Bv9ARM.ch06.html revision 5f09ce124cad9712a9675f17f83ddc915e734909
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>BIND 9 Configuration Reference</TITLE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="GENERATOR"
841179549b6433e782c164a562eb3422f603533dAndreas GustafssonCONTENT="Modular DocBook HTML Stylesheet Version 1.41"><LINK
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="The BIND 9 Lightweight Resolver"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="BIND 9 Security Considerations"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBGCOLOR="#FFFFFF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTEXT="#000000"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVLINK="#840084"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALINK="#0000FF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="NAVHEADER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLSPACING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="chapter"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Chapter 6. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 Configuration Reference</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Table of Contents</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Configuration File Elements</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#Configuration_File_Grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Configuration File Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Zone File</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 configuration is broadly similar to <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonthere are a few new areas of configuration, such as views. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson8.x configuration files should work with few alterations in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson9, although more complex configurations should be reviewed to check
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif they can be more efficiently implemented using the new features
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefound in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4 configuration files can be converted to the new format
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusing the shell script
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1. Configuration File Elements</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following is a list of elements used throughout the <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefile documentation:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The name of an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefined by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A list of one or more <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip_prefix</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>acl_name</TT
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> elements, see
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#address_match_lists"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.1.1</A
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A quoted string which will be used as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea DNS name, for example "<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dotted_decimal</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>One or more integers valued 0 through
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce255 separated only by dots (`.'), such as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>89.123.45.67</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip4_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IPv4 address with exactly four elements
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dotted_decimal</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> notation.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip6_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IPv6 address, such as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fe80::200:f8ff:fe01:9742</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip4_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip6_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IP port <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is limited to 0 through 65535, with values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebelow 1024 typically restricted to root-owned processes. In some
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecases an asterisk (`*') character can be used as a placeholder to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceselect a random high-numbered port.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IP network specified as an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefollowed by a slash (`/') and then the number of bits in the netmask.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTrailing zeros in a <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> may omitted.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example, <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the network <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>127.0.0.0</B
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric LuceCLASS="command"
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric Luce>255.0.0.0</B
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> with netmask <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>255.255.255.240</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> representing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe name of a shared key, to be used for transaction security.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>key_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A list of one or more <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceseparated by semicolons and ending with a semicolon.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A non-negative integer with an entire
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerange limited by the range of a C language signed integer (2,147,483,647
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon a machine with 32 bit integers). Its acceptable value might further
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe limited by the context in which it is used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A quoted string which will be used as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea pathname, such as <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A number, the word <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor the word <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is that of unsigned long integers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the machine. An <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> requests unlimited
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonuse, or the maximum available amount. A <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe limit that was in force when the server was started.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptionally be followed by a scaling factor: <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucekilobytes, <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemegabytes, and <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> for gigabytes,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich scale by 1024, 1024*1024, and 1024*1024*1024 respectively.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestorage overflow is currently silently ignored during conversion
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof scaled values, resulting in values less than intended, possibly
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeven negative. Using <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> is the best way
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonto safely set a really large number.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe words <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucealso accepted, as are the numbers <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="varname"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>dialup_option</TT
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>notify-passive</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonWhen used in a zone, <TT
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>notify-passive</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonare restricted to slave and stub zones.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="address_match_lists"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1. Address Match Lists</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1185"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1.1. Syntax</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> = address_match_list_element ;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address_match_list_element; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list_element</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] (ip_address [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/length</SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key key_id | acl_name | { address_match_list } )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1193"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1.2. Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Address match lists are primarily used to determine access
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrol for various server operations. They are also used to define
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepriorities for querying other nameservers and to set the addresses
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will listen for queries. The elements
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich constitute an address match list can be any of the following:</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>an IP address (IPv4 or IPv6)</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>an IP prefix (in the `/'-notation)</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a key ID, as defined by the key statement</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the name of an address match list previously defined with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>a nested address match list enclosed in braces</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Elements can be negated with a leading exclamation mark (`!')
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the match list names "any," "none," "localhost" and "localnets"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare predefined. More information on those names can be found in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe description of the acl statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The addition of the key clause made the name of this syntactic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceelement something of a misnomer, since security keys can be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto validate access without regard to a host or network address. Nonetheless,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe term "address match list" is still used throughout the documentation.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When a given IP address or prefix is compared to an address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematch list, the list is traversed in order until an element matches.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe interpretation of a match depends on whether the list is being used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor access control, defining listen-on ports, or as a topology,
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonand whether the element was negated.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When used as an access control list, a non-negated match allows
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaccess and a negated match denies access. If there is no match,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaccess is denied. The clauses <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>blackhole</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuse address match lists this. Similarly, the listen-on option will cause
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server to not accept queries on any of the machine's addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich do not match the list.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>When used with the topology clause, a non-negated match returns
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssona distance based on its position on the list (the closer the match
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonis to the start of the list, the shorter the distance is between
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceit and the server). A negated match will be assigned the maximum
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedistance from the server. If there is no match, the address will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceget a distance which is further than any non-negated list element,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand closer than any negated element.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>Because of the first-match aspect of the algorithm, an element
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat defines a subset of another element in the list should come
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebefore the broader element, regardless of whether either is negated. For
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="command"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas Gustafsson> the 1.2.3.13 element is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecompletely useless because the algorithm will match any lookup for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat problem by having 1.2.3.13 blocked by the negation but all
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceother 1.2.3.* hosts fall through.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1221"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2. Comment Syntax</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 comment syntax allows for comments to appear
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce anywhere that white space may appear in a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file. To appeal to programmers of all kinds, they can be written
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1226"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2.1. Syntax</A
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/* This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> comment as in C */</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>// This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> comment as in C++</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce># This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> comment as in common UNIX shells and perl</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1235"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2.2. Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Comments may appear anywhere that whitespace may appear in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C-style comments start with the two characters /* (slash,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestar) and end with */ (star, slash). Because they are completely
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedelimited with these characters, they can be used to comment only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea portion of a line or to span multiple lines.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C-style comments cannot be nested. For example, the following
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonis not valid because the entire comment ends with the first */:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/* This is the start of a comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This is still part of the comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce/* This is an incorrect attempt at nesting a comment. */
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This is no longer in any comment. */
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C++-style comments start with the two characters // (slash,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceslash) and continue to the end of the physical line. They cannot
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe continued across multiple physical lines; to have one logical
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecomment span multiple lines, each line must use the // pair.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>// This is the start of a comment. The next line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// is a new comment, even though it is logically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// part of the previous comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Shell-style (or perl-style, if you prefer) comments start
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith the character <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (number sign) and continue to the end of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucephysical line, as in C++ comments.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce># This is the start of a comment. The next line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce# is a new comment, even though it is logically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce# part of the previous comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="warning"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="warning"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="CENTER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>WARNING: you cannot use the semicolon (`;') character
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to start a comment such as you would in a zone file. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce semicolon indicates the end of a configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="Configuration_File_Grammar"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>6.2. Configuration File Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 configuration consists of statements and comments.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Statements end with a semicolon. Statements and comments are the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce only elements that can appear without enclosing braces. Many
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statements contain a block of substatements, which are also
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce terminated with a semicolon.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following statements are supported:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a named IP address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematching list, for access control and other uses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>declares control channels to be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> utility.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>includes a file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>specifies key information for use in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceauthentication and authorization using TSIG.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>specifies what the server logs, and where
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe log messages are sent.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>controls global server configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions and sets defaults for other statements.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sets certain configuration options on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea per-server basis.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>trusted-keys</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines trusted DNSSEC keys.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a view.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a zone.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements may only occur once per
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1328"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address_match_list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement assigns a symbolic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce name to an address match list. It gets its name from a primary
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use of address match lists: Access Control Lists (ACLs).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Note that an address match list's name must be defined
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> before it can be used elsewhere; no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward references are allowed.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following ACLs are built-in:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches no hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>localhost</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches the IP addresses of all interfaces
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the system.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>localnets</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches any host on a network for which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe system has an interface.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1370"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce inet ( ip_addr | * ) [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
4e99bcb0603f3270ff89323d149a1fbc668e7da0Andreas Gustafsson> port ip_port </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson> address_match_list </I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
4e99bcb0603f3270ff89323d149a1fbc668e7da0Andreas GustafssonCLASS="optional"
4e99bcb0603f3270ff89323d149a1fbc668e7da0Andreas Gustafsson> inet ...; </SPAN
4e99bcb0603f3270ff89323d149a1fbc668e7da0Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement declares control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channels to be used by system administrators to affect the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce operation of the local nameserver. These control channels are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce used by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> utility to send commands to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and retrieve non-DNS results from a nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce socket accessible to the Internet, created at the specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> on the specified
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. If no port is specified, port 953
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is used by default. "*" cannot be used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The ability to issue commands over the control channel is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce restricted by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clauses. Connections to the control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channel are permitted based on the address permissions in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce members of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson ignored, and instead are interpreted independently based the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is allowed to be used to
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson authenticate commands and responses given over the control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channel by digitally signing each message between the server and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a command client (See <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Remote Name Daemon Control application</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch03.html#admin_tools"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Section 3.4.1.2</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>). All commands to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce control channel must be signed by one of its specified keys to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce be honored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> For the initial release of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9.0.0, only one command
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is possible over the command channel, the command to reload the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce server. We will expand command set in future releases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The UNIX control channel type of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> 8 is not supported
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> 9.0.0, and is not expected to be added in future
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson releases. If it is present in the controls statement from a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> 8 configuration file, a non-fatal warning will be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> Statement Grammar</A
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="sect2"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson> statement inserts the
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson specified file at the point that the <B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson statement is encountered. The <B
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson statement facilitates the administration of configuration files
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson by permitting the reading or writing of some things but not
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson others. For example, the statement could include private keys
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson that are readable only by a nameserver.</P
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson> Statement Grammar</A
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="programlisting"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington algorithm <TT
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="replaceable"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonNAME="AEN1426"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> Statement Definition and Usage</A
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="command"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson> statement defines a shared
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson secret key for use with TSIG, see <A
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>Section 4.4</A
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="replaceable"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>, also known as the
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson key name, is a domain name uniquely identifying the key. It can
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson be used in a "server" statement to cause requests sent to that
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson server to be signed with this key, or in address match lists to
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson verify that incoming requests have been signed with a key
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson matching this name, algorithm, and secret.</P
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="replaceable"
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson>algorithm_id</I
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson that specifies a security/authentication algorithm. The only
