eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen [<!ENTITY mdash "&#8212;">]>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen<refentry>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refentryinfo>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <date>January 08, 2014</date>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refentryinfo>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refmeta>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refentrytitle><filename>named.conf</filename></refentrytitle>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <manvolnum>5</manvolnum>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refmiscinfo>BIND9</refmiscinfo>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refmeta>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refnamediv>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refname><filename>named.conf</filename></refname>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refpurpose>configuration file for named</refpurpose>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refnamediv>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <docinfo>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <copyright>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2004</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2005</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2006</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2007</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2008</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2009</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2010</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2011</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2012</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2013</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <year>2014</year>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <holder>Internet Systems Consortium, Inc. ("ISC")</holder>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </copyright>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </docinfo>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsynopsisdiv>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <cmdsynopsis>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <command>named.conf</command>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </cmdsynopsis>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsynopsisdiv>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>DESCRIPTION</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <para><filename>named.conf</filename> is the configuration file

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen for

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <command>named</command>. Statements are enclosed

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen in braces and terminated with a semi-colon. Clauses in

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen the statements are also semi-colon terminated. The usual

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen comment styles are supported:

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen C style: /* */

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen C++ style: // to end of line

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen Unix style: # to end of line

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </para>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>ACL</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenacl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>KEY</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenkey <replaceable>domain_name</replaceable> {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen algorithm <replaceable>string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen secret <replaceable>string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>MASTERS</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenmasters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>SERVER</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenserver ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen bogus <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen edns <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen edns-udp-size <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-udp-size <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tcp-only <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen provide-ixfr <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen request-ixfr <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen keys <replaceable>server_key</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfers <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfer-format ( many-answers | one-answer );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfer-source ( <replaceable>ipv4_address</replaceable> | * )

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen support-ixfr <replaceable>boolean</replaceable>; // obsolete

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>TRUSTED-KEYS</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyentrusted-keys {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>MANAGED-KEYS</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenmanaged-keys {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>CONTROLS</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyencontrols {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> port ( <replaceable>integer</replaceable> | * ) </optional>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen allow { <replaceable>address_match_element</replaceable>; ... }

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> keys { <replaceable>string</replaceable>; ... } </optional>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen unix <replaceable>unsupported</replaceable>; // not implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>LOGGING</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenlogging {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen channel <replaceable>string</replaceable> {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen file <replaceable>log_file</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen syslog <replaceable>optional_facility</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen null;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen stderr;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen severity <replaceable>log_severity</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen print-time <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen print-severity <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen print-category <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>LWRES</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenlwres {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen listen-on <optional> port <replaceable>integer</replaceable> </optional> {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen search { <replaceable>string</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen ndots <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen lwres-tasks <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen lwres-clients <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen};

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen</literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen </refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <refsect1>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <title>OPTIONS</title>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <literallayout>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyenoptions {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen blackhole { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen coresize <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen datasize <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen directory <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen dump-file <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen files <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen heartbeat-interval <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen host-statistics <replaceable>boolean</replaceable>; // not implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen host-statistics-max <replaceable>number</replaceable>; // not implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen hostname ( <replaceable>quoted_string</replaceable> | none );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen interface-interval <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen match-mapped-addresses <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen memstatistics-file <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen pid-file ( <replaceable>quoted_string</replaceable> | none );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen port <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen querylog <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen recursing-file <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen reserved-sockets <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen random-device <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen recursive-clients <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen serial-query-rate <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen server-id ( <replaceable>quoted_string</replaceable> | hostname | none );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen stacksize <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen statistics-file <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen statistics-interval <replaceable>integer</replaceable>; // not yet implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tcp-clients <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tcp-listen-queue <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tkey-gssapi-credential <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen tkey-domain <replaceable>quoted_string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfers-per-ns <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfers-in <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfers-out <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen use-ixfr <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen version ( <replaceable>quoted_string</replaceable> | none );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen allow-recursion { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen sortlist { <replaceable>address_match_element</replaceable>; ... };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen auth-nxdomain <replaceable>boolean</replaceable>; // default changed

