Bv9ARM.ch06.html revision aeb8fffc841865c3336383eadfd9987332a03286
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>BIND 9 Configuration Reference</TITLE
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsNAME="GENERATOR"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCONTENT="Modular DocBook HTML Stylesheet Version 1.41"><LINK
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox UserREL="PREVIOUS"
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox UserTITLE="The BIND 9 Lightweight Resolver"
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox UserTITLE="BIND 9 Security Considerations"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontBGCOLOR="#FFFFFF"
e676a596869d8a80a644c99a848afb53d1c5975eMark AndrewsTEXT="#000000"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsLINK="#0000FF"
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark AndrewsVLINK="#840084"
d5637bdbb931ff79fced3d4858d83212ea58ed15Tinderbox UserALINK="#0000FF"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="NAVHEADER"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserCELLPADDING="0"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCELLSPACING="0"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsALIGN="center"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="bottom"
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan HuntALIGN="center"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserVALIGN="bottom"
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic UpdaterVALIGN="bottom"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="chapter"
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater>Chapter 6. <SPAN
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="acronym"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt> 9 Configuration Reference</A
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt>Table of Contents</B
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsHREF="Bv9ARM.ch06.html#configuration_file_elements"
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews>Configuration File Elements</A
2ae159b376dac23870d8005563c585acf85a4b5aEvan HuntHREF="Bv9ARM.ch06.html#Configuration_File_Grammar"
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt>Configuration File Grammar</A
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="acronym"
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User> 9 configuration is broadly similar to <SPAN
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="acronym"
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox Userthere are a few new areas of configuration, such as views. <SPAN
aef6cf0f147a5014d4891c9689b9f463399e16e7Tinderbox UserCLASS="acronym"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson8.x configuration files should work with few alterations in <SPAN
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserCLASS="acronym"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews9, although more complex configurations should be reviewed to check
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox Userif they can be more efficiently implemented using the new features
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrewsfound in <SPAN
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="acronym"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserCLASS="acronym"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt> 4 configuration files can be converted to the new format
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrewsusing the shell script
91216cff91b34c9ff6e846dc23f248219cafe660Andreas GustafssonCLASS="filename"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="sect1"
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox UserNAME="configuration_file_elements"
a450977e98155f6e828fe6f8d52cf24674231831Mark Andrews>6.1. Configuration File Elements</A
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User>Following is a list of elements used throughout the <SPAN
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="acronym"
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont> configuration
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox Userfile documentation:</P
2a31bd531072824ef252c18303859d6af7451b00Francis DupontCLASS="informaltable"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCELLPADDING="3"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="CALSTABLE"
5747235bf35e7398984fd6b4632743396895ea7aTinderbox UserVALIGN="MIDDLE"
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox UserCLASS="varname"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>acl_name</TT
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox UserVALIGN="MIDDLE"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User>The name of an <TT
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic UpdaterCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>address_match_list</TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrewsdefined by the <B
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserCLASS="command"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User> statement.</P
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserCLASS="varname"
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater>address_match_list</TT
91216cff91b34c9ff6e846dc23f248219cafe660Andreas GustafssonVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>A list of one or more <TT
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="varname"
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic UpdaterCLASS="varname"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User>ip_prefix</TT
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="varname"
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic UpdaterCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews> elements, see
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsHREF="Bv9ARM.ch06.html#address_match_lists"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User>Section 6.1.1</A
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox UserVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User>domain_name</TT
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserVALIGN="MIDDLE"
fab54780409846f7c71f6026d665f18c77c649efTinderbox User>A quoted string which will be used as
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrewsa DNS name, for example "<SPAN
7ca715ad1587a68a531ea1cdea07515d7232567eTinderbox UserCLASS="systemitem"
4151211e6649332f7b5a55870cbe37128bcc7b29Tinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="varname"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>dotted_decimal</TT
3ec8f7777ea2b04fc1ebb63077f0916f63b1011aTinderbox UserVALIGN="MIDDLE"
b02be031b9ff37b042adc8e68e36b8bbc1f672b7Tinderbox User>One or more integers valued 0 through
933799f3641f4f78445d015008bad0038900a82aTinderbox User255 separated only by dots (`.'), such as <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic UpdaterCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
bac4435d473c9a0281507524f084480c34aa942aTinderbox User>89.123.45.67</B
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic UpdaterVALIGN="MIDDLE"
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic UpdaterCLASS="varname"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>ip4_addr</TT
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsVALIGN="MIDDLE"
7d638dd31ecb633aaefca994b60b70c58b5def03Tinderbox User>An IPv4 address with exactly four elements
ba8b771c371967dd1254c7fa82ebe4158ee04b24Tinderbox UserCLASS="varname"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>dotted_decimal</TT
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox UserCLASS="varname"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews>ip6_addr</TT
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox UserVALIGN="MIDDLE"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>An IPv6 address, such as <B
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
ba8b771c371967dd1254c7fa82ebe4158ee04b24Tinderbox User>fe80::200:f8ff:fe01:9742</B
e64202536ea72d8f371dd0df9fc763f8d70bf886Tinderbox UserVALIGN="MIDDLE"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas GustafssonCLASS="varname"
8292deab031e7599cd7622aa7675fbe139ca6095Mark AndrewsVALIGN="MIDDLE"
c1e2310a3725eeed45e5e7c86750c64c5a02e993Francis DupontCLASS="varname"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="varname"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>ip6_addr</TT
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsVALIGN="MIDDLE"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="varname"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews>An IP port <TT
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic UpdaterCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater> is limited to 0 through 65535, with values
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrewsbelow 1024 typically restricted to root-owned processes. In some
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewscases an asterisk (`*') character can be used as a placeholder to
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Huntselect a random high-numbered port.</P
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsVALIGN="MIDDLE"
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="varname"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>ip_prefix</TT
168cf0ede1cf13a095e48af6749d88fbc432f096Evan HuntVALIGN="MIDDLE"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>An IP network specified as an <TT
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox UserCLASS="varname"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrewsfollowed by a slash (`/') and then the number of bits in the netmask.
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsTrailing zeros in a <TT
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox UserCLASS="varname"
168cf0ede1cf13a095e48af6749d88fbc432f096Evan Hunt> may omitted.
168cf0ede1cf13a095e48af6749d88fbc432f096Evan HuntFor example, <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> is the network <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
168cf0ede1cf13a095e48af6749d88fbc432f096Evan Hunt>127.0.0.0</B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>255.0.0.0</B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User> with netmask <B
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="command"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox User>255.255.255.240</B
933799f3641f4f78445d015008bad0038900a82aTinderbox UserVALIGN="MIDDLE"
7f79131f9a8e804b93c57f3c679065cce878b726Automatic UpdaterCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>domain_name</TT
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox User> representing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonthe name of a shared key, to be used for transaction security.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>key_list</TT
a5636b773fa05a272b6876afd99309c0b3090e2fMark AndrewsVALIGN="MIDDLE"
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews>A list of one or more <TT
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="varname"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrewsseparated by semicolons and ending with a semicolon.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>A non-negative integer with an entire
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonrange limited by the range of a C language signed integer (2,147,483,647
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonon a machine with 32 bit integers). Its acceptable value might further
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonbe limited by the context in which it is used.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>path_name</TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>A quoted string which will be used as
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtona pathname, such as <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="filename"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="varname"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt>size_spec</TT
ae7e54b14c946e0984c191554db9abb4893f9349Automatic UpdaterVALIGN="MIDDLE"
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater>A number, the word <TT
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="userinput"
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updateror the word <TT
ae7e54b14c946e0984c191554db9abb4893f9349Automatic UpdaterCLASS="userinput"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>size_spec</TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User> is that of unsigned long integers
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox Useron the machine. An <TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>unlimited</TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont>size_spec</TT
a450977e98155f6e828fe6f8d52cf24674231831Mark Andrews> requests unlimited
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox Useruse, or the maximum available amount. A <TT
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox UserCLASS="varname"
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User>default size_spec</TT
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrewsthe limit that was in force when the server was started.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Huntoptionally be followed by a scaling factor: <TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="userinput"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrewskilobytes, <TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontmegabytes, and <TT
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> for gigabytes,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonwhich scale by 1024, 1024*1024, and 1024*1024*1024 respectively.</P
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonstorage overflow is currently silently ignored during conversion
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonof scaled values, resulting in values less than intended, possibly
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtoneven negative. Using <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>unlimited</TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> is the best way
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonto safely set a really large number.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="varname"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>yes_or_no</TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="userinput"
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtonalso accepted, as are the numbers <TT
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox UserCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="varname"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>dialup_option</TT
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsVALIGN="MIDDLE"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="userinput"
0e91f17da8a29086876a88962e0a3482094b6057Evan HuntCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont>notify-passive</B
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="userinput"
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark AndrewsCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonWhen used in a zone, <TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>notify-passive</B
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="userinput"
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="userinput"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Huntare restricted to slave and stub zones.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="sect2"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsNAME="address_match_lists"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt>6.1.1. Address Match Lists</A
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsNAME="AEN1180"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>6.1.1.1. Syntax</A
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="programlisting"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="varname"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>address_match_list</TT
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews> = address_match_list_element ;
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="optional"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User> address_match_list_element; ... </SPAN
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="varname"
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User>address_match_list_element</TT
ba8b771c371967dd1254c7fa82ebe4158ee04b24Tinderbox UserCLASS="optional"
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater>] (ip_address [<SPAN
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic UpdaterCLASS="optional"
91faa748a27dee38f6caea461d3e87f15b93abeaTinderbox User key key_id | acl_name | { address_match_list } )
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark AndrewsCLASS="sect3"
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsNAME="AEN1188"
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews>6.1.1.2. Definition and Usage</A
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews>Address match lists are primarily used to determine access
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrewscontrol for various server operations. They are also used to define
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrewspriorities for querying other nameservers and to set the addresses
7c8e44a2dc1121dbe3b615c9c934f37fb1741bb9Tinderbox UserCLASS="command"
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User> will listen for queries. The elements
861836e5f5df62bfaea9ad8923a05278d5ab2f3dTinderbox Userwhich constitute an address match list can be any of the following:</P
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater>an IP address (IPv4 or IPv6)</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>an IP prefix (in the `/'-notation)</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>a key ID, as defined by the key statement</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>the name of an address match list previously defined with
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic UpdaterCLASS="command"
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>a nested address match list enclosed in braces</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>Elements can be negated with a leading exclamation mark (`!')