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas Gustafsson algorithm currently supported with TSIG authentication is
33682c92e96b39c395cdb2c3feb8eb5914e7d5a8Andreas GustafssonCLASS="literal"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington>secret_string</I
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> is the secret to be
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington used by the algorithm, and is treated as a base-64 encoded
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonNAME="AEN1438"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> Statement Grammar</A
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="programlisting"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel_name</I
5dccc8b2a55f0222ffda0ff0a981bad4eb0563beAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>syslog_facility</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>critical</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-category</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-severity</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>category_name</I
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="replaceable"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>channel_name</I
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="replaceable"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafsson>channel_nam</I
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="command"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafsson> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement configures a wide
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevariety of logging options for the nameserver. Its <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonassociates output methods, format options and severity levels with
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssona name that can then be used with the <B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafssonto select how various classes of messages are logged.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is used to define
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas many channels and categories as are wanted. If there is no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafssonthe logging configuration will be:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce category "default" { "default_syslog"; "default_debug"; };
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9, the logging configuration is only established when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe entire configuration file has been parsed. In <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonestablished as soon as the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas parsed. When the server is starting up, all logging messages
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceregarding syntax errors in the configuration file go to the default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannels, or to standard error if the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas specified.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1494"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.10.1. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>All log output goes to one or more <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyou can make as many of them as you want.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Every channel definition must include a clause that says whether
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessages selected for the channel go to a file, to a particular
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesyslog facility, or are discarded. It can optionally also limit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe message severity level that will be accepted by the channel
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(the default is <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>), and whether to include
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>-generated time stamp, the category name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand/or severity level (the default is not to include any).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> as the destination option
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the channel will cause all messages sent to it to be discarded;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein that case, other options for the channel are meaningless.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause can include limitations
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonboth on how large the file is allowed to become, and how many versions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the file will be saved each time the file is opened.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> option for files is simply a hard
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonceiling on log growth. If the file ever exceeds the size, then <B
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonnot write anything more to it until the file is reopened; exceeding
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonthe size does not automatically trigger a reopen. The default behavior
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not to limit the size of the file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If you use the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> log file option,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will retain that many backup versions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the file by renaming them when opening. For example, if you choose
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto keep 3 old versions of the file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucejust before it is opened <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerenamed to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerenamed to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. No rolled versions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare kept by default; any existing log file is simply appended. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis synonymous with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> in current <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> releases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Example usage of the size and versions options:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "an_example_channel" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file "example.log" versions 3 size 20m;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-time yes;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-category yes;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The argument for the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesyslog facility as described in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will handle messages sent to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis facility is described in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepage. If you have a system which uses a very old version of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly uses two arguments to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>openlog()</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethen this clause is silently ignored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause works like <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"priorities," except that they can also be used if you are writing
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonstraight to a file rather than using <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonMessages which are not at least of the severity level given will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenot be selected for the channel; messages of higher severity levels
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be accepted.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If you are using <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill also determine what eventually passes through. For example,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefining a channel facility and severity as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly logging <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecause messages of severity <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe dropped. If the situation were reversed, with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessages of only <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> or higher, then <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprint all messages it received from the channel.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server can supply extensive debugging information when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceit is in debugging mode. If the server's global debug level is greater
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethan zero, then debugging mode will be active. The global debug
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelevel is set either by starting the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> flag followed by a positive integer,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor by running <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemethod is not yet implemented</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> The global debug level
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssoncan be set to zero, and debugging mode turned off, by running <B
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>. All debugging messages in the server have a debug
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonlevel, and higher debug levels give more detailed output. Channels
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat specify a specific debug severity, for example:</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="programlisting"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>channel "specific_debug_level" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity debug 3;
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>will get debugging output of level 3 or less any time the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver is in debugging mode, regardless of the global debugging
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelevel. Channels with <B
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> severity use the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver's global level to determine what messages to print.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> has been turned on, then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe date and time will be logged. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe specified for a <B
79bc63f0061bf2da3e1775d8c2312c5938cdc9f1Andreas GustafssonCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> channel, but is usually
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepointless since <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> also prints the date and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-category</B
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> is requested, then the
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafssoncategory of the message will be logged as well. Finally, if <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-severity</B
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafssonon, then the severity level of the message will be logged. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> options may
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe used in any combination, and will always be printed in the following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceorder: time, category, severity. Here is an example where all three <B
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="computeroutput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>28-Feb-2000 15:05:32.863 general: notice: running</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>There are four predefined channels that are used for
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas GustafssonCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>'s default logging as follows. How they are
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas Gustafssonused is described in <A
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas GustafssonHREF="Bv9ARM.ch06.html#the_category_phrase"
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas Gustafsson>Section 6.2.10.2</A
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas GustafssonCLASS="programlisting"
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas Gustafsson>channel "default_syslog" {
ed45f92d10a8b4cdb7d2e5523f9f3f1c5f4b7ae4Andreas Gustafsson syslog daemon; // end to syslog's daemon
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson severity info; // only send priority info
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafssonchannel "default_debug" {
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson file "named.run"; // write to named.run in
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // the working directory
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // Note: stderr is used instead
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // if the server is started
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // with the '-f' option.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson severity dynamic // log at the server's
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // current debug level
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafssonchannel "default_stderr" { // writes to stderr
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson file "<stderr>"; // this is illustrative only;
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // there's currently no way of
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // specifying an internal file
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // descriptor in the
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson // configuration language.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson severity info; // only send priority info
79bc63f0061bf2da3e1775d8c2312c5938cdc9f1Andreas Gustafssonchannel "null" {
79bc63f0061bf2da3e1775d8c2312c5938cdc9f1Andreas Gustafsson null; // toss anything sent to
79bc63f0061bf2da3e1775d8c2312c5938cdc9f1Andreas Gustafsson // this channel
79bc63f0061bf2da3e1775d8c2312c5938cdc9f1Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default_debug</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> channel normally writes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> in the server's working
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedirectory. For security reasons, when the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecommand line option is used, the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis created only after <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has changed to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenew UID, and any debug output generated while <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestarting up and still running as root is discarded. If you need
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto capture this output, you must run the server with the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoption and redirect standard error to a file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Once a channel is defined, it cannot be redefined. Thus you
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecannot alter the built-in channels directly, but you can modify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe default logging by pointing categories at channels you have defined.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="the_category_phrase"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.10.2. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>There are many categories, so you can send the logs you want
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto see wherever you want, without seeing logs you don't want. If
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyou don't specify a list of channels for a category, then log messages
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein that category will be sent to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinstead. If you don't specify a default category, the following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"default default" is used:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>category "default" { "default_syslog"; "default_debug"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>As an example, let's say you want to log security events to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea file, but you also want keep the default logging behavior. You'd
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecify the following:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "my_security_channel" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file "my_security_file";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity info;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategory "security" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "my_security_channel";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "default_syslog";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "default_debug";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>To discard all messages in a category, specify the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> channel:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>category "xfer-out" { "null"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategory "notify" { "null"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following are the available categories and brief descriptions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the types of log information they contain. More
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategories may be added in future <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> releases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="CALSTABLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The default category defines the logging
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions for those categories where no specific configuration has been
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The catch-all. Many things still aren't
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceclassified into categories, and they all end up here.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Messages relating to the databases used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinternally by the name server to store zone and cache data.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Approval and denial of requests.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Configuration file parsing and processing.</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas GustafssonCLASS="command"
7c0ebe385b36d64c2424dd5a3e62d441c08e7037Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>DNS resolution, such as the recursive
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafssonlookups performed on behalf of clients by a caching name server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
7c0ebe385b36d64c2424dd5a3e62d441c08e7037Andreas Gustafsson>Zone transfers the server is receiving.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Zone transfers the server is sending.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The NOTIFY protocol.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Processing of client requests.</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Network operations.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Dynamic updates.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1671"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This is the grammar of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement in the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> version <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>version_string</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> directory <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> named-xfer <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> tkey-domain <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domainname</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> tkey-dhkey <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> dump-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> memstatistics-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> pid-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statistics-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> auth-nxdomain <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> deallocate-on-exit <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dialup_option</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> fake-iquery <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> fetch-glue <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has-old-clients <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> host-statistics <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> multiple-cnames <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> recursion <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="optional"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> rfc2308-type1 <TT
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="optional"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> use-id-pool <TT
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="replaceable"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="optional"
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington> maintain-ixfr-base <TT
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian WellingtonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> forward ( <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> forwarders { [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> check-names ( <TT
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
4e99bcb0603f3270ff89323d149a1fbc668e7da0Andreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson> allow-query { <TT
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson>address_match_list</I
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson> allow-transfer { <TT
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson>address_match_list</I
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson> allow-recursion { <TT
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson>address_match_list</I
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson> blackhole { <TT
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson>address_match_list</I
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafsson> listen-on [<SPAN
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="optional"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> listen-on-v6 [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>address_match_list</I
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> query-source [<SPAN
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> address ( <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> max-transfer-time-in <TT
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> max-transfer-time-out <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> max-transfer-idle-in <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> max-transfer-idle-out <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> tcp-clients <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> recursive-clients <TT
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> serial-queries <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> transfer-format <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>( one-answer | many-answers )</I
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> transfers-in <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> transfers-out <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> transfers-per-ns <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> transfer-source <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> transfer-source-v6 <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="optional"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> also-notify { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
d510e8695ebcce64e515ce756b1cfe8fc3e531efAndreas Gustafsson>] ; ... </SPAN
d510e8695ebcce64e515ce756b1cfe8fc3e531efAndreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-ixfr-log-size <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> coresize <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> datasize <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> stacksize <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> cleaning-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> heartbeat-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> interface-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statistics-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="optional"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer> topology [<SPAN
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="optional"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> sortlist [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> rrset-order [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>order_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>order_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> ; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> lame-ttl <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-ncache-ttl <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-cache-ttl <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas GustafssonCLASS="optional"
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson> sig-validity-interval <TT
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> min-roots <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> use-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> treat-cr-as-space <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> min-refresh-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-refresh-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> min-retry-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-retry-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1851"
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> statement sets up global options
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be used by <SPAN
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. This statement may appear only once in a configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefile. If more than one occurrence is found, the first occurrence
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedetermines the actual options used, and a warning will be generated.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf there is no <B
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson> statement, an options
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafssonblock with each option set to its default will be used.<DIV
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="informaltable"
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The version the server should report
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevia a query of name <TT
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> in class <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is the real version number of this server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>directory</B
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonVALIGN="MIDDLE"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>The working directory of the server.
