named.conf.docbook revision ecc06cbc32c5a2b91a17e65c1820c9c66313d35c
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran<!--
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran -
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - Permission to use, copy, modify, and/or distribute this software for any
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - purpose with or without fee is hereby granted, provided that the above
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - copyright notice and this permission notice appear in all copies.
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran -
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran - PERFORMANCE OF THIS SOFTWARE.
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran-->
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran<!-- Converted by db4-upgrade version 1.0 -->
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <date>2014-01-08</date>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refentryinfo>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <corpname>ISC</corpname>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refentryinfo>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refmeta>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refentrytitle><filename>named.conf</filename></refentrytitle>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <manvolnum>5</manvolnum>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refmiscinfo>BIND9</refmiscinfo>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refmeta>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refnamediv>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refname><filename>named.conf</filename></refname>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refpurpose>configuration file for <command>named</command></refpurpose>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refnamediv>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <docinfo>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <copyright>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2004</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2005</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2006</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2007</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2008</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2009</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2010</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2011</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2012</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2013</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2014</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <year>2015</year>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </copyright>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </docinfo>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsynopsisdiv>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <cmdsynopsis sepchar=" ">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <command>named.conf</command>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </cmdsynopsis>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsynopsisdiv>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>DESCRIPTION</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <para><filename>named.conf</filename> is the configuration file
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran for
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <command>named</command>. Statements are enclosed
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran in braces and terminated with a semi-colon. Clauses in
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran the statements are also semi-colon terminated. The usual
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran comment styles are supported:
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran C style: /* */
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran C++ style: // to end of line
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran Unix style: # to end of line
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </para>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>ACL</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranacl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>KEY</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcorankey <replaceable>domain_name</replaceable> {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran algorithm <replaceable>string</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran secret <replaceable>string</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>MASTERS</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranmasters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>SERVER</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranserver ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran bogus <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran edns <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran edns-udp-size <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran max-udp-size <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran tcp-only <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran provide-ixfr <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran request-ixfr <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran keys <replaceable>server_key</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran transfers <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran transfer-format ( many-answers | one-answer );
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran transfer-source ( <replaceable>ipv4_address</replaceable> | * )
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran support-ixfr <replaceable>boolean</replaceable>; // obsolete
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>TRUSTED-KEYS</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcorantrusted-keys {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>MANAGED-KEYS</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranmanaged-keys {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>CONTROLS</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcorancontrols {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran allow { <replaceable>address_match_element</replaceable>; ... }
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran unix <replaceable>unsupported</replaceable>; // not implemented
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>LOGGING</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranlogging {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran channel <replaceable>string</replaceable> {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran file <replaceable>log_file</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran syslog <replaceable>optional_facility</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran null;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran stderr;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran severity <replaceable>log_severity</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran print-time <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran print-severity <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran print-category <replaceable>boolean</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran };
