Bv9ARM.ch06.html revision d510e8695ebcce64e515ce756b1cfe8fc3e531ef
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>BIND 9 Configuration Reference</TITLE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="GENERATOR"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCONTENT="Modular DocBook HTML Stylesheet Version 1.61
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonTITLE="BIND 9 Administrator Reference Manual"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceREL="PREVIOUS"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="The BIND 9 Lightweight Resolver"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTITLE="BIND 9 Security Considerations"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="chapter"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBGCOLOR="#FFFFFF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTEXT="#000000"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceLINK="#0000FF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVLINK="#840084"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALINK="#0000FF"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="NAVHEADER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLSPACING="0"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>BIND 9 Administrator Reference Manual</TH
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="center"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="right"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="bottom"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="chapter"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Chapter 6. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 Configuration Reference</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Table of Contents</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Configuration File Elements</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#Configuration_File_Grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Configuration File Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Zone File</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 configuration is broadly similar to <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethere are a few new areas of configuration, such as views. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce8.x configuration files should work with few alterations in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce9, although more complex configurations should be reviewed to check
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif they can be more efficiently implemented using the new features
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefound in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4 configuration files can be converted to the new format
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusing the shell script
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1. Configuration File Elements</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following is a list of elements used throughout the <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefile documentation:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>acl_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The name of an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefined by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A list of one or more <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip_prefix</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>acl_name</TT
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce> elements, see
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#address_match_lists"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.1.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A quoted string which will be used as
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafssona DNS name, for example "<TT
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dotted_decimal</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>One or more integers valued 0 through
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce255 separated only by dots (`.'), such as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>89.123.45.67</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip4_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IPv4 address with exactly four elements
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dotted_decimal</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> notation.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip6_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IPv6 address, such as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fe80::200:f8ff:fe01:9742</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip4_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip6_addr</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IP port <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is limited to 0 through 65535, with values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebelow 1024 typically restricted to root-owned processes. In some
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecases an asterisk (`*') character can be used as a placeholder to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceselect a random high-numbered port.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ip_prefix</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>An IP network specified as an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefollowed by a slash (`/') and then the number of bits in the netmask.
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric LuceTrailing zeros in a <TT
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric LuceCLASS="varname"
ab19d688255b3a333a41b4ebe6f4213538e89c2aEric Luce> may omitted.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example, <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the network <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>127.0.0.0</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>255.0.0.0</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> with netmask <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>255.255.255.240</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> representing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe name of a shared key, to be used for transaction security.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>key_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A list of one or more <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceseparated by semicolons and ending with a semicolon.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A non-negative integer with an entire
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerange limited by the range of a C language signed integer (2,147,483,647
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon a machine with 32 bit integers). Its acceptable value might further
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe limited by the context in which it is used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A quoted string which will be used as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea pathname, such as <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A number, the word <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor the word <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is that of unsigned long integers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the machine. An <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> requests unlimited
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuse, or the maximum available amount. A <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default size_spec</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe limit that was in force when the server was started.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptionally be followed by a scaling factor: <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucekilobytes, <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemegabytes, and <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> for gigabytes,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich scale by 1024, 1024*1024, and 1024*1024*1024 respectively.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestorage overflow is currently silently ignored during conversion
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof scaled values, resulting in values less than intended, possibly
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeven negative. Using <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the best way
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto safely set a really large number.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe words <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucealso accepted, as are the numbers <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="varname"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>dialup_option</TT
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>notify-passive</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonWhen used in a zone, <TT
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>notify-passive</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="userinput"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonare restricted to slave and stub zones.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="address_match_lists"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1. Address Match Lists</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1.1. Syntax</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> = address_match_list_element ;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address_match_list_element; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list_element</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] (ip_address [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/length</SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key key_id | acl_name | { address_match_list } )
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.1.2. Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Address match lists are primarily used to determine access
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrol for various server operations. They are also used to define
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepriorities for querying other nameservers and to set the addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will listen for queries. The elements
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich constitute an address match list can be any of the following:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an IP address (IPv4 or IPv6)</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an IP prefix (in the `/'-notation)</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a key ID, as defined by the key statement</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the name of an address match list previously defined with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a nested address match list enclosed in braces</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Elements can be negated with a leading exclamation mark (`!')
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the match list names "any," "none," "localhost" and "localnets"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare predefined. More information on those names can be found in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe description of the acl statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The addition of the key clause made the name of this syntactic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceelement something of a misnomer, since security keys can be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto validate access without regard to a host or network address. Nonetheless,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe term "address match list" is still used throughout the documentation.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When a given IP address or prefix is compared to an address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematch list, the list is traversed in order until an element matches.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe interpretation of a match depends on whether the list is being used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor access control, defining listen-on ports, or as a topology,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand whether the element was negated.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When used as an access control list, a non-negated match allows
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaccess and a negated match denies access. If there is no match,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaccess is denied. The clauses <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>allow-notify</B
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>blackhole</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuse address match lists this. Similarly, the listen-on option will cause
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server to not accept queries on any of the machine's addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich do not match the list.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When used with the topology clause, a non-negated match returns
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea distance based on its position on the list (the closer the match
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis to the start of the list, the shorter the distance is between
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceit and the server). A negated match will be assigned the maximum
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedistance from the server. If there is no match, the address will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceget a distance which is further than any non-negated list element,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand closer than any negated element.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Because of the first-match aspect of the algorithm, an element
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat defines a subset of another element in the list should come
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebefore the broader element, regardless of whether either is negated. For
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> the 1.2.3.13 element is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecompletely useless because the algorithm will match any lookup for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat problem by having 1.2.3.13 blocked by the negation but all
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceother 1.2.3.* hosts fall through.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2. Comment Syntax</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 comment syntax allows for comments to appear
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce anywhere that white space may appear in a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file. To appeal to programmers of all kinds, they can be written
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2.1. Syntax</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/* This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> comment as in C */</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>// This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> comment as in C++</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce># This is a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> comment as in common UNIX shells and perl</PRE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.1.2.2. Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Comments may appear anywhere that whitespace may appear in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> configuration file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C-style comments start with the two characters /* (slash,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestar) and end with */ (star, slash). Because they are completely
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedelimited with these characters, they can be used to comment only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea portion of a line or to span multiple lines.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C-style comments cannot be nested. For example, the following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not valid because the entire comment ends with the first */:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>/* This is the start of a comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This is still part of the comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce/* This is an incorrect attempt at nesting a comment. */
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This is no longer in any comment. */
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>C++-style comments start with the two characters // (slash,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceslash) and continue to the end of the physical line. They cannot
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe continued across multiple physical lines; to have one logical
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecomment span multiple lines, each line must use the // pair.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>// This is the start of a comment. The next line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// is a new comment, even though it is logically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce// part of the previous comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Shell-style (or perl-style, if you prefer) comments start
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith the character <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (number sign) and continue to the end of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucephysical line, as in C++ comments.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce># This is the start of a comment. The next line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce# is a new comment, even though it is logically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce# part of the previous comment.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="warning"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="warning"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceALIGN="CENTER"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>WARNING: you cannot use the semicolon (`;') character
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to start a comment such as you would in a zone file. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce semicolon indicates the end of a configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="Configuration_File_Grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2. Configuration File Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 configuration consists of statements and comments.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Statements end with a semicolon. Statements and comments are the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce only elements that can appear without enclosing braces. Many
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statements contain a block of substatements, which are also
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce terminated with a semicolon.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following statements are supported:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a named IP address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematching list, for access control and other uses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>declares control channels to be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> utility.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>includes a file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>specifies key information for use in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceauthentication and authorization using TSIG.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>specifies what the server logs, and where
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe log messages are sent.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>controls global server configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions and sets defaults for other statements.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sets certain configuration options on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea per-server basis.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>trusted-keys</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines trusted DNSSEC keys.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a view.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>defines a zone.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements may only occur once per
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address_match_list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement assigns a symbolic
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce name to an address match list. It gets its name from a primary
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce use of address match lists: Access Control Lists (ACLs).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Note that an address match list's name must be defined
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> before it can be used elsewhere; no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forward references are allowed.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following ACLs are built-in:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches no hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>localhost</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches the IP addresses of all interfaces
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the system.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>localnets</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches any host on a network for which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe system has an interface.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce inet ( ip_addr | * ) [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> port ip_port </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] allow { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address_match_list </I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> key_list </I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> inet ...; </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonNAME="controls_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement declares control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channels to be used by system administrators to affect the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce operation of the local nameserver. These control channels are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce used by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> utility to send commands to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and retrieve non-DNS results from a nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce socket accessible to the Internet, created at the specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> on the specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. If no port is specified, port 953
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is used by default. "*" cannot be used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The ability to issue commands over the control channel is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce restricted by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clauses. Connections to the control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channel are permitted based on the address permissions in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce members of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ignored, and instead are interpreted independently based the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is allowed to be used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce authenticate commands and responses given over the control
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce channel by digitally signing each message between the server and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a command client (See <A
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>Remote Name Daemon Control application</A
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonHREF="Bv9ARM.ch03.html#admin_tools"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>Section 3.4.1.2</A
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>). All commands to the control channel
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson must be signed by one of its specified keys to
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson be honored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> If no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is present,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will set up a default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrol channel listening on the loopback address 127.0.0.1
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand its IPv6 counterpart ::1.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIn this case, and also when the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis present but does not have a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will attempt to load the command channel key
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefrom the file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (or whatever <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sysconfdir</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas specified as when <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> was built).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceTo create a <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc-confgen -a</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> feature was created to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ease the transition of systems from <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce which did not have digital signatures on its command channel messages
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and thus did not have a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIt makes it possible to use an existing <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconfiguration file in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand still have <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> work the same way
