named.conf.html revision 5347c0fcb04eaea19d9f39795646239f487c6207
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd<!--
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes - Copyright (C) 2004-2016 Internet Systems Consortium, Inc. ("ISC")
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd -
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - This Source Code Form is subject to the terms of the Mozilla Public
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - License, v. 2.0. If a copy of the MPL was not distributed with this
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes - file, You can obtain one at http://mozilla.org/MPL/2.0/.
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd-->
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<html>
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd<head>
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd<title>named.conf</title>
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd</head>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="man.named.conf"></a><div class="titlepage"></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refnamediv">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<h2>Name</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<p><code class="filename">named.conf</code> &#8212; configuration file for <span class="command"><strong>named</strong></span></p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsynopsisdiv">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<h2>Synopsis</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.7"></a><h2>DESCRIPTION</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<p><code class="filename">named.conf</code> is the configuration file
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes for
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes <span class="command"><strong>named</strong></span>. Statements are enclosed
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes in braces and terminated with a semi-colon. Clauses in
1079536268898f733a5f646c3c9a1e040e0146a8bnicholes the statements are also semi-colon terminated. The usual
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes comment styles are supported:
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes </p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes C style: /* */
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes </p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes C++ style: // to end of line
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes </p>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes<p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes Unix style: # to end of line
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes </p>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.8"></a><h2>ACL</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholesacl�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</p></div>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.9"></a><h2>KEY</h2>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes<div class="literallayout"><p><br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholeskey�<em class="replaceable"><code>domain_name</code></em>�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes algorithm�<em class="replaceable"><code>string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes secret�<em class="replaceable"><code>string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.10"></a><h2>MASTERS</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholesmasters�<em class="replaceable"><code>string</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes (�<em class="replaceable"><code>masters</code></em>�|�<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes <em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.11"></a><h2>SERVER</h2>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes<div class="literallayout"><p><br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholesserver�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes bogus�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes edns�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes tcp-only�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes keys�<em class="replaceable"><code>server_key</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes transfers�<em class="replaceable"><code>integer</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes transfer-format�(�many-answers�|�one-answer�);<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes support-ixfr�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes};<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes</p></div>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes</div>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.12"></a><h2>TRUSTED-KEYS</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholestrusted-keys�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes <em class="replaceable"><code>domain_name</code></em>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes};<br>
1079536268898f733a5f646c3c9a1e040e0146a8bnicholes</p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes<div class="refsection">
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes<a name="id-1.13"></a><h2>MANAGED-KEYS</h2>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholesmanaged-keys�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes <em class="replaceable"><code>domain_name</code></em>�<code class="constant">initial-key</code>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.14"></a><h2>CONTROLS</h2>