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>LWRES</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoranlwres {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran listen-on <optional> port <replaceable>integer</replaceable> </optional> {
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran };
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran search { <replaceable>string</replaceable>; ... };
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran ndots <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran lwres-tasks <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran lwres-clients <replaceable>integer</replaceable>;
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran};
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran</literallayout>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran </refsection>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <refsection><info><title>OPTIONS</title></info>
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran
b72d5b75fd6f5bb08d29f65652d60058fc3a2608Michael Corcoran <literallayout class="normal">
options {
avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
blackhole { <replaceable>address_match_element</replaceable>; ... };
coresize <replaceable>size</replaceable>;
datasize <replaceable>size</replaceable>;
directory <replaceable>quoted_string</replaceable>;
dump-file <replaceable>quoted_string</replaceable>;
files <replaceable>size</replaceable>;
heartbeat-interval <replaceable>integer</replaceable>;
host-statistics <replaceable>boolean</replaceable>; // not implemented
host-statistics-max <replaceable>number</replaceable>; // not implemented
hostname ( <replaceable>quoted_string</replaceable> | none );
interface-interval <replaceable>integer</replaceable>;
keep-response-order { <replaceable>address_match_element</replaceable>; ... };
listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
match-mapped-addresses <replaceable>boolean</replaceable>;
memstatistics-file <replaceable>quoted_string</replaceable>;
pid-file ( <replaceable>quoted_string</replaceable> | none );
port <replaceable>integer</replaceable>;
querylog <replaceable>boolean</replaceable>;
recursing-file <replaceable>quoted_string</replaceable>;
reserved-sockets <replaceable>integer</replaceable>;
random-device <replaceable>quoted_string</replaceable>;
recursive-clients <replaceable>integer</replaceable>;
serial-query-rate <replaceable>integer</replaceable>;
server-id ( <replaceable>quoted_string</replaceable> | hostname | none );
stacksize <replaceable>size</replaceable>;
statistics-file <replaceable>quoted_string</replaceable>;
statistics-interval <replaceable>integer</replaceable>; // not yet implemented
tcp-clients <replaceable>integer</replaceable>;
tcp-listen-queue <replaceable>integer</replaceable>;
tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;
tkey-domain <replaceable>quoted_string</replaceable>;
transfer-message-size <replaceable>integer</replaceable>;
transfers-per-ns <replaceable>integer</replaceable>;
transfers-in <replaceable>integer</replaceable>;
transfers-out <replaceable>integer</replaceable>;
version ( <replaceable>quoted_string</replaceable> | none );
allow-recursion { <replaceable>address_match_element</replaceable>; ... };
allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
sortlist { <replaceable>address_match_element</replaceable>; ... };
topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
auth-nxdomain <replaceable>boolean</replaceable>; // default changed
minimal-responses <replaceable>boolean</replaceable>;
recursion <replaceable>boolean</replaceable>;
rrset-order {
<optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
<optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
};
provide-ixfr <replaceable>boolean</replaceable>;
request-ixfr <replaceable>boolean</replaceable>;
rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
additional-from-auth <replaceable>boolean</replaceable>;
additional-from-cache <replaceable>boolean</replaceable>;
query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
use-queryport-pool <replaceable>boolean</replaceable>;
queryport-pool-ports <replaceable>integer</replaceable>;
queryport-pool-updateinterval <replaceable>integer</replaceable>;
cleaning-interval <replaceable>integer</replaceable>;
resolver-query-timeout <replaceable>integer</replaceable>;
min-roots <replaceable>integer</replaceable>; // not implemented
lame-ttl <replaceable>integer</replaceable>;
max-ncache-ttl <replaceable>integer</replaceable>;
max-cache-ttl <replaceable>integer</replaceable>;
transfer-format ( many-answers | one-answer );
max-cache-size <replaceable>size</replaceable>;
max-acache-size <replaceable>size</replaceable>;
clients-per-query <replaceable>number</replaceable>;
max-clients-per-query <replaceable>number</replaceable>;
check-names ( master | slave | response )
( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity <replaceable>boolean</replaceable>;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file <replaceable>quoted_string</replaceable>; // test option
suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
preferred-glue <replaceable>string</replaceable>;
dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
<replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
<replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
};
edns-udp-size <replaceable>integer</replaceable>;
max-udp-size <replaceable>integer</replaceable>;
root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
dnssec-enable <replaceable>boolean</replaceable>;
dnssec-validation <replaceable>boolean</replaceable>;
dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
dnssec-accept-expired <replaceable>boolean</replaceable>;
dns64-server <replaceable>string</replaceable>;
dns64-contact <replaceable>string</replaceable>;
dns64 <replaceable>prefix</replaceable> {
clients { <replaceable>acl</replaceable>; };
exclude { <replaceable>acl</replaceable>; };
mapped { <replaceable>acl</replaceable>; };
break-dnssec <replaceable>boolean</replaceable>;
recursive-only <replaceable>boolean</replaceable>;
suffix <replaceable>ipv6_address</replaceable>;
};
empty-server <replaceable>string</replaceable>;
empty-contact <replaceable>string</replaceable>;
empty-zones-enable <replaceable>boolean</replaceable>;
disable-empty-zone <replaceable>string</replaceable>;
dialup <replaceable>dialuptype</replaceable>;
ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
allow-query { <replaceable>address_match_element</replaceable>; ... };
allow-query-on { <replaceable>address_match_element</replaceable>; ... };
allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
allow-transfer { <replaceable>address_match_element</replaceable>; ... };
allow-update { <replaceable>address_match_element</replaceable>; ... };
allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
update-check-ksk <replaceable>boolean</replaceable>;
dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
masterfile-format ( text | raw | map );
notify <replaceable>notifytype</replaceable>;
notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-delay <replaceable>seconds</replaceable>;
notify-to-soa <replaceable>boolean</replaceable>;
also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
<optional> port <replaceable>integer</replaceable> </optional>; ...