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonAny non-absolute pathnames in the configuration file will be taken
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonas relative to this directory. The default location for most server
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>) is this directory.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf a directory is not specified, the working directory defaults
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>', the directory from which the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas started. The directory specified should be an absolute path.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>named-xfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="emphasis"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas Gustafsson>This option is obsolete.</I
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonIt was used in <SPAN
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="acronym"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas Gustafsson> 8 to specify the pathname to the <B
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="acronym"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> 9, no separate <B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonneeded; its functionality is built into the name server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>tkey-domain</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The domain appended to the names of all
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceshared keys generated with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. When a client
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerequests a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce> exchange, it may or may not specify
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Lucethe desired name for the key. If present, the name of the shared
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Lucekey will be "<TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="varname"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce>client specified part</TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="varname"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce>tkey-domain</TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceOtherwise, the name of the shared key will be "<TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="varname"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="varname"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce>tkey-domain</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>". In most cases,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domainname</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> should be the server's domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>tkey-dhkey</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The Diffie-Hellman key used by the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto generate shared keys with clients using the Diffie-Hellman mode
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. The server must be able to load the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepublic and private keys from files in the working directory. In
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemost cases, the keyname should be the server's host name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dump-file</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The pathname of the file the server dumps
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe database to when it receives <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ndc dumpdb</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>). If not specified, the default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>memstatistics-file</B
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The pathname of the file the server writes memory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusage statistics to on exit. If not specified, the default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The pathname of the file the server writes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceits process ID in. If not specified, the default is operating system
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedependent, but is usually
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe pid-file is used by programs that want to send signals to the running
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenameserver.</P
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>statistics-file</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The pathname of the file the server appends statistics
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto. If not specified, the default is <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="filename"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonNAME="boolean_options"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>6.2.12.1. Boolean Options</A
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="informaltable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="CALSTABLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>auth-nxdomain</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonis always set on NXDOMAIN responses, even if the server is not actually
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonauthoritative. The default is <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea change from <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8. If you are using very old DNS software, you
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonmay need to set it to <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>deallocate-on-exit</B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>This option was used in <SPAN
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> 8 to enable checking
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonfor memory leaks on exit. <SPAN
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 ignores the option and always performs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe checks.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver treats all zones as if they are doing zone transfers across
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea dial on demand dialup link, which can be brought up by traffic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoriginating from this server. This has different effects according
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto zone type and concentrates the zone maintenance so that it all
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehappens in a short interval, once every <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>heartbeat-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehopefully during the one call. It also suppresses some of the normal
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone maintenance traffic. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemay also be specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein which case it overrides the global <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe zone is a master zone then the server will send out a NOTIFY request
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto all the slaves. This will trigger the zone serial number check
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the slave (providing it supports NOTIFY) allowing the slave to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceverify the zone while the connection is active.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone is a slave or stub zone, then the server will suppress the regular
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"zone up to date" (refresh) queries and only perform them when the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson>heartbeat-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> expires in addition to sending
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNOTIFY requests.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Finer control can be achieved by using
035cd7b5bd983b3845da08680ac311c754809403Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> which only sends NOTIFY messages,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-passive</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> which sends NOTIFY messages and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesuppresses the normal refresh queries, <TT
035cd7b5bd983b3845da08680ac311c754809403Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich suppresses normal refresh processing and send refresh queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>heartbeat-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> expires and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> which just disables normal refresh
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprocessing.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fake-iquery</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8, this option was used to enable simulating
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe obsolete DNS query type IQUERY. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 never does IQUERY simulation.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fetch-glue</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(Information present outside of the authoritative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenodes in the zone is called <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> information).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafsson> (the default), the server will fetch
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafssonglue resource records it doesn't have when constructing the additional
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafssondata section of a response. <B
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="command"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="userinput"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafssonbe used in conjunction with <B
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="command"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprevent the server's cache from growing or becoming corrupted (at
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe cost of requiring more work from the client).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceimplemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>has-old-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option was incorrectly implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8, and is ignored by <SPAN
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="acronym"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson> 9. To achieve the intended effect
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="command"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>has-old-clients</B
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="userinput"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonthe two separate options <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>auth-nxdomain</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="userinput"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>rfc2308-type1</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="userinput"
e250148432865805a3d2fd0029c02af8a67ff266Andreas GustafssonVALIGN="MIDDLE"
e250148432865805a3d2fd0029c02af8a67ff266Andreas GustafssonCLASS="command"
e250148432865805a3d2fd0029c02af8a67ff266Andreas Gustafsson>host-statistics</B
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonVALIGN="MIDDLE"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonCLASS="userinput"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafsson>, then statistics
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare kept for every host that the nameserver interacts with. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefault is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>turning on <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>host-statistics</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> can consume
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehuge amounts of memory.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>maintain-ixfr-base</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option is obsolete</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson It was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 to determine whether a transaction log was
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonkept for Incremental Zone Transfer. <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> 9 maintains a transaction
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonlog whenever possible. If you need to disable outgoing incremental zone
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssontransfers, use <B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>multiple-cnames</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea domain name to allow multiple CNAME records in violation of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDNS standards. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 currently does not check for multiple CNAMEs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein zone data loaded from master files, but such checks may be introduced
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein a later release. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> 9 always strictly enforces the CNAME rules
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein dynamic updates.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (the default),
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDNS NOTIFY messages are sent when a zone the server is authoritative for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechanges, see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 3.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> option may also be specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonin which case it overrides the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>options notify</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonIt would only be necessary to turn off this option if it caused slaves
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonDNS query requests recursion, then the server will attempt to do
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceall the work required to answer the query. If recursion is off
699095b077b0e4e6138b7546d5bb3f05b0d00bb7Andreas Gustafssonand the server does not already know the answer, it will return a
699095b077b0e4e6138b7546d5bb3f05b0d00bb7Andreas Gustafssonreferral response. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
d510e8695ebcce64e515ce756b1cfe8fc3e531efAndreas GustafssonNote that setting <B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas Gustafsson>recursion no;</B
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas Gustafsson> does not prevent
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas Gustafssonclients from getting data from the server's cache; it only
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas Gustafssonprevents new data from being cached as an effect of client queries.
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas GustafssonCaching may still occur as an effect the server's internal
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas Gustafssonoperation, such as NOTIFY address lookups.
4c706de3c7129fb8e3ea21c439a86cf57a71c99aAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>rfc2308-type1</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>Setting this to <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="userinput"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssoncause the server to send NS records along with the SOA record for negative
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonanswers. The default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonVALIGN="MIDDLE"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>use-id-pool</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option is obsolete</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 always allocates query IDs from a pool.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>treat-cr-as-space</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server treat "<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" characters the same way
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce><space> </B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto facilitate loading of zone files on a UNIX system that were generated
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon an NT or DOS machine. In <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> 9, both UNIX "<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" newlines are always accepted,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the option is ignored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-retry-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-retry-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> These options control the server's behavior on refreshing a zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(querying for SOA changes) or retrying failed transfers.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceUsually the SOA values for the zone are used, but these values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare set by the master, giving slave server administrators little
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrol over their contents.