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterand the match list names "any," "none," "localhost" and "localnets"
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterare predefined. More information on those names can be found in
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterthe description of the acl statement.</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>The addition of the key clause made the name of this syntactic
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterelement something of a misnomer, since security keys can be used
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterto validate access without regard to a host or network address. Nonetheless,
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterthe term "address match list" is still used throughout the documentation.</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>When a given IP address or prefix is compared to an address
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updatermatch list, the list is traversed in order until an element matches.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic UpdaterThe interpretation of a match depends on whether the list is being used
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterfor access control, defining listen-on ports, or as a topology,
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updaterand whether the element was negated.</P
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>When used as an access control list, a non-negated match allows
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updateraccess and a negated match denies access. If there is no match,
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updateraccess is denied. The clauses <B
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic UpdaterCLASS="command"
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>allow-query</B
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic UpdaterCLASS="command"
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater>allow-transfer</B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
bbc0e1c4f47f101c4a64db3469352c49a49e734fTinderbox User>allow-update</B
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox UserCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>blackhole</B
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updateruse address match lists this. Similarly, the listen-on option will cause
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrewsthe server to not accept queries on any of the machine's addresses
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrewswhich do not match the list.</P
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews>When used with the topology clause, a non-negated match returns
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updatera distance based on its position on the list (the closer the match
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updateris to the start of the list, the shorter the distance is between
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterit and the server). A negated match will be assigned the maximum
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterdistance from the server. If there is no match, the address will
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updaterget a distance which is further than any non-negated list element,
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterand closer than any negated element.</P
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User>Because of the first-match aspect of the algorithm, an element
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterthat defines a subset of another element in the list should come
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox Userbefore the broader element, regardless of whether either is negated. For
60d5d17479b47c03b9c7c86f54269718103750b8Automatic UpdaterCLASS="command"
1404d301dd9e7e487a247b803f63909cd10cdf72Tinderbox User> the 1.2.3.13 element is
1404d301dd9e7e487a247b803f63909cd10cdf72Tinderbox Usercompletely useless because the algorithm will match any lookup for
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic UpdaterCLASS="command"
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterthat problem by having 1.2.3.13 blocked by the negation but all
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updaterother 1.2.3.* hosts fall through.</P
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater>6.1.2. Comment Syntax</A
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic UpdaterCLASS="acronym"
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater> 9 comment syntax allows for comments to appear
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater anywhere that white space may appear in a <SPAN
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic UpdaterCLASS="acronym"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews> configuration
3040b455151b1e1173193933664b2891b6159f24Mark Andrews file. To appeal to programmers of all kinds, they can be written
8aa098c6334de11c8fd117d30851cc457813c410Mark AndrewsNAME="AEN1221"
8aa098c6334de11c8fd117d30851cc457813c410Mark Andrews>6.1.2.1. Syntax</A
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian WellingtonCLASS="programlisting"
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews>/* This is a <SPAN
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox UserCLASS="acronym"
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User> comment as in C */</PRE
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="programlisting"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews>// This is a <SPAN
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="acronym"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews> comment as in C++</PRE
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="programlisting"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews># This is a <SPAN
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="acronym"
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews> comment as in common UNIX shells and perl</PRE
e676a596869d8a80a644c99a848afb53d1c5975eMark AndrewsNAME="AEN1230"
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User>6.1.2.2. Definition and Usage</A
fedd407a76adfdd745eb7d2461673693c6f9fea9Mark Andrews>Comments may appear anywhere that whitespace may appear in
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox UserCLASS="acronym"
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrews> configuration file.</P
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrews>C-style comments start with the two characters /* (slash,
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrewsstar) and end with */ (star, slash). Because they are completely
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrewsdelimited with these characters, they can be used to comment only
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrewsa portion of a line or to span multiple lines.</P
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrews>C-style comments cannot be nested. For example, the following
05d81eae94425a5124e07626af4bcc178960bd0eMark Andrewsis not valid because the entire comment ends with the first */:</P
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark AndrewsCLASS="programlisting"
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews>/* This is the start of a comment.
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews This is still part of the comment.
7692464e78fc43578c394b8d1d30e81fec1d8523Tinderbox User/* This is an incorrect attempt at nesting a comment. */
c0cc232ba92b92c1c5a48d49449ef56f7ca05b56Tinderbox User This is no longer in any comment. */
1efe84be7849c5327001ad7dbad93d92c66c1389Mark Andrews>C++-style comments start with the two characters // (slash,
7e8129652903780873ba91f379f9ffca1f59773cMark Andrewsslash) and continue to the end of the physical line. They cannot
7e8129652903780873ba91f379f9ffca1f59773cMark Andrewsbe continued across multiple physical lines; to have one logical
7e8129652903780873ba91f379f9ffca1f59773cMark Andrewscomment span multiple lines, each line must use the // pair.</P
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews>For example:</P
e676a596869d8a80a644c99a848afb53d1c5975eMark AndrewsCLASS="programlisting"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>// This is the start of a comment. The next line
1efe84be7849c5327001ad7dbad93d92c66c1389Mark Andrews// is a new comment, even though it is logically
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews// part of the previous comment.
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews>Shell-style (or perl-style, if you prefer) comments start
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrewswith the character <TT
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark AndrewsCLASS="literal"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews> (number sign) and continue to the end of the
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrewsphysical line, as in C++ comments.</P
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt>For example:</P
b123be91958e0bc58a10c165be64d47661199e3bEvan HuntCLASS="programlisting"
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt># This is the start of a comment. The next line
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt# is a new comment, even though it is logically
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt# part of the previous comment.
9e898948ed76bf5f175bf178866c90c449843c3eTinderbox UserCLASS="warning"
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="warning"
9c2cf9e2017e6dd196e3b866808f32c6206eeedcMark Andrews>WARNING: you cannot use the semicolon (`;') character
9c2cf9e2017e6dd196e3b866808f32c6206eeedcMark Andrews to start a comment such as you would in a zone file. The
9c2cf9e2017e6dd196e3b866808f32c6206eeedcMark Andrews semicolon indicates the end of a configuration
cb40461f8744c5aeb369b84d5f48395a13a221a0Mark Andrews statement.</P
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsNAME="Configuration_File_Grammar"
5b56652059e2c22185a0b2bb1f5e58eb89a44426Tinderbox User>6.2. Configuration File Grammar</A
c19bf21885cdf78b52eee017dc1189a300657995Tinderbox UserCLASS="acronym"
f525041ae26958385b697cf82a30f108577024b6Tinderbox User> 9 configuration consists of statements and comments.
be0d1ec971748020cb0382e02b4642b493ea1e7bTinderbox User Statements end with a semicolon. Statements and comments are the
ff62ab3c2e6274f19190ded15548c723d38bbbe3Automatic Updater only elements that can appear without enclosing braces. Many
ee23b913b6acccad68cf5af480b9e289a3d00510Tinderbox User statements contain a block of substatements, which are also
ee23b913b6acccad68cf5af480b9e289a3d00510Tinderbox User terminated with a semicolon.</P
e20309353e6246485c521278131d3fced73d7957Tinderbox User>The following statements are supported:</P
ee23b913b6acccad68cf5af480b9e289a3d00510Tinderbox UserCLASS="informaltable"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCELLPADDING="3"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="CALSTABLE"
21b353c36cb484d022a0df8cb39c602649a46ae6Tinderbox UserVALIGN="MIDDLE"
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark AndrewsCLASS="command"
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark AndrewsVALIGN="MIDDLE"
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews>defines a named IP address
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrewsmatching list, for access control and other uses.</P
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsVALIGN="MIDDLE"
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark AndrewsCLASS="command"
95c3a5e116c1da135f669c3f15398172fac6279dMark AndrewsVALIGN="MIDDLE"
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews>declares control channels to be used
d58e33bfabfee19a035031dac633d36659738d56Evan HuntCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
fca737c98d2be3ef944cc96320c040fdb5f160e3Tinderbox UserVALIGN="MIDDLE"
fca737c98d2be3ef944cc96320c040fdb5f160e3Tinderbox User>includes a file.</P
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic UpdaterVALIGN="MIDDLE"
88d58d79c5bc7ce3c20a42461a5070116c736836Automatic UpdaterCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>specifies key information for use in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterauthentication and authorization using TSIG.</P
9fa39c73fc1d8bc44fdbbb79a1d26b837e7dd555Mark AndrewsVALIGN="MIDDLE"
d58e33bfabfee19a035031dac633d36659738d56Evan HuntCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsVALIGN="MIDDLE"
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt>specifies what the server logs, and where
3040b455151b1e1173193933664b2891b6159f24Mark Andrewsthe log messages are sent.</P
8bc194b266a17f89e6c54469d4dfbb408070f39eMark AndrewsVALIGN="MIDDLE"
8bc194b266a17f89e6c54469d4dfbb408070f39eMark AndrewsCLASS="command"
1f471f3b06fae27f4b42ee4f0d6dac0cc7e5bc81Tinderbox UserVALIGN="MIDDLE"
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User>controls global server configuration
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Huntoptions and sets defaults for other statements.</P
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis DupontVALIGN="MIDDLE"
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis DupontCLASS="command"
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic UpdaterVALIGN="MIDDLE"
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User>sets certain configuration options on
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox Usera per-server basis.</P
2ba8f584b97cbab864570e38fd26b8cb90961428Tinderbox UserVALIGN="MIDDLE"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="command"
2ba8f584b97cbab864570e38fd26b8cb90961428Tinderbox User>trusted-keys</B
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>defines trusted DNSSEC keys.</P
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsVALIGN="MIDDLE"
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="command"
50fa300826799727204b93cbe63bebc341c5eadeTinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>defines a view.</P
e21f41f6504b3381be86cbe7f457f9ee1fff947bTinderbox UserVALIGN="MIDDLE"
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox UserCLASS="command"
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic UpdaterVALIGN="MIDDLE"
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater>defines a zone.</P
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic UpdaterCLASS="command"
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic UpdaterCLASS="command"
4104e236f71eb5108fcfda6711878a97f6f4a8e7Automatic Updater> statements may only occur once per
4104e236f71eb5108fcfda6711878a97f6f4a8e7Automatic Updater configuration.</P
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark AndrewsNAME="AEN1323"
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox UserCLASS="command"
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater> Statement Grammar</A
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox UserCLASS="programlisting"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="command"
82b96702f09ed6bc5cd0f1aa5e54198c04cc192bTinderbox User address_match_list
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark AndrewsCLASS="sect2"
e628576d3b3d91c8954679077f4c208f1e43b433Automatic UpdaterCLASS="command"
39cad8fb7d7ff3436bb24ce761354afcb80d295aMark Andrews> Statement Definition and
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox UserCLASS="command"
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User> statement assigns a symbolic
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt name to an address match list. It gets its name from a primary
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt use of address match lists: Access Control Lists (ACLs).</P
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt>Note that an address match list's name must be defined
1921b850640ae984448e8b87870c8527fa9cddb6Evan HuntCLASS="command"