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen minimal-responses <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen recursion <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen rrset-order {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen };

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen provide-ixfr <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen request-ixfr <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen additional-from-auth <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen additional-from-cache <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen use-queryport-pool <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen queryport-pool-ports <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen queryport-pool-updateinterval <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen cleaning-interval <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen resolver-query-timeout <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen min-roots <replaceable>integer</replaceable>; // not implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen lame-ttl <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-ncache-ttl <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-cache-ttl <replaceable>integer</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen transfer-format ( many-answers | one-answer );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-cache-size <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-acache-size <replaceable>size</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen clients-per-query <replaceable>number</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen max-clients-per-query <replaceable>number</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen check-names ( master | slave | response )

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen ( fail | warn | ignore );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen check-mx ( fail | warn | ignore );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen check-integrity <replaceable>boolean</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen check-mx-cname ( fail | warn | ignore );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen check-srv-cname ( fail | warn | ignore );

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen cache-file <replaceable>quoted_string</replaceable>; // test option

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen preferred-glue <replaceable>string</replaceable>;

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

eb1a34638eba7c5add1421327f3eb225a8ea7518Truong Nguyen <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...

};

edns-udp-size <replaceable>integer</replaceable>;

max-udp-size <replaceable>integer</replaceable>;

root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;

disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };

disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };

dnssec-enable <replaceable>boolean</replaceable>;

dnssec-validation <replaceable>boolean</replaceable>;

dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );

dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;

dnssec-accept-expired <replaceable>boolean</replaceable>;

dns64-server <replaceable>string</replaceable>;

dns64-contact <replaceable>string</replaceable>;

dns64 <replaceable>prefix</replaceable> {

clients { <replacable>acl</replacable>; };

exclude { <replacable>acl</replacable>; };

mapped { <replacable>acl</replacable>; };

break-dnssec <replaceable>boolean</replaceable>;

recursive-only <replaceable>boolean</replaceable>;

suffix <replaceable>ipv6_address</replaceable>;

};

empty-server <replaceable>string</replaceable>;

empty-contact <replaceable>string</replaceable>;

empty-zones-enable <replaceable>boolean</replaceable>;

disable-empty-zone <replaceable>string</replaceable>;

dialup <replaceable>dialuptype</replaceable>;

ixfr-from-differences <replaceable>ixfrdiff</replaceable>;

allow-query { <replaceable>address_match_element</replaceable>; ... };

allow-query-on { <replaceable>address_match_element</replaceable>; ... };

allow-query-cache { <replaceable>address_match_element</replaceable>; ... };

allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };

allow-transfer { <replaceable>address_match_element</replaceable>; ... };

allow-update { <replaceable>address_match_element</replaceable>; ... };

allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };

update-check-ksk <replaceable>boolean</replaceable>;

dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;

masterfile-format ( text | raw | map );

notify <replaceable>notifytype</replaceable>;

notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-delay <replaceable>seconds</replaceable>;

notify-to-soa <replaceable>boolean</replaceable>;

also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )

<optional> port <replaceable>integer</replaceable> </optional>; ...

<optional> key <replaceable>keyname</replaceable> </optional> ... };

allow-notify { <replaceable>address_match_element</replaceable>; ... };

forward ( first | only );

forwarders <optional> port <replaceable>integer</replaceable> </optional> {

( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...