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson> These options allow the administrator to set a minimum and maximum
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonrefresh and retry time either per-zone, per-view, or per-server.
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonThese options are valid for slave and stub zones, and clamp the SOA
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerefresh and retry times to the specified values.
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafsson>These options are not yet implemented in <SPAN
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2140"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>6.2.12.2. Forwarding</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The forwarding facility can be used to create a large site-wide
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssoncache on a few servers, reducing traffic over links to external
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonnameservers. It can also be used to allow queries by servers that
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssondo not have direct access to the Internet, but wish to look up exterior
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonnames anyway. Forwarding occurs only on those queries for which
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonthe server is not authoritative and does not have the answer in
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="informaltable"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="CALSTABLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>This option is only meaningful if the
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonforwarders list is not empty. A value of <TT
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="varname"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonthe default, causes the server to query the forwarders first, and
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonif that doesn't answer the question the server will then look for
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonthe answer itself. If <TT
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="varname"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> is specified, the
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonserver will only query the forwarders.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Specifies the IP addresses to be used
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonfor forwarding. The default is the empty list (no forwarding).</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Forwarding can also be configured on a per-domain basis, allowing
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonfor the global forwarding options to be overridden in a variety
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonof ways. You can set particular domains to use different forwarders,
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonor have a different <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonor not forward at all, see <A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonHREF="Bv9ARM.ch06.html#zone_statement_grammar"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Section 6.2.19</A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonNAME="name_checking"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>6.2.12.3. Name Checking</A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>The server can check domain names based upon their expected
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonclient contexts. For example, a domain name used as a hostname can
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonbe checked for compliance with the RFCs defining valid hostnames.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Three checking methods are available:</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="informaltable"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="CALSTABLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>No checking is done.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Names are checked against their expected
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonclient contexts. Invalid names are logged, but processing continues normally.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Names are checked against their expected
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonclient contexts. Invalid names are logged, and the offending data
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonis rejected.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>The server can check names in three areas: master zone files,
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonslave zone files, and in responses to queries the server has initiated.
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>check-names response fail</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> has been specified,
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonand answering the client's question would require sending an invalid
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonname to the client, the server will send a REFUSED response code
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonto the client.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>The defaults are:</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="programlisting"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> check-names master fail;
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson check-names slave warn;
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson check-names response ignore;
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>check-names</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> may also be specified in the <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonin which case it overrides the <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>options check-names</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonWhen used in a <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> statement, the area is not
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonspecified because it can be deduced from the zone type.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Name checking is not yet implemented in <SPAN
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="acronym"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonNAME="access_control"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>6.2.12.4. Access Control</A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Access to the server can be restricted based on the IP address
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonof the requesting system. See <A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonHREF="Bv9ARM.ch06.html#address_match_lists"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Section 6.1.1</A
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssondetails on how to specify IP address lists.</P
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="informaltable"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="CALSTABLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>allow-query</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonVALIGN="MIDDLE"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>Specifies which hosts are allowed to
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonask ordinary questions. <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>allow-query</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonbe specified in the <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> statement, in which
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssoncase it overrides the <B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas GustafssonCLASS="command"
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson>options allow-query</B
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafsson> statement. If
b7554e2bc93290f579e392cd86cf8107072130a4Andreas Gustafssonnot specified, the default is to allow queries from all hosts.</P
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-recursion</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Specifies which hosts are allowed to
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonmake recursive queries through this server. If not specified, the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssondefault is to allow recursive queries from all hosts.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNote that disallowing recursive queries for a host does not prevent the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehost from retrieving data that is already in the server's cache.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="command"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>allow-transfer</B
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonVALIGN="MIDDLE"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>Specifies which hosts are allowed to
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssonreceive zone transfers from the server. <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucealso be specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement, in which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecase it overrides the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>options allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf not specified, the default is to allow transfers from all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>blackhole</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>Specifies a list of addresses that the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver will not accept queries from or use to resolve a query. Queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom these addresses will not be responded to. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2250"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>6.2.12.5. Interfaces</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The interfaces and ports that the server will answer queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom may be specified using the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean optional port, and an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonThe server will listen on all interfaces allowed by the address
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonmatch list. If a port is not specified, port 53 will be used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statements are allowed.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonFor example,</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on { 5.6.7.8; };
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson>will enable the nameserver on port 53 for the IP address
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson 5.6.7.8, and on port 1234 of an address on the machine in net
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson 1.2 that is not 1.2.3.4.</P
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas GustafssonCLASS="command"
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson> is specified, the
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson server will listen on port 53 on all interfaces.</P
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas GustafssonCLASS="command"
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson>listen-on-v6</B
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson> option is used to
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson specify the ports on which the server will listen for incoming
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson queries sent using IPv6.</P
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson>The server does not bind a separate socket to each IPv6
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson interface address as it does for IPv4. Instead, it always
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson listens on the IPv6 wildcard address. Therefore, the only
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas Gustafsson values allowed for the <TT
7598325e6bbc3eb3cebcb08c7a9dec7ea4a64c27Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson argument to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> options can be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce used to listen on multiple ports:</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6 port 53 { any; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelisten-on-v6 port 1234 { any; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>To make the server not listen on any IPv6 address, use</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6 { none; };
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>listen-on-v6</B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> statement is specified,
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonthe server will not listen on any IPv6 address.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>6.2.12.6. Query Address</A
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>If the server doesn't know the answer to a question, it will
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonquery other nameservers. <B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>query-source</B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonthe address and port used for such queries. For queries sent over
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonIPv6, there is a separate <B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>query-source-v6</B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> or is omitted,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona wildcard IP address (<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>INADDR_ANY</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>) will be used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> or is omitted,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona random unprivileged port will be used. The defaults are</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-source address * port *;
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonquery-source-v6 address * port *
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>query-source</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> currently applies only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto UDP queries; TCP queries always use a wildcard IP address and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea random unprivileged port.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonNAME="zone_transfers"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>6.2.12.7. Zone Transfers</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> has mechanisms in place to facilitate zone transfers
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonand set limits on the amount of load that transfers place on the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonsystem. The following options apply to zone transfers.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Defines a global list of IP addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat are also sent NOTIFY messages whenever a fresh copy of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone is loaded. This helps to ensure that copies of the zones will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucequickly converge on stealth servers. If an <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis given in a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement, it will override
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>options also-notify</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement. When a <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone notify</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>, the IP addresses in the global <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonnot be sent NOTIFY messages for that zone. The default is the empty
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonlist (no global notification list).</P
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>max-transfer-time-in</B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Inbound zone transfers running longer than
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonthis many minutes will be terminated. The default is 120 minutes
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerVALIGN="MIDDLE"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>max-transfer-idle-in</B
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Inbound zone transfers making no progress
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonin this many minutes will be terminated. The default is 60 minutes
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonVALIGN="MIDDLE"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>max-transfer-time-out</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Outbound zone transfers running longer than
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthis many minutes will be terminated. The default is 120 minutes
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonVALIGN="MIDDLE"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="command"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafsson>max-transfer-idle-out</B
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonVALIGN="MIDDLE"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafsson>Outbound zone transfers making no progress
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafssonin this many minutes will be terminated. The default is 60 minutes (1
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonVALIGN="MIDDLE"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="command"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas Gustafsson>serial-queries</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Slave servers will periodically query master
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers to find out if zone serial numbers have changed. Each such
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucequery uses a minute amount of the slave server's network bandwidth,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut more importantly each query uses a small amount of memory in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe slave server while waiting for the master server to respond.
