer-aliases{<br>
		<em class="replaceable"><code>namelist</code></em><br>
	}[<span class="optional">except-from{<em class="replaceable"><code>namelist</code></em>}</span>];<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
357 358
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	deallocate-on-exit<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fake-iquery<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	has-old-clients<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	multiple-cnames<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	named-xfer<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	serial-queries<em class="replaceable"><code>integer</code></em>;//obsolete<br>
	treat-cr-as-space<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	use-id-pool<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
376
<a name="id2544714"></a><h2>VIEW</h2>
Rob Austein's avatar
regen  
Rob Austein committed
377 378 379 380 381 382 383 384 385
<div class="literallayout"><p><br>
view<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
	match-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-destinations{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	key<em class="replaceable"><code>string</code></em>{<br>
		algorithm<em class="replaceable"><code>string</code></em>;<br>
		secret<em class="replaceable"><code>string</code></em>;<br>
386
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
387
<br>
Rob Austein's avatar
regen  
Rob Austein committed
388
	zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
389 390
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
391
<br>
Rob Austein's avatar
regen  
Rob Austein committed
392
	server(<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>|<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>){<br>
393 394
		...<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
395
<br>
Rob Austein's avatar
regen  
Rob Austein committed
396
	trusted-keys{<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
397 398
		<em class="replaceable"><code>string</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;<br>
		[<span class="optional">...</span>]<br>
399
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
400
<br>
Rob Austein's avatar
regen  
Rob Austein committed
401
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
402
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
403 404 405 406 407 408 409 410
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	topology{<em class="replaceable"><code>address_match_element</code></em>;...};//notimplemented<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	minimal-responses<em class="replaceable"><code>boolean</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	rrset-order{<br>
		[<span class="optional">class<em class="replaceable"><code>string</code></em></span>][<span class="optional">type<em class="replaceable"><code>string</code></em></span>]<br>
		[<span class="optional">name<em class="replaceable"><code>quoted_string</code></em></span>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...<br>
411
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
412 413 414 415 416
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	rfc2308-type1<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	additional-from-auth<em class="replaceable"><code>boolean</code></em>;<br>
	additional-from-cache<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
417 418
	query-source((<em class="replaceable"><code>ipv4_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv4_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	query-source-v6((<em class="replaceable"><code>ipv6_address</code></em>|*)|[<span class="optional">address(<em class="replaceable"><code>ipv6_address</code></em>|*)</span>])[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
419 420 421
	use-queryport-pool<em class="replaceable"><code>boolean</code></em>;<br>
	queryport-pool-ports<em class="replaceable"><code>integer</code></em>;<br>
	queryport-pool-updateinterval<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
422
	cleaning-interval<em class="replaceable"><code>integer</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
423
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
424 425 426 427 428
	min-roots<em class="replaceable"><code>integer</code></em>;//notimplemented<br>
	lame-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-ncache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	max-cache-ttl<em class="replaceable"><code>integer</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
429 430
	max-cache-size<em class="replaceable"><code>size</code></em>;<br>
	max-acache-size<em class="replaceable"><code>size</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
431 432
	clients-per-query<em class="replaceable"><code>number</code></em>;<br>
	max-clients-per-query<em class="replaceable"><code>number</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
433 434
	check-names(master|slave|response)<br>
		(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
435
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
436 437 438
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
439
	cache-file<em class="replaceable"><code>quoted_string</code></em>;//testoption<br>
Rob Austein's avatar
regen  
Rob Austein committed
440 441 442 443 444 445
	suppress-initial-notify<em class="replaceable"><code>boolean</code></em>;//notyetimplemented<br>
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
	dual-stack-servers[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>quoted_string</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]);...<br>
446
	};<br>
Rob Austein's avatar
regen  
Rob Austein committed
447
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
448
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
449 450
	root-delegation-only[<span class="optional">exclude{<em class="replaceable"><code>quoted_string</code></em>;...}</span>];<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
451
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
452
	dnssec-enable<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
453
	dnssec-validation<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
454
	dnssec-lookaside(<em class="replaceable"><code>auto</code></em>|<em class="replaceable"><code>no</code></em>|<em class="replaceable"><code>domain</code></em>trust-anchor<em class="replaceable"><code>domain</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
455
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
456
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
457 458 459 460
<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>prefix</code></em>{<br>
Tinderbox User's avatar
Tinderbox User committed
461 462 463
		clients{<em class="replaceable"><code>acl</code></em>;};<br>
		exclude{<em class="replaceable"><code>acl</code></em>;};<br>
		mapped{<em class="replaceable"><code>acl</code></em>;};<br>
Automatic Updater's avatar
Automatic Updater committed
464 465 466 467
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
468 469 470 471 472 473
<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
474 475 476 477
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
478
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
479
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
480
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
481 482 483