};

max-journal-size <replaceable>size_no_default</replaceable>;

max-transfer-time-in <replaceable>integer</replaceable>;

max-transfer-time-out <replaceable>integer</replaceable>;

max-transfer-idle-in <replaceable>integer</replaceable>;

max-transfer-idle-out <replaceable>integer</replaceable>;

max-retry-time <replaceable>integer</replaceable>;

min-retry-time <replaceable>integer</replaceable>;

max-refresh-time <replaceable>integer</replaceable>;

min-refresh-time <replaceable>integer</replaceable>;

multi-master <replaceable>boolean</replaceable>;

sig-validity-interval <replaceable>integer</replaceable>;

sig-re-signing-interval <replaceable>integer</replaceable>;

sig-signing-nodes <replaceable>integer</replaceable>;

sig-signing-signatures <replaceable>integer</replaceable>;

sig-signing-type <replaceable>integer</replaceable>;

transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

use-alt-transfer-source <replaceable>boolean</replaceable>;

zone-statistics <replaceable>boolean</replaceable>;

key-directory <replaceable>quoted_string</replaceable>;

managed-keys-directory <replaceable>quoted_string</replaceable>;

auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>;

try-tcp-refresh <replaceable>boolean</replaceable>;

zero-no-soa-ttl <replaceable>boolean</replaceable>;

zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;

dnssec-secure-to-insecure <replaceable>boolean</replaceable>;

deny-answer-addresses {

<replaceable>address_match_list</replaceable>

} <optional> except-from { <replaceable>namelist</replaceable> } </optional>;

deny-answer-aliases {

<replaceable>namelist</replaceable>

} <optional> except-from { <replaceable>namelist</replaceable> } </optional>;

nsec3-test-zone <replaceable>boolean</replaceable>; // testing only

allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete

deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete

fake-iquery <replaceable>boolean</replaceable>; // obsolete

fetch-glue <replaceable>boolean</replaceable>; // obsolete

has-old-clients <replaceable>boolean</replaceable>; // obsolete

maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete

max-ixfr-log-size <replaceable>size</replaceable>; // obsolete

multiple-cnames <replaceable>boolean</replaceable>; // obsolete

named-xfer <replaceable>quoted_string</replaceable>; // obsolete

serial-queries <replaceable>integer</replaceable>; // obsolete

treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete

use-id-pool <replaceable>boolean</replaceable>; // obsolete

};

</literallayout>

</refsect1>

<refsect1>

<title>VIEW</title>

<literallayout>

view <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {

match-clients { <replaceable>address_match_element</replaceable>; ... };

match-destinations { <replaceable>address_match_element</replaceable>; ... };

match-recursive-only <replaceable>boolean</replaceable>;

key <replaceable>string</replaceable> {

algorithm <replaceable>string</replaceable>;

secret <replaceable>string</replaceable>;

};

zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {

...

};

server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {

...

};

trusted-keys {

<replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;

<optional>...</optional>

};

allow-recursion { <replaceable>address_match_element</replaceable>; ... };

allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };

sortlist { <replaceable>address_match_element</replaceable>; ... };

topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented

auth-nxdomain <replaceable>boolean</replaceable>; // default changed

minimal-responses <replaceable>boolean</replaceable>;

recursion <replaceable>boolean</replaceable>;

rrset-order {

<optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>

<optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...

};

provide-ixfr <replaceable>boolean</replaceable>;

request-ixfr <replaceable>boolean</replaceable>;

rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented

additional-from-auth <replaceable>boolean</replaceable>;

additional-from-cache <replaceable>boolean</replaceable>;

query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

use-queryport-pool <replaceable>boolean</replaceable>;

queryport-pool-ports <replaceable>integer</replaceable>;

queryport-pool-updateinterval <replaceable>integer</replaceable>;

cleaning-interval <replaceable>integer</replaceable>;

resolver-query-timeout <replaceable>integer</replaceable>;

min-roots <replaceable>integer</replaceable>; // not implemented

lame-ttl <replaceable>integer</replaceable>;

max-ncache-ttl <replaceable>integer</replaceable>;

max-cache-ttl <replaceable>integer</replaceable>;

transfer-format ( many-answers | one-answer );

max-cache-size <replaceable>size</replaceable>;

max-acache-size <replaceable>size</replaceable>;

clients-per-query <replaceable>number</replaceable>;

max-clients-per-query <replaceable>number</replaceable>;

check-names ( master | slave | response )

( fail | warn | ignore );

check-mx ( fail | warn | ignore );

check-integrity <replaceable>boolean</replaceable>;

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

cache-file <replaceable>quoted_string</replaceable>; // test option

suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented

preferred-glue <replaceable>string</replaceable>;

dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {

( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

<replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

<replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...