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-queries</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option sets the maximum number
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyerof concurrent serial-number queries allowed to be outstanding at
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyerany given time. The default is 4.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If a server loads a large (tens or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce hundreds of thousands) number of slave zones, then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce this limit should be raised to the high hundreds
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or low thousands, otherwise the slave server may
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce never actually become aware of zone changes in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce master servers. Beware, though, that setting this
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson limit arbitrarily high can spend a considerable
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson amount of your slave server's network, CPU, and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce memory resources. As with all tunable limits, this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce one should be changed gently and monitored for its
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Not yet implemented in <SPAN
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>transfer-format</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>The server supports two zone transfer methods. <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonone DNS message per resource record transferred. <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>many-answers</B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonas many resource records as possible into a message. <B
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>many-answers</B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonmore efficient, but is only known to be understood by <SPAN
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="acronym"
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="acronym"
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="acronym"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson> 4.9.5. The default is <B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>many-answers</B
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>transfer-format</B
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafssonbe overridden on a per-server basis by using the <B
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson> statement.</P
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonVALIGN="MIDDLE"
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>transfers-in</B
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The maximum number of inbound zone transfers
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafssonthat can be running concurrently. The default value is <TT
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonCLASS="literal"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonCLASS="command"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafsson>transfers-in</B
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafsson> may speed up the convergence
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafssonof slave zones, but it also may increase the load on the local system.</P
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonVALIGN="MIDDLE"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas GustafssonCLASS="command"
faf83c82e0825a2e6ce6ac975a8e3faab1357310Andreas Gustafsson>transfers-out</B
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonVALIGN="MIDDLE"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas Gustafsson>The maximum number of outbound zone transfers
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas Gustafssonthat can be running concurrently. Zone transfer requests in excess
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas Gustafssonof the limit will be refused. The default value is <TT
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonCLASS="literal"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonVALIGN="MIDDLE"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonCLASS="command"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas Gustafsson>transfers-per-ns</B
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of inbound zone transfers
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonthat can be concurrently transferring from a given remote nameserver.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default value is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. Increasing <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespeed up the convergence of slave zones, but it also may increase
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe load on the remote nameserver. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe overridden on a per-server basis by using the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson> statement.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>transfer-source</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonwhich local address will be bound to IPv4 TCP connections used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefetch zones transferred inbound by the server. It also determines
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe IPv4 address, and optionaly the UDP port, used for the refresh queries,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenotify messages and when updates are forwarded. If not set, it defaults
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonto a system controlled value which will usually be the address of
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe interface "closest to" the remote end. This address must appear
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the remote end's <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>allow-transfer</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe zone being transferred, if one is specified. This statement
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> for all zones, but can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe overridden on a per-zone basis by including a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement within the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonin the configuration file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The same as <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>transfer-source</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonexcept zone transfers are performed using IPv6.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>6.2.12.8. Resource Limits</A
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>The server's usage of many system resources can be
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson limited. Some operating systems don't support some of the
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson limits. On such systems, a warning will be issued if the
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson unsupported limit is used. Some operating systems don't
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson support limiting resources.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>Scaled values are
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson allowed when specifying resource limits. For example,
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> can be used instead of
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>1073741824</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> to specify a limit of one
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> requests unlimited use,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or the maximum available amount. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce uses the limit that was in force when the server was
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce started. See the description of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonHREF="Bv9ARM.ch06.html#configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.1</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="informaltable"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="CALSTABLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="command"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonVALIGN="MIDDLE"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas Gustafsson>The maximum size of a core dump. The default
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="literal"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas Gustafsson>Not yet implemented in <SPAN
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="acronym"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonVALIGN="MIDDLE"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonCLASS="command"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonVALIGN="MIDDLE"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>The maximum amount of data memory the server
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonmay use. The default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="literal"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonyet implemented in <SPAN
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of files the server
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonmay have open concurrently. The default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>on some operating systems the server cannot set an unlimited
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevalue and cannot determine the maximum number of open files the
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonkernel can support. On such systems, choosing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecause the server to use the larger of the <B
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>RLIMIT_NOFILE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe value returned by <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sysconf(_SC_OPEN_MAX)</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf the actual kernel limit is larger than this value, use <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> to specify the limit explicitly.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceimplemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ixfr-log-size</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ixfr-log-size</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe used in a future release of the server to limit the size of the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssontransaction log kept for Incremental Zone Transfer.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursive-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>The maximum number of simultaneous recursive
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonlookups the server will perform on behalf of clients. The default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>stacksize</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum amount of stack memory the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemay use. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
699095b077b0e4e6138b7546d5bb3f05b0d00bb7Andreas Gustafsson>tcp-clients</B
699095b077b0e4e6138b7546d5bb3f05b0d00bb7Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of simultaneous client TCP
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconnections that the server will accept. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Resource limits are not yet implemented in <SPAN
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2495"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>6.2.12.9. Periodic Task Intervals</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>cleaning-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server will remove expired resource records
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfrom the cache every <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>cleaning-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is 60 minutes.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonIf set to 0, no periodic cleaning will occur.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>heartbeat-interval</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server will perform zone maintenance tasks
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor all zones marked as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> whenever this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinterval expires. The default is 60 minutes. Reasonable values are up
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto 1 day (1440 minutes). If set to 0, no zone maintenance for these zones will occur.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>interface-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>The server will scan the network interface list
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>interface-interval</B
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson> minutes. The default
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafssonis 60 minutes. If set to 0, interface scanning will only occur when
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonthe configuration file is loaded. After the scan, listeners will be
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafssonstarted on any new interfaces (provided they are allowed by the
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson> configuration). Listeners on interfaces
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafssonthat have gone away will be cleaned up.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-interval</B
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonVALIGN="MIDDLE"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>Nameserver statistics will be logged
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>statistics-interval</B
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson> minutes. The default is
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson60. If set to 0, no statistics will be logged.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonNAME="topology"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>6.2.12.10. Topology</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>All other things being equal, when the server chooses a nameserver
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto query from a list of nameservers, it prefers the one that is
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafssontopologically closest to itself. The <B
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="command"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> and interprets it
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein a special way. Each top-level list element is assigned a distance.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNon-negated elements get a distance based on their position in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist, where the closer the match is to the start of the list, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceshorter the distance is between it and the server. A negated match
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafssonwill be assigned the maximum distance from the server. If there
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafssonis no match, the address will get a distance which is further than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany non-negated list element, and closer than any negated element.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example,</P
9ffd207c48e20881634d91210885c0a177124ca9Andreas GustafssonCLASS="programlisting"
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>will prefer servers on network 10 the most, followed by hosts
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafssonon network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexception of hosts on network 1.2.3 (netmask 255.255.255.0), which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis preferred least of all.</P
9ffd207c48e20881634d91210885c0a177124ca9Andreas Gustafsson>The default topology is</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> topology { localhost; localnets; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="the_sortlist_statement"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.12.11. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Resource Records (RRs) are the data associated with the names
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein a domain name space. The data is maintained in the form of sets
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof RRs. The order of RRs in a set is, by default, not significant.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonTherefore, to control the sorting of records in a set of resource
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonrecords, or <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>, you must use the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>RRs are explained more fully in <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.3.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. Specifications for RRs
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonare documented in RFC 1035.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When returning multiple RRs the nameserver will normally return
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Round Robin</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat is, after each request the first RR is put at the end of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist. The client resolver code should rearrange the RRs as appropriate,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat is, using any addresses on the local net in preference to other addresses.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHowever, not all resolvers can do this or are correctly configured.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceWhen a client is using a local server the sorting can be performed
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonin the server, based on the client's address. This only requires
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonconfiguring the nameservers, not all the clients.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement (see below) takes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> and interprets it even
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemore specifically than the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.10</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>). Each top level statement in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceitself be an explicit <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceone or two elements. The first element (which may be an IP address,
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonan IP prefix, an ACL name or a nested <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonof each top level list is checked against the source address of
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonthe query until a match is found.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Once the source address of the query has been matched, if
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonthe top level statement contains only one element, the actual primitive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceelement that matched the source address is used to select the address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the response to move to the beginning of the response. If the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatement is a list of two elements, then the second element is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetreated the same as the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement. Each top level element
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis assigned a distance and the address in the response with the minimum
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedistance is moved to the beginning of the response.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>In the following example, any queries received from any of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe addresses of the host itself will get responses preferring addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon any of the locally connected networks. Next most preferred are addresses
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonon the 192.168.1/24 network, and after that either the 192.168.2/24
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson192.168.3/24 network with no preference shown between these two
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonnetworks. Queries received from a host on the 192.168.1/24 network
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonwill prefer other addresses on that network to the 192.168.2/24
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson192.168.3/24 networks. Queries received from a host on the 192.168.4/24
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonor the 192.168.5/24 network will only prefer other addresses on
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssontheir directly connected networks.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="programlisting"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson { localhost; // IF the local host
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson { localnets; // THEN first fit on the
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { 192.168.1/24; // IF on class C 192.168.1
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { 192.168.1/24; // THEN use .1, or .2 or .3
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson { 192.168.2/24; // IF on class C 192.168.2
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson { 192.168.2/24; // THEN use .2, or .1 or .3
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { 192.168.3/24; // IF on class C 192.168.3
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { 192.168.3/24; // THEN use .3, or .1 or .2
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { { 192.168.4/24; 192.168.5/24; }; // if .4 or .5, prefer that net
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>The following example will give reasonable behavior for the
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonlocal host and hosts on directly connected networks. It is similar
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonto the behavior of the address sort in <SPAN
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> 8.x. Responses sent
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonto queries from the local host will favor any of the directly connected
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonnetworks. Responses sent to queries from any other hosts on a directly
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonconnected network will prefer addresses on that same network. Responses
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonto other queries will not be sorted.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="programlisting"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson { localhost; localnets; };
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson { localnets; };
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="rrset_ordering"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>6.2.12.12. RRset Ordering</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When multiple records are returned in an answer it may be
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonuseful to configure the order of the records placed into the response.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example, the records for a zone might be configured always to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe returned in the order they are defined in the zone file. Or perhaps
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona random shuffle of the records as they are returned is wanted.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement permits configuration
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonof the ordering made of the records in a multiple record response.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonThe default, if no ordering is defined, is a cyclic ordering (round
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>order_spec</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is defined as follows:</P
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="programlisting"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="optional"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>"domain_name"</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>If no class is specified, the default is <B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonIf no type is specified, the default is <B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonIf no name is specified, the default is "<B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>The legal values for <B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Records are returned in the order they
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafssonare defined in the zone file.</P
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonVALIGN="MIDDLE"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonVALIGN="MIDDLE"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>Records are returned in some random order.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Records are returned in a round-robin
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>For example:</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="programlisting"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson class IN type A name "host.example.com" order random;
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>will cause any responses for type A records in class IN that
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="systemitem"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>" as a suffix, to always be returned
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonin random order. All other records are returned in cyclic order.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If multiple <B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>rrset-order</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statements appear,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethey are not combined-the last one applies.</P
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson> statement is specified,
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonthen a default one of:
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="programlisting"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>rrset-order { class ANY type ANY name "*"; order cyclic ; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafssonis not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
e250148432865805a3d2fd0029c02af8a67ff266Andreas Gustafsson>6.2.12.13. Tuning</A
e250148432865805a3d2fd0029c02af8a67ff266Andreas GustafssonCLASS="informaltable"
e250148432865805a3d2fd0029c02af8a67ff266Andreas GustafssonCLASS="CALSTABLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>Sets the number of seconds to cache a
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonlame server indication. 0 disables caching. (This is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> recommended.)
