named.conf.docbook revision ecc06cbc32c5a2b91a17e65c1820c9c66313d35c
d51e90740114c60620c0febffd4d3ce6e280a107ab - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
d51e90740114c60620c0febffd4d3ce6e280a107ab - Permission to use, copy, modify, and/or distribute this software for any
d51e90740114c60620c0febffd4d3ce6e280a107ab - purpose with or without fee is hereby granted, provided that the above
d51e90740114c60620c0febffd4d3ce6e280a107ab - copyright notice and this permission notice appear in all copies.
d51e90740114c60620c0febffd4d3ce6e280a107ab - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
d51e90740114c60620c0febffd4d3ce6e280a107ab - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d51e90740114c60620c0febffd4d3ce6e280a107ab - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
d51e90740114c60620c0febffd4d3ce6e280a107ab - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d51e90740114c60620c0febffd4d3ce6e280a107ab - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d51e90740114c60620c0febffd4d3ce6e280a107ab - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
d51e90740114c60620c0febffd4d3ce6e280a107ab - PERFORMANCE OF THIS SOFTWARE.
d51e90740114c60620c0febffd4d3ce6e280a107ab<!-- Converted by db4-upgrade version 1.0 -->
d51e90740114c60620c0febffd4d3ce6e280a107ab<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
d51e90740114c60620c0febffd4d3ce6e280a107ab <refentryinfo>
d51e90740114c60620c0febffd4d3ce6e280a107ab <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refentryinfo>
d51e90740114c60620c0febffd4d3ce6e280a107ab <refentrytitle><filename>named.conf</filename></refentrytitle>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refmeta>
d51e90740114c60620c0febffd4d3ce6e280a107ab <refnamediv>
d51e90740114c60620c0febffd4d3ce6e280a107ab <refpurpose>configuration file for <command>named</command></refpurpose>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refnamediv>
d51e90740114c60620c0febffd4d3ce6e280a107ab <copyright>
d51e90740114c60620c0febffd4d3ce6e280a107ab <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
d51e90740114c60620c0febffd4d3ce6e280a107ab </copyright>
d51e90740114c60620c0febffd4d3ce6e280a107ab </docinfo>
d51e90740114c60620c0febffd4d3ce6e280a107ab <refsynopsisdiv>
d51e90740114c60620c0febffd4d3ce6e280a107ab </cmdsynopsis>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsynopsisdiv>
d51e90740114c60620c0febffd4d3ce6e280a107ab <para><filename>named.conf</filename> is the configuration file
d51e90740114c60620c0febffd4d3ce6e280a107ab in braces and terminated with a semi-colon. Clauses in
d51e90740114c60620c0febffd4d3ce6e280a107ab the statements are also semi-colon terminated. The usual
d51e90740114c60620c0febffd4d3ce6e280a107ab comment styles are supported:
d51e90740114c60620c0febffd4d3ce6e280a107ab C style: /* */
d51e90740114c60620c0febffd4d3ce6e280a107ab C++ style: // to end of line
d51e90740114c60620c0febffd4d3ce6e280a107ab Unix style: # to end of line
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abacl <replaceable>string</replaceable> { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abmasters <replaceable>string</replaceable> <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>masters</replaceable> | <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abserver ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-format ( many-answers | one-answer );
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source ( <replaceable>ipv4_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab support-ixfr <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abtrusted-keys {
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>domain_name</replaceable> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abmanaged-keys {
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>domain_name</replaceable> <constant>initial-key</constant> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key</replaceable>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107ab inet ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>
d51e90740114c60620c0febffd4d3ce6e280a107ab allow { <replaceable>address_match_element</replaceable>; ... }
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> keys { <replaceable>string</replaceable>; ... } </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab unix <replaceable>unsupported</replaceable>; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107ab category <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107ab listen-on <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab view <replaceable>string</replaceable> <replaceable>optional_class</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107ab avoid-v4-udp-ports { <replaceable>port</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab avoid-v6-udp-ports { <replaceable>port</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab blackhole { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab host-statistics <replaceable>boolean</replaceable>; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab host-statistics-max <replaceable>number</replaceable>; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab hostname ( <replaceable>quoted_string</replaceable> | none );
d51e90740114c60620c0febffd4d3ce6e280a107ab keep-response-order { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab listen-on <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab listen-on-v6 <optional> port <replaceable>integer</replaceable> </optional> { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab match-mapped-addresses <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab memstatistics-file <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab pid-file ( <replaceable>quoted_string</replaceable> | none );
d51e90740114c60620c0febffd4d3ce6e280a107ab server-id ( <replaceable>quoted_string</replaceable> | hostname | none );
d51e90740114c60620c0febffd4d3ce6e280a107ab statistics-file <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab statistics-interval <replaceable>integer</replaceable>; // not yet implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab tkey-dhkey <replaceable>quoted_string</replaceable> <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab tkey-gssapi-credential <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab tkey-gssapi-keytab <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-message-size <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab version ( <replaceable>quoted_string</replaceable> | none );
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-recursion { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab sortlist { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab auth-nxdomain <replaceable>boolean</replaceable>; // default changed
d51e90740114c60620c0febffd4d3ce6e280a107ab rrset-order {
