286N/A - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") 286N/A - Permission to use, copy, modify, and/or distribute this software for any 286N/A - purpose with or without fee is hereby granted, provided that the above 286N/A - copyright notice and this permission notice appear in all copies. 286N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 286N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 286N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 286N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 286N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 286N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 286N/A - PERFORMANCE OF THIS SOFTWARE. 286N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
286N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
286N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><
div class="refentry" lang="en">
286N/A<
a name="id2476274"></
a><
div class="titlepage"></
div>
286N/A<
div class="refnamediv">
286N/A<
p><
code class="filename">
named.conf</
code> — configuration file for named</
p>
286N/A<
div class="refsynopsisdiv">
286N/A<
div class="cmdsynopsis"><
p><
code class="command">
named.conf</
code> </
p></
div>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543354"></
a><
h2>DESCRIPTION</
h2>
286N/A <
span><
strong class="command">named</
strong></
span>. Statements are enclosed
286N/A in braces and terminated with a semi-colon. Clauses in
286N/A the statements are also semi-colon terminated. The usual
286N/A comment styles are supported:
286N/A C++ style: // to end of line
286N/A Unix style: # to end of line
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543382"></
a><
h2>ACL</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/Aacl�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543398"></
a><
h2>KEY</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/Akey�<
em class="replaceable"><
code>domain_name</
code></
em>�{<
br>
286N/A algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543417"></
a><
h2>MASTERS</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/Amasters�<
em class="replaceable"><
code>string</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
286N/A (�<
em class="replaceable"><
code>masters</
code></
em>�|�<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
286N/A <
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543463"></
a><
h2>SERVER</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/Aserver�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
286N/A bogus�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A edns�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A keys�<
em class="replaceable"><
code>server_key</
code></
em>;<
br>
286N/A transfers�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfer-format�(�many-answers�|�one-answer�);<
br>
286N/A transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A support-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543531"></
a><
h2>TRUSTED-KEYS</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A <
em class="replaceable"><
code>domain_name</
code></
em>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543557"></
a><
h2>MANAGED-KEYS</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A <
em class="replaceable"><
code>domain_name</
code></
em>�<
code class="constant">initial-key</
code>�<
em class="replaceable"><
code>flags</
code></
em>�<
em class="replaceable"><
code>protocol</
code></
em>�<
em class="replaceable"><
code>algorithm</
code></
em>�<
em class="replaceable"><
code>key</
code></
em>;�...�<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543586"></
a><
h2>CONTROLS</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A inet�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>]<
br>
286N/A allow�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�}<
br>
286N/A [<
span class="optional">�keys�{�<
em class="replaceable"><
code>string</
code></
em>;�...�}�</
span>];<
br>
286N/A unix�<
em class="replaceable"><
code>unsupported</
code></
em>;�//�not�implemented<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543621"></
a><
h2>LOGGING</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A channel�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
286N/A file�<
em class="replaceable"><
code>log_file</
code></
em>;<
br>
286N/A syslog�<
em class="replaceable"><
code>optional_facility</
code></
em>;<
br>
286N/A severity�<
em class="replaceable"><
code>log_severity</
code></
em>;<
br>
286N/A print-time�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A print-severity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A print-category�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A category�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543659"></
a><
h2>LWRES</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
286N/A (�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
286N/A view�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>;<
br>
286N/A search�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
286N/A ndots�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2543701"></
a><
h2>OPTIONS</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/A avoid-v4-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
286N/A avoid-v6-udp-ports�{�<
em class="replaceable"><
code>port</
code></
em>;�...�};<
br>
286N/A blackhole�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A coresize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A datasize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A dump-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A files�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A heartbeat-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A host-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�implemented<
br>
286N/A host-statistics-max�<
em class="replaceable"><
code>number</
code></
em>;�//�not�implemented<
br>
286N/A hostname�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
286N/A interface-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A listen-on�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A listen-on-v6�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A match-mapped-addresses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A memstatistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A pid-file�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
