named.conf.docbook revision ecc06cbc32c5a2b91a17e65c1820c9c66313d35c
39f68d7b64dce25e19f7132f6c46b3beabeed492Tinderbox User - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
689023771c563d8660e45d439a207e06e96de28fMark Andrews - purpose with or without fee is hereby granted, provided that the above
689023771c563d8660e45d439a207e06e96de28fMark Andrews - copyright notice and this permission notice appear in all copies.
689023771c563d8660e45d439a207e06e96de28fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
689023771c563d8660e45d439a207e06e96de28fMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
689023771c563d8660e45d439a207e06e96de28fMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
689023771c563d8660e45d439a207e06e96de28fMark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
689023771c563d8660e45d439a207e06e96de28fMark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
689023771c563d8660e45d439a207e06e96de28fMark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
689023771c563d8660e45d439a207e06e96de28fMark Andrews - PERFORMANCE OF THIS SOFTWARE.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<!-- Converted by db4-upgrade version 1.0 -->
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
689023771c563d8660e45d439a207e06e96de28fMark Andrews <refentryinfo>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
689023771c563d8660e45d439a207e06e96de28fMark Andrews </refentryinfo>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <refentrytitle><filename>named.conf</filename></refentrytitle>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <refnamediv>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <refname><filename>named.conf</filename></refname>
2637d30fbd235fe98145f4312b10cc41a13bf7dcJeremy C. Reed <refpurpose>configuration file for <command>named</command></refpurpose>
689023771c563d8660e45d439a207e06e96de28fMark Andrews </refnamediv>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </copyright>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <refsynopsisdiv>
689023771c563d8660e45d439a207e06e96de28fMark Andrews </cmdsynopsis>
689023771c563d8660e45d439a207e06e96de28fMark Andrews </refsynopsisdiv>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>DESCRIPTION</title></info>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <para><filename>named.conf</filename> is the configuration file
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <command>named</command>. Statements are enclosed
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein in braces and terminated with a semi-colon. Clauses in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the statements are also semi-colon terminated. The usual
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein comment styles are supported:
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein C style: /* */
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein C++ style: // to end of line
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Unix style: # to end of line
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrewsacl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrewsmasters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrewsserver ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews edns-udp-size <replaceable>integer</replaceable>;
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews max-udp-size <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews provide-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews request-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-format ( many-answers | one-answer );
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews support-ixfr <replaceable>boolean</replaceable>; // obsolete
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>TRUSTED-KEYS</title></info>
689023771c563d8660e45d439a207e06e96de28fMark Andrewstrusted-keys {
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>MANAGED-KEYS</title></info>
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Huntmanaged-keys {
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrews inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow { <replaceable>address_match_element</replaceable>; ... }
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews unix <replaceable>unsupported</replaceable>; // not implemented
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrews syslog <replaceable>optional_facility</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews severity <replaceable>log_severity</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews print-severity <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews print-category <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrews listen-on <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews search { <replaceable>string</replaceable>; ... };
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrews avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews blackhole { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews directory <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews dump-file <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews heartbeat-interval <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews host-statistics <replaceable>boolean</replaceable>; // not implemented
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews host-statistics-max <replaceable>number</replaceable>; // not implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews hostname ( <replaceable>quoted_string</replaceable> | none );
689023771c563d8660e45d439a207e06e96de28fMark Andrews interface-interval <replaceable>integer</replaceable>;
761d135ed686601f36fe3d0d4aaa6bf41287bb0fEvan Hunt keep-response-order { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews match-mapped-addresses <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews memstatistics-file <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews pid-file ( <replaceable>quoted_string</replaceable> | none );
689023771c563d8660e45d439a207e06e96de28fMark Andrews recursing-file <replaceable>quoted_string</replaceable>;
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews reserved-sockets <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews random-device <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews recursive-clients <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews serial-query-rate <replaceable>integer</replaceable>;