};

edns-udp-size <replaceable>integer</replaceable>;

max-udp-size <replaceable>integer</replaceable>;

root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;

disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };

disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };

dnssec-enable <replaceable>boolean</replaceable>;

dnssec-validation <replaceable>boolean</replaceable>;

dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );

dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;

dnssec-accept-expired <replaceable>boolean</replaceable>;

dns64-server <replaceable>string</replaceable>;

dns64-contact <replaceable>string</replaceable>;

dns64 <replaceable>prefix</replaceable> {

clients { <replacable>acl</replacable>; };

exclude { <replacable>acl</replacable>; };

mapped { <replacable>acl</replacable>; };

break-dnssec <replaceable>boolean</replaceable>;

recursive-only <replaceable>boolean</replaceable>;

suffix <replaceable>ipv6_address</replaceable>;

};

empty-server <replaceable>string</replaceable>;

empty-contact <replaceable>string</replaceable>;

empty-zones-enable <replaceable>boolean</replaceable>;

disable-empty-zone <replaceable>string</replaceable>;

dialup <replaceable>dialuptype</replaceable>;

ixfr-from-differences <replaceable>ixfrdiff</replaceable>;

allow-query { <replaceable>address_match_element</replaceable>; ... };

allow-query-on { <replaceable>address_match_element</replaceable>; ... };

allow-query-cache { <replaceable>address_match_element</replaceable>; ... };

allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };

allow-transfer { <replaceable>address_match_element</replaceable>; ... };

allow-update { <replaceable>address_match_element</replaceable>; ... };

allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };

update-check-ksk <replaceable>boolean</replaceable>;

dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;

masterfile-format ( text | raw | map );

notify <replaceable>notifytype</replaceable>;

notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-delay <replaceable>seconds</replaceable>;

notify-to-soa <replaceable>boolean</replaceable>;

also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )

<optional> port <replaceable>integer</replaceable> </optional>; ...

<optional> key <replaceable>keyname</replaceable> </optional> ... };

allow-notify { <replaceable>address_match_element</replaceable>; ... };

forward ( first | only );

forwarders <optional> port <replaceable>integer</replaceable> </optional> {

( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...

};

max-journal-size <replaceable>size_no_default</replaceable>;

max-transfer-time-in <replaceable>integer</replaceable>;

max-transfer-time-out <replaceable>integer</replaceable>;

max-transfer-idle-in <replaceable>integer</replaceable>;

max-transfer-idle-out <replaceable>integer</replaceable>;

max-retry-time <replaceable>integer</replaceable>;

min-retry-time <replaceable>integer</replaceable>;

max-refresh-time <replaceable>integer</replaceable>;

min-refresh-time <replaceable>integer</replaceable>;

multi-master <replaceable>boolean</replaceable>;

sig-validity-interval <replaceable>integer</replaceable>;

transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

use-alt-transfer-source <replaceable>boolean</replaceable>;

zone-statistics <replaceable>boolean</replaceable>;

try-tcp-refresh <replaceable>boolean</replaceable>;

key-directory <replaceable>quoted_string</replaceable>;

zero-no-soa-ttl <replaceable>boolean</replaceable>;

zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;

dnssec-secure-to-insecure <replaceable>boolean</replaceable>;

allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete

fetch-glue <replaceable>boolean</replaceable>; // obsolete

maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete

max-ixfr-log-size <replaceable>size</replaceable>; // obsolete

};

</literallayout>

</refsect1>

<refsect1>

<title>ZONE</title>

<literallayout>

zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {

type ( master | slave | stub | hint | redirect |

forward | delegation-only );

file <replaceable>quoted_string</replaceable>;

masters <optional> port <replaceable>integer</replaceable> </optional> {

( <replaceable>masters</replaceable> |

<replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |

<replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...

