3112N/A - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC") 3112N/A - Permission to use, copy, modify, and/or distribute this software for any 3112N/A - purpose with or without fee is hereby granted, provided that the above 3112N/A - copyright notice and this permission notice appear in all copies. 3112N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 3112N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 3112N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 3112N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 3112N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 3112N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 3112N/A - PERFORMANCE OF THIS SOFTWARE. 3112N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
3112N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
3112N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><
div class="refentry" lang="en">
5061N/A<
a name="id2476282"></
a><
div class="titlepage"></
div>
4458N/A<
p><
code class="filename">
named.conf</
code> — configuration file for named</
p>
4458N/A<
div class="refsynopsisdiv">
3832N/A<
div class="cmdsynopsis"><
p><
code class="command">
named.conf</
code> </
p></
div>
4458N/A<
div class="refsect1" lang="en">
3832N/A<
a name="id2543373"></
a><
h2>DESCRIPTION</
h2>
4974N/A <
span><
strong class="command">named</
strong></
span>. Statements are enclosed
6312N/A in braces and terminated with a semi-colon. Clauses in
4458N/A the statements are also semi-colon terminated. The usual
5581N/A comment styles are supported:
4978N/A C++ style: // to end of line
4978N/A Unix style: # to end of line
3832N/A<
div class="refsect1" lang="en">
4458N/A<
a name="id2543401"></
a><
h2>ACL</
h2>
4458N/A<
div class="literallayout"><
p><
br>
4458N/Aacl�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
4458N/A<
div class="refsect1" lang="en">
4495N/A<
a name="id2543417"></
a><
h2>KEY</
h2>
4495N/A<
div class="literallayout"><
p><
br>
4495N/Akey�<
em class="replaceable"><
code>domain_name</
code></
em>�{<
br>
4495N/A algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
4495N/A secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
4458N/A<
div class="refsect1" lang="en">
4458N/A<
a name="id2543436"></
a><
h2>MASTERS</
h2>
4458N/A<
div class="literallayout"><
p><
br>
4714N/Amasters�<
em class="replaceable"><
code>string</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
4714N/A (�<
em class="replaceable"><
code>masters</
code></
em>�|�<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
4714N/A <
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
4495N/A<
div class="refsect1" lang="en">
4458N/A<
a name="id2543482"></
a><
h2>SERVER</
h2>
4458N/A<
div class="literallayout"><
p><
br>
4458N/Aserver�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
4458N/A bogus�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
4458N/A edns�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
4458N/A edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
4723N/A max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
4458N/A tcp-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
4458N/A provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
4458N/A request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
4458N/A keys�<
em class="replaceable"><
code>server_key</
code></
em>;<
br>
5417N/A transfers�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
5417N/A transfer-format�(�many-answers�|�one-answer�);<
br>
5417N/A transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
880N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
4714N/A transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
4714N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
4714N/A support-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
4458N/A<
div class="refsect1" lang="en">
4458N/A<
a name="id2543554"></
a><
h2>TRUSTED-KEYS</
h2>
4458N/A<
div class="literallayout"><
p><
br>
4458N/A <
em class="replaceable"><
code>domain_name</
code></
em>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
4458N/A<
div class="refsect1" lang="en">
900N/A<
a name="id2543579"></
a><
h2>MANAGED-KEYS</
h2>
927N/A<
div class="literallayout"><
p><
br>
5043N/A <
em class="replaceable"><
code>domain_name</
code></
em>�<
code class="constant">initial-key</
code>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
4458N/A<
div class="refsect1" lang="en">
5798N/A<
a name="id2543608"></
a><
h2>CONTROLS</
h2>
5688N/A<
div class="literallayout"><
p><
br>
4716N/A inet�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
5369N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>]<
br>
4495N/A allow�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�}<
br>
4459N/A [<
span class="optional">�keys�{�<
em class="replaceable"><
code>string</
code></
em>;�...�}�</
span>];<
br>
4459N/A unix�<
em class="replaceable"><
code>unsupported</
code></
em>;�//�not�implemented<
br>
6312N/A<
div class="refsect1" lang="en">
6312N/A<
a name="id2543643"></
a><
h2>LOGGING</
h2>
<
div class="literallayout"><
p><
br>
channel�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
file�<
em class="replaceable"><
code>log_file</
code></
em>;<
br>
syslog�<
em class="replaceable"><
code>optional_facility</
code></
em>;<
br>
severity�<
em class="replaceable"><
code>log_severity</
code></
em>;<
br>
print-time�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
print-severity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
print-category�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
category�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
<
div class="refsect1" lang="en">
<
a name="id2543682"></
a><
h2>LWRES</
h2>
<
div class="literallayout"><
p><
br>
listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>;<
br>
search�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
ndots�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
lwres-tasks�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
lwres-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
<
div class="refsect1" lang="en">
<
a name="id2543730"></
a><
h2>OPTIONS</
h2>
<
div class="literallayout"><
p><
br>
avoid-v4-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
avoid-v6-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
blackhole�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
coresize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
datasize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
dump-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
files�<
em class="replaceable"><
code>size</
code></
em>;<
br>
heartbeat-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
host-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�implemented<
br>
host-statistics-max�<
em class="replaceable"><
code>number</
code></
em>;�//�not�implemented<
br>
hostname�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
interface-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
keep-response-order�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
listen-on-v6�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-mapped-addresses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
memstatistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
pid-file�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
port�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
querylog�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursing-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
reserved-sockets�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
random-device�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