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab additional-from-cache <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab queryport-pool-updateinterval <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab resolver-query-timeout <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab min-roots <replaceable>integer</replaceable>; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-format ( many-answers | one-answer );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-names ( master | slave | response )
d51e90740114c60620c0febffd4d3ce6e280a107ab ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-srv-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab cache-file <replaceable>quoted_string</replaceable>; // test option
d51e90740114c60620c0febffd4d3ce6e280a107ab suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
d51e90740114c60620c0febffd4d3ce6e280a107ab root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-accept-expired <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-transfer { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab masterfile-format ( text | raw | map );
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> key <replaceable>keyname</replaceable> </optional> ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-notify { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab forward ( first | only );
d51e90740114c60620c0febffd4d3ce6e280a107ab forwarders <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab max-journal-size <replaceable>size_no_default</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab max-transfer-time-out <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab max-transfer-idle-out <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab sig-validity-interval <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab sig-re-signing-interval <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab sig-signing-signatures <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source ( <replaceable>ipv4_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab use-alt-transfer-source <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab managed-keys-directory <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab auto-dnssec <constant>allow</constant>|<constant>maintain</constant>|<constant>off</constant>;
d51e90740114c60620c0febffd4d3ce6e280a107ab zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab cookie-algorithm ( <replaceable>aes</replaceable> | <replaceable>sha1</replaceable> | <replaceable>sha256</replaceable> );
d51e90740114c60620c0febffd4d3ce6e280a107ab require-server-cookie <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab deny-answer-addresses {
d51e90740114c60620c0febffd4d3ce6e280a107ab } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab deny-answer-aliases {
d51e90740114c60620c0febffd4d3ce6e280a107ab } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab nsec3-test-zone <replaceable>boolean</replaceable>; // testing only
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab deallocate-on-exit <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab fake-iquery <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab fetch-glue <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab has-old-clients <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab multiple-cnames <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab named-xfer <replaceable>quoted_string</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab serial-queries <replaceable>integer</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab treat-cr-as-space <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab use-id-pool <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abview <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
d51e90740114c60620c0febffd4d3ce6e280a107ab match-clients { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab match-destinations { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab zone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
d51e90740114c60620c0febffd4d3ce6e280a107ab server ( <replaceable>ipv4_address<optional>/prefixlen</optional></replaceable> | <replaceable>ipv6_address<optional>/prefixlen</optional></replaceable> ) {
d51e90740114c60620c0febffd4d3ce6e280a107ab trusted-keys {
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>string</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>integer</replaceable> <replaceable>quoted_string</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-recursion { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-recursion-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab sortlist { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab topology { <replaceable>address_match_element</replaceable>; ... }; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab auth-nxdomain <replaceable>boolean</replaceable>; // default changed
d51e90740114c60620c0febffd4d3ce6e280a107ab rrset-order {
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> class <replaceable>string</replaceable> </optional> <optional> type <replaceable>string</replaceable> </optional>
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> name <replaceable>quoted_string</replaceable> </optional> <replaceable>string</replaceable> <replaceable>string</replaceable>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab rfc2308-type1 <replaceable>boolean</replaceable>; // not yet implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab additional-from-cache <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab query-source ( ( <replaceable>ipv4_address</replaceable> | * ) | <optional> address ( <replaceable>ipv4_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab query-source-v6 ( ( <replaceable>ipv6_address</replaceable> | * ) | <optional> address ( <replaceable>ipv6_address</replaceable> | * ) </optional> ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab queryport-pool-updateinterval <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab resolver-query-timeout <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab min-roots <replaceable>integer</replaceable>; // not implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-format ( many-answers | one-answer );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-names ( master | slave | response )
d51e90740114c60620c0febffd4d3ce6e280a107ab ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-srv-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab cache-file <replaceable>quoted_string</replaceable>; // test option
d51e90740114c60620c0febffd4d3ce6e280a107ab suppress-initial-notify <replaceable>boolean</replaceable>; // not yet implemented
d51e90740114c60620c0febffd4d3ce6e280a107ab dual-stack-servers <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>quoted_string</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv6_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> ); ...