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (10 minutes). Maximum value is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (30 minutes).</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>To reduce network traffic and increase performance
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonthe server stores negative answers. <B
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused to set a maximum retention time for these answers in the server
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonin seconds. The default
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> seconds (3 hours).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> cannot exceed 7 days and will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe silently truncated to 7 days if set to a greater value.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-cache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>max-cache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe maximum time for which the server will cache ordinary (positive)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceanswers. The default is one week (7 days).</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-roots</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The minimum number of root servers that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis required for a request for the root servers to be accepted. Default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies the number of days into the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefuture when DNSSEC signatures automatically generated as a result
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof dynamic updates (<A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch04.html#dynamic_update"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 4.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill expire. The default is <TT
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> days. The signature
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinception time is unconditionally set to one hour before the current time
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto allow for a limited amount of clock skew.</P
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>6.2.12.14. Deprecated Features</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is deprecated in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce you need to disable IXFR to a particular server or servers see
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the information on the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch04.html#incremental_zone_transfers"
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>Section 4.2</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="server_statement_grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceStatement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> provide-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> request-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="optional"
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson> transfers <TT
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson> transfer-format <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>( one-answer | many-answers )</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>{ string ; [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> string ; [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="server_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="command"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson> statement defines the characteristics
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafssonto be associated with a remote nameserver.</P
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafsson>If you discover that a remote server is giving out bad data,
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafssonmarking it as bogus will prevent further queries to it. The default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause determines whether
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe local server, acting as master, will respond with an incremental
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone transfer when the given remote server, a slave, requests it.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, incremental transfer will be provided
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhenever possible. If set to <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, all transfers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto the remote server will be nonincremental. If not set, the value
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option in the global options block
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis used as a default.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause determines whether
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe local server, acting as a slave, will request incremental zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetransfers from the given remote server, a master. If not set, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevalue of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option in the global
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions block is used as a default.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>IXFR requests to servers that do not support IXFR will automatically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefall back to AXFR. Therefore, there is no need to manually list
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonwhich servers support IXFR and which ones do not; the global default
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> should always work. The purpose of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto make it possible to disable the use of IXFR even when both master
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand slave claim to support it, for example if one of the servers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis buggy and crashes or corrupts data when IXFR is used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server supports two zone transfer methods. The first, <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>one-answer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuses one DNS message per resource record transferred. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas many resource records as possible into a message. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemore efficient, but is only known to be understood by <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4.9.5. You can specify which method
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto use for a server with the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is not specified, the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement will be used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is used to limit the number of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconcurrent inbound zone transfers from the specified server. If
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is specified, the limit is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceset according to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is used to identify a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement, to be used for transaction
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesecurity when talking to the remote server. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemust come before the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson> statement that references
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafssonit. When a request is sent to the remote server, a request signature
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be generated using the key specified here and appended to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessage. A request originating from the remote server is not required
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be signed by this key.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Although the grammar of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceallows for multiple keys, only a single key per server is currently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesupported.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2761"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>trusted-keys</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="programlisting"
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas Gustafsson>trusted-keys {
6c6af6107a75ce28a0af57851dca3c87b042ab4aAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>trusted-keys</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> Statement Definition
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>trusted-keys</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> statement defines DNSSEC
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonsecurity roots. DNSSEC is described in <A
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>Section 4.7</A
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>. A security root is defined when the public key for a non-authoritative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone is known, but cannot be securely obtained through DNS, either
989b28f988e35401f1a50ecbeed0b38b023604b4Andreas Gustafssonbecause it is the DNS root zone or its parent zone is unsigned.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceOnce a key has been configured as a trusted key, it is treated as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif it had been validated and proven secure. The resolver attempts
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDNSSEC validation on all DNS data in subdomains of a security root.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>trusted-keys</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement can contain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemultiple key entries, each consisting of the key's domain name,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceflags, protocol, algorithm, and the base-64 representation of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="sect2"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceNAME="AEN2785"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-clients { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>view_option</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>zone_statement</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2797"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is a powerful new feature
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 that lets a name server answer a DNS query differently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedepending on who is asking. It is particularly useful for implementing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesplit DNS setups without having to run multiple servers.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement defines a view of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDNS namespace that will be seen by those clients whose IP addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> of the view's <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The order of the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements is significant-a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceclient query will be resolved in the context of the first <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematches the client's IP address.</P
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafsson>Zones defined within a <B
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement will
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonbe only be accessible to clients that match the <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson By defining a zone of the same name in multiple views, different
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonzone data can be given to different clients, for example, "internal"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonand "external" clients in a split DNS setup.</P
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>Many of the options given in the <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssoncan also be used within a <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> statement, and then
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonapply only when resolving queries with that view. When no view-specific
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonvalue is given, the value in the <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonis used as a default. Also, zone options can have default values specified
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson> statement; these view-specific defaults
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssontake precedence over those in the <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> statement. </P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Views are class specific. If no class is given, class IN
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonis assumed. Note that all non-IN views must contain a hint zone,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesince only the IN class has compiled-in default hints.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If there are no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> statements in the
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssonconfig file, a default view that matches any client is automatically
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssoncreated in class IN, and any <B
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssonspecified on the top level of the configuration file are considered
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssonto be part of this default view. If any explicit <B
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssonare present, all <B
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> statements must occur inside <B
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> statements.</P
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>Here is an example of a typical split DNS setup implemented
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> statements.</P
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="programlisting"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>view "internal" {
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // This should match our internal networks.
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson match-clients { 10.0.0.0/8; };
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // Provide recursive service to internal clients only.
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson recursion yes;
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // Provide a complete view of the example.com zone
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // including addresses of internal hosts.
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafssonview "external" {
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson match-clients { any; };
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // Refuse recursive service to external clients.
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // Provide a restricted view of the example.com zone
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson // containing only publicly accessible hosts.
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonNAME="zone_statement_grammar"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonStatement Grammar</A
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="programlisting"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="replaceable"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="optional"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="replaceable"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="optional"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson type ( master | slave | hint | stub | forward ) ;
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="optional"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> allow-query { <TT
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="replaceable"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>address_match_list</I
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="optional"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> allow-transfer { <TT
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="replaceable"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>address_match_list</I
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="optional"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson> allow-update { <TT
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="replaceable"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> update-policy { <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>update_policy_rule</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-update-forwarding { <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>address_match_list</I
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> also-notify { <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>] ; ... </SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> check-names (<TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="constant"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="constant"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="constant"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>dialup_option</I
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="constant"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="constant"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> forwarders { [<SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> ixfr-base <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> ixfr-tmp-file <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> maintain-ixfr-base <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> masters [<SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="replaceable"
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="optional"
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="optional"
18914183d997fe982136cdb8c45b41e857d96551Andreas Gustafsson> max-ixfr-log-size <TT
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="replaceable"
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="optional"
18914183d997fe982136cdb8c45b41e857d96551Andreas Gustafsson> max-transfer-idle-in <TT
18914183d997fe982136cdb8c45b41e857d96551Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-idle-out <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-time-in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-time-out <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source-v6 (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> sig-validity-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="command"
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafsson> Statement Definition and Usage</A
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas Gustafsson>6.2.20.1. Zone Types</A
873355df80e292cfdd67b9482f1846e2bc9b423eAndreas GustafssonCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server has a master copy of the data
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the zone and will be able to provide authoritative answers for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A slave zone is a replica of a master
33a1b09738baba43edb02ff7d09ef510c73802d0Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> list specifies one or more IP addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof master servers that the slave contacts to update its copy of the zone.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBy default, transfers are made from port 53 on the servers; this can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe changed for all servers by specifying a port number before the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist of IP addresses, or on a per-server basis after the IP address.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf a file is specified, then the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereplica will be written to this file whenever the zone is changed,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonand reloaded from this file on a server restart. Use of a file is
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonrecommended, since it often speeds server start-up and eliminates
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea needless waste of bandwidth. Note that for large numbers (in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetens or hundreds of thousands) of zones per server, it is best to
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonuse a two level naming scheme for zone file names. For example,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona slave server for the zone <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> might place
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe zone contents into a file called
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas GustafssonCLASS="filename"
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafssonjust the first two letters of the zone name. (Most operating systems
3ba6d0298ae3414ab12f1a6ae35e14b119f4311eAndreas Gustafssonbehave very slowly if you put 100K files into a single directory.)</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A stub zone is similar to a slave zone,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexcept that it replicates only the NS records of a master zone instead
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the entire zone. Stub zones are not a standard part of the DNS;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethey are a peculiarity of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4 and <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 that relies heavily
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the particular way the zone data is structured in those servers.