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> worked in BIND 8, simply by executing the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc-keygen -a</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> after BIND 9 is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Since the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is only intended to allow the backward-compatible usage of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 configuration files, this feature does not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce have a high degree of configurability. You cannot easily change
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the key name or the size of the secret, so you should make a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> with your own key if you wish to change
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce those things. The <TT
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> file also has its
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce permissions set such that only the owner of the file (the user that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is running as) can access it. If you
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce desire greater flexibility in allowing other users to access
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> commands then you need to create an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> and make it group readable by a group
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that contains the users who should have access.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The UNIX control channel type of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 is not supported
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9, and is not expected to be added in future
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce releases. If it is present in the controls statement from a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 configuration file, it is ignored
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and a warning is logged.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1523"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1528"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement inserts the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified file at the point that the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement is encountered. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statement facilitates the administration of configuration files
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by permitting the reading or writing of some things but not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce others. For example, the statement could include private keys
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that are readable only by a nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1535"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce algorithm <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1542"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement defines a shared
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesecret key for use with TSIG, see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 4.4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement can occur at the top level
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the configuration file or inside a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatement. Keys defined in top-level <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatements can be used in all views. Keys intended for use in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#controls_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemust be defined at the top level.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, also known as the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucekey name, is a domain name uniquely identifying the key. It can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe used in a "server" statement to cause requests sent to that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver to be signed with this key, or in address match lists to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceverify that incoming requests have been signed with a key
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematching this name, algorithm, and secret.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>algorithm_id</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is a string
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat specifies a security/authentication algorithm. The only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucealgorithm currently supported with TSIG authentication is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>hmac-md5</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>secret_string</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the secret to be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused by the algorithm, and is treated as a base-64 encoded
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1560"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>channel_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>syslog_facility</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>critical</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-category</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-severity</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>category_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel_nam</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1600"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement configures a wide
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevariety of logging options for the nameserver. Its <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceassociates output methods, format options and severity levels with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea name that can then be used with the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto select how various classes of messages are logged.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is used to define
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonas many channels and categories as are wanted. If there is no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe logging configuration will be:</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce category "unmatched" { "null"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce category "default" { "default_syslog"; "default_debug"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9, the logging configuration is only established when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe entire configuration file has been parsed. In <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceestablished as soon as the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas parsed. When the server is starting up, all logging messages
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceregarding syntax errors in the configuration file go to the default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannels, or to standard error if the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewas specified.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1616"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.10.1. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>All log output goes to one or more <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyou can make as many of them as you want.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Every channel definition must include a destination clause that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesays whether messages selected for the channel go to a file, to a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceparticular syslog facility, to the standard error stream, or are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucediscarded. It can optionally also limit the message severity level
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat will be accepted by the channel (the default is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>), and whether to include a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>-generated time stamp, the category name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand/or severity level (the default is not to include any).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> destination clause
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecauses all messages sent to the channel to be discarded;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein that case, other options for the channel are meaningless.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> destination clause directs the channel
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto a disk file. It can include limitations
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceboth on how large the file is allowed to become, and how many versions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the file will be saved each time the file is opened.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If you use the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> log file option, then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> will retain that many backup versions of the file by
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonrenaming them when opening. For example, if you choose to keep 3 old versions
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonof the file <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="filename"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> then just before it is opened
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is renamed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerenamed to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceYou can say <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
7aa594f0223f427f1382d77ae89aa890e5d9ff03Andreas Gustafsson>versions unlimited;</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> to not limit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe number of versions.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option is associated with the log file,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethen renaming is only done when the file being opened exceeds the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceindicated size. No backup versions are kept by default; any existing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelog file is simply appended.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option for files is used to limit log
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucegrowth. If the file ever exceeds the size, then <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestop writing to the file unless it has a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceassociated with it. If backup versions are kept, the files are rolled as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedescribed above and a new one begun. If there is no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option, no more data will be written to the log
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuntil some out-of-band mechanism removes or truncates the log to less than the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemaximum size. The default behavior is not to limit the size of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Example usage of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> options:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "an_example_channel" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file "example.log" versions 3 size 20m;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-time yes;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce print-category yes;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> destination clause directs the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannel to the system log. Its argument is a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesyslog facility as described in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will handle messages sent to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis facility is described in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepage. If you have a system which uses a very old version of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly uses two arguments to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>openlog()</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethen this clause is silently ignored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause works like <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"priorities," except that they can also be used if you are writing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestraight to a file rather than using <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceMessages which are not at least of the severity level given will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenot be selected for the channel; messages of higher severity levels
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be accepted.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If you are using <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill also determine what eventually passes through. For example,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefining a channel facility and severity as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly logging <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecause messages of severity <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe dropped. If the situation were reversed, with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessages of only <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> or higher, then <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprint all messages it received from the channel.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> destination clause directs the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannel to the server's standard error stream. This is intended for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuse when the server is running as a foreground process, for example
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhen debugging a configuration.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server can supply extensive debugging information when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceit is in debugging mode. If the server's global debug level is greater
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethan zero, then debugging mode will be active. The global debug
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelevel is set either by starting the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> flag followed by a positive integer,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor by running <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc trace</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe global debug level
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecan be set to zero, and debugging mode turned off, by running <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. All debugging messages in the server have a debug
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelevel, and higher debug levels give more detailed output. Channels
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat specify a specific debug severity, for example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "specific_debug_level" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity debug 3;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>will get debugging output of level 3 or less any time the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver is in debugging mode, regardless of the global debugging
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelevel. Channels with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> severity use the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver's global level to determine what messages to print.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has been turned on, then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe date and time will be logged. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe specified for a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> channel, but is usually
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepointless since <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> also prints the date and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>print-category</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson> is requested, then the
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssoncategory of the message will be logged as well. Finally, if <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>print-severity</B
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonon, then the severity level of the message will be logged. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe used in any combination, and will always be printed in the following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceorder: time, category, severity. Here is an example where all three <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="computeroutput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>28-Feb-2000 15:05:32.863 general: notice: running</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>There are four predefined channels that are used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>'s default logging as follows. How they are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused is described in <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#the_category_phrase"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.10.2</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "default_syslog" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce syslog daemon; // end to syslog's daemon
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity info; // only send priority info
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // and higher
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannel "default_debug" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // the working directory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // Note: stderr is used instead
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // if the server is started
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // with the '-f' option.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity dynamic; // log at the server's
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // current debug level
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannel "default_stderr" { // writes to stderr
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity info; // only send priority info
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // and higher
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechannel "null" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce null; // toss anything sent to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // this channel
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>default_debug</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> channel has the special
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceproperty that it only produces output when the server's debug level is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenonzero. It normally writes to a file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the server's working directory.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For security reasons, when the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecommand line option is used, the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis created only after <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has changed to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenew UID, and any debug output generated while <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestarting up and still running as root is discarded. If you need
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto capture this output, you must run the server with the "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="option"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoption and redirect standard error to a file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Once a channel is defined, it cannot be redefined. Thus you
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecannot alter the built-in channels directly, but you can modify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe default logging by pointing categories at channels you have defined.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="the_category_phrase"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.10.2. The <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>There are many categories, so you can send the logs you want
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto see wherever you want, without seeing logs you don't want. If
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceyou don't specify a list of channels for a category, then log messages
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein that category will be sent to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinstead. If you don't specify a default category, the following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"default default" is used:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>category "default" { "default_syslog"; "default_debug"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>As an example, let's say you want to log security events to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea file, but you also want keep the default logging behavior. You'd
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecify the following:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>channel "my_security_channel" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file "my_security_file";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce severity info;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategory "security" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "my_security_channel";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "default_syslog";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "default_debug";
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>To discard all messages in a category, specify the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> channel:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>category "xfer-out" { "null"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategory "notify" { "null"; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following are the available categories and brief descriptions
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the types of log information they contain. More
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecategories may be added in future <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> releases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1720"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The default category defines the logging
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions for those categories where no specific configuration has been
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The catch-all. Many things still aren't
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceclassified into categories, and they all end up here.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Messages relating to the databases used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinternally by the name server to store zone and cache data.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Approval and denial of requests.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Configuration file parsing and processing.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>DNS resolution, such as the recursive
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonlookups performed on behalf of clients by a caching name server.</P
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonVALIGN="MIDDLE"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>Zone transfers the server is receiving.</P
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonVALIGN="MIDDLE"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonVALIGN="MIDDLE"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>Zone transfers the server is sending.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>The NOTIFY protocol.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>Processing of client requests.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Messages that named was unable to determine the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonclass of or for which there was no matching <B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonA one line summary is also logged to the <B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonThis category is best sent to a file or stderr, by default it is sent to
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>Network operations.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Dynamic updates.</P
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Dispatching of incoming packets to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver modules where they are to be processed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>DNSSEC and TSIG protocol processing.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>lame-servers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Lame servers. These are misconfigurations
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein remote servers, discovered by BIND 9 when trying to query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethose servers during resolution.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1830"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> This is the grammar of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatement in the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="optional"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer> listen-on { <TT
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>] ; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>view_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> search { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domain_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> ; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1854"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> statement configures the name
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonserver to also act as a lightweight resolver server, see