1079536268898f733a5f646c3c9a1e040e0146a8bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholescontrols�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes inet�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>]<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes allow�{�<em class="replaceable"><code>address_match_element</code></em>;�...�}<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes [<span class="optional">�keys�{�<em class="replaceable"><code>string</code></em>;�...�}�</span>];<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes unix�<em class="replaceable"><code>unsupported</code></em>;�//�not�implemented<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</p></div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<a name="id-1.15"></a><h2>LOGGING</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="literallayout"><p><br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholeslogging�{<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes channel�<em class="replaceable"><code>string</code></em>�{<br>
a6ba37448d345005affe4f4ce9d6843510f66968bnicholes file�<em class="replaceable"><code>log_file</code></em>;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes syslog�<em class="replaceable"><code>optional_facility</code></em>;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes null;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes stderr;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes severity�<em class="replaceable"><code>log_severity</code></em>;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes print-time�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes print-severity�<em class="replaceable"><code>boolean</code></em>;<br>
1fbf6ba0f5207e6637b49f9a9dfcc779bbe952a9trawick print-category�<em class="replaceable"><code>boolean</code></em>;<br>
47bb9692d3c78db1d84c1a6ae5e0a29bff5c845ebnicholes };<br>
47bb9692d3c78db1d84c1a6ae5e0a29bff5c845ebnicholes category�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
47bb9692d3c78db1d84c1a6ae5e0a29bff5c845ebnicholes};<br>
47bb9692d3c78db1d84c1a6ae5e0a29bff5c845ebnicholes</p></div>
47bb9692d3c78db1d84c1a6ae5e0a29bff5c845ebnicholes</div>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="refsection">
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes<a name="id-1.16"></a><h2>LWRES</h2>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes<div class="literallayout"><p><br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholeslwres�{<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes (�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes };<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes search�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes ndots�<em class="replaceable"><code>integer</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes lwres-tasks�<em class="replaceable"><code>integer</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes lwres-clients�<em class="replaceable"><code>integer</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes};<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes</p></div>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes</div>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes<div class="refsection">
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes<a name="id-1.17"></a><h2>OPTIONS</h2>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes<div class="literallayout"><p><br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholesoptions�{<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes avoid-v4-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes avoid-v6-udp-ports�{�<em class="replaceable"><code>port</code></em>;�...�};<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes blackhole�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes coresize�<em class="replaceable"><code>size</code></em>;<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes datasize�<em class="replaceable"><code>size</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes dump-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes files�<em class="replaceable"><code>size</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes heartbeat-interval�<em class="replaceable"><code>integer</code></em>;<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes host-statistics�<em class="replaceable"><code>boolean</code></em>;�//�not�implemented<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes host-statistics-max�<em class="replaceable"><code>number</code></em>;�//�not�implemented<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes hostname�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes interface-interval�<em class="replaceable"><code>integer</code></em>;<br>
1663ee524b13cfa464942942ec33c16f2991cbd8bnicholes keep-response-order�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
95110ef6c48e688290296d18e94635af57300f4ebnicholes listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes listen-on-v6�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes match-mapped-addresses�<em class="replaceable"><code>boolean</code></em>;<br>
1f0c2431e7856c0dca9551795706b587562b1e67bnicholes memstatistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes pid-file�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes port�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes querylog�<em class="replaceable"><code>boolean</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes recursing-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes reserved-sockets�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes random-device�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes recursive-clients�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes serial-query-rate�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes server-id�(�<em class="replaceable"><code>quoted_string</code></em>�|�hostname�|�none�);<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes stacksize�<em class="replaceable"><code>size</code></em>;<br>