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox User> before it can be used elsewhere; no
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews forward references are allowed.</P
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews>The following ACLs are built-in:</P
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsCLASS="informaltable"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark AndrewsCELLPADDING="3"
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsCLASS="CALSTABLE"
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsVALIGN="MIDDLE"
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsCLASS="command"
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox UserVALIGN="MIDDLE"
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User>Matches all hosts.</P
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsVALIGN="MIDDLE"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsCLASS="command"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsVALIGN="MIDDLE"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews>Matches no hosts.</P
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsVALIGN="MIDDLE"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="command"
0a2ff769ecd0b5a6bda54b62bc1ec5fa6fd198a0Tinderbox UserVALIGN="MIDDLE"
182bfea3ae9912f6d5e2f4fe3e13737719e06f97Tinderbox User>Matches the IP addresses of all interfaces
182bfea3ae9912f6d5e2f4fe3e13737719e06f97Tinderbox Useron the system.</P
08190bd4d89153cee463b34f9233ad6dd88965fcMark AndrewsVALIGN="MIDDLE"
51374c645c0e6dd77c369c13834c751785f96f14Tinderbox UserCLASS="command"
51374c645c0e6dd77c369c13834c751785f96f14Tinderbox UserVALIGN="MIDDLE"
51374c645c0e6dd77c369c13834c751785f96f14Tinderbox User>Matches any host on a network for which
51374c645c0e6dd77c369c13834c751785f96f14Tinderbox Userthe system has an interface.</P
48dfee71508886d86fe8fb12f91961b5daf3141dMark AndrewsCLASS="sect2"
48dfee71508886d86fe8fb12f91961b5daf3141dMark AndrewsCLASS="sect2"
48dfee71508886d86fe8fb12f91961b5daf3141dMark AndrewsNAME="AEN1365"
48dfee71508886d86fe8fb12f91961b5daf3141dMark AndrewsCLASS="command"
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews> Statement Grammar</A
1368e4b34cef64604c874fcc40201c78e548714cTinderbox UserCLASS="programlisting"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="command"
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater inet ( ip_addr | * ) [<SPAN
f09f1bf18e3ad40a0e8a6cc3dabf1c11f04992cbMark AndrewsCLASS="optional"
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater> port ip_port </SPAN
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="replaceable"
8c9c79e5fea0cb698026a74821695907c8312a46Mark Andrews> address_match_list </I
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="replaceable"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews> key_list </I
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="optional"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews> inet ...; </SPAN
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsCLASS="sect2"
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark AndrewsCLASS="sect2"
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserNAME="AEN1374"
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox UserCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> Statement Definition and
169f44b082b340b952e26c0fdb930c102a957752Mark AndrewsCLASS="command"
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater> statement declares control
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater channels to be used by system administrators to affect the
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews operation of the local nameserver. These control channels are
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews used by the <B
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark AndrewsCLASS="command"
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews> utility to send commands to
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User and retrieve non-DNS results from a nameserver.</P
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox UserCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews socket accessible to the Internet, created at the specified
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews> on the specified
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews>. If no port is specified, port 953
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews is used by default. "*" cannot be used for
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews>The ability to issue commands over the control channel is
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews restricted by the <B
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
1a63fb1d1448ed3f8fd7227ae57be67c2e71279eMark Andrews> clauses. Connections to the control
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt channel are permitted based on the address permissions in
1a63fb1d1448ed3f8fd7227ae57be67c2e71279eMark AndrewsCLASS="command"
7019b0441a234153dde155622c405960b0d35946Tinderbox User>address_match_list</B
2a3eef7f65270e3f9a954573d866b368b7857584Tinderbox UserCLASS="command"
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews members of the <B
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="command"
2a3eef7f65270e3f9a954573d866b368b7857584Tinderbox User>address_match_list</B
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews ignored, and instead are interpreted independently based the
0bb05fe2c2fa40c635ddc5fa38ff65e523b11d8eEvan HuntCLASS="command"
267e57d39b06f65eecb8f92e476dcf0c8cd90fabTinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater> is allowed to be used to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater authenticate commands and responses given over the control
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater channel by digitally signing each message between the server and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a command client (See <A
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>Remote Name Daemon Control application</I
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic UpdaterHREF="Bv9ARM.ch03.html#admin_tools"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>Section 3.4.1.2</A
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater>). All commands to the control channel
61932ed91732417e05c8c6fd335acf1be896c778Mark Andrews must be signed by one of its specified keys to
3040b455151b1e1173193933664b2891b6159f24Mark Andrews be honored.</P
e135e3c4b1f4f986f00997f5ad5866effb203139Tinderbox User>The UNIX control channel type of <SPAN
bec9d04b657e1582d2531bdc02503bebde2aa978Tinderbox UserCLASS="acronym"
28e0061dbcc2ae45d34541267a00d8b4de5b4a41Tinderbox User> 8 is not supported
99c231a3bd27893583204cd0a3e3103dc78dbc28Tinderbox UserCLASS="acronym"
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater> 9.0.0, and is not expected to be added in future
11b6b0d74bb8dd6bd1ce0b60ba7f9b66323f06d4Tinderbox User releases. If it is present in the controls statement from a
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic UpdaterCLASS="acronym"
ec7751119a08c6a7250f3187beed69a8b836d349Tinderbox User> 8 configuration file, a non-fatal warning will be
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark AndrewsCLASS="sect2"
d58e33bfabfee19a035031dac633d36659738d56Evan HuntNAME="AEN1400"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox User> Statement Grammar</A
2fd1e3918971180155c10d09454a277f015daecaAutomatic UpdaterCLASS="programlisting"
2fd1e3918971180155c10d09454a277f015daecaAutomatic UpdaterCLASS="replaceable"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="sect2"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsNAME="AEN1405"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> Statement Definition and
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> statement inserts the
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews specified file at the point that the <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews statement is encountered. The <B
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews statement facilitates the administration of configuration files
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews by permitting the reading or writing of some things but not
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews others. For example, the statement could include private keys
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews that are readable only by a nameserver.</P
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="sect2"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="sect2"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsNAME="AEN1412"
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="command"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews> Statement Grammar</A
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="programlisting"
fdd0516065be2316409d0cc7dfb4e4f54eadc5afMark AndrewsCLASS="replaceable"
f0877b0237674d0519006ca7f8436e5f92250d30Mark Andrews algorithm <TT
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="replaceable"
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="replaceable"
fdd0516065be2316409d0cc7dfb4e4f54eadc5afMark AndrewsCLASS="sect2"
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserNAME="AEN1419"
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="command"
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User> Statement Definition and Usage</A
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> statement defines a shared
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington secret key for use with TSIG, see <A
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>Section 4.4</A
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="replaceable"
e21f41f6504b3381be86cbe7f457f9ee1fff947bTinderbox User>, also known as the
c2abd6efeb9affa70aabb63da2acb23e135cf7f2Mark Andrews key name, is a domain name uniquely identifying the key. It can
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User be used in a "server" statement to cause requests sent to that
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User server to be signed with this key, or in address match lists to
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater verify that incoming requests have been signed with a key
9e898948ed76bf5f175bf178866c90c449843c3eTinderbox User matching this name, algorithm, and secret.</P
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="replaceable"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User>algorithm_id</I
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews that specifies a security/authentication algorithm. The only
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater algorithm currently supported with TSIG authentication is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="literal"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="replaceable"
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark Andrews>secret_string</I
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews> is the secret to be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater used by the algorithm, and is treated as a base-64 encoded
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark AndrewsCLASS="sect2"
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark AndrewsNAME="AEN1431"
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="command"
7fdbd6fc9df8728852ccaecb2d66241ab96a4084Tinderbox User> Statement Grammar</A
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox UserCLASS="programlisting"
4fda24d843edac463c98785ec0c850d912592dc1Tinderbox UserCLASS="command"
4fda24d843edac463c98785ec0c850d912592dc1Tinderbox UserCLASS="command"
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic UpdaterCLASS="replaceable"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>channel_name</I
4aec4843241dca64de7eb6363944df0b09cb83ecTinderbox UserCLASS="command"
4aec4843241dca64de7eb6363944df0b09cb83ecTinderbox UserCLASS="replaceable"
4aec4843241dca64de7eb6363944df0b09cb83ecTinderbox UserCLASS="command"
1404d301dd9e7e487a247b803f63909cd10cdf72Tinderbox UserCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="literal"
601c1908d06375f5dea00ab98671a6c934d8a840Automatic UpdaterCLASS="command"
11b6b0d74bb8dd6bd1ce0b60ba7f9b66323f06d4Tinderbox UserCLASS="replaceable"
b577ce9ed2153db6539fb975b4a7aa16d9b3baeeTinderbox UserCLASS="command"
ac2ad7b4e4e41e7e788dbe103c581f1605209d3bTinderbox UserCLASS="replaceable"
ac2ad7b4e4e41e7e788dbe103c581f1605209d3bTinderbox User>syslog_facility</I
aa1d397c4736cd86540555193d71e55fa3b37b2aMark AndrewsCLASS="command"
e676a596869d8a80a644c99a848afb53d1c5975eMark AndrewsCLASS="command"
cd839f5cf5f84cf163f55ff05cb88ce37efd24d1Automatic UpdaterCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="option"
735e1ed9685077e25f744d692acf77c5bf5d4490Tinderbox UserCLASS="option"
a5636b773fa05a272b6876afd99309c0b3090e2fMark AndrewsCLASS="option"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="option"
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic UpdaterCLASS="replaceable"
cb40461f8744c5aeb369b84d5f48395a13a221a0Mark AndrewsCLASS="option"
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="command"
bac4435d473c9a0281507524f084480c34aa942aTinderbox User>print-category</B
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="option"
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="option"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="command"
bac4435d473c9a0281507524f084480c34aa942aTinderbox User>print-severity</B
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="option"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="option"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews>print-time</B
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="option"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="option"
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox UserCLASS="command"
9692d283bb43c9eab49a7fadfc1b74a6e20e6151Tinderbox UserCLASS="replaceable"
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox User>category_name</I
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox UserCLASS="replaceable"
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox User>channel_name</I
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox UserCLASS="replaceable"
c218e22e3e6cbd409b61a14f1480b5ce5c70bfc1Tinderbox User>channel_nam</I
560d6da48f066000541dd43f5d407644dee12bebTinderbox UserNAME="AEN1471"
9bc394fffdd50f6e47614b2d317da7274122366fTinderbox UserCLASS="command"
c218e22e3e6cbd409b61a14f1480b5ce5c70bfc1Tinderbox User> Statement Definition and
c218e22e3e6cbd409b61a14f1480b5ce5c70bfc1Tinderbox UserCLASS="command"
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt> statement configures a wide
c218e22e3e6cbd409b61a14f1480b5ce5c70bfc1Tinderbox Uservariety of logging options for the nameserver. Its <B
c218e22e3e6cbd409b61a14f1480b5ce5c70bfc1Tinderbox UserCLASS="command"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox Userassociates output methods, format options and severity levels with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox Usera name that can then be used with the <B
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterto select how various classes of messages are logged.</P
f42fc714eda962112e45b904d1f846c61a080114Automatic UpdaterCLASS="command"
a6e1f63f50af688610ebd2521ba7f028767b51f3Mark Andrews> statement is used to define
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox Useras many channels and categories as are wanted. If there is no <B
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox UserCLASS="command"
f42fc714eda962112e45b904d1f846c61a080114Automatic Updaterthe logging configuration will be:</P
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic UpdaterCLASS="programlisting"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox UserCLASS="command"
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater category "default" { "default_syslog"; "default_debug"; };