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>Section 5.2</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. There may be be multiple
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements configuring
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelightweight resolver servers with different properties.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement specifies a list of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaddresses (and ports) that this instance of a lightweight resolver daemon
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceshould accept requests on. If no port is specified, port 921 is used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf this statement is omitted, requests will be accepted on 127.0.0.1,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement binds this instance of a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelightweight resolver daemon to a view in the DNS namespace, so that the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceresponse will be constructed in the same manner as a normal DNS query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucematching this view. If this statement is omitted, the default view is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused, and if there is no default view, an error is triggered.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is equivalent to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. It provides a list of domains
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich are appended to relative names in queries.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is equivalent to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. It indicates the minimum
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenumber of dots in a relative domain name that should result in an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexact match lookup before search path elements are appended.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN1873"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This is the grammar of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatement in the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> version <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>version_string</I
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> hostname <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>hostname_string</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> directory <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> named-xfer <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="optional"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson> tkey-domain <TT
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domainname</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> tkey-dhkey <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> dump-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> memstatistics-file <TT
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> pid-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statistics-file <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> zone-statistics <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="optional"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce> auth-nxdomain <TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="replaceable"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce>yes_or_no</I
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="optional"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce> deallocate-on-exit <TT
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric LuceCLASS="replaceable"
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dialup_option</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> fake-iquery <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> fetch-glue <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has-old-clients <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> host-statistics <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> minimal-responses <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> multiple-cnames <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> recursion <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> rfc2308-type1 <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> use-id-pool <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> maintain-ixfr-base <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> forward ( <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> forwarders { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="optional"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>] ; ... </SPAN
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="optional"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson> check-names ( <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> allow-notify { <TT
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>address_match_list</I
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> allow-query { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> allow-transfer { <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-recursion { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> allow-v6-synthesis { <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> blackhole { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> listen-on [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> listen-on-v6 [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> query-source [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address ( <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-time-in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-time-out <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-idle-in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-idle-out <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> tcp-clients <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> recursive-clients <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> serial-query-rate <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> serial-queries <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-format <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>( one-answer | many-answers )</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfers-in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfers-out <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfers-per-ns <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source-v6 (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="optional"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson> notify-source (<TT
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="replaceable"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="constant"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> notify-source-v6 (<TT
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="constant"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="optional"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> also-notify { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] ; ... </SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-ixfr-log-size <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> coresize <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> datasize <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> stacksize <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> cleaning-interval <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> heartbeat-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> interface-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statistics-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> topology { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> sortlist { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> rrset-order { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>order_spec</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> ; ... </SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> lame-ttl <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> max-ncache-ttl <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> max-cache-ttl <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> sig-validity-interval <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> min-roots <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> use-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> provide-ixfr <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> request-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> treat-cr-as-space <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> min-refresh-time <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> max-refresh-time <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> min-retry-time <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="optional"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson> max-retry-time <TT
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="replaceable"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="optional"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> additional-from-auth <TT
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="replaceable"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="optional"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> additional-from-cache <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> random-device <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>path_name</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-cache-size <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> match-mapped-addresses <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2093"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement sets up global options
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be used by <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>. This statement may appear only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonce in a configuration file. If more than one occurrence is found,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe first occurrence determines the actual options used, and a warning
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be generated. If there is no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestatement, an options block with each option set to its default will
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="variablelist"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The version the server should report
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevia a query of the name <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is the real version number of this server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The hostname the server should report via a query of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThis defaults to the hostname of the machine hosting the nameserver as
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonfound by gethostname(). The primary purpose of such queries is to
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonidentify which of a group of anycast servers is actually
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonanswering your queries. Setting the hostname to an empty string
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>) will disable processing of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>directory</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>The working directory of the server.
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonAny non-absolute pathnames in the configuration file will be taken
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonas relative to this directory. The default location for most server
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="filename"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>) is this directory.
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonIf a directory is not specified, the working directory defaults
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="filename"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>', the directory from which the server
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonwas started. The directory specified should be an absolute path.</P
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="emphasis"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>This option is obsolete.</I
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonIt was used in <SPAN
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="acronym"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonspecify the pathname to the <B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> 9, no separate <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>named-xfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceneeded; its functionality is built into the name server.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>tkey-domain</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The domain appended to the names of all
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonshared keys generated with <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. When a client
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson> exchange, it may or may not specify
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssonthe desired name for the key. If present, the name of the shared
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucekey will be "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>client specified part</TT
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="varname"
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>tkey-domain</TT
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonOtherwise, the name of the shared key will be "<TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>tkey-domain</TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>". In most cases,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>domainname</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> should be the server's domain
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>The Diffie-Hellman key used by the server
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonto generate shared keys with clients using the Diffie-Hellman mode
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. The server must be able to load the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepublic and private keys from files in the working directory. In
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemost cases, the keyname should be the server's host name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dump-file</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The pathname of the file the server dumps
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe database to when instructed to do so with
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc dumpdb</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf not specified, the default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>memstatistics-file</B
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson>The pathname of the file the server writes memory
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssonusage statistics to on exit. If not specified,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="filename"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>Not yet implemented in <SPAN
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>The pathname of the file the server writes its process ID
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonin. If not specified, the default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe pid-file is used by programs that want to send signals to the running
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonnameserver. If the the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> is the keyword
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> then no file will be written and any
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexisting one will be removed.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-file</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The pathname of the file the server appends statistics
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonto when instructed to do so using <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf not specified, the default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver's current directory. The format of the file is described
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#statsfile"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.15</A
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> The UDP/TCP port number the server uses for
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonreceiving and sending DNS protocol traffic.
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonThe default is 53. This option is mainly intended for server testing;
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssona server using a port other than 53 will not be able to communicate with
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonthe global DNS.
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> option should be placed at
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonthe beginning of the options block, before
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonany other options that take port numbers or IP addresses,
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonto ensure that the port value takes effect for all addresses
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonused by the server.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>random-device</B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson> The source of entropy to be used by the server. Entropy is primarily needed
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonfor DNSSEC operations, such as TKEY transactions and dynamic update of signed
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonzones. This options specifies the device (or file) from which to read
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonentropy. If this is a file, operations requiring entropy will fail when the
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonfile has been exhausted. If not specified, the default value is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(or equivalent) when present, and none otherwise. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>random-device</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option takes effect during
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe initial configuration load at server startup time and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis ignored on subsequent reloads.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonNAME="boolean_options"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.1. Boolean Options</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>auth-nxdomain</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="userinput"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonis always set on NXDOMAIN responses, even if the server is not actually
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonauthoritative. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona change from <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8. If you are using very old DNS software, you
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonmay need to set it to <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>deallocate-on-exit</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 to enable checking
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor memory leaks on exit. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 ignores the option and always performs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe checks.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonserver treats all zones as if they are doing zone transfers across
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssona dial on demand dialup link, which can be brought up by traffic
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonoriginating from this server. This has different effects according
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto zone type and concentrates the zone maintenance so that it all
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonhappens in a short interval, once every <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>heartbeat-interval</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonhopefully during the one call. It also suppresses some of the normal
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonzone maintenance traffic. The default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonmay also be specified in the <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="command"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyerin which case it overrides the global <B
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>If the zone is a master zone then the server will send out a NOTIFY
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonrequest to all the slaves. This will trigger the zone serial number check
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonin the slave (providing it supports NOTIFY) allowing the slave to
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonverify the zone while the connection is active.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonzone is a slave or stub zone, then the server will suppress the regular
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson"zone up to date" (refresh) queries and only perform them when the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>heartbeat-interval</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> expires in addition to sending
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonNOTIFY requests.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>Finer control can be achieved by using
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="userinput"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> which only sends NOTIFY messages,
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="userinput"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>notify-passive</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> which sends NOTIFY messages and
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonsuppresses the normal refresh queries, <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonwhich suppresses normal refresh processing and send refresh queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>heartbeat-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> expires and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer> which just disables normal refresh
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyerprocessing.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fake-iquery</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8, this option was used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceenable simulating the obsolete DNS query type
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 never does IQUERY simulation.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>This option is obsolete.
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="userinput"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>fetch-glue yes</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssoncaused the server to attempt to fetch glue resource records it
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssondidn't have when constructing the additional
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssondata section of a response. This is now considered a bad idea
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonand BIND 9 never does it.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>has-old-clients</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>This option was incorrectly implemented
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> 8, and is ignored by <SPAN
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="acronym"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonTo achieve the intended effect
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>has-old-clients</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe two separate options <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>auth-nxdomain</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rfc2308-type1</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>host-statistics</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>In BIND 8, this enables keeping of
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonstatistics for every host that the nameserver interacts with.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNot implemented in BIND 9.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>maintain-ixfr-base</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>This option is obsolete</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson It was used in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 to determine whether a transaction log was
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucekept for Incremental Zone Transfer. <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 maintains a transaction
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelog whenever possible. If you need to disable outgoing incremental zone
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssontransfers, use <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>provide-ixfr</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="userinput"
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>minimal-responses</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, then when generating
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonresponses the server will only add records to the authority and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceadditional data sections when they are required (e.g. delegations,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenegative responses). This may improve the performance of the server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is <TT
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric LuceCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>multiple-cnames</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>This option was used in <SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssona domain name to allow multiple CNAME records in violation of the
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonDNS standards. <SPAN
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="acronym"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson> 9.2 always strictly
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonenforces the CNAME rules both in master files and dynamic updates.