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
484
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
485
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
486
<br>
Tinderbox User's avatar
Tinderbox User committed
487
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
488 489 490 491
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
492
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
493
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
494 495
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
496 497 498 499 500
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
501
	};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
502
<br>
Rob Austein's avatar
regen  
Rob Austein committed
503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
527
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
528
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
529 530
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
531
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
532 533 534 535
<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
536 537 538 539 540 541 542 543 544
<br>
	allow-v6-synthesis{<em class="replaceable"><code>address_match_element</code></em>;...};//obsolete<br>
	fetch-glue<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
545
<a name="id2545378"></a><h2>ZONE</h2>
Rob Austein's avatar
regen  
Rob Austein committed
546 547
<div class="literallayout"><p><br>
zone<em class="replaceable"><code>string</code></em><em class="replaceable"><code>optional_class</code></em>{<br>
Automatic Updater's avatar
Automatic Updater committed
548
	type(master|slave|stub|hint|redirect|<br>
Rob Austein's avatar
regen  
Rob Austein committed
549 550 551 552 553 554 555
		forward|delegation-only);<br>
	file<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
	masters[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>masters</code></em>|<br>
		<em class="replaceable"><code>ipv4_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>])[<span class="optional">key<em class="replaceable"><code>string</code></em></span>];...<br>
556 557
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
558 559 560
	database<em class="replaceable"><code>string</code></em>;<br>
	delegation-only<em class="replaceable"><code>boolean</code></em>;<br>
	check-names(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
561
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
562 563 564
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx-cname(fail|warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
Rob Austein's avatar
regen  
Rob Austein committed
565 566 567
	dialup<em class="replaceable"><code>dialuptype</code></em>;<br>
	ixfr-from-differences<em class="replaceable"><code>boolean</code></em>;<br>
	journal<em class="replaceable"><code>quoted_string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
568
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
569
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
570 571
<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
572
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
573 574 575
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
576
	update-policy<em class="replaceable"><code>local</code></em>|<em class="replaceable"><code>{<br>
Rob Austein's avatar
regen  
Rob Austein committed
577
		(grant|deny)<em class="replaceable"><code>string</code></em><br>
Mark Andrews's avatar
regen  
Mark Andrews committed
578
		(name|subdomain|wildcard|self|selfsub|selfwild|<br>
Tinderbox User's avatar
Tinderbox User committed
579
		krb5-self|ms-self|krb5-subdomain|ms-subdomain|<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
580 581 582 583
		tcp-self|zonesub|6to4-self)<em class="replaceable"><code>string</code></em><br>
		<em class="replaceable"><code>rrtypelist</code></em>;<br>
		[<span class="optional">...</span>]<br>
	}</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
584
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
585
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
586
<br>
Tinderbox User's avatar
Tinderbox User committed
587
	masterfile-format(text|raw|map);<br>
Rob Austein's avatar
regen  
Rob Austein committed
588 589 590 591
	notify<em class="replaceable"><code>notifytype</code></em>;<br>
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	notify-delay<em class="replaceable"><code>seconds</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
592
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
593
	also-notify[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)<br>
Automatic Updater's avatar
Automatic Updater committed
594 595
		[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
		[<span class="optional">key<em class="replaceable"><code>keyname</code></em></span>]...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
596 597 598 599 600
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
<br>
	forward(first|only);<br>
	forwarders[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>]{<br>
		(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[<span class="optional">port<em class="replaceable"><code>integer</code></em></span>];...<br>
601 602
	};<br>
<br>
Rob Austein's avatar
regen  
Rob Austein committed
603 604 605 606 607 608 609 610 611 612
	max-journal-size<em class="replaceable"><code>size_no_default</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
613
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
614 615 616 617 618 619 620 621 622 623 624 625 626 627
	sig-validity-interval<em class="replaceable"><code>integer</code></em>;<br>
<br>
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)<br>
		[<span class="optional">port(<em class="replaceable"><code>integer</code></em>|*)</span>];<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
<br>
	zone-statistics<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
628
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
629
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
630 631
<br>
	nsec3-test-zone<em class="replaceable"><code>boolean</code></em>;//testingonly<br>
Rob Austein's avatar
regen  
Rob Austein committed
632 633 634 635 636 637 638 639 640 641
<br>
	ixfr-base<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	ixfr-tmp-file<em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
	maintain-ixfr-base<em class="replaceable"><code>boolean</code></em>;//obsolete<br>
	max-ixfr-log-size<em class="replaceable"><code>size</code></em>;//obsolete<br>
	pubkey<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;//obsolete<br>
};<br>
</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
642
<a name="id2545767"></a><h2>FILES</h2>
Rob Austein's avatar
regen  
Rob Austein committed
643 644 645 646
<p><code class="filename">/etc/named.conf</code>
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
647
<a name="id2545779"></a><h2>SEE ALSO</h2>
Rob Austein's avatar
regen  
Rob Austein committed
648
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
Mark Andrews's avatar
regen  
Mark Andrews committed
649
      <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
Rob Austein's avatar
regen  
Rob Austein committed
650
      <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
Mark Andrews's avatar
regen  
Mark Andrews committed
651
      <em class="citetitle">BIND 9 Administrator Reference Manual</em>.
Rob Austein's avatar
regen  
Rob Austein committed
652 653 654 655
    </p>
</div>
</div></body>
</html>