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews server-id ( <replaceable>quoted_string</replaceable> | hostname | none );
689023771c563d8660e45d439a207e06e96de28fMark Andrews statistics-file <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews statistics-interval <replaceable>integer</replaceable>; // not yet implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews tcp-clients <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews tcp-listen-queue <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews tkey-domain <replaceable>quoted_string</replaceable>;
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman transfer-message-size <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfers-per-ns <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfers-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfers-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews version ( <replaceable>quoted_string</replaceable> | none );
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-recursion { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews sortlist { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews auth-nxdomain <replaceable>boolean</replaceable>; // default changed
689023771c563d8660e45d439a207e06e96de28fMark Andrews minimal-responses <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews rrset-order {
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews provide-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews request-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews additional-from-auth <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews additional-from-cache <replaceable>boolean</replaceable>;
ffcc1bdb3635ef9c6992b9c24d7c85ebab2c393bMark Andrews query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
ffcc1bdb3635ef9c6992b9c24d7c85ebab2c393bMark Andrews query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews use-queryport-pool <replaceable>boolean</replaceable>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews queryport-pool-ports <replaceable>integer</replaceable>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews queryport-pool-updateinterval <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews cleaning-interval <replaceable>integer</replaceable>;
000a8970f840a0c27c5cc404826853c4674362acMark Andrews resolver-query-timeout <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-roots <replaceable>integer</replaceable>; // not implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-ncache-ttl <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-cache-ttl <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-format ( many-answers | one-answer );
b239c8294a5653d21876d084e0c5b029f6b9fc5dMichael Graff max-cache-size <replaceable>size</replaceable>;
b239c8294a5653d21876d084e0c5b029f6b9fc5dMichael Graff max-acache-size <replaceable>size</replaceable>;
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews clients-per-query <replaceable>number</replaceable>;
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews max-clients-per-query <replaceable>number</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews check-names ( master | slave | response )
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( fail | warn | ignore );
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews check-mx ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-integrity <replaceable>boolean</replaceable>;
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-mx-cname ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-srv-cname ( fail | warn | ignore );
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews cache-file <replaceable>quoted_string</replaceable>; // test option
689023771c563d8660e45d439a207e06e96de28fMark Andrews suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews preferred-glue <replaceable>string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews edns-udp-size <replaceable>integer</replaceable>;
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews max-udp-size <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
058e44186b74531402c1f99088eb9dbe4926f8daMark Andrews disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews dnssec-enable <replaceable>boolean</replaceable>;
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews dnssec-validation <replaceable>boolean</replaceable>;
36a13a94c5636cbed464380e56f23fb9df363731Evan Hunt dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
689023771c563d8660e45d439a207e06e96de28fMark Andrews dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews dnssec-accept-expired <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews dns64-server <replaceable>string</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews dns64-contact <replaceable>string</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews break-dnssec <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews recursive-only <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews suffix <replaceable>ipv6_address</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-server <replaceable>string</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-contact <replaceable>string</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-zones-enable <replaceable>boolean</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews disable-empty-zone <replaceable>string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-query { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-query-on { <replaceable>address_match_element</replaceable>; ... };
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-transfer { <replaceable>address_match_element</replaceable>; ... };
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews allow-update { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews update-check-ksk <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt masterfile-format ( text | raw | map );
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews notify-delay <replaceable>seconds</replaceable>;
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews notify-to-soa <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> port <replaceable>integer</replaceable> </optional>; ...