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> (the default),
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonDNS NOTIFY messages are sent when a zone the server is authoritative for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechanges, see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 3.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. The messages are sent to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers listed in the zone's NS records (except the master server identified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the SOA MNAME field), and to any servers listed in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, notifies are sent only to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers explicitly listed using <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>, no notifies are sent.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> option may also be
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonspecified in the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonin which case it overrides the <B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>options notify</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonIt would only be necessary to turn off this option if it caused slaves
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursion</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDNS query requests recursion, then the server will attempt to do
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceall the work required to answer the query. If recursion is off
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the server does not already know the answer, it will return a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereferral response. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonNote that setting <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursion no;</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> does not prevent
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonclients from getting data from the server's cache; it only
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonprevents new data from being cached as an effect of client queries.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCaching may still occur as an effect the server's internal
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoperation, such as NOTIFY address lookups.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>fetch-glue</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rfc2308-type1</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Setting this to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecause the server to send NS records along with the SOA record for negative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceanswers. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>use-id-pool</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option is obsolete</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> 9 always allocates query IDs from a pool.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>zone-statistics</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, the server will, by default, collect
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonstatistical data on all zones in the server. These statistics may be accessed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rndc stats</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>, which will dump them to the file listed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-file</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#statsfile"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.15</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option is obsolete</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf you need to disable IXFR to a particular server or servers see
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe information on the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>Section 6.2.16</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch04.html#incremental_zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 4.2</A
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.16</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#server_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.16</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>treat-cr-as-space</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server treat carriage return ("<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>") characters the same way
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas a space or tab character,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto facilitate loading of zone files on a UNIX system that were generated
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon an NT or DOS machine. In <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9, both UNIX "<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" newlines are always accepted,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the option is ignored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>additional-from-auth</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>additional-from-cache</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> These options control the behavior of an authoritative server when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceanswering queries which have additional data, or when following CNAME
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand DNAME chains.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> When both of these options are set to <TT
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(the default) and a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucequery is being answered from authoritative data (a zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconfigured into the server), the additional data section of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereply will be filled in using data from other authoritative zones
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand from the cache. In some situations this is undesirable, such
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas when there is concern over the correctness of the cache, or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein servers where slave zones may be added and modified by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuntrusted third parties. Also, avoiding
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe search for this additional data will speed up server operations
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceat the possible expense of additional queries to resolve what would
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceotherwise be provided in the additional section.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> For example, if a query asks for an MX record for host <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the record found is "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>", normally the address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerecords (A, A6, and AAAA) for <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> will be provided as well,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif known. Setting these options to <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> disables this behavior.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> These options are intended for use in authoritative-only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers, or in authoritative-only views. Attempts to set
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> without also specifying
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>recursion no;</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> will cause the server to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceignore the options and log a warning message.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Specifying <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>additional-from-cache no</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedisables the use of the cache not only for additional data lookups
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut also when looking up the answer. This is usually the desired
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonbehavior in an authoritative-only server where the correctness of
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe cached data is an issue.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> When a name server is non-recursively queried for a name that is not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebelow the apex of any served zone, it normally answers with an
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson"upwards referral" to the root servers or the servers of some other
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonknown parent of the query name. Since the data in an upwards referral
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecomes from the cache, the server will not be able to provide upwards
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereferrals when <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>additional-from-cache no</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehas been specified. Instead, it will respond to such queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith REFUSED. This should not cause any problems since
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luceupwards referrals are not required for the resolution process.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-mapped-addresses</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIPv4-mapped IPv6 address will match any address match
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonlist entries that match the corresponding IPv4 address.
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonEnabling this option is sometimes useful on IPv6-enabled Linux
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesystems, to work around a kernel quirk that causes IPv4
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonTCP connections such as zone transfers to be accepted
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssonon an IPv6 socket using mapped addresses, causing
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafssonaddress match lists designed for IPv4 to fail to match.
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonThe use of this option for any other purpose is discouraged.
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>ixfr-from-differences</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> When 'yes' and the server loads a new version of a master
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonzone from its zone file or receives a new version of a slave
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfile by a non-incremental zone transfer, it will compare
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe new version to the previous one and calculate a set
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof differences. The differences are then logged in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone's journal file such that the changes can be transmitted
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto downstream slaves as an incremental zone transfer.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> By allowing incremental zone transfers to be used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenon-dynamic zones, this option saves bandwidth at the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexpense of increased CPU and memory consumption at the master.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIn particular, if the new version of a zone is completely
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedifferent from the previous one, the set of differences
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be of a size comparable to the combined size of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceold and new zone version, and the server will need to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetemporarily allocate memory to hold this complete
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedifference set.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2412"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.2. Forwarding</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The forwarding facility can be used to create a large site-wide
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecache on a few servers, reducing traffic over links to external
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenameservers. It can also be used to allow queries by servers that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedo not have direct access to the Internet, but wish to look up exterior
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenames anyway. Forwarding occurs only on those queries for which
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe server is not authoritative and does not have the answer in
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This option is only meaningful if the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarders list is not empty. A value of <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe default, causes the server to query the forwarders first, and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif that doesn't answer the question the server will then look for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe answer itself. If <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> is specified, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver will only query the forwarders.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies the IP addresses to be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor forwarding. The default is the empty list (no forwarding).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Forwarding can also be configured on a per-domain basis, allowing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the global forwarding options to be overridden in a variety
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof ways. You can set particular domains to use different forwarders,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor have a different <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor not forward at all, see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_statement_grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.21</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="access_control"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.3. Access Control</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Access to the server can be restricted based on the IP address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the requesting system. See <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#address_match_lists"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.1.1</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssondetails on how to specify IP address lists.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>allow-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenotify slaves of a zone change in addition to the zone masters.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> may also be specified in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement, in which case it overrides the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>options allow-notify</B
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> statement. It is only meaningful
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonfor a slave zone. If not specified, the default is to process notify messages
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssononly from a zone's master.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceask ordinary questions. <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement, in which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecase it overrides the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>options allow-query</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> statement. If
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonnot specified, the default is to allow queries from all hosts.</P
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>allow-recursion</B
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Specifies which hosts are allowed to
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonmake recursive queries through this server. If not specified, the
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssondefault is to allow recursive queries from all hosts.
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonNote that disallowing recursive queries for a host does not prevent the
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonhost from retrieving data that is already in the server's cache.
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>allow-v6-synthesis</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Specifies which hosts are to receive
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonsynthetic responses to IPv6 queries as described in
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Section 6.2.14.13</A
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>allow-transfer</B
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>Specifies which hosts are allowed to
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafssonreceive zone transfers from the server. <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>allow-transfer</B
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonalso be specified in the <B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> statement, in which
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssoncase it overrides the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>options allow-transfer</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonIf not specified, the default is to allow transfers from all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>blackhole</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies a list of addresses that the
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonserver will not accept queries from or use to resolve a query. Queries
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfrom these addresses will not be responded to. The default is <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2477"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>6.2.14.4. Interfaces</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The interfaces and ports that the server will answer queries
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfrom may be specified using the <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean optional port, and an <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonThe server will listen on all interfaces allowed by the address
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonmatch list. If a port is not specified, port 53 will be used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements are allowed.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonFor example,</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on { 5.6.7.8; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>will enable the nameserver on port 53 for the IP address
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson5.6.7.8, and on port 1234 of an address on the machine in net
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson1.2 that is not 1.2.3.4.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> is specified, the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver will listen on port 53 on all interfaces.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option is used to
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonspecify the ports on which the server will listen for incoming
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonqueries sent using IPv6.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server does not bind a separate socket to each IPv6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinterface address as it does for IPv4. Instead, it always
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonlistens on the IPv6 wildcard address. Therefore, the only
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonvalues allowed for the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceargument to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement are
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>{ any; }</PRE
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>listen-on-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> options can be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused to listen on multiple ports:</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>listen-on-v6 port 53 { any; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelisten-on-v6 port 1234 { any; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>To make the server not listen on any IPv6 address, use</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6 { none; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on-v6</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> statement is specified,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonthe server will not listen on any IPv6 address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>6.2.14.5. Query Address</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If the server doesn't know the answer to a question, it will
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonquery other nameservers. <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe address and port used for such queries. For queries sent over
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIPv6, there is a separate <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> or is omitted,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea wildcard IP address (<B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>) will be used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> or is omitted,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea random unprivileged port will be used. The defaults are</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="programlisting"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>query-source address * port *;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucequery-source-v6 address * port *
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The address specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>query-source</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonis used for both UDP and TCP queries, but the port applies only to
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonUDP queries. TCP queries always use a random
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceunprivileged port.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonNAME="zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.6. Zone Transfers</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> has mechanisms in place to facilitate zone transfers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand set limits on the amount of load that transfers place on the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesystem. The following options apply to zone transfers.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Defines a global list of IP addresses of name servers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat are also sent NOTIFY messages whenever a fresh copy of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone is loaded, in addition to the servers listed in the zone's NS records.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonThis helps to ensure that copies of the zones will
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonquickly converge on stealth servers. If an <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis given in a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement, it will override
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>options also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement. When a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, the IP addresses in the global <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonnot be sent NOTIFY messages for that zone. The default is the empty
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist (no global notification list).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Inbound zone transfers running longer than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis many minutes will be terminated. The default is 120 minutes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(2 hours).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Inbound zone transfers making no progress
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein this many minutes will be terminated. The default is 60 minutes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Outbound zone transfers running longer than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis many minutes will be terminated. The default is 120 minutes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(2 hours).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Outbound zone transfers making no progress
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein this many minutes will be terminated. The default is 60 minutes (1
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-query-rate</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Slave servers will periodically query master servers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto find out if zone serial numbers have changed. Each such query uses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea minute amount of the slave server's network bandwidth. To limit the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceamount of bandwith used, BIND 9 limits the rate at which queries are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesent. The value of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-query-rate</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean integer, is the maximum number of queries sent per second.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is 20.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-queries</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>In BIND 8, the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-queries</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceset the maximum number of concurrent serial number queries
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceallowed to be outstanding at any given time.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBIND 9 does not limit the number of outstanding
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserial queries and ignores the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-queries</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceInstead, it limits the rate at which the queries are sent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas defined using the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>serial-query-rate</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Zone transfers can be sent using two different formats,
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>one-answer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option is used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon the master server to determine which format it sends.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>one-answer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> uses one DNS message per
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonresource record transferred.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> packs as many resource records as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepossible into a message. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceefficient, but is only supported by relatively new slave servers,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesuch as <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8.x and patched
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceversions of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4.9.5. The default is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemay be overridden on a per-server basis by using the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of inbound zone transfers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat can be running concurrently. The default value is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIncreasing <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> may speed up the convergence
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof slave zones, but it also may increase the load on the local system.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of outbound zone transfers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat can be running concurrently. Zone transfer requests in excess
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the limit will be refused. The default value is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of inbound zone transfers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat can be concurrently transferring from a given remote nameserver.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default value is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. Increasing <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespeed up the convergence of slave zones, but it also may increase
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe load on the remote nameserver. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe overridden on a per-server basis by using the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich local address will be bound to IPv4 TCP connections used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefetch zones transferred inbound by the server. It also determines
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe source IPv4 address, and optionally the UDP port, used for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerefresh queries and forwarded dynamic updates. If not set, it defaults
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto a system controlled value which will usually be the address of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe interface "closest to" the remote end. This address must appear
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the remote end's <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe zone being transferred, if one is specified. This statement
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> for all zones, but can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe overridden on a per-view or per-zone basis by including a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement within the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the configuration file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The same as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexcept zone transfers are performed using IPv6.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich local source address, and optionally UDP port, will be used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesend NOTIFY messages.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThis address must appear in the slave server's <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone clause or in an <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-notify</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonThis statement sets the <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> for all zones,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut can be overridden on a per-zone / per-view basis by including a
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement within the <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> block in the configuration file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut applies to notify messages sent to IPv6 addresses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2642"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.7. Operating System Resource Limits</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server's usage of many system resources can be limited.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceScaled values are allowed when specifying resource limits. For
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> can be used instead of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>1073741824</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> to specify a limit of one
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> requests unlimited use, or the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemaximum available amount. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> uses the limit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat was in force when the server was started. See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>size_spec</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#configuration_file_elements"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.1</A
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>The following options set operating system resource limits for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe name server process. Some operating systems don't support some or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany of the limits. On such systems, a warning will be issued if the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceunsupported limit is used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson>The maximum size of a core dump. The default
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum amount of data memory the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemay use. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThis is a hard limit on server memory usage.