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 attempts to emulate the <SPAN
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4/8 stub zone feature for backwards compatibility,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut we do not recommend its use in new configurations.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4/8, zone transfers of a parent zone included the NS records
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom stub children of that zone. This meant that, in some cases,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusers could get away with configuring child stubs only in the master
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver for the parent zone. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 never mixes together zone data
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom different zones in this way. Therefore, if a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserving a parent zone has child stub zones configured, all the slave
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers for the parent zone also need to have the same child stub
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezones configured..</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A "forward zone" is a way to configure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding on a per-domain basis. A <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> can contain a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich will apply to queries within the domain given by the zone
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is present or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean empty list for <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is given, then no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding will be done for the domain, cancelling the effects of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany forwarders in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement. Thus
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif you want to use this type of zone to change the behavior of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option (that is, "forward first
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto", then "forward only", or vice versa, but want to use the same
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers as set globally) you need to respecify the global forwarders.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Domain-specific
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding is not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The initial set of root nameservers is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified using a "hint zone". When the server starts up, it uses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe root hints to find a root nameserver and get the most recent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist of root nameservers. If no hint zone is specified for class
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIN, the server users a compiled-in default set of root servers hints.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceClasses other than IN have no built-in defaults hints.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2980"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.20.2. Class</A
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>The zone's name may optionally be followed by a class. If
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssona class is not specified, class <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Internet</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis assumed. This is correct for the vast majority of cases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonnamed for an information service from MIT's Project Athena. It is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused to share information about various systems databases, such
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas users, groups, printers and so on. The keyword
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea synonym for hesiod.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Another MIT development is CHAOSnet, a LAN protocol created
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the mid-1970s. Zone data for it can be specified with the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2990"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>6.2.20.3. Zone Options</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
d510e8695ebcce64e515ce756b1cfe8fc3e531efAndreas GustafssonVALIGN="MIDDLE"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>allow-query</B
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonHREF="Bv9ARM.ch06.html#access_control"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>Section 6.2.12.4</A
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#access_control"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesubmit Dynamic DNS updates for master zones. The default is to deny
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceupdates from all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>update-policy</B
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies a "Simple Secure Update" policy. See
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonHREF="Bv9ARM.ch06.html#dynamic_update_policies"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>Section 6.2.20.4</A
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonVALIGN="MIDDLE"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonCLASS="command"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>allow-update-forwarding</B
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonVALIGN="MIDDLE"
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas Gustafsson>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesubmit Dynamic DNS updates to slave zones to be forwarded to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemaster. The default is to deny update forwarding from all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding is not yet implemented.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Only meaningful if <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceactive for this zone. The set of machines that will receive a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>DNS NOTIFY</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor this zone is made up of all the listed nameservers (other than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe primary master) for the zone plus any IP addresses specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>. A port may be specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address to send the notify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessages to a port other than the default of 53.
e1ad5fdd33cb05f65b06825e7b1bcfb720879289Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is not meaningful for stub zones.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is the empty list.</P
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonCLASS="command"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>check-names</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#name_checking"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.3</A
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#boolean_options"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Only meaningful if the zone has a forwarders
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> value causes the lookup to fail
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceafter trying the forwarders and getting no answer, while <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceallow a normal lookup to be tried.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Used to override the list of global forwarders.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf it is not specified in a zone of type <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceno forwarding is done for the zone; the global options are not used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonVALIGN="MIDDLE"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>Was used in <SPAN
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 to specify the name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the transaction log (journal) file for dynamic update and IXFR.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 ignores the option and constructs the name of the journal
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonfile by appending ".<TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="filename"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>" to the name of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.7</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>max-transfer-idle-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.7</A
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>See the description of
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonCLASS="command"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>max-transfer-time-out</B
f37eb9482057adf62de35e634bfd574e59676950Andreas GustafssonHREF="Bv9ARM.ch06.html#zone_transfers"
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson>Section 6.2.12.7</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-out</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.7</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonVALIGN="MIDDLE"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonHREF="Bv9ARM.ch06.html#boolean_options"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>Section 6.2.12.1</A
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8, this option was intended for specifying
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea public zone key for verification of signatures in DNSSEC signed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezones when they are loaded from disk. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 does not verify signatures
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon loading and ignores the option.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.12.13</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Determines which local address will be bound
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto the IPv4 TCP connection used to fetch this zone. It also determines
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe IPv4 address, and optionaly the UDP port, used for the refresh queries,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenotify messages and when updates are forwarded. If not set,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceit defaults to a system controlled value which will usually be the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaddress of the interface "closest to" the remote end. If the remote
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceend user is an <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option for this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone, the address, supplied by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceneeds to be specified in that <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source-v6</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>Similar to transfer-source, but for zone transfers
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonperformed using IPv6.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="dynamic_update_policies"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.20.4. Dynamic Update Policies</A
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="acronym"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson> 9 supports two alternative methods of granting clients
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonthe right to perform dynamic updates to a zone, configured by the <B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>allow-update</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>update-policy</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerespectively.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>allow-update</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> clause works the same
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonway as in previous versions of <SPAN
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>. It grants given clients the
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonpermission to update any record of any name in the zone.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>update-policy</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> clause is new in <SPAN
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson9 and allows more fine-grained control over what updates are allowed.
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonA set of rules is specified, where each rule either grants or denies
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonpermissions for one or more names to be updated by one or more identities.
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson If the dynamic update request message is signed (that is, it includes
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssoneither a TSIG or SIG(0) record), the identity of the signer can
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonbe determined.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Rules are specified in the <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>update-policy</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonoption, and are only meaningful for master zones. When the <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>update-policy</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonis present, it is a configuration error for the <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>allow-update</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonto be present. The <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>update-policy</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> statement only
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonexamines the signer of a message; the source address is not relevant.</P
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer>This is how a rule definition looks:</P
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="programlisting"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="optional"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="replaceable"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>Each rule grants or denies privileges. Once a message has
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonsuccessfully matched a rule, the operation is immediately granted
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonor denied and no further rules are examined. A rule is matched
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonwhen the signer matches the identity field, the name matches the
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonname field, and the type is specified in the type field.</P
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>The identity field specifies a name or a wildcard name. The
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonnametype field has 4 values: <TT
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="varname"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="varname"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="varname"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="varname"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>Matches when the updated name is the
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonsame as the name in the name field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>subdomain</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is a subdomain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the name in the name field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>wildcard</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is a valid
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexpansion of the wildcard name in the name field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonVALIGN="MIDDLE"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>Matches when the updated name is the
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonsame as the message signer. The name field is ignored.</P
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson>If no types are specified, the rule matches all types except
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonSIG, NS, SOA, and NXT. Types may be specified by name, including
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson"ANY" (ANY matches all types except NXT, which can never be updated).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3225"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>6.3. Zone File</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="types_of_resource_records_and_when_to_use_them"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1. Types of Resource Records and When to Use Them</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This section, largely borrowed from RFC 1034, describes the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconcept of a Resource Record (RR) and explains when each is used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSince the publication of RFC 1034, several new RRs have been identified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand implemented in the DNS. These are also included.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3230"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1.1. Resource Records</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A domain name identifies a node. Each node has a set of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resource information, which may be empty. The set of resource
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson information associated with a particular name is composed of
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson separate RRs. The order of RRs in a set is not significant and
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson need not be preserved by nameservers, resolvers, or other
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson parts of the DNS. However, sorting of multiple RRs is
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson permitted for optimization purposes, for example, to specify
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson that a particular nearby server be tried first. See <A
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonHREF="Bv9ARM.ch06.html#the_sortlist_statement"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>Section 6.2.12.11</A
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonHREF="Bv9ARM.ch06.html#rrset_ordering"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>Section 6.2.12.12</A
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>The components of a Resource Record are:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonVALIGN="MIDDLE"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>the domain name where the RR is found.</P
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an encoded 16 bit value that specifies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe type of the resource in this resource record. Types refer to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceabstract resources.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the time to live of the RR. This field
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis a 32 bit integer in units of seconds, and is primarily used by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceresolvers when they cache RRs. The TTL describes how long a RR can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe cached before it should be discarded.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>an encoded 16 bit value that identifies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea protocol family or instance of a protocol.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the type and sometimes class-dependent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata that describes the resource.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following are <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> of valid RRs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(some of these listed, although not obsolete, are experimental (x)
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafssonor historical (h) and no longer in general use):</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a host address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an IPv6 address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Obsolete format of IPv6 address</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>(x) location of AFS database servers.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonExperimental.</P
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>identifies the canonical name of an alias.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>for delegation of reverse addresses.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceReplaces the domain name specified with another name to be looked
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceup. Described in RFC 2672.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies the CPU and OS used by a host.</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) representation of ISDN addresses.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceExperimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
0a792c72e6b4aefed6fb9dcbf004f1100fe9dfe7Andreas GustafssonVALIGN="MIDDLE"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>stores a public key associated with a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) for storing GPS info. See RFC 1876.