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox UserCLASS="acronym"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews> 9, the logging configuration is only established when
1dbe80aade5bed39893d903cf9d7318a5265813aTinderbox Userthe entire configuration file has been parsed. In <SPAN
1dbe80aade5bed39893d903cf9d7318a5265813aTinderbox UserCLASS="acronym"
3040b455151b1e1173193933664b2891b6159f24Mark Andrewsestablished as soon as the <B
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="command"
850cfa4e86da9f63c1b97ec8c743c091ffd3546bFrancis Dupontwas parsed. When the server is starting up, all logging messages
7c8e44a2dc1121dbe3b615c9c934f37fb1741bb9Tinderbox Userregarding syntax errors in the configuration file go to the default
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontchannels, or to standard error if the "<TT
d98b4b724343547314bde32a54966c8f124a5f03Mark AndrewsCLASS="option"
862cad747c24bc3e608f31cde1d7eddb2409a316Tinderbox Userwas specified.</P
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserNAME="AEN1488"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>6.2.10.1. The <B
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="command"
e8e87ede5c36b95806c77bcd34894ad9c4b39a78Tinderbox User>All log output goes to one or more <I
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="emphasis"
2706fce75f04398595d9648122c6b67164e94fccTinderbox Useryou can make as many of them as you want.</P
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews>Every channel definition must include a destination clause that
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewssays whether messages selected for the channel go to a file, to a
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewsparticular syslog facility, to the standard error stream, or are
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewsdiscarded. It can optionally also limit the message severity level
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewsthat will be accepted by the channel (the default is
eac5382be368b43df62e4ac32075131fb4997f03Tinderbox UserCLASS="command"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews>), and whether to include a
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="command"
536da846f6cc03ad8abbb8bb9d5d8a6f607b8c33Mark Andrews>-generated time stamp, the category name
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrewsand/or severity level (the default is not to include any).</P
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews> destination clause
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewscauses all messages sent to the channel to be discarded;
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrewsin that case, other options for the channel are meaningless.</P
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="command"
d98b4b724343547314bde32a54966c8f124a5f03Mark Andrews> destination clause directs the channel
2706fce75f04398595d9648122c6b67164e94fccTinderbox Userto a disk file. It can include limitations
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrewsboth on how large the file is allowed to become, and how many versions
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrewsof the file will be saved each time the file is opened.</P
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark AndrewsCLASS="command"
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrews> option for files is simply a hard
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrewsceiling on log growth. If the file ever exceeds the size, then <B
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark AndrewsCLASS="command"
0d13a9584b9f97693ab22d54322f1c484d578701Mark Andrewsnot write anything more to it until the file is reopened; exceeding
0d13a9584b9f97693ab22d54322f1c484d578701Mark Andrewsthe size does not automatically trigger a reopen. The default behavior
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark Andrewsis not to limit the size of the file.</P
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark Andrews>If you use the <B
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark AndrewsCLASS="command"
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark Andrews> log file option,
0d13a9584b9f97693ab22d54322f1c484d578701Mark AndrewsCLASS="command"
cb40461f8744c5aeb369b84d5f48395a13a221a0Mark Andrews> will retain that many backup versions
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark Andrewsof the file by renaming them when opening. For example, if you choose
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark Andrewsto keep 3 old versions of the file <TT
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark AndrewsCLASS="filename"
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrewsjust before it is opened <TT
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark AndrewsCLASS="filename"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark AndrewsCLASS="filename"
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox UserCLASS="filename"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Huntrenamed to <TT
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="filename"
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="filename"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Huntrenamed to <TT
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="filename"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt>. No rolled versions
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Huntare kept by default; any existing log file is simply appended. The <B
609b8d08176469485edce25f3c2f50365bbd3819Mark AndrewsCLASS="command"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt>unlimited</B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewsis synonymous with <B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="command"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews> in current <SPAN
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="acronym"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews> releases.</P
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews>Example usage of the size and versions options:</P
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="programlisting"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews>channel "an_example_channel" {
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews file "example.log" versions 3 size 20m;
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews print-time yes;
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews print-category yes;
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="command"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews> destination clause directs the
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewschannel to the system log. Its argument is a
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrewssyslog facility as described in the <B
7e1a8f402e3881388db37152f71c698cb1f1c426Mark AndrewsCLASS="command"
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic UpdaterCLASS="command"
213dd665a9f45c3acb5f6c5f853bbbd5fd1598a2Tinderbox User> will handle messages sent to
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox Userthis facility is described in the <B
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="command"
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrewspage. If you have a system which uses a very old version of <B
351eca011cf38fd3272b325029afce144a9a1ebaMark AndrewsCLASS="command"
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrewsonly uses two arguments to the <B
351eca011cf38fd3272b325029afce144a9a1ebaMark AndrewsCLASS="command"
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews>openlog()</B
3040b455151b1e1173193933664b2891b6159f24Mark Andrewsthen this clause is silently ignored.</P
351eca011cf38fd3272b325029afce144a9a1ebaMark AndrewsCLASS="command"
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews> clause works like <B
351eca011cf38fd3272b325029afce144a9a1ebaMark AndrewsCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews"priorities," except that they can also be used if you are writing
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrewsstraight to a file rather than using <B
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
31de528a5f7fae26452f6f68625702c4e4d10af9Tinderbox UserMessages which are not at least of the severity level given will
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox Usernot be selected for the channel; messages of higher severity levels
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrewswill be accepted.</P
4ba21f60009e18c5950d18546a127e70be537effMark Andrews>If you are using <B
4ba21f60009e18c5950d18546a127e70be537effMark AndrewsCLASS="command"
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews>, then the <B
f520803b46dc189fdaf84adc87ef327d3587b435Mark AndrewsCLASS="command"
9e898948ed76bf5f175bf178866c90c449843c3eTinderbox Userwill also determine what eventually passes through. For example,
8aa098c6334de11c8fd117d30851cc457813c410Mark Andrewsdefining a channel facility and severity as <B
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="command"
8aa098c6334de11c8fd117d30851cc457813c410Mark AndrewsCLASS="command"
8aa098c6334de11c8fd117d30851cc457813c410Mark Andrewsonly logging <B
8aa098c6334de11c8fd117d30851cc457813c410Mark AndrewsCLASS="command"
8aa098c6334de11c8fd117d30851cc457813c410Mark AndrewsCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark Andrewscause messages of severity <B
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic UpdaterCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterbe dropped. If the situation were reversed, with <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
9a5217f827ac0e006016745e5305b31dc0c7767fTinderbox Usermessages of only <B
9a5217f827ac0e006016745e5305b31dc0c7767fTinderbox UserCLASS="command"
ba8b771c371967dd1254c7fa82ebe4158ee04b24Tinderbox User> or higher, then <B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterprint all messages it received from the channel.</P
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic UpdaterCLASS="command"
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater> destination clause directs the
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterchannel to the server's standard error stream. This is intended for
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updateruse when the server is running as a foreground process, for example
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterwhen debugging a configuration.</P
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater>The server can supply extensive debugging information when
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterit is in debugging mode. If the server's global debug level is greater
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterthan zero, then debugging mode will be active. The global debug
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updaterlevel is set either by starting the <B
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic UpdaterCLASS="command"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="option"
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater> flag followed by a positive integer,
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrewsor by running <B
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="command"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews>rndc trace</B
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrewsmethod is not yet implemented</P
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User> The global debug level
4c6bae917bec70e1fc4d1b761a9765075af78441Tinderbox Usercan be set to zero, and debugging mode turned off, by running <B
4c6bae917bec70e1fc4d1b761a9765075af78441Tinderbox UserCLASS="command"
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User>. All debugging messages in the server have a debug
1368e4b34cef64604c874fcc40201c78e548714cTinderbox Userlevel, and higher debug levels give more detailed output. Channels
3d015b2a0aeaa8d763fc783c23f895125ca1e0b8Tinderbox Userthat specify a specific debug severity, for example:</P
3d015b2a0aeaa8d763fc783c23f895125ca1e0b8Tinderbox UserCLASS="programlisting"
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User>channel "specific_debug_level" {
4c6bae917bec70e1fc4d1b761a9765075af78441Tinderbox User severity debug 3;
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt>will get debugging output of level 3 or less any time the
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Huntserver is in debugging mode, regardless of the global debugging
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Huntlevel. Channels with <B
3d015b2a0aeaa8d763fc783c23f895125ca1e0b8Tinderbox UserCLASS="command"
8fabea916f73d0b7c7371998dd041b41d1ad5296Tinderbox User> severity use the
3d015b2a0aeaa8d763fc783c23f895125ca1e0b8Tinderbox Userserver's global level to determine what messages to print.</P
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan HuntCLASS="command"
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt>print-time</B
2706fce75f04398595d9648122c6b67164e94fccTinderbox User> has been turned on, then
2706fce75f04398595d9648122c6b67164e94fccTinderbox Userthe date and time will be logged. <B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User>print-time</B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterbe specified for a <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater> channel, but is usually
3a28155fe228cd6d59b15f1ca0b568be6620a9d2Tinderbox Userpointless since <B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
3a28155fe228cd6d59b15f1ca0b568be6620a9d2Tinderbox User> also prints the date and
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox UserCLASS="command"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>print-category</B
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews> is requested, then the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updatercategory of the message will be logged as well. Finally, if <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>print-severity</B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updateron, then the severity level of the message will be logged. The <B
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic UpdaterCLASS="command"
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupontbe used in any combination, and will always be printed in the following
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupontorder: time, category, severity. Here is an example where all three <B
5c5c6d289db78e41f714007426a387498e15963cFrancis DupontCLASS="command"
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsCLASS="computeroutput"
95de440e8d2b07bb130505b4146059e5734e2eeaTinderbox User>28-Feb-2000 15:05:32.863 general: notice: running</TT
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont>There are four predefined channels that are used for
5b4ef313da4283079786e516b4b07a1691e1dc50Mark AndrewsCLASS="command"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>'s default logging as follows. How they are
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrewsused is described in <A
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsHREF="Bv9ARM.ch06.html#the_category_phrase"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews>Section 6.2.10.2</A
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="programlisting"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox User>channel "default_syslog" {
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User syslog daemon; // end to syslog's daemon
879391501ee0ffba072433120bf1baa4087f8899Automatic Updater severity info; // only send priority info
8f536463f9fdfa7da6a8310e4f4895373beb2961Mark Andrewschannel "default_debug" {
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater // the working directory
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt // Note: stderr is used instead
3040b455151b1e1173193933664b2891b6159f24Mark Andrews // if the server is started
2beefc22e6debdb72d7b2a069787ff565fc79ec4Tinderbox User // with the '-f' option.