ed3216cff7d96499450e5eebd927eb1507b97881bnicholes statistics-file�<em class="replaceable"><code>quoted_string</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes statistics-interval�<em class="replaceable"><code>integer</code></em>;�//�not�yet�implemented<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes tcp-clients�<em class="replaceable"><code>integer</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes tcp-listen-queue�<em class="replaceable"><code>integer</code></em>;<br>
7baee11068bc48f5b2fd873def65f9c01861f04fbnicholes tkey-dhkey�<em class="replaceable"><code>quoted_string</code></em>�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes tkey-gssapi-credential�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes tkey-gssapi-keytab�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes tkey-domain�<em class="replaceable"><code>quoted_string</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes transfer-message-size�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes transfers-per-ns�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes transfers-in�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes transfers-out�<em class="replaceable"><code>integer</code></em>;<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes version�(�<em class="replaceable"><code>quoted_string</code></em>�|�none�);<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
9e5410cf4f579668d32359a1ef7658a7866cf4d5bnicholes minimal-any�<em class="replaceable"><code>boolean</code></em>;<br>
minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
recursion�<em class="replaceable"><code>boolean</code></em>;<br>
rrset-order�{<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
};<br>
provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
resolver-query-timeout�<em class="replaceable"><code>integer</code></em>;<br>
min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
transfer-format�(�many-answers�|�one-answer�);<br>
max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
check-names�(�master�|�slave�|�response�)<br>
(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
catalog-zones�{<br>
����zone�<em class="replaceable"><code>quoted_string</code></em><br>
[<span class="optional">�default-masters<br>
[<span class="optional">port�<em class="replaceable"><code>ip_port</code></em></span>]<br>
[<span class="optional">dscp�<em class="replaceable"><code>ip_dscp</code></em></span>]<br>
{�(�<em class="replaceable"><code>masters_list</code></em>�|�<em class="replaceable"><code>ip_addr</code></em>�[<span class="optional">port�<em class="replaceable"><code>ip_port</code></em></span>]�[<span class="optional">key�<em class="replaceable"><code>key</code></em></span>]�)�;�[<span class="optional">...</span>]�}</span>]<br>
����[<span class="optional">in-memory�<em class="replaceable"><code>yes_or_no</code></em></span>]<br>
����[<span class="optional">min-update-interval�<em class="replaceable"><code>interval</code></em></span>]<br>
����;�...�};<br>
;<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
};<br>
edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
disable-ds-digests�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-lookaside�(�<em class="replaceable"><code>auto</code></em>�|�<em class="replaceable"><code>no</code></em>�|�<em class="replaceable"><code>domain</code></em>�trust-anchor�<em class="replaceable"><code>domain</code></em>�);<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
dns64-server�<em class="replaceable"><code>string</code></em>;<br>
dns64-contact�<em class="replaceable"><code>string</code></em>;<br>
dns64�<em class="replaceable"><code>prefix</code></em>�{<br>
clients�{�<em class="replaceable"><code>acl</code></em>;�};<br>
exclude�{�<em class="replaceable"><code>acl</code></em>;�};<br>
mapped�{�<em class="replaceable"><code>acl</code></em>;�};<br>
break-dnssec�<em class="replaceable"><code>boolean</code></em>;<br>
recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
suffix�<em class="replaceable"><code>ipv6_address</code></em>;<br>
};<br>
<br>
empty-server�<em class="replaceable"><code>string</code></em>;<br>
empty-contact�<em class="replaceable"><code>string</code></em>;<br>
empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-dnskey-kskonly�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�|�map�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�key�<em class="replaceable"><code>keyname</code></em>�</span>]�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
sig-re-signing-interval�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-nodes�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-signatures�<em class="replaceable"><code>integer</code></em>;<br>
sig-signing-type�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
managed-keys-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
auto-dnssec�<code class="constant">allow</code>|<code class="constant">maintain</code>|<code class="constant">off</code>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-secure-to-insecure�<em class="replaceable"><code>boolean</code></em>;<br>
automatic-interface-scan�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
cookie-algorithm�(�<em class="replaceable"><code>aes</code></em>�|�<em class="replaceable"><code>sha1</code></em>�|�<em class="replaceable"><code>sha256</code></em>�);<br>