286N/A port�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A querylog�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A recursing-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A reserved-sockets�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A random-device�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A recursive-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A serial-query-rate�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A server-id�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�|;<
br>
286N/A stacksize�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A statistics-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A statistics-interval�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�yet�implemented<
br>
286N/A tcp-clients�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A tcp-listen-queue�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A tkey-dhkey�<
em class="replaceable"><
code>quoted_string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A tkey-gssapi-credential�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A tkey-gssapi-keytab�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A tkey-domain�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A transfers-per-ns�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfers-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfers-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A use-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A version�(�<
em class="replaceable"><
code>quoted_string</
code></
em>�|�none�);<
br>
286N/A allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
286N/A auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
286N/A minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A [<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
286N/A [<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
286N/A provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
286N/A additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A resolver-query-timeout�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
286N/A lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfer-format�(�many-answers�|�one-answer�);<
br>
286N/A max-cache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A max-acache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
286N/A max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
286N/A check-names�(�master�|�slave�|�response�)<
br>
286N/A (�fail�|�warn�|�ignore�);<
br>
286N/A check-mx�(�fail�|�warn�|�ignore�);<
br>
286N/A check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
286N/A check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
286N/A cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
286N/A suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
286N/A preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
286N/A (�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
286N/A <
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
286N/A <
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
286N/A edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
286N/A disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
286N/A dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-lookaside�(�<
em class="replaceable"><
code>auto</
code></
em>�|�<
em class="replaceable"><
code>no</
code></
em>�|�<
em class="replaceable"><
code>domain</
code></
em>�trust-anchor�<
em class="replaceable"><
code>domain</
code></
em>�);<
br>
286N/A dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dns64-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dns64-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dns64�<
em class="replaceable"><
code>prefix</
code></
em>�{<
br>
286N/A clients�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A exclude�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A mapped�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A break-dnssec�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A suffix�<
em class="replaceable"><
code>ipv6_address</
code></
em>;<
br>
286N/A empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
286N/A ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
286N/A allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A masterfile-format�(�text�|�raw�);<
br>
286N/A notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
286N/A notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
286N/A notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
286N/A [<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
286N/A [<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
286N/A allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A forward�(�first�|�only�);<
br>
286N/A forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
286N/A (�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
286N/A max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
286N/A max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A sig-re-signing-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A sig-signing-nodes�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A sig-signing-signatures�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A sig-signing-type�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
286N/A [<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A managed-keys-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A auto-dnssec�<
code class="constant">allow</
code>|<
code class="constant">maintain</
code>|<
code class="constant">create</
code>|<
code class="constant">off</
code>;<
br>
286N/A try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A deny-answer-addresses�{<
br>
286N/A <
em class="replaceable"><
code>address_match_list</
code></
em><
br>
286N/A }�[<
span class="optional">�except-from�{�<
em class="replaceable"><
code>namelist</
code></
em>�}�</
span>];<
br>
286N/A deny-answer-aliases�{<
br>
286N/A <
em class="replaceable"><
code>namelist</
code></
em><
br>
286N/A }�[<
span class="optional">�except-from�{�<
em class="replaceable"><
code>namelist</
code></
em>�}�</
span>];<
br>
286N/A nsec3-test-zone�<
em class="replaceable"><
code>boolean</
code></
em>;��//�testing�only<
br>
286N/A allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
286N/A deallocate-on-exit�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A fake-iquery�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A has-old-clients�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
