5739N/A - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC") 5739N/A - Permission to use, copy, modify, and distribute this software for any 5739N/A - purpose with or without fee is hereby granted, provided that the above 5739N/A - copyright notice and this permission notice appear in all copies. 5739N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 5739N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 5739N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 5739N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 5739N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 5739N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 5739N/A - PERFORMANCE OF THIS SOFTWARE. 5739N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5739N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.68.1">
5739N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><
div class="refentry" lang="en">
5739N/A<
a name="id2456618"></
a><
div class="titlepage"></
div>
5739N/A<
p><
code class="filename">
named.conf</
code> — configuration file for named</
p>
5739N/A<
div class="refsynopsisdiv">
5739N/A<
div class="cmdsynopsis"><
p><
code class="command">
named.conf</
code> </
p></
div>
5739N/A<
div class="refsect1" lang="en">
5739N/A<
a name="id2514019"></
a><
h2>DESCRIPTION</
h2>
5739N/A <
span><
strong class="command">named</
strong></
span>. Statements are enclosed
5739N/A in braces and terminated with a semi-colon. Clauses in
5739N/A the statements are also semi-colon terminated. The usual
5739N/A comment styles are supported:
5739N/A C++ style: // to end of line
5739N/A Unix style: # to end of line
5739N/A<
div class="refsect1" lang="en">
5739N/A<
a name="id2514046"></
a><
h2>ACL</
h2>
5739N/A<
div class="literallayout"><
p><
br>
5739N/Aacl�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
5739N/A<
div class="refsect1" lang="en">
5739N/A<
a name="id2514062"></
a><
h2>KEY</
h2>
5739N/A<
div class="literallayout"><
p><
br>
5739N/Akey�<
em class="replaceable"><
code>domain_name</
code></
em>�{<
br>
5739N/A algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
5739N/A secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
5739N/A<
div class="refsect1" lang="en">
5739N/A<
a name="id2514082"></
a><
h2>MASTERS</
h2>
<
div class="literallayout"><
p><
br>
masters�<
em class="replaceable"><
code>string</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>masters</
code></
em>�|�<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
<
div class="refsect1" lang="en">
<
a name="id2514128"></
a><
h2>SERVER</
h2>
<
div class="literallayout"><
p><
br>
server�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
bogus�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
edns�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
keys�<
em class="replaceable"><
code>server_key</
code></
em>;<
br>
transfers�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
support-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2514189"></
a><
h2>TRUSTED-KEYS</
h2>
<
div class="literallayout"><
p><
br>
<
em class="replaceable"><
code>domain_name</
code></
em>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
<
div class="refsect1" lang="en">
<
a name="id2514215"></
a><
h2>CONTROLS</
h2>
<
div class="literallayout"><
p><
br>
inet�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>]<
br>
allow�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�}<
br>
[<
span class="optional">�keys�{�<
em class="replaceable"><
code>string</
code></
em>;�...�}�</
span>];<
br>
unix�<
em class="replaceable"><
code>unsupported</
code></
em>;�//�not�implemented<
br>
<
div class="refsect1" lang="en">
<
a name="id2514250"></
a><
h2>LOGGING</
h2>
<
div class="literallayout"><
p><
br>
channel�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
file�<
em class="replaceable"><
code>log_file</
code></
em>;<
br>
syslog�<
em class="replaceable"><
code>optional_facility</
code></
em>;<
br>
severity�<
em class="replaceable"><
code>log_severity</
code></
em>;<
br>
print-time�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
print-severity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
print-category�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
category�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
<
div class="refsect1" lang="en">
<
a name="id2514289"></
a><
h2>LWRES</
h2>
<
div class="literallayout"><
p><
br>
listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>;<
br>
search�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
ndots�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
<
div class="refsect1" lang="en">
<
a name="id2514330"></
a><
h2>OPTIONS</
h2>
<
div class="literallayout"><
p><
br>
avoid-v4-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
avoid-v6-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
blackhole�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
coresize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
datasize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
dump-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
files�<
em class="replaceable"><
code>size</
code></
em>;<
br>
heartbeat-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
host-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�implemented<
br>
host-statistics-max�<
em class="replaceable"><
code>number</
code></
em>;�//�not�implemented<
br>
hostname�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
interface-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
listen-on-v6�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-mapped-addresses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
memstatistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
pid-file�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
port�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
querylog�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursing-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
random-device�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
recursive-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
serial-query-rate�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
server-id�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�|;<
br>
stacksize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
statistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
statistics-interval�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�yet�implemented<
br>
tcp-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tcp-listen-queue�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-dhkey�<
em class="replaceable"><
code>quoted_string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-gssapi-credential�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
tkey-domain�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
transfers-per-ns�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
use-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
version�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�<
em class="replaceable"><
code>querysource4</
code></
em>;<
br>
query-source-v6�<
em class="replaceable"><
code>querysource6</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�<
em class="replaceable"><
code>string</
code></
em>�trust-anchor�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
deallocate-on-exit�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fake-iquery�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
has-old-clients�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
multiple-cnames�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
named-xfer�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
serial-queries�<
em class="replaceable"><
code>integer</
code></
em>;�//�obsolete<
br>
treat-cr-as-space�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
use-id-pool�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2515001"></
a><
h2>VIEW</
h2>
<
div class="literallayout"><
p><
br>
view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
match-clients�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-destinations�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
server�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�<
em class="replaceable"><
code>querysource4</
code></
em>;<
br>
query-source-v6�<
em class="replaceable"><
code>querysource6</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�<
em class="replaceable"><
code>string</
code></
em>�trust-anchor�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2515494"></
a><
h2>ZONE</
h2>
<
div class="literallayout"><
p><
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
type�(�master�|�slave�|�stub�|�hint�|<
br>
forward�|�delegation-only�);<
br>
file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
masters�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>masters</
code></
em>�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
database�<
em class="replaceable"><
code>string</
code></
em>;<
br>
delegation-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-names�(�fail�|�warn�|�ignore�);<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
journal�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
(�grant�|�deny�)�<
em class="replaceable"><
code>string</
code></
em><
br>
(�name�|�subdomain�|�wildcard�|�self�)�<
em class="replaceable"><
code>string</
code></
em><
br>
<
em class="replaceable"><
code>rrtypelist</
code></
em>;�...<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
ixfr-base�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
ixfr-tmp-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
pubkey�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2515837"></
a><
h2>FILES</
h2>
<
div class="refsect1" lang="en">
<
a name="id2515849"></
a><
h2>SEE ALSO</
h2>
<
p><
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">rndc</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">BIND 9 Administrator Reference Manual</
span></
span>.