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> key <replaceable>keyname</replaceable> </optional> ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-notify { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews forward ( first | only );
689023771c563d8660e45d439a207e06e96de28fMark Andrews forwarders <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-journal-size <replaceable>size_no_default</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews multi-master <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews sig-validity-interval <replaceable>integer</replaceable>;
3f42cf2f3e4dc7e740b4609ba7d7430292348f2bMark Andrews sig-re-signing-interval <replaceable>integer</replaceable>;
3f42cf2f3e4dc7e740b4609ba7d7430292348f2bMark Andrews sig-signing-nodes <replaceable>integer</replaceable>;
3f42cf2f3e4dc7e740b4609ba7d7430292348f2bMark Andrews sig-signing-signatures <replaceable>integer</replaceable>;
3f42cf2f3e4dc7e740b4609ba7d7430292348f2bMark Andrews sig-signing-type <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews use-alt-transfer-source <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews zone-statistics <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews key-directory <replaceable>quoted_string</replaceable>;
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews managed-keys-directory <replaceable>quoted_string</replaceable>;
2f0c7f1de7c759aed38d2fa227aad07ab0d8ed66Evan Hunt auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>;
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews try-tcp-refresh <replaceable>boolean</replaceable>;
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews zero-no-soa-ttl <replaceable>boolean</replaceable>;
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews cookie-algorithm ( <replaceable>aes</replaceable> | <replaceable>sha1</replaceable> | <replaceable>sha256</replaceable> );
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews cookie-secret <replaceable>string</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews require-server-cookie <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews send-cookie <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews nocookie-udp-size <replaceable>integer</replaceable>;
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt deny-answer-addresses {
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt deny-answer-aliases {
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews fake-iquery <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews fetch-glue <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews has-old-clients <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews multiple-cnames <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews named-xfer <replaceable>quoted_string</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews serial-queries <replaceable>integer</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews use-id-pool <replaceable>boolean</replaceable>; // obsolete
72ac929f2bfe186ab4fe2d9425685d6ef419f200Mark Andrews use-ixfr <replaceable>boolean</replaceable>; // obsolete
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrewsview <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews match-clients { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews match-destinations { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews match-recursive-only <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
689023771c563d8660e45d439a207e06e96de28fMark Andrews trusted-keys {
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-recursion { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews sortlist { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews auth-nxdomain <replaceable>boolean</replaceable>; // default changed
689023771c563d8660e45d439a207e06e96de28fMark Andrews minimal-responses <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews rrset-order {
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews provide-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews request-ixfr <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews additional-from-auth <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews additional-from-cache <replaceable>boolean</replaceable>;
ffcc1bdb3635ef9c6992b9c24d7c85ebab2c393bMark Andrews query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
ffcc1bdb3635ef9c6992b9c24d7c85ebab2c393bMark Andrews query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews use-queryport-pool <replaceable>boolean</replaceable>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews queryport-pool-ports <replaceable>integer</replaceable>;
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews queryport-pool-updateinterval <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews cleaning-interval <replaceable>integer</replaceable>;
000a8970f840a0c27c5cc404826853c4674362acMark Andrews resolver-query-timeout <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-roots <replaceable>integer</replaceable>; // not implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-ncache-ttl <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-cache-ttl <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-format ( many-answers | one-answer );
b239c8294a5653d21876d084e0c5b029f6b9fc5dMichael Graff max-cache-size <replaceable>size</replaceable>;
b239c8294a5653d21876d084e0c5b029f6b9fc5dMichael Graff max-acache-size <replaceable>size</replaceable>;
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews clients-per-query <replaceable>number</replaceable>;
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews max-clients-per-query <replaceable>number</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews check-names ( master | slave | response )
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( fail | warn | ignore );
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews check-mx ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-integrity <replaceable>boolean</replaceable>;
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-mx-cname ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-srv-cname ( fail | warn | ignore );
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews cache-file <replaceable>quoted_string</replaceable>; // test option
689023771c563d8660e45d439a207e06e96de28fMark Andrews suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
689023771c563d8660e45d439a207e06e96de28fMark Andrews preferred-glue <replaceable>string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews edns-udp-size <replaceable>integer</replaceable>;
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews max-udp-size <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
058e44186b74531402c1f99088eb9dbe4926f8daMark Andrews disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews dnssec-enable <replaceable>boolean</replaceable>;
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews dnssec-validation <replaceable>boolean</replaceable>;
36a13a94c5636cbed464380e56f23fb9df363731Evan Hunt dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
689023771c563d8660e45d439a207e06e96de28fMark Andrews dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews dnssec-accept-expired <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews dns64-server <replaceable>string</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews dns64-contact <replaceable>string</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews break-dnssec <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews recursive-only <replaceable>boolean</replaceable>;
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews suffix <replaceable>ipv6_address</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-server <replaceable>string</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-contact <replaceable>string</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews empty-zones-enable <replaceable>boolean</replaceable>;
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews disable-empty-zone <replaceable>string</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-query { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-query-on { <replaceable>address_match_element</replaceable>; ... };
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-transfer { <replaceable>address_match_element</replaceable>; ... };
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews allow-update { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews update-check-ksk <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt masterfile-format ( text | raw | map );
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews notify-delay <replaceable>seconds</replaceable>;
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews notify-to-soa <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> port <replaceable>integer</replaceable> </optional>; ...