cookie-secret�<em class="replaceable"><code>string</code></em>;<br>
require-server-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
send-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
nocookie-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
<br>
deny-answer-addresses�{<br>
<em class="replaceable"><code>address_match_list</code></em><br>
}�[<span class="optional">�except-from�{�<em class="replaceable"><code>namelist</code></em>�}�</span>];<br>
deny-answer-aliases�{<br>
<em class="replaceable"><code>namelist</code></em><br>
}�[<span class="optional">�except-from�{�<em class="replaceable"><code>namelist</code></em>�}�</span>];<br>
<br>
nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
deallocate-on-exit�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
fake-iquery�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
has-old-clients�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
multiple-cnames�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
named-xfer�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
serial-queries�<em class="replaceable"><code>integer</code></em>;�//�obsolete<br>
treat-cr-as-space�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
use-id-pool�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
use-ixfr�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsection">
<a name="id-1.18"></a><h2>VIEW</h2>
<div class="literallayout"><p><br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
match-clients�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
match-destinations�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
match-recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
key�<em class="replaceable"><code>string</code></em>�{<br>
algorithm�<em class="replaceable"><code>string</code></em>;<br>
secret�<em class="replaceable"><code>string</code></em>;<br>
};<br>
<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
...<br>
};<br>
<br>
server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
...<br>
};<br>
<br>
trusted-keys�{<br>
<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;<br>
[<span class="optional">...</span>]<br>
};<br>
<br>
allow-recursion�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-recursion-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
sortlist�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
auth-nxdomain�<em class="replaceable"><code>boolean</code></em>;�//�default�changed<br>
minimal-any�<em class="replaceable"><code>boolean</code></em>;<br>
minimal-responses�<em class="replaceable"><code>boolean</code></em>;<br>
recursion�<em class="replaceable"><code>boolean</code></em>;<br>
rrset-order�{<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
};<br>
provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
rfc2308-type1�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
additional-from-auth�<em class="replaceable"><code>boolean</code></em>;<br>
additional-from-cache�<em class="replaceable"><code>boolean</code></em>;<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-queryport-pool�<em class="replaceable"><code>boolean</code></em>;<br>
queryport-pool-ports�<em class="replaceable"><code>integer</code></em>;<br>
queryport-pool-updateinterval�<em class="replaceable"><code>integer</code></em>;<br>
cleaning-interval�<em class="replaceable"><code>integer</code></em>;<br>
resolver-query-timeout�<em class="replaceable"><code>integer</code></em>;<br>
min-roots�<em class="replaceable"><code>integer</code></em>;�//�not�implemented<br>
lame-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-ncache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
max-cache-ttl�<em class="replaceable"><code>integer</code></em>;<br>
transfer-format�(�many-answers�|�one-answer�);<br>
max-cache-size�<em class="replaceable"><code>size</code></em>;<br>
max-acache-size�<em class="replaceable"><code>size</code></em>;<br>
clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
max-clients-per-query�<em class="replaceable"><code>number</code></em>;<br>
check-names�(�master�|�slave�|�response�)<br>
(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
cache-file�<em class="replaceable"><code>quoted_string</code></em>;�//�test�option<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
preferred-glue�<em class="replaceable"><code>string</code></em>;<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
};<br>
edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
disable-ds-digests�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-enable�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-validation�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-lookaside�(�<em class="replaceable"><code>auto</code></em>�|�<em class="replaceable"><code>no</code></em>�|�<em class="replaceable"><code>domain</code></em>�trust-anchor�<em class="replaceable"><code>domain</code></em>�);<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-accept-expired�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
dns64-server�<em class="replaceable"><code>string</code></em>;<br>
dns64-contact�<em class="replaceable"><code>string</code></em>;<br>
dns64�<em class="replaceable"><code>prefix</code></em>�{<br>
clients�{�<em class="replaceable"><code>acl</code></em>;�};<br>
exclude�{�<em class="replaceable"><code>acl</code></em>;�};<br>
mapped�{�<em class="replaceable"><code>acl</code></em>;�};<br>
break-dnssec�<em class="replaceable"><code>boolean</code></em>;<br>
recursive-only�<em class="replaceable"><code>boolean</code></em>;<br>
suffix�<em class="replaceable"><code>ipv6_address</code></em>;<br>
};<br>
<br>
empty-server�<em class="replaceable"><code>string</code></em>;<br>