<optional> key <replaceable>keyname</replaceable> </optional> ... };
allow-notify { <replaceable>address_match_element</replaceable>; ... };
forward ( first | only );
forwarders <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
};
max-journal-size <replaceable>size_no_default</replaceable>;
max-transfer-time-in <replaceable>integer</replaceable>;
max-transfer-time-out <replaceable>integer</replaceable>;
max-transfer-idle-in <replaceable>integer</replaceable>;
max-transfer-idle-out <replaceable>integer</replaceable>;
max-retry-time <replaceable>integer</replaceable>;
min-retry-time <replaceable>integer</replaceable>;
max-refresh-time <replaceable>integer</replaceable>;
min-refresh-time <replaceable>integer</replaceable>;
multi-master <replaceable>boolean</replaceable>;
sig-validity-interval <replaceable>integer</replaceable>;
sig-re-signing-interval <replaceable>integer</replaceable>;
sig-signing-nodes <replaceable>integer</replaceable>;
sig-signing-signatures <replaceable>integer</replaceable>;
sig-signing-type <replaceable>integer</replaceable>;
transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
use-alt-transfer-source <replaceable>boolean</replaceable>;
zone-statistics <replaceable>boolean</replaceable>;
key-directory <replaceable>quoted_string</replaceable>;
managed-keys-directory <replaceable>quoted_string</replaceable>;
auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>;
try-tcp-refresh <replaceable>boolean</replaceable>;
zero-no-soa-ttl <replaceable>boolean</replaceable>;
zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
cookie-algorithm ( <replaceable>aes</replaceable> | <replaceable>sha1</replaceable> | <replaceable>sha256</replaceable> );
cookie-secret <replaceable>string</replaceable>;
require-server-cookie <replaceable>boolean</replaceable>;
send-cookie <replaceable>boolean</replaceable>;
nocookie-udp-size <replaceable>integer</replaceable>;
deny-answer-addresses {
<replaceable>address_match_list</replaceable>
} <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
deny-answer-aliases {
<replaceable>namelist</replaceable>
} <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
fake-iquery <replaceable>boolean</replaceable>; // obsolete
fetch-glue <replaceable>boolean</replaceable>; // obsolete
has-old-clients <replaceable>boolean</replaceable>; // obsolete
maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
multiple-cnames <replaceable>boolean</replaceable>; // obsolete
named-xfer <replaceable>quoted_string</replaceable>; // obsolete
serial-queries <replaceable>integer</replaceable>; // obsolete
treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
use-id-pool <replaceable>boolean</replaceable>; // obsolete
use-ixfr <replaceable>boolean</replaceable>; // obsolete
};
</literallayout>
</refsection>
<refsection><info><title>VIEW</title></info>
<literallayout class="normal">
view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
match-clients { <replaceable>address_match_element</replaceable>; ... };
match-destinations { <replaceable>address_match_element</replaceable>; ... };
match-recursive-only <replaceable>boolean</replaceable>;
key <replaceable>string</replaceable> {
algorithm <replaceable>string</replaceable>;
secret <replaceable>string</replaceable>;
};
zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
...
};
server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
...