dcd42a39d311b44877161ffd1e27fa62700c0171Mark Andrews severity dynamic // log at the server's
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater // current debug level
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterchannel "default_stderr" { // writes to stderr
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater severity info; // only send priority info
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox Userchannel "null" {
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User null; // toss anything sent to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater // this channel
3040b455151b1e1173193933664b2891b6159f24Mark AndrewsCLASS="command"
c5f7f6aa6c51d35353a9485b32abbabfe8358b4eMark Andrews>default_debug</B
c5f7f6aa6c51d35353a9485b32abbabfe8358b4eMark Andrews> channel normally writes
7c8e44a2dc1121dbe3b615c9c934f37fb1741bb9Tinderbox UserCLASS="filename"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington> in the server's working
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellingtondirectory. For security reasons, when the "<TT
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian WellingtonCLASS="option"
22bed5c0fa8aa33ebca97235c0509db335440811Tinderbox Usercommand line option is used, the <TT
22bed5c0fa8aa33ebca97235c0509db335440811Tinderbox UserCLASS="filename"
22bed5c0fa8aa33ebca97235c0509db335440811Tinderbox Useris created only after <B
22bed5c0fa8aa33ebca97235c0509db335440811Tinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> has changed to the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaternew UID, and any debug output generated while <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updaterstarting up and still running as root is discarded. If you need
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updaterto capture this output, you must run the server with the "<TT
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="option"
d58e33bfabfee19a035031dac633d36659738d56Evan Huntoption and redirect standard error to a file.</P
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox User>Once a channel is defined, it cannot be redefined. Thus you
3040b455151b1e1173193933664b2891b6159f24Mark Andrewscannot alter the built-in channels directly, but you can modify
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrewsthe default logging by pointing categories at channels you have defined.</P
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterNAME="the_category_phrase"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>6.2.10.2. The <B
ab496cc3df1648e9ad992a87c35c2c0870fdc69dTinderbox UserCLASS="command"
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User>There are many categories, so you can send the logs you want
fedd407a76adfdd745eb7d2461673693c6f9fea9Mark Andrewsto see wherever you want, without seeing logs you don't want. If
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updateryou don't specify a list of channels for a category, then log messages
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox Userin that category will be sent to the <B
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="command"
ab496cc3df1648e9ad992a87c35c2c0870fdc69dTinderbox Userinstead. If you don't specify a default category, the following
ab496cc3df1648e9ad992a87c35c2c0870fdc69dTinderbox User"default default" is used:</P
5b4ef313da4283079786e516b4b07a1691e1dc50Mark AndrewsCLASS="programlisting"
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews>category "default" { "default_syslog"; "default_debug"; };
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User>As an example, let's say you want to log security events to
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox Usera file, but you also want keep the default logging behavior. You'd
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox Userspecify the following:</P
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark AndrewsCLASS="programlisting"
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews>channel "my_security_channel" {
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews file "my_security_file";
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews severity info;
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrewscategory "security" {
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews "my_security_channel";
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt "default_syslog";
3040b455151b1e1173193933664b2891b6159f24Mark Andrews "default_debug";
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater>To discard all messages in a category, specify the <B
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic UpdaterCLASS="command"
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark AndrewsCLASS="programlisting"
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User>category "xfer-out" { "null"; };
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox Usercategory "notify" { "null"; };
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>Following are the available categories and brief descriptions
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrewsof the types of log information they contain. More
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrewscategories may be added in future <SPAN
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox UserCLASS="acronym"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User> releases.</P
9563f388c8ca1bb9ebb04db54e122815b0008c8aTinderbox UserCLASS="informaltable"
50cfe402e61ba8d816d845a9f297e3de18f4fc15Tinderbox UserCELLPADDING="3"
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark AndrewsCLASS="CALSTABLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
f46621af221784fd08339c6fe9509d9e48334561Tinderbox UserVALIGN="MIDDLE"
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User>The default category defines the logging
f46621af221784fd08339c6fe9509d9e48334561Tinderbox Useroptions for those categories where no specific configuration has been
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox UserCLASS="command"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>The catch-all. Many things still aren't
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrewsclassified into categories, and they all end up here.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic UpdaterVALIGN="MIDDLE"
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater>Messages relating to the databases used
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox Userinternally by the name server to store zone and cache data.</P
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic UpdaterVALIGN="MIDDLE"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User>Approval and denial of requests.</P
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Configuration file parsing and processing.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="command"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>DNS resolution, such as the recursive
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrewslookups performed on behalf of clients by a caching name server.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontVALIGN="MIDDLE"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington>Zone transfers the server is receiving.</P
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontVALIGN="MIDDLE"
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark AndrewsCLASS="command"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsVALIGN="MIDDLE"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont>Zone transfers the server is sending.</P
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsVALIGN="MIDDLE"
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark AndrewsCLASS="command"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>The NOTIFY protocol.</P
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic UpdaterVALIGN="MIDDLE"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater>Processing of client requests.</P
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis DupontVALIGN="MIDDLE"
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis DupontCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Network operations.</P
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson>Dynamic updates.</P
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic UpdaterVALIGN="MIDDLE"
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark AndrewsCLASS="sect2"
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox UserCLASS="command"
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User> Statement Grammar</A
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews> This is the grammar of the <B
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark AndrewsCLASS="command"
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews statement in the <TT
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark AndrewsCLASS="filename"
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark AndrewsCLASS="programlisting"
f7a71eef29bcbf892270460269c79664f600cffdAutomatic UpdaterCLASS="command"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="optional"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User> listen-on { <TT
8711e5c73ca872d59810760af0332194cbdd619bAutomatic UpdaterCLASS="replaceable"
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater>address_match_list</I
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox UserCLASS="optional"
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox UserCLASS="replaceable"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="optional"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User> search { <TT
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox UserCLASS="replaceable"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User>domain_name</I
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="optional"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox UserCLASS="replaceable"
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User> ; ... </SPAN
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="optional"
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox UserCLASS="replaceable"
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox UserNAME="AEN1691"
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox UserCLASS="command"
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User> Statement Definition and Usage</A
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="command"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> statement configures the name
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User server to also act as a lightweight resolver server, see
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User>Section 5.2</A
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User>. There may be be multiple
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="command"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> statements configuring
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User lightweight resolver servers with different properties.</P
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="command"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> statement specifies a list of
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User addresses (and ports) that this instance of a lightweight resolver daemon
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User should accept requests on. If this statement is omitted, requests
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User will be accepted on 127.0.0.1, port 53.</P
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="command"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> statement binds this instance of a
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User lightweight resolver daemon to a view in the DNS namespace, so that the
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User response will be constructed in the same manner as a normal DNS query
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User matching this view. If this statement is omitted, the default view is
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User used, and if there is no default view, an error is triggered.</P
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox UserCLASS="command"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User> statement is equivalent to the
2ec4ab21838e218863d052ebfa3e106e04f50820Evan HuntCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> statement in
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="filename"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>. It provides a list of domains
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews which are appended to relative names in queries.</P
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> statement is equivalent to the
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> statement in
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="filename"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>. It indicates the minimum
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews number of dots in a relative domain name that should result in an
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews exact match lookup before search path elements are appended.</P
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="sect2"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="sect2"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsNAME="AEN1710"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> Statement Grammar</A
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>This is the grammar of the <B
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews statement in the <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="filename"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="programlisting"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="command"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> version <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>version_string</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> directory <TT