da4cfd494c1f8d612c7e1d5407567686b326e511Andreas GustafssonIf the server attempts to allocate memory in excess of this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelimit, the allocation will fail, which may in turn leave
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server unable to perform DNS service. Therefore,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis option is rarely useful as a way of limiting the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceamount of memory used by the server, but it can be used
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto raise an operating system data size limit that is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucetoo small by default. If you wish to limit the amount
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof memory used by the server, use the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-cache-size</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursive-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoptions instead.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The maximum number of files the server
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonmay have open concurrently. The default is <TT
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="literal"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>The maximum amount of stack memory the server
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonmay use. The default is <TT
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="literal"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>6.2.14.8. Server Resource Limits</A
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>The following options set limits on the server's
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonresource consumption that are enforced internally by the
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonserver rather than the operating system.</P
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="variablelist"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>max-ixfr-log-size</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>This option is obsolete; it is accepted
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonand ignored for BIND 8 compatibility.</P
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>recursive-clients</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>The maximum number of simultaneous recursive lookups
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonthe server will perform on behalf of clients. The default is
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="literal"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>. Because each recursing clients uses a fair
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonbit of memory, on the order of 20 kilobytes, the value of the
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson>recursive-clients</B
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafsson> option may have to be decreased
3d9b2687475344a87c377a5158c41b43a03fc443Andreas Gustafssonon hosts with limited memory.
3d9b2687475344a87c377a5158c41b43a03fc443Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>tcp-clients</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>The maximum number of simultaneous client TCP
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonconnections that the server will accept.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonThe default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>max-cache-size</B
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>The maximum amount of memory to use for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceserver's cache, in bytes. When the amount of data in the cache
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereaches this limit, the server will cause records to expire
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprematurely so that the limit is not exceeded. In a server with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemultiple views, the limit applies separately to the cache of each
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luceview. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>unlimited</TT
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce>, meaning that
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonrecords are purged from the cache only when their TTLs expire.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2707"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.9. Periodic Task Intervals</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>cleaning-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server will remove expired resource records
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfrom the cache every <B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>cleaning-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is 60 minutes.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonIf set to 0, no periodic cleaning will occur.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>heartbeat-interval</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>The server will perform zone maintenance tasks
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonfor all zones marked as <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> whenever this
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssoninterval expires. The default is 60 minutes. Reasonable values are up
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssonto 1 day (1440 minutes). If set to 0, no zone maintenance for these zones will occur.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>interface-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server will scan the network interface list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>interface-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> minutes. The default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis 60 minutes. If set to 0, interface scanning will only occur when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe configuration file is loaded. After the scan, listeners will be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestarted on any new interfaces (provided they are allowed by the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>listen-on</B
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> configuration). Listeners on interfaces
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat have gone away will be cleaned up.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Nameserver statistics will be logged
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> minutes. The default is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce60. If set to 0, no statistics will be logged.</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>Not yet implemented in <SPAN
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="acronym"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonNAME="topology"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>6.2.14.10. Topology</A
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>All other things being equal, when the server chooses a nameserver
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonto query from a list of nameservers, it prefers the one that is
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssontopologically closest to itself. The <B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>address_match_list</B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> and interprets it
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonin a special way. Each top-level list element is assigned a distance.
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonNon-negated elements get a distance based on their position in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist, where the closer the match is to the start of the list, the
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonshorter the distance is between it and the server. A negated match
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be assigned the maximum distance from the server. If there
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis no match, the address will get a distance which is further than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany non-negated list element, and closer than any negated element.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example,</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="programlisting"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>will prefer servers on network 10 the most, followed by hosts
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonon network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonexception of hosts on network 1.2.3 (netmask 255.255.255.0), which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis preferred least of all.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>The default topology is</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="programlisting"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> topology { localhost; localnets; };
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonis not implemented in <SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="acronym"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonNAME="the_sortlist_statement"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>6.2.14.11. The <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>The response to a DNS query may consist of multiple resource
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonrecords (RRs) forming a resource records set (RRset).
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonThe name server will normally return the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonRRs within the RRset in an indeterminate order
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson(but see the <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>rrset-order</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonstatement in <A
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonHREF="Bv9ARM.ch06.html#rrset_ordering"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>Section 6.2.14.12</A
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonThe client resolver code should rearrange the RRs as appropriate,
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonthat is, using any addresses on the local net in preference to other addresses.
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonHowever, not all resolvers can do this or are correctly configured.
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonWhen a client is using a local server the sorting can be performed
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonin the server, based on the client's address. This only requires
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonconfiguring the nameservers, not all the clients.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> statement (see below) takes
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>address_match_list</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> and interprets it even
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonmore specifically than the <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>Section 6.2.14.10</A
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonEach top level statement in the <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonitself be an explicit <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>address_match_list</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonone or two elements. The first element (which may be an IP address,
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonan IP prefix, an ACL name or a nested <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>address_match_list</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonof each top level list is checked against the source address of
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonthe query until a match is found.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>Once the source address of the query has been matched, if
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonthe top level statement contains only one element, the actual primitive
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonelement that matched the source address is used to select the address
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonin the response to move to the beginning of the response. If the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonstatement is a list of two elements, then the second element is
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssontreated the same as the <B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>address_match_list</B
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="command"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> statement. Each top level element
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonis assigned a distance and the address in the response with the minimum
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssondistance is moved to the beginning of the response.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>In the following example, any queries received from any of
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonthe addresses of the host itself will get responses preferring addresses
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonon any of the locally connected networks. Next most preferred are addresses
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonon the 192.168.1/24 network, and after that either the 192.168.2/24
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson192.168.3/24 network with no preference shown between these two
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonnetworks. Queries received from a host on the 192.168.1/24 network
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonwill prefer other addresses on that network to the 192.168.2/24
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson192.168.3/24 networks. Queries received from a host on the 192.168.4/24
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonor the 192.168.5/24 network will only prefer other addresses on
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssontheir directly connected networks.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="programlisting"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { localhost; // IF the local host
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { localnets; // THEN first fit on the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.1/24; // IF on class C 192.168.1
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.1/24; // THEN use .1, or .2 or .3
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.2/24; // IF on class C 192.168.2
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.2/24; // THEN use .2, or .1 or .3
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.3/24; // IF on class C 192.168.3
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { 192.168.3/24; // THEN use .3, or .1 or .2
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { { 192.168.4/24; 192.168.5/24; }; // if .4 or .5, prefer that net
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>The following example will give reasonable behavior for the
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonlocal host and hosts on directly connected networks. It is similar
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonto the behavior of the address sort in <SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="acronym"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> 4.9.x. Responses sent
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonto queries from the local host will favor any of the directly connected
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonnetworks. Responses sent to queries from any other hosts on a directly
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonconnected network will prefer addresses on that same network. Responses
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafssonto other queries will not be sorted.</P
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="programlisting"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { localhost; localnets; };
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson { localnets; };
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonNAME="rrset_ordering"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>6.2.14.12. RRset Ordering</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>When multiple records are returned in an answer it may be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuseful to configure the order of the records placed into the response.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement permits configuration
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonof the ordering of the records in a multiple record response.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSee also the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#the_sortlist_statement"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.11</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>order_spec</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is defined as follows:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>class_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>type_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>"domain_name"</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If no class is specified, the default is <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf no type is specified, the default is <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf no name is specified, the default is "<B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The legal values for <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2795"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Records are returned in the order they
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare defined in the zone file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Records are returned in some random order.</P
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Records are returned in a round-robin
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order {
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson class IN type A name "host.example.com" order random;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>will cause any responses for type A records in class IN that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" as a suffix, to always be returned
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein random order. All other records are returned in cyclic order.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If multiple <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements appear,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethey are not combined — the last one applies.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>rrset-order</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceBIND 9 currently supports only a "random-cyclic" ordering,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhere the server randomly chooses a starting point within
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonthe RRset and returns the records in order starting at
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonthat point, wrapping around the end of the RRset if
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenecessary.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="synthesis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.13. Synthetic IPv6 responses</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Many existing stub resolvers support IPv6 DNS lookups as defined in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC1886, using AAAA records for forward lookups and "nibble labels" in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> domain for reverse lookups, but do not support
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC2874-style lookups (using A6 records and binary labels in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> domain).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For those who wish to continue to use such stub resolvers rather than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceswitching to the BIND 9 lightweight resolver, BIND 9 provides a way
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto automatically convert RFC1886-style lookups into
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC2874-style lookups and return the results as "synthetic" AAAA and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LucePTR records.</P
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>This feature is disabled by default and can be enabled on a per-client
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonbasis by adding a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-v6-synthesis { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceclause to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce When it is enabled, recursive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceAAAA queries cause the server to first try an A6 lookup and if that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefails, an AAAA lookups. No matter which one succeeds, the results are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereturned as a set of synthetic AAAA records. Similarly, recursive PTR
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucequeries in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> will cause a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelookup in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> using binary
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelabels, and if that fails, another lookup in <TT
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe results are returned as a synthetic PTR record in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The synthetic records have a TTL of zero. DNSSEC validation of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesynthetic responses is not currently supported; therefore responses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontaining synthetic RRs will not have the AD flag set.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="tuning"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.14. Tuning</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Sets the number of seconds to cache a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelame server indication. 0 disables caching. (This is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> recommended.)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceDefault is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (10 minutes). Maximum value is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> (30 minutes).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>To reduce network traffic and increase performance
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe server stores negative answers. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused to set a maximum retention time for these answers in the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein seconds. The default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> seconds (3 hours).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-ncache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> cannot exceed 7 days and will
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe silently truncated to 7 days if set to a greater value.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-cache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-cache-ttl</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe maximum time for which the server will cache ordinary (positive)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceanswers. The default is one week (7 days).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-roots</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The minimum number of root servers that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis required for a request for the root servers to be accepted. Default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>Not yet implemented in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce></BLOCKQUOTE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>Specifies the number of days into the
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonfuture when DNSSEC signatures automatically generated as a result
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonof dynamic updates (<A
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonHREF="Bv9ARM.ch04.html#dynamic_update"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>Section 4.1</A
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonwill expire. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> days. The signature
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinception time is unconditionally set to one hour before the current time
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto allow for a limited amount of clock skew.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-retry-time</B
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="command"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer>max-retry-time</B
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer> These options control the server's behavior on refreshing a zone
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer(querying for SOA changes) or retrying failed transfers.