recursive-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
serial-query-rate�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
server-id�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�hostname�|�none�);<
br>
stacksize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
statistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
statistics-interval�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�yet�implemented<
br>
tcp-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tcp-listen-queue�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-dhkey�<
em class="replaceable"><
code>quoted_string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-gssapi-credential�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
tkey-gssapi-keytab�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
tkey-domain�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
transfers-per-ns�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
use-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
version�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
resolver-query-timeout�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
max-acache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
disable-ds-digests�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�(�<
em class="replaceable"><
code>auto</
code></
em>�|�<
em class="replaceable"><
code>no</
code></
em>�|�<
em class="replaceable"><
code>domain</
code></
em>�trust-anchor�<
em class="replaceable"><
code>domain</
code></
em>�);<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dns64-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dns64-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dns64�<
em class="replaceable"><
code>prefix</
code></
em>�{<
br>
clients�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
exclude�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
mapped�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
break-dnssec�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
suffix�<
em class="replaceable"><
code>ipv6_address</
code></
em>;<
br>
empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
masterfile-format�(�text�|�raw�|�map�);<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
[<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
sig-re-signing-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
sig-signing-nodes�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
sig-signing-signatures�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
sig-signing-type�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
managed-keys-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
auto-dnssec�<
code class="constant">allow</
code>|<
code class="constant">maintain</
code>|<
code class="constant">off</
code>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
deny-answer-addresses�{<
br>
<
em class="replaceable"><
code>address_match_list</
code></
em><
br>
}�[<
span class="optional">�except-from�{�<
em class="replaceable"><
code>namelist</
code></
em>�}�</
span>];<
br>
deny-answer-aliases�{<
br>
<
em class="replaceable"><
code>namelist</
code></
em><
br>
}�[<
span class="optional">�except-from�{�<
em class="replaceable"><
code>namelist</
code></
em>�}�</
span>];<
br>
nsec3-test-zone�<
em class="replaceable"><
code>boolean</
code></
em>;��//�testing�only<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
deallocate-on-exit�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fake-iquery�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
has-old-clients�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
multiple-cnames�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
named-xfer�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
serial-queries�<
em class="replaceable"><
code>integer</
code></
em>;�//�obsolete<
br>
treat-cr-as-space�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
use-id-pool�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2544618"></
a><
h2>VIEW</
h2>
<
div class="literallayout"><
p><
br>
view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
match-clients�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-destinations�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
server�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
[<
span class="optional">...</
span>]<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
resolver-query-timeout�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
max-acache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
disable-ds-digests�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�(�<
em class="replaceable"><
code>auto</
code></
em>�|�<
em class="replaceable"><
code>no</
code></
em>�|�<
em class="replaceable"><
code>domain</
code></
em>�trust-anchor�<
em class="replaceable"><
code>domain</
code></
em>�);<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dns64-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dns64-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dns64�<
em class="replaceable"><
code>prefix</
code></
em>�{<
br>
clients�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
exclude�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
mapped�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
break-dnssec�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
suffix�<
em class="replaceable"><
code>ipv6_address</
code></
em>;<
br>
empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
masterfile-format�(�text�|�raw�|�map�);<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
[<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545340"></
a><
h2>ZONE</
h2>
<
div class="literallayout"><
p><
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
type�(�master�|�slave�|�stub�|�hint�|�redirect�|<
br>
forward�|�delegation-only�);<
br>
file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
masters�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>masters</
code></
em>�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
database�<
em class="replaceable"><
code>string</
code></
em>;<
br>
delegation-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-names�(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
journal�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-policy�<
em class="replaceable"><
code>local</
code></
em>�|�<
em class="replaceable"><
code>�{<
br>
(�grant�|�deny�)�<
em class="replaceable"><
code>string</
code></
em><
br>
(�name�|�subdomain�|�wildcard�|�self�|�selfsub�|�selfwild�|<
br>
������������������krb5-self�|�ms-self�|�krb5-subdomain�|�ms-subdomain�|<
br>
��tcp-self�|�zonesub�|�6to4-self�)�<
em class="replaceable"><
code>string</
code></
em><
br>
<
em class="replaceable"><
code>rrtypelist</
code></
em>;<
br>
[<
span class="optional">...</
span>]<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
masterfile-format�(�text�|�raw�|�map�);<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
[<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
nsec3-test-zone�<
em class="replaceable"><
code>boolean</
code></
em>;��//�testing�only<
br>
ixfr-base�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
ixfr-tmp-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
pubkey�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545730"></
a><
h2>FILES</
h2>
<
div class="refsect1" lang="en">
<
a name="id2545741"></
a><
h2>SEE ALSO</
h2>
<
p><
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">named-checkconf</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">rndc</
span>(8)</
span>,
<
em class="citetitle">BIND 9 Administrator Reference Manual</
em>.