aa1d397c4736cd86540555193d71e55fa3b37b2aMark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> named-xfer <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> tkey-domain <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>domainname</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews> tkey-dhkey <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> dump-file <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> memstatistics-file <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> pid-file <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> statistics-file <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>path_name</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> zone-statistics <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater> auth-nxdomain <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> deallocate-on-exit <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>dialup_option</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> fake-iquery <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> fetch-glue <TT
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="replaceable"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews>yes_or_no</I
4f087942583014b241adca1bc78c6db89ed96e94Mark AndrewsCLASS="optional"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews> has-old-clients <TT
ab833877278ad5535eef57e4f62291becaea5bc5Mark AndrewsCLASS="replaceable"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews>yes_or_no</I
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="optional"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt> host-statistics <TT
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="replaceable"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt>yes_or_no</I
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="optional"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt> multiple-cnames <TT
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan HuntCLASS="replaceable"
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt>yes_or_no</I
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="optional"
214af784e91553d387246fd9ce46cb1291697b9aTinderbox UserCLASS="replaceable"
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic UpdaterCLASS="replaceable"
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic UpdaterCLASS="optional"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User> recursion <TT
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox UserCLASS="replaceable"
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas GustafssonCLASS="optional"
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater> rfc2308-type1 <TT
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox UserCLASS="replaceable"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="optional"
94df856897945fe58f130ba78765c57308bc5400Automatic Updater> use-id-pool <TT
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox UserCLASS="replaceable"
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark AndrewsCLASS="optional"
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox User> maintain-ixfr-base <TT
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark AndrewsCLASS="replaceable"
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox UserCLASS="optional"
da93950363b307b718d156514b95b9df93a63776Mark Andrews> forward ( <TT
da93950363b307b718d156514b95b9df93a63776Mark AndrewsCLASS="replaceable"
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic UpdaterCLASS="replaceable"
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox UserCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> forwarders { [<SPAN
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> ; ... </SPAN
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> check-names ( <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> allow-query { <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> allow-transfer { <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> allow-recursion { <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> blackhole { <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> listen-on [<SPAN
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> listen-on-v6 [<SPAN
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User>address_match_list</I
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> query-source [<SPAN
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="optional"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User> address ( <TT
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox UserCLASS="replaceable"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="optional"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="replaceable"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="replaceable"
5747235bf35e7398984fd6b4632743396895ea7aTinderbox UserCLASS="optional"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews> max-transfer-time-in <TT
644973f327e9db74779e7c0426db90909173b284Automatic UpdaterCLASS="replaceable"
631aac8c2802f14d2e8ab42255d14a3337009da7Tinderbox UserCLASS="optional"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User> max-transfer-time-out <TT
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="replaceable"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="optional"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User> max-transfer-idle-in <TT
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="replaceable"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="optional"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User> max-transfer-idle-out <TT
a6f8640ede28c744beef02f180392aa5844d9783Tinderbox UserCLASS="replaceable"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="optional"
a9d14bf051644716b5db9209c453d2c5eb83f174Tinderbox User> tcp-clients <TT
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="optional"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews> recursive-clients <TT
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="replaceable"
90863a6f9bfb06062c7fdf269bb675e7b674fc31Mark AndrewsCLASS="optional"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews> serial-queries <TT
068a66979695c77359e7a9181bb3f831c965b21cMark AndrewsCLASS="replaceable"
b871c7156eb037d41f53828c6fcb9cc876128962Mark AndrewsCLASS="optional"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews> transfer-format <TT
068a66979695c77359e7a9181bb3f831c965b21cMark AndrewsCLASS="replaceable"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews>( one-answer | many-answers )</I
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User> transfers-in <TT
068a66979695c77359e7a9181bb3f831c965b21cMark AndrewsCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> transfers-out <TT
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark AndrewsCLASS="replaceable"
f4193c2021ab0aeaad33fe0b3d1d49c80db5c725Mark AndrewsCLASS="optional"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews> transfers-per-ns <TT
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="replaceable"
068a66979695c77359e7a9181bb3f831c965b21cMark AndrewsCLASS="optional"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User> transfer-source (<TT
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
5de1cdae8a44312ca0dbb2a0fd0388fa35676a84Tinderbox UserCLASS="constant"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="optional"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="optional"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews> transfer-source-v6 (<TT
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="replaceable"
aa1d397c4736cd86540555193d71e55fa3b37b2aMark AndrewsCLASS="constant"
bf1263835e8e35421960f65088c043f42aacef13Mark AndrewsCLASS="optional"
ac4e70ff8955669341f435bc0a734a17c01af124Mark AndrewsCLASS="replaceable"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="optional"
76fbdc591b3d46df28878a6ff844798622b85265Tinderbox User> notify-source (<TT
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark AndrewsCLASS="replaceable"
59528addd704f8d5757b54e540520f74e588a7c7Automatic UpdaterCLASS="constant"
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic UpdaterCLASS="optional"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserCLASS="replaceable"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="optional"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews> notify-source-v6 (<TT
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="replaceable"
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox UserCLASS="constant"
a450977e98155f6e828fe6f8d52cf24674231831Mark AndrewsCLASS="optional"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="replaceable"
f520803b46dc189fdaf84adc87ef327d3587b435Mark AndrewsCLASS="optional"
ebef9584efe60846358489cc9269e93690fbd8c3Tinderbox User> also-notify { <TT
6715db6593ce9a271ac3131cd7a886feaa386a2eEvan HuntCLASS="replaceable"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserCLASS="optional"
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan HuntCLASS="replaceable"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="optional"
d6487e3c0a981bd8ac1e155d3a2d590c078d6c85Tinderbox UserCLASS="replaceable"
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark Andrews>] ; ... </SPAN
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark AndrewsCLASS="optional"
27c3c21f41520e8d6336d80a8094389e321cb6d2Mark Andrews> max-ixfr-log-size <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark AndrewsCLASS="optional"
bac4435d473c9a0281507524f084480c34aa942aTinderbox User> coresize <TT
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark AndrewsCLASS="replaceable"
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox UserCLASS="optional"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User> datasize <TT
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox UserCLASS="replaceable"
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark AndrewsCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
1921b850640ae984448e8b87870c8527fa9cddb6Evan HuntCLASS="optional"
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox User> stacksize <TT
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark AndrewsCLASS="replaceable"
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews>size_spec</I
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark AndrewsCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> cleaning-interval <TT
53b97c9873a923f504893d1e2ab62000dfac221fTinderbox UserCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
713a5e3080f112b3efde9235e9c92035056ff966Automatic Updater> heartbeat-interval <TT
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark AndrewsCLASS="replaceable"
8add7cdaa81ec881fe17df02ed8833722dc9e690Tinderbox UserCLASS="optional"
be46cb4bee9253ee4832340c719920642e00c41aTinderbox User> interface-interval <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="replaceable"
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic UpdaterCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> statistics-interval <TT
572cb2c1c931f6bc6a4a019c103ae88239b0eb96Automatic UpdaterCLASS="replaceable"
27c3c21f41520e8d6336d80a8094389e321cb6d2Mark AndrewsCLASS="optional"
1cbfdb3c231b8e1df549cfcf11d9dcad9d929d9cTinderbox User> topology [<SPAN
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox User>address_match_list</I
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="optional"
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater> sortlist [<SPAN
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserCLASS="optional"
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark AndrewsCLASS="replaceable"
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox User>address_match_list</I
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="optional"
f520803b46dc189fdaf84adc87ef327d3587b435Mark Andrews> rrset-order [<SPAN
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox UserCLASS="optional"
ace87434ed3dc7b9d8b36835fd2ce497d29d8191Tinderbox UserCLASS="replaceable"
0197efed438a96881ebd8d165f8479a89f1ba62fTinderbox User>order_spec</I
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis DupontCLASS="optional"
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark AndrewsCLASS="replaceable"
d6487e3c0a981bd8ac1e155d3a2d590c078d6c85Tinderbox User>order_spec</I
5a6d22a5b3b014f6dd0b36999864bd2c3e0d8465Mark Andrews> ; ... </SPAN
aef6cf0f147a5014d4891c9689b9f463399e16e7Tinderbox UserCLASS="optional"
2706fce75f04398595d9648122c6b67164e94fccTinderbox User> lame-ttl <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> max-ncache-ttl <TT
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="replaceable"
e5a6871cd0635ecdb2bf792316a2d8c53206f4b2Tinderbox UserCLASS="optional"
00ce5d1add91ba5664de4da3cda8c3a5017ba6a7Tinderbox User> max-cache-ttl <TT
e5a6871cd0635ecdb2bf792316a2d8c53206f4b2Tinderbox UserCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
e5a6871cd0635ecdb2bf792316a2d8c53206f4b2Tinderbox User> sig-validity-interval <TT
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="replaceable"
a61158fed2e0281a40e3e97e0b7c3f9789a07b4eTinderbox UserCLASS="optional"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User> min-roots <TT
a61158fed2e0281a40e3e97e0b7c3f9789a07b4eTinderbox UserCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="replaceable"
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsCLASS="optional"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User> treat-cr-as-space <TT
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> min-refresh-time <TT
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User> max-refresh-time <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> min-retry-time <TT
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox UserCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User> max-retry-time <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
e5a6871cd0635ecdb2bf792316a2d8c53206f4b2Tinderbox UserCLASS="replaceable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="optional"
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox User> additional-from-auth <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="optional"
6ee455a915d0e5cab50865da23152efe59ea1decTinderbox User> additional-from-cache <TT
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="replaceable"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserNAME="AEN1911"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserCLASS="command"
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User> Statement Definition and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> statement sets up global options
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox Userto be used by <SPAN
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="acronym"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>. This statement may appear only once in a configuration
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox Userfile. If more than one occurrence is found, the first occurrence
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterdetermines the actual options used, and a warning will be generated.