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerUsually the SOA values for the zone are used, but these values
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyerare set by the master, giving slave server administrators little
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrol over their contents.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> These options allow the administrator to set a minimum and maximum
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerefresh and retry time either per-zone, per-view, or per-server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThese options are valid for master, slave and stub zones,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand clamp the SOA refresh and retry times to the specified values.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="statsfile"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.14.15. The Statistics File</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The statistics file generated by <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis similar, but not identical, to that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucegenerated by <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The statistics dump begins with the line <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>+++ Statistics Dump
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce+++ (973798949)</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, where the number in parentheses is a standard
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceUnix-style timestamp, measured as seconds since January 1, 1970. Following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat line are a series of lines containing a counter type, the value of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecounter, optionally a zone name, and optionally a view name.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe lines without view and zone listed are global statistics for the entire server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceLines with a zone and view name for the given view and zone (the view name is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceomitted for the default view). The statistics dump ends
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith the line <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>--- Statistics Dump --- (973798949)</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenumber is identical to the number in the beginning line.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following statistics counters are maintained:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN2907"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesuccessful queries made to the server or zone. A successful query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis defined as query which returns a NOERROR response with at least
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceone answer RR.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The number of queries which resulted
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein referral responses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The number of queries which resulted in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNOERROR responses with no data.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof queries which resulted in NXDOMAIN responses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The number of queries which resulted in a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefailure response other than those above.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursion</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The number of queries which caused the server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto perform recursion in order to find the final answer.</P
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson> Each query received by the server will cause exactly one of
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be incremented, and may additionally cause the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>recursion</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> counter to be incremented.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="server_statement_grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> provide-ixfr <TT
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> request-ixfr <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfers <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-format <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>( one-answer | many-answers )</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>{ string ; [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> string ; [<SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="server_statement_definition_and_usage"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement defines characteristics
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be associated with a remote nameserver.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement can occur at the top level of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconfiguration file or inside a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement contains
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceone or more <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements, only those
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceapply to the view and any top-level ones are ignored.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf a view contains no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany top-level <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements are used as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If you discover that a remote server is giving out bad data,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemarking it as bogus will prevent further queries to it. The default
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause determines whether
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonthe local server, acting as master, will respond with an incremental
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone transfer when the given remote server, a slave, requests it.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, incremental transfer will be provided
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhenever possible. If set to <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, all transfers
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonto the remote server will be nonincremental. If not set, the value
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafsson>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option in the view or
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonglobal options block is used as a default.</P
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson>request-ixfr</B
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> clause determines whether
f1fd37f759991616d454ce371a2390da45141593Andreas Gustafssonthe local server, acting as a slave, will request incremental zone
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssontransfers from the given remote server, a master. If not set, the
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafssonvalue of the <B
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option in the view or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceglobal options block is used as a default.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>IXFR requests to servers that do not support IXFR will automatically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefall back to AXFR. Therefore, there is no need to manually list
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich servers support IXFR and which ones do not; the global default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> should always work.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe purpose of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>provide-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>request-ixfr</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto make it possible to disable the use of IXFR even when both master
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand slave claim to support it, for example if one of the servers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis buggy and crashes or corrupts data when IXFR is used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause determines whether the local server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill attempt to use EDNS when communicating with the remote server. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefault is <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The server supports two zone transfer methods. The first, <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>one-answer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceuses one DNS message per resource record transferred. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas many resource records as possible into a message. <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>many-answers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemore efficient, but is only known to be understood by <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4.9.5. You can specify which method
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafssonto use for a server with the <B
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="command"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is not specified, the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-format</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement will be used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is used to limit the number of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconcurrent inbound zone transfers from the specified server. If
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is specified, the limit is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceset according to the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfers-per-ns</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is used to identify a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement, to be used for transaction
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonsecurity when talking to the remote server. The <B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonmust come before the <B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson> statement that references
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafssonit. When a request is sent to the remote server, a request signature
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewill be generated using the key specified here and appended to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessage. A request originating from the remote server is not required
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be signed by this key.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Although the grammar of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceallows for multiple keys, only a single key per server is currently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesupported.</P
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="command"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson>trusted-keys</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="programlisting"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson>trusted-keys {
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>trusted-keys</B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> Statement Definition
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>trusted-keys</B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> statement defines DNSSEC
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonsecurity roots. DNSSEC is described in <A
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>Section 4.7</A
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>. A security root is defined when the public key for a non-authoritative
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonzone is known, but cannot be securely obtained through DNS, either
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonbecause it is the DNS root zone or its parent zone is unsigned.