};

database <replaceable>string</replaceable>;

delegation-only <replaceable>boolean</replaceable>;

check-names ( fail | warn | ignore );

check-mx ( fail | warn | ignore );

check-integrity <replaceable>boolean</replaceable>;

check-mx-cname ( fail | warn | ignore );

check-srv-cname ( fail | warn | ignore );

dialup <replaceable>dialuptype</replaceable>;

ixfr-from-differences <replaceable>boolean</replaceable>;

journal <replaceable>quoted_string</replaceable>;

zero-no-soa-ttl <replaceable>boolean</replaceable>;

dnssec-secure-to-insecure <replaceable>boolean</replaceable>;

allow-query { <replaceable>address_match_element</replaceable>; ... };

allow-query-on { <replaceable>address_match_element</replaceable>; ... };

allow-transfer { <replaceable>address_match_element</replaceable>; ... };

allow-update { <replaceable>address_match_element</replaceable>; ... };

allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };

update-policy <replaceable>local</replaceable> | <replaceable> {

( grant | deny ) <replaceable>string</replaceable>

( name | subdomain | wildcard | self | selfsub | selfwild |

krb5-self | ms-self | krb5-subdomain | ms-subdomain |

tcp-self | zonesub | 6to4-self ) <replaceable>string</replaceable>

<replaceable>rrtypelist</replaceable>;

<optional>...</optional>

}</replaceable>;

update-check-ksk <replaceable>boolean</replaceable>;

dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;

masterfile-format ( text | raw | map );

notify <replaceable>notifytype</replaceable>;

notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

notify-delay <replaceable>seconds</replaceable>;

notify-to-soa <replaceable>boolean</replaceable>;

also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )

<optional> port <replaceable>integer</replaceable> </optional>; ...

<optional> key <replaceable>keyname</replaceable> </optional> ... };

allow-notify { <replaceable>address_match_element</replaceable>; ... };

forward ( first | only );

forwarders <optional> port <replaceable>integer</replaceable> </optional> {

( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...

};

max-journal-size <replaceable>size_no_default</replaceable>;

max-transfer-time-in <replaceable>integer</replaceable>;

max-transfer-time-out <replaceable>integer</replaceable>;

max-transfer-idle-in <replaceable>integer</replaceable>;

max-transfer-idle-out <replaceable>integer</replaceable>;

max-retry-time <replaceable>integer</replaceable>;

min-retry-time <replaceable>integer</replaceable>;

max-refresh-time <replaceable>integer</replaceable>;

min-refresh-time <replaceable>integer</replaceable>;

multi-master <replaceable>boolean</replaceable>;

request-ixfr <replaceable>boolean</replaceable>;

sig-validity-interval <replaceable>integer</replaceable>;

transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )

<optional> port ( <replaceable>integer</replaceable> | * ) </optional>;

use-alt-transfer-source <replaceable>boolean</replaceable>;

zone-statistics <replaceable>boolean</replaceable>;

try-tcp-refresh <replaceable>boolean</replaceable>;

key-directory <replaceable>quoted_string</replaceable>;

nsec3-test-zone <replaceable>boolean</replaceable>; // testing only

ixfr-base <replaceable>quoted_string</replaceable>; // obsolete

ixfr-tmp-file <replaceable>quoted_string</replaceable>; // obsolete

maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete

max-ixfr-log-size <replaceable>size</replaceable>; // obsolete

pubkey <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>; // obsolete

};

</literallayout>

</refsect1>

<refsect1>

<title>FILES</title>

<para><filename>/etc/named.conf</filename>

</para>

</refsect1>

<refsect1>

<title>SEE ALSO</title>

<para><citerefentry>

<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>named-checkconf</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citerefentry>

<refentrytitle>rndc</refentrytitle><manvolnum>8</manvolnum>

</citerefentry>,

<citetitle>BIND 9 Administrator Reference Manual</citetitle>.

</para>

</refsect1>

</refentry><!--