286N/A multiple-cnames�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A named-xfer�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
286N/A serial-queries�<
em class="replaceable"><
code>integer</
code></
em>;�//�obsolete<
br>
286N/A treat-cr-as-space�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A use-id-pool�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
286N/A<
div class="refsect1" lang="en">
286N/A<
a name="id2544582"></
a><
h2>VIEW</
h2>
286N/A<
div class="literallayout"><
p><
br>
286N/Aview�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
286N/A match-clients�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A match-destinations�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A match-recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A key�<
em class="replaceable"><
code>string</
code></
em>�{<
br>
286N/A algorithm�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A secret�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
286N/A server�(�<
em class="replaceable"><
code>ipv4_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address[<
span class="optional">/prefixlen</
span>]</
code></
em>�)�{<
br>
286N/A <
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
286N/A [<
span class="optional">...</
span>]<
br>
286N/A allow-recursion�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A allow-recursion-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A sortlist�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
286N/A topology�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�not�implemented<
br>
286N/A auth-nxdomain�<
em class="replaceable"><
code>boolean</
code></
em>;�//�default�changed<
br>
286N/A minimal-responses�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A recursion�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A [<
span class="optional">�class�<
em class="replaceable"><
code>string</
code></
em>�</
span>]�[<
span class="optional">�type�<
em class="replaceable"><
code>string</
code></
em>�</
span>]<
br>
286N/A [<
span class="optional">�name�<
em class="replaceable"><
code>quoted_string</
code></
em>�</
span>]�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>string</
code></
em>;�...<
br>
286N/A provide-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A rfc2308-type1�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
286N/A additional-from-auth�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A additional-from-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A query-source�(�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A query-source-v6�(�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�|�[<
span class="optional">�address�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�</
span>]�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
286N/A use-queryport-pool�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A queryport-pool-ports�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A queryport-pool-updateinterval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A cleaning-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A resolver-query-timeout�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A min-roots�<
em class="replaceable"><
code>integer</
code></
em>;�//�not�implemented<
br>
286N/A lame-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-ncache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-cache-ttl�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A transfer-format�(�many-answers�|�one-answer�);<
br>
286N/A max-cache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A max-acache-size�<
em class="replaceable"><
code>size</
code></
em>;<
br>
286N/A clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
286N/A max-clients-per-query�<
em class="replaceable"><
code>number</
code></
em>;<
br>
286N/A check-names�(�master�|�slave�|�response�)<
br>
286N/A (�fail�|�warn�|�ignore�);<
br>
286N/A check-mx�(�fail�|�warn�|�ignore�);<
br>
286N/A check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
286N/A check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
286N/A cache-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�test�option<
br>
286N/A suppress-initial-notify�<
em class="replaceable"><
code>boolean</
code></
em>;�//�not�yet�implemented<
br>
286N/A preferred-glue�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dual-stack-servers�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
286N/A (�<
em class="replaceable"><
code>quoted_string</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
286N/A <
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
286N/A <
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�);�...<
br>
286N/A edns-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A max-udp-size�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
286N/A root-delegation-only�[<
span class="optional">�exclude�{�<
em class="replaceable"><
code>quoted_string</
code></
em>;�...�}�</
span>];<
br>
286N/A disable-algorithms�<
em class="replaceable"><
code>string</
code></
em>�{�<
em class="replaceable"><
code>string</
code></
em>;�...�};<
br>
286N/A dnssec-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-validation�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-lookaside�(�<
em class="replaceable"><
code>auto</
code></
em>�|�<
em class="replaceable"><
code>no</
code></
em>�|�<
em class="replaceable"><
code>domain</
code></
em>�trust-anchor�<
em class="replaceable"><
code>domain</
code></
em>�);<
br>
286N/A dnssec-must-be-secure�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dnssec-accept-expired�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A dns64-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dns64-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
286N/A dns64�<
em class="replaceable"><
code>prefix</
code></
em>�{<
br>
286N/A clients�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A exclude�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A mapped�{�<
font color="red"><replacable>acl</replacable></
font>;�};<
br>
286N/A break-dnssec�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A recursive-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
286N/A suffix�<
em class="replaceable"><
code>ipv6_address</
code></
em>;<
br>
empty-server�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-contact�<
em class="replaceable"><
code>string</
code></
em>;<
br>
empty-zones-enable�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
disable-empty-zone�<
em class="replaceable"><