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceExperimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies a mail exchange for the domain.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce See RFC 974 for details.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>the authoritative nameserver for the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>used in DNSSEC to securely indicate that
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonRRs with an owner name in a certain name interval do not exist in
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssona zone and indicate what RR types are present for an existing name.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonSee RFC 2535 for details.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a pointer to another part of the domain
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>(x) information on persons responsible
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfor the domain. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) route-through binding for hosts that
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssondo not have their own direct wide area network addresses. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>("signature") contains data authenticated
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the secure DNS. See RFC 2535 for details.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies the start of a zone of authority.</P
c6433f2b214f49e691d126b7276980c20f74b6bbAndreas GustafssonVALIGN="MIDDLE"
c6433f2b214f49e691d126b7276980c20f74b6bbAndreas GustafssonVALIGN="MIDDLE"
c6433f2b214f49e691d126b7276980c20f74b6bbAndreas Gustafsson>information about well known network
c6433f2b214f49e691d126b7276980c20f74b6bbAndreas Gustafssonservices (replaces WKS).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(h) information about which well known
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenetwork services, such as SMTP, that a domain supports. Historical,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonreplaced by newer RR SRV.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>(x) representation of X.25 network addresses. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following <I
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="emphasis"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> of resource records
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonare currently valid in the DNS:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>the Internet system.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For information about other,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonolder classes of RRs, see <A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonHREF="Bv9ARM.ch09.html#classes_of_resource_records"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section A.2.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the type-dependent or class-dependent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata that describes the resource:</P
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas GustafssonCLASS="informaltable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="CALSTABLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>for the IN class, a 32 bit IP address.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>maps a domain name to an IPv6 address,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonwith a provision for indirection for leading "prefix" bits.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>a domain name.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>provides alternate naming to an entire
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonsubtree of the domain name space, rather than to a single node.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson It causes some suffix of a queried name to be substituted with
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona name from the DNAME record's RDATA.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>a 16 bit preference value (lower is better)
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfollowed by a host name willing to act as a mail exchange for the
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonowner domain.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>a fully qualified domain name.</P
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonVALIGN="MIDDLE"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonVALIGN="MIDDLE"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>a fully qualified domain name.</P
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonVALIGN="MIDDLE"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas GustafssonVALIGN="MIDDLE"
8cccaeaee13993c49009d3915806c1d0bd03743bAndreas Gustafsson>several fields.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>The owner name is often implicit, rather than forming an integral
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepart of the RR. For example, many nameservers internally form tree
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor hash structures for the name space, and chain RRs off nodes.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The remaining RR parts are the fixed header (type, class, TTL)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich is consistent for all RRs, and a variable part (RDATA) that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefits the needs of the resource being described.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>The meaning of the TTL field is a time limit on how long an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRR can be kept in a cache. This limit does not apply to authoritative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata in zones; it is also timed out, but by the refreshing policies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the zone. The TTL is assigned by the administrator for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone where the data originates. While short TTLs can be used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceminimize caching, and a zero TTL prohibits caching, the realities
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof Internet performance suggest that these times should be on the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonorder of days for the typical host. If a change can be anticipated,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe TTL can be reduced prior to the change to minimize inconsistency
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceduring the change, and then increased back to its former value following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe change.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The data in the RDATA section of RRs is carried as a combination
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof binary strings and domain names. The domain names are frequently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused as "pointers" to other data in the DNS.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3444"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1.2. Textual expression of RRs</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>RRs are represented in binary form in the packets of the DNS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprotocol, and are usually represented in highly encoded form when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestored in a nameserver or resolver. In the examples provided in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC 1034, a style similar to that used in master files was employed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein order to show the contents of RRs. In this format, most RRs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare shown on a single line, although continuation lines are possible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusing parentheses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The start of the line gives the owner of the RR. If a line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebegins with a blank, then the owner is assumed to be the same as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat of the previous RR. Blank lines are often included for readability.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following the owner, we list the TTL, type, and class of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRR. Class and type use the mnemonics defined above, and TTL is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean integer before the type field. In order to avoid ambiguity in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceparsing, type and class mnemonics are disjoint, TTLs are integers,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the type mnemonic is always last. The IN class and TTL values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare often omitted from examples in the interests of clarity.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The resource data or RDATA section of the RR are given using
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceknowledge of the typical representation for the data.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example, we might show the RRs carried in a message as:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>128.9.0.32</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.1.0.52</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.2.0.27</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>128.9.0.33</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The MX RRs have an RDATA section which consists of a 16 bit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenumber followed by a domain name. The address RRs use a standard
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIP address format to contain a 32 bit internet address.</P
b414eb4312cd9d40f40399539ccaa2a9e48e40a3Andreas Gustafsson>This example shows six RRs, with two RRs at each of three
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedomain names.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Similarly we might see:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.44</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This example shows two addresses for <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeach of a different class.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3545"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.2. Discussion of MX Records</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>As described above, domain servers store information as a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceseries of resource records, each of which contains a particular
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepiece of information about a given domain name (which is usually,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut not always, a host). The simplest way to think of a RR is as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea typed pair of datum, a domain name matched with relevant data,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand stored with some additional type information to help systems determine
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhen the RR is relevant.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>MX records are used to control delivery of email. The data
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified in the record is a priority and a domain name. The priority
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrols the order in which email delivery is attempted, with the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelowest number first. If two priorities are the same, a server is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechosen randomly. If no servers at a given priority are responding,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe mail transport agent will fall back to the next largest priority.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LucePriority numbers do not have any absolute meaning — they are relevant
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly respective to other MX records for that domain name. The domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename given is the machine to which the mail will be delivered. It <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean associated A record — CNAME is not sufficient.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>For a given domain, if there is both a CNAME record and an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceMX record, the MX record is in error, and will be ignored. Instead,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe mail will be delivered to the server specified in the MX record
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepointed to by the CNAME.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.1</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.2</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Mail delivery will be attempted to <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany order), and if neither of those succeed, delivery to <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="systemitem"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe attempted.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="Setting_TTLs"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.3. Setting TTLs</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The time to live of the RR field is a 32 bit integer represented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein units of seconds, and is primarily used by resolvers when they
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecache RRs. The TTL describes how long a RR can be cached before it
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceshould be discarded. The following three types of TTL are currently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused in a zone file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The last field in the SOA is the negative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecaching TTL. This controls how long other servers will cache no-such-domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(NXDOMAIN) responses from you.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum time for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenegative caching is 3 hours (3h).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The $TTL directive at the top of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone file (before the SOA) gives a default TTL for every RR without
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea specific TTL set.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Each RR can have a TTL as the second
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefield in the RR, which will control how long other servers can cache
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafsson>All of these TTLs default to units of seconds, though units
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafssoncan be explicitly specified, for example, <TT
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3666"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.4. Inverse Mapping in IPv4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Reverse name resolution (that is, translation from IP address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto name) is achieved by means of the <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand PTR records. Entries in the in-addr.arpa domain are made in
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonleast-to-most significant order, read left to right. This is the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceopposite order to the way IP addresses are usually written. Thus,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea machine with an IP address of 10.1.2.3 would have a corresponding
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3.2.1.10.in-addr.arpa. This name should have a PTR resource record
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhose data field is the name of the machine or, optionally, multiple
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LucePTR records if the machine has more than one name. For example,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] domain:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonVALIGN="MIDDLE"
38ba66e41bc93315422380d6c7ab41053963ed47Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafsson> lines in the examples
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafssonare for providing context to the examples only-they do not necessarily
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafssonappear in the actual usage. They are only used here to indicate
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafssonthat the example is relative to the listed origin.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3693"
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson>6.3.5. Other Zone File Directives</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The Master File Format was initially defined in RFC 1035 and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehas subsequently been extended. While the Master File Format itself
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis class independent all records in a Master File must be of the same
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Master File Directives include <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3700"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.5.1. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Directive</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain-name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> sets the domain name that will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe appended to any unqualified records. When a zone is first read
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein there is an implicit <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone-name</TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is appended to the domain specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> argument if it is not absolute.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceWWW CNAME MAIN-SERVER</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>is equivalent to</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>WWW.EXAMPLE.COM CNAME MAIN-SERVER.EXAMPLE.COM.</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3720"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.5.2. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Directive</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Read and process the file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>filename</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif it were included into the file at this point. If <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified the file is processed with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto that value, otherwise the current <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The behavior when <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified differs from that described in RFC 1035. The origin and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecurrent domain revert to the values they were prior to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe file has been read.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3739"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.5.3. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Directive</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default-ttl</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Set the default Time To Live (TTL) for subsequent records
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith undefined TTLs. Valid TTLs are of the range 0-2147483647 seconds.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is defined in RFC 2308.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3750"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.6. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Master File Extension: the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>$GENERATE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Directive</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>$GENERATE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>$GENERATE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is used to create a series of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceresource records that only differ from each other by an iterator. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>$GENERATE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe used to easily generate the sets of records required to support
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesub /24 reverse delegations described in RFC 2317: Classless IN-ADDR.ARPA
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedelegation.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="programlisting"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$GENERATE 1-2 0 NS SERVER$.EXAMPLE.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce$GENERATE 1-127 $ CNAME $.0</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>is equivalent to</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce1.0.0.192.IN-ADDR.ARPA CNAME 1.0.0.0.192.IN-ADDR.ARPA
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2.0.0.192.IN-ADDR.ARPA CNAME 2.0.0.0.192.IN-ADDR.ARPA
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce127.0.0.192.IN-ADDR.ARPA CNAME 127.0.0.0.192.IN-ADDR.ARPA
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This can be one of two forms: start-stop
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor start-stop/step. If the first form is used then step is set to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 1. All of start, stop and step must be positive.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> describes the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceowner name of the resource records to be created. Any single <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewithin the <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> side are replaced by the iterator
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevalue. To get a $ in the output use a double <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceabsolute, the current <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is appended to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>At present the only supported types are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LucePTR, CNAME and NS.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rhs is a domain name. It is processed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesimilarly to lhs.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>$GENERATE</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> directive is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand not part of the standard zone file format.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>It is not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="NAVFOOTER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLSPACING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 Lightweight Resolver</TD
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 Security Considerations</TD