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox UserIf there is no <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> statement, an options
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox Userblock with each option set to its default will be used.<DIV
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="informaltable"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCELLPADDING="3"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="CALSTABLE"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsVALIGN="MIDDLE"
f0c5e918974bf778af6cd1e25309ad13e30a79a6Tinderbox UserCLASS="command"
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic UpdaterVALIGN="MIDDLE"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews>The version the server should report
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updatervia a query of name <TT
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox UserCLASS="filename"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="command"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterThe default is the real version number of this server.</P
169f44b082b340b952e26c0fdb930c102a957752Mark AndrewsVALIGN="MIDDLE"
e64202536ea72d8f371dd0df9fc763f8d70bf886Tinderbox UserCLASS="command"
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt>directory</B
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox UserVALIGN="MIDDLE"
904890e38b74005395451501400718d759bfc064Tinderbox User>The working directory of the server.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserAny non-absolute pathnames in the configuration file will be taken
e40c4e4c17d4df338e2a7db0f84d8dbb3858964cTinderbox Useras relative to this directory. The default location for most server
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="filename"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont>) is this directory.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserIf a directory is not specified, the working directory defaults
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="filename"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User>', the directory from which the server
1921b850640ae984448e8b87870c8527fa9cddb6Evan Huntwas started. The directory specified should be an absolute path.</P
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterVALIGN="MIDDLE"
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark AndrewsCLASS="command"
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews>named-xfer</B
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterVALIGN="MIDDLE"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="emphasis"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater>This option is obsolete.</I
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterIt was used in <SPAN
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic UpdaterCLASS="acronym"
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater> 8 to specify the pathname to the <B
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic UpdaterCLASS="command"
b7fcdb0bee7680fe9536bec3b204aea094bc514eTinderbox UserCLASS="acronym"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User> 9, no separate <B
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserCLASS="command"
da24e725ff982595d74da7e75e9fbd6a696367ccAutomatic Updaterneeded; its functionality is built into the name server.</P
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="command"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt>tkey-domain</B
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>The domain appended to the names of all
8bc3d252395842452a6d2c775cf8445f6349e331Tinderbox Usershared keys generated with <B
735e1ed9685077e25f744d692acf77c5bf5d4490Tinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>. When a client
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="command"
757ff043760e4743dda1a10e7d58349275934902Tinderbox User> exchange, it may or may not specify
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox Userthe desired name for the key. If present, the name of the shared
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox Userkey will be "<TT
4c6bae917bec70e1fc4d1b761a9765075af78441Tinderbox UserCLASS="varname"
6ee455a915d0e5cab50865da23152efe59ea1decTinderbox User>client specified part</TT
4c9f230f7ca5b2b08ea8fd7a6944135801dbe152Tinderbox UserCLASS="varname"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater>tkey-domain</TT
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic UpdaterOtherwise, the name of the shared key will be "<TT
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic UpdaterCLASS="varname"
8f1a00cf8b3d9dc8d419a797b7ff4fb6ddba428eTinderbox UserCLASS="varname"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater>tkey-domain</TT
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>". In most cases,
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntCLASS="command"
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User>domainname</B
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt> should be the server's domain
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserVALIGN="MIDDLE"
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox UserCLASS="command"
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews>tkey-dhkey</B
603cf17f33da24d460616389ec40d6f2a6e110a0Automatic UpdaterVALIGN="MIDDLE"
e64202536ea72d8f371dd0df9fc763f8d70bf886Tinderbox User>The Diffie-Hellman key used by the server
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontto generate shared keys with clients using the Diffie-Hellman mode
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="command"
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox User>. The server must be able to load the
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark Andrewspublic and private keys from files in the working directory. In
4aec4843241dca64de7eb6363944df0b09cb83ecTinderbox Usermost cases, the keyname should be the server's host name.</P
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontVALIGN="MIDDLE"
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox UserCLASS="command"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews>dump-file</B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
365bb6f27eace1836cb5bc6b5f9ed8c88fe22e4aTinderbox User>The pathname of the file the server dumps
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox Userthe database to when it receives <B
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox UserCLASS="command"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic UpdaterCLASS="command"
be0d1ec971748020cb0382e02b4642b493ea1e7bTinderbox User>ndc dumpdb</B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>). If not specified, the default is <TT
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark AndrewsCLASS="filename"
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox Useryet implemented in <SPAN
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="acronym"
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews></BLOCKQUOTE
8b8e37f252b0411e00a0a2775d570562aedce439Tinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater>memstatistics-file</B
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
098097efb95046a4a5285b6dae95dea3e3b70853Automatic Updater>The pathname of the file the server writes memory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterusage statistics to on exit. If not specified, the default is <TT
2964b1f272bab3e7ed3fbb4a0811da5e93646d34Tinderbox UserCLASS="filename"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox Useryet implemented in <SPAN
1fff4d36fb18ccdca15acb0bae20c2aa8e833ceeTinderbox UserCLASS="acronym"
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews></BLOCKQUOTE
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsVALIGN="MIDDLE"
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox UserCLASS="command"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews>The pathname of the file the server writes
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrewsits process ID in. If not specified, the default is operating system
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox Userdependent, but is usually
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="filename"
dbb012765c735ee0d82dedb116cdc7cf18957814Evan HuntCLASS="filename"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserThe pid-file is used by programs that want to send signals to the running
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Huntnameserver.</P
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark AndrewsVALIGN="MIDDLE"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserCLASS="command"
a907c61823c4715248b259c4d495fc0c9d1b9889Tinderbox User>statistics-file</B
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>The pathname of the file the server appends statistics
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox Userto. If not specified, the default is <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="filename"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
4cde88fbf4c5e78a785d40f364cdcf60f3575f0cTinderbox UserCLASS="command"
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsVALIGN="MIDDLE"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User> The UDP/TCP port number the server uses for receiving and sending DNS protocol traffic.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserThe default is 53. This option is mainly intended for server testing;
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox Usera server using a port other than 53 will not be able to communicate with
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox Userthe global DNS.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User> option should be placed at
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox Userthe beginning of the options block, before
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterany other options that take port numbers or IP addresses,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterto ensure that the port value takes effect for all addresses
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterused by the server.</P
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterNAME="boolean_options"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User>6.2.14.1. Boolean Options</A
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark AndrewsCLASS="informaltable"
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark AndrewsCELLPADDING="3"
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox UserCLASS="CALSTABLE"
ca5ba35827e475a824ec79d489dbcdb3341a35ccTinderbox UserVALIGN="MIDDLE"
e676a596869d8a80a644c99a848afb53d1c5975eMark AndrewsCLASS="command"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User>auth-nxdomain</B
b6e12209e3e7df826f5f8f949ad400ec6d1f6371Tinderbox UserVALIGN="MIDDLE"
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox UserCLASS="userinput"
646fed0d28be4387e3e32fb0f5732a1f58b572baTinderbox User>, then the <B
3759f10fc543747668b1ca4b4671f35b0dea8445Francis DupontCLASS="command"
2964b1f272bab3e7ed3fbb4a0811da5e93646d34Tinderbox Useris always set on NXDOMAIN responses, even if the server is not actually
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontauthoritative. The default is <TT
049728912c39135db248f9b48f8f26675f456e9dTinderbox UserCLASS="userinput"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Duponta change from <SPAN
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic UpdaterCLASS="acronym"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews> 8. If you are using very old DNS software, you
af60449fe472b8bea5ad04bf538c777c6b151112Tinderbox Usermay need to set it to <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="userinput"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
fae2925c4d1b45056302be96e5e334f3ad5809c5Tinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>deallocate-on-exit</B
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan HuntVALIGN="MIDDLE"
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt>This option was used in <SPAN
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserCLASS="acronym"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> 8 to enable checking
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewsfor memory leaks on exit. <SPAN
39ae0eafed076ef769fef5c18b22a8051df5c93aTinderbox UserCLASS="acronym"
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt> 9 ignores the option and always performs
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan HuntVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="command"
4f538e852f20912e629338e911e46ce26de3e965Tinderbox UserVALIGN="MIDDLE"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="userinput"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterserver treats all zones as if they are doing zone transfers across
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updatera dial on demand dialup link, which can be brought up by traffic
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox Useroriginating from this server. This has different effects according
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterto zone type and concentrates the zone maintenance so that it all
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updaterhappens in a short interval, once every <B
91d187ce035f39073f0732ff2a401a45c3c955fbMark AndrewsCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>heartbeat-interval</B
f520803b46dc189fdaf84adc87ef327d3587b435Mark Andrewshopefully during the one call. It also suppresses some of the normal
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterzone maintenance traffic. The default is <TT
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="userinput"
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="command"
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontmay also be specified in the <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserCLASS="command"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox Userin which case it overrides the global <B
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserCLASS="command"
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrewsthe zone is a master zone then the server will send out a NOTIFY request
f520803b46dc189fdaf84adc87ef327d3587b435Mark Andrewsto all the slaves. This will trigger the zone serial number check
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updaterin the slave (providing it supports NOTIFY) allowing the slave to
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrewsverify the zone while the connection is active.</P
bac4435d473c9a0281507524f084480c34aa942aTinderbox Userzone is a slave or stub zone, then the server will suppress the regular
04bc14c887243e624469fdbd336c1d3cb8ed7cc7Tinderbox User"zone up to date" (refresh) queries and only perform them when the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
757ff043760e4743dda1a10e7d58349275934902Tinderbox User>heartbeat-interval</B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> expires in addition to sending
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterNOTIFY requests.</P
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater>Finer control can be achieved by using
bac4435d473c9a0281507524f084480c34aa942aTinderbox UserCLASS="userinput"
1bf507ca635310b340aea42d6c3e567819974a99Tinderbox User> which only sends NOTIFY messages,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="userinput"
4bc4740495aca028379fecd2afac26b1d53a4e25Tinderbox User>notify-passive</B
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont> which sends NOTIFY messages and
76fbdc591b3d46df28878a6ff844798622b85265Tinderbox Usersuppresses the normal refresh queries, <TT
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterwhich suppresses normal refresh processing and send refresh queries
b779e1efb14f9616a35befd2b1cfc2578f1a4d70Tinderbox UserCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>heartbeat-interval</B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="userinput"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater> which just disables normal refresh
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox Userprocessing.</P
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas GustafssonVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>fake-iquery</B
76fbdc591b3d46df28878a6ff844798622b85265Tinderbox UserVALIGN="MIDDLE"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="acronym"
933799f3641f4f78445d015008bad0038900a82aTinderbox User> 8, this option was used to enable simulating
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updaterthe obsolete DNS query type IQUERY. <SPAN
3915dc3dae1955e9f96696ca932efbd18c108d1dTinderbox UserCLASS="acronym"
1a63fb1d1448ed3f8fd7227ae57be67c2e71279eMark Andrews> 9 never does IQUERY simulation.</P
933799f3641f4f78445d015008bad0038900a82aTinderbox UserVALIGN="MIDDLE"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark AndrewsCLASS="command"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>fetch-glue</B
76fbdc591b3d46df28878a6ff844798622b85265Tinderbox UserVALIGN="MIDDLE"
a04588e781b513ae3b30e061ac98035802b5e8e8Mark Andrews>This option is obsolete.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox UserIn BIND 8, <TT
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic UpdaterCLASS="userinput"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User>fetch-glue yes</B