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonOnce a key has been configured as a trusted key, it is treated as
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonif it had been validated and proven secure. The resolver attempts
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonDNSSEC validation on all DNS data in subdomains of a security root.</P
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>trusted-keys</B
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> statement can contain
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonmultiple key entries, each consisting of the key's domain name,
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonflags, protocol, algorithm, and the base-64 representation of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3053"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>view_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-clients { <TT
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="replaceable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-destinations { <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-recursive-only { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>view_option</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone_statement</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3067"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> Statement Definition and Usage</A
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="command"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> statement is a powerful new feature
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="acronym"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> 9 that lets a name server answer a DNS query differently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedepending on who is asking. It is particularly useful for implementing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesplit DNS setups without having to run multiple servers.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson> statement defines a view of the
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonDNS namespace that will be seen by a subset of clients. A client matches
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafssona view if its source IP address matches the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> of the view's
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-clients</B
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson> clause and its destination IP address matches
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> of the view's
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-destinations</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause. If not specified, both
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-clients</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-destinations</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedefault to matching all addresses. A view can also be specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>match-recursive-only</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, which means that only recursive
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucerequests from matching clients will match that view.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe order of the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> statements is significant —
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea client request will be resolved in the context of the first
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> that it matches.</P
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>Zones defined within a <B
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> statement will
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonbe only be accessible to clients that match the <B
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson By defining a zone of the same name in multiple views, different
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonzone data can be given to different clients, for example, "internal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand "external" clients in a split DNS setup.</P
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>Many of the options given in the <B
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecan also be used within a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> statement, and then
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonapply only when resolving queries with that view. When no view-specific
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucevalue is given, the value in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonis used as a default. Also, zone options can have default values specified
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> statement; these view-specific defaults
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssontake precedence over those in the <B
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson> statement.</P
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>Views are class specific. If no class is given, class IN
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonis assumed. Note that all non-IN views must contain a hint zone,
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafssonsince only the IN class has compiled-in default hints.</P
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson>If there are no <B
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements in the config
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefile, a default view that matches any client is automatically created
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein class IN, and any <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements specified on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe top level of the configuration file are considered to be part of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethis default view. If any explicit <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare present, all <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements must occur inside
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Here is an example of a typical split DNS setup implemented
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statements.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>view "internal" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // This should match our internal networks.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-clients { 10.0.0.0/8; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // Provide recursive service to internal clients only.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursion yes;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // Provide a complete view of the example.com zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // including addresses of internal hosts.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type master;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceview "external" {
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce match-clients { any; };
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // Refuse recursive service to external clients.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursion no;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // Provide a restricted view of the example.com zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce // containing only publicly accessible hosts.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type master;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="zone_statement_grammar"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceStatement Grammar</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone_name</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce type ( master | slave | hint | stub | forward ) ;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-notify { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-query { <TT
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonCLASS="optional"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson> allow-transfer { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-update { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>address_match_list</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> update-policy { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update_policy_rule</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> allow-update-forwarding { <TT
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>address_match_list</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> also-notify { <TT
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="optional"
f1fd37f759991616d454ce371a2390da45141593Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>] ; ... </SPAN
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> check-names (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="constant"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>dialup_option</I
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> forwarders { <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson>] ; ... </SPAN
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="optional"
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas Gustafsson> ixfr-base <TT
6b35c2fec9938cbd4cc39f2d054086d8af3c343dAndreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> ixfr-tmp-file <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
fafd1d771905532e8dc3efa2ce90ce4c9e74af61Eric Luce> maintain-ixfr-base <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson> masters [<SPAN
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="optional"
027e89d47af308db4b41761ca9f847c026b63ec8Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> max-ixfr-log-size <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> max-transfer-idle-in <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> max-transfer-idle-out <TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-transfer-time-in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> max-transfer-time-out <TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>yes_or_no</I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> transfer-source-v6 (<TT
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> notify-source (<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> notify-source-v6 (<TT
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="constant"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> zone-statistics <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> sig-validity-interval <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> database <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> min-refresh-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="optional"
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson> max-refresh-time <TT
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="replaceable"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="optional"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson> min-retry-time <TT
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael SawyerCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> max-retry-time <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3218"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson> Statement Definition and Usage</A
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafsson>6.2.22.1. Zone Types</A
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="informaltable"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCELLPADDING="3"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonCLASS="CALSTABLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonVALIGN="MIDDLE"
78d65c654251b02c41628914986723cbec93a7a1Andreas GustafssonCLASS="varname"
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>The server has a master copy of the data
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonfor the zone and will be able to provide authoritative answers for
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonCLASS="varname"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonVALIGN="MIDDLE"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson>A slave zone is a replica of a master
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonCLASS="command"
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson> list specifies one or more IP addresses
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonof master servers that the slave contacts to update its copy of the zone.
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonBy default, transfers are made from port 53 on the servers; this can
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonbe changed for all servers by specifying a port number before the
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonlist of IP addresses, or on a per-server basis after the IP address.
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonAuthentication to the master can also be done with per-server TSIG keys.
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas GustafssonIf a file is specified, then the
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonreplica will be written to this file whenever the zone is changed,
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonand reloaded from this file on a server restart. Use of a file is
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonrecommended, since it often speeds server start-up and eliminates
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssona needless waste of bandwidth. Note that for large numbers (in the
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssontens or hundreds of thousands) of zones per server, it is best to
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafssonuse a two level naming scheme for zone file names. For example,
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas Gustafssona slave server for the zone <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> might place
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe zone contents into a file called
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucejust the first two letters of the zone name. (Most operating systems
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebehave very slowly if you put 100K files into a single directory.)</P
86c1ac00da33c2ecc14f5ca69fba40186460ce57Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A stub zone is similar to a slave zone,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexcept that it replicates only the NS records of a master zone instead
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the entire zone. Stub zones are not a standard part of the DNS;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethey are a feature specific to the <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> implementation.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Stub zones can be used to eliminate the need for glue NS record
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein a parent zone at the expense of maintaining a stub zone entry and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea set of name server addresses in <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThis usage is not recommended for new configurations, and BIND 9
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesupports it only in a limited way.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 4/8, zone transfers of a parent zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceincluded the NS records from stub children of that zone. This meant
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat, in some cases, users could get away with configuring child stubs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly in the master server for the parent zone. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce9 never mixes together zone data from different zones in this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceway. Therefore, if a <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 master serving a parent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone has child stub zones configured, all the slave servers for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceparent zone also need to have the same child stub zones
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconfigured.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Stub zones can also be used as a way of forcing the resolution
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof a given domain to use a particular set of authoritative servers.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceFor example, the caching name servers on a private network using
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC2157 addressing may be configured with stub zones for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto use a set of internal name servers as the authoritative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservers for that domain.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A "forward zone" is a way to configure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding on a per-domain basis. A <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> can contain a <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich will apply to queries within the domain given by the zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename. If no <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement is present or
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean empty list for <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is given, then no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceforwarding will be done for the domain, cancelling the effects of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany forwarders in the <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson> statement. Thus
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceif you want to use this type of zone to change the behavior of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> option (that is, "forward first
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto", then "forward only", or vice versa, but want to use the same
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonservers as set globally) you need to respecify the global forwarders.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The initial set of root nameservers is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified using a "hint zone". When the server starts up, it uses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe root hints to find a root nameserver and get the most recent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelist of root nameservers. If no hint zone is specified for class
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIN, the server uses a compiled-in default set of root servers hints.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceClasses other than IN have no built-in defaults hints.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3278"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.22.2. Class</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The zone's name may optionally be followed by a class. If
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea class is not specified, class <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Internet</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis assumed. This is correct for the vast majority of cases.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenamed for an information service from MIT's Project Athena. It is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused to share information about various systems databases, such
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas users, groups, printers and so on. The keyword
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea synonym for hesiod.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Another MIT development is CHAOSnet, a LAN protocol created
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the mid-1970s. Zone data for it can be specified with the <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3288"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.22.3. Zone Options</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="variablelist"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#access_control"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-query</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#access_control"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-transfer</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#access_control"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesubmit Dynamic DNS updates for master zones. The default is to deny
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonupdates from all hosts.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>Specifies a "Simple Secure Update" policy. See
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#dynamic_update_policies"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.22.4</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update-forwarding</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Specifies which hosts are allowed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesubmit Dynamic DNS updates to slave zones to be forwarded to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemaster. The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>{ none; }</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemeans that no update forwarding will be performed. To enable
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceupdate forwarding, specify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update-forwarding { any; };</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSpecifying values other than <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>{ none; }</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is usually counterproductive, since
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe responsibility for update access control should rest with the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemaster server, not the slaves.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Note that enabling the update forwarding feature on a slave server
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemay expose master servers relying on insecure IP address based
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceaccess control to attacks; see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch07.html#dynamic_update_security"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 7.3</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor more details.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Only meaningful if <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceactive for this zone. The set of machines that will receive a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>DNS NOTIFY</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor this zone is made up of all the listed nameservers (other than
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe primary master) for the zone plus any IP addresses specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>. A port may be specified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> address to send the notify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucemessages to a port other than the default of 53.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>also-notify</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is not meaningful for stub zones.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceThe default is the empty list.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>check-names</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> This option was used in BIND 8 to restrict the character set of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedomain names in master files and/or DNS responses received from the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenetowrk. BIND 9 does not restrict the character set of domain names
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand does not implement the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>check-names</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson>Specify the type of database to be used for storing the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone data. The string following the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis interpreted as a list of whitespace-delimited words. The first word
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceidentifies the database type, and any subsequent words are passed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceas arguments to the database to be interpreted in a way specific
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto the database type.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The default is <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, BIND 9's native in-memory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucered-black-tree database. This database does not take arguments.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Other values are possible if additional database drivers
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucehave been linked into the server. Some sample drivers are included
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith the distribution but none are linked in by default.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#boolean_options"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Only meaningful if the zone has a forwarders
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> value causes the lookup to fail
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceafter trying the forwarders and getting no answer, while <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceallow a normal lookup to be tried.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>forwarders</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Used to override the list of global forwarders.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIf it is not specified in a zone of type <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceno forwarding is done for the zone; the global options are not used.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ixfr-base</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Was used in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8 to specify the name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the transaction log (journal) file for dynamic update and IXFR.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 ignores the option and constructs the name of the journal
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefile by appending "<TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="filename"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>" to the name of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezone file.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ixfr-tmp-file</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Was an undocumented option in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIgnored in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-in</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-time-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-transfer-idle-out</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#boolean_options"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 8, this option was intended for specifying
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea public zone key for verification of signatures in DNSSEC signed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucezones when they are loaded from disk. <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 does not verify signatures
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceon loading and ignores the option.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>zone-statistics</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="userinput"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>, the server will keep statistical
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceinformation for this zone, which can be dumped to the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>statistics-file</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> defined in the server options.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>sig-validity-interval</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.14</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>transfer-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>notify-source-v6</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#zone_transfers"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.6</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-refresh-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>min-retry-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>max-retry-time</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> See the description in <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.14</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ixfr-from-differences</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>See the description of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>ixfr-from-differences</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#boolean_options"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="dynamic_update_policies"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.2.22.4. Dynamic Update Policies</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> 9 supports two alternative methods of granting clients
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe right to perform dynamic updates to a zone,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconfigured by the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson> option, respectively.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause works the same
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafssonway as in previous versions of <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>. It grants given clients the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepermission to update any record of any name in the zone.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> clause is new in <SPAN
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="acronym"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce9 and allows more fine-grained control over what updates are allowed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceA set of rules is specified, where each rule either grants or denies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepermissions for one or more names to be updated by one or more identities.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce If the dynamic update request message is signed (that is, it includes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeither a TSIG or SIG(0) record), the identity of the signer can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe determined.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Rules are specified in the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceoption, and are only meaningful for master zones. When the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis present, it is a configuration error for the <B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>allow-update</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceto be present. The <B
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>update-policy</B
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> statement only
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexamines the signer of a message; the source address is not relevant.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This is how a rule definition looks:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="programlisting"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="command"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="optional"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="replaceable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Each rule grants or denies privileges. Once a message has
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesuccessfully matched a rule, the operation is immediately granted
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor denied and no further rules are examined. A rule is matched
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhen the signer matches the identity field, the name matches the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename field, and the type is specified in the type field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The identity field specifies a name or a wildcard name. The
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenametype field has 4 values: <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>subdomain</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>wildcard</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3529"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesame as the name in the name field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>subdomain</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is a subdomain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof the name in the name field (which includes the name itself).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>wildcard</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is a valid
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceexpansion of the wildcard name in the name field.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="varname"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Matches when the updated name is the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucesame as the message signer. The name field is ignored.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>If no types are specified, the rule matches all types except
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSIG, NS, SOA, and NXT. Types may be specified by name, including
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce"ANY" (ANY matches all types except NXT, which can never be updated).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect1"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3559"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3. Zone File</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="types_of_resource_records_and_when_to_use_them"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1. Types of Resource Records and When to Use Them</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This section, largely borrowed from RFC 1034, describes the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceconcept of a Resource Record (RR) and explains when each is used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSince the publication of RFC 1034, several new RRs have been identified
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand implemented in the DNS. These are also included.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3564"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1.1. Resource Records</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>A domain name identifies a node. Each node has a set of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resource information, which may be empty. The set of resource
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce information associated with a particular name is composed of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce separate RRs. The order of RRs in a set is not significant and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce need not be preserved by nameservers, resolvers, or other
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce parts of the DNS. However, sorting of multiple RRs is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce permitted for optimization purposes, for example, to specify
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that a particular nearby server be tried first. See <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#the_sortlist_statement"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.11</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch06.html#rrset_ordering"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section 6.2.14.12</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The components of a Resource Record are:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3570"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>owner name</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the domain name where the RR is found.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an encoded 16 bit value that specifies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe type of the resource in this resource record. Types refer to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceabstract resources.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the time to live of the RR. This field
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceis a 32 bit integer in units of seconds, and is primarily used by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceresolvers when they cache RRs. The TTL describes how long a RR can
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe cached before it should be discarded.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an encoded 16 bit value that identifies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea protocol family or instance of a protocol.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the type and sometimes class-dependent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata that describes the resource.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following are <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> of valid RRs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce(some of these listed, although not obsolete, are experimental (x)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor historical (h) and no longer in general use):</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3602"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a host address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>an IPv6 address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Obsolete format of IPv6 address</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) location of AFS database servers.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceExperimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies the canonical name of an alias.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>for delegation of reverse addresses.