};
trusted-keys {
<replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;
<optional>...</optional>
};
allow-recursion { <replaceable>address_match_element</replaceable>; ... };
allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
sortlist { <replaceable>address_match_element</replaceable>; ... };
topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
auth-nxdomain <replaceable>boolean</replaceable>; // default changed
minimal-responses <replaceable>boolean</replaceable>;
recursion <replaceable>boolean</replaceable>;
rrset-order {
<optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
<optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
};
provide-ixfr <replaceable>boolean</replaceable>;
request-ixfr <replaceable>boolean</replaceable>;
rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
additional-from-auth <replaceable>boolean</replaceable>;
additional-from-cache <replaceable>boolean</replaceable>;
query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
use-queryport-pool <replaceable>boolean</replaceable>;
queryport-pool-ports <replaceable>integer</replaceable>;
queryport-pool-updateinterval <replaceable>integer</replaceable>;
cleaning-interval <replaceable>integer</replaceable>;
resolver-query-timeout <replaceable>integer</replaceable>;
min-roots <replaceable>integer</replaceable>; // not implemented
lame-ttl <replaceable>integer</replaceable>;
max-ncache-ttl <replaceable>integer</replaceable>;
max-cache-ttl <replaceable>integer</replaceable>;
transfer-format ( many-answers | one-answer );
max-cache-size <replaceable>size</replaceable>;
max-acache-size <replaceable>size</replaceable>;
clients-per-query <replaceable>number</replaceable>;
max-clients-per-query <replaceable>number</replaceable>;
check-names ( master | slave | response )
( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity <replaceable>boolean</replaceable>;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
cache-file <replaceable>quoted_string</replaceable>; // test option
suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
preferred-glue <replaceable>string</replaceable>;
dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
<replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
<replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
};
edns-udp-size <replaceable>integer</replaceable>;
max-udp-size <replaceable>integer</replaceable>;
root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
dnssec-enable <replaceable>boolean</replaceable>;
dnssec-validation <replaceable>boolean</replaceable>;
dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
dnssec-accept-expired <replaceable>boolean</replaceable>;
dns64-server <replaceable>string</replaceable>;
dns64-contact <replaceable>string</replaceable>;
dns64 <replaceable>prefix</replaceable> {
clients { <replaceable>acl</replaceable>; };
exclude { <replaceable>acl</replaceable>; };
mapped { <replaceable>acl</replaceable>; };
break-dnssec <replaceable>boolean</replaceable>;
recursive-only <replaceable>boolean</replaceable>;
suffix <replaceable>ipv6_address</replaceable>;
};
empty-server <replaceable>string</replaceable>;
empty-contact <replaceable>string</replaceable>;
empty-zones-enable <replaceable>boolean</replaceable>;
disable-empty-zone <replaceable>string</replaceable>;
dialup <replaceable>dialuptype</replaceable>;
ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
allow-query { <replaceable>address_match_element</replaceable>; ... };
allow-query-on { <replaceable>address_match_element</replaceable>; ... };
allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
allow-transfer { <replaceable>address_match_element</replaceable>; ... };
allow-update { <replaceable>address_match_element</replaceable>; ... };
allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
update-check-ksk <replaceable>boolean</replaceable>;
dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
masterfile-format ( text | raw | map );
notify <replaceable>notifytype</replaceable>;
notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-delay <replaceable>seconds</replaceable>;
notify-to-soa <replaceable>boolean</replaceable>;
also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
<optional> port <replaceable>integer</replaceable> </optional>; ...