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> key <replaceable>keyname</replaceable> </optional> ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-notify { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews forward ( first | only );
689023771c563d8660e45d439a207e06e96de28fMark Andrews forwarders <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-journal-size <replaceable>size_no_default</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews multi-master <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews sig-validity-interval <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews use-alt-transfer-source <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews zone-statistics <replaceable>boolean</replaceable>;
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews try-tcp-refresh <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews key-directory <replaceable>quoted_string</replaceable>;
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews zero-no-soa-ttl <replaceable>boolean</replaceable>;
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews require-server-cookie <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews send-cookie <replaceable>boolean</replaceable>;
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews nocookie-udp-size <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews fetch-glue <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
689023771c563d8660e45d439a207e06e96de28fMark Andrewszone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
0e507dbb816575e6220fe309e8ada68897ffcdbeMark Andrews type ( master | slave | stub | hint | redirect |
689023771c563d8660e45d439a207e06e96de28fMark Andrews forward | delegation-only );
689023771c563d8660e45d439a207e06e96de28fMark Andrews masters <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
689023771c563d8660e45d439a207e06e96de28fMark Andrews <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews delegation-only <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews check-names ( fail | warn | ignore );
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews check-mx ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-integrity <replaceable>boolean</replaceable>;
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-mx-cname ( fail | warn | ignore );
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews check-srv-cname ( fail | warn | ignore );
689023771c563d8660e45d439a207e06e96de28fMark Andrews ixfr-from-differences <replaceable>boolean</replaceable>;
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews journal <replaceable>quoted_string</replaceable>;
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews zero-no-soa-ttl <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-query { <replaceable>address_match_element</replaceable>; ... };
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews allow-query-on { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-transfer { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-update { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt update-policy <replaceable>local</replaceable> | <replaceable> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( grant | deny ) <replaceable>string</replaceable>
92f60809e854ccf5f115883c6347e370da048848Mark Andrews ( name | subdomain | wildcard | self | selfsub | selfwild |
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews krb5-self | ms-self | krb5-subdomain | ms-subdomain |
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt tcp-self | zonesub | 6to4-self ) <replaceable>string</replaceable>
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt }</replaceable>;
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews update-check-ksk <replaceable>boolean</replaceable>;
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt masterfile-format ( text | raw | map );
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews notify-delay <replaceable>seconds</replaceable>;
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews notify-to-soa <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> port <replaceable>integer</replaceable> </optional>; ...
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt <optional> key <replaceable>keyname</replaceable> </optional> ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews allow-notify { <replaceable>address_match_element</replaceable>; ... };
689023771c563d8660e45d439a207e06e96de28fMark Andrews forward ( first | only );
689023771c563d8660e45d439a207e06e96de28fMark Andrews forwarders <optional> port <replaceable>integer</replaceable> </optional> {
689023771c563d8660e45d439a207e06e96de28fMark Andrews ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-journal-size <replaceable>size_no_default</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-time-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-in <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-transfer-idle-out <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-retry-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews min-refresh-time <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews multi-master <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews sig-validity-interval <replaceable>integer</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
689023771c563d8660e45d439a207e06e96de28fMark Andrews <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews use-alt-transfer-source <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews zone-statistics <replaceable>boolean</replaceable>;
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews try-tcp-refresh <replaceable>boolean</replaceable>;
689023771c563d8660e45d439a207e06e96de28fMark Andrews key-directory <replaceable>quoted_string</replaceable>;
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
689023771c563d8660e45d439a207e06e96de28fMark Andrews ixfr-base <replaceable>quoted_string</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
689023771c563d8660e45d439a207e06e96de28fMark Andrews pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein</literallayout>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </citerefentry>,
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews <citerefentry>
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews <refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>
6043e41fcf5dc91aa8a981c966512d73bdec31c1Mark Andrews </citerefentry>,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <citerefentry>
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews <refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein </citerefentry>,
561a29af8c54a216e7d30b5b4f6e0d21661654ecMark Andrews <citetitle>BIND 9 Administrator Reference Manual</citetitle>.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>