d51e90740114c60620c0febffd4d3ce6e280a107ab root-delegation-only <optional> exclude { <replaceable>quoted_string</replaceable>; ... } </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab disable-algorithms <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab disable-ds-digests <replaceable>string</replaceable> { <replaceable>string</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-lookaside ( <replaceable>auto</replaceable> | <replaceable>no</replaceable> | <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> );
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-must-be-secure <replaceable>string</replaceable> <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-accept-expired <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab ixfr-from-differences <replaceable>ixfrdiff</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-cache { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-cache-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-transfer { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab masterfile-format ( text | raw | map );
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> key <replaceable>keyname</replaceable> </optional> ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-notify { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab forward ( first | only );
d51e90740114c60620c0febffd4d3ce6e280a107ab forwarders <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab max-journal-size <replaceable>size_no_default</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab max-transfer-time-out <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab max-transfer-idle-out <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab sig-validity-interval <replaceable>integer</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source ( <replaceable>ipv4_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab alt-transfer-source ( <replaceable>ipv4_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab use-alt-transfer-source <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab zero-no-soa-ttl-cache <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab require-server-cookie <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-v6-synthesis { <replaceable>address_match_element</replaceable>; ... }; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab fetch-glue <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab maintain-ixfr-base <replaceable>boolean</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab max-ixfr-log-size <replaceable>size</replaceable>; // obsolete
d51e90740114c60620c0febffd4d3ce6e280a107ab</literallayout>
d51e90740114c60620c0febffd4d3ce6e280a107ab </refsection>
d51e90740114c60620c0febffd4d3ce6e280a107abzone <replaceable>string</replaceable> <replaceable>optional_class</replaceable> {
d51e90740114c60620c0febffd4d3ce6e280a107ab type ( master | slave | stub | hint | redirect |
d51e90740114c60620c0febffd4d3ce6e280a107ab forward | delegation-only );
d51e90740114c60620c0febffd4d3ce6e280a107ab masters <optional> port <replaceable>integer</replaceable> </optional> {
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv4_address</replaceable> <optional>port <replaceable>integer</replaceable></optional> |
d51e90740114c60620c0febffd4d3ce6e280a107ab <replaceable>ipv6_address</replaceable> <optional> port <replaceable>integer</replaceable> </optional> ) <optional> key <replaceable>string</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab check-names ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-mx-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab check-srv-cname ( fail | warn | ignore );
d51e90740114c60620c0febffd4d3ce6e280a107ab ixfr-from-differences <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-secure-to-insecure <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-query-on { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-transfer { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab allow-update-forwarding { <replaceable>address_match_element</replaceable>; ... };
d51e90740114c60620c0febffd4d3ce6e280a107ab update-policy <replaceable>local</replaceable> | <replaceable> {
d51e90740114c60620c0febffd4d3ce6e280a107ab ( name | subdomain | wildcard | self | selfsub | selfwild |
d51e90740114c60620c0febffd4d3ce6e280a107ab krb5-self | ms-self | krb5-subdomain | ms-subdomain |
d51e90740114c60620c0febffd4d3ce6e280a107ab tcp-self | zonesub | 6to4-self ) <replaceable>string</replaceable>
d51e90740114c60620c0febffd4d3ce6e280a107ab }</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab dnssec-dnskey-kskonly <replaceable>boolean</replaceable>;
d51e90740114c60620c0febffd4d3ce6e280a107ab masterfile-format ( text | raw | map );
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source ( <replaceable>ipv4_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab notify-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) <optional> port ( <replaceable>integer</replaceable> | * ) </optional>;
d51e90740114c60620c0febffd4d3ce6e280a107ab also-notify <optional> port <replaceable>integer</replaceable> </optional> { ( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> )
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> port <replaceable>integer</replaceable> </optional>; ...
d51e90740114c60620c0febffd4d3ce6e280a107ab <optional> key <replaceable>keyname</replaceable> </optional> ... };
( <replaceable>ipv4_address</replaceable> | <replaceable>ipv6_address</replaceable> ) <optional> port <replaceable>integer</replaceable> </optional>; ...