<optional> key <replaceable>keyname</replaceable> </optional> ... };
allow-notify { <replaceable>address_match_element</replaceable>; ... };
forward ( first | only );
forwarders <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
};
max-journal-size <replaceable>size_no_default</replaceable>;
max-transfer-time-in <replaceable>integer</replaceable>;
max-transfer-time-out <replaceable>integer</replaceable>;
max-transfer-idle-in <replaceable>integer</replaceable>;
max-transfer-idle-out <replaceable>integer</replaceable>;
max-retry-time <replaceable>integer</replaceable>;
min-retry-time <replaceable>integer</replaceable>;
max-refresh-time <replaceable>integer</replaceable>;
min-refresh-time <replaceable>integer</replaceable>;
multi-master <replaceable>boolean</replaceable>;
sig-validity-interval <replaceable>integer</replaceable>;
transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
use-alt-transfer-source <replaceable>boolean</replaceable>;
zone-statistics <replaceable>boolean</replaceable>;
try-tcp-refresh <replaceable>boolean</replaceable>;
key-directory <replaceable>quoted_string</replaceable>;
zero-no-soa-ttl <replaceable>boolean</replaceable>;
zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
require-server-cookie <replaceable>boolean</replaceable>;
send-cookie <replaceable>boolean</replaceable>;
nocookie-udp-size <replaceable>integer</replaceable>;
allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
fetch-glue <replaceable>boolean</replaceable>; // obsolete
maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
};
</literallayout>
</refsection>
<refsection><info><title>ZONE</title></info>
<literallayout class="normal">
zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
type ( master | slave | stub | hint | redirect |
forward | delegation-only );
file <replaceable>quoted_string</replaceable>;
masters <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>masters</replaceable> |
<replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
<replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
};
database <replaceable>string</replaceable>;
delegation-only <replaceable>boolean</replaceable>;
check-names ( fail | warn | ignore );
check-mx ( fail | warn | ignore );
check-integrity <replaceable>boolean</replaceable>;
check-mx-cname ( fail | warn | ignore );
check-srv-cname ( fail | warn | ignore );
dialup <replaceable>dialuptype</replaceable>;
ixfr-from-differences <replaceable>boolean</replaceable>;
journal <replaceable>quoted_string</replaceable>;
zero-no-soa-ttl <replaceable>boolean</replaceable>;
dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
allow-query { <replaceable>address_match_element</replaceable>; ... };
allow-query-on { <replaceable>address_match_element</replaceable>; ... };
allow-transfer { <replaceable>address_match_element</replaceable>; ... };
allow-update { <replaceable>address_match_element</replaceable>; ... };
allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
update-policy <replaceable>local</replaceable> | <replaceable> {
( grant | deny ) <replaceable>string</replaceable>
( name | subdomain | wildcard | self | selfsub | selfwild |
krb5-self | ms-self | krb5-subdomain | ms-subdomain |
tcp-self | zonesub | 6to4-self ) <replaceable>string</replaceable>
<replaceable>rrtypelist</replaceable>;
<optional>...</optional>
}</replaceable>;
update-check-ksk <replaceable>boolean</replaceable>;
dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
masterfile-format ( text | raw | map );
notify <replaceable>notifytype</replaceable>;
notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
notify-delay <replaceable>seconds</replaceable>;
notify-to-soa <replaceable>boolean</replaceable>;
also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
<optional> port <replaceable>integer</replaceable> </optional>; ...
<optional> key <replaceable>keyname</replaceable> </optional> ... };
allow-notify { <replaceable>address_match_element</replaceable>; ... };
forward ( first | only );
forwarders <optional> port <replaceable>integer</replaceable> </optional> {
( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
};
max-journal-size <replaceable>size_no_default</replaceable>;
max-transfer-time-in <replaceable>integer</replaceable>;
max-transfer-time-out <replaceable>integer</replaceable>;
max-transfer-idle-in <replaceable>integer</replaceable>;
max-transfer-idle-out <replaceable>integer</replaceable>;
max-retry-time <replaceable>integer</replaceable>;
min-retry-time <replaceable>integer</replaceable>;
max-refresh-time <replaceable>integer</replaceable>;
min-refresh-time <replaceable>integer</replaceable>;
multi-master <replaceable>boolean</replaceable>;
request-ixfr <replaceable>boolean</replaceable>;
sig-validity-interval <replaceable>integer</replaceable>;
transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
use-alt-transfer-source <replaceable>boolean</replaceable>;
zone-statistics <replaceable>boolean</replaceable>;
try-tcp-refresh <replaceable>boolean</replaceable>;
key-directory <replaceable>quoted_string</replaceable>;
nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
};
</literallayout>
</refsection>
<refsection><info><title>FILES</title></info>
<para><filename>/etc/named.conf</filename>
</para>
</refsection>
<refsection><info><title>SEE ALSO</title></info>
<para><citerefentry>
<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citerefentry>
<refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>.
</para>
</refsection>
</refentry>