empty-contact�<em class="replaceable"><code>string</code></em>;<br>
empty-zones-enable�<em class="replaceable"><code>boolean</code></em>;<br>
disable-empty-zone�<em class="replaceable"><code>string</code></em>;<br>
<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>ixfrdiff</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-cache-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-dnskey-kskonly�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�|�map�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�key�<em class="replaceable"><code>keyname</code></em>�</span>]�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
zero-no-soa-ttl-cache�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-secure-to-insecure�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
require-server-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
send-cookie�<em class="replaceable"><code>boolean</code></em>;<br>
nocookie-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
fetch-glue�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsection">
<a name="id-1.19"></a><h2>ZONE</h2>
<div class="literallayout"><p><br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
type�(�master�|�slave�|�stub�|�hint�|�redirect�|<br>
forward�|�delegation-only�);<br>
file�<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
masters�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>masters</code></em>�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
};<br>
<br>
database�<em class="replaceable"><code>string</code></em>;<br>
delegation-only�<em class="replaceable"><code>boolean</code></em>;<br>
check-names�(�fail�|�warn�|�ignore�);<br>
check-mx�(�fail�|�warn�|�ignore�);<br>
check-integrity�<em class="replaceable"><code>boolean</code></em>;<br>
check-mx-cname�(�fail�|�warn�|�ignore�);<br>
check-srv-cname�(�fail�|�warn�|�ignore�);<br>
dialup�<em class="replaceable"><code>dialuptype</code></em>;<br>
ixfr-from-differences�<em class="replaceable"><code>boolean</code></em>;<br>
journal�<em class="replaceable"><code>quoted_string</code></em>;<br>
zero-no-soa-ttl�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-secure-to-insecure�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
allow-query�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-query-on�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-transfer�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
update-policy�<em class="replaceable"><code>local</code></em>�|�<em class="replaceable"><code>�{<br>
(�grant�|�deny�)�<em class="replaceable"><code>string</code></em><br>
(�name�|�subdomain�|�wildcard�|�self�|�selfsub�|�selfwild�|<br>
��krb5-self�|�ms-self�|�krb5-subdomain�|�ms-subdomain�|<br>
��tcp-self�|�zonesub�|�6to4-self�)�<em class="replaceable"><code>string</code></em><br>
<em class="replaceable"><code>rrtypelist</code></em>;<br>
[<span class="optional">...</span>]<br>
}</code></em>;<br>
update-check-ksk�<em class="replaceable"><code>boolean</code></em>;<br>
dnssec-dnskey-kskonly�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
masterfile-format�(�text�|�raw�|�map�);<br>
notify�<em class="replaceable"><code>notifytype</code></em>;<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-delay�<em class="replaceable"><code>seconds</code></em>;<br>
notify-to-soa�<em class="replaceable"><code>boolean</code></em>;<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�key�<em class="replaceable"><code>keyname</code></em>�</span>]�...�};<br>
allow-notify�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
<br>
forward�(�first�|�only�);<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
};<br>
<br>
max-journal-size�<em class="replaceable"><code>size_no_default</code></em>;<br>
max-transfer-time-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-time-out�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-in�<em class="replaceable"><code>integer</code></em>;<br>
max-transfer-idle-out�<em class="replaceable"><code>integer</code></em>;<br>
max-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
min-retry-time�<em class="replaceable"><code>integer</code></em>;<br>
max-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
min-refresh-time�<em class="replaceable"><code>integer</code></em>;<br>
multi-master�<em class="replaceable"><code>boolean</code></em>;<br>
request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
sig-validity-interval�<em class="replaceable"><code>integer</code></em>;<br>
<br>
transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<br>
alt-transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
alt-transfer-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
use-alt-transfer-source�<em class="replaceable"><code>boolean</code></em>;<br>
<br>
zone-statistics�<em class="replaceable"><code>boolean</code></em>;<br>
try-tcp-refresh�<em class="replaceable"><code>boolean</code></em>;<br>
key-directory�<em class="replaceable"><code>quoted_string</code></em>;<br>
<br>
nsec3-test-zone�<em class="replaceable"><code>boolean</code></em>;��//�testing�only<br>
<br>
ixfr-base�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
ixfr-tmp-file�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
maintain-ixfr-base�<em class="replaceable"><code>boolean</code></em>;�//�obsolete<br>
max-ixfr-log-size�<em class="replaceable"><code>size</code></em>;�//�obsolete<br>
pubkey�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�//�obsolete<br>
};<br>
</p></div>
</div>
<div class="refsection">
<a name="id-1.20"></a><h2>FILES</h2>
<p><code class="filename">/etc/named.conf</code>
</p>
</div>
<div class="refsection">
<a name="id-1.21"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
</div></body>
</html>