1472N/A - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") 222N/A - Permission to use, copy, modify, and distribute this software for any 222N/A - purpose with or without fee is hereby granted, provided that the above 222N/A - copyright notice and this permission notice appear in all copies. 222N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 222N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 222N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 222N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 222N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 222N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 222N/A - PERFORMANCE OF THIS SOFTWARE. 1472N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1472N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
222N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><
div class="refentry" lang="en">
222N/A<
a name="id2476275"></
a><
div class="titlepage"></
div>
222N/A<
div class="refnamediv">
222N/A<
p><
code class="filename">
named.conf</
code> — configuration file for named</
p>
222N/A<
div class="refsynopsisdiv">
417N/A<
div class="cmdsynopsis"><
p><
code class="command">
named.conf</
code> </
p></
div>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2542042"></
a><
h2>DESCRIPTION</
h2>
222N/A <
span><
strong class="command">named</
strong></
span>. Statements are enclosed
222N/A in braces and terminated with a semi-colon. Clauses in
222N/A the statements are also semi-colon terminated. The usual
222N/A comment styles are supported:
222N/A C++ style: // to end of line
222N/A Unix style: # to end of line
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543367"></
a><
h2>ACL</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/Aacl�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543383"></
a><
h2>KEY</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/Akey�<
em class="replaceable"><
code>domain_name</
code></
em>�{<
br>
222N/A algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
222N/A secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543402"></
a><
h2>MASTERS</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/Amasters�<
em class="replaceable"><
code>string</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
222N/A (�<
em class="replaceable"><
code>masters</
code></
em>�|�<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
222N/A <
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543448"></
a><
h2>SERVER</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/Aserver�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
222N/A bogus�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A edns�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A keys�<
em class="replaceable"><
code>server_key</
code></
em>;<
br>
222N/A transfers�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A transfer-format�(�many-answers�|�one-answer�);<
br>
222N/A transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
222N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
222N/A transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
222N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
222N/A support-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543516"></
a><
h2>TRUSTED-KEYS</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/A <
em class="replaceable"><
code>domain_name</
code></
em>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543542"></
a><
h2>CONTROLS</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/A inet�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
222N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>]<
br>
222N/A allow�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�}<
br>
222N/A [<
span class="optional">�keys�{�<
em class="replaceable"><
code>string</
code></
em>;�...�}�</
span>];<
br>
222N/A unix�<
em class="replaceable"><
code>unsupported</
code></
em>;�//�not�implemented<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543577"></
a><
h2>LOGGING</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/A channel�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
222N/A file�<
em class="replaceable"><
code>log_file</
code></
em>;<
br>
222N/A syslog�<
em class="replaceable"><
code>optional_facility</
code></
em>;<
br>
222N/A severity�<
em class="replaceable"><
code>log_severity</
code></
em>;<
br>
222N/A print-time�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A print-severity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A print-category�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A category�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543616"></
a><
h2>LWRES</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/A listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
222N/A (�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
222N/A view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>;<
br>
222N/A search�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
222N/A ndots�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A<
div class="refsect1" lang="en">
222N/A<
a name="id2543657"></
a><
h2>OPTIONS</
h2>
222N/A<
div class="literallayout"><
p><
br>
222N/A avoid-v4-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
417N/A avoid-v6-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
222N/A blackhole�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
417N/A coresize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
417N/A datasize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
222N/A directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
222N/A dump-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
222N/A files�<
em class="replaceable"><
code>size</
code></
em>;<
br>
222N/A heartbeat-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A host-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�implemented<
br>
222N/A host-statistics-max�<
em class="replaceable"><
code>number</
code></
em>;�//�not�implemented<
br>
417N/A hostname�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
417N/A interface-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
222N/A listen-on-v6�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
222N/A match-mapped-addresses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A memstatistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
222N/A pid-file�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
222N/A port�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A querylog�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
222N/A recursing-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
222N/A random-device�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
222N/A recursive-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
222N/A serial-query-rate�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
server-id�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�|;<
br>
stacksize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
statistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
statistics-interval�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�yet�implemented<
br>
tcp-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tcp-listen-queue�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-dhkey�<
em class="replaceable"><
code>quoted_string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
tkey-gssapi-credential�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
tkey-domain�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
transfers-per-ns�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfers-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
use-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
version�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-acache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�<
em class="replaceable"><
code>string</
code></
em>�trust-anchor�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
deallocate-on-exit�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fake-iquery�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
has-old-clients�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
multiple-cnames�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
named-xfer�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
serial-queries�<
em class="replaceable"><
code>integer</
code></
em>;�//�obsolete<
br>
treat-cr-as-space�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
use-id-pool�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2544424"></
a><
h2>VIEW</
h2>
<
div class="literallayout"><
p><
br>
view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
match-clients�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-destinations�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
match-recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
server�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...<
br>
allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
[<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
[<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-format�(�many-answers�|�one-answer�);<
br>
max-cache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-acache-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
check-names�(�master�|�slave�|�response�)<
br>
(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-lookaside�<
em class="replaceable"><
code>string</
code></
em>�trust-anchor�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545081"></
a><
h2>ZONE</
h2>
<
div class="literallayout"><
p><
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
type�(�master�|�slave�|�stub�|�hint�|<
br>
forward�|�delegation-only�);<
br>
file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
masters�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>masters</
code></
em>�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
database�<
em class="replaceable"><
code>string</
code></
em>;<
br>
delegation-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-names�(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
journal�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
(�grant�|�deny�)�<
em class="replaceable"><
code>string</
code></
em><
br>
(�name�|�subdomain�|�wildcard�|�self�)�<
em class="replaceable"><
code>string</
code></
em><
br>
<
em class="replaceable"><
code>rrtypelist</
code></
em>;�...<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
ixfr-base�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
ixfr-tmp-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
pubkey�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545371"></
a><
h2>FILES</
h2>
<
div class="refsect1" lang="en">
<
a name="id2545383"></
a><
h2>SEE ALSO</
h2>
<
p><
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">rndc</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">BIND 9 Administrator Reference Manual</
span></
span>.