named.conf.html revision 7526edc7677371c366232de5f39a678b7dcda747
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - Permission to use, copy, modify, and distribute this software for any
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - purpose with or without fee is hereby granted, provided that the above
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - copyright notice and this permission notice appear in all copies.
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews - PERFORMANCE OF THIS SOFTWARE.
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews<!-- $Id: named.conf.html,v 1.39 2007/09/18 02:40:47 marka Exp $ -->
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews<a name="id2476275"></a><div class="titlepage"></div>
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews<p><code class="filename">named.conf</code> — configuration file for named</p>
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews<p><code class="filename">named.conf</code> is the configuration file
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews <span><strong class="command">named</strong></span>. Statements are enclosed
8d0ee7a153381d98f6c1e6e9bfe6b73659433666Brian Wellington in braces and terminated with a semi-colon. Clauses in
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews the statements are also semi-colon terminated. The usual
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews comment styles are supported:
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews C style: /* */
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews C++ style: // to end of line
9e77d51069a97a21c68184134a0c9847e95490ffMark Andrews Unix style: # to end of line
c40265eba0c99708887d68e67901924065ba2514Brian Wellingtonacl�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafssonkey�<em class="replaceable"><code>domain_name</code></em>�{<br>
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson algorithm�<em class="replaceable"><code>string</code></em>;<br>
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson secret�<em class="replaceable"><code>string</code></em>;<br>
e99691e566c10f8901b3f66a6b6629705cf78c52Mark Andrewsmasters�<em class="replaceable"><code>string</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson (�<em class="replaceable"><code>masters</code></em>�|�<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
524222cfb8dd5fb895e3c9005016019f786cf1faStephen Jacob <em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
bb01a40e659564bcb9571eca0319762eb20b7a01Andreas Gustafssonserver�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
bb01a40e659564bcb9571eca0319762eb20b7a01Andreas Gustafsson bogus�<em class="replaceable"><code>boolean</code></em>;<br>
4137fd1295f3c6242a1c641352c8811378912820Andreas Gustafsson edns�<em class="replaceable"><code>boolean</code></em>;<br>
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington edns-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
bb01a40e659564bcb9571eca0319762eb20b7a01Andreas Gustafsson max-udp-size�<em class="replaceable"><code>integer</code></em>;<br>
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington provide-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
4137fd1295f3c6242a1c641352c8811378912820Andreas Gustafsson request-ixfr�<em class="replaceable"><code>boolean</code></em>;<br>
4137fd1295f3c6242a1c641352c8811378912820Andreas Gustafsson keys�<em class="replaceable"><code>server_key</code></em>;<br>
53aba5065d2ee3c103912ecfe865418bad6fa576Brian Wellington transfers�<em class="replaceable"><code>integer</code></em>;<br>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington transfer-format�(�many-answers�|�one-answer�);<br>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington transfer-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)<br>
c40265eba0c99708887d68e67901924065ba2514Brian Wellington [<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
<em class="replaceable"><code>domain_name</code></em>�<em class="replaceable"><code>flags</code></em>�<em class="replaceable"><code>protocol</code></em>�<em class="replaceable"><code>algorithm</code></em>�<em class="replaceable"><code>key</code></em>;�...�<br>
inet�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>]<br>
[<span class="optional">�keys�{�<em class="replaceable"><code>string</code></em>;�...�}�</span>];<br>
category�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>;<br>
listen-on�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
listen-on-v6�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
tkey-dhkey�<em class="replaceable"><code>quoted_string</code></em>�<em class="replaceable"><code>integer</code></em>;<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
view�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
server�(�<em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em>�|�<em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em>�)�{<br>
<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>integer</code></em>�<em class="replaceable"><code>quoted_string</code></em>;�...<br>
topology�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�not�implemented<br>
[<span class="optional">�class�<em class="replaceable"><code>string</code></em>�</span>]�[<span class="optional">�type�<em class="replaceable"><code>string</code></em>�</span>]<br>
[<span class="optional">�name�<em class="replaceable"><code>quoted_string</code></em>�</span>]�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>string</code></em>;�...<br>
query-source�(�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
query-source-v6�(�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�|�[<span class="optional">�address�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�</span>]�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
suppress-initial-notify�<em class="replaceable"><code>boolean</code></em>;�//�not�yet�implemented<br>
dual-stack-servers�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>quoted_string</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�);�...<br>
root-delegation-only�[<span class="optional">�exclude�{�<em class="replaceable"><code>quoted_string</code></em>;�...�}�</span>];<br>
disable-algorithms�<em class="replaceable"><code>string</code></em>�{�<em class="replaceable"><code>string</code></em>;�...�};<br>
dnssec-lookaside�<em class="replaceable"><code>string</code></em>�trust-anchor�<em class="replaceable"><code>string</code></em>;<br>
dnssec-must-be-secure�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>boolean</code></em>;<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
allow-v6-synthesis�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};�//�obsolete<br>
zone�<em class="replaceable"><code>string</code></em>�<em class="replaceable"><code>optional_class</code></em>�{<br>
masters�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
<em class="replaceable"><code>ipv4_address</code></em>�[<span class="optional">port�<em class="replaceable"><code>integer</code></em></span>]�|<br>
<em class="replaceable"><code>ipv6_address</code></em>�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�)�[<span class="optional">�key�<em class="replaceable"><code>string</code></em>�</span>];�...<br>
allow-update-forwarding�{�<em class="replaceable"><code>address_match_element</code></em>;�...�};<br>
notify-source�(�<em class="replaceable"><code>ipv4_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
notify-source-v6�(�<em class="replaceable"><code>ipv6_address</code></em>�|�*�)�[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
also-notify�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{�(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)<br>
[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...�};<br>
forwarders�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>]�{<br>
(�<em class="replaceable"><code>ipv4_address</code></em>�|�<em class="replaceable"><code>ipv6_address</code></em>�)�[<span class="optional">�port�<em class="replaceable"><code>integer</code></em>�</span>];�...<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>
[<span class="optional">�port�(�<em class="replaceable"><code>integer</code></em>�|�*�)�</span>];<br>