code>string</
code></
em>;<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>ixfrdiff</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-cache-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
masterfile-format�(�text�|�raw�);<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
[<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zero-no-soa-ttl-cache�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-v6-synthesis�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};�//�obsolete<
br>
fetch-glue�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545298"></
a><
h2>ZONE</
h2>
<
div class="literallayout"><
p><
br>
zone�<
em class="replaceable"><
code>string</
code></
em>�<
em class="replaceable"><
code>optional_class</
code></
em>�{<
br>
type�(�master�|�slave�|�stub�|�hint�|�redirect�|<
br>
forward�|�delegation-only�);<
br>
file�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
masters�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>masters</
code></
em>�|<
br>
<
em class="replaceable"><
code>ipv4_address</
code></
em>�[<
span class="optional">port�<
em class="replaceable"><
code>integer</
code></
em></
span>]�|<
br>
<
em class="replaceable"><
code>ipv6_address</
code></
em>�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�)�[<
span class="optional">�key�<
em class="replaceable"><
code>string</
code></
em>�</
span>];�...<
br>
database�<
em class="replaceable"><
code>string</
code></
em>;<
br>
delegation-only�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-names�(�fail�|�warn�|�ignore�);<
br>
check-mx�(�fail�|�warn�|�ignore�);<
br>
check-integrity�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
check-mx-cname�(�fail�|�warn�|�ignore�);<
br>
check-srv-cname�(�fail�|�warn�|�ignore�);<
br>
dialup�<
em class="replaceable"><
code>dialuptype</
code></
em>;<
br>
ixfr-from-differences�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
journal�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
zero-no-soa-ttl�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-secure-to-insecure�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
allow-query�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-query-on�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-transfer�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
allow-update-forwarding�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
update-policy�<
em class="replaceable"><
code>local</
code></
em>�|�<
em class="replaceable"><
code>�{<
br>
(�grant�|�deny�)�<
em class="replaceable"><
code>string</
code></
em><
br>
(�name�|�subdomain�|�wildcard�|�self�|�selfsub�|�selfwild�|<
br>
������������������krb5-self�|�ms-self�|�krb5-subdomain�|�ms-subdomain�|<
br>
��tcp-self�|�zonesub�|�6to4-self�)�<
em class="replaceable"><
code>string</
code></
em><
br>
<
em class="replaceable"><
code>rrtypelist</
code></
em>;<
br>
[<
span class="optional">...</
span>]<
br>
update-check-ksk�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
dnssec-dnskey-kskonly�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
masterfile-format�(�text�|�raw�);<
br>
notify�<
em class="replaceable"><
code>notifytype</
code></
em>;<
br>
notify-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)�[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
notify-delay�<
em class="replaceable"><
code>seconds</
code></
em>;<
br>
notify-to-soa�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
also-notify�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)<
br>
[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
[<
span class="optional">�key�<
em class="replaceable"><
code>keyname</
code></
em>�</
span>]�...�};<
br>
allow-notify�{�<
em class="replaceable"><
code>address_match_element</
code></
em>;�...�};<
br>
forward�(�first�|�only�);<
br>
forwarders�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>]�{<
br>
(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�<
em class="replaceable"><
code>ipv6_address</
code></
em>�)�[<
span class="optional">�port�<
em class="replaceable"><
code>integer</
code></
em>�</
span>];�...<
br>
max-journal-size�<
em class="replaceable"><
code>size_no_default</
code></
em>;<
br>
max-transfer-time-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-time-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-in�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-transfer-idle-out�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-retry-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
max-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
min-refresh-time�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
multi-master�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
request-ixfr�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
sig-validity-interval�<
em class="replaceable"><
code>integer</
code></
em>;<
br>
transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source�(�<
em class="replaceable"><
code>ipv4_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
alt-transfer-source-v6�(�<
em class="replaceable"><
code>ipv6_address</
code></
em>�|�*�)<
br>
[<
span class="optional">�port�(�<
em class="replaceable"><
code>integer</
code></
em>�|�*�)�</
span>];<
br>
use-alt-transfer-source�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
zone-statistics�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
try-tcp-refresh�<
em class="replaceable"><
code>boolean</
code></
em>;<
br>
key-directory�<
em class="replaceable"><
code>quoted_string</
code></
em>;<
br>
nsec3-test-zone�<
em class="replaceable"><
code>boolean</
code></
em>;��//�testing�only<
br>
ixfr-base�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
ixfr-tmp-file�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
maintain-ixfr-base�<
em class="replaceable"><
code>boolean</
code></
em>;�//�obsolete<
br>
max-ixfr-log-size�<
em class="replaceable"><
code>size</
code></
em>;�//�obsolete<
br>
pubkey�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>integer</
code></
em>�<
em class="replaceable"><
code>quoted_string</
code></
em>;�//�obsolete<
br>
<
div class="refsect1" lang="en">
<
a name="id2545687"></
a><
h2>FILES</
h2>
<
div class="refsect1" lang="en">
<
a name="id2545699"></
a><
h2>SEE ALSO</
h2>
<
p><
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">named-checkconf</
span>(8)</
span>,
<
span class="citerefentry"><
span class="refentrytitle">rndc</
span>(8)</
span>,
<
em class="citetitle">BIND 9 Administrator Reference Manual</
em>.