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonReplaces the domain name specified with another name to be looked
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceup. Described in RFC 2672.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies the CPU and OS used by a host.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) representation of ISDN addresses.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceExperimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>stores a public key associated with a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) for storing GPS info. See RFC 1876.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceExperimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies a mail exchange for the domain.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce See RFC 974 for details.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the authoritative nameserver for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>used in DNSSEC to securely indicate that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRRs with an owner name in a certain name interval do not exist in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea zone and indicate what RR types are present for an existing name.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceSee RFC 2535 for details.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a pointer to another part of the domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename space.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) information on persons responsible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the domain. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) route-through binding for hosts that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedo not have their own direct wide area network addresses. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>("signature") contains data authenticated
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein the secure DNS. See RFC 2535 for details.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>identifies the start of a zone of authority.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>information about well known network
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceservices (replaces WKS).</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(h) information about which well known
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenetwork services, such as SMTP, that a domain supports. Historical,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucereplaced by newer RR SRV.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>(x) representation of X.25 network addresses. Experimental.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The following <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> of resource records
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare currently valid in the DNS:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3714"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>the Internet system.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For information about other,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceolder classes of RRs, see <A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceHREF="Bv9ARM.ch09.html#classes_of_resource_records"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Section A.2.1</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce> is the type-dependent or class-dependent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata that describes the resource:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3730"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>for the IN class, a 32 bit IP address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>maps a domain name to an IPv6 address,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewith a provision for indirection for leading "prefix" bits.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>a domain name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas GustafssonVALIGN="MIDDLE"
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson>provides alternate naming to an entire
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafssonsubtree of the domain name space, rather than to a single node.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson It causes some suffix of a queried name to be substituted with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea name from the DNAME record's RDATA.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a 16 bit preference value (lower is better)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefollowed by a host name willing to act as a mail exchange for the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceowner domain.</P
aeb8fffc841865c3336383eadfd9987332a03286Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a fully qualified domain name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>a fully qualified domain name.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>several fields.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The owner name is often implicit, rather than forming an integral
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepart of the RR. For example, many nameservers internally form tree
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceor hash structures for the name space, and chain RRs off nodes.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The remaining RR parts are the fixed header (type, class, TTL)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhich is consistent for all RRs, and a variable part (RDATA) that
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefits the needs of the resource being described.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The meaning of the TTL field is a time limit on how long an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRR can be kept in a cache. This limit does not apply to authoritative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedata in zones; it is also timed out, but by the refreshing policies
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucefor the zone. The TTL is assigned by the administrator for the
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonzone where the data originates. While short TTLs can be used to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceminimize caching, and a zero TTL prohibits caching, the realities
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof Internet performance suggest that these times should be on the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceorder of days for the typical host. If a change can be anticipated,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe TTL can be reduced prior to the change to minimize inconsistency
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceduring the change, and then increased back to its former value following
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe change.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The data in the RDATA section of RRs is carried as a combination
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceof binary strings and domain names. The domain names are frequently
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceused as "pointers" to other data in the DNS.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.1.2. Textual expression of RRs</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>RRs are represented in binary form in the packets of the DNS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceprotocol, and are usually represented in highly encoded form when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucestored in a nameserver or resolver. In the examples provided in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRFC 1034, a style similar to that used in master files was employed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucein order to show the contents of RRs. In this format, most RRs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare shown on a single line, although continuation lines are possible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceusing parentheses.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The start of the line gives the owner of the RR. If a line
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebegins with a blank, then the owner is assumed to be the same as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethat of the previous RR. Blank lines are often included for readability.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Following the owner, we list the TTL, type, and class of the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceRR. Class and type use the mnemonics defined above, and TTL is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean integer before the type field. In order to avoid ambiguity in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceparsing, type and class mnemonics are disjoint, TTLs are integers,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand the type mnemonic is always last. The IN class and TTL values
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceare often omitted from examples in the interests of clarity.</P
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson>The resource data or RDATA section of the RR are given using
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafssonknowledge of the typical representation for the data.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example, we might show the RRs carried in a message as:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3785"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>128.9.0.32</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.2.0.27</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>128.9.0.33</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>The MX RRs have an RDATA section which consists of a 16 bit
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucenumber followed by a domain name. The address RRs use a standard
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceIP address format to contain a 32 bit internet address.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This example shows six RRs, with two RRs at each of three
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucedomain names.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Similarly we might see:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3851"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="CALSTABLE"
3287b57976fa270224c18aa21445d24bb7fa760fAndreas GustafssonVALIGN="MIDDLE"
3287b57976fa270224c18aa21445d24bb7fa760fAndreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
3287b57976fa270224c18aa21445d24bb7fa760fAndreas GustafssonCLASS="literal"
3287b57976fa270224c18aa21445d24bb7fa760fAndreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.44</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>This example shows two addresses for <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceeach of a different class.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3879"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>6.3.2. Discussion of MX Records</A
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>As described above, domain servers store information as a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceseries of resource records, each of which contains a particular
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepiece of information about a given domain name (which is usually,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebut not always, a host). The simplest way to think of a RR is as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucea typed pair of datum, a domain name matched with relevant data,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceand stored with some additional type information to help systems determine
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucewhen the RR is relevant.</P
da4cfd494c1f8d612c7e1d5407567686b326e511Andreas Gustafsson>MX records are used to control delivery of email. The data
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucespecified in the record is a priority and a domain name. The priority
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucecontrols the order in which email delivery is attempted, with the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucelowest number first. If two priorities are the same, a server is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucechosen randomly. If no servers at a given priority are responding,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe mail transport agent will fall back to the next largest priority.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LucePriority numbers do not have any absolute meaning — they are relevant
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceonly respective to other MX records for that domain name. The domain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucename given is the machine to which the mail will be delivered. It <I
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="emphasis"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucean associated A record — CNAME is not sufficient.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For a given domain, if there is both a CNAME record and an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceMX record, the MX record is in error, and will be ignored. Instead,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucethe mail will be delivered to the server specified in the MX record
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucepointed to by the CNAME.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="informaltable"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceNAME="AEN3885"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCELLPADDING="3"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas GustafssonCLASS="CALSTABLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="literal"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="literal"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="literal"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonVALIGN="MIDDLE"
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas GustafssonCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.1</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>10.0.0.2</TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceVALIGN="MIDDLE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>For example:</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce>Mail delivery will be attempted to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luceany order), and if neither of those succeed, delivery to <TT
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="literal"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Lucebe attempted.</P
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric LuceCLASS="sect2"
and PTR records. Entries in the in-addr.arpa domain are made in
in-addr.arpa name of
3.2.1.10.in-addr.arpa. This name should have a PTR resource record
>$ORIGIN example.com.
sub /24 reverse delegations described in RFC 2317: Classless IN-ADDR.ARPA
>$ORIGIN 0.0.192.IN-ADDR.ARPA.
HREF="Bv9ARM.ch05.html"
HREF="Bv9ARM.html"
HREF="Bv9ARM.ch07.html"