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrewscaused the server to attempt to fetch glue resource records it
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox Userdidn't have when constructing the additional
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupontdata section of a response. This is now considered a bad idea
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox Userand BIND 9 never does it.</P
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterVALIGN="MIDDLE"
a04588e781b513ae3b30e061ac98035802b5e8e8Mark AndrewsCLASS="command"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater>has-old-clients</B
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox UserVALIGN="MIDDLE"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User>This option was incorrectly implemented
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis DupontCLASS="acronym"
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis Dupont> 8, and is ignored by <SPAN
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="acronym"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsTo achieve the intended effect
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="command"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>has-old-clients</B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="userinput"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrewsthe two separate options <B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="command"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>auth-nxdomain</B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="userinput"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="command"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>rfc2308-type1</B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsCLASS="userinput"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews> instead.</P
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsVALIGN="MIDDLE"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark AndrewsCLASS="command"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews>host-statistics</B
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsVALIGN="MIDDLE"
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews>In BIND 8, this enables keeping of
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrewsstatistics for every host that the nameserver interacts with.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark AndrewsNot implemented in BIND 9.</P
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserVALIGN="MIDDLE"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserCLASS="command"
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User>maintain-ixfr-base</B
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="emphasis"
cd6e9010079a4e58f7e30063df3dec0ff154ad59Tinderbox User>This option is obsolete</I
f33f2b8afe60de897c53cdcb17911f10b552699fTinderbox User It was used in <SPAN
397c35b074ed59592cac25bafeb7e082f50f9ac1Tinderbox UserCLASS="acronym"
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson> 8 to determine whether a transaction log was
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Huntkept for Incremental Zone Transfer. <SPAN
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox UserCLASS="acronym"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> 9 maintains a transaction
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrewslog whenever possible. If you need to disable outgoing incremental zone
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Duponttransfers, use <B
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterCLASS="command"
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User>provide-ixfr</B
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="userinput"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsVALIGN="MIDDLE"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntCLASS="command"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt>multiple-cnames</B
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntVALIGN="MIDDLE"
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews>This option was used in <SPAN
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan HuntCLASS="acronym"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunta domain name to allow multiple CNAME records in violation of the
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntDNS standards. <SPAN
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark AndrewsCLASS="acronym"
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt> 9 currently does not check for multiple CNAMEs
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Huntin zone data loaded from master files, but such checks may be introduced
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Huntin a later release. <SPAN
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan HuntCLASS="acronym"
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt> 9 always strictly enforces the CNAME rules
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Huntin dynamic updates.</P
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox UserVALIGN="MIDDLE"
03ebc228ee3725738b067b6bd7082a9a731822a1Tinderbox UserCLASS="command"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsVALIGN="MIDDLE"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark AndrewsCLASS="userinput"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews> (the default),
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic UpdaterDNS NOTIFY messages are sent when a zone the server is authoritative for
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrewschanges, see <A
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews>Section 3.3</A
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews>. The messages are sent to the
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrewsservers listed in the zone's NS records (except the master server identified
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrewsin the SOA MNAME field), and to any servers listed in the
bed0874e1a09e810575328c4bfc346a47514b69fMark AndrewsCLASS="command"
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews>also-notify</B
a42655602677933f768df30059ac23cc98d71958Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>, notifies are sent only to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userservers explicitly listed using <B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>also-notify</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>, no notifies are sent.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> option may also be specified in the <B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrewsin which case it overrides the <B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>options notify</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserIt would only be necessary to turn off this option if it caused slaves
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="varname"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserDNS query requests recursion, then the server will attempt to do
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userall the work required to answer the query. If recursion is off
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userand the server does not already know the answer, it will return a
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userreferral response. The default is <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserNote that setting <B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>recursion no;</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> does not prevent
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userclients from getting data from the server's cache; it only
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userprevents new data from being cached as an effect of client queries.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCaching may still occur as an effect the server's internal
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useroperation, such as NOTIFY address lookups.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>fetch-glue</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>rfc2308-type1</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Setting this to <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usercause the server to send NS records along with the SOA record for negative
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useranswers. The default is <TT
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>Not yet implemented in <SPAN
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="acronym"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews></BLOCKQUOTE
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>use-id-pool</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="emphasis"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>This option is obsolete</I
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="acronym"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> 9 always allocates query IDs from a pool.</P
3d2e052eb879189e6d853097f8b568d887323bebTinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>zone-statistics</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>, the server will, by default, collect
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrewsstatistical data on all zones in the server. These statistics may be accessed
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>rndc stats</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>, which will dump them to the file listed
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>statistics-file</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> option listed above.</P
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>treat-cr-as-space</B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsVALIGN="MIDDLE"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews>This option was used in <SPAN
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="acronym"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userthe server treat carriage return ("<B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>") characters the same way
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useras a space or tab character,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userto facilitate loading of zone files on a UNIX system that were generated
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Useron an NT or DOS machine. In <SPAN
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="acronym"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater> 9, both UNIX "<B
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>" newlines are always accepted,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrewsand the option is ignored.</P
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>min-refresh-time</B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>max-refresh-time</B
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic UpdaterCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>min-retry-time</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>max-retry-time</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options control the server's behavior on refreshing a zone
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User(querying for SOA changes) or retrying failed transfers.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsUsually the SOA values for the zone are used, but these values
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrewsare set by the master, giving slave server administrators little
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Usercontrol over their contents.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options allow the administrator to set a minimum and maximum
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userrefresh and retry time either per-zone, per-view, or per-server.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserThese options are valid for master, slave and stub zones, and clamp the SOA
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userrefresh and retry times to the specified values.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="command"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User>additional-from-auth</B
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark AndrewsCLASS="command"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews>additional-from-cache</B
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserVALIGN="MIDDLE"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> These options control the server's behavior when answering queries
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userwhich have additional data, or when following CNAME and DNAME
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox Userchains to provide additional data.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User> When both of these options are set to <TT
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox UserCLASS="userinput"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User(the default) and a
5ca309a0fb9a75162852653f881d1e6290e28c2aTinderbox Userquery is being answered from authoratitive data (a zone
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updaterconfigured into the server), the additional data section of the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrewsreply will be filled in using data from other authoratitive zones
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updaterand from the cache. In some situations this is undesirable, such
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updateras when there is concern over the correctness of the cache, or in
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updaterin servers where slave zones may be added and modified by
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updateruntrusted third parties. Also, avoiding
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox Userthe search for this additional data will speed up server operations
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrewsat the possible expense of additional queries to resolve what would
081a44bd3019b18aec03c5c0746538fdc901da48Evan Huntotherwise be provided in the additional section.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User> For example, if a query asks for an MX record for host <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="literal"
200a9e7da827b67d99193bf793aea9f3e3fa1b43Tinderbox Userand the record found is "<TT
5f76877508748558eeb2e07254b0edbcbf2f2e43Tinderbox UserCLASS="literal"
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox User>", normally the address
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox Userrecords (A, A6, and AAAA) for <TT
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox UserCLASS="literal"
9dde9ce5558696850b6b9850a8475ae518409518Tinderbox User> will be provided as well,
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updaterif known. These options disable this behavior.
ee11dfc481f2ef6a032a715454f6290961a722d2Tinderbox UserNAME="AEN2212"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User>6.2.14.2. Forwarding</A
ee11dfc481f2ef6a032a715454f6290961a722d2Tinderbox User>The forwarding facility can be used to create a large site-wide
16f6050f29b6b0422cee858e609f65e474e70ef2Tinderbox Usercache on a few servers, reducing traffic over links to external
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox Usernameservers. It can also be used to allow queries by servers that
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox Userdo not have direct access to the Internet, but wish to look up exterior
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox Usernames anyway. Forwarding occurs only on those queries for which
ee11dfc481f2ef6a032a715454f6290961a722d2Tinderbox Userthe server is not authoritative and does not have the answer in
HREF="Bv9ARM.ch06.html#zone_statement_grammar"
HREF="Bv9ARM.ch06.html#address_match_lists"
HREF="Bv9ARM.ch06.html#configuration_file_elements"
HREF="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them"
HREF="Bv9ARM.ch06.html#topology"
> 4.9.x. Responses sent
class IN type A name "host.example.com" order random;
HREF="Bv9ARM.ch04.html#dynamic_update"
HREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
HREF="Bv9ARM.ch04.html#incremental_zone_transfers"
HREF="Bv9ARM.ch04.html#DNSSEC"
// Provide a complete view of the example.com zone
zone "example.com" {
file "example-internal.db";
// Provide a restricted view of the example.com zone
zone "example.com" {
file "example-external.db";
HREF="Bv9ARM.ch06.html#access_control"
HREF="Bv9ARM.ch06.html#access_control"
HREF="Bv9ARM.ch06.html#dynamic_update_policies"
HREF="Bv9ARM.ch06.html#boolean_options"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#boolean_options"
HREF="Bv9ARM.ch06.html#tuning"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#zone_transfers"
HREF="Bv9ARM.ch06.html#the_sortlist_statement"
HREF="Bv9ARM.ch06.html#rrset_ordering"
HREF="Bv9ARM.ch09.html#classes_of_resource_records"
and PTR records. Entries in the in-addr.arpa domain are made in
in-addr.arpa name of
3.2.1.10.in-addr.arpa. This name should have a PTR resource record
>$ORIGIN example.com
sub /24 reverse delegations described in RFC 2317: Classless IN-ADDR.ARPA
>$ORIGIN 0.0.192.IN-ADDR.ARPA.
HREF="Bv9ARM.ch05.html"
HREF="Bv9ARM.html"
HREF="Bv9ARM.ch07.html"